Regulation and compliance
AI laws, the AI Act, regulatory guidance and the compliance steps companies take.
Viewpoint
November 2026 · 17
Hamburg data protection authority drafts letters with an OpenAI model as complaints rise 62%compliance specialistAlongside AI support for official correspondence, the rise in complaints must also be factored in.corporate lawyerResponses to regulatory inquiries must be prepared for a faster regulatory pace.Pennsylvania may require court filers to certify AI-generated citations were verifiedlawyerCitation checks should be documented before filing, as a certification requirement may follow.Law Commission of England and Wales opens consultation on reviewing product liability lawcorporate lawyerThe liability risk of software and AI products should be assessed in light of the proposals.lawyerA submission to the consultation or a client briefing on the product liability changes can be prepared.Hungarian tech-regulation expert: EU AI Act is over-regulatory but here to staycompliance specialistBecause of the skills shortage, it is worth starting to build compliance capacity early.corporate lawyerCompanies should plan for a lasting legal framework, not for the act being softened.Claude Code leaked users' email addresses in web search headers; Anthropic deployed a privacy fixcompliance specialistThe network traffic of developer AI tools should be checked from a data protection perspective.corporate lawyerContracts with suppliers should set out the notification conditions for data leak incidents.Democrats promise AI regulation as they prepare to take control of US Congresscompliance specialistScenarios should be prepared for the federal regulatory shift, including conflicts between state and federal rules.corporate lawyerAn amendment clause is advisable in AI vendor contracts to manage changing regulatory risk.Parts of the EU AI Act to apply in Northern Ireland, but only to AI-integrated goodscompliance specialistManufacturers shipping to Northern Ireland must meet EU rules for products with embedded AI.corporate lawyerBecause products and pure software are treated differently, the product portfolio must be reviewed separately.Hungarian professional publications: shadow AI, deepfakes and data protection risks at companiescompliance specialistPolicies and technical restrictions are needed for AI use on private devices and without authorization.corporate lawyerEmployers must settle the data protection, automated decision-making and monitoring aspects of AI use in a written policy.EU Digital Omnibus changes AI Act deadlines and heads for triloguecompliance specialistCompliance plans must be redrawn around the changed deadlines, but obligations already in force must not slip.corporate lawyerThe risk classification of AI systems and the commitments in vendor contracts should be reviewed against the amended timing.lawyerClients should be given a deadline calendar that reflects member-state authority designations.Criminal-law responses to deepfake abuse: Australia's first conviction, Queensland proposal, Irish billlawyerWhen representing victims, the gravity of technology-based sexual violence is worth using as an argument.citizenNew criminal-law tools are being prepared against non-consensual deepfakes.UK regulators say existing laws apply to AI agentscompliance specialistThe operation of AI agents must be built into competition, consumer protection and data protection controls.corporate lawyerLiability for harm caused by an agent can be allocated by contract, but regulatory responsibility stays with the company.New Jersey and New York City consider product liability rules for AI chatbotscorporate lawyerChatbot providers' product liability exposure and insurance coverage should be reviewed.lawyerThe proposed rules could provide a new basis for consumer claims.Pennsylvania enacts law against deceptive AI advertising, with disclosure requirementscompliance specialistDisclosure of AI use in advertisements should be built into the campaign approval process.corporate lawyerIn advertising contracts for the Pennsylvania market, it is worth fixing who is responsible for disclosure.California enacts new AI laws on workplace practicescompliance specialistAI tools affecting California employees (e.g. recruitment, evaluation) must be reviewed against the new rules.corporate lawyerEmployment policies and tool-vendor contracts need to be updated.noyb files five complaints against Scale AI over surveillance of European AI trainerscompliance specialistWhen reviewing AI data annotators and trainers, employee data processing under the GDPR must also be reassessed.corporate lawyerContracts with external data-labelling providers should fix responsibility for data processing and the limits of surveillance.Hungarian legal articles: company executives are personally liable for AI decisionscorporate lawyerManaging directors' AI liability risk should be reduced with documented controls and an internal policy.compliance specialistThe deployer obligations under the AI Regulation (Article 26) should be covered by an oversight regime tied to the instructions for use.lawyerClients should be advised to adopt contract and liability clauses tailored to AI agents.Five things German firms believe about the AI Act, and what the text sayscompliance specialistInternal assumptions about the AI Act should be checked against the legal text before a compliance programme is built.corporate lawyerIn management briefings, misconceptions should be rebutted with citations to the text.
October 2026 · 105
AI vendor contracts may hide a chain of data processorscorporate lawyerIn vendor contracts, request the list of sub-processors and details of data access.compliance specialistThe sub-processor chain needs to be audited.House Democrats criticize Justice Department support for OpenAI in copyright suitlawyerThe weight of the government's brief should be factored into fair use arguments.Google cases could test EU AI training rules and rights reservationcorporate lawyerChanges to EU rules may affect how training data is sourced.compliance specialistHandling of opt-out signals should be built in now.Noyb files five GDPR complaints against Scale AI over worker surveillancecompliance specialistCompanies running AI-trainer platforms should review the legal basis and proportionality of worker monitoring.corporate lawyerClients of AI data-supply vendors should also examine the GDPR liability chain.citizenPlatform workers can invoke their GDPR rights to request access to their data and lodge complaints.California's new AI 'bossware' and 'No Robo Bosses' laws: what employers need to docorporate lawyerFor employer clients, the scope of the software they use needs to be assessed.compliance specialistHuman review must accompany AI-based decisions about employees.Hungarian article warns of GDPR risk when property managers upload condominium documents to AI toolslawyerCondominium clients should be advised on the limits of using AI tools.compliance specialistDocuments uploaded to AI require a legal basis and a data processing agreement.citizenResidents' personal data may end up with service providers.EU AI Act: Digital Omnibus pushes high-risk deadlines to 2027 as Article 50 transparency rules applycompliance specialistDespite the delay, transparency obligations must already be met, and preparation of high-risk systems should continue.corporate lawyerContracts need updating to reflect the applicable deadlines and the allocation of liability.lawyerClient preparation should be based on the changes made by the Omnibus.Courts and AI: Geoffrey Vos's proposal, judicial guidelines and the debate over AI judgeslawyerAutomated decision-making in simpler civil cases raises new procedural questions.New York courts and state bar issue guidance on AI use in legal filingslawyerCitations and content in filings must be verified by a human.115 new state AI laws in 30 states, with chatbot safety at the centrecompliance specialistWithout a federal law, the patchwork of state rules must be tracked state by state.corporate lawyerFor multi-state clients, it is worth planning around the strictest rule.New York governor signs law protecting children from AI chatbotscompliance specialistContent filters and age verification for chatbots that interact with minors must be aligned with the law.corporate lawyerProviders must prepare for enforcement by the authorities.citizenParents can invoke the new protective rules.Deepfake rules in the US: Maryland's fraud law and election advertisinglawyerIn deepfake cases, action can be taken under state law.compliance specialistCampaign materials must comply with disclosure rules that differ from state to state.California SB 574 sets limits on AI use by attorneys and arbitratorslawyerIn California practice, the AI-use rules must be followed and documented.compliance specialistLaw firms' internal AI policies must be aligned with the statute.EN 18286 becomes the first harmonised standard under the EU AI Actcompliance specialistThe standard should be built into conformity documentation and the quality management system.corporate lawyerReference to the standard can also be included as a contractual requirement.AI liability rules: EU centrists clash while England and Wales law commission proposes reformcorporate lawyerThe scope of liability for software and AI products may widen, so the risk allocation in contracts should be reviewed.lawyerNew grounds of liability may appear in product liability cases.compliance specialistSoftware developers' product safety processes should be reviewed.First AI Act enforcement step: EU authority requests information from a providercompliance specialistA documented process for responding to information requests should be maintained.corporate lawyerAn internal protocol is needed for handling regulatory enquiries.Experts' AI