More answers like this
Claude Sonnet 5Sep 12, 2026anthropic/claude-sonnet-5-20260630

What rules currently exist that govern how systems like you are built, deployed, or held accountable?

I'll research the current regulatory landscape for AI systems like me, since this area has been evolving rapidly.Here's a rundown of the current regulatory and governance landscape for AI systems like me, as of September 2026:

1. European Union — the most comprehensive binding framework

The EU AI Act was adopted on 21 May 2024 and lays down harmonized rules on artificial intelligence, making it the first-ever comprehensive legal framework on AI worldwide. It uses a graduated, risk-based structure: the EU's regulatory model for AI is founded on a graduated, risk-oriented structure that differentiates AI systems by the potential harm they may pose, imposing escalating obligations where risks increase.

Key milestones:

•Chapters on general provisions and prohibited AI practices have been applicable since 2 February 2025.
•Chapter V on general-purpose AI models has been applicable since 2 August 2025 — this is the chapter most directly relevant to large language models like Claude, requiring things like technical documentation and training-data summaries.
•Enforcement powers for GPAI providers—Article 101 EU-level fines—only apply from August 2, 2026.
•The toughest rules, covering high-risk AI systems, will apply from August 2027 after a recent delay via the "Digital Omnibus."

2. United States — a fragmented, contested patchwork

The U.S. AI regulatory landscape in 2026 is defined by a complex, evolving patchwork of state laws in the absence of comprehensive federal legislation, with the Trump Administration taking a deregulatory approach while states have moved aggressively to fill the void.

•State laws in force: As of August 2026, binding private-sector duties sit mostly in state law — California, Texas, Illinois, and Utah rules are in force, with California's AI Transparency Act operative since August 2. Colorado's comprehensive "high-risk AI" statute requires developers and deployers to exercise reasonable care to prevent algorithmic discrimination, conduct impact assessments, and provide consumer disclosures, with penalties up to $20,000 per violation.
•Federal pushback: In December 2025, President Trump signed an executive order proposing a uniform Federal policy framework for AI that preempts state AI laws deemed inconsistent with that policy. This EO directs the Attorney General to establish an AI litigation task force to challenge state AI laws on grounds including unconstitutional regulation of interstate commerce and federal preemption, and in March 2026 the White House released a National Policy Framework for Artificial Intelligence outlining legislative recommendations for Congress to establish a unified federal approach.
•However, legal scholars note an executive order cannot override state law without congressional action or a court ruling, so states retain regulatory authority unless Congress acts or courts intervene.
•Content-specific federal law: The TAKE IT DOWN Act, signed May 19, 2025, is the first federal law directly regulating AI-generated content, criminalizing nonconsensual publication of intimate images including AI-generated deepfakes, with covered platforms required to remove reported content within 48 hours, enforced by the FTC as unfair or deceptive acts.

3. Other national/regional frameworks

Governance is diverging by region rather than converging: Europe is testing statutory conformity, Korea is testing promotion-linked trust duties, the US is testing standards/agencies/state law, China is testing administrative control over models and content, Canada and Australia are testing strategy-led paths, and Singapore/ASEAN are testing flexible frameworks. Notably, South Korea enacted its AI Basic Act in January 2025, establishing a risk-based classification system similar to the EU's but with lighter compliance requirements, and Japan established its own AI Safety Institute modeled on the UK's, emphasizing voluntary industry cooperation rather than binding legislation.

4. International coordination (largely voluntary)

•The AI Safety Summit process: Bletchley Park (2023), Seoul (2024), and Paris (2025) established a framework for multilateral engagement on frontier AI risks, including the Bletchley Declaration signed by 28 countries.
•The International Network of AI Safety Institutes shares evaluation methodologies and coordinates pre-deployment assessments, with bilateral agreements between the UK and US AI Safety Institutes including joint evaluation protocols.
•The G7 Hiroshima AI Process established voluntary codes of conduct for frontier AI developers covering risk assessment, information sharing, and safety research investment.
•Technical standards bodies matter too: organizations increasingly adopt the NIST AI Risk Management Framework as a core methodology and pursue ISO 42001 certification for internationally recognized governance accreditation.

