DROPLETS
A circulated draft FCC order would cut the foreign-ownership disclosure threshold from 10% to 5%, add cybersecurity and Covered List certifications, and force a one-time filing by every Section 214 authorization holder.
The FCC is scheduled to vote October 29, 2026 on a draft Report and Order and Further Notice of Proposed Rulemaking in the Evolving Risks proceeding (IB Docket No. 23-119), circulated October 8 and expressly subject to change. If adopted, the rules would take effect 60 days after Federal Register publication, though the amendments to sections 63.18, 63.19, 63.21 and 63.24 and the one-time collection would await OMB Paperwork Reduction Act clearance.
…
A Court of Justice judgment in Case C-70/25, arising from a consumer phished while selling an item on an online marketplace, bears on how quickly payment service providers must return funds for unauthorised transactions.
The DLA Piper alert analyses a Court of Justice judgment in Case C-70/25, Tukowiecka, arising from a consumer who was phished after listing goods for sale on an online marketplace. The reference concerns the timing of a payment service provider's duty to return funds after an unauthorised payment transaction, and touches two recurring lines: whether a consumer may bear the loss where a payment was induced by deception rather than a technically defective transaction, and whether short refund deadlines sit comfortably with the Union payment services framework and the staged refund obligations for unauthorised instant payments.
Why it matters: the outcome sets the outer limit on how long a bank or other provider can sit on a consumer's money after a scam, which feeds directly into retail banking liability allocation, marketplace and platform payment arrangements, and fraud reimbursement practice.
…
A Notice of Withdrawal issued October 21, 2026 partially withdraws proposed section 355 rules on the device prohibition and related limits, easing uncertainty for corporate spin-off structuring.
On October 21, 2026, the US Department of the Treasury and the Internal Revenue Service published a Notice of Withdrawal that partially withdraws the proposed regulations issued under Internal Revenue Code section 355, the statutory provision governing tax-free spin-offs. The withdrawn items include the proposed "device prohibition," under which the government had sought to deny tax-free treatment to a spin-off whose distribution or corporate purpose was viewed as lacking sufficient corporate business purpose, together with at least one further item the summary description of the notice does not specify.
…
The FCC's October 29 vote would cut Section 214 ownership disclosure from 10% to 5%, impose a one-time collection on existing authorization holders, and propose presumptive disqualification of foreign adversary-linked applicants.
On October 29, 2026, the FCC is scheduled to vote on a draft Report and Order and Further Notice of Proposed Rulemaking (FCC-CIRC 2610-05, circulated October 8) rewriting international Section 214 authorization rules. The draft would cut the ownership disclosure threshold in application and transfer filings from 10% to 5% of equity and voting interests, with indirect equity attributed pass-through but voting interests computed under separate rules, and would exempt interests held through a US public company absent its actual knowledge. It would also require all existing authorization holders to file one-time 5% ownership and control information, with noncompliance risking forfeiture and revocation, plus 30-day notice of material changes. The Further Notice proposes presumptive disqualification, rebuttable only by clear and convincing evidence, for applicants owned by or directed by a foreign adversary, including Covered List entities and applicants with foreign adversary financing or leadership links.
…
DOJ's Civil Division and HHS opened a six-month False Claims Act self-disclosure pilot for healthcare entities, promising favorable terms — though eligibility, protections and sunset mechanics still need reading from the program text.
On October 22, 2026, the DOJ Civil Division and HHS announced a six-month Healthcare False Claims Act Self-Disclosure Pilot Program, which the announcing firm (Ropes & Gray) describes as offering favorable terms. The available report is an excerpt, so the operative details are not confirmed here: the scope of qualifying self-disclosures, the treatment of potential liability, and any relator-claim or damages consequences are not set out in the material reviewed and should be verified against the published program materials before any entity relies on them.
Why sophisticated counsel should care: FCA exposure is existential for providers, and a treble-damages-plus-penalty theory per false claim can outweigh a payer's entire margin for the affected claim year. A time-boxed disclosure window converts a discretionary reporting decision into a calendared one, and the sequencing of internal investigation, disclosure and corrective action relative to an existing government inquiry is often outcome-determinative.
…
Treasury's October 22 proposal would implement the ROAD to Housing Act ban on large institutional buyers of single-family homes, putting a 350-home investment-control threshold in play for residential funds and lenders.
Treasury issued a proposed rule on October 22 implementing section 1001 of the 21st Century ROAD to Housing Act, which bars large institutional investors from acquiring single-family homes. The rule reportedly applies to entities that exercise investment control over 350 or more single-family homes, addressing the non-professional purchaser exemption that has allowed bulk buyers to operate at scale. For clients, the threshold is structural rather than incidental: a sponsor whose portfolio crosses it could face divestiture obligations or restructured acquisition vehicles, making holding-company design, aggregation rules and portfolio-level diligence live workstreams. Single-family rental operators, residential investment funds, homebuilders and the lenders financing them should read the full text for the definitions of investment control, any exemptions and phase-in mechanics before modeling deal pipelines. The proposal is not final, so obligations remain prospective. The next development to watch is the comment docket and any final rule; the source alert does not describe the comment
…
A DHS order under the federal supply-chain security statute reportedly bars DeepSeek from federal civilian systems and reaches third-party products built with its technology.
The Department of Homeland Security has published an exclusion and removal order, signed by Secretary Markwayne Mullin under the Federal Acquisition Supply Chain Security Act of 2018, directing federal agencies to bar DeepSeek and its affiliates from civilian systems. The reported scope is unusually broad: the order is described as reaching third-party products built with DeepSeek's technology, not merely DeepSeek's own applications, which would capture vendors that have integrated DeepSeek models into software supplied to or used by federal agencies. Sophisticated counsel should read this as a supply-chain-security action with private-sector spillover, potentially touching product roadmaps, model-selection decisions, contractual representations about compliance with federal information-security restrictions, and diligence in government-facing transactions. Two thresholds matter for clients: how far "third-party products built with its technology" extends, and whether non-federal customers and counterparties follow the federal posture. Available reporting is truncated on operative de
…
DOJ says CVS and related entities agreed to pay $315 million to resolve allegations that CVS filled unlawful opioid prescriptions and resulting false claims between 2013 and 2025.
