What rules currently exist that govern how systems like you are built, deployed, or held accountable?

Says it is contested

This is a substantial question touching on a fast-moving regulatory landscape, so let me pull current information on the major frameworks.As of October 2026, the governance of systems like me is a patchwork of international, national, state-level, and voluntary industry frameworks that are still evolving rapidly. Here's the current landscape:

1. European Union: The AI Act (most comprehensive binding framework)

The EU AI Act is the most developed comprehensive regulatory regime, running on a staggered timeline. The original prohibited practices and the AI literacy requirement have applied since February 2, 2025, obligations for providers of general-purpose AI models since August 2, 2025, and most transparency requirements since August 2, 2026.

Key live obligations include:

•Prohibited practices (Article 5) — certain AI uses are banned outright, with two added prohibitions applying from December 2, 2026.

•Transparency rules (Article 50) — transparency obligations and the penalty regime activated on 2 August 2026 as originally scheduled and are in application now. This includes machine-readable marking for generative AI outputs, though providers of generative AI systems must mark audio, image, video and text outputs so they can be detected as artificial, with systems placed on the market from August 2026 complying from launch, while older systems get a grace period until December 2.

•General-purpose AI model rules (Chapter V) covering model documentation and risk disclosure.

Notably, high-risk system obligations were recently delayed: provider obligations in Chapter III and deployer obligations in Article 26, as they apply to Annex III systems, were deferred by the Digital Omnibus to 2 December 2027. Enforcement infrastructure is still being built out — as of August 2026, only about a dozen member states had a national enforcement authority resting on enacted law or published government decision.

2. United States: Fragmented federal approach, shifting toward deregulation

Federal policy has swung sharply toward a light-touch, innovation-first posture. Under the current administration, Biden's AI executive order was nullified along with associated OMB guidance, and the Defense Production Act safety-testing reporting requirement for large AI model developers was eliminated.

Recent executive actions include:

•EO 14365 (Dec 2025) — "Ensuring a National Policy Framework for Artificial Intelligence," aimed at establishing a national policy framework and limiting state power to regulate AI, attempting to preempt the patchwork of state laws.

•EO 14409 / June 2026 Order — "Promoting Advanced Artificial Intelligence Innovation and Security," establishing cybersecurity mandates and a voluntary framework for secure deployment of frontier models, while calling for AI developers to voluntarily share new models with the federal government up to 30 days before public release.

•EO 14434 (Sept 29, 2026) — a largely symbolic order directing agencies to use "Super Intelligence" instead of "Artificial Intelligence" in official communications, alongside a review of federal AI definitions.

There is currently no comprehensive federal AI law — as of now, there's no comprehensive federal AI law, just an evolving executive order tracker.

3. US state laws (the real binding layer for most consumer-facing AI)

States have become the primary source of enforceable AI rules:

•California leads with a stack of laws: AB 2013 requires developers of public-use generative AI systems to publish high-level information about training data, while SB 942 requires certain large public-facing systems to disclose when content is generated or modified by AI. SB 53 requires frontier model developers above a compute threshold to publish safety reports, report critical incidents within 15 days, and follow whistleblower procedures, with civil penalties up to $1M per violation.

•Companion chatbot rules: California's SB 243 took effect Jan. 1, 2026, applying to AI systems capable of meeting a user's social needs and requiring that users not be misled into believing they're talking to a human, with customer-service bots exempted. Operators must disclose non-human status at the outset and implement protocols against self-harm content, plus minor-specific protections like blocking sexual content and session limits.

•Colorado replaced its original AI Act: SB 26-189 repealed and replaced the original Colorado AI Act, requiring deployers to give pre-use notice before using automated decision-making in consequential decisions, with a right to human review, enforced exclusively by the state AG with no private right of action.

•Many other states (Oregon, Washington, Nebraska, Idaho, Georgia, Hawaii, etc.) have passed narrower chatbot or disclosure laws in 2026.

4. Industry self-regulation (filling the federal vacuum)

With federal regulation stalled, the major AI labs are building their own governance structures:

•Google, OpenAI and Anthropic are advancing a self-regulatory AI safety standards body — tentatively named Standards Authority for Frontier AI (SAFA) — aiming to launch by end-2026 or early 2027 without government oversight, which would support third-party pre-deployment testing, incident-reporting practices, and operationalize prior voluntary safety commitments.

•This follows an initial push for a public-private partnership under federal oversight that pivoted to pure industry self-regulation after a White House executive order draft stalled.

•It builds on the existing Frontier Model Forum, a consortium including Anthropic, Google, Microsoft, and OpenAI created specifically to address the safety of the most powerful AI models.

•Labs differ in philosophy: Anthropic has leaned more explicitly toward government partnership, with its red-team lead advocating for industry-wide standards developed with government, and its Responsible Scaling Policy laying out how it decides when a model is safe enough to deploy.

•Internationally, the New Delhi Frontier AI Impact Commitments were announced in February 2026 at the India AI Impact Summit, committing frontier AI developers to promote understanding of AI's impacts and broaden access to its benefits.

