Legal & Compliance — November 9, 2026 Weekly
Legal & Compliance news & updates — every claim linked to a primary source.
Key Findings
Executive Summary (5)
- •AI governance has crossed from aspiration to active regulatory enforcement this week: the OCC's new supervisory framework for bank AI use, the SEC's 2027 examination priorities explicitly naming AI as a focus, and the CJEU Advocate General's copyright opinion on AI chatbots collectively signal that AI compliance is now a multi-jurisdictional, multi-regulator obligation requiring immediate program investment — not a future planning exercise.
- •The FTC's enforcement campaign has reached a new scale and scope, with the $49.75 million Progress Residential settlement extending pricing enforcement into residential housing, the Amazon ads auction complaint adding Big Tech to the target list, and the Riverside Payments action covering payment processors — the agency is simultaneously pursuing algorithmic pricing, platform competition, and consumer deception across virtually every sector of the economy.
- •The proxy advisory industry is undergoing structural disruption that will reshape corporate governance practice: J.P. Morgan and Wells Fargo exiting ISS and Glass Lewis in favor of proprietary AI platforms, ISS launching its own AI-driven PolicySteward, and the SEC's 2027 priorities scrutinizing adviser reliance on proxy advisory firms together signal that the traditional proxy advisory model is being replaced by a fragmented, AI-driven ecosystem where companies can no longer rely on a single do…
- •The Rule 14a-8 rescission debate has entered a critical phase: with the SEC staff no longer providing no-action letters, the NAM warning of a 2027 proxy season litigation surge, and neither Delaware nor Nevada having enacted replacement frameworks, companies face a period of genuine legal uncertainty about shareholder proposal governance that will require proactive bylaw review and legal strategy before the 2027 season begins.
- •The convergence of the CJEU AI copyright opinion, the EDPB children's safety guidance, and the EU KIDS Act proposal confirms that the EU is building a comprehensive AI and digital governance framework that will impose layered obligations on technology companies — copyright compliance for AI training data, children's safety by design, and GDPR enforcement are now simultaneous compliance requirements rather than sequential ones.
Key Points (15)
- 1.The OCC issued a supervisory framework on bank use of 'Super Intelligence' on November 4, 2026, marking the first OCC-level AI governance guidance for national banks [13]
- 2.CJEU Advocate General Szpunar issued an Opinion on November 3 finding that AI chatbots' real-time retrieval of online press publications may infringe press publishers' rights under EU law [9]
- 3.The FTC and states secured a $49.75 million settlement against Progress Residential and Pretium Partners on November 6 for deceptive rental pricing practices [3]
- 4.The FTC and 22 states filed an updated complaint against Amazon on November 5 with unredacted details about alleged deceptive and unfair practices in its ads auction [3]
- 5.The EEOC and DOJ announced a $29.5 million settlement with Lockheed Martin on November 4 for employment discrimination and false certifications of compliance with federal civil rights laws as a federal contractor [12]
- 6.The SEC's 2027 examination priorities, analyzed by Sidley Austin on November 7, identified AI ('super intelligence') as an increased focus area, with firms expected to describe their AI inventory, governance, and monitoring controls [6a]
- 7.J.P. Morgan Asset Management announced it would stop using ISS and Glass Lewis for U.S. voting and rely on its in-house AI platform Proxy IQ, and Wells Fargo moved to a proprietary policy engine built with Broadridge [6b]
- 8.ISS announced PolicySteward for automated AI-driven voting recommendations with a full launch expected in January 2027 [6b]
- 9.The National Association of Manufacturers submitted a comment letter on November 7 warning that Rule 14a-8 rescission will trigger a surge of 'last chance' proposals in the 2027 proxy season and increased litigation [6c]
- 10.The EDPB published children's online safety guidance on November 4, and the Privacy World Blog analyzed the European Commission's EU KIDS Act proposal on November 6 [14]
- 11.The ICJ announced it will deliver its Judgment in The Gambia v. Myanmar (Genocide Convention) on November 19, 2026 [11]
- 12.The SEC proposed significant changes to custody rules including a new framework for crypto asset custody, with comments due December 7, 2026 [6d]
- 13.USCIS reported that 13 aliens from Brazil and Cuba were charged by indictment for conspiracy to defraud the United States on November 2, and Cuban aliens and a Florida man were sentenced for an international alien smuggling, asylum fraud, and money laundering conspiracy responsible for over 1,700 fraudulent asylum claims on November 6 [4]
