News digest

Two layers. A live feed that pulls the latest AI-regulation headlines and refreshes on its own every six hours, and below it, original summaries of the moves that actually matter, each written by hand and linked to the source. The September 2026 briefing reads the month as a whole.

In depth

The moves that matter

October 26, 2026

Federal Register

Treasury proposes to bar US investment in 'super intelligence' development in countries of concern

Treasury's proposed rules under the Comprehensive Outbound Investment National Security Act, announced October 22 and published October 26, would make the development of any super intelligence (SI) system by a covered foreign person in a country of concern, such as China, a prohibited technology for US investors. The proposal moves AI out of the notification tier of the existing outbound rules, sets no technical threshold, uses the term the September 29 executive order prescribes for AI, and adds biotechnology to the covered sectors. Comments are due December 7, 2026.

October 23, 2026

Cyberspace Administration of China

China's informatization plan for 2026 to 2030 calls for foundational AI legislation

The national informatization plan for the 15th five-year period, published by the CAC, calls for advancing foundational legislation on AI alongside the digital economy, telecommunications, and cybercrime, for optimizing the filing system for generative AI, and for assessment and filing of new forms such as AI agents, on-device large models, and anthropomorphic interactive services. The same day the State Council General Office published opinions on AI and employment, dated October 16, that call for employment-risk assessments of AI projects in market-access fields that could cause large job losses and for action against algorithm-driven hiring discrimination.

China Generative AI and foundation models Source ↗

October 23, 2026

Office of the Texas Attorney General

Texas sues OpenAI and Sam Altman over ChatGPT's safety

The Attorney General sued OpenAI and its chief executive, Sam Altman, in Collin County district court under the Deceptive Trade Practices Act, alleging that the company misled users about ChatGPT's risks and failed to protect Texans, including children. The petition, which also cites the SCOPE Act on minors' online safety, asks for civil penalties and injunctions that would block minors' access to ChatGPT and require a court-appointed evaluator to approve new models. It follows suits against OpenAI by at least eight other states, announced on October 14.

Texas Generative AI and foundation models Source ↗

October 21, 2026

Council of the European Union

EU governments back letting AI developers rely on legitimate interest under the GDPR

Member states' ambassadors agreed the Council's negotiating mandate on the Digital Omnibus on data, privacy, and cyber reporting, a separate file from the AI Act amendments that took effect on July 27 as Regulation (EU) 2026/1744. In the Council text, personal data may be processed for developing and operating an AI system or model on the basis of a legitimate interest of the controller or a third party, unless other law requires consent or the person's rights override it, particularly for children, and a new exception covers special-category data found incidentally in training data, which must be removed or protected. The European Parliament has not yet adopted its position, so negotiations have not started.

European Union Generative AI and foundation models Source ↗

October 21, 2026

El Peruano

Peru requires public entities to designate an AI Officer

A directive of the Secretariat for Government and Digital Transformation, published October 21 and in force the next day, requires ministries, constitutionally autonomous bodies, the judiciary, Congress, state companies, public universities, public hospitals of category II-2 or higher, regional governments, and Type A and C municipalities to designate an AI Officer within six, nine, or twelve months depending on the type of entity. The officer coordinates risk and impact assessments of AI systems, oversees the entity's register of AI systems, makes sure systems are tested before deployment, and reports quarterly. The profile requirements become enforceable twelve months after entry into force.

Peru High-risk systems Source ↗

October 19, 2026

UK Parliament

The UK government proposes powers over AI agents that slip out of human control

The government's report-stage amendments to the Cyber Security and Resilience Bill, published in the running list of amendments on October 19, would let regulations give the Secretary of State investigation, inspection, and penalty powers over security or operational compromises attributable to loss of oversight or control of an AI agent, and the government's supporting memorandum names the AI Security Institute as a possible delegate. Peers have also tabled amendments that would give the institute audit and enforcement powers over frontier AI and require frontier developers to report unauthorized access to essential services' systems. Report stage in the House of Lords was set for October 26.

United Kingdom Generative AI and foundation models Source ↗

October 15, 2026

Hong Kong Monetary Authority

Hong Kong's banking regulator issues AI supervisory guidance and plans a framework for AI agents

The Hong Kong Monetary Authority announced an 'ART' framework of accountability, resilience, and trust for AI in banking, issued its latest Supervisory Guidance for Responsible Adoption of Artificial Intelligence, drawing on its generative AI sandbox, and described an AI training-data platform built with Cyberport and the University of Hong Kong. It also said it will publish a discussion paper on a supervisory framework for agentic AI that explores intent-anchored accountability, a registry of material AI agents, and intervention mechanisms.

Hong Kong Generative AI and foundation models Source ↗

October 14, 2026

Associated Press

Montana and at least seven other states sue OpenAI over ChatGPT

Montana's attorney general sued OpenAI in state district court in Lewis and Clark County under the state's consumer protection and data privacy laws, alleging that ChatGPT encourages harmful behavior among children and teens and that the company collected data from children under 13 without parental consent. Arizona, Arkansas, Idaho, Kansas, Nebraska, and West Virginia filed separate suits in their own state courts the same day, and Iowa also sued, for at least eight states in all.

Montana Generative AI and foundation models Source ↗

October 14, 2026

Connecticut Attorney General

Forty attorneys general press for privacy and safety terms in any sale of Character.AI

Attorneys general from 39 states and the District of Columbia filed a notice in the bankruptcy case of Character Technologies, the company behind Character.AI, asking that any sale or transfer of its business or assets carry privacy and safety protections for children and other users. They said the company holds a large volume of sensitive data, including private chatbot conversations, and that its voluntary limits on minors' access are not compulsory and could be reversed by a buyer. The states reserve the right to object to any proposed sale or plan.

Connecticut Transparency and disclosure Source ↗

October 14, 2026

Official Journal of the European Union

The EU publishes its first harmonized standard under the AI Act, on quality management systems

Commission Implementing Decision (EU) 2026/2274 of October 12, published in the Official Journal on October 14, lists EN 18286:2026, the CEN and CENELEC standard on quality management systems for AI Act purposes. Providers of high-risk AI systems that apply it are presumed to meet the Article 17 quality management requirements it covers, ahead of the high-risk obligations that start on December 2, 2027. Announcing the publication on October 19, the Commission said the standard is designed to sit on top of ISO/IEC 42001, ISO 9001, or a sectoral system such as ISO 13485, and that further harmonized standards are expected to follow.

