DROPLETS

The U.S. Securities and Exchange Commission formally adopted a comprehensive set of climate‑related disclosure rules in October 2026, expanding the data that issuers must provide in periodic and event‑based filings. The new framework mandates quantitative metrics on greenhouse‑gas emissions, material climate risks, and transition plans, aligned with international reporting initiatives. Firms that report under the SEC’s previous proxy or 10‑K regimes will now need to enhance disclosure infrastructure, potentially adding new ESG governance roles and data‑collection systems. The SEC also opened the filing of petitions for review across multiple appellate courts; the consolidated case is expected to reach the U.S. Court of Appeals for the Eighth Circuit. Lawyers should advise clients to review existing disclosure policies, assess data gaps, and begin integrating the new reporting requirements into compliance calendars. Anticipate early questions from investors, regulators, and insurers that may benchmark against the SEC’s climate framework.

In April 2026 the Fifth Circuit declared the 1868 federal ban on home distilling—enforced through an excise tax on distilled spirits—unconstitutional because Congress had no lawful basis to use its taxing power to prohibit the activity. The Sixth Circuit reversed that ruling, citing historical precedent and the potential for tax evasion by home distillers. The Department of Justice, defending the ban, joined the Fifth Circuit’s appeal, emphasizing the tax‑collection rationale. With the Supreme Court agreeing to hear the case, the decision is slated for a June opinion, which could invalidate the ban nationwide and clarify the limits of Congress’s taxing authority. The outcome will affect producers, distributors, and hobbyists in the alcohol sector by redefining who must pay excise taxes and how the federal government can regulate home production. Counsel should advise clients on possible changes to compliance requirements and monitor the court’s ruling for its implications on tax collection and enforcement mechanisms.

Washington’s newly enacted Privacy Act, which expands its definition of a “non-biometric individual” to encompass owners of websites and online services, could potentially bring a sprawling array of analytics providers under its data‑collection and consent requirements. In a recent opinion, Perkins Coie contends that automated servers—programs that log search queries, click‑throughs, and other user interactions—do not meet the statutory criteria for “individuals.” The firm cites the Act’s emphasis on identifiable, autonomous humans, not software systems, to argue that servers do not qualify as “non‑biometric individuals.” If upheld, this interpretation would reduce the regulatory burden for many ancillary technology services, sparing them costly compliance systems. Firms should monitor forthcoming judicial opinions or legislative amendments for clarity, and consider adopting internal policies that treat analytic entities as non‑subject matter under the Act while remaining vigilant for potential reinterpretations.

On October 26, 2026, the U.S. Department of Health and Human Services (HHS) Office of the National Coordinator for Health Information Technology (ONC) published a new set of deregulatory actions aimed at simplifying the Health Data, Technology, and Interoperability (Health‑IT) certification process. The announcement removes several previously required steps for EHR and health‑IT product certification, streamlining compliance timelines and reducing administrative costs for vendors and health‑care providers. Crucially, the ONC confirmed that Information Blocking Rules will remain unchanged, preserving protections for patients’ access to their electronic health data. This development is significant for counsels advising health‑IT platforms, hospitals, insurers, and health‑tech start‑ups, as it alters the regulatory roadmap and may reduce entry barriers for new products. Legal teams should track how these changes affect ongoing vendor relationships, compliance audit plans, and potential third‑party certifications. The next key development to watch is the ONC’s guidance on how the eased c

…

The ISSB has announced ongoing consultations for a set of nature‑specific disclosure requirements that would integrate and expand the existing ESG reporting framework provided by IFRS S1 (Climate‑Related Financial Disclosures) and IFRS S2 (Tobacco‑Related Financial Disclosures) and align closely with the Taskforce on Nature-related Financial Disclosures (TNFD). The proposed standards aim to capture a company’s impacts, dependencies and opportunities linked to natural capital, mandating detailed information on biodiversity loss, habitat degradation, and nature‑related financial risks. Firms will need to assess material nature exposures, update their sustainability reporting taxonomy, and potentially revise internal risk‑management and stakeholder‑engagement processes. For bulk‑product clients—especially those in energy, agriculture, and natural‑resource sectors—this represents a substantive shift in reporting obligations, affecting data collection, audit scopes, and contingent liabilities. Clients should begin early data inventory and internal process reviews and monitor the forthcomi

…

In a February‑style release that follows its FY 2026 priorities, the SEC’s Division of Examinations outlined its focus for the 2027 fiscal year. Key exam themes include stricter enforcement of fiduciary duties for registered investment advisers, deeper reviews of comments on complex or illiquid products, and heightened scrutiny of investor‑company fee practices. Broker‑dealers will face tighter checks on Net Capital Rule compliance, Reg BI sales‑practices, and AML programs, especially those with cross‑border activities and foreign omnibus accounts. Cybersecurity will become a cross‑cutting priority, with the Division targeting SI‑related phishing, deep‑fake social engineering, and ransomware response protocols under Reg SC‑I and Regulation S‑P. Firms that have recently expanded via mergers or altered their business models are advised to benchmark their compliance frameworks now, test AML procedures against specific risk profiles, and update cybersecurity policies to address SI threats. Failure to address these priorities early could lead to enforcement referrals, civil penalties, or

