US AI Regulation

The United States has no single federal AI law. Instead, AI oversight is split across federal agencies acting under existing authority and a fast-growing patchwork of state legislation. The FTC uses consumer protection law to challenge deceptive AI claims. The SEC requires disclosure of material AI risk. The FDA regulates AI as a medical device. Executive orders have set and then reversed federal AI priorities across administrations.

State legislation is where the concrete compliance obligations are landing first. Colorado's AI Act, California's AI Transparency Act, Illinois' Biometric Information Privacy Act (BIPA), and New York City's Local Law 144 each impose real requirements on organizations deploying AI that affects consumers, employees, or residents of those states. For a multi-state employer or platform, this means tracking a moving target across dozens of legislatures rather than a single statute.

This hub tracks federal agency enforcement, state AI legislation, and the executive-branch policy shifts that define the US AI regulatory landscape as it develops.

181 items

ResearchUS2026-05-26

Pre-Deployment Vetting, FTC Enforcement, and Procurement Rules Are Converging Into a New US AI Compliance Architecture

A May 2026 analysis by K&L Gates describes an emerging US AI governance structure being assembled in real time. Through executive action, FTC enforcement, civil rights mechanisms, technical standards, and federal procurement requirements. The analysis highlights that the Administration has been weighing executive actions. Would impose pre-deployment vetting obligations on frontier AI models. For enterprises, the most immediately affected controls span pre-release model evaluation, substantiation of AI marketing claims. Third-party vendor due diligence, and federal contracting compliance.

United States frontier AI pre-deployment vetting FTC enforcement federal procurement risk management model evaluation transparency accountability procurement

ResearchUS2026-05-18

Dual-Board Model Would Make AI Safety a Fiduciary Duty, Brooklyn Law Review Article Argues

A Brooklyn Law Review article proposes a dual-board structure with enforceable AI safety fiduciary duties. It argues that a single board may struggle with AI risks’ complexity and speed. The proposal would formalize safety oversight within corporate accountability.

corporate governance AI safety board oversight fiduciary duty accountability risk management transparency United States

ResearchUS2026-05-17

17% Growth in AI Governance Jobs Reported, but Enforcement and Accountability Gaps Remain, per Stanford HAI AI Index

The IAPP published an analysis on May 15, 2026. Drawing on findings from the 2026 Stanford HAI AI Index to examine whether AI governance infrastructure is keeping pace. Rapid AI deployment. The piece highlights a 17 percent growth in AI governance job postings and frames governance. A layered challenge spanning transparency, technical risk controls, accountability, and enforcement. It is directed at organizations working to formalize ownership structures and redress mechanisms for AI-related harms.

Stanford HAI IAPP AI governance accountability transparency enforcement risk management workforce United States

ResearchGlobal2026-05-11

12 Companies Published Frontier AI Safety Frameworks in 2025, International AI Safety Report Finds

The International AI Safety Report released its 2026 Report: Extended Summary for Policymakers on May 9, 2026. Documenting that 12 companies published or updated Frontier AI Safety Frameworks in 2025 describing their risk management plans. Building advanced AI systems. The report is tailored specifically for policymakers and provides an authoritative cross-jurisdictional overview of how leading AI developers are approaching. Frontier safety. It represents the most current international benchmark for assessing voluntary industry commitments on advanced AI risk management.

frontier AI safety frameworks risk management transparency international governance policymaker guidance voluntary commitments model evaluation EU United States

ResearchUS2026-05-11

Agentic Blackmail, CBRN Facilitation, and First AI-Orchestrated Cyber Espionage Documented in ARI's 2025 Safety Highlights

ARI’s AI Safety Research Highlights of 2025 reviews frontier capabilities, agent misalignment, and emerging threats. Examples include Anthropic’s simulated corporate blackmail study and a documented AI-orchestrated espionage campaign. The report calls for formal evaluation standards through CAISI.

