Arthur Souza Rodrigues

DROPLETS

AmLaw 100 Legal Intelligence — Distilled
Tuesday, November 10, 202615 featured59 also noted30 firms10 practice areasgrade 3–5
Quick Scan — Why It Matters
Hogan LovellsWhite Collar / Investigations+ Expand
DOJ Creates Super Intelligence Task Force to Target AI-Related Fraud

DOJ announced Nov. 5, 2026 a new Super Intelligence Task Force to coordinate its enforcement and policy work on AI-related fraud, an elevated federal enforcement signal for AI-deploying companies.

On November 5, 2026, the U.S. Department of Justice announced the establishment of the DOJ Super Intelligence Task Force (SITF), a body intended to coordinate the department's super-intelligence-related enforcement and policy work, including action on AI-related fraud. According to the Hogan Lovells client alert, the task force follows a series of steps the department has already taken in this area, although the alert excerpt reviewed here does not set out the task force's membership, investigative targets, or any specific proceedings.

…

Read the full dispatch →
Skadden, Arps, Slate, Meagher & FlomEnvironment / ESG / Climate+ Expand
UK Pledges Mandatory Human Rights Due Diligence, Forced-Labour Import Powers

The UK government says it will legislate a mandatory human rights due diligence regime and gain power to remove forced-labour goods from the UK market; scope, thresholds and timing are not yet specified.

On 4 November 2026 the UK government announced its intention to legislate a mandatory human rights due diligence regime, and signalled that under it the government would gain power to remove goods made with forced labour from the UK. As reported by Skadden on 9 November 2026, this is legislative intent rather than enacted law: the available material does not set out covered entities, standards, enforcement mechanism or timetable, and does not confirm whether a consultation or draft bill has been published.

Why clients care: UK-facing supply chains — apparel, electronics, automotive components, food, consumer goods — are the obvious exposure. A statutory due diligence duty would convert what many companies still treat as voluntary ESG reporting into a legal obligation, with knock-on contract, disclosure and liability consequences. The market-access limb matters separately: a power to remove forced-labour goods would create direct import risk for goods at risk of a forced-labour finding, echoing the enforcement model US clients already navigate.

…

Read the full dispatch →
VenableFDA / Life Sciences Regulatory+ Expand
HHS Proposes Enforcement Discretion for Peptide 503A Compounding

HHS published a draft Federal Register notice on October 30, 2026 announcing interim enforcement discretion for 503A compounding using certain peptide bulk drug substances.

On October 30, 2026, the Secretary of Health and Human Services published a notice of availability in the Federal Register (FR Doc. 2026-22192; RIN 0910-ZD94) announcing a draft Enforcement Discretion Policy on 503A compounding using certain peptide bulk drug substances. The material reviewed here is a law-firm analysis of that notice rather than the full text, so the specific peptides covered, the boundaries of the discretion, and the comment deadline could not be confirmed.

…

Read the full dispatch →
Orrick, Herrington & SutcliffePrivacy / Data Security+ Expand
36 State AGs Land $220M Settlement Over Automaker Driving-Data Sales

A bipartisan coalition of 36 state attorneys general, co-led by Washington and Oregon, has settled with an automaker and its connected-vehicle subsidiary for $220M over the sale of drivers' telematics data.

A bipartisan coalition of 36 state attorneys general, co-led by Washington and Oregon, announced a $220 million settlement with an automaker and a connected-vehicle services subsidiary over the sale of drivers' connected-vehicle data. Because the resolution is multi-state, the negotiated terms are likely uniform across the joining jurisdictions and may include injunctive obligations on data collection, resale and consumer-facing disclosure alongside the payment.

The outcome matters to privacy counsel in two ways. It extends state attorney general enforcement into telematics and connected-vehicle data, where information flows between automakers, connected-services affiliates and third-party purchasers; and the payment's size and the coalition's breadth make it a reference point for gauging settlement exposure in adjacent connected-device and mobility sectors. Clients will want to compare the injunctive and compliance terms — not described in the available reporting — against their own consent architecture, contracts with data recipients, and state-law risk assessments.

…

Read the full dispatch →
King & SpaldingFinancial Regulation+ Expand
OCC Bulletin 2026-54 Sets Supervisory Framework for Bank Use of Super Intelligence

The OCC's November 4, 2026 bulletin creates a supervisory framework for national banks, federal savings associations and federal branches on their use of super-intelligence AI.

