Compliance-szakember
Every story that matters from the perspective of the compliance professional, with one sentence on what it concretely means for them. 290 stories, latest first.
November 2026
Hamburg data protection authority drafts letters with an OpenAI model as complaints rise 62%Alongside AI support for official correspondence, the rise in complaints must also be factored in.Three men charged over $129 million fraud using AI impersonation of CEOs and lawyersDual-channel confirmation should be introduced for money transfers, because voice and video alone no longer authenticate.State attorneys general target AI providers: West Virginia sues SnapKnowing the limitations stated in vendor documentation is part of risk management.Hungarian tech-regulation expert: EU AI Act is over-regulatory but here to stayBecause of the skills shortage, it is worth starting to build compliance capacity early.Claude Code leaked users' email addresses in web search headers; Anthropic deployed a privacy fixThe network traffic of developer AI tools should be checked from a data protection perspective.Parents sue Google, alleging school Chromebook AI helped plan teen's suicide attemptFor AI features involving children, content filtering and escalation processes need to be documented.Man sues OpenAI, alleging ChatGPT helped his wife plan to poison himFirms should document how risky requests are handled and what safety limits apply to retired models.Meta, Google and TikTok sue California over law protecting children from addictive algorithmsPreparation for California's child-protection rules should not be postponed until the case ends.Democrats promise AI regulation as they prepare to take control of US CongressScenarios should be prepared for the federal regulatory shift, including conflicts between state and federal rules.Parts of the EU AI Act to apply in Northern Ireland, but only to AI-integrated goodsManufacturers shipping to Northern Ireland must meet EU rules for products with embedded AI.LG AI Research tool checks copyright risk in training data 45 times fasterData screening can be done at scale with automated tools, with decisions documented alongside.Hungarian professional publications: shadow AI, deepfakes and data protection risks at companiesPolicies and technical restrictions are needed for AI use on private devices and without authorization.EU Digital Omnibus changes AI Act deadlines and heads for trilogueCompliance plans must be redrawn around the changed deadlines, but obligations already in force must not slip.New York Times and three other US papers sue Brave over AI scraping and paywall bypassThe legal risk of AI features that retrieve third-party content needs to be assessed.UK regulators say existing laws apply to AI agentsThe operation of AI agents must be built into competition, consumer protection and data protection controls.Pennsylvania enacts law against deceptive AI advertising, with disclosure requirementsDisclosure of AI use in advertisements should be built into the campaign approval process.California enacts new AI laws on workplace practicesAI tools affecting California employees (e.g. recruitment, evaluation) must be reviewed against the new rules.noyb files five complaints against Scale AI over surveillance of European AI trainersWhen reviewing AI data annotators and trainers, employee data processing under the GDPR must also be reassessed.Hungarian legal articles: company executives are personally liable for AI decisionsThe deployer obligations under the AI Regulation (Article 26) should be covered by an oversight regime tied to the instructions for use.Five things German firms believe about the AI Act, and what the text saysInternal assumptions about the AI Act should be checked against the legal text before a compliance programme is built.Alphabet shareholder sues executives over copyright claims in Google AI trainingThe legal risk of AI training should be documented at board level.
Oct 2026
AI vendor contracts may hide a chain of data processorsThe sub-processor chain needs to be audited.Google cases could test EU AI training rules and rights reservationHandling of opt-out signals should be built in now.Cyberattacks on the legal sector double as attackers deploy autonomous AI agents, CrowdStrike saysFirm-level cybersecurity controls must be strengthened.Family sues OpenAI over alleged fatal medical advice from ChatGPT; epilepsy drug class action also filedDocumented rules for handling medical questions reduce risk.Noyb files five GDPR complaints against Scale AI over worker surveillanceCompanies running AI-trainer platforms should review the legal basis and proportionality of worker monitoring.Anthropic flags insurance gaps and copyright risk after $1.5bn settlementGiven the risk disclosure, a supplier's litigation exposure should be treated as a separate item in vendor risk assessments.California's new AI 'bossware' and 'No Robo Bosses' laws: what employers need to doHuman review must accompany AI-based decisions about employees.Hungarian article warns of GDPR risk when property managers upload condominium documents to AI toolsDocuments uploaded to AI require a legal basis and a data processing agreement.Clinical AI liability: AMA briefing and legal risks for health systemsWhen clinical AI is used, responsibility and human oversight should be documented.EU AI Act: Digital Omnibus pushes high-risk deadlines to 2027 as Article 50 transparency rules applyDespite the delay, transparency obligations must already be met, and preparation of high-risk systems should continue.Anthropic launches Claude for Legal Artifacts, interactive tools for lawyersData-handling and confidentiality terms should be reviewed before signing a contract.115 new state AI laws in 30 states, with chatbot safety at the centreWithout a federal law, the patchwork of state rules must be tracked state by state.New York governor signs law protecting children from AI chatbotsContent filters and age verification for chatbots that interact with minors must be aligned with the law.Texas and other states sue OpenAI over ChatGPT safetyThe marketing and safety claims of AI services must be verified.Deepfake rules in the US: Maryland's fraud law and election advertisingCampaign materials must comply with disclosure rules that differ from state to state.California SB 574 sets limits on AI use by attorneys and arbitratorsLaw firms' internal AI policies must be aligned with the statute.EN 18286 becomes the first harmonised standard under the EU AI ActThe standard should be built into conformity documentation