AI Ethics and Power: Who Holds the Master Key?

FORBIDDEN AI DIAGNOSTIC

The AI Disruption IQ Test

Ten fact-based questions on job automation, wealth concentration, AI power dynamics, and what's actually coming next. No hype — just the numbers. Answer honestly, no going back.

Q1 / 10
0 correct
CATEGORY
Question text
TEST COMPLETE
0% SCORE
— / 10 CORRECT

Answer review

Brush up on what you missed

AI Ethics and Power

Who Controls <a href="https://www.forbiddenai.site/ai-sycophancy/">AI Ethics</a>? The Nine-Day Board, Regulatory Capture, and the $36M Lobbying Answer
Governance Regulatory Capture EU AI Act 2026 17 min read · Updated May 2026

Who Controls AI Ethics?
The Nine-Day Board, $36M in Lobbying,
and the Answer Nobody Likes

Google dissolved its AI ethics advisory board before it held a single meeting. Big Tech spent $36 million lobbying against AI oversight while simultaneously publishing responsible AI principles. The EU’s enforcement clock hits zero in August 2026. And most organizations still can’t name who has authority to halt their highest-risk AI system.

What this article answers — before you spend 17 minutes
  • Google’s ATEAC ethics council lasted nine days, was dissolved before producing a single finding, and is more structurally revealing than the Gebru case most people cite instead
  • Big Tech spent $36M on federal lobbying (2023–H1 2025) while positioning themselves as the primary voices on responsible AI development
  • AI board oversight disclosures grew 84% year-over-year — but ethics board adoption was nearly flat. These are not the same governance instrument.
  • The 2025 peer-reviewed literature names the dynamic: regulatory capture. The standards organizations nominally overseeing AI are frequently funded by the industry they’re meant to check.
  • EU AI Act full enforcement begins August 2026. Most organizations cannot answer the three questions regulators will ask about their highest-risk deployments.

Part I The Nine-Day Board

9
Days before Google dissolved its AI ethics council
The ATEAC — Google’s Advanced Technology External Advisory Council — was announced March 26, 2019. It was dissolved April 4, before holding a single meeting, the moment it created organizational friction. No findings suppressed. No revenue threatened. Just friction.
Source: MIT Technology Review, April 2019 · Joanna Bryson, Petrie-Flom Center, Harvard Law, April 2019

The ATEAC case gets used sparingly in AI governance writing. That’s a mistake, because it is the cleaner data point. When Google fired Timnit Gebru in December 2020, you could at least argue about the causal chain — whether the paper’s content drove the termination, whether other factors were in play. People did argue. The structural problem was clear but the specific causal claim was contested.

The ATEAC case requires no inference. No contested causal chain. The sequence is public and documented: Google assembled external oversight, encountered a governance disagreement before the council had done anything, and dissolved it. The council had not held a meeting. It had produced no position on any subject. Council member Joanna Bryson wrote afterward that the group had been preparing to stress-test Google’s internal facial recognition policy — that the people she spoke to at Google “seemed profoundly disturbed by what face recognition could do.” That work never happened. The council was nine days old. It was still easier to end than to maintain.

The structural point — not the political controversy point

The ATEAC dissolution is sometimes read as a story about a controversial council member and a petition. That misses what it demonstrates. The council’s failure was not in its member selection. It was in the architecture — a structure in which the company retained unilateral authority to end oversight the moment oversight became inconvenient. That structural feature is not fixable by choosing better members. A better-selected council under the same architecture would face the same vulnerability the moment it produced its first inconvenient finding.

Seventeen months later, the Gebru case supplied the second data point: this time showing what happens when internal ethics research, rather than external oversight, threatens a commercial interest. Together they establish a two-case pattern. External oversight dissolved at first friction. Internal oversight suppressed at first commercial conflict. Two separate mechanisms, same result. Neither is a one-off bad actor story. Both are what the incentive structure produces.

Part II $36 Million and What It Actually Buys

The gap between what AI companies publish and what they fund is not a secret. It’s just rarely described in the same sentence, which is convenient for everyone involved.

