California’s new AI audit laws do not require every organization using AI to obtain an independent audit. They do, however, establish a more formal accountability framework for the auditors that assess AI systems for compliance with state law. Signed on September 9, 2026, SB 813 requires California to develop standards for designating independent verification organizations … Continued
OpenAI’s Astra for Law offers privacy and legal leaders a useful preview of specialized AI in high-stakes work. The central lesson is not simply that a legal model can find better sources. It is that stronger AI performance must be paired with controlled data access, verifiable authority, defined human review, and a record of how … Continued
For years, privacy, security, and compliance teams could usually recognize an “incident” by looking for familiar signals: a data breach, a ransomware attack, an unauthorized disclosure, or another event that triggered an established response process. AI is changing that operating assumption. As organizations embed AI into more business processes, incidents are no longer limited to … Continued
Compliance decisions are rarely one-size-fits-all. A cybersecurity incident, privacy event, AI-related issue, vendor event, or enterprise risk scenario may require fast action, but the right outcome depends on the organization’s own policies, thresholds, obligations, and decision criteria. That is where custom compliance workflows matter. RadarFirst custom compliance workflows help organizations translate internal policies, assessment criteria, … Continued
NVIDIA CEO Jensen Huang recently pointed to cybersecurity as one of AI’s next major use cases, reflecting a broader reality: as AI becomes more powerful, organizations will need better ways to manage the risks it creates. But AI risk is not a reason to stop moving. It is a reason to build stronger operational readiness. … Continued
When a privacy incident is reported, teams often need to make an immediate judgment with incomplete information: which incident should we look at first? The full investigation may not be complete. The formal risk assessment may not have begun. Important facts may still be unknown. But the team still needs to decide where to focus … Continued
Organizations are moving quickly to adopt AI, but investment in AI does not automatically create readiness for AI-related incidents. As enterprises build AI applications, deploy copilots, integrate third-party models, and experiment with more autonomous systems, many are also building AI governance programs to determine which systems can be used, how they should be governed, and … Continued
Policy exceptions are part of running a modern organization. A business unit may need temporary approval to use a nonstandard process. A vendor may not meet a required control. A team may need more time to remediate an issue. In each case, the organization needs a way to review the request, document the decision, and … Continued
OpenAI’s Epic EHR integration may help healthcare teams access patient context faster. It also makes disciplined data governance, HIPAA controls, and defensible incident response more important before organizations scale AI-enabled workflows. OpenAI’s new Epic EHR integration gives healthcare organizations a faster way to bring authorized patient context into ChatGPT for Healthcare. Clinicians may be able … Continued
Vendor incidents can move quickly from a third-party notification to a cross-functional response. A service provider may report a security event. A business partner may disclose data exposure. A vendor may miss a contractual deadline, cause operational disruption, or trigger privacy, legal, security, or compliance reviews. The challenge is not only identifying what happened. The … Continued