On November 4, 2026, the Office of the Comptroller of the Currency issued OCC Bulletin 2026-54, "Super Intelligence: Supervisory Framework," introducing a supervisory framework on bank use of super intelligence. A King & Spalding alert published November 10 describes what it means for national banks, federal savings associations, and federal branches and agencies. The bulletin text itself was not available for review here, so any specific expectations should be confirmed against the original document rather than the summary.

…

Read the full dispatch →
BakerHostetlerHealthcare+ Expand
CMS Finalizes 2027 Medicare Rules With Interim Path for AI Diagnostic Software

CMS coined "Software as a Medical Service" with an interim New Technology APC pathway, while ONC rolled back model-card certification duties and CMS moved AI governance and RPM/RTM staffing duties onto providers.

In one week, CMS finalized the CY2027 OPPS and MPFS rules, ONC streamlined health IT certification criteria in the HTI-5 final rule, and OCR issued a HIPAA cybersecurity newsletter. The reimbursement headline is new: CMS coined "Software as a Medical Service" (SaMS) and created an interim pathway assigning qualifying software-based diagnostic services to New Technology APCs under new status indicator O1, plus a separate route for stand-alone algorithmic analyses of previously completed laboratory data, including secondary genomic analyses. The MPFS adds an RFI on technology-enabled primary care, permits AI to support several Medicare Annual Wellness Visit components while keeping clinical responsibility with the clinician, requires clinical staff performing RPM/RTM to be directly employed by the billing practice (delayed to Jan. 1, 2029), adds telehealth platform modifiers, removes the MIPS Security Risk Analysis attestation, and creates a MIPS Improvement Activity rewarding AI governance policies.

…

Read the full dispatch →
Foley & LardnerEnvironment / ESG / Climate+ Expand
Ninth Circuit: California SB 253 Scope 1-2 stands; Scope 3 and SB 261 face injunction

Ninth Circuit's written opinion keeps California SB 253 Scope 1 and 2 reporting live with a November 10, 2026 deadline, while SB 253 Scope 3 and SB 261 are expected to be enjoined as likely unconstitutional.

On November 9, 2026, the Ninth Circuit issued its written opinion in Chamber of Commerce v. Sanchez, No. 25-5327 (9th Cir. 2026), the long-awaited decision challenging California's SB 253 (Climate Corporate Data Accountability Act) and SB 261 climate financial risk disclosure statutes. Per the firm's client alert, the panel left SB 253's Scope 1 and 2 reporting requirements in place, with the first filing due November 10, 2026, while reversing the district court's denial of preliminary injunctions as to SB 253's Scope 3 disclosures and SB 261's biennial climate-related financial risk reporting, which the court is reported to have found "likely unconstitutional" under the First Amendment. Severability of the Scope 3 provisions from the rest of SB 253 was left for the district court.

…

Read the full dispatch →
Orrick, Herrington & SutcliffeFintech / Crypto+ Expand
California DFPI consent order: crypto kiosk operator to pay $5.1M+

California's DFPI has resolved findings against a Chicago-based operator of crypto transaction kiosks and an online trading desk over digital asset licensing and AML violations, with over $5.1 million in penalties and restitution.

On November 4, 2026, the California Department of Financial Protection and Innovation announced a consent order with a Chicago-based operator of digital financial asset transaction kiosks and an online trading desk, resolving findings that the operator violated the Digital Financial Protection Law and anti-money-laundering requirements, with monetary penalties and restitution exceeding $5.1 million. The kiosk-plus-trading-desk structure sits at the intersection of money transmission, crypto asset services and California licensing, and the order signals that DFPI will police that channel rather than treat the kiosks as an incidental feature of an otherwise unregulated trading business. Counsel representing banks, money transmitters, crypto asset firms and retail-payment clients should examine the specific findings and the conduct DFPI characterizes as unlawful, since the same facts can support parallel actions in other states and in federal bank-secrecy reviews. The available summary does not identify the operator, break down the $5.1 million among penalties, restitution and forfeitur

…

Read the full dispatch →
LittlerGovernment Contracts / Defense+ Expand
Eleventh Circuit upholds constitutionality of FCA qui tam provisions

The Eleventh Circuit rejected a constitutional challenge to the False Claims Act's qui tam mechanism in Zafirov v. Florida Medical Associates, leaving private relator exposure intact for employers and federal contractors.