$36M
2023 – H1 2025
Combined federal lobbying spend by eight largest AI/tech companies (Issue One analysis of federal disclosures)
$320K
Per congressional day
Average AI lobbying spend for every single day Congress was in session during that period
$1.76M
OpenAI in 2024
Up from $260,000 in 2023 — a 6.8× increase in one year, as government contracts worth hundreds of millions were being negotiated
$6M
Anthropic + OpenAI, 2025
Combined lobbying spend in 2025 — their highest annual outlays to date, both pursuing substantial government contracts simultaneously

During Q2 2025, Big Tech tried to push a provision into Trump’s spending bill that would have stripped states of the power to regulate AI and social media algorithms for the next ten years. A blanket, decade-long federal preemption of the most active regulatory jurisdiction in the country — while federal frameworks remained incomplete and enforcement mechanisms untested.

Here’s the part that deserves explicit naming, because it usually gets reported as two separate stories: the same companies pushing that preemption were simultaneously publishing responsible AI principles and commissioning ethics research. Both things are true. The ethics commitments are not fabricated. The lobbying strategy is not fabricated. They coexist because the incentive structure allows it — and in fact rewards it. Commit to ethics in the domain you control. Lobby against oversight in the domain you don’t.

The question of who controls AI ethics is not a philosophical question. It is a resource allocation question. And the resource gap between those writing the ethics principles and those funding the policy environment around them is currently measured in orders of magnitude. Forbidden AI editorial analysis, 2026

Part III Regulatory Capture Isn’t a Conspiracy. It’s a Mechanism.

The 2025 AI & Society peer-reviewed analysis doesn’t use the word “conspiracy.” It uses “structural condition.” The distinction matters.

Regulatory capture is what you get when the regulated entities have more resources, more technical expertise, and more sustained attention to regulatory processes than the bodies overseeing them. The FDA version has been documented for decades: senior officials cycle into industry roles, taking institutional expertise and relationships with them. The AI version operates the same way — except the technical complexity is higher, the development pace is faster, and the standards organizations nominally overseeing AI are frequently funded by the industry they’re meant to check.

The auditor analogy is the clearest frame. A professional auditor at a public company cannot simultaneously hold equity in the company being audited. That rule exists not because auditors are assumed dishonest — it exists because the structural conflict corrupts independent judgment in honest people, gradually, in ways the person experiencing the conflict usually can’t detect. A hospital-funded safety review of hospital practices produces systematically more favorable findings than an independently funded one. Not lying. Drift: in the framing of research questions, the selection of comparison cases, the interpretation of ambiguous data. All of it drifts toward the funder’s interest without anyone deciding it should.

The second-order mechanism — why it’s invisible from inside

Every organization building AI systems right now has a powerful incentive to believe its own ethics processes are genuine. The alternative is uncomfortable. The teams doing ethics work are typically talented and committed. They are also typically underfunded relative to the product teams whose outputs they’re evaluating, structurally subordinate to business units whose revenue depends on those outputs, and operating without the institutional independence that makes oversight meaningful rather than decorative. The self-monitoring systems are running on the same hardware as the systems they’re meant to monitor.

Part IV The Three Actors — and Why None Can Hold the Key Alone

There are three actors with a genuine claim on AI ethics authority. Each has real advantages. Each has a structural failure mode. Understanding all three is required to understand why the current governance architecture produces ethics performance rather than ethics substance.

AI ethics authority — structural failure mode analysis
AI Ethics Governance Authority
Structural failure documented
Private AI Labs
Have technical access no external body can replicate. Also have revenue conflicts that produce documented drift in ethics review — ATEAC dissolved, Gebru suppressed, lobbying against oversight while publishing principles. The entity that holds the unilateral authority to end oversight retains the master key.
Real but constrained
State Regulators
Binding obligations, penalties, cross-border jurisdiction. EU Act enforcement signals documentation gaps are themselves violations. But: technical capacity to audit frontier AI does not exist at regulatory workforce scale. Can catch disclosed failures. Structurally limited on undisclosed ones.
Undermined by funding
Civil Society / Research
Independence from commercial pressure. Demonstrated capacity to surface suppressed findings — Gebru paper’s LLM risks validated by mainstream research years after internal suppression. But: no enforcement authority, chronically underfunded, and many AI safety nonprofits are themselves funded by the labs they nominally check.
Normative only
International Standards
Cross-jurisdictional coordination. OECD AI Principles, UN resolution, G7 frameworks. No binding authority. Coordination absent a catalytic crisis historically fails to close enforcement gaps — and standard-setting processes have been documented as targets for industry influence precisely because they lack enforcement mechanisms.

