AI GRC Consultant: 2026-09-25

1. New FPF Report Analyzes the Rise in Chatbot Legislation & What's Ahead

   Future of Privacy Forum, 2026-09-23. Read, 4 min.

   The Future of Privacy Forum released a report on US AI chatbot legislation, counting 124 chatbot-related bills introduced in 37 states in 2026 and 18 state chatbot-specific laws on the books. It finds that most new laws focus on disclosures, crisis protocols, and safeguards for minors rather than on how models are trained or tested.

   Why it matters for this role: For a client with a customer-facing chatbot in the US, start the state-law review with disclosures, crisis protocols, and protections for minors, which FPF finds most new laws address.

2. Only 8 Percent of Organizations Conduct Regular AI-Specific Response Exercises, ISACA Research Finds

   ISACA, 2026-09-22. Read, 7 min.

   ISACA's 2026 State of Cybersecurity survey of more than 1,800 cybersecurity professionals found that only 8 percent of organizations regularly conduct AI-specific incident response exercises and 64 percent have conducted none. Forty-eight percent of respondents said their organization has no AI incident playbooks or that they do not know whether it has them.

   Why it matters for this role: Ask clients whether they have AI incident playbooks and have exercised them, since nearly half of ISACA's respondents said they lack them or do not know.

AI GRC Consultant