1. Executive Summary

• Nvidia's leadership implodes on national-security grounds. CEO Jensen Huang resigned November 12 after the board met late Wednesday, days after admitting an affair with a woman U.S. officials reportedly concluded was a Chinese intelligence asset; CFO Colette Kress is interim CEO. The scandal has already become a chip-policy story in Washington. (TechCrunch, Wired)
• Congressional momentum builds behind new AI-chip export restrictions. Lawmakers from both parties are demanding briefings and pressing the administration on export-control enforcement, including the paused Megaspeed investigation. (The Hill, The Hill)
• The EU's Digital Fairness Act gets concrete targets. Reporting names Duolingo, Strava and Ticketmaster among services caught by new rules on "dark patterns," streak mechanics and paid-influencer disclosure. (Wired)
• European public-sector cyber resilience under strain. Poland shut down its national e-government platform ePUAP after an attack, while Romania said it stopped a Russian state-linked espionage campaign against government email. (The Record, The Record)
• India's censorship-enforcement turn now targets the watchdogs. Delhi Police takedown requests hit digital-rights groups SFLC.in and IFF plus a censorship-tracking account — a notable escalation for intermediary liability and press freedom. (EFF)
• Russia escalates its VPN chokehold. VPN developers report their apps are again being removed from Apple's App Store in Russia, extending a years-long campaign against circumvention tools. (Techdirt)
• France's per-gigabyte data tax lasted five days. A budget amendment to tax data transfers by volume was dropped almost immediately after backlash — a signal of how volatile EU member-state digital-tax politics remain. (Techdirt)
• US: state and federal enforcers keep testing edge cases. New York alleges T-Mobile's 50GB cap on a low-income home-internet plan was illegal, and a federal court blocked an administration attempt to obtain journalists' LinkedIn messages. (Ars Technica, Ars Technica)
• Watch next week: whether Huang appears for a closed-door House briefing, movement on the trio of chip-export bills, the EU's Digital Fairness Act legislative path, and further Kalshi state-court rulings.

2. Global Top Stories

Nvidia CEO Jensen Huang resigns amid Chinese espionage allegations

• Source: TechCrunch · link · Wired · link · The Verge · link · The Hill · link
• What happened: Nvidia's board accepted Jensen Huang's resignation as CEO, president and board member on Thursday, effective immediately, following a late Wednesday night meeting. The trigger was reporting of two extramarital affairs — one with a Chinese businesswoman whom U.S. officials reportedly concluded was an intelligence asset, the other with an Nvidia executive who reported to him. CFO Colette Kress was named interim CEO. The company had opened an internal investigation, and Huang had acknowledged and apologized for the relationship with the Chinese national.
• Why it matters:
• The world's most strategically important AI-chip company changed leadership overnight, with no public succession plan.
• U.S. national-security scrutiny of the CEO's foreign ties now intersects directly with export-control policy on advanced AI chips.
• Analysis: the episode is likely to harden congressional appetite for tighter restrictions on chip sales abroad, regardless of the company's own lobbying.
• Outlook: Congressional committees have demanded a closed-door briefing; a shareholder suit is already filed (see US Courts). Nvidia shares swung sharply during the week and the board has not announced a permanent CEO search process — see source.

EU Digital Fairness Act takes aim at dark patterns and paid influence

• Source: Wired · link
• What happened: The European Union's new Digital Fairness Act targets "dark patterns" across consumer platforms and services, with reporting identifying Duolingo, Strava and Ticketmaster among the services in scope. Among the headline obligations: users can turn off winning-streak mechanics, and influencers must disclose when they are being paid. The rules are aimed at manipulative interface design and undisclosed commercial persuasion.
• Why it matters: Consumer-facing digital services across the EU face design-level compliance obligations, not just disclosure. Subscription, gamification and influencer-marketing models are the immediate exposure areas for U.S. and global platforms.
• Outlook: The measure now moves through the EU legislative process; implementing detail on enforcement and penalties is still to be defined — see source.

Poland shuts down national e-government platform after cyberattack

• Source: The Record · link
• What happened: Poland shut down ePUAP, its nationwide platform for submitting official documents, communicating with government agencies and completing administrative procedures online, following a cyberattack. The shutdown cut off a core digital channel between citizens and the state.
• Why it matters: Critical public-service infrastructure remains a prime target and a single point of failure; taking a national portal offline is itself a significant service disruption. Analysis: expect renewed EU-level pressure on public-sector network security and incident-reporting discipline.
• Outlook: Restoration timeline and attribution are not established in the reporting — see source.

