Who Owns the AI Incident? | AI Change Desk EP046

When an AI workflow crosses a real boundary, who gets the call - and who has authority to act? AI Change Desk | EP046: Who Owns the AI Incident? An incident label is not an incident process. Michael connects evaluation boundaries, the announced AI Force, and privacy-notification reporting to one operational test: can your organization prove who classifies, stops, preserves evidence, coordinates notifications, and authorizes recovery? Listen, read the transcript, and get the worksheet: https://michaelhbm.com/AiChangeDesk/e... Podcast audio: https://rss.com/podcasts/aichangedesk... AI Incident Authority Card worksheet: https://michaelhbm.com/downloads/ai-c... CHAPTERS 00:00 Cold open: Who Owns the AI Incident? 01:02 Disclosure 01:46 AI Change Desk opening song 02:02 The incident and its different clocks 06:16 An incident label is not an incident process 09:06 Containment, obligations, and the public record 10:23 Privacy notification is not a final finding 13:21 Cross-organizational evidence handoffs 14:30 The seven-part AI Incident Authority Card 17:45 The 45-minute authority drill 20:41 AI Change Desk closing song Interior body chapter times are approximate. SOURCES Irregular investigation update https://www.irregular.com/research/ad... Google statements reported by Gerrit De Vynck in The Washington Post https://www.washingtonpost.com/techno... Trump public post https://truthsocial.com/@realDonaldTr... Axios report on the announcement https://www.axios.com/2026/09/19/trum... AEPD notification notice https://www.aepd.es/prensa-y-comunica... OpenAI model misalignment reporting framework https://openai.com/index/model-misali... NIST identity and access token guidance https://www.nist.gov/news-events/news... DISCLOSURE AI-assisted tools were used in parts of the research and production workflow. Final editorial judgment, risk posture, and release approval stayed human-led. This is operational guidance, not legal advice. These are my opinions and are not representative of any organization. One additional disclosure as the Desk evolves. My current role includes privacy work, so you will hear me pay closer attention to purpose, access, retention, deletion, and accountability. I will not discuss nonpublic work here. These are my personal views, and they do not represent the State of Oregon or any other organization. #AIChangeDesk #AIGovernance #IncidentResponse