90% of privacy programs expanded scope in 2025 to support AI governance. The challenge: compliance playbooks built for GDPR and CCPA weren't designed for how AI risk actually works today. Layer hundreds of new AI laws on top of the existing U.S. privacy patchwork, and the compliance burden multiplies fast.
DataGrail's 2026 Privacy and AI Trends Report found that over 60% of businesses marketing AI capabilities don’t disclose AI subprocessors in their legal documentation. Careful risk assessments go stale as vendors rapidly expand their AI capabilities. Nearly a third of AI products that disclose capabilities at all acknowledge higher risk practices like processing sensitive data or enabling automated decision making. Traditional privacy management wasn’t built for this, and closing the gap takes more than updating policy and training slides.
We'll cover:
- What you need to know about the AI risk already in your tech stack and how it affects your privacy posture
- How to build effective training and policy that actually produces safer employee behavior
- Where to audit your privacy program to meet the demands of AI-era compliance
Speakers
Jodi Daniels
CEO & Privacy Consultant, Red Clover Advisors
Steve Gentry
Fractional CISO & CPO, Cognate Cyber
Jordan Tucker
Host, Vice President, DataGrail