D
Hello, David
Friday 10 April 2026 — 23 new updates across your tracked jurisdictions
Your home
United Kingdom
Europe 847 records
Legislation moving
AI governance
14 bills in progress across 9 jurisdictions
Next deadline
EU AI Act: Prohibited Systems
12 days
337
Jurisdictions tracked
1,602
Regulatory bodies
174
Laws & regulations
+109 in progress
23
Records this week
NEW
PAI Briefing: EU AI Act Enforcement Begins
▶ Watch Now
While you were away
23 new records in the last 7 days
3 Alert17 Guidance3 Enforcement
Trending topics
Official Guidelines 58
Case Law 13
Facial Recognition 9
Copyright & AI 7
Data Protection 41
Autonomous Systems 5
Activity
Global AI Laws
US AI Laws
EU AI Act
10 Apr🇮🇹Alert
Italy: Garante fines Intesa Sanpaolo €31.8m for unauthorised data access
Major GDPR enforcement action targeting banking sector data governance failures
10 Apr🇺🇸Guidance
US: NIST releases updated AI Risk Management Framework v2.1
Expanded guidance on foundation model evaluation and red-teaming requirements
9 Apr🇬🇧Consultation
UK: ICO publishes consultation on AI and data protection compliance
60-day public consultation on draft guidance for AI developers and deployers
9 Apr🇪🇺Legislation
EU: European Commission adopts delegated act on high-risk AI classification
Clarifying criteria for Annex III categorisation under the AI Act
8 Apr🇨🇦Bill
Canada: AIDA moves to Senate committee review stage
Artificial Intelligence and Data Act faces amendments on enforcement powers
PRINCIPLESAI
Your inbox
56 stories today · 11 in your watchlist · 42 unreadLive · checker updated 4 min ago
TODAY'S LEAD
Italy: Garante fines Intesa Sanpaolo €31.8m for failing to detect employee's unauthorised client data access
Italy's data protection authority has imposed its largest-ever fine on a financial institution after a bank employee accessed personal records of over 3,500 clients, including high-profile political figures, without authorisation over a period of more than two years. The decision raises critical questions about internal monitoring obligations and the adequacy of technical safeguards under GDPR Article 32.
Read full story →ASK THE DESK2 day SLA
AI & Copyright: Cross-Jurisdictional Matrix
Comparing copyright and intellectual property requirements across jurisdictions
Key:
Yes = Binding legal requirement
Partial = Guidance / emerging
No = No specific requirement
Limited = Sector-specific only
Why this matters now
The intersection of AI and copyright law is the fastest-moving area of tech regulation in 2026. Major jurisdictions are taking divergent approaches to whether AI-generated works qualify for copyright protection, whether training on copyrighted data constitutes fair use, and what disclosure obligations apply to AI developers. These differences create significant compliance complexity for organisations operating across borders.
| Jurisdiction | AI Works Copyrightable? | TDM Exception? | Training on Copyrighted Data | Disclosure Required? | Liability Framework |
|---|---|---|---|---|---|
| 🇪🇺 European Union | NoHuman authorship required | YesDSM Arts 3-4 | PartialOpt-out mechanism | YesAI Act Art. 52 | Emerging |
| 🇺🇸 United States | NoThaler v. Vidal (2023) | YesFair use doctrine | PartialPending litigation | No | Emerging |
| 🇬🇧 United Kingdom | YesCDPA s.9(3) | PartialUnder review | ImpliedCode of Practice | PartialVoluntary code | Emerging |
| 🇯🇵 Japan | NoHuman creativity needed | YesArt. 30-4 Copyright Act | YesBroad non-enjoyment exception | No | Emerging |
| 🇨🇳 China | PartialBeijing Internet Court (2023) | No | PartialConsent required | YesAIGC Measures Art. 12 | YesProvider liable |
| 🇰🇷 South Korea | No | PartialUnder consultation | Partial | Emerging | Emerging |
| 🇨🇦 Canada | NoHuman author required | PartialFair dealing | Partial | No | Emerging |
Key tension
Japan's expansive text and data mining exception stands in sharp contrast to the EU's opt-out mechanism. Organisations training models on data sourced from multiple jurisdictions must navigate fundamentally different legal frameworks simultaneously, with no international harmonisation in sight.
Regulatory Authorities
1,602 regulatory bodies across 337 jurisdictions
| Authority | Type | Jurisdiction | AI Mandate | Status | Last Activity |
|---|---|---|---|---|---|
| European AI Office | AI-Specific | 🇪🇺 European Union | Primary | ● Active | 10 Apr 2026 |
| CNIL | Data Protection | 🇫🇷 France | Extended | ● Active | 9 Apr 2026 |
| ICO | Data Protection | 🇬🇧 United Kingdom | Extended | ● Active | 9 Apr 2026 |
| NIST | Standards Body | 🇺🇸 United States | Standards | ● Active | 10 Apr 2026 |
| FTC | Consumer Protection | 🇺🇸 United States | Extended | ● Active | 7 Apr 2026 |
| Garante | Data Protection | 🇮🇹 Italy | Extended | ● Active | 10 Apr 2026 |
| CAC | AI-Specific | 🇨🇳 China | Primary | ● Active | 5 Apr 2026 |
| PIPC | Data Protection | 🇰🇷 South Korea | Extended | ● Active | 9 Apr 2026 |
| BaFin | Financial Regulator | 🇩🇪 Germany | Sector | ● Limited | 3 Apr 2026 |
| ACCC | Competition | 🇦🇺 Australia | Inquiry | ● Active | 9 Apr 2026 |
Your Lists
Curated collections of jurisdictions, topics, and regulatory intelligence
Priority Jurisdictions
12 jurisdictions · Updated 2h agoEUUKUSChina+8
AI Act Compliance
34 items · Updated 1d agoHigh-Risk AIGPAIDeadlines
Enforcement Watch
8 items · Updated 4h agoFinesSanctionsOrders
Copyright & IP Tracker
19 items · Updated 3d agoTDMFair UseAI Output
Team Shared: APAC Watch
26 items · 3 collaboratorsJapanKoreaSingaporeAustralia
+
Create new list
The Community
Connect with regulatory intelligence professionals worldwide
2,847
Members
156
Organisations
34
Discussion threads
+7 this week
12
Upcoming events
D
David Mitchell
Head of Regulatory Intelligence · PrinciplesAI
Profile
Full NameDavid Mitchell
Emaild.mitchell@principlesai.com
OrganisationPrinciplesAI
RoleHead of Regulatory Intelligence
Home Jurisdiction🇬🇧 United Kingdom
TimezoneEurope/London (GMT+1)
Notification Preferences
Email DigestDaily at 08:00
Critical AlertsInstant
Weekly SummaryMonday 09:00
Community RepliesOff
Subscription
PlanEnterprise
Seats12 / 20 used
Renewal1 September 2026
API AccessEnabled
API Calls (MTD)14,302 / 50,000
Tracked Jurisdictions
🇪🇺 EU🇬🇧 UK🇺🇸 US🇨🇳 China🇯🇵 Japan🇰🇷 South Korea🇨🇦 Canada🇦🇺 Australia🇸🇬 Singapore🇮🇳 India🇧🇷 Brazil🇨🇿 Czech Republic
Security
Two-FactorEnabled (TOTP)
Last Login10 Apr 2026, 08:14
Sessions2 active