---
id: GOV-LAW-001
title: "Global AI Governance & Regulation"
alternative_names:
  - "AI Policy"
  - "AI Regulation"
  - "International AI Governance"
category: "Safety & Governance → Regulation"
volume: VIII
chapter: 48
entry_type: "Standard Article"
level: 3
status: "Draft"
last_reviewed: 2026-10-18
version: "0.2.0"
prerequisites:
  - "FOUND-001"
  - "SAFE-ALIGN-001"
  - "SAFE-XRISK-001"
related_entries:
  - "ECON-COMP-001"
  - "CAP-BENCH-001"
---

# Global AI Governance & Regulation

## 1. Concise Definition
**Global AI Governance & Regulation** encompasses the statutory frameworks, international treaties, export controls, and institutional auditing mechanisms designed to manage the societal, economic, and existential risks posed by advanced artificial intelligence. It seeks to balance the acceleration of beneficial technological innovation with the enforcement of safety guardrails, primarily focusing on data privacy, algorithmic bias, copyright protections, and the containment of potentially dangerous dual-use foundation models. Taeihagh (2021) is cited only for the general notion of AI governance and its challenges, not for this specific scope. All legal statuses below are as of 2026-10-15.

## 2. Overview & Significance
The rapid capability scaling of Large Language Models (LLMs) and autonomous agents has strained traditional, slow-moving regulatory frameworks (an interpretive claim). AI governance is uniquely challenging because the technology is general-purpose, intangible, and evolves at a pace that vastly outstrips legislative cycles.

The significance of global AI regulation operates across three risk tiers:
1. **Immediate Harms**: Protecting citizens from automated discrimination, deepfake-driven democratic subversion, and massive copyright infringement by generative models.
2. **National Security & Dual-Use**: Preventing state and non-state actors from using open-weight models to accelerate the design of biological weapons or orchestrate autonomous cyberattacks.
3. **Existential Risk Coordination**: Establishing international non-proliferation treaties and compute monitoring to prevent a catastrophic global arms race toward unaligned Artificial Superintelligence (ASI).

## 3. Historical Development
Before 2022, AI-specific binding regulation was limited, and soft-law guidance such as the OECD AI Principles (May 2019) predominated [VERIFICATION NEEDED: OECD and IEEE instruments not re-checked in this revision].

The paradigm shifted radically in 2022/2023 with the public release of ChatGPT, which demonstrated generalized, open-ended capabilities. 
- **The European Union** adopted the **EU AI Act**, Regulation (EU) 2024/1689 (dated 13 June 2024, published in the Official Journal on 12 July 2024; in force 1 August 2024), a risk-based regime that prohibits certain practices (e.g., social scoring, Art. 5(1)(c)) and sets obligations for providers of general-purpose AI (GPAI) models, with additional duties for GPAI models with systemic risk. Application dates are in the table in section 4.1.
- **The United States** under Executive Order 14110 (30 October 2023) set reporting requirements for developers of the most compute-intensive models. EO 14110 was revoked on 20 January 2025 by EO 14148, and EO 14179 (23 January 2025, 90 FR 8741) directed a deregulatory review of actions taken under it. It is not in force. See section 4.1 for later US measures.
- **The UK AI Safety Summit (1-2 November 2023)** produced the Bletchley Declaration, signed by 28 countries and the EU (including China and the USA), which refers to "serious, even catastrophic, harm" from frontier AI (UK Government, 2023). It was an early international statement of this kind; no source was checked establishing it as the first.

## 4. Technical / Conceptual Explanation

### 4.1 The Compute Threshold Approach
Some governance instruments use the training compute of a model as a trigger, because compute is more measurable than software capability. Two instruments are relevant and their thresholds differ:

| Instrument | Threshold | Status as of 2026-10-15 |
| :--- | :--- | :--- |
| EU AI Act, Art. 51(2) | GPAI model presumed to have systemic-risk capabilities above $10^{25}$ FLOPs cumulative training compute (Official Journal text of Art. 51(2), read 2026-10-18) | In force; GPAI obligations apply from 2 August 2025 |
| US EO 14110 (2023) | Reporting threshold of $10^{26}$ operations, and $10^{23}$ for models trained primarily on biological sequence data [VERIFICATION NEEDED: wording of Sec. 4.2 not read first-hand; figures match secondary sources] | Revoked 20 January 2025 (EO 14148); historical only |

The $10^{25}$ and $10^{26}$ figures therefore belong to different instruments and are not in conflict.

