Rules, audits, and receipts
Transparency and disclosure, open-weight versus closed models, benchmark honesty, observability and audit trails, provenance and data rights, and the regulation working teams actually have to satisfy.
Irene VaskoGovernance & Ethics Writer
AI Governance & Ethics
A visible badge, file metadata, generation log, and signed Content Credential answer different questions. Cropping and reposting expose the gaps between them.
Irene Vasko · August 9, 2026 · 8 min
AI Governance & Ethics
There is no blanket U.S. disclosure rule. A practical answer depends on where the customer is, what the bot is doing, and whether chat becomes an AI-generated call.
Irene Vasko · 8 min read
AI Governance & Ethics
A public audit can reveal which hiring system was tested, whose outcomes were counted, and where selection rates diverged. It can also conceal job-level differences and omit demographic groups.
Irene Vasko · 8 min read
AI Governance & Ethics
The FTC’s familiar advertising standard already covers AI claims. Here is how to connect “unbiased,” “private,” or “more accurate” to a test, a defined scope, and recorded limits.
Irene Vasko · 8 min read
AI Governance & Ethics
Replacing a voice model does not reset the permission attached to its source recording. Teams need a consent receipt that follows the sample, each derived model, and every generated file.
Irene Vasko · 8 min read
AI Governance & Ethics
One appointment-reminder call can cross federal consent rules, state AI disclosures, and voice-likeness rights. Product teams need a call-level policy matrix before the system dials.
Irene Vasko · 8 min read
AI Governance & Ethics
A support-ticket summary may pass through six companies even when the settings page names one. Trace the full route before prompts, attachments, and logs contain customer data.
Irene Vasko · 8 min read
AI Governance & Ethics
An exclusion request tied only to a URL or embedded tag can vanish after scraping. Operational opt-outs need durable identifiers, copy lineage and deletion receipts.
Irene Vasko · 8 min read
AI Governance & Ethics
A signed agreement can cover Amazon Bedrock while leaving prompt logs, application code, and downstream tools outside a safe design. The unit to review is the full data path.
Irene Vasko · 9 min read
AI Governance & Ethics
US disclosure duties turn on location, purpose, profession, and channel. A visible label at first contact is the cleanest baseline, but voice callbacks and human handoffs need separate controls.
Irene Vasko · 8 min read
AI Governance & Ethics
A model card cannot explain why a customer was denied a credit limit increase. This decision-level template connects affected people, harms, controls, evidence, and appeals.
Irene Vasko · 8 min read
AI Governance & Ethics
A single voice-cloning workflow can trigger rules for biometrics, publicity rights, impersonation, and robocalls. A checkbox at upload is no longer a sufficient product control.
Irene Vasko · 8 min read
AI Governance & Ethics
A synthetic voice can outlast the recording session, the vendor contract, and the speaker’s employment. Permission needs separate decisions for creation, reuse, transfer, and exit.
Irene Vasko · 8 min read
AI Governance & Ethics
A resume model is not covered merely because a vendor calls it AI. Employers need evidence showing what it outputs, how recruiters use it, which jobs it affects, and whether required audits and notices exist.
Irene Vasko · 8 min read
AI Governance & Ethics
New York City requires annual bias audits for covered hiring tools, but a results page cannot prove the test used the right data, workflow, or software version.
Irene Vasko · 8 min read
AI Governance & Ethics
New York City requires a published bias audit for covered automated hiring and promotion tools. The resulting table is a compliance artifact, not proof that every deployment is fair or lawful.
Irene Vasko · 7 min read
AI Governance & Ethics
A reusable voice model creates risks that deleting the original recording cannot fix. The approval ticket must cover model access, generated speech, revocation, and reuse.
Irene Vasko · 8 min read
AI Governance & Ethics
A business associate agreement can cover an AI vendor’s HIPAA duties without revealing its data path. Hospitals should trace prompts, files, logs, model use, and subprocessors before sending patient data.
Irene Vasko · 8 min read
AI Governance & Ethics
The city’s rule reaches tools that score or rank people and materially drive hiring or promotion decisions. Its required audit measures outcome disparities, not accuracy or general fairness.
