October 2026 AI regulation review: 24 tracker entries, up from 18 in September 2026

The tracker logged 24 entries for October 2026, up from 18 in September 2026, with US States and US Federal each accounting for 8.

This review is computed from the tracker entries on this site, which currently number 146, and each of them carries verbatim evidence from a source document or a report on one. The counts below come from those entries. Where a passage is quoted, it is the exact text stored with the entry. Entries without a quoted passage are listed by instrument, milestone and date only.

October 2026 entries by jurisdiction

The milestone labels show a mix of stages. Three entries are labelled "Signed into law" and two "Bill introduced". The remaining labels each appear once. They include a draft published for public comment, guidelines issued, a final publication, a first enforcement action, a Council negotiating position and an incident disclosure mandate.

US States

All 8 state-level entries are dated between 2026-10-06 and 2026-10-29. Three are signings of statutes. Pennsylvania's Artificial Intelligence Deceptive Advertising Act (SB 806) was signed into law on 2026-10-22. New York's S.9051B/A.10379C, an AI chatbot minor safety law, and its S.9508/A.5175A baby monitor security law were both signed into law on 2026-10-28.

Two entries are bills. California's Frontier AI Safety Act was announced on 2026-10-20. The sponsor's press release says the senator will be introducing the bill. The same release describes what the bill would do. New York's RAISE Act 2.0 (S.10731) was introduced on 2026-10-29.

The other three entries are not statutes or bills. California's Engaged California AI public engagement report was published on 2026-10-13. A report of it states its effect on policy. Utah's executive order on AI in state government was signed on 2026-10-06. On 2026-10-26 the US House Oversight Committee opened an investigation into the Delaware Artificial Intelligence Company (AIC) proposal.

US Federal

The 8 federal entries are mostly guidance and security publications, plus two White House items and one judicial rules item.

Three entries concern incident response and testing environments. On 2026-10-16 the tracker records joint guidance on securing sandbox testing. The report of it names the issuing bodies and the date. The same report describes its status. A further entry dated 2026-10-16 is joint federal guidance, labelled voluntary, on incident response.

NIST has three entries. NIST IR 8596 Cyber AI Profile reached final publication on 2026-10-06. The SP 800-53 control overlays were announced on 2026-10-23, with the first two volumes planned for fall 2026 release. On 2026-10-27 the NCCoE published design tenets for its AI agent identity and authorization project.

The White House has two entries. The Super Intelligence Force Incident Reporting Mandate was issued on 2026-10-09 as an incident disclosure and remediation mandate. The first meeting of the task force is dated 2026-10-15. On the same date a judiciary advisory committee appointed a subcommittee to continue studying proposed Rule 707 and Rule 901(c) of the Federal Rules of Evidence on AI deepfake evidence.

EU

The 4 EU entries cover enforcement, two Council steps and a Commission proposal.

On 2026-10-14 the tracker records the first enforcement actions under the EU AI Act against general-purpose AI model providers. A law-firm report states the announcement. It also describes earlier requests.

Two entries dated 2026-10-21 concern the Digital Omnibus. The Council's press release states its position on the Digital Omnibus data protection amendments. An open letter from the civil-society group EDRI reads the Council text differently. The second entry records that Coreper approved the Council negotiating mandate on the GDPR amendments.

The fourth entry is the Commission's proposal, dated 2026-10-06, for a European Standardisation Regulation to speed harmonised standards. It would repeal Regulation 1025/2012.

China, India and international

China has 2 entries. On 2026-10-16 the Ministry of Commerce published a draft amendment to the catalogue of technologies prohibited or restricted from export for public comment. The Financial Times report summarises its scope. On 2026-10-23 the State Council issued guidelines on AI and employment. The official English-language release gives their aim.

The single International entry is joint guidance, Managing AI Token Consumption for Operational Resilience (ITSM.00.125), dated 2026-10-22. CISA's page states who issued it.

India's single entry is CERT-In Advisory CIAD-2026-0049, an advisory on AI agents as attack vectors, published on 2026-10-15.