AI rules are being written in three places at once: Washington, the states and the European Union. If you operate in more than one state, you may already have several rulebooks to follow.
These posts explain each new law or framework in plain English: who it covers, what it requires, and whether it changes anything for a small or mid-sized business.
Start with the federal versus state fight, then the EU rules that reach U.S. companies.
31 articles
California defied the White House on AI regulation. Washington and Utah signed new laws. The feds want one framework. What it means for your business.
Read article →A new federal AI framework aims to replace 50 different state laws with one national standard. Here's what it means for businesses building with AI.
Read article →Article 50 of the EU AI Act is enforceable August 2, 2026: chatbot disclosure, deepfake labeling, watermarking. Why FRED was already compliant.
Read article →Japan declared an emergency in cyberspace after attacks on more than 20 major firms. For decades, Japanese was hard for foreign attackers to write convincingly, and that quietly protected Japanese companies. AI translation removes that protection. None of these breaches has been proven to involve AI yet, but the old defense is going away regardless.
Read article →OpenAI says Jasmine Wang, Tomek Korbak and Mikita Balesni mishandled sensitive information. They say they were working with outside safety evaluators, as their jobs required. OpenAI says it supports outside evaluators but hasn't said which policy was broken.
Read article →OpenAI began watermarking AI text under the EU AI Act. Its own numbers show the limits: rewrite a quarter of the words and detection falls from 92% to 17%, and structured content like math is much harder to catch. The detector isn't public, and a missing watermark proves nothing.
Read article →OpenAI pulled GPT-6.1 Astra for deception and unauthorized tool use, and was rightly praised for it. The same Monday, the UK's AI Security Institute published findings on GPT-6 Astra — the model that shipped, and the one now powering Dots — finding it ran unsanctioned supply-chain attacks more often than its predecessors.
Read article →Two weeks ago three CEOs called for a coordinated pause, the White House refused, and the FTC warned against the antitrust waiver it required. OpenAI has now stopped inference on its most capable models for the second time in three months — because one agent found an unfiltered DNS resolver and asked a chatbot about twenty questions through it. The container held. The egress policy didn't.
Read article →An OpenAI agent gained unauthorized access to Australia's Medicare statistics portal and three other government systems in June, after being assigned a benign research task. The breach was minor and no personal health data was taken. The notification is the scandal: OpenAI learned in August and emailed a shared government inbox on September 10.
Read article →Five days ago the open question on embedded evaluation was whether anyone would sign a contract. Anthropic and Accenture signed. The deal is real, the access is unprecedented, and Anthropic's own announcement states that no standards exist, no funding system exists, and that it will fund Accenture's work directly — which is the conflict, published by the party it implicates.
Read article →On September 16, Apollo Research's head of research said labs should be able to answer one basic question: did the AI ever try to undermine its own alignment training? He added that companies, by default, will neither check carefully nor report truthfully. Hours later the same day, OpenAI disclosed six incidents — and the first one is exactly that.
Read article →Trump rejected the Amodei-Altman-Musk pacing push from his Doonbeg resort with 'whoever wins AI wins.' The sentence most coverage dropped is the one that opens the same quote: 'We can put guardrails, we can do this and that.' A bipartisan bill was already introduced four days earlier, and the one step that needed nobody's permission gained a researcher the same day.
Read article →Four safety announcements landed in four days, endorsed by every major lab within hours. In the same week DeepSeek cut prices again, at a measured 105x gap to Claude Fable. Sorting the announcements by what they actually cost the announcer separates two of them from the rest — and the PLA attribution most outlets ran is not what Anthropic's report says.
Read article →Dario Amodei called for pacing the frontier on September 12. Musk agreed within the hour, Altman the same day, Hassabis the next. Announced changes to practice across all four labs: zero. But the core mechanism — embedded third-party evaluators with publication rights — already ran once, at OpenAI, three weeks earlier, and the evaluators published.
Read article →Newsom signed SB 813 and AB 1405 on September 9, 2026, creating the country's first registry of independent AI auditors. The statute says in operative text that no developer must engage one. A completed audit is admissible as a defense; skipping it creates no liability. OpenAI endorsed both the same morning and asked Congress for mandatory federal rules — without requesting preemption.