DOJ announced on October 13, 2026 that CVS Pharmacy Inc. and related corporate entities entered two settlement agreements resolving allegations that, from October 17, 2013 through December 2, 2025, CVS filled prescriptions unlawful under the Controlled Substances Act and submitted false claims to federal healthcare programs. The reported payment is $315 million, and the two agreements reportedly impose compliance obligations beyond the money itself. The source does not set out the allocation of the figure among False Claims Act, Controlled Substances Act and related penalties, or whether the resolution includes a deferred prosecution agreement or a corporate integrity agreement, so those structural details should be treated as unconfirmed until the agreements themselves are public. Three follow-ons matter for clients: the operational requirements the settlement places on pharmacy dispensing and prescriber verification; downstream exposure for health systems, prescribers and PBMs that supplied volume or data; and the interaction between federal relief and the separate multistate opioi
…
A top-firm legal update maps how to contract for outsourced functions delivered by AI agents: define the service around the function, measure AI-and-human performance together, and price the agentic model.
Mayer Brown's legal update sets out deal-structuring considerations for "agentic managed services" — outsourcing arrangements in which a provider deploys AI agents to perform ongoing business and technology functions, with provider personnel monitoring, supporting and managing those agents, and the provider remaining accountable for delivery. Three elements define the structure: the service is defined around the outsourced function rather than around the agents; performance commitments measure the combined AI-and-human service; and charges reflect the cost and value of the agentic delivery model rather than legacy headcount or time-and-materials pricing. For major-firm clients this is a usable template for the next wave of enterprise outsourcing and technology-services mandates as vendors move agent pilots into accountable, production-scale delivery. Counsel should test liability and indemnity allocation for agent-generated outputs, ownership of agent-created work and training data, transition and exit rights if human-staffing assumptions change, and how service levels, audit rights
…
UK Supreme Court decided Scottish Power (SPCL) Ltd v HMRC [2026] UKSC 35 on 21 October 2026, a corporation tax appeal seeking to reconcile a century of statutory caselaw, with implications for legacy capital tax positions.
Hogan Lovells reports that the UK Supreme Court handed down its decision on 21 October 2026 in Scottish Power (SPCL) Limited v HMRC [2026] UKSC 35, a corporation tax appeal against HMRC. The firm's note says the judgment makes a sustained effort to reconcile more than 100 years of caselaw on statutory continuity — how earlier capital tax provisions interact with later replacements — which matters for historic assessments and for taxpayers holding legacy capital allowance and depreciation positions.
The significance for major-firm clients is two-fold. First, the outcome potentially determines the treatment of old capital allowance and depreciation positions across a wide population of corporate taxpayers and their advisers. Second, because the reasoning is described as resolving an arc of case law running back into the early twentieth century, it may shape how HMRC argues continuity of statutory provisions in other disputes, and how taxpayers resist.
…
Faegre Drinker's dissection of the new EU Product Liability Directive explains how member-state transposition will codify novel heads of recoverable damages and reshape defect presumptions and disclosure duties.
Faegre Drinker's analysis dissects the EU's new Product Liability Directive (PLD), which updates the Union's 1985 product liability framework and requires each member state to transpose it into national legislation. Because PLD-style regimes operate on strict-liability principles, the practical consequence is that the substance of claims, the allocation of proof and the value of damages all change, not merely the labels used.
The alert's centre of gravity is the PLD's codification of novel categories of recoverable damages. The source's own framing is that the directive adds novel heads of loss; the specific reported categories include medical costs, loss of enjoyment, and losses tied to destroyed or corrupted data. That expansion is directly relevant to clients selling software, connected devices and AI-enabled products, where the boundary of "product" and the traditional repair-or-replacement measure of loss have long been contested. The PLD also introduces disclosure duties and rebuttable presumptions of defect and causation, which typically shift timing and cost earlier in dispu
…
The FDA's final guidance codifies how the agency will regulate software functions that support prescribed drugs, giving life-sciences clients a clearer framework for digital features in combination products.
FDA has issued final guidance titled "Regulatory Considerations for Prescription Drug Use-Related Software," finalizing the September 2023 draft and setting out how the agency intends to apply its statutory authorities to software that supports prescription drug use.
The practical significance is clarity on regulatory pathway. Software functions that merely help a patient take a drug as directed — reminders, adherence prompts, dose logging — are generally not devices and fall outside FDA premarket requirements. Functions that recommend dosing, or that drive dosing decisions, typically cross into device jurisdiction and may require clearance or approval, potentially as a combination product. The guidance also bears on labeling and marketing claims, shaping promotion review, enforcement exposure, and product liability risk.
…
The OCC's 721-page GENIUS Act final rule sets reserve, redemption, capital and permitted-activity standards for OCC-supervised payment stablecoin issuers, drops the proposed yield presumption and takes effect Jan. 18, 2027.
On Oct. 21 the OCC published a 721-page final rule (RIN 1557-AF41) implementing the GENIUS Act for permitted payment stablecoin issuers and foreign payment stablecoin issuers within its jurisdiction, and for certain custody activities of OCC-supervised entities. It takes effect Jan. 18, 2027; BSA/AML and OFAC requirements are deferred to a separate Treasury-coordinated rulemaking. The final rule departs from its proposal: the rebuttable presumption that related-third-party arrangements are prohibited yield payments is eliminated, leaving the statutory yield ban as a fact-specific inquiry; three permitted PPSI activities are added (holding nonpayment stablecoins as principal to pay fees, establishing reserve-asset trusts, managing FX risk, subject to conditions); reserve diversification shifts to a principles-based approach with stress-testing and buffer requirements; no minimum insured-deposit amount is required of custodians; and PPSIs must notify the OCC within 24 hours if redemptions exceed 10% of a brand's outstanding issuance value, with discretion to extend redemption timelines
…
NYC's final Fair Chance Act rules take effect October 30, 2026, extending the pre-adverse-action response period to five business days, covering current employees, and narrowing the direct-relationship and unreasonable-risk exceptions.
On September 15, 2026, the New York City Commission on Human Rights adopted final amended rules implementing the Fair Chance Act (Local Law 4 of 2021); they take effect October 30, 2026. Employers must now give candidates and current employees at least five business days to respond to a criminal-history inquiry before revoking a conditional offer or taking adverse action, up from three, and must hold the position open meanwhile. The process now expressly covers current employees whose pending cases or convictions arise during employment, and requires the Fair Chance Employment Notice, the written inquiry, and a written Fair Chance Employment Analysis.
