India DPDP Act — Implementation Accelerates
Urgent
The Digital Personal Data Protection Act rules implementation is accelerating, with the Data Protection Board expected to become operational by Q4 2026. Draft rules on consent management, data breach notification timelines, and cross-border data transfer mechanisms are under active consultation. Significant Data Fiduciaries must appoint Data Protection Officers.
India
Data Privacy
Compliance
TC Action: FGC mandatory compliance advisory · CAAS consent & DPO templates · LD&T privacy-by-design frameworks
California AI Regulation — New Bills Advancing
Watch
California's legislature is advancing multiple AI governance bills following the SB 1047 veto. New proposals target algorithmic transparency requirements for high-risk AI systems, mandatory AI impact assessments, and disclosure obligations when consumers interact with AI. Several bills have cleared committee stage.
US
AI Governance
Legislation
TC Action: ECP AI compliance playbooks · FGC advisory for US-facing Indian tech companies
FTC Enforcement — AI Settlement Patterns
Watch
The FTC continues its aggressive enforcement posture on AI-related deceptive practices. Recent settlement patterns show focus on companies making unsubstantiated AI capability claims, using AI for price-fixing or algorithmic collusion, and deploying AI surveillance without adequate disclosure.
US
Enforcement
AI/Consumer
TC Action: ECP compliance audit offering · Marketing claims review for AI startups
SEC vs GenesisAI — Enforcement Action
Urgent
The SEC brought enforcement action against GenesisAI for allegedly using AI-generated financial projections in investor materials without adequate disclosure of AI involvement. The case establishes a precedent for AI disclosure requirements in securities offerings and could reshape how AI-native startups present to investors.
US
Securities
Enforcement
TC Action: ECP critical alert for fundraising clients · Investor materials review protocol
Colorado AI Act — ADMT Compliance Deadline
Watch
Colorado's Automated Decision-Making Technology (ADMT) Act is approaching its compliance deadline, requiring developers and deployers of high-risk AI systems to conduct impact assessments, provide consumer disclosures, and establish human oversight mechanisms. This is the most comprehensive US state AI law now in effect.
US
AI Compliance
State Law
TC Action: ECP impact assessment templates · FGC advisory for SaaS deployers
UK ICO — Post-Brexit Data Framework Update
Info
The UK Information Commissioner's Office published updated guidance on international data transfers under the UK's independent data protection regime. New adequacy decisions with additional countries and streamlined transfer mechanisms aim to position the UK as a global data hub while maintaining GDPR-equivalent protections.
UK
Data Protection
Guidance
TC Action: India-UK corridor advisory · Cross-border transfer mechanism updates
FCA — Crypto Asset Regulation Framework
Watch
The Financial Conduct Authority published its comprehensive crypto asset regulation framework, introducing authorization requirements for crypto exchanges, custody providers and DeFi platforms operating in the UK. The regime includes consumer protection rules and market abuse provisions specific to digital assets.
UK
Crypto/Fintech
Regulation
TC Action: ECP advisory for Web3 startups · FGC licensing and compliance setup
FCA — IPO & Listing Rules Reform
Info
The FCA's reformed UK listing rules are now in effect, simplifying the listing regime with a single listing category replacing premium and standard segments. The reforms include relaxed requirements for dual-class share structures and reduced free float requirements, aimed at attracting more tech and growth company listings to London.
UK
Capital Markets
Reform
TC Action: ECP advisory for India-UK cross-listing · FGC pre-IPO governance setup
UK Companies House — Filing Modernization Delay
Info
Companies House has delayed its digital filing modernization timeline, pushing back mandatory e-filing requirements and identity verification for directors. The delay gives companies additional time to comply but creates uncertainty for entities already investing in compliance infrastructure.
UK
Corporate
Compliance
TC Action: FGC compliance calendar update · UK subsidiary advisory for Indian companies
RBI — Digital KYC & Video-KYC Updates
Urgent
The Reserve Bank of India issued updated guidelines on digital KYC processes including expanded Video-KYC options, Aadhaar-based e-KYC enhancements, and new requirements for periodic KYC updates. The guidelines tighten anti-money laundering obligations while enabling digital-first onboarding for fintech platforms.
India
Banking/Fintech
Compliance
TC Action: FGC fintech compliance advisory · CAAS KYC policy templates · ECP regulatory counsel
SEBI — Demat 2.0 & Securities Digitization
Watch
SEBI is advancing its Demat 2.0 initiative requiring full dematerialization of all remaining physical securities and introducing new digital transfer mechanisms. The initiative includes updated disclosure requirements for beneficial ownership and enhanced investor protection for digital securities transactions.
India
Securities
Digital
TC Action: ECP securities advisory · FGC corporate governance compliance updates
IFSCA — GIFT City Regulatory Expansion
Info
The International Financial Services Centres Authority expanded its regulatory framework at GIFT City, introducing new licensing categories for fintech operations, global fund administration, and aircraft leasing. The framework positions GIFT City as an alternative to Singapore and Dubai for international financial services.
India
IFSC
Financial Services
TC Action: ECP GIFT City setup advisory · FGC fund structuring and licensing
MeitY — Updated IT Intermediary Guidelines
Watch
The Ministry of Electronics and IT released updated Information Technology (Intermediary Guidelines and Digital Media Ethics Code) amendments addressing AI-generated content labeling, deepfake regulations, and enhanced content takedown obligations for social media intermediaries and AI platforms.
India
Digital/AI
Regulation
TC Action: ECP AI labeling compliance · FGC intermediary liability advisory
FATF — Plenary Outcomes on Virtual Assets
Info
The Financial Action Task Force plenary session released updated recommendations on virtual asset service provider (VASP) regulation, emphasizing the travel rule implementation timeline and DeFi protocol compliance obligations. New guidance on AI-assisted transaction monitoring was also published.
Global
AML/CFT
Crypto
TC Action: Cross-border AML advisory · ECP VASP compliance for crypto startups
FDA/NIST — AI Risk Management Framework Updates
Info
NIST updated its AI Risk Management Framework (AI RMF) with sector-specific guidance for healthcare and financial services, while the FDA advanced its regulatory framework for AI/ML-enabled medical devices. Both emphasize continuous monitoring, bias testing, and explainability requirements for high-risk AI applications.
US
AI Governance
Framework
TC Action: ECP healthtech and fintech AI compliance · Risk assessment template development
RBI — Fintech Self-Regulatory Organization
Watch
The RBI recognized India's first fintech Self-Regulatory Organization (SRO), establishing an industry-led governance body for digital lending, payments, and embedded finance companies. SRO membership brings compliance obligations including dispute resolution mechanisms and conduct standards for digital financial service providers.
India
Fintech
Self-Regulation
TC Action: FGC SRO membership advisory · ECP governance framework for fintech clients