The Eleventh Circuit, in Zafirov v. Florida Medical Associates, upheld the constitutionality of the False Claims Act's qui tam provisions, rejecting the separation-of-powers challenge to the relator mechanism. Littler, writing in Corporate Counsel, advises employers not to close their compliance manuals on the assumption that qui tam exposure had been narrowed.

Counsel should care for two reasons. First, qui tam remains one of the most consequential private-enforcement channels against employers and contractors that bill federal programs: a relator's suit carries statutory damages exposure, and whether the government intervenes changes the relator's share. Second, the appellate endorsement suggests the constitutional theory tested in Zafirov is not prevailing in at least one circuit, so the issue stays live elsewhere and could generate conflicting appellate authority or Supreme Court review. For clients with federal-payor revenue or federal contracts, the operative risk is unchanged: FCA liability turns on knowingly false claims and on misrepresentations about compliance systems.

…

Read the full dispatch →
Arnold & PorterFDA / Life Sciences Regulatory+ Expand
SEC-FDA MOU Formalizes Nonpublic Information Sharing Framework

A new SEC-FDA memorandum of understanding creates a formal channel for exchanging nonpublic information on FDA-regulated products, with direct implications for issuer disclosure workflows.

The SEC and FDA have signed a memorandum of understanding setting out a framework for exchanging nonpublic information about FDA-regulated products and the companies that make and sell them. Arnold & Porter's analysis describes the MOU as a formalized structure enabling each agency to draw on information that is not publicly available. For counsel, the practical significance is likely to surface in disclosure workflows rather than in headline enforcement: issuers and underwriters already operate under securities-law confidentiality constraints when they receive material nonpublic information, and those same companies often have concurrent FDA-facing discussions about products, safety, labeling, or enforcement status. A formalized regulator-to-regulator channel raises questions about how information travels inside a company, which advisers see it, and whether disclosure obligations are implicated by what an agency learns. Sophisticated counsel will need the MOU's actual text and any implementing procedures before drawing conclusions, because the available summary does not describe sco

…

Read the full dispatch →
King & SpaldingHealthcare+ Expand
Mass. Court Strikes Down CMS “Medically Frail” Work-Requirement Methodology

A federal district court on October 29, 2026 struck down CMS’s method for identifying Medicaid enrollees exempt from work requirements as “medically frail,” a decision that reshapes beneficiary screening and is open to appeal.

On October 29, 2026, the U.S. District Court for the District of Massachusetts struck down CMS’s methodology for deciding whether a Medicaid enrollee meets the “medically frail” exception to Medicaid work requirements authorized under the One Big Beautiful Bill Act. The available reporting does not disclose the court’s reasoning, the scope of relief, or whether the ruling extends beyond the plaintiffs, and it is unclear whether CMS has appealed or plans to.

Counsel should care because the medically frail determination controls who is exempt from the documentation, reporting, and eligibility-verification burdens of work-requirement regimes. Medicaid managed care plans, providers, and state agencies screen enrollees against CMS guidance; an invalidated methodology pushes those decisions back toward individual clinical judgment and creates compliance uncertainty while the litigation proceeds. The ruling targets the agency’s method rather than the statutory work-requirement provisions themselves, so the underlying program design remains intact for now.

…

Read the full dispatch →
Ballard SpahrFinancial Regulation+ Expand
OCC Issues Risk-Based Supervisory Framework for Banks' Use of AI

A Ballard Spahr alert reports that the OCC has issued a risk-based supervisory framework for banks' deployment of generative and agentic AI, extending US bank supervision into AI-specific expectations.

A client alert from Ballard Spahr reports that the Office of the Comptroller of the Currency has issued a supervisory framework addressing banks' rapidly expanding use of artificial intelligence, framed as a risk-based approach to generative and agentic AI. The alert describes the step as a further move by the OCC to bring AI deployment in banking within a coherent supervisory approach rather than leaving it to piecemeal guidance.

For bank clients and their counsel, the significance is that AI use is now addressed through a dedicated, risk-calibrated supervisory framework, which typically sharpens expectations around governance and board oversight, model validation, data lineage, third-party and vendor risk, and ongoing monitoring of agentic systems that act with a degree of autonomy. At major firms, financial-regulation, technology, and commercial-contracting teams will want to map existing and planned AI use cases against whatever risk categories the framework sets out, and to review vendor arrangements with providers of model and agent services.

