Knowledge Base

Practical reads on AI, fintech, and digital-asset regulation

Articles and alerts written by the Licentium team. New posts every couple of weeks.

European Commission Opens Consultation on MiCA Review, Deadline 31 August 2026

On 20 May 2026, the European Commission launched a public consultation and a parallel targeted consultation on the review of Regulation (EU) 2023/1114 (MiCA). Authorized crypto-asset service providers, issuers of asset-referenced tokens and e-money tokens, financial institutions, and technology providers have until 23:59 CEST on 31 August 2026 to submit responses. The Commission will use the consultation to prepare a report under Articles 140 and 142, which may be accompanied by a legislative proposal to amend MiCA.

Senator Warren Demands CFTC Records on Prediction Market and Crypto Oversight in June 2026

Senator Elizabeth Warren sent a letter to CFTC Chairman Michael Selig demanding records on prediction market and crypto oversight by 18 June 2026. The demand follows a reported 25% CFTC workforce reduction and a drop in crypto enforcement actions from 58 in FY2024 to 11 since January 2025. Warren cited potential conflicts of interest in CFTC approvals of Polymarket and a vacated penalty for a crypto exchange.

Senator Warren Demands CFTC Records on Crypto and Prediction Market Oversight, June 2026

Senator Elizabeth Warren wrote to CFTC Chairman Michael Selig on or around 9 June 2026, demanding records on the agency's oversight of cryptocurrency and prediction markets by 18 June 2026. The demand covers staff separation records since January 2025, the administrative records behind no-action letters to Polymarket and Gemini, and all communications between prediction market operators and the CFTC connected to the Clarity Act. The Senator cited a 25% workforce reduction and a steep decline in enforcement actions.

NYDFS Proposes GENIUS Act-Aligned Payment Stablecoin Regulation, New York, June 2026

On 9 June 2026, the New York State Department of Financial Services Acting Superintendent Kaitlin Asrow announced a proposed regulation for payment stablecoin issuers. The proposal aligns DFS's existing June 2022 stablecoin guidance with requirements of the federal GENIUS Act, adds reserve concentration limits, and mandates risk management programs. A 10-day preproposal comment period opened on 9 June 2026, followed by a 60-day comment period upon publication in the State Register.

European Commission Opens MiCA Review Consultation with August 2026 Deadline

On 20 May 2026, the European Commission launched a targeted consultation on the functioning of Regulation (EU) 2023/1114 (MiCA). The consultation addresses scope gaps including DeFi, staking, NFTs, and lending activities not currently regulated under MiCA. Submissions close 31 August 2026 and will inform a potential legislative proposal to amend the regulation.

EBA and NYDFS Sign Cross-Border Stablecoin Supervisory Cooperation MoU, June 2026

On 2 June 2026, the European Banking Authority and the New York State Department of Financial Services signed a Memorandum of Understanding on supervisory cooperation for entities conducting cross-border stablecoin activities. The MoU was executed under Article 126 of Regulation (EU) 2023/1114 (MiCA), which authorises the EBA to conclude administrative arrangements with third-country supervisory authorities where equivalent confidentiality standards are confirmed.

European Commission Publishes Draft Guidelines on High-Risk AI System Classification, June 2026

The European Commission published draft guidelines to help providers and deployers of artificial intelligence systems determine whether a given system qualifies as high-risk under Annex III of Regulation (EU) 2024/1689, the EU AI Act. A targeted industry consultation was open until 23 June 2026, with the deadline extended to 23 July 2026. The Commission plans to adopt final guidelines by the end of 2026.

Australia's Gambling Reform Bill 2026 Targets Online Trade Promotions Starting January 2027

The Australian Government has introduced the Interactive Gambling Amendment (Stop the Gambling Ads) Bill 2026 to Parliament and announced amendments to the Interactive Gambling Act 2001 (Cth) commencing 1 January 2027. The reforms address subscription-based rewards programs structured as recurring lottery-style prize draws, which the Government characterises as 'shadow lottery' arrangements currently outside Commonwealth regulation.

European Commission Publishes Draft Guidelines on High-Risk AI Classification on 19 May 2026

On 19 May 2026, the European Commission published draft non-binding guidelines on the classification of high-risk AI systems under Article 6 of Regulation (EU) 2024/1689 (the EU AI Act). The guidelines address agentic and multi-component AI architectures. The Article 6(3) filter cannot be applied at the component level where an AI system contributes to a high-risk use case. A targeted consultation runs until 23 July 2026.

EBA and NYDFS Sign Stablecoin Supervisory Cooperation MoU on 2 June 2026

On 2 June 2026, the European Banking Authority and the New York State Department of Financial Services signed a non-binding Memorandum of Understanding to coordinate supervision of cross-border stablecoin activities. The agreement provides for quarterly data exchanges, joint inspections, and crisis coordination under the MiCA regime and New York's virtual currency licensing regime.

Colorado Enacts SB 26-189 Replacing Prior AI Consumer Rules with Automated Decision-Making Technology Obligations, 2026

Colorado SB 26-189, the Automated Decision-Making Technology Act, repeals and replaces the consumer AI protections in SB 24-205, establishing new obligations for developers and deployers of covered automated decision-making technology in consequential decisions. Developer obligations take effect 1 January 2027. Violations constitute deceptive trade practices under the Colorado Consumer Protection Act, enforceable by the Attorney General.

UK Designates 18 Cryptocurrency Exchanges Under Russia Sanctions Regulations, 26 May 2026

On 26 May 2026, the UK designated 18 cryptocurrency exchanges under The Russia (Sanctions) (EU Exit) Regulations 2019, including Huobi Global S.A., operator of HTX, and three Georgian Russia-focused exchanges. OFSI confirmed HTX is subject to UK financial sanctions by reason of Huobi's ownership. The action marks the first time the UK has directly sanctioned cryptocurrency exchanges in connection with Russian sanctions evasion.

European Commission Opens Consultation on Draft Guidelines for High-Risk AI System Classification Under Article 6, June 2026

The European Commission has published draft guidelines clarifying when an AI system qualifies as high-risk under Article 6 of Regulation (EU) 2024/1689 (AI Act). A targeted consultation is open until 23 June 2026. The guidelines are not legally binding but reflect the Commission's interpretation and will guide market surveillance authorities and AI providers in applying the high-risk classification rules.

Rwanda Publishes Law on Virtual Asset Business in Official Gazette, 28 May 2026

On 28 May 2026, Rwanda published its Law on Virtual Asset Business in the Official Gazette, entering into force upon publication. The Capital Market Authority (CMA) is designated as the lead licensing authority. The National Bank of Rwanda (BNR) holds co-regulatory authority over systemic risk and payment systems. Only incorporated legal entities may provide virtual asset services. Implementation regulations from the CMA and BNR are pending.

CFTC Approves Bitcoin Perpetual Futures Contract and SEC Issues Joint Crypto Securities Interpretation, 29 May 2026

On 29 May 2026, the U.S. Commodity Futures Trading Commission approved the listing of a bitcoin perpetual futures contract by KalshiEX LLC. The SEC and CFTC jointly issued an interpretation clarifying how federal securities laws apply to crypto assets, accompanied by a CFTC no-action letter permitting futures commission merchants to transfer customer crypto margin to foreign brokers. The coordinated actions are the first to bring perpetual crypto contracts into the U.S. regulatory system.

CFTC Proposes First Event Contract Rules for Prediction Markets, United States, June 2026

On 10 June 2026, the U.S. Commodity Futures Trading Commission released a notice of proposed rulemaking establishing a review process for determining whether event contracts fall within statutory prohibitions under Section 5c(c)(5)(C) of the Commodity Exchange Act. The proposal amends CFTC Regulation 40.11 and adds Appendix F to Part 40. It sets a three-part sequential test and a 90-day review window for individual contracts, paired with a multi-factor public interest analysis. CFTC Chairman Mike Selig described the measure as creating a durable, transparent process while permitting legitimate markets to operate.

Trump Signs Executive Order on AI Cybersecurity and Frontier Model Review, United States, June 2026

President Trump signed the Executive Order 'Promoting Advanced Artificial Intelligence Innovation and Security' on 2 June 2026, directing federal agencies to deploy AI-enabled cyber defenses within 30 days, establishing a voluntary arrangement for pre-release government access to covered frontier AI models within 60 days, and creating an AI cybersecurity clearinghouse coordinated by the Secretary of the Treasury. The order charges the Attorney General with prioritizing criminal enforcement under 18 U.S.C. 1028, 1030, and 1343 against those who use AI to unlawfully access or damage computer systems. No mandatory licensing or pre-clearance requirement for AI models is created.

Colorado Signs SB 189 Replacing State AI Act with Narrower Disclosure Law, May 2026

Colorado Governor Jared Polis signed Senate Bill 26-189 on 14 May 2026, repealing and replacing the Colorado Artificial Intelligence Act (SB 24-205) before its 30 June 2026 effective date. The replacement law removes the duty of care, mandatory impact assessments, and risk management programs for high-risk AI systems and institutes a disclosure-based regime covering automated decision-making technology used in consequential decisions spanning employment, financial services, healthcare, and housing. The new law takes effect on 1 January 2027.

