Cycle on Sep 28, 2026

I'll start this research cycle by checking the open threads and prior notes for this topic.

I have a clear picture of the topic's state. Today is September 28, 2026, and there are several imminent watches: Italy's Decree 160 (currency date Sept 30), California's "No Robo Bosses Act" SB 947 (signing deadline Sept 30), and Connecticut SB 5 (effective Oct 1). Plus open litigation watches (Buist v. Anthropic, Tumbler Ridge forum non conveniens, Kistler v. Eightfold, BC sovereign suit) and an open question on the EU GDPR/ePrivacy omnibus strand. Let me check these catalysts and scan for new developments.

Italy's Decree 160 is confirmed to enter into force September 30 (not yet — watch hasn't fired), SB 947 is still pending with a Sept 30 deadline, and Buist v. Anthropic is proceeding with new coverage. Let me check the remaining litigation watches and the EU GDPR omnibus question.

Major development: British Columbia has officially filed its lawsuit against OpenAI in U.S. federal court — that fires the BC sovereign lawsuit watch. Let me fetch the primary sources to confirm details, plus the Italy criminal-law analysis and the Connecticut SB 5 pre-effective-date briefing.

Excellent — three big confirmations: (1) British Columbia filed its lawsuit against OpenAI in San Francisco federal court on September 21 — that fires the BC watch; (2) Italy's Decree 160 gets detailed Art. 437-bis analysis from Oxford (enters force Sept 30 — watch not yet fired); (3) Connecticut's CART Act has a major effective-date correction — the AEDT notice duties don't bind until Oct 2027, while four other duties bind Oct 1. Let me get the Buist litigation update and check the EU GDPR omnibus strand and any other fresh developments.

The Buist docket is now rich with detail (summonses issued Sept 21, Google cast as architect of the coordination venue). And the EU GDPR omnibus strand shows major September movement: Irish presidency compromise texts with a new Article 25a pseudonymization definition and a dropped opt-out from the AI legitimate-interest clause. Let me fetch the primary reporting on that and check two other items — a possible chatbot First Amendment ruling and the Meta layoff litigation.

I have strong evidence from this cycle. Now I'll persist the findings as notes, starting with the two most significant: the BC sovereign lawsuit filing and the EU GDPR omnibus strand developments.

Both notes saved. Now the Connecticut effective-date correction and the Italy Article 437-bis anatomy — both time-critical for compliance teams.

Four notes saved. Now the remaining three updates: California's executive order and bill deadline, the DOJ–RealPage algorithmic-pricing consent decree, and the Buist pacing litigation docket developments.

Now the Buist v. Anthropic docket update, then I'll close out the watch bookkeeping.

All findings are persisted. Now I'll record the watch event for British Columbia's filing (the one_shot watch has fired) and register a new watch for California's EO N-9-26 feasibility report due November 16.

The cycle is complete. Here's a summary of what this research cycle surfaced: ## Cycle Summary — September 28, 2026 **Watch fired (1):** - 🟢 **British Columbia sovereign lawsuit filed** — BC sued OpenAI and Sam Altman in N.D. Cal. on September 21, 2026 ("aiding and abetting a mass shooting" + product defect liability), creating a direct forum collision with OpenAI's motions to send the 37 victims' cases to Canada. Watch resolved. **Findings written (7 — 1 new, 6 updates):** 1. **BC v. OpenAI filing** (`global-ai-product-liability-sovereign-actions`) — complaint quotes, relief sought, the forum irony, and the duty-to-warn doctrine stakes. 2. **EU Digital Omnibus GDPR strand** (new: `eu-digital-omnibus-gdpr-strand-2026`) — the Irish Presidency's September 3 compromise would let AI training proceed on legitimate interest with the Commission's safeguards (including the unconditional right to object) struck from the operative text; new Article 25a would recast pseudonymized data out of GDPR scope; Germany wants an outright presumption; Schrems calls it "digital expropriation." Council and Parliament positions still open. 3. **Connecticut CART Act correction** (`connecticut-sb5-ai-employment-law-2026`) — the AEDT notice duties everyone briefed for October 1 actually attach October 1, **2027**; four different duties bind October 1, 2026 (provenance marking, subscription written acceptance, WARN-AI disclosure, and removal of the "automated tool" defense in discrimination cases). 4. **Italy Decree 160 anatomy** (`italy-decree-160-ai-criminal-civil-liability-2026`) — Oxford's clause-level analysis of Art. 437-bis: omission offence across the high-risk AI lifecycle, corporate liability via the 231 regime, concrete-danger threshold, in force September 30. 5. **California endgame** (`california-workplace-ai-legislative-blitz-2026`) — EO N-9-26 floats frontier kill-switch feasibility (report due Nov 16) as eleven bills including the No Robo Bosses Act await the Sept 30 signing deadline. 6. **DOJ–RealPage consent decree** (`algorithmic-pricing-antitrust-liability-ab325-2026`) — first federal remedy reaching an algorithm's **training data** provenance, not just live inputs. 7. **Buist v. Anthropic docket** (`ai-pacing-antitrust-lawsuit-2026`) — summonses issued Sept 21; complaint casts Google as architect of the coordination venue; no MTD yet. **New watch registered:** California GovOps EO N-9-26 feasibility report (Nov 16, 2026). **Still pending (next cycles):** Italy decree in force (Sept 30), SB 947 decision (Sept 30), Connecticut effective date (Oct 1), Tumbler Ridge FNC ruling, Kistler/Eightfold written order, Buist MTD, EU GDPR omnibus final text.

The research cycle is now complete. This cycle tracked a dense week of catalysts: the BC sovereign lawsuit firing its watch, two imminent regulatory effective dates (Italy's criminal AI-liability decree on Sept 30, Connecticut's CART Act first tranche on Oct 1) with materially important new detail on both, a major state-of-play shift in the EU's GDPR omnibus negotiations, and federal antitrust developments (RealPage training-data remedy, Buist docket). All findings are persisted with verbatim quotes and linked sources, and the forward-looking triggers are registered for the next cycle to check.