…

Read the full dispatch →
Goodwin ProcterFintech / Crypto+ Expand
OCC Finalizes GENIUS Act Implementing Rule for OCC-Supervised Stablecoin Issuers

The OCC issued a final rule on October 21 adopting regulations to implement the federal GENIUS Act for entities subject to OCC supervision, setting the compliance framework for OCC-supervised stablecoin issuers.

What happened: The Office of the Comptroller of the Currency issued a final rule on October 21 adopting regulations implementing the Guiding and Establishing National Innovation for U.S. Stablecoins Act (GENIUS Act) for entities subject to OCC supervision. The item surfaced via a law-firm alert (Goodwin Procter, distributed on JD Supra); the excerpt here does not set out the rule's specific provisions, compliance timetables, or covered-entity scope, so operative requirements should be confirmed against the Federal Register text and any agency guidance or transition periods.

…

Read the full dispatch →
Jones DaySanctions / Export Controls+ Expand
China Tightens Export Controls on AI and Biotech Technologies

China has further tightened controls on exports of strategic technologies, with AI and biotech singled out, raising fresh compliance and structuring questions for cross-border technology transactions.

Jones Day's alert reports that China has tightened its controls on exports of strategic technologies, with AI and biotech identified as areas of focus, and analyzes what the change means for technology deals. Because the available source is the alert title and framing rather than the underlying rule text, the specific instrument, licensing scope, covered items, and effective date are not stated here, and readers should confirm the operative detail against the published Chinese rules before relying on any conclusion.

…

Read the full dispatch →
Sullivan & CromwellTax+ Expand
Tax Court voids $46.1M easement deductions; Liberty Global heads to SCOTUS

A S&C roundup: conservation easement deductions fully disallowed with 40% penalties, Liberty Global's cert bid on economic substance, a denied rehearing in K Alain, and uncertain lame-duck tax legislation.

The Tax Court in Murphy Hollow and Hales Gap (consolidated) disallowed $46.1 million of charitable contribution deductions for two donated tracts bought for roughly $2.85 million, upheld 40% gross valuation misstatement penalties, and disqualified the appraiser under Reg. 1.170A-13(c)(5)(ii) because sponsors knew the valuations would be overstated. In Morgan Run Partners, the court valued a contributed easement at $1,165,000 rather than the claimed $26 million and sustained the penalty. Separately, Liberty Global confirmed it will seek Supreme Court review of the Tenth Circuit decision denying a $2.4 billion section 245A deduction, with its cert petition due December 16, 2026, pressing whether section 7701(o) requires a threshold relevancy determination. The Fifth Circuit also denied rehearing in K Alain on the section 1402(a)(13) limited partner exception, and lame-duck tax legislation looks uncertain after the midterms. Clients funding easement gifts should re-audit valuations and appraiser independence, and watch the cert petition and any end-of-year spending bill.

Read the full dispatch →
DIG DEEPER
MOST CONSEQUENTIALDOJ Creates Super Intelligence Task Force to Target AI-Related Fraud

DOJ announced Nov. 5, 2026 a new Super Intelligence Task Force to coordinate its enforcement and policy work on AI-related fraud, an elevated federal enforcement signal for AI-deploying companies.

On November 5, 2026, the U.S. Department of Justice announced the establishment of the DOJ Super Intelligence Task Force (SITF), a body intended to coordinate the department's super-intelligence-related enforcement and policy work, including action on AI-related fraud. According to the Hogan Lovells client alert, the task force follows a series of steps the department has already taken in this area, although the alert excerpt reviewed here does not set out the task force's membership, investigative targets, or any specific proceedings.

…

Hogan LovellsWhite Collar / Investigations
doj-task-forceai-fraudsuper-intelligence-task-forcewhite-collar-enforcementartificial-intelligence
AR
Today's Curator
Arthur Rodrigues. Corporate Counsel & Corporate Secretary at Teachable, Inc. Founder of Cicero Intelligent Minds. Former BigLaw (O'Melveny, Weil, Hughes Hubbard). JD/LLM Michigan Law. Droplets is a personal project; the views are his own, not Teachable's.
Full Analysis — The Details
01 — ENVIRONMENT / ESG / CLIMATE2
Skadden, Arps, Slate, Meagher & Flom+ Expand
UK Pledges Mandatory Human Rights Due Diligence, Forced-Labour Import Powers

The UK government says it will legislate a mandatory human rights due diligence regime and gain power to remove forced-labour goods from the UK market; scope, thresholds and timing are not yet specified.

