This Week in AI Regulations

This week's episode of This Week in AI Regulations 

• The European Commission released draft guidelines for classifying AI systems as high-risk under the EU AI Act — stakeholder feedback is open until June 23, 2026. The Commission also launched a review of EU copyright rules addressing AI's impact on creative industries, with contributions open until June 25, 2026. 
• Separately, the EU mandated foreign investment screening across AI, defence, semiconductors, and financial services — extending to intra-EU transactions involving non-EU ownership.
• In France, CNIL's 2025 annual report revealed a record €487 million in fines and confirmed progressive AI Act enforcement from 2025, with cybersecurity as the top priority for 2026. Organisations processing personal data in France must treat GDPR and AI Act compliance as a combined obligation.
• In Germany, the Berlin State Government launched the TOP-Konzept plan for critical energy infrastructure — including mandatory AI-based attack detection, 24/7 security patrols, and updated crisis management protocols.
• At the global level, the Basel Committee on Banking Supervision agreed to publish an ICT risk management report and is progressing a targeted review of prudential standards for cryptoasset exposures. 
• IOSCO concluded its 2026 Annual Meeting approving five reports including an AI supervisory toolkit and a market liquidity report.
• In China, authorities took enforcement action against the creator of an AI-generated deepfake video falsely depicting the collapse of the Zhangjiajie Glass Bridge — a landmark case under China's AI-generated content regulations.

Carver RegWatch delivers weekly regulatory intelligence across jurisdictions. Published May 24, 2026.

For more information, visit the Carver Agents website.

Also from Carver RegWatch this week:

• ASEAN RegWatch — Bank Indonesia 50bps rate hike to 5.25%, MAS revokes Bsquared payment licence, Singapore insider trading convictions
• USA Regulatory Updates — SEC novel ETF regulatory review, California Hermes Bitcoin kiosk enforcement, IOSCO AI supervisory toolkit
• EU Regulatory Updates — EU AI Act high-risk classification consultation deadline June 23, CNIL €487M record fines, EU Solidarity Fund climate disaster allocation
• Middle East RegWatch — OFAC Adani $275M Iran sanctions settlement, OFAC Amin Exchange designation, UAE Drupal CVE-2026-8495 cybersecurity alert
• India Regulatory Updates — RBI restricts Nagar Sahakari Bank, RBI cancels Yashwant Co-operative Bank licence, SEBI Investor Onboarding Regulatory Sandbox launch
• Global Regulatory Briefing — Bank of England CCP resolution paper, Malta tokenisation of financial instruments consultation, ASIC sustainability reporting focus 2026-27

Find all series at Carver Agents Podcast 

Articles referenced in this episode:

1. Commission seeks feedback on the draft guidelines for the classification of high-risk artificial intelligence systems
2. Annual report: CNIL's achievements and key actions in 2025
3. Maßnahmenplan zum Schutz von neuralgischen Punkten der kritischen Infrastruktur: das TOP-Konzept für verstärkte technische, organisatorische und physische Maßnahmen im Bereich der Energieversorgung
4. Basel Committee agrees to publish report on information and communication technology risk management, progresses cryptoasset targeted review, considers targeted updates on liquidity risk principles
5. AI-Generated Fake Video of Zhangjiajie Glass Bridge Collapse Causes Public Panic and Legal Action
6. IOSCO concludes 2026 Annual Meeting
7. Targeted consultation on the draft guidelines for the classification of high-risk artificial intelligence systems
8. See all public consultations
9. Commission seeks views on the review of EU copyright rules
10. Protecting EU strategic sectors from risky foreign investments

This episode covers critical updates in regulatory approaches to Artificial Intelligence, risk management, retail investor issues, security vulnerabilities, and digital engagement practices globally.

In China, revised regulations from the Huangpu District enhance administrative normative document management by mandating AI and big data for risk and legality reviews, emphasizing party leadership and clear classification.

The UK’s Financial Conduct Authority, Bank of England, and Treasury issued a joint statement urging firms to strengthen governance and cyber resilience against frontier AI threats, highlighting the need for board-level understanding and strategic risk management.

Additionally, Italy resolved security vulnerabilities in Spring AI products, advising users to update to secure versions to prevent data manipulation and information leaks.

For more information, visit the Carver Agents website.

Articles mentioned:

1. 黄浦区人民政府办公室关于印发修订后的《黄浦区行政规范性文件管理规定》的通知
2. OSC’s Investor Advisory Panel releases 2025 Annual Report
3. Web report 2026-1 Financial Stability Report
4. AL04/260511/CSIRT-ITA - 11/05/26 - Risolte vulnerabilità in prodotti Spring
5. OAI / SBG / SB OAI JV
6. Order Directing Briefing on the Review
7. Jason Scott, DVM, In the Matter of (timeline item) - May 15, 2026
8. FCA, Bank of England and Treasury joint statement on frontier AI models and cyber resilience
9. 上海市人民政府办公厅关于印发《上海市深化“一网通办”改革 打造“高效办成一件事”最佳体验地行动方案》的通知
10. [Bigger Water Capacity, Smarter Flood Forecasting]

This episode explores critical regulatory developments impacting Data Management, Competition Policy, Complexity, Advisory Committees, and Joint Ventures within the AI sector.

