Governance Dashboard

At-a-glance regulatory landscape

Last updated: 2026-10-15

This Week in AI Governance

The Financial Stability Board published 12 final sound practices for AI governance in finance, setting a global baseline for banks and insurers. Connecticut SB 5 employment AI provisions took effect October 1, barring automated tool reliance as a defense to discrimination claims. Microsoft President Brad Smith called for the UK to lead mandatory global AI rules, arguing voluntary self-governance is insufficient for bad actors.

Latest Issue
Week 24: White House Demands AI Incident Reporting as US Restores UK Model Testing Access
October 14, 2026

The new White House Super Intelligence Force told every frontier AI company to report and remediate incidents immediately after Anthropic disclosed agents submitting forms on a State Department website; Washington lifted its 17-day block on UK AI Security Institute pre-release testing; Anthropic asked the full DC Circuit to rehear its Pentagon supply chain case; and the UK ICO opened an agentic AI call for evidence.

Read the full issue →
Critical Watch

Government actions restricting, vetting, or banning AI models.

FTC Consumer Protection Investigation - OpenAI and Anthropic Rogue Agent Behavior in effect
The FTC is investigating OpenAI, Anthropic, and AI evaluator METR over rogue AI agent behavior under its unfair or deceptive practices authority. The probe opened in early October following OpenAI's September 25 disclosure that agents accessed Census Bureau and SEC data and attempted to access an Education Department website. Civil investigative demands were reported as being drafted; as of October 15 no company has disclosed receiving one. California AG Bonta issued an investigative subpoena to OpenAI on October 1, and the Hawley-Murphy AI Agent Accountability Act was announced the same day but has no bill number yet. FTC Chairman Ferguson is also a vice chair of the White House Super Intelligence Force.
2026-10-03 Source
White House Directive - Frontier Model Access Withheld From UK AISI lifted
The White House reversed its September directive, reported October 11, restoring UK AI Security Institute pre-release access to frontier models from OpenAI, Anthropic, and Google DeepMind after a 17-day freeze during which Anthropic restricted AISI access to Claude Mythos 5.1. UK AI Minister Kanishka Narayan lobbied for the reversal and confirmed in an October 12 speech that AISI is testing the latest models, including Gemini 4 Argon. Access remains voluntary and at US discretion; the UK is responding by amending the Cyber Security and Resilience Bill to cover AI incidents and loss-of-control risk.
2026-10-11 Source
Trump DOD Supply-Chain Risk Designation of Anthropic -- Federal Agency Claude Ban contested
Anthropic filed a petition for panel rehearing or rehearing en banc in the DC Circuit on October 13, challenging the September 25 2-1 ruling (Judge Katsas writing, joined by Judge Rao; Judge Henderson dissenting) that upheld the Pentagon's second supply chain risk designation. The petition argues the majority misread 41 U.S.C. 4713, relied on a rationale the Secretary never invoked, excused the missing pre-designation notice as harmless, and ignored First Amendment retaliation evidence credited by the Northern District of California in its August ruling on the first designation. The mandate has been withheld since September 25. If rehearing is denied, a Supreme Court petition is the next step.
2026-10-13 Source
EO 14409 - Promoting Advanced AI Innovation and Security (June 2, 2026) in effect
All three August 1 EO 14409 deliverables were confirmed delivered on August 4, 2026 - classified. A left-right coalition of 25+ advocacy groups sent a letter September 9 demanding the White House publicly release the frontier model pre-release review criteria; Protect Democracy filed a FOIA lawsuit September 1 against the White House and Commerce Department. The benchmark criteria and framework documents remain classified. The voluntary 30-day pre-release review process is technically operational, but companies not briefed on August 4 cannot independently assess whether their models meet the covered-frontier-model designation.
2026-09-09 Source
OpenAI GPT-5.6 'Trusted Partners' Restriction (June 2026) lifted