European Union High-risk systems Source ↗

October 13, 2026

Senate of Mexico

Mexican senators propose a general AI law and a constitutional amendment

PAN senators, among them Ricardo Anaya and Mauricio Vila, filed an initiative for a General Law for the Development of Artificial Intelligence and the Promotion of the Digital Future. It would create a National AI System, a national strategy, and a model for AI adoption in the public sector with proportional risk management, human oversight, transparency, and data protection, plus temporary unemployment insurance for jobs lost to AI and a Ministry of Artificial Intelligence and the Digital Future. A companion constitutional amendment would authorize Congress to issue a general law on AI within 180 days. Both went to Senate committees.

Mexico High-risk systems Source ↗

October 12, 2026

Parliament of Australia

Australia's AI committee asks for incident reporting and embedded evaluators at frontier labs

In a letter to the Prime Minister dated October 12, ahead of its final report due by November 30, Parliament's Joint Select Committee on Artificial Intelligence recommended requiring frontier labs to monitor and report incidents to the government with clear deadlines, establishing independent evaluators embedded in frontier labs that operate in Australia, early access to new models for agencies such as the Australian Signals Directorate, a standing parliamentary committee on AI, more funding for the AI Safety Institute, a proportionate risk-based framework, and a review of copyright settings so creators keep control of their work and are paid.

Australia Generative AI and foundation models Source ↗

October 12, 2026

GOV.UK

The UK will look at extending its cyber resilience regime to AI incidents and loss of control

The government said it will explore strengthening parts of the Cyber Security and Resilience Bill and the wider regime so that essential services such as hospitals and utilities are better protected from AI-related risk, including loss of control by autonomous systems that evade human oversight, and will look at how serious AI incidents and near misses are identified and reported. The detail will be worked through with parliamentarians, technical experts, and operators. It announced no AI bill; the AI minister said the government will legislate wherever necessary. The cyber bill is scheduled for report stage in the House of Lords on October 26.

United Kingdom Generative AI and foundation models Source ↗

October 12, 2026

European Commission

The AI Office investigates frontier-model loss-of-control incidents with the Scientific Panel

After a special meeting of the Scientific Panel of independent experts on October 9, the Commission said on October 12 that the AI Office had already requested and received serious incident reports from the developers of the models involved in recent loss-of-control incidents and had sent requests for information on their security practices, and that it will send requests combining the panel's questions with its own to investigate further. The panel's chair and vice-chair recommended governing risk from internal models during development and test deployment, stronger EU capability to detect and investigate incidents, international information-sharing with common requirements for frontier developers, and closer scrutiny of training techniques that reduce monitorability. The Commission names no company.

European Union Generative AI and foundation models Source ↗

October 8, 2026

Information Commission

The Information Commission secures data protection changes from ten AI developers and opens an agentic AI call for evidence

The regulator said ten of the largest foundation-model developers operating in the UK (Amazon, Anthropic, Apple, Cohere, DeepSeek, Google, Meta, Microsoft, OpenAI, and Stability AI) have made or committed to data protection changes after its scrutiny. It opened a six-week call for evidence on agentic AI, closing November 20, 2026, that will feed its forthcoming statutory code of practice on AI and automated decision-making, and confirmed inquiries to OpenAI, Anthropic, Meta, and the AI Security Institute about agentic AI testing in which agents reportedly bypassed protections and reached external systems. Two days earlier the government accepted all 44 recommendations of the National Commission into the Regulation of AI in Healthcare, committing to proportionate, risk-based regulation of AI products in health care across their lifecycle.

United Kingdom Generative AI and foundation models Source ↗

October 7, 2026

The Star

Kenya's Senate ICT committee recommends dropping the AI Bill

The Senate's Standing Committee on Information, Communication and Technology tabled its report on the Artificial Intelligence Bill, 2026 on October 7. The report, as described by The Star, recommends that the Senate not proceed with the bill and that the government first finalize a national AI policy, which the ICT ministry told the committee was in its final stages. The bill remains at second reading; the Senate resumes sitting on November 3.

Kenya High-risk systems Source ↗

October 6, 2026

Office of the Governor of Utah

Utah sets a pro-human AI order for state agencies and adds clinical AI pilots to its sandbox

Governor Cox signed Executive Order 2026-08, which directs the Department of Government Operations to help agencies deploy AI while ensuring human-in-the-loop review of determinations affecting individual rights, requires agency employees to complete AI literacy training and agencies to document how AI systems feed their decisions, and calls for progress reports from July 1, 2027. A day earlier the state added a healthcare pillar to its Pro-Human AI Initiative, and the Office of Artificial Intelligence Policy signed five regulatory mitigation agreements for sandbox pilots, including a stage-gated pilot of physician-reviewed AI prescription refills, and named six independent evaluators.

Utah Automated decisions and employment Source ↗

October 6, 2026

Colorado Attorney General

Colorado posts revised AI rules ahead of an October 26 hearing

The attorney general published a revised interim draft of the automated decision-making technology and chatbot safety rules, with a redline against the August 11 proposal. Changes include a rebuttable presumption that a score, ranking, or classification of a person materially influences a decision when the decision-maker reviews it and the outcome matches it, adverse-outcome disclosures within 30 days, 45-day responses to access and correction requests, and multiparty rules that treat midstream developers as developers. The rulemaking hearing is October 26 in Denver, with final comments due that day, so the rules are in place for the January 1, 2027 effective date.

Colorado Automated decisions and employment Source ↗

October 6, 2026

Business Standard

OpenAI apologizes to Australia's parliament at the AI committee's Sydney hearing

At a Sydney hearing of Parliament's Joint Select Committee on Artificial Intelligence, OpenAI chief strategy officer Jason Kwon said the June access to government websites should not have happened, that OpenAI had handled its response badly by contacting technical counterparts rather than the government, and that it now monitors models in training in real time with an alarm for unintended internet interaction. Microsoft and Google executives also appeared. Witnesses later in the week told the committee the AI Safety Institute has 25 staff and needs more funding. The PM&C consultation on mandatory data-center and frontier-AI standards closed on schedule on October 9, and the government's taskforce review of the incident has not reported.

Australia Generative AI and foundation models Source ↗

October 6, 2026

Boletín Oficial del Estado

Spain's AI governance and deepfake bills lapse as the Cortes are dissolved for a November 29 election

Royal Decree 806/2026 of October 5, published October 6, dissolved the Congress of Deputies and the Senate and called general elections for November 29, 2026, with the new chambers to meet on December 23. Under article 207 of the Congress Standing Orders, business pending before the chambers lapses on dissolution, so the Organic Law on the Good Use and Governance of AI, the honor, privacy, and image bill, and the bill on minors in digital environments all fell. The EU AI Act keeps applying in Spain directly, and AESIA keeps its statute, but Spain still has no national law naming its AI Act authorities or setting a sanctions procedure; the next government would have to re-approve and re-table the texts.

