In the operating room, a split-second decision can mean the difference between life and death decisions are increasingly being shaped by reasoning uninterpretable to human practitioners. More and more, these choices are becoming the product of “black-box” algorithms, one of the newest ways AI is entering the medical field, and a development that raises concerns about the trade-off between transparency and accuracy. “Black-box” algorithms are deep learning systems whose internal decision-making processes are not accessible or interpretable to human beings. In some cases, this opacity is the result of systems intentionally obscured to protect intellectual property. More often, however, it is an inevitable part of their structure, as deep learning models typically contain hundreds, if not thousands, of layers. As...
Studying U.S. privacy law and policy through multiple lenses revealed how precarious the balance between individual liberty and collective security has become. As emerging technologies - AI, biometrics, predictive analytics, cloud computing, and social media - continue to outpace existing legal frameworks, it is increasingly clear that thoughtful governance and robust safeguards are essential to mitigate harm and preserve autonomy, dignity, trust, and democratic values. One issue that stood out most is the persistent lack of meaningful transparency. Consumers often have little understanding of how much data is collected, frequently by default and through devices that capture information continuously, or what happens to that data once it is in the hands of companies with few incentives to minimize collection or...
Although approximately 85% of U.S. critical infrastructure is privately owned, the federal government should take a proactive, coordinating, and enabling role in shaping cybersecurity policy and safeguarding critical infrastructure, carefully balancing oversight with incentives that foster innovation. Historically relying on trust and voluntary best practices, U.S. infrastructure sectors have seen growing federal oversight in the early 2020s. This includes mandatory incident reporting and stronger enforcement to boost national resilience. Although these measures boosted transparency, they also added layers of complexity and drove up compliance costs. A stronger federal role strengthens preparedness, sets consistent cybersecurity standards, and promotes information sharing, but overly burdensome regulation risks stifling innovation and diverting resources from proactive defense. With experience spanning communist and EU environments and...
Beyond rhetoric, how does a presidential transition practically enable a strategic reassessment and realignment of U.S. cybersecurity priorities amid evolving threats and policy challenges?The current administration criticizes critical infrastructure policy as duplicative, ineffective, and overly complex, targeting regulatory burdens and federal cybersecurity agency roles and funding. Key reforms include narrowing CISA’s role, reducing mandatory reporting in favor of voluntary standards, and decentralizing cybersecurity responsibilities to states and localities. Identifying key opportunities requires acknowledging systemic flaws, overlapping mandates, inconsistent infrastructure definitions, and conflicting reporting, that drive calls for a policy reset, as a presidential transition offers a moment to realign cybersecurity strategy, resulting in fewer but potentially more variable federal guidelines across sectors and states. Conflicting incident reporting requirements across regulatory...
Thele v. Google LLC puts a spotlight on a core tension of the AI era: when intelligent systems are switched on by default, is consent still real? The lawsuit alleges that Google quietly enabled its Gemini AI across Gmail, Chat, and Meet without obtaining affirmative, informed user consent, allowing the system to analyze the full contents of private communications. At issue is not just disclosure, but design - whether privacy settings buried behind defaults can meaningfully protect users when AI operates continuously in the background. The case challenges long-standing assumptions in privacy law and asks a pivotal question for the digital age: if consent is inferred from silence, does privacy become a fiction rather than a choice?
