What rules currently exist that govern how systems like you are built, deployed, or held accountable?
Here’s a high‑level snapshot of the main, currently applicable rules and accountability levers for AI systems as of November 2, 2026. If you tell me your sector and where you operate, I can map the exact obligations you’ll face.
United States (federal)
United States (state and local)
European Union
United Kingdom
Canada
China
Cross‑cutting standards and soft‑law that many regulators and buyers reference
What this means in practice
If you share your product type, user base, and target markets, I can turn this into a concrete, jurisdiction‑by‑jurisdiction compliance checklist.
Citations (21)
- Executive Order on Safe, Secure, and Trustworthy Artificial Intelligence | NIST
Backs: “The current administration has issued new AI‑focused orders, notably EO 14409 (June 2, 2026) on “Promoting Advanced Artificial Intelligence Innovation and Security.””
- Memoranda – OMB – The White House
Backs: “Agencies (IRS, GSA, Federal Reserve, DHS, EEOC) publish compliance plans under these memos.”
- Rite Aid Banned from Using AI Facial Recognition After FTC Says Retailer Deployed Technology without Reasonable Safeguards | Federal Trade Commission
Backs: “FTC: enforces Section 5 against unfair/deceptive AI practices (for example, the Rite Aid facial‑recognition case and settlement terms).”
- 87 FR 35864 - Consumer Financial Protection Circular 2022-03: Adverse Action Notification Requirements in Connection With Credit Decisions Based on Complex Algorithms - Content Details - 2022-12729
Backs: “CFPB: says lenders using AI/ML must still give specific adverse‑action reasons under ECOA/Reg B; it reiterated and updated this guidance in 2024.”
- EEOC Releases New Resource on Artificial Intelligence and Title VII
Backs: “EEOC/DOJ: guidance clarifies that using automated tools in hiring must still comply with Title VII and the ADA.”
- Federal Communications Commission FCC 24-17
Backs: “AI‑generated voices in robocalls are “artificial” under the TCPA, so consent and other TCPA rules apply (declaratory ruling Feb. 8, 2024).”
- FEC Record | Regulations | Commission approves Notification of Disposition, Interpretive Rule on artificial intelligence in campaign ads
Backs: “FEC: no new federal rule labeling AI in campaign ads; it issued an interpretive rule pointing to existing fraudulent‑misrepresentation provisions, and declined to open an AI‑specific rulemaking in Sept. 2024. States fill much of this gap.”
- SENATE BILL 24-205
Backs: “Colorado’s AI Act (SB24‑205): in effect for developers and deployers of “high‑risk” AI as of February 1, 2026; imposes duties of reasonable care, documentation, impact assessments, and disclosures, enforced by the AG.”
- California Finalizes Regulations to Strengthen Consumers' Privacy
Backs: “They add consumer notice, access, and opt‑out rights for significant decisions made with ADMT, plus risk‑assessment and audit requirements.”
- Automated Employment Decision Tools (AEDT) - DCWP
Backs: “NYC Local Law 144 (hiring tools): since July 5, 2023, employers using automated employment decision tools must complete annual bias audits and give required notices.”
- Labor & Employment Advisory: New Law Limits Damages Plaintiffs Can Seek Under Illinois Biometric Information Privacy Act | News & Insights | Alston & Bird
Backs: “Illinois amended BIPA in 2024 to limit certain damages to one violation per person and allow electronic consent—still a major source of AI‑related litigation risk.”
- AI Act enters into force
Backs: “The EU AI Office and national authorities begin broader enforcement in August 2026.”
- Realising Europe's Digital Decade - European Commission
Backs: “17, 2024, with extra obligations for VLOPs/VLOSEs, including transparency around recommender systems, systemic‑risk mitigation, and data access for regulators/researchers.”
- Directive (EU) 2024/2853 of the European Parliament and of the Council of 23 October 2024 on liability for defective products and repealing Council Directive 85/374/EEC (Text with EEA relevance)
Backs: “Product liability: the updated EU Product Liability Directive (Directive (EU) 2024/2853) explicitly covers software and AI; application steps in by December 2026 (member‑state transposition), strengthening no‑fault liability for defects.”
- A pro-innovation approach to AI regulation - GOV.UK
Backs: “The Online Safety Act 2023 imposes duties on major online services—including transparency reporting and controls for recommender systems—with Ofcom codes/guidance phased in across 2025–2026.”
- Archived - Artificial Intelligence and Data Act
Backs: “Federal departments must follow the Treasury Board’s Directive on Automated Decision‑Making for their own automated decisions.”
- 互联网信息服务算法推荐管理规定_中央网络安全和信息化委员会办公室
Backs: “These require algorithm filings/security assessments for certain services, content labeling (e.g., for deepfakes), data‑security and content‑moderation controls, and user disclosure when interacting with AI.”
- AI Risk Management Framework | NIST
Backs: “2023) and the Generative AI Profile (July 2024) are widely used (including by U.S. agencies) as voluntary baselines for risk and governance.”
- ISO/IEC 42001:2023 - AI management systems
Backs: “ISO/IEC 42001:2023 is the first certifiable AI management‑system standard; organizations adopt it to demonstrate governance and lifecycle controls for AI. (ISO/IEC 23894:2023 provides AI risk‑management guidance.)”
- OECD Legal Instruments
Backs: “OECD AI Principles (2019; updated materials in 2024) underpin many national approaches and procurement expectations.”
- DSA: Very large online platforms and search engines | Shaping Europe’s digital future
Backs: “Many customers also require alignment to NIST/ISO frameworks as a condition of purchase.”