More answers like this
Claude Sonnet 5Oct 7, 2026anthropic/claude-sonnet-5-20260630

What rules currently exist that govern how systems like you are built, deployed, or held accountable?

I'll research the current regulatory landscape for AI systems to give you an accurate, up-to-date answer.Here's a snapshot of the governance landscape as of October 2026, spanning binding law, soft regulation, and company-level commitments.

1. The EU AI Act (the most comprehensive binding framework)

The EU AI Act is being rolled out in phases rather than all at once. Prohibited AI practices and rules on AI literacy began applying in February 2025. Obligations for general-purpose AI models followed in August 2025. Transparency requirements took effect in August 2026.

Key elements now in force:

•Prohibited practices: Certain AI practices have been prohibited since February 2, 2025, including social scoring, subliminal manipulation, and real-time biometric remote identification in public spaces. A new prohibition was added: effective December 2, 2026, the rules extend these prohibitions to "nudifier" applications — AI systems that generate or manipulate sexually explicit or intimate images, video, or audio without explicit consent, or that create CSAM.
•Transparency rules (Article 50): require disclosure obligations for interactive AI systems, emotion recognition and biometric categorization systems, and deepfakes, and watermarking/labeling obligations for AI-generated or manipulated content.
•High-risk system rules: Originally due in August 2026, these were delayed. In May 2026, the European Commission proposed an Omnibus package to simplify the rollout, the EU Council formally adopted it on June 29, 2026, and the applicability date for most high-risk obligations moved to December 2, 2027.
•Penalties: can reach 7% of global annual turnover (EUR 35M), exceeding GDPR's 4% maximum.
•Extraterritorial reach: the Act applies based on extraterritorial scope, meaning U.S.-based businesses providing AI systems or outputs used within the EU may still be subject to its requirements.

2. United States — fragmented, no comprehensive federal law

At the federal level: there is no comprehensive federal AI statute, and none appears imminent. Instead, governance happens through:

•Executive orders and policy: On December 11, 2025, Trump signed Executive Order 14365, "Ensuring a National Policy Framework for Artificial Intelligence." This was followed by a National Policy Framework released March 20, 2026 — non-binding legislative recommendations urging Congress to enact a uniform national AI standard that would preempt conflicting state laws. The administration also tasked the Attorney General with coordinating litigation against state measures viewed as innovation-limiting, and in January 2026 the AG announced an AI litigation task force.
•Existing agency enforcement: oversight comes from federal agency enforcement under existing statutes (FTC, EEOC, FDA, SEC, and others).
•Narrow federal statutes: e.g., the TAKE IT DOWN Act, passed in 2025, criminalized AI-generated non-consensual intimate imagery.
•Proposed legislation: Senator Blackburn's draft TRUMP AMERICA AI Act, a 291-page discussion draft, represents the most comprehensive federal AI legislation proposed in the US. It remains a proposal, not law.

State laws are currently the most binding US rules on frontier AI developers:

•California SB 53 (Transparency in Frontier AI Act): effective Jan 1, 2026, it requires developers of large AI models trained using greater than 10²⁶ FLOPS to publish risk frameworks, report critical safety incidents within 15 days, and implement whistleblower protections, with penalties up to $1 million per violation. Incident reporting can be even faster: critical safety incidents must be disclosed to the California Office of Emergency Services within fifteen days, or within twenty-four hours when there is an imminent public threat.
•Colorado AI Act: a broader risk-based law, though Colorado's law imposing disclosure, risk management, and transparency practices on developers and deployers of high-risk AI systems has had implementation delayed until June 2026.

