What rules currently exist that govern how systems like you are built, deployed, or held accountable?

What rules govern systems like me — I'll gather the current global frameworks for you.

There is no single global law for systems like me. Rules are fragmented by jurisdiction, risk-based, and evolving rapidly. Current governance combines:

1. European Union - The AI Act

The most comprehensive, horizontal binding regulation worldwide:

> European Union lawmakers signed the artificial intelligence (AI) act in June 2024. The AI act, the first binding worldwide horizontal regulation on AI, sets a common framework for the use and supply of AI systems in the EU

It was published 12 July 2024 and entered into force in August 2024, with a staggered timeline:

> The AI Act was published in the EU's Official Journal on 12 July 2024. It entered into force in August 2024

Classification is risk-based:

For AI systems deemed minimal or no risk, such as AI-enabled video games or spam filters, there are no AI Act requirements

Timeline for key obligations:

> | February 2025 | Prohibited AI practices (Article 5) and AI literacy requirements (Article 4) | In force |
> | August 2025 | General-purpose AI (GPAI) model rules (Articles 51–56) | In force |
> | 2 August 2026 | Transparency obligations (Article 50) | In force |

Enforcement has started:

> The European Commission has announced that, from 2 August 2026, its Artificial Intelligence (AI) Office, together with national competent authorities, will begin enforcing key provisions of Regulation (EU) 2024/1689 (the AI Act), including new transparency requirements for certain AI systems and rules for general-purpose AI (GPAI) models

Rules for general-purpose AI (GPAI) models like large language models:

> All GPAI models will have to maintain up-to-date technical documentation—including summary information on the content used in training the models—and comply with EU copyright law. GPAI models trained using a total computing power exceeding a certain threshold (10^25 FLOPS) are presumed to pose systemic risks

Additional GPAI requirements include to Provide information and technical documentation that allow downstream providers to comply with their obligations and to Publish a detailed summary of the content used to train the GPAI model.

High-risk systems must comply with requirements for record keeping; • transparency; • human oversight; and • accuracy, robustness, and cybersecurity.

2. United States - No Federal Comprehensive AI Law, But Sectoral + Voluntary Frameworks

At federal level, there is no single AI statute. Governance relies on:

a) Executive Orders - Shifted in 2025:

The Biden Executive Order 14110 on Safe, Secure, and Trustworthy AI (Oct 2023) called for developing a companion resource to the AI Risk Management Framework.

It was revoked:

> In January 2025, the President revoked Executive Order 14110 ... See Executive Order 14179, Removing Barriers to American Leadership in Artificial Intelligence, 90 Fed . Reg . 8,741 (Jan . 31, 2025)

The replacement:

> It revokes existing AI policies and directives that are seen as barriers to U.S. AI innovation
> It requires the review of policies, directives, and regulations related to Executive Order 14110

Executive Order 14179 of January 23, 2025 (Removing Barriers to American Leadership in Artificial Intelligence) directs review of all actions taken pursuant to EO 14110.

b) NIST AI Risk Management Framework (AI RMF):

> The NIST AI RMF, the basis of our maturity model, is a voluntary framework describing best practices for AI risk management, including concrete activities for the development and deployment of AI in a socially responsible way
> The NIST AI RMF is a voluntary, non-certifiable framework that helps organizations responsibly design, develop, implement, and use AI systems
> Note: EO 14110 was revoked in January 2025 by Executive Order 14179, but the NIST AI RMF remains an active, authoritative resource maintained by NIST

It is especially influential because the October 2023 Executive Order specifically calls out the NIST AI framework.

c) Enforcement under existing law:

Agencies like the Federal Trade Commission (FTC) apply existing consumer protection, anti-discrimination, and privacy laws to AI. The FTC emphasizes:

> the use of AI should be transparent, explainable, fair, empirically sound, and accountable
> Increased accountability means that companies — the same ones who benefit from the advantages and efficiencies of algorithms — must bear the responsibility of (1) conducting regular audits and impact assessments, and (2) facilitating appropriate redress

d) State-level laws - Creating a patchwork:

> The table below summarizes the major state AI statutes now in force or scheduled to take effect, based on Baker Botts and Mintz legal tracking published through August 2026
> | Texas | TRAIGA | Jan 1, 2026 | Any AI developer or deployer reaching Texas residents | AG enforcement action |
> | Colorado | SB 24-205 (Colorado AI Act) | June 30, 2026 | High-risk AI systems used in consequential decisions | Up to $20,000 per violation |

3. United Kingdom - Principles-Based, Regulator-Led

The UK has not passed a binding AI Act. In March 2023, the Government published a pro-innovation approach:

> In its white paper A pro-innovation approach to AI regulation published in March 2023, the UK Government has set out its approach
> a regulatory framework based on five value-based principles: (1) safety, security, and robustness; (2) appropriate transparency and explainability; (3) fairness; (4) accountability and governance; and (5) contestability and redress

The approach is to regulate via existing laws and regulators, not a new AI regulator:

> That approach was to regulate AI using existing laws, which in turn would be enforced by existing regulators; rather than introducing new laws and a new dedicated regulator
> Existing regulators will be expected to implement the framework underpinned by five valuesfocused crosssectoral principles: ... o Safety, security and robustness o Appropriate transparency and explainability o Fairness o Accountability and governance o Contestability and redress

4. China - Content-Control Focused

China regulates generative AI as content:

> China’s three most concrete and impactful regulations on algorithms and AI are its 2021 regulation on recommendation algorithms, the 2022 rules for deep synthesis (synthetically generated content), and the 2023 draft rules on generative AI

The Interim Measures for the Management of Generative Artificial Intelligence Services (2023):

> [Jointly released by] The Cyberspace Administration of China ... jointly released the Interim Measures for the Management of Generative Artificial Intelligence Services (the "AI Measures"), which is the first administrative regulation on the management of Generative AI services
> which officially came into effect on August 15, 2023

Providers are deemed “content producers” and must implement model optimisation, rectify illegal content, and report incidents, plus obtain algorithmic filing. Recent rules also:

> require service providers to label AI-generated material as such, either explicitly or via metadata encoded in each file

5. International Principles and Accountability Standards

> Accountability is also a key issue for AI. The OECD Recommendation of the Council on Artificial Intelligence requires that AI actors be accountable for the proper functioning of their systems
> Organisations and individuals developing, deploying or operating AI systems should be held accountable for their proper functioning in line with the OECD’s values-based principles for AI

The OECD defines accountability as expectation that organisations ensure proper functioning throughout lifecycle and demonstrate this through actions and decisionmaking.

How Accountability Is Enforced Today

Across jurisdictions, similar mechanisms recur, even if not uniform:

If you tell me where you are deploying or using a system, I can summarize which of these specific obligations would apply to that context, as requirements differ sharply by location, use case, and whether the system is classified as general-purpose vs. high-risk.