**EU AI Act application dates** (Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744, Official Journal texts read 2026-10-15 and 2026-10-18; see GOV-EU-001):

| Date | Provisions |
| :--- | :--- |
| 1 August 2024 | Entry into force |
| 2 February 2025 | Prohibited practices and AI-literacy obligations |
| 2 August 2025 | Governance rules and GPAI model obligations |
| 2 August 2026 | General applicability, with exceptions below; Article 50 transparency duties begin (providers of systems on the market before this date have until 2 December 2026 for Art. 50(2), per Regulation (EU) 2026/1744) |
| 2 December 2027 | High-risk systems under Annex III (originally 2 August 2026) |
| 2 August 2028 | High-risk systems embedded in regulated products, Annex I |

These high-risk dates were deferred by the "Digital Omnibus on AI", reported as Regulation (EU) 2026/1744, which was signed on 8 July 2026, published in the Official Journal on 24 July 2026 and entered into force on the third day after publication, 27 July 2026 (Art. 4; Official Journal text read on EUR-Lex). It also adds prohibitions on AI systems generating non-consensual intimate content or child sexual abuse material (Art. 5(1), points (ba) and (bb), and Art. 5(1a) and (1b)), applying from 2 December 2026. [VERIFICATION NEEDED: application dates of provisions other than Art. 5 additions, Art. 50(2) transition and the high-risk dates have not been individually checked.]

**US federal and state measures after EO 14110**: EO 14179 (23 January 2025) directed a review of actions taken under EO 14110. The White House published "America's AI Action Plan" in July 2025 and, on 11 December 2025, an executive order titled "Ensuring a National Policy Framework for Artificial Intelligence" directing challenges to state AI laws (law-firm and White House fact-sheet summaries; litigation and legislative status not checked). [VERIFICATION NEEDED: current federal legislation and the status of state laws such as California SB 53 and the Colorado AI Act.]

### 4.2 Liability and Open-Weight Models
A central regulatory debate revolves around the liability of "open-weight" or "open-source" AI models. If a corporation releases the weights of a highly capable model to the public, and a malicious actor fine-tunes that model to orchestrate a cyberattack, assigning legal liability remains an unresolved legal frontier. Commentators argue both that strict regulation could constrain open-source development and that lax regulation could permit misuse; neither claim is empirically settled.

### 4.3 Export Controls and Semiconductor Chokepoints
Governance is inextricably linked to hardware. Export controls on advanced AI accelerators and semiconductor manufacturing equipment have been imposed since October 2022 and revised repeatedly; controls on EUV lithography rest substantially on Dutch (ASML) licensing and allied alignment as well as US rules. [VERIFICATION NEEDED: specific BIS rules, their dates and current status; no primary source was checked in this revision. See GOV-EXPORT-001.]

## 5. Types, Components & Classifications
Regulatory approaches globally are highly fragmented:
- **Risk-Based Framework (EU)**: Classifies AI systems by their intended use (Unacceptable Risk, High Risk, Limited Risk, Minimal Risk) with corresponding compliance burdens.
- **Sectoral/Distributed Approach (US)**: Federal AI-specific regulation is limited and authority is dispersed across existing agencies and state laws. [VERIFICATION NEEDED: which agencies (e.g., FDA, SEC, FTC) have issued AI-specific rules; the earlier list was uncited.]
- **State-Led Development (China)**: The Interim Measures for the Management of Generative AI Services took effect on 15 August 2023 (issued 13 July 2023 by the CAC and six other regulators), and the Measures for Labeling AI-Generated Synthetic Content, with mandatory standard GB 45438-2025, took effect on 1 September 2025 and require explicit and implicit (metadata) labels (law-firm summaries; official CAC texts not read). See GOV-CN-001. [VERIFICATION NEEDED: security-assessment and "alignment with state values" characterizations are not sourced here.]

