When organizations implement workplace surveillance tools, the conversation often begins with privacy. Questions about employee consent, data collection, retention periods, and legal compliance are essential. But as workplace monitoring technologies become more sophisticated, focusing exclusively on privacy risks often overlooks a much larger challenge.
Best Practices
Posted inBest Practices
The hidden cost of compliance leadership
There is a cost attached to senior compliance roles that does not appear in job descriptions, is rarely discussed in appraisals, and is absent from careers talks given to people entering the profession.
Posted inBest Practices
The inference gap: Auditing the AI risk no framework requires you to see
When external regulation lags, internal audit becomes the only line of defense. AI’s environmental footprint is a live governance exposure, and right now, almost no one is auditing it. A company can run an AI product billions of times a day with no obligation to measure what it consumes: No requirement to report the energy […]
Posted inBest Practices
AI demands a new risk operating model. Are risk leaders up to the task?
For years, risk, compliance, and internal audit functions have been asked to absorb and integrate new technologies and ways of working while facing off against increased business expectations without fundamentally changing the risk management operating model that underpins them. Capabilities such as continuous controls monitoring, dynamic risk assessments, and new reporting requirements have been layered […]
Posted inWhistleblowers
National Whistleblower Day: Closing the gap between policy and practice
Every year around this time, I think back to conversations I’ve had with employees who chose to report a concern, and what it actually took for them to make that call. Almost none of them describe the decision as simple.
Posted inSanctions
Sanctions are evolving fast. Ashurst Perkins Coie’s Jamie Schafer on why compliance is more critical than ever
Jamie Schafer, co-chair of the regulatory compliance and disputes practice at Ashurst Perkins Coie in Washington, D.C., explains why compliance teams must be involved at strategic and product level and where to expect new risks to emerge.
Posted inBest Practices
Brazil’s National Data Protection Authority: How regulators investigate and enforce its data protection law
In June of this year, Brazil’s National Data Protection Authority opened an administrative enforcement proceeding against Claro, one of the country’s largest telecom carriers, over the sharing of customer data with Serasa, the largest credit bureau in Latin America.
Posted inBest Practices
Practitioner lessons from Prudential Life of Japan’s scandal
Prudential Life Insurance’s scandal in Japan attracted limited attention in the West when it broke in January, but six months on, it has become one of the most consequential compliance failures seen this year.
Posted inBest Practices
The Reverse Information Paradox: The role of compliance in AI governance
AI use creates hidden knowledge transfer to providers, raising governance, IP, and third-party risk issues. Compliance officers need to define ownership boundaries and contract protections around AI interactions.
Posted inBest Practices
Regulators are likely to pass laws on AI use in healthcare. Here’s how to prepare
Artificial intelligence tools hold breathtaking potential in the healthcare ecosystem.
