7 dated developments from December 2025 that bear on AI compliance, each checked against the source linked. Entries are tagged by industry; the newest developments and fixed deadlines ahead are on the AI regulation news page.
Feeds (Atom): All changes · Banks and credit unions · Private equity and asset managers · Hospitals and health systems · Insurers · Employers and HR · Law firms and legal teams · Manufacturers · Importers and exporters. Data: updates.json.
The proposed rule would remove the source attribute and predictive DSI risk management requirements for certified health IT developers. Comments closed February 27, 2026; not final as of October 2026.
Source: Federal Register · Guide: AI in health care
The page collects resources for evaluating AI and AI vendors, presented as tools rather than new regulatory requirements, and ties AI vendor oversight to existing third-party letters 07-CU-13 and 01-CU-20.
Source: Troutman Pepper Locke, Consumer Financial Services Law Monitor
By a 2-0 vote, the Commission set aside the order against Rytr, an AI writing tool, finding that the facts alleged in the complaint fail to support allegations that Rytr violated Section 5 and that the order unduly burdens innovation in the nascent AI industry. The release quotes the director of the Bureau of Consumer Protection saying that condemning a technology or service simply because it potentially could be used in a problematic manner is inconsistent with the law and ordered liberty, and states that the FTC will continue to hold accountable actors that use AI to violate the law or deceive consumers about the capabilities of their generative AI.
Source: FTC press release, December 22, 2025 · Guide: AI pricing and antitrust
The National Defense Authorization Act for Fiscal Year 2026 (S. 1071) was approved December 18, 2025. The Senate had attached the GAIN AI Act to its version of the bill; the enacted text contains no GAIN AI Act language and no section 1758A of the Export Control Reform Act. The standalone bills, S. 3150 and H.R. 5885, remained in committee as of October 23, 2026. No statute requires a priority-for-US-buyers certification; BIS license requirements under the EAR apply, including the certifications about US supply in the January 15, 2026 license review policy for H200-class chips to China or Macau.
Source: Public Law 119-60, govinfo.gov · Guide: AI compliance, layer by layer
The report's generative AI section describes governance, testing, and monitoring practices for broker-dealers using the technology and discusses emerging risks from AI agents. Relevant to broker-dealers affiliated with banks, sponsors, and asset managers.
Source: FINRA, 2026 Annual Regulatory Oversight Report: Generative AI · Guide: AI in financial services
Larger covered institutions, including advisers with at least $1.5 billion in assets under management, must comply with the incident response, customer notice, and service provider oversight provisions adopted May 16, 2024.
Source: Baker Donelson, Regulation S-P: June 3, 2026 Compliance Deadline for Smaller Investment Advisers · Guide: AI in financial services
DCWP had reviewed 32 companies' posted bias audits and found one issue; the Comptroller's team found at least 17 potential problems in the same 32. DCWP generally agreed with the recommendations while disputing some findings. An audit of the regulator, not a penalty on any employer.
Source: Office of the New York State Comptroller, audit report 2024-N-6 (PDF) · Guide: AI in hiring and HR