Connecticut Health Insurance AI Rules: What Changed for State Plans
Connecticut’s health-plan AI policy limits sole AI decisions, restricts member-data use for other AI models, and adds disclosure, validation, and governance requirements.
Latest
CSBS AI Supervisory Framework: What State Examiners May Ask
The CSBS AI Supervisory Framework gives state examiners a clearer approach to AI oversight. See what it covers, how it differs from federal model-risk guidance, and what financial institutions should review.
DOJ AI Regulation by Prosecution: What Blanche’s Line Means
Attorney General Todd Blanche says DOJ will not pursue “regulation by prosecution” against AI companies absent a statutory violation. Existing employment and consumer-protection laws can still apply when AI is involved.
ChatGPT Health and HIPAA: What Changes When Health Data Moves to Consumer AI
ChatGPT Health can receive patient-directed health data outside HIPAA’s framework. Here’s what HHS, FTC rules, and state privacy laws mean for governance teams.
AI Securities Litigation: What H1 2026 Data Actually Shows
AI-related cases were a minority of H1 2026 securities filings but accounted for 73% of two major market-loss measures. Here’s what the numbers mean for boards, GCs, disclosure teams, IR, and AI leaders.
State AI Companion Bot Laws: What 12 States Require in 2026
Twelve states regulate companion bots through differing disclosure, minor-safety, crisis-response, and other requirements. This analysis separates recurring governance patterns from state-specific rules in California, Colorado, and beyond.
Frontier AI Safety Assurance: What Enterprises Should Demand From AI Vendors
Anthropic and OpenAI disclosed separate AI safety incidents during cyber evaluations. For enterprise leaders, the question is shifting from safety promises to evidence that controls, monitoring, and containment work under stress.
AI Cybersecurity Basics: What AI Changes and What Still Matters
Recent 2026 breach data shows AI spreading across attack techniques while familiar vulnerabilities remain major entry points. Here’s what security leaders should treat as foundational now.
AI Scribes Malpractice Risk: The Verification Gap Health Systems Need to Measure
AI scribes offer documentation benefits, but research also finds omissions, hallucinations, and other note errors. The key governance question is what clinically consequential defects remain after clinician review.
Florida PBM Lawsuit: The Missing Audit Trail Behind Drug-Benefit Savings
Florida’s PBM lawsuit against Prime Therapeutics and Express Scripts raises a larger oversight question: who controls pharmacy reimbursement, and can plan sponsors trace reported savings to net plan economics?
Trump MFN Drug Pricing Deals Enter the Implementation Test
Nine more drugmakers have joined Trump’s MFN pricing push. Here’s how Medicaid participation, rebates, tariffs, and onshoring conditions shape the implementation test.
Treasury Buyers’ Strike? What High Sovereign Yields Actually Show
High sovereign yields do not automatically signal a buyers’ strike. See what SF Fed term-premium data, Treasury financing plans, and Japan’s latest 10-year auction actually show.
AI Regulation
California AI Bills: What Compliance Teams Need to Map
Three California AI bills focus on companion chatbot safety, youth-facing engagement features, and workplace surveillance. See what compliance teams should map before the measures become law.
AI Governance
AI Human Oversight Controls: What Proves They Actually Work?
A coding-agent experiment raises a governance question: if human approval is an AI control, what evidence shows the control actually works?
AI Governance
AI Chatbot Child Safety Regulation: What Proves Safeguards Work?
Meta’s settlement, Colorado’s Chatbot Safety Act, and the FTC’s AI companion study show youth-safety governance moving toward product controls, testing, monitoring, and evidence of performance—without creating one national safety standard.
Regulatory Compliance
FTC Personalized Pricing: Can You Explain Why a Price Changed?
The FTC’s proposed enforcement statement explains how Section 5 may apply when personal data shapes consumer prices—and why disclosure alone may not resolve every concern.
AI Governance
FDA AI Medical Devices: What Authorization Actually Proves
A PLOS review found only 3 of 1,357 FDA-authorized AI medical devices had patient-centered outcome evaluations. Here’s what FDA status proves—and what evidence still needs separate review.
AI Governance
Continuous Authorization to Operate: Who Owns the Risk Decision?
CSET’s ATO reform proposals push automation into evidence, risk determinations, and some continued authorization decisions—within defined guardrails, tolerances, and escalation rules.
Cybersecurity Risk
Water Utility OT Cybersecurity: Who Owns the Control Path?
FBI findings on attacks against internet-exposed water-sector PLCs raise a broader governance issue: utilities need to verify external OT access, current configurations, manual fallback, and third-party-provided network paths.
Data Privacy
McDonald’s App Customer Data: When Records Become Predictions
WIRED’s McDonald’s disclosure shows that customer records can include predictions about future visits, spending, behavior, and attrition—raising a key governance question: where are those predictions used?
Consumer Finance
Walmart Sales Slowdown: What It Really Says About Consumers
Walmart’s sales slowdown is not a clean measure of consumer demand. Fed reports show trade-down behavior and discretionary pullbacks even as the Beige Book said consumer spending edged up.
AI Governance
OpenAI Astra: What Its Critical Cyber Threshold Means
OpenAI has tightened safeguards around Astra while its Critical cyber classification remains unresolved. The episode shows how capability uncertainty can trigger operational controls before a final determination.
AI Governance
AI Hiring Discrimination: What Harper v. SiriusXM Actually Shows
Harper alleges AI-assisted hiring discrimination at SiriusXM, but the case has not established that ZIP codes, schools, or other alleged proxies caused his rejections.
Employer Health Benefits
ICHRA Adoption 2026: Growth Without a Group Plan Exodus
ICHRA adoption is growing amid rising employer health costs, but group insurance still dominates. Here’s what the 2026 data show—and what employers should evaluate before treating ICHRA as a group-plan alternative.