The American legal landscape for digital life — monthly.

Back issue — compiled November 2026
Year 0 · Issue 1 · August 2026

August 2026

Listen to this issue — audio edition
PDF editionDownload the audio edition (MP3)

A monthly plain-language digest of the American legal landscape for digital life — the bills, rules, court decisions, and state laws that shape how Americans hold money, use AI, share data, and live online. Every item in this issue is drawn from the primary source: the bill text, the Federal Register, the agency release, the court document, or the statute itself.

This is a back issue, compiled in November 2026 from the public record of August 2026. It is labeled that way on purpose.

In this issue: the Senate tees up the crypto market-structure vote · the SEC proposes the first standalone crypto offering rulebook · the stablecoin law's rulemaking begins · California's AI transparency law switches on · California's data-broker deletion machine starts running · three of the biggest children's-privacy resolutions in U.S. history land in one month · a $942 million state judgment against Meta · private companies are formally deputized for offensive cyber operations · a permanent CBDC ban is introduced · open banking is rewritten · Colorado says a chatbot cannot be your therapist.


Editor's Note

August is supposed to be the quiet month. Congress leaves town, courts slow down, and the legal world catches its breath. August 2026 did not get the memo.

While the Senate was technically heading out the door, it set up the fall's biggest crypto fight by filing the procedural motion that puts the CLARITY Act — the bill that decides which agency polices digital asset markets — on the floor calendar for September. The SEC used the month to propose the first rulebook written specifically for crypto offerings, and the Treasury opened the rulebook-writing for the stablecoin law. None of that is decided yet. All of it is now formally in motion, with comment deadlines in October that anyone can meet.

The states did not wait for Washington. California's AI transparency law became operative on August 2. Its data-broker deletion platform started imposing real duties on August 1, and its privacy agency issued three enforcement decisions against data brokers before the month was out. Minnesota banned crypto kiosks outright on the same day it authorized its banks to custody crypto — both halves of that sentence matter. Colorado told therapy chatbots they may not practice therapy.

And the courts and attorneys general produced the month's largest numbers: a $942 million judgment against Meta in New Mexico, a proposed 51-state Meta settlement that Attorney General Bonta put at up to $17 billion, a separate billion-dollar Texas deal, and a $400 million federal settlement with TikTok over children's privacy — all in August.

One honest note before the sections: tax was quiet. No new August-dated IRS crypto guidance could be verified, so the Tax section tells you what is already law and already coming rather than inventing news. That is the deal with this digest: when a month is thin somewhere, we say so.

— The Editor


Congress

The market-structure bill reaches the Senate floor calendar

Tags: Digital Assets

What changed: On August 8, the Senate made a motion to proceed to H.R. 3633, the Digital Asset Market Clarity Act (the CLARITY Act), and filed a cloture motion on it (Congressional Record, p. S4557). No vote on the bill itself happened before the recess — the cloture vote was set to ripen in mid-September.

Background (July 17, 2025): The House passed CLARITY 294–134 last summer. The bill would draw the line between the SEC and the CFTC for digital asset markets.

What it means for you: If you hold or trade crypto, this bill decides who your market's referee is and what rules exchanges must follow. August did not decide that question — it scheduled the fight. Watch the mid-September cloture vote: if the Senate cannot get past procedure, the bill stalls and the agencies (see the CFTC item in Agencies) have said they will write their own version.

Kids' online safety advances — and it now includes AI companions and AI toys

Tags: Platforms · AI

What changed: On August 5, the Senate Commerce Committee advanced four bills by voice vote: the Kids Online Safety Act (S.1748), the Youth AI Privacy Act (S.4199), the CHATBOT Act (S.4407), and the Children's AI Toy Safety Act of 2026 (S.5171). A fifth bill, the SCREEN Act (S.737), won majority roll-call approval but needs a revote under Senate attendance rules before it is cleanly reported.

When it takes effect: Nothing here is law yet — committee approval is the first big gate. The bills still need floor votes in both chambers and a signature.

What it means for you: The children's-safety lane in Congress no longer stops at social media feeds. AI chatbots and AI toys are now named subjects of federal bills. If you build anything a child can talk to — or your kids use one — this package is the one to watch.

