AI compliance by sector
Which rules apply when a business builds, buys, or uses AI, what they require in practice, the key dates, and where the primary text is. Status as of October 2026. Sources are listed at the bottom of every guide.
All guides
AI compliance, layer by layer
AI compliance is five layers at once, from the EU AI Act to sector rules. This guide maps them and gives a first-90-days checklist for inventory, risk tiers, contracts, notices, human review, and records.
EU AI Act compliance
The EU AI Act reaches non-EU companies whose AI or its output is used in the EU. This guide covers provider and deployer duties, prohibited practices, general-purpose AI rules, penalties, and the dates as amended by Regulation (EU) 2026/1744.
US state AI laws
Colorado repealed its 2024 AI Act and replaced it with a narrower law. This guide covers that change, Texas TRAIGA, California’s AI rules, Utah, Illinois, NYC, and the status of the federal push to preempt state AI laws.
AI in financial services
Federal financial regulators withdrew or replaced much of their AI guidance in 2025 and 2026. This guide explains what changed, from SR 26-2 to the Regulation B rule, and which underlying duties did not.
AI in health care
Health care AI is regulated mostly by laws that predate it. This guide covers when software is a device, HIPAA business associate rules, Section 1557 duties for clinical algorithms, HTI-1 and HTI-5, CMS guidance, and state laws.
AI in hiring and HR
Employers stay liable for the AI hiring tools they buy. This guide covers NYC Local Law 144, Illinois HB 3773 and the AI Video Interview Act, California’s ADS rules, Colorado, the federal position, and FCRA duties.
AI in insurance
Insurers face state-by-state AI rules. This guide covers the NAIC bulletin and where it is adopted, Colorado’s governance regulation, New York’s testing expectations, and a practical testing checklist.
AI pricing and antitrust
Pricing software is legal; coordinating through it may not be. This guide covers the RealPage settlement, Gibson v. Cendyn, California AB 325, New York’s rent and pricing disclosure laws, and FTC Section 5 enforcement on AI claims.
AI governance frameworks
Frameworks do not satisfy laws by themselves, but they produce the records laws ask for. This guide compares NIST and ISO, maps them to legal duties, and lists what an AI policy and inventory should contain.