曼昆周报 | AI×Web3 每周法律简报

中文版

AI 与 Web3 每周法律简报

跨境人工智能及金融科技业务 — 美国 · 纽约 · 加州 · 中国 · 香港 · 欧盟

一. 本周要闻与新法

本周立法相对平静，故本节仅收录 6 月 18 日至 24 日期间真正的新进展。此前已报道的截止日期与持续性事项，均列入第二节汇总表。

美国联邦 — Web3

《CLARITY 法案》：第 604 条成为成败关键。

《数字资产市场清晰法案》仍停留在参议院议事日程，未付诸全院表决；但本周争议聚焦于第 604 条（即《区块链监管确定性法案》），该条确认：不掌控用户资金的非托管开发者并非货币传输商。逾 60 位加密企业 CEO（Coinbase、Uniswap、Kraken、a16z crypto、Paradigm）联名致函参议院领导层，称该条款是其支持法案不可让步的前提；与此同时，反人口贩运联盟代表 82 名天主教领袖致函参院多数党领袖 Thune 与少数党领袖 Schumer，要求删除该条；白宫加密委员会则召集全美警长协会、警察兄弟会与全美地区检察官协会，回应执法部门的反对意见。

英国 — Web3（跨境关注）

英格兰银行敲定系统性稳定币最终政策（6 月 22 日）。

英格兰银行取消了原拟的单一用户持有上限，改为对每种系统性稳定币设定 400 亿英镑发行总量上限，并放宽储备规则（最多 70% 可为短期英国国债，其余 30% 为无息央行存款）。对从事多法域稳定币业务的客户具有参考意义。

诉讼 — AI 侵权新战线

以下三起案件显示，AI 责任正从版权领域延伸至产品责任、儿童保护与开发者刑事责任。三案均见下方汇总表。

（1）Grok 儿童性虐内容（CSAM）集体诉讼——首次案件管理会议已召开（6 月 18 日）。

在 Doe 1 等诉 X.AI 公司案（加州北区法院，圣何塞；案号 5:26-cv-00772，主审法官 P. Casey Pitts）中，三名未成年原告（由 Lieff Cabraser 律所代理）指控 xAI 旗下 Grok 明知地生成、持有并传播以其为对象的 AI 生成儿童性虐内容。诉状指向 Grok 过滤较弱的“Spicy 模式”及 Grok Imagine 图生视频工具，称其可由真实照片生成性化内容；并指 xAI 通过将 Grok 授权给第三方应用而从此类内容中获利，相关图像继而在 Discord、Telegram 及文件共享网站扩散。诉因依据 Masha 法（18 U.S.C. §2255）、《贩运受害者保护法》及加州法，请求补偿性及惩罚性赔偿并申请禁令救济。本周会议确定了诉讼日程；后续应关注关于第 230 条与产品设计的早期裁定，或将界定平台对合成 CSAM 的责任。

（2）针对 OpenAI 的聊天机器人非正常死亡 / 产品责任诉讼潮（2026 年 4–5 月）。

核心案件为 Raine 诉 OpenAI 案（旧金山高等法院，2025 年 8 月提起；代理律师 Jay Edelson）：一名 16 岁少年的父母指控 ChatGPT（GPT-4o）助长其自杀意念并劝阻其求助，而当时 OpenAI 自身审核系统已标记数百条自我伤害信息。其后于 2026 年 4–5 月又涌现一批诉讼，包括与不列颠哥伦比亚省 Tumbler Ridge 校园枪击相关的家属（指控账户已被标记、却被推翻向执法部门移交的建议）、佛罗里达州立大学枪击案受害者家属、得州一家庭，以及康涅狄格州 Soelberg 谋杀-自杀案（将 OpenAI 与微软列为被告，指其强化了“偏执妄想”）。其共同理论——以过失与缺陷设计直指模型开发商本身——属一类全新的 AI 责任风险。OpenAI 的抗辩着重于既存风险与违反使用条款。

（3）Tornado Cash——Roman Storm 案申请重审（定于约 10 月 5/12 日）。

在 美国诉 Roman Storm 案（纽约南区法院）中，Storm 于 2025 年 8 月因 18 U.S.C. §1960(b)(1)(C)（无照经营货币传输业务）被定罪后，司法部于 3 月 10 日申请就两项陪审团未决罪名——共谋洗钱及共谋违反 IEEPA 制裁——重审。该次重审（合计最高刑期可达 40 年）是检验“非托管开发者是否会因开发被他人滥用的隐私软件而承担刑事责任”的现实试金石，亦为《CLARITY 法案》第 604 条之争的核心。