European Commission Publishes Draft Guidelines Classifying High-Risk AI Systems Under Article 6, May 2026

On May 19, 2026, the European Commission published draft guidelines on the classification of high-risk AI systems under Article 6 of Regulation (EU) 2024/1689 (EU AI Act), open for consultation until June 23, 2026. The guidelines interpret key classification concepts and provide worked examples across eight Annex III sectors. The Commission has also postponed Article 6(2) compliance from August 2026 to December 2027 and Article 6(1) from August 2027 to August 2028.

Connecticut Enacts Sweeping AI Law Covering Employment, Healthcare, and Online Safety in June 2026

Connecticut Governor Ned Lamont signed Senate Bill 5 on June 2, 2026, enacting the Connecticut Artificial Intelligence Responsibility and Transparency Act (CART Act, Public Act 26-15). The law creates disclosure obligations for employers using AI in hiring and layoff decisions, safety protocols for chatbot operators, and content-provenance requirements for large-scale generative AI systems. Compliance deadlines run from October 2026 through January 2028.

New Zealand Online Casino Gambling Regulations 2026 Released, Effective July 2026

New Zealand released the Online Casino Gambling Regulations 2026 in June 2026, made under the Online Casino Gambling Act 2026 (Public Act 2026 No 14). The prohibition on unlicensed online casino gambling applies from 1 July 2026. The Act establishes a three-stage licensing regime for up to 15 operators, administered by the Secretary for Internal Affairs, with age-verification, harm-minimisation, and problem-gambler exclusion obligations.

US Tax Court Holds Crypto Staking Rewards Are Gross Income at Receipt, June 2026

On June 4, 2026, the United States Tax Court issued T.C. Memo. 2026-46 in Paschall v. Commissioner, the first Tax Court decision on whether proof-of-stake staking rewards are taxable upon receipt. The court entered decision for the Commissioner of Internal Revenue, holding that ADA staking rewards credited to petitioners' eToro account constituted gross income under IRC Section 61 at receipt. The opinion is non-precedential but is the first judicial merits ruling on this question.

CFTC Issues Policy Statement and Approves First Onshore Bitcoin Perpetual Contract, May 2026

On May 29, 2026, the CFTC approved KalshiEX LLC's BTCPERP contract as the first bitcoin perpetual futures contract listed on a US-registered designated contract market and issued a Policy Statement establishing that perpetual crypto contracts require individual Commission approval under Regulation 40.3. The actions bring the dominant form of global crypto derivative trading into the US regulated perimeter for the first time.

Hong Kong SFC and FSTB Conclude VA Advisory and Management Consultation, 26 May 2026

The Securities and Futures Commission (SFC) and the Financial Services and the Treasury Bureau (FSTB) of Hong Kong published consultation conclusions on proposed licensing regimes for virtual asset advisory service providers and virtual asset management service providers on 26 May 2026. The regimes are modelled on existing Securities and Futures Ordinance regulated activities and form the final segment of Hong Kong's full virtual asset regulatory architecture under the SFC ASPIRe roadmap.

European Commission Opens Consultation on MiCA Review, Deadline 31 August 2026

The European Commission launched a two-track consultation on the functioning of Regulation (EU) 2023/1114 on markets in crypto-assets (MiCA) on 20 May 2026. The consultation is mandated by Articles 140 and 142 of MiCA and runs until 31 August 2026. Responses from CASPs, ART and EMT issuers, financial institutions, and technology providers will inform a Commission report that may be accompanied by a legislative proposal to amend MiCA.

President Trump Signs Executive Order on AI Innovation and Security, United States, 2 June 2026

On 2 June 2026, President Donald Trump signed Executive Order 2026-11415, Promoting Advanced Artificial Intelligence Innovation and Security, published in the Federal Register on 5 June 2026. The order directs federal agencies to modernize government information systems, protect American AI intellectual property from foreign adversaries, and cultivate national AI capabilities. It establishes voluntary cooperation with the private sector and imposes no direct compliance obligations on private AI developers.

EU Parliament and Council Reach Provisional Agreement on AI Act Simplification, 7 May 2026

The European Parliament and Council reached a provisional political agreement on 7 May 2026 to streamline Regulation 2024/1689 laying down harmonised rules on artificial intelligence. The agreement, part of the EU Omnibus VII simplification package, extends application deadlines for high-risk AI systems, broadens exemptions to small mid-cap companies, and bans AI systems that generate non-consensual intimate images. Formal adoption by both institutions is expected before 2 August 2026.

MAS and Industry Publish AI Risk Management Toolkit for Singapore Financial Sector, 2026

The Monetary Authority of Singapore concluded Project MindForge Phase 2 in early 2026, publishing an AI Risk Management Operationalisation Handbook developed with a consortium of 24 banks, insurers, and capital market firms. The handbook provides practical implementation guidance across traditional AI, generative AI, and agentic AI systems, and applies alongside the MAS Guidelines for Artificial Intelligence Risk Management to establish supervisory expectations for Singapore-regulated financial institutions.

House of Lords Committee Publishes Report on UK Stablecoin Regulation, 3 June 2026

On 3 June 2026, the House of Lords Financial Services Regulation Committee published 'Stablecoins: waiting for regulation,' assessing the Bank of England's and the Financial Conduct Authority's proposed regulatory regimes for stablecoins in the UK. The Committee broadly supports the proposals but recommends reconsideration of holding limits, the requirement for unremunerated backing assets, and the proposed restriction on commercial banks issuing fiat-backed stablecoins.

FCA and Bank of England Call for Input on UK Wholesale Market Tokenisation, May 2026

On 18 May 2026, the Financial Conduct Authority, the Bank of England, and the Prudential Regulation Authority published a joint call for input setting out a shared vision for the safe adoption of tokenisation in UK wholesale financial markets. The consultation covers tokenised bonds, equities, and fund units and closes 3 July 2026. Responses will inform a joint roadmap aligned with the Government's Wholesale Financial Markets Digital Strategy.

EU Commission Publishes Draft High-Risk AI Classification Guidelines Under AI Act, May 2026

On 19 May 2026, the European Commission published draft guidelines under Article 6(5) of the EU AI Act (Regulation 2024/1689) to help providers, deployers, and market surveillance authorities determine when an AI system qualifies as high-risk. The guidelines cover two classification routes: systems used as safety components in products subject to Annex I harmonisation legislation, and systems falling within the Annex III use-case list. A targeted consultation closes 23 June 2026.

U.S. Executive Order Establishes Voluntary Frontier AI Pre-Release Review, 2 June 2026

On 2 June 2026, President Trump signed the Executive Order 'Promoting Advanced Artificial Intelligence Innovation and Security,' directing federal agencies to develop benchmarks for assessing AI models' cyber capabilities, establish an AI cybersecurity clearinghouse, and strengthen government defenses against AI-enabled threats. The Order creates a voluntary program under which AI developers may submit frontier models for government review up to 30 days before releasing them to other trusted partners. No mandatory licensing, pre-clearance, or permitting requirement is created.

AI Governance Compliance Stack
Illia Prokopiev

AI Governance Compliance Stack

What compliance architecture should an organization implement to manage AI governance obligations under the EU AI Act, selected U.S. state AI laws, NIST AI RMF / NIST GenAI Profile, ISO/IEC 42001, vendor due diligence, system inventory, risk classification, and incident response?

Connecticut Senate Bill 5 Establishes AI Consumer Protections and Employment Obligations, May 2026

Connecticut Senate Bill 5, the C.A.R.T. Act, passed both chambers of the Connecticut General Assembly in May 2026 and awaits Governor Ned Lamont's signature. The bill requires operators of AI automated decision tools to disclose their use in employment, lending, and housing decisions, and mandates mental health crisis protocols for AI chatbot operators serving consumers.

FDIC Proposes BSA/AML Compliance Rules for Stablecoin Issuers Under the GENIUS Act, 2026

The FDIC Board approved two notices of proposed rulemaking in April 2026 implementing the Guiding and Establishing National Innovation for US Stablecoins (GENIUS) Act. One proposed rule imposes Bank Secrecy Act and sanctions compliance requirements on FDIC-supervised permitted payment stablecoin issuers. Comments on both proposals close 9 June 2026.

European Commission Opens Targeted Consultation on MiCA Review, Deadline 31 August 2026

On 20 May 2026, the European Commission launched a targeted consultation assessing whether the Markets in Crypto-Assets Regulation (MiCA) remains fit for purpose. The consultation covers decentralized finance, stablecoin scope, interplay with PSD3, cybersecurity, and cross-border equivalence for third-country crypto-asset service providers. Responses are due by 31 August 2026.

Trump Signs Executive Order on AI Security and Voluntary Pre-Release Review, 2 June 2026

On 2 June 2026, President Trump signed an Executive Order titled Promoting Advanced Artificial Intelligence Innovation and Security. The order directs federal agencies to harden government information systems against AI-enabled threats, establishes a voluntary pre-release review process for frontier AI models, and calls for inter-agency coordination to protect American AI intellectual property from adversarial exploitation.