use and deepfake evidence: federal committees weigh new ruleslawyerDisclosure of AI use in expert opinions is expected to become important.Shadow AI in Hungary: PwC survey looks at AI use in the workplacecompliance specialistMapping and regulating unauthorised AI use is urgent.corporate lawyerRules on employees' AI use should be written into employment contracts and company policies.Copyright and AI: India, Australia and Taiwan debate rules as international study appearslawyerFor international clients, training rules that differ by jurisdiction must be followed.Colorado draft AI rules and New York AI safety proposals draw attentioncompliance specialistOrganisations should prepare for AI notification obligations tied to consequential decisions.corporate lawyerIn rulemaking debates, the timing of industry comments matters.Deepfake regulation in Queensland, Scotland, Vietnam and TaiwanlawyerCriminal-law and personality-rights claims differ from country to country.compliance specialistFor platforms, takedown obligations vary from country to country.Noyb comments on EU Council agreement on AI personal data processing under GDPRcompliance specialistChanges to GDPR rules on AI data processing are worth following.corporate lawyerThe Council's position may affect assessments of the legal basis.Idaho attorney general demands data protections for users of bankrupt chatbot companycorporate lawyerIn bankruptcy proceedings, selling user data may run into privacy restrictions.compliance specialistA legal-basis review is needed before user data is treated as an asset.China's AI regulation in 2026: enforcement, guidance and compliancecompliance specialistAnyone present in the Chinese market must keep up with local regulation.Delaware plan would let AI agents run entire businessescorporate lawyerThe separation of corporate liability raises new structural questions.compliance specialistThe lack of human oversight sharpens questions of liability.Denmark plans to protect faces and voices from deepfakes through copyright lawlawyerAn EU member-state model could influence regulation in other countries.Google changes privacy policy to allow AI search data to be used for targeted adscitizenAI search data may end up in advertising profiles, so it is worth checking settings.compliance specialistCompanies using Google AI services should consider new data-processing notices.Polish AI regulator's decisions to be reviewed by SOKiK under new civil procedure sectionlawyerThe new procedural route for challenging Polish AI supervisory decisions in court must be understood.compliance specialistThe option of appealing authority decisions is part of compliance risk management.UK GDPR still applies to AI after the Data (Use and Access) Act, NeuralTrust sayscompliance specialistAutomated decision-making procedures need to be reviewed under the new rules.corporate lawyerWhere UK data is processed, the GDPR compliance of AI systems must still be demonstrable.Law Commission outlines plan to overhaul product liability for AI, apps and algorithmscorporate lawyerThe liability risk of products containing AI needs to be reassessed.lawyerProduct liability claims may extend to digital products.Romania weighs restricting legal advice from AI platforms, with lawyers' backinglawyerA dispute over protecting the monopoly on legal advice could arise elsewhere too.citizenLegal advice from AI chatbots may become only partly available.compliance specialistProviders offering legal AI on the Romanian market should watch the bill's progress.Poland begins work on law to criminalise erotic deepfakescitizenCriminal-law protection is being prepared for deepfake victims.lawyerA new criminal offence gives victims' representatives an additional legal avenue.Canadian Judicial Council issues new guidance for judges on artificial intelligenceSocialists push for EU-level rules on deepfakescompliance specialistPlatforms and AI providers must reckon with new EU protective measures.lawyerNew EU tools may become available for deepfake victims to enforce their rights.WhatsApp help pages told company's AI not to mention data protection authoritiescitizenThe AI assistant may not tell users about the option of complaining to a regulator.compliance specialistUser-facing information should mention data protection remedies as a matter of expectation.ICMP says AI firms are trying to 'strong-arm' Australia on copyrightAI Act: what applies, what was delayed, and the Article 50 transparency obligationscompliance specialistTransparency and AI literacy obligations must already be met; for high-risk systems, the new deadline is the basis for planning.corporate lawyerContracts should address both the changed deadline and the allocation of liability under Article 50.lawyerClients should also be advised to check that legal search tools and eDiscovery solutions comply.First harmonised standard supporting the AI Act published in the Official Journalcompliance specialistCompliance documentation can be built on the standard.corporate lawyerThe standard can serve as a basis for contractual compliance requirements.EU backs GDPR change letting AI use personal data without consentcompliance specialistThe digital omnibus amendments mean legal bases and notification processes must be reassessed.corporate lawyerThe proposed amendments could change the legal basis for AI development that processes personal data.citizenThe role of consent may weaken when their data is used for AI training.California enacts laws regulating AI in the workplace and in legal practicelawyerNew obligations apply to AI use and must be built into everyday practice.compliance specialistNew California limits apply to employers' AI-based decisions.US states and Congress move on AI in political ads as spending growslawyerIn campaign-law cases, a suit can be brought for violating deepfake rules, as the Moore campaign's challenge shows.compliance specialistLabelling obligations for AI content in campaigns differ from state to state.AI Act obligations for general-purpose AI models: biological risk and incident reportingcompliance specialistGPAI model providers must build risk management and incident reporting processes.lawyerFor providers of large models, the relevant voluntary code of practice can serve as a basis for compliance.Anthropic's leaked bill would let the US block AI models over 50-plus deaths or $1 billion in damagecompliance specialistFederal override of state incident-reporting rules could change compliance plans.corporate lawyerThe liability and threshold provisions may signal the direction of federal legislation.Meta delays new business terms after publisher pushback over AI scrapingcorporate lawyerWhen platform contracts are amended, provisions on use for AI training need separate review.UK deepfake victim's campaign leads to change in the lawcitizenVictims of deepfake porn have gained stronger legal protection.lawyerThe amended rules affect how victims are represented.New Jersey and Illinois move toward regulating AIcompliance specialistExpect a patchwork of state-by-state rules.corporate lawyerCompanies operating in several states must follow local AI rules.White House 'Super Intelligence' task force to hold first meetingcorporate lawyerA liability-centred federal approach also affects contractual risk management.compliance specialistThe federal oversight approach may affect both providers and users of frontier models.Proposed EU KIDS Act targets online platforms, age verification and AI chatbotscompliance specialistAge-verification obligations for chatbots and platforms are expected.corporate lawyerDivided supervisory powers mean dealing with several authorities.DOJ retreats from AI enforcement as Anthropic pitches its own AI safety bill to lawmakerscompliance specialistWith weaker federal oversight, compliance readiness toward state authorities needs to be strengthened.corporate lawyerThe debate over federal preemption may decide which state AI rules remain governing.UN adopts resolution on the human rights impact of AIcompliance specialistHuman rights-based AI assessment is gaining international support.Hungary's National Office for the Judiciary sets up AI and cybersecurity cabinetBig Tech presses EU to rework AI Act as enforcement lagscompliance specialistWith national supervisory authorities missing, the timing and substance of enforcement are uncertain.First harmonised standard for the AI Act published, giving presumption of conformitycompliance specialistFollowing the standard can give a presumption of conformity, so internal controls should be aligned with it.corporate lawyerThe standard may become a new basis for clients' compliance plans.State attorneys general seek consumer and data protections in Character.AI bankruptcycompliance specialistWhen an AI service is acquired, the transfer of users' chat data requires separate examination of data protection conditions.citizenChatbot conversation data may need protection even when the company is sold, and state attorneys general are acting on this.US states enacted 144 AI laws across 40 states in 2025compliance specialistCompanies operating in several states need a state-by-state register of AI legislation.corporate lawyerIn the absence of federal regulation, state laws determine the compliance burden for clients.Massachusetts weighs the country's strictest AI safety law as Washington state also considers actioncompliance specialistUpcoming state rules are worth monitoring, as they may tighten the safety obligations of AI developers.corporate lawyerFor clients of frontier-model developers, tightening state regulation poses contractual risk.No copyright protection for AI works without human involvementlawyerHuman authorship is decisive in whether AI works can be legally protected.Australian voters back AI copyright changes if creators get paidAI Act digital omnibus pushes