Insights for North, Central, and South America, and the Caribbean.
The OCC’s new examiner framework rates bank AI by the harm a failure could cause and how independently it acts, putting autonomous payment agents in the top risk tier.
New York now requires AI companion chatbot operators to verify ages and block 12 categories of unsafe features for users under 18.
A New Mexico judge orders Meta to pay $25 billion after a jury found it misled Facebook users about privacy, in a case rooted in the Cambridge Analytica scandal.
The Privacy Commissioner of Canada has launched a Children’s Privacy Code setting expectations on consent, profiling, deceptive design, and privacy-protective defaults for under-18s.
Research reported by Reuters shows a Chinese-speaking attacker used autonomous AI agents to probe more than 1,200 websites and break into sites linked to over 100 companies.
A security incident forced Ahold Delhaize to shut down systems across its European and US grocery brands, halting Albert Heijn’s online shopping and some of its distribution centres.
The Pentagon’s Defense Manpower Data Center says attackers exploited a file-sharing flaw and stole personal data of over 3 million people between October 2025 and July 2026.
Amendments to the Connecticut Data Privacy Act, including a ban on selling precise geolocation data, take effect on 1 October 2026.
California’s governor signs 13 AI bills, including human review of AI-driven dismissals, as the first parts of Connecticut’s AI Responsibility and Transparency Act take effect.
Six major AI developers sign a voluntary White House accord promising internal controls, external audits, and board oversight of frontier AI risks.
The US Federal Trade Commission opens an investigation into OpenAI, Anthropic, and the AI evaluator METR over the potential dangers of frontier AI.
CISA confirms attacks on over 100 internet-exposed US water and wastewater systems in July 2026, which US officials believe were likely Iranian.