…
A federal prudential regulator has moved the GENIUS Act's stablecoin regime from proposal to final rule, giving bank and fintech clients a fixed federal framework to map products and charters against.
OCC has finalized its stablecoin framework under the GENIUS Act, according to a Jones Day alert dated 26 October 2026. The source material available for this briefing is limited to the alert's headline, so the rule's specific provisions — the boundary between permitted payment stablecoins and other categories, issuer eligibility, reserve, disclosure, capital and liquidity treatment, custody and anti-money-laundering expectations, and the treatment of issuer applications — are not confirmed here and should be read directly from the adopting text.
What is confirmed is that the prudential regulator for national banks and federal savings institutions has moved from proposal to final rule on stablecoin issuance and related activity. That is the point in the statutory sequence at which bank and fintech clients can map product roadmaps, chartering and partner arrangements onto a settled federal framework rather than an interim one, and at which counsel can begin scoping supervision, compliance and disclosure obligations.
…
Treasury's October 22, 2026 NPRM would implement the COINS Act enacted in December 2025, previewing a broader outbound investment regime; the source does not detail the proposed scope, comment period, or final rule timing.
On October 22, 2026, the U.S. Department of the Treasury issued a Notice of Proposed Rulemaking to implement the Comprehensive Outbound Investment National Security Act (COINS Act), enacted in December 2025. The NPRM is framed as broadening the outbound investment regime, and the Ropes & Gray alert is presented as "OISP 2.0," signalling a second phase of the outbound investment security program.
Why sophisticated counsel should care: outbound investment screening has become a standing national-security gate for transactions involving U.S. nexus technology and capital, and an NPRM is the point at which clients can still shape the operative text through comment. The scope of covered transactions, covered technology and sectors, and any exemptions or reporting mechanics in the proposed text will determine whether a transaction is reportable, permitted, or prohibited — and therefore whether deal timetables, diligence protocols, and covenant packages need revision. Because the source summary does not set out the proposal's substantive detail, its precise reach and any changes from the en
…
Newly proposed U.S. Treasury and Chinese MOFCOM measures would restrict a wide range of biotech transactions and collaborations between U.S. and Chinese entities while leaving many licensing deals permitted.
Arnold & Porter reports that the U.S. Treasury Department and China's Ministry of Commerce have each proposed new steps intended to address U.S.-China competition in biotechnology. Taken together, the proposals could prohibit or restrict a broad range of transactions and collaborations between U.S. and Chinese entities, even as many licensing arrangements would continue to proceed.
Why sophisticated counsel should care: this is a dual-track national security and economic policy intervention sitting directly on top of deal pipelines. Life sciences clients with Chinese counterparties — in licensing, joint development, equity investment, supply or distribution arrangements — face a moving target, and counterparties, diligence postures and deal-structure choices can shift quickly before any measure is final. Because both governments are acting at once, structuring around a single regime will not suffice, and licensing carve-outs make the equity/commercial boundary in any agreement newly consequential.
…
A published California Court of Appeal ruling holds courts cannot second-guess an employer's individualized assessment of criminal history and that technical CFCA violations require proof of actual harm.
A published California Court of Appeal decision in McInerney v. Regents of the University of California gives employers meaningful relief under the California Fair Chance Act (CFCA). The court held the CFCA does not permit a court or jury to "second-guess" an employer's individualized assessment of an applicant's conviction history, rejecting the argument advanced by the California Civil Rights Department that the assessment's outcome must satisfy the statute's "direct and adverse relationship" standard. The panel also held the CFCA sets no seven-year limit on considering convictions, while noting that relying on older convictions in a Title VII or FEHA disparate-impact claim can create a rebuttable presumption that they are not job-related and consistent with business necessity. Critically, a plaintiff seeking damages for technical procedural violations, such as deficient notice, must prove actual harm — that the employer would have hired the applicant but for the deficiency. The court contrasted the CFCA with New York's ban-the-box law and California's ICRAA, which allow fixed stat
…
The OCC has issued a final rule implementing the GENIUS Act for permitted and foreign payment stablecoin issuers within its jurisdiction and for related custody activities of OCC-supervised entities.
What happened: On October 21, 2026, the Office of the Comptroller of the Currency issued a final rule implementing the GENIUS Act for permitted and foreign payment stablecoin issuers under its jurisdiction, and for related custody activities of OCC-supervised entities. The reporting comes from Orrick, Herrington & Sutcliffe's client alert.
Why sophisticated counsel and clients care: the GENIUS Act created a federal regime for payment stablecoins, and the OCC rule is the first rulemaking to translate the statute into binding requirements for issuers the OCC supervises — including entities seeking to serve the US market from abroad. Because the rule reaches both issuance and custody by OCC-supervised institutions, its scope is likely to touch banks, trust companies, and fintech partners that hold or service stablecoin reserves or customer balances. It also draws the perimeter between federal supervision and state regimes for issuers falling outside OCC jurisdiction, the point on which many market participants have been waiting for the first concrete line.
…
Mayer Brown reports California has legislated the first US state restrictions on AI use by arbitrators and counsel, forcing a fresh look at arbitration clauses, arbitrator disclosures and firm AI policies.
Mayer Brown reports that California has become the first US state to legislate limits on the use of artificial intelligence by arbitrators and counsel. Because the material available for this briefing is limited to the firm's publication title and date, the statute's specific provisions, effective date and enforcement mechanism are not established here, and the "first" characterization is the firm's.
For major-firm clients and counsel, a state-law constraint on AI use in arbitration is a cross-practice compliance event rather than a single matter: arbitration clauses and protocols, arbitrator onboarding and disclosure statements, and any firm policy on generative-AI research or drafting all sit within potential reach. Counsel appearing before California arbitrators would need to know what is prohibited, what must be disclosed, and whether breach carries fee-shifting or disciplinary consequences, particularly if California is a venue with material caseload.
…
In an en banc decision the U.S. Court of Appeals for the Eleventh Circuit overruled the 40-year-old Bolton v. Inland Fresh Seafood precedent, removing mandatory administrative exhaustion as a prerequisite to statutory ERISA claims.
