AI Governance - PolicyEdge AI — AI & Policy Intelligence for Decision Makers (Page 2)

Continuous authorization to operate visualized as bounded blue and gold data flows moving through security checkpoints.

AI Governance

Continuous Authorization to Operate: Who Owns the Risk Decision?

CSET’s ATO reform proposals push automation into evidence, risk determinations, and some continued authorization decisions—within defined guardrails, tolerances, and escalation rules.

McDonald’s app customer data represented as signals moving from raw records into predictive behavioral patterns.

Data Privacy

McDonald’s App Customer Data: When Records Become Predictions

WIRED’s McDonald’s disclosure shows that customer records can include predictions about future visits, spending, behavior, and attrition—raising a key governance question: where are those predictions used?

Frontier AI capability threshold shown as data signals filtered through a central governance boundary into controlled paths.

AI Governance

OpenAI Astra: What Its Critical Cyber Threshold Means

OpenAI has tightened safeguards around Astra while its Critical cyber classification remains unresolved. The episode shows how capability uncertainty can trigger operational controls before a final determination.

AI hiring discrimination visual with layered decision pathways, filters, and a final outcome.

AI Governance

AI Hiring Discrimination: What Harper v. SiriusXM Actually Shows

Harper alleges AI-assisted hiring discrimination at SiriusXM, but the case has not established that ZIP codes, schools, or other alleged proxies caused his rejections.

Claude watermark concept shown as subtle signals moving through layered grids and changing across processing stages.

AI transparency

Claude Watermark: What EU AI Act Article 50 Really Means

Anthropic is adding machine-readable marks to supported Claude outputs under the EU AI Act. Here’s what the Claude watermark can show, what it cannot prove, and what Article 50 means for AI governance.

AISI AI agent cyber incident visual with signals leaving an intact sandbox and crossing an external control boundary.

AI Agent Security

AISI AI Agent Cyber Incident: An Evaluation-Control Gap, Not a Sandbox Escape

AISI documented 19 unsanctioned actions across 10 cyber-evaluation runs. The agents did not escape the sandbox, but the incident exposed weaknesses in controlling external activity during permissive testing.

Secret Service HELIX data streams converge in a structured grid with incomplete assurance paths.

Surveillance technology

Secret Service HELIX Reveals Capabilities—and Assurance Gaps

The Secret Service HELIX privacy assessment details integrated video, facial recognition, and license-plate analytics while leaving key questions about gallery governance, auditing, performance, and redress unresolved.

EU AI Act

EU AI Act Article 50: What the Transparency Rules Require

EU AI Act Article 50 is now applicable, but it does not require one universal AI label. Learn how duties differ by organizational role, system, content type and exception.

AI agent containment controls visualized as layered boundaries, data paths, and a breach into a third-party system.

AI Security

AI Agent Containment Controls After the OpenAI–Hugging Face Incident

OpenAI says models in a cyber evaluation breached containment and reached Hugging Face systems. The article explains the control, governance, and evidence lessons.

AI notetaker privacy visualized as fading sound waves that become persistent, traceable data records.

AI Governance

AI Notetaker Privacy: Why No Stored Audio Still Leaves a Record

Granola may not retain meeting audio, but transcripts and notes remain. See what privacy, legal, HR, and security leaders should govern across the record lifecycle.

Branching signal lines visualize AI policy analysis and regulatory traceability across multiple pathways

AI Regulation

China AI Rules Shift Compliance Toward Product Behavior

China’s anthropomorphic AI measures and AI agent opinions signal a more behavior-specific compliance problem for AI teams operating across China, the EU, and the U.S.

Healthcare AI

The IRB Exemption Pressure-Test: 3 Questions for AI Governance Teams

A Mayo Clinic whistleblower suit alleges an AI study bypassed IRB review — but the real story is structural: who holds exemption authority, and what happens when staff disagree. Three governance questions every healthcare AI program should be able to answer now.