AI agent regulation is moving across multiple jurisdictions on different timelines. The EU has proposed a delay; most other regimes have not. The European Commission's Digital Omnibus would push the high-risk obligations in Annex III from August 2026 to December 2027 if adopted. What the Omnibus does not touch: the prohibitions in Article 5, the transparency obligations in Article 50, and the GPAI obligations in Articles 53 and 55 remain on the original schedule. Outside the EU, the Colorado AI Act, the Korean AI Basic Act, Japan's AI Promotion Act, Singapore's AI Verify framework, and China's CAC measures are all advancing on their own timelines, unchanged. An organisation deploying agents across borders in 2026 is not waiting for clarity. It is accruing obligations under multiple regimes simultaneously. This publication tracks each one, in its own terms, and in relation to the others. For a full breakdown of the Omnibus, see the Omnibus Master Brief on agentliability.eu.
Filter, sort, and search AI regulation across the EU, US states, UK, Singapore, Korea, China, Council of Europe, and more. Activation dates, penalty exposure, and extraterritorial reach in one interactive table.
The fragmentation is not only geographic. It is temporal. Each jurisdiction activates on its own schedule, and the duties accrue even when enforcement is delayed. The EU Digital Omnibus moved the high-risk activation date to 2 December 2027. What applied on 2 August 2026 is unchanged and is in application now. The below is not exhaustive. It is the subset that binds cross-border agent deployers first.
First comprehensive US state AI statute creating a duty of care for developers and deployers of high-risk AI systems.
Regulation (EU) 2026/1744 entered into force, moving the Annex III high-risk activation to 2 December 2027 and Annex I to 2 August 2028. Article 5, Article 50, and GPAI obligations are not on the table.
European supervisor publishes first positions on underwriting agentic AI. Read globally as reference for insurer exposure.
Prohibitions under Article 5 and transparency obligations under Article 50 enter application. GPAI obligations under Articles 53 and 55 also apply from this date. These are not affected by the Omnibus. The Annex III high-risk operator provisions under Article 26 moved to 2 December 2027 when the Omnibus entered into force on 27 July 2026.
Enhanced testing toolkit and Model AI Governance Framework revisions for generative and agentic systems.
Record keeping, human oversight, and incident reporting under Article 26 must be operational and auditable. Date conditional on Omnibus adoption; original deadline is 9 December 2026 until the Omnibus is published in the Official Journal.
Long-form analysis of the statutes, frameworks, and standards shaping how the world will hold operators of autonomous AI agents accountable.
Egypt has no horizontal AI statute but governs AI through the National AI Strategy, the NCAI, and Personal Data Protection Law 151/2020. The 2026 operator guide.
Norway is not an EU member but the AI Act extends via the EEA Agreement. This guide covers Datatilsynet's sandbox, the transposition timeline, and operator duties.
Thailand AI regulation 2026: the draft ETDA Royal Decree, the AI Governance Guideline, PDPA obligations, PDPC enforcement, and the EU AI Act comparison.
Colombia has no standalone AI statute. CONPES 3975, the SIC's Habeas Data powers, and MinTIC's ethical framework set the operator floor in 2026. Full guide.
Poland's draft Act on AI Systems, the proposed KRiBSI commission, and EU AI Act enforcement now live. A guide for operators deploying AI in Poland in 2026.
Peru enacted Law 31814 in 2023 and a risk-tiered implementing regulation in 2024, making it one of the first Latin American states with a binding AI statute.
Ireland has no standalone AI statute, but it enforces the EU AI Act for most global AI providers headquartered in the EU. What operators need to know in 2026.
Hong Kong has no AI-specific statute. Binding obligations run through the PDPO, PCPD ethics guidance, HKMA and SFC circulars. A guide for operators deploying in Hong Kong.
Kenya has no AI-specific statute yet. The National AI Strategy 2025-2030 and the Data Protection Act's automated-decision rules are what binds operators today.