and the quality management system.AI liability rules: EU centrists clash while England and Wales law commission proposes reformSoftware developers' product safety processes should be reviewed.First AI Act enforcement step: EU authority requests information from a providerA documented process for responding to information requests should be maintained.Shadow AI in Hungary: PwC survey looks at AI use in the workplaceMapping and regulating unauthorised AI use is urgent.Colorado draft AI rules and New York AI safety proposals draw attentionOrganisations should prepare for AI notification obligations tied to consequential decisions.AI agents' errors create liability risk for companies and their lawyersLogging autonomous AI decisions and designating those responsible for them is recommended.Deepfake regulation in Queensland, Scotland, Vietnam and TaiwanFor platforms, takedown obligations vary from country to country.Noyb comments on EU Council agreement on AI personal data processing under GDPRChanges to GDPR rules on AI data processing are worth following.Idaho attorney general demands data protections for users of bankrupt chatbot companyA legal-basis review is needed before user data is treated as an asset.China's AI regulation in 2026: enforcement, guidance and complianceAnyone present in the Chinese market must keep up with local regulation.Delaware plan would let AI agents run entire businessesThe lack of human oversight sharpens questions of liability.Google changes privacy policy to allow AI search data to be used for targeted adsCompanies using Google AI services should consider new data-processing notices.Polish AI regulator's decisions to be reviewed by SOKiK under new civil procedure sectionThe option of appealing authority decisions is part of compliance risk management.UK GDPR still applies to AI after the Data (Use and Access) Act, NeuralTrust saysAutomated decision-making procedures need to be reviewed under the new rules.Romania weighs restricting legal advice from AI platforms, with lawyers' backingProviders offering legal AI on the Romanian market should watch the bill's progress.Brazil's Enter case raises questions on governing AI-powered legal servicesFor cross-border legal AI services, local regulation is a risk.Socialists push for EU-level rules on deepfakesPlatforms and AI providers must reckon with new EU protective measures.WhatsApp help pages told company's AI not to mention data protection authoritiesUser-facing information should mention data protection remedies as a matter of expectation.AI Act: what applies, what was delayed, and the Article 50 transparency obligationsTransparency and AI literacy obligations must already be met; for high-risk systems, the new deadline is the basis for planning.State attorneys general line up to sue OpenAI over ChatGPT safety and consumer protectionChild protection and data protection controls must be defensible at state level too.First harmonised standard supporting the AI Act published in the Official JournalCompliance documentation can be built on the standard.EU backs GDPR change letting AI use personal data without consentThe digital omnibus amendments mean legal bases and notification processes must be reassessed.California enacts laws regulating AI in the workplace and in legal practiceNew California limits apply to employers' AI-based decisions.UMG and Sony ask court to make DistroKid hand over AI music upload data in Suno caseMusic distribution platforms must prepare in advance for courts being asked to order disclosure of their AI music records.US states and Congress move on AI in political ads as spending growsLabelling obligations for AI content in campaigns differ from state to state.AI Act obligations for general-purpose AI models: biological risk and incident reportingGPAI model providers must build risk management and incident reporting processes.Anthropic's leaked bill would let the US block AI models over 50-plus deaths or $1 billion in damageFederal override of state incident-reporting rules could change compliance plans.Character.AI bankruptcy and Disney deal open a new phase in chatbot lawsuitsThe fate of user data, especially children's data, must be addressed in bankruptcy proceedings as well.New Jersey and Illinois move toward regulating AIExpect a patchwork of state-by-state rules.White House 'Super Intelligence' task force to hold first meetingThe federal oversight approach may affect both providers and users of frontier models.Proposed EU KIDS Act targets online platforms, age verification and AI chatbotsAge-verification obligations for chatbots and platforms are expected.Two German courts hold Google responsible for false claims in its AI summariesProviders can be held liable for the accuracy of generative search features, which affects product risk analysis.DOJ retreats from AI enforcement as Anthropic pitches its own AI safety bill to lawmakersWith weaker federal oversight, compliance readiness toward state authorities needs to be strengthened.UN adopts resolution on the human rights impact of AIHuman rights-based AI assessment is gaining international support.Big Tech presses EU to rework AI Act as enforcement lagsWith national supervisory authorities missing, the timing and substance of enforcement are uncertain.Eight US states sue OpenAI over alleged harms of ChatGPT to usersChatbot safety claims and controls for minors should be documented, as they can be held to account at state level.First harmonised standard for the AI Act published, giving presumption of conformityFollowing the standard can give a presumption of conformity, so internal controls should be aligned with it.State attorneys general seek consumer and data protections in Character.AI bankruptcyWhen an AI service is acquired, the transfer of users' chat data requires separate examination of data protection conditions.US states enacted 144 AI laws across 40 states in 2025Companies operating in several states need a state-by-state register of AI legislation.Class action: OpenAI let minors sign up without parental consent and used their data for trainingAge verification for minors and documentation of parental consent should be reviewed in products.Massachusetts weighs the country's strictest AI safety law as Washington state also considers actionUpcoming state rules are worth monitoring, as they may tighten the safety obligations of AI developers.Judge doubtful in privacy lawsuit over Google's AI customer serviceDisclosure and consent are key when calls are processed by AI.AI Act digital omnibus pushes high-risk rules back to