Legal & Compliance — 2026年10月19日 週次レポート
Legal & Complianceのニュース＆アップデート — すべての記述に一次ソースのリンク付き。
重要な発見
エグゼクティブサマリー（5件）
- •The OCC's debanking report and $750 million Bank of America penalty, combined with the DOJ's antitrust threat against the ABA's legal education accreditor, signal that the current U.S. administration is deploying federal enforcement tools — banking supervision, antitrust law, and denaturalization — as instruments of political and institutional pressure in ways that have no recent precedent, creating compliance uncertainty across banking, legal education, and immigration simultaneously.
- •European data protection enforcement has entered a phase of sustained, multi-jurisdiction, multi-technology enforcement: the week's Italian telemarketing fine, Norwegian advertising technology fine, EDPB smart glasses statement, and approaching Italian tracking pixel deadline collectively confirm that GDPR enforcement is now a continuous operational compliance obligation rather than an episodic risk, with every major technology category — from automated decision-making to wearables to email mark…
- •Corporate governance is at an inflection point: Glass Lewis's four-perspective proxy voting proposal, the SEC's Rule 14a-8 rescission comment period, and the emergence of mandatory shareholder arbitration as a live issue collectively suggest that the institutional infrastructure of shareholder engagement — proxy advisors, federal proposal rules, and litigation rights — may look fundamentally different by 2028, requiring companies to prepare for multiple governance scenarios simultaneously.
- •AI accountability in legal practice is accelerating from professional ethics debate to hard enforcement: a judge suspended over a deepfake phone call, attorneys sanctioned for AI citation errors, and courts increasingly treating AI misuse as a disciplinary matter rather than a technical mistake — while law firms simultaneously monetize AI through billable hour policies — creating a compliance environment where the rules are being written by judicial decisions faster than bar associations can res…
- •The convergence of cybersecurity incidents disrupting federal bankruptcy courts and state court systems, the Council of Europe's new criminal asset recovery treaty, and the Budapest Convention's 25-year review collectively signal that cybercrime and digital asset enforcement infrastructure is being upgraded at both the national and international level, with direct implications for financial institutions, law firms, and technology companies operating across jurisdictions.
今回の要点（17件）
- 1.The OCC released a report on October 14 finding all nine of the largest banks under its supervision had policies between 2020 and September 2025 that presented elevated risk of encouraging denial of financial services based on political or religious beliefs or lawful business activities [16].
- 2.The OCC imposed a $750 million assessment against Bank of America for deficient BSA/AML compliance on October 13, 2026 [16].
- 3.The U.S. Department of Justice threatened the ABA Section of Legal Education and Admissions to the Bar council with an antitrust investigation on October 15, 2026 if it does not change by the end of the month standards limiting adjunct professor involvement in law school teaching [1a].
- 4.The FTC sued ticket broker REPS & Company Inc. on October 15 for allegedly circumventing ticket purchase limits, and filed a contempt motion against Martin Shkreli for allegedly violating his lifetime pharmaceutical industry ban [3].
- 5.The FTC sent more than $9.8 million to consumers harmed by Walmart's alleged failure to stop wire transfer scammers on October 15 [3].
- 6.The Italian DPA fined Wind Tre EUR 16,700,000 on October 12 for unlawful telemarketing and data protection infringements, and the Norwegian DPA fined Xandr EUR 8,600,000 on October 16 for unlawful processing of personal data [15].
- 7.The EDPB published a statement on October 13 on the data protection challenges of smart glasses, signaling proactive regulatory attention to emerging wearable technology [15].
- 8.Italian Garante guidelines on tracking pixels in emails are effective October 29, 2026, creating an immediate compliance deadline for organizations using email marketing in Italy [2].
- 9.The Council of Europe opened a new treaty strengthening criminal asset recovery for signature on October 14, with eight countries and the EU signing at launch [14].
- 10.Glass Lewis proposed replacing its single benchmark voting policy with four distinct proxy voting perspectives beginning with the 2028 U.S. proxy season, subject to a consultation period ending in October 2026 [5a].