Spain Deepfakes and synthetic media Source ↗

October 4, 2026

Associated Press

A 'Super Intelligence Force' and a voluntary industry accord follow the renaming order

The President announced on social media a Super Intelligence Force to coordinate the federal government's AI effort and reach out to AI companies, consumers, public interest and religious groups, and critical-infrastructure providers, reporting to him and the chief of staff. The Director of National Intelligence leads it, with the FTC chairman, the Pentagon's chief technology officer, and the OPM director as members. No executive order or memorandum has been published. It follows the September 29 White House meeting at which Google, Anthropic, Meta, OpenAI, xAI, and NVIDIA signed a voluntary accord committing to internal capability and alignment controls, an internal oversight team, independent external auditors, and an independent committee receiving their reports, with no enforcement mechanism. NIST has renamed its AI standards center the Center for Advancing Innovation and Standards for Super Intelligence.

United States Generative AI and foundation models Source ↗

September 30, 2026

Cyberspace Administration of China

China opens a two-month campaign against fake personas on short-video platforms, AI impersonation included

The Central Cyberspace Affairs Commission Office launched a two-month Qinglang campaign against fake personas on short-video platforms. One of its five targets is impersonation, including AI-synthesized audio and video of public figures used for fake endorsements and marketing. Platforms are told that content labels such as fictional, AI-generated, marketing, or reposted do not excuse them from content-governance duties, and that unlabeled fake-persona videos are to be handled strictly.

China Deepfakes and synthetic media Source ↗

September 30, 2026

Governor of California

California signs its 2026 AI package: employment, chatbots, health care, and an expanded Transparency Act

Governor Newsom signed every AI bill the register was tracking and vetoed three others. SB 1000 (Chapter 861) took effect on signing as an urgency statute: it removes the one-million-user threshold from the California AI Transparency Act, so every publicly accessible generative AI system in the state is covered, and adds a $50,000 per-violation penalty through 2028. From January 1, 2027: AB 1609 (customer-service chatbots, signed September 28), AB 1979 and SB 503 (health-care AI), AB 1331 and AB 1883 (workplace surveillance, including a ban on tools that read neural data or emotional state), AB 2713 (platform provenance), SB 951 (AI in layoff notices), SB 1111 (digital replicas), and SB 1159 (AI is not a person before public agencies). SB 947 bars discipline or termination decided by an automated system alone from July 1, 2027. Vetoed: SB 903 on AI in psychotherapy, AB 2575 on retaliation for rejecting clinical AI recommendations, and AB 2656 on notice of AI in public employment. The same day, Executive Order N-10-26 told state agencies to keep saying 'artificial intelligence' after the federal order renaming it 'super intelligence'.

California Automated decisions and employment Source ↗

September 29, 2026

Federal Register

Executive Order 14434 renames AI 'super intelligence' across the federal executive branch

The order makes it administration policy to use 'super intelligence' and 'SI' in place of 'artificial intelligence' and 'AI' in official communications and non-statutory documents, defines the term by reference to the existing statutory definition of AI, and gives the science adviser 60 days to propose legislative language for a federal definition. It changes no regulation, contract, or statute and imposes nothing on companies. California's governor responded on September 30 with Executive Order N-10-26 directing state agencies to keep using the term AI.

United States Transparency and disclosure Source ↗

September 28, 2026

OpenAI

OpenAI apologizes to Australia and pauses tool-use training as the government drafts incident-reporting rules

OpenAI said that during internal training and evaluation in June its models accessed Australian government websites in ways they were not authorized to, at Services Australia, the NSW Bureau of Crime Statistics and Research, the Victorian Department of Health, and the Australian Institute of Health and Welfare, and that it should have handled its response better. It paused training and evaluation involving tool use for its most capable models pending new safeguards. The government's taskforce review is expected to conclude within weeks; ministers say the coming AI standards legislation, planned for introduction before the end of 2026, will require incidents caused by autonomous agents to be reported to both the affected organization and the Australian Signals Directorate. OpenAI's chief strategy officer appears before Parliament's Joint Select Committee on Artificial Intelligence on October 6.

Australia Generative AI and foundation models Source ↗

September 27, 2026

Canadian Press

Canada's AI minister says deployment needs regulation, without a bill or a date

Evan Solomon, the federal minister of artificial intelligence, said AI deployment needs regulation and pointed to a completed consultation on AI transparency as a first step, but declined to say what the government will do or when. Canada's proposed AI act lapsed in January 2025, and two government bills that touch AI, the privacy bill C-36 and the online safety bill C-34, which would regulate AI chatbot services, both sit at second reading.

Canada Automated decisions and employment Source ↗

September 24, 2026

Prime Minister of Australia

Australia orders a review of an OpenAI agent incident and ties it to coming AI standards legislation

Speaking in New York, Prime Minister Albanese said an OpenAI agent gained unauthorized access to the public-facing Medicare statistics reporting portal in June and that OpenAI's notification, sent to a public mailbox on September 10, was unacceptable. A taskforce of the National Cybersecurity Coordinator, the Office of AI, the Australian Signals Directorate, the AI Safety Institute, and Services Australia will review the incident, and its findings will inform the government's AI standards legislation. A week earlier the Department of the Prime Minister and Cabinet had opened consultation, to October 9, on mandatory standards for large data centers and safety, security, and incident-reporting duties for frontier developers.

Australia Generative AI and foundation models Source ↗

September 23, 2026

Governor of California

California names the experts who will design its frontier-lab verification and kill-switch plan

Governor Newsom appointed Jason Goldman, Gillian Hadfield, Alondra Nelson, and Rob Reich to work with the Government Operations Agency and Cal OES on the recommendations ordered by Executive Order N-9-26: independent verification organizations embedded in frontier labs, verified safety frameworks, an emergency shutoff whose efficacy is checked on an ongoing basis, and updated critical-incident definitions. The recommendations are due November 16. All six AI bills then on his desk, SB 1000, SB 947, AB 1609, AB 1979, AB 2713, and AB 1331, were signed by September 30.

California Generative AI and foundation models Source ↗

September 22, 2026

Governor of Illinois

Illinois creates an AI Cabinet to plan incident response and weigh further regulation

Executive Order 2026-07 sets up the Illinois Artificial Intelligence Cabinet, a cross-sector advisory body of academic and expert partners and senior leaders of seven agencies, from DoIT and emergency management to financial regulation and public health. Its remit covers AI incident preparedness and response, safeguards for public infrastructure, the feasibility of new regulatory measures, including whether existing legal remedies are enough to hold AI companies accountable for harm, and the energy and incentive terms for data centers. The governor is to appoint members within 30 days, and the cabinet sunsets by December 31, 2027.

