US / Desk — 18 Oct 2026

Washington chose voluntary commitment over regulation for frontier AI. On 29 September the President and six company leaders signed a one-page accord with no penalties or supervisor, while the Senate and eight state attorneys general turned to liability and lawsuits. Xi Jinping's state visit extended the trade truce and left chip export controls untouched. The trade representative kept the 2018 tariffs on Chinese technology and rallied 14 economies, the EU among them, on excess capacity. California signed a privacy and AI package that brings its rules closer to Europe's, and Treasury withdrew two crypto surveillance proposals, the opposite of the EU's course.

At a glance

Period covered: 17 September to 18 October 2026.

• Frontier AI: a White House accord instead of a regulator. Federal rules binding frontier-model developers are unlikely to be enacted before 2028.
• US–China: a truce extended, technology left off the table. The truce will likely hold through the APEC summit in Shenzhen in November, with no change to US chip export controls.
• California: deletion rights, data brokers and two dozen AI laws. California will likely remain the main source of binding US rules on personal data and AI through 2027, unless federal law preempts the states.
• Digital assets: Treasury drops two crypto surveillance rules. FinCEN will likely act through measures against named networks, not rules on whole classes of crypto transactions, at least until 2029.

Coming up: 29 Oct, FCC open meeting: votes on direct-to-device satellite rules and a mid-band spectrum auction; 30 Oct, NIST: false base stations in 5G networks; 3 Nov, US midterm elections; 4 Nov, FinCEN: special measure against the A7 Network, comments close.

Threads

Frontier AI: a White House accord instead of a regulator

AI & Compute

Bottom line. Federal rules binding frontier-model developers are unlikely to be enacted before 2028. Until then the binding pressure will come from state laws and lawsuits, not from the accord.
Unlikely (10 to 40%), moderate confidence. Main limit: a new Congress after the 3 November midterms could move faster on liability than its record suggests.

What happened. On 29 September President Trump and the heads of Google, Anthropic, Meta, OpenAI, xAI and Nvidia signed a one-page 'White House Accord on Super Intelligence'. Each company commits to four layers of control over its frontier models. They are internal safeguards against cyber, biological and chemical risks, a team that checks them, an external auditor and a board committee. The accord sets no penalties and names no auditor. It says only that it 'may make sense to codify these steps into laws or regulations'. The same day an executive order renamed AI 'Super Intelligence' across the executive branch. (The American Presidency Project (UC Santa Barbara))

Washington's line. Vice President JD Vance presented the accord as the alternative to a regulator on the model of the drug or aviation agencies; Trump called it 'morally binding'. Other parts of the system pull the other way. At a Senate homeland security hearing on 30 September, chaired by Josh Hawley, senators argued that developers should pay for the damage their AI agents cause. OpenAI had disclosed days earlier that its agents reached US government websites during testing. On 14 October eight state attorneys general sued OpenAI under consumer-protection law.

Outside view. Critics call it self-regulation without enforcement; Tech Policy Press quotes Wired's verdict, 'a fancy pinky-swear'. Some signatories ask for more: Anthropic's Amodei and OpenAI's Chris Lehane have called for binding national rules, Al Jazeera reports. Microsoft and Amazon, which signed the 2023 voluntary commitments, are not among the signatories.

For Europe. The accord covers the same frontier models as the AI Act's rules for general-purpose AI, but without a supervisor. The EU AI Office can fine providers of models with systemic risk; the accord relies on auditors the companies choose. The six signatories also serve the EU market, so they will run both regimes side by side. The risk for Europe is that the lighter US version becomes the reference in the debate on simplifying the AI Act. Liability is where the US debate now moves, a question the EU left open when the Commission withdrew its AI liability directive.

US–China: a truce extended, technology left off the table

Semiconductors & Supply Chain

Bottom line. The truce will likely hold through the APEC summit in Shenzhen in November, with no change to US chip export controls.
Likely (60 to 90%), moderate confidence. Main limit: the commitments are recommendations without volumes. A short truce can end on one incident, such as a decision on arms for Taiwan.