- 11.NYU law professors published analysis arguing mandatory arbitration of shareholder claims is 'on the horizon,' with SEC Chair Atkins having changed the SEC's long-standing policy against mandatory arbitration and SpaceX going public with mandatory arbitration bylaws [5b].
- 12.Sullivan & Cromwell's 2026 proxy season review found total Rule 14a-8 submissions fell 15% in H1 2026, with governance proposals representing the majority of submissions for the first time since 2012, and the SEC's Rule 14a-8 rescission comment period closes November 20, 2026 [5c].
- 13.A Florida judge was suspended over an AI deepfake phone call, and an attorney was questioned over AI errors in a parental rights appeal, deepening the pattern of courts imposing structural consequences for AI misuse [1b].
- 14.USCIS partnered with DOJ on October 13 in filing denaturalization actions against 40 individuals — described as the largest single-period filing under the Trump administration [7].
- 15.The EEOC announced Il Fornaio will pay $3,000,000 to settle a sexual harassment lawsuit on behalf of a class of female employees on October 13 [17].
- 16.A cybersecurity breach affecting BAE Systems disrupted the U.S. federal bankruptcy court system, reported October 16, and Arizona's court system was hit by a separate cyberattack on October 8 [1b].
- 17.Montenegro deposited its instrument of accession to the 2000 Protection of Adults Convention on October 13, bringing the total to 17 Contracting Parties, with entry into force for Montenegro on August 1, 2027 [11].
市場動向
AI Errors in Legal Practice Escalate from Sanctions to Structural Accountability
The pattern of courts imposing consequences for AI-generated errors deepened this week across multiple fronts. A Florida judge was suspended over an AI deepfake phone call, an attorney was questioned over AI errors in a parental rights appeal, and judges are increasingly faulting lawyers who fail to point out AI-generated fake citations in opponents' filings — a trend featured in the ABA Journal's October 2026 issue under 'Best Judgment' [1b]. Simultaneously, Ropes & Gray announced it will allow…
FTC Enforcement Broadens Further with Ticket Broker Suit and Walmart Redress
Building on its multi-sector enforcement posture from the prior week, the FTC added new enforcement actions this week. On October 15, the FTC sued REPS & Company Inc., alleging the ticket broker illegally circumvents measures designed to limit ticket purchases for popular live events [3]. Also on October 15, the FTC sent more than $9.8 million to consumers harmed by Walmart's alleged failure to stop scammers using its wire transfer services [3]. On October 13, the FTC sued the operator of a sext…
SEC Shareholder Proposal Landscape Reshaping as Rule 14a-8 Comment Period Opens
The SEC's proposed rescission of Rule 14a-8 — published in the Federal Register on September 21 with comments due November 20, 2026 — is generating significant practitioner analysis. According to Sullivan & Cromwell's 2026 proxy season review published October 13, total Rule 14a-8 submissions fell 15% in H1 2026, with ESP and compensation proposals decreasing 35% and 65% respectively, while governance proposals increased 29% and represented the majority of submissions for the first time since 20…
BigLaw Compensation Boom and Hiring Disparities Signal Bifurcating Legal Market
The ABA Journal's October 2026 issue reports that more BigLaw partners than ever are earning top compensation, with the highest earners hitting $40 million or more in total compensation including bonuses that are 30% to 40% of their base pay [1c]. The Conference Board's 2026 executive compensation report published October 12 confirms median reported CEO compensation reached $7.1 million in the Russell 3000 and $17.5 million in the S&P 500, up 7% and 6% respectively [5d] (company announcement — m…
Cybersecurity Incidents Disrupt Legal and Financial Infrastructure
Multiple cybersecurity incidents affecting legal and financial infrastructure were reported this week. A cybersecurity breach affecting BAE Systems also disrupted the U.S. federal bankruptcy court system, reported October 16 [1b]. Arizona's court system was hit by a cyberattack on October 8 [1b]. An ex-employee sued Sheppard Mullin over a cyberattack exposing sensitive personal data [1b]. An accidental email at Seyfarth Shaw resulted in sharing Social Security numbers of clients and opposing par…
競合動向
Glass Lewis Proposes Four-Perspective Proxy Voting Framework for 2028