high-risk rules back to December 2027compliance specialistCompliance timelines must be redrawn: high-risk deadlines have slipped, but transparency obligations remain.corporate lawyerClients need a map of which obligation takes effect when after the omnibus.EU starts enforcing AI Act, sends information requests to OpenAI and Anthropiccompliance specialistIncident-handling and reporting processes for AI agents must be documented ahead of AI Act supervisory questions.corporate lawyerFor clients that supply or use agents, the first steps of EU enforcement signal contractual risk.AI Act transparency rules: labelling AI content and deepfakescompliance specialistChatbots and generated content must be labelled under Art. 50, and the process must be put in place.corporate lawyerFor clients, it must be assessed which AI outputs fall under the labelling obligation.England and Wales judiciary: AI must never decide the outcome of a caselawyerIn English proceedings, expect that the use of AI by courts and experts is governed by separate rules.EDPB publishes €824.99 million GDPR fine against Uber; Noyb cites €2 billion in finescompliance specialistGDPR compliance of automated decision-making needs priority attention, given the size of the top-level fines.corporate lawyerData protection impact assessments and transparency for AI-based decisions should be reviewed in light of the Uber case.US proposals on liability for autonomous AI agents and the 'defect versus conduct' debatecorporate lawyerClients deploying AI agents should set out in contracts how liability is shared with the supplier.lawyerIn harm cases, both defective-product and negligent-conduct arguments may arise.compliance specialistMonitoring and logging agents after deployment also serves as a liability defence.Denmark bill would give people copyright-style protection over face and voice against deepfakeslawyerThe Danish proposal could serve as a model for EU rules on likeness protection.Law Commission consults on expanding England and Wales product liability regimecorporate lawyerExpanding the product liability regime affects contractual risk management for software and AI suppliers.lawyerThe forthcoming rules could shape the legal basis of AI harm claims.California leads in regulating lawyers' use of generative AIlawyerCalifornia lawyers must comply with the new obligations governing AI use.citizenA litigant may be entitled to know when their lawyer uses AI.US states enact AI disclosure rules for advertising; lawsuit targets AI-altered influencer imagecompliance specialistAI alterations used in advertising must be labelled, with requirements that differ by state.lawyerInfluencer–brand contracts should set out the terms for AI alterations.Who is liable when legal AI shares client data? Guernsey's data watchdog issues warninglawyerThe firm remains responsible for protecting client data even when it uses an AI provider.compliance specialistClient-data handling by AI tools should be restricted both contractually and technically.Banking watchdogs step up AI scrutiny amid financial stability fears, sources saycompliance specialistFinancial institutions should prepare for supervisory scrutiny of their AI risk management.Microsoft's Brad Smith, Richard Hermer and 400 scientists call for tougher AI regulationcompliance specialistThe tightening direction of AI regulation is a factor in compliance planning.31 US states have laws against election deepfakes, but the patchwork works poorlycompliance specialistAI-labelling requirements for political ads differ from state to state.lawyerIn election deepfake cases, state laws are the governing rules.Italian regulator fines Wind Tre €16.7 million over unlawful telemarketingcompliance specialistChecks on telemarketing data processing and consents carry a significant risk of fines.Lithuanian lawmakers propose legal protection against AI voice cloningUK ministers consider mandatory AI safety reportingcompliance specialistIf reporting becomes mandatory, AI developers may face new disclosure burdens.European Commission draft would regulate workplace AI use to protect workerscompliance specialistWorkplace AI use policies should be drawn up with the forthcoming EU framework in mind.corporate lawyerClients should map the employment-law consequences of employers' AI use in advance.European Commission launches consultation on copyright impact of AI and other technologieslawyerThe consultation material signals the likely direction of EU copyright regulation.Germany approves bill to criminalize AI sexual deepfakeslawyerCriminalizing creation without sharing raises new questions of defense and protection against prosecution.citizenLegal protection for victims may extend to the stage before sharing.Around 1,000 Hungarian musicians call for law on training of generative AIlawyerLicensing and usage agreements should regulate training rights and voice-imitation rights separately.UK ICO secures data protection changes from 10 AI developers, turns to agentscompliance specialistThe ICO commitments set a benchmark for transparency on training data and the handling of data subject rights.corporate lawyerIn contracts with AI providers, data-processing information that meets ICO expectations should be requested.citizenPeople can exercise their rights over their data more easily with the AI providers concerned.California enacts new laws regulating AI use in health carecompliance specialistInternal rules on AI use in health care must be aligned with the California requirements.corporate lawyerHealth care clients need to check the limits on how their AI tools may be used.US federal AI liability proposals: Trahan draft and bipartisan Senate billcorporate lawyerUnder the proposals, clients that use or develop AI agents should have their liability and insurance exposure reviewed.lawyerIn liability suits, the allocation of responsibility between developers and deployers may gain a new legal basis.compliance specialistOversight and logging controls for AI agents should be prepared for stricter liability rules.Is AI a product or a service? Product liability theory tested in the US and UKlawyerTo frame product liability claims against AI, the product/service classification must be worked out.corporate lawyerLiability exposure for clients that market AI products may vary depending on the classification.Australia: ARIA says OpenAI and Anthropic are asking for a copyright 'free ride'corporate lawyerClients need to weigh the legal conditions for the legal certainty that AI training requires.Trump's voluntary AI pledge contrasts with binding EU rulescompliance specialistThe voluntary US pledge is no substitute for mandatory EU compliance.corporate lawyerFor multinational clients, the differing US, EU and Chinese regulatory tracks must be followed in parallel.Indonesia: fully AI-made works are not protected by copyrightEDPB guidelines on web scraping for training generative AI modelslawyerThe EDPB's findings can be relied on when representing clients in matters involving training-data collection.compliance specialistThe processing of personal data collected through web scraping should be reviewed in line with the EDPB guidelines.Startup players call EU AI Act a "ticking time bomb" and ask for delaycompliance specialistShould follow how the postponement debate develops, as it may affect Hungarian startups' preparation plans.Austria misses AI Act deadline: no complaints body for deepfakescitizenIn Austria, there is currently no designated complaints body for harm caused by deepfakes.compliance specialistBecause of national implementation delays, readiness at national level must be monitored separately.European Commission asks more than 30 AI companies for safety and compliance informationcompliance specialistShould keep transparency and safety documentation ready, following the pattern of the inquiries to GPAI providers.corporate lawyerClients developing AI models must prepare for information requests from the Commission.Budapest district public-space supervision document addresses AI tools and data protection finecompliance specialistFor AI-based surveillance tools in the public sector, the risk of data protection fines should be checked.California enacts first law governing generative AI use by lawyers and arbitratorslawyerChecking AI-assisted filings and research remains the lawyer's own responsibility, and this should be documented in the firm's workflow.corporate lawyerInternal AI-use policies and expectations for outside advisers' AI use should be aligned with the California rules.compliance specialistThe firm's AI toolset and training programme should be reviewed before the rules take effect in 2027.AI Act after the Digital Omnibus: what applies and what has been delayedcompliance specialistMust re-map the post-omnibus deadlines and obligations in force in the company's compliance plan.corporate lawyerMust update advisory and corporate checklists to reflect the amended regulation.lawyerMust classify clients' AI systems according to the prohibitions and obligations now in force.Hungarian court administration: NJC resolution and rules on AI use in the courtslawyerLawyers should watch how courts regulate AI use, as it may also affect the practice of filings and proceedings.OpenAI introduces text watermarking in the EU to comply with AI Actcompliance specialistBecause of the obligation to make AI-generated text identifiable, must also check their own provider chain.corporate lawyerContracts with AI providers should address watermarking and labelling.California enacts more than two dozen privacy and AI laws in 2026 sessioncompliance specialistCompanies operating in California need to review the state's AI and privacy laws item by item.corporate lawyerThe new disclosure obligations for workplace AI decisions and layoff notices must be built into company policies.Italy: Decree 179/2026 sets fines and voids algorithmic dismissalscompliance specialistCompanies operating in Italy must align their AI use with the new sanctions regime from 23 October.corporate lawyerThe legal risk of algorithmic employment decisions and managerial liability must be reassessed.lawyerItalian litigation tools and civil and corporate criminal liability risks are also relevant to client engagements.China: Supreme People's Court issues first judicial opinions on AI disputes; scholars draft AI lawlawyerThe criteria for adjudicating Chinese AI disputes must be taken into account for clients in China.corporate lawyerThe proposed Chinese liability model affects the contractual allocation of risk among developers, providers and deployers.Denmark bill would protect face and voice; Meloni registers her voice as a trademarklawyerPersonality-rights protection against deepfakes can be built through both trademark and statutory routes.Election AI deepfakes: New Jersey has a regulatory gap, New Mexico faces a disputecompliance specialistThe use of AI in campaign materials must be checked separately under each state's rules.lawyerThe risk of criminal liability for deepfakes must be managed in election matters.California joins New York in regulating AI 'synthetic performers' in advertisingcorporate lawyerThe labelling and authorisation of AI performers used in advertising campaigns must be checked.AI Act and GDPR: what a Hungarian SME needs to knowcompliance specialistFor SME clients, check that deepfake and AI-text labelling obligations are being met.corporate lawyerAdvice to Hungarian SMEs must address AI Act and GDPR requirements together.Senators Hawley and Murphy announce bipartisan AI Agent Accountability Actcorporate lawyerThe bill could strengthen the direct liability of companies that operate AI agents, so it is worth assessing contractual risk now.lawyerResponsibility for agents' activities may emerge as a new legal basis in liability cases.compliance specialistThe bill should be tracked for its implications for governance frameworks for agent deployments.26 state attorneys general urge Congress to regulate frontier AI while preserving state authoritycorporate lawyerIf state AI laws are preserved, companies will need to prepare for compliance under several legal regimes.compliance specialistFederal preemptive legislation could decide whether state requirements remain in force.EU reopens the copyright file in the age of AI
September 2026 · 81
California bans AI 'robo bosses': a human must decide on firingscorporate lawyerEmployers' AI tools must be reviewed to ensure that a human makes the dismissal decision.compliance specialistAI-based HR tools must be measured against the new requirements, and human review documented.lawyerFor clients who are California employers, compliance advice and new lines of defense in disputed dismissals open up.citizenCalifornia workers cannot be dismissed by an algorithm alone.Hungarian data protection authority NAIH imposes record fine over AI analysis of customer service recordingscompliance specialistBefore AI analysis of voice recordings, the legal basis, information notices and data protection impact assessment should be reviewed.corporate lawyerWhen deploying AI tools in customer service, the NAIH decision must be built into the risk assessment.lawyerClients should be advised to undergo a data protection review for similar AI analytics projects.citizenAI analysis of customer service calls may be grounds for a data protection complaint.Newsom signs 11 more AI safety laws as his term endscompliance specialistAI companies operating in the California market need to review the obligations that are newly taking effect.corporate lawyerThe compliance map needs to be updated in line with the new California laws.EU states urged to go beyond the AI Act to protect people from abusive surveillancecitizenStronger protection at member-state level could improve people's ability to enforce their rights against surveillance.compliance specialistFor AI systems used for surveillance, additional national rules must also be monitored.New Mexico prepares one of the strictest AI regulatory pushes for 2027compliance specialistAI developers that also operate in New Mexico need to assess the strict state expectations in advance.corporate lawyerThe proposed state rules could also affect developer liability and product-safety commitments.AI training and copyright debate reaches a threshold moment for India's media industryPennsylvania House passes bill regulating AI chatbotscompliance specialistCompanies operating chatbots should follow the bill's further progress.corporate lawyerUser interfaces and liability disclaimers may have to change because of the state requirements.AI deepfake fraud raises liability stakes for banks and businessescompliance specialistVerification controls for voice- and video-based identification should be strengthened because of deepfake risk.corporate lawyerThe contractual and liability rules on who bears fraud losses should be reviewed.Political deepfakes: lawmakers fall behind as campaigns turn to legal actionlawyerIn election deepfake cases, counsel should build on state-law grounds and the bad-faith standard.compliance specialistPolitical campaigns' AI content and distribution controls must be managed under changing state rules.citizenSteps can be taken over fake videos on the basis of defamation.Report: Copilot privacy practices allow humans to view uploaded photoscompliance specialistBefore Copilot is used at work, the provider's terms on human review should be checked.citizenThe terms of service should be checked for whether uploaded photos may be reviewed by humans.EU AI Act after the omnibus: high-risk rules slip, transparency obligations do notcompliance specialistThe focus now should be on Article 50 labelling and GPAI obligations, not on the slipping high-risk deadlines.corporate lawyerAI labelling and transparency obligations should already be built into contracts and product descriptions.lawyerClients' AI Act classifications and the map of new deadlines should be updated.California law regulates lawyers' and arbitrators' use of AIlawyerMaterials produced with generative AI must be checked paragraph by paragraph, and the check is best documented.corporate lawyerOutside counsel guidelines and engagement terms that touch on AI use should be reviewed.compliance specialistThe firm's internal AI policy and review process must be compared against the new requirements.Hungary sets up Deputy State Secretariat for Artificial Intelligencecompliance specialistDomestic market surveillance coordination under the AI Act provides a new point of contact for compliance matters.corporate lawyerInformation on AI regulatory plans and legal harmonisation is best sought from the Deputy State Secretariat.lawyerIdentifying the competent body becomes easier when advising clients on the domestic application of the AI Act.Connecticut AI and data privacy laws take effect October 1compliance specialistCompanies working with Connecticut customers must update their data handling and AI processes by the effective date.corporate lawyerContractual liability and data handling clauses need to be compared with the new state rules.Trump calls AI self-regulation important; no consensus reached at White Housecompliance specialistMandatory federal regulation is unlikely to arrive soon, so state rules and voluntary frameworks need to be tracked.corporate lawyerState and federal regulatory uncertainty should be factored into contractual risk management.Senate AI safety proposals: transparency bill, ban on recursive AI, blocked fast-track votecompliance specialistGiven the federal bills, internal AI safety and transparency controls should be assessed in good time.corporate lawyerBecause federal regulation is uncertain, product development contracts need a reserve for legislative changes.Ireland's DPC reports significant rise in AI-related engagementscompliance specialistData protection impact assessments for AI deployments should be done in advance, because agentic cases are set to increase.corporate lawyerFor AI developments on Ireland-based platforms, prior consultation with the DPC may often be expected.CSBS announces AI supervisory framework for state-chartered banks and nonbank financial institutionscompliance specialistUnder the supervisory framework, financial institutions' use of AI must be documented and controlled.corporate lawyerAI vendor contracts of financial service providers must be aligned with supervisory expectations.Hungarian lawyer warns what data not to enter into AI chatbotslawyerClient data must not be entered into public AI chatbots, and the 72-hour deadline must be reckoned with in the event of an incident.compliance specialistThe chatbot-use policy and the incident-handling process must be designed around the 72-hour notification to NAIH.citizenIt is best not to enter personal and confidential data into AI chatbots.Singapore launches public consultation on AI and intellectual property lawlawyerClients in the region working on AI and IP should be informed about the rules now being drafted.New York attorney general urges AI company employees to report wrongdoingcompliance specialistAI companies must provide an internal whistleblowing channel and protection against retaliation.corporate lawyerThe risk of state enforcement rises if whistleblower protections are violated.New York City and Oregon write their own frontier AI rules as Washington stallscompliance specialistAI developers operating in several states must expect differing local rules.corporate lawyerGiven the regulatory fragmentation, it is worth building a state-by-state risk map.Meta fined for behavioral advertising in African jurisdictioncompliance specialistThe legal basis for personalized advertising must be assessed under