Stories from people dealing with Privacy and Data Rights — what changed, who decided it, and what the ordinary days look like now.
25 stories
AI Governance & Ethics
A visible badge, file metadata, generation log, and signed Content Credential answer different questions. Cropping and reposting expose the gaps between them.
Irene Vasko · August 9, 2026 · 8 min
AI Governance & Ethics
Replacing a voice model does not reset the permission attached to its source recording. Teams need a consent receipt that follows the sample, each derived model, and every generated file.
Irene Vasko · 8 min read
AI Governance & Ethics
A support-ticket summary may pass through six companies even when the settings page names one. Trace the full route before prompts, attachments, and logs contain customer data.
Irene Vasko · 8 min read
AI Governance & Ethics
An exclusion request tied only to a URL or embedded tag can vanish after scraping. Operational opt-outs need durable identifiers, copy lineage and deletion receipts.
Irene Vasko · 8 min read
AI Governance & Ethics
A signed agreement can cover Amazon Bedrock while leaving prompt logs, application code, and downstream tools outside a safe design. The unit to review is the full data path.
Irene Vasko · 9 min read
AI Governance & Ethics
A single voice-cloning workflow can trigger rules for biometrics, publicity rights, impersonation, and robocalls. A checkbox at upload is no longer a sufficient product control.
Irene Vasko · 8 min read
AI Governance & Ethics
A synthetic voice can outlast the recording session, the vendor contract, and the speaker’s employment. Permission needs separate decisions for creation, reuse, transfer, and exit.
Irene Vasko · 8 min read
AI Governance & Ethics
A reusable voice model creates risks that deleting the original recording cannot fix. The approval ticket must cover model access, generated speech, revocation, and reuse.
Irene Vasko · 8 min read
AI Governance & Ethics
A business associate agreement can cover an AI vendor’s HIPAA duties without revealing its data path. Hospitals should trace prompts, files, logs, model use, and subprocessors before sending patient data.
Irene Vasko · 8 min read
AI Industry & Models
Regional endpoints make in-region model inference practical, but they do not govern every log, review queue, support session, or connected search tool.
Tobias Lund · 8 min read
AI Governance & Ethics
Before an AI scribe records a visit, pin down who handles the data, whether it trains models, when recordings disappear, and how corrections reach the chart.
Irene Vasko · 8 min read
AI Governance & Ethics
A robots.txt rule can tell named AI crawlers to stay away. It cannot remove old copies, bind unknown scrapers, or prove that downstream model developers excluded the work.
Irene Vasko · 7 min read
AI Governance & Ethics
A checkbox no longer covers the risks of cloning a voice. Products need to verify the speaker, preserve scoped consent, and make revocation change what the model can do.
Irene Vasko · 8 min read
AI Governance & Ethics
Crawler blocks, account settings, and license terms can reduce future collection. None should be read as proof that a trained model has forgotten a work.
Irene Vasko · 8 min read
AI Governance & Ethics
A signed BAA can govern protected health information without answering how long audio survives or whether transcripts train models. Trace the data path and test deletion before the first patient visit.
Irene Vasko · 8 min read
AI Governance & Ethics
A business associate agreement can cover an AI scribe without covering every service behind it. Trace the visit audio through transcription, generation, storage and model training before procurement signs off.
Irene Vasko · 8 min read
AI Governance & Ethics
A business associate agreement covers obligations, not the complete route taken by a patient recording. Practices need a data map that includes model providers, storage, support tools, and deletion.
Irene Vasko · 8 min read
AI Governance & Ethics
A HIPAA review must follow one visit from microphone capture through transcription, note generation, support access, analytics, export, and deletion. The vendor’s BAA is the start, not the map.
Irene Vasko · 8 min read
AI Governance & Ethics
Overturning one AI-assisted decision is not enough. A correction path must trace the error into source systems, preserve the dispute and stop bad data from returning.
Irene Vasko · 8 min read
AI Governance & Ethics
A business associate agreement governs how an AI vendor handles protected health information. Clinical accuracy needs its own tests, review steps and release controls.
Irene Vasko · 7 min read
Consumer AI Hardware
Run one 60-minute recording locally before canceling a transcription subscription. Processing speed matters, but speaker labels, language support, battery use, and privacy usually decide the result.
Devin Oyelaran · 8 min read
AI Governance & Ethics
Start with one sensitive workflow, then require evidence for every model, storage system, evaluation, incident path, and opt-out behind it.
Irene Vasko · 8 min read
Consumer AI Hardware
A privacy-first walkthrough for Ray-Ban Meta glasses, covering the capture light, voice history, contacts, cloud processing and the conversation to have before recording anyone.
Devin Oyelaran · 8 min read
Consumer AI Hardware
PLAUD Note, Limitless Pendant, and Omi take different routes to the same destination: cloud processing. Their deletion and export controls deserve as much scrutiny as their transcripts.
Devin Oyelaran · 7 min read
AI Governance & Ethics
A deletion receipt from the application is only the first step. Real evidence must follow the prompt through provider logs, backups, vector databases, and tracing systems.
Irene Vasko · 8 min read
Other impacts
One story a day
One real story about AI each morning — no hype, no alarm, just company for the road.