{ "@context": "https://schema.org", "@type": "Dataset", "@id": "https://airegindex.com/#dataset", "name": "AI Reg. Index", "description": "A public reference that catalogs AI-governance laws, regulations, executive actions, and standards. Every entry links to the government primary source and shows the date it was last verified.", "url": "https://airegindex.com", "license": "https://creativecommons.org/licenses/by/4.0/", "creator": { "@id": "https://airegindex.com/#org" }, "publisher": { "@id": "https://airegindex.com/#org" }, "isAccessibleForFree": true, "dateModified": "2026-09-09", "keyword": [ "AI regulation", "AI governance", "AI compliance", "AI law" ], "variableMeasured": "29 AI-governance instruments", "entries": [ { "section": 1, "slug": "executive-order-14319-preventing-woke-ai-in-the-federal-government", "url": "https://airegindex.com/sources/executive-order-14319-preventing-woke-ai-in-the-federal-government/", "jurisdiction": "United States", "name": "Executive Order 14319: Preventing Woke AI in the Federal Government", "citation": "Exec. Order No. 14319, 90 FR 35389", "standing": "In effect", "bucket": "in-force", "effectiveDate": "2025-07-23", "verifiedAt": "2026-09-09", "gloss": "Presidential Executive Order enforcing strict truth-seeking and ideological neutrality principles on all federally procured generative models.", "tags": [ "UnbiasedAI", "FederalProcurement", "Preemption" ], "sourceKind": "executive_order", "sourceUrl": "https://www.federalregister.gov/documents/2025/07/28/2025-14217/preventing-woke-ai-in-the-federal-government", "sourceLabel": "Executive Order 14319", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "Legislation", "@id": "https://www.federalregister.gov/documents/2025/07/28/2025-14217/preventing-woke-ai-in-the-federal-government", "name": "Executive Order 14319: Preventing Woke AI in the Federal Government", "url": "https://www.federalregister.gov/documents/2025/07/28/2025-14217/preventing-woke-ai-in-the-federal-government", "jurisdiction": { "@type": "AdministrativeArea", "name": "United States" }, "legislationDate": "2025-07-23", "legislationType": "Executive Order" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/executive-order-14319-preventing-woke-ai-in-the-federal-government/", "name": "Executive Order 14319: Preventing Woke AI in the Federal Government", "description": "Presidential Executive Order enforcing strict truth-seeking and ideological neutrality principles on all federally procured generative models.", "url": "https://airegindex.com/sources/executive-order-14319-preventing-woke-ai-in-the-federal-government/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://www.federalregister.gov/documents/2025/07/28/2025-14217/preventing-woke-ai-in-the-federal-government" }, "isBasedOn": "https://www.federalregister.gov/documents/2025/07/28/2025-14217/preventing-woke-ai-in-the-federal-government" } ] }, { "section": 2, "slug": "executive-order-14409-promoting-advanced-artificial-intelligence-innovation-and-security", "url": "https://airegindex.com/sources/executive-order-14409-promoting-advanced-artificial-intelligence-innovation-and-security/", "jurisdiction": "United States", "name": "Executive Order 14409: Promoting Advanced Artificial Intelligence Innovation and Security", "citation": "Exec. Order No. 14409", "standing": "In effect", "bucket": "in-force", "effectiveDate": "2026-06-02", "verifiedAt": "2026-09-09", "gloss": "Executive Order establishing a voluntary 30-day pre-release review window for covered frontier models and creating the Treasury-led AI Cybersecurity Clearinghouse.", "tags": [ "FrontierModels", "Clearinghouse", "Cybersecurity", "NationalSecurity" ], "sourceKind": "executive_order", "sourceUrl": "https://www.federalregister.gov/documents/2026/06/05/2026-11415/promoting-advanced-artificial-intelligence-innovation-and-security", "sourceLabel": "Executive Order 14409", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "Legislation", "@id": "https://www.federalregister.gov/documents/2026/06/05/2026-11415/promoting-advanced-artificial-intelligence-innovation-and-security", "name": "Executive Order 14409: Promoting Advanced Artificial Intelligence Innovation and Security", "url": "https://www.federalregister.gov/documents/2026/06/05/2026-11415/promoting-advanced-artificial-intelligence-innovation-and-security", "jurisdiction": { "@type": "AdministrativeArea", "name": "United States" }, "legislationDate": "2026-06-02", "legislationType": "Executive Order" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/executive-order-14409-promoting-advanced-artificial-intelligence-innovation-and-security/", "name": "Executive Order 14409: Promoting Advanced Artificial Intelligence Innovation and Security", "description": "Executive Order establishing a voluntary 30-day pre-release review window for covered frontier models and creating the Treasury-led AI Cybersecurity Clearinghouse.", "url": "https://airegindex.com/sources/executive-order-14409-promoting-advanced-artificial-intelligence-innovation-and-security/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://www.federalregister.gov/documents/2026/06/05/2026-11415/promoting-advanced-artificial-intelligence-innovation-and-security" }, "isBasedOn": "https://www.federalregister.gov/documents/2026/06/05/2026-11415/promoting-advanced-artificial-intelligence-innovation-and-security" } ] }, { "section": 3, "slug": "nist-ai-risk-management-framework-ai-rmf-1-0", "url": "https://airegindex.com/sources/nist-ai-risk-management-framework-ai-rmf-1-0/", "jurisdiction": "United States", "name": "NIST AI Risk Management Framework (AI RMF 1.0)", "citation": "NIST AI 100-1", "standing": "Voluntary", "bucket": "advisory", "effectiveDate": "2023-01-26", "verifiedAt": "2026-09-09", "gloss": "Voluntary consensus-based framework for managing AI lifecycle trust through Govern, Map, Measure, and Manage functions.", "tags": [ "NISTAIRMF", "RiskManagement" ], "sourceKind": "standard", "sourceUrl": "https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-ai-rmf-10", "sourceLabel": "NIST AI RMF 1.0", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-ai-rmf-10", "name": "NIST AI Risk Management Framework (AI RMF 1.0)", "url": "https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-ai-rmf-10", "jurisdiction": { "@type": "AdministrativeArea", "name": "United States" }, "legislationDate": "2023-01-26", "genre": "Standard" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/nist-ai-risk-management-framework-ai-rmf-1-0/", "name": "NIST AI Risk Management Framework (AI RMF 1.0)", "description": "Voluntary consensus-based framework for managing AI lifecycle trust through Govern, Map, Measure, and Manage