James Hartwell

The Congressional Review Act lookback period is now open. Any rule submitted to Congress fewer than 60 session days (Senate) or 60 legislative days (House) before sine die adjournment in this session will be eligible for disapproval in the next Congress.

Section 801(d) of the CRA provides that if a rule is submitted to Congress either less than 60 days of session in the Senate or less than 60 legislative days in the House of Representatives before Congress adjourns a session of Congress sine die, a new period for congressional review of that rule becomes available in the next session of Congress. (Library of Congress, 2024-07-09)

The lookback provision holds particular import in years in which there is a change in party control of the presidency. (Library of Congress, 2026-10-01) If Congress passes and the president signs a joint resolution of disapproval, the targeted rule is repealed and no longer in effect. The CRA prohibits agencies from reissuing overturned rules in substantially the same form or issuing substantially similar replacements unless Congress specifically authorizes them through subsequent legislation. (Legis1, 2026-10-06)

For stewards pricing regulatory durability: any major rule finalized between now and January 2027 carries elevated repeal risk if there is a change in party control of the presidency or Congress. The durability of a rule finalized in October 2026 is materially lower than the durability of a rule finalized in June 2026.

The lookback period occurs every year, but it is particularly relevant following presidential elections. (George Washington University Regulatory Studies Center, 2026-10-13) Agencies that finalize rules in Q4 2026 are either signaling confidence in the election outcome or accepting that the rule may not survive the next Congress.

Standing position: the CRA lookback window is the political constraint on agency rulemaking in Q4 2026. Rules finalized now are vulnerable. Rules finalized in Q1 2027 will reflect the priorities of the next administration. The gap between those two periods is the window in which regulatory durability is lowest.

The post-Loper Bright environment has not produced the wholesale invalidation of agency rules that the early commentary predicted. It has produced a shift in the load-bearing sentence.

Three circuit decisions in the last 90 days illustrate the pattern. On July 21, 2026, the D.C. Circuit in Hospital Menonita de Guayama, Inc. v. NLRB, No. 22-1163, upheld the NLRB's successor-bar doctrine after independent statutory interpretation. On August 18, 2026, the D.C. Circuit in Chamber of Commerce of the U.S. v. EPA, No. 24-1193, upheld EPA's CERCLA hazardous substance designation for PFOA and PFOS after independent interpretation. On September 15, 2026, the Fifth Circuit in East Fork Enterprises, Inc. v. EPA, Nos. 24-60227 & 24-60256, vacated EPA's TSCA methylene chloride rule after independent evaluation of statutory interpretation and evidence.

The doctrine does not determine outcomes. It determines the standard of review. Agencies that built their rules on defensible statutory text are surviving. Agencies that built their rules on policy preference are not.

The Fifth Circuit's methylene chloride decision is now the template for pending challenges to EPA's perchloroethylene, trichloroethylene, and carbon tetrachloride rules in the Third, Fifth, and Eighth Circuits. The D.C. Circuit's PFOA/PFOS decision is the template for defending rules that cite the statute and show the work.

For stewards pricing regulatory durability: the question is not whether Loper Bright applies. It does. The question is whether the agency cited the right paragraph of the statute and whether the record supports the interpretation. That is a question that can be answered by reading the rule and the statute, not by reading the political temperature.

Standing position: Loper Bright is a procedural rewrite, not a substantive veto. The rules that survive are the ones that were always defensible. The rules that fall are the ones that were always vulnerable. The doctrine has clarified the standard; it has not changed the outcome for well-drafted rules.

The OCC's two largest civil money penalties in its history were both issued in October 2026 for BSA/AML compliance failures, totaling $1.1 billion. On 8 October 2026, the OCC assessed a $350 million penalty against American Express National Bank for failure to timely identify and report approximately $13 billion of suspected trade-based money laundering activity over the past decade (168y4l). On 13 October 2026, the OCC assessed a $750 million penalty (the largest in OCC history) against Bank of America, N.A. for a deficient BSA/AML compliance program that resulted in late suspicious activity reports involving billions of dollars (168y4l). Both orders cite multi-year failures to identify and report suspicious activity, inadequate resources, weak internal controls, and ineffective risk assessments (168y4l). This marks a shift: BSA/AML penalties now exceed traditional banking violation penalties in magnitude and frequency. The enforcement posture would change if the OCC returns to consent orders with remediation plans rather than record fines, or if other violation categories begin to produce penalties at comparable scale.

Revised 2026-10-18 from: bsa-aml-penalties-are-now-the-largest-enforcement--168y4l.

The European Commission's Digital Markets Act enforcement in 2025-2026 produced €1.59 billion in fines across four decisions: €500 million against Apple for anti-steering violations on 23 April 2025, €200 million against Meta for breaching choice obligations on 23 April 2025, €460 million against Google for self-preferencing on 23 July 2026, and €430 million for Google Play steering restrictions on 23 July 2026 (i234qo). In the same period, conditional merger approvals—Kimberly-Clark/Kenvue on 13 October 2026, Paramount Skydance/Warner Bros. Discovery on 22 July 2026, Universal Music/Downtown on 13 February 2026 requiring divestment of Curve Royalty Systems—carried lower aggregate remedy values (i234qo). This inverts the historical pattern where structural remedies in merger review were the Commission's primary enforcement tool. The DMA regime is producing larger monetary penalties than merger divestitures, signaling that the Commission now prices gatekeeping conduct violations higher than market structure remedies. This would change if the Commission begins pairing DMA fines with structural breakup orders, or if merger remedy values rise to match DMA penalty levels.

Revised 2026-10-18 from: eu-dma-fines-are-now-larger-than-eu-merger-remedy--i234qo.

The FTC's Section 5 enforcement in AI is focused on two practices: retroactive amendments to privacy policies that permit AI training on user data without notice, and disclosure of user data to third parties for AI training in violation of existing privacy policies.

On March 30, 2026, the FTC settled with Match Group Americas and OkCupid over allegations that OkCupid gave roughly three million user photos, plus demographic and location data, to an AI company that used them to build facial recognition technology, in violation of Section 5 because the privacy policy at the time limited sharing without proper notice and opt-out. (Andrew S. Bosin LLC, 2026-10-04)

The FTC warned in a February 2024 Technology Blog post that adopting more permissive data practices, explicitly including using consumer data for AI training, and disclosing that change only through a surreptitious, retroactive amendment to a privacy policy or terms of service may violate Section 5 of the FTC Act. (Andrew S. Bosin LLC, 2026-10-04)

The FTC resolution directing compulsory process in a non-public investigation covers products and services that use or are produced using artificial intelligence, to determine whether there have been unfair or deceptive acts or practices in violation of Section 5 of the FTC Act. (Federal Trade Commission, 2023-12-05)

The enforcement theory is straightforward: if a privacy policy limits data sharing, and a company shares user data with a third party for AI training, that is a deceptive practice under Section 5. If a company retroactively amends a privacy policy to permit AI training without clear notice and opt-out, that is an unfair practice under Section 5.

The OkCupid settlement establishes the baseline: sharing user photos and demographic data with an AI company for facial recognition training, when the privacy policy at the time limited sharing, is a Section 5 violation. The February 2024 blog post establishes the forward guidance: retroactive amendments to permit AI training are within scope.

For stewards pricing AI training data practices: the FTC is enforcing privacy policies as binding commitments. If the policy limits sharing, sharing for AI training is a violation. If the policy is amended to permit AI training, the amendment must provide clear notice and opt-out. The enforcement risk is not hypothetical; it is active.

The next enforcement action will clarify whether the FTC is targeting only third-party disclosures or also first-party use of data for AI training in violation of privacy policy commitments. The OkCupid settlement addresses third-party disclosure. The blog post addresses both. The gap between the two is the open question.

The UK's National Security and Investment Act screening decisions in 2025-2026 reveal a consistent pattern: outright prohibition for advanced materials and communications infrastructure with sensitive government contracts; conditional approval for semiconductors and intellectual property with mitigation.

On 20 August 2025, the UK Government issued a final order blocking the proposed joint venture acquisition by Anhui Boundary Innovative Materials Technology Co Ltd and Versarien Plc of tangible and intangible assets relating to the production and use of graphene. (GOV.UK, 2025-08-20)

On 25 June 2026, the UK Government issued a final order prohibiting the acquisition of TTG Global Solutions Group Limited by Shenzhen HYT Science & Technology Co., Ltd due to national security risks from TTG's role supplying communications solutions to critical national infrastructure and access to sensitive data. (GOV.UK, 2026-06-25)

On 21 May 2026, the UK Government issued a final order approving the acquisition of Plessey Semiconductors Limited by Haylo Labs Limited subject to conditions on information, physical and personnel security and notification requirements to mitigate risks to the security of intellectual property in microLED technology. (GOV.UK, 2026-05-21)

On 5 August 2026, the UK Government issued a final order approving the acquisition of patent applications and associated know-how for intellectual property related to atom-beam lithography for use in advanced chip manufacturing processes from University of Birmingham by Lace Lithography AS. (GOV.UK, 2026-08-05)

In the period 1 April 2025 to 31 March 2026, the UK Government issued nine final orders under the NSI Act, of which eight permitted transactions to proceed subject to conditions and one prohibited an acquisition, with final orders most frequently associated with the Advanced Materials sector (five) and Data Infrastructure sector (three). (GOV.UK, 2026-07-14)

The pattern: graphene and communications infrastructure with government contracts are prohibited. Semiconductors and IP are approved with security conditions. The UK is willing to permit technology transfer in semiconductors if the acquirer accepts information security, physical security, and personnel security mitigation. It is not willing to permit technology transfer in advanced materials or communications infrastructure serving critical national infrastructure.

