Stay updated with the latest industry insights on AI compliance.

China AI regulation explained for foreign firms: CAC filings, AI content labels, companion AI rules, 2026 enforcement and the evidence to keep ready.

The CCPA regulations in force since January 2026 add ADMT duties from 1 January 2027, risk assessment filings in 2028 and audits to 2030. Dates and evidence.

Adversarial AI attacks ML models through poisoning, evasion and prompt injection. See the attack types, defenses, and governance controls the EU AI Act now requires.

California AI laws explained by role and date: SB 53, SB 942, SB 243, CCPA ADMT, FEHA rules and the bills Newsom signed in September 2026.

TRAIGA has been in force since January 2026. What the Texas AI law prohibits, how the NIST AI RMF safe harbour works, and the evidence you need to rely on it.

Standard vendor due diligence was built for a pre-AI supply chain. Here are the 12 AI-specific questions to add, and the legal duty behind them.

Model risk management is being rewritten for AI. See how SR 26-2, the EU AI Act, ISO 42001 and NIST AI RMF reshape MRM for machine learning and GenAI.

Policy management software must now prove AI policies work, not just that staff signed them. Evaluation criteria, EU AI Act duties and buying traps.

Human oversight is an EU AI Act Article 14 obligation, not a principle. What providers must build, what deployers must staff, and when it applies.

An AI governance committee only counts if it survives an audit. The clauses behind it, the seats, the decision rights and the records you must keep.

A governance risk and compliance tool must now inventory AI systems, map EU AI Act duties and hold audit-ready evidence. Here is the capability checklist.

HIPAA compliance AI goes far beyond a BAA. See how Section 1557, HTI-1, FDA and the EU AI Act govern clinical AI, and what evidence auditors expect.

The EU AI Act high-risk deadline moved to December 2027, the classification duty did not. Work through the Article 6 determination and the exemption trap.

EU AI Act Article 50 has applied since 2 August 2026. What providers and deployers must disclose, mark and label, plus the 2 December 2026 deadline.

A data governance framework that satisfies auditors, not just committees: the four pillars re-scoped to EU AI Act Article 10, ISO 42001 A.7 and NIST AI RMF.

Conformity assessment is how a high-risk AI system proves it complies. The Article 43 routes, the Annex IV evidence, and the December 2027 deadline.

AI red teaming is now an enforceable EU AI Act duty for GPAI providers. What Article 55 requires, who is bound, and the evidence auditors ask for.

AI literacy is now enforceable under EU AI Act Article 4. What the Digital Omnibus changed, who is covered, and the evidence regulators expect.

AI assurance is how you measure, evaluate and communicate that an AI system works. See the mechanisms, the standards and the EU AI Act evidence chain.

An AI impact assessment is not one duty but six. Map the EU AI Act Article 27 FRIA, ISO 42005 and GDPR DPIA to what your organisation owes.

AI accountability is not a virtue. Under the EU AI Act it is an assigned legal role with its own fine tier. Map the roles, duties and evidence.

A higher risk appetite can accelerate AI adoption, but the EU AI Act, ISO 42001 and NIST AI RMF set floors it cannot cross. Here is where the line sits.

A generative AI model creates new content from learned patterns. Compare GANs, VAEs, diffusion and transformers, and see which EU AI Act duties apply.

Automated employment decision tools face five overlapping regimes in 2026. Map NYC Local Law 144, Illinois, California and the EU AI Act to one audit.

The seven AI governance challenges that stall delivery in 2026, each mapped to the EU AI Act obligation behind it and the control that closes it.

AI benchmarking explained for governance teams: what benchmark scores prove under the EU AI Act, ISO 42001 and NIST AI RMF, and where they fail as evidence.

NIST CSF 2.0 explained: the six core functions, Tiers and Profiles, plus how NIST's draft Cyber AI Profile extends the framework to AI systems.

The ISO 42001 certification process explained: the five phases, the 38 Annex A controls, realistic cost and timeline, and how it prepares you for the EU AI Act.

A vendor-neutral guide to the IAPP AIGP certification: 2026 body of knowledge, exam format, cost, salary and how to prepare for the exam.

AI compliance is a continuous governance operating model, not a one-off checklist. Map EU AI Act, ISO 42001 and NIST AI RMF to controls and evidence.

An AI audit is a structured, evidence-based review of how AI systems are built, deployed, and governed. Learn the five audit types, the process, and a checklist.

Shadow artificial intelligence is the ungoverned AI your teams already use. See the risks, the EU AI Act inventory obligation, and how to govern it.

An AI system infers outputs from inputs to influence its environment. Learn the EU AI Act definition, the main types of AI systems, and how they are governed.