AI Governance & Risk Management

By 2026, an AI vendor addendum should hardwire EU AI Act obligations plus allocate hallucination risk through warranties, testing, audit rights, and indemnities. The EU AI Act’s risk-based duties will affect both EU deployments and many non-EU vendors supplying EU customers. This article provides a clause-by-clause drafting roadmap attorneys can use to reduce regulatory and […]

California law firms can build a defensible AI governance program in 30–90 days by combining a written CPRA compliance layer, ABA ethics controls, and SOC 2-style security evidence. The CPRA raises stakes for vendor risk, sensitive personal information, and data minimization, while ABA Model Rules require competence, confidentiality, supervision, and candid communications. This article provides […]

The EU AI Act’s key compliance deadlines have been pushed back, giving U.S. companies extra time—but not a free pass—to prepare. Despite the delay, expected obligations around high‑risk systems, governance, documentation, and transparency are still coming, and enforcement risk will grow as timelines firm up. This article explains what changed, what likely remains, and the […]