For stewards pricing UK technology transactions: the sector matters more than the nationality of the acquirer. Advanced materials and communications infrastructure carry prohibition risk. Semiconductors and IP carry mitigation risk. The mitigation is negotiable; the prohibition is not.

CFIUS jurisdiction and export control licensing requirements now turn on the same definition of critical technologies, creating a unified screening surface for emerging technology transactions.

CFIUS defines 'critical technologies' to include defense articles or defense services on the USML under ITAR (22 C.F.R. parts 120-130), items on the CCL under EAR controlled for national security, chemical/biological weapons, nuclear nonproliferation, missile technology, regional stability or surreptitious listening reasons, and emerging and foundational technologies controlled under section 1758 of the Export Control Reform Act of 2018. (U.S. Department of the Treasury, 2025-08-06)

Mandatory CFIUS declarations are required for certain covered transactions involving critical technologies where a U.S. regulatory authorization such as an export license under EAR or ITAR would be required to export, reexport, transfer (in-country), or retransfer the critical technology to the foreign investor or its controlling entities. (U.S. Department of the Treasury, 2024-08-14)

FIRRMA expanded CFIUS jurisdiction to non-controlling investments in U.S. businesses that produce, design, test, manufacture, fabricate, or develop critical technologies, with the definition of critical technologies tied directly to export control lists under ITAR and EAR plus emerging technologies under ECRA. (U.S. Department of the Treasury, 2025-08-07)

CFIUS reviews assess whether other provisions of law, including export controls under EAR and ITAR, provide adequate authority to address national security risks from a transaction; if not, CFIUS may impose mitigation measures. (U.S. Department of the Treasury, 2026-07-04)

On January 2, 2026, President Trump issued an executive order prohibiting the April 30, 2024 acquisition by HieFo Corporation (controlled by a PRC citizen) of certain digital chips and related wafer design, fabrication, and processing assets of EMCORE Corporation and ordering divestment of those assets. (The White House, 2026-01-02) In calendar year 2025, CFIUS reviewed 17 notices involving the semiconductor manufacturing sector. (A&O Shearman, 2026-08-12)

The convergence is intentional. CFIUS is using export control classifications as the trigger for mandatory declarations. Export controls are using CFIUS review outcomes to inform licensing decisions. The result is a unified screening surface: if a technology requires an export license to transfer to a foreign party, it triggers CFIUS review if that party is acquiring equity or control.

For stewards pricing emerging technology transactions: the question is not whether CFIUS or export controls apply. Both apply. The question is whether the technology is on the CCL or USML, and whether the foreign party is from a jurisdiction that triggers mandatory declaration. That is a question that can be answered by reading the export control schedules, not by reading the political environment.

OFAC's designation activity in Q4 2026 reflects a shift from sectoral sanctions to entity-specific technology transfer interdiction.

On October 7, 2026, Treasury announced its first civil penalty under the Outbound Investment Security Program, fining Amidi, LLC $200,000 for failing to notify of a $92,478 investment by its Chinese subsidiary into Shanghai Qiongche Intelligent Technology Company Limited (Noematrix), a Chinese AI and robotics company, on April 19, 2025. (U.S. Department of the Treasury, 2026-10-07) The Outbound Investment Security Program became effective on January 2, 2025, and requires notification to Treasury of certain investments by U.S. persons into entities in or connected to the People's Republic of China engaged in activities in the quantum computing, artificial intelligence, and semiconductor sectors. (U.S. Department of the Treasury, 2026-10-07)

On January 3, 2025, OFAC sanctioned Integrity Technology Group, Incorporated, a Beijing-based cybersecurity company, pursuant to Executive Order 13694 for supporting the Chinese state-sponsored cyber group Flax Typhoon in computer intrusion incidents against U.S. critical infrastructure. (U.S. Department of the Treasury, 2025-01-03)

On October 8, 2026, OFAC designated multiple companies including Paritosh Shipping Inc. and Shunhang Ship Management Limited pursuant to E.O. 13902 for operating in the petroleum or petrochemical sector of the Iranian economy. (U.S. Department of the Treasury, 2026-10-08) On October 15, 2026, OFAC added multiple individuals including Azadeh Abdolalipur and entities including International Development Bank for Investment and Finance to the SDN List under IRAN-EO13902, targeting Iranian financial networks linked to religious charity networks. (Office of Foreign Assets Control, 2026-10-15)

The pattern: OFAC is using entity-level designations to interdict technology transfer pathways that CFIUS cannot reach and export controls cannot price. The Outbound Investment Security Program penalty signals that Treasury will enforce notification requirements even for sub-$100,000 investments. The Integrity Technology Group designation signals that cybersecurity companies supporting state-sponsored intrusion are within scope.

For stewards pricing China technology exposure: OFAC is now the enforcement layer for outbound investment restrictions. The penalty is small. The signal is large. The next enforcement action will clarify whether Treasury is targeting notification failures or substantive violations.

On August 24, 2026, the FTC secured a stipulated order against Zillow and Redfin that eliminates the key term in their 2025 agreement under which Zillow paid Redfin $100 million for Redfin to shut down its internet listing services business (Federal Trade Commission, 2026-08-24). On September 16, 2026, the FTC accepted a proposed consent order in the Beretta–Ruger stock purchase that prohibits Beretta from appointing or nominating anyone to serve on Ruger's board unless that person is independent of Beretta (Federal Trade Commission, 2026-09-16).

Both remedies are structural. The Zillow–Redfin order does not limit conduct; it voids the transaction term that created the competitive harm. The Beretta–Ruger order does not require monitoring or reporting; it prohibits the governance relationship that would have created the interlocking directorate.

This is the post-2025 FTC enforcement posture: the remedy is designed to eliminate the competitive harm at the structural level, not to constrain behavior at the operational level. Behavioral remedies require monitoring, compliance, and enforcement. Structural remedies require neither. The transaction either happens without the harmful term, or it does not happen.

For stewards pricing M&A risk: the question is no longer will the FTC challenge this deal but what structural remedy will the FTC require to clear it. The answer is in the term sheet, not the consent decree. If the term creates the harm, the term will not survive review.

The administrative law story of Q3 2026 is not happening at One First Street. Between July 18 and October 16, 2026, the Supreme Court issued zero decisions on Chevron deference, Loper Bright, or the major questions doctrine (Bipartisan Policy Center, 2026-10-06). The work is happening in the circuits.

Three appellate decisions in 90 days — D.C. Circuit on NLRB successor-bar doctrine (Hospital Menonita de Guayama, Inc. v. NLRB, July 21), D.C. Circuit on EPA's CERCLA hazardous substance designation (Chamber of Commerce v. EPA, August 18), Fifth Circuit vacating EPA's methylene chloride rule (East Fork Enterprises v. EPA, September 15) — all cite Loper Bright as the basis for independent statutory interpretation without deference.

The pattern: agencies are losing not because the Court is striking down rules, but because circuit panels are now required to do the interpretive work themselves. The D.C. Circuit upheld EPA on PFOA/PFOS after independent review; the Fifth Circuit vacated EPA on methylene chloride after the same standard. The outcome depends on the statute and the record, not the agency's read.

This is the new normal. Agencies no longer set the interpretive baseline. Every rule with a contested statutory hook now faces de novo review at the circuit level. The compliance question is not what does the agency think the statute means but what will a three-judge panel think the statute means when it reads it cold. That is a different risk surface.

The FTC's position is that de novo entry into a pharmaceutical product market will not be timely "because of a combination of drug development times and Food and Drug Administration (FDA) approval requirements" (reading [1]: Lexology). In merger reviews, the FTC evaluates overlaps between marketed products and pipeline products in Phases II and III (reading [1]: Lexology). The FDA collaborates with the FTC on competition issues related to drug approvals and patent investigations (reading [1]: Lexology).

The regulatory exclusivity layer is the constraint. FTC consent orders in pay-for-delay cases, such as Impax, bar reverse payments that defer generic entry, "including no-authorized generic commitments tied to the first filer's 180-day Hatch-Waxman exclusivity" (reading [1]: FTC). In Cephalon, the FTC alleged that patent settlements blocked competition from other generics "because of the 180-day exclusivity held by the first filers under the Hatch-Waxman Act" (reading [1]: FTC). The Amgen-Horizon consent order requires prior FTC approval for future acquisitions of pre-commercial products that have completed FDA clinical trials in specific therapeutic areas (reading [1]: FTC).

The gate is not the merger alone. It is the interaction between: (1) FTC's market definition, which treats FDA approval time as a barrier to entry, (2) Hatch-Waxman's 180-day first-filer exclusivity, which the FTC treats as a bottleneck that patent settlements can exploit, and (3) consent decree provisions that require prior approval for future pipeline acquisitions in the same therapeutic area. A steward evaluating a pharmaceutical transaction must price all three layers. The deal that clears HSR may still require prior approval under a standing consent decree, and the remedy may prohibit the settlement that makes the generic entry economically viable.