…

The Department of the Treasury’s Outbound Investment Security Program (OISP) requires U.S. persons to report certain transactions in foreign investment securities. On Oct. 7, 2026, it imposed its first civil penalty—$200,000—to investment firm Amidi, LLC for not filing the required notice of a covered transaction. The enforcement marks a clear signal that the Treasury is actively policing this program, raising the stakes for U.S. investment managers and financial advisors who facilitate cross‑border securities placements. The penalty also clarifies the scope of transactions subject to the OISP, which includes shares, debt, and structured products tied to non‑U.S. issuers when the underlying assets are in the U.S. Firms must evaluate whether their clients’ foreign investments fall under the program and ensure that proper notification, documentation, and reporting protocols are in place. Close monitoring of Treasury guidance, potential updates to the OISP’s filing thresholds, and proactive client compliance workshops will be essential to avoid future fines and reputational harm.

The Treasury’s draft COINS Act proposal, announced on Oct. 22, would widen the existing OFAC‑based screening to include any U.S. firm—particularly biotech and AI companies—looking to raise funds abroad, especially in China. The rule would require a new category of "national‑security‑material" permits, reclassifying investments that could facilitate dual‑use or critical‑infrastructure technology transfers. Firms advising clients on cross‑border funding or equity offerings will need to evaluate whether their clients’ upcoming deals fall within the broadened scope, potentially triggering new national‑security reviews. Counsel should prep clients to complete detailed due‑diligence packages and to work with the Treasury’s Office of Foreign Assets Control well ahead of any capital‑raising activity. The rule is still under public comment and could be finalized within the next few months, so monitoring Treasury releases and anticipating changes to the screening timeline is crucial.

The U.S. Department of State has stepped up engagement in Central Asia, with Secretary of State Marco Rubio visiting Samarkand and a delegation of roughly 200 American business leaders to the C5+1 forum. At the same time, the U.S. International Development Finance Corporation (DFC) has signed a letter of interest with Kazakhstan’s president, and a bilateral investment platform was launched in Uzbekistan to fund transport, logistics and critical‑minerals projects. A $201 million Trans‑Caspian Enterprise Fund, pledged by the Trump administration, seeks to upgrade the Middle Corridor—an infrastructure‑heavy multimodal route linking Asia to Europe that reduces reliance on Russian transit. These moves are part of Washington’s broader critical‑minerals strategy, which also supports developing local processing capacity for lithium, rare‑earths, uranium and other key materials. For counsel, the developments signal new opportunities in upstream mining, downstream processing, and logistics, but also heightened geopolitical risk because of China’s and Russia’s competing investments, legacy

…

Congress has reframed campus safety oversight with the new Campus Accountability and Safety Act, which amends the 1990 Clery Act to increase the scope of obligations for institutions of higher education. The act expands mandatory reporting to cover on‑campus transportation, student housing, and facilities with student use that are not within traditional dormitory or academic building definitions; it requires schools to publish safety reports that include any new or updated land‑use design decisions. The bill also mandates that institutions conduct annual campus safety exercises and public contest audits, and must report these findings within 24 hours of any incident. Counsel advising universities must review current compliance procedures to ensure reporting deadlines are met, perhaps needing new data systems or policy adjustments. Firms should monitor the Senate schedule, be prepared to aid clients with cost‑benefit analyses of the new security upgrades, and anticipate that emergent GPS tracking devices could become required under the act’s expanded definition of “student” areas.

The Office of the Comptroller of the Currency (OCC) issued a final rule on October 21, 2026 that implements the 2023 Guiding and Establishing National Innovation for U.S. Stablecoins Act (GENIUS Act). The rule codifies the Act’s mandates, imposing stringent AML/KYC protocols, deposit‑reserve ratios, and prudential standards that mirror traditional bank regulations for entities issuing or holding stablecoins. Stablecoin issuers and holding companies must now maintain specified reserve levels and submit regular prudential reports, while the OCC gains expanded supervisory authority, including command over market‑making and distribution functions. Implementing the rule will require major legal teams to revamp compliance frameworks, update client licensing routes, and adjust governance structures. Firms advising banks, fintechs, and crypto exchanges should review the duty to certify reserves, the obligation to segregate client assets, and the potential for OCC‑initiated enforcement or remedial audits. Key next steps include monitoring any appellate challenges, forthcoming guidance on tech

