Policy desk

Automakers can apply for the second batch of the L3 access pilot to obtain conditional approval

Federal civilian agencies and their suppliers cannot deploy or retain DeepSeek products or third-party services built on them in government IT systems.

Federal civilian agencies using DeepSeek models or services must stop and switch to alternatives.

Vendors serving US federal agencies must audit and remove DeepSeek technology or derivative components integrated in their products.- Third-party services built on DeepSeek (fine-tuned, distilled, or packaged) are also covered; companies with US government business need to plan model replacement.- Chinese AI models face tighter access to the US federal market; DeepSeek-dependent go-to-market strategies need reassessment.

Companies selling to US federal agencies or their suppliers must verify their tech stack contains no DeepSeek or derivative models.

Vendors and integrators in federal civilian supply chains must identify and replace products built on DeepSeek.- Companies building on Chinese open-source models face procurement restrictions when targeting US government customers.- Tightening two-way controls between the US and China raises compliance scrutiny for Chinese AI firms operating in the US and vendors with ASEAN footprints.

Procurement of DeepSeek-origin or DeepSeek-architecture-based hardware, software, and services to U.S. federal civilian agencies is prohibited, blocking related contracts immediately.

Companies selling to US federal agencies must confirm their supply chains contain no DeepSeek components or risk losing procurement eligibility

Federal software vendors must audit which open-weight models are embedded in products sold to civilian agencies and demonstrate supply chain compliance to keep contracts

Providers of high-risk AI systems that implement EN 18286 gain a presumption of conformity with Article 17 QMS requirements

Frontier model providers operating in the EU face AI Act obligations on safety-incident reporting and cooperation with investigations; insufficient explanations escalate to formal enforcement.

On-device LLMs offered in China must complete CAC filing before launch; devices without updated filings (e.g. iPhone 15/15 Plus) do not carry the AI features

Mobile phone manufacturers must file AI models used in their devices with Chinese regulators

AI companies must ensure their models do not launch or assist in cyberattacks, or face potential legal consequences

Companies must sign commercial agreements with Reddit to access its data

AI companies must cooperate with investigations and provide internal records and executive testimony

AI labs must cooperate with the investigation and provide documents and executive testimony

ADAS providers must enhance detection capabilities for stationary or slow-moving vehicles

AI companies must evaluate whether their product restrictions comply with supply chain security regulations to avoid being classified as 'manipulating products'

Increases credibility and transparency of AI model evaluation results

Obligations: The FAA is obligated to ensure the AI system (like SMART) it deploys for air traffic management meets safety standards and provides reliable routing advice to controllers, while the system itself does not directly control planes. • Opportunities: The AI system can help optimize air traffic flow, reduce congestion, and improve airport operational efficiency. • Deadlines: The system was deployed in the airspace where the American Airlines/Black Hawk collision that killed 67 people in January 2025 occurred, requiring assurance of its safety and effectiveness.

Obligations: Companies using Zhipu MaaS must apply for and enable the non-storage feature if they require strict data privacy protection for user interactions. Compliance is required for user requests.

Obligations: Companies deploying Meta smart glasses must comply with Meta's privacy guidelines, implementing the indicator light system and applying software updates to prevent vulnerabilities.

Obligations: Companies must comply with the new AI-based air traffic management system for flight scheduling and rerouting. • Opportunities: Enhanced flight safety, increased air traffic capacity, and improved operational efficiency. • Deadlines: The system is set to be operational by September 21, 2026, with a 12-year contract for development.

Must equip AI models with 'kill switch' functionality and establish independent auditors; - Must collaborate with the expert panel to provide recommendations within two months; - Must comply with California's AI safety regulations, facing compliance risks otherwise.

Obligations: Companies deploying or selling smart glasses with camera capabilities must ensure compliance with GDPR and local privacy laws, particularly regarding consent and transparency. • Opportunities: There may be increased demand for privacy-enhancing technologies or solutions that address the concerns raised by the investigation. • Deadlines: Companies must ensure their products do not facilitate illegal activities such as unauthorized filming, as enforcement actions can result in significant penalties.

Obligations: Companies must adopt the Lanyun Yuan Sheng Dai tool for efficient and accurate pre-listing compliance checks, ensuring all key fields across documents are consistent and compliant with regulations like the Advertising Law.

Obligations: OpenAI is required to track, investigate, and publicly disclose instances of model misalignment according to the new framework, which sets criteria and timelines for disclosure.

Obligations: Content creators must ensure their audio content does not infringe on others' voice rights. • Opportunities: Platforms like Douyin offer a structured way to report and resolve voice-related disputes, improving user trust. • Deadlines: Users can now report suspected infringements through the new portal, though specific deadlines for resolution are not mentioned.

Obligations: Companies must exercise caution when using AI tools, not blindly trust or grant permissions to unknown AI services. They must set clear behavioral boundaries and strict permissions for AI agents, not casually open internet access or content editing rights.