Regulation coverage: US and EU rules, enforcement, government statements about AI and the industry's responses. Note: we keep partisanship out — policy substance only.
The publication makes a fair point about incentive design: celebrating 'the chatbot didn't push suicide' as a policy win lets companies bank safety credentials while dodging accountability for the damage their products do daily. In our view the sharpest part of the argument is that catastrophic-risk framing actually suits the industry — distant hypotheticals are cheaper to debate than present-day liabilities like addictive design, misinformation and biased outputs. That said, the dichotomy is somewhat artificial: alignment research and consumer protection are not zero-sum, and serious labs can pursue both. What the argument lacks is a concrete remedy — mandatory incident reporting and third-party audits of everyday harms would turn this critique into an actionable agenda rather than a lament.
The focus on AI safety disasters ignores everyday harms
Consider what passes for success in technology policy. An AI company promises that its chatbot will not encourage suicide. A social media platform makes it more difficult for children to buy fentanyl. These are important protections, and they should have existed all along. But companies can c…
This is the kind of scrutiny the frontier-lab ecosystem has long needed: independent auditors with on-site access rather than self-published safety blogs. The 25% unmonitored figure deserves more attention than the headline — agents are the fastest-growing deployment surface, and a quarter of top-tier traffic escaping oversight means misbehavior could scale before anyone notices. The heavy redaction is arguably the more troubling part: a 61-page report cut down to a summary turns transparency into PR and will fuel both fair criticism and unfounded speculation. On our view, the gaps likely reflect monitoring infrastructure racing to keep up with agent adoption rather than deliberate neglect — but that distinction offers little comfort to users. Expect this to become a template: if METR and Redwood can get inside OpenAI, similar pressure on Anthropic and Google DeepMind is only a matter of
Three-week on-site audit at OpenAI reveals major gaps in AI safety monitoring
External auditors from METR and Redwood Research spent three weeks on-site at OpenAI examining the company's internal monitoring system for AI agents and found significant gaps, with up to 25 percent of agent traffic from models at the GPT-5.5 class and above going unmon…
The Verge's reporting underlines an uncomfortable truth: terms-of-service edits are PR moves as much as legal fixes. The retained 'associated with your products or services' clause reads like a deliberately wide door — broad enough to cover virtually any AI feature Meta ships next quarter. On our read, Meta is betting that litigation risk is cheaper than licensing deals, a posture consistent with what court filings in the author lawsuits have already revealed about its training data habits. Publishers, meanwhile, are learning that real leverage comes from blocking crawlers or selling exclusive licenses, as some outlets have done with OpenAI. Expect the gap between 'updated terms' and 'actual consent' to fuel the next wave of data-rights litigation.
Meta’s AI could still scrape news sites, legal experts say
Meta has tweaked its business terms to remove language suggesting that it could freely train its AI models on news sites, like The Verge - but legal experts say these changes aren't enough to address their concerns. "This does nothing to restrict the 'associated with your products or servi…
Sacks draws a line that needed drawing: consent-based credential sharing is a product-design problem, not a security incident, and conflating the two invites both public panic and bad regulation. That said, the boundary is blurrier than he admits — a user authorizing an agent doesn't settle liability when the agent errs, and banks' terms-of-service bans exist partly because fraud teams genuinely struggle to tell agents from account takeovers. His tiered model (read-only first, revocable connections à la OAuth) is the sensible path, and Amex's integration suggests the market is already moving there. Coming from the administration's AI point person, this reads as a signal: expect pressure on banks to accommodate agents rather than the reverse. Agent-friendly banking APIs look set to become a competitive battleground within a couple of years.
There’s a world of difference between user-authorized agents (Muse, Instinct, Grokbot, etc.) and true unauthorized/rogue agents that could constitute cyberattacks.
Most of the activity described in the Axios story appears to be the former: customers sharing credentials with agents so they can take actions on their behalf. This may violate bank ter…
The Verge's reporting points at a blind spot of the AI boom: the industry sells weightless, clean intelligence, while its physical footprint is gas turbines parked next to residential areas. Texas is the telling case — cheap land, fast permitting and a strained grid make it the default site for hyperscale buildout, so the health costs concentrate there first. On our view, this will quickly stop being an environmental story and become a business constraint: local opposition, permitting fights and utility rate disputes are already emerging as real bottlenecks for compute expansion. It also exposes the gap between headline nuclear and renewables deals and what actually gets deployed on the ground — quick, dirty peaker capacity. Expect air quality to join water and electricity as a central theme in AI policy debates.
Data centers could erase decades of air quality gains
A rush of new data centers could bring air pollution roaring back to levels not seen since the 2000s in Texas, which has become ground zero for the physical infrastructure behind generative AI. New and proposed data centers are demanding a tremendous amount of electricity. How developers and ut…
Beth Barnes is doing the rare thing in this industry: publicly correcting the record against her own organization's interests. The substance matters more than the mea culpa — Anthropic effectively controls what counts as redactable, and 'commercially sensitive' is a category wide enough to drive a truck through. Her admission that METR depends on lab goodwill and can't afford fights over tone or judgment calls is among the most honest insider descriptions of third-party audit limits we've seen. In our view, this should recalibrate how much weight you give 'independent evaluator' findings: valuable, but structurally constrained. The fix isn't just more senior lawyers — it's funding models and disclosure norms that don't leave auditors commercially hostage to the very companies they audit. Worth reading alongside METR's transparency proposals.
