Industry Insights

Industry Insight – October 2026

In this month's Industry Insights, we explore:

• Florida's AI Mandate
  • Florida's Board of Education passed AI rules on September 16, 2026, for K-12 districts and the 28 Florida College System colleges, including family opt-in and a non-AI alternative.
  • The Board of Governors issued a notice of intent for the state's 12 public universities, so IT leaders touching more than one segment face two asynchronous rule sets.
• Canada's Big Six Tokenize Deposits
  • On September 22, 2026, BMO, CIBC, National Bank, RBC, Scotiabank, and TD announced they are exploring a joint tokenized-deposit solution. No launch date, ledger design, or governance model has been announced.
  • For FSI CIOs, the announcement is a reason to revisit the stablecoin decision, not evidence that investment is urgent.
• The Chief Digital Services Officer (CDSO) Emerges
  • Canada's Treasury Board Secretariat is replacing the traditional CIO role with the CDSO, measured on user adoption, citizen experience, and satisfaction.
  • Data and information governance is the one domain the CDSO cannot delegate.
• The Widening Drone Threat
  • A Police Executive Research Forum report warns that falling drone costs and advancing AI are creating a public-safety threat for US cities. The Safer Skies Act lets local agencies disable unauthorized drones at major public events.
  • Detection depends on network and spectrum infrastructure, which brings government IT into a responsibility framed until now as law enforcement's.
• Two Policy Paths for Healthcare Cybersecurity
  • A House discussion draft and HHS's proposed HIPAA Security Rule overhaul call for similar controls, including stronger authentication, encryption, monitoring, and penetration testing. Scope, timing, and funding remain unresolved.
  • The control categories are likely to persist even if implementation details change. Legacy systems and medical devices are the main gaps to watch.
• Physical AI Moves Onto the Factory Floor
  • Vision-Language-Action models convert vision and language into motor control, targeting work where parts and products vary and exceptions are common.
  • Physical AI is likely to emerge as a stack rather than a single model, and manufacturers may begin judging automation by time-to-new-skill.
• The Data Behind Mining Synergies
  • On September 13, 2026, Gold Fields made a confidential, non-binding proposal for Northern Star Resources, which its board unanimously rejected. Gold Fields' US$4 to 5 billion synergy estimate is preliminary and prepared without due diligence.
  • Operational data becomes the evidence that decides whether the savings are real.
• Professional Services' Blind Spot
  • Ernst & Young disclosed that an unauthorized third party accessed a third-party IT service management platform used by its tax support teams, and downloaded tickets, some containing client tax information.
  • CIOs should expect vendor-risk conversations to extend to internal support and ticketing platforms.
• The Rise of Agentic Commerce
  • AI shopping agents are emerging as a retail channel with no agreed standard, and retailers are pushing back. Amazon blocked Meta's Muse agent from checkout access in September 2026.
  • The central question is whether external agents can accurately and securely represent a retailer's products, offers, and policies.
• Grid's AI Paradox: AI Is Both the Load & the Solution
  • National Grid Partners' September 2026 survey found 74% of utilities say AI-driven data center growth is already affecting grid reliability, and 78% have deployed at least one AI application for large-load customer planning.
  • Trusted data and governance are likely to limit how far AI can scale in operations.
• Plan for Policy Change in Sports Streaming
  • On September 14, 2026, Amazon, Netflix, and YouTube formed the Streaming Access and Choice Alliance to give streaming platforms a coordinated voice in sports-distribution policy.
  • The coalition creates no new technology requirements, but media-rights decisions carry consequences for identity, entitlement, integrations, and fan data.