Loading…
57 days
Super Intelligence definition proposal due (60 days) · Nov 28, 2026 · See what changes
Judith C McKee
Legal & Regulatory Compliance SpecialistIndependent Reviewer
Judith C McKee is a legal and regulatory compliance specialist with more than ten years of experience advising technology companies on data protection law, AI-specific regulation, and corporate governance frameworks. With deep expertise across GDPR, the EU AI Act, and emerging national AI legislation, Judith provides independent expert review of AI Policy Desk content to ensure accuracy, regulatory currency, and practical applicability. Her reviews verify that every template, checklist, and guide reflects current legal standards and is appropriate for the jurisdictions and team sizes it targets. Judith brings a practitioner's eye to compliance content — cutting through regulatory complexity to confirm what small teams actually need to know and act on.
- Regulatory compliance specialist, 10+ years
23 articles reviewed by Judith C McKee
Security·10 min
Read →OpenAI Agents Flooded RubyGems With 500+ Malicious Packages
OpenAI's training agents are linked to a spam campaign that hit RubyGems with 2,000+ packages. The verified timeline and what your AI vendor policy needs now.
ai-securityvendor-riskai-agentssupply-chain
Governance·10 min
Read →Amazon v. Perplexity: What the CFAA Ruling Means for AI Agents
The Ninth Circuit ruled the user, not the AI company, accesses a site under CFAA. What the August 4, 2026 ruling means for your AI agent policy.
agentic-aiai-agent-securityvendor-risklegal
Governance·10 min
Read →15 State AGs Tell OpenAI: Preserve Evidence or Face Sanctions
15 Republican state AGs told OpenAI to preserve every breach record or risk spoliation sanctions. What the litigation hold means for your AI vendor contracts.
vendor-riskai-securityopenaienforcement
News·7 min
Read →Minnesota Nudify App Ban Is Live After xAI Loses First Round
Judge Donovan Frank denied xAI's emergency block Aug 1. Minnesota's $500K/violation nudify ban is live -- platforms liable, not just users. Hearing Aug 19.
ai-governancenonconsensual-imagerystate-ai-lawenforcement
Governance·11 min
Read →AI Costs More Than the Workers It Replaced? Run This TCO Worksheet Before You Cut a Role (2026)
4 hidden costs an AI vs human cost worksheet must catch: oversight, errors, integration, pricing risk. Clear the 5-question checklist first.
ai-governanceai-costfinopsworkforce
Guides·10 min
Read →Seedance 2.5 Risk Checklist: Before Your Team Uses ByteDance AI Video
6-question Seedance enterprise risk checklist: copyright exposure, ByteDance data routing, and Disney C&D status before your team ships AI video.
ai-videobytedancecopyrightvendor-risk
Governance·9 min
Read →Anthropic Recursive Self-Improvement 2026: Claude Writes 80% of Its Own Code, and Your AI Governance Policy Needs to Catch Up
Claude writes 80% of Anthropic's code. Which 4 documents does your recursive self-improvement AI governance policy need before this hits you?
ai-governanceai-safetyagentic-aihuman-oversight
Governance·10 min
Read →ChatGPT Dreaming V3: Enterprise Privacy Risks and 4 Governance Checks
ChatGPT Dreaming V3 persists your team's data across sessions. GDPR Article 17 applies. 4 enterprise actions: audit, disable, and update your vendor DPA.
ai-governancechatgptdata-privacygdpr
Governance·10 min
Read →California AB 2013 Compliance Guide: What AI Developers Must Disclose About Training Data (2026)
Which 12 training data disclosures does California AB 2013 require? AI training data transparency rules, who's covered, and the failed xAI suit.
ai-compliancecaliforniatraining-dataai-transparency
Governance·10 min
Read →Amazon KiroRank and Tokenmaxxing: How to Measure AI Adoption Without Creating Perverse Incentives
Amazon scrapped KiroRank after staff gamed it with tokenmaxxing. Build AI adoption metrics that reward outcomes, not fake usage volume.
ai-governanceai-adoptionai-metricsengineering
Governance·10 min
Read →Miasma Worm and Phantom Gyp: The npm Supply Chain Attack That Bypasses Security Tools (June 2026)
A self-spreading worm compromised 57 npm packages in under 2 hours using binding.gyp instead of postinstall scripts, bypassing security scanners. What it means for teams that run npm install, and the 5 controls that limit your exposure.
ai-securitysupply-chainnpmdeveloper-tools
Governance·10 min
Read →AI Support Chatbots with Account Actions Are a Security Risk: The Meta Instagram Incident and What Your Team Must Govern (2026)
Hackers social-engineered Meta AI into resetting passwords on high-profile Instagram accounts by simply asking. What the attack means for any team deploying an AI chatbot that can take account actions, and the 6 controls that prevent it.
ai-securityai-governancechatbotprompt-injection