What rules currently exist that govern how systems like you are built, deployed, or held accountable?
Here’s a concise snapshot of the main, in‑force rules and accountability mechanisms for AI systems as of October 4, 2026. I’ve grouped them by jurisdiction and type, and noted the most time‑sensitive dates.
United States (federal)
United States (state and local)
European Union
United Kingdom
Canada
China
International treaties and “soft law”
Standards and frameworks used to show due diligence
What this means in practice
If you tell me your sector and where you operate, I can translate this into a tailored “what applies to us now vs. what’s coming” checklist with the exact obligations and dates.
Citations (20)
- Executive Order on Safe, Secure, and Trustworthy Artificial Intelligence | NIST
Backs: “M‑25‑21 (federal use): requires agencies to designate a Chief AI Officer, keep annual AI use‑case inventories, and implement “minimum risk‑management practices” for “high‑impact AI,” including the ability to suspend or cease use if safeguards aren’t met. M‑25‑21 expressly rescinds M‑24‑10.”
- EXECUTIVE OFFICE OF THE PRESIDENT
Backs: “M‑25‑22 (procurement): sets acquisition practices so vendors and contracts align with federal AI safeguards.”
- FTC Seeks Public Comment on Policy Statement Addressing AI Accuracy | Federal Trade Commission
Backs: “Section 5 of the FTC Act applies to AI just like any other tech.”
- Joint Statement on Enforcement Efforts Against Discrimination and Bias in Automated Systems | Federal Trade Commission
Backs: “CFPB circulars require specific reasons in adverse‑action notices even when AI/ML is used.”
- Marketing Submission Recommendations for a Predetermined Change Control Plan for Artificial Intelligence-Enabled Device Software Functions | FDA
Backs: “Health tech: the FDA’s final 2025 guidance lets AI/ML medical devices include Predetermined Change Control Plans (PCCPs) so approved, bounded model updates can roll out without a new submission—subject to pre‑agreed testing and monitoring.”
- SB24-205 Consumer Protections for Artificial Intelligence | Colorado General Assembly
Backs: “Check applicability and effective dates if you operate in CO.”
- 740 ILCS 14/20
Backs: “Illinois also has the AI Video Interview Act (notice/explanation/consent and deletion rights).”
- Legislation - HB1202
Backs: “Maryland limits use of facial recognition during job interviews without a signed waiver.”
- Automated Employment Decision Tools (AEDT) - DCWP
Backs: “New York City Local Law 144 requires bias audits and notices for automated employment decision tools used in NYC.”
- The enforcement framework of the AI Act | Shaping Europe’s digital future
Backs: “Fines can reach up to 3–7% of global turnover depending on the violation.”
- Digital Services Act | Article 34 - Risk assessment
Backs: “Very large online platforms/search engines must assess and mitigate systemic risks from their algorithmic and recommender systems, maintain audit trails, and provide transparency to regulators and researchers.”
- A pro-innovation approach to AI regulation: government response - GOV.UK
Backs: “Sector regulators map and apply AI principles within their remits.”
- C-27 (44-1) - LEGISinfo - Parliament of Canada
Backs: “However, for the federal public sector the Treasury Board’s Directive on Automated Decision‑Making applies: agencies must complete and publish Algorithmic Impact Assessments, apply tiered safeguards, and keep models auditable.”
- China moves to support generative AI, regulate applications
Backs: “Binding national rules govern public‑facing GenAI and synthetic media: providers must complete security assessments/algorithm filings, implement data governance and content controls, and label/watermark deep‑synthesis outputs under the 2023 GenAI “Interim Measures” and 2022 Deep Synthesis Provisions.”
- The Framework Convention on Artificial Intelligence - Artificial Intelligence
Backs: “Council of Europe: the Framework Convention on AI and human rights/democracy/rule of law (the first binding international treaty on AI) opened for signature on Sep 5, 2024; parties will implement human‑rights‑based obligations across the AI lifecycle.”
- AI principles | OECD
Backs: “OECD AI Principles (2019, updated 2024) and the G7 Hiroshima AI Process (2023) provide widely cited nonbinding guidance (principles and a voluntary code of conduct for advanced AI developers).”
- AI Risk Management Framework | NIST
Backs: “AI Safety Institute (NIST) coordinates safety measurement R&D and inter‑institutional work.”
- INTERNATIONAL STANDARD ISO/IEC 42001:2023(E)
Backs: “IEEE’s 7000‑series (e.g., IEEE 7000‑2021) addresses ethics‑by‑design.”
- C2PA Specifications :: C2PA Specifications
Backs: “Content provenance/watermarking: the C2PA technical specification underpins growing disclosure/provenance practices for synthetic media.”
- https://www.whitehouse.gov/wp-content/uploads/2025/02/M-25-21-Accelerating-Federal-Use-of-AI-through-Innovation-Governance-and-Public-Trust.pdf?_sp=864cb0fa-c854-4449-b323-c7f39554d023
Backs: “Many regimes now require pre‑deployment risk/impact assessments, ongoing testing/monitoring, transparency notices, human‑oversight pathways, logging, and auditability—with fines or use‑suspension for non‑compliance on the EU side and enforcement actions under existing U.S. statutes on the U.S. side.”