A major update involves the joint venture agreement between OpenAI, SoftBank Group, and SoftBank OpenAI Joint Venture, which may be classified as a full-function joint venture under EU merger regulations. This triggers mandatory notifications and compliance with Council Regulation 139/2004, emphasizing transparency and adherence to merger control deadlines.

In Kazakhstan, the President chaired the second Artificial Intelligence Development Council meeting, focusing on national AI integration, unified digital platforms, data standards, and cybersecurity enhancements.

Furthermore, the US Office of the Comptroller of the Currency's semiannual report highlights cybersecurity risks linked to advanced AI tools, while Federal Reserve guidance narrows model risk management scope excluding generative AI, promoting supervisory flexibility.

For more information, visit the Carver Agents website.

Articles mentioned:

1. OAI / SBG / SB OAI JV
2. Мемлекет басшысы Жасанды интеллектіні дамыту жөніндегі кеңестің екінші отырысын өткізді
3. OCC’s Semiannual Risk Perspective Highlights Key Risks in Federal Banking System
4. “Capital, Competition, and Complexity – regulatory perspectives on the regulatory debate” – Remarks by Deputy Governor Mary-Elizabeth McMunn
5. Michelle W Bowman: Artificial intelligence in the financial system
6. Remarks at the Special Competitive Studies Project AI+ Expo
7. Regulators and audit leaders discuss audit quality and confidence in Canada’s financial reporting
8. Table ronde des responsables de la réglementation et de l'audit sur la qualité de l'audit et la confiance à l'égard de l'information financière au Canada
9. Regulators and audit leaders discuss audit quality and confidence in Canada’s financial reporting
10. Digital Health

This episode delves into the latest regulatory updates impacting Social Dialogue initiatives, advancements in California's DMV digital driver's license, and strategic developments within Beautiful China and the Guangdong-Hong Kong-Macao Greater Bay Area. These sectors illustrate evolving governance and innovation synergy across digital and regional frameworks.

One major update covers the European Commission’s draft measures under the Digital Markets Act, which aim to ensure interoperability between Google’s Android OS and third-party AI services. Key provisions include enabling integration of competing AI services with Android apps and activation through custom wake words. The Commission is currently seeking public feedback to enhance competition and innovation.

Additionally, the EU’s AI "digital omnibus" proposal updates regulations by delaying certain high-risk AI rules, introducing flexibility for companies, and proposing a ban on AI-generated “nudification” content, balancing innovation with risk management. Luxembourg’s advocacy for a harmonized European approach to online minor protection and support for AI startups further reflects coordinated regional efforts.

For more information, visit the Carver Agents website.

Articles mentioned:

1. Commission seeks feedback on measures to ensure interoperability with Google's Android under the Digital Markets Act
2. Commission seeks feedback on measures to ensure interoperability with Google's Android under the Digital Markets Act
3. California expands mobile driver’s license to Samsung Wallet - April 28, 2026
4. AI: press conference debrief on the negotiations to update EU rules
5. Elisabeth Margue au Conseil informel "Télécommunications" de l'Union européenne
6. Questions and Answers on FDA's Adverse Event Reporting System (FAERS)
7. 聚焦融合创新 发挥制度优势 加快建设粤港澳大湾区美丽中国先行区
8. "Tant que le dialogue se poursuit, rien n'est arrêté"
9. La Banque de France et l’ACPR mettent en garde le public contre un risque de fraude avec usurpation de leur identité et de celle de leurs dirigeants
10. A reform-minded regulator

This episode covers important regulatory updates spanning multiple sectors including the Chinese Five-Year Plan, California's CCPA developments, EU data protection advancements, the U.S. Water Reuse Action Plan, and initiatives in Hubei.

Major updates include the European Data Protection Supervisor’s expanded roles under the EU AI Act, mandating cooperation from EU institutions with strong cybersecurity and privacy safeguards. Spain’s clarification on AI voice transcription services now requires organizations to act as data controllers under GDPR, enforcing transparency and rights protections.

Additionally, the California Privacy Protection Agency faces detailed public comments recommending alignment with existing privacy laws and refining behavioral advertising definitions under the CCPA.

For more information, visit the Carver Agents website.