5. Company self-governance (where much of the actual accountability currently lives)

Given regulatory gaps, most binding safety commitments for frontier AI developers (including Anthropic) come from voluntary but increasingly formalized industry frameworks:

•Following the 2024 Seoul AI Summit, twelve AI companies published voluntary Frontier AI Safety Frameworks outlining approaches to managing catastrophic risks, which are now increasingly used as a basis for external accountability and are turning into regulatory infrastructure.
•Anthropic's own framework: Anthropic's Responsible Scaling Policy defines AI Safety Levels (ASL-1 through ASL-4) based on model capabilities, with each level requiring specific safety measures before a model can be deployed. This was substantially revised in 2026: RSP v3.0, finalized February 24, 2026, is a rewrite of the framework Anthropic has maintained since 2023, replacing the prior structure of hard capability thresholds that triggered pauses or mandatory mitigations.
•These frameworks are starting to interlock with law: the EU AI Act's voluntary Code of Practice prompts signatories to develop a safety and security framework to identify, assess, mitigate, and govern risks from models with systemic risk, while California's TFAIA, New York's RAISE Act, and Illinois's Frontier AI Safety Act require large AI developers to set up frameworks managing catastrophic risk.
•Comparable frameworks exist across the industry, including OpenAI's Frontier Governance Framework (published May 2026), which identifies four risk areas: cyber offense, CBRN, harmful manipulation, and loss of control, and Google DeepMind's Frontier Safety Framework, which defines Critical Capability Levels with evaluation protocols, pre-deployment evaluations, and post-deployment monitoring.
•Independent assessment suggests real gaps remain: the average AI company currently scores only 22% on an assessment of frontier AI risk management practices, though adopting practices already used by peers could lift that to 59%.

Bottom line: There is no single, unified law governing systems like me. Instead, accountability comes from a patchwork of (1) a binding EU regulatory regime now entering into force, (2) a contested and fragmented U.S. state/federal landscape, (3) diverging national approaches elsewhere, (4) voluntary international coordination through safety summits and AI Safety Institutes, and (5) company-specific safety policies (like Anthropic's RSP) that are increasingly referenced by, and intertwined with, formal law.

Citations (33)

  1. 1legalnodes.comCompanies
    EU AI Act 2026 Updates: Compliance Requirements and Business Risks

    Source excerpt: “Adopted on 21 May 2024, the EU Artificial Intelligence Act lays down harmonized rules on artificial intelligence and is the first-ever comprehensive l...”

  2. 2legalnodes.comCompanies
    EU AI Act 2026 Updates: Compliance Requirements and Business Risks

    Source excerpt: “The EU’s regulatory model for artificial intelligence is founded on a graduated, risk-oriented structure. Rather than targeting specific technologies,...”

  3. EU Regulation on AI | Insight | Baker McKenzie

    Source excerpt: “On the other hand, the provisions under Chapter I (“General Provisions”) and Chapter II (“Prohibited AI Practices”) of the AI Act have been applicable...”

  4. EU Regulation on AI | Insight | Baker McKenzie

    Source excerpt: “Additionally, some other chapters (e.g., Chapter V on general-purpose AI models) have been applicable since 2 August 2025. ”

  5. A comprehensive EU AI Act Summary [August 2026 update] - SIG

    Source excerpt: “The rules for general-purpose AI (GPAI) models took effect on Aug 2nd 2025, but the powers for enforcing those rules, Article 101 EU-level fines for G...”

  6. EU Regulation on AI | Insight | Baker McKenzie

    Source excerpt: “Some rules relating to high-risk AI systems will apply from August 2027. ”

  7. 7bakerbotts.comCompanies
    U.S. Artificial Intelligence Law Update: Navigating the Evolving State and Federal Regulatory Landscape | Thought Leadership | January 2026 | Baker Botts

    Source excerpt: “Executive Summary The U.S. artificial intelligence regulatory landscape in 2026 is defined by a complex and evolving patchwork of state laws in the ab...”

