Categories
Hill Country Authors

Hill Country Authors Podcast – Exploring the Creative Process with Author and Screenwriter Todd Rupe

Welcome to a new season of the award-winning Hill Country Authors Podcast, sponsored by Stoney Creek Publishing. In this podcast, Hill Country resident Tom Fox visits with authors who live in and write about the Texas Hill Country. In this episode, Tom visits with Todd Rupe, an author and screenwriter who shares his journey from writing poems and songs in middle school to penning his first novel and screenplay.

The conversation starts with Tom and Todd meeting at the world premiere of Sherlock Holmes: Mare of the Night. Todd discusses his book, ‘Task Force Titan,’ a coming-of-age story focused on characters with unique abilities, and shares insights into his creative process, which involves visualizing scenes and characters in his mind. Todd also touches on his screenplay, a psychological thriller with horror elements, highlighting the differences in writing methods for novels versus screenplays. His story is of perseverance, driven by a passion for creativity and a determination to pursue his dreams.

Key highlights:

  • Discussing ‘Task Force Titan’
  • Character Development and Creative Process
  • Todd’s Writing Journey
  • Transition to Screenwriting
  • San Antonio’s Creative Scene
  • Advice for Aspiring Writers

Resources:

Todd Rupe in Facebook

Nancy Huffman Fine Art

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Daily Compliance News

Daily Compliance News: April 10, 2025, The Dark Money Corruption Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen to the Daily Compliance News—all from the Compliance Podcast Network. Each day, we consider four stories from the business world: compliance, ethics, risk management, leadership, or general interest for the compliance professional.

Top stories include:

  • DOJ wipes out crypto enforcement. (WSJ)
  • HBO does on dark money corruption in Ohio.  (Columbus Dispatch)
  • Companies ‘decry’ Trump going after law firms. (Reuters)
  • Meta whistleblower says the company aided China in the AI race. (Bloomberg)
Categories
Life with GDPR

Life With GDPR: Episode 113 – AI in Recruitment: Navigating GDPR Compliance and Challenges

Tom Fox and Jonathan Armstrong, renowned cybersecurity experts, co-host the award-winning Life with GDPR. This episode explores the complex intersection of AI and recruitment, focusing on compliance challenges under GDPR and potential risks.

Jonathan highlights that AI is often more prevalent in recruitment processes than many compliance officers realize, often through third-party vendors. He discusses the regulatory landscape in the UK and EU, sharing insights on recent cases related to automated decision-making and the transparency required for such systems. Jonathan offers a seven-point plan for organizations that use or are considering using AI in recruitment, covering provider selection, due diligence, transparency obligations, and mechanisms for handling data subject requests. The conversation underscores the need for proactive engagement between data protection officers, compliance teams, and recruiters to ensure that AI tools are used responsibly and transparently.

Key takeaways:

  • AI in Recruitment: An Overview
  • Legal and Ethical Concerns
  • Transparency and Fairness in AI Decisions
  • Practical Steps for Companies
  • Future of AI in Recruitment

Resources:

Connect with Tom Fox

Connect with Jonathan Armstrong

Life with GDPR was recently honored as a Top Data Security Podcast.

Categories
Compliance Tip of the Day

Compliance Tip of the Day – Data Analytics – The Foundational Work

Welcome to “Compliance Tip of the Day,” the podcast where we bring you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, we aim to provide bite-sized, actionable tips to help you stay on top of your compliance game. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

Compliance professionals often gravitate toward the cutting-edge features of data analytics. However, the equally critical foundational work required beneath these capabilities must be performed.

Categories
Blog

A Strategic AI Playbook for Compliance Professionals

Artificial intelligence (AI) isn’t just knocking on our doors; it is already here, shaking up traditional processes, reshaping business operations, and redefining compliance. Yet, many organizations still find themselves stuck between tentative experimentation and strategic implementation, uncertain about how to move confidently forward. This shift is especially critical for the compliance professional: AI carries unprecedented opportunities but equally significant risks. Compliance teams must become integral in guiding organizations through this seismic change. Today, I want to explore the recent MIT Sloan article, “Leading the AI-driven Organization,” by Beth Stackpole. I will apply your prescriptions for business leaders to Chief Compliance Officers (CCOs) and other compliance leaders.

AI’s Strategic Potential and the Compliance Agenda

First, understanding the overarching message from MIT Sloan’s perspective is essential: effective AI implementation is not just a tech or business initiative. Instead, it should be seen as a comprehensive compliance strategy. Senior lecturer Paul McDonagh-Smith emphasizes the necessity of aligning AI projects directly with organizational priorities, data strategy, and employee skill sets. He warns of the gap between numerous AI experiments and cohesive, mature strategy, highlighting the urgent need for strategic alignment​.