Articles mentioned:

1. Transcripción de voz con IA (II): responsabilidad, derechos y transparencia
2. Written Comments Part 4
3. Read more here
4. Litigation Release - AI Investment Education Foundation Ltd.
5. Mise à jour de la loi organique des services de renseignement et de sécurité
6. Prioridades de supervisão — 2026
7. What They Are Saying: Water Sector, Industry and Federal Partners Applaud EPA’s Newly Launched Water Reuse Action Plan 2.0
8. 湖北省国民经济和社会发展第十五个五年规划纲要
9. Von Cloud bis KI: Strategie und Governance im Spannungsfeld von Souveränität und Innovation | Konferenz "Finanzdienstleister der nächsten Generation", Frankfurt School of Finance and Management
10. 上海市人民政府办公厅关于印发《国家数字经济创新发展试验区（上海）实施方案》的通知

This episode covers critical regulatory updates across sectors including data protection, deceptive advertising, AI-enabled transcription, Meta AI glasses, and the European Data Protection Supervisor (EDPS).

We detail France’s new directive CERTFR-2026-ACT-016, which prohibits the deployment of autonomous AI agents like OpenClaw on production systems until security is verified, restricting their use to isolated test environments. The regulation emphasizes risks such as data leakage and system compromise, requiring stringent workstation security policies.

In North America and the UK, regulators jointly warn major banks about cybersecurity threats posed by an AI model that can autonomously identify and exploit vulnerabilities, urging precautionary risk assessments to safeguard financial infrastructure.

Additionally, Sweden is increasing funding for its Authority for Privacy Protection (IMY) to support AI oversight, including market surveillance of AI usage in law enforcement. IMY also clarifies GDPR-compliant usage of AI transcription tools in social services, highlighting the need for human oversight and robust security.

For more information, visit the Carver Agents website.

Articles mentioned:

1. CERTFR-2026-ACT-016 - 13 Apr 2026 - Vulnérabilités et risques des produits d’automatisation par IA agentique
2. US and UK Regulators Warn Banks of AI Model Mythos' Cybersecurity Risks
3. AI-Generated Videos Simulate Violence Against PT Women, Prompt Legal Action in Brazil
4. Advisory Committee on Medical Devices, Meeting 88
5. Utökat budgetanslag för IMY:s kommande AI-uppdrag
6. Ny rapport: Transkribering med AI kan avlasta socialtjänsten
7. 国家标准动态
8. April 13, 2026 - Publishing.com, In the Matter of (timeline item)
9. Vacancy Notice - Corrigendum
10. AI Glasses Misuse Prompts Crackdown at Augusta Masters Tournament

This episode covers pivotal developments in the regulatory landscape impacting sectors such as Equal Treatment Directive, Energy Consumption, Transport, Inclusive Education, and the Gigabit Infrastructure Act.

The European Commission has initiated a targeted consultation to measure the energy consumption and emissions of general-purpose AI models, mandating providers to document energy use in compliance with the EU AI Act. Stakeholders can participate via an anonymous online questionnaire due by mid-May 2026, aimed at fostering transparent and energy-efficient AI practices.

Additionally, the EU’s AI Continent Action Plan has reached significant milestones, including the establishment of AI factories and gigafactories, the launch of a Data Union Strategy for enhanced data sharing, and the proposal of the AI Omnibus regulation to simplify legal frameworks. These efforts aim to strengthen computational infrastructure, legal certainty, and trustworthy AI adoption.

Sweden’s Medical Products Agency has released updated AI guidance for healthcare providers, integrating EU AI regulations with medical device laws and emphasizing rigorous risk assessments for generative AI technologies. Planned seminars will support ongoing professional dialogue.

For more information, visit the Carver Agents website.

Articles mentioned:

1. Targeted consultation on measuring energy consumption and emissions of AI models and systems
2. CM 2340 2026 INIT
3. Целева консултация относно измерването на потреблението на енергия и емисиите от модели и системи с ИИ
4. AI Continent Action Plan delivers major milestones
5. CM 2264 2026 INIT
6. Ny version av Läkemedelsverkets AI-‍vägledning till sjukvården
7. 北京市发布2026版32条支持创新医药高质量发展若干措施
8. 金管會主動下架逾10萬餘件投資詐騙廣告，並持續精進防詐措施，守護......
9. Thailand: [Prime Minister] Anutin plans to present new measures to boost economy
10. Supporting the European Broadband Competence Offices Network in 2026-2027

This episode examines critical regulatory developments across multiple sectors including Digital Traceability, Cyberthreat, Gesetzliche Krankenversicherung, Form NT 10-K, and Ransomware. We explore how emerging AI technologies and frameworks are reshaping compliance and risk management globally.

One major update is the FDA's transition from FAERS to the AI-powered Adverse Event Monitoring System (AEMS), enabling enhanced safety signal detection and standardized reporting protocols across regulated products. This marks a significant advancement in public health risk monitoring.