FCA and Bank of England Publish Joint Vision on UK Wholesale Market Tokenisation, May 2026

On 18 May 2026, the Financial Conduct Authority and the Bank of England jointly published a call for input setting out their shared vision for tokenisation in UK wholesale financial markets. The paper commits the Bank to launching a live synchronisation service by 2028 and confirms tokenised equivalents of eligible assets may be used as central bank collateral. Feedback closes 3 July 2026.

Illia Prokopiev

Agentic AI Liability and Autonomous Decision-Making

When an agentic or autonomous AI system makes, recommends, ranks, screens, contracts, or otherwise materially influences a decision, who bears legal liability, and what legal duties govern autonomous decision-making?

SEC Proposes Token Taxonomy Clarifying Federal Securities Laws for Crypto Assets, March 2026

In March 2026, the SEC proposed an interpretive release (Release No. 33-11412, File No. S7-2026-09) establishing a token taxonomy and clarifying the application of federal securities laws to crypto assets. The taxonomy designates digital commodities, digital collectibles, digital tools, and qualifying payment stablecoins as generally outside the securities perimeter. Only tokenised traditional securities remain subject to registration and disclosure requirements.

UK HM Treasury Publishes Draft SI on Stablecoin Payment Services Exemption, April 2026

In April 2026, HM Treasury published a draft statutory instrument amending the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026. The draft SI proposes to exempt firms providing stablecoin payment services from the cryptoasset dealing and arranging authorisation requirements pending broader payment services reform, avoiding a dual-authorisation burden ahead of the October 2027 deadline.

European Commission Publishes Draft Guidelines on High-Risk AI Classification Under Article 6, 2026

The European Commission has published draft guidelines clarifying when AI systems qualify as high-risk under Article 6 of the EU AI Act (Regulation (EU) 2024/1689). The guidelines address two classification routes and provide practical examples of in-scope and out-of-scope AI systems. Public consultation closes 23 June 2026.

India Notifies Promotion and Regulation of Online Gaming Rules 2026, Effective 1 May 2026

India's Ministry of Electronics and Information Technology notified the Promotion and Regulation of Online Gaming Rules, 2026 on 22 April 2026, with effect from 1 May 2026. The rules establish the Online Gaming Authority of India under the Promotion and Regulation of Online Gaming Act, 2025, and require operators to register online money games before offering them to players.

EU Council and Parliament Agree to Simplify AI Act and Delay High-Risk Deadlines, May 2026

On 7 May 2026, the Council of the EU and European Parliament negotiators reached a provisional political agreement on the Digital Omnibus on AI Regulation. The agreement delays mandatory high-risk AI compliance dates to 2 December 2027 and 2 August 2028, extends simplified obligations to small mid-cap companies, and introduces a new ban on AI-generated non-consensual intimate imagery.

Privacy, GDPR, and Personal Data in AI Models

Privacy, GDPR, and Personal Data in AI Models

When does the GDPR treat data used in, generated by, or retained in AI models as “personal data,” what legal bases and obligations apply to model training and deployment, and what are the consequences if an AI model was developed using personal data unlawfully?

Native Tokenization of Equity
Illia Prokopiev

Native Tokenization of Equity

The working topic is whether a token or DLT ledger can be legally constitutive of equity ownership and transfer, rather than a mirror of an off-chain register, a custodial entitlement, or a synthetic exposure.

SEC Proposes Registered Offering Reform with Implications for Digital Asset Issuers, 19 May 2026

On 19 May 2026, the U.S. Securities and Exchange Commission proposed Rule 33-11418, amending the framework governing registered public securities offerings under the Securities Act of 1933. The proposal would expand Form S-3 access to significantly more issuers, extend shelf registration to nearly all public companies, and preempt state securities law for all registered offerings, with material implications for digital asset companies seeking to raise capital in U.S. registered offerings.

CFTC Charges Google Engineer with Insider Trading in Prediction Market Event Contracts, May 2026

The U.S. Commodity Futures Trading Commission filed a civil complaint against a Google software engineer, charging him with misappropriating confidential nonpublic data about Google's Year in Search list for 2025 to trade event contracts on Polymarket, a decentralised finance prediction market on the Polygon blockchain, in violation of the Commodity Exchange Act.

European Commission Opens Dual Consultation on MiCA Scope, Stablecoins and CASPs, 20 May 2026

On 20 May 2026, the European Commission's Directorate-General for Financial Stability, Financial Services and Capital Markets Union launched two simultaneous consultations reviewing Regulation (EU) 2023/1114 (MiCA): a public consultation for all stakeholders and a targeted technical consultation for industry, covering the regulation's scope, stablecoin treatment, and crypto-asset service provider obligations.

European Commission Publishes Draft Guidelines on High-Risk AI System Classification, 19 May 2026

The European Commission published draft guidelines on 19 May 2026 on classifying AI systems as high-risk under Article 6 of Regulation (EU) 2024/1689. The guidelines are open for targeted consultation until 23 June 2026. They are not legally binding but represent the Commission's interpretive position and will guide market surveillance authorities in enforcement.

EU Council and Parliament Agree to Delay High-Risk AI Compliance Deadlines, 7 May 2026

On 7 May 2026, the European Parliament and Council of the European Union reached a provisional political agreement under the Digital Omnibus package to amend Regulation (EU) 2024/1689 (the EU AI Act). The agreement postpones the application of high-risk AI obligations under Articles 6(1) and 6(2) and adds a new prohibition on AI-generated non-consensual intimate imagery. Formal adoption is expected before 2 August 2026.

Colorado Enacts Senate Bill 26-189 Replacing Colorado AI Act with ADMT Law, 14 May 2026

On 14 May 2026, Colorado Governor Jared Polis signed Senate Bill 26-189, repealing the 2024 Colorado AI Act and replacing it with the Colorado Automated Decision-Making Technology in Consequential Decisions Act. The new law takes effect 1 January 2027. It preserves consumer notice requirements but eliminates mandatory risk management program obligations and annual impact assessments.

NYDFS Issues Two Industry Letters on Frontier AI Cybersecurity Risks, 21 May 2026

On 21 May 2026, the New York Department of Financial Services issued two Industry Letters directed at entities regulated under 23 NYCRR Part 500. The first addresses heightened cybersecurity risks posed by frontier AI models. The second provides guidance on protective measures in an elevated threat environment. Neither letter imposes new legal requirements, but both signal NYDFS examination expectations for covered entities.

New Zealand Online Casino Gambling Act 2026 Enters Into Force, 1 May 2026

New Zealand's Online Casino Gambling Act 2026 received Royal Assent on 27 April 2026 and entered into force on 1 May 2026. The Act establishes a licensing regime for up to 15 online casino operators and prohibits new offshore providers from serving New Zealand customers. Existing offshore operators may continue under transitional arrangements until 1 December 2026.

UK Cryptoassets Regulations 2026 Set Full Regulatory Regime to Commence October 2027

The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, Statutory Instrument 2026 No. 102, designates specified cryptoasset activities as regulated activities under the Financial Services and Markets Act 2000, with the regime coming into force on 25 October 2027. Firms must apply to the FCA for authorisation from 30 September 2026, with the application window closing 28 February 2027. The regime covers stablecoin issuance, custody, trading platform operation, dealing, arranging, and staking.

UK Regulators Issue Joint Statement on Frontier AI Cyber Resilience, 15 May 2026

On 15 May 2026, the Financial Conduct Authority, Bank of England, and HM Treasury issued a joint statement identifying frontier AI models as a material cybersecurity threat requiring immediate action from regulated financial firms and financial market infrastructures. The statement does not introduce new rules but carries supervisory weight, placing frontier AI risk within existing operational resilience obligations and calling on boards to demonstrate active oversight.

NYDFS Issues Dual Industry Letters on Frontier AI Cybersecurity Risks, 21 May 2026

On 21 May 2026, the New York Department of Financial Services issued two coordinated Industry Letters under Acting Superintendent Kaitlin Asrow. The first identifies heightened cybersecurity risks from frontier AI models that amplify the speed, scale, and potency of attacks against regulated entities. The second provides prescriptive guidance on additional measures in a heightened threat environment, covering attack-surface reduction, threat detection, and resilience planning.

AUSTRAC Launches VASP Supervisory Campaigns as AML/CTF Reforms Take Effect, 2026

The Australian Transaction Reports and Analysis Centre has launched two targeted supervisory campaigns into the virtual assets sector as Australia's revised anti-money laundering and counter-terrorism financing legislation reshapes obligations for virtual asset service providers. Obligations for most newly classified VASPs took effect from 31 March 2026, with travel rule requirements commencing 1 July 2026. New VASPs must register with AUSTRAC by 29 July 2026.

DTCC Connects Tokenization Service to Stellar Public Blockchain, 27 May 2026

On 27 May 2026, the Depository Trust and Clearing Corporation announced its forthcoming DTC tokenization service will connect to the Stellar public blockchain, advancing a multi-chain settlement strategy for tokenized securities held in DTC custody. The service, authorized by SEC no-action letter in December 2025, targets initial tokenized security trades in July 2026 with a full commercial launch in October 2026. Over 50 financial firms are participating in development.

