Most coverage of the Hugging Face incident is written either for security engineers or for people who enjoy being frightened. Here is what happened, how three regions responded, and what it actually changes for the companies I work with.
Read More
In 2018, working with a cybersecurity firm during GDPR enforcement, I watched organizations discover their compliance filings didn't reflect the organizational reality underneath them. The EU AI Act will produce the same split. High-risk obligations are now deferred to December 2, 2027 — and that runway is only useful if the work starts now.
Read More