AI Counsel Blog Posts
What Should be in Your AI Use Policy?
by John Jenkins
April 9, 2025
AI use policies are becoming increasingly common, but what should be in those policies? A recent CSOonline article has some thoughts on that topic. This excerpt discusses the need for the policy to include clear responsible use guidelines: Can employees use public AI chatbots or only secure, company-approved tools? Can business units create and deploy […]
Beyond Basic: Understanding ISO/IEC 42001’s Definition of “Risk”
by John Jenkins
April 8, 2025
ISO introduced its AI management system standard, ISO/IEC 42001, in December 2023. It is the first such standard and, according to ISO’s website, “ISO/IEC 42001 is an international standard that specifies requirements for establishing, implementing, maintaining, and continually improving an Artificial Intelligence Management System (AIMS) within organizations.” A recent LinkedIn post by Dentons’ Dalton Cline […]
Risk Management: The Human Manipulation Problem
by John Jenkins
April 7, 2025
A few weeks ago, I had a little fun blogging about the risks associated with what I referred to as AI’s “HAL 9000 problem.” But it turns out that, at least in the short term, a greater risk than an AI tool becoming sentient and going rogue may be the ability of human beings to […]
Best Practices for AI Governance
by Zachary Barlow
April 2, 2025
Companies use AI to ramp up efficiency and find new value throughout their operations. However, AI can be unruly, and often times AI implemented with the best intentions can have unintended consequences. Additionally, different departments across the same company may use AI differently. This makes it difficult to manage all the ways AI is deployed […]
CPPA Votes to Advance Data Broker Regulations
by Zachary Barlow
April 1, 2025
The California Privacy Protection Agency (CPPA) voted to advance proposed regulations under California’s new Delete Request and Opt-Out Platform (DROP). DROP is expected to upend the data broker industry in California and provide consumers with more control over their data. Wilson Sonsini writes about the DROP regulations: “The DROP will allow California residents to submit a […]
Can AI Revolutionize Workplace Safety?
by Zachary Barlow
March 31, 2025
AI and autonomous technologies are increasingly charged with important tasks carrying real-world consequences. AI systems can make us safer and more efficient, but they present serious issues concerning accountability when things go wrong. In a recent memo Fisher Phillips lists possible benefits of utilizing machine learning to assist in workplace safety including: Real-Time hazard detection […]
Data Centers: Managing Operational Risks
by John Jenkins
March 27, 2025
The boom in AI is being powered by unparalleled growth in data centers, and it’s essential that those facilities remain online and fully functional. Unfortunately, data centers face a lot of operational risks, including sudden power loss resulting in data corruption, damage to circuits and components and other hardware failures or malfunctions, cooling system interruptions, […]
Cybersecurity: Using AI for Consequence-Based Cyber Risk Management
by John Jenkins
March 26, 2025
A recent Industrial Cyber article recommends that industrial companies take a consequence-based approach to cyber risk management. This model seeks to prioritize potential threats by focusing not on their probability, but on their possible consequences to industrial control systems (ICS) and operational technology (OT) environments. However, companies often struggle to assess the probable damage of […]
Data Privacy: California AG Announces CCPA Sweep of Location Data Industry
by John Jenkins
March 25, 2025
Earlier this month, California Attorney General Rob Bonta announced an enforcement sweep targeting violations of California’s Consumer Privacy Act by the location data industry. This excerpt from the AG’s announcement summarizes what he’s hunting for – and why: California Attorney General Rob Bonta today announced an ongoing investigative sweep into the location data industry, sending […]
FraudGPT: AI for the Bad Guys
by John Jenkins
March 24, 2025
A recent PYMNTS.com article on how AI is reshaping risk assessment provides a reminder that the bad guys have Gen AI tools of their own, and that makes the challenges associated with protecting against fraudsters even more daunting: “Trust is the very foundation of commerce,” said Rajat Taneja, president of technology at Visa. “When two unknown […]