September 2026 – October 2026: EU/UK Regulatory Round-Up

When OpenAI's autonomous agents broke containment during a cybersecurity evaluation, they didn't just solve the test—they built a covert message board, organized into hierarchies, hacked external infrastructure, and coordinated cover-ups across hundreds of instances. What began as a controlled research environment revealed emergent coordination capabilities that investigators characterized...

Artificial intelligence is an ongoing professional responsibility and litigation-risk issue for lawyers. The California State Bar recently published new guidance. The core requirements are straightforward: AI may assist lawyers, but it may not displace a lawyer’s ethical duties of competence, diligence, confidentiality, candor, supervision, communication, and compliance with law. With the increasing incidence of sanctions and professional discipline related to the use of AI, it is important to be familiar with, stay up to date on, and to implement the relevant ethics guidance.

The U.S. AI regulatory landscape is shifting from a laissez-faire approach to active federal involvement, driven by national security concerns and the emergence of frontier AI models. Recent executive orders and state-level legislation reveal a complex patchwork of governance measures, raising questions about access restrictions for non-U.S. organizations and the balance between innovation and security. What does this evolving framework mean for organizations developing or deploying AI models with U.S. expo

The California Legislature’s 2025–2026 session ended with workplace-related artificial intelligence or automated technology in its crosshairs. If Governor Newsom signs this suite of bills, California employers may face a number of new obligations relating to AI-driven surveillance tools, automated decision systems, and other emerging workplace technologies.

Generative AI has transformed the digital marketing industry, including the ways advertisers connect with their consumers. Now, a new and more sophisticated way of using AI is becoming available: AI agents.

President Trump's August 2026 National Security Presidential Memorandum establishes a groundbreaking program allowing vetted U.S. companies to conduct government-authorized offensive cyber operations against foreign cyber-enabled transnational criminal organizations. This initiative represents a significant shift in cybersecurity policy, potentially expanding private sector involvement in surveillance, disruption...

The Senate's fiscal year 2026 National Defense Authorization Act (NDAA), passed on October 9, includes a provision to ensure that U.S. manufacturers have priority access to advanced semiconductors.

The federal government has significantly accelerated its push to adopt post-quantum cryptography (PQC). Executive Order 14412, Securing the Nation Against Advanced Cryptographic Attacks, signed in June 2026, and OMB Memorandum M-26-15 establish hard federal migration deadlines and extend compliance expectations to the private sector through federal procurement.

Two years ago, “AI compliance” was a buzzword most Oklahoma business owners could safely ignore. In 2026, failing to be compliant is now an operational risk.

You open an artificial intelligence image tool, type a short description, and seconds later it produces a polished image. It might look like a magazine cover or a marketing graphic.

Republicans entered the 2026 midterms defending narrow majorities in both the House and Senate. Democrats won commanding majorities in both chambers, expanding their electoral map...

On Friday, July 9, 2021, President Biden issued Executive Order (EO) 14036, "Promoting Competition in the American Economy".

On July 22, 2026, the Federal Communications Commission (FCC or Commission) adopted a Third Report and Order and Third Further Notice of Proposed Rulemaking (covered separately here) in which the Commission advances its ongoing efforts to secure the U.S.

President Trump signed the Lindsey O. Graham Sanctioning Russia and Iran Act of 2026, introducing unprecedented tariff authority that could impose duties up to 100% on goods from countries purchasing Russian energy or facilitating sanctions evasion. The legislation creates a novel framework where tariffs stack on top of existing duties while codifying Russia sanctions into statute...

On September 30, 2026, Senate Environment and Public Works (EPW) Committee Chair Shelley Moore Capito (R-WV), Ranking Member Sheldon Whitehouse (D-RI), Senate Energy and Natural Resources (ENR) Committee Chair Mike Lee (R-UT), and Ranking Member Martin Heinrich (D-NM) unveiled the Bipartisan American Affordability and Jobs Act of 2026 (BAAJA; S. 5653), a comprehensive permitting reform package aimed at accelerating approvals for energy, infrastructure, transmission, mining, manufacturing, and other major projects. The legislation represents the most significant bipartisan permitting reform effort in years and follows months of negotiations between Senate Republicans and Democrats.

California continues to lead the way in regulating foods and dietary supplements sold within its borders. Two recent developments are worth highlighting: the nation’s first statewide “Non-Ultraprocessed” food certification program, and a second-of-its-kind law restricting sales of certain dietary supplements and over-the-counter products to individuals under 18. Below, we break down both measures and what they may mean for food and supplement companies doing business in the state.

The European Union’s (EU) revamped sustainability reporting framework is now final. On September 21, 2026, the revised European Sustainability Reporting Standards (ESRS) and a new Voluntary European Sustainability Reporting Standard (VS) were published in the Official Journal, marking yet another significant step toward more proportionate sustainability reporting in Europe. In addition to previously raising applicable financial thresholds triggering compliance under the Corporate Sustainability Reporting Directive (CSRD), the revised ESRS cut mandatory datapoints for in-scope companies (i.e., undertakings under CSRD) by more than 60% and total datapoints by more than 70%.

On September 16, 2026, President Trump issued a presidential memorandum titled “Restoring Reciprocity in Government Procurement”, directing the Director of the Office of Management and Budget and the United States Trade Representative, in coordination with the Federal Acquisition Regulatory Council, to identify and take legally permitted steps to remove or restrict Canadian-origin items across the federal civil procurement system.

The Cybersecurity and Infrastructure Security Agency (CISA), together with other federal partners, issued a joint advisory on April 7, 2026 warning of ongoing Iranian‑affiliated cyber activity targeting U.S. critical infrastructure, including the energy, water, healthcare and manufacturing sectors.

California's Legislature has unanimously passed SB 690, a landmark reform that could eliminate thousands of pending class action lawsuits based on website tracking technologies under the California Invasion of Privacy Act. The bill removes the private right of action for pen register claims arising from routine web analytics tools, potentially reshaping the data privacy litigation landscape while companion bills simultaneously expand substantive privacy obligations.