functions.", "url": "https://airegindex.com/sources/nist-ai-risk-management-framework-ai-rmf-1-0/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-ai-rmf-10" }, "isBasedOn": "https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-ai-rmf-10" } ] }, { "section": 4, "slug": "nist-ai-600-1-generative-artificial-intelligence-profile", "url": "https://airegindex.com/sources/nist-ai-600-1-generative-artificial-intelligence-profile/", "jurisdiction": "United States", "name": "NIST AI 600-1: Generative Artificial Intelligence Profile", "citation": "NIST AI 600-1", "standing": "Voluntary", "bucket": "advisory", "effectiveDate": "2024-07-26", "verifiedAt": "2026-09-09", "gloss": "NIST AI RMF companion profile targeting 12 specific generative AI risk vectors, including confabulation, privacy, and supply chain integrity.", "tags": [ "GenerativeAI", "NISTProfile" ], "sourceKind": "standard", "sourceUrl": "https://doi.org/10.6028/NIST.AI.600-1", "sourceLabel": "NIST AI 600-1 (Generative AI Profile)", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://doi.org/10.6028/NIST.AI.600-1", "name": "NIST AI 600-1: Generative Artificial Intelligence Profile", "url": "https://doi.org/10.6028/NIST.AI.600-1", "jurisdiction": { "@type": "AdministrativeArea", "name": "United States" }, "legislationDate": "2024-07-26", "genre": "Standard" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/nist-ai-600-1-generative-artificial-intelligence-profile/", "name": "NIST AI 600-1: Generative Artificial Intelligence Profile", "description": "NIST AI RMF companion profile targeting 12 specific generative AI risk vectors, including confabulation, privacy, and supply chain integrity.", "url": "https://airegindex.com/sources/nist-ai-600-1-generative-artificial-intelligence-profile/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://doi.org/10.6028/NIST.AI.600-1" }, "isBasedOn": "https://doi.org/10.6028/NIST.AI.600-1" } ] }, { "section": 5, "slug": "california-cppa-automated-decision-making-technology-admt-regulations", "url": "https://airegindex.com/sources/california-cppa-automated-decision-making-technology-admt-regulations/", "jurisdiction": "California, United States", "name": "California CPPA Automated Decision-Making Technology (ADMT) Regulations", "citation": "11 CCR §§ 7001, 7150, 7200–7222", "standing": "In force, phased", "bucket": "in-force", "effectiveDate": "2026-01-01", "verifiedAt": "2026-09-09", "gloss": "Enforceable regulations under the CCPA framework mandating point-of-collection notices, GPC-binding opt-out toggles, and logic access rights for significant decisions.", "tags": [ "ADMT", "AIOptOut", "AlgorithmicTransparency", "CPPA" ], "sourceKind": "regulation", "sourceUrl": "https://cppa.ca.gov/regulations/ccpa_updates.html", "sourceLabel": "California CPPA ADMT Regulations", "frameworks": [ { "framework": "NIST AI RMF", "ref": "Governance & Explainability (Art. 10 risk assessments)" } ], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "Legislation", "@id": "https://cppa.ca.gov/regulations/ccpa_updates.html", "name": "California CPPA Automated Decision-Making Technology (ADMT) Regulations", "url": "https://cppa.ca.gov/regulations/ccpa_updates.html", "jurisdiction": { "@type": "AdministrativeArea", "name": "California, United States" }, "legislationDate": "2026-01-01", "legislationType": "Regulation" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/california-cppa-automated-decision-making-technology-admt-regulations/", "name": "California CPPA Automated Decision-Making Technology (ADMT) Regulations", "description": "Enforceable regulations under the CCPA framework mandating point-of-collection notices, GPC-binding opt-out toggles, and logic access rights for significant decisions.", "url": "https://airegindex.com/sources/california-cppa-automated-decision-making-technology-admt-regulations/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://cppa.ca.gov/regulations/ccpa_updates.html" }, "isBasedOn": "https://cppa.ca.gov/regulations/ccpa_updates.html" } ] }, { "section": 6, "slug": "california-ab-2013-generative-ai-training-data-transparency-act", "url": "https://airegindex.com/sources/california-ab-2013-generative-ai-training-data-transparency-act/", "jurisdiction": "California, United States", "name": "California AB 2013 — Generative AI Training Data Transparency Act", "citation": "Cal. Civ. Code § 3110 et seq. (AB 2013, Ch. 817, Stats. 2024)", "standing": "In force", "bucket": "in-force", "effectiveDate": "2026-01-01", "verifiedAt": "2026-09-09", "gloss": "Statutory mandate requiring public 12-point training dataset metadata summaries with zero trade-secret exemptions for models trained since Jan 2022.", "tags": [ "TrainingDataTransparency", "CaliforniaAI" ], "sourceKind": "statute", "sourceUrl": "https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202320240AB2013", "sourceLabel": "California AB 2013 (Training Data Transparency Act)", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "Legislation", "@id": "https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202320240AB2013", "name": "California AB 2013 — Generative AI Training Data Transparency Act", "url": "https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202320240AB2013", "jurisdiction": { "@type": "AdministrativeArea", "name": "California, United States" }, "legislationDate": "2026-01-01", "legislationType": "Statute" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/california-ab-2013-generative-ai-training-data-transparency-act/", "name": "California AB 2013 — Generative AI Training Data Transparency Act", "description": "Statutory mandate requiring public 12-point training dataset metadata summaries with zero trade-secret exemptions for models trained since Jan 2022.", "url": "https://airegindex.com/sources/california-ab-2013-generative-ai-training-data-transparency-act/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202320240AB2013" }, "isBasedOn": "https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202320240AB2013" } ] }, { "section": 7, "slug": "texas-responsible-ai-governance-act-traiga", "url": "https://airegindex.com/sources/texas-responsible-ai-governance-act-traiga/", "jurisdiction": "Texas, United States", "name": "Texas Responsible AI Governance Act (TRAIGA)", "citation": "HB 149, 89th Leg., R.S.", "standing": "In force", "bucket": "in-force", "effectiveDate": "2026-01-01", "verifiedAt": "2026-09-09", "gloss": "Statute establishing the pro-business \"Intent-as-Shield\" defense, strict biometric informed consent rules, and the 36-month DIR regulatory sandbox.", "tags": [ "IntentAsShield", "BiometricPrivacy", "RegulatorySandbox" ], "sourceKind": "statute", "sourceUrl": "https://legiscan.com/TX/bill/HB149/2025", "sourceLabel": "Texas TRAIGA (HB 149)", "frameworks": [ { "framework": "NIST AI RMF", "ref": "Govern / Map / Measure" } ], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "Legislation", "@id": "https://legiscan.com/TX/bill/HB149/2025", "name": "Texas