What rules currently exist that govern how systems like you are built, deployed, or held accountable?
Short answer: There isn’t one single AI law. Today’s rules come from a mix of sector laws, new AI‑specific statutes and regulations, procurement and agency policies, and widely adopted standards. Here’s the concise, up‑to‑date picture as of October 15, 2026.
United States (federal)
United States (state and local)
European Union (AI‑specific and platform rules)
Other national and international instruments
Widely used standards and assurance tools (often required by contracts or cited by regulators)
What this means in practice for builders and deployers
If you want, tell me your role (developer, deployer, public agency, platform, or vendor) and the markets you serve. I can translate this into a short, prioritized compliance checklist tailored to you.
Citations (25)
- Ensuring a National Policy Framework for Artificial Intelligence | 90 FR 58499
Backs: “Executive Order 14365 (Dec 11, 2025) directs a “single, minimally burdensome” national approach, tells agencies to assess and, where appropriate, challenge conflicting state AI laws, and instructs the FTC to clarify how Section 5 applies to AI. The FTC followed with a 2026 policy statement.”
- Agencies must document their implementation of these practices and be prepared to report them to OMB, either as a component of the annual AI use case inventory, periodic accountability reviews, or upon request as determined by OMB.
Backs: “NARA separately told agencies how AI inputs/outputs/logs count as federal records.”
- AI Risk Management Framework | NIST
Backs: “NIST’s AI Safety Institute (and its consortium) develops testing and evaluation methods.”
- The Federal Trade Commission 2023 Privacy and Data Security Update
Backs: “FTC uses Section 5 against unfair/deceptive AI practices (e.g., exaggerated AI claims, deceptive uses); in 2026 it issued a policy statement tied to EO 14365.”
- Consumer Financial Protection Circular 2022-03: Adverse action notification requirements in connection with credit decisions based on complex algorithms | Consumer Financial Protection Bureau
Backs: “CFPB says lenders using complex algorithms still owe specific reasons for adverse credit actions (ECOA/Reg B) and warns employers about using “black‑box” scores under the FCRA.”
- EEOC Releases New Resource on Artificial Intelligence and Title VII
Backs: “EEOC applies Title VII to AI‑assisted hiring and selection tools (adverse‑impact guidance).”
- Colorado Anti-Discrimination in AI Law (ADAI) Rulemaking | Colorado Attorney General
Backs: “Colorado’s Automated Decision‑Making Technology Act (SB 24‑205) targets algorithmic discrimination in “high‑risk” consequential decisions; statewide rulemaking is underway, with compliance geared to 2026+.”
- California Finalizes Regulations to Strengthen Consumers' Privacy
Backs: “California’s privacy regulator (CPPA) finalized Automated Decision‑Making Technology regulations: pre‑use notices, access/opt‑out rights, plus risk assessments and cyber audits for certain businesses, effective January 1, 2026.”
- Automated Employment Decision Tools (AEDT) - DCWP
Backs: “New York City Local Law 144: employers using Automated Employment Decision Tools must complete an independent annual bias audit and give candidate notices (enforced since July 5, 2023).”
- 740 ILCS 14/20
Backs: “Illinois’ BIPA (consent, retention, private right of action) and Maryland’s consent rule for facial recognition in job interviews are frequently implicated.”
- Governor Newsom signs SB 53, advancing California’s world-leading artificial intelligence industry | Governor of California
Backs: “California separately enacted a “frontier AI” transparency law in 2025 (SB 53), while a broader 2024 frontier‑safety bill (SB 1047) was vetoed.”
- Regulation - EU - 2024/1689 - EN - EUR-Lex
Backs: “The Commission and national authorities will enforce via the EU AI Office and market‑surveillance authorities.”
- Regulation - 2022/2065 - EN - DSA - EUR-Lex
Backs: “Digital Services Act (DSA): very large platforms/search engines must annually assess and mitigate systemic risks (including those involving recommender and generative‑AI features) and undergo independent audits.”
- Directive (EU) 2024/2853 of the European Parliament and of the Council of 23 October 2024 on liability for defective products and repealing Council Directive 85/374/EEC (Text with EEA relevance)
Backs: “Product liability updated: the 2024 Product Liability Directive now expressly treats software (including AI) as a “product,” extends strict liability to related digital services, and must be transposed by Member States by December 9, 2026.”
- Guidelines on transparency obligations for providers and deployers of AI systems | Shaping Europe’s digital future
Backs: “To help with AI‑generated content labeling under the AI Act, the Commission published transparency guidelines and a voluntary Code of Practice on AI‑generated content that regulators accept as a compliance aid.”
- The Framework Convention on Artificial Intelligence - Artificial Intelligence
Backs: “Council of Europe Framework Convention on AI (opened for signature Sept 5, 2024) is the first binding global treaty on AI; it requires risk/impact assessments and safeguards for human rights, democracy, and rule of law.”
- Hiroshima Process International Guiding Principles for Organizations Developing Advanced AI System (30/10/2023) - G7/G20 Documents Database
Backs: “G7 “Hiroshima Process” (2023) published non‑binding guiding principles and a code of conduct (e.g., incident reporting, content provenance/watermarking guidance).”
- Seoul Declaration for safe, innovative and inclusive AI: AI Seoul Summit 2024 - GOV.UK
Backs: “2024 AI Seoul Summit: major model developers issued voluntary frontier‑model safety commitments (publish safety frameworks, red‑team advanced capabilities, and halt deployment if risks can’t be contained).”
- General Assembly Adopts Landmark Resolution on Steering Artificial Intelligence towards Global Good, Faster Realization of Sustainable Development | Meetings Coverage and Press Releases
Backs: “United Nations: the General Assembly adopted a consensus resolution urging “safe, secure and trustworthy” AI for sustainable development (Mar 21, 2024).”
- 生成式人工智能服务管理暂行办法_中央网络安全和信息化委员会办公室
Backs: “2022 algorithm recommendation provisions), including content controls, security assessments, and filing obligations.”
- ISO/IEC 42001:2023 - AI management systems
Backs: “ISO/IEC 42001:2023 (AI management systems) — a certifiable management‑system standard many organizations now adopt to evidence “reasonable” AI governance.”
- IEEE SA - IEEE 7000-2021
Backs: “IEEE 7000/7001 series (ethics‑by‑design and transparency for autonomous/intelligent systems).”
- C2PA Specifications :: C2PA Specifications
Backs: “C2PA Content Credentials (industry standard for content provenance/labeling adopted by major tech/media firms and referenced by governments’ provenance work).”
- FTC Announces Crackdown on Deceptive AI Claims and Schemes | Federal Trade Commission
Backs: “If you build consumer or HR/credit products in the US: expect FTC/CFPB/EEOC scrutiny under existing laws (deception/unfairness; explainable adverse actions; anti‑discrimination) even without a single “AI law.””
- Transparency obligations under Article 50 of the AI Act | Shaping Europe’s digital future
Backs: “If you’re labeling content: align with C2PA and, in the EU, the AI Act’s Article 50 transparency rules starting August 2, 2026.”