Reading notes
Short notes on outside studies and rulings about AI governance, each with a link to the source.
All reading notes
-
CB Financial Services 2026: an SEC filing over customer data put into an AI app the bank had not approved
19 October 2026CB Financial Services told the SEC that customer names, Social Security numbers and dates of birth were handled with an AI application the bank had not authorized.
-
EY 2026: 47% say their AI governance process was skipped for urgent deployments
18 October 202698% of the 202 US senior AI executives EY surveyed say their company has formal AI governance policies in place, and 47% say the process was skipped for urgent deployments.
-
OWASP 2026: misuse of an AI agent’s identity and access is a top threat
9 June 2026The OWASP security project lists misuse of an agent’s identity and access among the ten highest-impact threats to AI agents, and recommends each agent get its own identity.
-
NTT DATA 2026: what the companies furthest ahead with AI prioritize in governance
9 June 2026Of the companies furthest ahead with AI in NTT DATA’s survey of 2,567 executives, 59.4% named data privacy or sovereignty across countries a top governance concern, against 49.6% of those furthest behind.
-
University of Queensland and MIT 2026: which sectors are most exposed to AI risk
8 June 2026A panel of 272 experts judged information, finance and national security the sectors most exposed to AI risk, and the authors write that the standards and enforcement AI needs are still forming or missing.
-
Schrems II and the CLOUD Act: which law reaches your data
18 May 2026Under the US CLOUD Act, a US court can order a provider under US law to hand over data it controls, wherever that data is stored.
-
IBM 2026: 18% of Canadian organizations say they have systems to govern AI across everyday operations
8 May 2026In an IBM Institute for Business Value study, 18% of Canadian organizations said they have systems to coordinate and govern AI across everyday operations.
-
United States v. Heppner: documents a defendant made with an AI tool, not at a lawyer’s direction, were not privileged
30 April 2026A US federal court found that documents a defendant made with an AI tool, not at a lawyer’s direction, were not privileged.
A free AI acceptable use policy template, written for Canadian privacy law and ready for your lawyer to adapt wherever you operate. Get the template