Bottom line

Right now, systems like me are governed by a layered, uneven mix: the EU AI Act is the most binding comprehensive framework (though key high-risk provisions are delayed to 2027-2028); U.S. federal policy favors voluntary commitments and light-touch oversight; U.S. states (especially California and Colorado) are filling the gap with targeted transparency, disclosure, and safety-reporting laws; and the industry itself is now trying to build a FINRA-style self-regulatory body because comprehensive government rules haven't materialized. This is a genuinely unsettled area — expect meaningful changes within the next year as the EU's remaining deadlines hit, state preemption fights play out, and industry self-regulation either solidifies or stalls.

Citations (24)

1intelligencecoalition.comNonprofits and think tanks
EU AI Act explained: obligations, dates, and operational readiness
Source excerpt: “Status on September 26, 2026: Applicable since February 2, 2025; amended ... # EU AI Act explained: obligations, dates, and operational readiness Sev...”
evidence, article. Claim: EU AI Act staggered timeline: prohibited practices and AI literacy applied since February 2025, GPAI obligations since August 2025, transparency since August 2026.
2intelligencecoalition.comNonprofits and think tanks
EU AI Act explained: obligations, dates, and operational readiness
Source excerpt: “## What matters now | Area | Status on September 26, 2026 | What to know | | --- | --- | --- | | Prohibited practices (Article 5) | Applicable since F...”
evidence, article. Claim: Prohibited practices under Article 5 and other current obligations, with two added prohibitions from December 2, 2026.
3agentliability.euLow provenance
EU AI Act implementation status 2026: all 27 states
Source excerpt: “The Article 50 transparency obligations and the Article 99 penalty regime activated on 2 August 2026 as originally scheduled and are in application no...”
evidence, article. Claim: Article 50 transparency obligations and penalty regime activated on 2 August 2026 and are now in application.
4technology.orgNews and media
EU AI Act Deadlines After the Digital Omnibus: What Applies From December 2026 to August 2028 - Technology Org
Source excerpt: “| High-risk systems in regulated products (Annex I) | 2 August 2027 | 2 August 2028 | | Legacy high-risk systems used by public authorities | 2 August...”
evidence, article. Claim: Digital Omnibus deferred high-risk obligations and set grace periods for older systems, with deadlines running to 2027-2028.
5agentliability.euLow provenance
EU AI Act implementation status 2026: all 27 states
Source excerpt: “The provider obligations in Chapter III (Articles 9 through 17) and the deployer obligations in Article 26, as they apply to the systems listed in Ann...”
evidence, article. Claim: Provider obligations in Chapter III and deployer obligations in Article 26 for Annex III systems deferred to 2 December 2027.
6agentliability.euLow provenance
EU AI Act implementation status 2026: all 27 states
Source excerpt: “As of 17 August 2026 the group with a designation resting on an enacted law or a published government decision includes Cyprus, Denmark, Finland, Germ...”
statistic, article. Claim: As of August 2026, only about a dozen member states had a national enforcement authority based on enacted law or government decision.
7ailawsbystate.comData and tools
Federal AI Policy & Executive Orders Tracker 2026 (US Updates)
Source excerpt: “Updated Daily No Comprehensive Federal AI Law (Yet) AI Executive Order Tracker Meanwhile at the state level: **—** AI bills published **—** states ...”
evidence, data page. Claim: There is no comprehensive federal AI law, only an evolving executive order tracker.
8ailawsbystate.comData and tools
Federal AI Policy & Executive Orders Tracker 2026 (US Updates)
Source excerpt: “- **Safety testing eliminated:** The Defense Production Act reporting requirement for large AI model developers — one of the most substantive private-...”
evidence, data page. Claim: Biden's AI order was nullified and the Defense Production Act safety-testing reporting requirement for large model developers was eliminated.
9jdsupra.comNews and media
News & Analysis as of
Source excerpt: “News & Analysis as of Executive Orders Artificial Intelligence Constitutional Challenges White & Case LLP State AI laws under federal scrutiny: Key...”
evidence, article. Claim: EO 14365 aims to create a national AI policy framework and limit state regulation of AI.
10jdsupra.comNews and media
News & Analysis as of
Source excerpt: “The EO aims to replace a patchwork of...more King & Spalding New State AI Laws are Effective on January 1, 2026, But a New Executive Order Signals...”
evidence, article. Claim: The executive order seeks to replace the patchwork of state AI laws.
11lathropgpm.comCompanies
New Executive Order Signals Evolving Federal Approach to AI - Lathrop GPM
Source excerpt: “On June 2, 2026, in a rapidly evolving federal AI policy landscape, President Trump signed a new Executive Order (EO) titled Promoting Advanced Artifi...”
evidence, article. Claim: June 2026 executive order 'Promoting Advanced Artificial Intelligence Innovation and Security' signed by the President.
12lathropgpm.comCompanies