For compliance officers, this means more than simply checking regulatory boxes. Compliance must be front and center, deeply integrated into AI strategies from the inception. The author advises compliance leaders to start by articulating how AI technologies can address specific compliance challenges and business strategies. Without this direct linkage, AI can become a distracting, costly investment rather than a value driver.

AI-Readiness: Data Quality and Governance

AI-driven compliance programs are only as strong as the data they use. Data integrity, accuracy, and governance are pillars of responsible AI applications. McDonagh-Smith poses a key question: “Is your organization’s data AI-ready?” Compliance teams must lead the charge to ensure the organization’s data is comprehensive, reliable, and managed adequately with stringent governance standards​.

Compliance professionals should champion initiatives that elevate data quality and establish rigorous governance frameworks. This is essential for operational success and regulatory compliance, particularly as privacy laws and data regulations rapidly evolve. For example, proactive data cleansing and structured data governance initiatives can preempt issues that AI might magnify, such as inadvertent biases or privacy violations.

Building AI Competency and Culture

One critical insight revolves around the skill readiness and cultural alignment necessary for AI adoption. Employees’ AI maturity levels directly affect the success of an AI strategy. Leaders must assess their teams’ current competencies, identify skill gaps, and strategically invest in training programs to build technical AI capabilities​.

For compliance leaders, this step is doubly significant. Your team needs proficiency in AI technology and an understanding of AI’s regulatory implications. Upskilling compliance professionals in data analysis, AI ethical principles, and evolving regulatory landscapes will ensure they can effectively govern the technology’s use within the enterprise.

Moreover, AI has profound cultural implications. A compliance-aware culture needs to evolve, fostering collaboration, transparency, and accountability. The author underscores the importance of creating silo-busting teams and encouraging an environment where experimentation and failure are permissible. Within compliance, this means promoting a culture of open discussion about AI risks, encouraging cross-functional collaboration, and integrating compliance considerations early in AI development.

The ‘Fast and Slow’ AI Approach

Drawing on the groundbreaking work of Nobel Prize-winning economist Daniel Kahneman, the author recommends that organizations adopt a dual-speed approach to AI strategy. Compliance programs should embrace ‘thinking fast and slow,’ where rapid experiments and quick wins coexist with careful, analytical, long-term planning​.

This approach is particularly apt from a compliance standpoint. Quick, iterative AI pilot programs can inform more strategic, enterprise-wide compliance frameworks. Compliance teams must balance agility and strategic vision, capturing and analyzing insights from pilots to inform comprehensive compliance structures capable of effectively managing AI-related risks.

Embrace Experimentation Responsibly

Experimentation is crucial, but compliance must ensure it’s done responsibly. As organizations increasingly rely on AI, enterprise risk multiplies. The author cautions that organizations must have a clear view of AI’s potential for promise and peril. Companies must adopt strong ethical frameworks, accountability mechanisms, and proactive risk mitigation strategies to ensure responsible AI use. These safeguards protect against risks like reputational harm, privacy infractions, or the proliferation of biased or incorrect information​.

Compliance professionals have an essential role in designing and maintaining these frameworks. They must act as vigilant watchdogs, ensuring the enterprise remains alert to ethical considerations and risk mitigation strategies at every step of AI implementation.

Positioning Compliance as Strategic AI Partners

Compliance teams are uniquely positioned to guide organizations through AI’s transformative landscape. The insights from this piece illuminate the tactical requirements and the strategic mindset compliance leaders need to cultivate. This is not merely about reacting to AI-driven changes; it is about proactively shaping an ethical, sustainable future where compliance is integrated at every juncture of AI’s adoption and development.

Compliance professionals must boldly step into roles as strategic AI partners, equipped with clarity of purpose, sophisticated data governance strategies, robust training programs, and rigorous ethical frameworks. In doing so, compliance safeguards the enterprise and amplifies AI’s potential to deliver real, sustainable value.

As compliance evangelists, we are privileged to lead these conversations, building a culture of responsible, strategic innovation that aligns business priorities with compliance excellence. AI isn’t merely a wave to ride but a journey to lead.

It is time for compliance to embrace this challenge and set the standard for AI-driven excellence in the corporate world.

Categories
Red Flags Rising

Red Flags Rising: S01 E05 – The Knowledge “Glass Onion” for U.S. Export Controls

Mike & Brent update listeners on the America First Trade Policy Section 4(c) Report Executive Summary (01:05) before previewing their forthcoming “Glass Onion” article in WorldECR magazine about the various layers of the “knowledge” standard under the U.S. Export Administration Regulations (03:18), including “actual knowledge” (07:23), “reason to know” (08:44), and “awareness of a high probability” (09:39). Mike & Brent then discuss relevant guidance from the U.S. Bureau of Industry & Security (12:44), parallels to U.S. Foreign Corrupt Practices Act enforcement (13:30), how the “high probability” standard is becoming the new national security enforcement paradigm (14:56), and key takeaways for trade compliance professionals (16:49) before wrapping up with yet another edition of Brent Carlson’s “Managing Up” segment (19:07).