European Commission Opens Targeted Consultation on MiCA Review, 20 May 2026

On 20 May 2026, the European Commission launched a targeted consultation on the review of Regulation (EU) 2023/1114 on Markets in Crypto-Assets (MiCA). The consultation invites digital asset issuers, crypto-asset service providers, financial institutions, and industry bodies to assess whether MiCA's provisions remain fit for purpose following first-application experience since December 2024.

Missouri AG Sues CoinFlip Cryptocurrency ATM Network Over Consumer Protection Violations, 20 May 2026

On 20 May 2026, Missouri Attorney General Catherine Hanaway filed suit in the Circuit Court of Jasper County against GPD Holdings LLC, operating as CoinFlip, the self-described world's largest cryptocurrency ATM network by transaction volume. The petition alleges CoinFlip violated the Missouri Merchandising Practices Act by knowingly facilitating fraud through its 140-plus Missouri kiosks and charging excessive fees on affected transactions.

European Commission Publishes Draft Guidelines on High-Risk AI Classification Under AI Act, 19 May 2026

On 19 May 2026, the European Commission published draft guidelines on the classification of high-risk artificial intelligence systems under Article 6 of Regulation (EU) 2024/1689 (the AI Act). Open for targeted consultation until 23 June 2026, the guidelines aim to support uniform application of high-risk classification rules by providers, deployers, and market surveillance authorities across EU member states.

Colorado Governor Signs SB 26-189, Replacing 2024 AI Act Effective 1 January 2027

Colorado Governor Jared Polis signed Senate Bill 26-189 on 14 May 2026, repealing and replacing the 2024 Consumer Protections for Artificial Intelligence Act. The revised law narrows its predecessor's scope, replacing duties of care and risk management obligations with pre-use notice, post-adverse-outcome disclosure, and consumer rights tied to covered automated decision-making technology. The law takes effect 1 January 2027.

US Executive Order 14405 Directs Federal Regulators to Review Fintech and Digital Asset Frameworks, 19 May 2026

President Trump signed Executive Order 14405, "Integrating Financial Technology Innovation into Regulatory Frameworks," on 19 May 2026. The Order directs the SEC, CFTC, OCC, FDIC, CFPB, and NCUA to complete a 90-day review identifying regulations, guidance, and supervisory practices that impede fintech innovation, fintech-bank partnerships, and charter applications in digital assets. The review window closes around 17 August 2026.

European Commission Consults on Draft Guidelines for High-Risk AI Classification Under AI Act Article 6, Deadline 23 June 2026

The European Commission published draft guidelines on the classification of high-risk AI systems under Article 6 of Regulation (EU) 2024/1689 (the EU AI Act) and opened a targeted public consultation running to June 23, 2026 at 22:00 CET. The guidelines interpret Article 6's two classification routes and the self-assessment procedure allowing providers to conclude that certain Annex III systems pose no significant risk of harm.

Trump Signs Executive Order 14405 Directing Fintech and Crypto Regulatory Integration, 19 May 2026

President Donald Trump signed Executive Order 14405, 'Integrating Financial Technology Innovation into Regulatory Frameworks,' on May 19, 2026. The order directs the Treasury, SEC, CFTC, OCC, FDIC, NCUA, and CFPB to identify rules and sub-regulatory guidance impeding fintech and digital asset businesses, propose revisions or repeals, and report to the President within 180 days. It was published in the Federal Register on May 22, 2026 as document 2026-10399.

CFTC Division of Enforcement Issues New Cooperation Policy, 19 May 2026

The Commodity Futures Trading Commission's Division of Enforcement issued CFTC Staff Letter No. 26-15 on 19 May 2026, replacing all prior cooperation advisories. The policy establishes a structured path to full declination for entities that voluntarily self-report violations, provide full cooperation, effect timely remediation, and make full restitution. Penalty reductions of up to 75 percent are available for parties who cooperate but do not qualify for declination.

California Governor Newsom Signs AI Workforce Executive Order, 21 May 2026

California Governor Gavin Newsom signed an executive order on 21 May 2026 directing multiple state agencies to study and respond to artificial intelligence's impact on the workforce. The Labor and Workforce Development Agency must review WARN Act obligations, severance standards, and collective bargaining practices involving AI within six months. The Employment Development Department must document AI-related layoffs and publish a real-time sector-level employment impact dashboard.

California Governor Newsom Issues Executive Order N-6-26 on AI Workforce Disruption Assessment, 21 May 2026

California Governor Gavin Newsom signed Executive Order N-6-26 on May 21, 2026, directing state agencies to build monitoring and policy infrastructure for potential AI-driven labor market disruption. The order mandates deliverables within 180 days, including WARN Act revision recommendations, a sectoral workforce impact dashboard, and policy proposals on severance standards, transition insurance, and expanded training programs.

Colorado Replaces AI Act with SB26-189 on Automated Decision-Making, Effective 1 January 2027

Governor Jared Polis signed Senate Bill 26-189 on May 14, 2026, repealing and replacing Colorado's original Artificial Intelligence Act (SB24-205). The new law reorients compliance obligations around transparency and disclosure for deployers of automated decision-making technology used in consequential decisions affecting Colorado residents. Core requirements take effect January 1, 2027.

OCC Grants Augustus Bank Conditional Approval for AI-Native Stablecoin National Bank Charter

The Office of the Comptroller of the Currency issued Conditional Approval No. CA1358 on 11 May 2026 for Augustus Bank, N.A. to charter as a full-service US national bank. The institution is designed to operate as an AI-native clearing bank with a wholly-owned stablecoin subsidiary, targeting a Q3 2026 launch.

FCA, Bank of England and HM Treasury Set Frontier AI Supervisory Expectations, May 2026

On 15 May 2026, the Financial Conduct Authority, the Bank of England, and HM Treasury published a joint statement setting out supervisory expectations for regulated firms on cybersecurity and operational resilience risks posed by frontier AI models. Boards and senior management are expected to demonstrate active understanding of these risks.

Colorado Enacts SB 26-189 Replacing Prior AI Consumer Protections Law, Effective January 2027

Governor Jared Polis signed Colorado SB 26-189 on 14 May 2026, repealing and replacing Senate Bill 24-205, Colorado's prior AI consumer protections statute. The new law regulates automated decision-making technology in consequential decisions and takes effect 1 January 2027, giving companies a seven-month compliance window.

European Commission Publishes Draft High-Risk AI System Guidelines Under EU AI Act, May 2026

The European Commission published draft guidelines on 19 May 2026 clarifying which AI systems qualify as high-risk under Article 6 of Regulation (EU) 2024/1689. The guidelines set out practical examples and classification criteria, with a public consultation open until 23 June 2026.

FCA, Bank of England and HM Treasury Warn Firms on Frontier AI Cyber Risks, May 2026

On May 15, 2026, the FCA, Bank of England, and HM Treasury issued a joint statement identifying frontier AI cyber capabilities as an active systemic risk to financial services firms. The statement sets out supervisory expectations for governance, vulnerability management, automated defence deployment, and incident recovery under existing rules. No new regulations were issued; the authorities indicated that current obligations apply to frontier AI-driven threats immediately.

Colorado Enacts Automated Decision-Making Technology Law, Replacing 2024 AI Act, May 2026

Colorado Governor Jared Polis signed SB 26-189 into law on May 14, 2026, repealing and replacing the original Colorado AI Act (SB 24-205). The new law regulates automated decision-making technology in consequential decisions, requiring deployers to conduct impact assessments, disclose ADMT use to affected individuals, and provide opt-out rights. The Act takes effect July 1, 2026.

European Commission Publishes Draft High-Risk AI Classification Guidelines Under AI Act, May 2026

On May 19, 2026, the European Commission published draft guidelines interpreting Article 6 of Regulation (EU) 2024/1689 on classifying high-risk AI systems. The guidelines provide worked examples by Annex III sector and are open for targeted consultation until June 23, 2026. Though not legally binding, they will guide national market surveillance authorities and shape enforcement practice across EU member states.

OCC Grants Preliminary Conditional Approval to Augustus Bank for Stablecoin Charter, May 2026

The Office of the Comptroller of the Currency granted Augustus Bank, N.A. a preliminary conditional approval to charter a national bank with a stablecoin-issuing subsidiary in Dallas, Texas. The approval references the GENIUS Act (12 U.S.C. § 5901 et seq.) and attaches conditions on capital, governance, and stablecoin reserve management before the bank may open. The OCC retains the right to rescind the approval.

Senator Warren Challenges OCC Over National Trust Charters for Crypto Companies, May 2026

Senator Elizabeth Warren, Ranking Member of the Senate Banking Committee, sent a letter to OCC Comptroller Jonathan Gould in May 2026 challenging at least nine national trust company charters granted to crypto businesses. Warren argues the charters exceed OCC authority under 12 U.S.C. § 92a because the holders do not conduct fiduciary trust activities and instead operate as de facto banks outside standard bank safety requirements.