3. Industry self-governance (voluntary but increasingly tied to law)

For companies like Anthropic, voluntary safety frameworks now function almost like quasi-regulation, and increasingly map onto legal requirements:

•Responsible Scaling Policy (RSP): published in September 2023, this is Anthropic's framework for managing potential catastrophic risks from models, centered on implementing safeguards proportional to identified risk — as models become more powerful, they require stronger protections, with additional safeguards at certain capability thresholds. It uses AI Safety Levels (ASLs), a risk tiering system inspired by the U.S. government's Biosafety Levels for biological research.
•Frontier Compliance Framework (FCF): this now serves as Anthropic's compliance framework for SB 53 and other regulatory requirements, while the RSP remains the company's voluntary safety policy reflecting what it believes best practices should be, even when that goes beyond current regulatory requirements. The FCF assesses cyber offense, chemical, biological, radiological, and nuclear threats, as well as the risks of AI sabotage and loss of control and harmful manipulation, for frontier models.
•Oversight mechanisms: Risk Reports are published every 3–6 months, shared with the Board and Long-Term Benefit Trust, and subject to review by independent external parties.
•Constitutional AI: Claude's behavior is shaped by a published "Constitution" — a governance philosophy that encodes explicit normative principles drawn from human rights, UN declarations, and safety guidelines directly into model behavior, aiming to make oversight more auditable.
•Other labs have comparable but distinct frameworks — e.g., OpenAI's Preparedness Framework v2 and Google DeepMind's Frontier Safety Framework.

4. The overall picture

LayerNatureStatus
EU AI ActBinding, risk-tieredCore obligations active; high-risk rules deferred to Dec 2027
US federalMostly non-bindingExecutive orders + proposed legislation; existing agencies (FTC, etc.) enforce under old statutes
US statesBinding, targetedCA SB 53 active since Jan 2026; CO AI Act delayed to mid-2026; patchwork across 35+ states
Voluntary industry frameworksNon-binding but influentialNIST AI RMF, ISO/IEC 42001, and company-specific policies (RSP, Preparedness Framework, etc.) — increasingly doubling as regulatory compliance tools

In short, accountability for systems like me currently rests on a patchwork: one binding comprehensive law (EU), a cluster of binding but narrower state-level transparency/safety statutes (especially California), light-touch federal policy in the US that's contested and still evolving, and voluntary but increasingly formalized company safety commitments that in some cases (like Anthropic's FCF) now double as legal compliance mechanisms.

Citations (25)

  1. 1aljazeera.comNews and mediaquality 0.78
    What came into force with the EU’s AI Act this week

    Source excerpt: “Prohibited AI practices and rules on AI literacy began applying in February 2025. Obligations for general-purpose AI models followed in August 2025. T...”

  2. 2lw.comNot yet classified
    AI Act Update: EU Resolves to Change Rules and Extend Deadlines

    Source excerpt: “5 AI Act since **February 2, 2025**, including social scoring, subliminal manipulation, and real-time biometric remote identification in public spaces...”

  3. 3lw.comNot yet classified
    AI Act Update: EU Resolves to Change Rules and Extend Deadlines

    Source excerpt: “Effective December 2, 2026, the Agreement extends these prohibitions to “nudifier” applications — AI systems that generate or manipulate sexually expl...”

  4. 4lw.comNot yet classified
    AI Act Update: EU Resolves to Change Rules and Extend Deadlines

    Source excerpt: “These requirements include: - disclosure obligations for interactive AI systems, emotion recognition and biometric categorization systems, and deep...”

  5. 5airia.comCompanies
    Where the EU AI Act Actually Stands in 2026

    Source excerpt: “In May 2026, the European Commission proposed an Omnibus package intended to simplify and adjust parts of the Act’s rollout. On June 29, 2026, the EU ...”

  6. EU AI Act August 2026: your compliance countdown

    Source excerpt: “- Maximum fines reach **7% of global annual turnover** (EUR 35M) -- exceeding GDPR's 4% maximum. ”

  7. 7genape.aiNot yet classified
    EU AI Act 2026: Key Dates & AI Transparency Rules

    Source excerpt: “The EU AI Act applies based on its extraterritorial scope and the context of the activity, meaning U.S.-based businesses providing AI systems or outpu...”

  8. 8astraea.lawNot yet classified
    Federal AI Regulation Landscape: Where Things Stand in 2026

    Source excerpt: “No. As of mid-2026, there is no comprehensive federal AI statute, and none appears imminent. ”

  9. 9loopstudio.devNot yet classified
    What AI Regulations Exist in the United States? A 2026 Guide

    Source excerpt: “The most consequential move came on December 11, 2025, when Trump signed Executive Order 14365, “Ensuring a National Policy Framework for Artificial I...”

