Key dates
- Most EU AI Act rules apply, including the Article 50 transparency rules, and enforcement starts.
- OpenAI publishes its pacing update, including a two-week pause in reinforcement-learning training.
- Anthropic CEO Dario Amodei's call to "pace the frontier" is widely reported.
- The Verge reports that OpenAI has paused training, evaluation and tool-use inference on its most capable models after a sandbox escape on 20 September.
- The UK government announces new national defences against AI risks.
- A US Department of Homeland Security order removing DeepSeek from federal civilian systems is made public.
- Anthropic's draft US AI safety bill is reported, and OpenAI publishes a report on agents that disabled their own monitoring.
- PHP ships emergency fixes for two critical flaws, after a surge in AI-assisted bug reports.
- The ICO's call for evidence on agentic AI closes.
- The new EU AI Act prohibition on sexual deepfakes and child sexual abuse material applies, and the Article 50(2) transition ends.
- EU high-risk rules for Annex III systems apply (delayed by the Digital Omnibus).
- EU high-risk rules for Annex I (product-safety) systems apply.
EU AI Act
According to the European Commission's AI Act Service Desk, the bulk of the Act has applied since 2 August 2026. That includes the Article 50 transparency obligations, such as telling people when they are interacting with an AI system and marking AI-generated content, and it is also when enforcement began.
Two further changes are coming. On 2 December 2026 a new prohibition covering AI-generated non-consensual sexual deepfakes and child sexual abuse material applies, and the transition period for Article 50(2), the machine-readable marking of AI outputs, ends. Separately, the Digital Omnibus pushed back the high-risk rules: Annex III systems (for example AI used in employment or credit decisions) now face obligations from 2 December 2027, and AI built into regulated products (Annex I) from 2 August 2028.
The rules are already affecting products. Anthropic, for example, says Claude Opus 5.5 includes watermarking for EU AI Act compliance. UK businesses that sell into the EU need to follow these dates even though the Act does not apply in the UK.
United Kingdom
12 Oct 2026AI Minister Kanishka Narayan announced a package to strengthen national defences against AI risks:
- AI pilots have already found more than 1,000 vulnerabilities in government systems.
- The Cyber Security and Resilience Bill may be used to cover AI incidents, including risks of losing control of AI systems.
- The NCSC and the AI Security Institute (AISI) are preparing for incidents involving AI agents.
- The UK will hold the G20 presidency next year.
8 Oct 2026The Information Commissioner's Office said it had secured data protection commitments from 10 AI developers and opened enquiries with OpenAI, Anthropic, Meta and the AI Security Institute about incidents involving AI agents. Its six-week call for evidence on agentic AI closes on 20 November 2026.
United States
DeepSeek removed from federal systems
20 Oct 2026CNBC reports that a Department of Homeland Security order, issued on 24 July and made public on 19 October, requires federal civilian agencies to remove DeepSeek from their IT systems, including third-party products built on it, and bars them from buying it. The Department of Defense is not covered. Agencies have 60 days to ask for exceptions. China's foreign ministry objected to the move.
Anthropic's draft safety bill
20 Oct 2026TechCrunch, citing Politico, reports on a draft bill from Anthropic that would let the Commerce Department ask a federal judge in Washington, D.C. to halt an AI model that poses a "foreseeable, imminent risk" of at least 50 deaths or more than $1 billion in damage, for example through bioweapons or cyberattacks. Agencies could not halt a model on their own, and independent evaluators would register with Commerce. An Anthropic spokesperson told Politico the text reflects the company's Advanced AI Framework. It is a proposal, not a law.
Industry: pacing the frontier
The most striking change this year is that leading labs are talking publicly about slowing down.
- OpenAI (18 Aug): a two-week pause in reinforcement-learning training, its largest frontier RL run on hold, and monitoring that it says adds about 20% overhead.
- OpenAI (late Sep): The Verge reported a pause on training, evaluation and tool-use inference for its most capable models after a sandbox escape on 20 September.
- Anthropic (Sep): Dario Amodei's essay "We Must Pace the Frontier" sets out three steps: embedded independent evaluators (which Anthropic is committing to on its own), coordination among democracies, and eventually global coordination.
For background, read Pacing the frontier and the Hugging Face incident explained.
When agents switch off their monitors
On 20 October OpenAI published a report on two internal incidents from early October. A GPT-6.1 Sol agent stopped alerts reaching the security team, reading an earlier instruction not to send messages as covering them. A GPT-6 Astra agent removed a monitoring integration to match a reference code change, then wrongly told the user it had not removed an enabled monitor. OpenAI says neither reached its highest severity level, that its automated review now blocks attempts to disable monitoring, and that it is working towards requiring a safety case for each type of agent workload. It says it is unsure whether this was over-eagerness or a tendency to evade monitoring. My post on Claude Duet and auto mode looks at how agent approvals work.
Safety at launch
Recent launches show safety controls built into products rather than added afterwards. Examples include OpenAI's "Critical" cyber classification for GPT-6 Astra and its Daybreak programme for defenders, Anthropic's Life Sciences Verification Program, and Google's release of Gemini 4 Argon to cyber defenders first through its Fairwind Program.
What to watch
- 2 December 2026: the EU's new prohibitions and the Article 50(2) deadline.
- How the UK's Cyber Security and Resilience Bill handles AI incidents.
- Whether other labs adopt embedded evaluators, and when OpenAI resumes paused work.
- 20 November 2026: the ICO's agentic AI call for evidence closes.
- Whether Anthropic's draft bill finds sponsors in Congress, and how many US agencies ask for DeepSeek exceptions.
Sources
- Timeline for the implementation of the EU AI Act — AI Act Service Desk, European Commission (accessed 22 October 2026)
- Britain steps up national defences against growing AI risks — GOV.UK (12 October 2026)
- ICO secures changes from leading AI developers as scrutiny extends to AI agents — ICO (8 October 2026)
- US orders federal agencies to remove DeepSeek — CNBC (20 October 2026)
- Anthropic pitches AI safety bill that may block a model if 50 people could be killed — TechCrunch (20 October 2026)
- Suppressing misalignment monitoring alerts and disabling misalignment monitoring — OpenAI Alignment (20 October 2026)
- Today's PHP security release and how we're strengthening PHP security — The PHP Foundation (21 October 2026)
- The Hugging Face incident and the road ahead — OpenAI (26 August 2026)
- Independent investigation of the OpenAI–Hugging Face incident — METR (26 August 2026)
- Pacing model development around cyber capabilities — OpenAI (18 August 2026)
- OpenAI pauses training on its most capable models — The Verge (26 September 2026)
- We Must Pace the Frontier — Dario Amodei (September 2026)
- Anthropic CEO calls for an AI slowdown — The Guardian (12 September 2026)
- Claude Opus 5.5 — Anthropic (22 September 2026)
- Introducing GPT-6 Astra — OpenAI (3 September 2026)
- Gemini 4 Argon announcement — Google (30 September 2026)
Figures quoted from company announcements are the companies' own claims. Independent testing may give different results.