## 6. Applications & Concrete Examples
- **National AI evaluation institutes**: The UK institute is now the AI Security Institute (renamed from AI Safety Institute, February 2025, per a Japan AISI document; its website uses the current name). The US institute was re-established in June 2025 as the Center for AI Standards and Innovation (CAISI) at NIST (NIST, 25 September 2025 news item, uses that name); as read on 2026-10-18, NIST's own page for the body and a 16 October 2026 NIST news item call it the Center for Advancing Innovation and Standards for Super Intelligence (CAISSI) [VERIFICATION NEEDED: no NIST or Commerce announcement of the change was found, so its date is unconfirmed]. Japan has an AI Safety Institute (J-AISI; not further checked). Their pre-deployment evaluations rest on voluntary agreements with developers (e.g., NIST agreements with OpenAI and Anthropic), not a legal gate.
- **Content marking and labeling**: The EU AI Act Art. 50 sets transparency duties for synthetic content (see dates in section 4.1), and China's labeling measures apply from 1 September 2025 (section 5). The earlier general claim of "cryptographic or statistical watermarks" mandates is not supported and is withdrawn. [VERIFICATION NEEDED: exact technical requirements of Art. 50(2).]

## 7. Advantages, Limitations & Unresolved Questions

### Limitations of Current Regulation
- **Regulatory Capture**: Massive compliance costs heavily favor incumbent tech monopolies, potentially crushing open-source ecosystems and startup competitors who cannot afford vast legal auditing teams.
- **The Pace of Innovation**: Commentators note that the EU AI Act was drafted before the spread of general-purpose models and that GPAI provisions were added during negotiation [VERIFICATION NEEDED: source for the legislative history]; the later deferral of high-risk deadlines (section 4.1) is attributed in secondary sources to unready standards and supervisory capacity.
- **Enforcement Jurisdictions**: AI development is borderless. Strict regulations in the West may simply offshore development to jurisdictions with minimal oversight ("regulatory havens").

### Unresolved Legal and Scientific Questions
1. *Copyright and Fair Use*: Do companies have the legal right to scrape copyrighted internet data to pretrain their models? Litigation in several jurisdictions is pending or has been decided; its outcome may affect the industry. [VERIFICATION NEEDED: specific cases, dates and outcomes as of 2026-10-15; see SAFE-IP-001.]
2. *Algorithmic Disgorgement*: If a model is found to be trained on illegal or copyrighted data, can the offending data be "unlearned," or must the regulatory body force the deletion of the entire multi-million-dollar model?

## 8. Current State of Knowledge
Global AI governance is in a state of rapid, fragmented experimentation. Views differ on how to regulate frontier models; the Bletchley Declaration (UK Government, 2023) records agreement among signatories that frontier AI poses serious risks, but no cited source establishes a wider consensus on regulatory paradigms. No international treaty comparable to the IAEA framework for AI exists. The Council of Europe Framework Convention on AI (CETS No. 225) is a binding treaty for its parties: opened for signature 5 September 2024, with 21 signatories reported by the Council of Europe and the EU reported to have ratified in May 2026; its entry-into-force status was not confirmed [VERIFICATION NEEDED]. Voluntary lab commitments (e.g., Anthropic's Responsible Scaling Policy, which has been revised more than once; version not checked) supplement hard law.

