A Look At The Hefty Demands In Calif. Employer AI Draft Regs

By Lily Li ( November 15, 2024, 4:00 PM EST) — On Nov. 8, in a vote of 4-1 at a public hearing, the California Privacy Protection Agency moved forward with rulemaking on its draft regulations concerning automated decision-making, cybersecurity audits and risk assessments.[1]… Law360 is on it, so you are, too. A Law360 subscription puts you at the center of fast-moving legal issues, trends and developments so you can act with speed and confidence. Over 200 articles are published daily across more than 60 topics, industries, practice areas and jurisdictions. A Law360 subscription includes features such as Daily newsletters Expert analysis Mobile app Advanced search Judge information Real-time alerts 450K+ searchable archived articles And more! Experience Law360 today with a free 7-day trial. source

A Look At The Hefty Demands In Calif. Employer AI Draft Regs Read More »

Back In The Analyst Chair: What I’ll Be Focusing On In 2024–2025

Many of you will have noticed that I have moved back into an analyst role over the last few weeks. I had an immensely rewarding time working in the European research management team with a talented group of analysts on our European tech research coverage, whom I’m incredibly thankful to for their hard work and dedication over the past few years. As I move back into the analyst role, I’ve had a lot of questions on what I’ll be focusing on as I return to the role. My new coverage can be broadly summarized as covering enterprise and cyber risk management and maturity assessment. In my prior role, managing the risks of introducing AI into the organization and managing against operational, cyber, and broader resilience, geopolitical, and regulatory risk have been common areas of concern for technology leaders. Over the last few years, risk has permeated all of the epoch-making investments in everything AI-related, from the infrastructure powering it to the large language models and data underpinning it all. Organizational environmental sustainability has been challenged by the substantial power and physical infrastructure needed to scale up AI. Here are the key technology areas and services markets that I’ll be working with my colleagues Alla Valente and Cody Scott on to support the broader enterprise and cyber risk management research agenda: Governance, risk, and compliance (GRC) platforms. As stated in Cody Scott’s research, the GRC market has seen something of a renaissance over the last one to two years, as the volume of global regulation and compliance mandates make it impossible to rely on cottage-industry Excel spreadsheets and the ever familiar email. The power of AI in this space and the potential to automate aspects of compliance and assurance workload has some potentially transformational implications for risk organizations, and I look forward to exploring how GRC software platform providers will support this broader transformation as I join Cody in looking at this market. Cyber risk ratings. This is the one area of my prior analyst coverage that I take back over. In 2021, I wrote with Alla Valente that the cyber risk ratings market wasn’t ready for prime time. Since then, it has advanced considerably and thankfully has shifted its thinking away from the pure act of collecting data to calculate a rating to now understanding how that data and insight can help security practitioners manage and reduce risk. I look forward to picking this market back up and running the next Forrester Wave™ evaluation in this space beginning in the winter of 2025 and onward. Risk managed services. One broad trend that has accelerated in the security and broader risk services world is both client demand and vendor interest in offering risk managed services. Clients have interest in getting support in managing not only their GRC platforms but other aspects of their enterprise risk management programs as they run into the familiar challenges of not having the internal skills, resources, or scale required to run complex enterprise risk management programs. I’ve even heard anecdotally of a few organizations talking about setting up risk operations centers to bring the same discipline, scale, and industrialization approach traditionally found in security or network operations centers. I will start researching trends in risk managed services in the market, matching what enterprise clients need with what the market can provide. Vendors can brief me via the regular Forrester briefings process, and Forrester clients are welcome to schedule an inquiry or guidance session with me to discuss further. source

Back In The Analyst Chair: What I’ll Be Focusing On In 2024–2025 Read More »