AI safety agentic AI risk CBRN cyber espionage frontier models Anthropic model evaluation risk management blackmail CAISI US AI Regulation

ResearchGlobal2026-05-10

Nine Strategies for Responsible AI Implementation Outlined in WEF AI Governance Alliance Playbook

The World Economic Forum AI Governance Alliance released a research-backed playbook outlining nine actionable strategies. Implementing responsible AI across internal operations and broader ecosystem partnerships. The guidance addresses diverging national regulatory paths and the practical challenge of translating AI principles into operational compliance programs. It is intended for organizations seeking concrete methods to manage cross-border compliance obligations and build trust with stakeholders.

World Economic Forum responsible AI AI governance cross-border compliance risk management transparency accountability EU AI Act United States EU

Corporate PolicyUS2026-05-10

GSA Establishes EDGE Board and AI Oversight Committee Under Updated CIO Directive 2185.1A

The U.S. General Services Administration has published its AI Strategies and Compliance Plan. Establishing a formal AI Governance Board known as the EDGE Board. Co-chaired by the agency's Chief Data Officer and Deputy Administrator. Alongside a cross-functional AI Oversight Committee responsible for reviewing all internal AI requests and enforcing privacy and security controls. The updated CIO Directive 2185.1A expands the agency's AI governance scope beyond generative AI to cover the full spectrum. Of AI systems in use or under consideration at GSA. The structure sets a precedent for layered federal agency AI oversight with defined executive accountability.

United States GSA federal AI governance oversight structures accountability risk management procurement executive order government compliance AI policy

ResearchGlobal2026-05-10

EU-US AI governance gap set to widen through 2027, with enforcement surge expected, per BISI

BISI’s Global Fragmentation of AI Governance and Regulation compares EU high-risk rules with US deregulation. It predicts widening differences through 2027 and initial significant enforcement in employment and finance. The report also forecasts regulatory arbitrage and consolidation pressure on smaller providers.

EU AI Act EU United States regulatory divergence enforcement risk management financial services hiring cross-border compliance market consolidation

Weekly RecapGlobal2026-05-08

AI Governance Weekly - May 8, 2026

US policy increasingly involves government access to frontier models before deployment. Practitioner guidance also recommends completing governance checks before launch.

weekly recap trends enterprise compliance United States frontier AI pre-deployment testing risk management AI governance transparency accountability

ResearchGlobal2026-05-06

AI Governance Requires Integrated Privacy, Cybersecurity, and Legal Functions, ISACA Article Argues

ISACA’s Collaboration and the New Triad of AI Governance calls for privacy, cybersecurity, and Legal to work together. The work should continue throughout the AI lifecycle. It references the EU AI Act, NIST AI RMF, and US executive orders. The article recommends cross-functional accountability for overlapping AI risks.

AI governance EU AI Act NIST AI RMF United States EU risk management accountability cybersecurity privacy Executive Order 14110

ResearchGlobal2026-05-06

Three Structural Gaps Where AI Undermines Corporate Governance, Seattle University Law Review Finds

A peer-reviewed article published in the Seattle University Law Review examines how AI. Emerging technologies are creating structural mismatches with existing corporate governance and regulatory frameworks. The article identifies three phenomena: the blurring of firm boundaries through externally provided AI services. Strategic resource access without ownership, and the dual role of online platforms as both market facilitators and market participants. The authors argue that current governance frameworks are poorly equipped to address these shifts.

corporate governance third-party AI risk platform regulation AI governance supply chain accountability accountability risk management United States regulatory frameworks financial services

Corporate PolicyUS2026-05-05

Microsoft, Google DeepMind, and xAI Grant U.S. Government Pre-Release Access to Frontier AI Models

Microsoft, Google DeepMind, and xAI have each signed formal agreements with CAISI. The Center for AI Standards and Innovation at NIST, granting the U.S. government pre-release access to. Frontier AI models for national security evaluation. The agreements extend a program that previously covered only Anthropic and OpenAI. Align with directives in America's AI Action Plan. Developers provide model versions with safety guardrails removed so government evaluators can probe for national security risks. In classified testing environments. CAISI has already completed more than 40 such evaluations, including models not yet publicly available.

