All Articles

Even with light-touch regulation as its lodestar, new AI action plan requires authorization and funding for standards development, testing infrastructure and permitting reform

AI can lead to inaccurate assumptions, so context still matters when challenging government data analytics in False Claims Act or other enforcement matters

Organizations that treat threat assessment as ongoing operating rhythm — like financial risk or compliance — are best positioned to see escalation early and respond coherently

Financial products and operational processes should be designed to adapt rapidly to new requirements without extensive rebuilding through agile internal processes

The first of three pillars: intensive preparation through uninterrupted dry runs, breaking down answers and doing it again until you are ready

Credentialing can provide structured frameworks for developing critical thinking skills

Board-GC communication frequency doesn’t match organizational objectives

Constitutional challenge to qui tam provisions heads toward Supreme Court, but neither DOJ nor relators show signs of slowing enforcement activity

Many US companies still resist recognizing data governance and structured management as a value center, but the regulatory and technological landscape increasingly demands organizational discipline around digital assets. Howard & Howard's Rita W. Garry uses Oracle's mandate for the newly restructured US TikTok — storing 150 million users' data, retraining the algorithm without Chinese interference...

Every conference RSVP, smart device and geotagged photo becomes a potential entry point for harassment, stalking or worse

Emerging policies extend beyond data privacy into product governance and algorithmic accountability

Companies need to evaluate whether they have actual knowledge of users younger than 13

Agency’s new leader ‘planting flag‘ over who gets to govern platforms like Polymarket, Kalshi

Judges ruled against Sutter at trial and appellate levels despite critical services provided, reversing dismissals and evidentiary exclusions

Each program has different eligibility criteria and benefits, requiring companies to understand all potentially applicable frameworks before self-reporting

Ransomware attacks hit record in 2025

Audit leaders focusing on AI and data analytics, while boards are looking at M&A and strategic partnerships

Enhanced requirements target business email compromise, vendor impersonation and false pretense fraud across credit and debit transactions

With Phase Two enforcement approaching in November 2026, early preparation matters in a market where assessment capacity has become limited

Expected developments range from new accreditation agency pathways to stricter criteria for public service loan forgiveness employer eligibility

For NYSE-listed companies, annual board assessments are required, and investors increasingly expect to see evidence that assessments drive change, not merely check a box. But the true organizational value of these assessments turns on follow-through. Allison Davis of Snell & Wilmer examines what separates boards that treat assessments as ongoing governance tools from those that...

When high trust exists, organizations surface issues earlier and manage crises with resilience

The “uplift” process to meet PCAOB standards can be burdensome and time-consuming, requiring two or three years of compliant audited financial statements

Employees are far more likely to comply when they understand the reasoning behind requirements like multifactor authentication

By nature, autonomous agents look for the path of least resistance, which can mean finding ways around existing safeguards

Many states may have decided it was not necessary to duplicate provisions businesses already implemented based on other state laws

Despite uncertainty and global shifts, business leaders are prepared to innovate, form strategic partnerships and plan for long-term growth

Regulators are increasingly asking whether a firm's product actually behaves as intended once real customers start using it in real conditions

Circumstantial cues, such as performance issues an employee attributes to medical concerns, may be sufficient to put an employer on notice

Examining real past cases helps people move beyond ‘What does the rule say?’ to ‘What happens next if we’re wrong?’