Romania says it stopped Russian cyber-espionage against government email

• Source: The Record · link
• What happened: Romania's intelligence agency said it halted a cyber-espionage campaign by Russian state-linked hackers before the group could exfiltrate sensitive data. The operation targeted government email systems.
• Why it matters: Confirms continued state-directed targeting of NATO-member government communications; email remains the most exploited entry point. The case will feed into EU and NATO discussions on attribution and collective response.
• Outlook: No public indication yet of sanctions or formal attribution measures — see source.

India: Delhi Police takedown orders hit digital-rights watchdogs

• Source: EFF · link
• What happened: On November 3, SFLC.in received X notifications that Delhi Police had issued takedown requests covering 42 URLs. Targets included accounts and posts belonging to SFLC.in, the Internet Freedom Foundation and the censorship-tracking account @geoblockedindia, as well as posts documenting legal notices and instances of online censorship.
• Why it matters: Takedowns aimed at transparency documentation, rather than at the underlying content, raise direct Article 19-style speech concerns and complicate intermediary safe-harbour compliance for platforms operating in India.
• Outlook: Whether platforms comply, and whether the requests are challenged in Indian courts, is the next test; no ruling is reported.

France's per-gigabyte data tax amendment withdrawn after five days

• Source: Techdirt · link
• What happened: French lawmakers slipped an amendment into the budget bill to tax data by volume; it was dropped roughly five days later.
• Why it matters: A volume-based data tax would have been operationally unworkable for cloud, CDN and content platforms and out of step with EU single-market rules. Its rapid reversal shows how fragile member-state digital-tax experimentation remains.
• Outlook: Analysts should expect the underlying revenue-raising impulse to resurface in other forms — see source.

U.S. indicts Iran-backed network that directed attacks over FaceTime

• Source: The Record · link
• What happened: An indictment unsealed Tuesday describes an Iran-backed network directing attacks via FaceTime, in a broader campaign targeting Jewish and American sites that included synagogues in Belgium, the Netherlands and London and U.S. bank buildings in Amsterdam and Paris.
• Why it matters: Consumer communications platforms are being used operationally to coordinate physical attacks, sharpening the policy debate over lawful-access, detection and platform cooperation in Europe.
• Outlook: Prosecution and any extradition or sanctions follow-on remain pending — see source.

Russia again pulls VPN apps from Apple's App Store

• Source: Techdirt · link
• What happened: VPN developers report their apps are again being removed from Apple's App Store in Russia, continuing a pattern of pressure on circumvention tools.
• Why it matters: App-store gatekeeping is being used as a censorship chokepoint; the episode also puts pressure on platform transparency reporting about government removal demands.
• Outlook: Expect further removals and continued criticism of Apple's compliance posture — see source.

Kazakhstan-linked hackers used an AI agent to spy on Central Asian governments

• Source: The Record · link
• What happened: New research indicates suspected Kazakhstan-linked hackers used an artificial intelligence agent to help spy on Central Asian governments, steal sensitive documents and infiltrate critical-infrastructure networks.
• Why it matters: This is one of the clearer public cases of agentic AI used in live espionage operations, strengthening the case for AI-specific controls in national cyber-defence policy.
• Outlook: Attribution is contested and research-based; expect follow-on briefings from Western cyber agencies — see source.

European bomb hoaxes traced to a compromised university email account

• Source: The Record · link
• What happened: Bomb threats sent to thousands of schools across Europe this week originated from a compromised email account at a Taiwanese university — the latest in a series of hoaxes that have targeted airports and newsrooms using messages sent from legitimate institutions.
• Why it matters: Attackers are exploiting institutional trust rather than technical sophistication, complicating investigation and blocking. It also raises account-security obligations for universities and public bodies as a de facto security-policy question.
• Outlook: Attribution and any coordinated European response are unresolved — see source.

