AI Data Processing Addendum Key Clauses
Model training on customer data requires explicit authorization, not silence in your contract.
Darnell Okafor-Baptiste
Staff Writer, Procurement and Vendor Risk
Darnell Okafor-Baptiste
Darnell Okafor-Baptiste covered government contracting for a regional business daily for seven years before joining Regulated Data Risk to focus on how procurement decisions expose sensitive data in the public sector. He holds a certificate in federal acquisition regulation from George Washington University's law extension program.
5 stories
SOC 2 Type II Reports for AI Services — What They Miss
SOC 2 Type II reports miss critical AI-specific risks like model drift and agentic behavior.
Darnell Okafor-Baptiste
ISO 42001 Audit Criteria for Privacy Preserving AI
Architecture choices like on-device inference prove privacy impact, not just good intentions.
Darnell Okafor-Baptiste
Attorney-Client Privilege Risks in Legal AI Platforms
Courts are now weighing platform architecture against four privilege factors.
Darnell Okafor-Baptiste
HIPAA Gaps in Regulating AI Inference on De-Identified Data
Algorithms can re-identify data HIPAA deems safely anonymous.
Darnell Okafor-Baptiste