AI governance — United States
Every requirement in the theme as a row, with the provision, the deadline and the supervisor in this jurisdiction.
The question this page answers
We put an AI service into production in three markets, which classification, which registration and which human oversight applies in the EU, the United States and China?
Requirement rows
- Classification of the system
NIST AI Risk Management Framework
NIST AI 100-1, funktionen MAP
Federal law has no binding classification. The framework is voluntary, but is used as a yardstick in enforcement and procurement.
- Deadline:
- No deadline stated
- Penalty:
- No federal counterpart, the requirement follows from state law
- Supervision:
- National Institute of Standards and Technology
Read 2026-08-22
- Registration and filing
Colorado Artificial Intelligence Act
Colo. Rev. Stat. § 6-1-1703
There is no federal register. State law requires notice to the attorney general on discovery of algorithmic discrimination.
- Deadline:
- 90 days from discovery
- Penalty:
- Civil penalty per violation
- Supervision:
- Colorado Attorney General
Read 2026-08-22
- Transparency towards the user
Federal Trade Commission Act
15 U.S.C. § 45
No general labelling duty. A claim about what the model does must be true and substantiated, otherwise it is a deceptive practice.
- Deadline:
- Ongoing, for as long as the processing continues
- Penalty:
- Order and civil penalty for deceptive or unfair practice
- Supervision:
- Federal Trade Commission
Read 2026-08-22
- Data and training
California AB 2013, Generative AI Training Data Transparency
Cal. Civ. Code § 3111
There is no federal rule. State law requires a published description of the training data for generative systems made available in California.
- Deadline:
- From 1 January 2026
- Penalty:
- Civil penalty per violation
- Supervision:
- Delstatens justitiekansler
Read 2026-08-22
- Human oversight
NIST AI Risk Management Framework
NIST AI 100-1, funktionerna GOVERN och MANAGE
The framework describes roles, escalation and shutdown as voluntary practice, and enforcement tests the outcome against consumer protection law.
- Deadline:
- No deadline stated
- Penalty:
- Order and civil penalty for deceptive or unfair practice
- Supervision:
- National Institute of Standards and Technology och Federal Trade Commission
Read 2026-08-22
- Supervision and penalty
Federal Trade Commission Act och delstatlig lag
15 U.S.C. § 45
Enforcement runs through orders and settlements, and states pursue their own cases alongside the federal regulator.
- Deadline:
- No deadline stated
- Penalty:
- Order and civil penalty for deceptive or unfair practice
- Supervision:
- Federal Trade Commission och delstaternas justitiekanslerer
Read 2026-08-22
Connections
Sources and review
Register version crossover-v1.0.0 · Read 2026-08-22
This page restates written law with the provision and the official source. It is not legal advice in an individual matter.
Next step
Three ways to put the register to work in your own practice.
Start with your task
Litigation
Find support in a judgment
Search guiding decisions, see what became final and follow changes in the law.
In-house, deals
Map the rules in a transaction
Move from theme to act and on to the article that carries the duty.
Compliance
Assess the risk in a process
Risk scoring per legal area, with the sources behind every score.