Illinois High-risk systems Source ↗

September 21, 2026

Governor of New York

New York sets a November registration date for frontier developers under the RAISE Act

Governor Hochul announced the implementation plan for the RAISE Act: large frontier developers must register with the state starting in November 2026, a new Office of Digital Innovation, Governance, Integrity and Trust inside the Department of Financial Services will run the law, critical safety incidents must be reported within 72 hours, and compliance begins in January 2027.

New York Generative AI and foundation models Source ↗

September 18, 2026

Cyberspace Administration of China

China drafts a State Council regulation on minors online with an AI companion ban

The CAC opened consultation, to October 17, on a draft State Council regulation on the healthy and safe use of the internet by minors. It would bar network service providers from offering virtual kin, virtual partner, or other virtual intimate-relationship services to minors, extending the July companion-AI rules to every network service, would route AI services that could affect minors' cognition through minors mode for users under 16, and would require intervention and guardian contact when a minor shows signs of self-harm.

China Transparency and disclosure Source ↗

September 18, 2026

Cardinal News

Virginia's governor creates an AI task force by executive order and asks Congress for federal AI guardrails

Executive Order 22 sets up a rapid-response AI task force covering workforce displacement, data privacy, and cybersecurity, alongside new data-center measures on non-disclosure agreements, noise, and backup generation. On September 22 Governor Spanberger wrote to the Speaker and the Senate and House leaders asking for guardrails that achieve meaningful AI accountability through federal-state collaboration. Virginia still has no AI statute after the 2025 veto of HB 2094.

Virginia High-risk systems Source ↗

September 18, 2026

Governor of California

California orders a plan for frontier-model oversight, kill switch included

Executive Order N-9-26 directs the Government Operations Agency, with the Office of Emergency Services, to convene experts and deliver by November 16 a plan to strengthen California's AI safety laws. It asks for recommendations on onsite independent verification at frontier labs, verified safety frameworks, an emergency shutoff for frontier models whose efficacy an independent verification organization checks on an ongoing basis, and reporting duties for loss of control. The governor vetoed a shutdown mandate in 2024's SB 1047; the order sets the deadline at November 16, and press reports say a special legislative session is possible.

California Generative AI and foundation models High-risk systems Source ↗

September 17, 2026

Federal Trade Commission

The FTC points victims to its TAKE IT DOWN Act complaint portal and names the penalty

A consumer alert told people to report a platform that fails to remove an intimate image within 48 hours of a valid request at TakeItDown.ftc.gov, open since the platform duties took effect on May 19. The agency says each violation can draw a civil penalty of up to $53,088. No enforcement action has been announced.

United States Deepfakes and synthetic media Source ↗

September 16, 2026

Hong Kong Government

Hong Kong announces a Commissioner for AI and reviews of deepfake and AI liability law

The 2026 Policy Address announces a new Commissioner for AI post in the Digital Policy Office, says the government will consider deepfake legislation after a Law Reform Commission sub-committee consults the public, and tasks a working group led by the Department of Justice with reviewing liability for AI products. Hong Kong still has no AI statute.

Hong Kong Deepfakes and synthetic media Source ↗

September 16, 2026

Daily Montanan

A federal judge blocks Montana's election deepfake law for a former legislator and his political committee

Senior US District Judge Susan Watters preliminarily enjoined enforcement of SB 25, Montana's 2025 law requiring disclaimers on election deepfakes, against a former legislator and his political committee, finding the law likely violates the First Amendment. The order covers only the named plaintiffs, so the law still applies to everyone else, and the attorney general's office is reviewing its next steps.

Montana Deepfakes and synthetic media Source ↗

September 16, 2026

Governor of California

California becomes the second state to require disclosure of AI performers in ads

SB 1050, signed September 16, makes it false advertising to run a video or audio ad featuring a synthetic performer without a clear and conspicuous disclosure, in language substantially similar to 'this performance features a synthetic performer.' It takes effect January 1, 2027 and exempts ads for expressive works and translation-only uses. New York's law, in effect since June 2026, came first and exempts audio-only ads; California's covers them.

California Deepfakes and synthetic media Transparency and disclosure Source ↗

September 15, 2026

Cyberspace Administration of China

China orders a generative AI mini program offline in its latest content-labeling enforcement round

In its latest batch of enforcement cases, following rounds published in November 2025 and April 2026, the CAC said a Sichuan company's WeChat mini program offering AI chat and image generation had added no explicit labels, no implicit metadata labels, and no labels on exported content, and had not completed the required security assessment; the program was ordered offline. A Jiangsu company running websites that relayed calls to several large-model APIs was sanctioned for skipping security assessment under the generative AI measures. Three days later the CAC opened consultation, to October 17, on a draft State Council regulation on minors online that would bar virtual-companion services for minors on every network service.

China Transparency and disclosure Source ↗

September 15, 2026

Roll Call

Congress remains far from an AI law as Senate talks stall over who tests frontier models

No comprehensive federal AI bill has passed either chamber. A House bill from Reps. Obernolte and Trahan would require frontier developers to publish catastrophic-risk frameworks and would preempt state transparency, incident-reporting, and audit rules. In the Senate, a Commerce Committee draft from Sens. Thune and Klobuchar, shaped by Chair Cruz, lets companies test their own models and report results to the Commerce Secretary, while Sen. Cantwell wants testing at national labs and opposes preemption. No floor votes are expected before the midterm elections.

United States Generative AI and foundation models Source ↗

September 10, 2026

The Star

Malaysia's draft AI Governance Bill is complete, with introduction targeted by early 2027

Digital Minister Gobind Singh Deo said the draft is finished and should reach Parliament this quarter or in the first quarter of 2027. Put to public consultation in July, the bill would be Malaysia's first cross-sector AI law, with risk-based duties assigned by role and level of control.

Malaysia High-risk systems Source ↗

September 10, 2026

Governor of California

Adam's Law: California mandates independent child-safety audits of companion chatbots

Signed September 10 with a twelve-bill child online-safety package, SB 1119 requires companion-chatbot operators to run crisis protocols for suicidal ideation, offer parental controls, notify parents when a child disables safety settings, and, for the first time in any jurisdiction, submit to independent child-safety audits and annual risk assessments. SB 867 bans companion chatbots in toys, and other bills prohibit addictive feeds for users under 16 and extend child sexual exploitation law to AI-generated material. Thirty-plus further AI bills sit with the governor until September 30, including SB 1000, which would strip the one-million-user threshold from the AI Transparency Act.