Microsoft Google DeepMind xAI Anthropic OpenAI NIST United States pre-deployment evaluation national security frontier AI model evaluation AI Action Plan

Corporate PolicyUS2026-05-05

AI Incidents Surged Over 32% in 2024, NACD Guidance Urges Boards to Adapt Oversight Frameworks

The National Association of Corporate Directors (NACD) has published 'Tuning Corporate Governance for AI Adoption'. Part of its 2025 Governance Outlook series, providing boards with a framework to adapt existing oversight mechanisms for AI-related risks. The resource reports a 26% increase in AI incidents from 2022 to 2023. A further rise of over 32% in 2024, underscoring the urgency of board-level action. It calls on boards to evaluate how AI reshapes enterprise risk profiles and to establish appropriate internal reporting structures.

board governance risk management corporate oversight accountability transparency AI incident tracking United States auditing enterprise compliance

ResearchGlobal2026-05-04

Three Pillars, Data Sourcing to Human Oversight, Define Enterprise AI Governance for 2026

The Data Governance Playbook, a practitioner-focused publication, has released analysis identifying three core pillars. Enterprise AI governance programs in 2026: data sourcing requirements, documentation practices, and human-oversight checkpoints. The guidance is aimed at organizations working to operationalize AI governance amid growing implementation complexity across global regulatory environments. For compliance teams, the framework offers a structured approach to model risk management and auditability. Can be mapped against existing regulatory obligations such as the EU AI Act and emerging U.S. state-level requirements. The emphasis on human-oversight checkpoints is directly relevant to organizations subject to high-risk AI provisions under multiple jurisdictions. Demonstrable human review of automated decisions is increasingly a formal compliance requirement. Documentation practices outlined in the analysis align with audit trail expectations appearing across frameworks from ISO 42001 to sector-specific guidance. In financial services and healthcare. Compliance teams building or maturing AI governance programs may use this analysis as a practical reference. Gap assessments against 2026 regulatory deadlines.

EU AI Act ISO 42001 United States risk management human oversight transparency auditing accountability financial services healthcare

ResearchUS2026-05-04

Governance Must Precede Deployment for Agentic AI to Scale, Databricks Framework Argues

Databricks released a research-backed framework in May 2026 arguing that governance must precede deployment for generative. Agentic AI initiatives to scale successfully in enterprise environments. The guidance identifies clean data pipelines, identity management, secure architecture, bias evaluation. Feedback loops as foundational requirements rather than afterthoughts. The publication is directed at US-based enterprises but carries broad applicability. Emphasizing that governance functions as a trust enabler rather than a barrier to value realization. For compliance teams, the framework offers concrete operational recommendations including outcome evaluation cycles and oversight mechanisms specifically designed. Agentic AI systems, where autonomous decision-making amplifies the consequences of control failures. Compliance professionals managing AI risk programs will find the bias evaluation. Accuracy assessment components directly relevant to obligations under emerging state and federal AI regulations.

Databricks agentic AI enterprise governance bias evaluation risk management transparency accountability United States data governance model evaluation

Corporate PolicyGlobal2026-05-04

Claude Opus 4.7 ships with reduced cyber capabilities and new safety evaluations, Anthropic confirms

Anthropic released Claude Opus 4.7 for advanced software engineering, long-running workflows, instruction following, and self-checking. Published evaluations describe reduced cyber capabilities compared with Mythos Preview and safeguards tested on less capable models. These are voluntary model-level mitigations. Security and development teams should review the evaluations for vendor due diligence and internal risk records.