Glass Lewis released details of a proposal to replace its single benchmark voting policy with four distinct proxy voting perspectives beginning with the 2028 U.S. proxy season, subject to a consultation period ending in October 2026. The four perspectives — Business Fundamentals, Foundational Governance, Global Stewardship, and Sustainability Focused — place differing emphases on financial performance versus broader stakeholder outcomes. According to Pay Governance analysis published October 15,…
Mandatory Arbitration of Shareholder Claims Emerges as New Corporate Governance Frontier
NYU law professors Marcel Kahan and Edward Rock published analysis on October 15 arguing that mandatory arbitration of shareholder claims is 'on the horizon,' with SEC Chair Atkins having changed the SEC's long-standing policy against mandatory arbitration and SpaceX going public with bylaws providing for mandatory arbitration of shareholder claims [5b] (company announcement — may reflect promotional framing). The analysis argues that mandatory arbitration would reduce the comparative attractive…
FTC Interlocking Directorate Enforcement Extends to Board Appointment Rights
The FTC's enforcement action against Beretta Holding's minority acquisition of shares in Sturm, Ruger & Co. — analyzed by Cooley LLP on October 17 — extends Section 8 Clayton Act enforcement beyond officers or directors of competing corporations to appointed 'representatives,' and requires that those representatives be genuinely independent [5e] (company announcement — may reflect promotional framing). The FTC scrutinized the substance of independence protections in the agreement, not just the l…
OCC Debanking Report Exposes Nine Largest Banks' Policies on Political and Industry Access
The OCC released a report on October 14 on large banks' debanking activities, finding that between 2020 and September 2025, all nine of the largest banks under OCC supervision had policies that presented elevated risk of encouraging denial of financial services based on political or religious beliefs or lawful business activities [16]. The OCC identified two primary categories: reputation risk practices and industry-specific practices. Highlighted examples include a bank declining to serve a pub…
Council of Europe Opens New Criminal Asset Recovery Treaty for Signature
On October 14, 2026, the Council of Europe opened a new treaty strengthening criminal asset recovery for signature, with eight countries and the European Union signing at launch [14]. This coincided with a Council of Europe conference marking 25 years of the Budapest Convention on cybercrime, examining lessons from implementation and emerging challenges [14]. The European Court of Human Rights and International Criminal Court presidents also met on October 16 to stand together in the face of att…
制度・規制動向
GDPR Enforcement Continues at Scale with Smart Glasses Statement and Norwegian Fine
The EDPB published a statement on October 13 on the data protection challenges of smart glasses, signaling proactive regulatory attention to emerging wearable technology [15]. The Norwegian DPA fined Xandr EUR 8,600,000 on October 16 for unlawful processing of personal data [15]. The Italian DPA fined Wind Tre EUR 16,700,000 on October 12 for unlawful telemarketing and data protection infringements [15]. These actions follow the prior week's Dutch DPA €824.99 million Uber fine and multiple Itali…
DOJ Threatens ABA Legal Education Council with Antitrust Probe Over Accreditation Standards
The U.S. Department of Justice threatened the council for the ABA Section of Legal Education and Admissions to the Bar with an antitrust investigation on October 15, 2026 if it does not change by the end of the month standards limiting how much adjunct professors can be involved in teaching law [1a]. This represents a direct federal enforcement threat against the primary accreditor of U.S. law schools and signals that the current administration is prepared to use antitrust law as a tool to resha…
EEOC Sustains High-Volume Enforcement with Multiple New Settlements
The EEOC announced multiple new enforcement settlements this week. Il Fornaio agreed to pay $3,000,000 to settle a sexual harassment and retaliation lawsuit on behalf of a class of female employees on October 13 [17]. Wagner Equipment agreed to pay $200,000 to settle a disability discrimination and retaliation suit on October 13 [17]. San Antonio car dealerships Benson Enterprises agreed to pay $430,000 in a sex discrimination and harassment suit on October 9 [17]. Multiple additional sexual har…
USCIS Denaturalization Campaign Reaches Largest Single-Period Filing Under Trump Administration
