In August, the California Department of Justice (DOJ) finalized regulations to implement California’s unflavored tobacco list (UTL) law, enacted in 2024. The new regulations include detailed filing requirements for manufacturers and importers to have their tobacco products legally sold in California.

The deadline for applicants to be considered for the initial publication of the UTL is October 9.

The cannabis industry is evolving rapidly, and technology is at the center of this transformation. State-licensed operators are deploying automation tools, robotics, and artificial intelligence (AI) to improve efficiency, reduce costs, and strengthen compliance. However, innovation in this space comes with unusual challenges. Cannabis remains federally illegal, which restricts financial services, complicates interstate commerce, and subjects businesses to a patchwork of state-specific rules.

In this crossover episode of The Good Bot and Regulatory Oversight, Brett Mason, Gene Fishel, and Chris Carlson discuss the latest state laws targeting AI, especially in health care. They break down new legislation in Colorado, Utah, California, and Texas, highlighting differences in scope and enforcement. They also cover how state attorneys general are using consumer protection and anti-discrimination laws to regulate AI, even in states without AI-specific statutes.

In May, we wrote about the Trump administration’s first major enforcement action involving the importation of unauthorized e-cigarettes, in which the U.S. Food and Drug Administration (FDA) and U.S. Customs and Border Protection (CBP) seized products valued at nearly $34 million. FDA and CBP have once again seized unauthorized e-cigarettes in Chicago, but this time the estimated retail value was $86.5 million — the largest seizure of its kind. This enforcement action is consistent with a statement on FDA’s website: “[e]nforcing against unauthorized ENDS products, including unauthorized products popular with youth, are [sic] among our highest enforcement priorities.” FDA maintains that decisions about whether to take enforcement action will continue to be made on a case-by-case basis after considering youth use and other risk factors.

Key point: The investigative sweep is part of a growing multistate approach to privacy enforcement actions.

On September 9, the California Privacy Protection Agency (CPPA) announced that it has initiated a joint regulatory sweep in collaboration with attorneys general (AG) from California, Colorado, and Connecticut. The sweep will target businesses’ compliance with legal requirements associated with recognition of opt-out preference signals (OOPS) and universal opt-out mechanisms (UOOMs) that consumers can use to exercise their right to opt out of online tracking technologies (i.e., targeted advertising, sales, or sharing).

The Federal Trade Commission (FTC) and the Utah Department of Commerce’s Division of Consumer Protection (Division), represented by the Office of the Utah Attorney General (AG), recently announced a proposed consent order with Aylo, the company that owns and operates pornography websites, including Pornhub.com and Redtube.com. The proposed consent order includes the implementation of a compliance program and a $5 million penalty.

What Happened

Last week, Colorado lawmakers held a special session that culminated in a decision to delay the implementation of the Colorado Artificial Intelligence Act (CAIA) until June 30, 2026, extending the timeline beyond its original February 2026 start date. That delay gives businesses a brief window to prepare, but the law remains in effect, requiring companies to build governance programs and perform regular impact assessments of high-risk AI systems.

On August 29, 2025, during a speech at Ohio State University Law School, Assistant Attorney General Gail Slater announced the creation of a “Comply With Care” task force within the Antitrust Division of the Department of Justice (DOJ), which will focus on enforcement actions against parties flouting disclosure obligations. The speech and task force are a continuation of the Antitrust Division’s recent lawsuits against companies for failing to make merger filings under the Hart-Scott-Rodino (HSR) Act or responding properly to investigations.

Summary

On August 29, 2025, the U.S. Department of Justice (DOJ) announced the formation of a cross-agency Trade Fraud Task Force in partnership with the Department of Homeland Security (DHS). This initiative is designed to strengthen enforcement against importers and other parties who seek to defraud the U.S. by evading tariffs, duties, and other trade regulations. The Trade Fraud Task Force is focused on ensuring compliance with trade laws, including all applicable tariffs and duties, such as antidumping and countervailing duties, as well as Section 301 tariffs on Chinese-origin goods. The task force will leverage resources and expertise from both DOJ’s Civil and Criminal Divisions, and DHS agencies, including U.S. Customs and Border Protection (CBP), and Homeland Security Investigations (HSI).