California Draws the Line on Clinical AI (09/05/2026)

A short Saturday board with three items on it, and they share a spine worth naming. Each one moves liability toward the organization that chose to deploy something, whether that is a clinical AI tool, a compensation arrangement, or a driver, and away from the thing that did the visible act. That is the direction of travel across most of what we cover, and it is why an assessment of what you have deployed is now a legal document rather than an operational one.

Top 3 Critical Compliance Alerts

1. California Keeps Clinical Judgment With the Licensed Professional

California’s 2026 legislative session went past regulating artificial intelligence in health care and drew a line through the clinical encounter, holding that licensed professionals remain responsible for clinical judgments and placing obligations on organizations deploying the tools. Health care organizations that adopted decision-support software on the understanding that it shares the risk need to reread that assumption. The professional carries the judgment, the organization carries the deployment, and the vendor carries considerably less than either. JD Supra has the analysis.

Operator Note: Produce the list of clinical tools in use and who authorized each one, because that list is the first thing anybody will ask for and most organizations cannot assemble it quickly.

2. The SEC Publishes What It Found on Adviser Conflicts

The SEC issued a risk alert on June 9 setting out examination observations on investment advisers’ obligations to identify, disclose, and manage economic conflicts of interest, working through past deficiencies in a way that reads as a preview of what examiners will ask next. A risk alert is the cheapest compliance intelligence available, because it tells you what a real examination found rather than what a rule requires in the abstract. Read it against your own disclosures before somebody else does. JD Supra has the breakdown.

3. Illinois Trucking Suits Reach Past the Driver

Plaintiffs in Illinois trucking litigation are increasingly pursuing punitive damages against motor carriers, expanding cases beyond questions of driver negligence into the carrier’s own hiring, training, monitoring, and dispatch decisions. Once the claim targets the company’s decisions, the discoverable material becomes your records: the training you documented, the monitoring you performed, and the complaints you received and did nothing about. Fleet operators outside Illinois should read this as a preview. JD Supra has the mitigation guidance.

Operator Note: Punitive exposure attaches to what you knew and did not act on, so the record of a complaint with no follow-up is worse than no complaint system at all.

Additional Compliance Alerts

Compliance Frameworks

• Two compliance training sessions worth the calendar entry: A Healthcare Basic Compliance Academy runs September 14 to 17 in San Diego, grounded in the Office of Inspector General’s General Compliance Program Guidance and the Department of Justice’s Evaluation of Corporate Compliance Programs. A virtual workshop on building training that holds up against those DOJ expectations runs October 6 and 7. Healthcare Academy and training workshop

The Axe Report is a daily briefing from Grab The Axe. Need help assessing your organization’s security posture? Take our free Human Attack Surface Score assessment.