Michael Savicki, Senior Vice President and Chief Risk & Compliance Officer at American Express Global Business Travel (Amex GBT), best known as Amex GBT, knows the challenges and opportunities in merger’s and acquisitions. The company  recently completed the acquisition of CWT…

What do a secret wedding and Richard Nixon have in common with HIPAA? A lot more than you might think, shares Bailey Mack, Chief Compliance Officer at Together for Youth. In this podcast she tells us the interesting history of privacy and the law.  We begin in 1890 when a photo…

The rise of generative AI has brought transformative potential to healthcare—from streamlining administrative tasks to supporting clinical decision-making. But alongside these benefits comes a growing concern: Shadow AI. Alex Tyrrell, Chief Technology Officer, Health at Wolters …

There are few parts of an investigation that are more stressful than the interview with the investigation’s subject.  Done right it can close all the loops.  Done wrong, everything can unravel. To learn how to handle things best we turn in the second of our two podcasts on inv…

The race is on for artificial intelligence (AI) automation and efficiency improvements in the workplace. Although we hear daily news stories about big-name companies racing to adopt AI strategies—aiming to innovate, improve efficiencies, and ev…

Few people know more about conducting a compliance investigation than Georgina Heasman, Senior Manager, Global Investigations at Booking Holdings and Wendy Evans, Senior Corporate Ethics Investigator, Lockheed Martin.  The two of them are the co-authors of our new book Fundamenta…

Uh oh.  The Feds are in the front lobby with a search warrant.  Things are bad, and you don’t want anyone on site to make it worse. The secret is preparation, shares Veronica Xu, SCCE & HCCA Board Member and Chief Compliance Officer, HIPAA Privacy Officer, ADA Administrator a…

Why did the AI do that? It’s a simple and common question, but the answer is often opaque, with people referring to black boxes, algorithms and other words that only those in the know tend to understand. Alessia Falsarone, a non-executive director of Innovate UK, says that’s a…

 By Nikhil Raj Singh When it comes to protecting sensitive data, organizations often turn to established security frameworks like ISO 27001, NIST Cybersecurity Framework, PCI DSS, or SOC 2. Each of these has its strengths but managing them individually can be time-consuming and resource heavy. This…

The possibilities of AI don’t stop with generative AI such as ChatGPT.  Agentic AI may have more potential for compliance teams, Zahra Timsah, co-founder and CEO of i-GENTIC AI tells us. Unlike generative AI, which is well known for its ability to create content, agentic AI can…

Andrew McBride, Founder & Chief Executive Officer at Integrity Bridge, recently wrote an article entitled Generative Artificial Intelligence Use Cases for Ethics & Compliance Programs.  Intrigued by the topic, I sat down with him for this podcast. He shared that many compliance…

Why? Why are you asking that? Do you really need to know it? Is it going to tell you something you need to know? Is it a question that anyone could even answer? All of these are questions to ask yourselves and colleagues when they propose adding an item to your due diligence quest…

With ever more attention paid to the role of boards in overseeing compliance, the question naturally comes up:  Do boards even understand what makes for an effective compliance program?  To help answer that question we spoke with Vera Cherepanova (LinkedIn), Executive Director o…

Imagine that it’s time to move on from compliance to another role, either by choice or being voluntold.  Does what you learned in compliance help? Absolutely, according to Kortney Nordrum, Vice President and Senior Corporate Counsel at Deluxe.  Amongst other benefits, it taugh…

How regulatory deadlines, enforcement trends, and AI governance are shaping the modern compliance function By Wendy Lim, Industry Development Director & DPO Success Ambassador, Straits Interactive The role of the Data Protection Officer (DPO) is evolving from a compliance checkbox to a critical pil…

Things are a bit out of balance when it comes to Business Associates (BAs) in healthcare.  Organizations invest a great deal of time and resources in vetting these third parties to make sure that they will safely handle data from the covered entity.  But, when the relationship e…

, Ethics Advisor & Consultant, Ethena New ‘Agent’ mode enables ChatGPT to do complex tasks for users, including their required training ChatGPT’s Agent Mode, a new capability that can perform complex, multi-step tasks autonomously, brings with it a surprising risk: the tool …

On July 10, 2025 the European Commission posted The General-Purpose AI Code of Practice.  Unlike the EU AI Act, this new Code of Practice is not compulsory, at least not yet. Still, it seems prudent to start understanding what it says and what expectations are being laid, as well…

Cybersecurity is often described as a never-ending chess game, except the opponent moves fast, plays unpredictably, and never sleeps. In this high-stakes environment, the Security Operations Center (SOC) stands as the nerve center of an organization’s …

At the midpoint of 2025, the state of artificial intelligence appears to be defined by two major themes: a rapid acceleration of corporations adopting AI tools or integrating AI into existing systems of work; and a shift toward AI governance rather than AI complia…