EU AI Act

Delaware's HB 380 amendments to the DPDPA introduce new privacy and AI law requirements that general counsel and compliance teams must integrate into governance frameworks, while the EU AI Act's Article 26 reveals significant gaps in third-party vendor risk management that many organizations have overlooked. Both developments require immediate updates to AI governance policies and vendor assessment protocols.

• →Delaware HB 380 DPDPA Amendments: Practitioners must update privacy and AI governance policies to comply with Delaware's new requirements, which carry outsized influence due to Delaware's prominence in corporate law.
• →EU AI Act Article 26 Third-Party Vendor Risk Management Gap: Organizations implementing EU AI Act compliance must expand vendor risk assessment programs to address previously unrecognized gaps in third-party AI tool governance.
• →Cross-Jurisdictional AI Governance Alignment: Practitioners managing multi-state or EU operations need to reconcile Delaware and EU requirements to avoid conflicting compliance obligations across jurisdictions.

Review and update vendor risk management programs and privacy policies today to address the Delaware HB 380 amendments and EU AI Act Article 26 compliance gaps.