- AI Governance and Compliance Insights for Small and Mid Size Businesses.

SaaS and Technology

The EU AI Act Has Its First Harmonised Standard. EN 18286 Supports Article 17. ISO 42001 Alone Gives No Presumption.
ByRoss J. October 22, 2026October 22, 2026

Executive Summary On October 14, 2026, Commission Implementing Decision (EU) 2026/2274 published the reference of EN 18286:2026 in the Official Journal. It is the first cited harmonised standard supporting the EU AI Act, and it addresses the quality management system that Article 17 requires of providers of high risk AI systems. From that date, conformity…

Read More The EU AI Act Has Its First Harmonised Standard. EN 18286 Supports Article 17. ISO 42001 Alone Gives No Presumption.
Staffing and HR

Connecticut Now Says Expressly That AI Is No Defense to Employment Discrimination. Employers With One Employee Can Be Covered. Written Notices Follow in October 2027.
ByRoss J. October 22, 2026October 22, 2026

Executive Summary Since October 1, 2026, Connecticut law says expressly that an employer’s use of automated employment related decision technology “shall not be a defense” against a discrimination complaint under the Connecticut Fair Employment Practices Act. The amendment clarifies that pointing at the tool or vendor will not answer an otherwise proven claim; it does…

Read More Connecticut Now Says Expressly That AI Is No Defense to Employment Discrimination. Employers With One Employee Can Be Covered. Written Notices Follow in October 2027.
Financial Services

Connecticut Now Expects a Written AI Governance Plan From Every Bank and Licensee It Examines. State Examiners Got Their AI Playbook Six Days Earlier.
ByRoss J. October 19, 2026October 19, 2026

Executive Summary On September 22, 2026, the Connecticut Department of Banking told every Connecticut chartered institution and every entity it licenses or regulates that it expects an AI Governance Framework and a Written AI Governance Plan addressing seven named components, proportionate to each entity’s use of qualifying AI Systems, and that it plans to review…

Read More Connecticut Now Expects a Written AI Governance Plan From Every Bank and Licensee It Examines. State Examiners Got Their AI Playbook Six Days Earlier.
Healthcare

California’s New Clinical AI Laws Start January 1. A Solo Physician’s Office Is Covered. Here Is What Your Practice Must Change.
ByRoss J. October 15, 2026October 15, 2026

Executive Summary Governor Newsom signed AB 1979 (Chapter 854) and SB 503 (Chapter 857) on September 30, 2026. Both take effect January 1, 2027, and both expressly cover a physician’s office, defined as the office of a physician in solo practice. There is no size, revenue or patient volume threshold in either law. AB 1979…

Read More California’s New Clinical AI Laws Start January 1. A Solo Physician’s Office Is Covered. Here Is What Your Practice Must Change.
State and Federal Law

California Signed More Than 20 AI Laws by September 30. One Erased a One Million User Threshold the Day It Was Signed. Here Is Which Ones Reach a Small Business.
ByRoss J. October 12, 2026October 12, 2026

Executive Summary September 30, 2026 was the deadline for Governor Newsom to act on the bills the Legislature passed before September 1. Law firm tallies count more than 20 AI related laws enacted in the 2026 session, with totals varying by whether adjacent privacy and surveillance measures are included. Most take effect January 1, 2027,…

Read More California Signed More Than 20 AI Laws by September 30. One Erased a One Million User Threshold the Day It Was Signed. Here Is Which Ones Reach a Small Business.
Federal Contractors

GSA’s AI Contract Clause Takes Effect October 19. Internal and Incidental AI Use Can Fall Outside It. Small Business Status Does Not.
ByRoss J. October 8, 2026October 8, 2026

Executive Summary GSA has issued a revised GSAR 552.239-7001, Basic Safeguarding of Data within Large Language Model Artificial Intelligence Systems, through a class deviation; formal notice and comment rulemaking is still to follow. GSA’s deviation table lists Part 552 as signed July 16, 2026 and effective October 19, 2026, and contracting officers may use it…

Read More GSA’s AI Contract Clause Takes Effect October 19. Internal and Incidental AI Use Can Fall Outside It. Small Business Status Does Not.
Manufacturing

The EU Started a 24 Hour Clock on September 11. If You Ship Connected or AI Enabled Equipment to Europe, It Covers Machines You Already Sold.
ByRoss J. October 7, 2026October 7, 2026