…

The Delaware Supreme Court’s latest ruling confirmed a Delaware Chancery Court decision that keeps Verisk Analytics bound to pursue antitrust clearance for the $2.35 billion acquisition of AccuLynx. The court held that the buyer’s own voluntary conduct, even if not intended to breach or sabotage the transaction, can bar termination of the agreement once the outside‑date deadline has passed. The decision underscores that post‑signing business decisions—such as changes to product integration, pricing, customer compensation, or the way the parties manage the regulatory audit—must be escalated on the deal‑risk path and matched to the regulatory clock. For counsel and corporate managers, the key takeaway is that termination blockers and “willful‑conduct” clauses should be negotiated as operational rules, not mere boilerplate. Firms now must vet any post‑signing conduct for antitrust implications, ensure clear governance of timing, and consider that a court could compel a buyer to close the deal if clearance and other conditions are met, rather than allowing a statutory walk‑away. Customer

…

U.S. prosecutors have announced that the Department of Justice (DOJ) has increased the money available for fraud whistleblowers under its incentive program, a move highlighted in a Jones Day commentary. The expansion is reported to elevate the cap that defendants may face in discovery, although the precise new limits are not yet disclosed. Legal teams across industries should anticipate that larger whistleblower awards can trigger more extensive evidence requests, depositions, and pre‑trial motions. Firms may need to update whistleblower agreements, reinforce client confidence, and allocate additional resources to handle the anticipated surge in discovery workload. While the commentary does not offer concrete numbers, the trend signals an intensified federal focus on fraud. Clients should monitor DOJ releases, review internal policies for whistleblower disclosures, and collaborate with counsel early to prepare robust discovery strategies for potential claims. This development underscores the importance of proactive discovery planning in a changing regulatory environment.

In a 2026 opinion, the Eleventh Circuit reversed a district court’s grant of summary judgment after a claim that two Black workers faced disproportionate assignments and harsher drug‑testing consequences was deemed sufficiently supported by a "convincing mosaic" of evidence. The court held that differential treatment of a non‑protected employee can serve as a tile in that mosaic, even when the employee is not a strictly comparable "similarly situated" worker. It also found that inconsistencies in the employer’s Equal Employment Opportunity Commission position statement, particularly around the drug‑testing rationale, introduced a rebuttable inference of pretext. The decision signals that employers in Alabama, Florida, and Georgia must now prepare to defend claims on a broader evidentiary base at the summary‑judgment stage; failure to do so could foreclose early dismissal. Firms advising clients should review internal policies on the use of comparators and ensure EEOC filings accurately reflect facts to avoid inadvertent pretext findings.

Treasury’s Proposed Rule, issued October 22, 2026, replaces and expands its current Outbound Investment Security Program (OISP) under the COINS Act. The new framework extends mandatory reporting and eligibility to a wider array of asset classes, including biotech, AI, and other high-growth sectors, and adds tighter oversight of outbound investments that may be seen as a threat to U.S. national security or foreign policy objectives. For clients, the rule imposes new filing requirements, heightened due-diligence standards, and increased scrutiny of held foreign securities, with an effective date slated for the fiscal year after the rule’s finalization. Compliance teams must review the proposed thresholds, gather updated foreign-investment data, and coordinate with tax, litigation, and risk groups to mitigate potential liabilities or sanctions exposure. The Treasury’s move is expected to prompt closer monitoring of cross-border deals, change the risk profile of certain M&A targets, and influence how firms structure international equity and debt holdings.

The Senior Managers and Certification Regime (SMCR) is the UK’s core regulatory framework governing senior executives in the financial sector. The FCA and PRA have issued new consultation papers (FCA CP26/37 and PRA CP14/26) outlining Phase 2 reforms that aim to tighten duty‑to‑behave provisions, broaden admissible‑explanation requirements, and refine certification and sanction procedures for senior managers. These proposals seek to close gaps identified by recent disruptions and enhance oversight of executive conduct.

The consultations are critical for all firms with senior‑manager status, potentially expanding the scope of duties, altering certification protocols, and granting regulators new red‑lining powers. Firms should review the papers, assess governance impacts, and consider interim adjustments to policies.

The consultation period ends mid‑2027, after which final rules will be published. Clients and counsel must monitor outcomes to ensure compliance and mitigate supervisory risk.

The U.S. Trademark Trial and Appeal Board (TTAB) has issued a landmark reexamination decision that cancels the ever-worn mark ‘EVERWISE CREDIT UNION’ after finding its token-like construction fails to provide distinctiveness. The ruling follows a decade-long dispute in which the mark was initially refused as descriptive. By declaring the term lacking in secondary meaning, the TTAB effectively removes federal trademark protection for the name. This decision sends a clear signal to firms and clients that token-based or generic-sounding marks—particularly those that resemble other terms—are at risk of being deemed non‑protectable even if previously registered. Counsel should review current client portfolios for similar token-laden identifiers, advise on the feasibility of alternative trademarks, and monitor any appeal filings that may contest the TTAB’s findings at the appeals court or the Supreme Court.

