Ctrl+AI+Reg - 7 July 2026
Your shortcut to AI regulation, law and policy updates around the world.
AI Regulation Updates
In this issue:
Updates from European Union, UK (x4), US, Japan, India, Hong Kong, China (x2), South Korea, Vietnam.
Opinion on .
Weekly Trend Analysis (for paid subscribers).
See fuller updates in the ‘Global Updates’ tab in the Global AI Regulation Tracker (English version | Chinese version)
Previous update
Europe
🇬🇧 [6 July 2026] FCA publishes landmark review into impact of AI on retail financial services : The UK Financial Conduct Authority (FCA) has published a landmark review, known as “The Mills Review”, which explores how AI could reshape retail financial services for consumers, firms, markets, and regulators by 2030 and beyond.
🇬🇧 [3 July 2026] DRCF launches consultation on consumer interest and AI: The Digital Regulation Cooperation Forum (DRCF) comprising regulators including Ofcom, the ICO, FCA, and CMA, has issued a call for input to gather stakeholder perspectives on consumer interest and AI. This initiative aims to understand consumer perceptions of risks associated with generative and agentic AI, including their risk tolerance, understanding of AI risks, perceptions of data privacy, and trust in disclosures, as well as societal impacts and expectations for human oversight.
🇬🇧 [2 July 2026] Incoming PM’s team seeks to revamp UK’s AI strategy: It is reported that UK’s incoming Prime Minister Andy Burnham’s team is seeking to revamp the UK’s AI strategy, aiming to address emerging challenges and opportunities associated with AI development and deployment.
🇬🇧 [1 July 2026] UK tech minister says AI chatbot and platform-design measures are due in July: It is reported that UK Technology Minister Liz Kendall has confirmed that additional child safety regulations—specifically targeting AI chatbots, platform design restrictions, and the circumvention of age verification checks—are on track to be outlined later in July 2026, despite recent political turmoil. Stemming from an online safety consultation, these upcoming measures are expected to introduce specific user safeguards, including platform curfews and restrictions on features like infinite scrolling, as part of the country’s ongoing regulatory focus on digital tech and data privacy.
Americas
🇺🇸 [1 July 2026] FTC opens AI accuracy policy statement for public comment: The Federal Trade Commission has issued a proposed policy statement seeking public comment on concerns that AI companies may manipulate their AI systems’ outputs in ways that violate consumer expectations for objectivity and accuracy, with the statement explaining that the FTC Act prohibits businesses from engaging in “unfair or deceptive” conduct, and that AI companies distorting outputs to achieve undisclosed ideological objectives could be deceiving consumers in violation of Section 5 of the FTC Act by misrepresenting the effectiveness and suitability of AI systems for various tasks.
Asia
🇯🇵 🇮🇳 [2 July 2026] India and Japan sign AI, defence, and energy deals: The India-Japan summit resulted in the signing of agreements focused on AI, defense, and energy cooperation, following discussions between Indian Prime Minister Narendra Modi and Japanese Minister Takaichi. The deals aim to enhance bilateral collaboration in these sectors, with specific provisions targeting the development and deployment of AI technologies, strengthening defense partnerships, and advancing energy security initiatives.
🇭🇰 [6 July 2026] Hong Kong privacy regulator launches AI sandbox for schools: Speaking at the Hong Kong AI Summit in Hong Kong, the Office of the Privacy Commissioner for Personal Data (PCPD) and the Digital Policy Office (DPO) announced the launch of the Safeguarding Personal Data AI Sandbox (Sandbox) to support the Hong Kong Government’s 15th Five-Year Plan’s dual emphasis on development and security and to implement the policy direction in promoting ‘AI+’.
🇨🇳 [3 July 2026] China proposes unified internet rules covering AI platforms and content services: The Cyberspace Administration of China has proposed a comprehensive revision of the country’s foundational rules for internet information services, expanding the regulation from 27 to 94 articles, with public comments on the draft being solicited until August 2, 2026. This draft consolidates obligations previously dispersed across various sector-specific rules, including those governing recommendation algorithms, generative AI, and livestreaming, into a unified compliance framework.
🇰🇷 [3 July 2026] PIPC unveils plan for AI-era data protection: The Personal Information Protection Commission has unveiled the ‘3rd Basic Plan for Personal Information Protection to Promote Trust-Based AI (AI) Innovation (2027-2029),’ announced at the Economic Ministers’ Meeting. This plan aims to foster a trusted, AI-driven data environment through key initiatives: (1) transitioning to a risk-proportional protection framework alongside an AI Transition Assurance Support Center, (2) expanding the MyData platform into healthcare and welfare sectors, (3) mitigating privacy threats from autonomous AI and deepfakes, (4) expanding overseas data transfer networks with the US, UK, and Japan, and (5) establishing a one-stop rights relief system while strengthening biometric data protections for children and adolescents.
🇻🇳 [3 July 2026] 46 AI systems classified as high-risk and require strict management: Deputy Prime Minister Ho Quoc Dung has signed Decision No. 33/2026/QD-TTg, establishing a list of 46 high-risk AI systems across six critical sectors: Education, Healthcare, Banking, Litigation, Transportation, and Ethnicity and Religion. Effective August 15, 2026, the decree targets AI applications capable of causing severe harm to national security, public interests, and individual rights. It mandates human oversight, strict operational control, and alignment with the Law on Artificial Intelligence. Existing AI systems in healthcare, education, and finance must comply by September 1, 2027, while systems in the remaining sectors face a deadline of March 1, 2027. Non-compliant systems or those posing severe threats can be suspended by state authorities.
🇨🇳 [1 July 2026] National Information Security Standardisation Technical Committee issues security guidelines for intelligent agents: The National Information Security Standardisation Technical Committee has issued security guidelines for the deployment and use of intelligent agents, specifically targeting organizations deploying or utilizing large-model-based AI agents, whether open-source or commercial.