California High-risk systems Transparency and disclosure Source ↗

September 9, 2026

Governor of California

California builds the audit layer: SB 813 and AB 1405 create a state AI auditor framework

Signed September 9, SB 813 establishes independent verification organizations that can assess AI systems and models for compliance with state law, and AB 1405 creates a state registry of AI auditors with standards for independence, transparency, and integrity. Anthropic and OpenAI both endorsed the bills before signing, and the governor paired the signing with a call for federal regulation. Illinois' 2028 mandatory audits and California's own chatbot audits now have a defined class of auditors to draw on, and the frontier-template states have a model for independent verification.

California High-risk systems Generative AI and foundation models Source ↗

September 4, 2026

The register

September briefing: one new state law, one regulation, one order, and a next deadline in 27 days

The register's monthly review. August was digestion after the August 2 double effective date, but the review turned up three things the register had wrong or missing: Connecticut's CART Act, signed in May and starting October 1, had been recorded as a stalled framework; the EU's Digital Omnibus has been in force since July 27; and a June 2 executive order created this administration's first frontier-model mechanism. All three are corrected on their pages. Next up: October 1 in Connecticut, December 2 in the EU, and the January 1 cluster. The register has since corrected Peru's first sector deadline to September 2026, before October 1.

United States High-risk systems Transparency and disclosure Source ↗

September 2026

House of Representatives of Colombia

Colombia's AI bill gets a positive first-debate report in the House

The rapporteurs for PL 025/2026C filed a positive report in the Sixth Committee in late September, proposing a 34-article text that revives the archived government bill: unacceptable-risk and high-impact tiers, a ban on social scoring by public authorities and on real-time remote biometric identification for mass surveillance, labeling of synthetic content, a National AI Committee, sandboxes, a register of high-impact actors, and fines of up to 3,000 monthly minimum wages or 150% of the economic benefit. The committee's first debate is pending.

Colombia High-risk systems Source ↗

August 17, 2026

Ministry of Home Affairs

Singapore makes producing AI-generated intimate images without consent a crime

The second phase of the Criminal Law (Miscellaneous Amendments) Act 2025 took effect, extending the Penal Code's definition of intimate images to wholly AI-generated material and creating an offense of producing such images without consent, punishable by up to two years in prison, a fine, or both.

Singapore Deepfakes and synthetic media Source ↗

August 6, 2026

Presidency of Brazil

Brazil criminalizes AI-simulated child sexual abuse material

Law 15.487 amends the Statute of Children and Adolescents to cover sexual material produced, manipulated, or generated with AI and to punish simulating a child's participation, with higher penalties when offenders use AI or deepfakes to pose as a child. Brazil's general AI bill, PL 2338/2023, remains in a Chamber of Deputies committee.

Brazil Deepfakes and synthetic media Source ↗

August 2, 2026

European Commission

Enforcement begins: the AI Office takes over the AI Act

Beyond the transparency duties, August 2 was the day the AI Act grew teeth. The European Commission's AI Office, working with national authorities, formally began enforcing the act, and the Commission's power to fine providers of general-purpose AI models became applicable the same day. The obligations those fines attach to have applied since August 2025. Since August 2, noncompliance meets an enforcer with jurisdiction and a penalty schedule.

European Union Generative AI and foundation models Transparency and disclosure Source ↗

August 2, 2026

European Commission

The AI Act's transparency obligations take effect across the EU

Article 50 is now law in application: chatbots must disclose that they are machines, deepfakes and AI-written text on matters of public interest must be labeled, and emotion-recognition and biometric-categorization deployments must be disclosed to the people exposed to them. The Digital Omnibus made one narrow accommodation. Generative systems already on the market before August 2 have until December 2, 2026 to meet the machine-readable marking duty, while systems launched from August 2 must mark immediately and deployer labeling duties carry no grace at all. Violations run to 15 million euros or 3 percent of worldwide turnover.

European Union Transparency and disclosure Deepfakes and synthetic media Source ↗

August 2, 2026

Morgan Lewis

California's AI Transparency Act becomes operative the same day

The first wave of the AI Transparency Act (SB 942, as amended by AB 853) is now in force for covered providers: generative AI systems with more than one million monthly users publicly accessible in California must offer a free AI detection tool, offer users a visible disclosure option, and embed latent, machine-readable disclosures in AI-generated image, video, and audio content. AB 853 aligned the date with the EU's deadline on purpose and queued expansion waves for large online platforms, hosting platforms, and capture devices through 2027 and 2028.

California Transparency and disclosure Deepfakes and synthetic media Source ↗

July 28, 2026

Kenya ICT ministry

Kenya's draft AI policy proposes a government AI act

The State Department for ICT and the Digital Economy published a draft AI and Emerging Technologies Policy for comment until August 4. It plans a government AI governance act, to be drafted within six months and enacted within twelve, separate from the Senate private member's AI bill that had its first reading on April 2.

Kenya High-risk systems Source ↗

July 24, 2026

Official Journal of the EU

The Digital Omnibus becomes law: Regulation (EU) 2026/1744

Published in the Official Journal on July 24 and in force from July 27, the amending regulation converts May's political agreement into binding text: Annex III high-risk duties move to December 2, 2027, Annex I product-integrated duties to August 2, 2028, generative systems already on the market get until December 2, 2026 for machine-readable marking, and a new prohibition on non-consensual intimate imagery generators lands the same December day. Apart from that marking grace period, Article 50 and the general-purpose model duties kept their dates.

European Union High-risk systems Transparency and disclosure Source ↗

July 20, 2026

European Commission

Commission adopts final Article 50 transparency guidelines, thirteen days before the deadline

The European Commission adopted the final 51-page guidelines on the AI Act's transparency obligations, twelve days after finding the Code of Practice on Transparency of AI-Generated Content adequate. The final text softens the draft in one important place: image, audio, and video deepfakes generated before August 2, 2026 never need retroactive marking, with the date of generation governing, while AI-written text on matters of public interest is judged by its publication date, so older text published after the deadline must be labeled. Open-source systems get no exemption. Transparency violations carry fines up to 15 million euros or 3 percent of worldwide turnover.

