Global AI regulation. Everything we have published.
No single international framework governs the deployment of AI agents. An organisation placing agents in several markets holds concurrent obligations under the EU AI Act, US federal and state law, the UK's sectoral approach and a growing set of Asia Pacific frameworks. This index collects every analysis and guide this desk has published on that patchwork: the comparisons first, then the frameworks, then each jurisdiction in turn.
Across jurisdictions. Where the regimes meet.
When several regimes apply at once, the starting point for a deployment is how they align and where they conflict. Newest first.
- Article 50 reaches operators outside the Union: the marking duty and the 2 December 2026 dateThe high-risk deferral to December 2027 did not move Article 50. For operators outside the Union, the transparency duties are live and one relief ends in December.
- Selling AI into the EU from outside it: who answers for a defective product after 9 December 2026From 9 December 2026 an AI vendor outside the EU stays liable for defects, and an importer or authorised representative inside the EU answers with it.
- Your AI vendor's insurance is not your insuranceA certificate of insurance, an additional insured clause and an indemnity cap each promise less than a buyer hears. What each does, and what to ask for instead.
- AI obligations arrive on rails that were built before AIAn operator scanning each market for AI legislation misses its real obligations. The rules that bite first were written before AI and never mention it.
- Required assurance and available assurance are not the same thingAlmost nowhere obliges an outside party to check an AI system. Plenty of parties will. Why that distinction decides what a certificate is worth to an operator.
- You cannot over-comply your way into complianceA global operator cannot over-comply into compliance. Four structural reasons the highest common denominator plan fails, and what genuinely does transfer.
- Strict liability for AI deployers, and where it now existsEurope withdrew its AI fault liability directive. Vietnam legislated deployer strict liability. Where an operator pays without fault, compared at source.
- Build the evidence once: what actually transfers between AI governance frameworksA global operator does not need one governance programme per jurisdiction. Seven artefacts travel to every framework. Four determinations travel to none.
- The AI Omnibus and non-EU operators: what the new dates changeThe EU deferred its high-risk AI obligations to 2027 and 2028. For a company outside the Union, four dates changed and two of them got closer, not further away.
- Can my company be sued for what an AI agent says?Can a business be sued for what its AI agent tells a customer? A global comparison of the doctrine across the US, Canada, the UK, the EU, and Australia in 2026.
- When an AI agent fails, who pays: the foundation model provider or the business that deployed it?When an AI agent fails, the business that deployed it usually pays, not the foundation model provider. This guide maps the multi-party liability chain (provider, fine-tuner, deployer, user), how the EU AI Act splits provider and deployer duties, and where courts are testing it.
- AI regulation by country: the global operator map 2026The canonical map of AI regulation by jurisdiction. Every covered country, its posture, and operator obligations in one navigable hub. Updated June 2026.
- Global AI regulation status tracker 2026A live status tracker of AI regulation worldwide for operators: the EU AI Act deadline that has now passed, Colorado SB 205 repeal-and-replace, Texas TRAIGA, California SB 53, the Council of Europe Convention, ISO/IEC 42001, NIST AI RMF, and the AIUC-1 insurance standard. Verified 10 August 2026.
- Cross-border AI agent liability. Which law applies and why it mattersWhen an AI agent operates across national borders, conflict-of-laws rules determine which country's liability regime applies. A guide for global operators covering Rome II, Brussels I, and the EU AI Act's extraterritorial reach.
- US, EU, UK. Three approaches to the same questionA structured comparison of how the US, EU, and UK are allocating responsibility across the AI supply chain in 2026. Horizontal statute, revised products regime, and sectoral regulator leadership.
- When the EU AI Act applies to US and UK companies. A 2026 jurisdictional reach guideA 2026 guide to the extraterritorial reach of the EU AI Act. When US and UK companies fall inside the regime, and what the operator duties require.
- Asia-Pacific AI governance. The 2026 landscapeSingapore's AI Verify, Japan's AI Promotion Act, Korea's AI Basic Act, and why the region's softer-law approach is setting de facto standards many US and EU deployers will follow.
Frameworks and treaties. The references that travel.
The standards, principles and treaties that courts, supervisors and buyers reach for in every jurisdiction.