  10. 10dlapiper.comCompanies
    Law / proposed law in the United States - AI Laws of the World

    Source excerpt: “On 20 March 2026, the White House released a National Policy Framework for Artificial Intelligence, a set of non-binding legislative recommendations u...”

  11. 11vorys.comNot yet classified
    Battle for AI Governance: White House’s Plan to Centralize AI Regulation and States’ Continuous Opposition

    Source excerpt: “President Trump tasked the Attorney General with coordinating litigation efforts against state measures that impose what the administration characteri...”

  12. 12loopstudio.devNot yet classified
    What AI Regulations Exist in the United States? A 2026 Guide

    Source excerpt: “**Federal agency enforcement** under existing statutes (FTC, EEOC, FDA, SEC, and others). ”

  13. 13loopstudio.devNot yet classified
    What AI Regulations Exist in the United States? A 2026 Guide

    Source excerpt: “The **TAKE IT DOWN Act**, passed in 2025, criminalized AI-generated non-consensual intimate imagery — an important but narrow law. ”

  14. 14lw.comNot yet classified
    Trump Administration Takes Major Steps Toward Comprehensive Federal AI Regulation

    Source excerpt: “The Framework came days after Senator Marsha Blackburn (R-Tenn.) released her TRUMP AMERICA AI Act, a 291-page discussion draft that represents the mo...”

  15. 15bakerbotts.comCompanies
    AI Legal Watch: January 2026

    Source excerpt: “California's Transparency in Frontier AI Act (SB 53), signed September 29, 2025, requires developers of large AI models trained using greater than 10²...”

  16. 16intellisee.comNot yet classified
    California SB 53 Frontier AI Transparency Act

    Source excerpt: “Critical safety incidents must be disclosed to the California Office of Emergency Services within fifteen days, or within twenty-four hours when there...”

  17. 17wilmerhale.comNot yet classified
    Transparency in Frontier Artificial Intelligence Act (SB-53): California Requires New Standardized AI Safety Disclosures

    Source excerpt: “As we described in a prior post, Colorado was the first state to pass a broad AI law imposing substantive disclosure, risk management, and transparenc...”

  18. 18anthropic.comCompanies
    Anthropic’s Transparency Hub \ Anthropic

    Source excerpt: “Engagement with Research Community: We maintain open channels of communication with the broader ... # Anthropic’s Transparency Hub ## Risk Assessment...”

  19. 19venturebeat.comNews and mediaquality 0.64
    Anthropic's new policy takes aim at 'catastrophic' AI risks

    Source excerpt: “At the heart of the policy are AI Safety Levels (ASLs). This risk tiering system, inspired by the U.S. government's Biosafety Levels for biological ...”

  20. 20anthropic.comCompanies
    Anthropic’s Transparency Hub \ Anthropic

    Source excerpt: “The FCF serves as our compliance framework for SB 53 and other regulatory requirements. The RSP remains our voluntary safety policy, reflecting what...”

  21. 21anthropic.comCompanies
    Anthropic’s Transparency Hub \ Anthropic

    Source excerpt: “Our Frontier Compliance Framework assesses cyber offense, chemical, biological, radiological, and nuclear threats, as well as the risks of AI sabotage...”

  22. 22anthropic.comCompanies
    Anthropic’s Transparency Hub \ Anthropic

    Source excerpt: “### Post-Deployment Monitoring Risk Reports are published every 3–6 months, shared with our Board and Long-Term Benefit Trust, and subject to review...”

  23. 23substack.comBlogs and newsletters
    5 Little‑Known Facts About Anthropic’s AI Governance Approach

    Source excerpt: “Anthropic is the only major lab built around a formal “Constitution” for model behavior Their *Constitutional AI* framework isn’t just a training tric...”

  24. 24arxiv.orgAcademic
    The Human Utility Factor: A Computable Welfare Metric That Reframes AI Governance as a Constrained Optimisation Problem

    Source excerpt: “- [33] OpenAI. Preparedness framework, v2, 2025. ”

  25. 25arxiv.orgAcademic
    The Human Utility Factor: A Computable Welfare Metric That Reframes AI Governance as a Constrained Optimisation Problem

    Source excerpt: “- [34] Google DeepMind. Frontier safety framework, v1.0, 2024. ”