More answers like this
Claude Sonnet 5Sep 23, 2026anthropic/claude-sonnet-5-20260630

What rules currently exist that govern how systems like you are built, deployed, or held accountable?

Says it is contested

I'll research the current regulatory landscape for AI systems to give you an accurate, up-to-date picture.Right now, the "rules" governing systems like me come from several distinct — and often competing — layers: binding law, executive/administrative action, international voluntary frameworks, and company-level self-governance. Here's the current landscape as of September 2026:

1. The EU AI Act — the most comprehensive binding law

The EU AI Act is a risk-based regulation that imposes stricter requirements on systems that pose higher risks to health, safety, and fundamental rights, rather than regulating all AI equally — a spam filter and a criminal sentencing algorithm are not treated the same way. It's being rolled out in phases:

•Prohibited practices (e.g., certain biometric surveillance) have applied since February 2025, with prohibitions on AI systems generating non-consensual intimate imagery and child sexual abuse material (CSAM) coming into play on 2 December 2026.
•General-purpose AI (GPAI) model obligations — covering systems like the large language models behind assistants such as me — kicked in on 2 August 2025, requiring things like training-data summaries and copyright compliance measures. A voluntary Code of Practice helps providers demonstrate compliance, and more than 20 providers have signed up to the Code of Practice as of August 2026.
•Transparency duties (Article 50) — requiring disclosure that content or a system is AI-generated/AI-driven — and the AI Office's supervision and enforcement powers can be exercised from 2 August 2026, with transparency obligations under Article 50 applying from that same date.
•High-risk system obligations have been delayed; under recent changes, the rules for stand-alone high-risk AI systems (Annex III) now apply from Dec 2nd, 2027.
•Notably, the Act has real teeth and extraterritorial reach: if your AI system's outputs are used within the EU, you're in scope, even if you're a startup in San Francisco or a research lab in Singapore. Penalties for GPAI providers can reach fines of up to 15 million euros or 3% of turnover for non-compliance with their specific obligations.

2. The United States — a fractured, shifting federal/state patchwork

The U.S. has no single comprehensive AI law. Instead:

•Federal deregulatory push: On January 23, 2025, President Trump issued EO 14179, Removing Barriers to American Leadership in Artificial Intelligence, which revoked the prior administration's AI policies, followed by Winning the AI Race: America's AI Action Plan in July 2025, a three-pillar strategy focused on accelerating innovation, building AI infrastructure, and leading in international diplomacy and security.
•Federal preemption of states: The "Ensuring a National Policy Framework for Artificial Intelligence Order" aims to establish a unified national approach to AI regulation by limiting the authority of the states to enact and enforce individual AI laws. This created new federal mechanisms, including an AI Litigation Task Force and federal funding restrictions, to challenge and deter state laws deemed "onerous" or inconsistent with federal AI policy. However, the order expressly prohibits the federal preemption of otherwise lawful state AI laws, including those relating to child safety, AI compute and data center infrastructure, state government procurement and use of AI.
•A national security pivot: More recently, a June 2026 executive order, "Promoting Advanced Artificial Intelligence Innovation and Security," established a voluntary framework permitting developers of certain advanced AI models to voluntarily provide the federal government with model access prior to public release for cybersecurity and national security assessments, and asks AI companies to voluntarily submit their most powerful models for the government to test up to 30 days before releasing them to the public.
•State laws persist in areas like Colorado's AI Act (algorithmic discrimination) and California's protections against AI-generated harmful imagery of minors, though timelines have shifted amid the federal-state fight — e.g., the Colorado AI Act has been delayed from taking effect on February 1, 2026 to June 30, 2026.

3. China — the most granular, pre-market regulatory system

China regulates AI through a layered set of measures enforced by the Cyberspace Administration of China (CAC), including the algorithm filing regime, the Interim Measures for the Management of Generative AI Services requiring public generative AI services to file before launch, deep synthesis provisions, and rules requiring clear labelling of AI-generated content. This is a pre-market-review model: organizations must complete security assessments, obtain regulatory filings, and implement technical safeguards before launching AI services — a significant departure from Western regulatory models that rely more heavily on post-market oversight. China has also extended this into anthropomorphic AI: the Interim Measures for the Management of Anthropomorphic AI Interactive Services took effect on 15 July 2026, adding requirements for AI identification, anti-addiction controls, and protections for minors and the elderly.