The 28 October 2026 Budget unveiled broad fiscal changes: income‑tax thresholds were revised, the corporation‑tax rate adjusted, and new levies introduced on specific goods and services. The Chancellor also outlined significant spending reallocations across healthcare, infrastructure, and defense, while announcing a schedule of incremental tax‑reform measures to be implemented over the forthcoming fiscal years. Firms should immediately re‑examine their tax‑planning structures, corporate‑tax exposure, and timing of capital investments to capture any benefit from the revised thresholds or rates. Key concerns include the transition of the corporation‑tax rate to a lower level, potential changes to transfer‑pricing rules and the introduction of new environmental levies. Clients should also monitor the year‑on‑year spend allocations, as future UK budgets may further adjust public‑sector expenditures, thereby influencing demand for commercial real‑estate and infrastructure services.

The Supreme Court granted certiorari in Association for Education Fairness v. Montgomery County Board of Education (No. 26‑12), a 2026 Equal Protection challenge to a Maryland district’s lottery‑based admission system. The case questions whether purely random lottery admissions sufficiently shield schools from claims of discrimination, especially when demographic disparities persist. For educational institutions, the ruling could compel a review of lottery criteria, admission predictor metrics, and race‑neutral alternatives. Firms advising schools, districts, or higher‑education clients must prepare for potential audits, defensive filings, and the need to demonstrate compliance with the Equal Protection Clause and anti‑bias regulations. The Court’s ruling may also prompt legislative or administrative actions to clarify acceptable testing or selection mechanisms beyond random drawing. Close monitoring of the Court’s briefing schedule and lower‑court rulings will be vital for timely compliance and advisory updates.

On September 23, 2026, the NLRB, with a Republican majority, reversed its 2023 decision that had favored setting‑specific tests and reaffirmed the 2020 General Motors mixed‑motive standard. Employers may now argue that a disciplinary action would have been imposed regardless of an employee’s protected concerted activity, as long as the same discipline would have been imposed absent the activity. This procedural approach could signal a more employer‑friendly posture, but the board’s remarks leave open whether policy standards will shift back toward the Biden‑era framework. Firms advising large clients should review existing discipline policies, preserve evidence that a decision would have followed regardless of union advocacy, and counsel clients to align disciplinary actions with legitimate business reasons to mitigate litigation risk. Monitoring future NLRB announcements is essential to anticipate any doctrinal swings that may further affect labor‑relations strategies.

On Oct 14, 2026, Manhattan District Attorney Alvin Bragg announced a dedicated Corporate Crime and Antitrust Task Force, merging the DA’s corporate crime unit with its antitrust unit. The initiative seeks to strengthen enforcement against corporations, partnerships and high‑level executives engaged in price‑fixing, market manipulation, securities fraud, insider trading, and other anticompetitive conduct. The task force will operate under the Manhattan DA’s jurisdiction and will coordinate with federal agencies such as the DOJ and SEC. The announcement comes amid a series of high‑profile corporate misconduct cases and signals a heightened willingness to pursue complex, cross‑jurisdictional investigations. For law firms, the expansion raises potential risks for clients with sizable NY operations or those involved in markets where competition and regulatory oversight intersect. Counsel should already begin assessing compliance frameworks, reviewing whistle‑blower policies, and preparing for possible coordination with investigators. Watching for the first cases the task force will pursue

…

The European Commission’s newly issued Article 102 guidelines, published on 29 October 2026, provide a detailed framework for evaluating when a firm with market power engages in anti‑competitive conduct. The guidance restates that dominance in itself is not forbidden, but the abuse of that power—such as practices that foreclose competition or exploit consumers—is prohibited. The guidelines outline specific factors such as pricing, market entry barriers, and predatory conduct, offering firms a clearer interpretation of enforcement expectations. For large law firms advising multinational clients, the update signals a need to reassess existing dominance positions, conduct robust compliance audits, and develop internal controls to avoid conduct that could trigger enforcement. Firms should also monitor forthcoming explanatory comments from the Commission and potential updates to the EU’s enforcement strategy, as these may refine the application of the new thresholds in real‑world investigations.