Global AI regulations: Beyond the U.S. and Europe

An earlier article described emerging AI regulations for the U.S. and Europe. Building on that perspective, this article describes examples of AI regulations in the rest of the world and provides a summary on global AI regulation trends. First, although the EU has defined a leading and strict AI regulatory framework, China has implemented a similarly strict framework to govern AI in that country. Second, some countries such as the United Arab Emirates (UAE) have implemented sector-specific AI requirements while allowing other sectors to follow voluntary guidelines. Lastly, voluntary frameworks have been proposed by many countries such as Singapore and Japan, to encourage AI innovation. The G7 collection of nations has also proposed a voluntary AI code of conduct. India has avoided any commitment to AI regulations, at this time relying on existing legislation that protects personal digital privacy, an example that many other countries are following. The complexity of varying global AI regulations is challenging for CIOs. Indeed, as IDC reported in a earlier this year, the U.S. has a complex web of differing state laws regarding AI (Navigating the Fragmented U.S. AI and GenAI Regulatory Landscape, IDC, July 2024). The complexity increases for CIOs that operate in a global environment, where national regulations span the spectrum from detailed and prescriptive such as in the EU or China, to voluntary or non-existent, such as India. China follows the EU, with additional focus on national security In March 2024 the Peoples Republic of China (PRC) published a draft Artificial Intelligence Law, and a translated version became available in early May. The Law provides a set of frameworks that are as comprehensive as the EU AI Act, with the intention of balancing the need for innovative AI development with the need to safeguard society. Importantly, where the EU AI Act identifies different risk levels, the PRC AI Law identifies eight specific scenarios and industries where a higher level of risk management is required for “critical AI.” The identified scenarios where AI is used include judicial, news, medical, biometric recognition, autonomous driving, social credit, social bots and where AI is used by state organizations. This allows for more rapid and targeted legislation when needed. Lastly, China’s AI regulations are focused on ensuring that AI systems do not pose any perceived threat to national security. The UAE provides a similar model to China, although less prescriptive regarding national security. UAE has proactively embraced AI, to both foster innovation while providing secure and ethical AI capabilities. In particular, the UAE AI Office created an AI license requirement for applications in the Dubai International Finance Centre. Further, the Dubai Health Authority also requires AI license for ethical AI solutions in healthcare. The G7 AI code of conduct: Voluntary compliance In October 2023 the Group of Seven (G7) countries agreed to a code of conduct for organizations that develop and deploy AI systems. The code of conduct is directed by 11 guiding principles, many of which focus on risks, vulnerabilities, security, and protections. As well, the principles address the need for accountability, authentication, and international standards. The G7 leaders directed their national ministers to implement the code of conduct, stressing the need to maximize the benefits of AI while mitigating its risks. However, notably absent from the code is any form of enforcement or penalty; compliance is completely voluntary. Similar voluntary guidance can be seen in Singapore and Japan. Singapore emphasizes AI innovation particularly in the financial sector, with no specific set of AI regulations. The government continues its emphasis on protection of digital privacy as a mechanism for controlling inappropriate AI. Japan has taken a slightly different approach, with two directions: voluntary guidelines for all industries and “sector-specific restrictions on large platforms to safeguard the use of AI” (Navigating the AI Regulatory Landscape: Differing Destinations and Journey Times Exemplify Regulatory Complexity, IDC, March 2024). The rest of the world: Light-touch or non-existent AI regulations India provides a model of how the rest of the world approaches AI, which aligns with the G7 model of voluntary compliance. As described by Carnegie Endowment for International Peace, India has a “light touch approach to AI regulation,” with a model that strikes a balance between innovation and safety while not delaying the country’s steady progress toward a growing and profitable digital economy. While India has multiple laws and regulations regarding electronic data and protection of digital privacy (e.g., the Information Technology Act of 2000), a single AI responsibility or a focused AI act such as that of the EU, does not exist. Recognizing the global economic importance of AI, India’s approach is to encourage AI development while monitoring AI usage to prevent societal abuse. For many countries in the world, AI is recognized as economically important yet is dominated by the U.S. and countries of the EU. Innovation is seen as key to societal and economic improvement, with AI leading the list of innovation levers. Regulations are sometimes seen as a hindrance to innovation, and many jurisdictions will wait and watch for global consensus to emerge on AI regulations. Unfortunately for CIOs, the global AI regulatory map will continue to be incomplete and uneven with developments occurring asynchronously in various countries. As IDC points out in a review of 11 jurisdictions, each country begins with a different set of goals, a different destination, and a variety of timelines for AI regulation (Navigating the AI Regulatory Landscape: Differing Destinations and Journey Times Exemplify Regulatory Complexity, IDC, March 2024). However, for the larger jurisdictions, such as the UK, EU or China, and some of the United States, CIOs must pay attention to established and emerging AI regulations and the probability of government enforcement. This is an unexpected new role for CIOs, but offers an opportunity for leadership in a fast-developing and complex global environment. Learn more about IDC’s research for technology leaders OR subscribe today to receive industry-leading research directly to your inbox. International Data Corporation (IDC) is the premier global provider of market intelligence, advisory services, and events for

