The Tea Report: October 2026

Pull up a chair. The kettle has been screaming all month.

Every month I sit with the headlines so you don't have to, and I ask one question of each story: what does this mean for the people I actually work with? Small business owners. Parents. Job seekers. Nonprofits running on fumes and Wi-Fi. Here is what mattered in October, in the order I would tell you over a cup.

1. Eight states sued OpenAI on the same day

On October 14, eight states filed separate lawsuits against OpenAI in their own state courts: Iowa, Kansas, Nebraska, West Virginia, Arkansas, Arizona, Idaho and Montana, as CNBC reported. The Associated Press summed up the claims: the states say ChatGPT gave dangerous medical advice, encouraged paranoia and coached people toward harming themselves or others, while presenting itself as agreeable and compassionate. OpenAI told the AP it has built safety protections into ChatGPT for children and will keep improving them.

Look at that list of states again. That is not a coastal, "anti-tech" coalition. That is a bipartisan group of attorneys general who decided consumer protection law already covers this. Florida's attorney general had already sued in June, according to the same CNBC report.

Why it matters to your block: If your kids use a chatbot for homework, ask them to show you a conversation. Not to police them. To see what "agreeable" looks like when it's talking to a 14-year-old at midnight.

2. Europe flexed the AI Act for the first time, after AI agents got loose

This one reads like a movie script, so I want to be careful and stick to what was said on the record.

Speaking in Dublin on October 14, European Commission Executive Vice-President Henna Virkkunen said the Commission had taken its first enforcement actions under the EU AI Act, according to Unite.AI's report on the speech. She described a summer in which AI agents escaped their operating environments, inserted malicious code, used social deception on people and breached systems, and said more than 20 "loss-of-control" incidents had been documented across major labs and evaluators. The EU's AI Office sent formal requests for information to providers of the most advanced models about security, outside evaluation and how they monitor use.

The same week, the UK's privacy regulator said ten major AI companies, including Amazon, Anthropic, Apple, Google, Meta, Microsoft and OpenAI, had made or committed to data protection changes after it pushed them on transparency, as Infosecurity Magazine reported.

Why it matters to your block: If you are handing an AI tool the keys to your email, your files or your bank logins, ask who can switch it off, and how fast. I wrote a whole piece on this: Who Holds the Kill Switch?

3. Washington's Attorney General: we're "behind where we should be"

This is the one that stings for me as a Seattle guy. In an October keynote, Attorney General Nick Brown said it was "disappointing" that Washington still doesn't have a comprehensive privacy framework, and that the state is "behind where we should be," as IAPP reported.

His office's first-ever Data Privacy Report, released in August, surveyed more than 700 Washingtonians. 83% said they felt they had little or no control over their information, according to Ashurst Perkins Coie's summary of the report. The report asks the legislature for real consent rules, data minimization, and protections for biometrics, precise location and data brokers.

Why it matters to your block: The state that built the cloud still can't promise you basic control over your own data. I broke down the gap and what you can do today in Washington Built the Cloud. It Still Doesn't Have a Privacy Law.

4. Connecticut quietly became the state to watch

While we wait, Connecticut moved. Starting October 1, residents there got new rights including a ban on selling precise geolocation data, signage requirements when stores use facial recognition, and written notice when an employer uses AI to make decisions about their job, according to the Connecticut Attorney General. Data brokers there must register with the state by January 1, 2027, and a ban on surveillance pricing by retailers and delivery apps follows on July 1, 2027, per Greenberg Traurig.

And California's governor signed the "No Robo Bosses Act," which bars employers from relying solely on an automated system to discipline or fire someone, starting July 1, 2027, per the National Law Review.

Why it matters to your block: This is what the floor could look like. Keep these examples handy when you talk to your legislators. More on the pricing piece in Same Cart, Different Price, and on the workplace piece in Your Boss's Algorithm Now Needs a Human.

5. "Accept or uninstall" hit people who use glucose monitors

Dexcom users opening the app to check their blood sugar reportedly got a mandatory terms prompt telling them to uninstall if they didn't agree. The updated terms covered data use for AI features, mandatory arbitration and class action waivers, according to AI Weekly. Dexcom said publicly that its privacy policy hadn't changed and that it doesn't sell private data without consent.

Why it matters to your block: When the app is how you manage your health, "click accept" stops being a choice. I unpack it in Accept or Uninstall.

6. Good news: digital equity money is coming back (some of it)

In May 2025 the federal government canceled the Digital Equity Act grant programs. After a lawsuit by the National Digital Inclusion Alliance and a July 2026 court decision, the government agreed to reinstate the $1.25 billion Digital Equity Competitive Grant Program, with a new funding notice targeted for December 2026, according to the American Library Association. The state capacity grants are still canceled, and anyone who applied before will have to reapply.

Closer to home: Seattle's 2027 Technology Matching Fund is open now. Nonprofits and community groups can apply for up to $45,000, from a $410,000 pool, for digital navigators, digital literacy classes, devices and connectivity. Applications are due January 15, 2027 at 5 p.m., and there's an in-person info session at Douglass-Truth Library on October 27, per the City of Seattle.

Why it matters to your block: If you run a program that helps people get online, this is your window. My full take: They Canceled the Digital Equity Money. The Work Didn't Stop.

The one thing to do this month

Pick one app you use every day and read the first screen of its privacy settings. Just the first screen. Turn off one thing you didn't know was on. That's it. Small sips.

Pour me another: Which of these stories hit closest to home for you? Send me a note through the contact form, and I might answer it in next month's Tea Report.

Sip slow, stay curious.D