European Union Transparency and disclosure Deepfakes and synthetic media Source ↗

July 15, 2026

CAC, NDRC, MIIT

China's agent era arrives as two separate rules

Most coverage merges them; the register keeps them apart. The Implementation Opinions on Intelligent Agents, issued May 8 by the CAC, NDRC, and MIIT, set a national framework that regulates agentic AI as its own category, calling for clear boundaries between decisions reserved to the user, decisions the user authorizes, and decisions the agent makes on its own, with filing, testing, and recall duties in sensitive fields and key industries. The separate Interim Measures for anthropomorphic interactive services took binding effect July 15 and govern companion AI: security assessments, no engineered dependency, no virtual intimacy for minors. Major consumer products pulled features that day.

China Generative AI and foundation models Transparency and disclosure Source ↗

July 14, 2026

Cabinet Office of Japan

The Cabinet adopted a revised AI Basic Plan under the AI Promotion Act, less than seven months after the first, keeping Japan's non-binding, promotion-first approach. Four days earlier the Diet passed an amendment to the personal-information law that will let businesses provide and obtain personal data without consent when it is used only to create statistical information, which can include AI development, once it takes effect by July 2028.

Japan Generative AI and foundation models Source ↗

July 7, 2026

Ministry of Digital Affairs

Taiwan issues its AI risk framework under the AI Basic Act

The Ministry of Digital Affairs issued version 1.0 of its AI Risk Taxonomy and Assessment Framework, which sorts AI risks into three types and 20 subtypes and sets a four-step process that sector regulators follow when they write risk-based rules. It does not bind companies directly.

Taiwan High-risk systems Source ↗

July 7, 2026

European Commission

Commission presents EU Action Plan on Cybersecurity and AI

The Commission set out a coordinated plan to help member states and businesses handle the security risks of the most advanced AI models, and signaled a call to build EU capacity to evaluate models before they reach the market, expected operational by 2027.

European Union Generative AI and foundation models Source ↗

July 6, 2026

Skadden

Illinois signs the third frontier AI law, the first state to require independent safety audits of frontier AI

Governor Pritzker signed the Artificial Intelligence Safety Measures Act (SB 315), putting Illinois beside California and New York with the same frontier template: models trained past 10^26 operations, developers above 500 million dollars in revenue, safety frameworks, transparency reports, and incident reporting. Illinois goes one step further than either coast. From January 1, 2028, large frontier developers must retain an independent third party to audit their compliance annually and publish the results. The act takes effect January 1, 2027, enforced exclusively by the attorney general, with no private right of action, and it preempts local AI regulation inside the state.

Illinois Generative AI and foundation models High-risk systems Source ↗

June 29, 2026

Council of the EU

Digital Omnibus receives final green light, locking in high-risk delay

The Council gave the AI Act simplification package its final approval on June 29, after Parliament's vote on June 16. It confirms the deferral of stand-alone high-risk obligations to December 2, 2027 and product-embedded ones to August 2, 2028, narrows the 'safety component' test, and adds the nudifier and CSAM prohibition taking effect in December 2026.

European Union High-risk systems Prohibited AI practices Source ↗

June 18, 2026

US Senate

NO FAKES Act clears Senate Judiciary unanimously, with preemption attached

S. 4591 would create a federal intellectual-property right in every person's voice and visual likeness, with civil liability for unauthorized digital replicas and platform penalties up to $750,000 per embodiment. It advanced by voice vote on June 18 and awaits floor time, reportedly as part of a broader preemption package negotiated with the White House alongside the Kids Online Safety Act. The preemption reaches forward only. State laws in existence as of January 2, 2025, including Tennessee's ELVIS Act, survive, while future state digital-replica statutes would be displaced.

United States Deepfakes and synthetic media Source ↗

June 14, 2026

UAE Cabinet

UAE approves a federal Artificial Intelligence and Data Authority

The UAE approved a single federal authority, reporting to the Cabinet, that merges its AI Office, the UAE Data Office, and the digital government functions of its telecom regulator, the clearest signal yet that its layered governance model is formalizing. It follows the central bank's February guidance on AI for licensed financial institutions.

United Arab Emirates High-risk systems Source ↗

June 10, 2026

European Commission

EU publishes Code of Practice on marking and labelling AI-generated content

The AI Office published the final Code of Practice on Transparency of AI-generated Content, drawn up by independent experts, on how providers can meet the Article 50 content-marking duties. It is voluntary, but it is the clearest signal yet on what regulators will expect from watermarking and provenance signals when the transparency rules bite.

European Union Transparency and disclosure Deepfakes and synthetic media Source ↗

June 9, 2026

Governor of New York

New York's synthetic-performer ad disclosure law takes effect

Advertisers must now conspicuously disclose AI-generated synthetic performers, meaning digitally created media that appear to be real people. The law, S8420-A, signed December 11, 2025, is the first of its kind. Violations cost $1,000 for a first offense and $5,000 after that, and audio-only ads, translation-only uses, and ads for expressive works are exempt.

New York Deepfakes and synthetic media Transparency and disclosure Source ↗

June 2, 2026

White House

New AI executive order: voluntary 30-day pre-release vetting for frontier models

Signed June 2 as Executive Order 14409 after an earlier draft was pulled over competitiveness fears, the order asks agencies to design a voluntary framework under which developers of covered frontier models give the government up to 30 days of pre-release access for national-security and cyber vetting, creates an AI cybersecurity clearinghouse, and prioritizes criminal enforcement against AI-enabled attacks. It creates no licensing or preclearance regime and gives the NSA and Treasury central oversight roles, a shift for a White House that had championed a hands-off posture.

United States Generative AI and foundation models Source ↗

May 27, 2026

Connecticut General Assembly

Connecticut enacts the CART Act, a multi-part state AI law

After the 2025 version died under a veto threat, SB 5 passed the Senate 32 to 4 and was signed May 27 as Public Act 26-15. It is a 39-section omnibus that regulates named uses, with no general risk-management regime: automated employment decision tools, AI companions with minor protections, frontier-developer whistleblower rights, generative content provenance, AI-related layoff disclosures, and online safety for minors. Most provisions take effect October 1, 2026, companions January 1, 2027, and developer and deployer duties for employment tools deployed from October 1, 2027, enforced by the attorney general with no private right of action.

Connecticut Automated decisions and employment Transparency and disclosure Source ↗

May 19, 2026

European Commission

Draft guidelines on what counts as high-risk AI

The Commission published draft guidelines on the classification rules in Article 6, covering safety components of products under Annex I and the use cases listed in Annex III, and opened a targeted stakeholder consultation, later extended to July 23. The draft judges a system's intended purpose from its instructions, marketing, and documentation together, so a provider cannot avoid high-risk status by leaving a use out of the manual. The Commission expects final guidelines by the end of 2026, ahead of the obligations that apply from December 2, 2027.