3. 🇺🇸 United States Focus

Congress & Legislation

• Nvidia summoned, and the chips debate shifts. House Republicans called on Huang to appear for a closed-door briefing, with Democrats joining demands for investigations spanning intelligence, foreign relations and banking committees; Sen. Kevin Cramer (R-N.D.) said publicly that Huang should resign, a position echoed by former Trump adviser Larry Kudlow. Reporting ties the episode to fresh momentum behind a trio of bills restricting chip sales abroad. (TechCrunch, The Hill, The Hill)
• Bennet presses DOJ and Commerce on Megaspeed. Sen. Michael Bennet (D-Colo.) sent a letter Tuesday to Justice and Commerce leadership over the investigation into cloud/data-center firm Megaspeed, after reports that Commerce paused its probe last year. The letter links directly to allegations surrounding Alice Huang, the Chinese businesswoman at the center of the Nvidia affair reporting. (The Hill)
• Democratic tech agenda for the new Congress. The Tech Oversight Project circulated a memo, first shared with The Hill, urging Democrats to prioritize legislation on social media, AI and data centers in the first 100 days — an early marker of 2027 committee priorities. (The Hill)
• Wiener heads to Washington with an AI record. California state Sen. Scott Wiener, author of state AI-risk legislation, won the race for Nancy Pelosi's open San Francisco seat and is positioned to shape federal AI policy. (MIT Technology Review)

White House & Executive Actions

• Trump backs Huang — and confirms an FBI inquiry. The president publicly stood by Huang amid the espionage allegations; reporting notes Trump said the FBI is investigating the affair. Analysis: the episode is testing the durability of the administration's close alignment with AI-industry leadership on national-security questions. (The Hill, The Hill)
• Executive-branch IT security under renewed criticism. A Techdirt commentary piece argues that foreign intelligence has easy access to White House IT systems via proxy software, citing prior reporting on compromised devices and improvised Starlink installations. This is opinion journalism rather than an official finding — treat the specific claims as contested. (Techdirt)

Federal Agencies (FTC, FCC, DOJ, SEC, CFPB, NIST, Commerce / BIS, NTIA)

• FCC nominations turn into a referendum on Chairman Carr. Democrats are opposing a plan they characterize as stacking the FCC with Republicans and are signaling probes of Chairman Brendan Carr; they accuse a nominee of evading questions about Carr, her current boss. (Ars Technica)
• FAA moves off floppy disks. The FAA said its information display systems will be floppy-disk-free at 435 sites by the end of 2028, calling the upgrade "historic." A reminder that federal IT modernization schedules run on multi-year horizons. (Ars Technica)
• Medicare's AI review program draws a transparency suit. EFF says it sued for records on WISeR, a program launched in January that uses AI to evaluate Medicare beneficiaries' requests for certain procedures, arguing the public needs visibility into how private AI systems shape treatment approvals. (EFF)
• Commerce/BIS enforcement scrutiny continues via the Bennet letter on Megaspeed (above), which asks DOJ and Commerce to account for the status of a probe that reporting says was paused.

State-Level Action (California, Texas, New York, Colorado, and others)

• New York: T-Mobile's low-income data cap challenged. New York alleges T-Mobile illegally imposed a 50GB cap on a low-income home-internet plan, throttling speeds to roughly 600Kbps after the cap despite a requirement for 25Mbps service. (Ars Technica)
• California: session ends with a mixed digital-rights ledger. EFF's recap of the 2026 session — the second year of a two-year cycle — tracks nearly 100 monitored bills covering 3D printers, platform access, police and commercial surveillance, and workplace data. (EFF)
• Michigan: utilities sue over an anti-corporate-money ballot measure. After voters approved a proposition curtailing utility spending on elections amid rising electricity costs, utilities sued, arguing the measure limits their free speech — a data-center-era fight over energy politics. (Wired)
• Local permitting becomes the AI-infrastructure battleground. Reporting from Data Center Alley in Ashburn, Virginia, and on project pipelines suggests the data-center backlash is substantially an electricity-cost and siting fight, with many announced projects unlikely to be built. (MIT Technology Review, TechCrunch)