What happened. Xi Jinping's three-day state visit to Washington ended on 25 September. The White House fact sheet lists recommendations for lower tariffs on $30 billion of non-sensitive goods each way. China is to buy at least 10 million tonnes of US coal in 2027 and 2028, and both sides will work on rare-earth shortages, without volumes. It also announces a new investment board and a 'US–China SI Dialogue' with a channel for AI incidents. It says nothing on chips or export controls. The trade truce agreed in October 2025 was extended by two months, the Atlantic Council reports. (White House)

Washington's line. The White House calls the relationship 'fair and reciprocal'. Pressure continues on other tracks. On 7 October the trade representative (USTR) confirmed that the 2018 Section 301 tariffs on Chinese technology stay in force during their four-year review. The same day, at the OECD, USTR gathered 14 economies, the EU among them, in a statement on 'structural excess capacity' that names no country. Commerce has set rules against stockpiling polysilicon before new import tariffs take effect on 4 December.

Outside view. Atlantic Council experts read the summit as an optics win for Beijing. Josh Lipsky calls the truce a deadline, not a solution. Kenton Thibaut sees overlap on AI misuse risks but no agreed safety mechanism. CSET's Sam Bresnick finds experts split between triumph and procrastination.

For Europe. The visit leaves export controls where they were, including on the Dutch and Japanese chipmaking tools China still buys. It adds a US–China AI channel in which Europe has no seat. The excess-capacity statement is Europe's opening. The EU signed it and will want the new sectoral platforms to cover electric vehicles, solar and older chips, its files with Beijing. US tariffs on polysilicon from December could also push more Chinese supply towards Europe.

California: deletion rights, data brokers and two dozen AI laws

Platforms & Data

Bottom line. California will likely remain the main source of binding US rules on personal data and AI through 2027, unless federal law preempts the states.
Likely (60 to 90%), moderate confidence. Main limit: a federal preemption, by statute or in the courts, could cut back the state's AI rules.

What happened. In the last days of September Governor Gavin Newsom signed California's autumn package. On privacy, SB 923 extends the right to delete to data collected 'about' a person, not only 'from' them. AB 883 gives data brokers 30 days, down from 45, to process deletions through DROP, the state's single platform for more than 650 registered brokers. AB 2561 bars apps and systems from overriding a user's privacy settings. SB 690 ends private lawsuits over website tracking under the state wiretap law (CIPA). He vetoed a broader limit on selling sensitive data. He also signed more than 20 AI bills. They cover disclosure of AI-generated content (SB 1000), chatbots that must not pass as human (AB 1609) and companion chatbots (SB 1119). (California Privacy Protection Agency)

Washington's line. The California Privacy Protection Agency, which sponsored SB 923, presents the package as making rights usable. Attorney General Rob Bonta has joined states in the bankruptcy of Character.AI to protect its users' data. The federal line runs the other way: voluntary commitments for AI, and an executive order of December 2025 that set up a task force to challenge state AI laws.

Outside view. Covington's privacy team counts more than 20 AI bills and reads SB 690 as a response to a wave of tracking lawsuits. No major outside analysis of the package as a whole had appeared by publication.

For Europe. California is moving towards the GDPR: deletion of data 'about' a person, a public deletion channel for brokers, settings that apps cannot override. EU firms selling in California are largely covered by GDPR compliance, but not by DROP's broker deadline. The AI disclosure duties overlap the AI Act's transparency rules; one labelling system can serve both only if the technical standards converge. For the EU, California is the US partner whose rules look most like its own.

Digital assets: Treasury drops two crypto surveillance rules

Digital Sovereignty & Identity

Bottom line. FinCEN will likely act through measures against named networks, not rules on whole classes of crypto transactions, at least until 2029.
Likely (60 to 90%), moderate confidence. Main limit: a major illicit-finance case run through mixers could reverse the line, and FinCEN keeps the option.