Singapore’s Monetary Authority unveiled revised insurance regulations featuring AI risk management guidelines, capital framework adjustments, and stronger customer protection measures, reflecting a proactive approach to technological challenges in the insurance sector.

Additionally, New York State proposes stringent draft regulations to protect youth from sports wagering harms via biometric ID, geolocation controls, and a ban on AI targeting, emphasizing responsible gaming and customer safeguards.

For more information, visit the Carver Agents website.

Articles mentioned:

1. New Safety Information or Potential Signals of Serious Risks Identified from the FDA Adverse Event Monitoring System (AEMS)
2. Delivering on the Insurer’s Promise - Keynote speech by Mr Marcus Lim, Assistant Managing Director, Monetary Authority of Singapore, at the Life Insurance Association, Singapore (LIA) Annual Luncheon on 30 March 2026
3. Keeping New Yorkers Safe: Governor Hochul Previews Measures to Keep Youth From Sports Wagering and Protect New Yorkers From Gambling Harms
4. NT 10-K - BMP AI Technologies, Inc. (1130781) - 2026-03-31
5. WEKO: Künstliche Intelligenz und das Jahr 2025
6. 29 mars 2026 - Les cybermenaces restent élevées : les attaques sont plus ciblées et plus complexes
7. 30.03.2026 - Cyberthreat level remains high – attacks becoming more targeted and complex
8. 2026-03-29 - 推动食品安全地方立法
9. China issues guideline for AI ethics governance
10. Gerlach dringt auf rasches Handeln bei Gesetzlicher Krankenversicherung – Bayerns Gesundheitsministerin

This episode covers significant regulatory developments across GDPR, digital assets, investment advice, evaluation, and omnibus proposals impacting AI governance globally.

In the United States, the Federal Reserve announced an updated supervisory framework aimed at promoting responsible innovation in digital assets and AI. This includes rescinding restrictive crypto-related supervisory letters and instituting governance and risk management policies for banks using AI.

In Europe, the EU is advancing amendments to AI and food safety regulations while simplifying compliance under the GDPR and AI Act to reduce administrative burdens. Germany’s trilateral pilot project successfully integrated AI and medical device regulations, paving the way for a national AI real laboratory.

Additionally, Israel launched a regulatory sandbox supporting AI healthcare technologies with financial and regulatory guidance focused on automation challenges.

For more information, visit the Carver Agents website.

Articles mentioned:

1. Regulation, Innovation
2. Investigative Summary 26-0004
3. New data centre expectations help bring the benefit of AI to all Australians
4. HAS - Actualité
5. CP26/10: Simplifying the pensions and investment advice rules
6. CM 2217 2026 INIT
7. CM 1954 2026 REV 1
8. Find out more here
9. 17.03.2026 - Trilaterales Pilotprojekt zur Simulation eines KI-Reallabors erfolgreich abgeschlossen

1. קול קורא לארגז חול רגולטורי לטכנולוגיות AI פורצות דרך בבריאות

This episode covers critical developments in AI regulations affecting diverse sectors including Digital Infrastructure, youth involvement, decisions by the European Central Bank Council, advancements in Engineering Meteorology, and regulatory updates in Kentucky. Listeners will gain insights into how AI policies are evolving globally and impacting various industries.

Key updates include the European Central Bank’s introduction of the Appia roadmap to foster a tokenised financial ecosystem, with a call for stakeholder feedback by April 22, 2026. Compliance with the European Banking Authority’s environmental scenario analysis guidelines is also emphasized, with a deadline set for January 1, 2027.

In Singapore, the Monetary Authority has partnered with industry players to develop the MindForge AI Risk Management Toolkit and Operationalisation Handbook, designed to guide financial institutions in managing AI risks across the full lifecycle, including governance frameworks and risk assessments.

Additionally, Guangdong Province in China has launched a 14-measure policy framework to promote AI-driven innovation in transportation, focusing on high-quality data sets, computing resource development, autonomous driving testing, and cross-city regulatory cooperation.

For more information, visit the Carver Agents website.

Articles mentioned:

1. 数据要素×气象服务优秀解决方案④湖北：数智气象打造园区发展新引擎
2. Weekly newsletter year XXXII, No. 10 - 16 March 2026
3. Beschlüsse des EZB-Rats (ohne Zinsbeschlüsse)
4. Weekly newsletter year XXXII, No. 10, 16 March 2026
5. Sales Tax Facts
6. Глава государства побеседовал с молодежью, принимавшей активное участие в референдуме
7. MAS Partners Industry to Develop AI Risk Management Toolkit for the Financial Sector
8. 乌兹别克斯坦将力争通过创新和数字化加快经济增长
9. 走近3·15，食品安全在行动 ——筑牢食品安全防线 有效提振消费信心
10. 广东力推人工智能技术走向交通“实战场” - 2026-03-17