- OECD AI Principles 2024The OECD AI Principles 2024 revision added security and information integrity to the framework. A practical guide for operators deploying AI across multiple jurisdictions.
- ISO/IEC 42001:2023A guide to ISO/IEC 42001:2023, the certifiable international AI management system standard, what its certification route involves, and how it sits alongside NIST AI RMF and the EU AI Act.
- Council of Europe Framework Convention on AIThe Council of Europe Framework Convention on Artificial Intelligence opened for signature in September 2024. This guide explains what CETS 225 requires, who it binds, and how it interacts with the EU AI Act for global operators.
- NIST AI RMF and the emerging US standard of reasonable careWhy a voluntary federal framework is becoming the benchmark courts, regulators, and contracts use to define whether an operator acted reasonably when deploying an autonomous AI agent.
Country by country. One guide each.
What binds an operator in each jurisdiction we cover, in alphabetical order. Each guide is dated, and the corrections log records what changed.
- ArgentinaArgentina AI governance 2026: operators guide to Decreto 1001 and PDPL complianceArgentina's AI governance under Decreto 1001/2024 takes a principled deregulatory approach, but PDPL obligations and EU AI Act extraterritorial reach create real compliance obligations for AI operators. A practical guide.
- AustraliaAustralia Voluntary AI Safety Standard 2024Australia published a 10-guardrail Voluntary AI Safety Standard in 2024. A guide for global operators deploying AI systems in the Australian market and within its regulatory framework.
- BrazilBrazil's AI Bill PL 2338: risk framework and operator obligations explainedBrazil's Senate-approved AI framework PL 2338 creates a risk-based model with significant operator obligations. What global operators with Brazilian market exposure need to know before enforcement begins.
- CanadaCanada AI Regulation 2026. What operators face in the absence of a comprehensive AI statuteCanada's Artificial Intelligence and Data Act died with the prorogation of Parliament in January 2025. This guide explains what applies now, what is coming, and how Canada compares to the EU and US.
- ChileChile AI Regulation: Operators Guide 2026Chile's AI bill proposes an EU-style risk tiered framework, still pending in Congress. This guide covers what applies now and operator obligations for 2026.
- ChinaChina CAC Generative AI Measures: a guide for global operators in 2026China's CAC Interim Measures for Generative AI Services took effect August 2023. This guide explains security assessments, content obligations, and cross-border implications for global operators.
- ColombiaColombia AI regulation 2026Colombia has no standalone AI statute. CONPES 3975, the SIC's Habeas Data powers, and MinTIC's ethical framework set the operator floor in 2026. Full guide.
- ColoradoThe Colorado AI Act. Deployer obligations under SB 24-205A close reading of the Colorado AI Act (SB 24-205) as it enters force on 1 February 2026. The duty of care, the algorithmic discrimination standard, the risk management programme, and the comparison with the EU AI Act.
- EgyptEgypt AI Regulation 2026Egypt has no horizontal AI statute but governs AI through the National AI Strategy, the NCAI, and Personal Data Protection Law 151/2020. The 2026 operator guide.
- FranceAI liability and operator duties in France: 2026 guideWhat operators deploying AI in France must know in 2026. The CNIL and DGCCRF roles, France's decentralised national authority model, French civil liability under Articles 1240 and 1242 of the Code civil, and the insurance implications.
- GermanyAI liability and operator duties in Germany: 2026 guideGermany has designated the Bundesnetzagentur as its market surveillance authority under the EU AI Act. This guide explains what that means for operators: the KI-MIG, product liability interaction, and the insurance implications of deploying AI agents in Germany.
- Hong KongHong Kong AI regulation 2026: a guide for operators deploying in Hong KongHong Kong has no AI-specific statute. Binding obligations run through the PDPO, PCPD ethics guidance, HKMA and SFC circulars. A guide for operators deploying in Hong Kong.
- IndiaIndia AI Regulation 2026India has no AI-specific statute. RBI guidance is a draft, SEBI has reporting circulars from 2019, IRDAI has a working group. What global operators face in 2026.
- IndonesiaIndonesia AI regulation 2026: what actually binds operatorsIndonesia has no AI-specific statute. What binds operators serving Indonesian users is the Personal Data Protection Law, the Electronic Information and Transactions Law, and one advisory ministerial circular on AI ethics.
