Date saved: 2026-10-20 18:00 (PDT)
Sources: Inside Global Tech, Bloomberg Law, Legal 500, Morgan Lewis, FTC, European Commission, Five Eyes, IBM, CISA
Key findings
Federal AI legislative developments, Q3 2026
- Inside Global Tech (Oct 19, 2026): Congress focused on AI data center costs, chatbot safety, AI-driven pricing, and AI system oversight in Q3 2026. The House passed Rep. Gabe Evans' (R-CO) Ratepayer Protection Act (H.R. 9340), a bipartisan bill requiring data center operators to bear infrastructure costs rather than shifting them to ratepayers, though it failed to advance in the Senate. The Senate Commerce Committee advanced several children's online safety and AI bills, including Sen. Ted Cruz's (R-TX) CHATBOT Act (S. 4407), requiring AI chatbot providers to offer family accounts and obtain verifiable parental consent for teens. Rep. Greg Casar (D-TX) introduced the Stop AI Price Gouging and Wage Fixing Act (H.R. 4640) with 43 cosponsors, prohibiting AI systems from informing individualized prices based on personal data. (Source)
- AI Kill Switch Act: Rep. Ted Lieu (D-CA) introduced H.R. 9917 requiring entities operating AI systems at a certain computing threshold to maintain shutdown capability. Sen. John Kennedy (R-LA) introduced S. 5417 requiring human-controlled shutdown mechanisms in all AI systems. (Source)
- Trump's "Super Intelligence" Executive Order (Sept 29, 2026): Executive Order 14434 directs the executive branch to use "Super Intelligence" and "SI" in place of "Artificial Intelligence" and "AI." The same day, Trump announced the "Joint Commitment on Frontier Responsibilities" White House Accord, signed by Google, Anthropic, Meta, OpenAI, XAI, and Nvidia, with commitments to implement controls, audits, and regular meetings to establish safety standards. (Source)
DOJ retreat and state-level regulation surge
- Bloomberg Law: Attorney General Todd Blanche has signaled the DOJ will not impose new regulatory burdens on the AI industry through standalone enforcement actions, following Trump's enabling of a voluntary safety pact among AI CEOs. Despite this federal hands-off approach, companies face significant legal risk at the state level. (Source)
- California: The Transparency in Frontier AI Act took effect earlier in 2026, requiring large developers of frontier models to publish training dataset information, safety frameworks, and risk assessments, with penalties up to $1 million per violation.
- Illinois: Mandates annual independent third-party audits of AI safety practices, going further than California.
- Connecticut: Applies to a broader swath of companies, requiring any business using automated tools in employment decisions to document bias testing and provide pre-use notices and explanations to workers if an AI tool leads to an adverse employment decision.
- New York and Montana: Enacted similar AI laws; Montana's law restricts AI use in political advertisements. (Source)
- Pennsylvania: Attorney General Dave Sunday initiated an enforcement action against a chatbot operator for falsely representing itself as a licensed psychiatrist.
- Florida: Attorney General James Uthmeier opened a criminal investigation into OpenAI's ChatGPT after the chatbot allegedly offered advice to a gunman who killed two people on Florida State University's campus. (Source)
Legal, regulatory, and international developments
- FTC personalized pricing enforcement (Aug 19, 2026): The FTC announced it is seeking public comment on a proposed enforcement policy statement about personalized pricing, making clear it intends to scrutinize such practices under Section 5 of the FTC Act. (Source)
- Connecticut court AI prompt injection case: A pro se plaintiff was sanctioned for attempting an AI "prompt injection" attack by hiding instructions in court filings directed at a tool the court believed was relying on AI, the first known case of its kind, signaling broader judicial concern with AI use in legal proceedings. (Source)
- EU AI Act transparency obligations: The European Commission published new Guidelines on Transparency Obligations for Providers and Deployers of AI Systems (July 20, 2026), complementing the Code of Practice on Transparency of AI-Generated Content (June 10, 2026). The AI Act's transparency obligations took effect August 2, 2026. The European Data Protection Board published its first draft of Guidelines 03/2026 on Web Scraping in the Context of Generative AI (July 8, 2026), addressing compliance challenges for companies training AI models on scraped personal data. (Source)
- IBM Cost of a Data Breach Report 2026 (July 29, 2026): Global average breach costs rose 12% to a record $4.99 million; the U.S. average reached $11.5 million, up 14% from last year, reflecting how AI is accelerating threat actors' ability to identify vulnerabilities, launch attacks, and exploit compromised systems. (Source)
- Five Eyes warning (June 22, 2026): The intelligence alliance (US, UK, Canada, Australia, New Zealand) released a statement warning that frontier AI models will fundamentally transform offensive and defensive cyber capabilities, with the timeline measured in months, not years. (Source)
- White House "Gold Eagle" initiative: A new cybersecurity vulnerability coordination clearinghouse designed to use advanced AI capabilities to accelerate how government and industry identify, prioritize, verify, and remediate software vulnerabilities. (Source)
Source links
- Inside Global Tech: U.S. Tech Legislative & Regulatory Update: Third Quarter 2026
- Bloomberg Law: DOJ's Retreat on AI Enforcement Puts Focus on State Regulators
- Legal 500: AI Quarterly: A Review of AI Law, Policy & Practice, 2026 Q3
- Morgan Lewis: The New Rules of AI: A Global Legal Overview (May 2026)
- FTC: Personalization and Anti-Personalization in Online Retail (Proposed Enforcement Policy)