USCIS partnered with the Department of Justice on October 13, 2026 in filing denaturalization actions against 40 individuals accused of serious offenses including acting as an agent for a foreign government, committing voluntary manslaughter, and aggravated sodomy — described as the largest single-period filing under the Trump administration [7]. On October 15, USCIS assisted in an investigation resulting in the sentencing of a Liberian national for naturalization fraud, denaturalization, and ju…
UK ICO Launches Agentic AI Project Following Foundation Model Scrutiny Report
The UK Information Commissioner's Office published a report on October 14, 2026 following its scrutiny of ten of the world's largest AI foundation model developers operating in the UK, and launched an Agentic AI Project [2] (company announcement — may reflect promotional framing). Italian Garante guidelines on tracking pixels in emails are effective October 29, 2026, requiring organizations to comply with specific rules on tracking pixel use in email communications [2] (company announcement — ma…
ソース活動
先週からの変化
OCC Releases Debanking Report and Imposes $750M Bank of America Penalty
The OCC released a report on October 14, 2026 finding that all nine of the largest banks under its supervision had policies between 2020 and September 2025 that presented elevated risk of encouraging denial of financial services based on political or religious beliefs or lawful business activities [16]. The OCC also imposed a $750 million assessment against Bank of America for deficient BSA/AML compliance on October 13 [16]. These twin actions represent a significant escalation from the prior we…
DOJ Threatens ABA Legal Education Council with Antitrust Investigation
The U.S. Department of Justice threatened the ABA Section of Legal Education and Admissions to the Bar council with an antitrust investigation on October 15, 2026 if it does not change by the end of the month standards limiting adjunct professor involvement in law school teaching [1a]. This is the first direct federal antitrust enforcement threat against the primary accreditor of U.S. law schools and represents a novel use of antitrust law to reshape legal education standards.
FTC Sues Ticket Broker and Holds Martin Shkreli Contempt Motion Filed
The FTC's multi-sector enforcement campaign expanded further this week with a lawsuit against ticket broker REPS & Company Inc. on October 15 for allegedly circumventing ticket purchase limits [3], and a motion filed October 13 asking a federal court to hold Martin Shkreli in contempt for allegedly violating his lifetime ban from the pharmaceutical industry [3]. The FTC also sent more than $9.8 million to consumers harmed by Walmart's wire transfer scam failures on October 15 [3]. These actions …
Council of Europe Opens Criminal Asset Recovery Treaty and Budapest Convention Marks 25 Years
On October 14, 2026, the Council of Europe opened a new treaty strengthening criminal asset recovery for signature, with eight countries and the European Union signing at launch [14]. A Council of Europe conference simultaneously marked 25 years of the Budapest Convention on cybercrime, examining implementation lessons and emerging challenges [14]. Montenegro also deposited its instrument of accession to the 2000 Protection of Adults Convention on October 13, bringing the total to 17 Contracting…
GDPR Enforcement Continues with Italian Wind Tre Fine and Norwegian Xandr Fine
European data protection enforcement continued at high volume this week. The Italian DPA fined Wind Tre EUR 16,700,000 on October 12 for unlawful telemarketing and data protection infringements [15]. The Norwegian DPA fined Xandr EUR 8,600,000 on October 16 for unlawful processing of personal data [15]. The EDPB published a statement on October 13 on data protection challenges of smart glasses [15]. These actions follow the prior week's Dutch DPA €824.99 million Uber fine, confirming that the ED…
ウォッチリスト — 今後の締切
Italian Garante tracking pixel guidelines in emails become effective — compliance deadline for organizations using email marketing in Italy
ソース: Hunton Privacy BlogSEC Rule 14a-8 rescission proposal comment period closes
ソース: Harvard Law School Forum on Corporate Governance2000 Protection of Adults Convention enters into force for Montenegro following October 13 accession
ソース: Hague Conference on Private International Law (HCCH)示唆・見るべき論点（10件）
- 1.The OCC's debanking report finding that all nine largest supervised banks had policies risking politically-motivated service denials creates immediate compliance pressure: banks should audit their reputation risk policies and industry-specific restrictions against the OCC's identified categories — firearms, fossil fuels, digital assets, detention facilities, tobacco — and assess whether those policies can withstand regulatory scrutiny under Executive Order 14331 [16].
