Policy desk

The designated entities have US assets frozen and are barred from any transactions with US persons, cutting off funding and partnership channels immediately

Models exceeding 2T parameters or 10^26 FLOPS training compute will require export approval, and public open-source releases could be restricted — release strategies must be re-evaluated

Transfers of AI technology, models or related technical materials abroad (including to ASEAN) will require prior export licences, raising deal timelines and compliance costs

Exporting non-public large model, agent, or computing cluster technologies via licensing, sale, or weight delivery requires interim registration with MOFCOM during the transition; in-flight transactions are also covered, with no grandfathering.

Microsoft's UK bundling and default-install practices, including Copilot, face regulatory intervention risk; enterprises relying on the Microsoft ecosystem could gain more supplier choice

Export of large models, AI agents and computing cluster technologies would become restricted, so cross-border licensing, partnerships and deployments need export-control review

Export of model weights, source code, and training methods above the 10^26 FLOPs or 2 trillion parameter thresholds will require approval before release, delaying or blocking cross-border collaborations

Cross-border export or transfer of AI, biopharma or solar technology will require approval, so companies must plan licensing ahead

Chinese companies transferring AI models, algorithms or related technology abroad will face new export licensing requirements.

Companies exporting large model, agent, or computing cluster technologies must complete export licensing or pre-export registration for the 23 AI items

Overseas localised deployment of restricted large models falls under export control and requires a licence (automatic licence available for deployment on overseas self-owned cloud); API calls, SaaS apps and lightweight on-device deployment are outside scope.

Frontier model providers operating in the EU face AI Act obligations on safety-incident reporting and cooperation with investigations; insufficient explanations escalate to formal enforcement.

Medical AI companies gain legal operating opportunities in Utah

Companies must ensure AI and blockchain applications comply with Indonesia's data governance requirements

Obligation: AI model providers must obtain third-party validation before deployment in NYC

AI companies must ensure their models do not launch or assist in cyberattacks, or face potential legal consequences

AI companies must cooperate with investigations and provide internal records and executive testimony

AI labs must cooperate with the investigation and provide documents and executive testimony

Google must provide access to certain data and services to competitors, altering its market behavior

AI companies must deploy independent auditors who directly report to the new regulatory agency

AI model providers must implement stricter security measures to prevent agents from bypassing security barriers

Companies must establish and maintain Records of Processing Activities to meet compliance requirements

Data center operators must disclose their energy and water consumption data

Obligations: Companies deploying or selling smart glasses with camera capabilities must ensure compliance with GDPR and local privacy laws, particularly regarding consent and transparency. • Opportunities: There may be increased demand for privacy-enhancing technologies or solutions that address the concerns raised by the investigation. • Deadlines: Companies must ensure their products do not facilitate illegal activities such as unauthorized filming, as enforcement actions can result in significant penalties.

Companies must provide equivalent employment or pay severance/training fees for employees whose jobs are replaced by robots.

Obligations: AI companies operating in California may be subject to new regulatory requirements, including potential mandatory security audits by independent third parties. • Opportunities: Companies may gain clarity in the regulatory framework for AI safety, potentially reducing uncertainty. • Deadlines: Companies should prepare for the upcoming two-month timeline for the expert panel to submit its recommendations and the subsequent legislative process.

Obligations : Frontier AI labs must consider and implement safety mechanisms like a 'kill switch', and must have external monitoring and mandatory safety plans. • Opportunities : Provides clear regulatory direction for AI companies in California, helping to stabilize the market and facilitate long-term development. • Deadlines : The expert panel must submit recommendations within two months, with subsequent potential legislative processes.

Companies need to assess potential tax obligations for their automation projects.

Obligations: AI companies must ensure their content training practices comply with existing copyright laws to avoid costly litigation and financial penalties. • Opportunities: Companies may need to invest in developing and licensing alternative training data sources to mitigate legal risks. • Deadlines: While no specific deadlines are mentioned, the ongoing legal proceedings and potential court rulings will set precedents for future AI content usage.

Obligations: Social media platforms must comply with age restrictions, implement parental control modes for 13-15 year olds, and build in safety features like usage time limits. • Opportunities: Platforms can develop age-appropriate services and tools for parents, potentially expanding their user base within a regulated framework. • Deadlines: The legislation is currently in the drafting stage, with no specific enforcement date mentioned, but it is expected to enter the legislative process and be enacted.