regulation

Field Guide to AI, Security and Cybercrime

• AI Agents Do Not Sleep: The End of the Right to Disconnect

  Autonomous AI agents create a permanent, silent workstream that makes the legal right to disconnect impossible to enforce.

  Opinion · 8 min

• AI Rules for a Small Business: Where to Start

  You do not need a compliance department to use AI responsibly. You need four things done in order, and a page your staff will read.

  Opinion · 6 min

• Client-Side Scanning Explained: Checking Messages Before Encryption

  A scanner on every device is a capability that can be widened, fooled and misused, which is why it breaks end-to-end encryption.

  Opinion · 9 min

• Deepfake Impersonation of Minors: A New Bullying Frontier

  AI-generated impersonations of children are a potent new tool for bullying, exploiting legal gaps and causing unique emotional harm.

  Opinion · 8 min

• Deepfakes Enter the Courtroom: A Challenge for Evidence

  The established rules for authenticating video and audio evidence are breaking down in the face of AI-generated fabrication.

  Opinion · 9 min

• How to Check an AI System for Bias Before It Decides About People

  Bias is found by testing outcomes across groups and examining the path from data to decision, not by reading a vendor's fairness statement.

  Opinion · 9 min

• Someone Made a Deepfake of You: What to Do First

  The first hours decide whether a fake video or cloned voice stays contained or spreads. Most of the right moves are dull, and they work.

  Opinion · 6 min

• The Push to Regulate Emotional Recognition AI

  New laws are challenging the flawed science and dangerous applications of technologies that claim to read your feelings.

  Opinion · 7 min

• AI Companion Chatbot Laws: What They Require for Minors

  Disclosure, crisis protocols and age-aware design are becoming the legal baseline.

  Opinion · 10 min

• AI Content Labelling Rules: What Must Be Disclosed, and by Whom

  Transparency duties split between the tool that generates and the person who publishes.

  Opinion · 9 min

• AI in Hiring: Your Rights When an Algorithm Screens You

  Candidates have more room to ask questions than they think, and less than they deserve.

  Opinion · 8 min

• AI Meeting Note-Takers: Who Consented to the Recording?

  A bot invited by one participant records everyone, and the transcript lives on after the call.

  Opinion · 7 min

• An Incident Response Plan That Fits on One Page

  Plans fail on who decides and who to call, not on the technical steps.

  Opinion · 7 min

• Cyber Incident Reporting Deadlines: Several Clocks, One Incident

  A single breach can trigger 24-hour, 72-hour and materiality-based deadlines to different regulators.

  Opinion · 9 min

• Deepfakes in Elections: The Bigger Risk Is Disbelieving the Real

  Synthetic clips matter, but the lasting damage is a public that can wave away any genuine recording.

  Opinion · 9 min

• Digital Replicas and Consent: Who Controls Your Voice and Face?

  A one-time release signed for a job can become permission to generate you forever.

  Opinion · 8 min

• EU AI Act Explained: What Applies to Whom

  The Act regulates uses more than models, so classification of your use case comes first.

  Opinion · 9 min

• Fake Citations: How AI Hallucinations Reach Courts and Journals

  The failure is not the model inventing sources; it is institutions that never check references.

  Opinion · 9 min

• Health Data Outside HIPAA: What Your Apps Are Allowed to Share

  Most people assume medical privacy law follows health data; it mostly follows the doctor.

  Opinion · 8 min

• How to Get a Deepfake Image Removed Under the Take It Down Act

  The 48-hour removal duty is a real lever, but it works best when the request is prepared like evidence.

  Opinion · 8 min

• Internet-Exposed PLCs: Why Small Utilities Keep Getting Hit

  Attacks on water systems exploit defaults and exposure, not sophistication.

  Opinion · 8 min

• Is AI Training Fair Use? The Questions Courts Actually Ask

  The legal fight is turning on how data was obtained and whether outputs substitute for originals.

  Opinion · 8 min

• School Apps and Student Data: Questions Parents Can Ask

  Schools adopt dozens of platforms a year; parents can ask five questions that reveal the risk.

  Opinion · 8 min

• Should Open-Weight AI Models Be Regulated?

  Weights cannot be recalled once published, which forces regulation to look somewhere else.

  Opinion · 8 min

• Should You Pay a Ransomware Demand? The Case Against Certainty

  Payment buys a promise from a counterparty with no reason to keep it.

  Opinion · 8 min

• The Energy and Water Cost of AI: What Is Known and What Is Not

  Per-prompt numbers are real but narrow; the footprint that matters is set by training, siting and model choice.

  Opinion · 8 min

• US State AI Laws: Why the Patchwork Keeps Rewriting Itself

  States are retreating from broad frameworks toward narrow rules on chatbots, deepfakes and decisions.

  Opinion · 7 min

• When Ransomware Hits a Hospital, It Is a Patient Safety Event

  Treating a hospital cyberattack as an IT outage underprepares the clinicians who carry it.

  Opinion · 8 min

• Who Is Liable When AI Gets It Wrong?

  Blaming the model rarely works; responsibility tends to land on whoever deployed it to the public.

  Opinion · 7 min

• Who Owns AI-Generated Content? Copyright and Human Authorship

  Prompts alone rarely make you an author; what you select, arrange and change can.

  Opinion · 8 min

• Your AI Chat History Is a Record: Courts, Breaches and Reviewers

  The bigger privacy risk is not training; it is logs that can be produced, reviewed or leaked.

  Opinion · 8 min