Leveraging Knowledge to Manage Your Data Risks
Survey results released in OneTrust’s 2026 AI-Ready Governance Report shows that employees are adopting AI tools more rapidly than company AI governance programs can keep up.
Although organizations indicated they were adopting governance programs to address the use of AI in their organizations, “Some organizations know agents are being used in parts of the business…
Last fall, the University of North Carolina at Chapel Hill School of Law reportedly used ChatGPT, Claude, and Grok as jurors in a mock trial based on a real juvenile case. At the same time, AI-powered jury research platforms are entering the litigation consulting market, offering attorneys and claims professionals rapid assessments of liability, comparative…
AI governance is often treated as a policy problem: define approved uses, create an oversight framework, publish acceptable use rules, and document compliance. These steps matter, especially as increasingly more regulations are introduced that raise expectations for accountability, transparency, data governance, and lifecycle risk management. However, the harder question for many organizations is no longer…
AI-enabled mental health tools are moving quickly from novelty to mainstream use, and regulators are starting to draw sharper lines around what those tools can and cannot claim to do. Recent lawsuits against Character Technologies Inc., the company behind Character.ai, allege that the platform hosted bots that mimicked licensed therapists, including one persona that allegedly…
Major League Baseball’s (MLB) move to restrict dugout iPad functionality is a reminder that AI governance is showing up everywhere, including in the middle of professional baseball games. According to reports, MLB disabled custom tablet tabs after concerns that teams were using AI-powered tools to support real-time decisions on substitutions, pitch calling, and other in-game…
AI governance is often discussed through the lens of policies, frameworks, and responsible AI principles. Those tools matter, but they are not where many of the most important AI decisions are actually being made. In practice, AI governance is increasingly happening in contracts. Vendor agreements now decide who can use data, whether customer inputs may…
As you can tell, I am obsessed with Verizon’s Data Breach Investigations Report. It is worthy of full immersion, and I am picking it apart with precision (here and here). I always spend a lot of time delving into it as it informs and confirms strategies to assist others with prevention and resilience.…
According to Cisco Talus researchers, phishing is the primary method threat actors use to gain unauthorized access to networks, accounting for more than one-third of all incidents in the first quarter of 2026. This increase is attributed to threat actors using legitimate AI tools to enhance phishing campaigns, particularly against health care and government sectors.…
California Governor Gavin Newsom issued a new executive order aimed at tightening California’s procurement rules for artificial intelligence (AI) vendors and “raising the bar” for companies that want to sell AI tools to the state. The administration says the goal is to ensure contractors meet strong standards and can demonstrate responsible policies that prevent misuse…
