Regulatory Intelligence Feed

The European Commission has published the final implementation timeline for the AI Act. High-risk AI systems must demonstrate compliance by Q3 2026. Companies operating in the EU need immediate gap assessments.

New SEC proposals would require registered entities to report significant cybersecurity incidents within 48 hours, down from the previous 4-day requirement. Incident response plans require immediate review.

The Financial Conduct Authority has issued stricter guidelines on cryptoasset promotions, requiring clearer risk warnings and a 24-hour cooling-off period for first-time investors.

The California Privacy Protection Agency has initiated a sweep of data broker compliance, focusing on 'Do Not Sell/Share' mechanisms and dark patterns in consent flows.

MAS has published a consultation paper on regulating single-currency stablecoins, proposing strict reserve requirements and redemption timelines for issuers.