On September 17, 2026, the European Commission (EC) published a proposed “EU KIDS Act,” which would impose minimum-age requirements to access social media and video-sharing platforms, subject to mandatory age verification, as well as an obligation for covered entities, including providers of online games and AI chatbots and AI companions, to build specific
The Data Advisor
Unique Insights on Privacy and Data Protection Worldwide
Latest from The Data Advisor
Ninth Circuit Addresses CFAA and Agentic AI Tools in Groundbreaking Decision
On August 4, 2026, the U.S. Court of Appeals for the Ninth Circuit issued a groundbreaking decision in Amazon.com Services, LLC v. Perplexity AI, addressing the legal status of so-called “agentic AI” tools, which help users expedite various online tasks, including buying goods and services. The Ninth Circuit vacated a preliminary injunction that had…
EU AI Act Enforcement Phase Begins
On August 2, 2026, the European Commission (EC), acting through its European AI Office (EU AI Office), became formally entitled to exercise its powers to investigate and enforce the EU AI Act obligations imposed on providers of general-purpose artificial intelligence (GPAI) models, as well as rules on prohibited AI practices. These powers are significant and…
Illinois Enacts AI Safety and Transparency Law for Frontier AI Developers
On July 6, 2026, Illinois Governor JB Pritzker signed into law Senate Bill 315, the Artificial Intelligence Safety Measures Act (AISMA), which will require large AI developers to publicly disclose how they plan to mitigate potentially “catastrophic risks” posed by advanced frontier AI models. In a first for a U.S. state AI law, AISMA…
EU Commission Publishes AI Transparency Code of Practice
On June 10, 2026, the European Commission published a Code of Practice on marking and labeling of AI-generated content (the Code) following a public consultation that took place last year. The Code is divided into two sections:
- Section 1 sets out provenance requirements applicable to providers offering generative AI systems.
- Section 2 sets out transparency rules
…
The FTC After Slaughter: What Businesses Need to Understand
On June 29, 2026, the U.S. Supreme Court issued its opinion in Trump v. Slaughter, where the six-Justice majority held that appointed agency officials who wield executive power are subject to presidential removal. In so holding, the Court overruled its 1935 decision in Humphrey’s Executor v. United States, 295 U.S. 602 (1935), which…
UK Announces Social Media Ban and Broader Online Restrictions for Users Under 16
On June 15, 2026, the UK government announced plans to introduce a social media ban for users under 16 (under-16s), alongside restrictions on features deemed harmful to minors, such as livestreaming and messaging functions, for a wider range of online services, including those in the gaming sector. These measures, which may require platforms active in…
Trump Administration Issues Executive Order on Advanced AI Innovation and Security
Key Takeaways
- The Executive Order, Promoting Advanced Artificial Intelligence Innovation and Security (Order), directs the creation of a framework for developers of advanced frontier models to engage with the federal government for a voluntary pre-release review of the models.
- The Order also directs the Treasury Department, together with the National Security Agency (NSA) and Cybersecurity
…
European Commission Publishes Proposal for Act to Reduce Reliance on Foreign Cloud and AI
On June 3, 2026, the European Commission (EC) released its first draft of a proposed Cloud and AI Development Act (Proposal or CADA), marking a significant step forward in the EU’s efforts to strengthen its digital infrastructure and reduce strategic dependence on non-EU cloud providers.…
“Shadow AI” Triggers First SEC Form 8-K for Unauthorized AI Use: What Financial Institutions and Public Companies Need to Know
By Demian Ahn & Tony Misher
Key Takeaways
- CB Financial Services, Inc. filed the first SEC Form 8-K under Item 1.05 triggered by an unauthorized use of an artificial intelligence (AI) tool, not an external cyberattack.
- A cybersecurity incident caused by insider misuse of AI (known as Shadow AI) should be assessed for disclosure under SEC rules.
- The four-business-day disclosure clock
…