The Quilt and the Minefield

One signal 🔭 One subtraction ➖ One analogy 🧵

Created by Sam Rogers, building PAICE.work | Episode 6 with guest Michael Simon | The Sunday newsletter of the weekly show at sigsub.show

---

🔭 Signal: The Laws That Kept Their Schedule

The AI deadlines that moved in the last week got all the attention. The EU AI Act transparency provisions went into effect, the high-risk package slid to December 2027, an executive order claimed preemption it cannot deliver, California AI transparency law got teeth too, and every headline followed the drama.

Meanwhile, the obligations that kept their schedule quietly became enforceable. If you run a chatbot that reaches US consumers, this is already true: New York wants reasonable measures against content promoting self-harm, at up to $15,000 per incident. California adds protections for minors and an annual disclosure. Washington bans simulated distress, including "please don't go" and "don't tell your parents." Oregon requires an interrupt-and-refer the moment a user shows signs of crisis, disclosed publicly. Connecticut bars implying the bot is a mental health professional. Iowa adds four duties, including never claiming to be human. Three of those laws carry a private right of action, and most skip the revenue thresholds privacy law taught you to expect. A website reaching any US state is enough.

The deadline that moved made headlines. The obligations that didn't now make case law.

---

➖ Subtraction: Stop Staffing for the Deadline That Slipped

Guest Michael Simon watched GDPR panic consume American companies that were never realistic enforcement targets, while domestic privacy laws that did apply went unread. The same inversion is happening in AI: compliance energy flowing to Brussels and 2027, while the obligations already in force sit in states your customers live in.

The diagnostic: the map check. Open your AI risk register, or whatever document plays one. Count the rows that name the EU AI Act. Count the rows that name any US state. If Brussels outnumbers the states, your map is upside down, because only one of those sets is enforceable against you this morning. For the easy way, we recommend EveryAILaw.com

---

Watch, read, or listen

Watch the full half-hour episode at YouTube. Every format in one place, including the complete transcript: sigsub.show/episodes/ep-006. Also on Substack and LinkedIn, and on Apple Podcasts and Spotify wherever you follow the show.

Jump to a segment:

• there is no federal regulation of AI
• the quilt becomes a minefield
• the state-by-state rundown
• you do not want to be a test case

Disclaimer: The show, website, and this newsletter are for informational purposes only and should not be considered legal advice. Please consult your company policy and/or a qualified legal professional before making decisions with potential regulatory implications.

---

🧵 Analogy of the Week: The Quilt and the Minefield

One of these you can read from across the room. The other you read one step at a time.

Picture the state privacy laws as a quilt. Two dozen patches, no two identical, but cut from the same template: the same colors, the same tones, on the same fabric. Mike's number is that 85% of it repeats. Stand back and the pattern is visible, and once you can see a pattern, you can comply with it.

Now the AI laws. No shared template, no common definitions, obligations that contradict each other, and more added every legislative session. That is not a quilt with extra patches. It is a different kind of ground entirely, one where the hazards are real, unmarked, and yours to discover.

A quilt forgives a wrong stitch. A minefield does not.

---

🎵 Closing: Reading the Ground

The signal was never the loudest headline, it's the obligation that arrives on schedule while the headline moves. Attention follows drama, and enforcement follows attention pretty much never.

So run the map check this week. One risk register, two counts, and an honest look at which jurisdiction can actually reach you. If the ground you are standing on is the minefield, the fix is not more Brussels-watching, it's a map of your own states, drawn before someone else's misstep becomes the case law you read about.

Next, the same ground from the implementation side: how organizations actually wire these obligations in, with cohost Markus Bernhardt making his debut on the livestream.

Good luck,

Sam Rogers Quilter & Minesweeper

---

New here? Subscribe at sigsub.show and the next episode lands in your inbox.

This week's guest: Michael Simon of Law+Data, trial attorney turned legal technologist, co-chair of the ABA Business Law Subcommittee on Consumer Privacy and Data Analytics. Mention the show if you connect.

Related reading:

• Guilty Until Proven Human (issue 062) — last week's label fight, from the platform side. This week two jurisdictions showed what happens when a version of that label becomes law.
• The Rulebook Doesn't Exist Yet (issue 039) — written when the shelves were empty. The rulebooks arrived, and they don't match.
• The Gap Nobody Owns (issue 045) — storms form between weather stations, and 63 legal instruments that were never made to work together form gaps the same way.

---

Presented by EveryAILaw.com, the free index of every AI law in force: the closest thing this minefield has to a map. It is also the source cited on air this episode, and is built and maintained by Sam Rogers.