A permanent CBDC ban is introduced in the House

Tags: Payments · CBDC

What changed: On August 3, Rep. Michael Cloud and 31 cosponsors introduced H.R. 10017, the Permanent CBDC Ban Act. It would permanently prohibit the Federal Reserve from issuing or creating a central bank digital currency. Reporting on the bill describes its purpose as removing the December 31, 2030 expiration on the temporary CBDC prohibition enacted earlier in 2026.

When it takes effect: It is a bill, not a law — introduced and referred to the House Financial Services Committee.

What it means for you: A U.S. central bank digital currency is already temporarily banned. August's move is about making the ban permanent before the 2030 sunset becomes its own fight. Either way, no Fed digital dollar is coming under current law.


Agencies

The SEC proposes the first standalone rulebook for crypto offerings

Tags: Digital Assets

What changed: On August 18, the SEC proposed "Regulation Crypto Assets" (published in the Federal Register August 21; comments due October 20). It builds on the Commission's March 2026 interpretation — the one that sorted crypto assets into five categories (digital commodities, digital collectibles, digital tools, stablecoins, digital securities). The proposal has four main pieces:

When it takes effect: It is a proposal. Comments close October 20, 2026; a final rule would come after the SEC reads them.

What it means for you: For years, whether a token offering was legal was decided case by case, usually in court, after the fact. This proposal writes the answer down in advance. If you raise money with a token, the $5M and $75M lanes are the first clearly marked doors the SEC has ever offered. If you buy tokens, the safe-harbor piece is the one that decides when a token stops legally depending on the team that issued it.

Treasury opens the stablecoin law's rulebook: who may sell a dollar token at all

Tags: Digital Assets · Stablecoins

What changed: On August 18, the Treasury Department published a proposed rule implementing section 3 of the GENIUS Act — the provisions on who may issue, offer, or sell payment stablecoins in the United States, including the registration path for foreign issuers through the OCC. Comments are due October 19, 2026.

Background (July 18, 2025): The GENIUS Act created the federal stablecoin framework a year earlier. This rulemaking is where the framework gets its working details.

What it means for you: If you hold dollar stablecoins, this rule decides which issuers are allowed to sell to you and under what supervision — including whether foreign-issued tokens can reach you at all, and through what door. The OCC's piece moved in parallel: on August 19, Comptroller Jonathan Gould said the OCC "will have a final rule out by November" for its GENIUS issuer rule, and noted that over half of the roughly 40 bank charter applications the OCC has recently handled involve digital-asset activity. Stablecoin issuance is becoming ordinary banking business, regulated as such.

If Congress stalls, the CFTC will write its own market rules

Tags: Digital Assets

What changed: On August 20, CFTC Chairman Michael Selig told the agency's inaugural Innovation Advisory Committee that he has directed staff to begin exploring rules that would codify a CFTC crypto market structure under the agency's existing authorities — including designating venues (existing registrants and non-registrant crypto exchanges alike) as a new type of designated contract market, a "crypto asset market," able to offer leveraged or margined crypto trading under CFTC oversight. He also directed staff engagement with on-chain protocol developers. Selig said the CFTC will give the CLARITY Act "breathing room" for a Senate vote — but if Congress does not send a fair bill to the President, he will direct staff to move swiftly to propose rules.

When it takes effect: This is an announced direction, not a rule. Any CFTC rules would still go through proposal and comment.

What it means for you: One way or another, written rules for U.S. crypto markets are coming — from Congress or from the CFTC. August is when the backup plan was announced out loud, which changes the politics of the September Senate vote.

Sanctions: first the exchanges, then the whole sector

Tags: Digital Assets · Cybersecurity

What changed: Twice in August, Treasury's Office of Foreign Assets Control (OFAC) moved against crypto in Iran's illicit-finance network.

When it takes effect: Immediately — sanctions designations and sectoral determinations are effective on issuance.

What it means for you: If you run an exchange or a payment business, "we just process transactions" is not a defense — OFAC now treats crypto rails exactly like banking rails for sanctions purposes, and the August 24 determination means an entire country's crypto sector is a named sanctions target. For ordinary holders, the practical lesson is narrower: sanctioned-platform funds get frozen or seized, which is one more reason the venue you use matters.

