10 AI laws, standards and policy references.

The EU AI Act sets risk-based obligations for AI providers and deployers. Application depends on the system, role and provision-specific timetable.

ISO/IEC 42001:2023 is the international standard for an AI management system (AIMS). It requires organisations to define the context and scope of their AI activities, establish accountable governance, assess AI risks and impacts, operate documented controls, and continually measure and improve the system.

A voluntary framework by the US National Institute of Standards and Technology for managing risks across the AI system lifecycle.

The EU's landmark data protection law contains critical provisions for AI systems that process personal data, including automated decision-making rules.

The UK's pro-innovation approach to AI governance, distributing responsibility across existing sector regulators with cross-cutting principles.

Australia’s eight AI Ethics Principles are voluntary. Existing laws, upcoming automated-decision privacy notices and separately proposed AI infrastructure standards have different scopes and legal status.

AIDA was part of Bill C-27 in the 44th Parliament. It did not receive Royal Assent before that session ended in January 2025.

EO 14110 was revoked on 20 January 2025. Use this historical record to distinguish the former order from current federal AI policy.

SB26-189 replaced the earlier Colorado AI Act provisions. Its new framework concerns automated technology used in consequential decisions, with developer-documentation requirements beginning in January 2027.

The Investor Advisory Committee approved an AI-disclosure recommendation on 4 December 2025. It is not a Commission rule or a law with a June 2025 effective date.