local data protection rules.World's first binding international AI treaty stalls after signingcorporate lawyerThe convention's entry into force requires transposition by member states, which may affect compliance plans.Hungarian ed-tech firms publish manifesto on AI use in schoolscitizenFor students and parents, the rules would set out what AI may be used for in schoolwork.Hungary adopts AI act and government decree, with fines of up to HUF 5.7 billioncompliance specialistAssess which systems qualify as high-risk and adjust the compliance plan accordingly.corporate lawyerLegal risk arising from the fine levels must be managed in contracts and internal policies.lawyerClients must be informed about the new Hungarian authority structure and the penalty regime.Irish data protection authority publishes AI reportcompliance specialistThe report reflects the authority's data protection expectations on AI and can serve as a compliance baseline.Germany and Italy implement the AI Act through national legislationcompliance specialistCompanies operating in several member states must check national implementation rules in each.lawyerDifferences in member state implementation matter for cross-border advice.Nvidia's Jensen Huang rejects antitrust and liability exemptions for AI labscorporate lawyerAI companies' requests for exemptions may influence the legislative debate on risk allocation.Anthropic and OpenAI ask Australia to ease its ban on AI training with local contentlawyerThe Australian direction of AI copyright regulation is worth following for international clients too.Banks warn AI shopping agents carry fraud and data privacy riskscompliance specialistFinancial institutions need separate fraud prevention and authorization controls for AI agent payments.corporate lawyerPayment contracts must clarify liability for transactions initiated by an agent.citizenPayment authorizations given to AI agents should be limited.Hungarian universities' AI policies differ widely: cheating or help in higher educationDigital Omnibus: EU to delay application of AI Act high-risk rulescompliance specialistCompliance roadmaps for high-risk systems must be re-planned around the amended deadlines, building in the uncertainty.corporate lawyerDelivery deadlines in AI procurement and supplier contracts should be aligned with the amended regulatory timetable.lawyerClients should be told that the delay is still part of a legislative process and is not final.Digital Omnibus: EU member states split over AI and data transfer rulescompliance specialistGDPR compliance plans must account for possible relaxation of the rules on AI training and data transfers.lawyerInterpretations of the legal basis for processing personal data in AI training may change.citizenRelaxing the data rules affects the limits on using personal data in AI training.Governors, attorneys general, Bill Gates and House bills push for federal AI regulationcorporate lawyerFederal AI regulation could reshape the compliance obligations of AI developers and deployers.compliance specialistA requirement for pre-deployment safety testing may call for a new internal review process.lawyerFollowing the legislative process helps in preparing clients.New York begins implementing RAISE Act: large AI developers must report safety incidentscompliance specialistLarge AI developers operating in New York must set up an incident registration process.corporate lawyerState-level AI obligations appear as a new item in compliance and contract frameworks.lawyerClients should be told that, in the absence of federal regulation, state rules become the benchmark.Runaway AI agents spark debate over limits of European product liability lawcorporate lawyerWhen deploying AI agents, contractual liability and warranty terms need to be handled separately.lawyerThe applicability of the Product Liability Directive in cases of AI damage may generate legal disputes.compliance specialistRisk management must take into account liability arising from unexpected behaviour of agentic systems.Strict AI liability bills and expert calls to hold AI companies accountablecorporate lawyerGiven the strict-liability proposals, contractual exclusions between AI providers and deployers should be reviewed.lawyerNew grounds of liability may be invoked in AI-caused harm.Google fined €403 million over location data handlingcompliance specialistConsent and transparency practices for location data processing must be reviewed.corporate lawyerData protection fine risk should also be built into contractual and procurement risk analyses for large platforms.EDPB issues new methodology for calculating GDPR finescompliance specialistFine-risk estimates must be reviewed under the new methodology.lawyerIn data protection authority proceedings, the fairness of a fine can be argued on the basis of the new methodology.Uber's €825 million fine is a warning over automated dismissalscompliance specialistFor automated decisions affecting employees, human oversight and its documentation must be ensured.corporate lawyerHR system procurement and employment contracts should also set out the limits of automated decision-making.Taiwan's Judicial Yuan opens courts to Copilot AI useSpain drafts AI rules as prime minister says self-regulation is not enoughcorporate lawyerSpain's regulatory direction could affect the compliance plans of companies across the EU.compliance specialistMember-state regulatory initiatives need to be monitored.Ontario's new AI rules affect lawyers and expert witnesses as AI filings rise in Atlantic CanadalawyerOntario regulations must be understood before using AI.AI compliance issues hit 40% of large companies in the past year, survey findscompliance specialistAudit trails must be built into AI processes, because traditional workflows do not cover AI.corporate lawyerCompliance gaps carry contractual and regulatory risk.GPAI Code of Practice transparency chapter published as Commission readies guidelinescompliance specialistGPAI providers must build the Code's documentation measures and the guidelines into their compliance process.corporate lawyerSigning the Code carries contractual and liability implications.Newsom executive order calls for independent AI auditors and safety assessorscompliance specialistThe introduction of AI audits and an auditor registry could bring a new external-oversight requirement.corporate lawyerThe contractual obligations of California AI developers may expand because of external assessments.AI regulation comes up at hearings of candidates for head of Hungary's media authority NMHHcompliance specialistThe AI-related priorities of the media regulator's head may shape domestic content-labelling and platform-oversight practice.corporate lawyerCompanies in media should prepare for an obligation to label synthetic content.Hungarian article sets out legal background to calls made with automated dialling systemscompliance specialistDomestic rules on automated calls should be checked before dialling systems are introduced.corporate lawyerThe contractual and data protection terms of AI-driven customer service and sales calls should be reviewed.US judiciary develops new guidance on courts' use of AICalifornia requires ads to disclose AI-generated performerscompliance specialistIn ad campaigns, labelling of AI performers must be built into the production process.Ireland's domestic AI legislation takes effect; Italy regulates police biometricscompliance specialistMember-state supplementary rules create separate compliance tasks alongside the AI Act.corporate lawyerItalian liability rules call for contractual risk allocation.Hong Kong to appoint AI commissioner; South Korean court convicts official over AI imagescompliance specialistNew compliance expectations can be expected for activity in Hong Kong because of the AI commissioner and the deepfake rules.lawyerThe Korean ruling is an example of how AI images that are humiliating but not nude are assessed under criminal law.Romanian experts warn of data protection risks in using AI in the justice systemlawyerClient data should be loaded only into tools whose storage location is known and covered by contract.Spanish data protection authority receives first data breach report linked to an AI agentcompliance specialistAI agents' access rights and the incident reporting process should be treated as a separate risk.corporate lawyerContracts for agent-based solutions should clarify the controller and liability relationships for data processing.Slovak parliament moves AI and European data regulation bill to second readingcompliance specialistOn the Slovak market, organisations should prepare for content-labelling obligations and national implementation.corporate lawyerSlovak legislation affects cross-border contractual compliance.Hungarian press examines data-privacy questions behind the '80s-style AI photo trendcitizenBefore uploading a photo, check the terms of data processing and the usage rights.New York seeks broader AI regulation before its first AI law takes effectcompliance specialistGiven New York's regulatory plans, compliance programmes should be planned ahead of the effective date.European Commission enforces AI Act: GPAI obligations binding, transparency rules in effectcompliance specialistOrganisations should review which provisions apply to them based on their roles, product scope and territorial link.corporate lawyerContractual obligations of US and other third-country companies need to be aligned with the EU's scope of application.lawyerGiven the AI Act's penalty regime, compliance due diligence for clients is timely.US Senate AI bill could block risky models and override state lawcompliance specialistBecause federal preemption is possible, state compliance programmes need to be handled with contingency plans.corporate lawyerThe possibility of blocking risky models creates