December 2027Compliance timelines must be redrawn: high-risk deadlines have slipped, but transparency obligations remain.EU starts enforcing AI Act, sends information requests to OpenAI and AnthropicIncident-handling and reporting processes for AI agents must be documented ahead of AI Act supervisory questions.AI Act transparency rules: labelling AI content and deepfakesChatbots and generated content must be labelled under Art. 50, and the process must be put in place.EDPB publishes €824.99 million GDPR fine against Uber; Noyb cites €2 billion in finesGDPR compliance of automated decision-making needs priority attention, given the size of the top-level fines.US proposals on liability for autonomous AI agents and the 'defect versus conduct' debateMonitoring and logging agents after deployment also serves as a liability defence.US states enact AI disclosure rules for advertising; lawsuit targets AI-altered influencer imageAI alterations used in advertising must be labelled, with requirements that differ by state.Who is liable when legal AI shares client data? Guernsey's data watchdog issues warningClient-data handling by AI tools should be restricted both contractually and technically.Banking watchdogs step up AI scrutiny amid financial stability fears, sources sayFinancial institutions should prepare for supervisory scrutiny of their AI risk management.Microsoft's Brad Smith, Richard Hermer and 400 scientists call for tougher AI regulationThe tightening direction of AI regulation is a factor in compliance planning.31 US states have laws against election deepfakes, but the patchwork works poorlyAI-labelling requirements for political ads differ from state to state.Italian regulator fines Wind Tre €16.7 million over unlawful telemarketingChecks on telemarketing data processing and consents carry a significant risk of fines.UK ministers consider mandatory AI safety reportingIf reporting becomes mandatory, AI developers may face new disclosure burdens.European Commission draft would regulate workplace AI use to protect workersWorkplace AI use policies should be drawn up with the forthcoming EU framework in mind.Unsealed complaint: Character.AI chatbots encouraged self-harm and starvationChatbots' safety filters and escalation mechanisms should be documented.UK ICO secures data protection changes from 10 AI developers, turns to agentsThe ICO commitments set a benchmark for transparency on training data and the handling of data subject rights.California enacts new laws regulating AI use in health careInternal rules on AI use in health care must be aligned with the California requirements.US federal AI liability proposals: Trahan draft and bipartisan Senate billOversight and logging controls for AI agents should be prepared for stricter liability rules.Trump's voluntary AI pledge contrasts with binding EU rulesThe voluntary US pledge is no substitute for mandatory EU compliance.EDPB guidelines on web scraping for training generative AI modelsThe processing of personal data collected through web scraping should be reviewed in line with the EDPB guidelines.Sirius XM cleared in AI hiring discrimination lawsuitDocumentation of recruiting algorithms may have value in a legal defence.Startup players call EU AI Act a "ticking time bomb" and ask for delayShould follow how the postponement debate develops, as it may affect Hungarian startups' preparation plans.Austria misses AI Act deadline: no complaints body for deepfakesBecause of national implementation delays, readiness at national level must be monitored separately.European Commission asks more than 30 AI companies for safety and compliance informationShould keep transparency and safety documentation ready, following the pattern of the inquiries to GPAI providers.McDonald's sued over AI tool that recommends prices to US franchiseesThe data sources and market impact of AI price-recommendation tools should be audited from a competition-law perspective.Budapest district public-space supervision document addresses AI tools and data protection fineFor AI-based surveillance tools in the public sector, the risk of data protection fines should be checked.Podcasts address employment-law and compliance questions on workplace AI useInternal rules must designate who is responsible for AI-generated content.Italian competition authority opens investigation into Suno's terms of serviceThe user terms of AI services should also be reviewed from a consumer-protection perspective.California enacts first law governing generative AI use by lawyers and arbitratorsThe firm's AI toolset and training programme should be reviewed before the rules take effect in 2027.AI Act after the Digital Omnibus: what applies and what has been delayedMust re-map the post-omnibus deadlines and obligations in force in the company's compliance plan.OpenAI introduces text watermarking in the EU to comply with AI ActBecause of the obligation to make AI-generated text identifiable, must also check their own provider chain.Lawsuits test who is liable for damage caused by rogue AI agentsAgents' access permissions and oversight should be documented to clarify liability.California enacts more than two dozen privacy and AI laws in 2026 sessionCompanies operating in California need to review the state's AI and privacy laws item by item.Italy: Decree 179/2026 sets fines and voids algorithmic dismissalsCompanies operating in Italy must align their AI use with the new sanctions regime from 23 October.Illinois biometric suit over images uploaded to Grok; consolidation of Grok suits soughtWhen handling user-uploaded images, biometric data consent and notice must be provided.Election AI deepfakes: New Jersey has a regulatory gap, New Mexico faces a disputeThe use of AI in campaign materials must be checked separately under each state's rules.AI Act and GDPR: what a Hungarian SME needs to knowFor SME clients, check that deepfake and AI-text labelling obligations are being met.Appeals court temporarily blocks Minnesota's AI 'nudification' law in xAI suitThe validity and suspension of state requirements must be tracked.Óbuda University launches practical AI Act trainingA domestic training opportunity opens up for the practical application of the AI Act.Senators Hawley and Murphy announce bipartisan AI Agent Accountability ActThe bill should be tracked for its implications for governance frameworks for agent deployments.26 state attorneys general urge Congress to regulate frontier AI while preserving state authorityFederal preemptive legislation could decide whether state requirements remain in force.
