grep -rl "policy" ./articles
31 August was Cook's last day as Apple CEO after about 15 years, but the transition was announced on 20 April and he has not left the company. He moves to executive chairman with a remit that explicitly includes engaging with policymakers — in the same month Apple's encryption fight with the UK Home Office reaches a tribunal.
Two categories are authorised: cyber surveillance without owner authorisation, and operations to disrupt, deny, degrade or destroy. The National Coordination Center has 60 days to stand up the programme. Existing US law prohibits exactly this.
The Water Cyber Shield Act would give the EPA explicit cyber authority and $300m a year. Separately, DEF CON Franklin and the rural water association launched a monitoring centre funded by Craig Newmark.
The UK dropped its first secret order in 2025 after American pushback. It issued a second. Apple has now filed a complaint with the Investigatory Powers Tribunal, and the underlying demand is unchanged: access to backups that are end-to-end encrypted by design.
Reported almost everywhere as a $1 billion fine, the figure is €890 million: €460m for preferencing its own services in Search and €430m for restricting how developers steer users to cheaper deals. The consequence that matters is what happens after day 60.
The DPDP Rules were notified on 14 November 2025 with an 18-month runway to May 2027. But the soft-enforcement phase ends on 13 November 2026, legacy data must be revalidated by then, and penalties reach ₹250 crore.
xAI sued in April, the Justice Department intervened two weeks later, and SB24-205 came into force on 30 June regardless. No court has enjoined it and no federal statute preempts it, which makes the compliance obligation entirely real.
Regulation (EU) 2026/1744 entered into force on 27 July, moving Annex III high-risk obligations to December 2027 and embedded systems to August 2028. Prohibitions, GPAI rules and transparency duties are unaffected — and already in force.