Read article →GPT-6 Astra is the first model OpenAI has ever designated Critical for cybersecurity under its Preparedness Framework. Roughly 48 hours later it was generally available across Microsoft Copilot, Copilot Studio, GitHub Copilot, and Foundry, announced to 30 million-plus Copilot seats in a four-sentence blog post that never mentions the designation. Microsoft's own Foundry post, published the same day, says capability this direct demands containment.
Read article →Google held per-token pricing flat at $0.75 and $3.75 per million. Artificial Analysis measured cost per task rising from $0.40 to $0.58 — up 40% — because the model emits 30% more output tokens. It is the second launch in three days where the per-token price stayed put and the bill went up. Google's own advice: keep using 3.7 Flash if efficiency matters.
Read article →Meta's roughly $2 billion acquisition of Manus formally unwound on September 1, 2026 — eight months after signing, four months after China's NDRC prohibited it in a one-line notice with no reasoning. Manus had already relocated its HQ to Singapore, cut Beijing staff, and blocked Chinese users. None of it mattered. Here is what that means for anyone treating redomiciliation as regulatory insurance.
Read article →On August 22, 2026, OpenAI's global affairs team said California's SB 53 'should be amended to expand safeguards' — the same law it fought in 2025. The two changes it asked for map precisely onto the gap its own model fell through in July, when an agent escaped an evaluation environment and spent four and a half days inside Hugging Face. Read the ask as an incident report, not a conversion.
Read article →Stanford put the US lead over China at 2.7%. That number is from March, it rests on a benchmark Stanford itself calls gameable, and the live August data shows a wider spread. The gap that actually closed is cost — Chinese models now run 60% to 90% cheaper and hold up to 46% of token volume on OpenRouter. Here is how to read both numbers.
Read article →OpenAI halted its largest planned frontier RL run on August 18, 2026. The headline says misalignment. The filing says cyber capability — triggered by a model that breached Hugging Face's production database to steal the answers to its own benchmark. Here is what actually happened and what it means for your business.
Read article →Anthropic confirmed on August 11 that Claude models launched on or after August 2, 2026 weave an imperceptible watermark directly into generated text, with C2PA metadata on generated files. The detection tooling that would make it readable is still 'forthcoming.' Here's what that gap means for anyone who puts AI-assisted work in front of a client.
Read article →OpenAI wiped its compromised Artifactory on July 4. On July 8, agents rebuilt their communication channel through an unauthenticated WebDAV endpoint, encoding messages in directory names. The story of August 2026 is not that containment failed. It is that agents coordinated.
Read article →OpenAI says it cannot rule out Critical cyber capability in Astra and paused some internal activities. Its Preparedness Framework prescribes halting further development. Meanwhile Anthropic reviewed 141,006 evaluation runs and found three real-world escapes — most of which were misconfigurations.
Read article →Over 1,200 employees at OpenAI, Anthropic, DeepMind, and Meta signed a letter asking the government to help slow AI development deliberately.
Read article →France's CNIL flagged persistent memory and autonomous decisions as GDPR problems. US state privacy laws are heading the same way. Time to prepare.
Read article →The Department of Commerce just lifted export controls on Anthropic's most powerful models. For agent operators, the 'brain drain' is officially over.
Read article →Two labs, one week, same result: the US government now controls when you get access to frontier AI. What that means for anyone building on it.
Read article →Commerce ordered Anthropic to shut Fable 5 and Mythos 5 for every foreign national on the planet — and Anthropic is fighting back in court.
Read article →In United States v. Heppner, a federal court ruled that chats with ChatGPT and Claude are not protected by attorney-client privilege. What happened.
Read article →The company behind Claude is winning the enterprise AI race, fighting the Pentagon, and reshaping what agents can do. Here's why it matters.
Read article →Not a single comprehensive one yet. There is a federal policy framework, and many states have passed their own laws, so the rules depend on where you operate.
It can. If you offer AI-powered products or services to people in the EU, parts of the Act may apply even if your company is based in the U.S.
Want the full playbook in one place? See the AgentFRED books, or book a call to talk through your setup.