The Department of Justice and the Department of Health and Human Services announced a six‑month pilot program that allows health‑care providers to self‑disclose alleged violations of the Healthcare False Claims Act (FDCA) in a structured, confidential manner. Under the pilot, institutions can submit a self‑disclosure to a designated government office, receive guidance, and potentially avoid punitive damages or other penalties if they acknowledge and correct the conduct. The program requires participants to complete a written statement describing the alleged misconduct, corrective actions taken, and financial impact, and includes safeguards for confidential treatment of the information until adjudication. The pilot will run through mid‑2027, with the possibility of creating a permanent framework based on findings. Counsel should advise clients on eligibility, timelines, documentation requirements, and how the disclosure could affect existing investigations or claims. Monitoring the program’s outcomes will be essential for anticipating future regulatory expectations and managing risk f

…

In late 2026 DOJ announced the formation of a new Criminal Fraud Division and two self‑disclosure pathways for health‑care fraud under the False Claims Act. One pathway allows voluntary submission of material fact findings to DOJ, offering statutory immunity versus cooperation and potential penalty reductions. Second pathway, via HHS‑OIG, lets entities submit internal claims under civil oversight, with potential civil sanctions but a more flexible process. These tools aim to lower reporting thresholds, encourage transparency, and streamline enforcement. Firms advising hospitals, insurers, pharma, or medical device companies must understand eligibility, procedural steps, and potential liabilities. Key actions include reviewing internal compliance policies, training staff on new reporting mechanisms, and monitoring DOJ guidance for updates on immunity, penalty mitigation, and timelines. Clients should evaluate whether high‑risk claims qualify for early disclosure and consider whether doing so could reduce exposure. The new division signals a heightened DOJ focus on healthcare fraud, so

…

The Ohio governor’s recent executive order expands state oversight of the National Collegiate Athletic Association’s (NCAA) eligibility framework, imposing additional compliance requirements and enforcement mechanisms on member schools and student‑athletes. The NCAA responded by filing a federal lawsuit, alleging that the order infringes on its constitutional authority and the autonomy of national governing bodies. The case signals a broader judicial review of how state regulations can intersect with NCAA policy, potentially reshaping eligibility standards, scholarships, and transfer protocols nationwide. Law firms advising universities, athletic departments, and student‑athlete agents should monitor the litigation closely, as a federal ruling could mandate uniform compliance standards across all 48 states, affecting recruiting, admissions, and financial aid. Additionally, the order may prompt other states to draft similar statutes, leading to a fragmented regulatory landscape that BigLaw counsel will need to navigate through tailored advising, risk mitigation, and possible litigatio

…

On October 15, 2026 the DOJ’s National Fraud Enforcement Division and the HHS Office of Inspector General jointly announced final guidance on the voluntary self‑disclosure process for criminal healthcare conduct under the False Claims Act (FCA). The memorandum sets forth a standardized procedure that parties must follow—from initial contact and discovery through documentation of corrective actions—to qualify for the program’s reduced liability and penalty relief. It clarifies the timing of disclosures, the information that must be included, the role of the Office of Inspector General in reviewing claims, and the timeframe for DOJ’s decision. The guidance also stipulates when a defendant may be ineligible, which is critical for clients with complex claims. Firms should review the memo with affected clients and prepare briefing documents to ensure compliance with the new procedural requirements before the 30‑day filing window opens. The clarified process represents a substantive shift in how the government will handle self‑disclosures, and will likely affect every healthcare law practi

…

In late October 2026, New York’s Legislature enacted the state’s first comprehensive AI advertising disclosure statute, which requires any ad incorporating an AI-generated persona that mimics a real person’s voice, face, mannerism, or trademarked likeness to provide a conspicuous disclosure stating the ad is AI-generated. The law also creates a framework for “persona trademarks,” allowing individuals to register the right to control the commercial use of a synthetic representation of themselves. Clients who run influencer marketing, digital campaigns, or financial product ads will need to assess whether their creative teams are using AI-generated content that could be construed as a portrayal of a real person. Law firms must review client contracts, update disclosure policies, and advise on due diligence for AI content to avoid potential civil liabilities and reputation damage. The legislation’s applicability extends to any New York-based or New York-advertised business, putting a spotlight on cross-jurisdictional compliance for firms with a national presence.

The Department of Justice’s Fraud Division has been designated as the sole contact point for all self‑disclosure requests related to potential criminal healthcare fraud. This change streamlines the submission process, making it clearer for healthcare providers, payers, and suppliers to report suspected fraud. Simultaneously, the Centers for Medicare & Medicaid Services (CMS) has been granted permissive exclusion authority, allowing it to exclude certain issues from its own audit scope when the DOJ is already pursuing a criminal case. Together, these measures create a coordinated front for criminal enforcement, reducing duplication of effort and aiding firms in aligning their compliance and litigation strategies with the new enforcement protocol. Counsel should review client practices to ensure self‑disclosure procedures are updated and that CMS exclusion guidelines are understood to avoid potential over‑reach or gaps in coverage.

