Field notes on AI in business
Practical writing on AI, automation and the day-to-day work of running a business. From the team that builds and runs AI systems.
AI compliance
GDPR Article 22 and Automated Decision Making by AI: What Counts as a Decision
GDPR Article 22 and Automated Decision Making by AI: What Counts as a Decision Article 22 of the GDPR is one of those provisions that sounds straightforward until you actually try to apply it. The...
Basel IsmailMay 15, 2026
AI compliance
Schrems II and AI: The Cross-Border Transfer Question for U.S. AI Vendors
Schrems II and AI: The Cross-Border Transfer Question for U.S. AI Vendors If you are a European company using a U.S.-based AI vendor, or a U.S. AI vendor selling into Europe, the data transfer...
Basel IsmailMay 15, 2026
AI compliance
Military Health System and the Layered Compliance Stack: HIPAA, MARS-E, and AI
Military Health System and the Layered Compliance Stack: HIPAA, MARS-E, and AI If you are a contractor working with the Defense Health Agency, you already know the compliance environment is dense....
Basel IsmailMay 14, 2026
AI compliance
ITAR Voluntary Disclosures After an AI-Related Incident
ITAR Voluntary Disclosures After an AI-Related Incident A developer at your company uses an internal AI coding assistant to debug a piece of software that happens to be classified as a defense...
Basel IsmailMay 14, 2026
AI compliance
Why Defense Contractors Should Treat AI Procurement Like They Treat ITAR Compliance
Why Defense Contractors Should Treat AI Procurement Like They Treat ITAR Compliance Defense contractors already know how to buy things carefully. If you are procuring a component that touches...
Basel IsmailMay 14, 2026
AI compliance
Defense Primes and the Sub-tier Visibility Problem When AI Tools Are Everywhere
Defense Primes and the Sub-tier Visibility Problem When AI Tools Are Everywhere A Tier 1 defense prime can spend two years getting its own CMMC Level 3 certification buttoned up, invest millions in...
Basel IsmailMay 14, 2026
Get the next article by email
One short email when something new goes up. Practical, no fluff, written by the people who build.
Free. Unsubscribe any time. Privacy policy
AI compliance
Cybersecurity Maturity Beyond CMMC: What the Next Level of Defense AI Governance Looks Like
Cybersecurity Maturity Beyond CMMC: What the Next Level of Defense AI Governance Looks Like CMMC 2.0 is finally moving from rulemaking purgatory into actual enforcement. The final rule hit the...
Basel IsmailMay 14, 2026
AI compliance
August 2, 2026: The EU AI Act Deadline Most B2B Companies Are Still Underestimating
August 2, 2026: The EU AI Act Deadline Most B2B Companies Are Still Underestimating August 2, 2026 is when the EU AI Act's high-risk system obligations become fully applicable under Article 113(1) of...
Basel IsmailMay 14, 2026
AI compliance
Naval Shipyards, Submarine Programs, and the Highest-Stakes AI Compliance Environment
Naval Shipyards, Submarine Programs, and the Highest-Stakes AI Compliance Environment If you work in defense and think ITAR compliance is already a headache, try layering Department of Energy...
Basel IsmailMay 13, 2026
AI compliance
Cleared Personnel, Insider Threat, and AI Tool Misuse
Cleared Personnel, Insider Threat, and AI Tool Misuse A cleared employee pastes a chunk of a classified program's technical requirements into ChatGPT to "help summarize" a briefing. No malicious...
Basel IsmailMay 13, 2026
AI compliance
The Defense Industrial Base CISO's AI Tool Inventory Template
The Defense Industrial Base CISO's AI Tool Inventory Template If you are a CISO in the defense industrial base, you probably already know that your AI tool sprawl is worse than you think. Shadow IT...
Basel IsmailMay 13, 2026
AI compliance
Foreign Ownership, Control, or Influence (FOCI) and the AI Vendor Question
Foreign Ownership, Control, or Influence (FOCI) and the AI Vendor Question If your company holds or is pursuing a facility security clearance (FCL), you already know that FOCI determinations can make...
Basel IsmailMay 13, 2026
1,319 articles