## 9. Future Trajectory & Strategic Outlook
The following are qualitative outlooks, not registered forecasts under `docs/EVIDENCE_FRAMEWORK.md` section 2; no probabilities are assigned.
- **Near-Term (0–3 Years)**: Continued copyright litigation; phased application of the EU AI Act (section 4.1 dates, including the December 2027 and August 2028 high-risk dates as currently scheduled); possible further changes to US federal and state AI policy.
- **Medium-Term (3–10 Years)**: Proposals exist for an international agency for AI and for hardware-level tracking of advanced chips (Anderljung et al., 2023, discuss compute governance and licensing); whether any will be adopted is unknown [Hypothetical].
- **Long-Term (10+ Years)**: Some analysts argue that AGI, if achieved, would make AI a matter of international strategic deterrence; this is a contested scenario, not an expected outcome.

## 10. Related Entries & Knowledge Graph
- **Foundational Concepts**:
  - [[ECON-COMP-001] The Economics of Compute & Scaling](../vol09_economy/ECON-COMP-001_compute_economics.md): The physical infrastructure that regulations attempt to monitor.
  - [[CAP-BENCH-001] AI Evaluation, Benchmarking & Contamination](../vol04_capabilities/CAP-BENCH-001_ai_evaluation.md): The metrics used by safety institutes to enforce compliance.
- **Advanced Implications & Future Trajectories**:
  - [[SAFE-XRISK-001] AI Existential Risk & Catastrophic Scenarios](./SAFE-XRISK-001_existential_risk.md): The primary threat model driving international governance efforts.
  - [[SAFE-ALIGN-001] The AI Alignment Problem](./SAFE-ALIGN-001_ai_alignment.md): The technical problem regulations seek to buy time to solve.

## 11. References & Foundational Literature
1. European Parliament and Council of the European Union. (2024). Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act). Official Journal of the European Union, 12 July 2024 (CELEX 32024R1689); as amended by Regulation (EU) 2026/1744 (Official Journal, L, 24.7.2026). [Risk-based EU framework; dates in section 4.1 are from the Official Journal texts of both instruments, read via EUR-Lex.]
2. The White House. (2023). Executive Order 14110, *Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence*, 30 October 2023. Revoked by Executive Order 14148 (20 January 2025; confirmed via GovInfo House Document 119-28); see also Executive Order 14179 (23 January 2025), 90 FR 8741. [Historical US instrument; thresholds not read first-hand].
3. Taeihagh, A. (2021). *Governance of artificial intelligence*. Policy and Society, 40(2), 137–157. DOI 10.1080/14494035.2021.1928377. [Special-issue introduction on AI governance; does not address foundation-model regulation].
4. Anderljung, M., et al. (2023). *Frontier AI Regulation: Managing Emerging Risks to Public Safety*. arXiv:2307.03718 (preprint; Preliminary). [Policy proposal discussing standards, registration and licensing for frontier models; not a source on liability].
5. UK Government (Department for Science, Innovation and Technology). (2023). *The Bletchley Declaration by Countries Attending the AI Safety Summit, 1-2 November 2023*. gov.uk [VERIFICATION NEEDED: exact URL and access date to be recorded]. [Declaration signed by 28 countries and the EU referring to catastrophic harm from frontier AI].

## 12. Evidential Classification Matrix
| Section / Claim | Evidence Category | Supporting Source | Confidence / Status |
| :--- | :--- | :--- | :--- |
| EU AI Act entry into force and phased application dates (as amended, as of 2026-10-15) | Established (legal record; Official Journal texts of both instruments read) | Regulation (EU) 2024/1689; Regulation (EU) 2026/1744 | High |
| US EO 14110 compute thresholds | Historical (revoked 20 January 2025) | White House EO 14110; EO 14148 | Revocation confirmed; thresholds not read first-hand |
| Liability for open-weight models | Contested (legal and policy debate) | No source in this article; Anderljung et al. (2023) does not cover liability [VERIFICATION NEEDED] | Active Debate |
| Feasibility of international compute monitoring | Hypothetical / policy proposal | Anderljung et al. (2023) (Preliminary) | Active Debate |

## 13. Revision History
- **v1.0.0** (2026-10-15): Initial draft; citations not independently verified.
- **v0.2.0** (2026-10-15): Corrected following independent fact-check audit (docs/audits/GOV-LAW-001_audit.md); 9 findings applied, 2 left marked for verification.