Regulation rows

Rows by jurisdiction, each with its instrument, status, checked date and source. Where a regulator has issued nothing, the row reads "none issued" in red, with the date it was checked.

Prototype: rows are taken from the corpus payloads. Every row carries the date it was checked against its official source; the GCC rows were re-checked at the regulators’ own sites on 2026-10-18.

Corpus release 2026-10-16, signed. Free and keyless; no sign-in.

Canada

WhereInstrumentStatusCheckedSource
FederalOSFI Guideline E-23, Model Risk Management (2027)Final, published 2025-09-11; effective 2027-05-012026-10-11osfi-bsif.gc.ca
QuebecAMF Guideline for the Use of Artificial Intelligence (March 2026)Final; effective 2027-05-012026-10-11lautorite.qc.ca
FederalStatute governing AI systemsnone issued2026-10-11parl.ca
FederalBill C-36 (45-1), privacy bill with automated-decision transparencyDeveloping; at second reading2026-10-11parl.ca
QuebecAct respecting the protection of personal information in the private sector (P-39.1), s. 12.1 (Law 25): notice of decisions based exclusively on automated processing; reasons, correction, review on requestIn force since 2023-09-222026-10-18legisquebec.gouv.qc.ca
Federal, public sectorTreasury Board Directive on Automated Decision-Making (current version 2025-06-24): automated decision systems in production used for administrative decisions about clients, in institutions under the Policy on Service and DigitalApplies in stages: in force since 2019-04-01; systems in place before 2025-06-24 had until 2026-06-24 to meet the updated rules2026-10-18tbs-sct.canada.ca
OntarioEmployment Standards Act, 2000, s. 8.4: publicly advertised job postings must disclose AI used to screen, assess or select applicantsIn force since 2026-01-012026-10-18ontario.ca/laws
OntarioEnhancing Digital Security and Trust Act, 2024 (Bill 194, S.O. 2024, c. 24, Sched. 1), ss. 5 to 7: AI use by public sector entities (disclosure, accountability framework, risk management, prohibitions)Developing; Act in force since 2025-01-29, but no regulation yet names any entity the AI sections apply to2026-10-18ontario.ca/laws
ManitobaThe Business Practices Amendment Act, SM 2026, c. 41 (Bill 49): personalized algorithmic pricing that raises a consumer’s price is an unfair business practice and a material factIn force since 2026-07-012026-10-18web2.gov.mb.ca
ManitobaThe Public Sector Artificial Intelligence and Cybersecurity Governance Act, SM 2026, c. 43 (Bill 51): AI use by the government, government agencies, other reporting organizations under The Financial Administration Act, and municipalitiesDeveloping; assented 2026-06-01, not yet proclaimed in force2026-10-18web2.gov.mb.ca

