More answers like this
Claude Sonnet 5Sep 14, 2026anthropic/claude-sonnet-5-20260630

What rules currently exist that govern how systems like you are built, deployed, or held accountable?

I'll research the current landscape of AI governance rules and regulations to give you an accurate, up-to-date answer.Here's a snapshot of the current rules and governance mechanisms that apply to AI systems like me, based on the latest developments as of September 2026:

1. Hard Law: The EU AI Act (Binding, Enforceable)

This remains the world's most comprehensive binding AI law. The EU AI Act entered into force in August 2024 — the world's first comprehensive legal framework specifically designed to regulate artificial intelligence. It works by classifying AI by risk and attaches duties such as risk classification, documentation and record-keeping, human oversight, data quality and transparency.

Key 2026 developments:

•Prohibited-practice rules and GPAI obligations are already live.
•However, high-risk system obligations, originally due August 2, 2026, were formally delayed to December 2, 2027 (and August 2, 2028 for embedded high-risk systems) under a law that took effect in late July 2026.
•The scope recently expanded: On 16 June 2026, the European Parliament approved further amendments extending those prohibitions to AI systems that generate child sexual abuse material or create images, videos, and audio without consent, applying to both providers and users, with a compliance deadline of December 2026.
•Penalties remain steep — it's comprehensive, risk-based, and carries fines up to €35 million or 7% of global turnover.

Its reach is extraterritorial: the extraterritorial scope means a fintech in San Francisco using AI for credit scoring faces the same high-risk obligations as a bank in Frankfurt.

2. United States: A Fragmented Patchwork (No Single Federal Law)

There is no single comprehensive federal AI statute. Instead, governance flows through executive action and sector regulators.

Federal executive orders: EO 14110 is dead — President Trump revoked it on his first day back in office, and what replaced it trades mandatory reporting thresholds and civil rights enforcement for a policy of "removing barriers" to AI development. More recently, a December 2025 executive order directed federal agencies toward a uniform national policy and tasked them with challenging state AI laws seen as inconsistent with it, and set in motion a Department of Justice litigation effort to contest certain state laws, a Commerce Department evaluation of which state laws are burdensome, and an FTC policy position on how existing consumer-protection law applies to AI. A follow-up order came in mid-2026: President Trump signed an executive order on June 2, 2026 titled Promoting Advanced AI Innovation and Security.

State laws still govern in practice: Despite federal preemption pushes, a proposed federal ban on state AI laws was removed before it became law, so state rules remain in force. More than a dozen states — including California, Colorado, New York, Illinois, and Utah — have enacted or proposed their own AI laws, creating a patchwork compliance environment.

Sector regulators still apply existing law to AI: the FTC for consumer protection, the FDA for medical AI, the EEOC for employment discrimination, supplemented by executive orders that set White House priorities.

3. Voluntary/Semi-Voluntary Technical Standards

Even without binding force, these shape how systems like me are actually built:

•NIST AI RMF: The NIST AI Risk Management Framework 1.0, released in January 2023 and updated with a Generative AI Profile in July 2024, remains the cornerstone of AI governance for US organizations, even though it is voluntary and no federal AI law enforces it. It's structured around four core functions (Govern, Map, Measure, and Manage) plus the GenAI Profile (AI 600-1) with 400+ suggested actions. NIST continues expanding this: on April 7, 2026, NIST released a concept note for an AI RMF Profile on Trustworthy AI in Critical Infrastructure.
•ISO/IEC 42001: An internationally certifiable AI management system standard, described as international, certifiable, contrasted with the EU AI Act which is mandatory for EU-market organizations.
•OECD AI Principles: international, high-level principles adopted by 46+ countries.

4. Other Major Jurisdictions

•China: China is arguably the heaviest operationally (pre-deployment security assessments and dual content labelling), though the EU's framework sets the stricter global legal benchmark.
•Canada: Its comprehensive AI bill stalled — Canada's flagship AI law died in Parliament.
•UK: Continues with a lighter-touch approach, betting on a pro-innovation framework rather than comprehensive legislation.
•Singapore: Offers Model AI Governance Framework and the OECD AI Principles provide the conceptual foundation that most national regulations now reference.