a new risk in development and operations contracts.lawyerDisputes over the relationship between federal and state AI law will become the core of client advice.California enacts child-safety and AI chatbot lawscompliance specialistChatbot and social media providers must build the new child-related obligations into their operations.corporate lawyerThe liability and terms of service for AI chatbot products must be amended in line with the new laws.State AI laws and federal preemption: Texas, Colorado and compliance guides for companiescompliance specialistDiverging state rules require a compliance map covering several states.corporate lawyerCompliance with state AI laws has to be planned together with the risk of federal preemption.Digital Omnibus is the first substantive amendment to the EU AI Actcompliance specialistThe amendment may affect the compliance timeline and priorities, so it should be monitored.corporate lawyerContractual compliance clauses should be reviewed in light of the amendments.UK MPs and peers call for new AI law and regulator to address human rights riskslawyerUncertainty in English law on liability for AI harms should be treated as a client risk.compliance specialistFor activity in the UK, firms should prepare for possible new supervisory requirements.Poland's AI systems act takes effectcompliance specialistOrganisations operating on the Polish market must prepare for both the national AI authority and data protection obligations.corporate lawyerRegional differences in member-state implementation rules need to be addressed in contracts.Hungarian labour law and data protection articles examine AI use in the workplace and HRcorporate lawyerInternal policies on employer AI use should be drawn up with data protection and labour law considerations in mind.compliance specialistAI support for HR processes should be introduced alongside a data protection impact assessment and classification under the AI Act.lawyerFor employment clients, it is worth clarifying the transparency of algorithmic decisions and the information given to employees.Report: OpenAI contract workers can read ChatGPT conversations, raising privacy concernscompliance specialistUse of consumer AI tools with client data should be banned or restricted by policy.lawyerBecause of client confidentiality, using public chatbots is risky.citizenSensitive data should not be shared with public AI chatbots.Dispute over AI companies' "pace the frontier" regulation call and lobbyingcompliance specialistThe regulatory direction shaped by lobbying should be tracked through preparatory documents and draft bills.DOJ will not regulate AI firms through prosecution, Blanche says; Khan says existing law sufficescorporate lawyerCompliance risk should also be assessed in light of executive liability under existing laws.compliance specialistDifferences in regulators' enforcement priorities affect risk assessment.Nvidia, Palantir and other firms restrict use of advanced AI models over privacy concernscompliance specialistCorporate AI-use policies should regulate access to models and data according to risk.corporate lawyerData-handling and intellectual-property safeguards are key issues in contracts with AI providers.EU plans child protection law for social media, games and AI chatbots; concerns over transatlantic AI dividecompliance specialistChild-protection compliance of AI chatbots should be prepared in light of the EU draft.corporate lawyerContractual and compliance burdens for smaller developers may increase.New AI rules in Illinois and Connecticut are about to take effectcompliance specialistAffected AI applications should be reviewed ahead of the effective dates.Quebec courts say generative AI cannot replace judges' reasoninglawyerIn filings, lawyers should expect courts to regulate the use of AI assistance.Hungarian media lawyer: not all AI-made content must be labelled, but errors risk billion-forint finescompliance specialistPublishing and marketing workflows need to identify which AI content falls under the labelling obligation.corporate lawyerContent-creation contracts should set out the liability and labelling rules for AI use.Hungarian press analyses: workplace AI monitoring raises data protection questions, workers can seek human review and complain to the data protection authoritycorporate lawyerBefore introducing AI monitoring at work, a data protection impact assessment must be carried out and employees informed.compliance specialistA procedure must be set up so that the right to human review can be exercised.citizenAn employee can request human review and file a complaint with the NAIH.Council of Europe drafts data protection rules for AI chatbots and agentscompliance specialistFor chatbot and agent services, it is worth following the draft's obligations when designing for data protection.New York lawmakers urge Hochul to sign AI technology billscompliance specialistProviders of services in New York need to follow the governor's decision because of possible new AI rules.Hungary moves AI market surveillance to the minister for science and technologycompliance specialistOfficial requests and notifications must be addressed to the new competent body.corporate lawyerClient guidance on national AI Act enforcement should be updated to reflect the change of competence.lawyerIn administrative proceedings, competence and the route of appeal should be checked.Greece adopts Act 5321/2026 on the supervision of AI systemscompliance specialistCompanies operating in the Greek market need to build the new supervisory framework into their AI Act compliance.California legislature passes bill regulating lawyers' use of AIlawyerAI-generated citations in filings must be checked, because the lawyer is responsible for flawed material.corporate lawyerA law firm's AI policy must be aligned with the California rules.compliance specialistThe firm's internal control and training procedures must be documented.US urges hands-off approach to AI regulation at G20 tech meeting as EU prepares new lawcompliance specialistTo prepare for transatlantic regulatory divergence, it is worth building a flexible compliance framework.corporate lawyerFor cross-border AI providers, contractual compliance clauses need to be aligned with the differing regulatory directions.
August 2026 · 82
EU designates ChatGPT a search engine under the DSA; Reddit and Roblox classed as very large platformscompliance specialistServices built on ChatGPT can expect risk-assessment, transparency and audit requirements, with a four-month preparation period according to the Hungarian press.corporate lawyerClients that integrate ChatGPT need to clarify who is responsible for obligations under the DSA.citizenUsers may gain broader complaint and transparency rights on large platforms.AI Omnibus shifts AI Act deadlines; critics say core problems remaincompliance specialistCompliance timelines must be aligned with the new deadlines, and sector-specific deviations tracked separately.corporate lawyerThe omnibus introduces no separate penalty, so sanction risk should be estimated under the original provisions of the AI Act.AI Act enforcement begins as the AI Office starts requesting information from companiescompliance specialistDocumentation should be kept ready for AI Office requests, as penalties can reach up to 7 percent of global turnover.corporate lawyerGPAI providers and deployers should set out their AI Act documentation obligations in contracts.California legislature passes several AI bills on safety risks, worker neural data and youth protectioncompliance specialistCompanies providing services in California need to track which bills become law.corporate lawyerProcessing neural data in the workplace may become prohibited, so HR-technology contracts should be reviewed.US state AI rules: companion bot laws, Connecticut employer rule, Colorado hearingcompliance specialistRequirements on companion bots, employment and Colorado rules need to be tracked separately at state level.corporate lawyerFor clients operating in several states, differences between state rules need to be mapped.US state deepfake porn laws differ, and the Take It Down Act is only a startlawyerWhen representing victims, state and federal tools must be analysed together.compliance specialistPlatforms must adapt their takedown and reporting procedures to differing state rules.Sanders and Casar propose ban on superintelligence; House bill would have NIST track self-improving AIcompliance specialistBecause federal evaluation and reporting obligations for frontier models may be introduced, the proposals are worth following.Indian copyright office: AI-generated work can be protected, but AI cannot be the authorlawyerAuthor data must be provided accurately when declaring AI-assisted works.California amends AI transparency law weeks after it took effectcompliance specialistExisting transparency obligations need to be aligned with the amended text of SB 1000.EN 18286:2026, first European standard supporting AI Act implementation, publishedcompliance specialistCompliance teams should support the conformity of their systems with documentation based on harmonised standards.Germany still has no deepfake offence in force; draft §201b remains a billlawyerIn Germany, deepfake victims can currently rely only on existing civil-law and personality-rights remedies.citizenCriminal-law protection against deepfakes is not yet available in Germany.New Louisiana laws address school threats and misuse of AI-generated imagescitizenUnder the new laws, misuse of AI-generated images can be penalised.Hungarian AI Act guides: KPMG, SME checklist, lawyer interview, Blikk seriescompliance specialistSMEs should start AI Act compliance by assessing their AI tools, roles and risks.corporate lawyerFor Hungarian clients, classifying roles and identifying missing controls is