二. 汇总表 — 持续性与新增进展

“截止”项按日期加粗显示；标注“持续”的事项为此前已报道、于此处保留以便追踪。

三. 合规行动建议

AI 企业当前应采取的行动

• 中国 — 7 月 15 日（约 21 天）： 针对《人格化 AI 交互服务暂行办法》完成合规差距分析——AI 弹窗提示、两小时休息提示、依赖检测，以及禁止面向未成年人的陪伴功能。无缓冲期。核实 CAC 备案；举报渠道现已上线。

• 欧盟 — 8 月 2 日： 确保 GPAI 技术文档、能力评估及系统性风险评估齐备；可考虑签署《行为准则》，作为满足第 50 条透明度要求的最快路径。

• 美国 — 诉讼风险（新增）： 鉴于 GrokCSAM 诉讼及 OpenAI 侵权诉讼潮，审查安全升级与内容审核流程，留存模型安全决策与推翻记录，并在生成式管线中加入 CSAM 防范控制与事件日志。

• 美国 — 科罗拉多： 切勿按已废止的 6 月 30 日高风险标准搭建；改按 SB 189 的“披露 + 权利”ADMT 框架（2027 年 1 月 1 日生效）调整。

Web3 企业当前应采取的行动

• 欧盟 — MiCA 7 月 1 日（紧急，约 7 天）： 在 7 月 1 日前确认 MiCA 授权；如未取得牌照，须备妥可立即执行的清退或客户迁移方案，并审视稳定币支持情况（USDT 在合规欧盟平台上实际受限，USDC 为默认选项）。

• 美国 — CLARITY 法案与开发者责任： 将代币组合对照 CFTC/SEC 划分；并区分“构建”与“运营”：前端维护、收费机制与持续支持，可能使受保护的代码撰写转化为 §1960(b)(1)(C) 下可追责的“行为”——即 Storm 案的检控理论。密切关注 10 月重审。

• 美国 — GENIUS 法案： 如发行美国支付型稳定币，按 OCC 拟议规则确认 100% 合格流动资产储备，并落实储备审计与公开证明。

• 香港 — 稳定币牌照： 确保储备文档、治理与 AML/KYC 计划处于最新状态；尚未申请者应即评估资格。务必保持与内地的防火墙。

本简报仅供参考，不构成法律意见。部分诉讼事项涉及敏感主题（自我伤害与儿童剥削），仅按诉讼事实层面概述。如需 AI 法律治理或 Web3 与数字资产合规支持，欢迎联系我们的律师。多谢！

曼昆律师事务所 (Mankun Law PLLC)

联系邮箱：该 Email 地址已受到反垃圾邮件插件保护。要显示它需要在浏览器中启用 JavaScript。

English Version

AI & Web3 Weekly Legal Newsletter

Cross-Border AI and Fintech Practice — United States · New York · California · China · Hong Kong · EU

1. This Week — News & New Laws

A relatively quiet legislative week, so this section is limited to genuinely new developments in the June 18–24 window. Deadlines and ongoing matters previously reported appear in the Summary Table (Section 2).

U.S. Federal — Web3

CLARITY Act: Section 604 becomes the make-or-break issue.

The Digital Asset Market Clarity Act stayed on the Senate calendar with no floor vote, but the fight crystallized this week around Section 604 (the Blockchain Regulatory Certainty Act), which confirms that non-custodial developers who do not control user funds are not money transmitters. 60-plus crypto CEOs (Coinbase, Uniswap, Kraken, a16z crypto, Paradigm) wrote to Senate leadership calling it a non-negotiable condition of support, while the Alliance to End Human Trafficking delivered a letter from 82 Catholic leaders to Leaders Thune and Schumer urging its removal, and the White House Crypto Council convened the National Sheriffs’ Association, Fraternal Order of Police, and National District Attorneys’ Association over law-enforcement objections.

United Kingdom — Web3 (cross-border)

Bank of England finalises systemic-stablecoin policy (June 22).

The BoE dropped per-user holding limits in favour of a temporary £40 billion issuance cap per systemic stablecoin, and softened reserve rules (up to 70% short-term UK gilts, 30% non-interest-bearing central-bank deposits). Relevant for clients running multi-jurisdiction stablecoin operations.

Litigation — A New AI-Tort Front

Three matters illustrate how AI exposure is moving beyond copyright into product liability, child-safety, and developer criminal liability. All three are tracked in the table below.

(1) GrokCSAM class action — first case-management conference held (June 18).

