In-House Counsel

EU AI Act Compliance for US Companies: What In-House Counsel Must Do Now

The EU AI Act has extraterritorial reach under Article 2, meaning any US company whose AI outputs are used in the EU must comply with prohibited practices, GPAI transparency, conformity assessments, CE marking, and penalties before the deadlines hit.

In-House Counsel

Colorado's AI Act Evolved: What SB 26-189 Requires From Developers and Deployers Before the 2027 Deadline

Colorado repealed SB 24-205 and replaced it with SB 26-189, a new ADMT framework effective January 1, 2027. Here's what developers and deployers must do now to prepare for AG enforcement.

In-House Counsel

SEC AI Disclosures in 10-K Filings: A 2026 Compliance Guide for In-House Counsel

A practical compliance guide for in-house counsel on SEC AI disclosure requirements in 10-K and 10-Q filings—covering Item 1 business descriptions, Item 1A risk factors, MD&A, SEC AI-washing enforcement actions, comment letter trends, and the Caremark board oversight intersection.

In-House Counsel

AI Vendor Contract Requirements: A 2026 Due Diligence Checklist for In-House Counsel

A practical due diligence checklist for GCs contracting with AI vendors in 2026: IP indemnification gaps, training data provenance, model-update notification rights, DPA terms for AI training, liability allocation, and TRAIGA/EU AI Act deployer obligations.

In-House Counsel

Board Oversight of AI and Cybersecurity Risk: What Caremark and McDonald's Mean for GCs

After McDonald's and Marchand, Delaware boards face personal liability for failing to oversee AI and cybersecurity risk. Here's how GCs should structure board-level reporting to satisfy Caremark and SEC obligations.

Founders

Does Your Startup Have a National Security Data Problem? The DSP Compliance Checklist Founders Are Missing

Your privacy program does not cover the DOJ Data Security Program. Since October 2025, the DSP and PADFAA restrict which vendors, investors, and engineers can access your users' data based on ties to Countries of Concern. Here is how to find your exposure.

In-House Counsel

M&A Due Diligence for AI Products: A Technical and Legal Checklist for Acquirers

AI targets require a different diligence playbook than standard tech M&A. Here are the six risk buckets, red flags that should reprice or kill a deal, and how to structure AI-specific reps and warranties.

In-House Counsel

IP Ownership of AI-Generated Work Product: What In-House Counsel Should Establish Now

Your employees are using AI tools to create deliverables, contracts, and analysis — but AI-generated work product may not be copyrightable. Here's what in-house counsel should establish now to protect the company's IP position.

In-House Counsel

Building an AI Use Policy: What General Counsel Needs to Cover in 2026

Only 37% of organizations have a formal AI governance policy despite 69% suspecting unauthorized employee AI use. Here's the seven components every AI use policy needs, plus how to fold in TRAIGA and EU AI Act obligations.

Founders

The State Privacy Law Patchwork in 2026: Which Laws Apply to Your App and What They Require

Twenty states now have active privacy laws. This guide maps which ones apply to your app based on your user base, explains the California/Texas/other enforcement tiers, and covers the five elements every privacy notice must include.

Founders

Non-Compete Agreements After the FTC Rule Litigation: What Texas Startups Can Enforce

The FTC’s sweeping non-compete ban is on hold after a Texas federal court enjoined it. While the legal battle continues, Texas has its own enforceable framework—and most startup non-competes still fail it. Here’s what the law actually requires.

Founders

DAO Liability: Are Members Personally Exposed? Lessons from the CFTC's Ooki DAO Enforcement

The CFTC's 2023 judgment against Ooki DAO established that decentralized structures don't prevent regulatory enforcement—and three courts have since confirmed that governance token holders face unlimited personal liability as general partners. Here's what that means for your protocol.

Founders

Subscription Billing Compliance: ROSCA, the FTC Click-to-Cancel Rule, and What DTC Brands Must Do Now

The FTC's 2024 click-to-cancel rule was vacated by the Eighth Circuit in July 2025 — but ROSCA, Section 5, and state automatic-renewal laws remain fully operative. This guide covers what DTC brands and subscription operators need to know, from California's AB 2863 to the $100M Vonage settlement.

