In 2026, many companies are using AI to identify opportunities, model risks, summarize diligence, compare precedents, stress-test assumptions, and prepare decision memos in days rather than weeks. But if the final step before action is “send it to outside counsel and wait,” then some of the benefits of speed that they have achieved through their use of AI may be…

Last November, we published a blog post setting out our definitions of common AI terms. AI has continued to evolve rapidly since then. This update replaces that post and incorporates newer terminology, including “AI Agent,” “Agentic AI,” and “Harness.” AI governance is hard enough without the added difficulty of assessing risks absent a common understanding of terms like “AI system.”…

Business email compromise (“BEC”) attacks are one of the most significant cyber threats facing companies today, and the latest federal data show that the problem is intensifying. In its 2025 Internet Crime Report, the FBI’s Internet Crime Complaint Center (“IC3”) reported that BEC alone accounted for 24,768 complaints and $3.047 billion in reported losses and was second only to investment…

From 19 June 2026, businesses in the UK are subject to new statutory data protection complaints handling requirements, intended to give individuals a clearer route for raising data protection complaints directly with businesses before escalating matters to the Information Commissioner’s Office (“ICO”). Although the new rules are unlikely to require significant operational changes for most businesses, particularly those that already…

On June 2, 2026, President Trump issued an executive order (the “Order”) on artificial intelligence innovation and cybersecurity. The Order focuses on the cyber risks and defensive potential of advanced frontier AI models, including their ability to accelerate both malicious vulnerability discovery and cyber defense. Although directed primarily to federal agencies, the Order offers important signals for AI developers, critical…