On 4 November 2026 the UK government announced its intention to legislate a mandatory human rights due diligence regime, and signalled that under it the government would gain power to remove goods made with forced labour from the UK. As reported by Skadden on 9 November 2026, this is legislative intent rather than enacted law: the available material does not set out covered entities, standards, enforcement mechanism or timetable, and does not confirm whether a consultation or draft bill has been published.

Why clients care: UK-facing supply chains — apparel, electronics, automotive components, food, consumer goods — are the obvious exposure. A statutory due diligence duty would convert what many companies still treat as voluntary ESG reporting into a legal obligation, with knock-on contract, disclosure and liability consequences. The market-access limb matters separately: a power to remove forced-labour goods would create direct import risk for goods at risk of a forced-labour finding, echoing the enforcement model US clients already navigate.

…

human-rights-due-diligenceforced-laboursupply-chainesgimport-banuk-regulation
Read the full dispatch →
Foley & Lardner+ Expand
Ninth Circuit: California SB 253 Scope 1-2 stands; Scope 3 and SB 261 face injunction

Ninth Circuit's written opinion keeps California SB 253 Scope 1 and 2 reporting live with a November 10, 2026 deadline, while SB 253 Scope 3 and SB 261 are expected to be enjoined as likely unconstitutional.

On November 9, 2026, the Ninth Circuit issued its written opinion in Chamber of Commerce v. Sanchez, No. 25-5327 (9th Cir. 2026), the long-awaited decision challenging California's SB 253 (Climate Corporate Data Accountability Act) and SB 261 climate financial risk disclosure statutes. Per the firm's client alert, the panel left SB 253's Scope 1 and 2 reporting requirements in place, with the first filing due November 10, 2026, while reversing the district court's denial of preliminary injunctions as to SB 253's Scope 3 disclosures and SB 261's biennial climate-related financial risk reporting, which the court is reported to have found "likely unconstitutional" under the First Amendment. Severability of the Scope 3 provisions from the rest of SB 253 was left for the district court.

…

sb-253sb-261climate-disclosureninth-circuitfirst-amendmentghg-emissionscalifornia
Read the full dispatch →
02 — FDA / LIFE SCIENCES REGULATORY2
Venable+ Expand
HHS Proposes Enforcement Discretion for Peptide 503A Compounding

HHS published a draft Federal Register notice on October 30, 2026 announcing interim enforcement discretion for 503A compounding using certain peptide bulk drug substances.

On October 30, 2026, the Secretary of Health and Human Services published a notice of availability in the Federal Register (FR Doc. 2026-22192; RIN 0910-ZD94) announcing a draft Enforcement Discretion Policy on 503A compounding using certain peptide bulk drug substances. The material reviewed here is a law-firm analysis of that notice rather than the full text, so the specific peptides covered, the boundaries of the discretion, and the comment deadline could not be confirmed.

…

fda-503a-compoundingbulk-drug-substancesenforcement-discretionpeptide-compoundingfederal-registercompounding-pharmacy
Read the full dispatch →
Arnold & Porter+ Expand
SEC-FDA MOU Formalizes Nonpublic Information Sharing Framework

A new SEC-FDA memorandum of understanding creates a formal channel for exchanging nonpublic information on FDA-regulated products, with direct implications for issuer disclosure workflows.

The SEC and FDA have signed a memorandum of understanding setting out a framework for exchanging nonpublic information about FDA-regulated products and the companies that make and sell them. Arnold & Porter's analysis describes the MOU as a formalized structure enabling each agency to draw on information that is not publicly available. For counsel, the practical significance is likely to surface in disclosure workflows rather than in headline enforcement: issuers and underwriters already operate under securities-law confidentiality constraints when they receive material nonpublic information, and those same companies often have concurrent FDA-facing discussions about products, safety, labeling, or enforcement status. A formalized regulator-to-regulator channel raises questions about how information travels inside a company, which advisers see it, and whether disclosure obligations are implicated by what an agency learns. Sophisticated counsel will need the MOU's actual text and any implementing procedures before drawing conclusions, because the available summary does not describe sco

…

sec-fda-mounonpublic-informationdisclosure-obligationsinformation-sharingregulatory-coordinationpharma-securities
Read the full dispatch →
03 — FINANCIAL REGULATION2
King & Spalding+ Expand
OCC Bulletin 2026-54 Sets Supervisory Framework for Bank Use of Super Intelligence

The OCC's November 4, 2026 bulletin creates a supervisory framework for national banks, federal savings associations and federal branches on their use of super-intelligence AI.