The complicating finding — the one that works against a simple “regulate harder” answer — is that the EU AI Act is already showing implementation strain. The Council on Foreign Relations’ January 2026 analysis identifies a regulatory arbitrage dynamic: countries crafting permissive environments attract agentic AI investment the same way offshore financial centers attracted capital. The countries with meaningful enforcement face a competitive disadvantage relative to those without it, regardless of governance quality.

China resolved its version of this problem by replacing commercial concentration with party oversight. That eliminates the power asymmetry between labs and the state — and creates a different accountability failure. Neither model resolves the foundational problem.

Part V The Number That Reveals the Whole Architecture

A cross-source finding that doesn’t appear in any single published analysis — but emerges when you put three datasets in the same frame.

Growing fast ↑
+84%
Year-over-year growth in AI board oversight disclosures at S&P 500 companies. A board oversight disclosure = a statement that the board has assigned responsibility for monitoring AI risk to a named committee.
Nearly flat →
≈0%
Growth in genuine AI ethics board adoption over the same period. An ethics board with structural independence = a body that can produce findings the company is obligated to act on.

These are not the same governance instrument. One of them is growing at 84% annually. The other isn’t growing. The governance architecture being built in response to regulatory pressure is producing the appearance of accountability more reliably than accountability itself.

The lobbying data, the board-oversight data, and the regulatory capture literature, read together, show the same structural dynamic from three separate angles. Companies are not adding ethics boards — they’re adding board-level oversight disclosures. The distinction between “the board monitors AI risk” and “there exists an independent body that can produce findings the company must act on” is the entire substance of the governance question. In most organizations in 2026, the former exists. The latter frequently doesn’t.

The agentic shift that makes this urgent right now

Agentic AI systems — those that take autonomous actions, not merely produce outputs — are moving from experimentation to enterprise deployment in 2026. The governance architecture being built now was designed for AI that generates content. Not AI that initiates transactions, schedules appointments, or triages clinical patients. The CFR’s analysis identifies the unresolved legal question: should AI agents be treated as legal actors bearing duties, or legal persons holding rights? The organizations building ethics processes for content-generating AI right now are building the wrong framework for the system they’ll be running in 18 months. Governance debt compounds in the gap.


For: Individual AI ethics practitioners and researchers

Your role is structurally vulnerable before you produce a single finding

The ATEAC council was nine days old. No findings. Still ended. That’s the lesson the Gebru case is usually asked to carry — but the ATEAC case teaches it more cleanly, because there’s no possible “it was about the research content” explanation. Internal ethics authority without documented independence is not governance infrastructure. It is governance performance. The difference is what survives when the performance becomes inconvenient.

  • Build documentation that exists independently of your employer’s systems. Track the decision chain on every significant ethics review. Record every instance where a concern was raised and the decision made to proceed. Not as a litigation strategy — as the foundational element of institutional accountability. The organizations that demonstrate governance under regulatory scrutiny in August 2026 will be those where that chain is traceable today.
  • Check whistleblower protection in your jurisdiction before you need it. The UK’s Institute for the Future of Work analyzed the Gebru case and found existing protections were insufficient to cover the structural concerns raised. That gap has not been systematically closed. Build documentation before the protection becomes urgent — because it may not arrive when you need it.
  • Know which of your organization’s governance instruments is which. A signed ethics charter is not a mechanism of accountability. A bias review committee reporting into the same business unit whose products it reviews is not independent oversight. Knowing the difference means you can name accurately which governance gap you’re operating in.
  • Don’t conflate publishing ethics principles with having governance infrastructure. They are different things with different structural properties. One survives inconvenience. One doesn’t.
  • Don’t rely on the organization’s stated commitment to ethics as structural protection. The ATEAC council was dissolved by an organization that had publicly committed to responsible AI. The commitment and the governance architecture are separate questions.
For: Organizational leaders, boards, and compliance teams