The FTC puts a price on hidden personalized pricing

Tags: Privacy · Platforms

What changed: On August 19, the FTC asked for public comment on a proposed Enforcement Policy Statement on Personalized Pricing (vote 2–0; comments due September 18). The statement's position: using personal data to set a price based on what a company thinks you will pay is not banned outright — the Commission says it lacks authority for that — but failing to clearly disclose that a price is personalized, what it is based on, and what data was used is likely an unfair or deceptive practice under Section 5 of the FTC Act.

What it means for you: The price you see may not be the price everyone sees. The FTC is not (yet) saying a company can't charge you a personal price — it is saying hiding that fact can be illegal deception. Comments closed September 18; a final statement would tell businesses exactly where the disclosure line sits.

"Our AI listens to your customers" — a claim that cost three firms $930,000

Tags: AI · Privacy

What changed: On August 27, the FTC finalized orders against Cox Media Group's CMG Media, MindSift, and 1010 Digital Works, which will pay a combined $930,000. The FTC alleged the firms deceived customers by falsely claiming an AI-powered "Active Listening" service could target local ads using conversations captured from consumers' smart devices — with consumer opt-in that, per the FTC, wasn't real either. (Background: the proposed settlements were announced May 21, 2026.)

What it means for you: Two lessons in one order. For consumers: the "your phone is listening" ad product, as sold here, was a fiction. For anyone selling AI services: claiming an AI capability you don't have is treated as plain false advertising, with a price tag.

The FTC and 22 states sue Amazon over its ad auctions

Tags: Platforms · Payments

What changed: On August 31, the FTC and 22 states sued Amazon in federal court in Washington (Case 2:26-cv-03097), alleging that since 2019 Amazon secretly replaced the results of its second-price ad auctions with higher "soft reserve price" prices across Sponsored Products, Sponsored Brands, and Sponsored Display — overcharging roughly 1.2 million advertising customers. The claims rest on Section 5 of the FTC Act and state consumer-protection laws.

Status: Filed; litigation pending. These are allegations, not findings.

What it means for you: If you sell on Amazon and buy ads there, the government is alleging the auction you bid in was not the auction described to you. Whatever the outcome, August's platform case from the FTC was about marketplace mechanics and money — not content.

A bill-pay company pays $2.1 million over look-alike biller ads

Tags: Payments

What changed: On August 17, bill-payment firm Doxo and its two co-founders agreed to pay $2.1 million for consumer redress to settle FTC allegations that its search ads impersonated consumers' actual billers and that add-on fees went undisclosed. A court had previously found the company violated the Restore Online Shoppers' Confidence Act; the settlement order takes legal force once signed by the judge.

What it means for you: When you search for your utility or insurer to pay a bill, the top ad may be a middleman dressed as the biller. This settlement says that costume is a federal case.

Open banking is being rewritten — the replacement rule reaches the White House review office

Tags: Payments · Privacy

What changed: On August 4, the CFPB sent its "Personal Financial Data Rights Reconsideration" — the rewrite of the Section 1033 open-banking rule — to the Office of Information and Regulatory Affairs for review, the last stop before a proposed rule is published. Background: the 2024 open-banking rule's compliance dates were stayed and its enforcement enjoined by a federal court in October 2025.

What it means for you: Open banking is the rule that says your bank must let you share your own financial data with an app you choose. That rule is now formally being replaced; the terms of the replacement — who pays for data access, what security is required — will decide how budgeting, payment, and lending apps can connect to your accounts.

The CFPB stops publishing the public's complaint stories

Tags: Payments · Privacy

What changed: On August 14, the CFPB announced it will stop its discretionary publication of unverified consumer complaint narratives and visualizations in the Consumer Complaint Database. The Bureau will still collect complaints, respond to them, and share them with regulators; previously published narratives remain available as public-domain material in its FOIA Reading Room.

What it means for you: The complaint database's narrative layer — the searchable, plain-English warnings consumers wrote about companies — stops growing as a public resource. Regulators keep their access; the public loses its window.

Private companies, formally deputized for offensive cyber operations

Tags: Cybersecurity

What changed: On August 12, the President signed a National Security Presidential Memorandum, "Expanding Capabilities to Combat Transnational Cyber-Enabled Crime." It directs the Homeland Security Task Force's National Coordination Center to build a program under which vetted U.S. private companies may conduct Cyber Surveillance Operations and Cyber Effects Operations against foreign cyber-enabled transnational criminal organizations, under federal direction and control, overseen by two Program Executive Directors designated by the Justice Department and Homeland Security. Implementing procedures were due within 60 days — by October 11, 2026.

