Technology Law and Digital Law

A federal court suggests that merely providing a phone number to a caller may constitute express consent under the TCPA for robocalls, potentially opening the door for widespread automated calling practices in the GenAI era. The ruling in Smith v. Examworks addresses whether consent must specifically authorize robocalls or if general consent to be called is sufficient, with significant implications for telemarketing compliance.

Enterprise AI systems face mounting security risks as infostealer malware increasingly targets AI accounts, exposing conversation histories, API keys, and active sessions. Meanwhile, organizations struggle to scale AI pilots beyond proof-of-concept, with nearly half of enterprise AI projects failing to reach production. How are malicious actors exploiting AI infrastructure, and what operational challenges prevent successful AI implementation at scale?

Colorado's proposed AI rules transform abstract compliance obligations into concrete operational requirements for financial institutions and businesses deploying automated decision-making systems and customer-facing chatbots. The regulations specify exactly how lenders must explain loan denials, what conversational AI systems must disclose to users, and which documentation companies must maintain to satisfy the Attorney General's enforcement authority under both the Automated Decision-Making Technology Act