"Trustees and administrators must treat AI vendors as ERISA service providers for ERISA purposes. AI tools much be carefully vetted to ensure compliance with ERISA. Legal, IT, trustees and vendors share responsibility for ethical and effective AI use. ERISA plan fiduciaries must act prudently in selecting and monitoring service providers, including with respect to their use of AI. Some of DOL's cybersecurity best practices can be adapted to AI systems, such as strong access control procedures, prudent annual risk assessments and vendor oversight."  MORE >>