Mike & Brent’s new “Glass Onion” article (subscription required): [link forthcoming!]

Resources:

Brent LinkedIn

Mike LinkedIn

Mike & Brent’s “Fresh Looks” Series

Categories
The Hill Country Podcast

The Hill Country Podcast – Inside the Music and Creative Process: Marathon Highway’s Journey

Welcome to the award-winning The Hill Country Podcast. The Texas Hill Country is one of the most beautiful places on earth. In this podcast, Hill Country resident Tom Fox visits with the people and organizations that make this the most unique area of Texas. In this episode, Andrew Gay steps in for Tom Fox and welcomes Rod McGehee and Reggie Knowles of the newly formed band Marathon Highway.

They discuss the band’s formation highlights, their dedication to creating original music, and how each member’s unique musical background contributes to their collective sound. Rod and Reggie share insights into their personal music journeys, songwriting processes, and the communal effort involved in bringing their music to life. They emphasize music’s emotional impact and universal language, drawing parallels to other art forms like painting. The conversation concludes with details about their upcoming performance and how they hope to engage the local arts community through their music.

Resources:

  • Formation of Marathon Highway
  • Musical Backgrounds and Band Dynamics
  • Songwriting and Creative Process
  • Music as an Emotional and Intellectual Art
  • Upcoming Gigs and Future Plans

Other Hill Country Network Podcasts

Hill Country Authors Podcast

Hill Country Artists Podcast

Texas Hill Country Podcast Network

Artwork

Nancy Huffman Fine Art

Categories
Compliance Into the Weeds

Compliance into the Weeds: Unsexy Keys to Data Analytics for Compliance Programs

The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to explore a subject more fully. Are you looking for some hard-hitting insights on compliance? Look no further than Compliance into the Weeds! In this Compliance into the Weeds episode, Tom Fox and Matt Kelly take a deep dive into the critical yet often overlooked aspects of data analytics.

They discuss Matt’s recent blog post on the ‘Unsexy Keys to Data Analytics,’ emphasizing the importance of foundational infrastructure over flashy visualizations. The conversation covers the need for robust data validation, the cooperation between compliance, business units, and IT departments, and the challenges faced by compliance officers in smaller companies. Highlights include real-world examples, the role of data governance, and how to align compliance risk management with corporate objectives amid ever-changing business landscapes.

Key highlights:

  • The Importance of Data Infrastructure
  • Compliance vs. Enterprise Data Analytics
  • Collaboration Across Departments
  • Data Governance and Change Management
  • Aligning Compliance with Corporate Risk Management

Resources:

Matt in Radical Compliance

Tom

Instagram

Facebook

YouTube

Twitter

LinkedIn

Compliance into the Weeds was recently honored as one of the Top 25 Regulatory Compliance Podcast.

Categories
Daily Compliance News

Daily Compliance News: April 9, 2025, The Corruption at the DOJ Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen to the Daily Compliance News—all from the Compliance Podcast Network. Each day, we consider four stories from the business world: compliance, ethics, risk management, leadership, or general interest for the compliance professional.

Top stories include:

  • Wall Street bursts over the stupidity of Trump tariffs. (NYT)
  • The fired DOJ lawyer accused the current DOJ leadership of corruption. (AP)
  • Paul Atkins for SEC chair advances in Senate. (Reuters)
  • Hackers have spied on OCC for over a year, undetected. (Bloomberg)
Categories
Blog

The Role of Compliance in Auditing AI

As compliance professionals, our roles evolve constantly, shaped by new technologies and emerging risks. One of the most significant developments in recent years has been the rapid growth of artificial intelligence (AI) and machine learning systems in the corporate environment. The 2024 Evaluation of Corporate Compliance Programs (2024 ECCP), under the Management of Emerging Risks to Ensure Compliance with Applicable Law section, asked several key questions.

  • What is the company’s approach to governance regarding the use of new technologies, such as AI, in its commercial business and compliance program?
  • How is the company curbing any potential adverse or unintended consequences resulting from using technologies, both in its commercial business and its compliance program?
  • How is the company mitigating the potential for deliberate or reckless misuse of technologies, including by company insiders?
  • To the extent that the company uses AI and similar technologies in its business or as part of its compliance program, are controls in place to monitor and ensure its trustworthiness, reliability, and use in compliance with applicable law and the company’s code of conduct?
  • Do controls exist to ensure the technology is used only for its intended purposes?
  • What baseline of human decision-making is used to assess AI?
  • How is accountability over the use of AI monitored and enforced?