Taiwan's draft AI Basic Act sets seven governance principles and routes enforcement through sectoral regulators. A guide to the framework, the FSC, PDPC, and the EU comparison.
Chile's AI bill proposes an EU-style risk tiered framework, still pending in Congress. This guide covers what applies now and operator obligations for 2026.
Can a business be sued for what its AI agent tells a customer? A global comparison of the doctrine across the US, Canada, the UK, the EU, and Australia in 2026.
New Zealand has no dedicated AI statute and has ruled one out for now. This guide explains the Algorithm Charter, Privacy Act treatment of AI, and the 2025 National AI Strategy.
Vietnam AI regulation for global operators: the Law on Digital Technology Industry (71/2025/QH15), effective January 2026, risk classification, MIC oversight, and EU AI Act comparison.
Govern, map, measure, and manage. The four functions are a distillation of what it means to act reasonably when deploying AI that affects people and institutions.NIST Artificial Intelligence Risk Management Framework 1.0 · National Institute of Standards and Technology
Three structural features organise our coverage. First, AI agent liability is accruing before any single regime is mature. Operators deploying systems today face duties that will only be litigated later. The task is not to choose a legal standard. It is to reach the highest one that applies.
Second, the texts converge more than they diverge. Governance, risk management, transparency to affected parties, human oversight, logging, and incident response appear in almost every serious draft. A deployer that builds to the EU AI Act will be largely compliant with the Colorado AI Act, the Singapore Model Governance Framework, and the expectations of UK sectoral regulators. Frameworks differ at the edges, not the centre.
Third, the insurance market is following the regulation, not leading it. Specialty AI coverage exists. It is fragmented, expensive, and underwritten against the same operator duties the statutes describe. The rational posture is to harden the deployment and insure the residual.
The table below is a reduced view of ten jurisdictions and the instrument that carries the primary obligation for AI agent deployers. The column "standard" indicates whether the regime imposes a rule (statutory duty), a framework (voluntary but influential), or a sectoral approach (existing law applied by existing regulators).
| Jurisdiction | Primary Instrument | Standard | Activation |
|---|---|---|---|
| European Union | Regulation (EU) 2024/1689 · AI Act | Horizontal rule | 2 Aug 2026 (transparency + GPAI) · 2 Dec 2027 (high-risk, if Omnibus passes)* |
| United States · Colorado | SB 24-205 · Colorado AI Act | Statute | 1 February 2026 |
| United States · Federal | NIST AI RMF 1.0 · EO on AI | Framework | Continuous |
| United Kingdom | White Paper 2023 · Regulator guidance | Sectoral | Rolling |
| Singapore | Model AI Governance Framework · AI Verify | Framework | Continuous |
| Japan | AI Promotion Act, Law 53 of 2025 · MIC and METI AI Business Guidelines | Framework | 2025 rolling |
| Korea | AI Basic Act 2024 | Statute | January 2026 |
| Canada | AIDA (Bill C-27, reframed 2025) | Statute pending | Expected 2026-2027 |
| Brazil | PL 2338/2023 · Marco Legal da IA | Statute pending | Under deliberation |
| China | Interim Measures for Generative AI · CAC rules | Regulation | In force |
Read the full country-by-country review on the jurisdictions page. Each entry links to the primary instrument and the most recent guidance.
* The Digital Omnibus, Regulation (EU) 2026/1744, entered into force on 27 July 2026 and moved the Annex III high-risk obligations from 2 August 2026 to 2 December 2027, and Annex I from 2 August 2027 to 2 August 2028. Article 5 prohibitions, Article 50 transparency obligations, and GPAI obligations under Articles 53 and 55 are not affected. Full Omnibus analysis.
Agent Liability sits inside a network of five sister publications covering the regulatory, certification, and insurance dimensions of autonomous AI agent deployment. This is the global desk. Agent Liability EU carries the European regulatory analysis.
A published framework from Future Proof Intelligence for assessing autonomous AI agent deployments. Seven dimensions. Independent. Continuously maintained.
Read the framework