FirmAdapt

Field notes on AI in business

Practical writing on AI, automation and the day-to-day work of running a business. From the team that builds and runs AI systems.

Free. Unsubscribe any time. Privacy policy

AI compliance

India DPDP Act and the AI Compliance Roadmap for SaaS Companies

India's DPDP Act and the AI Compliance Roadmap for SaaS Companies India's Digital Personal Data Protection Act, 2023 (DPDP Act) received presidential assent on August 11, 2023, and the rules are...

Basel IsmailMay 17, 2026

AI compliance

Quebec Law 25 and the AI Privacy Impact Assessment Requirement

Quebec Law 25 and the AI Privacy Impact Assessment Requirement Quebec's Law 25 (formally, An Act to modernize legislative provisions as regards the protection of personal information ) has been...

Basel IsmailMay 17, 2026

AI compliance

Indiana Consumer Data Protection Act: The 2026 Surprise for Mid-Market Companies

Indiana Consumer Data Protection Act: The 2026 Surprise for Mid-Market Companies Indiana quietly signed SB 5 into law on May 1, 2023, and most compliance teams outside the state barely noticed. The...

Basel IsmailMay 16, 2026

AI compliance

Kentucky Consumer Data Protection Act: What Bourbon Country Just Joined

Kentucky Consumer Data Protection Act: What Bourbon Country Just Joined Kentucky Governor Andy Beshear signed HB 15 into law on April 4, 2024, making Kentucky the fifteenth state to enact a...

Basel IsmailMay 16, 2026

AI compliance

Rhode Island Data Transparency and Privacy Protection Act: Smallest State, No Cure Period

Rhode Island Data Transparency and Privacy Protection Act: Smallest State, No Cure Period Rhode Island's comprehensive privacy law, the Rhode Island Data Transparency and Privacy Protection Act...

Basel IsmailMay 16, 2026

AI compliance

The Patchwork Problem: Why a Single Privacy Operating Model Across 20 States Is Impossible

The Patchwork Problem: Why a Single Privacy Operating Model Across 20 States Is Impossible As of mid-2025, twenty states have enacted comprehensive consumer privacy laws. Not sector-specific rules...

Basel IsmailMay 16, 2026

Get the next article by email

One short email when something new goes up. Practical, no fluff, written by the people who build.

Free. Unsubscribe any time. Privacy policy

AI compliance

California CCPA and CPRA Updates Affecting AI Use in 2026

California CCPA and CPRA Updates Affecting AI Use in 2026 The California Privacy Protection Agency has been working on Automated Decision-Making Technology (ADMT) regulations for over two years now,...

Basel IsmailMay 16, 2026

AI compliance

Colorado Privacy Act, Universal Opt-Out, and the AI Profiling Implications

Colorado Privacy Act, Universal Opt-Out, and the AI Profiling Implications Colorado's approach to universal opt-out mechanisms is quietly becoming one of the more technically demanding privacy...

Basel IsmailMay 16, 2026

AI compliance

EU AI Act Annex III: The High-Risk Categories You Probably Did Not Realize You Are In

EU AI Act Annex III: The High-Risk Categories You Probably Did Not Realize You Are In Annex III of the EU AI Act is where the real action is. While most of the public conversation has focused on...

Basel IsmailMay 15, 2026

AI compliance

EU AI Act Article 50 Transparency: What B2B SaaS Has to Disclose Starting August 2026

EU AI Act Article 50 Transparency: What B2B SaaS Has to Disclose Starting August 2026 Article 50 of the EU AI Act has a compliance deadline of August 2, 2026, and it applies to a much wider set of...

Basel IsmailMay 15, 2026

AI compliance

EU AI Act Fines: 35 Million Euros or 7 Percent of Global Revenue (Whichever Is Worse)

EU AI Act Fines: 35 Million Euros or 7 Percent of Global Revenue (Whichever Is Worse) The EU AI Act entered into force on August 1, 2024, and its enforcement provisions phase in over a staggered...

Basel IsmailMay 15, 2026

AI compliance

GDPR Right to Be Forgotten and Generative AI: The Article 17 Problem

GDPR Right to Be Forgotten and Generative AI: The Article 17 Problem Article 17 of the GDPR is conceptually straightforward. A data subject requests erasure, and the controller deletes their personal...

Basel IsmailMay 15, 2026

1,319 articles