More answers like this
Claude Sonnet 5Oct 30, 2026anthropic/claude-sonnet-5-20260630

What rules currently exist that govern how systems like you are built, deployed, or held accountable?

AI governance is a rapidly evolving area, so let me get you current, accurate information on this.The rules governing systems like me fall into a few distinct categories — binding law, government policy/executive action, and voluntary industry self-governance. The landscape is unusually fragmented and fast-moving right now, so here's where things actually stand as of late 2026.

1. Binding law: the EU AI Act

This is currently the world's most comprehensive binding framework. The EU AI Act entered into force in August 2024 — the world's first comprehensive legal framework specifically designed to regulate artificial intelligence. It takes a risk-based approach, classifying AI systems into four tiers: unacceptable risk (banned outright), high risk (strict requirements), limited risk (transparency obligations), and minimal risk (largely unregulated). Banned practices include AI that manipulates people through subliminal techniques, exploits vulnerabilities of specific groups, allows governments to build real-time biometric surveillance of public spaces, and social scoring systems.

For high-risk systems, the Act asks providers to classify each system by risk, maintain technical documentation and record-keeping, ensure human oversight, manage data quality, and meet transparency duties. Enforcement has real teeth: fines reach €35 million or 7% of global annual turnover for prohibited-practice violations, and €15 million or 3% for most other infringements. Note that some deadlines have shifted — the Digital Omnibus on AI moved high-risk obligations to December 2, 2027 for Annex III systems and to August 2, 2028 for AI built into regulated products, though the AI Act's bans, AI literacy duty and general-purpose model rules already apply, and transparency duties have applied since August 2, 2026.

2. The US: no federal AI law, a patchwork of state laws, and a preemption fight

The US still doesn't have a comprehensive federal AI law. What it has instead is a fast-moving mix of state statutes, agency enforcement, and an active, unresolved fight over who gets to regulate AI at all.

On the federal side, on December 11, 2025, President Trump signed an Executive Order titled "Ensuring a National Policy Framework for Artificial Intelligence," signaling an intent to consolidate AI oversight at the federal level and counter the expanding patchwork of state AI rules. However, the EO does not establish any federal AI standards or regulations on its own and, absent further Congressional and federal agency actions, merely signals federal intent. A follow-up March 2026 national policy framework recommended that Congress legislate broad preemption of state AI laws under a light-touch standard, but preemption is not settled law — congressional efforts have repeatedly stalled, and courts will ultimately decide how far executive action can reach. The order explicitly carved out exceptions: it exempts child safety in AI contexts, AI compute and data center infrastructure, and state government procurement of AI systems from preemption.

So in practice, state obligations remain in force unless and until they're actually preempted, so the prudent posture is to keep complying with applicable state law while monitoring the federal picture. The states filling this gap include:

•Colorado: originally the comprehensive SB 24-205, now replaced by SB 26-189, a narrower statute regulating automated decision-making technology that materially influences consequential decisions, effective January 1, 2027 — the risk management programs, impact assessments and duty of care are gone; in their place are pre-use consumer notices, 30-day adverse-outcome explanations, meaningful human review rights and developer documentation duties.
•California: SB 53 requires developers of large frontier models to publish risk frameworks, report safety incidents, and implement whistleblower protections, with penalties reaching $1 million per violation; plus AB 2013 (training-data transparency) and SB 942 (AI-content disclosure/watermarking).
•Texas: TRAIGA imposes categorical bans on AI systems designed for behavioral manipulation, unlawful discrimination, violence incitement, or deepfake production of child sexual abuse material, restricts state entities from using AI for social scoring or biometric identification without consent.
•Congress's only enacted AI-specific statute so far is the TAKE IT DOWN Act, signed May 19, 2025, which makes it a crime to publish nonconsensual intimate images, including AI-generated ones.

Beyond AI-specific rules, generally applicable consumer protection "unfair or deceptive acts and practices" and anti-competition statutes mean state attorneys general may continue to pursue enforcement based on alleged deceptive, misleading, discriminatory, or unfair AI practices.

3. Other major jurisdictions

•China regulates through targeted rules rather than one law: recommendation algorithms, deep synthesis, facial recognition, and, as of 2026, anthropomorphic AI services.
•Korea, Vietnam, Brazil, Singapore, and India are each developing their own frameworks on different timelines, per multiple trackers, with Korea's Basic AI Act and Vietnam's first dedicated AI law set to take effect in 2026.