Responsible AI Governance Act (TRAIGA)", "url": "https://legiscan.com/TX/bill/HB149/2025", "jurisdiction": { "@type": "AdministrativeArea", "name": "Texas, United States" }, "legislationDate": "2026-01-01", "legislationType": "Statute" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/texas-responsible-ai-governance-act-traiga/", "name": "Texas Responsible AI Governance Act (TRAIGA)", "description": "Statute establishing the pro-business \"Intent-as-Shield\" defense, strict biometric informed consent rules, and the 36-month DIR regulatory sandbox.", "url": "https://airegindex.com/sources/texas-responsible-ai-governance-act-traiga/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://legiscan.com/TX/bill/HB149/2025" }, "isBasedOn": "https://legiscan.com/TX/bill/HB149/2025" } ] }, { "section": 8, "slug": "eu-ai-act-article-50-transparency-and-synthetic-media-disclosures", "url": "https://airegindex.com/sources/eu-ai-act-article-50-transparency-and-synthetic-media-disclosures/", "jurisdiction": "European Union", "name": "EU AI Act: Article 50 — Transparency & Synthetic Media Disclosures", "citation": "Reg. (EU) 2024/1689, Art. 50", "standing": "In force, phased", "bucket": "in-force", "effectiveDate": "2026-08-02", "verifiedAt": "2026-09-09", "gloss": "Horizontal transparency obligations mandating chatbot disclosures, deepfake labeling, and machine-readable synthetic content watermarking.", "tags": [ "GenerativeAI", "Watermarking", "ChatbotDisclosure", "DeepfakeLabeling" ], "sourceKind": "regulation", "sourceUrl": "https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai", "sourceLabel": "EU AI Act, Article 50", "frameworks": [ { "framework": "C2PA Content Credentials", "ref": "v1.3 / v2.0 (named in the Jul 2026 Commission Guidelines as a compliant marking mechanism)" }, { "framework": "NIST AI RMF", "ref": "Section 4.2 (Transparency)" } ], "hasDossier": true, "jsonLd": [ { "@context": "https://schema.org", "@type": "Legislation", "@id": "https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai", "name": "EU AI Act: Article 50 — Transparency & Synthetic Media Disclosures", "url": "https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai", "jurisdiction": { "@type": "AdministrativeArea", "name": "European Union" }, "legislationDate": "2026-08-02", "legislationType": "Regulation" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/eu-ai-act-article-50-transparency-and-synthetic-media-disclosures/", "name": "EU AI Act: Article 50 — Transparency & Synthetic Media Disclosures", "description": "Horizontal transparency obligations mandating chatbot disclosures, deepfake labeling, and machine-readable synthetic content watermarking.", "url": "https://airegindex.com/sources/eu-ai-act-article-50-transparency-and-synthetic-media-disclosures/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai" }, "isBasedOn": "https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai" } ] }, { "section": 9, "slug": "edpb-opinion-28-2024-on-personal-data-use-in-ai-model-development-and-deployment", "url": "https://airegindex.com/sources/edpb-opinion-28-2024-on-personal-data-use-in-ai-model-development-and-deployment/", "jurisdiction": "European Union", "name": "EDPB Opinion 28/2024 on personal data use in AI model development and deployment", "citation": "EDPB Opinion 28/2024 (Art. 64(2) GDPR)", "standing": "Advisory", "bucket": "advisory", "effectiveDate": null, "verifiedAt": "2026-09-09", "gloss": "Harmonized regulatory guidance on model-anonymization parameters (the \"cake\" metaphor) and downstream buyer audit liabilities (the \"poisoned fruit\" doctrine) under GDPR.", "tags": [ "GDPR", "DataLineage", "ModelAnonymization", "PoisonedFruit" ], "sourceKind": "interpretive_opinion", "sourceUrl": "https://edpb.europa.eu/our-work-tools/our-documents/opinion-board-art-64/opinion-282024-certain-data-protection-aspects_en", "sourceLabel": "EDPB Opinion 28/2024", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://edpb.europa.eu/our-work-tools/our-documents/opinion-board-art-64/opinion-282024-certain-data-protection-aspects_en", "name": "EDPB Opinion 28/2024 on personal data use in AI model development and deployment", "url": "https://edpb.europa.eu/our-work-tools/our-documents/opinion-board-art-64/opinion-282024-certain-data-protection-aspects_en", "jurisdiction": { "@type": "AdministrativeArea", "name": "European Union" }, "genre": "Interpretive Opinion" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/edpb-opinion-28-2024-on-personal-data-use-in-ai-model-development-and-deployment/", "name": "EDPB Opinion 28/2024 on personal data use in AI model development and deployment", "description": "Harmonized regulatory guidance on model-anonymization parameters (the \"cake\" metaphor) and downstream buyer audit liabilities (the \"poisoned fruit\" doctrine) under GDPR.", "url": "https://airegindex.com/sources/edpb-opinion-28-2024-on-personal-data-use-in-ai-model-development-and-deployment/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://edpb.europa.eu/our-work-tools/our-documents/opinion-board-art-64/opinion-282024-certain-data-protection-aspects_en" }, "isBasedOn": "https://edpb.europa.eu/our-work-tools/our-documents/opinion-board-art-64/opinion-282024-certain-data-protection-aspects_en" } ] }, { "section": 10, "slug": "careful-adoption-of-agentic-ai-services-joint-five-eyes-cyber-security-guidance", "url": "https://airegindex.com/sources/careful-adoption-of-agentic-ai-services-joint-five-eyes-cyber-security-guidance/", "jurisdiction": "International", "name": "Careful Adoption of Agentic AI Services — Joint Five Eyes Cyber Security Guidance", "citation": "CISA/NSA/ASD/CCCS/NCSC-UK/NCSC-NZ joint advisory", "standing": "Advisory", "bucket": "advisory", "effectiveDate": "2026-04-30", "verifiedAt": "2026-09-09", "gloss": "Joint international cybersecurity advisory establishing Zero-Trust parameters, cryptographic machine identities, and containerized sandboxing rules for autonomous agents.", "tags": [ "AgenticAI", "ZeroTrust", "CriticalInfrastructure" ], "sourceKind": "advisory", "sourceUrl": "https://www.cisa.gov/resources-tools/resources/careful-adoption-agentic-ai-services", "sourceLabel": "Careful Adoption of Agentic AI Services (Five Eyes)", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://www.cisa.gov/resources-tools/resources/careful-adoption-agentic-ai-services", "name": "Careful Adoption of Agentic AI Services — Joint Five Eyes Cyber Security Guidance", "url": "https://www.cisa.gov/resources-tools/resources/careful-adoption-agentic-ai-services", "jurisdiction": { "@type": "AdministrativeArea", "name": "International" }, "legislationDate": "2026-04-30", "genre": "Advisory" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/careful-adoption-of-agentic-ai-services-joint-five-eyes-cyber-security-guidance/", "name": "Careful