Law / Frameworks / ETSI EN 304 223 / 5.1

ETSI EN 304 223, 5.15.1.3-2

Threats developers cannot resolve are passed to operators and on to end-users. Our summary; European Telecommunications Standards Institute (ETSI)'s text is not ours to print.

We read each law below as bearing on this provision. That does not mean the provision, done well, meets the law: what each law asks is on its own page. Law library as of 19 Oct 2026.

The kinds of duty that reach it: disclosure.

70: laws
44: jurisdictions
1: with court rulings behind it
16: not yet in force
12: proposed, not law

Related controls in other frameworks the same duties, in at least two laws we track, reach both

NIST AI RMFMEASURE 2.8 Risks associated with transparency and accountability – as identified in the..., 64 laws
NIST AI RMFMEASURE 3.3 Feedback processes for end users and impacted communities to report problems..., 9 laws
NIST AI RMFGOVERN 4.2 Organizational teams document the risks and potential impacts of the AI..., 8 laws
5 more in the NIST AI RMF
NIST AI 600-1GAI-RISK-07 Human-AI Configuration, 70 laws
NIST AI 600-1GAI-RISK-08 Information Integrity, 70 laws
NIST AI 600-1GAI-RISK-09 Information Security, 6 laws
2 more in the NIST AI 600-1
NIST AI 200-22.3 Apply & Measure, 2 laws
NIST AI 200-24.3 Composing a TEVV Toolbox, 2 laws
OWASP LLM Top 10LLM03:2026 Excessive Agency, 2 laws
OWASP Agentic Top 10ASI09 Human-Agent Trust Exploitation, 25 laws
MIT mitigations4.1 System Documentation, 70 laws
MIT mitigations4.2 Risk Disclosure, 70 laws
MIT mitigations4.6 User Rights & Recourse, 70 laws
7 more in the MIT mitigations
NIST Privacy FrameworkCM.AW-P1 Mechanisms (e.g., notices, internal or public reports) for communicating..., 6 laws
FINOS AIGFAIR-DET-021 Agent Decision Audit and Explainability, 70 laws
FINOS AIGFAIR-DET-004 AI System Observability, 7 laws
FINOS AIGFAIR-PREV-005 System Acceptance Testing, 3 laws
3 more in the FINOS AIGF

A law in force is unmarked; the rest wear their state: not yet in force proposed

AI transparency

33 laws, 27 jurisdictions

Jurisdiction	Law	How it reaches this provision
Alabama	Distribution of Materially Deceptive Media to Influence an Upcoming Election	Through its disclosure duty. What it requires
Belize	Practice Direction No. 18 of 2025, ethical use of generative AI in court proceedings	Through its disclosure duty. What it requires
California	California AI Transparency Act (SB 942, as amended by AB 853, SB 1000 and AB 2713)	Through its disclosure duty. What it requires
California	Companion Chatbot Safety and Accountability Act (SB 243)	Through its disclosure duty. What it requires
California	Synthetic Performer Advertising Disclosure Act (SB 1050) from 1 Jan 2027, in 2 months	Through its disclosure duty. What it requires
Delaware	House Bill 306 (pending), Computer Communication Act proposed	Through its disclosure duty. What it requires
European Union	AI Act, Article 50 (transparency obligations for AI systems and synthetic content)	Through its disclosure duty. What it requires
European Union	European Commission Guidelines on the implementation of the transparency obligations for certain AI systems under Article 50 of the AI Act from a date not yet set	Through its disclosure duty. What it requires
Idaho	Generative Artificial Intelligence in Education Act, vendor disclosure duty	Through its disclosure duty. What it requires
Illinois	Artificial Intelligence Video Interview Act	Through its disclosure duty. What it requires