- 14.The HCCH Experts' Group on Digital Tokens met for the fourth time from October 26-29, making further progress on the private international law framework for digital tokens [15]
- 15.The ABA Journal reported on November 6 that Harmeet Dhillon resigned as head of the Justice Department's Civil Rights Division following Democrats' wins in the midterm elections [7]
Market Trends
FTC Enforcement Broadens to Rental Housing and Big Tech Platforms
The FTC's enforcement campaign expanded into new sectors this week. On November 6, Progress Residential and its owner Pretium Partners agreed to pay $49.75 million to settle FTC and states' charges over deceptive rental pricing practices and other unlawful conduct [3]. On November 5, the FTC and 22 states filed an updated complaint against Amazon with unredacted details about Amazon's alleged use of deceptive and unfair practices in its ads auction [3]. On November 2, payment processor Riverside…
OCC Issues AI Supervisory Framework for Banks
The OCC issued a supervisory framework on bank use of 'Super Intelligence' on November 4, 2026, accompanied by a dedicated bulletin [13]. This represents the first OCC-level supervisory guidance specifically addressing advanced AI in banking, signaling that AI governance is now a formal examination priority for national banks and federal savings associations. The SEC's 2027 examination priorities, published October 23, similarly identified AI — referred to as 'super intelligence' — as an increas…
Stablecoin and Crypto Compliance Obligations Crystallize
The OCC's GENIUS Act final rule implementation continued to generate compliance activity, with Wolters Kluwer publishing analysis on November 2 noting that the OCC's final GENIUS Act regulations establish licensing, governance, reserve, reporting, and risk management requirements for payment stablecoin issuers, and that organizations should begin compliance and application readiness efforts now [1a] (company announcement — may reflect promotional framing). The SEC separately proposed significant…
Securities Tokenization Moves from Concept to Operational Reality
The DTCC launched a tokenization service for financial institutions, and NYSE and Nasdaq are developing tokenization platforms, according to Wachtell Lipton analysis published November 3 [6e] (company announcement — may reflect promotional framing). One tokenized securities venue, OKXICE, has given notice of its intent to tokenize the shares of more than 60 major corporations, with most having already opted out [6e] (company announcement — may reflect promotional framing). The SEC's September 'I…
State Enforcement and Federal Rollback Divergence Continues
Wolters Kluwer's H1 2026 Regulatory Violations Intelligence Index, referenced in compliance content updated through November 3, continues to document the trend of increased state regulatory enforcement of banks and financial institutions as federal oversight remains minimal [1a] (company announcement — may reflect promotional framing). The Illinois Entity Omnibus Act, analyzed in a November 2 Wolters Kluwer article, allows Illinois corporations and unincorporated entities to convert into other e…
Competitor Trends
AI Reshapes Proxy Voting Infrastructure as Major Investors Exit Traditional Advisors
A major structural shift in proxy voting is underway. J.P. Morgan Asset Management announced it would stop using ISS and Glass Lewis for U.S. voting and rely instead on its in-house AI platform Proxy IQ, and Wells Fargo moved its voting onto a proprietary policy engine built with Broadridge, according to Anteris Advisors analysis published November 5 [6b] (company announcement — may reflect promotional framing). ISS announced PolicySteward, designed to generate automated data-driven voting recom…
BigLaw AI Integration Accelerates as Firms Partner with Big Tech
The ABA Journal reported on November 4 that several large law firms are partnering with major tech companies to create their own artificial intelligence tools [7]. The New York State Bar Association issued guidance telling lawyers not to bill for time saved by AI on November 3 [7]. Judiciary efforts to create rules for AI are stalling amid concerns, reported November 4 [7]. An appellate court ruled on November 4 that lawyers' AI use does not justify slashing a $115,000 fee award [7]. These devel…
SEC Rule 14a-8 Rescission Debate Intensifies Ahead of 2027 Proxy Season
The National Association of Manufacturers submitted a comment letter to the SEC on November 7 regarding the proposed rescission of Rule 14a-8, warning that the rescission will inspire a surge of 'last chance' proposals during the 2027 proxy season and that companies and proponents may be forced to litigate if they cannot resolve differences about proposal eligibility [6c] (company announcement — may reflect promotional framing). The Heritage Foundation published analysis on November 1 arguing th…
Startup Governance Failures Drive Academic and Regulatory Scrutiny