In an en banc decision, the U.S. Court of Appeals for the Eleventh Circuit overruled Bolton v. Inland Fresh Seafood Corp. of America, Inc., a roughly four-decade-old precedent requiring ERISA plaintiffs to exhaust administrative remedies before pursuing statutory claims in court. According to the firm's summary, the court held that mandatory administrative exhaustion is no longer required for statutory ERISA claims.
The development matters because exhaustion has long functioned as a threshold defense in ERISA litigation, and courts have repeatedly dismissed or stayed claims on that basis. Removing the requirement strips employers and plan administrators of one of their most dependable early-stage dismissal tools, while shortening the path for plaintiffs to file claims, potentially before claim determinations are issued.
…
Executive Order 14436, issued October 16, 2026, implements the Graham Act of 2026 on Russia and Iran, converting statutory authority into operative sanctions obligations while waiving certain tariff measures.
President Trump issued Executive Order 14436 on October 16, 2026, titled "Implementing the Lindsey O. Graham Sanctioning Russia and Iran Act of 2026." Per the reporting available, the order is the operative instrument that activates the statute's sanctions architecture and simultaneously waives certain tariff measures.
For sanctions, export-control, and trade counsel, the statute was the headline; the implementing order is where the detail lands. Designations, sectoral and secondary restrictions, and any carve-outs determine what screening, diligence, contracting language (sanctions clauses, cargo routing, payment rails), and classification decisions now turn on the E.O.'s annexes rather than the statute's summary. Sophisticated clients also face an unusual pairing: sanctions exposure and tariff exposure are moving in opposite directions for the same counterparties, so one counterparty may carry both an embargo risk and a tariff-relief opportunity.
…
A circulated draft FCC order would cut the foreign-ownership disclosure threshold from 10% to 5%, add cybersecurity and Covered List certifications, and force a one-time filing by every Section 214 authorization holder.
The FCC is scheduled to vote October 29, 2026 on a draft Report and Order and Further Notice of Proposed Rulemaking in the Evolving Risks proceeding (IB Docket No. 23-119), circulated October 8 and expressly subject to change. If adopted, the rules would take effect 60 days after Federal Register publication, though the amendments to sections 63.18, 63.19, 63.21 and 63.24 and the one-time collection would await OMB Paperwork Reduction Act clearance.
…
A Court of Justice judgment in Case C-70/25, arising from a consumer phished while selling an item on an online marketplace, bears on how quickly payment service providers must return funds for unauthorised transactions.
The DLA Piper alert analyses a Court of Justice judgment in Case C-70/25, Tukowiecka, arising from a consumer who was phished after listing goods for sale on an online marketplace. The reference concerns the timing of a payment service provider's duty to return funds after an unauthorised payment transaction, and touches two recurring lines: whether a consumer may bear the loss where a payment was induced by deception rather than a technically defective transaction, and whether short refund deadlines sit comfortably with the Union payment services framework and the staged refund obligations for unauthorised instant payments.
Why it matters: the outcome sets the outer limit on how long a bank or other provider can sit on a consumer's money after a scam, which feeds directly into retail banking liability allocation, marketplace and platform payment arrangements, and fraud reimbursement practice.
…
Faegre Drinker's dissection of the new EU Product Liability Directive explains how member-state transposition will codify novel heads of recoverable damages and reshape defect presumptions and disclosure duties.
Faegre Drinker's analysis dissects the EU's new Product Liability Directive (PLD), which updates the Union's 1985 product liability framework and requires each member state to transpose it into national legislation. Because PLD-style regimes operate on strict-liability principles, the practical consequence is that the substance of claims, the allocation of proof and the value of damages all change, not merely the labels used.
The alert's centre of gravity is the PLD's codification of novel categories of recoverable damages. The source's own framing is that the directive adds novel heads of loss; the specific reported categories include medical costs, loss of enjoyment, and losses tied to destroyed or corrupted data. That expansion is directly relevant to clients selling software, connected devices and AI-enabled products, where the boundary of "product" and the traditional repair-or-replacement measure of loss have long been contested. The PLD also introduces disclosure duties and rebuttable presumptions of defect and causation, which typically shift timing and cost earlier in dispu
…
NYC's final Fair Chance Act rules take effect October 30, 2026, extending the pre-adverse-action response period to five business days, covering current employees, and narrowing the direct-relationship and unreasonable-risk exceptions.
On September 15, 2026, the New York City Commission on Human Rights adopted final amended rules implementing the Fair Chance Act (Local Law 4 of 2021); they take effect October 30, 2026. Employers must now give candidates and current employees at least five business days to respond to a criminal-history inquiry before revoking a conditional offer or taking adverse action, up from three, and must hold the position open meanwhile. The process now expressly covers current employees whose pending cases or convictions arise during employment, and requires the Fair Chance Employment Notice, the written inquiry, and a written Fair Chance Employment Analysis.
…
A published California Court of Appeal ruling holds courts cannot second-guess an employer's individualized assessment of criminal history and that technical CFCA violations require proof of actual harm.
A published California Court of Appeal decision in McInerney v. Regents of the University of California gives employers meaningful relief under the California Fair Chance Act (CFCA). The court held the CFCA does not permit a court or jury to "second-guess" an employer's individualized assessment of an applicant's conviction history, rejecting the argument advanced by the California Civil Rights Department that the assessment's outcome must satisfy the statute's "direct and adverse relationship" standard. The panel also held the CFCA sets no seven-year limit on considering convictions, while noting that relying on older convictions in a Title VII or FEHA disparate-impact claim can create a rebuttable presumption that they are not job-related and consistent with business necessity. Critically, a plaintiff seeking damages for technical procedural violations, such as deficient notice, must prove actual harm — that the employer would have hired the applicant but for the deficiency. The court contrasted the CFCA with New York's ban-the-box law and California's ICRAA, which allow fixed stat
…
The FDA's final guidance codifies how the agency will regulate software functions that support prescribed drugs, giving life-sciences clients a clearer framework for digital features in combination products.
FDA has issued final guidance titled "Regulatory Considerations for Prescription Drug Use-Related Software," finalizing the September 2023 draft and setting out how the agency intends to apply its statutory authorities to software that supports prescription drug use.
The practical significance is clarity on regulatory pathway. Software functions that merely help a patient take a drug as directed — reminders, adherence prompts, dose logging — are generally not devices and fall outside FDA premarket requirements. Functions that recommend dosing, or that drive dosing decisions, typically cross into device jurisdiction and may require clearance or approval, potentially as a combination product. The guidance also bears on labeling and marketing claims, shaping promotion review, enforcement exposure, and product liability risk.
