AI Compliance Hub
Understand the rules that matter.
Explore selected AI laws, standards and policy references. Check each record’s legal status and official sources before deciding what applies to your organisation.
- Tracked references
- 10
- Jurisdictions and global scope
- 6
- Law records
- 3
- Source-checked records
- 10
Selected source-checked milestones
Historical events and future obligations are different. These milestones come from the reviewed records below.
- GDPR (AI)
GDPR applies from
- AU AI Ethics
Voluntary principles published
- NIST AI RMF
Framework published
- ISO 42001
Standard published
- UK AI Safety
Government response published
- EU AI Act
Regulation entered into force
- Canada AIDA (C-27)
Session ended
- US EO 14110
Revoked
- SEC IAC recommendation
Recommendation adopted
- Colorado ADMT law
Developer documentation from
Tracked references
Status, scope, milestones and official sources to prepare your review.
EU AI Act
European UnionCurrentThe EU AI Act sets risk-based obligations for AI providers and deployers. Application depends on the system, role and provision-specific timetable.
Law
Regulation entered into force: 2024-08-01ISO 42001
InternationalCurrentISO/IEC 42001:2023 is the international standard for an AI management system (AIMS). It requires organisations to define the context and scope of their AI activities, establish accountable governance, assess AI risks and impacts, operate documented controls, and continually measure and improve the system.
Standard
Standard published: 2023-12-18NIST AI RMF
United StatesAdvisoryA voluntary framework by the US National Institute of Standards and Technology for managing risks across the AI system lifecycle.
Framework
Framework published: 2023-01-26GDPR (AI)
European UnionCurrentThe EU's landmark data protection law contains critical provisions for AI systems that process personal data, including automated decision-making rules.
Law
GDPR applies from: 2018-05-25UK AI Safety
United KingdomAdvisoryThe UK's pro-innovation approach to AI governance, distributing responsibility across existing sector regulators with cross-cutting principles.
Framework
Government response published: 2024-02-06AU AI Ethics
AustraliaAdvisoryAustralia’s eight AI Ethics Principles are voluntary. Existing laws, upcoming automated-decision privacy notices and separately proposed AI infrastructure standards have different scopes and legal status.
Framework
Voluntary principles published: 2019-11Canada AIDA (C-27)
CanadaHistorical proposalAIDA was part of Bill C-27 in the 44th Parliament. It did not receive Royal Assent before that session ended in January 2025.
Bill
Session ended: 2025-01-06US EO 14110
United StatesRevokedEO 14110 was revoked on 20 January 2025. Use this historical record to distinguish the former order from current federal AI policy.
Executive order
Revoked: 2025-01-20Colorado ADMT law
Colorado, United StatesCurrentSB26-189 replaced the earlier Colorado AI Act provisions. Its new framework concerns automated technology used in consequential decisions, with developer-documentation requirements beginning in January 2027.
Law
Developer documentation from: 2027-01-01SEC IAC recommendation
United StatesAdvisoryThe Investor Advisory Committee approved an AI-disclosure recommendation on 4 December 2025. It is not a Commission rule or a law with a June 2025 effective date.
Recommendation
Recommendation adopted: 2025-12-04
AI Compliance Deep Dives
How AI intersects with major compliance frameworks. Industry-specific guidance and practical controls.
- Healthcare
HIPAA & AI
Using AI tools safely in healthcare. Protecting PHI from Shadow AI risks.
- EU Data Protection
GDPR & AI
Managing AI under EU data protection rules. DPIAs, automated decisions, and data transfers.
- AI Regulation
EU AI Act
Preparing your organisation for the world's first comprehensive AI regulation.
- Certification
ISO 42001
Building an AI management system aligned with international standards.
- Trust & Assurance
SOC 2 & AI
Securing AI usage within your Trust Services framework and audit controls.
- Australia
Australian Privacy Act
Managing AI compliance under Australian Privacy Principles and the OAIC.
Check Your AI Compliance Readiness
Use the assessment to prepare questions for your legal and security review. It does not determine legal applicability or certify compliance.
Stay Ahead of AI Regulations
Receive AI regulatory updates to help prepare your next review.