Under California’s Fair Investment Practices by Venture Capital Companies Law (the FIPVCC), venture capital funds with a nexus to California (Covered Entities) will be required to register with the California Department of Financial Protection & Innovation (the DFPI) starting in March 2026 and report demographic information about their portfolio companies to the DFPI starting in April 2026. The purpose of the FIPVCC is to increase transparency regarding the demographics of the founding teams of the portfolio companies in which Covered Entities invest.

The General Services Administration (GSA) recently announced changes to procedural guidance that may affect contractor eligibility for GSA contracts. GSA issued the IT Security Procedural Guide: Protecting Controlled Unclassified Information (CUI) in Nonfederal Systems and Organizations Process CIO-IT Security-21-112, which set out a cybersecurity framework for protecting CUI that is similar to the Cybersecurity Maturity Model Certification (CMMC) for DoD contracts.