August 2026: the three questions you need to be able to answer

When EU AI Act enforcement begins, regulators will not ask whether you have an ethics commitment. They will ask operational questions. Three specifically: What monitoring is in place for high-risk AI systems? What escalation path exists when a system behaves unexpectedly? Who has authority to halt it, and is there documentation that authority was exercised? Most organizations currently cannot answer the last two for their highest-risk deployments. That is not an ethics problem. It is an operational risk exposure with a specific enforcement date.

  • Build a central model inventory with risk classifications. The EU AI Act requires you to know which systems are high-risk. Most organizations don’t have this documented at sufficient granularity. If you don’t have it, start now — the window before enforcement is narrowing monthly.
  • Define escalation paths with named human authority at each threshold. “The AI team handles it” is not an escalation path. A named human with documented authority to halt deployment, visible in governance documentation, is.
  • Structure audit functions so they don’t report through the business unit they review. This is the hardest change organizationally and the most important structurally. An audit function that reports to the business unit it audits is not an independent audit function. It is an ethics disclosure with extra steps — and regulators will know the difference.
  • Apply AI-specific governance, not traditional software governance. AI systems are probabilistic, subject to drift, adversarial manipulation, and distribution shift. Software governance was designed for deterministic code. Applying the wrong governance model creates invisible risk that surfaces at the worst moment.
  • Don’t treat an AI ethics committee that meets quarterly as continuous monitoring. Annual bias audits without monitoring between them leave the entire deployment window uncovered.
  • Don’t conflate a board oversight disclosure with an independent ethics board. The 84% growth figure is the former. The latter requires structural independence from the business unit being reviewed — and is the thing that is not growing.
  • Don’t assume the voluntary framework is stable. Anthropic’s RSP — the most prominent voluntary safety commitment in the industry — was revised under pressure in February 2026. If your governance documentation cites vendor safety policies as controls, you just watched the risk model change without a governance review.

The Nine-Day Test Is Coming for Every Organization

No single actor holds the key to AI ethics authority. The evidence doesn’t support the model where one should. What it supports is a distributed accountability architecture where labs are constrained by binding external regulation they cannot lobby away, regulators are constrained by independent technical audit capacity they don’t currently possess, and civil society is constrained by the funding and legal infrastructure its independence requires.

That architecture doesn’t currently exist. What exists is performance of distributed accountability: ethics boards that dissolve in nine days, oversight disclosures growing 84% annually without corresponding independent oversight bodies, standards organizations funded by the entities they nominally govern.

The foundational assumption is this: structural independence is not a design preference. It is the minimum condition under which oversight produces information the organization doesn’t already prefer. The ATEAC council wasn’t ended because it had produced a problematic finding. It was ended because maintaining it required managing a disagreement the company could avoid by dissolving it. The entity that holds the authority to end oversight when it becomes inconvenient holds the master key. In 2026, that entity is still, in most cases, the company itself.

Every organization deploying high-risk AI in the next 18 months faces a version of the nine-day test. Not one imposed by external pressure, but the internal moment when ethical oversight becomes operationally inconvenient — when a system flags a concern that would delay a launch, when an audit function surfaces a finding that conflicts with a revenue projection, when a governance review creates friction with a government contract timeline. Most organizations haven’t been tested yet. The enforcement timeline is fixed. The test is coming.


https://www.forbiddenai.site/ai-bill-the-one-your-board-will-see/

https://www.forbiddenai.site/why-ai-cant-grasp-morality/

https://www.forbiddenai.site/ai-ethics-battles-happening-right-now/

https://www.forbiddenai.site/banned-ai-ideas-future-innovation/

https://www.forbiddenai.site/ai-ethics-and-control-in-warfare/

Leave a Reply

Your email address will not be published. Required fields are marked *