Notification, not disclosure
AI policy’s center of gravity is moving. From what companies tell regulators, to what individuals get told.
So. Here’s what happened on the way to issue #2.
I went looking for last week’s story. Companies sharing less. Transparency contracting. Maybe a new wrinkle this time. What I found was the opposite vector entirely.
Forty-three new observations converged on a single cluster this week. NormSense names it cluster 661d9d48 Compel Notification to Workers and Citizens Before AI-Mediated Decisions. NYC. The EU. Several states. Different jurisdictions, same move: when an AI system makes or informs a decision about someone, the person gets told. Not their employer’s compliance team. Not the SEC. The actual human.
Meanwhile the venues I’d bet on for this week’s lead all produced nothing. IEEE working groups. SEC filings. arxiv preprints. NIH research. Combined, those connectors pulled in about fifty documents. Zero new AI norms among them.
So.
The transparency story is shifting addresses.
The week’s strongest signal
Cluster 661d9d48 — Compel Notification to Workers and Citizens Before AI-Mediated Decisions. NormSense’s synthesis claim:
“Regulatory frameworks increasingly require that individuals be notified when AI systems affect employment, policy, or administrative decisions they are subject to.”
Forty-three observations across twenty-four documents in seven days. NYC’s Local Law 144. SEC rulemaking. State legislatures replicating NYC’s structure. Federal courts establishing procedural due-process rights when automated systems deny benefits.
What ties them together is the direction of address. Transparency that goes downstream. To the worker before the hiring algorithm runs. The candidate before the screening tool ranks. The citizen before the agency adjudicates.
For a Chief AI Governance Officer, this matters operationally. Corporate disclosure compliance runs on quarterly cadences. Annual reports. Structured filings. Individual notification compliance runs on real-time decision flows. Different documentation. Different audit trails. Different liability surface. “We disclosed this in our 10-K” won’t protect you from “we deployed an AI hiring tool without notifying the worker.”
The bigger move we see from this cluster:
“AI transparency is migrating from corporate disclosure to individual notification. The operational requirements do not transfer.”
If you read issue #1’s argument that companies are sharing less, this is the regulatory system’s reply. The lever is shifting.
Three other movements worth your week
Cluster 4b1715cd — Compel Disclosure of AI Governance Risks and Bias Audit Outcomes. Crossed the crystallization threshold on May 10. Forty-two new observations this week. NCS at 0.714, which is NormSense’s signal that the norm is stabilizing. NYC’s bias audit publication mandate, SEC AI risk requirements, Canada’s AIA portal. Three jurisdictions converging on one structural pair: bias audit plus worker notification. The audit feeds the notification. The notification proves the audit happened.
Cluster 69b020ba — Build Federal AI Governance Capacity Through Dedicated Personnel Infrastructure. Fifty-three observations. Federal agencies are doing something quietly important: hiring permanent AI governance staff with NIST AI RMF experience as a job qualification. AI governance is becoming a GS-14 line item. If you want to know where federal AI oversight is actually maturing right now, read the job postings.
Cluster 15beb6f4 — Community-controlled AI data sovereignty. Civil society organizations building participatory data infrastructure for affected communities. The institutional version of what the notification cluster does at the individual level. Indigenous data sovereignty frameworks. Community oversight boards. Participatory algorithmic impact assessment.
Three clusters. One direction.
Agency is relocating. From regulators and corporate disclosure regimes, to individuals (notification) and affected communities (sovereignty). With federal hiring infrastructure quietly building the enforcement capacity behind both.
What didn’t move this week
Six major venues fetched roughly fifty documents this week. None produced new AI-norm content.
IEEE Xplore. Twenty-four documents. Zero new norms.
SEC EDGAR. Thirteen documents. Plus five from the AI-specific filter. Zero new norms.
NIH Reporter AI. Nine grant documents. Zero new norms.
Disability Rights. Eight documents. Zero new norms.
arxiv AI ethics. Quiet week.
Quiet weeks at IEEE, the SEC, and arxiv don’t mean those venues stop mattering. They mean the locus of action has moved. This week’s norms weren’t standards proposals or corporate disclosures or academic critiques. They were operational mandates with addressees who could read them.
The transparency you should be building around won’t get filed.
It’ll get sent.
— Zach, see you in the cluster pages


