California Governor Gavin Newsom has signed into law Senate Bill 53, establishing new transparency requirements for large artificial intelligence companies, making it the first law of its kind in the nation. This legislation mandates major AI labs, including OpenAI, Anthropic, Meta, and Google DeepMind, to disclose their safety protocols and ensures whistleblower protections for employees. The bill also allows the public and AI firms to report critical safety incidents to California’s Office of Emergency Services. In addition, companies must report incidents involving crimes committed without human oversight, such as cyberattacks, and deceptive behaviors not covered by the European Union’s Artificial Intelligence Act. Governor Newsom emphasized that this law balances community protection with the continued growth of the AI sector, stating, “California has proven that we can establish regulations to protect our communities while also ensuring that the growing AI industry continues to thrive.”
A recent report from Senate Democrats reveals that the Department of Government Efficiency, created by Elon Musk, is violating cybersecurity and privacy regulations across three federal agencies. The findings indicate that the department is operating outside of federal law and poses significant risks to the personal data of American citizens, with a whistleblower claiming a 35% to 65% chance of a catastrophic data breach at the Social Security Administration after sensitive information was uploaded without adequate protections. The report suggests that the Department of Government Efficiency has been bypassing necessary cybersecurity measures and oversight, raising alarms about the potential for identity theft and other privacy violations. It calls for stripping the department of access to sensitive personal information until compliance with federal security and privacy laws is ensured. In response, officials from the Office of Personnel Management and the Social Security Administration have disputed the report’s conclusions, asserting that they adhere to strict security protocols and that no unauthorized access has occurred.
The Cybersecurity and Infrastructure Security Agency has confirmed that it will conclude its cooperative agreement with the Center for Internet Security, which oversees the Multi-State Information Sharing and Analysis Center, effective September 30, 2025. This marks a significant transition for state and local government cybersecurity support, as the federal agency shifts to a new model that prioritizes access to grant funding, no-cost tools, and cybersecurity expertise. For over two decades, the Center for Internet Security has provided vital cybersecurity services to local governments, but recent funding cuts have forced it to modify its business model, including charging members based on their IT budgets. As CISA diminishes its support for the Center, it will continue to collaborate on information sharing and provide services such as grant funding through various programs and free cybersecurity assessments.
Why do we care?
Three stories, one theme—governance.
California just passed the first AI transparency law. That means the compliance wave is real—if you’re offering AI to clients, you can’t ignore it. California is too big a market, and AI companies are based there.
Then there’s the so-called Department of Government Efficiency, accused of skipping cybersecurity basics at the Social Security Administration. A whistleblower says there’s up to a 65% chance of a catastrophic breach. Even if that’s politics talking, it proves the point: cut corners on security, and efficiency doesn’t matter.
And finally, CISA is cutting ties with the Center for Internet Security. Local governments that relied on CIS’s bundled help are now going to have to fend for themselves with grants and free tools. Guess who they’ll turn to? Service providers who can actually make sense of it all.
Regulation’s tightening, government’s stumbling, and the market’s opening. This is your moment if you can be the trusted guide through compliance and funding chaos.