Boston College Law Professor Renée Jones published analysis on November 4 arguing that decades of deregulatory reforms — including the 1996 NSMIA eliminating the cap on investors in private funds and the 2012 JOBS Act changing the 500-shareholder threshold for mandatory SEC registration to 2,000 — have driven a shift in control from investors to founders, enabling startup fraud at companies like Theranos and FTX [6g] (company announcement — may reflect promotional framing). The median age at IPO…
Tender Offer Acceleration Creates New M&A Competitive Dynamics
Wilson Sonsini published analysis on November 6 drawing early lessons from the SEC's April 2026 shortening of the minimum offering period for certain equity tender offers from 20 business days to 10 business days [6h] (company announcement — may reflect promotional framing). Key lessons include that advance preparation must begin before the merger agreement is signed, that HSR Act timing may necessitate a 'pull and refile' that impacts the ability to close within the shortened period, and that t…
Regulatory Trends
CJEU Issues Landmark AI Copyright Opinion on LLM Chatbots
On November 3, 2026, Advocate General Szpunar issued an Opinion in Case C-250/25 Like Company finding that the retrieval and reuse, in real time, of online press publications by AI chatbots in order to generate answers to user queries may, in certain circumstances, infringe the rights of press publishers under EU law [9]. The Opinion examines whether an LLM-powered chatbot's retrieval and reuse of a press publication constitutes 'reproduction' and 'communication to the public' under EU law [9]. …
EDPB Issues Children's Online Safety Guidance
The EDPB published new guidance helping kids stay safe online on November 4, 2026 [14]. This follows the Privacy World Blog's November 6 analysis of the European Commission's September 17 proposal for the EU KIDS Act (Keeping Internet Digital Safe), which would impose mandatory design requirements, age assurance obligations, and data protection requirements on digital services accessed by children [8] (company announcement — may reflect promotional framing). The convergence of EDPB guidance and …
ICJ Elects New Members and Schedules Genocide Convention Judgment
On November 4, 2026, the UN General Assembly and Security Council elected five new Members of the International Court of Justice [11]. On November 3, the ICJ announced it will deliver its Judgment in the Application of the Convention on the Prevention and Punishment of the Crime of Genocide (The Gambia v. Myanmar) on November 19, 2026 [11]. The Gambia v. Myanmar judgment will be a significant development in international humanitarian law and the application of the Genocide Convention.
EEOC Enforcement Activity Continues with Major Settlements
The EEOC announced a $29.5 million settlement with Lockheed Martin on November 4, 2026, resolving allegations of employment discrimination and related false certifications of compliance with federal civil rights laws while serving as a federal contractor [12]. This follows the EEOC's October 29 rescission of its 2012 arrest and conviction records guidance, which remains in effect. The Lockheed settlement — involving both DOJ and EEOC — signals that federal contractor employment discrimination en…
HCCH Digital Tokens Expert Group Makes Progress on Fourth Meeting
The HCCH Experts' Group on Digital Tokens met for the fourth time from October 26-29, 2026, with approximately 60 registered delegates representing 16 HCCH Members and eight Observers, making further progress pursuant to its mandate from CGAP 2026 [15]. This ongoing work on the private international law framework for digital tokens is relevant to companies issuing or trading tokenized securities across borders, particularly given the SEC's concurrent Innovation Exemption for tokenized NMS stock.
Sources Activity
Since last week
OCC Issues AI Supervisory Framework for Banks
The OCC issued a supervisory framework on bank use of 'Super Intelligence' on November 4, 2026, accompanied by a dedicated bulletin, marking the first OCC-level supervisory guidance specifically addressing advanced AI in banking [13]. National banks and federal savings associations should expect AI governance to be an active examination topic.
CJEU Advocate General Opinion on AI Chatbot Copyright
Advocate General Szpunar issued an Opinion on November 3, 2026 in Case C-250/25 Like Company finding that AI chatbots' real-time retrieval and reuse of online press publications may infringe press publishers' rights under EU law [9]. If followed by the Court, this would impose significant copyright compliance obligations on AI companies using web-scraped press content in the EU.
FTC Secures $49.75M Settlement Against Progress Residential
Progress Residential and its owner Pretium Partners agreed to pay $49.75 million on November 6, 2026 to settle FTC and states' charges over deceptive rental pricing practices and other unlawful conduct [3]. This is the largest FTC settlement this week and extends the agency's pricing enforcement campaign into the single-family rental housing market.
