Compliance Stuff

New York has officially joined California at the forefront of US artificial intelligence regulation. Governor Kathy Hochul just signed a revised version of the Responsible AI Safety and Education Act (RAISE Act) into law on Friday, establishing strict safety obligations for developers of the most advanced AI systems. The final law is narrower and less punitive than the version passed in June, but still marks one of the most consequential state AI safety laws enacted to date . Here’s what businesses need to know about what actually became law – and some specific steps you can take in 2026 to prepare for the January 1, 2027 effective date. AI Regulation Focused on Catastrophic Risk: Who is Covered? Unlike most state AI laws and proposed laws that focus on bias, discrimination, or consumer deception, New York’s RAISE Act targets a very specific risk category: catastrophic harm caused by highly capable AI systems. The law applies to “frontier models,” the largest and most advanced AI sys...

  Following this year’s Texas legislative session, two bills are set to go into effect in Texas related to the use of nondisclosure and confidentiality agreements for claims of sexual assault and artificial intelligence (AI). Quick Hits Texas Senate Bill 835, effective September 1, 2025, voids any nondisclosure or confidentiality provisions in agreements that prohibit the disclosure of sexual abuse or assault, applying retroactively unless a court order permits nondisclosure. Texas House Bill 149, known as TRAIGA 2.0, effective January 1, 2026, establishes a regulatory framework for AI systems in Texas, including oversight mechanisms, ethical standards, and prohibitions against discriminatory AI practices by employers. Nondisclosure and Confidentiality Provisions for Sexual Assault Claims Senate Bill 835  renders void and unenforceable any nondisclosure or confidentiality provision in an agreement—including settlement agreements—to the extent the provision prohibits the disclo...

The Federal Bureau of Investigation (FBI) recently warned employers of increasing security risks from North Korean workers infiltrating U.S. companies by obtaining remote jobs to steal proprietary information and extort money to fund activities of the North Korean government. Companies that rely on remote hires face a tricky balancing act between rigorous job applicant vetting procedures and ensuring that new processes are compliant with state and federal laws governing automated decision-making and background checks or consumer reports. Quick Hits The FBI issued guidance regarding the growing threat from North Korean IT workers infiltrating U.S. companies to steal sensitive data and extort money, urging employers to enhance their cybersecurity measures and monitoring practices. The FBI advised U.S. companies to improve their remote hiring procedures by implementing stringent identity verification techniques and educating HR staff on the risks posed by potential malicious actors, incl...