Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 27 OCTOBER 2026

From IAPP To Action: Privacy, Security And AI Governance

Barnes & Thornburg LLP
Explore more from Barnes & Thornburg LLP

As companies navigate evolving privacy regulations and AI governance requirements, in-house legal teams face critical questions about demonstrating compliance in practice. This four-part series examines the practical challenges of meeting California's new cybersecurity audit requirements, managing automated decision-making technology compliance deadlines, and overseeing AI vendors and agentic AI systems after deployment.

United StatesPrivacy
Brian McGinnis
Brian McGinnis
Author LinkedIn connections

At the IAPP Privacy. Security. Risk. + AI Governance Global conference, discussions about privacy, cybersecurity and AI focused on a practical question: How can companies demonstrate that their policies and governance programs work in practice?

This four-part series examines several issues facing in-house legal teams as they prepare for 2027, including California's new cybersecurity audit requirements, compliance deadlines for automated decision-making technology, and the challenges of overseeing AI vendors and agentic AI after an application has been approved.

The articles explore what these developments mean for companies, from determining whether existing security assessments will satisfy new audit requirements to evaluating human oversight of automated decisions and addressing changes in AI functionality, vendor obligations and incident response.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

SB 54 Is In Effect: What California’s New Packaging Law Means For Your Business

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.
United StatesPrivacy
Wilson Elser Moskowitz Edelman & Dicker LLP
Wilson Elser Moskowitz Edelman & Dicker LLP
Article

California’s 2026 Legislative Session Wraps: A Wave Of Privacy And AI Bills Reaches The Governor, With Key Child Safety And AI Measures Signed Into Law

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?
United StatesPrivacy
Kelley Drye & Warren LLP
Kelley Drye & Warren LLP
Article

California's Fall 2026 Privacy Roundup: Expanded CCPA Deletion Rights And More

California Governor Gavin Newsom has signed several significant privacy bills that will reshape how businesses handle consumer data, including expanded deletion rights under the CCPA, shortened data broker response cycles, and sweeping new insurance sector privacy requirements. While one landmark bill banning the sale of sensitive personal information was vetoed, the approved legislation requires companies to update their deletion workflows...
United StatesPrivacy
McDermott Will & Schulte
McDermott Will & Schulte
Article

Eleventh Circuit Developments: Decisions On Florida And Georgia Social Media/Minor Laws And New Alabama Law

Legal risk intensifies for companies offering online interactive features to minors across Georgia, Florida, and Alabama as the Eleventh Circuit vacates preliminary injunctions against state social media laws. With Florida's HB 3 and Georgia's SB 351 now enforceable and Alabama's HB 161 set to take effect January 1, 2027, businesses face divergent compliance requirements including age verification, parental consent mechanisms, and account deletion protocols.
United StatesPrivacy
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

The Data Breach Brief: Week Of September 30th, 2026

Multiple organizations have recently disclosed significant data breaches affecting thousands of individuals, with compromised information ranging from basic contact details to highly sensitive medical records and financial data. The incidents span various sectors including healthcare, insurance, and professional services, raising questions about the scope of exposure and potential remedies for affected individuals.
United StatesPrivacy
Morgan & Morgan
Morgan & Morgan
Article

IEEPA Tariff Refunds: Critical Developments, Phase III Delays, And Action Steps For Importers

U.S. Customs and Border Protection has begun processing IEEPA tariff refunds through its CAPE system, but Phase III covering finally liquidated entries faces delays and requires court orders. With the Department of Justice appealing the universal refund order and class certification pending, importers with finally liquidated entries may need to file individual lawsuits at the Court of International Trade to preserve their claims before statutory deadlines expire.
United StatesInternational Law
Barnes & Thornburg LLP
Barnes & Thornburg LLP
Article

OFAC Broadens Cuba Sanctions And Restricts Payments And Travel

The U.S. Treasury Department's Office of Foreign Assets Control has implemented sweeping changes to Cuba sanctions, introducing a new regulatory framework that extends restrictions beyond U.S. persons to foreign entities and financial institutions. These measures eliminate key banking authorizations, expand transaction prohibitions to include intermediary payments, and significantly narrow travel permissions, creating new compliance challenges for businesses operating in or through Cuba-related channels.
United StatesGovernment, Public Sector
Barnes & Thornburg LLP
Barnes & Thornburg LLP
Article

California Passes AB-1883 Targeting AI Workplace Surveillance Of Employees’ Emotional State And Neural Data

On Aug. 30, AB-1883 received final legislative approval and now heads to California Governor Gavin Newsom for signature or veto. If enacted, AB-1883 would prohibit employers from using workplace surveillance tools that rely on artificial intelligence (AI) to recognize, infer, or predict an employee’s emotional state, or to collect “neural data.”
United StatesEmployment and HR
Barnes & Thornburg LLP
Barnes & Thornburg LLP
Article

Russia Sanctions And Tariffs: What Businesses Need To Know About The Graham Act

President Trump has signed the Lindsey O. Graham Sanctioning Russia and Iran Act of 2026, introducing sweeping new tariffs of up to 100% on countries purchasing Russian energy and up to 500% on Russian-origin goods. The legislation also codifies existing executive order sanctions into statute, requiring congressional action to lift restrictions and creating mandatory secondary sanctions on foreign financial institutions transacting with designated Russian banks. Companies face immediate compliance challenge
RussiaInternational Law
Barnes & Thornburg LLP
Barnes & Thornburg LLP
Article

Time To Update The Handbook And The Training Deck: Three New California Laws Affecting Employment Policies And Training

California Governor Newsom has signed three bills that will require California employers to revisit their written policies and their training programs. On the policy side, SB 1149 widens who counts as a “family member” for bereavement leave. On the training side, AB 1803 adds an anti-hate speech component to mandatory harassment prevention training starting Jan. 1, 2028.
United StatesEmployment and HR
Barnes & Thornburg LLP
Barnes & Thornburg LLP