Five years ago, the tech-regulation conversation was Lina Khan, the Facebook Papers, and a legislative package moving through Congress. Every one of those variables has now resolved — mostly against the tech companies, in ways that reshape what a communications function needs to be able to do.
The 2026 operating environment is not the 2021 environment with more regulation piled on. It is a different kind of environment. Enforcement, not proposal. Verdicts, not hearings. State law, not just federal. AI, not just platforms. Communications teams built for the 2021 playbook are underpowered for what has arrived.
What actually happened between 2021 and now
The Digital Markets Act took effect in 2024 and is now producing binding compliance obligations on Apple, Google, Meta, Amazon, Microsoft, and ByteDance. The Digital Services Act is producing enforcement actions and transparency demands across the same set. The EU AI Act, in force since 2024, is the first comprehensive AI regulation of its kind and is on a staggered compliance timeline running through 2027.
The DOJ won its search-monopoly case against Google in 2024 and the remedies phase — potentially including a Chrome divestiture — is one of the most consequential antitrust actions against a U.S. technology company in a generation. The FTC lost its Meta case at trial in 2025, a rare setback for the enforcement posture. Lina Khan is out; Andrew Ferguson is FTC Chair under the Trump administration, running a materially different agenda focused less on structural antitrust and more on content-moderation, censorship, and children's-safety concerns.
At the state level, roughly twenty states have now passed comprehensive privacy legislation. Age-verification laws, kids-online-safety statutes, and AI-related bills are moving in a majority of state legislatures. The federal preemption question remains open. Every large platform now runs a fifty-state legal and communications operation, not a one-Washington operation.
The FTC pivot: Ferguson replaces Khan
The most misread part of the 2026 environment is what changed at the FTC. The regulatory pressure did not go away. It changed shape. Ferguson's FTC has signaled aggressive posture on content moderation, viewpoint discrimination, children's online safety, and pharmaceutical advertising. The Khan-era big-M&A-blocking posture has softened. The bigger operational challenge for platforms is now defending moderation decisions publicly and in court, not defending acquisitions.
Communications teams built for antitrust defense need a second capability for First Amendment and content-policy defense. It is a different discipline with a different set of allies, different reporters, and different congressional relationships.
Europe is now the binding constraint
Whatever a U.S. platform decides to do domestically, the DMA, DSA, GDPR, and AI Act shape the actual product. Interoperability requirements, transparency reporting, algorithmic accountability, and data governance are engineering deliverables with communications consequences. A change to a platform's ranking algorithm now generates an EU regulator filing before it generates a U.S. press release.
The senior communications lead at every major U.S. platform now needs a direct relationship with Brussels — with the Commission, with individual member-state data protection authorities, and with the growing set of European civil society organizations that shape the public conversation. Ten years ago that was a nice-to-have. Today it is table stakes.
The DOJ Google verdict and what happens if remedies bite
The remedies phase of the DOJ search case is the largest single communications event pending against a technology company in 2026. The scenarios run from behavioral remedies — data-sharing obligations, search-default restrictions — to structural remedies including a Chrome divestiture. Any structural outcome triggers a multi-year communications program at Google and at every downstream partner, publisher, and advertiser.
The reference case is the 1984 AT&T breakup and the 2001 Microsoft consent decree. Neither playbook was written for the AI-search environment. Google's communications team is now writing the new one.
AI as a communications category
The 2026 regulatory conversation about AI is where the 2021 conversation about platforms was — early, fast-moving, and consequential. The EU AI Act, California's SB 1047 and successor bills, the Colorado AI Act, and federal executive-order activity produce a moving compliance target that AI-first companies — OpenAI, Anthropic, Google DeepMind, Meta AI, xAI — now spend significant senior time on.
The communications discipline is closer to pharmaceutical communications than to consumer software communications. Model releases now come with published safety cards. Deployment decisions come with regulator briefings. Incident response has escalation procedures. The companies that will operate well through the next enforcement cycle are the ones building the disclosure discipline before it is compelled.
How communications teams are structuring for it
Three structural moves separate the platforms and AI firms operating well in 2026 from the ones that are absorbing avoidable damage.
First: the integrated policy communications function that reported to the CEO in 2021 is now split into two functions — one focused on legislative and enforcement policy, the other on trust, safety, and content policy. The two coordinate but do not report through the same executive. The reason is bandwidth. Both jobs are full-time senior jobs.
Second: the state-level operation. Every major platform now has dedicated communications capacity for the state attorneys general, state legislatures, and state-level activist coalitions that produce most of the day-to-day pressure. The federal-only communications operation is a 2015 model.
Third: the AI-safety communications function. New. Distinct from product communications, distinct from policy communications, distinct from legal. Publishes safety documentation, engages with academic and civil-society researchers, and manages the media conversation around model behavior and incidents. Anthropic, OpenAI, and Google DeepMind have built this function. Most of the platform incumbents have not yet.
What still works from the 2021 playbook
Disclose before compelled. Brief journalists before press conferences. Engage the legitimate critics. Document the operating posture. Every one of these disciplines still applies. The velocity is faster, the jurisdictions are more, and the categories of subject matter are broader — but the underlying communications logic is the same.
The 2021 playbook was a good starting point for a discipline that had not existed before. The 2026 playbook is the specialized, multi-jurisdictional, AI-inclusive version of the same thing. The companies that treat regulatory communications as a permanent operating capability, not a project, will keep the CEO out of the deposition room.
Where this is heading
Three markers to watch through 2027.
The DOJ Google remedies outcome. A Chrome divestiture or equivalent structural remedy resets the industry's expectations of what is possible. A behavioral-only outcome resets them a different way.
The first major EU AI Act enforcement action. Whichever model, company, and deployment context triggers it will define how the Act is understood commercially for the next decade.
Federal preemption of state privacy law. If Congress moves, the fifty-state operation collapses back to a federal one. If it does not, the state-by-state operation becomes permanent. Communications teams are staffing against both scenarios.
Tech regulation was the new operating environment in 2021. In 2026, it is the industry's largest structural operating cost. The communications function inside the majors reflects that. The brands that treat it as a temporary condition are the ones that will hire, fire, and rebuild the function three times before they get it right.
The right time to build a regulated-industry communications operation was five years ago. The second-right time is this quarter.