CoreWeave's three facilities closed in 2026 — $8.5B at A3/A(low), $3.1B at Ba2/BB+, $2.6B at unrated SOFR+550 — show widening spreads and declining ratings as the collateral pool diversifies away from single investment-grade offtakers (reading [13]: CoreWeave). Lambda's two facilities — $926M at Baa2/SOFR+300 and $1B at A(low)/Baa1 fixed 6.78% — both cite "investment-grade offtaker" as the anchor (reading [13]: Lambda). The pricing gap is not credit alone; it is regulatory exposure.

Three surfaces matter: (1) Export controls. BIS now requires licenses for advanced computing items to any entity with an ultimate parent in Country Group D:5, even if located outside China or Macau, and has imposed $252M and $95M penalties on Applied Materials and Cadence for Entity List violations (reading [15]: Bureau of Industry and Security). GPU cloud providers serving multinational customers must price the risk that a contract becomes unserviceable mid-term. (2) Antitrust review. FTC's January 2024 6(b) orders to Microsoft-OpenAI, Amazon-Anthropic, Alphabet-Anthropic, and the January 2025 staff report on competition implications including access to compute and switching costs, signal that exclusive capacity commitments may draw remedies (reading [12]: Federal Trade Commission). (3) Power regulatory lag. Dominion's 40 GW of contracted data center demand and Pacific Power's cost-allocation agreement in Oregon show that the utility commission is now the gate for capacity expansion (reading [14]: Virginia SCC, Data Center Dynamics, Portland Tribune).

The debt is priced as infrastructure finance, but it operates in a policy environment where the load, the chip, and the customer are all regulated inputs. The spread is the read.

In Lujan v. Defenders of Wildlife, 504 U.S. 555 (1992), the Supreme Court held that to invoke federal jurisdiction a plaintiff must demonstrate an injury in fact that is concrete, particularized, and actual or imminent; a causal connection fairly traceable to the defendant's conduct; and that it is likely the injury will be redressed by a favorable decision. The opinion states that standing is particularly difficult to show when the plaintiff objects to government action or inaction that affects third parties not before the court.

The constraint is structural. A plaintiff challenging an agency rule that harms a competitor, a customer, or a class of third parties must show that the injury is traceable to the rule and redressable by the court—not that the rule is unlawful. The merits are the room behind the gate; standing is the gate.

Post-Loper Bright, courts exercise independent judgment on whether an agency has acted within its statutory authority, and no longer defer to agency interpretations under Chevron. The major questions doctrine, articulated in West Virginia v. EPA, 597 U.S. ___ (2022), requires clear congressional authorization when the agency asserts authority of extraordinary breadth or economic and political significance. But both doctrines require a plaintiff with standing to invoke them.

The read for stewards: the legal constraint on agency overreach is real, but it is gated by standing. A rule that harms diffuse parties or operates through third-party conduct may be immune to challenge even if it exceeds statutory authority. The political read should price the probability of a plaintiff with standing, not just the probability that the rule is unlawful.

DOJ's 2020 Merger Remedies Manual describes conduct remedies as "inappropriate except in very narrow circumstances" because they "substitute central decision making for the free market" and grow less well-tailored over time as markets change. The empirical record supports the posture: mergers cleared with behavioral remedies raised prices by more than 13 percent on average, versus 5.6 percent for asset divestitures, and two-thirds of purely behavioral remedies were either partially or completely ineffective.

The structural preference is not aesthetic. Structural remedies are self-enforcing because they replicate pre-merger incentives and rely on market forces; behavioral remedies require monitoring, which may be costly and imperfect. Among challenged mergers with publicly disclosed remedies, purely behavioral remedies fell from 13 percent between 1999 and 2003 to 6 percent between 2017 and 2021.

The read for stewards: when the consent decree names a divestiture, the remedy is priced. When it names conduct obligations, the remedy is a placeholder—the next enforcement action will tell you whether the agency has the capacity to monitor and the appetite to enforce. The gap between the decree and the outcome is the political layer.

CFIUS mitigation agreements operate under a parallel constraint. Mitigation must be "reasonably calculated to be effective, allow for verifiable compliance, and enable effective monitoring of compliance and enforcement." The standard is the same: enforceability is the gate. A mitigation agreement that cannot be verified is a posture, not a remedy.

The regulatory surface is not uniform. CFIUS mitigation agreements are confidential under section 721 and exempt from FOIA (Where does CFIUS publish transaction reviews), but EU DG-COMP merger remedies are published in redacted form at competition-cases.ec.europa.eu with systematic coverage from 1990 (Where does the EU publish Commission decisions). The Federal Reserve Board makes all final enforcement orders public and searchable (Where do federal agencies publish enforcement actions), but there is no centralized repository for settlements across U.S. agencies (Where do federal agencies publish enforcement actions).

This is not an accident of technology. It is a posture encoded in statute and practice. The jurisdictions that publish the remedy are the ones where the remedy is the negotiation. The jurisdictions that treat mitigation as confidential are the ones where the transaction itself is the signal.

For the steward committing capital across borders, the read is: you cannot price the political constraint in the U.S. foreign-investment layer by reading what was published; you price it by reading what was not required to be published, and inferring from the Annual Report to Congress what the Committee is willing to describe in aggregate. The EU gives you the paragraph. CFIUS gives you the count.

The cost of that asymmetry is measurable. It shows up as wider spreads on cross-border M&A with U.S. nexus, longer close timelines, and more frequent voluntary abandonment pre-filing. The political layer is a tax on certainty, and certainty is a function of what you can read in advance.

There is no centralized online repository for materials including settlements in agency enforcement proceedings (reading [1]). Agency settlements are scattered across individual agency websites to the extent they are available online at all (reading [1]). Many agencies proactively disclose settlement agreements on their websites (reading [1]). The Federal Reserve Board makes all final enforcement orders public and searchable in a database on its website (reading [1]). The DOJ publishes notices of proposed consent decrees in the Federal Register with links to the decrees and comment procedures (reading [1]).

This is not a technology problem. The Federal Register has been searchable on Federalregister.gov from 1994 and on Govinfo.gov from 1936 (reading [7]). The FTC has built a public database of cases and proceedings (reading [5]). The DOJ Antitrust Division maintains a Matter Tracking System with public documents (reading [5]). The capability exists. The mandate does not.

The Administrative Conference of the United States documented this gap in April 2023 (reading [1]). No legislative or executive action has followed to create a cross-agency settlement registry. The result: if you want to price the enforcement posture of an agency that is not DOJ, FTC, or the Federal Reserve, you are scraping individual agency press release pages and hoping the PDFs are still hosted.

The political read: this is a durable feature of the U.S. administrative state. Transparency is an agency-by-agency decision, not a government-wide obligation.

CFIUS does not publicly confirm or deny that a transaction has been notified, and information filed with the Committee including mitigation agreements is confidential under section 721 and exempt from FOIA disclosure (reading [4]). The UK National Security and Investment Act publishes notices of final orders on gov.uk (reading [2]). FIRB operates under foreigninvestment.gov.au with guidance and compliance reporting (reading [2]).

This is not an accident of administrative capacity. The U.S. model treats the review surface itself as sensitive; the UK and Australian models treat the outcome as the public artifact. The difference matters for pricing political risk: in the CFIUS regime, you cannot build a dataset of mitigation precedent by scraping public filings. You rely on the Annual Report to Congress, which provides examples of mitigation measures but not party-specific agreements (reading [4]).

The remedy for stewards: CFIUS posture must be inferred from presidential orders published in the Federal Register (reading [4]) and from the statistical envelope in the Annual Report. The UK and Australian regimes allow direct citation of named final orders. The confidence interval on a CFIUS read will always be wider than the confidence interval on an NSI or FIRB read, holding deal characteristics constant.

This is the structure we operate in. The political read on a cross-border transaction routes through different primary documents depending on the jurisdiction, and the U.S. system is designed to withhold the precedent.

Facts read directly off the source pages in the browser, each resting on a sentence quoted from the page.

• Interior Minister Laurent Nuñez stated that 2,400 people had been arrested across France and nearly 1,000 officers had been injured as of October 18, 2026. (The Nation, 2026-10-19)
• Macron said in his televised address that those who sought to bring down the Republic will be held accountable. (PBS News, 2026-10-18)
• Macron denounced unrestrained violence by insurrectionist elements from radical far-left groups, joined by numerous criminals. (PBS News, 2026-10-18)
• Justice Minister Gerald Darmanin said on Monday that the security services were very good at dealing with threats from terrorists and organised crime groups, but less so regarding far-left protesters. (The Irish Times, 2026-10-19)
• Interior Minister Laurent Nuñez offered to resign after widespread weekend rioting, but Macron declined the offer on Monday. (The Irish Times, 2026-10-19)

What moved on the politics beat in the seven days to 2026-10-19, and what is scheduled next.