September 2026
California bans AI 'robo bosses': a human must decide on firingsAI-based HR tools must be measured against the new requirements, and human review documented.Hungarian data protection authority NAIH imposes record fine over AI analysis of customer service recordingsBefore AI analysis of voice recordings, the legal basis, information notices and data protection impact assessment should be reviewed.Newsom signs 11 more AI safety laws as his term endsAI companies operating in the California market need to review the obligations that are newly taking effect.EU states urged to go beyond the AI Act to protect people from abusive surveillanceFor AI systems used for surveillance, additional national rules must also be monitored.New Mexico prepares one of the strictest AI regulatory pushes for 2027AI developers that also operate in New Mexico need to assess the strict state expectations in advance.Pennsylvania House passes bill regulating AI chatbotsCompanies operating chatbots should follow the bill's further progress.AI deepfake fraud raises liability stakes for banks and businessesVerification controls for voice- and video-based identification should be strengthened because of deepfake risk.Appeals court upholds Thomson Reuters win: AI training on its material is not fair useDocumenting and verifying the provenance of training data has become more important.Anthropic says rogue AI agents pose uncertain legal riskThe risk register and risk disclosures covering agents' actions are worth expanding.Political deepfakes: lawmakers fall behind as campaigns turn to legal actionPolitical campaigns' AI content and distribution controls must be managed under changing state rules.Israel Bar Association issues expanded ethics opinion on lawyers' use of AIA law firm's AI policy should be compared with the Bar Association's position.Report: Copilot privacy practices allow humans to view uploaded photosBefore Copilot is used at work, the provider's terms on human review should be checked.EU AI Act after the omnibus: high-risk rules slip, transparency obligations do notThe focus now should be on Article 50 labelling and GPAI obligations, not on the slipping high-risk deadlines.Florida attorney general seeks court order halting OpenAI's new modelsDocumenting and being able to prove independent safety testing matters if a state takes action.California law regulates lawyers' and arbitrators' use of AIThe firm's internal AI policy and review process must be compared against the new requirements.Advocacy group sues OpenAI over Hugging Face incidentAccess rights and logging for AI agents should be re-examined in light of the leak risk.Hungary sets up Deputy State Secretariat for Artificial IntelligenceDomestic market surveillance coordination under the AI Act provides a new point of contact for compliance matters.Connecticut AI and data privacy laws take effect October 1Companies working with Connecticut customers must update their data handling and AI processes by the effective date.Trump calls AI self-regulation important; no consensus reached at White HouseMandatory federal regulation is unlikely to arrive soon, so state rules and voluntary frameworks need to be tracked.Senate AI safety proposals: transparency bill, ban on recursive AI, blocked fast-track voteGiven the federal bills, internal AI safety and transparency controls should be assessed in good time.Ireland's DPC reports significant rise in AI-related engagementsData protection impact assessments for AI deployments should be done in advance, because agentic cases are set to increase.Elon Musk summoned over Grok deepfake lawsuitsContent-filtering obligations for generative image services are becoming stricter.CSBS announces AI supervisory framework for state-chartered banks and nonbank financial institutionsUnder the supervisory framework, financial institutions' use of AI must be documented and controlled.Hungarian lawyer warns what data not to enter into AI chatbotsThe chatbot-use policy and the incident-handling process must be designed around the 72-hour notification to NAIH.New York attorney general urges AI company employees to report wrongdoingAI companies must provide an internal whistleblowing channel and protection against retaliation.Appeals court upholds Pentagon's designation of Anthropic as a supply chain riskFor government clients, check which AI models could be blacklisted and align supplier compliance lists accordingly.New Mexico jury finds Facebook executives misled users about their dataExecutives' statements on data handling must be verified and documented.New York City and Oregon write their own frontier AI rules as Washington stallsAI developers operating in several states must expect differing local rules.Meta fined for behavioral advertising in African jurisdictionThe legal basis for personalized advertising must be assessed under local data protection rules.Hungary adopts AI act and government decree, with fines of up to HUF 5.7 billionAssess which systems qualify as high-risk and adjust the compliance plan accordingly.OpenAI agent accessed Australian government and health data without authorisationAI agents' access rights and logging must be examined, because the incident involved agent access.Irish