5. The Overall Picture: Divergence, Not Convergence

Perhaps the most important trend is that regulation is diverging by jurisdiction rather than converging on a shared standard. As one analysis puts it, by September 2026 "AI regulation" describes a layered mix of instruments that vary enormously in legal weight, including enacted legislation with binding legal force, like the EU AI Act.

For companies like Anthropic building systems like me, this means navigating simultaneously: binding EU obligations, a shifting and contested US federal/state landscape, voluntary technical frameworks (NIST, ISO), and divergent rules in China and elsewhere — with genuine legal uncertainty in the US since, as one source notes, preemption is not settled law — congressional efforts to preempt state AI regulation have repeatedly stalled, and courts will ultimately decide how far executive action can reach.

Beyond these external legal/regulatory rules, companies like Anthropic also maintain their own voluntary internal governance commitments (such as responsible scaling policies and safety frameworks), though the search results here focused on the external regulatory landscape rather than company-specific self-governance policies.

Citations (26)

  1. 1singularitymoments.comNot yet classified
    AI Regulation 2026 Guide — EU AI Act, US Law & Global Governance | Singularity Moments

    Source excerpt: “The EU AI Act entered into force in August 2024 — the world's first comprehensive legal framework specifically designed to regulate artificial intelli...”

  2. 2collibra.comCompanies
    AI regulatory compliance in 2026: EU AI Act, US orders, and state laws, and how to operationalize them | Collibra

    Source excerpt: “It classifies AI by risk and attaches duties such as risk classification, documentation and record-keeping, human oversight, data quality and transpar...”

  3. 3questa-ai.comCompanies
    AI Regulation in 2026 Is Breaking Apart Globally

    Source excerpt: “Prohibited-practice rules and GPAI obligations are already live. ”

  4. 4questa-ai.comCompanies
    AI Regulation in 2026 Is Breaking Apart Globally

    Source excerpt: “High-risk system obligations, originally due August 2, 2026, were formally delayed to December 2, 2027 (and August 2, 2028 for embedded high-risk syst...”

  5. 5swisscyberinstitute.comNot yet classified
    AI governance frameworks explained: From global standards to Swiss obligations

    Source excerpt: “On 16 June 2026, the European Parliament approved further amendments extending those prohibitions to AI systems that generate child sexual abuse mater...”

  6. 6stationx.netNot yet classified
    AI Regulations Around the World: Full 2026 Breakdown

    Source excerpt: “The European Union, via the EU AI Act — it's comprehensive, risk-based, and carries fines up to €35 million or 7% of global turnover. ”

  7. 7adaptivesecurity.comNot yet classified
    AI Governance Framework: The Complete Enterprise Guide | Adaptive Security

    Source excerpt: “The extraterritorial scope means a fintech in San Francisco using AI for credit scoring faces the same high-risk obligations as a bank in Frankfurt. ”

  8. 8collibra.comCompanies
    AI regulatory compliance in 2026: EU AI Act, US orders, and state laws, and how to operationalize them | Collibra

    Source excerpt: “Is there a US federal AI law in 2026? There is no single comprehensive federal AI statute. ”

  9. 9psyll.comNot yet classified
    EU AI Act vs US AI policy: 2026 compliance guide | Psyll

    Source excerpt: “EO 14110 is dead. President Trump revoked it on his first day back in office, and what replaced it looks almost nothing like its predecessor - it trad...”

  10. 10collibra.comCompanies
    AI regulatory compliance in 2026: EU AI Act, US orders, and state laws, and how to operationalize them | Collibra

    Source excerpt: “The pivot point was a December 2025 executive order directing federal agencies toward a uniform national policy and tasking them with challenging stat...”

  11. 11collibra.comCompanies
    AI regulatory compliance in 2026: EU AI Act, US orders, and state laws, and how to operationalize them | Collibra

    Source excerpt: “That order set in motion a Department of Justice litigation effort to contest certain state laws, a Commerce Department evaluation of which state laws...”