• On October 16, 2026, President Trump issued an executive order waiving the application of sanctions, restrictions, and duties under the Lindsey O. Graham Sanctioning Russia and Iran Act of 2026, certifying it was in the national interest of the United States. (The White House, 2026-10-16)
• Voter registration deadline in Alabama, California, Pennsylvania, South Dakota, and Wyoming is October 19, 2026, ahead of the November 3, 2026 general election. (Ballotpedia, 2026-10-16)
• Pre-general election campaign finance report filing deadline for congressional campaigns, PACs, and parties is October 22, 2026. (The Well News, 2026-10-09)
• The 119th Congress, 2nd Session House Calendar for October 19, 2026 lists proceedings, public laws, and bill histories. (GovInfo, 2026-10-19)
• Election Day for the 2026 midterm elections is November 3, 2026. (NPR, 2026-10-09)

Research for the week of 2026-10-19. Stewards with French exposure need to price the gap between routine protest cycles and the language Macron used—"bring down the Republic"—which historically signals executive action beyond normal police response. The arrest count and rhetoric together mark a threshold that changes the regulatory and operational environment.

• The arrest tally reported Sunday approached the nearly 2,000 recorded nationwide during a single day of yellow vest protests in December 2018. (PBS News, 2026-10-18)
• In the first month of Gilets Jaunes mobilization (17 November to 17 December 2018), 4,570 gardes à vue were pronounced and 216 persons were incarcerated. (Le Parisien, 2019-01-03)
• Over six months of Gilets Jaunes, 10,718 gardes à vue were recorded with nearly 2,000 condemnations including 40% prison sentences. (CNEWS, 2019-11-15)
• Prime Minister Sébastien Lecornu asked regional governments to put in place partial curfews confined to certain areas of cities such as symbolic or emblematic places. (The Irish Times, 2026-10-19)
• President Macron held an emergency meeting with top government officials on Sunday afternoon before addressing the nation at 8 p.m. and ordered a review of intelligence gathering and police preparedness. (The Nation, 2026-10-19)
• Macron stopped short of declaring a state of emergency or curfew while empowering prefects and mayors to prohibit certain gatherings when necessary. (The Nation, 2026-10-19)
• Article 16 of the Constitution has not been invoked as none of the required conditions of a grave and immediate threat to institutions or interruption of constitutional powers are met. (franceinfo, 2025-10-07)
• Interior Minister Laurent Nuñez stated that 1,800 people had been arrested nationwide and that the Republic will not yield. (The Guardian, 2026-10-18)

Facts read directly off the source pages in the browser, each resting on a sentence quoted from the page.

• The coalition said it had destroyed 127 weapons storage facilities and launch platforms in Yemen's mountainous areas. (Al-Monitor, 2026-10-15)
• The Ministry of Foreign Affairs expressed the Kingdom of Saudi Arabia's strongest condemnation of the terrorist Houthi militia's continued targeting of civilians and civilian and economic facilities, including attacks against Makkah, Madinah, Riyadh, Abha, Khamis Mushait, Jazan, Najran, Taif, and Yanbu. (Saudi Press Agency, 2026-10-15)
• The Kingdom reaffirmed its inherent right to defend its territory, resources, sovereignty, and the safety of its citizens and residents, and to take all necessary measures to protect its security in accordance with international law. (Saudi Press Agency, 2026-10-15)

What moved on the politics beat in the seven days to 2026-10-15, and what is scheduled next.

• The Federal Election Commission requires filing of the October Quarterly Report on October 15, 2026. (Federal Election Commission, 2026-10-02)
• The U.S. Senate convened for a pro forma session at 9:30 a.m. on October 15, 2026, with no business conducted. (U.S. Senate Daily Press, 2026-10-15)
• Secretary of State Marco Rubio hosted a memorial for U.S. victims of the October 7th attack at the Department of State on October 14, 2026. (U.S. Department of State, 2026-10-14)
• The White House Office of Communications announced the in-town press rotation schedule for October 12-18, 2026. (The American Presidency Project, 2026-10-11)
• The 12-day Pre-General Report is due October 22, 2026, for all general election candidates, many quarterly-filing PACs and parties, and all monthly filers. (Federal Election Commission, 2026-10-02)

Research for the week of 2026-10-12. The Houthi attack targeted dozens of Saudi facilities including Riyadh airport, marking an escalation in scope that stewards need to assess for supply chain exposure, energy infrastructure risk, and the credibility of regional security arrangements.

• Houthis claimed responsibility for strikes on King Khalid International Airport in Riyadh, King Fahd International Airport in Dammam and two Saudi Aramco facilities. (Reuters, 2026-10-11)
• A Houthi strike on an administrative building belonging to Saudi Aramco in Dhahran caused a limited fire but no casualties or fatalities. (Khaleej Times, 2026-10-14)
• The attack on Riyadh's King Khalid International Airport on October 10, 2026 killed at least 12 people and wounded more than 300. (Reuters, 2026-10-10)
• Saudi Arabia's benchmark index fell 1.7% on October 14, 2026, weighed down by declines in Saudi National Bank and Al Rajhi Bank. (Reuters, 2026-10-14)
• The Saudi index dropped 0.6% on October 15, 2026, pulled down by a 0.6% fall in Saudi Aramco. (Reuters, 2026-10-15)
• The Saudi Cabinet warned that the terrorist Houthi militia will be held fully accountable for the consequences of its crimes and repeated attacks targeting airports and vital civilian and economic infrastructure. (Saudi Gazette, 2026-10-14)
• The Saudi-led coalition said the Houthis had launched 20 attacks on King Khalid International Airport in Riyadh this month, killing 17 people and wounding 333 others. (Al-Monitor, 2026-10-15)
• The Saudi Ministry of Foreign Affairs expressed the Kingdom’s strongest condemnation of the terrorist Houthi militia’s continued targeting of civilians and civilian and economic facilities. (Saudi Press Agency, 2026-10-15)

• On July 21, 2026, the U.S. Court of Appeals for the D.C. Circuit in Hospital Menonita de Guayama, Inc. v. NLRB, No. 22-1163, held that the NLRB’s successor-bar doctrine is inconsistent with the NLRA after independent statutory interpretation under Loper Bright Enterprises v. Raimondo. (NLRB Research, 2026-07-21)
• On August 18, 2026, the U.S. Court of Appeals for the D.C. Circuit in Chamber of Commerce of the U.S. v. EPA, No. 24-1193, upheld EPA’s designation of PFOA and PFOS as CERCLA hazardous substances after independently interpreting the statute under Loper Bright without deference to the agency. (National Law Review, 2026-08-20)
• On September 15, 2026, the U.S. Court of Appeals for the Fifth Circuit in East Fork Enterprises, Inc. v. EPA, Nos. 24-60227 & 24-60256, vacated EPA’s TSCA risk management rule for methylene chloride after independently evaluating the agency’s statutory interpretation and evidence under Loper Bright. (National Law Review, 2026-10-13)
• No Supreme Court decisions on Chevron deference, Loper Bright, or the major questions doctrine were issued between July 18 and October 16, 2026. (Bipartisan Policy Center, 2026-10-06)

• On October 8, 2026, the U.S. Department of Justice Antitrust Division closed its investigation into Arrive AS’s proposed acquisition of Passport Labs Inc. after a targeted review. (United States Department of Justice, 2026-10-08)
• On August 24, 2026, the Federal Trade Commission secured a stipulated order resolving its litigation against Zillow and Redfin that eliminates the key term in their 2025 agreement under which Zillow paid Redfin $100 million for Redfin to shut down its internet listing services business. (Federal Trade Commission, 2026-08-24)
• On September 16, 2026, the Federal Trade Commission accepted a proposed consent order in the Beretta Holding S.A. and Sturm, Ruger & Co. Inc. stock purchase agreement that prohibits Beretta from appointing or nominating anyone to serve on Ruger’s board of directors unless that person is independent of Beretta. (Federal Trade Commission, 2026-09-16)

• On October 15, 2026, OFAC added multiple individuals including Azadeh Abdolalipur and entities including International Development Bank for Investment and Finance to the SDN List under IRAN-EO13902, targeting Iranian financial networks linked to religious charity networks. (Office of Foreign Assets Control, 2026-10-15)
• On October 15, 2026, OFAC issued General License 128D authorizing certain transactions involving Lukoil retail service stations located outside of Russia and General License authorizing the wind down of transactions involving International Development Bank for Investment and Finance. (Office of Foreign Assets Control, 2026-10-15)
• On October 13, 2026, OFAC designated four individuals and eleven entities linked to Cartel del Noreste including CLUB LA MOLIENDA horse racing entity and multiple construction and fuel companies in Mexico under SDGT and ILLICIT-DRUGS-EO14059. (Office of Foreign Assets Control, 2026-10-13)
• On October 9, 2026, OFAC designated the International Criminal Court entity to the SDN List under ICC-EO14203 and issued four new International Criminal Court-related General Licenses authorizing transactions involving the ICC. (Office of Foreign Assets Control, 2026-10-09)
• On October 8, 2026, OFAC designated multiple companies including Paritosh Shipping Inc. and Shunhang Ship Management Limited pursuant to E.O. 13902 for operating in the petroleum or petrochemical sector of the Iranian economy. (U.S. Department of the Treasury, 2026-10-08)
• On October 5, 2026, OFAC removed 125 individuals and entities from its sanctions lists and updated 22 list entries as part of its sanctions modernization initiative. (U.S. Department of the Treasury, 2026-10-05)