US Courts & Litigation

• Administration loses bid to access journalists' LinkedIn DMs. A court ruled against the government's effort to obtain LinkedIn messages of journalists, holding that confidential sources are the "lifeblood" of a free press. (Ars Technica)
• EFF and ACLU push for a warrant requirement for ALPR searches. The groups filed an amicus brief in the Sixth Circuit in United States v. Sturdivant, arguing that warrantless use of a nationwide automatic license plate reader network is a Fourth Amendment search. Separately, Attorney General Todd Blanche drew criticism for dismissing ALPR privacy concerns. (EFF, Techdirt)
• Kalshi keeps losing in state-gambling fights. Judges have refused to block state gambling laws against the prediction-market operator, and a man who lost $308,000 on sports bets sued Kalshi to recover losses, arguing online betting is illegal in Washington state. (Ars Technica, Ars Technica)
• Supreme Court forecloses an avenue for tech human-rights claims. In Cisco Systems, Inc. v. Doe I, the Court further narrowed the Alien Tort Statute, effectively ending — absent new legislation — suits against technology companies for aiding and abetting international-law violations. (EFF)
• Nvidia faces a shareholder class action over the spy affair. A shareholder sued Nvidia and Huang, alleging investors were misled in the company's responses to media reports about the relationship. (The Hill)
• ChatGPT-linked murder plot generates a lawsuit. A suit alleges a man introduced his wife to ChatGPT and she used it to plan his murder via poisoned energy drinks — an early test of AI-product liability theories. (Ars Technica)
• Patent challenge pipeline is drying up, EFF argues. EFF says PTAB petition filings have collapsed not because patent quality improved but because USPTO leadership is refusing to consider meritorious challenges. (EFF)

4. Regional & Global Roundup

European Union

• Digital Fairness Act takes aim at "dark patterns." Wired reports the EU's new digital fairness rules would let users switch off "winning streaks" and force influencers to disclose paid promotions, with Duolingo, Strava and Ticketmaster cited among services caught up in the regime. Analysis: the bloc is extending its consumer-protection playbook from content and competition into interface design itself — engagement mechanics, streaks and undisclosed promotion become compliance questions rather than growth tactics. link
• EU court rejects Poland's bid to overturn seven climate laws. Politico Europe reports the EU court dismissed Warsaw's challenges to seven major climate laws; the lawsuits were launched by the previous nationalist government and kept alive under Prime Minister Donald Tusk. Analysis: the ruling hardens the legal durability of the EU's climate acquis, which increasingly intersects with energy-intensive digital infrastructure siting. link
• China diaspora-policing report lands during EU-China trade talks. A report alleges Beijing uses hundreds of European outposts to monitor and police diaspora communities, published as EU trade officials met a Chinese counterpart. Analysis: adds transnational repression and platform-data questions to an already contested trade file. Reports are contested; see source. link
• EU to examine Israel association agreement after mass petition. Organizers argue the EU should suspend trade and political dialogue with Israel; the Commission will examine the agreement in response to the petition. link

China

• Hong Kong stacks further charges on jailed publisher Joshua Wong under the 2020 National Security Law, per Techdirt commentary, in a move critics say is designed to extend his imprisonment by another decade. link
• Sexpionage allegations around Nvidia's CEO put Beijing's intelligence tactics under scrutiny. Wired assesses China's use of intimate relationships as an established intelligence method and asks how a top AI executive was exposed; the allegations against the individual concerned remain unproven in court. link

India

• Delhi Police takedown requests target censorship watchdogs. EFF reports that on November 3 colleagues at SFLC.in received X notifications of Delhi Police takedown requests covering 42 URLs, including accounts and posts belonging to SFLC.in, the Internet Freedom Foundation and @geoblockedindia, plus posts documenting legal notices and censorship instances. Analysis: pressure is shifting from removing content to removing the record of removal. link

Asia-Pacific

• Australia joins Horizon Europe. Industry Minister Tim Ayres signed the association agreement in Brussels on Thursday, opening participation in the EU research programme. link
• Compromised Taiwanese university account behind European bomb hoaxes. The Record reports threats sent to thousands of schools across Europe this week originated from a hijacked email account at a Taiwanese university — the latest in a series of hoaxes sent from legitimate institutions to airports and newsrooms. Analysis: reputational infrastructure (trusted domains) is the attack surface, complicating attribution and takedowns. link

No supporting articles this week for the United Kingdom, Latin America, Africa or the Middle East.