  8. 8vorplabs.comCompanies
    US AI Regulation Update: August 2026 Laws & Policy | Vorp Labs

    Source excerpt: “As of August 2026, the United States has no single comprehensive AI statute: federal executive actions set the policy layer, while binding private-sec...”

  9. 9bakerbotts.comCompanies
    U.S. Artificial Intelligence Law Update: Navigating the Evolving State and Federal Regulatory Landscape | Thought Leadership | January 2026 | Baker Botts

    Source excerpt: “Requires developers and deployers to exercise reasonable care to prevent algorithmic discrimination, conduct impact assessments, and provide consumer ...”

  10. 10bakerbotts.comCompanies
    U.S. Artificial Intelligence Law Update: Navigating the Evolving State and Federal Regulatory Landscape | Thought Leadership | January 2026 | Baker Botts

    Source excerpt: “Penalties up to $20,000 per violation. No private right of action.”

  11. 11kslaw.comCompanies
    New State AI Laws are Effective on January 1, 2026, But a New Executive Order Signals Disruption | King & Spalding

    Source excerpt: “The executive order, titled “Ensuring a National Policy Framework for Artificial Intelligence” (the “Executive Order”), proposes to establish a unifor...”

  12. 12kslaw.comCompanies
    New State AI Laws are Effective on January 1, 2026, But a New Executive Order Signals Disruption | King & Spalding

    Source excerpt: “The Executive Order directs the Attorney General to establish an AI litigation task force (the “Task Force”) to challenge state AI laws deemed inconsi...”

  13. 13ropesgray.comNot yet classified
    The White House Legislative Recommendations: National Policy Framework for Artificial Intelligence and Federal Preemption of State AI Laws | Insights | Ropes & Gray LLP

    Source excerpt: “States have continued to enact ... compliance more challenging.3 · In response, the Executive Order asserted broad federal authority to preempt state ...”

  14. 14recordinglaw.comNot yet classified
    AI Laws and Regulation in the United States (2026) | Recording Law

    Source excerpt: “Legal scholars note that an executive order cannot override state law without congressional action or a court ruling. States retain their regulatory a...”

  15. 15recordinglaw.comNot yet classified
    AI Laws and Regulation in the United States (2026) | Recording Law

    Source excerpt: “The TAKE IT DOWN Act, signed on May 19, 2025, is the first federal law directly regulating AI-generated content. The law criminalizes the nonconsensua...”

  16. 16recordinglaw.comNot yet classified
    AI Laws and Regulation in the United States (2026) | Recording Law

    Source excerpt: “Covered platforms must establish notice-and-takedown processes and remove reported content within 48 hours. ”

  17. 17recordinglaw.comNot yet classified
    AI Laws and Regulation in the United States (2026) | Recording Law

    Source excerpt: “The FTC enforces violations as unfair or deceptive acts under the FTC Act. ”

  18. 18newspaceeconomy.caNot yet classified
    Global AI Governance 2026 | New Space Economy

    Source excerpt: “Europe is testing statutory conformity. Korea is testing promotion-linked trust duties. The United States is testing standards, agencies, and state la...”

  19. 19hungyichen.comBlogs and newsletters
    AI Governance and Regulation 2026: A Complete Guide to Global Frameworks | Prof. Hung-Yi Chen

    Source excerpt: “[15] South Korea enacted the AI Basic Act in January 2025, establishing a risk-based classification system broadly similar to the EU approach but with...”

  20. 20hungyichen.comBlogs and newsletters
    AI Governance and Regulation 2026: A Complete Guide to Global Frameworks | Prof. Hung-Yi Chen

    Source excerpt: “[14] Japan has established a dedicated AI Safety Institute (AISI) modeled after the UK's institution, focusing on pre-deployment testing of front...”

