First announced: AI rules are developing across major markets, including the EU AI Act and national or sector-specific frameworks.
Submitted by: NYBACS Compliance Desk
What changed
Businesses increasingly need to assess how AI systems are selected, used, and monitored. Depending on the jurisdiction and use case, obligations may also arise under privacy, employment, consumer-protection, intellectual-property, and cybersecurity rules.
Who’s affected
Businesses using AI for customer service, marketing, recruitment, analytics, software development, or decisions affecting individuals.
Immediate actions
- Create an inventory of AI tools and business uses.
- Identify the data each tool processes and the decisions it supports.
- Assign an owner to review risks, vendor terms, and staff use.
- Set procedures for checking AI-generated work before relying on it.
Practical note & timeline
Requirements vary by jurisdiction, system, and use. Businesses operating in the EU should assess whether the AI Act applies to each system and their role in its supply or use.
Source: https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai
