AIRiskAware
Explainer

What Is AI Regulation?

AI regulation is the body of laws, government rules, industry standards, and regulatory guidance that governs how artificial intelligence is developed, deployed, and used. In 2026, AI regulation takes three forms: AI-specific laws (EU AI Act, Japan AI Promotion Act, South Korea AI Basic Act, Colorado AI Act), existing laws applied to AI (GDPR, privacy laws, employment law, product liability), and voluntary standards and frameworks (ISO 42001, NIST AI RMF, OECD AI Principles). The regulatory landscape is fragmenting — different jurisdictions are taking fundamentally different approaches, from the EU's comprehensive risk-based regulation to the UK's sector-led approach to the US's patchwork of federal guidance and state laws.

Definition

AI Regulationthe body of binding law and enforceable regulatory guidance that governs how AI systems are developed, sold, and used.

The global AI regulatory landscape spans three broad approaches. The EU AI Act is comprehensive horizontal regulation. The US uses a sectoral approach — existing regulators (FTC, EEOC, SEC, OCC, FDA, CFPB) applying existing law to AI, plus a growing state law patchwork. Australia, the UK, Singapore, and Japan use principles-based regulator guidance over hard law. Frontier AI is increasingly governed by voluntary commitments to safety institutes (US AISI, UK AISI, Australian AISI).

Source: EU AI Act; US AI Executive Orders; OECD AI Policy Observatory

Why it matters for governance

The fragmentation of AI regulation creates a compliance challenge for any organisation operating across borders. The EU AI Act applies extraterritorially to any organisation whose AI affects EU residents. The UK DUAA 2025 creates distinct ADM rights. Australia's Privacy Act creates ADM transparency obligations from December 2026. US state laws (Colorado, NYC, Illinois) create location-specific requirements. Organisations need regulatory mapping capabilities that track which regulations apply to which AI systems in which jurisdictions — a task that grows more complex as new regulations are enacted.