The OCC issued rules effective mid‑2026 that allow the FDIC to recover interest accrued during escrow, potentially preempting state mortgage interest‑on‑escrow statutes. Ten states challenged the agency’s request to pause judicial review while the preemption authority remains in effect, filing a brief to a federal court. The states argue that the pause undermines consumer‑protection laws and that the OCC is misusing its preemption power. A ruling in favor of the states would reinforce state preemption over mortgage regulation, reshaping the legal landscape for lenders nationwide. Firms should monitor the decision closely, as it will determine whether state laws can continue to impose escrow‑interest restrictions and how banks and mortgage servicers must adjust compliance frameworks under the new federal rules today. The court’s decision will clarify the scope of OCC’s authority and could influence future regulatory approaches to mortgage escrow practices across the country.

The Financial Conduct Authority (FCA) has released draft guidance for UK‑regulated firms that interact with, facilitate access to, or provide financial services on decentralised finance (DeFi) platforms. The guidance outlines the regulatory framework under which DeFi activities fall, clarifying that firms are expected to apply existing principles—such as client protection, anti‑money‑laundering obligations, and conduct‑risk standards—to DeFi transactions. Key provisions include a requirement for risk assessments of tokenised assets, guidance on the treatment of smart‑contract‑based deals under FCA’s rules, and an explanation of when a DeFi operator requires FCA registration. The draft also signals the FCA’s willingness to treat DeFi as a “layer‑two” market, meaning standard stress‑testing and capital‑adequacy rules apply. Firms should review the draft to evaluate whether their DeFi‑related activities expose them to new compliance obligations, and consider early engagement with the FCA if substantive implementation changes are required.

_

The EU’s SecureFinance Initiative, driving a new securitisation framework, marks a pivotal shift in the continent’s structured finance landscape. In a move aimed at improving market stability and protecting investors, the European Parliament and the Council reached a provisional agreement to overhaul the framework governing securitisation transactions. The proposal seeks to tighten regulatory oversight, standardise documentation, and enforce stricter transparency of underlying assets. The reform is set to affect banks, asset managers, and issuers that rely on securitisation to mobilise capital across the EU. Sophisticated counsel must evaluate whether their clients already comply with the upcoming rules, adjust structuring strategies for new securitisation deals, and monitor further legislative detail as the commission drafts the final directive. Early compliance planning could position clients ahead of the timetable, ensuring uninterrupted access to the securitised funding and avoiding potential regulatory pitfalls. The evolving framework also flags a broader trend toward greater EU

…

Sheppard Mullin reports that the New York District Attorneys’ offices are now pursuing high‑profile cases involving corporate antitrust violations, multinational cryptocurrency scams, and money‑laundering schemes tied to digital exchanges and gambling platforms. This shift means firms may face concurrent state- and federal investigations for infractions once considered solely federal. Compliance programs must account for overlapping enforcement while clients should anticipate more aggressive probing, especially if they operate across state lines or in crypto-related activities. The NY Department of Justice is reportedly coordinating with federal prosecutors, but details remain scarce, raising questions about jurisdictional boundaries. Firms with cross-state or cross-border ventures should review their risk registers and consider strengthening surveillance and reporting procedures. Monitoring how the NY DOJ structures indictments and whether federal authorities respond with counter-charges will be crucial for clients navigating the evolving enforcement landscape.

Ambient AI tools that record and summarize clinical encounters in real time are gaining traction as a way to tackle documentation fatigue. Because these tools function as recording devices, they trigger a patchwork of U.S. state recording (eavesdropping) laws, each with its own consent requirements. In addition, a growing number of states are enacting AI‑specific statutes that mandate disclosure, human review, and safeguards for high‑risk applications. Professional bodies also require that AI augment, not replace, clinical judgment. Organizations must therefore develop robust AI governance programs, including encounter‑level consent, mandatory human oversight, and monitoring of regulatory changes. Implementing these controls early helps firms advise clients on compliant deployment, reduce liability, and preserve patient trust while leveraging AI’s efficiency gains, especially for complex multi‑state operations.

Preliminary tallies indicate UAW President Shawn Fain secured about 68 % of the vote to win a second four‑year term, a headline that could signal a shift in labor dynamics across the U.S. auto ecosystem. Major automakers and supply‑chain partners now face a leadership that has previously emphasized firm stances on wage‑and‑benefit negotiations. For counsel representing manufacturers and suppliers, this election portends a need to review and potentially renegotiate collective‑bargaining agreements, assess bargaining calendars, and anticipate the UAW’s likely tactics. Firms should prepare contingency plans for both concessions and enforcement actions and remain attuned to the UAW’s upcoming policy releases that could affect labor relations and production schedules. The outcome also may influence the UAW’s approach to new regional contracts and its stance on wage rate adjustments amid evolving automotive technology trends.