United States

WhereInstrumentStatusCheckedSource
FederalSR 26-2Guidance; issued 2026-04-172026-10-16federalreserve.gov
FederalOMB M-25-21In force since 2025-04-032026-10-16whitehouse.gov
Federal, healthONC HTI-1Decision support criterion in force since 2024-02-082026-10-16ecfr.gov
Multi-stateNAIC AI BulletinModel bulletin; adopted in 29 jurisdictions (NAIC map, 2026-10-08)2026-10-16content.naic.org
New YorkNYDFS CL 7Guidance; issued 2024-07-112026-10-16dfs.ny.gov
Colorado3 CCR 702-10In force since 2025-10-152026-10-16doi.colorado.gov
FederalComprehensive statute regulating private-sector AI use (narrow laws exist, such as the TAKE IT DOWN Act)none issued2026-10-16govinfo.gov
FederalAI-specific guidance for community banks, OCC or FDICnone issued2026-10-16occ.gov
ColoradoSB 26-189, Automated Decision-Making Technology in Consequential Decisions (C.R.S. 6-1-1701 ff.; repeals and reenacts SB 24-205)Final; effective 2027-01-012026-10-18leg.colorado.gov
ColoradoAttorney General proposed rules, 4 CCR 904-6 (ADMT Act and Chatbot Safety Act)Developing; proposed rules, public hearing 2026-10-262026-10-18coag.gov
New York CityLocal Law 144 of 2021, automated employment decision tools (bias audit, candidate notice), DCWPIn force since 2023-07-05 (enforcement start)2026-10-18nyc.gov
TexasTexas Responsible Artificial Intelligence Governance Act, HB 149 (89R): intent-based prohibited AI uses; AI disclosure by government agencies and health care providers; AG enforcement, 60-day cureIn force since 2026-01-012026-10-18capitol.texas.gov
TexasSB 1188 (89R), electronic health records: a practitioner using AI for diagnosis must review AI-created records and disclose the use to patientsIn force since 2025-09-012026-10-18capitol.texas.gov
CaliforniaSB 53, Transparency in Frontier Artificial Intelligence Act (Bus. & Prof. Code 22757.10 ff.): frontier AI frameworks, transparency reports, critical safety incident reportingIn force since 2026-01-012026-10-18leginfo.legislature.ca.gov
CaliforniaCPPA regulations: CCPA updates, cybersecurity audits, risk assessments, automated decisionmaking technology (Cal. Code Regs. tit. 11, Art. 11 ADMT)Applies in stages: effective 2026-01-01; ADMT duties (Art. 11) from 2027-01-01; first risk-assessment filings due 2028-04-012026-10-18cppa.ca.gov
CaliforniaCivil Rights Council employment regulations on automated-decision systems (Cal. Code Regs. tit. 2, s. 11008.1 and others, under FEHA)In force since 2025-10-012026-10-18calcivilrights.ca.gov
CaliforniaSB 1120 (2024), utilization review: health plans and disability insurers using AI or algorithms (Health & Safety Code 1367.01(k); Ins. Code 10123.135)In force since 2025-01-012026-10-18leginfo.legislature.ca.gov
CaliforniaAB 3030 (2024), generative AI in patient clinical communications: disclaimer and human contact instructions (Health & Safety Code 1339.75)In force since 2025-01-012026-10-18leginfo.legislature.ca.gov
CaliforniaAB 489 (2025), AI systems may not use terms implying a health care license (Bus. & Prof. Code 4999.8 to 4999.9)In force since 2026-01-012026-10-18leginfo.legislature.ca.gov
CaliforniaDepartment of Insurance Bulletin 2022-5, racial bias and unfair discrimination in marketing, rating, underwriting and claims (covers AI and algorithms)Guidance; issued 2022-06-302026-10-18insurance.ca.gov
UtahArtificial Intelligence Policy Act, Utah Code 13-72 (SB 149, 2024): Office of AI Policy, learning laboratory, regulatory mitigation; repeal date 2027-07-01In force since 2024-05-012026-10-18le.utah.gov
UtahGenerative AI consumer disclosures, Utah Code 13-77 (SB 226, 2025): disclose GenAI when a consumer clearly asks; prominent disclosure in high-risk interactions in regulated occupationsIn force since 2025-05-072026-10-18le.utah.gov
IllinoisPublic Act 103-0804 (HB 3773), Illinois Human Rights Act s. 2-102(L): AI that discriminates in employment decisions; notice of AI useIn force since 2026-01-012026-10-18ilga.gov
FederalExecutive Order 14365, Ensuring a National Policy Framework for Artificial Intelligence: DOJ task force to challenge state AI laws, Commerce review of state laws, BEAD and grant conditions, FCC and FTC actions, a legislative proposal. It preempts no state law by itselfIn force since 2025-12-112026-10-18govinfo.gov
Federal, broker-dealersFINRA Regulatory Notice 24-09, regulatory obligations when using generative AI and large language modelsGuidance; issued 2024-06-272026-10-18finra.org
Federal, broker-dealersFINRA Regulatory Notice 26-14, proposal to modernize Rule 2210 (communications), including generative AIProposed; consultation closed 2026-09-112026-10-18finra.org
United States, voluntary frameworkNIST AI Risk Management Framework 1.0 (NIST AI 100-1)Guidance; issued 2023-01-262026-10-18nist.gov
United States, voluntary frameworkNIST AI 600-1, AI RMF Generative Artificial Intelligence ProfileGuidance; issued 2024-07-262026-10-18nist.gov

