NIST AI RMF

California is advancing privacy and AI legislation that establishes new regulatory requirements for AI governance frameworks, while vendor management practices are emerging as critical control points for third-party AI risk mitigation. Practitioners must update procurement governance and contractual controls to align with evolving state-level AI regulations.

• →California Legislature Advances Privacy and AI Bills with Website Tracking Limits: Organizations must assess compliance obligations under new California AI and privacy requirements and update governance frameworks to address state-specific regulatory mandates.
• →Vendor Management Contractual Controls for Third-Party AI Systems: Procurement teams need to negotiate AI-specific clauses and risk allocation terms in vendor agreements to ensure third-party AI systems meet organizational risk management standards.

Review and update vendor management policies and procurement templates today to incorporate AI risk controls and prepare for California's new privacy and AI regulatory requirements.