#ai-compliance

#ai-compliance

According to PwC's 2025 Global Compliance Survey, [1] more than 40% of global companies reported at least one compliance failure that led to fines, penalties, or back pay. Staying on top of regulatory compliance requirements has only gotten more complex, and the stakes have never been higher. TD Bank's USD 3.1 billion penalty for "pervasive and systemic failure to maintain an adequate" anti-money laundering (AML) compliance program [2] demonstrates this and has incentivized companies of all sizes to invest in compliance training platforms that can be used to demonstrate compliance in audits and regulatory defense scenarios.

According to Axios, a law firm representing Disney wrote to Character.AI demanding that it cease using copyrighted characters without authorisation. "Character.ai chose to systematically reproduce, monetize, and exploit Disney's characters, that are protected by copyrights and trademarks, without any authorization, in a way that is anathema to the very essence of the Disney brand and legacy," the letter states. The company said Character.AI chatbots impersonated characters such as Moana, Princess Elsa from Frozen, Moana, Spider-Man alter ego Peter Parker and Darth Vader from Star Wars.

Regulatory frameworks such as HIPAA, GxP, GDPR and 21 CFR Part 11 are not optional; they are the guardrails that protect sensitive health data, ensure scientific integrity and maintain public trust in healthcare systems. Yet, I repeatedly observed that while these frameworks provided critical safeguards, they often slowed the momentum of digital transformation initiatives, particularly those involving artificial intelligence. Early AI projects faltered not because the models lacked accuracy or relevance, but because the underlying data architectures were not designed to satisfy regulators from the outset.

The European Commission announced the publication of the General-Purpose AI Code of Practice, aimed at helping companies comply with the AI Act. Compliance is voluntary.