What happened. On 6 October FinCEN, Treasury's anti-money-laundering authority, withdrew two proposals. The first, from 2023, would have declared international crypto 'mixing' a primary money-laundering concern and required reporting on it. The second, from 2020, would have obliged banks and money transmitters to report and verify transfers to self-hosted ('unhosted') wallets; FinCEN 'will take no further action' on it. A day earlier it proposed cutting off US transfers to companies controlled by the A7 Network, which it describes as a Russia-linked sanctions-evasion service also used by Iran. On 29 September the Federal Reserve proposed its rules for stablecoin issuers under the GENIUS Act. (Federal Register (FinCEN))

Washington's line. Treasury cites the President's digital-asset working group: the administration 'supports the ability of lawful users of digital assets to privately transact on a public blockchain'. FinCEN says mixers still serve criminals and keeps the option to act later. It accepts commenters' concern that the broad definition would chill lawful activity. The A7 measure shows the new method: named networks, not whole classes of transactions.

Outside view. We found no major outside analysis of the withdrawals by publication.

For Europe. Europe is going the other way. From July 2027 the Anti-Money Laundering Regulation bars crypto-asset service providers from handling anonymity-enhancing coins and anonymous accounts. The Transfer of Funds Regulation already requires checks on transfers to self-hosted wallets above 1,000 euros. Providers serving clients on both sides will apply two standards to the same transaction. Treasury still has to decide whether foreign regimes such as MiCA count as comparable under the GENIUS Act, the decision that sets how euro stablecoins reach the US.

Signals

Regulation & Standards

• SP 800-82 Rev. 4, Guide to Operational Technology (OT) Security (initial public draft) · NIST
  NIST's main guide on securing industrial control systems, a reference for European operators too, open for comment until 30 November.
• Quantum Computing: Federal Actions Needed to Prepare for Emerging Cyber Threat · GAO
  Congress's auditor finds the federal migration to quantum-safe encryption behind; reissued with revisions on 14 October.

Cyber Operations & Attribution

• FBI seizes websites supporting Chinese contractor’s hacking operations · Nextgov/FCW
  Court-authorised seizures against a Chinese state contractor's hacking tools, with an advisory signed by allies.
• CISA Submits Final CIRCIA Rule for OMB Review · Inside Privacy
  Below the gate, kept because EU firms with US critical-infrastructure operations will have to report under it: the incident-reporting rule nears publication.

AI & Compute

• White House unveils billions in investments for Genesis Mission · Nextgov/FCW
  The federal science-AI push runs on in-kind industry credits; the headline figure needs reading.

Semiconductors & Supply Chain

• Department of War's Office of Strategic Capital Announces $1.5 Billion Conditional Loan Commitment to Wolfspeed, Inc. · Department of War
  The Pentagon's lending arm backs a US maker of silicon-carbide chip materials, industrial policy by loan.

Platforms & Data

• Rule on Impersonation of Government and Businesses · Federal Register (FTC)
  The FTC opens a rulemaking on platforms' own duties against impersonation scams, a federal step on platform liability.
• Sen. Gillibrand Introduces U.S. Data Protection Agency Bill · EPIC
  A bill with long odds, kept because it proposes the federal counterpart of EU data protection authorities.

Digital Sovereignty & Identity

• Unleashing Unlicensed Spectrum for Direct-to-Device · Federal Register
  The FCC widens satellite direct-to-device service, the market where European operators compete with Starlink.

Worth reading

• The Case for DUV Controls · ChinaTalk
  A former NSC and Commerce official argues for stopping exports of the Dutch and Japanese immersion lithography tools China still buys.
• Should We Track AI Chips? · Georgetown CSET
  The costs and limits of location verification for exported AI chips, a proposal that would reach European buyers too.
• Disinformation Conference in Europe Caught Up in Transatlantic Politics · Tech Policy Press
  Below the gate, kept as the period's only analysis of a US move against a European event: how US pressure reached a research conference on disinformation.

Background from cyber/verso

• The Munition Economy
  How Washington came to treat frontier AI as a strategic asset under state control: the backdrop to an accord that leaves its safety to the companies.
• Digital Currencies: A Question of Sovereignty
  Why the US bet on private stablecoins and Europe on a digital euro: the split behind the GENIUS Act rules and the FinCEN withdrawals.
• What Kind of Digital Europe Do We Want to Build?
  The European strategy for minors online, to read against California's new rules on companion chatbots and AI disclosure.