4. International voluntary frameworks

Since there's no binding global AI treaty, governance relies heavily on summit-driven voluntary commitments:

•The Frontier AI Safety Commitments (Seoul, 2024) got sixteen leading AI companies — including Amazon, Anthropic, Google, Meta, Microsoft, and OpenAI — to pledge to responsibly develop frontier AI models, assess catastrophic risks, publish safety frameworks, and share information with governments.
•These build on a previous agreement made at Bletchley Park during the first AI Safety Summit, as well as the US Voluntary Commitments and the Hiroshima Code of Conduct.
•An International Network of AI Safety Institutes now coordinates evaluation: it provides a mechanism for sharing evaluation methodologies, coordinating pre-deployment assessments, and building mutual confidence, with bilateral agreements between the UK AISI and US AISI including joint evaluation protocols and information sharing.
•Critics note the obvious limitation: the voluntary nature of the new 'Frontier AI Safety Commitments' agreed by AI companies has been criticised by some observers, since there's no external enforcement mechanism.

5. Company-level self-governance

In the absence of complete binding law, individual labs (including Anthropic) publish their own internal policies, such as Responsible Scaling Policies — described as Anthropic's tiered safety commitment requiring proportional safeguards before training or deploying increasingly capable AI models — and comparable frameworks like OpenAI's process for evaluating and managing catastrophic risks from frontier AI across cybersecurity, CBRN, and autonomy domains. These are self-imposed and not currently legally binding in most jurisdictions, though they intersect with disclosure requirements now emerging in laws like the EU AI Act.


Bottom line: There is no single, unified "AI law" governing systems like me. Instead, accountability comes from an overlapping patchwork — hard EU regulation with real fines, a U.S. system currently swinging toward deregulation and federal preemption of states (with narrow carve-outs like child safety), China's strict pre-market filing/labeling regime, non-binding international summit commitments, and voluntary corporate safety frameworks. This landscape is genuinely in flux — several of the rules above (EU deadlines, U.S. executive orders, state law timelines) have shifted multiple times within the past year alone, so anyone relying on this for compliance purposes should check current sources directly.

Citations (25)

  1. 1decodethefuture.orgBlogs and newsletters
    EU AI Act 2026: Penalties, Risk Tiers & New Deadlines

    Source excerpt: “The core philosophy is risk-based: rather than regulating all AI equally, the Act imposes stricter requirements on systems that pose higher risks to h...”

    background, article. Claim: The EU AI Act is risk-based, imposing stricter requirements on higher-risk systems rather than regulating all AI equally.

  2. 2artificialintelligenceact.euNonprofits and think tanks
    High-level summary of the AI Act | EU Artificial Intelligence Act

    Source excerpt: “Most prohibitions of AI systems have been applicable since 2 February 2025, with prohibitions on AI systems generating non-consensual intimate imagery...”

    evidence, reference entry. Claim: Prohibited practices have applied since February 2025, with prohibitions on non-consensual intimate imagery and CSAM generation applying from 2 December 2026.

  3. 3artificialintelligenceact.euNonprofits and think tanks
    High-level summary of the AI Act | EU Artificial Intelligence Act

    Source excerpt: “GPAI model obligations kicked in on 2 August 2025. ”

    evidence, reference entry. Claim: GPAI model obligations took effect on 2 August 2025.

  4. 4artificialintelligenceact.euNonprofits and think tanks
    High-level summary of the AI Act | EU Artificial Intelligence Act

    Source excerpt: “More than 20 providers have signed up to the Code of Practice as of August 2026. ”

    statistic, reference entry. Claim: More than 20 providers have signed the Code of Practice as of August 2026.