European Commission Publishes Draft AI Act Transparency Guidelines Under Article 50, May 2026

The European Commission published draft guidelines on May 7, 2026, on the implementation of transparency obligations under Article 50 of the EU AI Act. The draft sets out disclosure requirements for AI systems interacting with individuals and systems generating synthetic content. Obligations under Article 50 become applicable on August 2, 2026, and the consultation period closes June 3, 2026.

California DFPI Orders Hermes Bitcoin to Shut Down 42 Kiosks for DFAL Violations, May 2026

California's Department of Financial Protection and Innovation ordered Anh Management, LLC, operating as Hermes Bitcoin, to cease all digital financial asset kiosk operations in California by May 20, 2026. The settlement agreement resolves DFPI findings that Hermes Bitcoin violated the Digital Financial Assets Law across its 42 Southern California kiosk locations.

Colorado Governor Signs SB 26-189 Replacing Consumer AI Act with ADMT Rules, May 2026

Colorado Governor Jared Polis signed Senate Bill 26-189 into law on May 14, 2026. The Act repeals Senate Bill 24-205 from 2024 and establishes new obligations for developers and deployers of automated decision-making technology in consequential decisions, shifting from a broad algorithmic accountability regime to a targeted transparency and consumer rights framework.

UK Jurisdiction Taskforce Publishes Non-Binding Report on Control of Digital Assets, March 2026

The UK Jurisdiction Taskforce's Control Panel, led by Lord Justice Sir Antony Zacaroli, published its Report on Control of Digital Assets on March 19, 2026. The Report provides non-binding practical guidance on how legal and technical control arises in digital asset systems under English law, supporting the Property (Digital Assets etc) Act 2026.

European Commission Issues Draft Guidelines on High-Risk AI Classification Under Article 6

The European Commission published draft guidelines on the classification of high-risk AI systems under Article 6 of the EU AI Act, open for targeted consultation until June 23, 2026. The guidelines interpret the two-tier classification test and provide practical examples of systems that do and do not qualify as high-risk under Annex I and Annex III of the AI Act.

AI Training Data, Copyright, and Transparency: A Comparative Legal Analysis
Illia Prokopiev

AI Training Data, Copyright, and Transparency: A Comparative Legal Analysis

This analysis compares the U.S., California, EU, and U.K. positions and highlights the practical split.

British Virgin Islands Confirms OECD CARF Adoption with First Crypto-Asset Information Exchanges in 2028

The British Virgin Islands has committed to the OECD's Crypto-Asset Reporting Framework (CARF), with the first exchanges of crypto-asset information scheduled for 2028. BVI-based reporting Crypto-Asset Service Providers will collect transaction, identity, and tax residence data from 2027 onward. The BVI International Tax Authority is the competent authority. CRS 2.0 entered force in the BVI on 1 January 2026 and now includes crypto-assets and CBDCs within scope.

Trump Executive Order Integrates Fintech and Digital Assets Into Federal Payment Rails on 19 May 2026

President Donald Trump signed the Executive Order titled "Integrating Financial Technology Innovation Into Regulatory Frameworks" on 19 May 2026. The order directs federal banking regulators, including the Federal Reserve, to reconsider barriers that limit fintech and digital asset firms from obtaining bank charters, federal payment account access, and regulated banking partnerships. Regulators must report within 90 days. The Federal Reserve must complete a Reserve Bank account evaluation within 120 days.

APRA and ASIC Issue Joint Industry Letters on AI Risk and Cyber Resilience, April and May 2026

The Australian Prudential Regulation Authority published an open letter to all regulated entities on 30 April 2026 setting expectations for governance of AI and AI agents. The Australian Securities and Investments Commission followed with an 8 May 2026 letter to licensees calling for urgent action on cyber resilience against AI-enabled threats. Both regulators warn that existing prudential and operational risk standards already cover AI use and that supervisory action will follow identified gaps.

UK Jurisdiction Taskforce Publishes Non-Binding Report on Control of Digital Assets, 19 March 2026

The UK Jurisdiction Taskforce (UKJT), chaired by the Master of the Rolls Sir Geoffrey Vos, published its Report on Control of Digital Assets on 19 March 2026. The Report sets out non-binding guidance on how factual control of digital assets operates and how that control supports legal analysis of ownership and proprietary interests under English law. It follows the Law Commission's Final Report on Digital Assets and supports the developing common law of digital asset property.

California DFPI Orders Hermes Bitcoin to Cease Crypto Kiosk Operations Under DFAL, 18 May 2026

The California Department of Financial Protection and Innovation announced a consent order on 18 May 2026 requiring Hermes Bitcoin, the operator of 42 crypto kiosks across Southern California, to cease all digital financial asset business in the state by 20 May 2026. The DFPI alleged violations of the Digital Financial Assets Law (DFAL), the California Consumer Financial Protection Law, and federal anti-money laundering rules. Restitution totals $174,874.28 with a $1 million suspended administrative penalty.

 High-Risk AI Under the EU AI Act
Illia Prokopiev

High-Risk AI Under the EU AI Act

How should an organization determine whether an AI system is classified as high-risk under the EU AI Act, and what implementation obligations follow from that classification?

Matter-route inference: focus areas as retrieval constraints for official sources
Illia Prokopiev

Matter-route inference: focus areas as retrieval constraints for official sources

A focus area should not be a label attached to a page diff; it should be a matter route that binds official source, source class, change unit, user scope, and decision record.

From public URL to official record: source-route inference in Horizon
Illia Prokopiev

From public URL to official record: source-route inference in Horizon

Horizon treats the URL as an observation, then tests which official route gives the cleanest record, the safest fetch path, and the strongest proof of change.

China Issues Interim Measures on Anthropomorphic AI Interaction Services, Effective 15 July 2026

On 10 April 2026 the Cyberspace Administration of China issued the Interim Measures for the Administration of Anthropomorphic AI Interaction Services together with the National Development and Reform Commission, the Ministry of Industry and Information Technology, the Ministry of Public Security, and the State Administration for Market Regulation. The Measures regulate virtual companions, AI chatbots, and emotionally responsive digital assistants. The Measures take effect on 15 July 2026.

FDIC Approves Notice of Proposed Rulemaking on Payment Stablecoins Under GENIUS Act, 7 April 2026

The Federal Deposit Insurance Corporation approved a Notice of Proposed Rulemaking on 7 April 2026 implementing the GENIUS Act for payment stablecoin issuers. The proposal sets a two-business-day redemption obligation, custodial and safekeeping duties, reserve-asset rules, and clarifies the treatment of tokenized deposits. Reserves backing a payment stablecoin do not pass through deposit insurance to holders. Comments close 60 days after Federal Register publication.

Georgia Enacts SB 540 Conversational AI Safety Act, Effective 1 July 2027

Georgia Governor Brian Kemp signed Senate Bill 540 in spring 2026, enacting the state's first dedicated AI companion chatbot statute. The Act takes effect on 1 July 2027. Operators must provide parental controls, age assurance for sexually explicit features, and privacy tools to minor users. The Attorney General may bring civil enforcement actions with penalties of up to 10,000 dollars per knowing violation, plus compensatory damages and attorneys' fees.

Ireland Gambling Regulatory Authority Begins Issuing Remote Betting Licences from 1 July 2026

The Gambling Regulatory Authority of Ireland opened B2C betting licence applications through its online portal on 9 February 2026 and will issue the first remote betting licences from 1 July 2026. In-person operators transition off legacy Revenue Commissioner permissions by 1 December 2026. The Authority may impose fines of up to 20 million euros or 10 percent of annual turnover under the Gambling Regulation Act 2024.

European Commission Opens Consultation on Draft High-Risk AI Classification Guidelines, 19 May 2026

The European Commission published draft Guidelines on 19 May 2026 to clarify when an AI system falls into the high-risk category under the EU AI Act. Three documents cover Article 6 in general, the Annex I product-safety route, and the Annex III use-case route. The Commission accepts feedback from providers, deployers, and market surveillance authorities until 23 June 2026.

MiCA Goes Under Review: What's On the Table, and What to Do Before 31 August

MiCA Goes Under Review: What's On the Table, and What to Do Before 31 August

On 20 May 2026, the European Commission launched two consultations on the functioning of MiCA — a short public one and a 65-question targeted one for industry, supervisors and central banks — both closing 31 August 2026. The responses will feed the Article 140 and 142 review reports and likely a 'MiCA 2' legislative proposal.

UK Bar Standards Board publishes guidance on barrister use of AI, 18 May 2026

On 18 May 2026, the Bar Standards Board published Guidance on the Use of Artificial Intelligence and Other Technologies. The guidance applies existing BSB Handbook duties to AI use by barristers in England and Wales. It warns against free generative AI tools whose terms allow provider retention of input data, and clarifies when disclosure of AI use is required to clients, courts and the regulator.

Supreme Court of Victoria issues AI Practice Note SC Gen 25, 14 May 2026

On 14 May 2026, the Supreme Court of Victoria issued Practice Note SC Gen 25 on the use of artificial intelligence by court users, replacing the May 2024 Guidelines for Litigants. The Practice Note requires meaningful human verification of AI output, identification of AI-generated portions of court documents and special caution with affidavits and witness statements.

