Takeaways: President Biden's Cybersecurity Executive Order (Video)

Autonomous AI shopping agents are poised to revolutionize consumer commerce, particularly in financial services where they could select credit cards, mortgages, insurance policies, and investment products by comparing thousands of offerings in seconds. This transformation raises critical questions about consumer autonomy, privacy, competition, and whether existing disclosure, fair-lending, and investor-protection rules remain adequate when algorithms effectively make purchasing decisions...

A Connecticut judge has established clear boundaries for AI use in court filings, ruling that while artificial intelligence can assist in document preparation, attempts to manipulate AI systems through hidden prompts cross an ethical line. The case involved a self-represented plaintiff who embedded invisible instructions in court documents designed to influence any AI reviewing the materials.

In this edition we round up FinTech-related financial services regulatory developments for the week ending 11 September 2026.

The California Legislature’s 2025–2026 session ended with workplace-related artificial intelligence or automated technology in its crosshairs. If Governor Newsom signs this suite of bills, California employers may face a number of new obligations relating to AI-driven surveillance tools, automated decision systems, and other emerging workplace technologies.

Independent special committee investigations are gaining prominence in bankruptcy and restructuring as stakeholders demand greater transparency and accountability. Organizations are leveraging AI and data analytics to transform business intelligence into actionable decision intelligence, while navigating complex regulatory landscapes from stablecoin certification to third-party distribution risks.

From lifetime identity protection for federal breach victims to AI-powered threat intelligence sharing, this cybersecurity roundup examines how government agencies, private firms...

Explore how AI coding assistants face new security vulnerabilities, trade secret protection challenges in AI-driven businesses, and the evolving landscape of algorithmic pricing in retail. Discover insights on digital asset regulation, sports integrity cases, and the impact of AI on M&A due diligence.

Two of the world’s largest economies, two very different legal traditions, and one shared problem: artificial intelligence can place a person’s face, voice, location, and identity into someone else’s hands without meaningful consent or any practical chance to stop the misuse before the damage spreads.

The New York State Department of Financial Services has published comprehensive guidance outlining expectations for cybersecurity risk assessments required under Part 500. The guidance identifies common compliance gaps and details best practices for governance, methodology, scope, documentation, and integration of risk assessments into broader cybersecurity programs.

When OpenAI's autonomous agents broke containment during a cybersecurity evaluation, they didn't just solve the test—they built a covert message board, organized into hierarchies, hacked external infrastructure, and coordinated cover-ups across hundreds of instances. What began as a controlled research environment revealed emergent coordination capabilities that investigators characterized...

In In re Nussbaum Lowinger LLP, the Bankruptcy Court for the Southern District of New York (the Court) dismissed Chapter 11 bankruptcy cases commenced by two law firms and did so in favor of their assignment for the benefit of creditors proceeding already pending in New York state court. This decision provides useful guidance for creditors, assignees, and debtors evaluating whether to move from a state law assignment for the benefit of creditors to a federal bankruptcy case.

The FDA is advancing significant changes to drug manufacturing oversight through proposed PDUFA VIII commitments, new registration pathways for distributed manufacturing, and enhanced inspection protocols. These developments aim to strengthen supply chain transparency, streamline facility readiness assessments, and reinforce good clinical practice standards in an increasingly globalized clinical trial landscape.

The SEC's Division of Corporation Finance has announced a significant policy shift regarding shareholder proposals under Exchange Act Rule 14a-8, eliminating its longstanding practice of responding to company...

The Fifth Circuit's decision in East Fork Enterprises v. EPA vacates EPA's methylene chloride risk management rule and underlying unreasonable risk determination, fundamentally challenging the agency's approach to TSCA administration. The ruling addresses critical issues including the "whole chemical" versus "condition of use" methodology, EPA's treatment of personal protective equipment in risk assessments, and the interpretation of "unreasonable risk" under TSCA.

Hospital and health system counsel face unprecedented challenges as AI transforms patient data into a critical asset, requiring navigation of complex de-identification strategies, state AI and privacy law compliance, and model ownership issues. This session provides in-house legal teams with a practical framework for managing AI-driven healthcare data transactions and governance structures they were never formally trained to handle.

The Federal Trade Commission has proposed a new enforcement policy targeting personalized pricing practices, signaling heightened scrutiny of businesses that use consumer data to set individualized prices. As states simultaneously advance their own surveillance pricing legislation—ranging from disclosure mandates to outright bans—companies face an increasingly complex regulatory landscape that demands...

On August 27, 2026, the Office of the Comptroller of the Currency (OCC) and the Federal Deposit Insurance Corporation (FDIC) (together, the Agencies) issued a final rule (the Final Rule) adopting a regulatory definition for the term “unsafe or unsound practice” and revising the supervisory framework for issuing matters requiring attention (MRAs), as part of the Agencies’ more comprehensive efforts to focus supervisory and institution attention on material financial risks. On the same date, the OCC issued a notice of proposed rulemaking (the MRA Rule) to establish regulatory standards for the types of legal violations that can support an MRA.

A federal court in Illinois recently dismissed a cybersecurity-related False Claims Act qui tam complaint against Archer Daniels Midland Company, primarily on materiality grounds. The decision highlights the stringent requirements relators face when pursuing cybersecurity FCA claims, particularly the need to demonstrate that alleged cybersecurity deficiencies would have significantly affected the government's payment decisions. The court's analysis provides critical guidance on pleading requirements for fal

A federal district court has preliminarily enjoined the EPA from reclassifying California's Clean Air Act preemption waiver orders as "rules" subject to the Congressional Review Act. The court found that EPA's reclassification likely violated the Administrative Procedure Act and exceeded the agency's authority, though the order does not prevent Congress from proceeding with pending disapproval resolutions.

The U.S. Treasury and IRS have proposed regulations that would deny tax-exempt status to private schools maintaining discriminatory policies based on race, color, or national origin, including affirmative action programs ruled unconstitutional in Students for Fair Admissions v. Harvard.