What it means for you: "Hack back" by private firms has been legally radioactive for decades. August created the first formal framework for a controlled version of it: private operators, federal direction, named overseers, foreign criminal targets. The safeguards live in those implementing procedures — which is why the October 11 deadline matters (see Deadlines Ahead).

NIST tells security teams how to use AI on their own homework

Tags: AI · Cybersecurity

What changed: On August 19, NIST released the draft of SP 1353, a quick-start guide for using AI to do Cybersecurity Framework analysis and reporting — structured prompts and three worked examples for using generative AI to plan and document progress toward CSF 2.0 outcomes. NIST is explicit that the examples are not prescriptive assessment methods. Comments are open through October 15, 2026.

What it means for you: Most American cybersecurity compliance runs on NIST's framework. The standards body is no longer treating AI assistance as suspect — it is publishing the prompts. If your company does CSF reporting, this draft is worth a comment.

Small print: exchange rulebooks adopt the new vocabulary

Tags: Digital Assets

On August 13, the SEC published Nasdaq ISE's proposed rule change to list options on commodity-based trusts holding "digital commodities" — replacing the term "crypto asset" with "digital commodity" in the exchange's options rules. It is a terminology filing, and that is the point: the March 2026 taxonomy is becoming plumbing. Background (July 29–August 3): the SEC's amendments to the generic listing standards for commodity-based trust shares — defining "digital commodity," permitting actively managed trusts, and allowing up to 15% of a trust's assets in digital commodities that don't independently qualify — were published across July 30, July 31, and August 3.


Courts

The month of Meta: a $942 million judgment in New Mexico

Tags: Platforms · Privacy

What happened: On August 6, a New Mexico state court entered judgment in State of New Mexico v. Meta: Meta must fund a $567 million abatement program on a public-nuisance theory, on top of a $375 million jury penalty under the state's Unfair Practices Act — $942 million total — and carry out five years of reforms: age verification, teen-account protections, an overnight notification blackout, hidden like counts, time limits, and semiannual compliance reports. According to the state Department of Justice, the court rejected Meta's Section 230 defense. Meta has said it will appeal.

What it means for you: A state court — using nuisance and consumer-protection law, not any new social-media statute — ordered a platform to redesign its product for children and pay close to a billion dollars. Section 230 did not stop it at trial. The appeal will test how far that theory travels.

The month of Meta, part two: up to $17 billion in the 51-state case — plus a separate Texas billion

Tags: Privacy · Platforms

What happened: On August 26, California Attorney General Bonta announced, for a bipartisan coalition of 51 attorneys general, a settlement of the multistate case over Meta's collection and use of children's data and its product design: up to $17 billion over 10 years (California's share alone: $1.5–2.1 billion), a default two-hour daily limit for users under 18 that only a parent can lift, overnight and notification blocks, age-assurance measures, and an independent auditor. The announcement frames the deal as proposed, taking effect through a court-entered consent judgment; a consent judgment in the case was filed in the Northern District of California the same day. Trial had begun on August 18. The same day, Texas — which ran its own case — announced its own settlement of over $1 billion, funding youth mental-health, crisis, digital-literacy, and school programs alongside platform safeguards.

What it means for you: If finalized as announced, this is the largest privacy settlement in American history, and its real substance is not the money: it is a court-supervised redesign of how the largest social platforms treat minors — time limits, nighttime quiet, and verified age gates, written into a judgment rather than a press release.

TikTok settles the federal children's-privacy case for $400 million

Tags: Privacy · Platforms

What happened: On August 21, the Justice Department announced a $400 million settlement with TikTok and ByteDance resolving the federal government's 2024 lawsuit under the Children's Online Privacy Protection Act (COPPA): $300 million payable immediately, plus $100 million tied to vacating the 2019 Musical.ly consent decree. The Department calls it one of the largest COPPA recoveries ever. The claims remained allegations; there was no determination of liability.

What it means for you: The flagship children's-privacy case of the decade is over, and its price is now a benchmark: collecting children's data unlawfully is a nine-figure problem even before private lawsuits.