Show the other 23 laws

Indiana	Use of Digitally Altered Media in Elections (House Enrolled Act 1133, 2024)	Through its disclosure duty. What it requires
Jamaica	Practice Direction No. 1 of 2025, Use of Generative Artificial Intelligence in Court Proceedings	Through its disclosure duty. What it requires
Kentucky	Synthetic Media Disclosure in Electioneering Communications	Through its disclosure duty. What it requires
Kyrgyzstan	Digital Code, Chapter 23: AI interaction and deepfake disclosure duties	Through its disclosure duty. What it requires
Louisiana	Act 250 (HB 178), attorney duty to verify and disclose AI-generated evidence	Through its disclosure duty. What it requires
Michigan	AI-Generated Political Advertisement and Robocall Disclosure (Public Act 263 of 2023)	Through its disclosure duty. What it requires
Nebraska	Conversational Artificial Intelligence Safety Act (LB 525, §§ 12-18) from 1 Jul 2027, in 8 months	Through its disclosure duty. What it requires
Nevada	AB 73 (2025), AI-manipulated media disclosure in paid political communications	Through its disclosure duty. What it requires
New Mexico	HB 182 (2024), AI-generated and manipulated media disclosure and disclaimer requirements in campaign advertising	Through its disclosure duty. What it requires
North Dakota	House Bill 1167 (2025), AI-generated political content disclosure	Through its disclosure duty. What it requires
Ohio	S.B. 163, AI-Generated Content Watermark and Provenance Mandate proposed	Through its disclosure duty. What it requires
Oregon	AI Companion Chatbot Safety Act (SB 1546) from 1 Jan 2027, in 2 months	Through its disclosure duty. What it requires
Oregon	Campaign communication disclosure of synthetic media (SB 1571)	Through its disclosure duty. What it requires
Pennsylvania	S.B. 1090, SAFECHAT Act proposed	Through its disclosure duty. What it requires
Pennsylvania	S.B. 806, Artificial Intelligence Deceptive Advertising Act proposed	Through its disclosure duty. What it requires
Puerto Rico	AI disclosure in political advertising and electoral communications	Through its disclosure duty. What it requires
Slovenia	Media Act (ZMed-1), Articles 66 and 67, Labelling of AI-Generated Media Content and Publisher Responsibility	Through its disclosure duty. What it requires
Texas	TRAIGA (H.B. 149, 2025), consumer AI-interaction disclosure duty	Through its disclosure duty. What it requires
Turkey	Commercial Advertising Regulation, AI Disclosure Duty	Through its disclosure duty. What it requires
United States	AI Labeling Act of 2026 proposed	Through its disclosure duty. What it requires
United States	FCC AI Political Ad Disclosure Rulemaking, Docket 24-211 proposed	Through its disclosure duty. What it requires
Utah	Digital Content Provenance Standards Act (HB 276, 2026 General Session), Utah Code Title 13 Chapter 72c from 1 Jan 2027, in 2 months	Through its disclosure duty. What it requires
Vermont	Vermont Synthetic Media in Elections Act	Through its disclosure duty. What it requires

AI sector rules

18 laws, 13 jurisdictions

Jurisdiction	Law	How it reaches this provision
Alabama	SB 63 (2026), Artificial Intelligence in Health Insurance Prior Authorization	Through its disclosure duty. What it requires
California	Attorney, Court Filing and Arbitrator Generative AI Duties (SB 574) from 1 Jan 2027, in 2 months	Through its disclosure duty. What it requires
California	Employment Automated Decision Systems Act (SB 947) from 1 Jul 2027, in 8 months	Through its disclosure duty. What it requires
California	Employment Technological Displacement Notice (SB 951) from 1 Jan 2027, in 2 months	Through its disclosure duty. What it requires
California	Healthcare AI Patient-Communication Disclosure Act (AB 3030)	Through its disclosure duty. What it requires
Colorado	HB 26-1195 (2026), Psychotherapy Artificial Intelligence Restrictions	Through its disclosure duty. What it requires
Croatia	Consumer Credit Act, Articles 24 and 30, Personalised Offers and Creditworthiness Assessment by Automated Processing from 20 Nov 2026, in 4 weeks	Through its disclosure duty. What it requires
Croatia	Labour Act, Articles 221.g to 221.i, Algorithmic Management of Work Through Digital Labour Platforms	Through its disclosure duty. What it requires
Illinois	Illinois Human Rights Act, use of artificial intelligence in employment decisions	Through its disclosure duty. What it requires
Jordan	Central Bank of Jordan Artificial Intelligence Framework for the Banking Sector, Version 1.0	Through its disclosure duty. What it requires

