Topic · Governance Risk And Compliance
Every dispatch tagged Governance Risk And Compliance.
AI Inside Greece’s AI Act Law 5321/2026: Regulators, Sandbox, Penalties and a Public-Sector AI Register
Greece now has its national rulebook for the EU AI Act.
Latest from the Privacy Desk
All dispatches →
AI New York’s New AI Safety Research Center: What Companies Building or Deploying AI Should Know
New York now has its own AI evaluation institute.
AI Paris Call for AI Safety and Security: What Frontier Model Commitments Mean for Enterprise AI Deployers
On November 9, 2026, French President Emmanuel Macron hosted a meeting on AI and security at the Élysée Palace, and the participants…
AI Schneier Says AIs Hacking on Their Own Are the Real Threat. Here’s How to Govern Agents Before They Find the Loopholes
Most AI security programs are built around two threats: attackers going after the model, and attackers using the model against everyone else.
DATA CISA’s Updated Incident Reporting Form Is a Cue to Build One Intake Record for Every Breach Notice
When a cyber incident hits, the same facts get typed into several forms by several people, often in different words.
AI NIST’s New Adversarial Machine Learning Draft Gives Privacy Teams a Ready-Made Threat List for AI Assessments
Privacy risk assessments for AI systems tend to stall on the same question: what could actually go wrong with the data once…
AI Operationalizing AI Governance: Approval Criteria, Risk Triggers and Vendor Checks That Keep Teams Moving
Most organizations now have an AI policy. Far fewer have a way to say yes to a new AI use quickly, consistently…
COMPLIANCE How Meta Pixel Demand Letters Use the FTC Act as a Crime-Tort Predicate
Section 5 of the Federal Trade Commission Act is one of the most important consumer-protection rules in American law.
THIRD PARTY RISK MANAGEMENT Black October: A Legal and Compliance Playbook for the Wave of AI-Driven Cyberattacks
Security teams have spent October 2026 patching around the clock, and people in the incident-response business have started calling it “Black October.”…
DATA Bill C-22’s Subscriber Information Order Could Reach Far Beyond Telecom. Here’s Why Canada’s Privacy Commissioner Wants It Narrowed
Canada’s lawful access bill gets debated as if it were mostly about encryption.
AI EU Commission’s 2027 Work Programme: Digital Package, Industrial AI, and the Fight Over Gold-Plating
On November 4, 2026, the European Commission published its 2027 work programme and, with it, a map of which digital and AI…
DATA A Former Police Chief’s Four Rules for Drones Read Like a Data Governance Plan
Police drones that launch the moment someone dials 911 are moving from pilot projects into ordinary city budgets, and the fight over…
GOVERNANCE RISK AND COMPLIANCE Britain Will Put Police Facial Recognition on a Statutory Footing. Here Is What the Home Office Actually Promised
The British government has decided that police facial recognition needs its own law.