Adoption of Agentic AI Services — Joint Five Eyes Cyber Security Guidance", "description": "Joint international cybersecurity advisory establishing Zero-Trust parameters, cryptographic machine identities, and containerized sandboxing rules for autonomous agents.", "url": "https://airegindex.com/sources/careful-adoption-of-agentic-ai-services-joint-five-eyes-cyber-security-guidance/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://www.cisa.gov/resources-tools/resources/careful-adoption-agentic-ai-services" }, "isBasedOn": "https://www.cisa.gov/resources-tools/resources/careful-adoption-agentic-ai-services" } ] }, { "section": 11, "slug": "owasp-top-10-for-llm-applications-2026", "url": "https://airegindex.com/sources/owasp-top-10-for-llm-applications-2026/", "jurisdiction": "International", "name": "OWASP Top 10 for LLM Applications (2026)", "citation": "OWASP GenAI Security Project, Top 10 for LLM Applications 2026", "standing": "Published", "bucket": "advisory", "effectiveDate": "2026-08-04", "verifiedAt": "2026-09-09", "gloss": "The de facto secure-development reference for LLM applications. The 2026 edition keeps prompt injection at number one, raises excessive agency to number three, and weights roughly 7,700 real-world incidents against the community vote; an appendix maps each risk to NIST AI RMF, NIST AI 600-1, MITRE ATLAS, and the CSA AI Controls Matrix.", "tags": [ "LLMSecurity", "PromptInjection", "OWASP" ], "sourceKind": "standard", "sourceUrl": "https://genai.owasp.org/resource/owasp-genai-llm-top-10-2026/", "sourceLabel": "OWASP Top 10 for LLM Applications 2026", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://genai.owasp.org/resource/owasp-genai-llm-top-10-2026/", "name": "OWASP Top 10 for LLM Applications (2026)", "url": "https://genai.owasp.org/resource/owasp-genai-llm-top-10-2026/", "jurisdiction": { "@type": "AdministrativeArea", "name": "International" }, "legislationDate": "2026-08-04", "genre": "Standard" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/owasp-top-10-for-llm-applications-2026/", "name": "OWASP Top 10 for LLM Applications (2026)", "description": "The de facto secure-development reference for LLM applications. The 2026 edition keeps prompt injection at number one, raises excessive agency to number three, and weights roughly 7,700 real-world incidents against the community vote; an appendix maps each risk to NIST AI RMF, NIST AI 600-1, MITRE ATLAS, and the CSA AI Controls Matrix.", "url": "https://airegindex.com/sources/owasp-top-10-for-llm-applications-2026/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://genai.owasp.org/resource/owasp-genai-llm-top-10-2026/" }, "isBasedOn": "https://genai.owasp.org/resource/owasp-genai-llm-top-10-2026/" } ] }, { "section": 12, "slug": "model-risk-management-guidance", "url": "https://airegindex.com/sources/model-risk-management-guidance/", "jurisdiction": "United States", "name": "Model risk management guidance", "citation": "SR 11-7 → SR 26-2 · OCC 2026-13", "standing": "In force", "bucket": "in-force", "effectiveDate": "2026-04-17", "verifiedAt": "2026-09-09", "gloss": "Fed, OCC and FDIC jointly superseded SR 11-7 with SR 26-2. Generative and agentic AI are explicitly out of scope pending a future RFI.", "tags": [ "ModelRisk", "BankingRegulation" ], "sourceKind": "agency_guidance", "sourceUrl": "https://www.occ.treas.gov/news-issuances/bulletins/2026/bulletin-2026-13.html", "sourceLabel": "Model risk management guidance (SR 26-2 / OCC 2026-13)", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://www.occ.treas.gov/news-issuances/bulletins/2026/bulletin-2026-13.html", "name": "Model risk management guidance", "url": "https://www.occ.treas.gov/news-issuances/bulletins/2026/bulletin-2026-13.html", "jurisdiction": { "@type": "AdministrativeArea", "name": "United States" }, "legislationDate": "2026-04-17", "genre": "Agency Guidance" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/model-risk-management-guidance/", "name": "Model risk management guidance", "description": "Fed, OCC and FDIC jointly superseded SR 11-7 with SR 26-2. Generative and agentic AI are explicitly out of scope pending a future RFI.", "url": "https://airegindex.com/sources/model-risk-management-guidance/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://www.occ.treas.gov/news-issuances/bulletins/2026/bulletin-2026-13.html" }, "isBasedOn": "https://www.occ.treas.gov/news-issuances/bulletins/2026/bulletin-2026-13.html" } ] }, { "section": 13, "slug": "ftc-enforcement-under-section-5", "url": "https://airegindex.com/sources/ftc-enforcement-under-section-5/", "jurisdiction": "United States", "name": "FTC enforcement under Section 5", "citation": "15 U.S.C. § 45", "standing": "Continuing", "bucket": "in-force", "effectiveDate": null, "verifiedAt": "2026-09-09", "gloss": "No dedicated federal AI statute; the FTC continues to use its existing Section 5 unfair-or-deceptive-practices authority against AI-related claims.", "tags": [ "FTC", "ConsumerProtection" ], "sourceKind": "agency_guidance", "sourceUrl": "https://www.ftc.gov/industry/technology/artificial-intelligence", "sourceLabel": "FTC enforcement under Section 5", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://www.ftc.gov/industry/technology/artificial-intelligence", "name": "FTC enforcement under Section 5", "url": "https://www.ftc.gov/industry/technology/artificial-intelligence", "jurisdiction": { "@type": "AdministrativeArea", "name": "United States" }, "genre": "Agency Guidance" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/ftc-enforcement-under-section-5/", "name": "FTC enforcement under Section 5", "description": "No dedicated federal AI statute; the FTC continues to use its existing Section 5 unfair-or-deceptive-practices authority against AI-related claims.", "url": "https://airegindex.com/sources/ftc-enforcement-under-section-5/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://www.ftc.gov/industry/technology/artificial-intelligence" }, "isBasedOn": "https://www.ftc.gov/industry/technology/artificial-intelligence" } ] }, { "section": 14, "slug": "great-american-ai-act", "url": "https://airegindex.com/sources/great-american-ai-act/", "jurisdiction": "United States", "name": "Great American AI Act", "citation": "Obernolte & Trahan discussion draft", "standing": "Draft", "bucket": "draft", "effectiveDate": null, "verifiedAt": "2026-09-09", "gloss": "Bipartisan discussion draft released June 4, 2026. Not yet formally introduced in Congress.", "tags": [ "FederalLegislation", "Draft" ], "sourceKind": "statute", "sourceUrl": "https://obernolte.house.gov/media/press-releases/obernolte-trahan-release-discussion-draft-great-american-ai-act", "sourceLabel": "Great American AI