…
The OCC's 721-page GENIUS Act final rule sets reserve, redemption, capital and permitted-activity standards for OCC-supervised payment stablecoin issuers, drops the proposed yield presumption and takes effect Jan. 18, 2027.
On Oct. 21 the OCC published a 721-page final rule (RIN 1557-AF41) implementing the GENIUS Act for permitted payment stablecoin issuers and foreign payment stablecoin issuers within its jurisdiction, and for certain custody activities of OCC-supervised entities. It takes effect Jan. 18, 2027; BSA/AML and OFAC requirements are deferred to a separate Treasury-coordinated rulemaking. The final rule departs from its proposal: the rebuttable presumption that related-third-party arrangements are prohibited yield payments is eliminated, leaving the statutory yield ban as a fact-specific inquiry; three permitted PPSI activities are added (holding nonpayment stablecoins as principal to pay fees, establishing reserve-asset trusts, managing FX risk, subject to conditions); reserve diversification shifts to a principles-based approach with stress-testing and buffer requirements; no minimum insured-deposit amount is required of custodians; and PPSIs must notify the OCC within 24 hours if redemptions exceed 10% of a brand's outstanding issuance value, with discretion to extend redemption timelines
…
A federal prudential regulator has moved the GENIUS Act's stablecoin regime from proposal to final rule, giving bank and fintech clients a fixed federal framework to map products and charters against.
OCC has finalized its stablecoin framework under the GENIUS Act, according to a Jones Day alert dated 26 October 2026. The source material available for this briefing is limited to the alert's headline, so the rule's specific provisions — the boundary between permitted payment stablecoins and other categories, issuer eligibility, reserve, disclosure, capital and liquidity treatment, custody and anti-money-laundering expectations, and the treatment of issuer applications — are not confirmed here and should be read directly from the adopting text.
What is confirmed is that the prudential regulator for national banks and federal savings institutions has moved from proposal to final rule on stablecoin issuance and related activity. That is the point in the statutory sequence at which bank and fintech clients can map product roadmaps, chartering and partner arrangements onto a settled federal framework rather than an interim one, and at which counsel can begin scoping supervision, compliance and disclosure obligations.
…
The OCC has issued a final rule implementing the GENIUS Act for permitted and foreign payment stablecoin issuers within its jurisdiction and for related custody activities of OCC-supervised entities.
What happened: On October 21, 2026, the Office of the Comptroller of the Currency issued a final rule implementing the GENIUS Act for permitted and foreign payment stablecoin issuers under its jurisdiction, and for related custody activities of OCC-supervised entities. The reporting comes from Orrick, Herrington & Sutcliffe's client alert.
Why sophisticated counsel and clients care: the GENIUS Act created a federal regime for payment stablecoins, and the OCC rule is the first rulemaking to translate the statute into binding requirements for issuers the OCC supervises — including entities seeking to serve the US market from abroad. Because the rule reaches both issuance and custody by OCC-supervised institutions, its scope is likely to touch banks, trust companies, and fintech partners that hold or service stablecoin reserves or customer balances. It also draws the perimeter between federal supervision and state regimes for issuers falling outside OCC jurisdiction, the point on which many market participants have been waiting for the first concrete line.
…
A DHS order under the federal supply-chain security statute reportedly bars DeepSeek from federal civilian systems and reaches third-party products built with its technology.
The Department of Homeland Security has published an exclusion and removal order, signed by Secretary Markwayne Mullin under the Federal Acquisition Supply Chain Security Act of 2018, directing federal agencies to bar DeepSeek and its affiliates from civilian systems. The reported scope is unusually broad: the order is described as reaching third-party products built with DeepSeek's technology, not merely DeepSeek's own applications, which would capture vendors that have integrated DeepSeek models into software supplied to or used by federal agencies. Sophisticated counsel should read this as a supply-chain-security action with private-sector spillover, potentially touching product roadmaps, model-selection decisions, contractual representations about compliance with federal information-security restrictions, and diligence in government-facing transactions. Two thresholds matter for clients: how far "third-party products built with its technology" extends, and whether non-federal customers and counterparties follow the federal posture. Available reporting is truncated on operative de
…
DOJ says CVS and related entities agreed to pay $315 million to resolve allegations that CVS filled unlawful opioid prescriptions and resulting false claims between 2013 and 2025.
DOJ announced on October 13, 2026 that CVS Pharmacy Inc. and related corporate entities entered two settlement agreements resolving allegations that, from October 17, 2013 through December 2, 2025, CVS filled prescriptions unlawful under the Controlled Substances Act and submitted false claims to federal healthcare programs. The reported payment is $315 million, and the two agreements reportedly impose compliance obligations beyond the money itself. The source does not set out the allocation of the figure among False Claims Act, Controlled Substances Act and related penalties, or whether the resolution includes a deferred prosecution agreement or a corporate integrity agreement, so those structural details should be treated as unconfirmed until the agreements themselves are public. Three follow-ons matter for clients: the operational requirements the settlement places on pharmacy dispensing and prescriber verification; downstream exposure for health systems, prescribers and PBMs that supplied volume or data; and the interaction between federal relief and the separate multistate opioi
…
In an en banc decision the U.S. Court of Appeals for the Eleventh Circuit overruled the 40-year-old Bolton v. Inland Fresh Seafood precedent, removing mandatory administrative exhaustion as a prerequisite to statutory ERISA claims.
In an en banc decision, the U.S. Court of Appeals for the Eleventh Circuit overruled Bolton v. Inland Fresh Seafood Corp. of America, Inc., a roughly four-decade-old precedent requiring ERISA plaintiffs to exhaust administrative remedies before pursuing statutory claims in court. According to the firm's summary, the court held that mandatory administrative exhaustion is no longer required for statutory ERISA claims.
The development matters because exhaustion has long functioned as a threshold defense in ERISA litigation, and courts have repeatedly dismissed or stayed claims on that basis. Removing the requirement strips employers and plan administrators of one of their most dependable early-stage dismissal tools, while shortening the path for plaintiffs to file claims, potentially before claim determinations are issued.