Global AI regulations: Beyond the U.S. and Europe Read More »

Bankman-Fried Tech Deputy Who Parsed Code Avoids Prison

By Pete Brush ( November 20, 2024, 10:50 AM EST) — A Manhattan federal judge allowed tech expert Zixiao “Gary” Wang to avoid jail Wednesday for his role in the $11 billion FTX fraud, crediting his effort to detail programming “back doors” that enabled Sam Bankman-Fried to loot the bankrupt crypto exchange…. Law360 is on it, so you are, too. A Law360 subscription puts you at the center of fast-moving legal issues, trends and developments so you can act with speed and confidence. Over 200 articles are published daily across more than 60 topics, industries, practice areas and jurisdictions. A Law360 subscription includes features such as Daily newsletters Expert analysis Mobile app Advanced search Judge information Real-time alerts 450K+ searchable archived articles And more! Experience Law360 today with a free 7-day trial. source

Bankman-Fried Tech Deputy Who Parsed Code Avoids Prison Read More »

Edge data is critical to AI — here’s how Dell is helping enterprises unlock its value

Join our daily and weekly newsletters for the latest updates and exclusive content on industry-leading AI coverage. Learn More It’s anticipated that by next year, more than 50% of enterprise data will be created and processed outside traditional data centers or clouds. In this age of AI, enterprises need to be able to quickly access and extract value from that edge data — but it can be time-consuming and complicated to do so, and many enterprise leaders are still operating with a cloud mindset.  To help reduce complexity and make edge computing more accessible, Dell is today announcing new advancements to its Dell NativeEdge edge operations software platform. The offering aims to help simplify how enterprises deploy, scale and use AI across numerous types of edge environments.  “The edge is a place where there are a lot of opportunities but a lot of silos and challenges,” Pierluca Chiodelli, Dell’s VP of edge product management, told VentureBeat. “We wanted to create a platform to democratize the edge.”  Supporting inferencing, offering multi-node capabilities  At the far edge, most deployments are on a single node, Chiodelli explained. But this can present challenges when it comes to reliability, scalability and computing power, not to mention cost.  Dell NativeEdge, which is part of the company’s AI Factory, provides multi-node high-availability capabilities. This means that endpoints can be grouped together to act like a single system, allowing enterprises to maintain business processes and edge AI workloads even when there are network disruptions or device failures. It also supports virtual machine (VM) migration — the process of moving a machine from one physical location to another without disrupting availability or performance — as well as automatic app, compute and storage failover.  AI inferencing is increasingly important at the edge, but it can be tedious and time-consuming to deploy AI across “hundreds, if not thousands,” of edge locations, Chiodelli pointed out. To address this, Dell is now offering a catalog of more than 55 pre-built blueprints that automate AI deployment.  The new catalog includes several popular open-source tools as well as a data collector that transfers data from sensors and IoT devices and Geti-branded software that can accelerate the development of computer vision AI models at the edge.  Chiodelli explained that Dell NativeEdge is consumption-based, and customers pay per each device under management (whether that be a small gateway or a large server). Zero touch, zero trust, adapting with fast-moving AI Chiodelli pointed out that it is important that users have the ability to adapt to changing workload demands across broad environments; they must also be able to adjust on the fly.  “With AI, everything changes everyday,” said Chiodelli. Human users need to not just be able to intervene on day 0 (inception) but also on day 2 (management) to keep up. Zero touch is important to all this because “You don’t need to have IT people going to different locations and trying to deploy things,” said Chiodelli.  Security is also paramount; Dell NativeEdge is built on a zero-trust model, and the platform continually monitors the security of edge infrastructure, Chiodelli exaplained. “You really need zero trust because you are in the land of nowhere, you cannot trust anybody,” he said.  Dell NativeEdge has been deployed by customers across numerous industries. French-headquartered multinational IT company Atos, for instance, used the platform to create Atos business-outcomes-as-a-service (BOaaS). The edge management tool works with AI and machine learning (ML) and helps customers deploy, automate and optimize their edge environments through a single dashboard.  As one example, BOaaS has allowed Atos’s manufacturing customers to see measurable business improvements as the result of predictive maintenance. This in turn has helped them reduce downtime, decrease costs and optimize production.  Another customer is Ontario-based Nature Fresh Farms. While most wouldn’t necessarily consider farms to be all that IT-savvy, the family-owned company has been using edge computing to support yield optimization and to perform real-time environmental monitoring.  Previously, “they had a lot of solutions that were very siloed,” Chiodelli explained. It was a challenge to look at the entire estate and manage updates. “Dell NativeEdge helps us monitor real-time infrastructure elements, ensuring optimal conditions for our produce, and receive comprehensive insights into our produce packaging operations,” said Keith Bradley, VP for IT. In other cases, Dell NativeEdge has been used to perform preventative maintenance of amusement parks and to inspect railways and train tracks, Chiodelli noted. Other companies using the platform include GE, EY, AIShield and Nozomi Networks.  “AI is accelerating new edge workloads and opportunities at an unprecedented rate, and organizations across industries are asking for simpler and more reliable ways to use AI at the edge,” said Gil Shneorson, SVP for Dell’s solutions and platforms. source

