DataGrail转发了
10 AI law requirements are already being enforced across the U.S. The surprising part is the unreported enforcement actions in 2024 in TX, CA and CO: At the California Lawyers Association Annual Privacy Summit, regulators shared the top AI compliance themes they’re enforcing. ??/ ???? ?????????????????? Companies must document all AI products and features, including inputs, outputs, and third-party data sources. ??/ ???????????? Pre-use and training data notices are required before deploying AI models. ??/ ?????????? ???????????????????????? AI systems must undergo bias audits, with some requiring third-party validation. ??/ ?????????????? Affirmative consent is required for sensitive data processing, including parental consent for minors. ??/ ??????-?????? ???????????? Users must have the ability to opt out of AI-based profiling and automated employment decisions. ??/ ???????????????????? ???????? Restrictions on data retention, purpose limitation, and duty of care to prevent misuse. ??/ ???????? ?????????????????????? Companies must assess potential harm, differentiating between "significant" and "consequential" AI decisions. ??/ ???? ???????? ???????????? A mechanism to shut down AI in cases of catastrophic harm is becoming a requirement. ??/ ???????????????????? ?????????????????? AI governance reports must be submitted to regulators or made public on company websites. ????/ ?????????????????? & ???????????????????????????? Clear AI governance responsibilities across developers, deployers, and service providers. Regulators in California, Colorado, and Texas all reported 50+ enforcement actions in 2024—many weren’t publicly disclosed. AI governance is no longer optional. Who’s responsible in your org—Legal, Privacy, or Security? #AIGovernance #Privacy #DataGovernance
This is a great roundup Daniel Barber ??
VP Employee Benefits @ USI Insurance | Driving Employee Well-being
5 天前Daniel Barber Thank you for sharing. One thing not codified but, IMO, REQUIRED is an AI Policy in your Employee Handbook. I just attended a Cybersecurity summit and several companies didn't have this in their 2025 Handbook.