…
Treasury's October 22 proposal would implement the ROAD to Housing Act ban on large institutional buyers of single-family homes, putting a 350-home investment-control threshold in play for residential funds and lenders.
Treasury issued a proposed rule on October 22 implementing section 1001 of the 21st Century ROAD to Housing Act, which bars large institutional investors from acquiring single-family homes. The rule reportedly applies to entities that exercise investment control over 350 or more single-family homes, addressing the non-professional purchaser exemption that has allowed bulk buyers to operate at scale. For clients, the threshold is structural rather than incidental: a sponsor whose portfolio crosses it could face divestiture obligations or restructured acquisition vehicles, making holding-company design, aggregation rules and portfolio-level diligence live workstreams. Single-family rental operators, residential investment funds, homebuilders and the lenders financing them should read the full text for the definitions of investment control, any exemptions and phase-in mechanics before modeling deal pipelines. The proposal is not final, so obligations remain prospective. The next development to watch is the comment docket and any final rule; the source alert does not describe the comment
…
A circulated draft FCC order would cut the foreign-ownership disclosure threshold from 10% to 5%, add cybersecurity and Covered List certifications, and force a one-time filing by every Section 214 authorization holder.
The FCC is scheduled to vote October 29, 2026 on a draft Report and Order and Further Notice of Proposed Rulemaking in the Evolving Risks proceeding (IB Docket No. 23-119), circulated October 8 and expressly subject to change. If adopted, the rules would take effect 60 days after Federal Register publication, though the amendments to sections 63.18, 63.19, 63.21 and 63.24 and the one-time collection would await OMB Paperwork Reduction Act clearance.
…
The FCC's October 29 vote would cut Section 214 ownership disclosure from 10% to 5%, impose a one-time collection on existing authorization holders, and propose presumptive disqualification of foreign adversary-linked applicants.
On October 29, 2026, the FCC is scheduled to vote on a draft Report and Order and Further Notice of Proposed Rulemaking (FCC-CIRC 2610-05, circulated October 8) rewriting international Section 214 authorization rules. The draft would cut the ownership disclosure threshold in application and transfer filings from 10% to 5% of equity and voting interests, with indirect equity attributed pass-through but voting interests computed under separate rules, and would exempt interests held through a US public company absent its actual knowledge. It would also require all existing authorization holders to file one-time 5% ownership and control information, with noncompliance risking forfeiture and revocation, plus 30-day notice of material changes. The Further Notice proposes presumptive disqualification, rebuttable only by clear and convincing evidence, for applicants owned by or directed by a foreign adversary, including Covered List entities and applicants with foreign adversary financing or leadership links.
…
Treasury's October 22, 2026 NPRM would implement the COINS Act enacted in December 2025, previewing a broader outbound investment regime; the source does not detail the proposed scope, comment period, or final rule timing.
On October 22, 2026, the U.S. Department of the Treasury issued a Notice of Proposed Rulemaking to implement the Comprehensive Outbound Investment National Security Act (COINS Act), enacted in December 2025. The NPRM is framed as broadening the outbound investment regime, and the Ropes & Gray alert is presented as "OISP 2.0," signalling a second phase of the outbound investment security program.
Why sophisticated counsel should care: outbound investment screening has become a standing national-security gate for transactions involving U.S. nexus technology and capital, and an NPRM is the point at which clients can still shape the operative text through comment. The scope of covered transactions, covered technology and sectors, and any exemptions or reporting mechanics in the proposed text will determine whether a transaction is reportable, permitted, or prohibited — and therefore whether deal timetables, diligence protocols, and covenant packages need revision. Because the source summary does not set out the proposal's substantive detail, its precise reach and any changes from the en
…
Newly proposed U.S. Treasury and Chinese MOFCOM measures would restrict a wide range of biotech transactions and collaborations between U.S. and Chinese entities while leaving many licensing deals permitted.
Arnold & Porter reports that the U.S. Treasury Department and China's Ministry of Commerce have each proposed new steps intended to address U.S.-China competition in biotechnology. Taken together, the proposals could prohibit or restrict a broad range of transactions and collaborations between U.S. and Chinese entities, even as many licensing arrangements would continue to proceed.
Why sophisticated counsel should care: this is a dual-track national security and economic policy intervention sitting directly on top of deal pipelines. Life sciences clients with Chinese counterparties — in licensing, joint development, equity investment, supply or distribution arrangements — face a moving target, and counterparties, diligence postures and deal-structure choices can shift quickly before any measure is final. Because both governments are acting at once, structuring around a single regime will not suffice, and licensing carve-outs make the equity/commercial boundary in any agreement newly consequential.
…
Executive Order 14436, issued October 16, 2026, implements the Graham Act of 2026 on Russia and Iran, converting statutory authority into operative sanctions obligations while waiving certain tariff measures.
President Trump issued Executive Order 14436 on October 16, 2026, titled "Implementing the Lindsey O. Graham Sanctioning Russia and Iran Act of 2026." Per the reporting available, the order is the operative instrument that activates the statute's sanctions architecture and simultaneously waives certain tariff measures.
For sanctions, export-control, and trade counsel, the statute was the headline; the implementing order is where the detail lands. Designations, sectoral and secondary restrictions, and any carve-outs determine what screening, diligence, contracting language (sanctions clauses, cargo routing, payment rails), and classification decisions now turn on the E.O.'s annexes rather than the statute's summary. Sophisticated clients also face an unusual pairing: sanctions exposure and tariff exposure are moving in opposite directions for the same counterparties, so one counterparty may carry both an embargo risk and a tariff-relief opportunity.
…
A Notice of Withdrawal issued October 21, 2026 partially withdraws proposed section 355 rules on the device prohibition and related limits, easing uncertainty for corporate spin-off structuring.
On October 21, 2026, the US Department of the Treasury and the Internal Revenue Service published a Notice of Withdrawal that partially withdraws the proposed regulations issued under Internal Revenue Code section 355, the statutory provision governing tax-free spin-offs. The withdrawn items include the proposed "device prohibition," under which the government had sought to deny tax-free treatment to a spin-off whose distribution or corporate purpose was viewed as lacking sufficient corporate business purpose, together with at least one further item the summary description of the notice does not specify.
…
UK Supreme Court decided Scottish Power (SPCL) Ltd v HMRC [2026] UKSC 35 on 21 October 2026, a corporation tax appeal seeking to reconcile a century of statutory caselaw, with implications for legacy capital tax positions.
