Scope & Methodology
Scope & Methodology
The below aggregates all identified material regulatory updates, consultations, proposed legislation, major enforcement actions, and official guidance on Artificial Intelligence released by key global regulators and other trusted sources, strictly within the timeframe of March 28, 2026 – April 27, 2026.
Each entry is mapped by geography, regulatory authority, sector, and risk domain, with source links, and summaries. Official press release pages, agency archives, newsletters, recognised regulatory trackers, consultation portals, and major government gazettes were reviewed for the following bodies: FDA, EMA, SEC, EPA, FTC, FCC, NIST, EDPB, ENISA, European Commission, legislation.gov.uk, Canada Gazette, and key APAC regulators (including China, Singapore, Japan, South Korea, Australia, India, and Thailand).
Note: This is a light edition. A comprehensive cross-jurisdictional review of US, EU, UK, Canada, and APAC regulatory sources found no new AI-specific laws, enforcement actions, or consultations issued between March 28 and April 27, 2026. The entries below reflect the only material developments identified in this window.
Table of Contents
1. European Union
ENISA (EU Agency for Cybersecurity)
Title: Emerging Cybersecurity Technologies Radar Methodology
Citation/Identifier: April 2026
Regulator: ENISA (European Union Agency for Cybersecurity)
Jurisdiction/Region: European Union
Status: Published (April 2026) — Background/Methodological Document
Domain/Risk Area: Cybersecurity, AI in R&D and National Frameworks
Key Obligation Summary: Publication addresses AI trends within cybersecurity R&D and ENISA's methodology for tracking emerging technologies. The document does not establish AI-specific regulatory obligations, consultations, or enforcement for the period. It is relevant as background context for organisations monitoring AI's role in the evolving cybersecurity regulatory landscape.
Title: National Capabilities Assessment Framework 2.0
Citation/Identifier: April 2026
Regulator: ENISA (European Union Agency for Cybersecurity)
Jurisdiction/Region: European Union
Status: Published (April 2026) — Framework Document
Domain/Risk Area: Cybersecurity, AI in National Security Frameworks
Key Obligation Summary: Presents updated frameworks to encourage adoption of AI-based solutions for national cybersecurity capability assessment. No new regulatory requirements, compliance obligations, or formal consultations targeting AI were published within the period. Relevant for organisations engaged in national cybersecurity strategy and AI infrastructure planning.
Status: Background and methodological documents only; no new AI regulatory obligations created for market actors.
European Commission
Title: EU AI Act Guidance Delay Notification
Citation/Identifier: April 2026
Regulator: European Commission
Jurisdiction/Region: European Union
Status: Policy Update — Guidance Timeline Revision
Domain/Risk Area: AI Regulation, EU AI Act Implementation, Compliance Planning
Key Obligation Summary: The Commission formally acknowledged delays in publishing comprehensive AI Act guidance, now expected later in 2026. No formal guidance, new obligations, consultations, or enforcement releases on AI were issued within the last 30 days. Existing compliance deadlines under Article 5 (prohibited practices) and the broader Act remain unchanged. Organisations should continue preparation for existing milestones and monitor official channels for when delayed guidance is released.
Status: Formal communication of delay; no change to compliance deadlines. Ongoing preparation for existing milestones is recommended.
2. Asia-Pacific (APAC)
Thailand
Title: Thai FDA Adopts Huawei Cloud AI for Internal Regulatory Processing
Citation/Identifier: April 7, 2026
Regulator: Thai Food and Drug Administration (Thai FDA) — internal operational adoption
Jurisdiction/Region: Thailand (APAC)
Status: Operational Announcement — Internal Government AI Adoption (not a regulatory change)
Domain/Risk Area: Regulatory Process Innovation (Government AI Operations)
Key Obligation Summary: Thailand's FDA publicly announced adoption of AI — delivered via Huawei Cloud — to enhance product registration review efficiency by up to threefold. This is an internal government operational development; it does not constitute a new AI regulation, enforcement action, or compliance obligation for external organisations. No new Thai AI regulatory requirements, enforcement actions, or consultations targeting regulated parties were published in this window.
Status: Internal government operational event. No compliance implications for regulated organisations.