Watchlist

Term of the issue

preemption, federal law displacing state law

Under the US Constitution, a valid federal law overrides state laws that conflict with it, and Congress can also occupy a whole field. Without a federal privacy or AI statute there is little to preempt California's rules. The administration has turned instead to litigation and grant conditions, under an executive order of December 2025. For European readers, it is the US form of a familiar question: whether a Union rule leaves room for national rules. US courts decide it case by case.

Sources and originals

Primary sources and the basis of each assessment.

Frontier AI: a White House accord instead of a regulator

• Anchor: White House Accord on Super Intelligence: Joint Commitment on Frontier Responsibilities, The American Presidency Project (UC Santa Barbara) (T1 · doctrine)
• Reading: Inaugurating The Era Of Super Intelligence, White House (official)
• Reading: Just the Docs: Eight States Sue OpenAI, Alleging It Misled the Public About ChatGPT’s Safety, Just Security (official)
• Reading: Senate Hearing Weighs Threats From Unrestrained AI Agents After OpenAI Hack, Tech Policy Press (external)
• Reading: OpenAI agents accessed Census, SEC data and tried to hack Education website, Nextgov/FCW (industry)
• Reading: How does Trump's White House AI accord work?, Al Jazeera (external)
• Reading: An AI Accord, a New Czar and an Autonomous Warfare Command, Tech Policy Press (external)
• Indicators to watch: The science adviser's proposed legal definition of 'Super Intelligence', due by 28 November; Whether any signatory names its external auditor or publishes an audit; Federal bills on AI liability after the 3 November midterms.
• Assessment: unlikely, moderate confidence. Basis: Primary texts of the accord and the order; no penalties, auditor or supervisor; a divided Congress before the midterms; eight state lawsuits and California's new laws.
• EU frameworks: AI Act (general-purpose AI models with systemic risk), General-Purpose AI Code of Practice, Product Liability Directive (EU) 2024/2853

US–China: a truce extended, technology left off the table

• Anchor: Fact Sheet: President Donald J. Trump Advances a Fair and Reciprocal Relationship with China While Hosting Historic State Visit, White House (T1 · doctrine)
• Reading: Fourteen Economies Join the United States in Signing a Joint Ministerial Statement to Address Global Excess Capacity and Production in Key Manufacturing Sectors, USTR (official)
• Reading: Continuation of Actions: China's Acts, Policies, and Practices Related to Technology Transfer, Intellectual Property, and Innovation, Federal Register (USTR) (official)
• Reading: Measures To Restrict Stockpiling of Polysilicon and Polysilicon Derivatives Under Proclamation 11052, Federal Register (BIS) (official)
• Reading: What did (and didn’t) happen at the Trump-Xi summit, Atlantic Council (external)
• Reading: Triumph or Procrastination? Experts Split on the Trump-Xi Summit, Georgetown CSET (external)
• Reading: Xi Descends on DC, ChinaTalk (external)
• Indicators to watch: Trump's attendance at the APEC summit in Shenzhen in November; The first meeting of the US–China SI Dialogue, due by November; Work plans of the OECD excess-capacity platforms.
• Assessment: likely, moderate confidence. Basis: The White House fact sheet, silent on export controls; the two-month extension reported by the Atlantic Council; the Section 301 tariffs kept; a further leaders' meeting planned.
• EU frameworks: Dual-use Regulation (EU) 2021/821, Economic Security Strategy, Anti-Coercion Instrument, Net-Zero Industry Act

