AI Regulation & Policy — June 2, 2026 Monthly

On May 7, 2026, the Council of the European Union, the European Parliament, and the European Commission reached a provisional agreement on the Digital Omnibus, representing the first set of amendments to the EU AI Act since its adoption in June 2024. According to Global Policy Watch, the package includes pragmatic timeline extensions, focused simplification measures, and substantive policy changes. The European Commission confirmed the agreement includes a ban on nudification apps. OneTrust's an… See more

On May 19, 2026, the European Commission published draft guidelines on the classification of high-risk AI systems under the EU AI Act, as reported by Hunton. This development followed the Digital Omnibus provisional agreement and represents a concrete transition from political agreement to enforceable regulatory detail, providing organizations with criteria to assess whether their AI systems require stricter compliance obligations.

On May 14, 2026, Colorado Governor Polis signed SB 189, which revises Colorado's original AI law and delays the effective date from June 30, 2026 to January 1, 2027, while significantly scaling back its original requirements, as reported by Hunton. This legislative resolution followed a judicial enforcement stay, X.AI's lawsuit, and DOJ intervention documented by Lexology and Privacy World Blog. Organizations that had built compliance programs around the original June 2026 deadline must reassess… See more

Tech Policy Press reported on May 22, 2026 that the Trump administration abandoned its 'FDA for AI' proposal, eliminating a previously floated model for centralized federal AI oversight. This development deepens the federal governance vacuum and reinforces that organizations cannot rely on a unified federal AI regulatory framework in the current regulatory cycle.

The Illinois Department of Human Rights issued regulations governing the use of AI in making employment decisions, reported by Hunton on May 13, 2026. This represents a concrete state-level regulatory instrument directly governing high-risk AI applications in hiring and workforce management, adding to the growing patchwork of U.S. AI-related rules and converging with the EU AI Act's high-risk classification of employment AI systems.

California's attorney general announced a record $12.75 million settlement with General Motors, described as the largest penalty imposed to date under California's data privacy law, resolving allegations that GM illegally sold Californians' location and driving behavior data without adequate notice or consent in violation of CCPA and California's Unfair Competition Law, as reported by Law360 and Hunton. This settlement establishes a new financial benchmark for state-level enforcement of data min… See more

The House Energy & Commerce Committee introduced the SECURE Data Act on April 22, 2026, intended to replace the U.S. state consumer privacy law patchwork with a single federal standard, as reported by Hunton. The bill showed no reported legislative advancement throughout May 2026, with Privacy World Blog and the National Law Review both questioning its viability. Persistent obstacles around preemption scope and private right of action remain unresolved.

Alabama Governor Kay Ivey signed the Alabama Personal Data Protection Act on April 17, 2026, effective May 1, 2027, making Alabama the twenty-first U.S. state to enact comprehensive consumer privacy legislation, as reported by Hunton and corroborated by OneTrust. This development further deepens the state-level privacy patchwork that organizations deploying AI systems processing consumer data must navigate.

Tech Policy Press published a perspective on April 30, 2026 titled 'AI Hype and the Capture of EU AI Regulation,' raising concerns that the EU AI Act's implementation may be subject to undue industry influence. This framing of regulatory capture as a live concern represents a new dimension in EU AI governance debate, with civil society and policy commentators scrutinizing how the regulation is being operationalized rather than just its text.

Tech Policy Press reported on May 22, 2026 that Kenya has advanced a national AI legislative proposal with provisions touching on political expression, and on May 14, 2026 that Brazil's 2026 elections represent the first real stress test for its AI regulatory framework. These developments signal that AI governance obligations are expanding beyond the US-EU axis into emerging economies with divergent regulatory approaches.