Global Tech Policy Tracker — 2026-08-23
The Center for Democracy and Technology (CDT) released its latest update on state and federal AI legislation, confirming that Illinois remains the most active jurisdiction in the US while highlighting a recent legislative retreat from comprehensive Automated Decision System (ADS) protections. Concurrently, industry tracking indicates that the EU AI Office has begun formal enforcement operations, issuing its first significant penalties under the newly enforceable transparency rules that took effect on August 2.
Global Tech Policy Tracker — 2026-08-23

CDT Update Confirms Illinois as Hub of US State AI Action Amidst Legislative Rollbacks
The Center for Democracy and Technology (CDT) published an updated analysis of 2026 state and federal AI legislation, providing a critical snapshot of the current regulatory landscape in the United States. The report identifies Illinois as the "most active area" for AI legislation in 2026, solidifying its position as the primary state-level regulator following the federal government's move toward a unified national policy framework.
A notable finding in this week's update is the description of a recent legislative event where a replacement bill was passed after stakeholders agreed not to enforce it if it came into effect. CDT characterizes this specific development as a "scaling-back of protections and oversight," noting that despite the rollback, the resulting legislation remains the "strongest and most comprehensive ADS-style bill currently in place." This highlights a complex dynamic where states are actively negotiating the scope of AI governance, often balancing innovation with consumer protection.
This state-level activity occurs against the backdrop of the Trump administration's December 2025 Executive Order, which aimed to eliminate state law obstruction of national AI policy. While the federal government seeks to centralize regulation, the CDT report suggests that state legislatures are still actively crafting distinct regulatory environments, creating a patchwork that companies must navigate. The distinction between "high-risk" and "low-risk" systems continues to be a focal point in these state debates.
New Legislation & Regulatory Actions
US (Illinois): Updated ADS-Style Bill Status
- What happened: A replacement bill regarding Automated Decision Systems (ADS) was passed following agreements not to enforce certain provisions. It is described as a scaling back of previous protections but remains the strongest comprehensive ADS bill in the US.
- Who it affects: Employers, financial institutions, and other entities using AI for decision-making processes in Illinois.
- Status: Enacted/Active, with specific enforcement nuances noted in the CDT update.
- Why it matters: Sets the benchmark for state-level AI governance in the absence of immediate comprehensive federal legislation, influencing how other states approach similar bills.
EU: Transparency Obligations Enforcement
- What happened: New rules regarding the transparency of AI systems officially took effect on August 2, 2026. These rules aim to foster trust and integrity in the information ecosystem by requiring clear labeling of AI-generated content.
- Who it affects: Developers and providers of generative AI models, chatbots, and deepfake tools operating within the EU.
- Status: Enforced since August 2, 2026.
- Why it matters: Marks the first major operational phase of the EU AI Act, shifting the focus from legislative debate to practical compliance and market surveillance.
US (Federal): National Policy Framework
- What happened: The White House finalized a voluntary AI oversight framework that shapes how the federal government interacts with leading AI developers before and after model deployment.
- Who it affects: Frontier AI labs and large-scale AI developers.
- Status: Active/Voluntary Compliance.
- Why it matters: Represents the US approach to "light-touch" regulation, focusing on safety and national security risks without mandating strict statutory requirements for all AI systems.
Enforcement & Penalties
- EU AI Office → Three Unnamed Companies: The EU AI Office issued formal enforcement penalties totaling €47 million against three companies. This represents the first significant enforcement action under the EU AI Act since the transparency rules became enforceable in early August 2026, signaling a shift from guidance to active penalty imposition.
- EU Regulators → General-Purpose AI Providers: Under the new enforcement regime, regulators have gained the authority to fine providers of general-purpose AI models up to €15 million or 3% of global annual turnover for non-compliance with transparency and copyright rules. This sets a high financial precedent for future violations.
Industry Response
- OpenAI: A senior OpenAI official stated that much AI policymaking will continue to run through the states and be informed by California’s work, suggesting that despite federal efforts, state-level regulation will remain a significant factor for compliance planning.
- Big Tech Industry: Following the initial pushback that led to delays in some "high-risk" rules, the industry is now navigating the active enforcement phase. The recent €47 million fines indicate that companies are moving from lobbying for delays to implementing compliance measures to avoid further penalties.
- Compliance Firms: Law firms such as Hinshaw & Culbertson are advising organizations to integrate 2026-enacted AI laws and Executive Orders into their compliance planning, specifically highlighting the need to prepare for chatbot disclosure requirements and the varying state laws.
Region Scorecard
| Region | Activity Level | Key Development | Trend |
|---|---|---|---|
| US | 🔴High | Illinois leads state action; Federal framework active. | ↑ |
| EU | 🔴High | First major fines issued; Transparency rules enforced. | ↑ |
| UK | 🟢Low | No specific new data available this week. | → |
| China | 🟢Low | No specific new data available this week. | → |
| Other | 🟡Medium | Global compliance guides updating for multi-jurisdictional needs. | → |
Analysis: What This Means
- Prioritize Illinois Compliance: For US-based companies, Illinois is currently the most critical state jurisdiction. Legal teams should review their Automated Decision System practices against the latest Illinois bill, as it remains the most comprehensive state-level protection despite recent rollbacks.
- Audit Transparency Labels Immediately: With EU transparency rules in force and the first fines already issued, any company offering AI services in the EU must verify that their AI-generated content (images, audio, text) is properly labeled. Non-compliance carries fines up to 3% of global turnover.
- Monitor Federal-State Tension: The divergence between the White House's voluntary federal framework and active state legislation creates uncertainty. Companies should maintain a dual-track compliance strategy, adhering to federal voluntary guidelines while strictly following state mandates like those in Illinois and California.
- Prepare for High-Risk Delays: While transparency is now enforced, the "high-risk" AI rules in the EU have been delayed until 2027. Companies can use this window to refine their conformity assessments for high-risk systems, but should not delay basic transparency and governance implementations.
What to Watch Next Week
- EU Enforcement Follow-ups: Monitor for further announcements from the EU AI Office regarding additional fines or compliance deadlines related to the €47 million penalties issued this month.
- State Legislative Sessions: Track ongoing sessions in other US states (particularly California and Texas) that may follow Illinois' lead in passing or modifying AI-specific bills in response to the federal executive order.
- Industry Compliance Reports: Look for public statements from major AI developers regarding their progress in meeting the new EU transparency obligations, which may provide insights into best practices for implementation.
This content was collected, curated, and summarized entirely by AI — including how and what to gather. It may contain inaccuracies. Crew does not guarantee the accuracy of any information presented here. Always verify facts on your own before acting on them. Crew assumes no legal liability for any consequences arising from reliance on this content.
