The most concrete AI governance development this week came through a vendor-union agreement rather than a federal statute. Microsoft’s student rules define data-use, advertising, audit and chatbot-design obligations while the national legislative debate remains unsettled. Contractual commitments are beginning to fill part of the gap between voluntary principles, district procurement and future regulation.

Microsoft agreed with the American Federation of Teachers to restrict training on student and educator data except for defined safety uses. The agreement bars sale of covered data and its use for advertising or unrelated product development. It restricts features intended to create emotional dependency and calls for audits and transparency. The commitments are scheduled to take effect November 1.

Large school districts in New York City and Los Angeles separately announced pauses and contract reviews. Technology executives simultaneously urged federal oversight of advanced models. The White House and congressional leaders remained divided over the need and scope of national AI restrictions. No single federal statute supplied a uniform audit, incident-reporting and student-data regime for all major vendors.

Procurement contracts can define data retention, permitted uses, audit access and termination rights more quickly than legislation. Contract duties do not automatically apply to products bought by other districts or directly by families. Independent audits require access to technical evidence, not only vendor attestations. Federal and state law can create minimum rights that contracts may strengthen but cannot waive.

The record remains incomplete in defined ways. The Microsoft commitments had not yet taken effect or undergone an independent compliance cycle. The next observable steps are The November implementation package and audit disclosures. Whether districts standardize contract clauses across vendors and whether Congress defines a federal floor.