Hogan Lovells reports that the UK Supreme Court handed down its decision on 21 October 2026 in Scottish Power (SPCL) Limited v HMRC [2026] UKSC 35, a corporation tax appeal against HMRC. The firm's note says the judgment makes a sustained effort to reconcile more than 100 years of caselaw on statutory continuity — how earlier capital tax provisions interact with later replacements — which matters for historic assessments and for taxpayers holding legacy capital allowance and depreciation positions.
The significance for major-firm clients is two-fold. First, the outcome potentially determines the treatment of old capital allowance and depreciation positions across a wide population of corporate taxpayers and their advisers. Second, because the reasoning is described as resolving an arc of case law running back into the early twentieth century, it may shape how HMRC argues continuity of statutory provisions in other disputes, and how taxpayers resist.
…
A top-firm legal update maps how to contract for outsourced functions delivered by AI agents: define the service around the function, measure AI-and-human performance together, and price the agentic model.
Mayer Brown's legal update sets out deal-structuring considerations for "agentic managed services" — outsourcing arrangements in which a provider deploys AI agents to perform ongoing business and technology functions, with provider personnel monitoring, supporting and managing those agents, and the provider remaining accountable for delivery. Three elements define the structure: the service is defined around the outsourced function rather than around the agents; performance commitments measure the combined AI-and-human service; and charges reflect the cost and value of the agentic delivery model rather than legacy headcount or time-and-materials pricing. For major-firm clients this is a usable template for the next wave of enterprise outsourcing and technology-services mandates as vendors move agent pilots into accountable, production-scale delivery. Counsel should test liability and indemnity allocation for agent-generated outputs, ownership of agent-created work and training data, transition and exit rights if human-staffing assumptions change, and how service levels, audit rights
…
Mayer Brown reports California has legislated the first US state restrictions on AI use by arbitrators and counsel, forcing a fresh look at arbitration clauses, arbitrator disclosures and firm AI policies.
Mayer Brown reports that California has become the first US state to legislate limits on the use of artificial intelligence by arbitrators and counsel. Because the material available for this briefing is limited to the firm's publication title and date, the statute's specific provisions, effective date and enforcement mechanism are not established here, and the "first" characterization is the firm's.
For major-firm clients and counsel, a state-law constraint on AI use in arbitration is a cross-practice compliance event rather than a single matter: arbitration clauses and protocols, arbitrator onboarding and disclosure statements, and any firm policy on generative-AI research or drafting all sit within potential reach. Counsel appearing before California arbitrators would need to know what is prohibited, what must be disclosed, and whether breach carries fee-shifting or disciplinary consequences, particularly if California is a venue with material caseload.
…
DOJ's Civil Division and HHS opened a six-month False Claims Act self-disclosure pilot for healthcare entities, promising favorable terms — though eligibility, protections and sunset mechanics still need reading from the program text.
On October 22, 2026, the DOJ Civil Division and HHS announced a six-month Healthcare False Claims Act Self-Disclosure Pilot Program, which the announcing firm (Ropes & Gray) describes as offering favorable terms. The available report is an excerpt, so the operative details are not confirmed here: the scope of qualifying self-disclosures, the treatment of potential liability, and any relator-claim or damages consequences are not set out in the material reviewed and should be verified against the published program materials before any entity relies on them.
Why sophisticated counsel should care: FCA exposure is existential for providers, and a treble-damages-plus-penalty theory per false claim can outweigh a payer's entire margin for the affected claim year. A time-boxed disclosure window converts a discretionary reporting decision into a calendared one, and the sequencing of internal investigation, disclosure and corrective action relative to an existing government inquiry is often outcome-determinative.
…
Grade 3 — worth a glance, not the full analysis.
- FINRA Completes "One FINRA" Consolidation Into Single Regulatory Operations Department
FINRA says it has finished folding member supervision, market oversight and enforcement into one Regulatory Operations department, a structural change brokers and their counsel will need to track as contacts and procedures shift.
- DOJ and HHS Launch Healthcare Self-Disclosure Pilot Program
DOJ's Civil Division and HHS have opened a healthcare-focused pilot that rewards self-disclosure, as counsel reassess FCA and enforcement exposure for pharma and medtech clients.
- EU Commission FAQs confirm ban on refined fuel exports to Russia
Commission FAQs published 23 Oct 2026 on Reg. 833/2014 Articles 3c and 3k confirm EU operators may not export refined petroleum products, including diesel and jet fuel, to Russia, and that related services are prohibited too.
- EIOPA Finalizes Expectations for Private Equity-Backed Insurers
EIOPA's final supervisory statement, published 6 October 2026, sets EU-wide expectations for authorising and overseeing reinsurance undertakings owned by private equity.
- UK Publishes ERA Responses and Draft Dismissal Code Consultation
The UK government has published consultation responses on dismissal and re-engagement and on extending protection for pregnant women and new mothers, and opened a consultation on a draft revised dismissal code.
- Chile's Law 21.828 Requires First Gender Equity Reports by March 2027
Chilean employers face a first filing deadline in March 2027 for the gender equity report mandated by Law 21.828, adding a new periodic disclosure obligation to local employment compliance.
- ALRC Backs Sweeping Overhaul of Australia's Native Title Future Acts Regime
The Australian Law Reform Commission's Report 144, a first comprehensive review of the future acts regime under the Native Title Act 1993 (Cth), recommends sweeping changes to how deals with Indigenous title holders are structured.
- Drafting Managed Services Deals Delivered by AI Agents: Five Clause Issues
Mayer Brown outlines the governance, staffing, supply-chain control, liability and exit provisions that new AI-agent delivery models require in managed services contracts.
- PHP Patches Critical RCE Pair; Dual-Use Firms Urged to Act in Hours
PHP patched two critical remote-code-execution flaws on October 21, 2026, and Wilson Sonsini warns defense-tech and dual-use firms that disclosure timing makes hours, not weeks, the operative window.
- FinCEN Flags Iranian Regime Use of Religious Charity Networks
FinCEN's October 15 alert lists red flags for financial institutions to spot diversion of religious tithes, or "khums," through charitable networks to support the Iranian regime.