EEOC Lockheed Martin $29.5M Settlement for Federal Contractor Discrimination
The EEOC and DOJ announced a $29.5 million settlement with Lockheed Martin on November 4, 2026, resolving allegations of employment discrimination and false certifications of compliance with federal civil rights laws while serving as a federal contractor [12]. This signals continued active enforcement of federal contractor employment discrimination obligations despite the EEOC's concurrent rollback of other guidance.
Watchlist — Upcoming Deadlines
ICJ to deliver Judgment in The Gambia v. Myanmar (Genocide Convention application)
Source: International Court of JusticeSEC comment deadline on proposed amendments to custody rules including crypto asset custody framework
Source: Harvard Law School ForumStrategic Insights (12)
- 1.Companies using AI tools that retrieve and reuse online press content should immediately assess their exposure under the CJEU's pending Like Company judgment — if the Court follows the Advocate General's Opinion, real-time retrieval of press publications by AI chatbots will require licensing or opt-out mechanisms under EU law [9]
- 2.National banks and federal savings associations should treat the OCC's November 4 AI supervisory framework as an examination preparation document: firms should inventory their AI tools, document governance and monitoring controls, and ensure their AI risk management frameworks are examination-ready [13]
- 3.The SEC's December 7, 2026 comment deadline on the proposed crypto custody rules is an immediate action item for registered investment advisers and regulated funds with crypto exposure — the proposed rules would permit new custody arrangements including adviser self-custody and state trust company custody, but impose significant safeguarding and board oversight requirements [6d]
- 4.Public companies should prepare for TSV notices from tokenized securities venues: the Wachtell Lipton analysis notes that OKXICE has given notice of intent to tokenize shares of more than 60 major corporations, and companies have only 30 days to opt out — boards should establish a policy for responding to TSV notices before receiving one [6e]
- 5.The NAM's warning of a 2027 proxy season litigation surge due to Rule 14a-8 rescission uncertainty means companies should immediately review their bylaws to assess whether they need to adopt private ordering frameworks for shareholder proposals before the 2027 season, and should consult with outside counsel about the litigation risk of excluding proposals without SEC staff guidance [6c]
- 6.The New York State Bar Association's guidance that lawyers should not bill for time saved by AI creates an immediate billing policy review obligation for law firms — firms should audit their AI billing practices and update engagement letters to address AI use and its impact on fee calculations [7]
- 7.The Lockheed Martin $29.5 million settlement for false certifications of compliance with federal civil rights laws as a federal contractor signals that federal contractors face heightened scrutiny of their EEO compliance certifications — contractors should audit their employment discrimination compliance programs and ensure that certifications submitted to the government accurately reflect their actual practices [12]
- 8.The FTC's $49.75 million Progress Residential settlement signals that algorithmic rental pricing practices are now an active enforcement target — property management companies using dynamic pricing algorithms should conduct a legal review of their pricing practices and disclosure obligations [3]
- 9.The Ninth Circuit's ruling that breach of confidence supplies Article III standing in data privacy cases, analyzed by Privacy World Blog on November 3, deepens the circuit split on standing and increases litigation risk for companies that experience data privacy breaches — companies should reassess their litigation exposure in the Ninth Circuit [8] (company announcement — may reflect promotional framing)
- 10.The DPPA litigation risk analysis published by Privacy World Blog on November 8 highlights that companies handling state DMV data — including parking operators, insurers, and data vendors — face persistent litigation risk under the Driver's Privacy Protection Act even for routine operational uses [8] (company announcement — may reflect promotional framing)
- 11.The SEC's 2027 examination priorities' new focus on advisers' reliance on proxy advisory firms means investment advisers should document their process for evaluating proxy recommendations and ensure that reliance on proxy advisors satisfies applicable fiduciary obligations [6a]
- 12.The Harmeet Dhillon resignation from the DOJ Civil Rights Division following Democratic midterm wins signals potential policy shifts in federal civil rights enforcement — companies should monitor whether the new Congress and DOJ leadership reverse recent enforcement guidance rollbacks, including the EEOC's October 29 rescission of the arrest and conviction records guidance [7]
Trust Summary
17 sources cited this weekDetected across 30 monitored URLs you selected — one URL can surface multiple articles.
Each source is weighted by its trust level. Single-source claims are flagged as unverified during AI synthesis.
