September brought a number of significant privacy and artificial intelligence (AI) developments in the United States and abroad, with several requirements taking effect in October or over the coming months. Connecticut’s expanded privacy framework takes effect October 1, while California enacted new requirements governing AI auditors, companion chatbots and customer-service chatbots. European regulators finalized guidance addressing the interaction between the Digital Services Act (DSA) and the General Data Protection Regulation (GDPR), and regulators in Australia, South Korea and Hong Kong continued to develop privacy rules for automated and increasingly autonomous AI systems.