- IrelandIreland AI regulation 2026Ireland enacted the Regulation of Artificial Intelligence Act 2026 and its AI Office of Ireland was due to be operational by 2 August 2026. What operators need to know.
- IsraelIsrael AI Regulation 2026Israel has no AI statute in 2026. Governance runs through the Privacy Protection Law as amended by Amendment No. 13, Bank of Israel Directive 369 on model risk, and a December 2023 policy that chose sectoral regulation. A guide for operators.
- ItalyAI liability and operator duties in Italy: 2026 guideItaly enacted Law No. 132/2025 on 23 September 2025, a national AI statute that expressly adds no obligations beyond the EU AI Act. This guide covers what operators deploying AI in Italy must do under Law 132/2025 and the EU AI Act.
- JapanJapan's AI Promotion Act 2024: what global operators need to understandJapan's AI Promotion Act 2024 takes a principles-based approach distinct from the EU model. What global operators deploying AI agents in Japan or for Japanese users need to understand.
- KenyaKenya AI regulation 2026: a guide for operators deploying in KenyaKenya has no AI-specific statute yet. The National AI Strategy 2025-2030 and the Data Protection Act's automated-decision rules are what binds operators today.
- MalaysiaMalaysia AI Governance 2026Malaysia AI governance for global operators: the National Guidelines on AI Governance and Ethics, AI Malaysia Berhad, the National AI Action Plan 2026-2030, PDPA 2010 as amended, and EU AI Act comparison.
- MexicoMexico AI Regulation 2026: what operators need to know after the institutional resetMexico has no enacted federal AI statute. Since the constitutional reform on simplificación orgánica of 20 December 2024, INAI, Cofece and the IFT no longer exist, and a new Ley Federal de Protección de Datos Personales en Posesión de los Particulares has applied since 20 March 2025. What that means for AI operators.
- NetherlandsAI liability and operator duties in the Netherlands: 2026 guideThe Netherlands has not yet enacted its AI Act implementing law. The draft Uitvoeringswet AI-verordening went to internet consultation from 20 April to 1 June 2026 and would designate ten market surveillance authorities, with the RDI and the AP jointly coordinating. This guide explains what operators deploying AI agents in the Netherlands must do now.
- New ZealandNew Zealand AI Regulation 2026New Zealand has no dedicated AI statute and has ruled one out for now. This guide explains the Algorithm Charter, Privacy Act treatment of AI, and the 2025 National AI Strategy.
- NigeriaNigeria AI Regulation 2026Nigeria has no AI statute and no binding AI guideline. The NDPA 2023 and the NDPC are what actually bind an AI operator. A guide for companies deploying AI in Nigeria and serving EU users from Nigeria in 2026.
- NorwayNorway AI Regulation 2026: Operators Guide to EEA RulesNorway is not an EU member but the AI Act extends via the EEA Agreement. This guide covers Datatilsynet's sandbox, the transposition timeline, and operator duties.
- PeruPeru AI regulation 2026: a guide for operators deploying in PeruPeru enacted Law 31814 in 2023 and its implementing regulation, Decreto Supremo 115-2025-PCM, in September 2025. Three risk categories, an enumerated prohibited-use list, and staged deadlines starting September 2026.
- PolandPoland AI Regulation 2026Poland's Act on AI Systems is in force since 11 August 2026. KRiBSI, UODO, and the EU AI Act timetable as amended by the Digital Omnibus, for operators deploying AI in Poland.
- Republic of KoreaKorea AI Basic Act 2024: a guide for operators deploying in KoreaSouth Korea's AI Basic Act has been in force since 22 January 2026. A corrected guide to its eleven high-impact domains, its transparency duties, its domestic representative rule and its single penalty tier.
- Saudi ArabiaSaudi Arabia AI regulation 2026: operators guideSaudi Arabia AI regulation 2026 for operators. SDAIA AI Ethics Principles 2.0, the four-tier risk model, PDPL, generative AI and deepfakes guidelines, and how Saudi obligations compare to the EU AI Act.
