Internet of Things (IoT)

On 3 June 2026, the European Commission published several legislative and policy measures wrapped up in one “tech sovereignty” package (see our posts summarising the package as a whole here, and diving deeper into the Cloud and AI Development Act here). But the EU’s tech sovereignty drive has a long history, and is by no means limited to this package. In this post, we take a closer look at the current and forthcoming EU legislative measures aimed at increasing the resilience of services provided in the EU against external, malicious influence, a key aspect of tech sovereignty. Relevant legislation falls into two broad categories: (1) laws promoting cyber resilience generally, to prevent malicious actors from disrupting services and critical infrastructure; and (2) laws focused on building supply chain resilience and reducing dependencies on certain external actors by building European industrial capacity in key tech sectors. … Continue Reading Looking beyond the tech sovereignty package: how the EU is moving to ensure tech sector resilience

This update highlights key legislative and regulatory developments in the second quarter of 2026 related to artificial intelligence (“AI”), connected and automated vehicles (“CAVs”), and Internet of Things (“IoT”).

Continue Reading U.S. Tech Legislative & Regulatory Update – Second Quarter 2026

This update highlights key legislative and regulatory developments in the first quarter of 2026 related to artificial intelligence (“AI”), connected and automated vehicles (“CAVs”), and Internet of Things (“IoT”).

I. Federal AI Legislative Developments

In the first quarter, members of Congress introduced several AI bills related to nonconsensual images, chatbots, support for small businesses, and…

Continue Reading U.S. Tech Legislative & Regulatory Update – First Quarter 2026

            On January 6, 2026, the Federal Communications Commission’s Public Safety and Homeland Security Bureau (the “Bureau”) announced the application window for a new Lead Administrator for the U.S. Cyber Trust Mark Program (the “Program”).  The window will be open from January 7, 2026, through January 28, 2026.  The previous Lead Administrator, UL LLC (“UL…

Continue Reading FCC Opens Application Window for New Cyber Trust Mark Program Lead Administrator

This update highlights key mid-year legislative and regulatory developments and builds on our first quarter update related to artificial intelligence (“AI”), connected and automated vehicles (“CAVs”), Internet of Things (“IoT”), and cryptocurrencies and blockchain developments.

I. Federal AI Legislative Developments

    In the first session of the 119th Congress, lawmakers rejected a proposed moratorium on state and local enforcement of AI laws and advanced several AI legislative proposals focused on deepfake-related harms.  Specifically, on July 1, after weeks of negotiations, the Senate voted 99-1 to strike a proposed 10-year moratorium on state and local enforcement of AI laws from the budget reconciliation package, the One Big Beautiful Bill Act (H.R. 1), which President Trump signed into law.  The vote to strike the moratorium follows the collapse of an agreement on revised language that would have shortened the moratorium to 5 years and allowed states to enforce “generally applicable laws,” including child online safety, digital replica, and CSAM laws, that do not have an “undue or disproportionate effect” on AI.  Congress could technically still consider the moratorium during this session, but the chances of that happening are low based on both the political atmosphere and the lack of a must-pass legislative vehicle in which it could be included.  See our blog post on this topic for more information.

    Additionally, lawmakers continue to focus legislation on deepfakes and intimate imagery.  For example, on May 19, President Trump signed the Tools to Address Known Exploitation by Immobilizing Technological Deepfakes on Websites and Networks (“TAKE IT DOWN”) Act (H.R. 633 / S. 146) into law, which requires online platforms to establish a notice and takedown process for nonconsensual intimate visual depictions, including certain depictions created using AI.  See our blog post on this topic for more information.  Meanwhile, members of Congress continued to pursue additional legislation to address deepfake-related harms, such as the STOP CSAM Act of 2025 (S. 1829 / H.R. 3921) and the Disrupt Explicit Forged Images And Non-Consensual Edits (“DEFIANCE”) Act (H.R. 3562 / S. 1837).

    Continue Reading U.S. Tech Legislative & Regulatory Update – 2025 Mid-Year Update

    Four Internet of Things (IoT) related tax relief provisions are due to expire on December 31, 2025.  Two bills were introduced in Brazil’s National Congress to extend these provisions and are currently in debate under a fast-track rule.  Companies that provide and implement IoT projects can engage congressional leaders to secure the bills’ approval.