5. Artificial Intelligence Governance

• Nvidia's leadership rupture lands at the center of AI policy. CEO Jensen Huang resigned effective immediately after the board accepted his letter of resignation as CEO, president and board member following reports of two extramarital affairs — one with a woman alleged to be a Chinese intelligence asset — with CFO Colette Kress named interim CEO. Nvidia shares had fallen roughly 8.3% in after-hours trading earlier in the week before rebounding. Analysis: the episode converts a corporate-governance failure into a national-security and export-control question for the West's most strategically important chipmaker. TechCrunch · Wired · The Verge · The Hill
• Chip-export legislation gains momentum. The Hill reports the scandal is throwing new support behind a trio of bills restricting AI chip sales abroad, while lawmakers from both parties press investigations spanning intelligence, foreign relations and banking committees. link
• Scott Wiener heads to Congress with an AI agenda. After winning Nancy Pelosi's open San Francisco seat, the California state senator who authored state AI-risk legislation told MIT Technology Review he could play a key role in federal AI policy. Analysis: a rare instance of state-level AI drafting experience entering the federal legislature. link
• Democratic 100-day blueprint targets AI, social media and data centers. The Tech Oversight Project circulated a memo urging the party to keep pressure on major tech firms and advance legislation on social media, AI and data centers in the new Congress. link
• Medicare's AI triage experiment faces transparency litigation. EFF is suing for records on WISeR, the federal program launched in January that uses AI to evaluate Medicare beneficiaries' requests for certain procedures. Analysis: algorithmic decision-making in public benefits is emerging as the next front for administrative-law challenges. link
• AI in schools: mandates and monitoring failures. EFF criticizes Google for requiring K-12 schools to enable AI to keep using Google search (the company later decoupled and turned services off by default), while Wired reports a 13-year-old's suicide-related queries to Gemini on a school Chromebook went unflagged for weeks — allegations from the family. EFF · Wired
• Agentic commerce meets incumbent resistance. United told the WSJ it will not let personal AI assistants book tickets, citing privacy, unintended purchases and federal rules on the information airlines must collect — a cue for how regulated sectors may treat autonomous agents. link

6. Data Privacy & Protection

• Google's $10 million Spirit Airlines data deal meets a union opt-out. The flight attendants' union struck a deal with Google to scrub sensitive employee records from the sale of the defunct airline's data. Analysis: bankruptcy asset sales are becoming a privacy flashpoint where employee data is treated as a monetizable asset absent clear consent architecture. link
• License-plate readers: enforcement rhetoric versus litigation. Attorney General Todd Blanche said ALPRs are not a privacy concern, according to Techdirt; the same week EFF and the ACLU filed a Sixth Circuit amicus brief in United States v. Sturdivant arguing that warrantless ALPR tracking is a Fourth Amendment search. Techdirt · EFF
• Meta abandons contested commercial-terms update on AI training. Following criticism, Meta will not force Facebook page owners to allow AI training on linked content — critics had asked "does Meta think we can't read?" link
• Wearables become the privacy battleground. Google is positioning its new Android XR glasses (built with Samsung, sold through Warby Parker and Gentle Monster from $395) as the more privacy-minded option versus Meta, while Apple's HomeView smart display relies on new "person recognition" that has not been tested in the wild — no Face ID. Wired — Google · Wired — HomeView
• LinkedIn tests a "frequent viewer" label revealing who repeatedly views a profile — a small design change with larger questions about inferred-activity data. link

8. Content, Speech & Platform Regulation

• India's takedowns of censorship monitors (see Regional Roundup) are the week's clearest example of platform intermediaries being used against transparency reporting itself; the requests run through X as the intermediary. link
• Mass-shooting merchandise remains widely purchasable online. A new report finds a digital community obsessed with Columbine and similar attacks promoting apparel modeled on clothing worn by perpetrators, available on mainstream platforms. Analysis: tests whether existing prohibited-goods policies are being enforced against glorification rather than incitement. link
• Russia's VPN crackdown reaches Apple's App Store again. Techdirt reports VPN developers saying their apps are once more being pulled from the Russian App Store, framing it as a choke point for privacy and speech. (Commentary; see source for specifics.) link
• France keeps reaching for internet choke points. Techdirt traces a pattern from piracy enforcement to protest-related blocking; in a separate case, French lawmakers slipped a per-gigabyte data tax into the budget bill before it was dropped within five days. Choke points · Data tax
• Michigan utilities sue over an anti-corporate-money measure. After voters approved a ballot proposition curtailing utility election spending amid rising electricity costs, utilities argue it limits their free speech. link