Sources
Wolters Kluwer compliance page updated through November 7 covering BSA/AML enforcement lessons from Bank of America and American Express actions, Illinois Entity Omnibus Act analysis, OCC GENIUS Act stablecoin framework, and new compliance articles on fintech auditing and business licensing.
Hunton Privacy Blog covering FTC personalized pricing and compensation inquiry launched October 28, CalPrivacy November 5-6 board meeting announcement, and California AB 1979 extending CMIA to healthcare chatbots.
FTC press releases covering Progress Residential $49.75 million settlement on November 6, Amazon ads auction-rigging updated complaint on November 5, Riverside Payments $600,000 settlement on November 2, and ongoing enforcement actions.
USCIS reporting 13 aliens charged for conspiracy to defraud the United States on November 2, Canadian alien charged with falsely claiming U.S. citizenship to register to vote on November 3, and Cuban aliens sentenced for international alien smuggling and asylum fraud conspiracy responsible for over 1,700 fraudulent asylum claims on November 6.
SEC adopting amendments to update definitions of small entity for investment companies and investment advisers on November 4, and SEC announcing fiscal year 2027 examination priorities on October 23.
Harvard Law School Forum covering Rule 14a-8 rescission debate, SEC Form S-8 and Rule 701 guidance streamlining, tokenized securities analysis, Delaware controlling shareholder amendments, AI and nation-state cyber operations, startup finance governance failures, SEC corporate penalty statement analysis, SEC crypto custody rule proposal, AI in proxy voting analysis, SEC 2027 exam priorities, accelerated tender offer periods, and M&A culture integration.
ABA Journal covering BigLaw AI partnerships with Big Tech on November 4, New York State Bar Association guidance against billing for AI time savings on November 3, bar pass rates dropping in 37 states on November 3, Harmeet Dhillon resignation from DOJ Civil Rights Division on November 6, California Governor Newsom commuting 548 death sentences on November 6, and judiciary efforts to create AI rules stalling on November 4.
Privacy World Blog covering Ninth Circuit ruling on breach of confidence and Article III standing in data privacy cases on November 3, EU KIDS Act analysis on November 6, and DPPA litigation risk for companies handling state DMV data on November 8.
CURIA publishing Advocate General Szpunar's Opinion in Case C-250/25 Like Company on AI chatbot copyright on November 3, General Court judgment upholding restrictive measures against Russian Maritime Register of Shipping on November 4, and multiple judgments on November 5 including Nord Stream 2 gas pipeline case and COVID-19 state aid cases.
Council of Europe news covering World Forum for Democracy opening on November 2, GRETA report on trafficking victims in Belarus on November 4, Italy anti-torture committee report on November 4, and KlimaSeniorinnen Schweiz winning Democracy Innovation Award on November 4.
ICJ electing five new Members on November 4, and announcing delivery of Judgment in The Gambia v. Myanmar (Genocide Convention) on November 19, 2026.
EEOC and DOJ announcing $29.5 million Lockheed Martin settlement for employment discrimination and false certifications on November 4, Horseshoe Casino $150,000 disability discrimination settlement on November 4, Anthony Roofing $700,000 race and sex harassment settlement on November 6, and Schumacher Auto Group $112,500 disability discrimination settlement on November 5.
OCC issuing supervisory framework on bank use of Super Intelligence on November 4, releasing CRA performance evaluations for 19 national banks on November 2, and releasing 2025 small business and community development lending data on November 5.
EDPB publishing guidance helping kids stay safe online on November 4, 2026; no new national DPA enforcement actions published this week beyond those already in the feed.
HCCH Experts' Group on Digital Tokens met for the fourth time from October 26-29, 2026, with approximately 60 registered delegates representing 16 HCCH Members and eight Observers, making further progress on the private international law framework for digital tokens.
Latham & Watkins covering Eighth Circuit affirming vacatur of Federal Reserve debit interchange fee cap on November 3, Saudi Arabia new enforcement law implementing regulations on November 5, and preparing for congressional investigations following midterm elections on November 2.
Baker McKenzie investigations and compliance page updated with Singapore MAS anti-scam measures for retail brokers effective June 30, 2027, Manhattan DA corporate crime task force launch, and DOJ Fraud Division corporate enforcement directive.
Get Legal & Compliance monitored every week
This report was built from primary sources only — no aggregators. Pick your themes and sources, and OriginBrief delivers a cited report like this every week. Start your 7-day free trial — plans from $33/mo.
Start your 7-day free trial