GCC, six states

WhereInstrumentStatusCheckedSource
Saudi ArabiaAI directive for banks, SAMAnone issued2026-10-18rulebook.sama.gov.sa
Saudi ArabiaSAMA Counter-Fraud Framework (000044021528): AI and ML in fraud systems must not be a black boxFinal; issued 2022-10-112026-10-18rulebook.sama.gov.sa
United Arab EmiratesCBUAE Guidance Note on the Consumer Protection and Responsible Adoption and Use of AI and ML by Licensed Financial Institutions (including insurers)Guidance; issued 2026-02-112026-10-18rulebook.centralbank.ae
United Arab EmiratesCBUAE Model Management StandardsIn force (banks)2026-10-18rulebook.centralbank.ae
QatarQCB Artificial Intelligence Guideline, 2024 (QCB licensed entities)In force since 2024-09-042026-10-18qcb.gov.qa
BahrainAI directive, CBBnone issued2026-10-18cbben.thomsonreuters.com
KuwaitAI-specific directive for banks, CBKnone issued2026-10-18cbk.gov.kw
KuwaitCBK Cyber and Operational Resilience Framework v1.0, section 7.1.2: AI and ML securityFinal; issued 2025-12-032026-10-18cbk.gov.kw
OmanAI directive for banks, CBOnone issued2026-10-18cbo.gov.om
Learn more about the GCC check dates

Every GCC row was checked on 2026-10-18 at the regulator's own rulebook, site or official document. A "none issued" row means the regulator's own rulebook or circulars were searched and hold no AI-specific instrument for banks. These checks were made by AI research agents and confirmed by AI against the official texts; they have not yet been verified by a named person.

European Union

WhereInstrumentStatusCheckedSource
European UnionAI Act, Regulation (EU) 2024/1689In force since 2024-08-012026-10-18publications.europa.eu
European UnionDigital Omnibus on AI, Regulation (EU) 2026/1744 (amends the AI Act)In force since 2026-07-272026-10-18publications.europa.eu
European UnionAI Act: prohibited practices (Art. 5) and AI literacy (Art. 4)Applies in stages: since 2025-02-02; two added prohibitions apply from 2026-12-022026-10-18publications.europa.eu
European UnionAI Act: general-purpose AI model obligations (Chapter V)Applies in stages: since 2025-08-02; models placed on the market before 2025-08-02 by 2027-08-02; Commission fines (Art. 101) since 2026-08-022026-10-18publications.europa.eu
European UnionAI Act: transparency obligations (Art. 50)Applies in stages: since 2026-08-02; generative systems placed on the market before 2026-08-02 must meet Art. 50(2) marking by 2026-12-022026-10-18publications.europa.eu
European UnionAI Act: Annex III high-risk systems, including credit scoring and creditworthiness of natural persons (5(b)) and life and health insurance risk assessment and pricing (5(c))Applies in stages: from 2027-12-02 (Chapter III, Sections 1 to 3)2026-10-18publications.europa.eu
European UnionAI Act: Annex I high-risk systems (products under EU harmonization law, including medical devices under Regulations (EU) 2017/745 and 2017/746)Applies in stages: from 2028-08-02 (Chapter III, Sections 1 to 3)2026-10-18publications.europa.eu
European UnionAI Act: penalties (Art. 99, set by Member States; Art. 101, Commission fines on general-purpose AI model providers)Applies in stages: Art. 99 since 2025-08-02; Art. 101 since 2026-08-022026-10-18publications.europa.eu
European UnionGDPR, Regulation (EU) 2016/679, Art. 22 (automated individual decision-making, including profiling)In force since 2018-05-252026-10-18publications.europa.eu
European UnionDigital Omnibus proposal, COM(2025) 837, 2025/0360(COD): would rewrite GDPR Art. 22(1) and (2) and amend DORA Art. 19Developing; awaiting committee decision in Parliament (proposed 2025-11-19)2026-10-18oeil.europarl.europa.eu
European UnionDORA, Regulation (EU) 2022/2554: ICT third-party risk (Arts. 28 to 30), which covers AI services bought as ICT servicesIn force since 2025-01-172026-10-18publications.europa.eu
European UnionEIOPA Opinion on AI governance and risk management (EIOPA-BoS-25-360): insurers and intermediaries; addressed to national supervisorsGuidance; issued 2025-08-062026-10-18eiopa.europa.eu
European UnionEBA Guidelines on loan origination and monitoring (EBA/GL/2020/06), sections 4.3.3 and 4.3.4: technology-enabled innovation and automated models in credit decisionsFinal, published 2020-05-29; effective 2021-06-302026-10-18eba.europa.eu
European UnionEBA guidelines specific to AI or machine learning (banks and payment institutions)none issued2026-10-18eba.europa.eu
European UnionESMA Public Statement on the use of AI in the provision of retail investment services (ESMA35-335435667-5924)Guidance; issued 2024-05-302026-10-18esma.europa.eu
European UnionESMA Supervisory Briefing on Algorithmic Trading in the EU (ESMA74-1505669079-10311), AI Act section (paras. 43 to 46)Guidance; issued 2026-02-262026-10-18esma.europa.eu
European UnionJoint ESA Statement on ICT risks from frontier AI models (JC 2026 25), EBA, EIOPA and ESMAGuidance; issued 2026-07-312026-10-18esma.europa.eu
European UnionECB Banking Supervision letter to significant institutions, "Addressing AI-enabled cybersecurity threats" (SSM-2026-0301)Guidance; issued 2026-07-07 (action plans due 2026-10-31)2026-10-18bankingsupervision.europa.eu
