The recently enacted 2025 Reconciliation law in its initial iteration had within it a 10 year moratorium on state regulation of artificial intelligence (AI). The provision was stripped out of the final law by an amendment proposed by Senator Marsha Blackburn (R. TN) who, at the time of the debate, decried the inability of the
Latest from Reed Smith LLP - Page 2
Navigating cyber risk
Reed Smith recently attended the Airmic Annual Conference 2025 in Liverpool as a Marketplace Partner and, in the wake of a series of high-profile cyberattacks on retailers in the first half of 2025, cyber risk emerged as a central theme throughout panel discussions and sessions at the conference. Stakeholders across government, cybersecurity and underwriting all
Colorado’s hesitation in pioneering A.I. Regulation mirrors similar hesitation nationwide
In the spring of 2024, the Colorado legislature was the first to pass a “comprehensive” artificial intelligence (“AI”) law, the Colorado Artificial Intelligence Act (“CAIA”). Since its passage, state leadership has waffled on whether CAIA strikes the right balance between protecting consumers while allowing businesses to innovate using AI. As of this writing, the only
Navigating global privacy and AI regulations: Key insights for multinational organizations
Multinational organizations are facing an increasingly complex landscape of global privacy and artificial intelligence (AI) regulations. Recent developments highlight the need for companies to stay informed about evolving legal requirements, particularly as governments introduce new frameworks to address data protection, AI governance, and cross-border data transfers. Organizations must proactively assess their compliance strategies, adapt internal
A recent bankruptcy case demonstrates the increasing risks- and expectations- around cyber incidents
Cyber incidents can pose a threat to any business. A recent bankruptcy case, In re Jerico Pictures, Inc., d/b/a National Public Data (“National Public Data”),[1] demonstrates that the growing recognition of the danger posed by cyber risks is also leading to greater expectations on companies to protect themselves from those risks, including through insurance.
Rescission of the AI Diffusion Rule: IP Impact
The U.S. Department of Commerce’s decision to rescind the AI Diffusion Rule, which had restricted the export of advanced AI technologies, marks a shift toward fewer regulatory barriers. While this may boost international collaboration and accelerate innovation, it also raises IP concerns.
Key impacts on intellectual property include:
- Increased global collaboration: More open sharing of
Key takeaways on AI governance from the IAPP Global Privacy Summit
AI was a hot topic at this year’s International Association of Privacy Professionals’ (“IAPP”) Global Privacy Summit, ranging from fine-tuning AI and algorithms with real-live data to best practices in AI governance. The IAPP’s Summit offered privacy professionals insights from policy makers, tech companies and start-ups, authors, and entrepreneurs.
As it relates to AI governance,
BIS plans to rescind Biden-era AI diffusion rule; imposes other controls on AI chips
On May 13, 2025, the Bureau of Industry and Security (BIS) announced its intent to rescind the Biden administration’s Framework for Artificial Intelligence Diffusion (AI Diffusion Rule) that is scheduled to go into effect on May 15. BIS will publish a Federal Register notice formalizing its decision. In the meantime, Under Secretary of Commerce for
European Data Protection Board guidance on safeguarding personal data in AI technologies
The European Data Protection Board (‘EDBP’) has published its 2024 annual report highlighting key milestones achieved throughout the year. Among these, the report includes reference to an opinion issued by the EDPB in December 2024 (the ‘Opinion’) which examines the use of personal data in AI models and the applicability of GDPR principles during the
The UK government’s AI growth agenda in 2025
In March 2025, the Information Commissioner’s Office (‘ICO’) announced a series of measures to support the UK government’s growth agenda while maintaining strong data protection standards. These measures include a commitment to introduce a statutory code of practice for businesses developing or deploying AI with a focus on data protection safeguards.
The above initiative