A company’s use of AI can trigger litigation in numerous ways, including when a system produces discriminatory outcomes, mishandles data or operates without adequate oversight. When an AI tool becomes “Exhibit A” in a regulatory or litigation proceeding, a company defending itself will need to demonstrate that it has built a solid foundation, infrastructure and controls. This article offers practical tips on how to build that framework, distilling insights shared by experts from Future of Privacy Forum, Snap and White & Case during IAPP’s Privacy.Security.Risk. + AI Governance Global conference. See “Practical Guardrails for Employers’ Use of AI” (Oct. 28, 2026).