On Oct. 22, 2026, the DOJ announced a sweeping fraud operation in Los Angeles that led to 15 criminal charges across a $2 billion portfolio of allegedly irregular claims. Central to the action were two cases under the Eliminating Kickbacks in Recovery Act (EKRA), carrying $1.6 billion in private‑insurance billing for unearned substance‑abuse treatments. The indictment alleges patient recruiters—labelled “body brokers”—offered lavish kickbacks, from money and free flights to illicit drugs, to lure vulnerable patients into facilities while disguising reimbursement as salaries. Alongside the EKRA charges, the takedown also targeted Medicare and Medi‑Cal fraud, including unperformed surgeries, hospice abuses, and unnecessary prescriptions. The prosecution’s scale is unprecedented, potentially prompting a wave of EKRA actions nationwide. Compliance teams should scrutinize referral, payment, and marketing arrangements in recovery, laboratory, and related health‑care sectors, as EKRA’s strict safe‑harbor rules and DOJ’s stance against variable employee compensation now loom larger than ever

…

The new Executive Order 14426, signed on September 8, 2026, mandates the Department of War to begin sharing a servicemember’s personnel file, health records, and treatment records with the VA immediately upon discharge or release. Within 120 days DoW and VA must review and update technology contracts to ensure system interoperability, and within 180 days they must create unified policy guidance for continuous, prospective record sharing. The order also press‑urges DoW, the Department of Labor, and VA to overhaul the Transition Assistance Program, connecting separating members to job openings or qualifying training programs. For counsel, the order signals a shift from reactive, manual record requests to a proactive, automated integration that could reduce liability for delayed benefits claims and affect litigation involving denied or late benefits. Clients with defense or veterans‑related interests should assess their systems’ readiness, budget compliance costs, and document adherence to the federal mandates. Monitoring DoW/VA releases and engaging with agency officials will be critic

…

The European Commission’s new AML rule, effective July 10 2029, expands the regulated sector to include all professional football clubs and football agents. The change aims to curb illicit finance that has long threatened the sport, such as laundered transfer fees, off‑shell player deals, and shadowy ownership structures. Clubs must now file suspicious‑activity reports, conduct customer‑due‑diligence on players and agents, and establish compliance frameworks comparable to those required of banks and financial institutions.

In the UK, the Money Laundering Regulations (MLR) are being adjusted to mirror the EU status, tightening investigative authority and increasing penalties. Major‑firm clients operating clubs, investors or player‑agent services should audit their compliance programs, train staff, and update contracts to include AML clauses. Failure to adjust could trigger fines, freezes on club assets, and reputational damage that could jeopardise sponsorships and transfer deals.

…

On August 6 2026 the Texas Ninth Court of Appeals ruled in Afzal v. Ramineni that a clause in Healing Hearts Clinic’s shareholders’ agreement—requiring a departing physician to sell his shares for a nominal value and, if he continued to practice cardiology within a 20‑mile radius, forgoing a 50 % payment of his receivables—was a forfeiture provision, not a covenant not to compete. Because it does not bar the physician from practicing anywhere, Texas’s noncompete statute (Section 15.50) does not apply, and the court could not reform the clause or grant the physician damages. The decision highlights that employers can structure incentive or bonus mechanisms that tie payments to business choices without invoking the tighter scrutiny applied to noncompete covenants. Counsel should review existing restrictive covenants and compensation arrangements for analogous distinctions and consider drafting language that clearly separates economic incentives from competition restraints to avoid unintended enforceability under state law.

On October 16, 2026, China’s Ministry of Commerce and Ministry of Science and Technology issued Announcement No. 48, expanding its dual‑use export control regime by adding 40 new technologies in artificial intelligence, biomedicine, and photovoltaics. The addition broadens the scope of items requiring licenses, signalling tighter scrutiny of high‑tech exports to foreign entities and countries deemed strategically sensitive. Firms—especially those dealing with AI hardware/software, biopharmaceutical research equipment, and advanced solar modules—must re‑evaluate existing licenses, assess end‑user restrictions, and map supply chains for affected components. Clients should consider redesigning product architectures to avoid controlled tech and stay alert for further Chinese guidance. Affected firms should also contemplate engaging Chinese trade experts to navigate potential new licensing requirements and maintain compliance throughout export documentation cycles. This regulatory shift could reshape export flows, prompt new compliance measures, and trigger enforcement action.