Anthropic Claude EU AI Act NIST AI RMF cybersecurity model evaluation transparency risk management software engineering pre-deployment safety

ResearchUS2026-05-04

Corporate Boards Must Overhaul Governance for AI, NACD Urges in 2025 Report

The National Association of Corporate Directors (NACD) published research in November 2025 urging U.S. corporate boards. To modernize legacy governance frameworks to address the risks and oversight demands of enterprise AI adoption. The report identifies AI governance as a continuous board-level function rather than a one-time compliance exercise. Citing real-world incidents involving deepfakes, data leaks, and algorithmic bias. Evidence of what can go wrong when board oversight is inadequate. NACD recommends that boards establish ongoing monitoring and adjustment mechanisms rather than relying on static policies. For enterprise compliance teams, the report signals growing expectations from institutional governance bodies. AI risk management will be embedded at the highest levels of corporate leadership. Compliance professionals should anticipate that board-level AI oversight will increasingly be treated as a fiduciary responsibility. Implications for audit committee charters, risk reporting structures, and executive accountability frameworks.

board governance AI oversight corporate risk fiduciary duty risk management accountability auditing United States deepfakes algorithmic bias

ResearchUS2026-05-03

Anthropic's Safety Board Structure Among Frontier AI Governance Mechanisms Analyzed in Harvard Law Review

A March 2026 Harvard Law Review article examines how frontier AI companies such as OpenAI. Anthropic have adopted governance structures designed to counterbalance commercial profit pressures with safety-oriented accountability. The analysis focuses in particular on Anthropic's charter mechanism. Which grants Class T shareholders the right to elect three of five board directors either after May 24, 2027. Eight months following the receipt of $6 billion in investment capital, whichever occurs first. These trustees are empowered to prioritize safety considerations, structurally limiting the influence of purely profit-driven incentives at the board level. The research classifies these arrangements as prosocial corporate governance tools. Situates them within broader stakeholder-focused approaches to managing AI development risks. For enterprise compliance teams, the analysis provides a framework. Evaluating whether AI vendors' internal governance structures credibly constrain high-risk development practices. Which is increasingly relevant to third-party risk assessments and AI procurement due diligence. While the article is not a binding instrument, its articulation of concrete governance benchmarks offers practical reference points. Assessing AI suppliers against emerging standards.

Anthropic OpenAI corporate governance board structure AI safety frontier AI accountability procurement third-party risk United States

Corporate PolicyUS2026-05-03

Boards Urged to Overhaul AI Oversight as Deepfakes, Data Leaks Expose Governance Gaps, NACD Warns

The National Association of Corporate Directors (NACD) published guidance in January 2025 urging U.S. corporate boards. To refine existing oversight mechanisms to address AI-specific governance failures. The guidance cites real-world incidents involving AI-generated deepfakes, confidential data leaks. Algorithmic bias as evidence that current board structures are inadequate for AI risk. NACD identifies a cross-functional leadership model as central to effective AI governance. Placing the Chief AI Officer in coordination with the Chief Risk Officer, Chief Compliance Officer, Chief Legal Officer. Chief Data Officer. For enterprise compliance teams, the guidance signals growing boardroom pressure to formalize AI accountability chains. Integrate AI risk into existing enterprise risk management frameworks. Compliance professionals should expect boards to request clearer reporting lines, defined AI risk tolerances. Documented incident response protocols as standard governance requirements.

NACD board oversight AI governance enterprise risk management Chief AI Officer accountability risk management deepfakes United States algorithmic bias

Corporate PolicyUS2026-05-03

Only One-Third of S&P 100 Companies Disclose Both Board AI Oversight and Formal Policies, Harvard Law Finds

A Harvard Law School analysis of 2025 proxy statements from S&P 100 companies found. 54% disclose. Board-level AI oversight, but only one-third disclose both oversight structures and formal AI policies. Revealing uneven governance practices across large US public companies. Of companies that do disclose board oversight, 63% assign responsibility to specific committees rather than the full board. The research also documents that US institutional investors are increasing expectations for formalized AI governance. 46% favoring. Board or committee-based oversight mechanisms. For enterprise compliance teams, the findings establish a de facto market benchmark: companies lacking both a documented oversight structure. A formal AI policy are increasingly out of step with investor expectations and peer disclosure norms. Compliance and governance officers at public companies should assess current proxy disclosures against these emerging standards. Particularly as the SEC and institutional shareholders intensify scrutiny of AI risk management disclosures.

United States board oversight proxy disclosure investor expectations S&P 100 corporate governance transparency accountability risk management SEC