United States: Data Protection

Organizations engaging AI vendors must conduct structured due diligence across data inventory, model governance, security programs, and subcontractor ecosystems before negotiating contract terms. This comprehensive pre-contract assessment maps vendor capabilities and risks to inform the specific protections, warranties, and operational controls that should be embedded in AI vendor agreements.

The FTC's settlement with OkCupid reveals critical lessons about data privacy compliance when companies share user information with AI partners. What happens when a dating app's privacy policy promises one thing but actual...

New York's Electronic Wills Act, signed into law in December 2025 and effective December 2027, will permit digital signatures and remote witnessing for wills.