In-House Counsel

The EU AI Act's Big Deadline Just Moved to 2027 — What US Founders and In-House Counsel Should Actually Do Now

The EU AI Act's high-risk deadline slipped from August 2026 to December 2027 under the Digital Omnibus. But several obligations did NOT move, and US companies are squarely in scope. Here's what changed, what didn't, and what to do with the runway.

Founders

Texas's AI Law Is Now in Force: What TRAIGA Actually Requires of Founders and In-House Counsel

Texas's Responsible AI Governance Act (HB 149) has been in force since January 1, 2026 — and it is far narrower than the bill it grew from. Here is who TRAIGA reaches, what its intent-based prohibitions mean, how the Texas AG enforces it, and the NIST safe harbor to build toward.

Law Firms

Can You Prove That Image Is Real? AI Verification Tools Lawyers Need to Understand

OpenAI just shipped a tool that checks whether an image was AI-generated. It is one of many — and for lawyers, the gap between what these provenance checkers actually prove and what a courtroom requires is where the real risk lives.

Founders

Earnouts, Bad Faith, and a Chatbot: What Fortis Advisors v. Krafton Means for Founders Who Sell

A Delaware court ordered Krafton to reinstate the ousted Subnautica 2 CEO after its own chief executive used ChatGPT to engineer a 'takeover' and dodge a $250M earnout. Here is what founders who sell their companies should take from the ruling.

AI Law

AI-Washing Litigation in 2026: What Public-Company GCs Need to Know

On Jan 14, 2025, the SEC charged Presto Automation with the first public-company AI-washing action. Four enforcement surfaces — SEC, plaintiffs' bar, FTC, and EU AI Act — now scrutinize every public AI claim. The GC's pre-clearance workstream is the answer.

AI Law

Drafting AI Disclosures for the 10-K: Materiality Without Hype

Two-front pressure: 92 SEC comments / 56 companies push toward disclosure; AI-washing enforcement (Presto) punishes overstatement. Six-element Item 1A architecture, four-step pre-clearance workflow, integrated documentary spine.

AI Law

The Marchand Test for AI Governance: What Boards Owe Their Shareholders

Marchand creates heightened-scrutiny zone for mission-critical risk. Glass Lewis 2026 + CalPERS treat AI oversight gaps as director recall signals after material incidents. Six-artifact board record satisfies Marchand, TRAIGA, and Glass Lewis.

AI Law

After McDonald's: Why Chief AI Officers Are Now Personally Liable for Oversight Failures

In re McDonald's (Del. Ch. 2023) extended the Caremark oversight duty to corporate officers within their domain. With 60% of enterprises naming a CAIO, the named officer faces a personal-stakes posture that DGCL § 102(b)(7) does not cover.

Startup Central

Cap Tables & Governance for AI-Enabled Digital Health Startups: Reduce Telehealth Fraud & Compliance Risk

This practical checklist is built for AI-enabled digital health founders, finance/ops leaders, in-house counsel, and seed/Series A investors operating…

Startup Central

Cap Table & Legal Strategies for Startups Pursuing Federal Funding & Government Contracts

A practical guide for founders and in-house counsel to stay diligence-ready, bid-ready, and resilient when rules (and administrations) change

Intellectual Property & Branding

Web-Scraping Limits, State AI Transparency & Hiring Laws, and Federal AI Policy: How They Change Fair-Use Risk for Training Generative Models

This is a practical guide/checklist for AI founders, product leaders, in-house counsel, and ML teams building or fine-tuning generative models.

Policy, Compliance & Cybersecurity

LLM Feature Governance for Law Firms: Embeddings, RAG, Memory & Vendor Controls

Who this is for: managing partners, firm IT/security, in-house GC/privacy leaders, and legal-tech product teams building RAG, embeddings, and "memory"…