Twenty-nine instruments: US federal orders and guidance, thirteen US state and local laws, the EU AI Act and EDPB, and the main international standards and security advisories. Each entry is written in plain language and linked to the government source. Several are cross-referenced to the NIST AI RMF.
22 of the 29 instruments carry a firm start date. The 2026 effective dates are the bulk of the near-term compliance load. The rest are open-ended guidance or bills with no date yet.
29 instruments, grouped by jurisdiction and ordered by section. 14 are in force or in effect, 3 are enacted but not yet effective, 1 are in draft or pending, and 3 were struck down. The rest are voluntary standards or advisories. The last column shows when an editor last confirmed the entry against its source.
| NO. | INSTRUMENT | STANDING | EFFECTIVE | VERIFIED |
|---|---|---|---|---|
| US, federal | ||||
| 1 | Executive Order 14319: Preventing Woke AI in the Federal Government Exec. Order No. 14319, 90 FR 35389 | In effect | 23 Jul 2025 | 9 Sep 2026 |
| 2 | Executive Order 14409: Promoting Advanced Artificial Intelligence Innovation and Security Exec. Order No. 14409 | In effect | 2 Jun 2026 | 9 Sep 2026 |
| 3 | NIST AI Risk Management Framework (AI RMF 1.0) NIST AI 100-1 | Voluntary | 26 Jan 2023 | 9 Sep 2026 |
| 4 | NIST AI 600-1: Generative Artificial Intelligence Profile NIST AI 600-1 | Voluntary | 26 Jul 2024 | 9 Sep 2026 |
| 12 | Model risk management guidance SR 11-7 → SR 26-2 · OCC 2026-13 | In force | 17 Apr 2026 | 9 Sep 2026 |
| 13 | FTC enforcement under Section 5 15 U.S.C. § 45 | Continuing | — | 9 Sep 2026 |
| 14 | Great American AI Act Obernolte & Trahan discussion draft | Draft | — | 9 Sep 2026 |
| US, state and local | ||||
| 5 | California CPPA Automated Decision-Making Technology (ADMT) Regulations 11 CCR §§ 7001, 7150, 7200–7222 | In force, phased | 1 Jan 2026 | 9 Sep 2026 |
| 6 | California AB 2013 — Generative AI Training Data Transparency Act Cal. Civ. Code § 3110 et seq. (AB 2013, Ch. 817, Stats. 2024) | In force | 1 Jan 2026 | 9 Sep 2026 |
| 7 | Texas Responsible AI Governance Act (TRAIGA) HB 149, 89th Leg., R.S. | In force | 1 Jan 2026 | 9 Sep 2026 |
| 15 | Colorado ADMT Act SB 26-189, repealing SB 24-205 | Enacted | 1 Jan 2027 | 9 Sep 2026 |
| 16 | Colorado Chatbot Safety Act HB 26-1263 | Enacted | 1 Jan 2027 | 9 Sep 2026 |
| 17 | California Transparency in Frontier AI Act (TFAIA) SB 53, ch. 138, 2025 Cal. Stat. | In force | 1 Jan 2026 | 9 Sep 2026 |
| 18 | Illinois amendments on predictive analytics HB 3773, Pub. Act 103-0804 | In force | 1 Jan 2026 | 9 Sep 2026 |
| 19 | NYC automated employment decision tools Local Law 144 of 2021; 6 RCNY § 5-300 | In force | 5 Jul 2023 | 9 Sep 2026 |
| 20 | Utah Artificial Intelligence Policy Act SB 149, amended by SB 226, SB 271, SB 332, HB 452 | In force | 1 May 2024 | 9 Sep 2026 |
| 21 | Washington surveillance pricing bill HB 2481 | Struck down | — | 9 Sep 2026 |
| 22 | New York DFS cybersecurity guidance for AI Industry letter, 21 May 2026 | Advisory | 21 May 2026 | 9 Sep 2026 |
| 23 | New York RAISE Act Ch. 361, 2025 N.Y. Laws, as amended Mar. 2026 | Enacted | 1 Jan 2027 | 9 Sep 2026 |
| 24 | Virginia High-Risk AI Developer and Deployer Act HB 2094. Vetoed; veto sustained 2 Apr 2025 | Struck down | — | 9 Sep 2026 |
| European Union | ||||
| 8 | EU AI Act: Article 50 — Transparency & Synthetic Media Disclosures Reg. (EU) 2024/1689, Art. 50 | In force, phased | 2 Aug 2026 | 9 Sep 2026 |
| 9 | EDPB Opinion 28/2024 on personal data use in AI model development and deployment EDPB Opinion 28/2024 (Art. 64(2) GDPR) | Advisory | — | 9 Sep 2026 |
| Rest of world and standards bodies | ||||
| 10 | Careful Adoption of Agentic AI Services — Joint Five Eyes Cyber Security Guidance CISA/NSA/ASD/CCCS/NCSC-UK/NCSC-NZ joint advisory | Advisory | 30 Apr 2026 | 9 Sep 2026 |
| 11 | OWASP Top 10 for LLM Applications (2026) OWASP GenAI Security Project, Top 10 for LLM Applications 2026 | Published | 4 Aug 2026 | 9 Sep 2026 |
| 25 | China interim measures for generative AI services Cyberspace Administration of China, 13 Jul 2023 | In force | 15 Aug 2023 | 9 Sep 2026 |
| 26 | Canada Artificial Intelligence and Data Act Part of Bill C-27. Died on prorogation, Jan 2025 | Struck down | — | 9 Sep 2026 |
| 27 | United Kingdom sectoral approach Commons Library Briefing CBP-10003 | Non-statutory | — | 9 Sep 2026 |
| 28 | Korea Framework Act on Artificial Intelligence Act No. 20676 | In force | 22 Jan 2026 | 9 Sep 2026 |
| 29 | ISO/IEC 42001 AI management system, Ed. 1, 2023-12 | Published | 18 Dec 2023 | 9 Sep 2026 |
The nearest dated obligations in the register. The full list, earlier and later, is on the Deadlines page.
Every entry shows the date it was last confirmed against its source. Three practices keep that date meaningful.
When an instrument is amended, superseded, or repealed, the change is logged and the entry re-verified against the new text. An automated source monitor is in development.
Entries quote the government source only: the gazette, the official register, or the issuing agency. Trackers and law-firm notes point us to what to look at, nothing more.
When an entry changes, the change is recorded with a date. Entries are not edited in place.
Every entry has a permanent URL and a fixed set of fields. The text is licensed CC BY 4.0. Use it with attribution.
The whole register, all 29 entries, as one file with a Dataset schema.org block.
One message when an entry is amended, added, or removed. Nothing else.