Insights forAI and Cyber Leaders
A weekly update on the AI and cyber rules that changed, plus plain-English guides for the people who have to act on them.
A playbook for hospitals adopting palm vein or fingerprint check-in, with a California focus: the legal map, a governance model, a 90-day plan and vendor questions.
Read the white paper Palm vein check-in is coming. Who governs it?The healthcare exemptions in state biometric laws are narrower than most teams assume, and six controls that work in every state.
Read the article This week in AI and cyber governanceCIRCIA reaches the White House, the HIPAA Security Rule slips to 2027, and the SEC cyber rules stay in force.
Read this week's update The clocks start at materialitySEC, NYDFS, DoD, CIRCIA and HIPAA reporting deadlines, and five steps to be ready before an incident.
Read the article AI scribes and HIPAA: six questions before you signBAAs, training on patient data, accuracy, consent to recording, Section 1557 and security.
Read the article The US AI rules, industry by industryWhat applies to banks, insurers, healthcare, employers, contractors and everyone else in 2026 and 2027.
Read the guide The new bank guidance leaves generative AI to youWhat changed on April 17, 2026, and how to govern the AI the guidance leaves out.
Read the article Using AI in hiring? A checklist for 2026 and 2027Illinois, New York City, California and Colorado, and the five controls that cover most of them.
Read the checklist