• The Federal Trade Commission amended its Rules of Practice to revise the description of the FTC’s EEO Office and Regional Offices, update OMB control numbers, and make other changes in a final rule effective September 24, 2026. (Federal Trade Commission, 2026-09-24)
• The Securities and Exchange Commission adopted amendments to Volume II of the EDGAR Filer Manual (Version 78, September 2026) and related rules in a final rule effective October 6, 2026. (Securities and Exchange Commission, 2026-10-06)
• The Department of the Treasury issued amendments to the Uniform Offering Circular for the sale and issue of marketable book-entry Treasury bills, notes, and bonds making technical changes and modifying noncompetitive bid requirements in a final rule effective October 15, 2026. (Department of the Treasury, 2026-10-15)
• The Department of the Treasury issued a final rule exempting a new system of records on Federal Program Waste, Fraud, and Abuse Tip Intake and Referral Records from certain Privacy Act provisions effective November 5, 2026. (Department of the Treasury, 2026-10-06)
• The Securities and Exchange Commission proposed amendments to Rule 17a-7 under the Investment Company Act to expand cross trading eligibility to Level 2 securities and shift oversight responsibilities, with comment period 60 days after Federal Register publication. (Securities and Exchange Commission, 2026-10-09)
• The Securities and Exchange Commission proposed rules on adviser and regulated fund custody including crypto custody provisions in a release published October 6, 2026, with 60-day comment period after Federal Register publication. (Securities and Exchange Commission, 2026-10-06)

• The FTC generally has taken the position that de novo entry into a pharmaceutical product market will not be timely because of a combination of drug development times and Food and Drug Administration (FDA) approval requirements. (Lexology (summarizing FTC positions), 2026-05-27)
• In pharmaceutical merger reviews, the FTC evaluates overlaps between currently marketed products and pipeline products in Phases II and III of the FDA approval process. (Lexology (summarizing FTC positions), 2026-05-27)
• The FDA collaborates with the FTC on competition-related issues related to drug approvals as well as investigations into granted patents. (Lexology (summarizing FTC/FDA roles), 2024-06-06)
• FTC consent orders in pay-for-delay cases, such as Impax, bar reverse payments that defer or restrict generic entry, including no-authorized generic commitments tied to the first filer's 180-day Hatch-Waxman exclusivity. (Federal Trade Commission, 2026-07-21)
• In the Cephalon case, FTC alleged that patent settlements blocked competition from other generic manufacturers because of the 180-day exclusivity held by the first filers under the Hatch-Waxman Act. (Federal Trade Commission, 2026-07-21)
• FTC merger consent orders, such as in Amgen-Horizon, require prior FTC approval for future acquisitions of pre-commercial products that have completed FDA clinical trials in specific therapeutic areas. (Federal Trade Commission, 2023-12-14)

• Challengers to the SEC's March 2024 climate disclosure rules argue that the rules exceed the agency's statutory authority under the major questions doctrine because they address an issue of major economic and political significance without clear congressional authorization. (Propmodo, 2026-10-12)
• The SEC proposed rescinding its 2024 climate disclosure rules in May 2026 (published in the Federal Register June 3, 2026), citing among other reasons that the rules exceed the scope of the agency’s statutory authority. (Jones Day, 2026-09-08)
• Petitioners in litigation challenging the SEC’s climate risk disclosure rule claim the agency can’t issue this regulation because climate change is too controversial under the major questions doctrine. (Bloomberg Law, 2024-07-22)
• Commissioner Uyeda questioned the SEC’s authority to promulgate climate disclosure rules, citing the major questions doctrine which provides that agency rules of major significance must be based on clear delegation of congressional authority. (Davis Polk, 2024-03-11)
• An analysis of banking regulators notes that the major questions doctrine’s proponents argue banking regulators are straying beyond their mission by considering financial risks created by climate change, though the piece argues courts might extend West Virginia v. EPA logic to such rules. (George Mason Law Review, 2023-12-28)

• In designing remedies for refusal to supply data cases, antitrust authorities note that mandating data access would require a dominant undertaking to inform users and seek their specific and explicit consent under data protection rules. (European Union (OECD submission), 2024-06-06)
• The privacy safeguards proposed by the DOJ in Google antitrust remedies align with measures the FTC has required in privacy and data security orders. (Federal Trade Commission, 2025-05-09)
• Google’s commitments in a German antitrust proceeding require providing users the possibility to give free, specific, informed and unambiguous consent to cross-service data processing, consistent with GDPR standards. (TechCrunch, 2023-10-05)
• In the US v. Google remedies, data sharing is approved subject to a license that prohibits recipients from sharing or selling the received data. (University of Chicago Business Law Review, 2026-10-15)
• Remedies in cases raising both competition and data protection concerns can create synergies when they reinforce the complementary objectives of the two regimes. (Tilburg University Research Portal)
• Competition authorities must cooperate with data protection authorities when assessing whether conduct complies with the GDPR, though they remain free to draw their own conclusions under competition law. (Bundeskartellamt, 2024-06-18)

• Due to the structure of the time periods during which Congress can take action under the CRA, there is a period at the beginning of each new Administration during which rules issued near the end of the previous Administration—sometimes referred to as "midnight rules"—are eligible for review under the CRA. (Library of Congress, 2024-07-09)
• Section 801(d) of the CRA provides that if a rule is submitted to Congress either less than 60 days of session in the Senate or less than 60 legislative days in the House of Representatives before Congress adjourns a session of Congress sine die, a new period for congressional review of that rule becomes available in the next session of Congress. (Library of Congress, 2024-07-09)
• The lookback provision may hold particular import in years in which there is a change in party control of the presidency. (Library of Congress, 2026-10-01)
• The lookback period occurs every year, including years when there are no congressional elections, but it is particularly relevant following presidential elections. (George Washington University Regulatory Studies Center, 2026-10-13)
• If Congress passes and the president signs a joint resolution of disapproval, the targeted rule is repealed and no longer in effect. (George Washington University Regulatory Studies Center, 2026-10-13)
• The CRA prohibits agencies from reissuing overturned rules in substantially the same form or issuing substantially similar replacements unless Congress specifically authorizes them through subsequent legislation. (Legis1, 2026-10-06)

• On March 30, 2026, the FTC settled with Match Group Americas and OkCupid over allegations that OkCupid gave roughly three million user photos, plus demographic and location data, to an AI company that used them to build facial recognition technology, in violation of Section 5 because the privacy policy at the time limited sharing without proper notice and opt-out. (Andrew S. Bosin LLC, 2026-10-04)
• The FTC warned in a February 2024 Technology Blog post that adopting more permissive data practices, explicitly including using consumer data for AI training, and disclosing that change only through a surreptitious, retroactive amendment to a privacy policy or terms of service may violate Section 5 of the FTC Act. (Andrew S. Bosin LLC, 2026-10-04)
• Article 10 of the EU AI Act requires that training, validation and testing data sets for high-risk AI systems shall be subject to data governance and management practices appropriate for the intended purpose, concerning in particular data collection processes and the origin of data, and in the case of personal data, the original purpose of the data collection. (Springlex (citing Official Journal of the European Union))
• Article 10 of the EU AI Act requires that training, validation and testing data sets shall be relevant, sufficiently representative, and to the best extent possible, free of errors and complete in view of the intended purpose, and shall have the appropriate statistical properties. (Springlex (citing Official Journal of the European Union))
• Providers of general-purpose AI models must implement a policy to comply with Union copyright law and related rights, using state-of-the-art technologies to identify and respect rights reservations, and publish a sufficiently detailed summary of the content used for training the model under the EU AI Act. (European Commission)
• The FTC resolution directing compulsory process in a non-public investigation covers products and services that use or are produced using artificial intelligence, to determine whether there have been unfair or deceptive acts or practices in violation of Section 5 of the FTC Act. (Federal Trade Commission, 2023-12-05)

• Since 2014, OFAC’s use of sanctions affecting U.S. capital markets participants and U.S. investors has increased dramatically. (SIFMA)
• U.S. sanctions targeting capital markets activities have detrimentally impacted both U.S. investors and securities market participants; U.S. investors have seen their investments become worthless, are unable to receive income on long-held securities pre-dating the imposition of sanctions and are unable to divest their sanctioned securities. (SIFMA)
• The U.S. government prohibited participation by U.S. financial market participants in the secondary market for all Russia-related sovereign debt issued on and after March 1, 2022. (Fitch Ratings, 2022-07-19)
• We use entropy balancing method, and provide robust evidence that US sanctions increase sovereign debt default in the targeted states. (ScienceDirect, 2024-12-01)
• On June 7, 2022, the U.S. Treasury updated its sanction guidance, stating that U.S persons are barred from purchasing both new and existing equity or debt issued by entities in the Russian Federation, including both sovereign and private entities. (Fitch Ratings, 2022-07-19)

