Compliance Stuff

Our AI, Data, and Analytics thought leaders have pulled together their top predictions for the new year so that employers can get a running start to 2026. If you want more,  register for our FP Forecast 2026 Webinar here . Colorado and Virginia Will Take Different Regulatory Paths Colorado’s landmark AI law  will not take effect in 2026, as legislators, regulators, and stakeholders delay things to renegotiate. But Virginia will take another crack at AI lawmaking, this time aiming to  regulate healthcare  transparency and exposure. California’s ADMT Regulations Will Make AI Governance a National Standard Gearing up for  CPPA regulations to take effect in 2027 , businesses will need to grapple with risk assessments, cybersecurity audits, pre-use notices, opt-out rights, and annual cybersecurity audits in 2026. And most multistate businesses will choose to comply with this stringent standard by  adopting an AI governance program  as table stakes. Bias Aud...

What You Need To Know Effective November 5, 2025, a New York law requires companies that operate qualifying “AI companions” to implement specific transparency and user protection measures. The law covers AI systems that engage users in sustained, personalized conversations simulating a human relationship. AI providers must clearly disclose to users that they are interacting with AI and implement protocols to detect and respond to signs of suicidal ideation or self-harm , including referring users to appropriate crisis resources. Violations may trigger enforcement by the New York attorney general, with potential civil penalties of up to $15,000 per day. As digital companions become more sophisticated, New York is leading the charge in mandating safety, transparency, and accountability from AI providers. New York’s new  Artificial Intelligence Companion Models law  imposes specific notice obligations and safeguarding measures on providers of “AI companions” that engage users in...

Agentic AI is one of the buzziest concepts in business today. There's no mystery why—the promise of dramatic increases in efficiency, and ones that actually accelerate over time as the agents get better at their jobs, all for what is advertised as a fraction of the cost of the employees who currently do the job . Unfortunately, AI Agents carry a hidden risk that your business may not have accounted for. The Risk: Most Agentic AI was engineered to complete tasks reliably, rather than prioritizing the protection of specific types of data. The focus on completing operations first creates a bias within the system that establishes concrete pathways for confidential information, personal data, and intellectual property (IP) to leak from Agent to Agent, across memories, and through over-permitted integrations. In other words, putting any data that you entrust to the AI Agent at risk. HOW LEAKS ACTUALLY HAPPEN That sounds ominous, but also a bit "shrouded in mystery." The good ...