  5. 5artificialintelligenceact.euNonprofits and think tanks
    High-level summary of the AI Act | EU Artificial Intelligence Act

    Source excerpt: “AI Office’s supervision and enforcement powers can be exercised from 2 August 2026. The transparency obligations under Article 50 apply from 2 August ...”

    evidence, reference entry. Claim: AI Office enforcement powers and Article 50 transparency obligations apply from 2 August 2026.

  6. A comprehensive EU AI Act Summary [August 2026 update] - SIG

    Source excerpt: “On Dec 2nd, 2027, the rules for stand-alone high-risk AI systems (Annex III) apply. ”

    evidence, article. Claim: Annex III stand-alone high-risk AI rules now apply from 2 December 2027.

  7. 7decodethefuture.orgBlogs and newsletters
    EU AI Act 2026: Penalties, Risk Tiers & New Deadlines

    Source excerpt: “First, the extraterritorial scope: if your AI system’s outputs are used within the EU, you’re in scope, even if you’re a startup in San Francisco or a...”

    evidence, article. Claim: The EU AI Act has extraterritorial reach: systems whose outputs are used in the EU are in scope.

  8. 8whisperly.aiCompanies
    EU AI Act Summary: What Every Organisation Needs to Know Before August 2026 | Whisperly

    Source excerpt: “General-Purpose AI (GPAI) providers: subject to fines of up to 15 million euros or 3% of turnover for non-compliance with their specific obligations. ”

    statistic, article. Claim: GPAI providers face fines up to 15 million euros or 3% of turnover for non-compliance.

  9. New executive order shifts US AI policy toward national security

    Source excerpt: “On January 23, 2025, President Trump issued EO 14179, Removing Barriers to American Leadership in Artificial Intelligence, which revoked the prior adm...”

    evidence, article. Claim: Trump issued EO 14179 in January 2025 revoking prior AI policies, followed by the July 2025 AI Action Plan.

  10. 10mcdermottlaw.comCompanies
    New executive order shifts US AI policy toward national security

    Source excerpt: “... On June 2, 2026, President Trump issued an EO titled, Promoting Advanced Artificial Intelligence Innovation and Security, acc In July 2025, the W...”

    evidence, article. Claim: A June 2026 executive order, Promoting Advanced AI Innovation and Security, shifted policy toward national security.

  11. 11bipc.comCompanies
    New Executive Order Signals Federal Preemption Strategy for State Laws on Artificial Intelligence | Buchanan Ingersoll & Rooney PC

    Source excerpt: “The “Ensuring a National Policy Framework for Artificial Intelligence Order" (the Order) aims to establish a unified national approach to AI regulatio...”

    evidence, article. Claim: The national policy framework order aims to limit state authority to enact and enforce individual AI laws.

  12. 12hklaw.comCompanies
    What to Watch as White House Moves to Federalize AI Regulation | Insights | Holland & Knight

    Source excerpt: “The EO creates new federal mechanisms, including an AI Litigation Task Force and federal funding restrictions, to challenge and deter state laws deeme...”

    evidence, article. Claim: The order created an AI Litigation Task Force and funding restrictions to challenge state AI laws deemed onerous.

  13. 13paulhastings.comCompanies
    President Trump Signs Executive Order Challenging State AI Laws | Paul Hastings LLP

    Source excerpt: “The final text is also narrowed as it expressly prohibits the federal preemption of otherwise lawful state AI laws, including those relating to child ...”

    evidence, article. Claim: The order expressly excludes preemption of lawful state laws on child safety, compute infrastructure, and state procurement.

  14. 14hklaw.comCompanies
    Executive Order on Artificial Intelligence Expands Cybersecurity, Federal Oversight | Insights | Holland & Knight

    Source excerpt: “The White House on June 2, 2026, issued an executive order (EO), titled "Promoting Advanced Artificial Intelligence Innovation and Security," establis...”

    evidence, article. Claim: The June 2026 order created a voluntary framework for developers to give government pre-release model access for security assessments.

  15. 15npr.orgNews and mediaquality 0.93
    Trump’s new AI safety order seeks voluntary review of new models : NPR

    Source excerpt: “The order asks AI companies to voluntarily submit their most powerful models for the government to test up to 30 days before releasing them to the pub...”

    evidence, article. Claim: The order asks AI companies to voluntarily submit powerful models for government testing up to 30 days before release.