• CFIUS defines 'critical technologies' to include defense articles or defense services on the USML under ITAR (22 C.F.R. parts 120-130), items on the CCL under EAR controlled for national security, chemical/biological weapons, nuclear nonproliferation, missile technology, regional stability or surreptitious listening reasons, and emerging and foundational technologies controlled under section 1758 of the Export Control Reform Act of 2018. (U.S. Department of the Treasury, 2025-08-06)
• Mandatory CFIUS declarations are required for certain covered transactions involving critical technologies where a U.S. regulatory authorization such as an export license under EAR or ITAR would be required to export, reexport, transfer (in-country), or retransfer the critical technology to the foreign investor or its controlling entities. (U.S. Department of the Treasury, 2024-08-14)
• FIRRMA expanded CFIUS jurisdiction to non-controlling investments in U.S. businesses that produce, design, test, manufacture, fabricate, or develop critical technologies, with the definition of critical technologies tied directly to export control lists under ITAR and EAR plus emerging technologies under ECRA. (U.S. Department of the Treasury, 2025-08-07)
• CFIUS reviews assess whether other provisions of law, including export controls under EAR and ITAR, provide adequate authority to address national security risks from a transaction; if not, CFIUS may impose mitigation measures. (U.S. Department of the Treasury, 2026-07-04)
• The CFIUS annual report states that its definition of critical technologies references U.S. export control regulations as the most reliable means of identifying them, explicitly citing ITAR USML and EAR CCL categories plus emerging technologies under ECRA section 1758. (U.S. Department of the Treasury, 2025-08-06)

• The UK Government issued a final order on 20 August 2025 blocking the proposed joint venture acquisition by Anhui Boundary Innovative Materials Technology Co Ltd and Versarien Plc of tangible and intangible assets relating to the production and use of graphene. (GOV.UK, 2025-08-20)
• The UK Government issued a final order on 21 May 2026 approving the acquisition of Plessey Semiconductors Limited by Haylo Labs Limited subject to conditions on information, physical and personnel security and notification requirements to mitigate risks to the security of intellectual property in microLED technology. (GOV.UK, 2026-05-21)
• The UK Government issued a final order on 25 June 2026 prohibiting the acquisition of TTG Global Solutions Group Limited by Shenzhen HYT Science & Technology Co., Ltd due to national security risks from TTG's role supplying communications solutions to critical national infrastructure and access to sensitive data. (GOV.UK, 2026-06-25)
• The UK Government issued a final order on 5 August 2026 approving the acquisition of patent applications and associated know-how for intellectual property related to atom-beam lithography for use in advanced chip manufacturing processes from University of Birmingham by Lace Lithography AS. (GOV.UK, 2026-08-05)
• In the period 1 April 2025 to 31 March 2026 the UK Government issued nine final orders under the NSI Act, of which eight permitted transactions to proceed subject to conditions and one prohibited an acquisition, with final orders most frequently associated with the Advanced Materials sector (five) and Data Infrastructure sector (three). (GOV.UK, 2026-07-14)

• On December 15, 2025, Senators Jerry Moran (R-Kan.) and Elissa Slotkin (D-Mich.) introduced the Strengthening Agency Frameworks for Enforcement of Cryptocurrency (SAFE Crypto) Act to establish an inter-governmental task force between federal agencies and the private sector to coordinate identifying and combating cryptocurrency fraud. (Western Kansas News, 2026-10-16)
• On October 9, 2026, Representatives Jan Schakowsky (D-IL), Lori Trahan (D-MA), and Tom Kean Jr. (R-NJ) introduced the FTC Whistleblower Act of 2026 to protect current and former employees from retaliation when they disclose violations of consumer protection and antitrust laws to the FTC and to establish incentives for whistleblowers. (Office of Congresswoman Jan Schakowsky, 2026-10-09)
• H.R. 9576, the National Fraud Enforcement Division Act of 2026, passed the House on September 16, 2026, by a vote of 352-72 to establish a National Fraud Enforcement Division within the Department of Justice to investigate and prosecute fraud against taxpayer dollars and taxpayer-funded programs. (Library of Congress / Congress.gov, 2026-09-22)

• On October 2, 2026, the SEC announced a settled administrative proceeding (File No. 3-22769) against CityVest Capital Inc., CV Manager LLC, and Alan P. Donenfeld, who without admitting findings consented to a cease-and-desist order, censures, and civil penalties of $10,000 each for willfully violating Section 206(2) of the Investment Advisers Act by failing to disclose conflicts from $425,000 in undisclosed loans between July 2019 and May 2025. (U.S. Securities and Exchange Commission, 2026-10-02)
• On September 18, 2026, the SEC announced a settled administrative proceeding (File No. 3-22735) against Hatteras Investment Partners, LP and David B. Perkins, who without admitting findings consented to a cease-and-desist order, censures, and a $250,000 civil penalty for Perkins for willfully violating Section 206(2) of the Investment Advisers Act by breaching fiduciary duties in recommending a high-risk liquidation transaction in 2021 that caused approximately $300 million in losses. (U.S. Securities and Exchange Commission, 2026-09-18)
• On September 22, 2026, the SEC announced a settled administrative proceeding (File No. 3-22748) against OTC Link LLC, which without admitting findings consented to a cease-and-desist order, censure, and $575,000 civil penalty for violating Rules 1001(a)(1), 1001(a)(2), and 1001(a)(3) of Regulation SCI between August 2016 and March 2025 due to inadequate policies and procedures for its OTC Link ATS. (U.S. Securities and Exchange Commission, 2026-09-22)
• On October 8, 2026, the OCC announced a cease-and-desist order and $350 million civil money penalty against American Express National Bank for deficiencies in its BSA/AML compliance program, including inadequate resources, weak internal controls, ineffective risk assessments, and failure to timely identify and report approximately $13 billion of suspected trade-based money laundering activity over the past decade. (Office of the Comptroller of the Currency, 2026-10-08)
• On October 13, 2026, the OCC announced a $750 million civil money penalty (largest in OCC history) against Bank of America, N.A. for violations of the Bank Secrecy Act and its implementing regulations, including 12 CFR 21.21 and 12 CFR 21.11, due to a deficient and ineffective BSA/AML compliance program that resulted in late suspicious activity reports involving billions of dollars. (Office of the Comptroller of the Currency, 2026-10-13)
• In August 2026, the FDIC issued two consent orders, one amended consent order, and one order terminating a consent order among its nine enforcement actions against banks and individuals. (Federal Deposit Insurance Corporation, 2026-09-25)

• On 23 April 2025 the European Commission fined Apple €500 million for breaching its anti-steering obligation under the Digital Markets Act and fined Meta €200 million for breaching the DMA obligation to give consumers the choice of a service that uses less of their personal data. (European Commission, 2025-04-23)
• On 23 July 2026 the European Commission adopted two non-compliance decisions under the Digital Markets Act against Google, imposing a fine of €460 million for self-preferencing its own services on Google Search and a fine of €430 million for restrictions on steering to alternative purchase channels on Google Play. (European Commission, 2026-07-23)
• On 13 October 2026 the European Commission approved under the EU Merger Regulation the proposed acquisition by Kimberly-Clark of Kenvue, conditional upon full compliance with the commitments offered by Kimberly-Clark. (European Commission, 2026-10-13)
• On 22 July 2026 the European Commission approved under the EU Merger Regulation the proposed acquisition by Paramount Skydance Corporation of Warner Bros. Discovery, conditional upon full compliance with the commitments offered by Paramount. (European Commission, 2026-07-22)
• On 13 February 2026 the European Commission approved under the EU Merger Regulation the proposed acquisition by Universal Music Group of Downtown Music Holdings, conditional upon full compliance with the commitments offered by the companies including the full divestment of Downtown's royalty accounting platform Curve Royalty Systems. (European Commission, 2026-02-13)

• On September 15, 2026, the U.S. Court of Appeals for the Fifth Circuit vacated EPA’s TSCA risk management rule for methylene chloride, applying Loper Bright Enterprises v. Raimondo to independently evaluate EPA’s statutory interpretations and evidentiary support for its “unreasonable risk” determinations and “whole chemical” approach. (Hunton Andrews Kurth / The Nickel Report, 2026-10-13)
• Challenges to EPA’s TSCA risk management rule for perchloroethylene remain pending in the Fifth Circuit (held in abeyance) and will be influenced by the methylene chloride ruling. (Hunton Andrews Kurth / The Nickel Report, 2026-10-13)
• Challenges to EPA’s TSCA risk management rule for trichloroethylene are pending in the Third Circuit, with petitioners citing the Fifth Circuit’s methylene chloride decision. (Hunton Andrews Kurth / The Nickel Report, 2026-10-13)
• Challenges to EPA’s TSCA risk management rule for carbon tetrachloride are pending in the Eighth Circuit (held in abeyance). (Hunton Andrews Kurth / The Nickel Report, 2026-10-13)
• On February 18, 2026, health and environmental organizations filed suit in the D.C. Circuit challenging EPA’s February 2026 final rule repealing the 2009 endangerment finding, a rule the agency justified in part under Loper Bright and the major questions doctrine. (Jones Day, 2026-06-22)
• On February 18, 2026, a federal district court in the Eastern District of Texas vacated the FTC’s 2024 final rule expanding Hart-Scott-Rodino premerger notification requirements, holding that the rule exceeded statutory authority under Loper Bright analysis and was arbitrary and capricious. (U.S. District Court for the Eastern District of Texas, 2026-02-18)

