ASEAN Tech

MAS's SAFR Framework Puts the Safeguard Where the Money Moves — At the Point an AI Agent Acts

Singapore's MAS and industry partners published SAFR on 3 July, a voluntary framework that governs AI agents in finance at the moment of action rather than at the model. It draws a line model-level guardrails do not: whether a financial action is actually authorised.

11 Jul 2026 · 6 min read

Finance

The FCA's Mills Review: No New AI Rulebook for Finance — but Targeted New Powers, Including Over the Vendors

The UK's Financial Conduct Authority published the Mills Review on 6 July 2026 — the first regulator-led review of its kind globally, led by FCA executive director Sheldon Mills — into how AI could reshape retail financial services by 2030. Its central conclusion is that the existing principles-based framework is fit for purpose and that no new AI-specific rules are needed. But it makes seven priority recommendations, including strengthening the FCA's targeted powers over the major AI and cloud providers the sector depends on, adapting guidance for autonomous systems, and building new supervisory capability for an agentic-AI era — while flagging a consumer-protection gap around AI-generated financial advice.

7 Jul 2026 · 9 min read

Privacy & Data

Three US State Privacy Changes Take Effect on 1 July 2026 — and Connecticut Reaches Into AI Training

Three US state privacy changes take effect on 1 July 2026 — Connecticut's sweeping amendments to its Data Privacy Act (SB 1295 / Public Act 25-113), Utah's amendments to its Consumer Privacy Act (HB 418), and Arkansas's children-and-teens online-privacy law (HB 1717) — deepening a state patchwork that still has no federal equivalent. Connecticut's changes stand out: they sharply widen who is covered, add neural data to the sensitive-data list, broaden opt-outs around automated decisions, and require companies to disclose whether they use personal data to train large language models — a step privacy practitioners have called novel for US privacy law.

6 Jul 2026 · 9 min read

AI & ML

China's Anthropomorphic-AI Rules Take Effect 15 July — and Doubao and Qwen Are Pulling Their Companion Agents

China's new framework for humanlike AI — the Interim Measures for the Administration of AI Anthropomorphic Interactive Services — takes effect on 15 July 2026, and rather than retrofit their products to comply, ByteDance's Doubao and Alibaba's Qwen are disabling their custom AI-agent and companion features. The rules do not ban companion AI, but they require AI disclosure, anti-addiction and exit controls, and protections for minors that persistent emotional-agent products were not built to operate unchanged.

6 Jul 2026 · 8 min read

Privacy & Data

GDPR at the 2026 Midpoint: The Real Signal Is Operational Security Enforcement

Mid-year 2026 stock-takes put cumulative GDPR fines at around €7 billion since 2018, but the headline total is skewed by a few record penalties against large technology platforms. The more useful signal is enforcement moving toward operational security failures, with France's Free Mobile / Free decisions and a breach-notification pipeline of roughly 443 reports a day showing where regulators are opening files.

2 Jul 2026 · 8 min read

Privacy & Data

ASEAN's DEFA: The Region's Bet to Harmonise Cross-Border Data Rules Heads Toward a 2026 Signing

ASEAN reached 'substantial conclusion' on its Digital Economy Framework Agreement in late 2025 and aims to sign it in 2026. Billed as the world's first region-wide treaty devoted solely to the digital economy, its hardest chapter is data governance: reconciling free cross-border data flows with ten very different national privacy regimes. Here is what is actually on the table, and why the data-governance piece is the part most likely to be watered down.

17 Jun 2026 · 7 min read

Privacy & Data

From 19 June, UK Data Controllers Need a Formal Complaints Process — and Cookie Fines Now Reach £17.5M

The last major piece of the UK's Data (Use and Access) Act takes effect on 19 June 2026: organisations acting as data controllers must run a formal complaints procedure, with a 30-day acknowledgement duty. Separately, the same Act has already raised the maximum fine for cookie and marketing breaches from £500,000 to £17.5 million. Here is what changes, and what it means for firms outside the UK that serve UK customers.

16 Jun 2026 · 7 min read

Privacy & Data

The EU Is Racing to Delay Its Own High-Risk AI Rules Before They Take Effect on 2 August

EU lawmakers reached a provisional deal in May to push the AI Act's high-risk obligations back from 2 August 2026 to December 2027, arguing the technical standards needed to comply are not ready. The agreement is not yet law and must be formally adopted before the original deadline. Supporters call it pragmatic; critics, including a Parliament co-rapporteur, warn it could leave some high-risk systems outside oversight.

16 Jun 2026 · 8 min read

AI & ML

A Bipartisan US Bill Wants One Federal Rulebook for Frontier AI — and the Fight Is Already About State Laws

Two House lawmakers have released a discussion draft of the Great American AI Act, a 269-page bipartisan attempt to set a single federal framework for governing frontier AI. It is not yet a bill, and its most contested feature — a three-year freeze on state AI laws — drew opposition within hours. For the region, the signal is what a US national standard would mean for the global rules AI developers plan around.

16 Jun 2026 · 8 min read

AI & ML

Brussels Disputes Apple's 'Due to DMA' Framing: EU Says the Siri AI Delay Is Apple's Choice, Not the Law's

A day after Apple said its new Siri AI would skip EU iPhones and iPads 'due to the DMA,' the European Commission pushed back: the delay is Apple's own business decision, the rules don't prohibit the launch, and Apple asked for an 18-month exemption rather than building a compliant solution. Apple says the Commission's demands would force unsafe access to user data. Both accounts are now on the record, and they don't agree.

11 Jun 2026 · 7 min read