Loading…
Loading…
Tag
8 posts with this tag.
·9 min read
The OpenAI API has meaningfully different data handling than ChatGPT. API inputs are not used for training by default, zero data retention is available, and a DPA is accessible without an enterprise contract. Here is what that means for your team's governance.
·5 min read
Connecticut's SB 4 (Public Act 26-64) takes effect July 1, 2026, dropping the CTDPA coverage threshold from 100,000 to 35,000 consumers and adding two new no-threshold triggers. Here is what small teams need to check today.
·10 min read
Are AI conversations privileged? No, a 2026 federal ruling says ChatGPT and Claude chats can be subpoenaed. What to keep out of AI logs now.
·10 min read
Does ChatGPT's Dreaming V3 memory store your team's data across sessions? What to govern, disable, and disclose for privacy under GDPR and CCPA.
·13 min read
6 GDPR checks your DPO will run on any AI assistant: EU residency, DPA, Article 28, training opt-out, SOC 2, and self-hosting. See which tools pass.
·10 min read
GDPR Article 30 requires every company that processes personal data to maintain Records of Processing Activities (RoPA). AI tools create new processing activities, ChatGPT, Claude, Copilot each need an entry. Fill-in template pre-completed for 12 common AI tools.

·15 min read
Small AI teams can secure Compliance Budget Support by prioritizing quick-win projects that demonstrate risk reduction and ROI, avoiding the hard sell duri