One key tool for answering many of these questions is auditing. In his recent article in the Harvard Business Review, What Leaders Need to Know About Auditing AI, author Luca Belli outlines crucial insights that business leaders must understand about auditing AI. I have adapted his thoughts for a Chief Compliance Officer and compliance professional.

While audits are becoming a core feature of working with AI, they do not have a predetermined process that follows a straight line; rather, they are a web of different decisions, both from the business and the technical side. Specifically, audits often face four core challenges: 1) they do not follow a straight line, 2) data governance is messy, 3) they require internal trust, and 4) they focus on the past. Leaders can take steps to help audits succeed. Compliance professionals can help instill the right culture and incentives and help design the audit. During the audit, they can shape the process and remove red tape.

AI is no longer confined to back-end analytics. It has stepped confidently into customer-facing roles, making decisions in critical areas such as finance, healthcare, and housing. With such reach and influence, AI poses significant ethical, reputational, and legal risks if left unchecked. Audits of AI systems, therefore, have become a cornerstone of modern compliance frameworks. Policymakers worldwide, including through the EU’s Digital Services Act and New York City’s AI bias law, are mandating external audits of AI systems. Even where not mandated, businesses voluntarily engage in audits to manage risk, mitigate potential crises, and anticipate regulatory developments.

However, auditing of AI is not straightforward. Compliance professionals must understand four fundamental challenges inherent in AI audits.

1. Non-linear Audit Processes

AI audits rarely follow a straight, predictable path. Instead, they often resemble a “random walk,” as auditors must continually adjust their focus based on emerging data and shifting business needs. Consider an audit to detect racial bias in decision-making algorithms where direct data on race is unavailable. Auditors may pivot to proxy measures like zip codes to approximate racial data. This approach, while practical, introduces discrepancies and limitations that must be carefully managed and transparently documented.

2. Complex Data Governance

Effective auditing relies heavily on data governance practices, yet data management often resembles an “old building” layered with historical inefficiencies rather than a clean, structured system. Many organizations struggle to locate and interpret data due to outdated documentation or employee turnover. Compliance teams must actively collaborate with technical teams to ensure data accuracy and completeness. As Belli suggests, robust internal documentation and dedicated data custodians can significantly ease this challenge.

3. Building Internal Trust

Audits can strain internal team dynamics, particularly if audit results lead to perceived criticisms of operational decisions. Compliance professionals must proactively foster a culture of trust, reinforcing that audits are not punitive but integral to operational excellence. As Belli notes, incentives should align accordingly: supporting audits should positively influence personal and professional evaluations, signaling organizational value in transparency and continuous improvement.

4. Historical Focus and Technical Limitations

Most audits evaluate past performance, and evolving AI systems and datasets pose challenges in replicating historical conditions. A user deleting their profile data or changes in system algorithms can complicate audits significantly. Compliance professionals must advocate for real-time monitoring or, at minimum, detailed record-keeping, ensuring auditors have sufficient context to interpret their findings and recommendations accurately.

Given these complexities, how can corporate compliance officers effectively lead their organizations through AI audits? Belli provides several practical steps:

  • Proactive Preparation: Companies should not wait for external mandates to build auditing capabilities. By establishing internal audit teams or clearly defined points of contact within existing teams, organizations can swiftly respond to audit needs while minimizing operational disruption.
  • Cultural Alignment: Corporate culture profoundly impacts audit effectiveness. Compliance professionals must champion transparency and accountability at the highest organizational levels, ensuring that audits are critical to long-term business success rather than occasional inconveniences.
  • Strategic Audit Design: Choosing between external auditors and internal audit teams requires careful consideration of organizational dynamics. Internal teams offer in-depth institutional knowledge, while external auditors provide objective perspectives without internal friction. Belli suggests a hybrid model, often ideal, balancing centralized expertise with distributed operational familiarity.
  • Leadership Engagement: Active, informed involvement by senior leadership during audits can clarify organizational priorities and remove operational roadblocks. Leaders should regularly engage with technical teams to understand key decisions, encourage thorough documentation, and ensure audit findings align clearly with broader business objectives.

The author underscores the CCO’s crucial role in navigating the nuanced landscape of AI auditing. As technology’s reach expands, compliance teams must proactively address these emerging complexities, continually adapting their oversight frameworks to meet the dynamic challenges presented by AI systems. By fostering robust internal collaboration, aligning incentives, and strategically preparing audit infrastructure, compliance professionals not only mitigate risks but also enable their organizations to harness AI’s transformative potential responsibly and ethically.