The Lyceum: Tech Policy & Regulation Weekly — Apr 30, 2026

Today is FERC's court-ordered deadline to publish its large-load interconnection rule — the document that decides whether the federal government, not the states, gets to regulate how data centers plug into the grid. Whatever lands today will be sued before the week is out. Around it: Maryland became the first state to ban algorithmic surveillance pricing in grocery stores (with loopholes you could push a cart through), the EU turned an Android interoperability case into an AI access fight, plaintiffs' lawyers found a way around Section 230 by suing AI developers under product-liability theory, and Commerce Secretary Howard Lutnick asked Congress for 290 new BIS export enforcement agents. The connective tissue across all of it: regulators have stopped writing aspirational frameworks and started filing dockets, hiring agents, and serving warning letters. Compliance just became operational.

• Harvey at Slaughter and May (Harvey): Magic Circle firm rolls out Harvey firmwide after pilot — enterprise legal AI moves from experiment to standard issue.
• Vault (LegalOn): U.S. and Europe launch of a contract repository that pushes LegalOn into CLM territory, not just review.
• Soren Private AI (Soren, Y Combinator–backed): Launches "private AI" aimed at regulated sectors handling sensitive material — sovereign architecture as compliance product.
• Noxtua + Midpage (Noxtua): Europe's "sovereign legal AI" platform integrates U.S. legal data, giving multinationals a jurisdiction-aware research stack.
• Chamelio Agentic Features (Chamelio): New agentic capabilities for in-house legal teams — workflow automation rather than chat-window assistance.
• Legora Series D Extension (Legora): NVIDIA's NVentures and Atlassian join $50M extension, bringing the round to $600M total.

If you're building, financing, or siting a data center anywhere in the United States, the most consequential regulatory document of 2026 is not an AI bill. It's whatever FERC publishes today in Docket No. RM26-4-000.

FERC faces an April 30 court-ordered deadline to finalize a rule extending its role in how data centers and other large loads over 20 MW connect to transmission grids — a domain historically left to the states. According to Engineering News-Record, Energy Secretary Chris Wright directed FERC to develop the rule as AI hyperscalers push for expedited connections while utilities and state regulators warn about reliability and ratepayer cost shifts.

The fight is about money and jurisdiction simultaneously. FERC's proposal adopts a 100% participant funding model: large loads pay the full cost of the network upgrades they trigger. The Center for Strategic and International Studies frames this as straightforward cost causation — if a data center connects in a constrained pocket of the grid, it should pay for the transmission it requires. But as White & Case notes, "interconnection processes for new generating facilities are under FERC jurisdiction while the interconnection of large loads is conducted at the state level." That gap is exactly what FERC is trying to close — and exactly what state utility commissions will challenge in court within days.

What success looks like: a final rule that survives early stay motions and gives hyperscalers a faster, federally supervised path to interconnection.

What failure looks like: an emergency stay from the D.C. Circuit, or jurisdictional carve-outs that let state PUCs reassert primary authority over retail load. Watch the litigation docket within 72 hours of publication.

If your company runs AI-driven pricing tools anywhere near consumer-facing retail, Maryland just handed every other state attorney general a template — and a checklist of what to fix.

Governor Wes Moore signed the Protection From Predatory Pricing Act on Tuesday, making Maryland the first state to ban dynamic pricing and the use of an individual's personal data to raise grocery prices. Prices must remain fixed for at least one business day, and electronic shelf labels cannot be used for surge pricing. Violations are unfair or deceptive trade practices under Maryland's consumer protection statute, with first-offense civil penalties up to $10,000 and subsequent penalties up to $25,000.

Consumer Reports flagged the structural weaknesses: the ban applies only to using personal data to set higher prices without establishing a baseline, applies to individuals but not "hyper-specific consumer segments," and exempts loyalty and membership programs entirely. Per Kiplinger, there is no private right of action — only the Maryland AG can sue, and the AG must give companies 45 days to cure before further action.

What changes if this sticks: California, Colorado, Illinois, New Jersey, and New York are reportedly drafting copycat bills. The state that closes the loyalty-program loophole and adds a private right of action becomes the de facto national standard.

What to watch: the Maryland AG's first enforcement guidance, and whether the next state bill out the gate keeps the loyalty exemption. Effective October 1, 2026.

Plaintiffs' attorneys have found a way around the internet's most impenetrable legal shield, and they are pointing it at generative AI.

A new wave of class-action complaints alleges that AI chatbots encouraged minors to commit suicide. The legal mechanic is what matters: instead of treating the developer as a publisher of harmful third-party content — which would trigger Section 230 immunity automatically — the suits frame the chatbot's missing safety filters and engagement-optimizing reinforcement learning as a design defect. That moves the case from communications law into strict product liability.

If even one of these complaints survives a motion to dismiss, the discovery surface area is enormous: training datasets, model weights, internal red-team findings, safety-team Slack channels. That's commercial exposure (trade secrets) and regulatory risk (admissions usable in parallel proceedings) layered on top of damages.