On November 4, 2026, the Office of the Comptroller of the Currency issued OCC Bulletin 2026-54, "Super Intelligence: Supervisory Framework," introducing a supervisory framework on bank use of super intelligence. A King & Spalding alert published November 10 describes what it means for national banks, federal savings associations, and federal branches and agencies. The bulletin text itself was not available for review here, so any specific expectations should be confirmed against the original document rather than the summary.

…

occ-supervisory-frameworkbank-ai-governancesuper-intelligencemodel-risk-managementbank-supervisionai-in-financial-services
Read the full dispatch →
Ballard Spahr+ Expand
OCC Issues Risk-Based Supervisory Framework for Banks' Use of AI

A Ballard Spahr alert reports that the OCC has issued a risk-based supervisory framework for banks' deployment of generative and agentic AI, extending US bank supervision into AI-specific expectations.

A client alert from Ballard Spahr reports that the Office of the Comptroller of the Currency has issued a supervisory framework addressing banks' rapidly expanding use of artificial intelligence, framed as a risk-based approach to generative and agentic AI. The alert describes the step as a further move by the OCC to bring AI deployment in banking within a coherent supervisory approach rather than leaving it to piecemeal guidance.

For bank clients and their counsel, the significance is that AI use is now addressed through a dedicated, risk-calibrated supervisory framework, which typically sharpens expectations around governance and board oversight, model validation, data lineage, third-party and vendor risk, and ongoing monitoring of agentic systems that act with a degree of autonomy. At major firms, financial-regulation, technology, and commercial-contracting teams will want to map existing and planned AI use cases against whatever risk categories the framework sets out, and to review vendor arrangements with providers of model and agent services.

…

occ-supervisionbanking-aigenerative-aiagentic-aisupervisory-frameworkmodel-risk-managementthird-party-risk
Read the full dispatch →
04 — FINTECH / CRYPTO2
Orrick, Herrington & Sutcliffe+ Expand
California DFPI consent order: crypto kiosk operator to pay $5.1M+

California's DFPI has resolved findings against a Chicago-based operator of crypto transaction kiosks and an online trading desk over digital asset licensing and AML violations, with over $5.1 million in penalties and restitution.

On November 4, 2026, the California Department of Financial Protection and Innovation announced a consent order with a Chicago-based operator of digital financial asset transaction kiosks and an online trading desk, resolving findings that the operator violated the Digital Financial Protection Law and anti-money-laundering requirements, with monetary penalties and restitution exceeding $5.1 million. The kiosk-plus-trading-desk structure sits at the intersection of money transmission, crypto asset services and California licensing, and the order signals that DFPI will police that channel rather than treat the kiosks as an incidental feature of an otherwise unregulated trading business. Counsel representing banks, money transmitters, crypto asset firms and retail-payment clients should examine the specific findings and the conduct DFPI characterizes as unlawful, since the same facts can support parallel actions in other states and in federal bank-secrecy reviews. The available summary does not identify the operator, break down the $5.1 million among penalties, restitution and forfeitur

…

dfpi-consent-ordercrypto-kiosksdigital-financial-protection-lawanti-money-launderingmoney-transmissioncrypto-enforcement
Read the full dispatch →
Goodwin Procter+ Expand
OCC Finalizes GENIUS Act Implementing Rule for OCC-Supervised Stablecoin Issuers

The OCC issued a final rule on October 21 adopting regulations to implement the federal GENIUS Act for entities subject to OCC supervision, setting the compliance framework for OCC-supervised stablecoin issuers.

What happened: The Office of the Comptroller of the Currency issued a final rule on October 21 adopting regulations implementing the Guiding and Establishing National Innovation for U.S. Stablecoins Act (GENIUS Act) for entities subject to OCC supervision. The item surfaced via a law-firm alert (Goodwin Procter, distributed on JD Supra); the excerpt here does not set out the rule's specific provisions, compliance timetables, or covered-entity scope, so operative requirements should be confirmed against the Federal Register text and any agency guidance or transition periods.

