Topic
43 articles tagged Compliance. For the wider topic, see Privacy & Compliance.
A UK consultation open until 30 September 2026 treats email monitoring the same as algorithmic scheduling. What the proposed scope means for disclosing new tools.
Read article →Performance reviews, warnings, and terminations contain some of the most sensitive data you handle. What is safe to run through AI, and what must stay local.
Read article →Anthropic and Google now watermark AI text by default. What the watermark detects, and what research shows happens to it once you edit or rewrite.
Read article →SB 947 would bar California employers from firing workers on an algorithm's word alone. What it covers, what it does not, and the deadline that matters now.
Read article →California, New York, and the EU each added AI disclosure duties in 2026. Here is a three-question test to tell which ones actually apply to your work.
Read article →AI writing detectors are landing in workplaces, and they get things wrong. What a false positive means, why disclosure beats screening, and how to respond.
Read article →Newsom's September 18 executive order does not create a kill switch law. It orders a working group to recommend one. Here is the real scope.
Read article →California is building an AI auditor registry and the EU AI Act is now enforceable. Here is a practical checklist to get audit-ready without over-engineering.
Read article →The EU AI Office can now fine general-purpose AI providers. Whether a provider signed the Code of Practice is a due-diligence signal you can actually check.
Read article →Article 50 requires labeling AI-generated text in some cases, not all. Here is exactly which published text needs it, and which everyday drafting does not.
Read article →California just started regulating who is allowed to call themselves an AI auditor. Here is what SB 813 and AB 1405 actually change, and when.
Read article →Microsoft now lets IT block external meeting bots, and lawsuits and an ethics opinion have made recording bots a real risk. What to do for notes instead.
Read article →Researchers showed an AI browser agent hijacked by a poisoned calendar invite, with no click required. What that changes about handing work to an agent.
Read article →Agentic commerce lets an assistant place orders for you. When it buys the wrong thing or gets manipulated, who pays? What is settled and how to protect yourself.
Read article →The tools you already use are shipping agent features that act on your behalf. A short checklist to run before you turn one on, for yourself or a team.
Read article →The tools you already use keep enabling AI features you did not ask for, often on by default. What to check for your confidential work, and how to turn them off.
Read article →Chat histories can be treated like any other business record in litigation. What that means for what you paste into a prompt, in plain terms.
Read article →Acquisitions and shutdowns can rewrite the privacy terms you agreed to. What to check now, and why portable, local options age better.
Read article →When an AI agent acts on your behalf it reads context, browses, and sends data to services. What actually leaves your machine, and how to scope the access.
Read article →Accountability does not transfer to a tool when an agent acts on your behalf. How to frame ownership for teams, and why human review is an accountability control.
Read article →France's CNIL published an exploratory note on agentic AI and personal data in July 2026. What it flags, what it does not decide, and how to read it.
Read article →Vendor privacy pages are written to reassure. Five specific questions that produce answers you can act on, and what an evasive response tells you.
Read article →Detection scores are being used to make decisions about people. What the tools actually measure, why they misfire on specific groups, and how to respond to an accusation.
Read article →Private mode rarely means nothing is recorded. The six categories of data most AI tools keep regardless, and which ones actually matter for confidential work.
Read article →Not every AI-assisted sentence needs a footnote. Where disclosure is genuinely required, where it is courtesy, and how to say it without undermining the work.
Read article →Courts have largely accepted that training is transformative. The live question is now what the model produces and who is liable for it, which reaches ordinary users.
Read article →Providers began shipping enforcement points that inspect content before it reaches the model. Useful, and not the same thing as the text staying on your machine.
Read article →The C2PA standard now covers text, and Article 50 requires machine-readable marking of synthetic content. What that actually means for the email you just rewrote.
Read article →Data protection authorities and the AI Office now cover overlapping ground. What that means when you choose where your text gets processed.
Read article →From 2 August 2026 the Commission can investigate general-purpose AI providers, demand model access, and fine them. What that means for the companies you buy AI from.
Read article →Colorado delayed, California finalized, Illinois took effect. A patchwork of state AI employment rules is now the practical constraint for US employers.
Read article →Article 50 transparency rules took effect on 2 August 2026. What legally requires disclosure, what does not, and how to write a policy you can actually apply.
Read article →Transparency obligations, general-purpose AI enforcement, and the full penalty regime take effect. High-risk duties were deferred. What applies to an ordinary business using AI writing tools.
Read article →High-risk obligations moved to December 2027 and August 2028. Why the deferral happened, what it changes, and why treating it as breathing room is the wrong reading.
Read article →Nine questions that produce contractual answers instead of marketing copy, and what each answer tells you about your actual exposure.
Read article →A one-page record that answers the questions an auditor, client, or regulator actually asks. What to write down, and why doing it now costs an hour instead of a week.
Read article →Data residency, jurisdictional control, and operational access are three different things. What sovereignty claims mean, and the configuration that settles all three.
Read article →DeepSeek, Qwen, Kimi, GLM, MiniMax, and Hunyuan now define the open-weights frontier and undercut Western pricing dramatically. The capability story, and the procurement questions it raises.
Read article →Model cards and system cards are the closest thing to a datasheet AI has. What to look for, what the omissions tell you, and why this is becoming a compliance document.
Read article →For European organizations, where a model runs is a compliance question. How Mistral's open lineup fits, and why sovereignty is solved by architecture more often than by geography.
Read article →Apache 2.0, MIT, Llama community licenses, and research-only terms give you very different rights. A plain-English guide to what you can legally do with a downloaded model.
Read article →How attorneys and paralegals are navigating the ethical complexities of AI by adopting secure, local tools for document review and drafting.
Read article →A deep dive into the legal and ethical conflicts between standard Non-Disclosure Agreements and the use of public cloud AI services.
Read article →