State AI Laws Creating Compliance Obligations for Enterprises
Multiple state AI laws already impose binding obligations that businesses cannot ignore.
Lieselotte Baumann
Section
Compliance and Regulation
8 stories in Compliance and Regulation.
AI-Specific Gaps in Traditional GRC Platform Coverage
Traditional GRC platforms cannot detect AI behavior changes between audits.
Priya Nandakumar
FedRAMP Authorization Challenges for AI-Enabled Cloud Services
FedRAMP's framework struggles to keep pace with federal AI deployment demands.
DeShawn Calloway
GDPR Accountability Obligations for Automated AI Decision-Making
Organizations must document AI decisions before regulators demand proof of compliance.
Priya Nandakumar
Access Control Audit Trails as Compliance Infrastructure for AI
Audit trails must record authorization decisions, not just activity, to prove AI compliance.
Priya Nandakumar
Compliance Evidence Generation for AI Systems Under Audit
Auditors now demand runtime logs, not policies, to verify AI systems met compliance rules.
Lieselotte Baumann
HIPAA Compliance Gaps Created by AI Agents Accessing PHI
AI agents' autonomous data access and persistent memory undermine HIPAA's human-centered safeguards.
Priya Nandakumar
SOC 2 Trust Services Criteria Applied to AI Agent Systems
Organizations must map AI agents to SOC 2 controls and prove those controls actually work.
Lieselotte Baumann