9. Cybersecurity & National Security

• The Nvidia espionage probe is now a congressional matter. House Republicans sought a closed-door briefing from Huang by end of day Wednesday; Sen. Kevin Cramer (R-N.D.) said he feels "strongly" that Huang should resign; Sen. Michael Bennet (D-Colo.) pressed DOJ and Commerce on the paused Megaspeed investigation following the Alice Huang allegations; President Trump publicly defended Huang while saying the FBI is investigating. The Hill — Congress · The Hill — Cramer · The Hill — Bennet · The Hill — Trump
• Poland shut down its national e-government platform after a cyberattack. The attack targeted ePUAP, the nationwide system for submitting official documents, contacting agencies and completing administrative procedures online. link
• Romania says it stopped a Russian cyber-espionage campaign targeting government email before data was exfiltrated, according to the country's intelligence agency. link
• Kazakhstan-linked hackers used an AI agent to spy on Central Asian governments, stealing documents and infiltrating critical-infrastructure networks, per new research. Analysis: AI is being operationalized in intrusion workflows, not just influence operations. link
• US indictment: Iran-backed network directed London attacks over FaceTime. The unsealed indictment describes a campaign targeting Jewish and American sites, including synagogues in Belgium, the Netherlands and London and US bank buildings in Amsterdam and Paris. link
• Starlink restrictions on Ukraine return. President Zelenskyy said military units recorded "significant disruptions" similar to the speed limits enforced in October. Analysis: commercial satellite connectivity is now a recurring lever in wartime policy; the operator's decision-making is outside any treaty framework. Politico Europe (EN) · Politico Europe (DE)
• White House IT supply-chain allegations. Techdirt commentary alleges foreign intelligence access via Russian proxy software and taxpayer-funded Starlink terminals installed by DOGE personnel. These are contested claims in opinion journalism — see source. link

10. Digital Markets: Crypto, Fintech & Payments

• Kalshi's court losses pile up. Judges have refused to block state gambling laws against the event-contracts exchange, with state attorneys general arguing Kalshi cannot escape gambling law by claiming it does not offer gambling. link
• A customer who lost $308,000 sues Kalshi for offering illegal gambling, demanding return of losses on the ground that online betting is illegal in Washington state. Analysis: prediction markets face a state-by-state compliance patchwork rather than a single federal safe harbour. link

11. Enforcement Actions & Penalties

• New York says T-Mobile illegally capped a low-income home internet plan. The state alleges the carrier imposed a 50GB cap and dropped speeds to 600Kbps, though the programme requires 25Mbps home internet — a subsidised-broadband compliance test with national read-across. link
• Shareholder class-style suit against Nvidia and Huang alleges investors were misled in the company's responses to reporting on the affair with an alleged Chinese spy; the suit followed Trump's statement that the FBI is investigating. link
• Delhi Police takedown orders against digital-rights groups (42 URLs via X) — an enforcement action with regional precedent value. link
• EFF sues for Medicare AI records on the WISeR program — a records-disclosure action rather than a merits challenge. link

12. Emerging Policy Battles

• US AI chip export bills — three bills restricting overseas chip sales are gaining sponsors and momentum after the Nvidia revelations, with committee jurisdiction split across intelligence, foreign relations and banking. Likelihood of action: Medium; the scandal gives export hawks a concrete case, but the calendar and industry lobbying remain obstacles. link
• EU Digital Fairness Act scope — whether "dark pattern" rules reach streak mechanics, influencer disclosure and subscription design, with named consumer apps already in the frame. Likelihood of action: High (the rules exist; the fight is over scope and enforcement). link
• Warrantless ALPR tracking — the Sixth Circuit now weighs whether networked plate-reader queries are a Fourth Amendment search, against an administration that says they raise no privacy issue. Likelihood of action: Medium; appellate rulings could reshape police procurement nationwide. link
• AI in schools — Google's search-for-AI bundling retreat and the Gemini monitoring case will fuel state-level procurement and child-safety conditions. Likelihood of action: Medium. EFF · Wired
• Prediction markets vs state gambling law — successive Kalshi losses plus a consumer suit raise the odds of a federal preemption push. Likelihood of action: Medium. link
• Data centers, power and local consent — MIT Technology Review argues the data-center backlash may really be about electricity, and TechCrunch notes many announced projects may never be built. Likelihood of action: High at state/local level. MIT TR · TechCrunch
• Starlink as geopolitical leverage — renewed Ukrainian speed restrictions revive questions about commercial control of wartime connectivity. Likelihood of action: Low in the near term; no regulatory vehicle identified in the reporting. link

13. Data Snapshot

Key Legislation & Regulations

Regulatory & Enforcement Actions

Upcoming Deadlines & Hearings

14. Timeline of the Week

Thursday, November 5

• Kalshi suffers further court losses as judges decline to block state gambling laws; a separate suit is filed by a customer who lost $308,000.
• Lawsuit alleges a man introduced his wife to ChatGPT and she used it to plan his murder (contested allegations).