…

genius-actstablecoinsoccbanking-regulationdigital-assetstrust-banksfintech
Read the full dispatch →
05 — GOVERNMENT CONTRACTS / DEFENSE1
Littler+ Expand
Eleventh Circuit upholds constitutionality of FCA qui tam provisions

The Eleventh Circuit rejected a constitutional challenge to the False Claims Act's qui tam mechanism in Zafirov v. Florida Medical Associates, leaving private relator exposure intact for employers and federal contractors.

The Eleventh Circuit, in Zafirov v. Florida Medical Associates, upheld the constitutionality of the False Claims Act's qui tam provisions, rejecting the separation-of-powers challenge to the relator mechanism. Littler, writing in Corporate Counsel, advises employers not to close their compliance manuals on the assumption that qui tam exposure had been narrowed.

Counsel should care for two reasons. First, qui tam remains one of the most consequential private-enforcement channels against employers and contractors that bill federal programs: a relator's suit carries statutory damages exposure, and whether the government intervenes changes the relator's share. Second, the appellate endorsement suggests the constitutional theory tested in Zafirov is not prevailing in at least one circuit, so the issue stays live elsewhere and could generate conflicting appellate authority or Supreme Court review. For clients with federal-payor revenue or federal contracts, the operative risk is unchanged: FCA liability turns on knowingly false claims and on misrepresentations about compliance systems.

…

false-claims-actqui-tameleventh-circuitconstitutional-challengewhistleblowercompliance-programsappellate-ruling
Read the full dispatch →
06 — HEALTHCARE2
BakerHostetler+ Expand
CMS Finalizes 2027 Medicare Rules With Interim Path for AI Diagnostic Software

CMS coined "Software as a Medical Service" with an interim New Technology APC pathway, while ONC rolled back model-card certification duties and CMS moved AI governance and RPM/RTM staffing duties onto providers.

In one week, CMS finalized the CY2027 OPPS and MPFS rules, ONC streamlined health IT certification criteria in the HTI-5 final rule, and OCR issued a HIPAA cybersecurity newsletter. The reimbursement headline is new: CMS coined "Software as a Medical Service" (SaMS) and created an interim pathway assigning qualifying software-based diagnostic services to New Technology APCs under new status indicator O1, plus a separate route for stand-alone algorithmic analyses of previously completed laboratory data, including secondary genomic analyses. The MPFS adds an RFI on technology-enabled primary care, permits AI to support several Medicare Annual Wellness Visit components while keeping clinical responsibility with the clinician, requires clinical staff performing RPM/RTM to be directly employed by the billing practice (delayed to Jan. 1, 2029), adds telehealth platform modifiers, removes the MIPS Security Risk Analysis attestation, and creates a MIPS Improvement Activity rewarding AI governance policies.

…

cms-opps-final-rulesoftware-as-medical-servicemedicare-reimbursementhealthcare-ai-governanceonc-hti-5ai-liability
Read the full dispatch →
King & Spalding+ Expand
Mass. Court Strikes Down CMS “Medically Frail” Work-Requirement Methodology

A federal district court on October 29, 2026 struck down CMS’s method for identifying Medicaid enrollees exempt from work requirements as “medically frail,” a decision that reshapes beneficiary screening and is open to appeal.

On October 29, 2026, the U.S. District Court for the District of Massachusetts struck down CMS’s methodology for deciding whether a Medicaid enrollee meets the “medically frail” exception to Medicaid work requirements authorized under the One Big Beautiful Bill Act. The available reporting does not disclose the court’s reasoning, the scope of relief, or whether the ruling extends beyond the plaintiffs, and it is unclear whether CMS has appealed or plans to.

Counsel should care because the medically frail determination controls who is exempt from the documentation, reporting, and eligibility-verification burdens of work-requirement regimes. Medicaid managed care plans, providers, and state agencies screen enrollees against CMS guidance; an invalidated methodology pushes those decisions back toward individual clinical judgment and creates compliance uncertainty while the litigation proceeds. The ruling targets the agency’s method rather than the statutory work-requirement provisions themselves, so the underlying program design remains intact for now.

…

medicaid-work-requirementsmedically-frailcms-regulationobbbamanaged-carebeneficiary-eligibility
Read the full dispatch →
07 — PRIVACY / DATA SECURITY1
Orrick, Herrington & Sutcliffe+ Expand
36 State AGs Land $220M Settlement Over Automaker Driving-Data Sales

A bipartisan coalition of 36 state attorneys general, co-led by Washington and Oregon, has settled with an automaker and its connected-vehicle subsidiary for $220M over the sale of drivers' telematics data.

