Jun. 18, 2025

Guide to AI Risk Assessments

Touted as a transformative tool for boosting productivity, elevating efficiency and crunching lots of data really fast, AI is impacting seemingly every industry. Along with AI’s tremendous potential, however, comes risk. An AI risk assessment can help identify potential issues like bias, security vulnerabilities and privacy concerns, and inform mitigation strategies. This article, with insights from Covington & Burling and PwC, offers practical guidance on the AI risk assessment process, including who to involve, timing and identifying key risks, and addresses how to use the results to help mitigate risks. See “Navigating NIST’s AI Risk Management Framework” (Nov. 15, 2023).

Pain Points and New Demands in AI Contracts

As AI has become a must-have business tool, attention to contract terms is an essential part of managing its risks. Navigating provisions around rights and responsibilities in AI contracts, however, can be tricky given developing and unsettled variables. This article examines five sticking points in AI contracts, key negotiating positions that are emerging and ways to surmount the challenges, with commentary from experts at Baker McKenzie and Orrick, and panelists from Wolters Kluwer and Gilead Sciences who spoke at the recent Privacy+Security Academy conference. See “Key Legal and Business Issues in AI-Related Contracts” (Aug. 9, 2023).

Skills and Qualities of Effective Compliance Officers

The role of the CCO has evolved significantly in recent years, extending across industries. Contemporaneously, salaries have increased, though growth in compensation slowed in 2025 as compared to 2024, according to BarkerGilmore’s 2025 CCO Compensation Report. This article synthesizes relevant findings from the report and distills insights from the firm’s webinar, which included professionals from Radical Compliance and Spark Compliance Consulting, on the current market for CCOs, compensation trends, relevant skills and experience, and challenges facing dual-hatted GC-CCOs. See “To Work Effectively, CCOs Need Authority, Autonomy and Information” (Nov. 13, 2024).

Cooley Adds Tech and Privacy Litigators in San Francisco

Cooley has welcomed seven new partners to its global litigation department in San Francisco, including Simona Agnolucci and Benedict Hur, who have served as lead counsel in multiple Google-related class actions concerning privacy. The group joins from Willkie Farr & Gallagher. For insights from Cooley, see “‘Everyone Wants to Speak to the CISO’ and Other Realities of Addressing Vendor Breaches” (May 14, 2025); and “Connecticut AG’s Report Reveals Privacy Enforcers Reaching Deeper Into Their State Laws” (Apr. 30, 2025).

Former Assistant U.S. Attorney Joins Stoel Rives As Partner in Portland

Ethan Knight has joined Stoel Rives as a partner in the firm’s litigation group in Portland. He most recently served as an Assistant U.S. Attorney for the District of Oregon, where he oversaw cybercrime prosecutions.