- SingaporeSingapore AI Governance 2026Singapore AI governance for global operators: the IMDA Model Framework for Generative AI, the AI Verify toolkit, the MAS FEAT Principles, what the PDPA actually requires, and how the picture compares with the EU AI Act.
- South AfricaSouth Africa AI regulation 2026: operators guideSouth Africa AI regulation 2026 for operators. POPIA enforcement, the national AI policy framework, SARB AI guidance, and how South African obligations compare to the EU AI Act.
- SpainAI liability and operator duties in Spain: 2026 guideSpain has AESIA but not yet the statute that designates it or lets it fine anyone. What binds an operator in Spain in 2026, the bill still in committee, the sixteen guides, and the closed sandbox.
- SwitzerlandSwitzerland AI Regulation 2026Switzerland has no AI-specific legislation. What applies instead: FADP Article 21 and its exceptions, FINMA Guidance 08/2024, and the Federal Council decision of 12 February 2025 with a consultation draft due by the end of 2026.
- TaiwanTaiwan AI Basic Act 2026: a guide for operators deploying in TaiwanTaiwan's AI Basic Act has been in force since 14 January 2026. Twenty articles, seven principles, no penalties, and an Article 5 high-risk route triggered by sector regulators.
- ThailandThailand AI Regulation 2026Thailand AI regulation 2026: the draft ETDA Royal Decree, the AI Governance Guideline, PDPA obligations, PDPC enforcement, and the EU AI Act comparison.
- TurkeyTurkey AI regulation 2026: operators guideTurkey has no AI law. Its AI bill has been in committee since June 2024, and Turkiye has not signed the Council of Europe AI Convention. What KVKK Article 11(g) actually grants, the 2026 fine figures, and the Board's agentic AI study.
- UAE and the GulfUAE and Gulf AI Governance. What international operators need to know in 2026No Gulf state has a binding AI statute, and the UAE PDPL's executive regulations have not been issued. The one AI-specific deployer instrument in the region is DIFC Regulation 10 on autonomous systems, in force since 1 September 2023.
- United KingdomUK AI Regulation 2026. The ICO, FCA, CMA, AISI, and the sectoral approach explainedThe UK has no AI Act. What actually binds a UK deployer in 2026: UK GDPR as amended by the Data (Use and Access) Act 2025, the FCA Handbook, PRA SS1/23, the Online Safety Act and the MHRA regime.
- United StatesAI liability and operator duties in the United States: 2026 guideThe United States has no federal AI Act. Operator liability flows from the FTC Act, state statutes led by Colorado SB 24-205, sector regulators, and common law. This guide sets out what a business deploying AI agents in the US must know.
- VietnamVietnam AI Regulation 2026Vietnam AI regulation for global operators: Law No. 134/2025/QH15 on Artificial Intelligence, in force 1 March 2026. Three risk tiers, notification before service, conformity assessment, deployer strict liability, and a presence requirement for foreign providers.
Tools. The same ground, in one view.
Filter, sort and compare the frameworks in force across seventeen jurisdictions, with activation dates, penalty exposure and extraterritorial reach.
- Article 50 reaches operators outside the Union: the marking duty and the 2 December 2026 date
- Selling AI into the EU from outside it: who answers for a defective product after 9 December 2026
- Your AI vendor's insurance is not your insurance
- AI obligations arrive on rails that were built before AI
- Required assurance and available assurance are not the same thing
- You cannot over-comply your way into compliance
- Strict liability for AI deployers, and where it now exists
- Build the evidence once: what actually transfers between AI governance frameworks.
- The AI Omnibus and non-EU operators: what the new dates change.
- Egypt AI Regulation 2026. What operators face without a horizontal AI statute, built around a national strategy, a coordinating council, and a general data protection law.
- Norway AI Regulation 2026: Operators Guide to EEA Rules. What the EU AI Act's path through the EEA Agreement means for operators today.
- Thailand AI Regulation 2026. The draft ETDA Royal Decree, the AI Governance Guideline, PDPA exposure, and what operators must understand.
- Colombia AI regulation 2026. What operators deploying AI in Colombia must know about CONPES 3975, the SIC's Habeas Data powers, MinTIC's ethical framework, and how the position compares to the EU AI Act.
