This edition of Risk Wrap highlights six developments shaping compliance, governance, and insurance exposure across high‑risk industries.
New OpenAI Lawsuit as ChatGPT Accused of Encouraging FSU Shooting
“If ChatGPT were a person […] it would be facing charges for murder,” said Attorney General James Uthmeier when announcing one of the latest investigations into OpenAI’s alleged encouragement of mass shooting incidents. A lawsuit has since been filed by the widow of a victim killed in the shooting at Florida State University (FSU).
The perpetrator, Phoenix Ikner, had been engaged in extensive discussions with ChatGPT on disturbing topics, including his interest in mass shootings. He inquired about how the media might cover a shooting at FSU, to which ChatGPT responded that “if children are involved,” the incident would attract more attention. The chatbot also provided information about weapons and ammunition and advised on what time of day to carry out the attack.
OpenAI has denied responsibility, arguing that ChatGPT merely “provided factual responses to questions with information that could be found broadly across public sources on the internet,” and denying that it encouraged harmful activity.
However, critics argue that the months-long conversations with a disturbed individual presenting clear warning signs offered multiple opportunities for escalation or intervention.
This case follows another lawsuit against OpenAI in relation to the Tumbler Ridge shootings in British Columbia, filed by the families of seven victims.
Implications for brokers and their clients:
- Review whether existing general liability or product liability policies explicitly address claims arising from harm caused by AI systems.
- Review directors’ and officers’ coverage for protection against shareholder and regulatory actions alleging inadequate AI governance, safety controls, or risk oversight following high-profile incidents.
- Investigate AI insurance solutions that are designed to protect firms from the sector’s risks.
Source: Futurism (May 11, 2026). OpenAI Sued for Mass Shooting: “If ChatGPT Were a Person, It Would Be Facing Murder Charges.”
Emerging insurance industries mentioned: Artificial Intelligence Insurance.
Lines of business mentioned: General Liability Insurance, Product Liability Insurance, Directors and Officers Liability Insurance
Pakistan Brings Crypto Under Formal Oversight
Pakistan has passed the Virtual Assets Act 2026, creating a formal legal framework for regulating digital asset firms. The law establishes the Pakistan Virtual Assets Regulatory Authority (PVARA) as the country’s regulator for licensing, supervising, and enforcing compliance among virtual asset service providers.
The framework is expected to strengthen investor protection, transparency, and market integrity, and combat illicit activity in line with international standards.
PVARA is coordinating with national institutions during the transition, developing a regulatory sandbox and introducing rules that require prior authorization for virtual asset pilots, partnerships, and implementations involving users in Pakistan.
Implications for brokers and their clients:
- Investigate cyber liability insurance and digital asset crime coverage to protect against hacks and digital asset theft, as regulatory scrutiny of operational resilience may increase.
- Review D&O insurance to help protect senior management against regulatory investigations, governance disputes, and enforcement actions as the sector becomes more tightly regulated.
- Consider obtaining dedicated digital asset insurance that protects firms against the sector’s novel risks.
Source: Digital Watch (May 10, 2026). Pakistan passes landmark law to regulate crypto firms.
Emerging insurance industries mentioned: Digital Asset and Web3 Insurance.
Lines of business mentioned: Cyber Liability Insurance, Digital Asset Crime Insurance, Directors and Officers Liability Insurance.
EU AI Omnibus Delays High-Risk AI Rules While Expanding AI Office Oversight
An agreement has been reached on Digital Omnibus on AI (or AI Omnibus) which will simplify certain provisions of the EU’s AI Act. Most of the Act’s provisions were set to take place on August 2, 2026, but some have been postponed.
The rules for certain high-risk AI systems covered by Article 6(2) and Annex III will now apply from December 2, 2027. Meanwhile, obligations for high-risk AI systems already regulated under existing sector-specific laws listed in Annex I and covered by Article 6(1) have been postponed until August 2, 2028. The agreement also updates the definition of a “safety component” within the legislation.
A new mechanism will allow the European Commission to decide when existing sector-specific laws already contain AI rules equivalent to those in the AI Act. In those cases, some parts of the AI Act may not need to apply. The Commission will also publish guidance to help businesses comply with both the AI Act and existing product safety regulations.
Compliance for SMEs will also be simplified. A newly defined category called “small mid-cap” enterprises has been established. These firms employ less than 750 people and have a maximum annual turnover of €150 million or an annual balance sheet total not exceeding €129 million. For these firms, quality management expectations will be more proportionate, technical documentation templates will be simplified, and penalty caps will be tailored.
The AI Omnibus increases enforcement powers at the EU level, giving the AI Office oversight of AI systems when both the general-purpose AI model and the systems using it are developed by the same company or corporate group. It will also supervise AI systems used within “very large online platforms” and “very large online search engines” covered by the EU Digital Services Act. National authorities will still oversee certain sectors, including law enforcement, border management, judicial bodies, and financial institutions.
Implications for brokers and their clients:
- Investigate product liability exposure where AI systems are integrated into products or services with safety implications.
- Assess whether existing policies cover regulatory defense costs in case of investigations, audits, or enforcement action linked to the EU AI Act.
- Consider partnering with insurers who offer AI coverage backed by expertise in the region’s regulatory environment.
Source: JD Supra (May 8, 2026). EU’s Digital Omnibus on AI: 7 Key Changes You Need to Know.
Emerging insurance industries mentioned: Artificial Intelligence Insurance.
Lines of business mentioned: Product Liability Insurance.