data protection authority publishes AI reportThe report reflects the authority's data protection expectations on AI and can serve as a compliance baseline.Germany and Italy implement the AI Act through national legislationCompanies operating in several member states must check national implementation rules in each.Employers sued over AI monitoring and AI-recorded conversationsAI recording without informing employees and obtaining their consent may be unlawful.Banks warn AI shopping agents carry fraud and data privacy risksFinancial institutions need separate fraud prevention and authorization controls for AI agent payments.British Columbia sues OpenAI and Sam Altman over Tumbler Ridge school shootingCompliance officers should build rules for flagging and escalating dangerous user content into internal procedures.Digital Omnibus: EU to delay application of AI Act high-risk rulesCompliance roadmaps for high-risk systems must be re-planned around the amended deadlines, building in the uncertainty.Digital Omnibus: EU member states split over AI and data transfer rulesGDPR compliance plans must account for possible relaxation of the rules on AI training and data transfers.Apple's $250 million Siri AI settlement opens for claimsMarketing claims about AI capabilities must be documented and substantiated because of the risk of false advertising claims.Governors, attorneys general, Bill Gates and House bills push for federal AI regulationA requirement for pre-deployment safety testing may call for a new internal review process.Federal judge: Montana's deepfake election law likely unconstitutionalThe regulation of political AI advertising varies by state and remains uncertain.New York begins implementing RAISE Act: large AI developers must report safety incidentsLarge AI developers operating in New York must set up an incident registration process.OpenAI, Anthropic, Google and SpaceXAI hit with antitrust class action over alleged AI slowdown pactSector-wide safety agreements require a competition-law review.Runaway AI agents spark debate over limits of European product liability lawRisk management must take into account liability arising from unexpected behaviour of agentic systems.Google fined €403 million over location data handlingConsent and transparency practices for location data processing must be reviewed.EDPB issues new methodology for calculating GDPR finesFine-risk estimates must be reviewed under the new methodology.Uber's €825 million fine is a warning over automated dismissalsFor automated decisions affecting employees, human oversight and its documentation must be ensured.Spain drafts AI rules as prime minister says self-regulation is not enoughMember-state regulatory initiatives need to be monitored.Report outlines generative AI risks and safeguards for law officesThe use of generative AI should be framed by internal rules and oversight.AI compliance issues hit 40% of large companies in the past year, survey findsAudit trails must be built into AI processes, because traditional workflows do not cover AI.GPAI Code of Practice transparency chapter published as Commission readies guidelinesGPAI providers must build the Code's documentation measures and the guidelines into their compliance process.Antitrust lawsuit filed against OpenAI, Anthropic, Google and SpaceXAIIndustry consultations and joint statements warrant a competition-law review.Newsom executive order calls for independent AI auditors and safety assessorsThe introduction of AI audits and an auditor registry could bring a new external-oversight requirement.Judge blocks Montana from enforcing deepfake election ad lawThe enforceability of state deepfake rules is uncertain, so campaign compliance must be assessed case by case.AI regulation comes up at hearings of candidates for head of Hungary's media authority NMHHThe AI-related priorities of the media regulator's head may shape domestic content-labelling and platform-oversight practice.Hungarian article sets out legal background to calls made with automated dialling systemsDomestic rules on automated calls should be checked before dialling systems are introduced.California requires ads to disclose AI-generated performersIn ad campaigns, labelling of AI performers must be built into the production process.Ireland's domestic AI legislation takes effect; Italy regulates police biometricsMember-state supplementary rules create separate compliance tasks alongside the AI Act.Hong Kong to appoint AI commissioner; South Korean court convicts official over AI imagesNew compliance expectations can be expected for activity in Hong Kong because of the AI commissioner and the deepfake rules.OpenAI unveils Astra for Law legal AI platformPrivacy and confidentiality settings should be reviewed before the new platform is rolled out.Spanish data protection authority receives first data breach report linked to an AI agentAI agents' access rights and the incident reporting process should be treated as a separate risk.Slovak parliament moves AI and European data regulation bill to second readingOn the Slovak market, organisations should prepare for content-labelling obligations and national implementation.New York seeks broader AI regulation before its first AI law takes effectGiven