    Tax Relief Provisions

    The Brazilian Internet of Things Act of 2020 reduced to zero four fees and contributions for companies implementing and operating IoT projects:

    • The Installation Oversight Fee (“TFI”), due when the authorization is granted to operate IoT stations;
    • The Operation Oversight Fee (“TFF”), due annually;
    • The Public Broadcasting Support Contribution (“CFRP”), due annually; and
    • The National Film Production Development Contribution (“Condecine”), due annually.

    Some of these fees and contributions, as well as roaming-related restrictions to international IoT providers, are listed in the Brazil section of the Office of the United States Trade Representative 2024 National Trade Estimate Report on Foreign Trade Barriers.

    Continue Reading Brazil’s Internet of Things Tax Relief Due to Expire in 2025

    On October 22, the National Institute of Standards and Technology (“NIST”) Internet of Things (“IoT”) Advisory Board released the Internet of Things Advisory Board Report, which concludes that IoT development has progressed more slowly than anticipated and identifies 26 findings that explain the slower pace of development and growth.  The Report offers 104 recommendations on how the government can help foster IoT development.  The Advisory Board provided this report to the IoT Federal Working Group emphasizing that an IoT transformation will boost U.S. economic growth, increase public safety and national resilience, create a more sustainable planet, individualize healthcare, foster equitable quality of life and well-being, and facilitate autonomous operations of our national infrastructure.  For background, the IoT Federal Working Group was established by Congress in 2020 and was charged with identifying policies and statutes inhibiting IoT development and consider recommendations of the Advisory Board. 

    Continue Reading NIST Report and Recommendations on Fostering Development of the Internet of Things

    On September 11, 2024, the Federal Communications Commission (the “Commission”) opened the application window for entities seeking designation by the Commission as a Cybersecurity Labeling Administrator (“CLA”) and Lead Administrator.  These roles will help administer the Commission’s voluntary Internet of Things (“IoT”) cybersecurity labeling program, covered in previous blog posts from August and March of…

    Continue Reading FCC Opens Applications for IoT Cybersecurity Labeling Roles

    On August 16, 2024, the U.S. Department of Transportation (the “USDOT”) announced the Saving Lives with Connectivity: A Plan to Accelerate V2X Deployment plan (the “Plan”). The Plan is intended to “accelerate the deployment” of vehicle-to-everything (“V2X”) technology and support USDOT’s goal of establishing a comprehensive approach to roadway fatality reduction. The Plan states that USDOT is “pursuing a comprehensive approach to reduce the number of roadway fatalities to the only acceptable number: zero.”

    The Plan describes V2X technology as technology that “enables vehicles to communicate with each other, with road users such as pedestrians, cyclists, individuals with disabilities, and other vulnerable road users, and with roadside infrastructure, through wirelessly exchanged messages.” Such messages may contain information about vehicles’ location and actions and traffic conditions like weather, pavement conditions, work zones, and more. The Plan notes that currently deployed V2X technology has already demonstrated safety benefits on a small scale and calls for expanded deployment of such technology.

    In a press release accompanying the Plan, U.S. Secretary of Transportation Pete Buttigieg said, “The Department has reached a key milestone today in laying out a national plan for the transportation industry that has the power to save lives and transform the way we travel … The Department recognizes the potential safety benefits of V2X, and this plan will move us closer to nationwide adoption of this technology.”

    Continue Reading USDOT Releases Plan to Accelerate V2X Deployment

    This is part of an ongoing series of Covington blogs on implementation of Executive Order 14028, “Improving the Nation’s Cybersecurity,” issued by President Biden on May 12, 2021 (the “Cyber EO”).  The first blog summarized the Cyber EO’s key provisions and timelines, and subsequent blogs described the actions taken by various government agencies to implement the Cyber EO from June 2021 through June 2024.  This blog describes key actions taken to implement the Cyber EO, as well as the U.S. National Cybersecurity Strategy, during July 2024.  It also describes key actions taken during July 2024 to implement President Biden’s Executive Order on Artificial Intelligence (the “AI EO”), particularly its provisions that impact cybersecurity, national security, and software supply chain security.

    Continue Reading July 2024 Developments Under President Biden’s Cybersecurity Executive Order, National Cybersecurity Strategy, and AI Executive Order