Issue #55 • October 20, 2026 • 1 min read

Would your AI vendor tell you?

The White House says AI incident reporting is not optional. It does not specify when affected customers must be notified.

A sealed envelope lies unopened in a beam of orange light on a dark marble corridor floor, beside an open door and an empty frame, with the Capitol dome at dusk through a window.

The statement cites no law, sets no deadline beyond "immediately," and does not define an incident. The statement asks for transparency to "the entities involved and the public." It does not say whether a customer whose account was involved counts, or how fast that customer hears. Until a rule spells that out, your contract and any law that already covers your data are what you can point to. The full issue is on Substack.

Policy Read the full issue on Substack →

Would your AI vendor tell you?

Don't miss the next one.