What Your AI Knows About You

Published
Score
17

Why it matters

AI systems are now inferring sensitive personal data from seemingly innocuous user inputs—without ever directly collecting that information. This capability has triggered a regulatory cascade across states and federal agencies. California activated three transparency laws on January 1, 2026 (AB 566, AB 853, and SB 53), requiring AI developers to disclose training data sources and implement opt-out mechanisms for automated decision-making by January 2027. Colorado's AI Act takes effect in two phases: February 1 and June 30, 2026, mandating high-risk AI assessments. The EU's AI Act reaches full implementation in August 2026. Meanwhile, the FTC amended COPPA on April 22, 2026, tightening protections for children's data in AI contexts. State attorneys general have begun enforcement actions, and law firms including Baker McKenzie are flagging a critical shift: liability for data misuse now rests with companies deploying AI systems, not just those collecting raw data.

The precise trigger for the Wall Street Journal's April 12 headline remains unclear. No single enforcement action or incident announcement aligns with that publication date. Rather, the story appears to reflect the convergence of multiple 2026 compliance deadlines and the broader recognition that AI inference capabilities have outpaced existing privacy frameworks.

For practitioners, the immediate risk is vendor liability. Companies using third-party AI tools face exposure under state transparency laws, COPPA amendments, and emerging class-action litigation over algorithmic bias and data opacity. Compliance calendars should flag California's January 2027 opt-out deadline and ongoing EU consolidation. Audit your AI vendor contracts now—liability allocation language will determine who bears the cost of regulatory violations and breach remediation.

mail

Get notified about new Privacy developments

Primary sources. No fluff. Straight to your inbox.

See more entries tagged Privacy.

Also on LawSnap