The Eighth Circuit held that the Durbin Amendment obliges the Federal Reserve to evaluate interchange fees on a transaction‑by‑transaction basis, invalidating the blanket $0.21 cap that had lowered rates for many merchants. Banks must now recalculate fees per transaction, which could raise costs for merchants and prompt renegotiation of fee schedules. Firms advising banks and merchants should review existing fee structures, assess the impact on their clients, and monitor whether the Fed will respond with new guidance or enforcement changes that could further influence the debit‑card ecosystem. The ruling also signals that the Federal Reserve cannot unilaterally set interchange rates; instead, future policy must involve explicit cost calculations. As a result, chief financial officers of banks and merchant service providers should immediately conduct a cost‑analysis audit of current interchange fee arrangements. The decision may prompt additional litigation challenging the amendment’s enforcement, and could attract the attention of the Consumer Financial Protection Bureau if merchants

…

The episode—titled 'Powering Progress Episode 14'—offers a detailed overview of how environmental litigation is reshaping the data center landscape in the U.S. Law firm Vinson & Elkins’ Chief Innovation Officer and partner discuss how groups such as Sierra Club, Earth Justice, and the Environmental Integrity Project have adopted a sophisticated playbook, using statutes on air and water quality, endangered species, noise, and zoning to challenge projects even when environmental impacts are minimal. Developers typically rely on streamlined permitting to meet the rapid time‑to‑market demands of AI infrastructure, but streamlining opens the door to legal challenges that can delay or halt construction. The guidance emphasizes four mitigation tactics: performing rigorous siting analysis, engaging in proactive outreach with local stakeholders, adopting EPA‑approved modeling to demonstrate minimal adverse impact, and incorporating noise or water‑mitigation measures into site designs. Firms advising data‑center clients should evaluate permitting regimes, stakeholder engagement, and potential

…

The FCA’s multi‑firm review, published on 23 October 2026, examines how UK private‑market firms—managing private equity, credit, and real estate assets—identify, manage, and disclose conflicts of interest. The report highlights persistent weaknesses in cross‑fund transfers, gifts, and information barriers, and recommends proportional governance, clear escalation mechanisms, and robust internal documentation. Concurrently, the FCA’s CP26/27 Consultation Paper proposes a single, outcomes‑focused remuneration code (SYSC 19AA) that will replace separate AIFM, UCITS, and MIFIDPRU codes for solo‑regulated firms. The new code will streamline governance, reduce mandatory reporting, and allow firms to tailor remuneration to material risk takers. Combined, these changes signal a shift toward clearer, business‑aligned frameworks that balance regulatory oversight with industry flexibility. Firms should review conflict‑management policies, assess potential impact on remuneration structures, and prepare for the policy statement expected in Q1 2027, which will codify the new standards.

Two critical PHP vulnerabilities—dubbed PHP2Shell—were publicly disclosed last week after an AI‑driven code‑analysis tool identified flaws that allow attackers to execute arbitrary code on web servers. The bugs, targeting the PHP language that powers roughly 70 % of the world’s websites, enable remote attackers to run shell commands by manipulating crafted HTTP requests. The discovery was accelerated by machine‑learning models that scanned millions of open‑source repositories, demonstrating how AI can hunt for syntactic patterns that correlate with known exploit techniques. Immediate advisories from major hosting providers and vulnerability databases urge all PHP‑based organizations to upgrade to the latest patch (PHP 8.3.1) and to audit configurations for CGI and FastCGI interfaces. As these flaws are already being actively exploited in the wild, senior counsel should coordinate with IT security teams to conduct an inventory, validate patch status, and implement monitoring for anomalous PHP traffic. This episode underscores the growing intersection of AI and security testing, and si

…

The New York State Department of Financial Services (NYDFS) has issued new cyber risk guidance that expands its framework to cover shared vendors, artificial intelligence, and quantum computing technologies. The memo, reported by Sheppard Mullin, signals a shift in regulator expectations for NY-based banks and insurers. NYDFS urges firms to reassess vendor oversight, map AI tools to risk categories, and evaluate quantum-safe infrastructure. Clients may need new due-diligence reviews of third-party providers, AI-specific controls, and quantum-resilience policies. Policies should be updated before NYDFS compatibility assessments later this year. This guidance underscores regulatory pressure to strengthen technology oversight; firms should benchmark current practices against NYDFS criteria to avoid non-compliance. This summary is based on early reports and is subject to confirmation by official NYDFS statements.

The Equal Employment Opportunity Commission (EEOC) held a 2‑to‑1 vote on October 28, 2026 to rescind the 2012 enforcement guidance that had linked employers’ use of arrest and conviction records to Title VII compliance. The rescission is effective immediately and signals a continued emphasis on disparate treatment over disparate impact in the agency’s enforcement of Title VII. While private litigants may still pursue disparate impact claims under Title VII, the EEOC will no longer consider the 2012 guidance a basis for enforcement. Employers should therefore review their background‑check policies to ensure they remain compliant with the federal Fair Credit Reporting Act (FCRA) and state or local regulations, particularly those relating to “Ban the Box.” Firms can anticipate private lawsuits will still raise both disparate treatment and disparate impact theories, but the EEOC’s enforcement priorities have shifted. This development is likely to affect practice for over 50 % of employment law firms handling background‑check due diligence, vendor selection and litigation continuity plans

…