- DOJ Launches Three-Year Fraud Whistleblower Reward Pilot
DOJ's Oct. 20 Fraud Whistleblower Incentive Program pilot offers discretionary awards of $10,000 to $30,000 for tips leading to fraud recoveries, giving corporate counsel a new federal channel for reporting misconduct.
- State Regulators Urge Treasury to Broaden Stablecoin Safe Harbors
A coalition of state banking, money-transmission and credit-union regulators and state legislatures asked Treasury to extend stablecoin safe harbors to issuers operating under state regimes.
- CFIUS Now Scrutinizes Fund Investors Beyond the Named Buyer
Treasury's rebuilt CFIUS site and new prefiling portal, 2025 enforcement data, and a January 2026 divestment order all point to LP, co-investor and affiliate ties driving review.
- FDA Launches Rare Disease Framework Initiative for Fit-For-Purpose Rules
The FDA's Rare Disease Framework Initiative seeks fit-for-purpose regulatory standards for drugs and biologics intended for rare diseases, signalling coming changes to review pathways with no binding requirements yet set.
- FINRA Rule 2210 Amendments Ease Limits on Projected Performance, Targeted Returns
Per a Mayer Brown alert, amended FINRA Rule 2210 lets broker-dealer communications use projected performance and targeted returns, subject to specified conditions compliance teams must map to firm procedures.
- FedEx Proposes $30.8M Class Settlement in Washington Wage-and-Hour Case
A proposed $30.8 million class settlement filed in Washington federal court signals that employer handbook language on pay practices can itself become the theory of liability in wage-and-hour litigation.
- ESMA Backs Commission MiCA Review With Clarity and Safety Proposals
ESMA's 30 September 2026 response to the European Commission's MiCA review consultation urges a clearer, safer crypto-asset regime ahead of planned legislative amendments.
- NYC Proposes Chatbot Disclosure and Human-Access Rules for Customer Service
New York City's consumer protection agency has proposed rules under its Consumer Protection Law requiring disclosure when customers interact with a chatbot and access to a human representative.
- States Resist OCC Bid to Dismiss Interest-on-Escrow Preemption Suit
Oregon and nine other states urge the court to deny the OCC's motion to dismiss their suit alleging the agency unlawfully preempted state interest-on-escrow laws.
- Perkins Coie guide on AI-era data center siting: megawatts, permits, land
A Perkins Coie practitioner alert frames the legal and commercial variables firms must weigh when siting AI-driven data centers, from power availability and land use to permitting and community risk.
- State AG Coalition Secures $664M in Lease-to-Own Settlement
Seventeen state attorneys general signed an assurance of voluntary compliance with a lease-to-own provider on October 21, resolving state investigations into its rental-purchase agreement practices for $664 million.
- Frozen Potato Antitrust Ruling Flags Benchmarking Data-Sharing Risk
A Sept. 17 decision in In re Frozen Potato Products Antitrust Litigation indicates that industry data sharing through a benchmarking platform can create antitrust risk even where the data are aggregated, anonymized and historical.
- Texas proposes ending sales tax on marketplace commissions
The Texas comptroller has proposed rule changes that would stop treating marketplace provider commissions as taxable data processing services, reversing a position that had taxed sellers on the full customer price.
- Japan's Beneficial Ownership Bill Advances Before the Diet
A proposal before Japan's Diet would require nearly all Japanese entities and certain foreign entities to identify, maintain and file their beneficial owners with the Minister of Justice.
- Bragg launches New York County corporate crime and antitrust task force
Manhattan's top prosecutor has created the office's first Corporate Crime and Antitrust Task Force, giving corporate fraud, antitrust and consumer-fraud allegations a standing, dedicated enforcement channel in New York County.
- San Francisco Tightens Health Spending Rules for SFO Airport Employers
Ordinance No. 213-26, signed October 16, 2026, replaces dependent-based spending tiers with a single rate plus $2.00 per hour and a new 84% actuarial-value plan alternative, effective January 1, 2027.
- New ERISA Safe Harbor Protects ESOP Fiduciaries Using Independent Valuations
The Retire Through Ownership Act, signed October 15, 2026, amends ERISA to protect plan fiduciaries who rely on independent valuations of privately held stock in employee stock ownership plans.
- CFTC Weighs Federal Path for Retail Crypto Transactions
Per Morgan Lewis, the CFTC is considering a federal framework that could bring some retail crypto trades, including fully paid spot purchases where leverage is offered but not used, onto CFTC-regulated markets; no rule text is public.
- Mexico's New Decree Sets Child Safety Duties for Online Platforms
Mexico's president has issued the Decree on Safe Digital Environments for Children and Adolescents, adding platform-facing obligations for online services used by minors.
- SEC Approves FINRA Rule 2210 Amendments on Projected Performance
SEC approved amendments creating a new exception to FINRA's communications rule, letting FINRA members use projected performance and targeted returns subject to conditions.
- 10 states oppose OCC bid to dismiss escrow interest rule challenge
A 10-state coalition led by Oregon told a federal court in Oregon on October 19 that the OCC's interest-on-escrow rules are unlawful, urging the court to deny the agency's dismissal motion or transfer the case.
- Critical PHP Vulnerabilities Under Active Exploitation: NSA/CISA Advisory
Two newly disclosed critical PHP flaws could allow unauthenticated remote code execution, and NSA and CISA advisories signal active exploitation attempts on affected web servers.
- DOL withdraws 80/20 tip-credit guidance in new Field Assistance Bulletin
The Wage and Hour Division's October 19, 2026 Field Assistance Bulletin withdraws three opinion letters and confirms that percentage-based limits on non-tip-producing duties within a tipped occupation no longer reflect agency policy.
- GAO urges Congress to expand mandatory flood insurance and lender quoting
A GAO report to Sens. Warren and Kennedy found 86% of high-flood-risk properties lacked National Flood Insurance Program coverage as of April 2026, recommending a broader purchase requirement and lender quoting duties.
- EC Makes Sanofi's Flu Vaccine Disparagement Commitments Binding
The European Commission made Sanofi's commitments not to disparage a rival flu vaccine legally binding on 13 October 2026, a sign of how it will police pharma marketing conduct.
- Texas approves first 765-kV transmission lines into the Permian
Texas has approved its first 765-kV transmission lines serving the Permian Basin, and two pipeline companies whose existing pipe sits in the path of the new lines face crossing and right-of-way questions.