On April 13, 2026, the State Council of the PRC published new Regulations to counter foreign sanctions measures it deems to be improper assertions of extraterritorial jurisdiction. The new Regulations could target organizations and individuals who, by virtue of their compliance with foreign sanctions measures, particularly measures that scrutinize the control of Chinese entities, may be accused of implementing such measures. IHEs with research collaborations or academic programs in China...

On August 2, 2025, provisions of the EU AI Act addressing large “general-purpose AI” (GPAI) models took effect. The provisions include transparency and copyright compliance obligations for all GPAI models and heightened safety and security obligations for GPAI models with “systemic risk.” For institutions of higher education adopting and using AI tools powered by large GPAI models, these provisions will likely produce useful information for conducting due diligence and framing AI governance...

On October 6, 2025, the final provisions of the DOJ Sensitive Data Rule took effect, completing the framework for the DOJ’s Data Security Program. Institutions engaging in relevant data-sharing activities should move quickly to ensure compliance. On October 6, 2025, the last provisions of 28 C.F.R. Part 202, “ Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons ” (“DOJ Rule”) took effect, completing the regulatory foundation of the...