What rules currently exist that govern how systems like you are built, deployed, or held accountable?

AI governance is a fast-moving area, so let me get current information on the key regulatory frameworks in place.Here's a snapshot of the main governance frameworks currently shaping how AI systems like me are built, deployed, and held accountable, as of October 2026. This is a fast-moving, fragmented landscape with several overlapping and sometimes conflicting regimes.

European Union: The AI Act (the most comprehensive binding framework)

The EU AI Act is officially the world's first comprehensive legal framework for AI, already reshaping how organizations build, deploy, and manage AI systems. It takes a risk-based approach, imposing stricter requirements on higher-risk AI systems, and applies to organizations both inside and outside the EU if their AI systems are used within the EU.

Its rollout has been staggered and recently revised:

A voluntary complement exists too: major AI providers have taken different approaches to the EU's voluntary compliance codes, with the GPAI Code of Practice providing one method for model providers to demonstrate compliance with transparency, copyright, safety, and security duties.

United States: A fragmented federal-state fight

Federal level has shifted from mandatory rules toward a lighter-touch, security-focused posture. Biden-era efforts were largely reversed: Biden's Executive Order and the AI Bill of Rights were revoked mere days after Trump took office in January of 2025, with a replacement order aimed at clearing a path for the US to retain global AI leadership and requiring that AI systems be "free from ideological bias or engineered social agendas."

More recently, on June 2, 2026, Trump signed Executive Order 14409, "Promoting Advanced Artificial Intelligence Innovation and Security," targeting cybersecurity across federal systems, a voluntary framework for frontier AI developers to engage with government before public release, and criminal enforcement against AI-enabled cyberattacks. Importantly, the framework is voluntary — it explicitly prohibits mandatory licensing or preclearance, though developers of "covered frontier models" are expected to submit models to federal agencies for up to 30 days before broader release. Most recently, a September 2026 order rebranded terminology (replacing "AI" with "Super Intelligence" in federal communications), but the legal substance is smaller than the branding — it changes terminology, not which technologies are regulated, and existing statutes, regulations and contracts stay as they are.

State laws remain the real compliance drivers. 145 state AI laws were enacted across 38 states in 2025 alone, with major frameworks now in force in California (SB 53), Texas (TRAIGA), and Illinois (HB 3773). Key examples:

Voluntary technical standards also matter: frameworks like the NIST AI RMF are widely used to operationalize compliance across jurisdictions, and some state laws (like Colorado's original act) offered safe harbors for aligning with it.

China: The most actively enforced regime

China regulates AI through a sector-specific patchwork rather than one omnibus law: China regulates AI through targeted rules addressing specific technologies and use cases, including recommendation algorithms, deep synthesis, facial recognition, and, as of 2026, anthropomorphic AI services, rather than through one comprehensive AI law. The core instrument is the Interim Measures for the Management of Generative Artificial Intelligence Services, effective since August 2023, enforced by the Cyberspace Administration of China (CAC), applying to all organizations providing generative AI services to the public within China regardless of country of incorporation, requiring lawful data use, transparency and labeling, content moderation, and alignment with national security requirements. Enforcement is active and ongoing: as of February 2026, 796 generative AI services and 481 related applications had completed formal registration under this framework. New rules have also extended to AI companions and chatbots via the Interim Measures for the Management of Anthropomorphic AI Interactive Services, published 10 April 2026, in force from 15 July 2026, governing chatbots, AI companions, and AI customer service agents that simulate human personality.

The bottom line

As one industry summary puts it, 2026 means navigating three moving regimes at once: the EU AI Act, now in its main application phase; a US federal posture centered on preempting state rules; and a patchwork of US state AI laws — the challenge is operating across all three while they shift, and proving you complied. There is no single, stable global rulebook — instead, companies building and deploying systems like me must track a moving target across the EU, a contested US state/federal fight, China's sector-by-sector enforcement regime, and voluntary technical standards like NIST's AI Risk Management Framework that help bridge the gaps.