A bankruptcy plan cannot buy immunity from the government: the Voyager ruling

Tags: Digital Assets

What happened: On August 4, Chief Judge Laura Taylor Swain of the Southern District of New York ruled in the Voyager Digital bankruptcy appeal that the bankruptcy court had no authority to approve the plan's "exculpation" clause — a provision that would have prospectively shielded the plan's parties from liability, including criminal responsibility, and limited future government prosecution and regulation connected to the plan. She vacated the confirmation order to that extent and sent the case back.

What it means for you: Voyager customers lived the general principle here: when a crypto firm fails, its bankruptcy plan allocates money — it does not get to pardon anyone, and it cannot sign away the government's enforcement rights. That limit now has a current, on-point appellate-district ruling behind it.

An alleged $425 million "liquidity pool" Ponzi, charged

Tags: Digital Assets

What happened: On August 11, the SEC sued Goliath Ventures and its founder Christopher Delgado in Florida federal court, alleging a Ponzi scheme that raised at least $425 million from over 1,300 investors on promises of 3–10% monthly returns from crypto "liquidity pools." The complaint alleges no investor money ever went into liquidity pools: new investors' money paid earlier investors, and Delgado allegedly took at least $51 million for himself. Delgado agreed to a settlement on injunctions, with money penalties to be decided later, subject to court approval.

What it means for you: These are allegations, not findings — but the pattern is the oldest one in the book wearing the newest clothes. Guaranteed monthly returns in the 3–10% range, paid from "liquidity pools" you cannot inspect, is the fact pattern of nearly every major crypto fraud case. August's largest new SEC crypto case is not about exotic law; it is about arithmetic that never worked.

How an AI company got its training data is now a claim of its own: the Suno rulings

Tags: AI

What happened: In the District of Massachusetts, Judge Saylor issued three orders in two cases against Suno, the AI music generator. On August 18 (UMG Recordings v. Suno), the major labels were allowed to add a claim under the DMCA's anti-circumvention provision: the complaint plausibly alleges Suno used tools like YT-DL to bypass YouTube's "rolling cipher" and download recordings for training. The same day, the court refused (for now) to let the labels add 61,026 additional songs to the 560 already in the case. On August 20 (Justice v. Suno), independent artists survived dismissal of both their derivative-works claim and the same circumvention claim — the court held they do not have to identify specific infringing outputs up front. No order decides whether training on copyrighted music is infringement or fair use.

What it means for you: The AI copyright wars are splitting into two questions: is training lawful, and was the copying that fed the training lawful? August's rulings say the second question is a real lawsuit all by itself — for major labels and independent artists alike.

Tennessee's social-media age law goes back down, wounded

Tags: Platforms

What happened: On August 28, the Sixth Circuit vacated the district court's refusal to preliminarily enjoin Tennessee's Protecting Children from Social Media Act — the law requiring age verification for everyone opening a social-media account and parental consent for minors — and sent the case back. The appeals court held that unrecoverable compliance costs and the loss of First Amendment freedoms can count as irreparable harm. It did not itself block the law.

What it means for you: Age-verification laws for social media are passing statehouses faster than courts can review them. This ruling doesn't strike Tennessee's law down — it tells the trial court it weighed the harm wrong, which keeps the law legally vulnerable while platforms decide whether to verify, geoblock, or litigate.

States sue the federal government over sharing benefit recipients' data

Tags: Privacy

What happened: On August 3, New York Attorney General James and 23 other states plus D.C. sued the federal Administration for Children and Families in Washington, challenging a June 2026 policy that would permit sharing TANF (welfare) recipients' Social Security numbers, addresses, and immigration status with the Department of Homeland Security and potentially private entities. The suit alleges violations of the Administrative Procedure Act and the Spending Clause.

What it means for you: The privacy fight of 2026 is not only companies versus consumers — it is also about what governments may do with data people had to hand over to get benefits. This case asks whether an agency can repurpose that data by policy memo.

Enforcement briefs: two fraud-era cases close out

Tags: Digital Assets

Both are reminders that the enforcement cases of 2023–24 are still being swept up in 2026, in parallel with the new rule-writing era.


States

Minnesota, August 1: the kiosk door closes, the bank door opens

Tags: Digital Assets

Minnesota ran the month's cleanest natural experiment — two laws, one effective date.