A bipartisan coalition of 36 state attorneys general, co-led by Washington and Oregon, announced a $220 million settlement with an automaker and a connected-vehicle services subsidiary over the sale of drivers' connected-vehicle data. Because the resolution is multi-state, the negotiated terms are likely uniform across the joining jurisdictions and may include injunctive obligations on data collection, resale and consumer-facing disclosure alongside the payment.

The outcome matters to privacy counsel in two ways. It extends state attorney general enforcement into telematics and connected-vehicle data, where information flows between automakers, connected-services affiliates and third-party purchasers; and the payment's size and the coalition's breadth make it a reference point for gauging settlement exposure in adjacent connected-device and mobility sectors. Clients will want to compare the injunctive and compliance terms — not described in the available reporting — against their own consent architecture, contracts with data recipients, and state-law risk assessments.

…

multi-state-settlementstate-attorneys-generalconnected-vehicletelematics-dataprivacy-enforcementautomotive-privacy
Read the full dispatch →
08 — SANCTIONS / EXPORT CONTROLS1
Jones Day+ Expand
China Tightens Export Controls on AI and Biotech Technologies

China has further tightened controls on exports of strategic technologies, with AI and biotech singled out, raising fresh compliance and structuring questions for cross-border technology transactions.

Jones Day's alert reports that China has tightened its controls on exports of strategic technologies, with AI and biotech identified as areas of focus, and analyzes what the change means for technology deals. Because the available source is the alert title and framing rather than the underlying rule text, the specific instrument, licensing scope, covered items, and effective date are not stated here, and readers should confirm the operative detail against the published Chinese rules before relying on any conclusion.

…

china-export-controlsai-technologybiotechtechnology-transactionsexport-licensingdeal-diligencecross-border-m-and-a
Read the full dispatch →
09 — TAX1
Sullivan & Cromwell+ Expand
Tax Court voids $46.1M easement deductions; Liberty Global heads to SCOTUS

A S&C roundup: conservation easement deductions fully disallowed with 40% penalties, Liberty Global's cert bid on economic substance, a denied rehearing in K Alain, and uncertain lame-duck tax legislation.

The Tax Court in Murphy Hollow and Hales Gap (consolidated) disallowed $46.1 million of charitable contribution deductions for two donated tracts bought for roughly $2.85 million, upheld 40% gross valuation misstatement penalties, and disqualified the appraiser under Reg. 1.170A-13(c)(5)(ii) because sponsors knew the valuations would be overstated. In Morgan Run Partners, the court valued a contributed easement at $1,165,000 rather than the claimed $26 million and sustained the penalty. Separately, Liberty Global confirmed it will seek Supreme Court review of the Tenth Circuit decision denying a $2.4 billion section 245A deduction, with its cert petition due December 16, 2026, pressing whether section 7701(o) requires a threshold relevancy determination. The Fifth Circuit also denied rehearing in K Alain on the section 1402(a)(13) limited partner exception, and lame-duck tax legislation looks uncertain after the midterms. Clients funding easement gifts should re-audit valuations and appraiser independence, and watch the cert petition and any end-of-year spending bill.

conservation-easementeconomic-substancesection-245avaluation-penaltytax-courtcertiorarilame-duck-taxcharitable-contribution
Read the full dispatch →
10 — WHITE COLLAR / INVESTIGATIONS1
Hogan Lovells+ Expand
DOJ Creates Super Intelligence Task Force to Target AI-Related Fraud

DOJ announced Nov. 5, 2026 a new Super Intelligence Task Force to coordinate its enforcement and policy work on AI-related fraud, an elevated federal enforcement signal for AI-deploying companies.

On November 5, 2026, the U.S. Department of Justice announced the establishment of the DOJ Super Intelligence Task Force (SITF), a body intended to coordinate the department's super-intelligence-related enforcement and policy work, including action on AI-related fraud. According to the Hogan Lovells client alert, the task force follows a series of steps the department has already taken in this area, although the alert excerpt reviewed here does not set out the task force's membership, investigative targets, or any specific proceedings.

…

doj-task-forceai-fraudsuper-intelligence-task-forcewhite-collar-enforcementartificial-intelligence
Read the full dispatch →
Also noted

Grade 3 — worth a glance, not the full analysis.

Stay ahead

Join the digest.

Each weekday's issue by email, through Substack. Or follow the RSS feed.