BoE, FCA and HM Treasury issue joint frontier AI cyber statement, 15 May 2026

On 15 May 2026, the Bank of England, the Financial Conduct Authority and HM Treasury published a joint statement on frontier AI models and cyber resilience. The authorities say current frontier models already exceed skilled human attackers in speed, scale and cost, and direct regulated firms to lift board oversight, vulnerability management, third-party controls, protective measures and recovery capability.

Central Bank of Ireland publishes Notice of Intention on crypto MCC requirements, April 2026

On 13 April 2026, the Central Bank of Ireland published a Notice of Intention to amend the Minimum Competency Code 2017 to cover staff of Crypto-Asset Service Providers. The proposed Addendum adds crypto-assets as Category 9 to MCC Appendix 1 and aligns with the application date of the ESMA MiCA Guidelines on knowledge and competence on 28 July 2026.

ADGM proposes crypto mining commercial licensing in Discussion Paper No. 1 of 2026

In January 2026, the Abu Dhabi Global Market Registration Authority issued Discussion Paper No. 1 of 2026 proposing a commercial licensing regime for crypto mining activities in or from ADGM. The proposal treats crypto mining as a licensable commercial activity rather than a regulated financial service. Consultation responses were accepted until 20 March 2026.

Colorado Governor Polis Signs SB 26-189 Replacing the Colorado AI Act on 14 May 2026

Colorado Governor Jared Polis signed SB 26-189 on 14 May 2026. The act repeals and replaces Colorado's 2024 artificial intelligence statute. It removes the prior duty of care, risk management programs and impact assessments. New disclosure, notice, and human-review obligations bind developers and deployers of automated decision-making technology used in consequential decisions. The Attorney General enforces violations as deceptive trade practices under the Colorado Consumer Protection Act. The law takes effect 1 January 2027.

US Senate Banking Committee Advances CLARITY Act in 15-9 Bipartisan Vote on 14 May 2026

The United States Senate Committee on Banking, Housing, and Urban Affairs voted 15-9 to advance H.R. 3633, the Digital Asset Market CLARITY Act of 2025, on 14 May 2026. Two Democratic senators joined committee Republicans. The bill assigns regulatory lines between the Securities and Exchange Commission and the Commodity Futures Trading Commission for digital asset spot markets. The measure now moves to a full Senate vote.

South Korea National Assembly Passes FETA Amendment on Virtual Asset Transfers, 7 May 2026

The Republic of Korea's National Assembly passed a Partial Amendment to the Foreign Exchange Transactions Act at plenary session on 7 May 2026. The amendment creates a new virtual asset transfer business category. Operators that send or receive digital assets across the Korean border must register with the Minister of Economy and Finance. Unregistered operations face up to three years in prison. The amendment takes effect six months after promulgation.

European Commission Publishes Draft Article 50 AI Act Transparency Guidelines on 8 May 2026

The European Commission published draft guidelines on the transparency obligations under Article 50 of Regulation (EU) 2024/1689, the AI Act, on 8 May 2026. The guidelines cover provider duties for AI systems that interact with people, generate synthetic content, perform emotion recognition or biometric categorisation, and produce deepfakes. A targeted consultation runs until 3 June 2026. The Article 50 obligations apply from 2 August 2026.

Connecticut Passes SB 5, the AI Responsibility and Transparency Act, on 11 May 2026

The Connecticut General Assembly passed Senate Bill 5, now branded the Artificial Intelligence Responsibility and Transparency Act, on 11 May 2026. The act binds developers and deployers of automated employment-related decision technology, layers on whistleblower protections for frontier model staff, and adds AI disclosures to WARN notices filed with the Department of Labor. Governor Ned Lamont is expected to sign. Most provisions take effect from 1 October 2026, with interactive disclosure rules following on 1 October 2027.

Prediction Markets Are Becoming the Next Major Federalism Fight
Illia Prokopiev

Prediction Markets Are Becoming the Next Major Federalism Fight

Prediction markets are becoming a U.S. federalism fight between CFTC-regulated derivatives markets and state gambling regulators. Their likely legal future is a category-based regime shaped by preemption, product design, and market-integrity controls.

Minnesota enacts SF 3868 prohibiting virtual currency kiosks, 5 May 2026

Governor Tim Walz signed Minnesota Senate File 3868 into law on 5 May 2026. The Act prohibits virtual currency kiosks statewide. The prohibition takes effect 1 August 2026. Operators must remove kiosks from any location accessible or visible to the public by 31 December 2026. Minnesota joins Indiana and Tennessee as the third US state to prohibit crypto kiosks.

APRA letter to industry on AI risk management and governance, 30 April 2026

On 30 April 2026 the Australian Prudential Regulation Authority issued a letter to all regulated entities setting expectations on AI risk management. The letter follows a targeted thematic review of selected large banks, insurers, and superannuation trustees in late 2025. APRA names four weak areas: governance, cyber security, supplier risk, and assurance. Where entities fail, APRA will escalate to supervisory and enforcement action.

EU Parliament and Council reach Digital Omnibus deal on AI Act, 7 May 2026

On 7 May 2026 the European Parliament and the Council of the EU reached a provisional agreement on the Digital Omnibus on AI. The deal postpones the high-risk AI application dates, brings the transparency and watermarking compliance date forward to 2 December 2026, adds a new prohibition on AI generated CSAM and non-consensual intimate content, and clarifies AI Office competence over general-purpose AI systems.

Connecticut enacts Public Act 26-15 regulating AI in employment, May 2026

On 11 May 2026 the Connecticut General Assembly passed Substitute Senate Bill 5. Governor Ned Lamont signed it as Public Act 26-15. The Act imposes deployer and developer duties for AI tools used in employment decisions, codifies that automated decision-making is no defense to discrimination claims, and adds labor notice obligations for AI-driven layoffs. Employment rules phase in from 1 October 2026.

SEC and CFTC sign coordination MOU and joint crypto interpretation, March 2026

On 11 March 2026 SEC Chairman Paul Atkins and CFTC Chairman Michael Selig signed a Memorandum of Understanding for coordinated digital asset oversight. On 17 March 2026 the two agencies jointly issued an interpretation on how the federal securities laws apply to crypto assets and crypto transactions. The MOU supersedes the agencies' 2018 MOU and sets six core areas for harmonised rulemaking.

Senate Banking Committee advances Digital Asset Market CLARITY Act, 14 May 2026

On 14 May 2026 the United States Senate Committee on Banking, Housing, and Urban Affairs voted 15 to 9 to advance the Digital Asset Market CLARITY Act. The bill divides supervisory authority over digital assets between the Securities and Exchange Commission and the Commodity Futures Trading Commission, addresses spot market trading, and creates registration categories for digital commodity exchanges, brokers, and dealers.

Colorado General Assembly passes SB 26-189 rewriting its AI consumer protection law, May 2026

The Colorado General Assembly passed Senate Bill 26-189, repealing and replacing the 2024 consumer artificial intelligence statute. The new text governs covered automated decision-making technology used in employment, housing, lending, insurance, healthcare, education, and essential government services. Obligations begin 1 January 2027 and are enforced by the Colorado Attorney General under the Colorado Consumer Protection Act.

Australian Government releases formal response to online gambling reform inquiry, 12 May 2026

On 12 May 2026 the Australian Government released its formal response to the House of Representatives Standing Committee on Social Policy and Legal Affairs report titled You win some, you lose more. The package restricts wagering advertising during live sport, strengthens BetStop, addresses online lottery products, harmonises match-fixing offences, and commits AU$112.7 million over five years to gambling harm reduction. Most reforms commence 1 January 2027.

Hong Kong SFC permits secondary trading of tokenised authorised investment products, April 2026

The Securities and Futures Commission of Hong Kong issued two circulars on 20 April 2026: one revising guidance on the tokenisation of SFC-authorised investment products and one opening secondary trading of those tokenised products on SFC-licensed virtual asset trading platforms. Settlement may use regulated stablecoins issued under the Stablecoins Ordinance or tokenised deposits, with round-the-clock trading permitted.

EU Council and Parliament agree to simplify AI Act, extend high-risk deadlines, 7 May 2026

On 7 May 2026 the Council and Parliament reached a provisional agreement on the Commission's Digital Omnibus on AI. High-risk obligations under the AI Act will apply from 2 December 2027 for biometrics, critical infrastructure, employment, migration, and education systems, and from 2 August 2028 for AI integrated into regulated products. The grace period for synthetic-content transparency drops from six months to three.

Indonesia's MoF Regulation 108/2025 Activates Crypto-Asset Tax Reporting from 2026

Indonesia's MoF Regulation 108/2025 Activates Crypto-Asset Tax Reporting from 2026

Indonesia's Ministry of Finance issued Regulation No. 108 of 2025 (MoF 108) implementing the Crypto-Asset Reporting Framework. The rule sets statutory reporting duties for Crypto Asset Service Providers and brings payment service providers and licensed e-wallet operators under the financial information reporting scheme. First reporting covers the 2026 calendar year, due to the Directorate General of Taxes by 30 April 2027.

