More answers like this
Claude Sonnet 5Oct 26, 2026anthropic/claude-sonnet-5-20260630

What rules currently exist that govern how systems like you are built, deployed, or held accountable?

I'll research the current regulatory landscape for AI systems to give you an accurate, up-to-date answer.The landscape governing AI systems like me is a patchwork of binding laws, government policy, international frameworks, and voluntary industry/company commitments. Here's a breakdown as of late 2026:

1. Binding regulation (EU)

The EU AI Act is the most comprehensive binding law. Adopted on 21 May 2024, it lays down harmonized rules on artificial intelligence and is the first-ever comprehensive legal framework on AI. It works on a risk-based tiering system:

•Prohibited practices (in force since Feb 2025): manipulative techniques that deploy subliminal cues to materially distort behavior and cause harm are forbidden, and social scoring by public authorities is banned entirely, along with restrictions on emotion recognition in workplace/education settings and real-time remote biometric identification in public spaces for law enforcement, with narrow exceptions.
•High-risk systems (employment, credit, education, law enforcement, etc.) face heavy obligations: providers must establish a documented risk management system, robust data governance, detailed technical documentation, automatic logging, human oversight, and safeguards for accuracy, robustness, and cybersecurity, enforceable from August 2, 2026.
•General-purpose AI models (like me) have had obligations since August 2025: these systems must be documented, their training data summarized, and downstream use supported with appropriate information, while models with broader systemic impact face added obligations including risk assessments and incident reporting.
•Transparency rules (Article 50) require providers of AI systems that interact directly with people or generate synthetic content to disclose this, along with users of emotion-recognition or deepfake-generating systems.

Notably, the EU recently softened some timelines: in May 2026 the EU provisionally agreed material changes through the "Digital Omnibus on AI," involving a significant postponement of some compliance deadlines.

2. United States — fragmented and shifting

There's no comprehensive federal AI law. As of mid-2026, there is no comprehensive federal AI statute, and none appears imminent — federal AI regulation instead runs through executive action and agency posture, alongside a growing body of state law.

•The Biden-era comprehensive framework was undone early on: on January 20, 2025, Trump rescinded Biden's EO 14110 on Safe, Secure, and Trustworthy AI — the most comprehensive federal AI governance framework to date — which had directed over 50 federal entities and required developers to share safety test results before releasing high-risk systems.
•In December 2025, a new executive order pushed in the opposite direction — toward less state-level regulation: it establishes a federal policy aimed at addressing state-level AI regulations, "to sustain and enhance the United States' global AI dominance through a minimally burdensome national policy framework." It created a litigation task force to challenge state laws, though the EO itself does not preempt, suspend, or invalidate current and enacted state AI laws; further federal action is required.
•A June 2026 EO added narrower, mostly voluntary measures: establishing new cybersecurity mandates and a voluntary framework for secure deployment of frontier models, while reinforcing that AI innovation must not be stifled by excessive regulation.

State laws are filling the gap, especially California:

•SB 53 (Transparency in Frontier AI Act), effective Jan 1, 2026, is the most direct law on companies like Anthropic. Large frontier developers must publish an annual framework explaining mechanisms to identify, mitigate, and govern catastrophic risks, and all frontier developers must issue transparency reports before deploying new models, describing capabilities, intended uses, limitations, and risk assessment results. It also establishes whistleblower protections, prohibiting retaliation and requiring large developers to set up anonymous reporting channels. Penalties reach up to $1 million per violation.
•Colorado's original AI Act never took effect and was repealed and replaced on May 14, 2026 with SB 26-189, a narrower automated-decision-making law effective January 1, 2027.

3. International and voluntary frameworks

Much of global AI governance remains non-binding:

•NIST AI Risk Management Framework: voluntary guidance for AI risk management, not a law or regulation, setting no obligations and using "should" language for recommended actions. It's being revised: NIST is revising it per America's AI Action Plan to remove references to misinformation, DEI, and climate change.
•ISO/IEC 42001 is a certifiable voluntary standard for AI management systems, unlike NIST's framework.
•G7 Hiroshima AI Process: the first international framework for voluntary public reporting of organizational risk management practices for advanced AI systems; at least 20 developers have published public transparency reports.
•EU GPAI Code of Practice: a voluntary framework guiding transparency, copyright, and safety practices to support EU AI Act compliance, signed by more than two dozen companies as of December 2025.
•Other soft-law instruments include the OECD AI Principles, UNESCO's AI Ethics Recommendation, and sector-specific pledges like China's industry-coordinated AI safety commitments.

4. Company-level self-governance

A significant portion of "accountability" for frontier AI systems currently comes from companies' own voluntary practices — safety frameworks (sometimes called Responsible Scaling Policies), model cards, red-teaming, usage policies, and internal oversight bodies. Researchers note some developers have internal decision-making panels that deliberate on how to safely design and review new AI systems, with oversight and advisory committees or ethics boards serving as governance mechanisms — though challenges with voluntary self-governance mean third-party auditing and standardization are increasingly seen as necessary complements.

Bottom line: Right now, the binding "hard law" is concentrated in the EU AI Act and a handful of U.S. state laws (especially California's SB 53), while most other governance — NIST, ISO, G7, OECD, and company safety frameworks — is voluntary. The U.S. federal approach is actively in flux, trending toward lighter federal rules and friction with state-level regulation, so this picture is likely to keep shifting.

Citations (24)

  1. 1legalnodes.comCompanies
    EU AI Act 2026 Updates: Compliance Requirements and Business Risks

    Source excerpt: “… Adopted on 21 May 2024, the EU Artificial Intelligence Act lays down harmonized rules on artificial intelligence and is the first-ever comprehensive...”