Irene Vasko · 8 min read
AI Governance & Ethics
A vendor may call it analytics, but if it changes who gets housing, credit, work, or service, put it on the map. New Jersey’s existing laws and proposed rules make the missing records matter.
Irene Vasko · 8 min read
AI Governance & Ethics
The Colorado AI Act turns on how a system affects a decision, not whether a vendor calls it AI. Start with one row per workflow, then determine which rows need legal review and impact assessments.
Irene Vasko · 8 min read
AI Governance & Ethics
A score cannot show whether bad source data, a model transformation, a policy threshold, or a human reviewer caused a denial. Preserve a decision-time record that can separate them.
Irene Vasko · 7 min read
AI Governance & Ethics
Businesses using AI for hiring, lending and other consequential decisions must build the compliance record. Vendor documentation helps, but it does not replace the deployer’s assessment.
Irene Vasko · 8 min read
AI Governance & Ethics
Before an AI scribe records a visit, pin down who handles the data, whether it trains models, when recordings disappear, and how corrections reach the chart.
Irene Vasko · 8 min read
AI Governance & Ethics
A robots.txt rule can tell named AI crawlers to stay away. It cannot remove old copies, bind unknown scrapers, or prove that downstream model developers excluded the work.
Irene Vasko · 7 min read
AI Governance & Ethics
EU rules are making model documentation a practical dependency. US deployers should request a versioned evidence packet before a European provider changes or withdraws the model.
Irene Vasko · 8 min read
AI Governance & Ethics
A usable inventory must connect each AI system to the decision it influences, the people affected, its controls, and the evidence its vendor has not supplied.
Irene Vasko · 8 min read
AI Governance & Ethics
State election laws ask different questions about synthetic media, from format and timing to sponsorship. A publishing ticket can catch those differences before distribution.
Irene Vasko · 8 min read
AI Governance & Ethics
New Jersey’s discrimination law already reaches automated hiring. Before a scoring tool goes live, employers need evidence for its job relevance, accommodation route, vendor controls and candidate notices.
Irene Vasko · 8 min read
AI Governance & Ethics
A Newark employer recruiting in Manhattan, Chicago, or Colorado can inherit different audit, consent, and appeal duties. The compliance trigger often follows the job or applicant, not headquarters.
Irene Vasko · 8 min read
AI Governance & Ethics
An applicant may encounter four automated systems before a recruiter calls. Mapping those systems shows which discrimination duties, notices, bias reviews, and vendor records may apply.
Irene Vasko · 8 min read
AI Governance & Ethics
State political deepfake laws disagree on disclosure text, election windows, covered formats, and penalties. Campaigns and platforms need an asset-level map before distribution.
Irene Vasko · 8 min read
AI Governance & Ethics
A hiring score can trigger different duties in Colorado, Illinois and New York City. The workable unit of compliance is one system, one use and one jurisdiction per inventory row.
Irene Vasko · 8 min read
AI Governance & Ethics
TikTok, YouTube, Instagram, and X attach warnings to posts, not necessarily files. A download-and-repost audit shows why disclosure needs provenance that travels.
Irene Vasko · 8 min read
AI Governance & Ethics
A polished denial letter can be detached from the model and rules that rejected an applicant. The lender needs a decision-time trace, not a story generated from the result.
Irene Vasko · 8 min read
AI Governance & Ethics
New York City regulates what employers tell candidates and what they test about hiring tools. Those duties run on different evidence, owners, and clocks.
Irene Vasko · 8 min read
AI Governance & Ethics
A generic denial notice can conceal a gap between a model’s inputs and its stated reasons. This workflow tests reason codes against the decision record before notices go out.
Irene Vasko · 8 min read
AI Governance & Ethics
A checkbox no longer covers the risks of cloning a voice. Products need to verify the speaker, preserve scoped consent, and make revocation change what the model can do.
Irene Vasko · 8 min read
AI Governance & Ethics
A hiring rejection can pass through several vendor models without appearing in an AI register. This worksheet traces the decision, evidence, notice, appeal, and accountable team.
Irene Vasko · 8 min read
AI Governance & Ethics
A ranking score, generated summary and recruiter click can form one automated decision path. Employers need records showing each step, its owner and whether a human could reverse it.
Irene Vasko · 8 min read
One story a day
One real story about AI each morning — no hype, no alarm, just company for the road.