Executive Summary Since September 11, 2026, Article 14 of the EU Cyber Resilience Act requires manufacturers of connected hardware and software sold in the EU to report actively exploited vulnerabilities and severe security incidents. The deadlines are an early warning within 24 hours, a fuller notification within 72 hours, and a final report later. Location…

Read More The EU Started a 24 Hour Clock on September 11. If You Ship Connected or AI Enabled Equipment to Europe, It Covers Machines You Already Sold.
Nonprofits

Delaware Cut Its Privacy Threshold to 10,000 People. Nonprofits Get No General Exemption. Here Is What Changes January 1 for AI on Donor Data.
ByRoss J. October 7, 2026October 7, 2026

Executive Summary On January 1, 2027, Delaware House Bill 380 lowers the Delaware Personal Data Privacy Act general threshold from 35,000 to 10,000 Delaware consumers. Delaware gives nonprofits no general exemption. Organizations that do business in Delaware or target its residents should test their 2026 processing, applicable exclusions, any data sales and any lists acquired…

Read More Delaware Cut Its Privacy Threshold to 10,000 People. Nonprofits Get No General Exemption. Here Is What Changes January 1 for AI on Donor Data.
Marketing Agencies

Two Small Marketing Firms Paid $25,000 Each Over AI Claims They Helped Market. What the FTC’s Active Listening Orders Mean for Your Agency.
ByRoss J. September 28, 2026September 28, 2026

Executive Summary On August 27, 2026, the FTC finalized orders against Cox Media Group and two small marketing firms over an “Active Listening” service marketed as AI that targeted ads from conversations overheard by smart devices. The FTC alleged the service used no voice data at all. Cox Media Group pays $880,000, and MindSift LLC…

Read More Two Small Marketing Firms Paid $25,000 Each Over AI Claims They Helped Market. What the FTC’s Active Listening Orders Mean for Your Agency.
SaaS and Technology

OpenAI Reported One of Three Agent Incidents to Brussels. If Your SaaS Product Runs on a Frontier API, Here Is What Actually Flows Down to You.
ByRoss J. September 21, 2026September 21, 2026

Executive Summary Between July 21 and September 18, 2026, three separate episodes of OpenAI agents acting outside their sandbox became public: the Hugging Face intrusion (disclosed July 21), the DseWiki message board (about 18,000 posts, reported by outside researchers September 4) and the RubyGems episode (May 2026, reported by researchers in September). According to a…

Read More OpenAI Reported One of Three Agent Incidents to Brussels. If Your SaaS Product Runs on a Frontier API, Here Is What Actually Flows Down to You.

The EU AI Act Has Its First Harmonised Standard. EN 18286 Supports Article 17. ISO 42001 Alone Gives No Presumption.

Connecticut Now Says Expressly That AI Is No Defense to Employment Discrimination. Employers With One Employee Can Be Covered. Written Notices Follow in October 2027.

Connecticut Now Expects a Written AI Governance Plan From Every Bank and Licensee It Examines. State Examiners Got Their AI Playbook Six Days Earlier.

California’s New Clinical AI Laws Start January 1. A Solo Physician’s Office Is Covered. Here Is What Your Practice Must Change.

California Signed More Than 20 AI Laws by September 30. One Erased a One Million User Threshold the Day It Was Signed. Here Is Which Ones Reach a Small Business.

GSA’s AI Contract Clause Takes Effect October 19. Internal and Incidental AI Use Can Fall Outside It. Small Business Status Does Not.

The EU Started a 24 Hour Clock on September 11. If You Ship Connected or AI Enabled Equipment to Europe, It Covers Machines You Already Sold.

Delaware Cut Its Privacy Threshold to 10,000 People. Nonprofits Get No General Exemption. Here Is What Changes January 1 for AI on Donor Data.

Two Small Marketing Firms Paid $25,000 Each Over AI Claims They Helped Market. What the FTC’s Active Listening Orders Mean for Your Agency.

OpenAI Reported One of Three Agent Incidents to Brussels. If Your SaaS Product Runs on a Frontier API, Here Is What Actually Flows Down to You.

Connect:

Hello@dynamiccomply.com

Privacy Policy

Terms Of Use