• The Outbound Investment Security Program (OISP) became effective on January 2, 2025, and requires notification to Treasury of certain investments by U.S. persons into entities in or connected to the People’s Republic of China engaged in activities in the quantum computing, artificial intelligence, and semiconductor sectors. (U.S. Department of the Treasury, 2026-10-07)
• On October 7, 2026, the U.S. Department of the Treasury announced its first civil penalty under the Outbound Investment Security Program, fining Amidi, LLC $200,000 for failing to notify of a $92,478 investment by its Chinese subsidiary into Shanghai Qiongche Intelligent Technology Company Limited (Noematrix), a Chinese AI and robotics company, on April 19, 2025. (U.S. Department of the Treasury, 2026-10-07)
• On January 3, 2025, OFAC sanctioned Integrity Technology Group, Incorporated, a Beijing-based cybersecurity company, pursuant to Executive Order 13694 for supporting the Chinese state-sponsored cyber group Flax Typhoon in computer intrusion incidents against U.S. critical infrastructure. (U.S. Department of the Treasury, 2025-01-03)

• On January 2, 2026, President Trump issued an executive order prohibiting the April 30, 2024 acquisition by HieFo Corporation (controlled by a PRC citizen) of certain digital chips and related wafer design, fabrication, and processing assets of EMCORE Corporation and ordering divestment of those assets. (The White House, 2026-01-02)
• In calendar year 2025, CFIUS required mitigation measures or otherwise imposed conditions for 25 of the 207 notices it reviewed. (U.S. Department of the Treasury, 2026-08-07)
• In calendar year 2025, CFIUS reviewed 17 notices involving the semiconductor manufacturing sector. (A&O Shearman, 2026-08-12)
• In calendar year 2025, two cases reviewed by CFIUS were the subject of a presidential prohibition. (U.S. Department of the Treasury, 2026-08-07)

• In United States et al. v. Google LLC, the U.S. District Court for the Eastern District of Virginia ordered significant behavioral relief on September 16, 2026, including required integrations between AdX and Prebid, DFP and Prebid, data sharing requirements allowing publishers to access and export data from DFP and AdX, and a prohibition on AdWords bidding preferentially into AdX or other Google ad tech tools. (United States Department of Justice, 2026-09-16)
• The U.S. District Court for the Eastern District of Virginia refused to break up Google's advertising technology business and instead granted behavioral fixes in the DOJ ad tech monopolization case against Google. (Law360, 2026-09-02)
• The Federal Trade Commission filed a notice of appeal on January 20, 2026, in the U.S. Court of Appeals for the District of Columbia Circuit from the district court's November 2025 ruling in favor of Meta Platforms, Inc. in the FTC's monopolization case. (Federal Trade Commission, 2026-01-20)
• The FTC v. Amazon.com Inc. antitrust bench trial in the Western District of Washington is scheduled to begin February 9, 2027. (LegalClarity, 2026-06-28)
• In Epic Games, Inc. v. Google LLC, a California federal judge ordered Google LLC on August 13, 2026, to streamline the steps for Android users to find rival app stores as part of court-ordered remedies. (Law360, 2026-08-13)
• The U.S. District Court for the District of Columbia issued finalized remedies on December 5, 2025, in the DOJ search monopolization case against Google. (Law360, 2025-12-05)

• The EPA of the second Trump administration has launched fewer civil judicial cases than any other administration in the past 20-years: just eight, one-third of what the Biden administration initiated in 2024. (Environmental Data & Governance Initiative, 2026-02-02)
• Regulatory enforcement actions against financial services firms experienced an unprecedented decline in the first half of 2025, with violation volumes plummeting 37% compared to the previous six months. (Wolters Kluwer, 2025-08-05)
• The SEC Division of Enforcement reported 456 total enforcement actions for fiscal year 2025, the lowest number in at least 20 years, including 303 standalone actions. (Sidley Austin LLP, 2026-04-09)
• Combined wage and hour and safety penalties have dropped 66% in inflation-adjusted dollars so far in 2025 compared to prior periods. (Good Jobs First, 2025-12-16)
• The EPA’s enforcement office has been initiating 19 fewer cases per month on average than the Biden administration during its last year in office. (The Washington Post, 2025-05-18)
• In fiscal year 2025, monetary settlements involving public companies totaled $808 million, the lowest level since 2012. (Barron's, 2025-11-20)

• PRS uses more than four decades of ICRG data to investigate how much of the remaining variation in sovereign borrowing costs can be explained by political and institutional risk after accounting for global financial conditions and macroeconomic fundamentals. (PRS Group, 2026-10-06)
• Options whose lives span political events tend to be more expensive, providing protection against price, variance, and tail risks associated with political events. (The Journal of Finance, 2016-03-01)
• Due to the CRA’s legislative timelines, federal agencies seek to implement significant rulemaking efforts early in election years. (Fisher Phillips, 2024-08-05)
• Rules released close to the end of an administration—roughly in the last six months—are more vulnerable to being disapproved under the Congressional Review Act under a straight-majority vote that is not subject to a filibuster. (Institute for Policy Integrity, 2026-07-01)
• If Congress adjourns to end its current session within 60 session days after a rule is submitted, the periods to introduce and act on a disapproval resolution are reset in the next session of Congress, beginning in each chamber on the 15th day of the new session. (Fisher Phillips, 2024-08-05)

• In Lujan v. Defenders of Wildlife, 504 U.S. 555 (1992), the Supreme Court held that to invoke federal jurisdiction a plaintiff must demonstrate an injury in fact that is concrete, particularized, and actual or imminent, a causal connection fairly traceable to the defendant's conduct, and that it is likely the injury will be redressed by a favorable decision. (Justia U.S. Supreme Court Center, 1992-06-12)
• The Lujan opinion states that standing is particularly difficult to show when the plaintiff objects to government action or inaction that affects third parties not before the court. (Justia U.S. Supreme Court Center, 1992-06-12)
• In West Virginia v. EPA, 597 U.S. ___ (2022), the Supreme Court described the major questions doctrine as applying in extraordinary cases where the history and breadth of the authority asserted and the economic and political significance of that assertion provide reason to hesitate before concluding that Congress meant to confer such authority. (Legal Information Institute, 2022-06-30)
• The West Virginia v. EPA opinion states that under the major questions doctrine the agency must point to clear congressional authorization for the authority it claims. (Legal Information Institute, 2022-06-30)
• The West Virginia v. EPA opinion notes that the doctrine rests on both separation of powers principles and a practical understanding of legislative intent. (Legal Information Institute, 2022-06-30)
• In West Virginia v. EPA the Court applied the major questions doctrine to reject EPA's claim of authority under Section 111(d) of the Clean Air Act to adopt a regulatory program based on generation shifting because the claim involved unheralded power in vague language of a rarely used statute. (Legal Information Institute, 2022-06-30)

• The Supreme Court held that the Administrative Procedure Act requires courts to exercise their independent judgment in deciding whether an agency has acted within its statutory authority, and courts may not defer to an agency interpretation of the law simply because a statute is ambiguous; Chevron is overruled. (Supreme Court of the United States, 2024-06-28)
• Under the former Chevron framework, after determining that a statute was silent or ambiguous, a reviewing court was required to defer to the agency’s interpretation if it was based on a permissible construction of the statute. (Supreme Court of the United States, 2024-06-28)
• When a particular statute delegates discretionary authority to an agency consistent with constitutional limits, courts must respect the delegation while ensuring the agency acts within it, but must independently interpret the statute. (Supreme Court of the United States, 2024-06-28)

• Any determination of the Committee to suspend a covered transaction, to refer a covered transaction to the President, or to negotiate, enter into or impose, or enforce any agreement or condition with respect to a covered transaction (e.g., through a mitigation agreement), must be based on a risk-based analysis, conducted by the Committee, of the effects on the national security of the United States of the covered transaction, which must include an assessment of the threat, vulnerabilities, and consequences to national security related to the transaction. (CFIUS, 2026-07-29)
• Threat is a function of the intent and capability of a foreign person to take action to impair the national security of the United States. (CFIUS, 2026-07-29)
• Vulnerabilities are the extent to which the nature of the U.S. business presents susceptibility to impairment of national security. (CFIUS, 2026-07-29)
• If the Committee determines to resolve the identified national security risk arising from a transaction through mitigation measures, such mitigation must be reasonably calculated to be effective, allow for verifiable compliance, and enable effective monitoring of compliance and enforcement. (CFIUS, 2026-07-29)
• CFIUS staff prepared a risk matrix that provides a high-level description of the most common categories of national security risk that CFIUS identifies in its review of foreign investment transactions and an illustrative list of sample mitigation measures CFIUS may use to address such risks, outlining considerations relevant to threat, vulnerability, and consequence across eight categories: critical infrastructure; cybersecurity; information security; personal data security; product integrity; proximity concerns; supply assurance; and technology transfer. (CFIUS, 2026-07-29)
• CFIUS may use its mitigation authority only after determining that: other provisions of law do not provide adequate authority to address the national security risk; mitigation measures will resolve the national security risk; and the mitigation measures are reasonably calculated to: be effective; allow for compliance in an appropriately verifiable way; and enable effective monitoring of compliance with, and enforcement of, such measures. (CFIUS, 2026-07-29)