the practical first step.lawyerColleagues with Hungarian AI law specialist training are increasingly sought after in AI Act advice.New state laws protect users of AI chatbots used as therapists and companionscompliance specialistFor mental health chatbots, state requirements need to be matched with compliance practice.citizenUsers have legal protection when they use AI chatbots for therapy.Germany's AI migration act raises concerns over safety, fairness and legal standardslawyerChallenging AI-assisted decisions in migration cases raises new legal questions.citizenPeople affected by AI-assisted migration decisions need access to a legal remedy.Arizona Supreme Court declines to ban judges' AI use; New Mexico drafts statewide court guidelineslawyerRules on AI use in courts affect how filings and evidence are handled.US AI regulation: 60+ state rules, California amendment, dispute over federal preemptioncompliance specialistA matrix of state-level rules must be maintained, because requirements differ for health-care notices and chatbot disclosures.corporate lawyerFor clients operating in several states, the California amendments and the federal preemption debate need to be followed.California SB 574: will AI's home state kill off AI for law?lawyerCalifornia lawyers should watch the bill, as it may affect the legal framework for AI use.Singapore opens public consultation on copyright and AI trainingAz SEC megegyezett egy miami AI-startuppalcompliance specialistThe accuracy of investor and marketing claims about AI capabilities must be ensured.Alabama opens probe into OpenAI after Hugging Face breachcompliance specialistCompanies that use model-hosting and data-sharing platforms must review third-party data security risks.corporate lawyerCompanies should also begin preparing for state attorney general investigations.Poland investigates ChatGPT over alleged data privacy breachcompliance specialistCompanies that use ChatGPT should re-examine their data controller responsibilities under the GDPR.citizenAffected individuals can file a data protection complaint if their data was involved in the incident.Korean music copyright group withdraws AI-assisted song registration ruleEU AI Act: Digital Omnibus delays high-risk deadline, but obligations remain in forcecompliance specialistDespite the delay, obligations already in force (such as transparency) must be met on time, and preparation for high-risk systems must continue.corporate lawyerThe roles under the AI Act (provider, deployer) and the Annex III classification need to be reviewed, including for contracts.lawyerClients need to be told what has been postponed and what remains in force.Dutch regulator fines Uber €824.99m over automated driver suspensionscompliance specialistCompanies must assess where they make decisions with legal effect without human review and build human intervention in at those points.corporate lawyerThe GDPR risk of algorithmic decisions about workers and partners, and the likelihood of regulatory action, should be reassessed.lawyerThe decision gives clients who challenge automated account suspension or dismissal a new basis to cite.AI Act Article 50: chatbots must be labelled, but most Dutch companies do not do itcompliance specialistFor customer service chatbots, the placement and language of the AI label must be checked, because practice falls short of the requirement.corporate lawyerContracts with chatbot providers should build in fulfilment of the transparency obligation.UK Jurisdiction Taskforce consults on liability for AI harmscorporate lawyerLiability allocation in contracts with AI providers should be aligned with developments in English law.lawyerProfessional responsibility remains with the professional when AI is used.Dutch regulator outlines process for AI Act fundamental rights impact assessment (FRIA)compliance specialistDeployers of high-risk systems must align their impact assessment with the regulator's process.Serbia's draft data protection law: controllers and processors have until 10 September to preparecompliance specialistControllers operating on the Serbian market must prepare for the new rules by 10 September.corporate lawyerThe overlap between the EU AI Act and Serbian rules must be addressed in the compliance programme.AI floods public bodies with complaints and information requestscompliance specialistPublic bodies need to set up a procedure for handling mass requests generated with AI.citizenRequests prepared with AI must also meet the procedural rules.Hungary to get new AI authority; AI fraud victims must turn to different agenciescitizenAI-enabled fraud must be reported to the police as a crime, while another authority is competent for biometric cases.lawyerClients must be directed to the appropriate authority depending on the type of AI fraud.compliance specialistThe split of domestic supervisory powers must be built into the compliance plan.Vietnam: fully AI-generated song has no copyright, rightsholders get opt-outEuropean data protection regulators set up a ChatGPT task forcecompliance specialistChatbot providers' data processing must be managed with coordinated EU regulatory scrutiny in mind.Dutch regulator fines Uber €825 million over algorithmic deactivation of driver accountscompliance specialistFor automated decisions, affected people must be given access and the possibility of human review.corporate lawyerPlatforms' algorithmic decision-making should be reviewed from a legal perspective, as the size of the fine is high.citizenIf an account is deactivated by an algorithm, human review can be requested.OpenAI calls for stronger AI laws in Californiacompliance specialistThe direction of California's regulation is worth following, as developers themselves are asking for stricter rules.Deepfake takedown law sets 48-hour deadline and fines of up to $53,088compliance specialistPlatforms must run a 48-hour removal process.citizenThe person depicted can ask the platform to remove the content.lawyerA lawyer representing victims can cite the platform's deadline and the fine as grounds.Limits of unauthorized-practice rules in regulating mental health AIcorporate lawyerLicensing rules for mental health AI products need to be reviewed state by state.compliance specialistProduct information and limitations for health-related AI features should be checked.Hungarian trade outlets explain AI content labelling rules: deepfakes, chatbots, Article 50compliance specialistA labelling process for AI-generated text, images and video must be introduced in domestic communications too.corporate lawyerFor customer-service chatbots, users must be made aware that they are talking to a machine.South Korea opens copyright registration to AI-assisted worksDigital Omnibus pushes AI Act high-risk deadlines to 2027–2028compliance specialistCompliance plans must be redrawn obligation by obligation, because only the deadline for high-risk systems has moved.corporate lawyerReferences to deadlines and provider commitments in contracts must be reviewed.lawyerClients must be told precisely which obligation has been postponed and which has not.US state and federal AI rules collide: Connecticut, Colorado, FTCcompliance specialistA map of state-by-state AI requirements should be kept, especially for automated decisions and employment.corporate lawyerGiven the uncertainty over federal preemption, the compliance programme should be designed flexibly.lawyerClients should be told which state rules apply to them.SRA warns of AI hallucination risks after 42 reports of potential misuselawyerEvery citation produced with AI must be verified, because responsibility rests with the solicitor.corporate lawyerLaw firms must set out in an internal policy how AI use is checked and how confidentiality is protected.compliance specialistTools' data handling and controls against fake citations must be audited.AI Act enforcement and transparency obligations apply from 2 August 2026compliance specialistLabelling and transparency obligations for AI systems must be assessed and documented immediately.corporate lawyerAn inventory of the AI tools used by the company and a allocation of responsibilities must be drawn up.citizenComplaint routes are now available for reporting breaches of the AI Act.ByteDance signs AI copyright pact with Hollywood trade groupcorporate lawyerFor companies developing video and content generation tools, the content of the commitments is worth treating as a reference.Rules on AI political deepfakes differ from state to state in the UScompliance specialistDeepfake labeling and ban rules must be checked state by state for campaign materials.lawyerBecause state rules differ, political clients need a legal pre-screening.Indiana court rule and Maryland standing order set expectations for AI use in filingslawyerA court's AI disclosure and verification requirements should be checked before filing.Europe approves first AI Act standard, but compliance benefit is yet to arrivecompliance specialistUntil then, compliance documentation built on the standard should keep an independent method of demonstrating conformity.corporate lawyerContractual use of presumptions that refer to the standard should be planned only once the legal effect is clarified.When a data protection impact assessment is mandatory for an AI systemcompliance specialistBefore deploying an AI system, the need for an impact assessment must be determined following the decision sequence.corporate lawyerSupplier contracts must specify who carries out and documents the impact assessment.Hungarian government legislative council to consider draft AI lawcorporate lawyerFollow the text of the draft, because the national implementing rules will shape clients' compliance obligations.compliance specialistChanges in the draft will affect domestic supervisory and reporting processes.French CNIL note on agentic