- AI Governance and Compliance Insights for Small and Mid Size Businesses.

State and Federal Law

California Signed More Than 20 AI Laws by September 30. One Erased a One Million User Threshold the Day It Was Signed. Here Is Which Ones Reach a Small Business.
ByRoss J. October 12, 2026October 12, 2026

Executive Summary September 30, 2026 was the deadline for Governor Newsom to act on the bills the Legislature passed before September 1. Law firm tallies count more than 20 AI related laws enacted in the 2026 session, with totals varying by whether adjacent privacy and surveillance measures are included. Most take effect January 1, 2027,…

Read More California Signed More Than 20 AI Laws by September 30. One Erased a One Million User Threshold the Day It Was Signed. Here Is Which Ones Reach a Small Business.
Federal Contractors

GSA’s AI Contract Clause Takes Effect October 19. Internal and Incidental AI Use Can Fall Outside It. Small Business Status Does Not.
ByRoss J. October 8, 2026October 8, 2026

Executive Summary GSA has issued a revised GSAR 552.239-7001, Basic Safeguarding of Data within Large Language Model Artificial Intelligence Systems, through a class deviation; formal notice and comment rulemaking is still to follow. GSA’s deviation table lists Part 552 as signed July 16, 2026 and effective October 19, 2026, and contracting officers may use it…

Read More GSA’s AI Contract Clause Takes Effect October 19. Internal and Incidental AI Use Can Fall Outside It. Small Business Status Does Not.
Manufacturing

The EU Started a 24 Hour Clock on September 11. If You Ship Connected or AI Enabled Equipment to Europe, It Covers Machines You Already Sold.
ByRoss J. October 7, 2026October 7, 2026

Executive Summary Since September 11, 2026, Article 14 of the EU Cyber Resilience Act requires manufacturers of connected hardware and software sold in the EU to report actively exploited vulnerabilities and severe security incidents. The deadlines are an early warning within 24 hours, a fuller notification within 72 hours, and a final report later. Location…

Read More The EU Started a 24 Hour Clock on September 11. If You Ship Connected or AI Enabled Equipment to Europe, It Covers Machines You Already Sold.
Nonprofits

Delaware Cut Its Privacy Threshold to 10,000 People. Nonprofits Get No General Exemption. Here Is What Changes January 1 for AI on Donor Data.
ByRoss J. October 7, 2026October 7, 2026

Executive Summary On January 1, 2027, Delaware House Bill 380 lowers the Delaware Personal Data Privacy Act general threshold from 35,000 to 10,000 Delaware consumers. Delaware gives nonprofits no general exemption. Organizations that do business in Delaware or target its residents should test their 2026 processing, applicable exclusions, any data sales and any lists acquired…

Read More Delaware Cut Its Privacy Threshold to 10,000 People. Nonprofits Get No General Exemption. Here Is What Changes January 1 for AI on Donor Data.
Marketing Agencies

Two Small Marketing Firms Paid $25,000 Each Over AI Claims They Helped Market. What the FTC’s Active Listening Orders Mean for Your Agency.
ByRoss J. September 28, 2026September 28, 2026

Executive Summary On August 27, 2026, the FTC finalized orders against Cox Media Group and two small marketing firms over an “Active Listening” service marketed as AI that targeted ads from conversations overheard by smart devices. The FTC alleged the service used no voice data at all. Cox Media Group pays $880,000, and MindSift LLC…

Read More Two Small Marketing Firms Paid $25,000 Each Over AI Claims They Helped Market. What the FTC’s Active Listening Orders Mean for Your Agency.
SaaS and Technology

OpenAI Reported One of Three Agent Incidents to Brussels. If Your SaaS Product Runs on a Frontier API, Here Is What Actually Flows Down to You.
ByRoss J. September 21, 2026September 21, 2026

Executive Summary Between July 21 and September 18, 2026, three separate episodes of OpenAI agents acting outside their sandbox became public: the Hugging Face intrusion (disclosed July 21), the DseWiki message board (about 18,000 posts, reported by outside researchers September 4) and the RubyGems episode (May 2026, reported by researchers in September). According to a…