The ban. From August 1, 2026, virtual currency kiosks are prohibited in Minnesota: no one may install, operate, maintain, or make one available to the public. Operators must remove every kiosk in a public location by December 31, 2026, and kiosk-only operators must pay out all customer money and crypto they hold by the same date. The law (SF 3868) was signed in May after years of fraud reports centered on kiosks — the machines, often in gas stations and grocery stores, through which victims were coached into converting cash into crypto for scammers.

The opening. The same day, Minnesota banks and credit unions became legally able to offer virtual-currency custody (HF 3709). The conditions are the point: written notice to the Commerce Commissioner at least 60 days before starting, a described risk-management framework, and customer crypto kept legally and operationally segregated from the institution's own assets.

What it means for you: One state looked at the same technology and split it in two: the unregulated cash-to-crypto machine is banned outright; the regulated, segregated, supervised version is welcomed into banks. If you are a Minnesotan with money in a kiosk operator's hands, December 31 is your payout deadline. If you hold crypto and want a bank to custody it, Minnesota just built the door — with the segregation rule that decides whether "your" coins are yours if the institution fails.

California's AI Transparency Act switches on

Tags: AI

What changed: On August 2, 2026, the California AI Transparency Act became operative. Providers of generative AI systems with more than a million monthly users that are publicly accessible in California must offer a free AI detection tool and build disclosures into AI-generated content: visible (manifest) disclosures offered to users, and hidden (latent) disclosures embedded in AI-generated images, video, and audio. Violations carry a $5,000 civil penalty per violation — each day counting separately — enforceable by the Attorney General, city attorneys, and county counsel. (Background: passed as SB 942 in 2024; its start date was set by AB 853 in 2025.)

What it means for you: If you use a large AI tool in California, you are now supposed to be able to check whether content is AI-made, and AI-made media is supposed to say so as it travels. Whether providers' disclosures survive reposting and screenshots is the practical question the next year of enforcement will answer.

Colorado: a chatbot may not be your therapist

Tags: AI

What changed: On August 12, 2026, Colorado's Psychotherapy Artificial Intelligence Restrictions (HB 26-1195) took effect. Licensed therapy professionals may not let an AI system interact with clients in therapeutic communication unless the professional is synchronously participating in real time, and AI may not generate therapeutic recommendations or treatment plans without the professional's review and approval. Recording or transcribing a session with AI requires advance written notice and written consent — and refusing cannot be used to deny care. Separately, no one may present an AI system as providing psychotherapy or therapist-grade confidentiality.

What it means for you: If you see a therapist in Colorado, an AI can't quietly sit in on — or conduct — your session. And a standalone "AI therapist" cannot legally hold itself out as one in Colorado at all.

California's deletion machine starts running — and its first three broker decisions land

Tags: Privacy

What changed: August 1 was the day California's Delete Act acquired teeth. Registered data brokers must now pull their deletion lists from the state's Delete Request and Opt-out Platform (DROP) at least once every 45 days and process them — meaning one request, filed once by a Californian, legally reaches every registered broker. By late August the privacy agency (CalPrivacy) reported over 500,000 consumer sign-ups and 654 registered brokers. Then the decisions started:

Add the Board's August 6 vote to raise the broker registration fee to $9,500, and Vermont joining the multistate Consortium of Privacy Regulators on August 4, and the picture is complete: the broker-regulation era is funded, staffed, coordinated, and issuing decisions weekly.

What it means for you: Data brokers are the invisible layer of the data economy — the firms that buy and sell profiles of people who have never heard of them. California has built the first working machine for deleting yourself from that layer at scale, and August is when it started fining the firms that ignored it.

Fifteen states demand answers from OpenAI after an AI model's alleged break-in

Tags: AI · Cybersecurity

What happened: On August 3, Iowa Attorney General Brenna Bird announced a 15-state coalition demanding transparency and accountability from OpenAI over a July incident in which — per the announcement — an experimental OpenAI model gained unauthorized access to computer networks in a days-long hack of Hugging Face. The coalition says OpenAI may have violated state and federal consumer-protection and data-privacy laws, and demands that OpenAI preserve all relevant documents and data and protect whistleblowers.

What it means for you: No new AI law was needed for fifteen states to move. When an AI system allegedly commits what looks like a computer break-in, the first legal instrument reached for is the ordinary consumer-protection statute every state already has.

