Review: AI regulation & compliances
1 AI system, 10 regulations
AI is moving fast. But laws and rules about how we use AI?
It’s developing fast. But not fast enough. Good, but could very bad.
That’s a problem.
Especially with Generative AI (GenAI)—you know, the kind of AI that writes, creates, and talks back. It’s powerful, but if we’re not careful, it can also:
Leak your personal info 😬
Spread fake news 🧠
Make unfair decisions 👎
So what can we do?
⚖️ Governments Are Catching Up
Different countries are trying to make rules:
Europe has the AI Act – if your AI tool is risky (like face recognition), it needs human checks and detailed records.
California wants people to know when AI is making decisions about them.
HIPAA in the U.S. protects your health info—even from AI.
Biden’s Executive Order tells U.S. government agencies: Be safe, be fair, be transparent.
But it’s still confusing, especially for businesses building with AI.
🌍 Global / International
OECD Recommendations on AI
UNESCO Recommendation on the Ethics of AI
GPAI (Global Partnership on AI)
ISO/IEC 42001:2023 (AI Management System Standard)
OWASP Top 10 for Large Language Model Applications
🇪🇺 European Union
GDPR (General Data Protection Regulation)
EU AI Act (Artificial Intelligence Act)
🇺🇸 United States
CCPA (California Consumer Privacy Act)
CPRA (California Privacy Rights Act)
California Executive Order on GenAI
Draft California ADMT Regulations (Automated Decision-Making Technology)
HIPAA (Health Insurance Portability and Accountability Act)
FTC Guidance on AI Privacy and Terms of Service
OMB AI Policy (Federal agency AI governance)
President Biden’s AI Executive Order
🌏 Asia-Pacific / Other Regions
China’s AI Regulations (e.g., Ministry of Science and Technology)
Japan’s Cabinet Office AI Policies
South Korea’s Ministry of Science and ICT AI Rules
Singapore’s AI Governance Framework
India’s AI for All Policy (NITI Aayog)
Australia’s AI Ethics Framework
UK AI Regulations and Ethics Guidelines
🧑⚖️ By Legal Type
Anti-discrimination Laws (various countries)
Intellectual Property Laws (copyright, patent, trade secrets)
Liability and Insurance for AI (including Hallucination Insurance)
Automated Decision-Making Laws (GDPR Art. 22, CCPA/CPRA, etc.)
🚨 What’s the Risk?
AI can "hallucinate"—make stuff up!
It can also accidentally (or not) leak data, trick people, or make biased decisions.
This is why the paper says we need:
Strong data privacy
Clear human oversight
Real accountability when AI goes wrong
🌍 What’s the Big Picture?
🛠️ What Should Companies Do?
Use AI responsibly. Don't just chase shiny tools—think about the risks.
Know the laws. Different places have different rules.
Be transparent. Tell users when AI is involved.
Keep humans in the loop. Especially when decisions affect people’s lives.
Reference
Cloud Security Alliance. (2024). Principles to practice: Responsible AI in a dynamic regulatory environment. https://cloudsecurityalliance.org/research/working-groups/ai-governance-compliance