Patricia 💚💜💗🖤

🚨 How to draft an AI policy in late 2026? Here's my step-by-step guide, including rising concerns, new requirements, and why your company's AI policy is probably outdated: Until recently, a company’s AI policy was essentially an “acceptable AI use” document, containing items such as “do not paste confidential information or private data into public chatbots,” “check AI-generated outputs before using them,” and “do not use a new tool before asking the legal department.” It is now September 2026, and that is no longer enough. The AI ecosystem, along with the AI policy and regulatory environment, has changed. AI is now an operational layer, fully embedded in the corporate environment and the company’s core business, and companies deploy AI, AI agents, and multi-agent systems on a daily basis. At the same time, AI regulation has evolved, and companies must comply with new, enforceable legal requirements, as well as an ongoing flow of global standards and frameworks that have become mainstream and a core part of the AI governance stack. Today, an effective AI policy must achieve at least these three goals: - Establish the company’s approach to responsible AI adoption and how to implement it - Create a high-level system of risk governance and compliance controls - Protect the organization from rapidly evolving AI security threats An AI policy is a living document that must respond to organizational changes, compliance requirements, and technological developments. It’s a joint effort between legal, technical, and operational teams and, in my opinion, an excellent AI governance exercise for the whole organization. (As I have written before, the AI governance career is diverse, which is why in every cohort of my AI Governance Leadership Program there are leaders from various disciplines and industries.) With that in mind, I prepared a full guide with essential information for companies drafting or updating their AI policy in late 2026, covering the following topics: - Regulatory concerns - AI inventory - Risk tiers and controls - Human oversight and accountability - AI incident response - Logging - Agentic AI - Training - Updating - Items to be covered Let's get started: (...) 👉 CONTINUE reading my guide (and join my newsletter's 100,800+ subscribers) using the link below.

🚨 BREAKING: China recently released its AI Safety Governance Framework 3.0, and it's a MUST-READ amid the recent rise in AI safety incidents. Published in both Chinese and English, the framework addresses new trends in AI development and responds to new challenges in AI safety governance. Version 3.0 of the Framework follows the core approach of risk classification > technical response > comprehensive governance and is based on the following principles: - Be inclusive and prudent to ensure safety - Risk-oriented and agile governance - Integrating technology and management for coordinated response - Promoting openness and cooperation for joint governance and shared benefits - Ensuring trustworthy application and preventing loss of control Below are some of the recommended governance measures described in Framework 3.0 to address AI safety risks: - Improving top-level design of AI safety governance - Enhancing AI safety governance capacity - Establishing a flexible, dynamic, and controllable AI regulatory sandbox mechanism - Strengthening measures for AI safety management - Deepening consensus on AI safety governance Most companies are unprepared for the rising number of AI safety incidents, which are expected to get worse in the coming months and years. This is the time to review, update, and strengthen internal AI governance policies, risk assessments, and response mechanisms, especially those focused on safety. This is one of the most up-to-date and comprehensive frameworks on the topic, as it considers emerging AI risks, addresses governance and response mechanisms comprehensively, and also includes an agentic AI risk management framework (do not miss Appendix 2). Read alongside other developments, version 3.0 of this framework signals that China wants to position itself as a global leader in AI safety (a strategic position the U.S. is also interested in holding). I will keep you posted. 👉 Download the framework and join my newsletter's 100,700+ subscribers using the link below.

🚨 The UK has just published this 100-page report on human rights and AI regulation. Bookmark it below.

🚨 BREAKING: With 423 votes in favor, the European Parliament APPROVED the proposed amendments to the AI Act. Summary of the changes: 1. New deadlines - Obligations on high-risk AI systems will apply: > from 2 December 2027 for the high-risk AI systems listed on Annex III; > from 2 August 2028 for AI systems embedded as safety components and covered by EU sectoral legislation on safety and market surveillance (those listed on Annex I). - Obligations on AI-generated content labeling: > from 2 December 2026 2. Ban on nudifier apps - New ban on AI systems that generate child sexual abuse material or create images, videos, and audio depicting an identifiable person’s intimate parts, or sexually explicit activities, without their consent. - The prohibition will apply to providers and deployers and will start applying on 2 December 2026. 3. Additional changes: - Removal of overlapping requirements on AI for machinery products listed on Annex I; - A clearer definition of what qualifies as a “safety component”; - The possibility to process personal data where strictly necessary to detect and correct biases in both high-risk and non-high-risk AI systems (with proper safeguards); - The extension to small mid-cap enterprises (SMCs) of SME exemptions from certain rules; - Streamlined enforcement of certain general-purpose AI systems within the EU AI Office. *A reminder that these amendments still need to be formally adopted by the Council of the EU. - 👉 NEVER MISS my updates: join my newsletter's 96,800+ subscribers (link below)