AI governance — Comparison

AI-förordningen

art. 6 och bilaga III

Classification follows the use: prohibited practice, high risk under Annex III, limited risk with information duties, or minimal risk.

Deadline:

Before the service is made available to the public

Penalty:

Up to EUR 15 million or three percent of global turnover

Supervision:

Nationell marknadskontrollmyndighet och AI-byrån

Read 2026-08-22

NIST AI Risk Management Framework

NIST AI 100-1, funktionen MAP

Federal law has no binding classification. The framework is voluntary, but is used as a yardstick in enforcement and procurement.

Deadline:

No deadline stated

Penalty:

No federal counterpart, the requirement follows from state law

Supervision:

National Institute of Standards and Technology

Read 2026-08-22

Interim Measures for Generative AI Services

art. 2 och 6

The measures reach services offered to the public in China, and services with public opinion capability must undergo a security assessment.

Deadline:

Before the service is made available to the public

Penalty:

Order to rectify, warning, suspension of the service and a fine

Supervision:

Cyberspace Administration of China

Read 2026-08-22

AI-förordningen

art. 49 och 71

High-risk systems are registered in the EU database before being placed on the market or put into service.

Deadline:

Before the service is made available to the public

Penalty:

Up to EUR 15 million or three percent of global turnover

Supervision:

Europeiska kommissionen och nationell myndighet

Read 2026-08-22

Colorado Artificial Intelligence Act

Colo. Rev. Stat. § 6-1-1703

There is no federal register. State law requires notice to the attorney general on discovery of algorithmic discrimination.

Deadline:

90 days from discovery

Penalty:

Civil penalty per violation

Supervision:

Colorado Attorney General

Read 2026-08-22

Provisions on Algorithmic Recommendations och GenAI-åtgärderna

art. 24 respektive art. 17

The algorithm is filed in the regulator's register, and generative services with public opinion capability are assessed before launch.

Deadline:

Ten working days from providing the service

Penalty:

Order to rectify, warning, suspension of the service and a fine

Supervision:

Cyberspace Administration of China

Read 2026-08-22

AI-förordningen

art. 50

The person interacting with the system must be informed, and synthetic content must be marked machine-readable.

Deadline:

Before the service is made available to the public

Penalty:

Up to EUR 15 million or three percent of global turnover

Supervision:

Nationell marknadskontrollmyndighet

Read 2026-08-22

Federal Trade Commission Act

15 U.S.C. § 45

No general labelling duty. A claim about what the model does must be true and substantiated, otherwise it is a deceptive practice.

Deadline:

Ongoing, for as long as the processing continues

Penalty:

Order and civil penalty for deceptive or unfair practice

Supervision:

Federal Trade Commission

Read 2026-08-22

Measures for the Labelling of AI-Generated Synthetic Content

art. 4 och 5

Generated content must carry both a visible label and a label in the file metadata.

Deadline:

From 1 September 2025

Penalty:

Order to rectify, warning, suspension of the service and a fine

Supervision:

Cyberspace Administration of China

Read 2026-08-22

AI-förordningen

art. 10

Training, validation and test data must be governed by a data governance practice and be relevant, representative and as error-free as possible.

Deadline:

Before the service is made available to the public

Penalty:

Up to EUR 15 million or three percent of global turnover

Supervision:

Nationell marknadskontrollmyndighet

Read 2026-08-22

California AB 2013, Generative AI Training Data Transparency

Cal. Civ. Code § 3111

There is no federal rule. State law requires a published description of the training data for generative systems made available in California.

Deadline:

From 1 January 2026

Penalty:

Civil penalty per violation

Supervision:

Delstatens justitiekansler

Read 2026-08-22

Interim Measures for Generative AI Services

art. 7

Training data must come from a lawful source, respect intellectual property and contain no prohibited material.

Deadline:

Before the service is made available to the public

Penalty:

Order to rectify, warning, suspension of the service and a fine

Supervision:

Cyberspace Administration of China

Read 2026-08-22

AI-förordningen

art. 14

High-risk systems must be designed so a natural person can monitor operation, interpret output and stop the system.

Deadline:

Ongoing, for as long as the processing continues

Penalty:

Up to EUR 15 million or three percent of global turnover

Supervision:

Nationell marknadskontrollmyndighet

Read 2026-08-22

NIST AI Risk Management Framework

NIST AI 100-1, funktionerna GOVERN och MANAGE

The framework describes roles, escalation and shutdown as voluntary practice, and enforcement tests the outcome against consumer protection law.

Deadline:

No deadline stated

Penalty:

Order and civil penalty for deceptive or unfair practice

Supervision:

National Institute of Standards and Technology och Federal Trade Commission

Read 2026-08-22

Interim Measures for Generative AI Services

art. 9 och 14

The provider carries content producer responsibility, must stop unlawful generation and report to the authority.

Deadline:

Ongoing, for as long as the processing continues

Penalty:

Order to rectify, warning, suspension of the service and a fine

Supervision:

Cyberspace Administration of China

Read 2026-08-22

AI-förordningen

art. 99

The member state designates a market surveillance authority, and the Commission's AI Office supervises general purpose models.

Deadline:

No deadline stated

Penalty:

Up to EUR 35 million or seven percent of global turnover for prohibited practice

Supervision:

AI-byrån och nationell marknadskontrollmyndighet

Read 2026-08-22

Federal Trade Commission Act och delstatlig lag

15 U.S.C. § 45

Enforcement runs through orders and settlements, and states pursue their own cases alongside the federal regulator.

Deadline:

No deadline stated

Penalty:

Order and civil penalty for deceptive or unfair practice

Supervision:

Federal Trade Commission och delstaternas justitiekanslerer

Read 2026-08-22

Interim Measures for Generative AI Services

art. 21

The authority may order rectification and suspend the service, and liability under PIPL, the Data Security Law and the Cybersecurity Law applies in parallel.

Deadline:

No deadline stated

Penalty:

Order to rectify, warning, suspension of the service and a fine

Supervision:

Cyberspace Administration of China

Read 2026-08-22