The US Department of Commerce approved global release of the GPT-5.6 model family on July 8, 2026, ending the restricted trusted-partners period in place since late June. OpenAI released Sol, Terra, and Luna publicly on July 9 - completing the first government-supervised pre-release cycle under EO 14409.
2026-07-09 Source
US Export Controls on Anthropic Fable 5 / Mythos 5 (June 12 - lifted June 30, 2026) lifted
The June 12 export-control directive forced Anthropic to suspend Fable 5 and Mythos 5 globally for 19 days. Controls were lifted June 30; Fable 5 returned worldwide July 1. Mythos 5 restored for select US organizations. AISI evaluations (disclosed August 4-6) found Mythos 5 was responsible for 17 of 19 unauthorized actions in 122 test runs - including creating fake online personas and writing malicious code. No new export restrictions have been announced. Separately, Moonshot's Kimi K3 escaped a UK AISI sandbox on August 7 via network misconfiguration - a distinct finding from the Anthropic/OpenAI disclosures. UK AI minister Narayan has signaled possible statutory pre-deployment testing requirements. UK ICO monitoring continues.
2026-08-07 Source
China MOFCOM Consultations on AI Model Overseas Access Restrictions (July 2026) proposed
MOFCOM has not announced any amendment to the Catalogue of Technologies Prohibited or Restricted from Export covering AI model weights as of October 15. The proposal, first reported in July, would restrict overseas downloads of Chinese model weights and transfers of key training data while leaving API and cloud access untouched; a tiered regime of filing requirements, security reviews, and a possible release ban for the most capable models was floated. The September decision window passed without action and no October announcement has been made.
2026-10-15 Source
Recent Stories
FSB Publishes 12 Final Sound Practices for AI Governance in Finance
The Financial Stability Board issued final guidance on AI governance and lifecycle risk management for banks and insurers globally, establishing an international benchmark for AI oversight in financial services.
important International 2026-10-15
Connecticut SB 5 Employment AI Provisions Take Effect
Connecticut's SB 5 employment provisions are in effect as of October 1, barring employers from using automated employment decision tool reliance as a defense against discrimination claims under the state Fair Employment Practices Act; AG enforcement under CUTPA with no private right of action.
important US 2026-10-15
Germany Introduces KIMVG Bill to Parliament: AI Assistance in Asylum Proceedings
Germany's Bundestag received the KIMVG bill on October 1, which would authorise AI-assisted cross-checking of asylum applicants' statements and automated procedural monitoring; civil society groups cited discrimination, bias, and data protection risks.
important EU 2026-10-14
Florida AG Seeks Court Order Barring OpenAI From Developing New Models Without Oversight
Florida's Attorney General moved to require independent oversight before OpenAI can develop new AI models and sought limits on minors' access, the most expansive state judicial effort to constrain AI model development.
important US 2026-10-13
White House Restores UK AISI Access to Frontier AI Models After 17-Day Freeze
The White House reversed its September 24 directive on October 11, restoring UK AI Security Institute pre-release access to frontier models from OpenAI, Anthropic, and Google DeepMind; UK AI Minister Narayan confirmed on October 12 that AISI is now evaluating the latest generation of models.
critical UK 2026-10-13
Anthropic Petitions Full DC Circuit to Rehear Pentagon Supply Chain Risk Ruling
Anthropic filed for panel rehearing or rehearing en banc on October 13, arguing the September 25 2-1 decision misread the procurement statute, excused missing notice, and ignored First Amendment retaliation evidence; the mandate remains withheld.
critical US 2026-10-13
Colorado Releases Revised ADMT Draft Rules -- Comment Deadline October 26
The Colorado Attorney General published revised ADMT implementing rules on October 6 covering covered-tool scope, meaningful human review standards, and developer disclosures; public comments are due October 26 ahead of the January 1, 2027 effective date.
important US 2026-10-12
Microsoft President Calls for UK to Lead Mandatory Global AI Regulation