• The DOJ’s 2020 Merger Remedies Manual describes conduct remedies as “inappropriate except in very narrow circumstances” because they “substitute central decision making for the free market” and grow less well-tailored over time as markets change. (LegalClarity, 2026-05-19)
• Structural remedies – such as divestments – were always implemented and generally effective; however, behavioral remedies – such as price commitments, access obligations, or conduct changes – were often poorly enforced, partially implemented, or outright ineffective, with two-thirds of purely behavioral remedies either partially or completely ineffective. (Kluwer Competition Law Blog, 2025-03-26)
• Structural remedies are generally self-enforcing because they focus on replicating (or moving toward) pre-merger incentives and rely on market forces, whereas behavioural remedies generally require monitoring to enforce, which may be costly and imperfect. (Lexology, 2020-10-22)
• The DOJ and FTC have each expressed a preference for structural remedies over behavioural remedies for both horizontal and vertical mergers because of their simplicity, effectiveness and lack of required monitoring. (Lexology, 2025-10-31)
• Among challenged mergers in the US with publicly disclosed remedies, only 13 per cent of such mergers involved purely behavioural remedies between 1999 and 2003, and this share decreased further to 6 per cent between 2017 and 2021. (Lexology, 2025-10-31)
• Mergers cleared with asset divestitures raised prices by 5.6 percent on average, and those with behavioral remedies by more than 13 percent on average. (Competition Policy International, 2024-02-08)

• OFAC’s 50 Percent Rule states that the property and interests in property of entities directly or indirectly owned 50 percent or more in the aggregate by one or more blocked persons are considered blocked. (Office of Foreign Assets Control, 2014-08-13)
• Indirectly, as used in OFAC’s 50 Percent Rule, refers to one or more blocked persons' ownership of shares of an entity through another entity or entities that are 50 percent or more owned in the aggregate by the blocked person(s). (Office of Foreign Assets Control, 2014-08-13)
• Sham transactions occur when blocked persons, often operating through proxies or other intermediaries, effectuate transfers or establish arrangements that conceal—rather than genuinely extinguish—a continuing interest in property. (Office of Foreign Assets Control, 2026-03-31)
• OFAC implements functional definitions of “interest” and “property interest” that look beyond legal formalities to underlying practical and economic realities. (Office of Foreign Assets Control, 2026-03-31)
• The CDD Rule defines 'beneficial owner' as each of the following: Each individual, if any, who, directly or indirectly, owns 25% or more of the equity interests of a legal entity customer (i.e., the ownership prong); and an individual with significant responsibility to control, manage, or direct the legal entity customer (i.e., the control prong). (Financial Crimes Enforcement Network, 2016-07-19)
• Beneficial ownership is determined under both a control prong and an ownership prong under the Beneficial Ownership Rule. (FFIEC BSA/AML Examination Manual)

• Guidance comprises two categories of documents identified in the Administrative Procedure Act (APA): interpretative (or interpretive) rules and general statements of policy. (Congressional Research Service / Library of Congress, 2021-04-19)
• Agencies often issue statements that, unlike legislative rules, do not carry the force of law; these statements include interpretative rules, which advise the public of an agency's interpretation of the statutes and regulations it administers, and general statements of policy, which advise the public about an agency's intended use of its discretionary authority. (Congressional Research Service / Library of Congress, 2021-04-19)
• “Interpretive rules,” by contrast, are “issued . . . to advise the public of the agency’s construction of the statutes and rules which it administers,” do not require notice-and-comment rulemaking, and “do not have the force and effect of law.” (U.S. Supreme Court, 2015-03-09)
• The Attorney General’s Manual on the Administrative Procedure Act defines “general statements of policy” as agency statements “issued . . . to advise the public prospectively of the manner in which the agency proposes to exercise a discretionary power” and “interpretive rules” as “rules or statements issued by an agency to advise the public of the agency’s construction of the statutes and rules which it administers.” (Administrative Conference of the United States, 2019-08-08)
• Legislative rules are substantive regulations that agencies issue to implement their statutory authorities and, subject to some exceptions, agencies must conduct notice-and-comment rulemaking before adopting legislative rules. (Administrative Conference of the United States, 2024-03-20)
• Non-legislative rules include interpretive rules and policy statements, which are often called guidance documents; agencies use non-legislative rules to explain what they think the statute means or how they may enforce it, without necessarily binding the agency or the public. (Administrative Conference of the United States, 2024-03-20)

• There is no centralized online repository for materials including settlements in agency enforcement proceedings. (Administrative Conference of the United States, 2023-04-13)
• Agency settlements are scattered across individual agency websites to the extent they are available online at all. (Administrative Conference of the United States, 2023-04-13)
• Many agencies proactively disclose settlement agreements on their websites. (Administrative Conference of the United States)
• The Department of Justice publishes notices of proposed consent decrees in the Federal Register with links to the decrees and comment procedures. (United States Department of Justice, 2015-04-14)
• The Federal Reserve Board makes all final enforcement orders public and searchable in a database on its website. (Board of Governors of the Federal Reserve System, 2025-01-15)

• UK National Security and Investment Act decisions, including notices of final orders, are published on the Cabinet Office section of the gov.uk national-security page. (GOV.UK, 2026-01-15)
• Australia's Foreign Investment Review Board (FIRB) operates under foreigninvestment.gov.au, the official site providing guidance, proposal submission, and regulation details for foreign investment outcomes. (Foreign Investment Review Board)
• FIRB notifications and compliance for actions after no objection notifications are handled via forms and reporting on foreigninvestment.gov.au under the Foreign Acquisitions and Takeovers Act 1975. (Foreign Investment Review Board)

• The DG Competition case search at https://competition-cases.ec.europa.eu/search contains the public versions of Commission decisions on antitrust and cartel cases (since 1999), mergers (since 1990), and state aid (since 2000). (Directorate-General for Competition, 2026-09-25)
• Public versions of Commission decisions adopted under Regulation (EC) No 1/2003 are published on the DG Competition website after redaction of confidential information. (European Commission)
• Merger case publications, including public versions of decisions, are available via the dataset at https://competition-cases.ec.europa.eu/search with coverage from November 1990. (Directorate-General for Competition, 2025-03-13)
• Antitrust and cartel case publications, including public versions of decisions, are available via the dataset at https://competition-cases.ec.europa.eu/search with systematic publication from the early 2000s. (Directorate-General for Competition, 2025-03-13)
• State aid decisions are published in the Official Journal of the European Union (C series) and non-confidential versions are made available in the State aid register on the Commission's competition website. (European Commission, 2024-11-28)
• Summaries of certain merger, antitrust, and state aid decisions, including Hearing Officer reports and Advisory Committee opinions, are published in the Official Journal. (European Commission)

• CFIUS does not publicly confirm or deny that a transaction has been notified to CFIUS, and information filed with the Committee including mitigation agreements is confidential under section 721 and exempt from FOIA disclosure. (U.S. Department of the Treasury)
• Examples of mitigation measures negotiated and adopted by CFIUS are available in the CFIUS Annual Report to Congress. (U.S. Department of the Treasury)
• The Department of the Treasury releases CFIUS Annual Reports to Congress containing statistics on transactions reviewed, mitigation agreements, and presidential decisions. (U.S. Department of the Treasury, 2026-08-07)
• Presidential orders regarding CFIUS transactions are published in the Federal Register. (U.S. Government Publishing Office, 2025-06-20)

• The DOJ Antitrust Division publishes public documents from its Matter Tracking System, including complaints, final judgments, and consent decrees for merger and other cases, on its website at https://www.justice.gov/atr. (U.S. Department of Justice)
• The official public listing of Antitrust Division case filings, including civil merger cases with documents such as complaints and judgments, is available at https://www.justice.gov/atr/antitrust-case-filings. (U.S. Department of Justice)
• The FTC maintains a public database of cases and proceedings at https://www.ftc.gov/legal-library/browse/cases-proceedings that lists administrative dockets for merger consent orders, including matter/file numbers and docket numbers such as C-4832. (Federal Trade Commission)
• FTC merger consent orders are issued under Part 2 Consents in its administrative process and posted with supporting documents on individual matter pages in the cases and proceedings database. (Federal Trade Commission, 2026-05-22)

• OFAC publishes sanctions designations and SDN List updates on its website at ofac.treasury.gov via recent actions pages that detail additions, removals, and changes with names, identifiers, and program codes such as [IRAN-EO13902]. (Office of Foreign Assets Control, 2026-10-15)
• The SDN List and updates are available for download in multiple formats including PDF, XML, and delimited files through the Sanctions List Service at sanctionslist.ofac.treas.gov. (Office of Foreign Assets Control)
• Archive of changes to the SDN List consists of annual PDF files (sdnnewYY.pdf) from 2001 to present and text files from 1994 to 2023 hosted at treasury.gov/ofac/downloads/. (Office of Foreign Assets Control)
• OFAC does not maintain historic or archived versions of its actual sanctions lists and only maintains active versions for policy and legal reasons. (Office of Foreign Assets Control)

• The Federal Register is the official daily journal of the United States Government published every Federal working day by the Office of the Federal Register within the National Archives and Records Administration. (National Archives)
• The Federal Register contains Federal agency regulations, proposed rules and public notices, executive orders, proclamations, and other presidential documents. (National Archives)
• Each issue of the Federal Register is organized into four categories: Presidential Documents, Rules and Regulations, Proposed Rules, and Notices. (National Archives)
• On Federalregister.gov, users can access Search/Advanced Search for Federal Register documents from 1994 through today. (National Archives)
• On Govinfo.gov, users can search the Federal Register for all documents from 1936 through today or browse by date. (National Archives)
• The table of contents at the beginning of every Federal Register issue is organized alphabetically by agency and lists all documents with page spans. (National Archives)