- 2.The DOJ's antitrust threat against the ABA's legal education accreditor is the first application of antitrust law to law school accreditation standards and could set a precedent for using antitrust enforcement against other professional licensing and accreditation bodies. Organizations that rely on ABA accreditation — law schools, bar associations, employers — should monitor the outcome closely as it could reshape the legal education market [1a].
- 3.Glass Lewis's four-perspective proxy voting proposal means that by 2028, the same executive compensation program may receive different recommendations depending on which perspective a fund selects. Compensation committees should begin stress-testing their programs against all four perspectives now — particularly the divergence between Business Fundamentals (TSR-focused) and Sustainability Focused (stakeholder outcomes) — rather than waiting for the 2028 implementation [5a].
- 4.The emergence of mandatory shareholder arbitration as a live issue — with SpaceX's public offering bylaws and SEC Chair Atkins's policy change — means that companies considering reincorporation or new public offerings should evaluate whether mandatory arbitration provisions are worth the investor relations cost. The NYU analysis suggests Delaware's competitive advantage could erode if mandatory arbitration becomes common, making state of incorporation a more consequential decision [5b].
- 5.The Italian tracking pixel compliance deadline of October 29, 2026 is an immediate action item for organizations using email marketing in Italy. The guidelines require specific compliance with rules on tracking pixel use in email communications — a requirement distinct from cookie consent obligations that requires separate technical and policy review [2].
- 6.The EDPB's smart glasses statement signals that wearable technology is the next frontier of GDPR enforcement attention. Companies developing or deploying smart glasses, AR headsets, or other wearable devices that capture personal data should conduct data protection impact assessments now, before enforcement actions materialize [15].
- 7.The FTC's contempt motion against Martin Shkreli for allegedly violating his lifetime pharmaceutical industry ban demonstrates that the FTC is prepared to use contempt proceedings to enforce prior court orders — a tool that could be applied to other companies and individuals subject to FTC consent orders and injunctions. Companies operating under FTC consent orders should audit their compliance with all order terms [3].
- 8.The cybersecurity breach that disrupted federal bankruptcy courts via a BAE Systems incident illustrates that legal institutions face supply chain cybersecurity risks from their technology vendors, not just direct attacks. Law firms and courts should assess their third-party technology dependencies and ensure vendor contracts include appropriate cybersecurity obligations and incident notification requirements [1b].
- 9.The USCIS denaturalization campaign reaching its largest single-period filing under the Trump administration — 40 individuals in one filing — signals that denaturalization is being pursued as a systematic enforcement tool. Employers of naturalized citizens in sensitive industries should be aware that denaturalization proceedings could affect workforce stability and security clearance status [7].
- 10.The SEC's Rule 14a-8 comment period closing November 20, 2026 is a near-term deadline for companies and investors to submit comments on the proposed rescission. Sullivan & Cromwell's analysis suggests that even if rescission proceeds, proponents will use the 2027 proxy season to begin private ordering — meaning companies should develop engagement strategies that work under both the current rule and potential state-law alternatives [5c].
信頼度サマリー
今週引用したソース 18 件あなたが選んだ 30 件の監視URLから検出（1つのURLから複数記事が出ることがあります）。
各ソースは信頼度レベルに応じて重み付けされています。単独ソースの主張は AI 合成時に未検証としてフラグ付けされます。
参照ソース一覧
ABA Journal covering DOJ antitrust threat against ABA Legal Education council, Florida judge suspended over AI deepfake phone call, attorney questioned over AI errors in parental rights appeal, cybersecurity incidents disrupting federal bankruptcy courts and Arizona courts, FTC ticket broker lawsuit, USCIS denaturalization campaign, hiring disparities for 2025 graduating class, and BigLaw compensation boom.
Hunton Privacy Blog covering UK ICO report on AI foundation model developers and Agentic AI Project launch on October 14, Italian Garante tracking pixel guidelines effective October 29, FTC personalized pricing study, California AB 2246 replacing Age-Appropriate Design Code Act, and California AI workplace surveillance restrictions.
FTC press releases covering lawsuit against ticket broker REPS & Company Inc. on October 15, $9.8 million Walmart wire transfer consumer redress on October 15, Martin Shkreli contempt motion on October 13, sextortion relief scheme lawsuit on October 13, and prior week's healthcare pricing letters, auto dealer settlement, and Cleo AI refunds.