4. Voluntary industry/company self-governance (this is directly relevant to how I'm built)

Since there's no single binding global rulebook for frontier AI development yet, companies like Anthropic operate under self-imposed frameworks that sit alongside law:

•Anthropic's Responsible Scaling Policy (RSP): Anthropic's voluntary framework for managing catastrophic risks from advanced AI systems establishes how it identifies and evaluates risks and makes decisions about AI development and deployment. It defines AI Safety Levels (ASL) — rungs of a governance ladder that answer what safeguards must be in place before Anthropic is willing to train or deploy a model as it gets more capable. Notably, Anthropic activated ASL-3 protections for Claude Opus 4 on May 22, 2025, alongside the model's launch, as a precaution rather than a confirmed capability threshold crossing.
•These lab-specific frameworks increasingly feed into actual law: these frameworks have even served as a foundation for frontier AI regulation globally, including California's SB-53, New York's RAISE Act, and the EU AI Act.
•Industry coordination: Anthropic is a founding member of the Frontier Model Forum, an industry organization developing safety research, standards, and evaluations for AI safety and responsibility, and collaborates with government bodies like the UK AI Security Institute and US Center for AI Standards and Innovation (CAISI) for independent testing.
•Voluntary multi-company commitments: most recently, the White House Accord on Super Intelligence, announced September 29, 2026 and signed by leaders of several frontier AI developers, asks those companies to adopt internal controls, an internal oversight team, independent external audits and board-level oversight — though it is voluntary and creates no enforceable duty.

The bottom line

There is no single global rulebook. Instead there's binding EU law, a contested and unsettled US federal-vs-state fight, a growing patchwork of other national laws, and — filling much of the gap for frontier model safety specifically — voluntary frameworks like RSPs that companies impose on themselves and that regulators are increasingly borrowing from when writing actual statutes. As multiple legal trackers note, the specifics are provisional or contested, and this is a landscape that changes faster than most compliance teams are used to — which is a fair description of AI governance generally right now.

Citations (28)

  1. 1singularitymoments.comNot yet classified
    AI Regulation 2026 Guide — EU AI Act, US Law & Global Governance | Singularity Moments

    Source excerpt: “The EU AI Act entered into force in August 2024 — the world's first comprehensive legal framework specifically designed to regulate artificial intelli...”

  2. 2singularitymoments.comNot yet classified
    AI Regulation 2026 Guide — EU AI Act, US Law & Global Governance | Singularity Moments

    Source excerpt: “It takes a risk-based approach, classifying AI systems into four tiers: unacceptable risk (banned outright), high risk (strict requirements), limited ...”

  3. 3singularitymoments.comNot yet classified
    AI Regulation 2026 Guide — EU AI Act, US Law & Global Governance | Singularity Moments

    Source excerpt: “Unacceptable risk systems — banned immediately — include AI that manipulates people through subliminal techniques, exploits vulnerabilities of specifi...”

  4. 4collibra.comCompanies
    AI regulatory compliance in 2026: EU AI Act, US orders, and state laws, and how to operationalize them | Collibra

    Source excerpt: “What the EU AI Act asks for in practice maps closely to good governance: classify each system by risk, maintain technical documentation and record-kee...”

  5. 5agengate.comNot yet classified
    AI Regulatory Compliance 2026: EU AI Act, US Orders & What's Next

    Source excerpt: “Fines under Article 99 reach €35 million or 7% of global annual turnover for prohibited-practice violations, and €15 million or 3% for most other infr...”

  6. 6questa-ai.comCompanies
    AI Regulation 2026: Global AI Laws, EU AI Act & US Rules

    Source excerpt: “The Digital Omnibus on AI moved high-risk obligations to December 2, 2027 for Annex III systems and to August 2, 2028 for AI built into regulated prod...”

  7. 7questa-ai.comCompanies
    AI Regulation 2026: Global AI Laws, EU AI Act & US Rules

    Source excerpt: “In the EU, the AI Act's bans, AI literacy duty and general-purpose model rules already apply, and the Article 50 transparency duties have applied sinc...”

  8. 8transcend.ioCompanies
    Global AI Regulation in 2026: US, EU & China Guide | Transcend Data Decisioning Infrastructure

    Source excerpt: “The US still doesn't have a comprehensive federal AI law. What it has instead is a fast-moving mix of state statutes, agency enforcement, and an activ...”

  9. 9gunder.comLow provenance
    2026 AI Laws Update: Key Regulations and Practical Guidance | Gunderson Dettmer Stough Villeneuve Franklin & Hachigian, LLP

    Source excerpt: “... U.S. Executive Order on “Ensuring a National Policy Framework for AI”: On December 11, 2025, President Trump signed an Executive Order titled “Ens...”

  10. 10gunder.comLow provenance
    2026 AI Laws Update: Key Regulations and Practical Guidance | Gunderson Dettmer Stough Villeneuve Franklin & Hachigian, LLP

    Source excerpt: “The EO does not establish any federal AI standards or regulations on its own and, absent further Congressional and federal agency actions, the EO mere...”

  11. 11collibra.comCompanies
    AI regulatory compliance in 2026: EU AI Act, US orders, and state laws, and how to operationalize them | Collibra

    Source excerpt: “In March 2026, the White House followed with a national policy framework recommending that Congress legislate broad preemption of state AI laws under ...”