Act (discussion draft)", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "Legislation", "@id": "https://obernolte.house.gov/media/press-releases/obernolte-trahan-release-discussion-draft-great-american-ai-act", "name": "Great American AI Act", "url": "https://obernolte.house.gov/media/press-releases/obernolte-trahan-release-discussion-draft-great-american-ai-act", "jurisdiction": { "@type": "AdministrativeArea", "name": "United States" }, "legislationType": "Statute" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/great-american-ai-act/", "name": "Great American AI Act", "description": "Bipartisan discussion draft released June 4, 2026. Not yet formally introduced in Congress.", "url": "https://airegindex.com/sources/great-american-ai-act/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://obernolte.house.gov/media/press-releases/obernolte-trahan-release-discussion-draft-great-american-ai-act" }, "isBasedOn": "https://obernolte.house.gov/media/press-releases/obernolte-trahan-release-discussion-draft-great-american-ai-act" } ] }, { "section": 15, "slug": "colorado-admt-act", "url": "https://airegindex.com/sources/colorado-admt-act/", "jurisdiction": "Colorado, United States", "name": "Colorado ADMT Act", "citation": "SB 26-189, repealing SB 24-205", "standing": "Enacted", "bucket": "enacted", "effectiveDate": "2027-01-01", "verifiedAt": "2026-09-09", "gloss": "Consequential-decision disclosure regime for automated decision-making. Signed May 14, 2026; effective January 1, 2027. Replaces SB 24-205, whose enforcement a federal court had blocked in April 2026 (xAI v. Weiser).", "tags": [ "ADMT", "Colorado" ], "sourceKind": "statute", "sourceUrl": "https://leg.colorado.gov/bills/sb26-189", "sourceLabel": "Colorado SB 26-189 (ADMT Act)", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "Legislation", "@id": "https://leg.colorado.gov/bills/sb26-189", "name": "Colorado ADMT Act", "url": "https://leg.colorado.gov/bills/sb26-189", "jurisdiction": { "@type": "AdministrativeArea", "name": "Colorado, United States" }, "legislationDate": "2027-01-01", "legislationType": "Statute" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/colorado-admt-act/", "name": "Colorado ADMT Act", "description": "Consequential-decision disclosure regime for automated decision-making. Signed May 14, 2026; effective January 1, 2027. Replaces SB 24-205, whose enforcement a federal court had blocked in April 2026 (xAI v. Weiser).", "url": "https://airegindex.com/sources/colorado-admt-act/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://leg.colorado.gov/bills/sb26-189" }, "isBasedOn": "https://leg.colorado.gov/bills/sb26-189" } ] }, { "section": 16, "slug": "colorado-chatbot-safety-act", "url": "https://airegindex.com/sources/colorado-chatbot-safety-act/", "jurisdiction": "Colorado, United States", "name": "Colorado Chatbot Safety Act", "citation": "HB 26-1263", "standing": "Enacted", "bucket": "enacted", "effectiveDate": "2027-01-01", "verifiedAt": "2026-09-09", "gloss": "Minor age-estimation, self-harm response protocols, and AI-disclosure requirements for consumer chatbots. Signed July 1, 2026.", "tags": [ "ChatbotSafety", "Colorado" ], "sourceKind": "statute", "sourceUrl": "https://leg.colorado.gov/bills/HB26-1263", "sourceLabel": "Colorado HB 26-1263 (Chatbot Safety Act)", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "Legislation", "@id": "https://leg.colorado.gov/bills/HB26-1263", "name": "Colorado Chatbot Safety Act", "url": "https://leg.colorado.gov/bills/HB26-1263", "jurisdiction": { "@type": "AdministrativeArea", "name": "Colorado, United States" }, "legislationDate": "2027-01-01", "legislationType": "Statute" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/colorado-chatbot-safety-act/", "name": "Colorado Chatbot Safety Act", "description": "Minor age-estimation, self-harm response protocols, and AI-disclosure requirements for consumer chatbots. Signed July 1, 2026.", "url": "https://airegindex.com/sources/colorado-chatbot-safety-act/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://leg.colorado.gov/bills/HB26-1263" }, "isBasedOn": "https://leg.colorado.gov/bills/HB26-1263" } ] }, { "section": 17, "slug": "california-transparency-in-frontier-ai-act-tfaia", "url": "https://airegindex.com/sources/california-transparency-in-frontier-ai-act-tfaia/", "jurisdiction": "California, United States", "name": "California Transparency in Frontier AI Act (TFAIA)", "citation": "SB 53, ch. 138, 2025 Cal. Stat.", "standing": "In force", "bucket": "in-force", "effectiveDate": "2026-01-01", "verifiedAt": "2026-09-09", "gloss": "Chaptered by the CA Secretary of State September 29, 2025. Frontier-model transparency obligations.", "tags": [ "FrontierAI", "California" ], "sourceKind": "statute", "sourceUrl": "https://legiscan.com/CA/text/SB53/id/3271094", "sourceLabel": "California SB 53 (TFAIA)", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "Legislation", "@id": "https://legiscan.com/CA/text/SB53/id/3271094", "name": "California Transparency in Frontier AI Act (TFAIA)", "url": "https://legiscan.com/CA/text/SB53/id/3271094", "jurisdiction": { "@type": "AdministrativeArea", "name": "California, United States" }, "legislationDate": "2026-01-01", "legislationType": "Statute" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/california-transparency-in-frontier-ai-act-tfaia/", "name": "California Transparency in Frontier AI Act (TFAIA)", "description": "Chaptered by the CA Secretary of State September 29, 2025. Frontier-model transparency obligations.", "url": "https://airegindex.com/sources/california-transparency-in-frontier-ai-act-tfaia/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://legiscan.com/CA/text/SB53/id/3271094" }, "isBasedOn": "https://legiscan.com/CA/text/SB53/id/3271094" } ] }, { "section": 18, "slug": "illinois-amendments-on-predictive-analytics", "url": "https://airegindex.com/sources/illinois-amendments-on-predictive-analytics/", "jurisdiction": "Illinois, United States", "name": "Illinois amendments on predictive analytics", "citation": "HB 3773, Pub. Act 103-0804", "standing": "In force", "bucket": "in-force", "effectiveDate": "2026-01-01", "verifiedAt": "2026-09-09", "gloss": "Amends the Illinois Human Rights Act to make it a civil-rights violation for an employer to use AI, including predictive data analytics, that discriminates on a protected basis, and adds an employee-notice duty.", "tags": [ "Employment", "Illinois" ], "sourceKind": "statute", "sourceUrl": "https://www.ilga.gov/ftp/legislation/103/BillStatus/HTML/10300HB3773.html", "sourceLabel": "Illinois HB 3773", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "Legislation", "@id": "https://www.ilga.gov/ftp/legislation/103/BillStatus/HTML/10300HB3773.html", "name": "Illinois amendments on predictive