New York's regulatory plans, compliance programmes should be planned ahead of the effective date.European Commission enforces AI Act: GPAI obligations binding, transparency rules in effectOrganisations should review which provisions apply to them based on their roles, product scope and territorial link.US Senate AI bill could block risky models and override state lawBecause federal preemption is possible, state compliance programmes need to be handled with contingency plans.California enacts child-safety and AI chatbot lawsChatbot and social media providers must build the new child-related obligations into their operations.State AI laws and federal preemption: Texas, Colorado and compliance guides for companiesDiverging state rules require a compliance map covering several states.Manhattan DA seizes 12 celebrity deepfake websitesA review of hosting and platform-provider risks is warranted.Digital Omnibus is the first substantive amendment to the EU AI ActThe amendment may affect the compliance timeline and priorities, so it should be monitored.UK MPs and peers call for new AI law and regulator to address human rights risksFor activity in the UK, firms should prepare for possible new supervisory requirements.Poland's AI systems act takes effectOrganisations operating on the Polish market must prepare for both the national AI authority and data protection obligations.Hungarian labour law and data protection articles examine AI use in the workplace and HRAI support for HR processes should be introduced alongside a data protection impact assessment and classification under the AI Act.Report: OpenAI contract workers can read ChatGPT conversations, raising privacy concernsUse of consumer AI tools with client data should be banned or restricted by policy.Court denies xAI preliminary injunction against Minnesota's AI nudification banAI image-generation services need to prepare to comply with such laws.Dispute over AI companies' "pace the frontier" regulation call and lobbyingThe regulatory direction shaped by lobbying should be tracked through preparatory documents and draft bills.DOJ will not regulate AI firms through prosecution, Blanche says; Khan says existing law sufficesDifferences in regulators' enforcement priorities affect risk assessment.Nvidia, Palantir and other firms restrict use of advanced AI models over privacy concernsCorporate AI-use policies should regulate access to models and data according to risk.EU plans child protection law for social media, games and AI chatbots; concerns over transatlantic AI divideChild-protection compliance of AI chatbots should be prepared in light of the EU draft.New AI rules in Illinois and Connecticut are about to take effectAffected AI applications should be reviewed ahead of the effective dates.Judge refuses to block Minnesota's AI 'nudification' law; xAI challenge failsA procedure for filtering and blocking user outputs is needed in the Minnesota market.Hungarian media lawyer: not all AI-made content must be labelled, but errors risk billion-forint finesPublishing and marketing workflows need to identify which AI content falls under the labelling obligation.Lawsuit says Meta used Facebook and Instagram images to build facial recognition and generative AI without consentFor AI development based on social media images, a legal basis for processing biometric data must be demonstrated.UK tribunal strikes off lawyer over fake AI-generated citations, a first in the countryFirm policies should require a mandatory verification step for AI-assisted filings.Hungarian press analyses: workplace AI monitoring raises data protection questions, workers can seek human review and complain to the data protection authorityA procedure must be set up so that the right to human review can be exercised.Council of Europe drafts data protection rules for AI chatbots and agentsFor chatbot and agent services, it is worth following the draft's obligations when designing for data protection.New York lawmakers urge Hochul to sign AI technology billsProviders of services in New York need to follow the governor's decision because of possible new AI rules.Uber drivers sue over pay they say is pushed down by algorithmPlatforms need to document how algorithmic pay-setting works.Hungary moves AI market surveillance to the minister for science and technologyOfficial requests and notifications must be addressed to the new competent body.Another 30 lawsuits filed against OpenAI over ChatGPT use linked to school shootingChatbot providers need to document how they handle risky conversations.Meta AI glasses lawsuit expands to bystanders who say they were recorded without consentFor wearable camera devices, third-party consent must be built into the data protection impact assessment.Greece adopts Act 5321/2026 on the supervision of AI systemsCompanies operating in the Greek market need to build the new supervisory framework into their AI Act compliance.California legislature passes bill regulating lawyers' use of AIThe firm's internal control and training procedures must be documented.US urges hands-off approach to AI regulation at G20 tech meeting as EU prepares new lawTo prepare for transatlantic regulatory divergence, it is worth building a flexible compliance framework.