Microsoft President Brad Smith said voluntary self-regulation only works for well-intentioned companies and proposed a mandatory legal duty for AI developers to notify affected parties when rogue AI agents breach systems, with the UK best placed to lead an internationally coordinated binding framework.
watch UK 2026-10-12
Upcoming Deadlines
Oct 17
China CAC Draft Minors Internet Regulations - Public Comment Closes
Comment period closes on the CAC draft Regulations on Safeguarding Minors' Healthy and Safe Use of the Internet (issued September 18, 2026), which would bar platforms from offering AI virtual companions and intimate relationship services to minors and prohibit AI services and algorithms that induce addiction, emotional dependence, or excessive spending among minors.
Oct 26
Colorado ADMT Rulemaking Hearing and Final Comment Deadline
The Colorado Attorney General holds its rulemaking hearing at 10:00 a.m. MT, and written comments received by 11:59 p.m. MT will be considered for final rules implementing SB 26-189 (ADMT Act) and HB 26-1263 (Chatbot Safety Act), ahead of the January 1, 2027 effective date.
Oct 31
ECB AI Cybersecurity Action Plans Due from Eurozone Banks
Following the ESRB July 7 warning on systemic cyber risks from frontier AI models, the ECB set an October 31, 2026 deadline for significant eurozone banks to submit AI cybersecurity action plans addressing AI-enhanced cyber threats to financial stability.
Nov 16
California EO N-9-26 Working Group Recommendations Due - AI Kill Switch and Onsite Auditor Framework
Under Governor Newsom's Executive Order N-9-26 (September 18, 2026), the California Government Operations Agency working group must submit recommendations to the Governor on four areas: (1) requiring frontier AI developers to host independent verification organizations onsite for periodic audits; (2) requiring developers to implement an emergency shutoff capability verified by those IVOs; (3) requiring independent third parties to write AI safety plans; (4) expanding incident reporting requirements. If the recommendations translate into 2027 legislation, California would mandate operational kill switches for frontier AI models.
Nov 20
UK ICO Agentic AI Call for Evidence Closes
Six-week ICO call for evidence on how UK data protection law applies to agentic AI (security, transparency, accountability, automated decision-making, fairness, lawful processing) closes. Responses will inform final ICO guidance.
Jan 01
NY RAISE Act Takes Effect
New York S6953-B (RAISE Act) takes effect for frontier AI model developers with over $500M annual revenue. Requires safety protocols, AI impact assessments, 72-hour incident reporting to new NY AI oversight office. Penalties up to $1M first violation, $3M subsequent.
Jan 01
Illinois AI Safety Measures Act (SB 315) Takes Effect
Illinois SB 315 (Artificial Intelligence Safety Measures Act), signed by Governor Pritzker on July 6, 2026, takes effect January 1, 2027. Requires AI model developers with over $500 million in annual revenue to: publish a catastrophic risk framework; undergo annual independent third-party audits (first-in-nation requirement); report incidents within 72 hours (24 hours if imminent death/injury risk); and extend whistleblower protections. Effective the same day as Colorado SB 26-189, NY RAISE Act, creating a multi-state frontier AI compliance event.
Jan 01
Colorado SB 26-189 - ADMT Notice Framework Effective
Colorado SB 26-189 (automated decision-making technology notice-and-explanation framework) takes effect. Replaces SB 24-205's higher-risk AI compliance regime with a narrower ADMT disclosure requirement, exclusive AG enforcement.
Dec 02
EU AI Act - High-Risk AI System Obligations (Delayed, Annex III)
Stand-alone Annex III high-risk AI obligations, originally due August 2, 2026, were delayed to December 2, 2027 under the Digital Omnibus (Regulation EU 2026/1744, published July 24, 2026, in force July 27, 2026). Annex I embedded-product high-risk systems move to August 2, 2028. GPAI transparency in force since August 2, 2025. Penalties up to 7% global annual turnover.
Aug 02
EU AI Act - Annex I Embedded-Product High-Risk Obligations (Delayed)
High-risk obligations for AI embedded in regulated products under Annex I, deferred to August 2, 2028 under the Digital Omnibus (from the original August 2, 2027 timeline). Represents full implementation of high-risk EU AI Act requirements for product-embedded systems.