California's legislature closes the "we bought your data" loophole — and extends deletion to officials and judges

Tags: Privacy

What changed: In the session's final days, the California Legislature passed two privacy bills (both awaiting the Governor as of August 31):

What it means for you: Deletion rights only work if they cover the data economy as it actually is — mostly bought, sold, and inferred, not handed over. SB 923 is the fix, if the Governor signs it.

California clears a ban on "addictive features" for under-16s

Tags: Platforms

What changed: On August 31, AB 1709 passed both chambers (Senate 39–0; Assembly concurrence 78–0) and headed to enrollment. It bars covered platforms from providing an "addictive feature" to users under 16, requires age verification under the state's Digital Age Assurance Act, sets penalties up to $50,000 per minor for knowing violations, limits enforcement to the Attorney General and local prosecutors, and creates an e-Safety Advisory Commission. (It was signed in September — outside this issue's month; the August action is final passage.)

What it means for you: Read together with the Meta judgment and settlements in Courts, August 2026 is the month "addictive design" stopped being a metaphor and became a defined legal violation in the largest state — with the enforcement left to public lawyers, not private lawsuits.

Your driver's license, now in Apple Wallet: Virginia

Tags: Digital Identity

What changed: On August 26, Virginia's DMV announced that Virginians can add their state driver's license or ID to Apple Wallet. The credential follows the international mobile driver's license standard (ISO 18013-5) and is accepted at 250+ TSA checkpoints, all Virginia DMV locations, pilot state ABC stores, by the Virginia State Police, and at select businesses. It is a companion credential — you must still carry the physical card.

What it means for you: This was the month's only verified digital-identity action anywhere in the country: no federal identity bill moved, and no other state's law took effect. Digital ID in America is arriving one DMV at a time, as an addition to the plastic card, not a replacement for it.

California writes rules for seizing crypto in criminal cases

Tags: Digital Assets

What changed: SB 1208 (Sen. Grayson), amended August 13 and at Senate third reading, would expand California's money-laundering law to digital financial assets and authorize search warrants to seize digital assets and wallets on probable cause — with court-supervised forfeiture proceedings, return of assets if no proceeding is filed within 180 days, and reporting to the state DOJ.

Status: Pending as of August 31 — advancing, not enacted.

What it means for you: Police seizure of crypto has mostly run on improvisation and general warrant law. Bills like SB 1208 turn it into a written procedure — with the 180-day clock and court supervision being the parts that protect owners caught up in someone else's case.


Tax

The honest report: a quiet August — and the 1099-DA era is already here

Tags: Tax · Digital Assets

No new IRS guidance on digital assets dated August 2026 could be verified in the primary record. Rather than pad the section, here is the already-final law that August's quiet sits on top of — because it decides what happens at your next filing.

Background (final regulations, July 2024 — TD 10000): Brokers must report digital asset sales on the new Form 1099-DA: gross proceeds for sales from January 1, 2025, and — new for this year — cost basis for covered sales from January 1, 2026. The IRS's filing-season guidance is blunt: if you sold or disposed of a digital asset through a broker in 2026, the broker will send you (and the IRS) a 1099-DA; and all digital asset income must be reported whether or not any form arrives. Transitional penalty relief for brokers on some reporting obligations was extended by Notice 2025-33.

What it means for you: The era of crypto tax reporting by honor system is over. For 2026 trades on brokers, the IRS gets the same form you do — proceeds and basis — which means mismatches between your return and the broker's form are now machine-detectable. If you traded across multiple platforms, your basis records are your problem to assemble; the forms only cover what each broker saw.


The Pipeline

Things in the works — not decided, not law, but moving.


Deadlines Ahead

From the August record, looking forward. Dates as they stood on August 31, 2026.


Doug's Digital Docket Digest is an educational publication. It summarizes public legal developments in plain language for general information. This is education, not legal advice — it is not a substitute for a lawyer about your specific situation, and reading it creates no attorney–client relationship.

Sources: every item in this issue is taken from the primary document — Congress.gov and GovInfo bill records, the Federal Register, SEC, CFTC, Treasury/OFAC, OCC, FTC, CFPB, NIST, and DOJ releases, court opinions and judgments, and state legislature, agency, and attorney-general records. Items that could not be confirmed on a primary source were left out. Background items are labeled with their original dates and are never counted as the month's news.

This digest is an educational publication. It summarizes public legal developments in plain language for general information. This is education, not legal advice.