August 2026
EU designates ChatGPT a search engine under the DSA; Reddit and Roblox classed as very large platformsServices built on ChatGPT can expect risk-assessment, transparency and audit requirements, with a four-month preparation period according to the Hungarian press.AI Omnibus shifts AI Act deadlines; critics say core problems remainCompliance timelines must be aligned with the new deadlines, and sector-specific deviations tracked separately.ChatGPT conversations can become evidence, without legal privilege protectionThe staff AI-use policy should prohibit entering client data and confidential information.AI Act enforcement begins as the AI Office starts requesting information from companiesDocumentation should be kept ready for AI Office requests, as penalties can reach up to 7 percent of global turnover.California legislature passes several AI bills on safety risks, worker neural data and youth protectionCompanies providing services in California need to track which bills become law.US state AI rules: companion bot laws, Connecticut employer rule, Colorado hearingRequirements on companion bots, employment and Colorado rules need to be tracked separately at state level.US state deepfake porn laws differ, and the Take It Down Act is only a startPlatforms must adapt their takedown and reporting procedures to differing state rules.Sanders and Casar propose ban on superintelligence; House bill would have NIST track self-improving AIBecause federal evaluation and reporting obligations for frontier models may be introduced, the proposals are worth following.AI citation errors: Canadian tribunal orders C$31,150 in costs; State Farm attorney admits AI hallucinationsInsurers and client organisations may expect a demonstrable verification procedure.California amends AI transparency law weeks after it took effectExisting transparency obligations need to be aligned with the amended text of SB 1000.EN 18286:2026, first European standard supporting AI Act implementation, publishedCompliance teams should support the conformity of their systems with documentation based on harmonised standards.Judge rules Pentagon and administration measures against Anthropic were unlawfulIn reviewing federal procurement and supplier compliance risks, the ruling shows the limits of blacklisting measures.Hungarian AI Act guides: KPMG, SME checklist, lawyer interview, Blikk seriesSMEs should start AI Act compliance by assessing their AI tools, roles and risks.AI hiring litigation: lessons from Mobley v. Workday for employersRecruiting algorithms should be audited regularly.New state laws protect users of AI chatbots used as therapists and companionsFor mental health chatbots, state requirements need to be matched with compliance practice.US AI regulation: 60+ state rules, California amendment, dispute over federal preemptionA matrix of state-level rules must be maintained, because requirements differ for health-care notices and chatbot disclosures.Who is liable when an AI agent goes rogue? Survey of counsel points to rising dispute riskThe permissions and oversight of autonomous agents must be documented.Brazil's electoral court to rule next week on AI Bolsonaro avatarRules on the use of AI avatars in election campaigns may offer guidance.Az SEC megegyezett egy miami AI-startuppalThe accuracy of investor and marketing claims about AI capabilities must be ensured.Alabama opens probe into OpenAI after Hugging Face breachCompanies that use model-hosting and data-sharing platforms must review third-party data security risks.Court lets privacy claims against Otter.ai proceedWhen AI note-takers are used, participants' consent must be obtained.Poland investigates ChatGPT over alleged data privacy breachCompanies that use ChatGPT should re-examine their data controller responsibilities under the GDPR.EU AI Act: Digital Omnibus delays high-risk deadline, but obligations remain in forceDespite the delay, obligations already in force (such as transparency) must be met on time, and preparation for high-risk systems must continue.Dutch regulator fines Uber €824.99m over automated driver suspensionsCompanies must assess where they make decisions with legal effect without human review and build human intervention in at those points.AI Act Article 50: chatbots must be labelled, but most Dutch companies do not do itFor customer service chatbots, the placement and language of the AI label must be checked, because practice falls short of the requirement.Irish High Court clarifies DSAR exemptions in TikTok appeal against data protection regulatorIn DSAR handling procedures, exemption grounds must be applied as set out in the ruling.Colorado investigates possible deepfake-law violation in election videoCampaign materials must be checked for AI-use labelling under state disclosure rules.Dutch regulator outlines process for AI Act fundamental rights impact assessment (FRIA)Deployers of high-risk systems must align their impact assessment with the regulator's process.Serbia's draft data protection law: controllers and processors have until 10 September to prepareControllers operating on the Serbian market must prepare for the new rules by 10 September.AI floods public bodies with complaints and information requestsPublic bodies need to set up a procedure for handling mass requests generated with AI.Hungary to get new AI authority; AI fraud victims must turn to different agenciesThe split of domestic supervisory powers must be built into the compliance plan.European data protection regulators set up a ChatGPT task forceChatbot providers' data processing must be managed with coordinated EU regulatory scrutiny in mind.Dutch regulator fines Uber €825 million over algorithmic deactivation of driver accountsFor automated decisions, affected people must be given access and the possibility of human review.OpenAI calls for stronger AI laws in CaliforniaThe direction of California's regulation is worth following, as developers themselves are asking for stricter rules.Deepfake takedown law sets 48-hour deadline and fines of up to $53,088Platforms must run a 48-hour removal process.Limits of unauthorized-practice rules in regulating mental health AIProduct information and limitations for health-related AI features should be checked.Legal AI firms move to own models: Harvey launches Tenet, another vendor switches to Kimi K3Data-handling and supplier risk related to third-party models should be reassessed.Hungarian trade outlets explain AI content labelling rules: deepfakes, chatbots, Article 50A labelling process for AI-generated text, images and video must be introduced in domestic communications too.Digital Omnibus pushes AI Act high-risk deadlines to 2027–2028Compliance plans must be