On 19 May 2026, the European Commission published its long-awaited draft, non-binding guidelines on the classification of high-risk AI systems (“HRAIs”) under the EU AI Act (the “Guidelines”). Across three documents—covering general principles, high-risk classification in the context of regulated products (Annex I), and high-risk use cases (Annex III)—the Commission sets out its approach to
Covington & Burling LLP
From our offices in Beijing, Brussels, Dubai, Frankfurt, Johannesburg, London, Los Angeles, New York, Palo Alto, San Francisco, Seoul, Shanghai, and Washington, we practice as one firm, holding closely to core values that start with a deep commitment to our clients and the quality of our work on their behalf, and that include an emphasis on teamwork among our lawyers and other professionals and a belief in the obligation of lawyers to make legal services available to all who need them.
Covington & Burling LLP Blogs
Blog Authors
Latest from Covington & Burling LLP
Illinois Department of Human Rights Seeks Public Comment on Draft AI Employment Regulations
Last month, the Illinois Department of Human Rights (“IDHR”) released draft regulations addressing employers’ use of AI in employment decisions and invited public comment. The IDHR will hold a hearing on the draft regulations on June 10, and the public comment period will close on June 29.
Background
HB 3773 (the “Amendment”), which amended…
White House Releases Executive Order on Advanced AI Innovation and Security
In a new post on Inside Privacy, our colleagues discuss the White House’s issuance of an executive order titled “Promoting Advanced Artificial Intelligence Innovation and Security.” The order reflects the Administration’s policy of advancing U.S. leadership in AI while addressing national security risks, including through measures to strengthen government and private-sector cybersecurity…
EU Tech Sovereignty Package
On June 3, the European Commission published its Tech Sovereignty Package, a set of legislative and policy initiatives designed to address what the Commission characterizes as Europe’s technological dependencies on non-European suppliers. The Package marks a further step in the evolution of the EU’s technology policy, with initiatives spanning the full tech stack—from chips…
EU Biotech Act II: One Week Remaining to Shape the Commission’s Approach

The European Commission’s Call for Evidence on the upcoming Biotech Act II is open until 10 June 2026, with one week remaining for companies to provide input. Companies should consider engaging now to help shape the outcome.
The initiative is expected to have a broad impact across sectors including chemicals, agriculture, agri-biotech, food and feed,…
CISA Releases Guidance on the Careful Adoption of Agentic AI Services
Earlier this month, the Cybersecurity & Infrastructure Security Agency (CISA), in collaboration with the National Security Agency and other international partners, released guidance for organizations on adopting agentic artificial intelligence systems (i.e., systems composed of one or more agents that fundamentally rely on an AI model, such as an LLM, to interpret and reason about…
Proposed Rule Would Fundamentally Impact Federal Grant and Financial Assistance Framework
On May 29, 2026, the Office of Management and Budget (“OMB”), together with several other federal agencies, published a proposed rule that would fundamentally change many aspects of the regulations in 2 CFR Part 200 governing federal financial assistance awards, including grants, cooperative agreements, loans, and loan guarantees. The comment period will be underway until…
Connecticut Enacts Omnibus Privacy Law
On May 27, 2026, the Connecticut governor signed SB 4, an omnibus privacy law, which among other things, amends the Connecticut Data Privacy Act (“CTDPA”), establishes a data broker registry and accessible deletion mechanism, imposes restrictions on the use of price setting devices and surveillance pricing, and creates requirements for direct-to-consumer genetic testing companies.…
Connecticut Enacts Genetic Privacy Law
States continue to enact laws regulating genetic data. Since our last update, the Connecticut governor has signed SB 4, an omnibus privacy law which contains provisions regulating direct-to-consumer (“DTC”) genetic testing companies. You can read our full analysis of SB 4 here.…
California’s New AV Rules Open Door to Heavy-Duty Deployment While Imposing Significant New Compliance Obligations
California’s new autonomous vehicle regulations create the state’s first pathway for testing and deploying heavy-duty AVs while imposing a more rigorous permitting, safety-case, reporting, and enforcement framework for all AV manufacturers.
Finalized by the California Department of Motor Vehicles (the DMV) on April 28, 2026, the regulations (the Regulations) introduce significant new safety and oversight…