  16. 16paulhastings.comCompanies
    President Trump Signs Executive Order Challenging State AI Laws | Paul Hastings LLP

    Source excerpt: “For example, the Colorado AI Act has been delayed from taking effect on February 1, 2026 to June 30, 2026, and Utah am”

    evidence, article. Claim: Colorado AI Act delayed from February 1, 2026 to June 30, 2026.

  17. China AI Regulations 2026: Rules Companies Must Follow

    Source excerpt: “China governs AI through a layered set of measures enforced by the Cyberspace Administration of China (CAC), not a single AI act. Companies operating ...”

    background, article. Claim: China regulates AI through layered CAC-enforced measures rather than a single AI act.

  18. China AI Regulations: Compliance Guide 2026 | AI Wiki

    Source excerpt: “Organizations must complete security assessments, obtain regulatory filings, and implement technical safeguards before launching AI services. This p...”

    evidence, article. Claim: China requires security assessments, filings, and technical safeguards before launching AI services, a pre-market model.

  19. 19gaeedu.orgNonprofits and think tanks
    China AI Governance Profile 2026: Regulation, Policy & Workforce Implications

    Source excerpt: “Since the previous review, the Interim Measures for the Management of Anthropomorphic AI Interactive Services took effect on 15 July 2026, extending t...”

    evidence, article. Claim: Anthropomorphic AI interactive services measures took effect 15 July 2026.

  20. 20aisecurityandsafety.orgNonprofits and think tanks
    Frontier AI Safety Commitments (International, 2026): Complete Guide | AI Safety Directory

    Source excerpt: “Signatories include Amazon, Anthropic, Cohere, Google, G42, Inflection AI, Meta, Microsoft, Mistral AI, Naver, OpenAI, Samsung Electronics, Technology...”

    evidence, article. Claim: Sixteen leading AI companies signed the Frontier AI Safety Commitments.

  21. 21infosecurity-magazine.comNews and mediaquality 0.50
    AI Seoul Summit: 16 AI Companies Sign Frontier AI Safety Commitments - Infosecurity Magazine

    Source excerpt: “These commitments build on a previous agreement made with leading AI tech companies at Bletchley Park during the first AI Safety Summit in November as...”

    evidence, article. Claim: The Seoul commitments build on the Bletchley Park agreement.

  22. 22aisecurityandsafety.orgNonprofits and think tanks
    Frontier AI Safety: Managing Risks from the Most Capable AI Systems (2026) | AI Safety Directory

    Source excerpt: “The International Network of AI Safety Institutes provides a mechanism for sharing evaluation methodologies, coordinating pre-deployment assessments, ...”

    evidence, article. Claim: The International Network of AI Safety Institutes shares evaluation methods and coordinates pre-deployment assessments.

  23. 23freshfields.comCompanies
    Seoul Summit sees further developments in international governance of frontier AI | Freshfields

    Source excerpt: “The voluntary nature of the new ‘Frontier AI Safety Commitments’ agreed by AI companies has been criticised by some observers. ”

    attribution, article. Claim: Some observers criticised the voluntary nature of the Frontier AI Safety Commitments.

  24. 24aisecurityandsafety.orgNonprofits and think tanks
    Frontier AI Safety Commitments (International, 2026): Complete Guide | AI Safety Directory

    Source excerpt: “... Anthropic's tiered safety commitment requiring proportional safeguards before training or deploying increasingly capable AI models. ”

    evidence, article. Claim: Anthropic's Responsible Scaling Policy is a tiered safety commitment requiring proportional safeguards.

  25. 25aisecurityandsafety.orgNonprofits and think tanks
    Frontier AI Safety Commitments (International, 2026): Complete Guide | AI Safety Directory

    Source excerpt: “... OpenAI's process for evaluating and managing catastrophic risks from frontier AI across cybersecurity, CBRN, and autonomy domains. ”

    evidence, article. Claim: OpenAI has a process for evaluating and managing catastrophic risks across cybersecurity, CBRN, and autonomy.