redrawn obligation by obligation, because only the deadline for high-risk systems has moved.US state and federal AI rules collide: Connecticut, Colorado, FTCA map of state-by-state AI requirements should be kept, especially for automated decisions and employment.SRA warns of AI hallucination risks after 42 reports of potential misuseTools' data handling and controls against fake citations must be audited.AI Act enforcement and transparency obligations apply from 2 August 2026Labelling and transparency obligations for AI systems must be assessed and documented immediately.Federal lawsuits allege xAI's Grok was used to create AI child sexual abuse imagesImage-generation tools need strong content filtering and a reporting channel.Rules on AI political deepfakes differ from state to state in the USDeepfake labeling and ban rules must be checked state by state for campaign materials.Europe approves first AI Act standard, but compliance benefit is yet to arriveUntil then, compliance documentation built on the standard should keep an independent method of demonstrating conformity.When a data protection impact assessment is mandatory for an AI systemBefore deploying an AI system, the need for an impact assessment must be determined following the decision sequence.Insurers show growing interest in AI coverage exclusionsInsurance coverage for AI risk should be built into the risk management plan.Hungarian government legislative council to consider draft AI lawChanges in the draft will affect domestic supervisory and reporting processes.Otter.AI fails to get class-action privacy lawsuit over meeting transcripts dismissedThe recording and consent practices of AI note-taking tools need to be reviewed.French CNIL note on agentic AI and EDPB guidance on web scraping for generative AIFor scraped training data and agentic AI, the GDPR legal basis and transparency should be reviewed in light of the new guidance.FTC issues proposed policy statement on AI accuracy and output steeringAI products' accuracy claims and the steering of outputs need to be reviewed for consumer protection risk.Hungarian bodies in AI Act enforcement: market surveillance, AI Council, media regulator NMHHYou need to know which Hungarian authority to notify or approach with questions about live chatbots and HR-related AI.California's Frontier AI Safety Act clears final legislative voteFrontier-model developers in California must prepare for the new safety requirements.Anthropic watermarks Claude's text and file outputs to comply with EU rulesProvider-side watermarking shows how the machine-readable marking requirement is being met, and it is the point to raise in your own supplier assessments.Poland to build AI regulatory sandbox with 35 million zlotyThe sandbox allows AI systems to be tested under regulatory supervision.EU digital omnibus in force: high-risk AI rules pushed back to December 2027The compliance roadmap must be updated, separating postponed obligations from those that are already live.AI Act transparency and enforcement rules apply from 2 AugustCompanies must assess which interfaces require chatbot and AI-content labelling, and document this.AI Act transparency rules apply to Hungarian businesses from AugustMap where the company uses AI and set out the labelling practice in an internal policy.California AI Transparency Act takes effectAI providers serving California users need to check the new obligations.EU opens three channels for reporting AI Act breachesPrepare for competitors or affected parties to file reports, which means an internal escalation procedure is needed.Philippines extends data privacy rules to AI systems and warns on deepfakesAI providers operating in the region must apply data processing rules to their AI systems as well.Belgium prepares new product liability rules; US states lack uniform AI health liability rulesFor healthcare AI, differences in liability rules between states need to be mapped separately.State chatbot laws: Hawaii's AI companion rule and the risk of a regulatory patchworkChatbot disclosure and safety requirements that differ by state need to be mapped.Hungarian data authority NAIH halted a bank's AI emotion analysis, imposing HUF 250 million fineFor voice-analysis AI used in call centres, NAIH's earlier practice means a serious risk of fines must be factored in.Italian data protection authority halts satirical deepfakesEven satirical AI content can draw intervention by a data protection authority.Kenya's new AI rules: what they mean for privacy and workCompanies operating in the Kenyan market must check the new rules' data protection requirements.California weighs bill to limit AI therapist chatbotsUnder the proposal, chatbot services related to mental health would have to be reviewed.Hungarian AI law courses: compliance training and an ELTE law degree specialisationDomestic training programmes prepare participants for AI Act compliance tasks.Italy adopts AI Act implementing decrees on biometrics and employment lawCompanies operating in the Italian market must review their biometric and HR-related automated systems.EU AI Act transparency and labelling rules take effectCompanies need to map where they encounter chatbots and AI-generated content, and introduce a labelling and documentation process.Who is liable when an AI agent breaks into other companies? The OpenAI and Anthropic casesAutonomous agents' access rights and test environments must be brought under security review.Digital Omnibus becomes law, delaying high-risk AI deadlinesThe preparation timeline must be adjusted, but the prohibitions and the rules for general-purpose models have not been postponed.EU Commission can now inspect AI models, restrict market access and fine providers under AI ActModel providers' documentation and training-data disclosure obligations must be checked at the suppliers a company uses.Hungary's AI authority launches labelling guidance site as firms found unpreparedThe office's site can serve as a starting point for drafting an internal labelling and compliance policy.California's AI transparency law takes effect in first phase, targeting deepfakes and scamsAI providers operating in the California market must put detection tools and disclosure obligations in place.Federal government moves to curb state AI laws, with some states likely targetsCompliance plans for state rules will remain uncertain until federal preemption takes direction.Minnesota's ban on AI 'nudification' apps takes effectProviders of AI image generators must check their features against bans that differ from state to state.Federal lawsuit alleges AI was used to produce child sexual abuse materialPlatforms need to review their content filtering and reporting obligations.