Loading…
Loading…
Tag
8 posts with this tag.
·10 min read
Nonprofits are not exempt from GDPR, CCPA, or state AI employment laws. Here is a minimal governance framework a 10-person team can implement in one week.
·9 min read
The OpenAI API has meaningfully different data handling than ChatGPT. API inputs are not used for training by default, zero data retention is available, and a DPA is accessible without an enterprise contract. Here is what that means for your team's governance.
·10 min read
Are AI conversations privileged? No, a 2026 federal ruling says ChatGPT and Claude chats can be subpoenaed. What to keep out of AI logs now.
·10 min read
Does ChatGPT's Dreaming V3 memory store your team's data across sessions? What to govern, disable, and disclose for privacy under GDPR and CCPA.
·13 min read
6 GDPR checks your DPO will run on any AI assistant: EU residency, DPA, Article 28, training opt-out, SOC 2, and self-hosting. See which tools pass.
·10 min read
GDPR Article 30 requires every company that processes personal data to maintain Records of Processing Activities (RoPA). AI tools create new processing activities, ChatGPT, Claude, Copilot each need an entry. Fill-in template pre-completed for 12 common AI tools.

·15 min read
Small AI teams can secure Compliance Budget Support by prioritizing quick-win projects that demonstrate risk reduction and ROI, avoiding the hard sell duri