European UnionECB Guide to internal models (revised), section on machine-learning techniquesGuidance; issued 2025-07-282026-10-18bankingsupervision.europa.eu
European UnionProduct Liability Directive (EU) 2024/2853: software, including AI systems, is a productFinal, published 2024-11-18; effective 2026-12-092026-10-18publications.europa.eu
European UnionProposed AI Liability Directive, COM(2022) 496, 2022/0303(COD)Withdrawn 2025-10-062026-10-18publications.europa.eu
European UnionMDCG 2025-6 / AIB 2025-1: FAQ on the interplay between the MDR, the IVDR and the AI Act (Medical Device Coordination Group and AI Board)Guidance; issued June 2025 (no day given)2026-10-18health.ec.europa.eu

United Kingdom

WhereInstrumentStatusCheckedSource
United KingdomUK statute governing AI systems (cross-sector AI Act)none issued2026-10-18legislation.gov.uk
United KingdomGovernment response to the AI regulation white paper (CP 1019) and "Implementing the UK’s AI regulatory principles: initial guidance for regulators". These set five cross-sector principles that existing regulators apply.Guidance; issued 2024-02-062026-10-18gov.uk
United KingdomPRA Supervisory Statement SS1/23, Model risk management principles for banks. It covers AI and machine-learning models. It applies to UK banks, building societies and PRA-designated investment firms with internal-model approval; insurers are out of scope.Final, published 2023-05-17; effective 2024-05-172026-10-18bankofengland.co.uk
United KingdomFCA AI Update (further to the government’s response to the AI white paper). It explains how existing FCA rules apply to AI. It is an FCA corporate document, not Handbook guidance.Guidance; issued 2024-04-222026-10-18fca.org.uk
United KingdomFCA AI-specific rules (FCA Handbook)none issued2026-10-18fca.org.uk
United KingdomFCA Consumer Duty (PRIN 2A, PS22/9). The FCA names it as a framework that applies to firms’ use of AI.Applies in stages: open products in force since 2023-07-31; closed products in force since 2024-07-312026-10-18fca.org.uk
United KingdomData (Use and Access) Act 2025, section 80: automated decision-making. It replaces UK GDPR Article 22 with new Articles 22A to 22D.In force since 2026-02-052026-10-18legislation.gov.uk
United KingdomThe Data Protection Act 2018 (Code of Practice on Artificial Intelligence and Automated Decision-Making) Regulations 2026 (S.I. 2026/425). They require the ICO to prepare a statutory code on AI and automated decision-making.In force since 2026-05-122026-10-18legislation.gov.uk
United KingdomICO statutory code of practice on AI and automated decision-making (required by S.I. 2026/425)Developing; evidence gathering, no draft published2026-10-18ico.org.uk
United KingdomICO Guidance on AI and data protection (current version)Guidance; issued 2023-03-152026-10-18ico.org.uk
United KingdomICO draft guidance on automated decision-making, including profiling (update for the Data (Use and Access) Act)Proposed; consultation closed 2026-05-292026-10-18ico.org.uk
United KingdomMHRA guidance "Medical devices: software and artificial intelligence (AI)"Guidance; issued 2023-04-062026-10-18gov.uk
United KingdomGovernment response to the National Commission into the Regulation of AI in Healthcare (published by MHRA). It is a future lifecycle-based framework for AI-enabled medical devices.Developing; all 44 recommendations accepted 2026-10-06, MHRA draft guidance on AI device changes due by December 20262026-10-18gov.uk