SEC press releases covering Small Business Advisory Committee discussion of IPO modernization and Regulation Crowdfunding on October 14, cross-trading expansion proposal on October 9, and Ken Leech cherry-picking final judgment on October 6.
Harvard Law School Forum covering Glass Lewis four-perspective proxy voting proposal, mandatory arbitration and state competition for corporate charters, 2026 proxy season Rule 14a-8 submission review, CEO and executive compensation practices in Russell 3000 and S&P 500, FTC Beretta-Ruger interlocking directorate enforcement, carried interest tax controversy, and Japanese corporate governance reform analysis.
UN News covering UN call for limits on neurotechnology and brain data use, Ukraine civilian casualty rates among deadliest in years, Sudan Security Council briefing, Gaza ceasefire violations, and WHO Ebola readiness scaling.
USCIS newsroom covering DOJ filing of denaturalization actions against 40 individuals — largest single-period filing under Trump administration — on October 13, and Liberian national sentenced for naturalization fraud and denaturalized on October 15.
Privacy World Blog covering Pennsylvania expansion of telemarketer registration act to cover text messages, ringless voicemails, and automated communications signed July 20, 2026, and evolving state obligations for human resources AI and automated decision-making technology use.
Wolters Kluwer releasing H1 2026 Regulatory Violations Intelligence Index on October 13 noting continued trend of increased state regulatory enforcement of banks and financial institutions as federal oversight remains minimal, and launching Compliance Intelligence AI platform for banking compliance teams.
CJEU press releases covering General Court dismissal of Stripchat's action against its designation as a very large online platform under the Digital Services Act on October 14, Advocate General opinion recommending dismissal of TikTok's action against its gatekeeper designation under the Digital Markets Act on October 15, and Hungary found to have infringed EU law on trafficking penalties on October 15.
HCCH news covering Montenegro's accession to the 2000 Protection of Adults Convention on October 13, bringing total to 17 Contracting Parties, with entry into force for Montenegro on August 1, 2027.
Latham & Watkins insights covering SDAIA controller registration for foreign entities in Saudi Arabia on October 15, FCA governance arrangements expectations on October 14, FCA non-financial misconduct guidance on October 13, and D.C. Circuit upholding EPA's PFOS and PFOA hazardous substance rule on October 12.
Baker McKenzie insights covering DOJ Fraud Division corporate enforcement directive, Australia modern slavery failure-to-prevent offence consultation, Singapore MAS stablecoins framework, and DC Circuit congressional subpoena duty ruling.
Council of Europe news covering new criminal asset recovery treaty opened for signature on October 14 with eight countries and EU signing, Budapest Convention 25-year conference on October 14, European Court of Human Rights and ICC presidents meeting on October 16, and Council of Europe Secretary General drug policy meeting on October 16.
EDPB news covering EDPB statement on data protection challenges of smart glasses on October 13, Italian DPA fine against Wind Tre EUR 16,700,000 on October 12, and Norwegian DPA fine against Xandr EUR 8,600,000 on October 16.
OCC releasing debanking report on October 14 finding all nine largest supervised banks had policies risking politically-motivated service denials, imposing $750 million assessment against Bank of America for deficient BSA/AML compliance on October 13, and Comptroller Gould discussing debanking report findings.
EEOC newsroom covering Il Fornaio $3,000,000 sexual harassment settlement on October 13, Wagner Equipment $200,000 disability discrimination settlement on October 13, San Antonio car dealerships $430,000 sex discrimination settlement on October 9, and multiple additional sexual harassment settlements.
Japan Ministry of Justice covering announcement of 2026 bar examination results date and time on October 14, Justice Minister press conferences, and Japanese Justice Minister's attendance at the 15th UN Crime Prevention and Criminal Justice Congress in Abu Dhabi on October 15.
Legal & Complianceを毎週、自動で監視
このレポートは一次ソースのみから生成されています。テーマとソースを選べば、引用付きレポートが毎週届きます。7日間無料トライアル・$33/月から。
無料トライアルを始める