No single federal AI law, but sector regulators have extensive existing authority and are actively using it. Here is what applies to the sectors where AI governance matters most.
CFPB enforcement of AI in credit decisions, OCC model risk management for banks, adverse action notice requirements, SEC AI disclosure, and FTC consumer protection for financial AI.
EEOC guidance on algorithmic hiring discrimination, NYC Local Law 144 bias audit requirements, Colorado SB 24-205 appeal rights, Illinois AI Video Interview Act, and NLRA collective action protections.
FDA Software as a Medical Device clearance requirements, HIPAA Business Associate Agreements for AI, CMS prior authorisation AI guidance, and ONC algorithm transparency rules.
State bar ethical obligations for AI in legal practice, duty of candour and AI hallucination risk in court submissions, client confidentiality, and court-specific AI disclosure rules.
NAIC Model Bulletin on AI Systems (December 2023), Colorado SB 21-169 external data governance, state unfair trade practices laws applied to AI outcomes, and FTC jurisdiction over insurtech AI.
FTC enforcement of deceptive AI practices, DOJ antitrust scrutiny of AI platforms, NIST AI RMF as emerging baseline, state consumer privacy laws, and AI Safety Executive Order obligations.