- Poland AI Regulation 2026. What operators deploying AI in Poland must know about the Act on AI Systems in force since 11 August 2026, KRiBSI, UODO, and the EU AI Act timetable as amended by the Digital Omnibus.
- Peru AI regulation 2026: a guide for operators deploying in Peru
- Ireland AI regulation 2026. A national implementing Act, a new AI Office, and the enforcement seat for several of the world's largest AI providers.
- Hong Kong AI regulation 2026: a guide for operators deploying in Hong Kong
- Kenya AI regulation 2026: a guide for operators deploying in Kenya
- Taiwan AI Basic Act 2026: a guide for operators deploying in Taiwan
- Chile AI Regulation: Operators Guide 2026
- Can my company be sued for what an AI agent says? The answer is yes almost everywhere, and the doctrine that gets you there differs by jurisdiction.
- New Zealand AI Regulation 2026. What operators face where the government has explicitly ruled out a dedicated AI statute and relies on existing law plus voluntary guidance instead.
- Vietnam AI Regulation 2026. Law 134/2025, the Ministry of Science and Technology, and what global operators must understand.
- Argentina AI governance 2026: operators guide to Decreto 1001 and PDPL compliance.
- Malaysia AI Governance 2026. The AIGE guidelines, the National AI Action Plan, the PDPA, and what global operators must understand.
- Turkey AI regulation 2026: operators guide.
- When an AI agent fails, who pays: the foundation model provider or the business that deployed it?
- AI regulation by country: the global operator map 2026.
- AI liability and operator duties in France: 2026 guide.
- AI liability and operator duties in Germany: 2026 guide.
- Israel AI Regulation 2026. What operators face as Israel governs AI through privacy law, banking supervision, and a government policy that chose sectoral regulation over a horizontal statute.
- AI liability and operator duties in Italy: 2026 guide
- AI liability and operator duties in the Netherlands: 2026 guide.
- Nigeria AI Regulation 2026. What operators deploying AI in Africa's largest economy must know about NITDA, the NDPA 2023, the National AI Strategy, and EU extraterritorial exposure.
- AI liability and operator duties in Spain: 2026 guide.
- AI liability and operator duties in the United States: 2026 guide.
- Global AI regulation status tracker 2026.
- Saudi Arabia AI regulation 2026: operators guide.
- South Africa AI regulation 2026: operators guide.
- Indonesia AI regulation 2026: what actually binds operators
- Mexico AI Regulation 2026: what operators need to know after the institutional reset.
- Switzerland AI Regulation 2026. What operators face in a sector-specific framework built around data protection, financial supervision, and the Council of Europe Convention.
- Cross-border AI agent liability. Which law applies and why it matters.
- UAE and Gulf AI Governance. What international operators need to know in 2026.
- OECD AI Principles 2024. What global operators must know about the revised framework and its influence on binding law.
- Australia Voluntary AI Safety Standard 2024. What global operators face under ten voluntary guardrails, sector supervision, and a Privacy Act that gains automated decision-making duties in December 2026.
- India AI Regulation 2026. What global operators face in a rapidly growing AI market without a comprehensive statute.
- ISO/IEC 42001:2023. The AI management system standard that operators across every jurisdiction should understand.
- Council of Europe Framework Convention on AI. The first binding international treaty on artificial intelligence, and what it means for global operators.
- China CAC Generative AI Measures: a guide for global operators in 2026
- Korea AI Basic Act 2024: a guide for operators deploying in Korea
- Singapore AI Governance 2026. Model Framework, AI Verify, MAS FEAT, and what global operators must understand.
- Brazil's AI Bill PL 2338: risk framework and operator obligations explained.
- Japan's AI Promotion Act 2024: what global operators need to understand.
- Canada AI Regulation 2026. What operators face in the absence of a comprehensive AI statute.
- UK AI Regulation 2026. The ICO, FCA, CMA, AISI, and the sectoral approach explained.
- Asia-Pacific AI governance. The 2026 landscape.
- The Colorado AI Act. Deployer obligations under SB 24-205.
- When the EU AI Act applies to US and UK companies. A 2026 jurisdictional reach guide.
- NIST AI RMF and the emerging US standard of reasonable care.
- US, EU, UK. Three approaches to the same question.