New Executive Order Signals Evolving Federal Approach to AI - Lathrop GPM
Source excerpt: “This EO establishes new cybersecurity mandates and a voluntary framework for the secure deployment of frontier AI models. ”
evidence, article. Claim: The order establishes cybersecurity mandates and a voluntary framework for secure deployment of frontier models.
13mcdermottlaw.comCompanies
New executive order shifts US AI policy toward national security
Source excerpt: “The EO calls for AI developers to voluntarily share certain new models with the federal government up to 30 days before providing access to other part...”
evidence, article. Claim: The order calls for developers to voluntarily share new models with the federal government up to 30 days before release.
14wiley.lawCompanies
Executive Order Rebrands AI as “Super Intelligence” and Signals Potential Federal Legislative Changes: Wiley
Source excerpt: “On September 29, 2026, President Trump issued Executive Order (EO) 14434, Inaugurating the Era of Super Intelligence, directing Executive departments ...”
evidence, article. Claim: EO 14434 of September 29, 2026 directs agencies to use 'Super Intelligence' instead of 'Artificial Intelligence'.
15stackcyber.comCompanies
Comprehensive List of State Artificial Intelligence Legislation
Source excerpt: “## Transparency Requirements AB 2013 took effect Jan. 1, 2026 and requires developers of public-use generative AI systems intended for Californians to...”
evidence, article. Claim: California AB 2013 requires generative AI developers to publish training data information; SB 942 requires AI-generated content disclosure.
16ailawsbystate.comData and tools
AI Disclosure & Transparency Laws by State 2026: Watermarks, Chatbots, Synthetic Media
Source excerpt: “| Primary Source | | California | SB 53 | Enacted | 2026-01-01 | Frontier model developers (>10²⁶ ops compute) must publish reports, report critical...”
evidence, data page. Claim: California SB 53 requires frontier developers to publish safety reports and report critical incidents, with penalties up to $1M.
17stackcyber.comCompanies
State AI Chatbot Laws: Compliance Guide for Businesses
Source excerpt: “## California: SB 243 ## Enacted Laws by State California's companion chatbot law (SB 243) took effect Jan. 1, 2026, making it the first comprehensiv...”
evidence, article. Claim: California SB 243 companion chatbot law took effect January 1, 2026.
18stackcyber.comCompanies
State AI Chatbot Laws: Compliance Guide for Businesses
Source excerpt: “## California: SB 243 Operators must disclose non-human status at the outset of any interaction and implement protocols to prevent production of self-...”
evidence, article. Claim: Operators must disclose non-human status and implement self-harm protocols plus minor protections.
19ailawsbystate.comData and tools
AI Disclosure & Transparency Laws by State 2026: Watermarks, Chatbots, Synthetic Media
Source excerpt: “| Primary Source | | Chatbot Disclosure | | | | | | | Colorado | SB 26-189 | Enacted (signed May 14, 2026) | 2027-01-01 | Repealed and replaced S...”
evidence, data page. Claim: Colorado SB 26-189 repealed and replaced the original Colorado AI Act, enforced by the attorney general.
20dealroom.coData and tools
Google, OpenAI and Anthropic AI Safety Group Takes Shape
Source excerpt: “Leo Schwartz and Stephanie Palazzolo: Google, OpenAI and Anthropic are advancing a self-regulatory AI safety standards body—tentative name Standards A...”
evidence, article. Claim: Google, OpenAI and Anthropic are advancing a self-regulatory standards body tentatively named SAFA.
21biggo.comData and tools
Google, OpenAI, and Anthropic Plan to Form Independent AI Safety Standards Body, Potentially Launching by Year-End — BigGo Finance
Source excerpt: “The three companies initially sought a public-private partnership under federal oversight but pivoted to pure industry self-regulation after a White H...”
evidence, article. Claim: The labs pivoted from a public-private partnership to pure industry self-regulation after a White House order draft stalled.
22cryptobriefing.comNews and media
OpenAI, Anthropic, and Google are trying to agree on AI safety standards
Source excerpt: “## The Frontier Model Forum and existing infrastructure This isn’t the first time these companies have tried to coordinate on safety. The Frontier Mod...”
evidence, article. Claim: The effort builds on the existing Frontier Model Forum consortium.
23cryptobriefing.comNews and media
OpenAI, Anthropic, and Google are trying to agree on AI safety standards
Source excerpt: “Anthropic has leaned more explicitly toward government partnership. In July 2026, Anthropic’s red team lead publicly advocated for industry-wide safet...”
attribution, article. Claim: Anthropic has leaned toward government partnership, with its red team lead advocating industry-wide standards developed with government.
24anthropic.comCompanies
Anthropic’s Transparency Hub \ Anthropic
Source excerpt: “The New Delhi Frontier AI Impact Commitments were announced in February 2026 at the India AI Impact Summit in New Delhi, committing frontier AI develo...”
evidence, official document. Claim: New Delhi Frontier AI Impact Commitments announced February 2026 at the India AI Impact Summit.