The Regulatory Reckoning: Crypto Gets a Rulebook While AI Law Rewrites Itself

The rules governing crypto and AI are no longer hypothetical they're here, and the compliance clock is ticking. From the GENIUS Act reshaping how stablecoins operate to AI statutes being rewritten in real time, the legal landscape for technology companies is moving faster than most founders realize.

For years, founders and companies in the digital asset and AI space operated in a fog — powerful technology, unclear rules. This week's regulatory landscape tells a different story. Crypto finally has a federal framework. AI law is actively being rewritten. And if you're building anything at the intersection of technology and financial services, the window to get compliant is narrowing fast.

Here's what you need to know right now.

Crypto's Federal Moment: The GENIUS Act Is Law

The single most significant development in U.S. crypto regulation isn't pending — it's already happened. The GENIUS Act (Guiding and Establishing National Innovation for U.S. Stablecoins) was signed into law, establishing the first comprehensive federal framework for payment stablecoins. After years of enforcement-by-litigation from the SEC, Congress delivered actual legislation.

What it does:

The GENIUS Act requires 100% reserve backing for stablecoins — specifically U.S. dollars, short-term Treasuries, or similarly liquid assets. Permitted issuers must be subsidiaries of insured depository institutions, federally qualified nonbank payment stablecoin issuers, or state-qualified issuers operating under a "substantially similar" regime approved by the Treasury.

Consumer protection is baked in: stablecoin holders have priority claims over all other creditors in the event of issuer bankruptcy, with expedited court review required.

Why it matters to your business:

If you issue, hold, or build products around stablecoins, you now have 18 months from enactment (or 120 days after final implementing regulations — whichever comes first) to comply. That clock is running. Stablecoin issuers that don't fit neatly into the permitted issuer categories need to map their structure now, not when the deadline arrives.

SEC and CFTC Finally Agree on Something: Crypto Jurisdiction

On the regulatory agency front, the SEC and CFTC issued a historic Memorandum of Understanding establishing a harmonized approach to crypto asset regulation — a development that the industry has demanded for years.

The joint interpretation lays out a coherent token taxonomy covering digital commodities, digital collectibles, digital tools, stablecoins, and digital securities. Critically, it addresses how a non-security crypto asset may become subject to securities laws — and how it may cease to be. This is the legal analysis that most token issuers have been trying to navigate through enforcement actions and no-action letters for the better part of a decade.

The SEC's Draft Strategic Plan for FY 2026–2030 doubles down on this direction, designating digital assets and distributed ledger technology as explicit priority areas. The message is clear: the SEC isn't stepping back from crypto — it's stepping in with a framework rather than a hammer.

Practical takeaway: Token issuers and exchanges need to revisit their asset classifications under the new taxonomy. What was considered a commodity may now carry securities law implications depending on how the offering is structured. Legal review of token structures isn't optional in this environment — it's foundational.

AI Law: Colorado Pulls Back, But the Wave Isn't Stopping

On the AI side, a major development for companies operating in Colorado — and a signal for how U.S. AI regulation is evolving nationally.

Colorado's AI Act (SB 24-205), which was slated to be the most expansive U.S. AI statute targeting "high-risk" AI systems, has been significantly amended and delayed. Governor Polis signed SB 189 on May 14, 2026, pushing the effective date to January 1, 2027 and gutting several of the original law's most burdensome provisions.

Gone from the revised law: the broad duty of care to prevent algorithmic discrimination, deployer obligations to maintain risk management programs, mandatory impact assessments, and extensive reporting requirements to the Colorado Attorney General. What remains is a narrower focus on disclosures and transparency around automated decision-making.

What drove the retreat?

Federal preemption pressure. President Trump's December 2025 executive order directed the Commerce Department to identify state AI laws that conflict with a national policy framework — a direct signal that the administration may move to preempt aggressive state regulation. Colorado legislators blinked. Others will face the same pressure.

That said, California's laws are still on track. The AI Transparency Act (SB 942) takes effect August 2, 2026, requiring generative AI providers to embed watermarks, latent disclosures, and detection tools for AI-generated content. California's Transparency in Frontier AI Act (SB 53), already in effect since January 1, 2026, requires frontier model developers to publish risk frameworks and report safety incidents, with penalties up to $1 million per violation for large companies.

The bottom line: Federal preemption is in play, but companies can't count on it. The compliance posture that makes sense right now is to build disclosure and transparency infrastructure that satisfies the California standard — because that's the floor that's likely to survive federal scrutiny.

What This Means for Founders and Operators

The common thread across crypto and AI regulation right now is framework-building — regulators and legislators are moving from ad hoc enforcement toward structural rules. That's good news for long-term legal clarity, but it creates a short-term compliance sprint for companies that haven't been tracking these developments.

At Launch Legal, we work with emerging technology companies, digital asset issuers, and startups navigating exactly this terrain. Whether you're assessing your stablecoin structure under the GENIUS Act, mapping your token taxonomy under the new SEC-CFTC framework, or building your AI disclosure policies ahead of the California and Colorado deadlines — you need counsel that understands both the law and the technology.

The fog is lifting. The rules are arriving. Now is the time to get ahead of them.

Sources