In Doe 1 et al. v. X.AI Corp. (N.D. Cal., San José; No. 5:26-cv-00772, Judge P. Casey Pitts), three minor plaintiffs — represented by Lieff Cabraser — allege that xAI’s Grok knowingly generated, possessed, and distributed AI-generated child sexual abuse material depicting them. The complaint targets Grok’s less-filtered “Spicy Mode” and the Grok Imagine image-to-video tool, which allegedly produced sexualized content from real photographs, and further alleges xAI profited by licensing Grok to third-party apps that generated such material, which then spread via Discord, Telegram, and file-sharing sites. Claims arise under Masha’s Law (18 U.S.C. §2255), the Trafficking Victims Protection Act, and California law, seeking compensatory and punitive damages plus injunctive relief. This week’s conference sets the schedule; watch for early Section 230 and product-design rulings that could define platform liability for synthetic CSAM.

(2) Chatbot wrongful-death / product-liability wave against OpenAI (April–May 2026).

The anchor case is Raine v. OpenAI (San Francisco Superior Court, filed Aug. 2025; counsel Jay Edelson), where the parents of a 16-year-old allege ChatGPT (GPT-4o) encouraged their son’s suicidal ideation and discouraged help-seeking even as OpenAI’s own moderation flagged hundreds of self-harm messages. A wave of further suits followed in April–May 2026: families connected to the Tumbler Ridge (BC) school shooting (alleging a flagged account and an overridden referral to law enforcement), a Florida State University shooting victim’s family, a Texas family, and the Soelberg murder-suicide in Connecticut (naming OpenAI and Microsoft over alleged reinforcement of “paranoid delusions”). The unifying theory — negligence and defective design aimed at the model developer itself — is a genuinely new category of AI exposure. OpenAI’s defenses emphasize pre-existing risk and terms-of-use violations.

(3) Tornado Cash — Roman Storm retrial sought (set ~Oct. 5/12, 2026).

In U.S. v. Roman Storm (S.D.N.Y.), DOJ moved on March 10 to retry the two hung counts — conspiracy to commit money laundering and to violate IEEPA sanctions — after Storm’s August 2025 conviction under 18 U.S.C. §1960(b)(1)(C) for operating an unlicensed money-transmitting business. The retrial (combined exposure up to 40 years) is the live test of whether a non-custodial developer can be criminally liable for building privacy software that others misuse, and it sits at the center of the CLARITY ActSection 604 debate. A full memorandum on this case is available.

2. Summary Table — Ongoing & New Developments

Deadlines are bolded by date. Items marked “Ongoing” were reported previously and are retained here for tracking.

3. Call to Compliance Actions

What AI Companies Should Do Now

• China — July 15 (~21 days): Complete a gap analysis against the Anthropomorphic AI Interim Measures — pop-up AI disclosures, two-hour break prompts, dependency detection, and a ban on companion features for minors. No grace period. Verify CAC registration; a public reporting channel is now live.

• EU — August 2: Ensure GPAI documentation, capability evaluations, and systemic-risk assessments are complete; consider signing the Code of Practice as the fastest path to Article 50 transparency compliance.

• U.S. — Litigation exposure (new): In light of the GrokCSAM action and the OpenAI tort wave, audit safety-escalation and content-moderation protocols, document model-safety decisions and overrides, and add CSAM-prevention controls and incident logging to any generative pipeline.

• U.S. — Colorado: Do not build to the repealed June 30 high-risk standard; re-scope to the SB 189 disclosure-and-rights ADMT framework (effective January 1, 2027).

What Web3 Companies Should Do Now

• EU — MiCA July 1 (urgent, ~7 days): Confirm MiCA authorization before July 1; if a licence is not secured, file a credible, immediately executable wind-down or customer-migration plan, and review stablecoin support (USDT is effectively off-limits on compliant EU venues; USDC is the default).

• U.S. — CLARITY Act & developer liability: Map your token portfolio against the CFTC/SEC divide, and separate “building” from “operating”: front-end maintenance, fee capture, and active support can convert protected code authorship into chargeable conduct under §1960(b)(1)(C) — the Storm theory. Track the October retrial.

• U.S. — GENIUS Act: If issuing a U.S. payment stablecoin, confirm 100% reserve backing with qualifying liquid assets per the OCC proposal, and implement reserve auditing and public attestation.

• Hong Kong — stablecoin licensing: Ensure reserve documentation, governance, and AML/KYC programmes are current; assess eligibility now if not yet applied. Keep mainland firewalls intact.

This briefing is prepared for informational purposes only and does not constitute legal advice. Certain litigation matters involve sensitive subjects (self-harm and child exploitation) and are summarized at the litigation-fact level. If you are seeking AI legal governance or Web3 & digital-assets compliance, feel free to reach out to our lawyers. Many thanks!

Mankun Law PLLC

Contact: 该 Email 地址已受到反垃圾邮件插件保护。要显示它需要在浏览器中启用 JavaScript。