analytics", "url": "https://www.ilga.gov/ftp/legislation/103/BillStatus/HTML/10300HB3773.html", "jurisdiction": { "@type": "AdministrativeArea", "name": "Illinois, United States" }, "legislationDate": "2026-01-01", "legislationType": "Statute" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/illinois-amendments-on-predictive-analytics/", "name": "Illinois amendments on predictive analytics", "description": "Amends the Illinois Human Rights Act to make it a civil-rights violation for an employer to use AI, including predictive data analytics, that discriminates on a protected basis, and adds an employee-notice duty.", "url": "https://airegindex.com/sources/illinois-amendments-on-predictive-analytics/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://www.ilga.gov/ftp/legislation/103/BillStatus/HTML/10300HB3773.html" }, "isBasedOn": "https://www.ilga.gov/ftp/legislation/103/BillStatus/HTML/10300HB3773.html" } ] }, { "section": 19, "slug": "nyc-automated-employment-decision-tools", "url": "https://airegindex.com/sources/nyc-automated-employment-decision-tools/", "jurisdiction": "New York City, United States", "name": "NYC automated employment decision tools", "citation": "Local Law 144 of 2021; 6 RCNY § 5-300", "standing": "In force", "bucket": "in-force", "effectiveDate": "2023-07-05", "verifiedAt": "2026-09-09", "gloss": "Mandatory bias audits for automated employment decision tools used in NYC hiring.", "tags": [ "Employment", "BiasAudit", "NYC" ], "sourceKind": "statute", "sourceUrl": "https://rules.cityofnewyork.us/rule/automated-employment-decision-tools-updated/", "sourceLabel": "NYC Local Law 144 (AEDT)", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "Legislation", "@id": "https://rules.cityofnewyork.us/rule/automated-employment-decision-tools-updated/", "name": "NYC automated employment decision tools", "url": "https://rules.cityofnewyork.us/rule/automated-employment-decision-tools-updated/", "jurisdiction": { "@type": "AdministrativeArea", "name": "New York City, United States" }, "legislationDate": "2023-07-05", "legislationType": "Statute" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/nyc-automated-employment-decision-tools/", "name": "NYC automated employment decision tools", "description": "Mandatory bias audits for automated employment decision tools used in NYC hiring.", "url": "https://airegindex.com/sources/nyc-automated-employment-decision-tools/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://rules.cityofnewyork.us/rule/automated-employment-decision-tools-updated/" }, "isBasedOn": "https://rules.cityofnewyork.us/rule/automated-employment-decision-tools-updated/" } ] }, { "section": 20, "slug": "utah-artificial-intelligence-policy-act", "url": "https://airegindex.com/sources/utah-artificial-intelligence-policy-act/", "jurisdiction": "Utah, United States", "name": "Utah Artificial Intelligence Policy Act", "citation": "SB 149, amended by SB 226, SB 271, SB 332, HB 452", "standing": "In force", "bucket": "in-force", "effectiveDate": "2024-05-01", "verifiedAt": "2026-09-09", "gloss": "Disclosure and liability framework for generative AI use in consumer-facing contexts, amended in each subsequent session.", "tags": [ "ConsumerProtection", "Utah" ], "sourceKind": "statute", "sourceUrl": "https://le.utah.gov/~2024/bills/static/SB0149.html", "sourceLabel": "Utah SB 149 (AI Policy Act)", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "Legislation", "@id": "https://le.utah.gov/~2024/bills/static/SB0149.html", "name": "Utah Artificial Intelligence Policy Act", "url": "https://le.utah.gov/~2024/bills/static/SB0149.html", "jurisdiction": { "@type": "AdministrativeArea", "name": "Utah, United States" }, "legislationDate": "2024-05-01", "legislationType": "Statute" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/utah-artificial-intelligence-policy-act/", "name": "Utah Artificial Intelligence Policy Act", "description": "Disclosure and liability framework for generative AI use in consumer-facing contexts, amended in each subsequent session.", "url": "https://airegindex.com/sources/utah-artificial-intelligence-policy-act/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://le.utah.gov/~2024/bills/static/SB0149.html" }, "isBasedOn": "https://le.utah.gov/~2024/bills/static/SB0149.html" } ] }, { "section": 21, "slug": "washington-surveillance-pricing-bill", "url": "https://airegindex.com/sources/washington-surveillance-pricing-bill/", "jurisdiction": "Washington, United States", "name": "Washington surveillance pricing bill", "citation": "HB 2481", "standing": "Struck down", "bucket": "struck-down", "effectiveDate": null, "verifiedAt": "2026-09-09", "gloss": "Would have restricted AI-driven personalized/surveillance pricing. Died in House Appropriations Committee in the 2026 session; companion SB 6312 also stalled.", "tags": [ "SurveillancePricing", "Washington" ], "sourceKind": "statute", "sourceUrl": "https://app.leg.wa.gov/billsummary?BillNumber=2481&Year=2025&Initiative=false", "sourceLabel": "Washington HB 2481 (surveillance pricing)", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "Legislation", "@id": "https://app.leg.wa.gov/billsummary?BillNumber=2481&Year=2025&Initiative=false", "name": "Washington surveillance pricing bill", "url": "https://app.leg.wa.gov/billsummary?BillNumber=2481&Year=2025&Initiative=false", "jurisdiction": { "@type": "AdministrativeArea", "name": "Washington, United States" }, "legislationType": "Statute" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/washington-surveillance-pricing-bill/", "name": "Washington surveillance pricing bill", "description": "Would have restricted AI-driven personalized/surveillance pricing. Died in House Appropriations Committee in the 2026 session; companion SB 6312 also stalled.", "url": "https://airegindex.com/sources/washington-surveillance-pricing-bill/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://app.leg.wa.gov/billsummary?BillNumber=2481&Year=2025&Initiative=false" }, "isBasedOn": "https://app.leg.wa.gov/billsummary?BillNumber=2481&Year=2025&Initiative=false" } ] }, { "section": 22, "slug": "new-york-dfs-cybersecurity-guidance-for-ai", "url": "https://airegindex.com/sources/new-york-dfs-cybersecurity-guidance-for-ai/", "jurisdiction": "New York, United States", "name": "New York DFS cybersecurity guidance for AI", "citation": "Industry letter, 21 May 2026", "standing": "Advisory", "bucket": "advisory", "effectiveDate": "2026-05-21", "verifiedAt": "2026-09-09", "gloss": "Non-binding industry letter on heightened cybersecurity risks associated with frontier AI models, building on DFS's Oct 2024 AI guidance.", "tags": [ "Cybersecurity", "NYDFS" ], "sourceKind": "agency_guidance", "sourceUrl": "https://www.dfs.ny.gov/industry-guidance/industry-letters/20260521-heightened-cybersecurity-risks-assoc-with-frontier-ai-models", "sourceLabel": "NYDFS