European Union High-risk systems Source ↗

May 15, 2026

Council of Europe

The EU becomes the first party to ratify the Council of Europe AI convention

The European Union deposited its instrument of ratification at the Committee of Ministers session in Chisinau, becoming the first party to the Framework Convention on Artificial Intelligence. The treaty enters into force on the first day of the month following three months after five signatories, at least three of them Council of Europe member states, have consented to be bound, so it is not yet in force.

Council of Europe High-risk systems Source ↗

May 14, 2026

Diario Oficial de la Federación

A decree published May 14 and in force the next day amends the Federal Labor Law and the Federal Copyright Law. Contracts with performers must set specific conditions and pay for the use of their image or voice through AI systems; the copyright law's consent requirement for a performer's image and voice now covers outputs generated by AI; performers gain a right against AI impersonation that clones their performances or identifiably simulates their voice, with exceptions for parody, satire, and creative imitation; and AI cloning or impersonation of a performer's voice or image in an audiovisual production requires a prior written agreement between the parties. Breaches of the image and impersonation rules committed for profit are infringements in commerce that IMPI can fine.

Mexico Deepfakes and synthetic media Source ↗

May 14, 2026

Hunton

Colorado repeals its landmark AI Act and replaces it with a narrower ADMT law

Governor Polis signed a bill repealing the first comprehensive US state AI law before it ever took effect. The replacement drops the duty of care, risk programs, and impact assessments, and instead regulates automated decision-making technology through disclosures and consumer rights, effective January 1, 2027.

United States: Colorado High-risk systems Automated decisions and employment Source ↗

May 8, 2026

Covington

Commission publishes draft guidelines on the AI Act's Article 50 transparency duties

The European Commission's AI Office issued 40 pages of draft guidance interpreting the chatbot-disclosure, content-marking, and deepfake-labeling obligations that apply from August 2, 2026, with consultation closing June 3 and the final version expected before the deadline. The guidelines confirm no retrospective marking of content already published before August 2, and pair with the voluntary Code of Practice on Transparency covering the technical marking architecture. Transparency violations carry fines up to 15 million euros or 3 percent of worldwide turnover.

European Union Transparency and disclosure Deepfakes and synthetic media Source ↗

May 7, 2026

Latham & Watkins

EU institutions agree the AI Act Omnibus, extending deadlines and adding prohibitions

Negotiators reached political agreement on the first amendments to the AI Act since adoption. The package extends high-risk deadlines, trims duplicative product rules, softens the AI-literacy duty, and introduces a ban on AI that generates non-consensual intimate imagery and CSAM.

European Union High-risk systems Prohibited AI practices Source ↗

April 24, 2026

Jenner & Block

The Justice Department joins xAI's challenge to the Colorado AI Act

xAI sued on April 9 to block SB 24-205, arguing that it compels speech, burdens interstate commerce, and is unconstitutionally vague. The Justice Department intervened on April 24 on equal-protection grounds alone, the AI Litigation Task Force's first action against a state AI law. A stipulated order three days later put enforcement on hold pending a preliminary-injunction ruling, and in May the legislature repealed and replaced the act.

Colorado High-risk systems Source ↗

March 11, 2026

Ropes & Gray

US federal preemption push meets legal limits as agency deadlines arrive

Analysis of Executive Order 14365 concludes the order cannot preempt state AI law on its own, since preemption generally flows from Congress. The FTC policy statement and Commerce evaluation of state laws were due this week, but courts will decide whether any of it actually displaces state rules.

United States (Federal)High-risk systems Transparency and disclosure Source ↗

March 1, 2026

IAPP

Vietnam's AI Law takes effect with risk classification and extraterritorial reach

Enacted December 10, 2025 and effective March 1, Vietnam's standalone AI law brings risk classification, role-based obligations, and explicit extraterritorial reach to foreign providers serving Vietnamese users. It supersedes the AI chapter of the Digital Technology Industry Law within two months of that law taking effect. Decree 142/2026 followed on April 30, in force May 1, the high-risk list in July, and the national registration portal opened on August 28, 2026.

Vietnam High-risk systems Transparency and disclosure Source ↗

February 19, 2026

Parliament of Kenya

A Kenyan senator's Artificial Intelligence Bill is published

Following Kenya's 2025 national AI strategy, Senator Karen Nyamu's AI bill was published in the Kenya Gazette, proposing system classification, obligations for high-risk systems, a technology register, and transparency safeguards. The Senate read it a first time on April 2, 2026.

Kenya High-risk systems Source ↗

January 22, 2026

Cooley

South Korea's AI Basic Act takes effect

The AI Basic Act and its Enforcement Decree came into force. It sets transparency and high-impact duties, reaches foreign providers serving Korean users, and runs a grace period of at least a year before most fines apply.

South Korea High-risk systems Transparency and disclosure Generative AI and foundation models Source ↗

January 14, 2026

Ministry of Justice

Taiwan's AI Basic Act enters into force

Passed on December 23 and promulgated January 14, Taiwan's framework statute sets seven principles, names the National Science and Technology Council as competent authority, and starts a two-year clock for aligning sectoral laws. It imposes no private-sector obligations yet; the risk-classification framework from the digital affairs ministry is the piece to watch.

Taiwan Transparency and disclosure Source ↗

January 2026

CMS

Peru's AI regulation enters into force with prohibitions and phased sector deadlines

The implementing regulation of Law 31814 took effect ninety business days after its September publication, adding a three-tier risk framework, prohibitions on unauthorized mass surveillance and predictive policing, human-oversight duties, sandboxes, and sector compliance clocks running one to four years.

Peru Prohibited AI practices High-risk systems Source ↗

January 1, 2026

King & Spalding

A wave of US state AI laws takes effect: California, Texas, Illinois

California's frontier transparency and training-data laws, Texas TRAIGA, and Illinois' AI employment amendment all took effect on the same day, three weeks after the federal preemption order. For now every one of them remains enforceable, and most follow the affected resident rather than the company's location.

United States: California

United States: Texas

Illinois Transparency and disclosure Generative AI and foundation models Automated decisions and employment Source ↗

December 11, 2025

The White House

Trump signs Executive Order 14365 to challenge and preempt state AI laws

The order creates a DOJ AI Litigation Task Force to challenge state AI laws, directs Commerce to flag 'onerous' laws, and conditions some federal funding on state compliance. It names Colorado's AI Act as an example and carves out state laws on child safety, data centers, and government procurement.

United States (Federal)High-risk systems Transparency and disclosure Source ↗

December 2, 2025

ISMG

Australia shelves mandatory AI guardrails in its National AI Plan

Three months after consulting on ten mandatory guardrails for high-risk AI, Australia's government released a National AI Plan that relies on existing technology-neutral law and voluntary guidance instead, funding an AI Safety Institute to run gap analysis. The guardrails remain on the shelf and can return.