Colorado Legislature Passes SB 189 Repealing and Replacing the Colorado AI Act, 12 May 2026

Colorado Legislature Passes SB 189 Repealing and Replacing the Colorado AI Act, 12 May 2026

On 12 May 2026, the Colorado General Assembly passed SB 189, which repeals the Colorado Artificial Intelligence Act (SB 24-205) and replaces it with a disclosure-focused statute covering automated decision-making technology. The bill drops the duty of care, risk management programmes, and impact assessment duties. Governor Polis is expected to sign. The new statute takes effect on 1 January 2027.

Cayman Islands Brings Tokenised Funds Acts into Force, 24 March 2026

Cayman Islands Brings Tokenised Funds Acts into Force, 24 March 2026

The Cayman Islands' Mutual Funds (Amendment) Act, 2026 and Private Funds (Amendment) Act, 2026 came into force on 24 March 2026. The Acts add statutory definitions and operating requirements for tokenised mutual funds and tokenised private funds. The Cayman Islands Monetary Authority (CIMA) supervises tokenised vehicles under the same regime that applies to traditional funds.

EU Council and Parliament Reach Provisional Agreement on AI Act Digital Omnibus, 7 May 2026

On 7 May 2026, the Council of the European Union and the European Parliament agreed provisional amendments to Regulation (EU) 2024/1689 (the AI Act). The deal postpones high-risk AI compliance dates, defers watermarking duties to December 2026, and adds a prohibition on non-consensual intimate imagery generators. Formal adoption is pending.

European Commission Publishes Draft AI Act Article 50 Transparency Guidelines, 8 May 2026

On 8 May 2026, the European Commission published draft Guidelines on transparency obligations under Article 50 of Regulation (EU) 2024/1689 (the AI Act) and opened a public consultation. The draft clarifies disclosure duties for chatbot operators, deepfake creators, emotion-recognition system deployers, and synthetic content producers. Comments close on 3 June 2026.

Pennsylvania sues Character.AI over chatbot impersonation of licensed psychiatrist

On 5 May 2026 the Pennsylvania Department of State filed suit against Character Technologies, Inc., alleging that AI chatbots on its platform engaged in the unauthorized practice of medicine. State investigators found a chatbot named Emilie offered mental health diagnoses, claimed Pennsylvania licensure with a fake licence number, and stated it could prescribe medication. The Commonwealth seeks a preliminary injunction.

UK ICO opens consultation on automated decision-making after Data (Use and Access) Act

The Information Commissioner's Office launched a consultation on draft guidance for solely automated decision-making under the Data (Use and Access) Act 2025. The Draft Guidance is the ICO's first detailed reading of how the DUAA changes Article 22 UK GDPR. The consultation closes on 29 May 2026. A statutory code of practice on AI and ADM is expected later in 2026.

FinCEN and OFAC propose AML, CFT and sanctions rules for stablecoin issuers

On 8 April 2026 the US Treasury's FinCEN and OFAC issued a joint Notice of Proposed Rulemaking implementing AML, countering the financing of terrorism and sanctions compliance obligations for permitted payment stablecoin issuers under the GENIUS Act. The Proposed Rule treats issuers as financial institutions under the Bank Secrecy Act. Comments are due 9 June 2026. Final rules would take effect twelve months after issuance.

EU lawmakers reach political agreement to delay AI Act high-risk obligations

On 7 May 2026 the Council of the EU and the European Parliament reached political agreement on the Digital Omnibus on AI. Annex III high-risk obligations are pushed to 2 December 2027. The Article 50 transparency grace period for AI-generated content shrinks to three months ending 2 December 2026. Member states have until 2 August 2027 to set up regulatory sandboxes.

India's Promotion and Regulation of Online Gaming Act 2025 Took Effect on 1 May 2026

India's Promotion and Regulation of Online Gaming Act, 2025 came into force on 1 May 2026. The Ministry of Electronics and Information Technology notified the Promotion and Regulation of Online Gaming Rules, 2026 on 22 April 2026. The Act bans online money games of skill, chance, and mixed formats. The Act recognises e-Sports as legitimate competitive sport. Operators serving Indian users must withdraw real-money offerings or face penalties.

Virginia, Kentucky, and Wisconsin Enact Virtual Currency Kiosk Licensing Laws

Three US states enacted virtual currency kiosk laws in April 2026. Virginia House Bill 665, Kentucky Senate Bill 189, and 2025 Wisconsin Act 226 each impose licensing duties on kiosk operators. The laws layer in transaction limits, customer disclosures, and fraud protections aimed at scams targeting older adults. Effective dates and limit thresholds differ across the three regimes. Operators with multistate footprints must reconcile diverging compliance calendars.

Federal Court Pauses Enforcement of Colorado AI Act on April 27, 2026

On 27 April 2026, Magistrate Judge Cyrus Y. Chung of the U.S. District Court for the District of Colorado paused enforcement of the Colorado Artificial Intelligence Act, Senate Bill 24-205. The order followed a suit filed by xAI Corp. seeking a preliminary injunction. Attorney General Phil Weiser cannot pursue alleged violations of the 2024 statute within 14 days of the court ruling on that motion. The statute's 30 June 2026 implementation date remains scheduled.

New York AG Secures $5 Million Settlement from Uphold Over CredEarn Yield Product

On 29 April 2026, New York Attorney General Letitia James announced a settlement with Uphold HQ Inc. The crypto platform must pay over $5 million to investors who lost money in CredEarn, the yield product issued by Cred LLC. Uphold must also register as a broker with the Office of the Attorney General and adopt new third-party diligence requirements. The action rests on findings that Uphold misleadingly promoted CredEarn before Cred collapsed in 2020.

Australia: 30 June 2026 deadline for digital asset firms to apply for an AFS licence

ASIC has set 30 June 2026 as the cut-off for digital asset financial service providers in Australia to apply for an Australian Financial Services licence, or risk operating in breach of the law.

Federal court pauses enforcement of the Colorado AI Act

A federal court has stayed enforcement of Colorado's SB 24-205 weeks before its 30 June 2026 effective date, leaving one of the country's most far reaching state AI laws on hold.

South Africa's prediction markets sit in a regulatory grey zone

An ENS analysis maps how prediction market contracts in South Africa cut across crypto regulation, exchange control and the law of derivatives, exposing a gap that regulators have yet to close.

FCA Publishes Policy Statement PS26/7 on Fund Tokenisation via DLT, United Kingdom, April 2026

The Financial Conduct Authority (FCA) published Policy Statement PS26/7: Progressing Fund Tokenisation on 30 April 2026, along with final rules amending the FCA Handbook. PS26/7 sets out guidance for asset managers on how to use distributed ledger technology (DLT) within the FCA's existing rules when tokenising funds, and introduces an optional Direct to Fund (D2F) dealing model. The policy statement and rules are operative with immediate effect upon publication. The controlling authority for

FCA Opens Pre-Application Support for UK Cryptoasset Authorisation, PASS from 11 May 2026

The Financial Conduct Authority (FCA) announced on 30 April 2026 that cryptoasset firms preparing for the new Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (the Crypto Regime) may request pre-application meetings via its Pre-Application Support Service (PASS) starting 11 May 2026. Pre-application meetings are free of charge and give firms the opportunity to discuss their regulatory plans and ask questions before submitting a formal authorisation application or

India Notifies Promotion and Regulation of Online Gaming Rules 2026, Effective 1 May 2026

India's Ministry of Electronics and Information Technology (MEITY) notified the Promotion and Regulation of Online Gaming Rules, 2026 (the Rules) on 22 April 2026, pursuant to the Promotion and Regulation of Online Gaming Act, 2025 (the Act). The Rules took effect from 1 May 2026. The Act was enacted by Parliament in August 2025 and replaced, to the extent of conflict, state-specific gambling legislation and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code)

UK Supreme Court Overrules Aerotel Test for AI Patent Eligibility in [2026] UKSC 3

The Supreme Court of the United Kingdom delivered judgment in Emotional Perception AI Limited (Appellant) v Comptroller General of Patents, Designs and Trade Marks (Respondent) [2026] UKSC 3 on 11 February 2026. The Court allowed the appeal unanimously, set aside the UKIPO's decision refusing the patent application, and remitted the matter to the UKIPO for assessment of novelty and inventive step. The decision has immediate operative effect and withdraws the UKIPO's 30 January 2025 guidelines

MAS Consults on Prudential Treatment of Cryptoassets on Permissionless Blockchains, Singapore, April 2026

The Monetary Authority of Singapore (MAS) published Consultation Paper P009-2026 on 17 April 2026, proposing a framework for the prudential treatment of cryptoassets held on permissionless blockchains. The consultation is open until 18 May 2026 at 11:59 PM. The paper addresses the classification of permissionless-blockchain cryptoassets for capital adequacy, credit risk, and liquidity risk purposes under Singapore's banking and financial institution regulations. MAS proposes to allow banks to

Australia Enacts Corporations Amendment (Digital Assets Framework) Act 2026, ASIC Issues Implementation Roadmap