  12. 12collibra.comCompanies
    AI regulatory compliance in 2026: EU AI Act, US orders, and state laws, and how to operationalize them | Collibra

    Source excerpt: “The crucial caveat for compliance planning is that preemption is not settled law. Congressional efforts to preempt state AI regulation have repeatedly...”

  13. 13verifywise.aiCompanies
    US AI regulations 2026: the state laws you must comply with

    Source excerpt: “The executive order exempts 3 areas from preemption: child safety in AI contexts, AI compute and data center infrastructure, and state government proc...”

  14. 14collibra.comCompanies
    AI regulatory compliance in 2026: EU AI Act, US orders, and state laws, and how to operationalize them | Collibra

    Source excerpt: “The net effect for organizations is uncertainty: state obligations remain in force unless and until they're actually preempted, so the prudent posture...”

  15. 15verifywise.aiCompanies
    US AI regulations 2026: the state laws you must comply with

    Source excerpt: “In May 2026 Colorado repealed and replaced the law with SB 26-189, a narrower statute regulating automated decision-making technology (ADMT) that mate...”

  16. 16verifywise.aiCompanies
    US AI regulations 2026: the state laws you must comply with

    Source excerpt: “Multiple laws took effect on January 1, 2026: The Transparency in Frontier AI Act (SB 53) requires developers of large frontier models (trained using ...”

  17. 17verifywise.aiCompanies
    US AI regulations 2026: the state laws you must comply with

    Source excerpt: “That said, TRAIGA still imposes categorical bans on AI systems designed for behavioral manipulation, unlawful discrimination, violence incitement, or ...”

  18. 18questa-ai.comCompanies
    AI Regulation 2026: Global AI Laws, EU AI Act & US Rules

    Source excerpt: “The TAKE IT DOWN Act, signed on May 19, 2025, makes it a crime to publish nonconsensual intimate images, including AI-generated ones, and requires cov...”

  19. 19gunder.comLow provenance
    2026 AI Laws Update: Key Regulations and Practical Guidance | Gunderson Dettmer Stough Villeneuve Franklin & Hachigian, LLP

    Source excerpt: “Further, under generally applicable consumer protection “unfair or deceptive acts and practices” and anti-competition statutes, state attorneys genera...”

  20. 20transcend.ioCompanies
    Global AI Regulation in 2026: US, EU & China Guide | Transcend Data Decisioning Infrastructure

    Source excerpt: “China regulates AI through targeted rules addressing specific technologies and use cases, including recommendation algorithms, deep synthesis, facial ...”

  21. 21anthropic.comCompanies
    Responsible Scaling Policy

    Source excerpt: “​Our Responsible Scaling Policy (RSP) is our voluntary framework for managing catastrophic risks from​ · ​advanced AI systems. It establishes how we i...”

  22. 22techjacksolutions.comNot yet classified
    AI Safety Levels Explained: Anthropic's 2026 AI Risk Framework

    Source excerpt: “AI Safety Levels are the rungs of a governance ladder that Anthropic built for itself. They sit inside the company's Responsible Scaling Policy, and t...”

  23. 23casrai.orgNonprofits and think tanks
    Responsible Scaling Policy Explained — CASRAI

    Source excerpt: “Anthropic activated ASL-3 protections — at the time its highest deployed safeguard tier — for Claude Opus 4 on May 22, 2025, alongside the model’s lau...”

  24. 24governance.aiNot yet classified
    Anthropic’s RSP v3.0: How it Works, What’s Changed, and Some Reflections | GovAI

    Source excerpt: “These frameworks have even served as a foundation for frontier AI regulation globally, including California’s SB-53, New York’s RAISE Act, and the EU ...”

  25. 25anthropic.comCompanies
    Anthropic’s Transparency Hub \ Anthropic

    Source excerpt: “We are a founding member of the Frontier Model Forum (FMF), an industry organization developing safety research, standards, and evaluations for AI saf...”

  26. 26anthropic.comCompanies
    Anthropic’s Transparency Hub \ Anthropic

    Source excerpt: “We collaborate with government organizations like the UK AI Security Institute and US Center for AI Standards and Innovation (CAISI) for independent t...”

  27. 27questa-ai.comCompanies
    AI Regulation 2026: Global AI Laws, EU AI Act & US Rules

    Source excerpt: “On September 29, 2026, the White House announced the White House Accord on Super Intelligence, signed by the leaders of several frontier AI developers...”

  28. 28collibra.comCompanies
    AI regulatory compliance in 2026: EU AI Act, US orders, and state laws, and how to operationalize them | Collibra

    Source excerpt: “A caution up front: the specifics below are current as of mid-2026 and several are provisional or contested. Treat this as a map, confirm the details ...”