  12. 12kaynemcgladrey.comNot yet classified
    Halfway Through 2026, AI Regulation Is No Longer Theoretical

    Source excerpt: “President Trump signed an executive order on June 2, 2026 titled Promoting Advanced AI Innovation and Security. ”

  13. 13stationx.netNot yet classified
    AI Regulations Around the World: Full 2026 Breakdown

    Source excerpt: “A proposed federal ban on state AI laws was removed before it became law, so state rules remain in force. ”

  14. 14theaiforest.comNot yet classified
    AI Regulation News Today: The US, EU, UK, Japan, and China Frameworks Reshaping the Industry in 2026

    Source excerpt: “More than a dozen states — including California, Colorado, New York, Illinois, and Utah — have enacted or proposed their own AI laws, creating a patch...”

  15. 15singularitymoments.comNot yet classified
    AI Regulation 2026 Guide — EU AI Act, US Law & Global Governance | Singularity Moments

    Source excerpt: “Instead, the US has taken a sector-specific approach: existing agencies regulate AI within their domains (the FTC for consumer protection, the FDA for...”

  16. 16adaptivesecurity.comNot yet classified
    AI Governance Framework: The Complete Enterprise Guide | Adaptive Security

    Source excerpt: “The NIST AI Risk Management Framework 1.0, released in January 2023 and updated with a Generative AI Profile in July 2024, remains the cornerstone of ...”

  17. 17underdefense.comNot yet classified
    AI Risk Management 2026: Shadow AI, Agentic Risks & NIST Implementation Playbook

    Source excerpt: “Seven major frameworks dominate the 2026 landscape, each with distinct scope, enforceability, and industry fit: NIST AI RMF 1.0 – Voluntary, US-origin...”

  18. 18nist.govGovernment
    AI Risk Management Framework | NIST

    Source excerpt: “https://www.nist.gov/itl/ai-risk-management-framework ... On April 7, 2026, NIST released a concept note for an AI RMF Profile on Trustworthy AI in Cr...”

  19. 19neuraltrust.aiNot yet classified
    The Complete Guide to AI Governance: Frameworks, Policies & Best Practices (2026) | NeuralTrust

    Source excerpt: “The four leading frameworks are NIST AI RMF 1.0 (U.S.-focused, voluntary), ISO/IEC 42001:2023 (international, certifiable), the EU AI Act (mandatory f...”

  20. 20stationx.netNot yet classified
    AI Regulations Around the World: Full 2026 Breakdown

    Source excerpt: “China is arguably the heaviest operationally (pre-deployment security assessments and dual content labelling), but the EU sets the strictest legal ben...”

  21. 21stationx.netNot yet classified
    AI Regulations Around the World: Full 2026 Breakdown

    Source excerpt: “Canada's flagship AI law died in Parliament. ”

  22. 22singularitymoments.comNot yet classified
    AI Regulation 2026 Guide — EU AI Act, US Law & Global Governance | Singularity Moments

    Source excerpt: “The EU AI Act is now in force, the US has issued executive orders, the UK is betting on a pro-innovation framework, and China has its own rules. ”

  23. 23adaptivesecurity.comNot yet classified
    AI Governance Framework: The Complete Enterprise Guide | Adaptive Security

    Source excerpt: “Voluntary frameworks like Singapore's Model AI Governance Framework and the OECD AI Principles provide the conceptual foundation that most national re...”

  24. 24questa-ai.comCompanies
    AI Regulation in 2026 Is Breaking Apart Globally

    Source excerpt: “Regulation is diverging by jurisdiction rather than converging on a shared standard. ”

  25. 25questa-ai.comCompanies
    AI Regulation in 2026 Is Breaking Apart Globally

    Source excerpt: “"AI regulation" is often used as shorthand for a single law, but by September 2026 it describes a layered mix of instruments that vary enormously in l...”

  26. 26collibra.comCompanies
    AI regulatory compliance in 2026: EU AI Act, US orders, and state laws, and how to operationalize them | Collibra

    Source excerpt: “The crucial caveat for compliance planning is that preemption is not settled law. Congressional efforts to preempt state AI regulation have repeatedly...”