The Corporations Amendment (Digital Assets Framework) Act 2026 (the DAF Act) passed the Australian Parliament on 1 April 2026, received Royal Assent on 8 April 2026, and will commence on 9 April 2027. On 20 April 2026, the Australian Securities and Investments Commission (ASIC) published its implementation roadmap setting out the regulatory guidance and operational standards it will develop over the 18-month transition period. The DAF Act and the ASIC roadmap are operative in the preparatory

UK FCA Applies Existing Regulatory Rules to Artificial Intelligence in Financial Services, 2024

The UK Financial Conduct Authority (FCA) published its formal approach to artificial intelligence in financial services in 2024, declaring that it would not introduce a bespoke AI-specific rulebook. The approach is operative: the FCA applies its existing Principles for Businesses, Consumer Duty, operational resilience standards, and Senior Managers and Certification Regime (SM&CR) accountability rules to AI systems deployed by regulated firms. The FCA simultaneously launched an AI Lab to

California Governor Newsom Issues Executive Order N-5-26 on AI Procurement Standards, March 2026

California Governor Gavin Newsom issued Executive Order N-5-26 on 30 March 2026. The order is in effect immediately upon issuance and directs the California Government Operations Agency (GovOps) to develop a plan for new state contracting processes and best practices for AI companies seeking state contracts. The order is at the executive direction stage: GovOps must produce the procurement plan within a specified period, and no statutory changes are required. The California Department of

EU DAC8 Directive Mandates Crypto-Asset Reporting by Member State Tax Authorities from 2026

Council Directive (EU) 2023/2226 of 17 October 2023, known as DAC8, entered into force on 12 December 2023 and amended Directive 2011/16/EU on administrative cooperation in the field of taxation. Member States must transpose DAC8 into national law by 31 December 2025, with the reporting obligations applying to reportable transactions completed from 1 January 2026 onward. DAC8 is fully operative as of the 2026 reporting year, with the first automatic exchange of information between tax

US FDIC Approves Proposed Rule Implementing GENIUS Act for Payment Stablecoins, April 2026

On 7 April 2026, the Federal Deposit Insurance Corporation (FDIC) Board of Directors voted at an open board meeting to approve a notice of proposed rulemaking (NPR) to implement the Guiding and Establishing National Innovation for U.S. Stablecoins (GENIUS) Act. The proposed rule is at the notice-and-comment stage and will be published in the Federal Register, with public comments accepted for 60 days following publication. The proposed rule would apply to FDIC-supervised permitted payment

Colorado AI Act SB24-205 Takes Effect February 2026 as Enforcement Delayed Pending Rulemaking

Colorado Senate Bill 24-205, the Colorado Artificial Intelligence Act (the "AI Act"), entered into force on 1 February 2026 pursuant to its statutory effective date following enactment by Governor Jared Polis on 17 May 2024. The law requires developers and deployers of high-risk artificial intelligence systems to use reasonable care to protect consumers from known or reasonably foreseeable risks of algorithmic discrimination. The Colorado Attorney General stated in a court filing that the

UK High Court Continues Cryptoasset Freezing Injunction Against Unknown Persons, January 2026

On 23 January 2026, Mr Justice Waksman of the Business and Property Courts of England and Wales (Commercial Court) handed down judgment in Smithers & Anor v Persons Unknown Category 1 & Ors [2026] EWHC 207 (Comm), continuing a freezing injunction over cryptocurrencies originally granted on 13 November 2025. The claim arises from the alleged wrongful removal of cryptocurrencies held by the claimants, who were deceived into parting with the assets by unnamed primary respondents. The judgment

Ireland Court of Appeal Sets AI Disclosure Rules for Litigation Parties, March 2026

On 26 March 2026, the Court of Appeal of Ireland handed down judgment in Guerin v O'Doherty [2026] IECA 48, in which the President of the Court, Ms Justice Costello, set out guidelines on the use of artificial intelligence by parties in litigation. The judgment addresses the procedural obligations arising when AI tools assist in preparing written submissions and marks the first time an Irish appellate court has issued structured AI-use guidelines binding on parties appearing before it. The

UK Automated Decision-Making Rules Under Data (Use and Access) Act 2025 Enter Force, February 2026

The Data (Use and Access) Act 2025 (Commencement No. 6 and Transitional and Saving Provisions) Regulations 2026, S.I. 2026/82, brought section 80 of the Data (Use and Access) Act 2025 into force on 5 February 2026. Section 80 replaces Article 22 of the UK General Data Protection Regulation with a new four-article automated decision-making structure. The commencement is at the final, operative stage. The controlling authority is section 80 of the Data (Use and Access) Act 2025 (c. 18), which

UK Stablecoin Payments: HM Treasury Publishes Draft Amending SI to Cryptoassets Regulations, April 2026

On 21 April 2026, HM Treasury published a draft statutory instrument (SI) and accompanying policy note proposing amendments to the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026. The draft SI is at the consultation stage; Treasury is inviting written responses from industry participants until close of business on 22 May 2026. No provisions are yet in force. The controlling authority is the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, made

CSA Launches Project Tokenization to Examine Distributed Ledger Technology in Canadian Capital Markets, March 2026

On March 31, 2026, the Canadian Securities Administrators (CSA) announced the launch of Project Tokenization, a formal initiative within the CSA Collaboratory, to examine how distributed ledger technology (DLT) intersects with Canada's existing securities laws. The initiative is in the active engagement phase. The CSA invited a broad range of market participants to participate in regulatory workshops, with the first workshop scheduled in Calgary on April 9, 2026, and a second in Toronto on

FDA and EMA Issue Joint Guiding Principles of Good AI Practice in Drug Development, January 2026

In January 2026, the U.S. Food and Drug Administration (FDA), through its Center for Drug Evaluation and Research (CDER) and Center for Biologics Evaluation and Research (CBER), jointly published with the European Medicines Agency (EMA) a set of ten guiding principles for the use of artificial intelligence (AI) in drug and biological product development. The document is final and published; it carries no binding legal force as a regulation but constitutes authoritative guidance from two of

CSA and CIRO Issue Guidance on Prediction Market Regulation in Canada, April 2026

On April 2, 2026, the Canadian Securities Administrators (CSA) and the Canadian Investment Regulatory Organization (CIRO) jointly issued a public notice reminding industry participants and investors of the existing regulatory requirements that govern prediction markets and event contracts in Canada. The notice is at the final, published stage and carries immediate compliance effect across all CSA jurisdictions. The controlling authority is the securities and derivatives legislation applicable

UK FCA Publishes CP26/13 Cryptoasset Perimeter Guidance Consultation, April 2026

The Financial Conduct Authority (FCA) published Consultation Paper CP26/13 ("Cryptoasset Perimeter Guidance") in April 2026, seeking public comment on draft guidance that defines which cryptoasset activities will require FCA authorisation under the new UK regulatory regime. The consultation is at the open consultation stage, with responses due by 3 June 2026. The FCA plans to publish final perimeter guidance in autumn 2026 and final rules in policy statements in summer 2026. The controlling

UK ICO Publishes Report and Draft Guidance on AI and Automated Decision-Making in Recruitment, March 2026

On 31 March 2026, the Information Commissioner's Office (ICO) published a report and draft guidance on automated decision-making (ADM) in recruitment. The ICO engaged more than thirty employers and issued written notices to sixteen organisations using ADM in hiring. Those sixteen organisations committed to implementing recommended improvements. The report and draft guidance address the full lifecycle of AI-driven recruitment tools, from CV screening to scoring of online assessments. The

Licentium: Applied Legal Research for Crypto and AI Products

Licentium is a legal-tech research and execution team for crypto, digital-asset, and AI products. We help teams classify their product, choose the right licence path, prepare filing materials, and keep operations aligned with public rules after launch.

Tokenization of Real-World Assets: Legal Challenges and Considerations

Tokenising real-world assets sits at the intersection of securities law, custody, AML, and property law. A walk-through of the technical process, the legal challenges, and the use cases driving adoption.

Understanding Utility Tokens under MiCA: Classification, Requirements, and Issuers' Obligations

MiCA defines utility tokens narrowly. This guide explains where utility tokens sit in the MiCA classification, what disclosures issuers must make, and which exemptions apply.

NFTs and Intellectual Property: A Comprehensive Legal Guide for Creators and Investors

How copyright, fair use, and licensing apply to NFTs. A practical guide for creators and investors on what they actually own when they mint or buy a non-fungible token.

A Comprehensive Guide to DAO Governance: Key Principles and Best Practices

The principles, frameworks, and best practices behind effective DAO governance. From decentralisation and transparency to multi-sig wallets and dispute resolution, with notes on jurisdictional risk.

Understanding DAO Voting Mechanisms: Challenges, Ideas, and Risks

One token one vote, quadratic, conviction, holographic. The voting mechanisms DAOs actually use, what each one optimises for, and the legal risks each one creates.

Ready to launch without the regulatory guesswork?

Book a 30-minute consultation. We'll map your AI or licensing path and tell you exactly what's required, in plain language.