Frontier AI Cybersecurity Advisory", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://www.dfs.ny.gov/industry-guidance/industry-letters/20260521-heightened-cybersecurity-risks-assoc-with-frontier-ai-models", "name": "New York DFS cybersecurity guidance for AI", "url": "https://www.dfs.ny.gov/industry-guidance/industry-letters/20260521-heightened-cybersecurity-risks-assoc-with-frontier-ai-models", "jurisdiction": { "@type": "AdministrativeArea", "name": "New York, United States" }, "legislationDate": "2026-05-21", "genre": "Agency Guidance" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/new-york-dfs-cybersecurity-guidance-for-ai/", "name": "New York DFS cybersecurity guidance for AI", "description": "Non-binding industry letter on heightened cybersecurity risks associated with frontier AI models, building on DFS's Oct 2024 AI guidance.", "url": "https://airegindex.com/sources/new-york-dfs-cybersecurity-guidance-for-ai/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://www.dfs.ny.gov/industry-guidance/industry-letters/20260521-heightened-cybersecurity-risks-assoc-with-frontier-ai-models" }, "isBasedOn": "https://www.dfs.ny.gov/industry-guidance/industry-letters/20260521-heightened-cybersecurity-risks-assoc-with-frontier-ai-models" } ] }, { "section": 23, "slug": "new-york-raise-act", "url": "https://airegindex.com/sources/new-york-raise-act/", "jurisdiction": "New York, United States", "name": "New York RAISE Act", "citation": "Ch. 361, 2025 N.Y. Laws, as amended Mar. 2026", "standing": "Enacted", "bucket": "enacted", "effectiveDate": "2027-01-01", "verifiedAt": "2026-09-09", "gloss": "Frontier-model safety framework signed Dec 19, 2025, with chapter amendments aligning it to California SB 53. New NYDFS oversight office.", "tags": [ "FrontierAI", "NewYork" ], "sourceKind": "statute", "sourceUrl": "https://www.governor.ny.gov/news/governor-hochul-signs-nation-leading-legislation-require-ai-frameworks-ai-frontier-models", "sourceLabel": "New York RAISE Act", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "Legislation", "@id": "https://www.governor.ny.gov/news/governor-hochul-signs-nation-leading-legislation-require-ai-frameworks-ai-frontier-models", "name": "New York RAISE Act", "url": "https://www.governor.ny.gov/news/governor-hochul-signs-nation-leading-legislation-require-ai-frameworks-ai-frontier-models", "jurisdiction": { "@type": "AdministrativeArea", "name": "New York, United States" }, "legislationDate": "2027-01-01", "legislationType": "Statute" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/new-york-raise-act/", "name": "New York RAISE Act", "description": "Frontier-model safety framework signed Dec 19, 2025, with chapter amendments aligning it to California SB 53. New NYDFS oversight office.", "url": "https://airegindex.com/sources/new-york-raise-act/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://www.governor.ny.gov/news/governor-hochul-signs-nation-leading-legislation-require-ai-frameworks-ai-frontier-models" }, "isBasedOn": "https://www.governor.ny.gov/news/governor-hochul-signs-nation-leading-legislation-require-ai-frameworks-ai-frontier-models" } ] }, { "section": 24, "slug": "virginia-high-risk-ai-developer-and-deployer-act", "url": "https://airegindex.com/sources/virginia-high-risk-ai-developer-and-deployer-act/", "jurisdiction": "Virginia, United States", "name": "Virginia High-Risk AI Developer and Deployer Act", "citation": "HB 2094. Vetoed; veto sustained 2 Apr 2025", "standing": "Struck down", "bucket": "struck-down", "effectiveDate": null, "verifiedAt": "2026-09-09", "gloss": "Would have mirrored Colorado's original ADMT framework. Governor Youngkin vetoed; the House sustained the veto.", "tags": [ "Vetoed", "Virginia" ], "sourceKind": "statute", "sourceUrl": "https://legiscan.com/VA/bill/HB2094/2025", "sourceLabel": "Virginia HB 2094 (vetoed)", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "Legislation", "@id": "https://legiscan.com/VA/bill/HB2094/2025", "name": "Virginia High-Risk AI Developer and Deployer Act", "url": "https://legiscan.com/VA/bill/HB2094/2025", "jurisdiction": { "@type": "AdministrativeArea", "name": "Virginia, United States" }, "legislationType": "Statute" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/virginia-high-risk-ai-developer-and-deployer-act/", "name": "Virginia High-Risk AI Developer and Deployer Act", "description": "Would have mirrored Colorado's original ADMT framework. Governor Youngkin vetoed; the House sustained the veto.", "url": "https://airegindex.com/sources/virginia-high-risk-ai-developer-and-deployer-act/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://legiscan.com/VA/bill/HB2094/2025" }, "isBasedOn": "https://legiscan.com/VA/bill/HB2094/2025" } ] }, { "section": 25, "slug": "china-interim-measures-for-generative-ai-services", "url": "https://airegindex.com/sources/china-interim-measures-for-generative-ai-services/", "jurisdiction": "China", "name": "China interim measures for generative AI services", "citation": "Cyberspace Administration of China, 13 Jul 2023", "standing": "In force", "bucket": "in-force", "effectiveDate": "2023-08-15", "verifiedAt": "2026-09-09", "gloss": "CAC-led generative AI measures. Monitored via a Library of Congress Global Legal Monitor summary, not a live CAC feed — treat as secondary pending a primary-source fetch.", "tags": [ "China", "GenerativeAI" ], "sourceKind": "regulation", "sourceUrl": "https://www.loc.gov/item/global-legal-monitor/2023-07-18/china-generative-ai-measures-finalized", "sourceLabel": "China Interim Measures for Generative AI Services", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "Legislation", "@id": "https://www.loc.gov/item/global-legal-monitor/2023-07-18/china-generative-ai-measures-finalized", "name": "China interim measures for generative AI services", "url": "https://www.loc.gov/item/global-legal-monitor/2023-07-18/china-generative-ai-measures-finalized", "jurisdiction": { "@type": "AdministrativeArea", "name": "China" }, "legislationDate": "2023-08-15", "legislationType": "Regulation" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/china-interim-measures-for-generative-ai-services/", "name": "China interim measures for generative AI services", "description": "CAC-led generative AI measures. Monitored via a Library of Congress Global Legal Monitor summary, not a live CAC feed — treat as secondary pending a primary-source fetch.", "url": "https://airegindex.com/sources/china-interim-measures-for-generative-ai-services/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://www.loc.gov/item/global-legal-monitor/2023-07-18/china-generative-ai-measures-finalized" }, "isBasedOn": "https://www.loc.gov/item/global-legal-monitor/2023-07-18/china-generative-ai-measures-finalized" } ] }, { "section": 