When organizations implement workplace surveillance tools, the conversation often begins with privacy. Questions about employee consent, data collection, retention periods, and legal compliance are essential. But as workplace monitoring technologies become more sophisticated, focusing exclusively on privacy risks often overlooks a much larger challenge.
Technology
Posted inWhistleblowers
Whistleblower accuses Mayo Clinic of compromising patient care, privacy with AI tool misuse
A former executive at Mayo Clinic has accused the organization of using AI tools that compromised patient privacy, manipulated data, and blew past institutional review protocols.
Posted inBest Practices
The inference gap: Auditing the AI risk no framework requires you to see
When external regulation lags, internal audit becomes the only line of defense. AI’s environmental footprint is a live governance exposure, and right now, almost no one is auditing it. A company can run an AI product billions of times a day with no obligation to measure what it consumes: No requirement to report the energy […]
Posted inRegulatory Enforcement
New York is the latest state to sue Kalshi for hosting an illegal gambling operation
New York Attorney General Letitia James sued prediction market platform Kalshi on July 31, alleging the company has been operating an unlicensed gambling business in violation of state law. The lawsuit is the latest legal challenge facing Kalshi, which is already battling several other states as courts determine what regulations, if any, the company must follow.
Posted inBest Practices
AI demands a new risk operating model. Are risk leaders up to the task?
For years, risk, compliance, and internal audit functions have been asked to absorb and integrate new technologies and ways of working while facing off against increased business expectations without fundamentally changing the risk management operating model that underpins them. Capabilities such as continuous controls monitoring, dynamic risk assessments, and new reporting requirements have been layered […]
Posted inRegulatory Enforcement
Kalshi, CFTC clash with states over prediction market jurisdiction
The fight over who regulates prediction markets continues as the CFTC filed a lawsuit against another state for its attempt to cement its jurisdiction on these companies. One of these companies, Kalshi, fought back as well, suing the state of Illinois, adding to the growing list of legal battles over this still-emerging sector.
Posted inBest Practices
CFPB’s Rohit Chopra is back, and California is his new bureau
Tech companies and fintechs, consider this your warning.
Posted inBest Practices
The Tower of Babel and compliance role in AI governance
Recently,Pope Leo XIV issued his first Papal Encyclical Letter, titled Magnifica Humanitas “On Safeguarding the Human Person in the Time of Artificial Intelligence.” The document places AI within the long tradition of Catholic social teaching and asks how humanity should respond to the “new things” of the digital age. I wanted to review it from a compliance angle.
Posted inData Privacy
ICO lists five steps to help companies protect themselves from AI cyber threats
Companies have long prioritized cybersecurity as a key risk to their operations, but AI’s ability to increase the number, speed, severity, and types of attacks has prompted the U.K.’s regulator to set out five practical steps that organizations can take to strengthen their resilience against AI-powered threats and cyberattacks.
Posted inBest Practices
Deepfakes, synthetic identities and the new era of professional misrepresentation
The most trusted organizations do not just sell products. They sell judgement, discretion and trust. That trust is now being actively tested by AI-enabled deception — at scale, and at the onboarding stage, precisely when verification decisions are made. Artificial intelligence is no longer a future risk. It is already being used to manufacture identities: […]