Practical writing on AI, automation and the day-to-day work of running a business. From the team that builds and runs AI systems.

AI compliance
Engineering Teams and the Code Review Habit That Leaks Trade Secrets A developer hits a wall on a tricky function. They copy 40 lines of proprietary code, paste it into a public AI chatbot, and ask...

AI compliance
Marketing Teams and the Unreleased Product Information That Ends Up in ChatGPT Your marketing team is probably pasting unreleased product names, launch timelines, and pricing strategies into ChatGPT...

AI compliance
The Defend Trade Secrets Act and the Threshold Question for AI-Leaked Information If you have spent any time litigating trade secret claims under the Defend Trade Secrets Act (18 U.S.C. § 1836), you...

AI compliance
Why Your NDAs Are Silent on AI Tools and What to Add to Them Pull up the last NDA your company signed. Search for "artificial intelligence," "machine learning," "large language model," or "generative...

AI compliance
Source Code in a Public Chat Window: The Most Common Trade Secret Leak of 2025 A software engineer at Samsung pasted proprietary semiconductor source code into ChatGPT in early 2023 to debug an...

AI compliance
Shadow AI: The Tool Your Engineers Are Using That Your CISO Has Never Heard Of Your shadow IT problem just got a generative upgrade. That SaaS sprawl you spent years getting under control? It now...
One short email when something new goes up. Practical, no fluff, written by the people who build.
Free. Unsubscribe any time. Privacy policy
AI compliance
Trade Secret Misappropriation Through AI Inference Attacks There is a category of AI security threat that most trade secret programs are not built to handle. Model inversion attacks, membership...

AI compliance
Why a No-AI Policy Is Worse Than No Policy at All A Fortune 500 company bans all generative AI use in February 2023. By June, an internal audit finds 68% of knowledge workers have used ChatGPT for...

AI compliance
Why a Single Privacy Notice Cannot Cover All Your AI Use Cases A surprising number of organizations still rely on a single, general privacy notice that vaguely references "automated processing" or...

AI compliance
Cookie Banners, Consent Strings, and the AI Personalization Question Cookie consent has been a solved problem for about five minutes. Just long enough for everyone to implement IAB TCF v2.0, get...

AI compliance
Cross-Border Data Flows and the Adequacy Decision Map for AI Vendors in 2026 If you are evaluating AI vendors right now, the adequacy decision map looks meaningfully different than it did even 18...

AI compliance
Data Subject Access Requests Involving AI-Generated Records A question that keeps coming up in privacy operations meetings: when a data subject submits a DSAR under GDPR, and the responsive records...
1,319 articles