The Smart Meter Data Privacy Protection Act prohibits state-regulated electric utilities that are not wholly owned by U.S. persons from selling or commercially monetizing personal consumption data collected via smart meters, restricting such use to specific operational needs like billing and grid reliability. The bill requires these utilities to submit annual reports to the Federal Trade Commission detailing what data was collected, how it was used, and with whom it was shared. If a utility violates these privacy rules, the FTC can order the company to credit affected customers an amount equal to three times the revenue generated from that unauthorized use. State attorneys general are also granted the authority to sue on behalf of residents to enforce compliance or seek damages, while the FTC is tasked with establishing security standards for data retention.
The Rural and Municipal Utility Cybersecurity Act establishes a federal program to provide grants and technical assistance to small electric utilities, including rural cooperatives, municipally owned systems, and smaller investor-owned companies. The program aims to help these entities deploy advanced cybersecurity technologies and participate in threat information sharing networks to better protect against cyberattacks. Funding is prioritized for utilities with limited security resources or those operating critical infrastructure that supports the national power grid. The bill authorizes $250 million in appropriations over five years, from fiscal year 2027 through 2031, and exempts shared cybersecurity information from public disclosure under freedom of information laws.
The Children's Artificial Intelligence Toy Safety Act of 2026 directs the National Academies of Sciences, Engineering, and Medicine to conduct a comprehensive study on the safety, educational impact, and marketing ethics of AI-enabled toys for children under 14. This study will specifically examine risks of physical and psychological harm, the effectiveness of parental controls, and whether a temporary sales ban is necessary. Following the study, the Federal Trade Commission and the Consumer Product Safety Commission must create a joint action plan within two years that includes recommendations for new regulations, disclosure requirements, and public education initiatives. The bill defines AI-enabled toys as products capable of two-way interaction and applies these rules to developers and manufacturers of such items.
The MAP Roads Act creates a pilot program that provides federal grants to states to help digitize and map county roads, directly affecting state and local transportation agencies. To receive funding, states must demonstrate they can distribute money to counties and maintain a centralized, publicly accessible online database for road data. The program prioritizes states with significant gaps in digital road records and requires that the resulting data be compatible with popular mapping platforms and updated at least once a year. Authorized funding of $20 million annually from 2026 to 2031 will support these efforts, while the bill explicitly ensures it does not change existing laws regarding road ownership or jurisdiction.
This bill, titled the Cyber Letters of Marque and Reprisal Act, authorizes the President to issue official commissions to private companies and individuals to conduct specific cyber operations against foreign cyberthreats. Under this program, private holders would be permitted to perform tasks such as collecting intelligence, recovering stolen data, disrupting malicious networks, and seizing digital assets located outside the United States. To participate, recipients must post a security bond, maintain detailed records of their activities for at least five years, and adhere to strict rules prohibiting attacks on U.S. citizens or entities. The legislation also establishes a bounty system where recovered funds can be used to reward private operators and informants, with a portion of seized assets potentially funding future operations or victim compensation. Additionally, the act provides legal protection for private holders from lawsuits regarding actions explicitly authorized by their commission.
This bill establishes the Advanced Artificial Intelligence Nuclear Evaluation Program, requiring large AI developers to submit their systems for government testing to prevent incidents involving nuclear weapons or critical infrastructure. Under the program, the Department of Energy will conduct security assessments, including adversarial "jailbreaking" attempts and third-party reviews, to identify risks and develop safety protocols. Developers who refuse to participate or withhold necessary data face civil penalties of up to $1 million per day, while the information they provide remains confidential unless specific legal exceptions apply. Additionally, the Secretary of Energy must submit annual reports to Congress with recommendations for future legislation to further regulate AI safety and oversight.
The Stop TNR Act of 2026 establishes a formal definition for transnational repression, which covers foreign government efforts to harass, threaten, or harm individuals in the United States, including the use of cyberattacks and artificial intelligence. This legislation mandates that crimes involving such activities face a mandatory sentencing enhancement of up to 10 years in prison and fines of up to $100,000. To enforce these rules, the bill requires the Attorney General to centralize the oversight of related investigations and prosecutions within the FBI and the National Security Division of the Department of Justice. Additionally, the act directs federal agencies to produce annual public reports detailing incidents of repression and outlines a strategy for using artificial intelligence to investigate and counter these threats.
The UNLOCK AUKUS Act modifies existing export control rules to allow the transfer of specific defense articles and services under the AUKUS partnership. By amending the Arms Export Control Act, the bill removes certain restrictions that previously limited what can be shared between partner nations. This change directly affects the U.S. government's ability to share advanced military technology with allies in the AUKUS alliance. The legislation aims to facilitate collaboration without altering the core legal framework governing defense exports.
The SBA IT Modernization Reporting Act requires the Small Business Administration to create a detailed plan for updating its information technology systems based on a recent audit report. This plan must outline specific steps to manage project risks, improve scheduling and cost estimates, and ensure security experts are involved in hiring contractors. The agency must submit this implementation plan to Congress within 180 days and provide a briefing on it within 30 days of submission. These measures aim to establish clearer policies for managing technology projects and reducing risks within the SBA.
Tags
Small Business
The AI Labeling Act of 2026 requires providers of generative artificial intelligence systems to clearly label digital content created or substantially modified by their tools, ensuring these disclosures are visible to users and accessible to individuals with disabilities. The law mandates that these labels include machine-readable data identifying the AI system used, the creation date, and other provenance details, while also obligating major online platforms to display these markers and prevent their removal. To enforce these rules, the Federal Trade Commission is empowered to treat violations as unfair or deceptive practices and can impose penalties, while the bill also prohibits companies from selling products designed to remove or falsify these required disclosures. Additionally, the legislation establishes a working group to develop technical standards for labeling and detection, and it provides specific exemptions for content used solely for internal research and for nonprofit libraries and educational institutions.
