The European Commission has opened the floor to anyone with a stake in the digital economy (from startups to tech giants, academics to everyday consumers) to weigh in on how well the Digital Markets Act (DMA) is doing its job. The law, designed to keep the biggest platforms in check and give smaller players a fighting chance, is now under review. And this time, artificial intelligence is front and center.
The Federal Trade Commission (FTC) has taken legal action against Air AI Technologies, a Delaware-based company accused of deceiving small businesses and entrepreneurs with false promises of rapid earnings and ironclad refund guarantees. According to the complaint, many customers lost significant sums of money, some as much as $250,000, after buying into Air AI’s business coaching programs, access cards, and reseller licenses.
Generative AI may be the tech world’s shiny new engine, but as it powers everything from government chatbots to healthcare diagnostics, it has become appararent that these models eat data for breakfast, and a lot of that data is personal. On August 6, 2025, South Korea’s Personal Information Protection Commission (PIPC) decided it was time to lay down the law, or at least a roadmap, by releasing its first Guidelines on Personal Data Processing for Generative AI.
The Reserve Bank of India (RBI) has thrown open the conversation on how artificial intelligence should shape the future of Indian finance and, importantly, how it shouldn’t.
In the latest piece from Norman Marks, the veteran governance, risk, and audit thought leader takes a bold leap into the near future, imagining how AI could fundamentally reshape decision-making, risk management, and the role of internal audit. Through a vivid crystal-ball scenario, Marks explores what happens when AI becomes a trusted partner for executives, operations, and assurance functions alike.
The European Insurance and Occupational Pensions Authority (EIOPA) has published a sweeping Opinion on the governance and risk management of artificial intelligence (AI) systems in the insurance sector, offering fresh clarity to national supervisors navigating the intersection of sectoral regulation and the EU AI Act.
The future of GRC is not simply digital, it’s decisively autonomous. It’s not just about processing power or clever dashboards. It’s about cognitive capability woven into the operational fabric of the organization—fluid, contextual, and self-directed. It’s orchestrated intelligence with agency.