  2. 2secureprivacy.aiNot yet classified
    EU AI Act 2026: Key Compliance Requirements for Enterprises

    Source excerpt: “## Risk-Based Classification System ### Unacceptable Risk: Prohibited AI Practices Manipulative techniques that deploy subliminal cues to materially d...”

  3. 3secureprivacy.aiNot yet classified
    EU AI Act 2026: Key Compliance Requirements for Enterprises

    Source excerpt: “Emotion recognition in workplace and educational settings is forbidden except for strictly medical or safety purposes. Real-time remote biometric iden...”

  4. 4stackcyber.comCompanies
    EU AI Act Compliance Guide for U.S. Businesses

    Source excerpt: “These systems must be documented, their training data summarized, and downstream use supported with appropriate information. Models with broader impa...”

  5. 5traverssmith.comNot yet classified
    The EU AI Act

    Source excerpt: “### 2 August 2026 – most transparency obligations apply Providers of AI systems intended to interact directly with people, or which generate synthetic...”

  6. 6traverssmith.comNot yet classified
    The EU AI Act

    Source excerpt: “Within the space of a few weeks, in May 2026, the EU provisionally agreed material changes to it through the Digital Omnibus on AI (see our previous b...”

  7. 7astraea.lawNot yet classified
    Federal AI Regulation Landscape: Where Things Stand in 2026

    Source excerpt: “No. As of mid-2026, there is no comprehensive federal AI statute, and none appears imminent. Federal AI regulation instead runs through executive a...”

  8. 8astraea.lawNot yet classified
    Federal AI Regulation Landscape: Where Things Stand in 2026

    Source excerpt: “## The Executive-Order Landscape: From Rescission to a National AI Strategy On January 20, 2025, President Trump rescinded President Biden’s Executive...”

  9. 9whitecase.comCompanies
    State AI laws under federal scrutiny: Key takeaways from the executive order establishing federal AI policy framework

    Source excerpt: “aimed at addressing the growing number of state-level AI regulations governing the AI ecosystem: “to sustain and enhance the United States’ global AI ...”

  10. 10gunder.comLow provenance
    2026 AI Laws Update: Key Regulations and Practical Guidance

    Source excerpt: “The EO itself does not preempt, suspend, or invalidate current and enacted state AI laws and further federal action is required. ”

  11. 11lathropgpm.comCompanies
    New Executive Order Signals Evolving Federal Approach to AI - Lathrop GPM

    Source excerpt: “This EO establishes new cybersecurity mandates and a voluntary framework for the secure deployment of frontier AI models. It also reinforces the admin...”

  12. 12recordinglaw.comNot yet classified
    California AI Laws and Regulation (2026)

    Source excerpt: “### Safety Framework Requirements Large frontier developers must publish an annual framework explaining the mechanisms they have in place to identify,...”

  13. 13recordinglaw.comNot yet classified
    California AI Laws and Regulation (2026)

    Source excerpt: “### Transparency Reports Before deploying a new or substantially modified frontier model, all frontier developers (not just those classified as "large...”

  14. 14wilmerhale.comNot yet classified
    Transparency in Frontier Artificial Intelligence Act (SB-53): California Requires New Standardized AI Safety Disclosures

    Source excerpt: “** The law establishes strong whistleblower protections for employees of frontier developers, prohibiting retaliation, requiring large frontier develo...”

  15. 15mofo.comNot yet classified
    At the Frontier

    Source excerpt: “With the signing of the Transparency in Frontier Artificial Intelligence Act (SB53), companies developing foundation models now face sweeping new comp...”

  16. 16verifywise.aiCompanies
    US AI regulations 2026: the state laws you must comply with

    Source excerpt: “### Key compliance deadlines at a glance | State | Law | Effective date | Focus | | --- | --- | --- | --- | | Colorado | Colorado AI Act | Jun 30, 202...”

  17. 17modulos.aiCompanies
    NIST AI Risk Management Framework 1.0 (NIST AI RMF) — Complete Guide

    Source excerpt: “NIST AI RMF 1.0 (NIST AI 100-1, January 2023) is voluntary guidance for AI risk management. ”

  18. 18modulos.aiCompanies
    NIST AI Risk Management Framework 1.0 (NIST AI RMF) — Complete Guide

    Source excerpt: “The framework is voluntary guidance, not a law. ”

  19. 19modulos.aiCompanies
    NIST AI Risk Management Framework 1.0 (NIST AI RMF) — Complete Guide

    Source excerpt: “## Legal effect NIST AI 100-1 is voluntary guidance and not a law or a regulation. ”

  20. 20oecd.aiGovernment
    NIST AI Risk Management Framework - OECD.AI

    Source excerpt: “Pursuant to America’s AI Action Plan, NIST is in the process of revising the AI RMF to eliminate references to misinformation, Diversity, Equity, and ...”

  21. 21arxiv.orgAcademic
    International AI Safety Report 2026

    Source excerpt: “The G7 Hiroshima AI Process (HAIP) Reporting Framework (1100) is the first international framework for voluntary public reporting of organisational ri...”

  22. 22arxiv.orgAcademic
    International AI Safety Report 2026

    Source excerpt: “In its current form, the EU General-Purpose Al Code of Practice functions as a voluntary framework to guide transparency, copyright, and safety and se...”

  23. 23arxiv.orgAcademic
    International AI Safety Report 2026

    Source excerpt: “Some developers have internal decision-making panels that deliberate on how to safely and responsibly design, develop, and review new AI systems. Over...”

  24. 24arxiv.orgAcademic
    International AI Safety Report 2026

    Source excerpt: “Researchers have argued that challenges with voluntary self-governance mean that third-party auditing, verification, and standardisation could help st...”