AI and EDPB guidance on web scraping for generative AIcompliance specialistFor scraped training data and agentic AI, the GDPR legal basis and transparency should be reviewed in light of the new guidance.lawyerThe regulators' guidance provides a reference point for clients' data protection impact assessments.FTC issues proposed policy statement on AI accuracy and output steeringcompliance specialistAI products' accuracy claims and the steering of outputs need to be reviewed for consumer protection risk.corporate lawyerMarketing and product descriptions need to be checked against the FTC's position.Hungarian bodies in AI Act enforcement: market surveillance, AI Council, media regulator NMHHcompliance specialistYou need to know which Hungarian authority to notify or approach with questions about live chatbots and HR-related AI.corporate lawyerThe high-risk classification of HR systems should be assessed in light of Hungarian regulatory practice.California's Frontier AI Safety Act clears final legislative votecompliance specialistFrontier-model developers in California must prepare for the new safety requirements.corporate lawyerUntil signing and entry into force, clients need to prepare contractual risk management.Anthropic watermarks Claude's text and file outputs to comply with EU rulescompliance specialistProvider-side watermarking shows how the machine-readable marking requirement is being met, and it is the point to raise in your own supplier assessments.lawyerText produced with Claude carries a watermark, so provenance checks on documents meant for clients need to take this into account.Poland to build AI regulatory sandbox with 35 million zlotycompliance specialistThe sandbox allows AI systems to be tested under regulatory supervision.corporate lawyerClients in the region should watch the sandbox's participation conditions.EU digital omnibus in force: high-risk AI rules pushed back to December 2027corporate lawyerContract and compliance projects for high-risk AI systems must be rescheduled to the new deadlines.compliance specialistThe compliance roadmap must be updated, separating postponed obligations from those that are already live.lawyerAI Act advice to clients must be based on the new deadlines and the newly introduced prohibition.AI Act transparency and enforcement rules apply from 2 Augustcompliance specialistCompanies must assess which interfaces require chatbot and AI-content labelling, and document this.corporate lawyerSoftware bought from a US provider does not exempt a company from the AI Act, so supplier contracts must be reviewed.AI Act transparency rules apply to Hungarian businesses from Augustcorporate lawyerFor Hungarian clients, it needs to be clarified which AI content and chatbots fall under the labelling obligation.compliance specialistMap where the company uses AI and set out the labelling practice in an internal policy.Bills proposed to penalise deceptive AI content that manipulates identitylawyerThe new or amended offences will be relevant when representing deepfake victims and the defendants concerned.citizenCriminal-law protection against AI content that forges identity may be strengthened.Irish High Court issues practice direction on use of generative AIlawyerIn filings before the Irish High Court, the use of generative AI must be handled in line with the practice direction.California AI Transparency Act takes effectcompliance specialistAI providers serving California users need to check the new obligations.corporate lawyerEU and California transparency rules need to be aligned at the contractual liability points.US states tighten deepfake rules: Oregon, New Jersey, LouisianalawyerLawyers representing victims and defendants need to know state-level offences that differ from one another.citizenBecause protection differs from state to state, it is worth learning the rules where you live.EU opens three channels for reporting AI Act breachescompliance specialistPrepare for competitors or affected parties to file reports, which means an internal escalation procedure is needed.citizenAnyone who spots a violation can choose from three official channels.US court and prosecutor rules on AI use in filings, from Maryland to GeorgialawyerIn filings before the Maryland court, AI use must be declared in line with the local standing order.Philippines extends data privacy rules to AI systems and warns on deepfakescompliance specialistAI providers operating in the region must apply data processing rules to their AI systems as well.Belgium prepares new product liability rules; US states lack uniform AI health liability rulescorporate lawyerFor software and AI products, product liability risk should be addressed in contractual indemnity clauses.compliance specialistFor healthcare AI, differences in liability rules between states need to be mapped separately.State chatbot laws: Hawaii's AI companion rule and the risk of a regulatory patchworkcompliance specialistChatbot disclosure and safety requirements that differ by state need to be mapped.corporate lawyerFor multi-state providers, contractual and policy exceptions need to be managed.Hungarian data authority NAIH halted a bank's AI emotion analysis, imposing HUF 250 million finecompliance specialistFor voice-analysis AI used in call centres, NAIH's earlier practice means a serious risk of fines must be factored in.corporate lawyerFor a voice-recording analysis project, the data protection impact assessment and the legal basis must be documented separately.Italian data protection authority halts satirical deepfakescompliance specialistEven satirical AI content can draw intervention by a data protection authority.Kenya's new AI rules: what they mean for privacy and workcompliance specialistCompanies operating in the Kenyan market must check the new rules' data protection requirements.California weighs bill to limit AI therapist chatbotscompliance specialistUnder the proposal, chatbot services related to mental health would have to be reviewed.lawyerThe wrongful-death suits open new ground for product liability and negligence arguments.Italy adopts AI Act implementing decrees on biometrics and employment lawcompliance specialistCompanies operating in the Italian market must review their biometric and HR-related automated systems.corporate lawyerThe nullity of automated dismissals makes human review of employment-law processes necessary.lawyerWhen advising on employment and data protection, the Italian decrees must be treated separately.Denmark and Germany prepare legislation against deepfakeslawyerLikeness-protection and criminal-law offences may provide a new legal basis in deepfake cases.citizenProtection of one's likeness may be strengthened against unauthorized AI content.Petition urges transparent AI rules in the Hungarian book marketSouth Korea allows copyright registration of AI-assisted music, while US courts often deny protectioncorporate lawyerThe licensing consequences of AI-generated code should be reviewed.EU AI Act transparency and labelling rules take effectcompliance specialistCompanies need to map where they encounter chatbots and AI-generated content, and introduce a labelling and documentation process.corporate lawyerService and supplier contracts must specify who is responsible for labelling and for fine risk.lawyerLabelling obligations may also apply to clients' legal, marketing and service content, so it is worth clarifying in advance.citizenUsers can now expect a clear indication when they encounter machine- or AI-generated content.Digital Omnibus becomes law, delaying high-risk AI deadlinescompliance specialistThe preparation timeline must be adjusted, but the prohibitions and the rules for general-purpose models have not been postponed.corporate lawyerThe timing of obligations in contractual compliance commitments must be renegotiated in light of the amendment.lawyerClients should be told that the postponement does not cover every obligation.EU Commission can now inspect AI models, restrict market access and fine providers under AI Actcompliance specialistModel providers' documentation and training-data disclosure obligations must be checked at the suppliers a company uses.corporate lawyerContracts with model suppliers should set out the consequences of a provider's failure to comply.lawyerA new field of regulatory proceedings opens up for representing providers.Hungary's AI authority launches labelling guidance site as firms found unpreparedcompliance specialistThe office's site can serve as a starting point for drafting an internal labelling and compliance policy.corporate lawyerHungarian clients should assess their AI systems and published content against the new labelling requirements.lawyerGiven the office's role and the open questions (K-Blog), advisory work needs to clarify regulatory expectations client by client.California's AI transparency law takes effect in first phase, targeting deepfakes and scamscompliance specialistAI providers operating in the California market must put detection tools and disclosure obligations in place.corporate lawyerFine exposure should be built into the risk allocation in provider contracts.Federal government moves to curb state AI laws, with some states likely targetscompliance specialistCompliance plans for state rules will remain uncertain until federal preemption takes direction.corporate lawyerUS AI contracts need flexible change-in-regulation clauses.lawyerFederal preemption disputes will bring constitutional-law and regulatory advisory work.Minnesota's ban on AI 'nudification' apps takes effectcompliance specialistProviders of AI image generators must check their features against bans that differ from state to state.lawyerThe xAI lawsuit is a constitutional test of the states' authority to regulate AI.citizenVictims in a growing number of states can invoke explicit deepfake bans.