Cybersecurity & Privacy Lawyers Assess AI Compliance Challenges Amid Diverging State Laws

Ben Perry, Nashville shareholder and co-chair of the Cybersecurity & Privacy Practice Group at Ogletree Deakins, and Lauren Watson, Raleigh associate and Cybersecurity & Privacy Practice Group member, discuss emerging challenges for employers regarding AI compliance programs in an article created for Law360. Their analysis examines how Colorado and Connecticut have taken markedly different approaches to regulating artificial intelligence, and highlights what state law divergence means for companies building compliance programs.

Perry and Watson outline how Colorado’s revised law centers on use-case classification for consequential automated decisions, while Connecticut’s omnibus statute regulates AI through multiple parallel tracks covering employment tools, subscription services, frontier models, and synthetic content. The article offers practical guidance for building a common compliance framework, including maintaining an AI system inventory, layering state-specific requirements onto baseline controls, and preserving governance records that can withstand regulatory scrutiny.

A subscription may be required to view the article.

Read the full Law360 article here.