What success for plaintiffs looks like: a published opinion holding that model architecture is a "product" subject to defect analysis. What failure looks like: dismissals on Section 230 grounds before discovery opens. The signal to watch: the first MDL consolidation order. If these cases get centralized in a plaintiff-friendly district, every frontier lab's litigation reserve doubles.

We flagged the April 13 IC designer cliff three weeks ago. The cliff landed. Now the grace period — and the work that should have started months ago — is in full swing.

Per Cleary's analysis, a chip designer is treated as an authorized IC designer for 180 days only if it meets BIS's criteria and has submitted an application for "approved" status. That window runs out in mid-October. After that, designers without formal approval lose access to the license exceptions that let TSMC, Samsung, and other allied foundries fabricate their designs without per-transaction licenses.

WilmerHale notes that BIS issued these requirements because designers were misrepresenting performance and end-use to fabricators, making accurate ECCN classification impossible. The application requires corporate-structure documentation, design-intent attestations, and end-use commitments — weeks of work to assemble.

What to watch: BIS application processing times. The agency hasn't published any. If the queue doesn't clear before October, late filers will be in regulatory limbo with no fallback license exception.

Separate from today's national rulemaking, FERC's December 2025 order forcing PJM — the grid operator serving 67 million Americans across 13 states and D.C. — to rewrite co-location rules is now in active implementation.

Per Heatmap News, a 1,000 MW data center co-located with a 900 MW power plant can now buy firm contract demand for just 100 MW from the grid, instead of being forced to take the full 1,000 MW of front-of-meter transmission service. That's a win for new builds.

For retrofits, it's the opposite. Commissioner Rosner's concurrence confirms that an existing generator cannot pull capacity off the grid to serve a co-located load until all reliability upgrades are in service — with costs allocated 100% to that generator. "Bring your own power" works for greenfield. Retrofitting an existing plant to feed a hyperscaler just got materially more expensive.

A companion development on Monday: FERC accepted PJM's reliability backstop tariff revisions. Rosner's concurrence makes the policy logic explicit — markets alone won't preserve reliability without state cooperation on permitting and siting.

The signal to watch: which hyperscaler is the first to publicly restructure a co-location deal under the new rules. That filing will tell you what the real economics look like.

Brussels reminded everyone this week that platform regulation is now AI regulation. The European Commission opened a consultation on draft measures Alphabet must take so that AI services can interoperate with Android under Article 6(7) of the Digital Markets Act. Comments are due May 13, 2026 — a compressed window that will catch product, competition, and legal teams flat-footed.

The Commission is explicitly soliciting input from AI service providers and device makers. That framing matters: the DMA is no longer just about app stores and search rankings. It is becoming the lever for shaping how AI assistants and agents plug into dominant operating systems.

What success looks like for challengers: a specification decision broad enough to become the template for AI access fights across other gatekeeper platforms. What failure looks like: a narrow Android-only fix that Alphabet implements with friction high enough to preserve default-assistant economics. Watch: which non-Google AI vendors file substantive comments. Their fingerprints will be all over whatever the Commission finalizes.

This is the kind of testimony that doesn't make the front page but rewrites the compliance calculus.

Per Roll Call, Commerce Secretary Howard Lutnick testified on April 24, 2026, before the House Appropriations Committee's Commerce-Justice-Science Subcommittee in support of a fiscal 2027 BIS budget request that adds 290 export enforcement agents and 23 support specialists at a cost of roughly $152 million. InsideTrade reports that BIS also wants 40 additional export control officers stationed abroad. Separately, Torres Trade Law summarizes BIS Assistant Secretary for Export Enforcement David Peters' February testimony urging Congress to extend the Export Control Reform Act's statute of limitations from five to ten years.

A doubled lookback window plus a doubled enforcement headcount is not a marginal change. Companies that have been treating BIS's historically limited bandwidth as an informal risk buffer should retire that assumption now. The recent Applied Materials settlement — approximately $252 million, the second-highest BIS penalty ever — is the new benchmark, not an outlier.

Signal to watch: whether the appropriations subcommittee marks up the request at full or reduced funding. Anything above 70% of the ask means the agency gets the runway it needs.

A FERC docket destined for a stay motion before sundown, a Maryland grocery law that exempts the loyalty program where most of the surveillance actually happens, and 290 new export agents Howard Lutnick wants Congress to hire so somebody can finally read the paperwork. Somewhere a plaintiffs' lawyer is drafting a "design defect" complaint against a chatbot, and somewhere else a chip designer who missed April 13 is just now Googling what an IC designer application looks like.

Stay sharp.

Forward this to the GC who keeps saying "we'll deal with it when there's a final rule." There is now.

The FDA approved the first gene therapy for genetic hearing loss — a landmark for the advanced therapy pathway and a preview of the next wave of regulatory questions. Read → The First Gene Therapy for Genetic Hearing Loss Just Got FDA Approval

GPT-5.5 launched as a platform bet, not just a model release — the agentic architecture has compliance implications the benchmarks didn't capture. Read → GPT-5.5 Is a Model and a Platform Bet

Britain rewrote its entire payments rulebook in a single sweep — a case study in how fast a determined regulator can move when it decides the framework is broken. Read → Britain Just Rewrote Its Payments Rulebook — All at Once