TODAY'S TOP STORY

EU Digital Omnibus Trilogue Targets April 28 Agreement

The European Parliament and Council have adopted negotiating positions on the Digital Omnibus package amending the EU AI Act, and the Cypriot Presidency is pushing for political agreement at the second trilogue on April 28 — just 20 days away. Both institutions are aligned on fixed high-risk system deadlines and a new Article 5 prohibition on non-consensual AI-generated intimate imagery.

Key disputes remain on watermarking timelines — Parliament wants November 2, 2026 while the Council prefers February 2, 2027 — and whether AI literacy requirements should be mandatory or framework-led.

Why it matters: This is the last legislative window before the AI Act's general application date on August 2. Agreement would lock in amended compliance timelines and establish the first EU-wide ban on non-consensual AI intimate imagery. Failure leaves organizations planning against an uncertain regulatory baseline.

What to do: Assess your watermarking compliance readiness under both the November 2026 and February 2027 scenarios, and review the new Article 5 prohibition scope.

ALSO TODAY

California Governor Signs AI Procurement Executive Order

Governor Newsom's Executive Order N-5-26 (March 30) requires AI vendors seeking state contracts to disclose policies on illegal content, civil rights, bias, and safety. CDT has 120 days to develop first-in-nation watermarking best practices. Review disclosure requirements now if you bid on California contracts.

Three States Enact Chatbot Safety Laws in Q1 2026

Washington (HB 2225), Oregon (SB 1546), and Idaho (SB 1297) all enacted chatbot safety laws. Oregon's is the first with a private right of action. 78 chatbot bills pending across 27 states. Assess chatbot compliance with Oregon's disclosure requirements now.

Colorado AI Act: 83 Days to First US AI Enforcement

SB 24-205 enforcement begins June 30 with AG-exclusive authority and $20,000/violation penalties. 60-day cure period available after AG notice. Governor Polis's draft replacement bill could change scope. Complete impact assessments by mid-May.

⚠ DEADLINE ALERTS

April 28, 2026 (20 days) — EU Digital Omnibus second trilogue targeting political agreement on AI Act amendments. Outcome determines high-risk system compliance timelines and watermarking deadlines.

June 30, 2026 (83 days) — Colorado AI Act enforcement begins. Impact assessments, transparency disclosures, and anti-discrimination safeguards required for high-risk automated decision systems.

ONE THING TO DO TODAY

Prepare your organization's position on the EU Digital Omnibus watermarking timeline. With the trilogue just 20 days away, assess whether you can meet a November 2, 2026 deadline (Parliament) or need the Council's February 2, 2027 timeline — your compliance roadmap depends on which prevails.

Tomorrow: Weekly Deep Dive newsletter (check your inbox Thursday morning)

CyberEyeQ — Actionable Regulatory Intelligence

This newsletter is for informational purposes only and does not constitute legal advice. Consult qualified legal counsel for compliance decisions specific to your organization.

Contact us: [email protected]

Keep Reading