Friday, November 6

• House lawmakers summon Nvidia CEO Jensen Huang over Chinese espionage concerns.
• Meta abandons a contested commercial-terms update that would have forced page owners to allow AI training on linked content.
• EFF publishes its submission to the UN human rights office on child rights in the digital environment; India takedown notices against SFLC.in surface.

Monday, November 9

• EFF and the ACLU file a Sixth Circuit amicus brief seeking a warrant requirement for ALPR searches.
• MIT Technology Review publishes its interview with newly elected Rep. Scott Wiener on AI regulation.
• EFF analyses the Supreme Court's Cisco v. Doe I ruling narrowing the Alien Tort Statute.

Tuesday, November 10

• Democrats oppose a plan to stack the FCC with Republicans and plan probes of Chairman Carr.
• An Iran-backed network indictment is unsealed, describing attacks directed over FaceTime.
• Nvidia shares fall after a report of a second affair; the board reportedly prepares to act.

Wednesday, November 11

• Trump publicly defends Huang; bipartisan calls for investigation grow; a shareholder suit is filed.
• Poland shuts down its ePUAP government services platform after a cyberattack; Romania says it foiled a Russian email espionage campaign.
• EU's Digital Fairness Act is reported to capture Duolingo, Strava and Ticketmaster.

Thursday, November 12

• Huang resigns as Nvidia CEO, president and board member; CFO Colette Kress becomes interim CEO.
• Ukraine reports renewed Starlink speed restrictions; Kazakhstan-linked hackers are reported to have used an AI agent for espionage.
• Hijacked Taiwanese university email account linked to European school bomb hoaxes; Australia signs Horizon Europe association.

15. What to Watch Next Week

1. Nvidia's leadership transition — whether the board confirms Kress permanently or opens an external search; governance experts say the situation is unprecedented.
2. Congressional briefing on the Huang affair — House Republicans set a Wednesday deadline for a closed-door briefing; follow-through (or subpoenas) will signal escalation.
3. AI chip export bills — watch for new co-sponsors or a committee markup as the trio of restrictive bills gains momentum.
4. Megaspeed investigation — Sen. Bennet's letter to DOJ and Commerce asks whether the probe was paused; a formal response would reopen the case politically.
5. Polish ePUAP restoration — no timeline given for bringing the national services platform back online; outage duration is a test of EU critical-infrastructure resilience expectations.
6. Romania and the wider Russian campaign — attribution details and any NATO or EU response.
7. EU Digital Fairness Act lobbying — expect pushback from consumer apps named in coverage over streak and disclosure requirements.
8. Sixth Circuit ALPR litigation — briefing schedule in Sturdivant will determine how quickly a warrant standard could bind police agencies.
9. Kalshi's state-by-state docket — further rulings and the Washington consumer suit will shape whether prediction markets seek federal preemption.
10. COP31 in Antalya — whether AI energy and climate commitments make it into negotiated text.
11. Medicare AI records dispute — whether the agency produces WISeR documentation voluntarily or litigates.
12. FAA modernisation — the 2028 floppy-disk retirement deadline sets a rare, dated benchmark for federal legacy IT upgrades.