METR’s process transparency policy (https://t.co/WPIWfrEnjq) is very important to me: we need to make sure the public has an accurate picture of what they should and shouldn’t trust us to warn them about, even when that’s negative for our influence or reputation. In that spirit, I’d like to highlight a correction to the public record about the deta…
Kumar's reframing — from whether to slow AI down to how to advance while controlling it — captures the pragmatic consensus most industry leaders have quietly converged on. On our view, it's half right: absent global agreement, unilateral pauses are fantasy, and embedding controls into deployment (evals, audits, compute tracking) is the realistic path. But 'advance and control' risks becoming a fig leaf when the controller and the beneficiary are the same company. Worth noting that Cognizant sells AI transformation services, so 'responsible advancement' doubles as a commercial position. The missing piece in this framing is enforcement — controls without independent teeth are just press releases. Still, a Fortune 500 CEO making this case in TIME signals that governance-by-design is becoming mainstream boardroom doctrine.
The world is nowhere near agreement on what should be slowed, by how much, or for how long. Without consensus, the practical question facing AI industry leaders is not whether to pace the frontier. It is how to advance and control it. My coauthored oped in @TIME @Cognizant
https://t.co/99L5kG0xfK
The Decoder's reporting points to something bigger than two rulings: German courts are converging on the doctrine that AI-generated answers are the publisher's own speech, not third-party content. That framing strips Google of the intermediary protections that shielded traditional search, and the quiet settlement after the Munich appeal suggests the company sees the risk as systemic rather than case-specific. If this reasoning spreads, AI Overviews — and arguably chatbot answers generally — will need pre-launch legal vetting the way ad content does. The contrast with the US, where platforms still lean heavily on intermediary immunity, could push AI products toward region-specific behavior and slower EU rollouts. Worth watching whether other European jurisdictions cite Munich and Aachen, or whether this stays a German peculiarity.
Two German courts now hold Google liable for what its AI overviews say
Google tried to overturn a landmark Munich ruling on AI search liability by appealing, then quietly settled. The strategy isn't working. The Aachen Regional Court just applied the exact same reasoning in a new case where Google's AI falsely attributed criminal offenses to a doc…
Meta quietly rewriting its commercial terms after publisher backlash is a telling signal: content owners' leverage is finally being felt. But deleting the language doesn't answer the harder question — what was already collected under those terms and whether it stays in training pipelines. On our view, this reads less like a principled concession and more like legal cleanup; the scrape-first, negotiate-later playbook remains intact. Expect publishers to push for explicit licensing deals next, the route OpenAI has already taken with several major outlets. Worth watching whether Meta follows suit or keeps betting on public data and its own archive.
Meta removes language that may have allowed it to scrape news sites
After backlash, Meta is updating its terms again to remove language that suggested it could scrape content from sites, including news sites, to train its AI. Specifically, the following language no longer appears on the commercial terms page: … Meta may use any content from such d…
This reads less as a surprise than a confirmation of where the industry is heading: instead of paying publishers through licensing deals the way OpenAI has done, Meta appears to be writing itself permission into the fine print. The word 'associated' is doing heavy lifting here — a news outlet that merely uses Meta's business tools could find its whole site swept into the training corpus without a clear heads-up. On our reading, the real fight will be over opt-outs: if leaving is technically possible but commercially punishing for sites dependent on Meta traffic, consent becomes fiction. Expect legal pushback from publishers and, unfortunately, copycat terms from other platforms hungry for fresh, non-synthetic data.
Meta’s new terms may allow it to train AI on news sites for free
Meta's new terms appear to give it permission to crawl and scrape websites "associated" with the businesses that use its platforms - including online publishers, according to a report from Nieman Lab. The new terms, which go into effect on October 30th, say Meta can use this outside …
The Verge zeroes in on what may be the most under-regulated corner of the AI boom: bystander data. Ambient assistants are only as useful as the context they capture, so the business model practically demands overhearing people who never agreed to anything. We think the critique lands — 'user consent' has quietly become a fig leaf covering everyone else in the room. The harder question is enforcement: two-party consent laws and GDPR exist on paper, but always-on hardware ships faster than regulators move. Expect the next wave of AI wearables to come with privacy theater — LED indicators, blur modes — while the underlying data grab continues. If lawmakers ever seriously pick this fight, it would reshape the entire ambient computing category.
Friends don’t let friends feed their data to AI agents
There's a growing trend in the consumer tech world: gadgets designed to spy on everything and everyone around you, regardless of whether or not anyone else actually consented to it. Now, with the advent of "AI personal assistants" like Meta's Muse, you're being cheerfully asked not just to giv…
Opening the doors to METR is a meaningful signal: independent evaluations are quietly becoming the trust infrastructure of the frontier-lab era. The nonprofit has built real credibility through capability assessments for several major labs, so this is unlikely to be a rubber-stamp exercise. Still, an audit is only as good as its scope — the key question is whether METR's findings will be published in detail or compressed into a PR-friendly summary. In our view, labs that let external teams probe dangerous-capability safeguards before deployment raise the bar for the entire industry. Expect rivals to answer with their own audit partnerships; transparency is starting to look like a competitive feature rather than a compliance cost.
Anthropic gives METR inside access to audit its AI models and safety practices
Anthropic has given a team from the nonprofit METR inside access to review its AI models and safety practices, the company announced. The article Anthropic gives METR inside access to audit its AI models and safety practices appeared first on The Decoder .