When AI breaks things, the provider may be accountable for parts of compliance, depending on their role. The deployer is accountable for how it is used in their organisation. Regulators and stakeholders will not accept “the tool did it” as a defence, especially where transparency, oversight, and monitoring were expected.  Inside the company, Marketing Ops is rarely the legal owner of the risk, but it is often the operational owner of whether the business can prove it is acti

The proposed American Data Privacy and Protection Act (ADDPA) , now pending in the House of Representatives, would provide a...