Switzerland

WhereInstrumentStatusCheckedSource
SwitzerlandFINMA Guidance 08/2024: Governance and risk management when using artificial intelligenceGuidance; issued 2024-12-182026-10-18finma.ch
SwitzerlandSwiss statute governing AI systemsnone issued2026-10-18bk.admin.ch
SwitzerlandFederal AI bill to implement the Council of Europe Framework Convention on AI (consultation draft, FDJP/FOJ with DETEC and FDFA)Developing; consultation draft due by end of 20262026-10-18bakom.admin.ch
SwitzerlandFDPIC statement: the Federal Act on Data Protection (FADP, in force since 2023-09-01) applies directly to AI-supported data processingGuidance; issued 2025-05-082026-10-18edoeb.admin.ch

Asia-Pacific

WhereInstrumentStatusCheckedSource
SingaporeMAS Principles to Promote Fairness, Ethics, Accountability and Transparency (FEAT) in the Use of AI and Data Analytics in Singapore’s Financial SectorGuidance; issued 2018-11-122026-10-18mas.gov.sg
SingaporeMAS Information Paper, Artificial Intelligence (AI) Model Risk Management (good practices from a review of banks)Guidance; issued 2024-12-052026-10-18mas.gov.sg
SingaporeMAS Guidelines on Artificial Intelligence Risk Management for Financial Institutions (all FIs, including banks and insurers), Sections 3 and 4: AI oversight; key AI risk management systems, policies and proceduresFinal, published 2026-10-07; effective 2027-10-072026-10-18mas.gov.sg
SingaporeMAS Guidelines on AI Risk Management, Sections 5 and 6: AI life cycle controls; AI capability and capacityApplies in stages: Sections 5 and 6 by 2028-10-072026-10-18mas.gov.sg
Hong KongHKMA circular "High-level Principles on Artificial Intelligence" (B1/15C, B9/29C), to all authorized institutionsGuidance; issued 2019-11-012026-10-18hkma.gov.hk
Hong KongHKMA circular "Consumer Protection in respect of Use of Big Data Analytics and Artificial Intelligence by Authorized Institutions" (B1/15C, B9/67C)Guidance; issued 2019-11-052026-10-18hkma.gov.hk
Hong KongHKMA circular "Consumer Protection in respect of Use of Generative Artificial Intelligence" (B1/15C, B9/67C)Guidance; issued 2024-08-192026-10-18hkma.gov.hk
JapanAct on Promotion of Research and Development, and Utilization of AI-related Technology (AI Act), Act No. 53 of 2025In force since 2025-09-012026-10-18cao.go.jp
JapanGuidelines on Ensuring the Appropriateness of R&D and Utilization of AI-related Technology (AI Act Article 13), decided by the AI Strategic HeadquartersGuidance; issued 2025-12-192026-10-18cao.go.jp
JapanFSA AI Discussion Paper, "Preliminary Discussion Points for Promoting the Sound Utilization of AI in the Financial Sector"Developing; discussion paper version 1.1 published 2026-03-03 (version 1.0 published 2025-03-04)2026-10-18fsa.go.jp
South KoreaAI Basic Act (인공지능 발전과 신뢰 기반 조성 등에 관한 기본법), Act No. 20676In force since 2026-01-222026-10-18law.go.kr
South KoreaEnforcement Decree of the AI Basic Act, Presidential Decree No. 36053In force since 2026-01-222026-10-18law.go.kr
ChinaInterim Measures for the Management of Generative Artificial Intelligence Services (CAC and six ministries, Order No. 15)In force since 2023-08-152026-10-18cac.gov.cn
ChinaMeasures for Labeling AI-Generated Synthetic Content (CAC, MIIT, MPS, NRTA; 国信办通字〔2025〕2号, dated 2025-03-07)In force since 2025-09-012026-10-18cac.gov.cn
ChinaCybersecurity Law, as amended by the NPC Standing Committee decision of 2025-10-28 (new Article 20 on AI: state support plus AI ethics rules, risk monitoring and safety supervision)In force since 2026-01-012026-10-18gov.cn
AustraliaAI-specific statute (Commonwealth)none issued2026-10-18legislation.gov.au
AustraliaProposals paper: Introducing mandatory guardrails for AI in high-risk settingsWithdrawn; no date shown on the official page (it says feedback informed the National AI Plan of 2025-12-02)2026-10-18consult.industry.gov.au
AustraliaVoluntary AI Safety Standard (10 voluntary guardrails), National AI CentreGuidance; issued 2024-09-052026-10-18industry.gov.au
AustraliaGuidance for AI Adoption (6 essential practices; evolves the Voluntary AI Safety Standard), National AI CentreGuidance; issued 2025-10-212026-10-18industry.gov.au
AustraliaAPRA Letter to Industry on Artificial Intelligence (AI), to all APRA-regulated entities (banks, insurers, superannuation trustees)Guidance; issued 2026-04-302026-10-18apra.gov.au
IndiaRBI Report of the Committee on a Framework for Responsible and Ethical Enablement of AI (FREE-AI) in the Financial Sector: 7 Sutras, 26 recommendationsDeveloping; committee report published 2025-08-13 (recommendations, not a direction)2026-10-18rbi.org.in
IndiaRBI draft Guidance on Regulatory Principles for Model Risk Management, 2026 (all regulated entities; covers AI/ML and third-party models)Proposed; consultation closed 2026-07-242026-10-18rbi.org.in

International standards and treaties

WhereInstrumentStatusCheckedSource
International standardISO/IEC 42001:2023, Information technology, Artificial intelligence, Management systemPublished standard; 2023-122026-10-18iso.org
International standardISO/IEC 23894:2023, AI, Guidance on risk managementPublished standard; 2023-022026-10-18iso.org
International standardISO/IEC 42005:2025, AI system impact assessmentPublished standard; 2025-052026-10-18iso.org
International standardISO/IEC 42006:2025, Requirements for bodies providing audit and certification of AI management systemsPublished standard; 2025-072026-10-18iso.org
International standardOECD Recommendation of the Council on Artificial Intelligence (OECD AI Principles), OECD/LEGAL/0449Guidance; issued 2019-05-22 (amended 2023-11-08 and 2024-05-03)2026-10-18oecd.org
International treatyCouncil of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law (CETS No. 225)Developing; open for signature since 2024-09-05, not in force (1 of the 5 ratifications needed)2026-10-18coe.int
Learn more about how these rows were checked

Every row from the European Union to the international standards, and the added US and Canadian rows, was checked on 2026-10-18 at an official source: the official journal or gazette, the legislature, the regulator’s own site, or the standards body. A "none issued" row means the regulator’s own site was searched and holds no AI-specific instrument of that kind. These checks were made by AI research agents against the official texts; they have not yet been verified by a named person.

When a row changes.

One email when a row you follow changes, driven by the same trigger that reopens records for review.

Prototype states

Protected by Cloudflare Turnstile. Privacy

One email per change. Unsubscribe from any email.

Where does your institution stand?

Four questions place you on four altitudes, free, and your answers stay in your browser. Or book thirty minutes on your regime and your gaps.

See where you areBook a Fit Call