A member of the White House’s AI task force said this week that corporate boards that ignore security concerns flagged by outside auditors could face personal legal exposure, pushing back on the idea that AI companies are bound only by a voluntary, moral commitment to self-report problems.
Scott Kupor, speaking Monday on Fox Business Network’s “Varney & Co.,” told host Stuart Varney that the arrangement struck between AI companies and the government carries more weight than a handshake promise. According to a clip of the interview highlighted by Breitbart, Kupor argued that the outside auditor mechanism gives the accord real enforcement consequences.
A question of enforcement
Varney opened the exchange by framing the current landscape as one where AI firms are “morally bound to self-report” and asked whether that standard is sufficient.
Kupor disagreed with the premise. He said the president has described the commitment in moral terms, but that the structure is “even stronger than that.” The key, he explained, is the outside auditor that companies agreed to under the accord. That auditor, he said, effectively reviews a company’s security policies and, as with a public company’s financial audit, reports findings to the board of directors.
From there, Kupor drew a direct parallel to financial auditing. If a board receives an issue from its auditor and fails to respond, he said, directors have “a fiduciary duty, and potentially even personal liability” for not addressing those security concerns. He characterized the setup as having “real legal teeth,” rather than resting solely on voluntary compliance.
Kupor also noted that other forms of liability could apply, and that the Federal Trade Commission and the Department of Justice have tools available to them under existing law. He did not detail specific statutes during the segment, but his comments suggest the administration views the auditor requirement as a bridge between voluntary commitments and traditional regulatory enforcement.
Why the distinction matters
The exchange touches on one of the central debates surrounding AI governance: whether voluntary commitments from leading technology companies are enough, or whether binding consequences are needed to ensure compliance. Critics of voluntary frameworks have long argued that without a credible enforcement mechanism, companies face little downside to ignoring safety and security recommendations.
Kupor’s answer attempts to close that gap by pointing to the legal duties that already attach to corporate boards. Directors of public companies owe fiduciary duties to shareholders, and audits β whether financial or, in this case, security-focused β flow to the board as part of that oversight role. If Kupor’s reading holds, a board that receives a security warning from an agreed-upon outside auditor and does nothing could find itself exposed to claims of dereliction, and individual directors could potentially be held personally responsible.
That framing shifts the compliance question from the realm of public relations and good corporate citizenship into the realm of legal risk. It also raises questions about how broadly the auditor mechanism applies, what standards those auditors use, and how findings are escalated β details that were not addressed in the televised segment.
The comments arrive as policymakers continue to debate the right balance between encouraging AI development and guarding against security vulnerabilities that could affect consumers, critical infrastructure, and national security. The FTC and DOJ have increasingly signaled interest in policing corporate conduct around technology and data security, and Kupor’s reference to existing law suggests the administration sees those agencies as part of the enforcement picture.
For now, Kupor’s message to boards is straightforward: treating an auditor’s security finding as optional could carry personal consequences for the directors who let it sit. Whether that interpretation is tested in court β and how far it extends beyond the companies that signed the accord β remains an open question.
Source: www.breitbart.com β https://www.breitbart.com/clips/2026/10/06/ai-task-force-member-company-boards-have-fiduciary-duty-to-respond-to-concerns-from-outside-auditors/