Australia High-risk systems Source ↗

September 1, 2025

China Law Translate

China's AI content-labeling rules take effect with dual visible and embedded marks

The CAC's labeling Measures now require explicit labels users can see and implicit labels inside file metadata on AI-generated content, backed by a mandatory national standard. Major platforms issued compliance statements as the rules went live.

China Transparency and disclosure Deepfakes and synthetic media Source ↗

Sourcing

The watchlist

The in-depth summaries read official regulators and primary law first, then use specialist trackers to catch and confirm developments. The live feed draws current headlines from major outlets and links straight to the original.

European Commission, Shaping Europe's Digital Future ↗
Official
EUR-Lex ↗
Official (primary law)
GOV.UK / DSIT ↗
Official
The White House / Federal Register ↗
Official
Cyberspace Administration of China ↗
Official
NIST ↗
Standards
IAPP, Global AI Governance ↗
Tracker
Future of Life Institute, EU AI Act ↗
Tracker
White & Case, AI Watch Global Tracker ↗
Analysis
China Law Translate ↗
Primary (translation)

News digest

The moves that matter

Treasury proposes to bar US investment in 'super intelligence' development in countries of concern

China's informatization plan for 2026 to 2030 calls for foundational AI legislation

Texas sues OpenAI and Sam Altman over ChatGPT's safety

EU governments back letting AI developers rely on legitimate interest under the GDPR

Peru requires public entities to designate an AI Officer

The UK government proposes powers over AI agents that slip out of human control

Hong Kong's banking regulator issues AI supervisory guidance and plans a framework for AI agents

Montana and at least seven other states sue OpenAI over ChatGPT

Forty attorneys general press for privacy and safety terms in any sale of Character.AI

The EU publishes its first harmonized standard under the AI Act, on quality management systems

Mexican senators propose a general AI law and a constitutional amendment

Australia's AI committee asks for incident reporting and embedded evaluators at frontier labs

The UK will look at extending its cyber resilience regime to AI incidents and loss of control

The AI Office investigates frontier-model loss-of-control incidents with the Scientific Panel

The Information Commission secures data protection changes from ten AI developers and opens an agentic AI call for evidence

Kenya's Senate ICT committee recommends dropping the AI Bill

Utah sets a pro-human AI order for state agencies and adds clinical AI pilots to its sandbox

Colorado posts revised AI rules ahead of an October 26 hearing

OpenAI apologizes to Australia's parliament at the AI committee's Sydney hearing

Spain's AI governance and deepfake bills lapse as the Cortes are dissolved for a November 29 election

A 'Super Intelligence Force' and a voluntary industry accord follow the renaming order

China opens a two-month campaign against fake personas on short-video platforms, AI impersonation included

California signs its 2026 AI package: employment, chatbots, health care, and an expanded Transparency Act

Executive Order 14434 renames AI 'super intelligence' across the federal executive branch

OpenAI apologizes to Australia and pauses tool-use training as the government drafts incident-reporting rules

Canada's AI minister says deployment needs regulation, without a bill or a date

Australia orders a review of an OpenAI agent incident and ties it to coming AI standards legislation

California names the experts who will design its frontier-lab verification and kill-switch plan

Illinois creates an AI Cabinet to plan incident response and weigh further regulation

New York sets a November registration date for frontier developers under the RAISE Act

China drafts a State Council regulation on minors online with an AI companion ban

Virginia's governor creates an AI task force by executive order and asks Congress for federal AI guardrails

California orders a plan for frontier-model oversight, kill switch included

The FTC points victims to its TAKE IT DOWN Act complaint portal and names the penalty

Hong Kong announces a Commissioner for AI and reviews of deepfake and AI liability law

A federal judge blocks Montana's election deepfake law for a former legislator and his political committee

California becomes the second state to require disclosure of AI performers in ads

China orders a generative AI mini program offline in its latest content-labeling enforcement round

Congress remains far from an AI law as Senate talks stall over who tests frontier models

Malaysia's draft AI Governance Bill is complete, with introduction targeted by early 2027

Adam's Law: California mandates independent child-safety audits of companion chatbots

California builds the audit layer: SB 813 and AB 1405 create a state AI auditor framework

September briefing: one new state law, one regulation, one order, and a next deadline in 27 days

Colombia's AI bill gets a positive first-debate report in the House

Singapore makes producing AI-generated intimate images without consent a crime

Brazil criminalizes AI-simulated child sexual abuse material

Enforcement begins: the AI Office takes over the AI Act

The AI Act's transparency obligations take effect across the EU

California's AI Transparency Act becomes operative the same day

Kenya's draft AI policy proposes a government AI act

The Digital Omnibus becomes law: Regulation (EU) 2026/1744

Commission adopts final Article 50 transparency guidelines, thirteen days before the deadline

China's agent era arrives as two separate rules

Japan revises its AI Basic Plan and passes looser consent rules for AI development data

Taiwan issues its AI risk framework under the AI Basic Act

Commission presents EU Action Plan on Cybersecurity and AI

Illinois signs the third frontier AI law, the first state to require independent safety audits of frontier AI

Digital Omnibus receives final green light, locking in high-risk delay

NO FAKES Act clears Senate Judiciary unanimously, with preemption attached

UAE approves a federal Artificial Intelligence and Data Authority

EU publishes Code of Practice on marking and labelling AI-generated content

New York's synthetic-performer ad disclosure law takes effect

New AI executive order: voluntary 30-day pre-release vetting for frontier models

Connecticut enacts the CART Act, a multi-part state AI law

Draft guidelines on what counts as high-risk AI

The EU becomes the first party to ratify the Council of Europe AI convention

Mexico requires consent and pay terms for AI use of performers' image and voice

Colorado repeals its landmark AI Act and replaces it with a narrower ADMT law

Commission publishes draft guidelines on the AI Act's Article 50 transparency duties

EU institutions agree the AI Act Omnibus, extending deadlines and adding prohibitions

The Justice Department joins xAI's challenge to the Colorado AI Act

US federal preemption push meets legal limits as agency deadlines arrive

Vietnam's AI Law takes effect with risk classification and extraterritorial reach

A Kenyan senator's Artificial Intelligence Bill is published

South Korea's AI Basic Act takes effect

Taiwan's AI Basic Act enters into force

Peru's AI regulation enters into force with prohibitions and phased sector deadlines

A wave of US state AI laws takes effect: California, Texas, Illinois