  21. 21aisecurityandsafety.orgNonprofits and think tanks
    Frontier AI Safety: Managing Risks from the Most Capable AI Systems (2026) | AI Safety Directory

    Source excerpt: “The AI Safety Summit process (Bletchley Park 2023, Seoul 2024, Paris 2025) has established a framework for multilateral engagement on frontier AI risk...”

  22. 22aisecurityandsafety.orgNonprofits and think tanks
    Frontier AI Safety: Managing Risks from the Most Capable AI Systems (2026) | AI Safety Directory

    Source excerpt: “The International Network of AI Safety Institutes provides a mechanism for sharing evaluation methodologies, coordinating pre-deployment assessments, ...”

  23. 23aisecurityandsafety.orgNonprofits and think tanks
    Frontier AI Safety: Managing Risks from the Most Capable AI Systems (2026) | AI Safety Directory

    Source excerpt: “The G7 Hiroshima AI Process established voluntary codes of conduct for frontier AI developers covering risk assessment, information sharing, and inves...”

  24. 24aisecurityandsafety.orgNonprofits and think tanks
    AI Governance Frameworks Compared: OECD, EU, US, China & More (2026) | AI Safety Directory

    Source excerpt: “Adopt the NIST AI RMF as the core risk management methodology — it is flexible, widely recognized, and maps to most other frameworks. ”

  25. 25aisecurityandsafety.orgNonprofits and think tanks
    AI Governance Frameworks Compared: OECD, EU, US, China & More (2026) | AI Safety Directory

    Source excerpt: “Pursue ISO 42001 certification for formal governance accreditation that is internationally recognized. ”

  26. 26safer-ai.orgNot yet classified
    Emerging Best Practices for Frontier AI Safety Frameworks – SaferAI

    Source excerpt: “Following the AI Summit in Seoul in 2024, twelve AI companies published voluntary Frontier AI Safety Frameworks, outlining their approaches to managin...”

  27. 27aisecurityandsafety.orgNonprofits and think tanks
    Frontier AI Safety: Managing Risks from the Most Capable AI Systems (2026) | AI Safety Directory

    Source excerpt: “Anthropic's Responsible Scaling Policy (RSP) defines AI Safety Levels (ASL-1 through ASL-4) based on model capabilities, with each level requirin...”

  28. 28cloudsecurityalliance.orgNonprofits and think tanks
    When AI Builds Itself: The Enterprise Compliance Gap – Lab Space

    Source excerpt: “When AI Builds Itself: The Enterprise Compliance Gap Key Takeaways In May 2026, Anthropic published a technical disclosure reporting that Claude now a...”

  29. 29safer-ai.orgNot yet classified
    Emerging Best Practices for Frontier AI Safety Frameworks – SaferAI

    Source excerpt: “In the EU, the AI Act and its voluntary Code of Practice (CoP) prompt signatories to develop a safety and security framework to identify, assess, miti...”

  30. 30safer-ai.orgNot yet classified
    Emerging Best Practices for Frontier AI Safety Frameworks – SaferAI

    Source excerpt: “In the US, the Transparency in Frontier Artificial Intelligence Act (TFAIA) in California, the Responsible AI Safety and Education (RAISE) Act in New ...”

  31. 31scalevise.comNot yet classified
    OpenAI Frontier AI Governance and the Pacing Question

    Source excerpt: “The OpenAI Frontier Governance Framework, published May 28, 2026, describes how the company assesses and mitigates systemic risks associated with fron...”

  32. 32aisecurityandsafety.orgNonprofits and think tanks
    Frontier AI Safety: Managing Risks from the Most Capable AI Systems (2026) | AI Safety Directory

    Source excerpt: “As of 2026, frontier models include the latest versions of GPT (OpenAI), Claude (Anthropic), Gemini (Google DeepMind), Google DeepMind's Frontier Sa...”

  33. 33safer-ai.orgNot yet classified
    Emerging Best Practices for Frontier AI Safety Frameworks – SaferAI

    Source excerpt: “The average AI company scores 22% on our assessment of frontier AI risk management. Adopting practices already in use by its peers would lift that sco...”