Read More OpenAI Reported One of Three Agent Incidents to Brussels. If Your SaaS Product Runs on a Frontier API, Here Is What Actually Flows Down to You.
Legal Services

California SB 574 Passed Without a Single No Vote. Unless the Governor Vetoes It by September 30, Lawyers Get Their First AI Statute on January 1.
ByRoss J. September 17, 2026September 17, 2026

Executive Summary California SB 574 passed the Assembly 75 to 0 on August 31, 2026, the Senate concurred the same day with no votes against, and the enrolled bill was presented to Governor Newsom on September 9, 2026. Because it passed before the September 1 cutoff in the California Constitution, the Governor must return it…

Read More California SB 574 Passed Without a Single No Vote. Unless the Governor Vetoes It by September 30, Lawyers Get Their First AI Statute on January 1.
Real Estate

Colorado’s Rewritten AI Act Reaches Tenant Screening on January 1, 2027. The Attorney General’s Draft Rules Are Out and Comments Close October 26.
ByRoss J. September 14, 2026September 14, 2026

Executive Summary Colorado SB 26-189, signed May 14, 2026 and codified at C.R.S. 6-1-1701 through 6-1-1709, names “the lease or purchase of residential real estate in Colorado” as a covered domain. A landlord doing business in Colorado whose screening tool materially influences a consequential decision about Colorado housing becomes a regulated deployer on January 1,…

Read More Colorado’s Rewritten AI Act Reaches Tenant Screening on January 1, 2027. The Attorney General’s Draft Rules Are Out and Comments Close October 26.
Financial Services

Illinois Just Made AI Underwriting a Disparate Impact Problem Again. The Deadline Is June 1, 2027.
ByRoss J. September 10, 2026September 10, 2026

Executive Summary Illinois Public Act 104-0744, which the Act itself calls the Civil Rights Safeguard Act, makes it a civil rights violation for a financial institution to use “criteria or methods” that have the effect of subjecting people to unlawful discrimination, even with no intent to discriminate. Governor Pritzker approved it July 31, 2026. The…

Read More Illinois Just Made AI Underwriting a Disparate Impact Problem Again. The Deadline Is June 1, 2027.
Staffing and HR

California SB 947 Is on the Governor’s Desk. If He Says Nothing by September 30, It Becomes Law.
ByRoss J. September 8, 2026September 8, 2026

Executive Summary The California Legislature passed SB 947, the No Robo Bosses Act of 2026, on August 31, 2026. The enrolled version was produced on September 4, 2026 and sits with Governor Newsom. Because the bill passed one day before the September 1 cutoff in the California Constitution, the Governor has to return it with…

Read More California SB 947 Is on the Governor’s Desk. If He Says Nothing by September 30, It Becomes Law.

California Signed More Than 20 AI Laws by September 30. One Erased a One Million User Threshold the Day It Was Signed. Here Is Which Ones Reach a Small Business.

GSA’s AI Contract Clause Takes Effect October 19. Internal and Incidental AI Use Can Fall Outside It. Small Business Status Does Not.

The EU Started a 24 Hour Clock on September 11. If You Ship Connected or AI Enabled Equipment to Europe, It Covers Machines You Already Sold.

Delaware Cut Its Privacy Threshold to 10,000 People. Nonprofits Get No General Exemption. Here Is What Changes January 1 for AI on Donor Data.

Two Small Marketing Firms Paid $25,000 Each Over AI Claims They Helped Market. What the FTC’s Active Listening Orders Mean for Your Agency.

OpenAI Reported One of Three Agent Incidents to Brussels. If Your SaaS Product Runs on a Frontier API, Here Is What Actually Flows Down to You.

California SB 574 Passed Without a Single No Vote. Unless the Governor Vetoes It by September 30, Lawyers Get Their First AI Statute on January 1.

Colorado’s Rewritten AI Act Reaches Tenant Screening on January 1, 2027. The Attorney General’s Draft Rules Are Out and Comments Close October 26.

Illinois Just Made AI Underwriting a Disparate Impact Problem Again. The Deadline Is June 1, 2027.

California SB 947 Is on the Governor’s Desk. If He Says Nothing by September 30, It Becomes Law.

Connect:

Hello@dynamiccomply.com

Privacy Policy

Terms Of Use