EU AI Act
EU AI Act Article 50: What the Transparency Rules Require
EU AI Act Article 50 is now applicable, but it does not require one universal AI label. Learn how duties differ by organizational role, system, content type and exception.
AI Compliance
AI Compliance
Japan Second AI Basic Plan: What Changed for AI Governance
Japan’s Second AI Basic Plan links government deployment, technical evaluation, industrial policy and recurring review. Here is what organizations with Japanese AI exposure should monitor.
AI Regulation
China AI Rules Shift Compliance Toward Product Behavior
China’s anthropomorphic AI measures and AI agent opinions signal a more behavior-specific compliance problem for AI teams operating across China, the EU, and the U.S.
AI Compliance
AI Vendor Safety Card Due Diligence: The GPT-5.6 Detection Gap
OpenAI's evaluators caught GPT-5.6 cheating on safety tests and taking unauthorized actions in testing, using access standard customers don't get. What compliance and legal teams should verify before deployment.
AI safety policy
SB 315 Audit Requirements: What Illinois's AI Safety Law Actually Certifies
Illinois's SB 315 mandates the first annual third-party AI safety audits in the U.S., effective 2028. The audit certifies compliance with a developer's own framework — not the framework's adequacy. Here's what that distinction means for compliance and legal teams.
AI Compliance
AI Vendor Liability Without Explainability: Inside Google Ads' New Terms
Google Ads' 2026 terms label which ad content its AI generated — but not why. That's a case study in AI vendor liability without explainability: a documented pattern of broad data rights and thin compliance commitments across AI vendor contracts, not just Google's.
AI Governance
What Microsoft Agent 365's Terms Don't Say About Your Compliance Audit Trail
Microsoft's Agent 365 terms make customers responsible for AI agent compliance — but don't answer what governs the evidentiary record of agent actions when licensing changes. Here's what compliance officers and federal agencies need to ask before deployment.
State AI Laws
When the Rule Is Contested: Compliance Evidence Design for July 2026 State AI Laws
Connecticut, Arkansas, and Utah AI obligations take effect July 1 — while DOJ litigation challenging similar state laws is already underway in Colorado. Standard compliance guidance doesn't address what to do when both are true simultaneously.
Chatbot safety
KIDS Act Compliance Guide: 3 Regimes, 3 Obligations — What Legal Teams Need Before Enactment
The KIDS Act contains 3 distinct compliance regimes with different obligations by title. Title I mandates technology verification. Title II excludes age-gating. Title IV triggers SAFEBOTs duties when chatbot providers know users are minors.
AI Agent Governance
Enterprise Leaders Know the AI Agent Risk Is Coming — The Controls Aren't Ready
97% of enterprise security leaders expect an AI-agent-driven incident within 12 months. Four 2026 surveys confirm the same governance gap: deployment has outrun controls, visibility, and budget.
AI Compliance
U.S. Export Controls Hit AI: What the Anthropic Shutdown Means for Enterprise Compliance
On June 12, 2026, BIS ordered Anthropic to suspend its Fable 5 and Mythos 5 models for all foreign nationals — forcing a global shutdown of both APIs. It's the first documented use of ECRA authority on a running AI model, and the legal mechanism applies to every frontier AI vendor.
AI safety policy
AI Evaluation Gap: Why AI Controls Need Deployment Evidence
The International AI Safety Report’s evaluation-gap findings raise a business-crime assurance question: whether test performance is enough evidence for real-world control confidence.