Introduction
On September 16, 2026, the Ninth Circuit held in Doe v. GitHub, Inc. that outputs produced by a generative AI coding tool are newly generated works, not copies of existing works, and therefore fall outside the Digital Millennium Copyright Act’s (DMCA) prohibition on removing or altering copyright management information (CMI).1 The court limited that
In the final weeks of California’s 2026 legislative session, lawmakers passed a series of bills that stand to significantly reshape the state’s privacy and AI regulatory landscape. Of particular significance, Senate Bill 690 (SB 690) seeks to curtail one of the principal theories underlying the recent wave of California Invasion of Privacy Act
On August 4, 2026, the United States Court of Appeals for the Ninth Circuit issued its decision in Amazon.com Services, LLC v. Perplexity AI, Inc., vacating a preliminary injunction that had barred Perplexity’s AI-enabled web browser from interacting with Amazon’s website. The decision addresses a question of first impression: whether an AI “agent” that assists
What You Need to Know — and Do — NowFrontier AI capabilities can now weaponise IT weaknesses in “a matter of minutes or hours,” the European Systemic Risk Board warned this week when it elevated the status of systemic cyber risk to “severe.” This warning aligns with other recent regulatory announcements, including a joint statement
On June 2, 2026, Connecticut Governor Ned Lamont signed Senate Bill 5 into law, designated as Public Act 26-15 and also known as the Connecticut Artificial Intelligence Responsibility and Transparency Act (the “CART Act” or “Act”).1 The CART Act is among the most comprehensive state AI laws enacted to date, creating distinct obligations for
On June 2, 2026, President Trump signed an executive order titled “Promoting Advanced Artificial Intelligence Innovation and Security” (the “Order”), which establishes a new framework for government collaboration with the AI industry on cybersecurity and the secure deployment of advanced AI models.1 While voluntary in form, the Order builds significant institutional architecture, including classified benchmarks
On March 30, 2026, Governor Gavin Newsom signed Executive Order N-5-26 (the “Order”), directing California state agencies to develop new certification requirements and procurement standards for companies seeking to provide AI-enabled products or services to the state.1 The Order represents the latest move in an intensifying contest between California and the federal government over
On March 20, 2026, the White House released its National Policy Framework for Artificial Intelligence (“Framework”), outlining legislative recommendations for Congress to establish a unified federal approach to AI regulation. The Framework builds on prior executive actions, including the December 2025 Executive Order (the “Executive Order”) and the Trump administration’s “America’s AI Action Plan,” and
While 2025 may have brought questions about the level of enforcement we would see from federal regulators, there was no question that state regulators would continue to be active, especially in the financial privacy space. In 2025, we saw the New York Department of Financial Services (NYDFS) implement the final phases of amendments to its