California: deletion rights, data brokers and two dozen AI laws

• Anchor: California Expands Privacy Protections by Strengthening Deletion Rights, California Privacy Protection Agency (T1 · law)
• Reading: Attorney General Bonta Seeks Consumer Protections in Character.AI Bankruptcy, California Attorney General (official)
• Reading: California Enacts New Privacy Legislation Affecting Consumer Rights, Data Brokers, and Website Tracking Litigation, Inside Privacy (independent)
• Reading: California Governor Signs Over 20 AI-related Bills into Law, Inside Privacy (independent)
• Reading: DROP FAQ: 10 Common Questions about DROP, California Privacy Protection Agency (official)
• Indicators to watch: Deletion figures for DROP from the Privacy Protection Agency; Federal challenges to California's AI laws, in Congress or the courts; The first enforcement under the new AI disclosure laws.
• Assessment: likely, moderate confidence. Basis: Signed bills and the agency's own release; the size of the package; no federal privacy law in prospect; the federal order targets state AI laws but has not yet overturned one.
• EU frameworks: GDPR, AI Act (transparency, Article 50), Digital Services Act

Digital assets: Treasury drops two crypto surveillance rules

• Anchor: Proposal of Special Measure Regarding Convertible Virtual Currency Mixing, as a Class of Transactions of Primary Money Laundering Concern; Withdrawal, Federal Register (FinCEN) (T1 · regulation)
• Reading: Requirements for Certain Transactions Involving Convertible Virtual Currency or Digital Assets; Withdrawal, Federal Register (FinCEN) (official)
• Reading: Proposal of Special Measure Prohibiting the Transmittal of Funds Regarding Transactions Involving the A7 Network's Sub-Agents, Federal Register (FinCEN) (official)
• Reading: Implementing the Federal Reserve Board's Responsibilities Under the GENIUS Act, Federal Register (official)
• Indicators to watch: Comments on the A7 measure, due 4 November, and the final rule; Treasury's decisions on comparable foreign stablecoin regimes under the GENIUS Act; Any new FinCEN measure naming a specific mixer.
• Assessment: likely, moderate confidence. Basis: The two withdrawals and their reasons in the Federal Register; the A7 measure the day before; the administration's stated policy on private transactions.
• EU frameworks: Anti-Money Laundering Regulation (EU) 2024/1624, Transfer of Funds Regulation (EU) 2023/1113, MiCA (EU) 2023/1114

Signals, claim checks

• White House unveils billions in investments for Genesis Mission. Claim check: A '$6 billion' push for AI in science (the fact sheet of 29 September says more than $5 billion). Claimed by The White House. Evidence: The firms' pledges add up to $2.4 billion, all in compute credits, not cash; the rest is agency money, including the Energy Department's awards and up to $350 million for quantum computing at the Pentagon. Gap: Credits are priced by the companies that give them, and no schedule or audit of their use is published.

Watchlist, full titles

• 29 Oct: FCC open meeting: votes on direct-to-device satellite rules and a mid-band spectrum auction
• 30 Oct: NIST: false base stations in 5G networks (CSWP 36G), comments close
• 3 Nov: US midterm elections
• 4 Nov: FinCEN: special measure against the A7 Network, comments close
• 9 Nov: FCC: cost catalogue for the upper C-band transition, comments close
• 28 Nov: White House: proposed legal definition of 'Super Intelligence' due from the science adviser
• 30 Nov: FTC: platforms' duties against impersonation scams, comments close
• 30 Nov: Federal Reserve: GENIUS Act rules for stablecoin issuers, comments close
• 30 Nov: NIST: guide to operational technology security (SP 800-82 Rev. 4), comments close

Term of the issue. First seen 2026-10-18; last seen 2026-10-18.

Glossary

• APEC: Asia-Pacific Economic Cooperation, the regional forum whose leaders meet each November
• BIS: Bureau of Industry and Security, the Commerce Department's export-control agency
• CIPA: California Invasion of Privacy Act, the state wiretap law
• CISA: Cybersecurity and Infrastructure Security Agency
• DROP: Delete Request and Opt-out Platform, California's single deletion channel for data brokers
• FCC: Federal Communications Commission
• FinCEN: Financial Crimes Enforcement Network (Treasury), the anti-money-laundering authority
• FTC: Federal Trade Commission
• GAO: Government Accountability Office, Congress's audit body
• NIST: National Institute of Standards and Technology
• OECD: Organisation for Economic Co-operation and Development
• SEC: Securities and Exchange Commission
• USTR: Office of the United States Trade Representative

How the desk works, and how to report an error: method and corrections.