Edge data is critical to AI — here’s how Dell is helping enterprises unlock its value Read More »

Meet Forrester’s New Principal Analyst Covering Loyalty Marketing: John Pedini

In 2025, we expect consumer usage of loyalty programs to grow amid declines in overall brand loyalty. Though loyalty programs offer the rewards that price-conscious consumers crave, companies struggle to inspire emotional loyalty across various tactics aimed at improving retention. Marketers need a loyalty strategy that appropriately balances transactional incentives with an understanding of what drives and impacts brand loyalty. We have a new analyst on the B2C marketing team, John Pedini, to help clients assess and optimize their customer loyalty initiatives. John brings over 28 years of experience working directly with the world’s leading brands to develop, implement, and support best-in-class loyalty, CRM, and customer engagement programs and is passionate about turning insights into strategies that can transform a brand from good to exceptional. John’s coverage will focus on helping marketers design effective loyalty strategies, execute winning loyalty tactics, and measure customer loyalty. He’s ready to help clients with guidance sessions, advisory, and workshops on program design, reward strategy, loyalty platforms, and brand-specific solutions to elevate the customer experience. Request a guidance session to connect with John to review your loyalty program and discuss how to build customer relationships that fuel business growth. source

Meet Forrester’s New Principal Analyst Covering Loyalty Marketing: John Pedini Read More »