Sources

• Nvidia's Jensen Huang resigns, chipmaker names CFO Colette Kress as interim CEO — https://techcrunch.com/2026/11/12/nvidias-jensen-huang-resigns-chipmaker-names-cfo-colette-kress-as-interim-ceo/
• Jensen Huang Resigns as Nvidia CEO — https://www.wired.com/story/nvidia-ceo-jensen-huang-steps-down/
• Nvidia CEO Jensen Huang resigns amid spy, affair scandals — https://www.theverge.com/ai-artificial-intelligence/1031689/jensen-huang-nvidia-ceo-resigns
• Nvidia CEO Jensen Huang resigns amid affair scandals — https://thehill.com/policy/technology/6214845-nvidia-ceo-jensen-huang-resigns/
• Nvidia spy scandal could reshape fight over AI chips and China — https://thehill.com/policy/technology/6211351-chip-export-restrictions-momentum-nvidia-huang/
• GOP senator feels 'strongly' Jensen Huang should resign at Nvidia — https://thehill.com/homenews/senate/6215009-senator-cramer-calls-nvidia-ceo-resignation/
• Senate Democrat presses Trump administration on Megaspeed probe — https://thehill.com/policy/technology/6214107-bennet-pushes-megaspeed-probe/
• Trump embraces Huang as espionage scandal shakes Nvidia — https://thehill.com/homenews/administration/6214652-trump-defends-nvidia-ceo-scandal/
• Nvidia and Jensen Huang face shareholder lawsuit — https://thehill.com/policy/technology/nvidia-jensen-huang-shareholder-lawsuit/
• Who is Alice Huang, alleged spy who reportedly had affair with Nvidia CEO? — https://thehill.com/policy/international/6212857-alice-huang-spy-allegations-nvidia-ceo-relationship/
• Nvidia CEO's affair becomes a national security problem — https://arstechnica.com/tech-policy/2026/11/ceo-jensen-huang-admits-affair-as-nvidia-probes-possible-chinese-espionage/
• Nvidia CEO Jensen Huang summoned by Congress over Chinese espionage concerns — https://arstechnica.com/tech-policy/2026/11/nvidia-ceo-jensen-huang-summoned-by-congress-over-chinese-espionage-concerns/
• China's Nvidia Honeypot Isn't Surprising — https://www.wired.com/story/chinas-nvidia-honeypot-isnt-surprising-jensen-huang-fell-for-it-anyway/
• Nvidia's crisis has corporate governance experts reaching for the popcorn — https://techcrunch.com/2026/11/10/nvidias-crisis-has-corporate-governance-experts-reaching-for-the-popcorn/
• Duolingo, Strava, and Ticketmaster Are All Caught Up in EU's New Digital Fairness Rules — https://www.wired.com/story/duolingo-strava-and-ticketmaster-are-all-caught-up-in-eus-new-digital-fairness-rules/
• EU court rejects Poland's bid to overturn 7 major climate laws — https://www.politico.eu/article/eu-court-rejects-poland-bid-overturn-7-climate-laws/
• China's diaspora crackdown reaches deep into Europe, report finds — https://www.politico.eu/article/china-diaspora-crackdown-reaches-deep-into-europe-report-finds/
• EU will examine Israel association agreement after massive public petition — https://www.politico.eu/article/eu-examine-israel-association-agreement-public-petition/
• Australia signs up to EU's Horizon Europe research program — https://www.politico.eu/article/australia-signs-up-to-eus-horizon-europe-research-program/
• Hijacked email accounts complicate investigations into European bomb hoaxes — https://therecord.media/europe-hoax-email-threats
• Poland shuts down government services platform ePUAP following cyberattack — https://therecord.media/poland-shuts-down-government-services-platform-cyberattack
• Romania says it stopped Russian cyberattack targeting government emails — https://therecord.media/romania-russia-cyberattack-emails
• Kazakhstan-linked hackers used AI agent to spy on Central Asian governments — https://therecord.media/kazakhstan-hackers-central-asia
• Iran-backed network directed London attacks over FaceTime, US prosecutors say — https://therecord.media/iran-backed-network-directed-london-attacks-over-facetime
• Ukraine Starlink speed restrictions in effect again, Zelenskyy says — https://www.politico.eu/article/starlink-slowed-down-for-ukraine-again/
• T-Mobile illegally imposed 50GB cap on low-income home Internet plan, NY says — https://arstechnica.com/tech-policy/2026/11/t-mobile-illegally-imposed-50-gb-cap-on-low-income-home-internet-plan-ny-says/
• Kalshi court losses pile up as judges refuse to block state gambling laws — https://arstechnica.com/tech-policy/2026/11/kalshi-court-losses-pile-up-as-judges-refuse-to-block-state-gambling-laws/
• Man who lost $308,000 on sports bets sues Kalshi for offering illegal gambling — https://arstechnica.com/tech-policy/2026/11/man-who-lost-308000-on-sports-bets-sues-kalshi-for-offering-illegal-gambling/
• We're Asking an Appeals Court to Require a Warrant for ALPR Searches — https://www.eff.org/deeplinks/2026/11/were-asking-appeals-court-require-warrant-alpr-searches
• When the Watchdogs Are Silenced: India's Crackdown on Those Documenting Online Censorship — https://www.eff.org/deeplinks/2026/11/when-watchdogs-are-silenced-indias-crackdown-those-documenting-online-censorship