California Subpoenas OpenAI Over AI Model Cyber Risks
California's subpoena is an investigative step, not a finding.
Legislation
A Right-to-Work DVS Check Now Needs a Registered Provider
Keep the recruitment decision and its evidence together.
Australia’s December Privacy Rule Can Apply Even When a Human Makes the Decision
Australia’s privacy regulator has explained a 10 December disclosure duty for software-assisted decisions that significantly affect people. Human review and third-party tools do not automatically remove a decision from scope.
Securing the Alert Box Is No Longer Enough Under the FCC’s New Cyber Rules
The FCC's EAS cybersecurity rule reaches beyond alert encoders to studio transmitter links and remotely managed equipment in the programming path. Three targeted controls apply from 29 September.
The EU’s New Data-Centre Labels Won’t Tell You the Whole Energy Story
The EU plans public energy and water grades for individual data centres from 2027. The labels should aid comparisons, but will not show each site’s exact annual electricity total.
Australia’s Critical-Infrastructure Regulator Wants More Than a Signed Risk Report
Australia's 2025-26 critical-infrastructure risk report is due on 28 September. The regulator says its next compliance cycle will look harder at serious or persistent gaps behind the board's statement.
When Election Certification Gets in the Way of a Security Patch
Election software can need an urgent security fix while certification rules make vendors and operators afraid to apply it.
Europe Just Started the 24-Hour Cyber Reporting Clock for Digital Products
ENISA's CRA Single Reporting Platform is now live, and the first 24-hour reporting clock is running. Manufacturers need more than a portal login to meet it.
America Declared a Power-Grid Emergency Over Hardware It Does Not Trust
A US national-emergency order treats power-grid security as a hardware, firmware, maintenance and remote-access supply-chain problem.
Alabama Is Testing Whether an AI Sandbox Failure Was Also a Consumer-Protection Failure.
Alabama has subpoenaed OpenAI over the Hugging Face agent intrusion, testing whether weak AI evaluation controls can also violate consumer-protection law.