The discussion of artificial intelligence often begins with what a model knows and how it learned it. As AI agents gain access to tools, websites, and external systems, another question becomes increasingly important. How can organizations explain and control what those systems do with personal information? On October 8, 2026, the UK Information Commissioner’s Office…
Artificial intelligence can recommend medical treatments, operate vehicles, evaluate applicants, generate professional work, and make decisions that affect everyday life. When one of those systems causes harm, however, the technology cannot compensate an injured person, explain its reasoning in court, or assume legal responsibility. Someone must still answer for what happened. The difficult question is…
The European Union’s General Data Protection Regulation did more than establish privacy rules within Europe. It influenced how organizations handled personal information around the world. For many multinational companies, applying a broadly consistent privacy framework across their operations was more practical than maintaining entirely different systems for different jurisdictions. This international influence became known as…
Artificial intelligence is often discussed as a challenge for lawmakers and government regulators. Yet insurance may be creating another form of oversight outside the traditional regulatory system. A recent RAND report, The Insurability of Artificial Intelligence, examines how insurers are responding to risks created by the expanding use of AI. These risks include misinformation, privacy…
The NIST AI Risk Management Framework is a voluntary framework, released January 26, 2023, for managing risks that AI poses to individuals, organizations, and society. Its goal is to make AI systems more trustworthy across design, development, use, and evaluation. The document, AI RMF 1.0 (NIST AI 100-1), runs 48 pages. How the framework is…
AI governance is increasingly becoming evidence work. As lawmakers and regulators develop audit requirements, disclosure rules, and new theories of accountability, organizations must be prepared to demonstrate what they knew, what they tested, what they approved, and what they changed. An artificial intelligence policy may establish expectations, but inventories, risk assessments, testing records, change logs,…