Featured Resource
What the latest privacy incident data reveals about volume, risk, speed, third parties, and AI. Privacy teams are moving faster than they were just a few years ago. But the job isn’t necessarily getting easier. Incident volume is rising. Malicious activity is growing. Third-party incidents are more likely to become notifiable breaches. And even as … Continued
Join us next Thursday, July 14 at 10 a.m. PT / 1 p.m. ET for a live Q&A with Judy Titera, Chief Privacy Officer at USAA and Shari Kenney, Strategic Account Manager at RadarFirst. We’ll take a deep dive into the topic of privacy reporting and how privacy pros can successfully communicate critical data to internal stakeholders and board members.
A structured intake begins by identifying the AI system and the organization’s relationship to it. The first report rarely contains enough information to explain what happened. It may mention an inaccurate chatbot response, an unexpected automated decision, exposed information, or unanticipated behavior. But it may not identify the system configuration, business process, owner, or third … Continued
AI agents can do more than generate content. With access to data, applications, code, infrastructure, and external communications, they can take actions that create security, privacy, safety, legal, and operational risks. That changes the incident response question. Organizations must be prepared not only for attacks that use AI, but also for events in which an … Continued
AI adoption is accelerating across the enterprise, but many organizations still lack a reliable way to see, assess, and govern how AI is being used. New tools, embedded AI features, and employee-led use cases can create business value, but they can also introduce privacy, security, compliance, and operational risks if not properly documented or reviewed. … Continued
A practical guide to privacy incidents, data breaches, and notification thresholds A privacy violation occurs when personal information is collected, used, accessed, disclosed, retained, altered, or destroyed in a way that conflicts with an applicable law, regulation, contract, or privacy commitment. A privacy violation can involve a security incident, but it can also result from … Continued
California is accelerating a move from AI safety claims to independently verified evidence. On September 18, 2026, Governor Gavin Newsom signed Executive Order N-9-26, directing state agencies to accelerate the development of California’s independent AI oversight framework and to evaluate potential additions to its AI safety laws. The proposals include onsite independent verification at large … Continued
California’s new AI audit laws do not require every organization using AI to obtain an independent audit. They do, however, establish a more formal accountability framework for the auditors that assess AI systems for compliance with state law. Signed on September 9, 2026, SB 813 requires California to develop standards for designating independent verification organizations … Continued
OpenAI’s Astra for Law offers privacy and legal leaders a useful preview of specialized AI in high-stakes work. The central lesson is not simply that a legal model can find better sources. It is that stronger AI performance must be paired with controlled data access, verifiable authority, defined human review, and a record of how … Continued
For years, privacy, security, and compliance teams could usually recognize an “incident” by looking for familiar signals: a data breach, a ransomware attack, an unauthorized disclosure, or another event that triggered an established response process. AI is changing that operating assumption. As organizations embed AI into more business processes, incidents are no longer limited to … Continued
