The Prado Law Firm blog

Practical guidance on debt collector harassment, robocalls, and your credit rights.

FDCPASeptember 17, 20262 min read

Being Contacted by Kriya Capital, LLC? Know Your Rights

Kriya Capital, LLC appears in federal consumer complaint data as one of the more heavily complained-about debt collectors in the country — yet, unusually for a company at that complaint volume, it keeps a very low public profile. Here’s what to know if you’ve been contacted in its name.

Read article

FDCPASeptember 9, 20263 min read

Being Contacted by I.C. System? Know Your Rights

I.C. System, Inc. is a large, Minnesota-based third-party debt collector that works primarily in healthcare and telecom collections — and one that has faced a federal class action over the clarity of its collection letters. Here’s what to know if it’s contacting you.

FDCPASeptember 8, 20263 min read

Being Contacted by Credit Collection Services (CCS)? Know Your Rights

If a call or letter references Credit Collection Services, CCS Financial Services, or simply “CCS Offices” on your caller ID, you’re dealing with one of the higher-volume third-party debt collectors tracked in federal complaint data. Here’s what to know.

FDCPASeptember 3, 20263 min read

Being Contacted by Portfolio Recovery Associates? Know Your Rights

Portfolio Recovery Associates, LLC (“PRA”) is one of the largest debt buyers in the country and a company the CFPB has publicly labeled a “repeat offender.” If PRA is calling or writing to you, here’s what you should know before you respond.

Data Privacy & Security ComplianceSeptember 2, 20268 min read

"Move Fast and Break Things" Does Not Work When the Thing You Break Is Patient Privacy

Typing a patient's record or a physician's prescribing data into a consumer AI tool is a disclosure to a third party, and usually a breach of confidentiality. HIPAA presumes a breach unless the vendor has signed a business associate agreement, and prescriber data is locked down by license terms and the AMA's opt-out program even though HIPAA does not cover it. Most healthcare workers are already using personal AI accounts at work.

FDCPASeptember 1, 20263 min read

Being Contacted by Jefferson Capital Systems (CL Holdings)? Know Your Rights

If you’ve received a call or letter from Jefferson Capital Systems, LLC, you’re not alone — it’s one of the most complained-about debt collectors in the country according to federal complaint data. Here’s who they are, how to confirm you’re really dealing with them, and what protections you have.

Data Privacy & Security ComplianceAugust 31, 20265 min read

California Changed the Rules on Protected Health Information. Here Is What It Means for You.

If your medical information was caught up in a data breach, California courts used to ask a question that was almost impossible to answer: can you prove a hacker actually looked at your records? For most people, the answer was no, and their cases were dismissed before they ever got started. In May 2026, the California Supreme Court threw that requirement out. The decision, J.M. v. Illuminate Education, Inc., is the most consequential ruling on protected health information (PHI) in years, and industries from hospitals to ed-tech companies are still adjusting to it.

FDCPAAugust 31, 20263 min read

Being Contacted by Midland Credit Management? Know Your Rights

Midland Credit Management, Inc. (“MCM”) is one of the largest and most complained-about debt collectors in the United States — and one with a documented history of federal enforcement action. If MCM or its affiliate Midland Funding, LLC is contacting you, here’s what to know.

Data Privacy & Security ComplianceAugust 28, 20268 min read

The $1.55M Mistake Healthcare Marketers Are Making Outside HIPAA

There is a category of company that has spent a decade believing it sits in a regulatory quiet zone. It handles health-adjacent data every day but is not a hospital, not a health plan, not a business associate. It runs HCP engagement programs, pharmaceutical brand media, condition-education publishing, patient-finder campaigns, and the advertising technology that measures all of it. Its privacy program, if it has one, was built around a single question: are we a HIPAA covered entity? The answer was no, and the analysis stopped.

FDCPAAugust 28, 20264 min read

Being Contacted by Resurgent Capital Services or LVNV Funding? Know Your Rights

Debt collection calls or letters referencing LVNV Funding, LLC or Resurgent Capital Services, L.P. are among the most common a consumer can receive — and among the most complained-about, according to federal data. If you’re hearing from either name, here’s what you need to know before you respond.

Data Privacy & Security ComplianceAugust 27, 20262 min read

Legal Theories Win Cases. Operations Win the Ones That Never Get Filed.

I spent four years as plaintiffs' counsel building TCPA, FCRA, and FDCPA cases. Today I sit on the other side twice over: as a General Counsel writing compliance playbooks, and as counsel to marketing companies reaching patients and healthcare providers through the very channels I used to build cases around.

TCPAJuly 30, 20261 min read

How Much Can You Recover for Illegal Robocalls and Spam Texts?

The TCPA sets statutory damages of $500 per illegal call or text — up to $1,500 each if the violation was willful. Here is how the law works.

FDCPAJuly 30, 20261 min read

What To Do When a Debt Collector Calls You at Work

Georgia consumers have the right to stop collection calls at work. Here is how the FDCPA protects you.

Stop the harassment. Find out where you stand.

A free, confidential case review is the fastest way to learn whether the law was broken.

Free Case Review