Where to Recycle Old Mobile Phones: 10 Top Locations & Programs

For those possessing an “old electronics” box sitting in a basement or merely an iPhone that has seen better days, it’s worth considering recycling. Where is the best place to recycle old cell phones? If you don’t want to spend hours finding the right place to recycle your old cell phones, here is a list of 10 options. Some are buyback programs or official channels, and others are nonprofit donations. 1. Best Buy Best Buy has recycling kiosks in its stores in the U.S. and offers free in-store recycling. The company typically limits the number of devices to three per family per day. It works with recycling companies to ensure that phones and other electronics aren’t in landfills. 2. Staples Staples accepts laptops, mobile phones, batteries, accessories, and more. Staples has over 1,000 stores in the U.S. and some international locations. The stores offer gift cards in exchange for trade-ins of certain devices. Rewards members can rack up points for bringing in devices to recycle. 3. Your carrier or manufacturer Many carriers or manufacturers offer recycling programs. AT&T has a trade-in program for unwanted phones and accessories regardless of manufacturer or carrier. The owner gets a “promotion card” to reduce the price of a new phone or other purchase. Verizon also offers a trade-in program in which the owner receives an electronic gift card once they send in the phone and have it appraised. Apple stores and Google recycle used products for free. 4. Local establishments Your city undoubtedly has places to recycle old phones. Most government websites, including those in New York City, offer directions on where to recycle phones. Many cities have nonprofits that donate old phones as well. The EPA has an option to find out what electronics you can recycle with mail-in options. SEE: Recycling plastics and other waste can be a key part of tech products’ life cycles. Mobility must-reads 5. Eco-Cell Eco-Cell is a Louisville, Kentucky-based e-waste recycling company. It partners with nonprofits and organizations such as the Jane Goodall Institute. Bins are located in coffee shops and other businesses nationwide, where the collected phones are shipped to Eco-Cell in Louisville. If the phones are reusable, they resell them and pass some of the money back to the owner. If they are not reusable, the phones are recycled, and the owner is paid the money for the value of the recycled materials. 6. Medic’s Phone Donation Program The Hope Phones campaign was started in 2009 by Medic Mobile, which works to advance health care in 16 countries by using mobile technology. Now known as Medic’s Phone Donation Program, individuals, nonprofits, groups, or businesses can donate old phones. The mobile devices are recycled and valued, so the nonprofit can get new technology for the field. Most old models are valued at $5, but newer smartphones are regularly valued at $80, according to the website. Send a phone to the program by boxing it up and shipping it to the Colorado address provided on the website. 7. Cell Phones for Soldiers Cell Phones for Soldiers is a nonprofit that provides cost-free communication services to active-duty military and veterans. Proceeds from the phones go to purchasing international calling cards. New or gently used mobile phones are accepted, and each device valued at $5 turns into 2.5 hours of free talk time for the soldiers. 8. Gazelle Gazelle is one of the most popular trade-in options for old cell phones. The resell company is headquartered in Boston, Louisville, Kentucky, and Texas. Select your phone’s brand, model, and carrier, describe its shape, and then get an offer. Ship it for free, and receive a check or a gift card to Amazon.com or PayPal after Gazelle assesses its worth. 9. Call2Recycle Call2Recycle is a no-cost recycling program for batteries and cell phones in the U.S. and Canada. It has collection boxes that can be placed anywhere with shipping permits, so mailing them is easy. Call2Recycle offers bulk shipping if you want to send them any recyclables. 10. EcoATM EcoATM is an automated kiosk that collects your unwanted cell phones and tablets and gives you cash for them. It’s made by the same people who make CoinStar, so you’ll find them by the checkout lines at various grocery store chains. It accepts devices from any era or in any condition and offers anywhere between a few bucks to a few hundred dollars in return. EcoATM partners with R2-certified e-waste reclamation facilities to ensure they are recycled or give the phones a second life. Some users report technical issues with EcoATM machines or receiving less cash than expected. When recycling money devices, be aware that the trade-in ecosystem can be volatile. Services provide an estimate upfront but may pay differently once they inspect a specific device. What should you do with old mobile phones? Consider upgrading the hardware or software of your old mobile phone as much as possible before trading it in for a new model, as long as everything works properly. Don’t throw it out at the curb if you wish to dispose of it. Electronics and their batteries are illegal to dispose of in the trash in some states due to the toxic substances their innards contain. Batteries, in particular, can be hazardous to dispose of. How to prepare a cell phone for recycling? Be sure to deactivate your phone service and remove any data you want to keep. You may want to wipe a phone using the factory reset option before recycling to remove your personal data. If you send your device to a program where it will be physically recycled, any personal data on that phone will be destroyed. If a phone is refurbished, personal data will be removed. source

Where to Recycle Old Mobile Phones: 10 Top Locations & Programs Read More »

Shortsighted CEOs leave CIOs with increasing tech debt

Some IT leaders, however, aren’t convinced about the IBM report’s focus on IT shortcuts vs. innovation. IT spending is driven more by a desire to enable business goals, such as growth, and managing risks, including cyberattacks, says Yvette Kanouff, partner at JC2 Ventures, a tech-focused venture capital firm. “These objectives might require short-term IT spending to help the business achieve its goals, but it’s not a trade-off,” she says. “It delivers results.” Still, there is some tension between short-term and long-term goals, because every organization has a backlog of IT tasks that need attention, she adds. “While it’s important to address the backlog, continuously focusing on cleanup can get in the way of forward progress,” Kanouff says. “This is why it’s essential to balance short-term and long-term objectives.” source

Shortsighted CEOs leave CIOs with increasing tech debt Read More »

Social Media Cos. Must Face Schools' Public Nuisance Claims

By Lauren Berg ( November 15, 2024, 9:38 PM EST) — Meta Platforms and other social media giants must face most of the public nuisance claims brought by school districts and local government entities in multidistrict litigation alleging the companies designed their platforms to addict children, a California federal judge ruled Friday…. Law360 is on it, so you are, too. A Law360 subscription puts you at the center of fast-moving legal issues, trends and developments so you can act with speed and confidence. Over 200 articles are published daily across more than 60 topics, industries, practice areas and jurisdictions. A Law360 subscription includes features such as Daily newsletters Expert analysis Mobile app Advanced search Judge information Real-time alerts 450K+ searchable archived articles And more! Experience Law360 today with a free 7-day trial. source

Social Media Cos. Must Face Schools' Public Nuisance Claims Read More »