26, "slug": "canada-artificial-intelligence-and-data-act", "url": "https://airegindex.com/sources/canada-artificial-intelligence-and-data-act/", "jurisdiction": "Canada", "name": "Canada Artificial Intelligence and Data Act", "citation": "Part of Bill C-27. Died on prorogation, Jan 2025", "standing": "Struck down", "bucket": "struck-down", "effectiveDate": null, "verifiedAt": "2026-09-09", "gloss": "AIDA died when Bill C-27 lapsed at prorogation. No successor bill introduced as of this check.", "tags": [ "Canada", "Died" ], "sourceKind": "statute", "sourceUrl": "https://ised-isde.canada.ca/site/innovation-better-canada/en/artificial-intelligence-and-data-act", "sourceLabel": "Canada AIDA (died with Bill C-27)", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "Legislation", "@id": "https://ised-isde.canada.ca/site/innovation-better-canada/en/artificial-intelligence-and-data-act", "name": "Canada Artificial Intelligence and Data Act", "url": "https://ised-isde.canada.ca/site/innovation-better-canada/en/artificial-intelligence-and-data-act", "jurisdiction": { "@type": "AdministrativeArea", "name": "Canada" }, "legislationType": "Statute" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/canada-artificial-intelligence-and-data-act/", "name": "Canada Artificial Intelligence and Data Act", "description": "AIDA died when Bill C-27 lapsed at prorogation. No successor bill introduced as of this check.", "url": "https://airegindex.com/sources/canada-artificial-intelligence-and-data-act/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://ised-isde.canada.ca/site/innovation-better-canada/en/artificial-intelligence-and-data-act" }, "isBasedOn": "https://ised-isde.canada.ca/site/innovation-better-canada/en/artificial-intelligence-and-data-act" } ] }, { "section": 27, "slug": "united-kingdom-sectoral-approach", "url": "https://airegindex.com/sources/united-kingdom-sectoral-approach/", "jurisdiction": "United Kingdom", "name": "United Kingdom sectoral approach", "citation": "Commons Library Briefing CBP-10003", "standing": "Non-statutory", "bucket": "advisory", "effectiveDate": null, "verifiedAt": "2026-09-09", "gloss": "No AI-specific UK statute exists. Regulators apply existing sectoral powers under non-statutory government principles.", "tags": [ "UK", "SectoralApproach" ], "sourceKind": "advisory", "sourceUrl": "https://researchbriefings.files.parliament.uk/documents/CBP-10003/CBP-10003.pdf", "sourceLabel": "UK sectoral approach (Commons Library CBP-10003)", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://researchbriefings.files.parliament.uk/documents/CBP-10003/CBP-10003.pdf", "name": "United Kingdom sectoral approach", "url": "https://researchbriefings.files.parliament.uk/documents/CBP-10003/CBP-10003.pdf", "jurisdiction": { "@type": "AdministrativeArea", "name": "United Kingdom" }, "genre": "Advisory" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/united-kingdom-sectoral-approach/", "name": "United Kingdom sectoral approach", "description": "No AI-specific UK statute exists. Regulators apply existing sectoral powers under non-statutory government principles.", "url": "https://airegindex.com/sources/united-kingdom-sectoral-approach/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://researchbriefings.files.parliament.uk/documents/CBP-10003/CBP-10003.pdf" }, "isBasedOn": "https://researchbriefings.files.parliament.uk/documents/CBP-10003/CBP-10003.pdf" } ] }, { "section": 28, "slug": "korea-framework-act-on-artificial-intelligence", "url": "https://airegindex.com/sources/korea-framework-act-on-artificial-intelligence/", "jurisdiction": "South Korea", "name": "Korea Framework Act on Artificial Intelligence", "citation": "Act No. 20676", "standing": "In force", "bucket": "in-force", "effectiveDate": "2026-01-22", "verifiedAt": "2026-09-09", "gloss": "In force with a one-year grace period on penalties. High-performance threshold set at 10^26 FLOPs; extraterritorial domestic-representative rules apply above revenue/user thresholds.", "tags": [ "SouthKorea", "FrontierAI" ], "sourceKind": "statute", "sourceUrl": "https://www.trade.gov/market-intelligence/south-korea-ai-basic-act", "sourceLabel": "South Korea AI Basic Act", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "Legislation", "@id": "https://www.trade.gov/market-intelligence/south-korea-ai-basic-act", "name": "Korea Framework Act on Artificial Intelligence", "url": "https://www.trade.gov/market-intelligence/south-korea-ai-basic-act", "jurisdiction": { "@type": "AdministrativeArea", "name": "South Korea" }, "legislationDate": "2026-01-22", "legislationType": "Statute" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/korea-framework-act-on-artificial-intelligence/", "name": "Korea Framework Act on Artificial Intelligence", "description": "In force with a one-year grace period on penalties. High-performance threshold set at 10^26 FLOPs; extraterritorial domestic-representative rules apply above revenue/user thresholds.", "url": "https://airegindex.com/sources/korea-framework-act-on-artificial-intelligence/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://www.trade.gov/market-intelligence/south-korea-ai-basic-act" }, "isBasedOn": "https://www.trade.gov/market-intelligence/south-korea-ai-basic-act" } ] }, { "section": 29, "slug": "iso-iec-42001", "url": "https://airegindex.com/sources/iso-iec-42001/", "jurisdiction": "International", "name": "ISO/IEC 42001", "citation": "AI management system, Ed. 1, 2023-12", "standing": "Published", "bucket": "advisory", "effectiveDate": "2023-12-18", "verifiedAt": "2026-09-09", "gloss": "Certifiable AI management system standard. Stage 60.60 (published, no revision proposed).", "tags": [ "ISO", "Certifiable" ], "sourceKind": "standard", "sourceUrl": "https://www.iso.org/standard/42001", "sourceLabel": "ISO/IEC 42001:2023", "frameworks": [], "hasDossier": false, "jsonLd": [ { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://www.iso.org/standard/42001", "name": "ISO/IEC 42001", "url": "https://www.iso.org/standard/42001", "jurisdiction": { "@type": "AdministrativeArea", "name": "International" }, "legislationDate": "2023-12-18", "genre": "Standard" }, { "@context": "https://schema.org", "@type": "CreativeWork", "@id": "https://airegindex.com/sources/iso-iec-42001/", "name": "ISO/IEC 42001", "description": "Certifiable AI management system standard. Stage 60.60 (published, no revision proposed).", "url": "https://airegindex.com/sources/iso-iec-42001/", "dateModified": "2026-09-09", "license": "https://creativecommons.org/licenses/by/4.0/", "isPartOf": { "@id": "https://airegindex.com/#dataset" }, "publisher": { "@id": "https://airegindex.com/#org" }, "about": { "@id": "https://www.iso.org/standard/42001" }, "isBasedOn": "https://www.iso.org/standard/42001" } ] } ] }