Show the other 8 laws

Mauritius	Financial Services (Robotic and Artificial Intelligence Enabled Advisory Services) Rules 2021	Through its disclosure duty. What it requires
Mauritius	FSC Fintech Series Guidance Notes 4, responsible use of artificial intelligence in financial services	Through its disclosure duty. What it requires
Michigan	Michigan DIFS Bulletin 2026-03-BT/CF/CU, Use of Artificial Intelligence Systems by Financial Service Providers	Through its disclosure duty. What it requires
Ontario	Employment Standards Act, 2000, use of artificial intelligence in job postings	Through its disclosure duty. What it requires
Sweden	Consumer Credit Act (2026:1011), Chapter 2 Section 7 and Chapter 3 Section 15, Personalised Offers and Credit Assessment by Automated Processing from 20 Nov 2026, in 4 weeks	Through its disclosure duty. What it requires
Texas	S.B. 1188 (2025), AI diagnostic disclosure duty in electronic health records	Through its disclosure duty. What it requires
United Arab Emirates	Guidance Note on the Consumer Protection and Responsible Adoption and Use of Artificial Intelligence and Machine Learning by Licensed Financial Institutions in the U.A.E.	Through its disclosure duty. What it requires
Utah	Health Insurance Preauthorization AI Disclosure (SB 319, 2026 General Session) from 1 Jan 2027, in 2 months	Through its disclosure duty. What it requires

AI risk obligations

10 laws, 7 jurisdictions

Jurisdiction	Law	How it reaches this provision
California	CCPA Automated Decisionmaking Technology Regulations	Through its disclosure duty. What it requires
California	Clinical Decision Support Systems Bias Mitigation Act (SB 503) from 1 Jan 2027, in 2 months	Through its disclosure duty. What it requires
European Union	AI Act, Article 13 (transparency and provision of information to deployers) from 2 Dec 2027, in 13 months	Through its disclosure duty. What it requires
European Union	AI Act, Article 26(11) (informing individuals subject to an Annex III decision) from 2 Dec 2027, in 13 months	Through its disclosure duty. What it requires
European Union	AI Act, Article 26(7) (informing workers before workplace use) from 2 Dec 2027, in 13 months	Through its disclosure duty. What it requires
Georgia	Council of Europe Framework Convention on AI, Georgia's signature proposed	Through its disclosure duty. What it requires
Indiana	Downcoding of Health Benefits Claims, automated and AI decision-making (House Enrolled Act 1271, 2026)	Through its disclosure duty. What it requires
Nebraska	Ensuring Transparency in Prior Authorization Act, artificial-intelligence utilization review restriction	Through its disclosure duty. What it requires
Peru	Reglamento de la Ley 31814, high-risk AI system duties	Through its disclosure duty. What it requires
South Korea	AI Framework Act, Article 34 (business-operator duties for high-impact AI)	Through its disclosure duty. What it requires

AI governance

9 laws, 9 jurisdictions

Jurisdiction	Law	How it reaches this provision
Andorra	Council of Europe Framework Convention on Artificial Intelligence, signed by Andorra proposed	Through its disclosure duty. What it requires
Armenia	Council of Europe Framework Convention on Artificial Intelligence, signed by Armenia proposed	Through its disclosure duty. What it requires
California	Transparency in Frontier Artificial Intelligence Act (SB 53)	Through its disclosure duty. What it requires
Canada	Council of Europe Framework Convention on Artificial Intelligence, signed by Canada proposed	Through its disclosure duty. What it requires
Illinois	Artificial Intelligence Safety Measures Act from 1 Jan 2027, in 2 months	Through its disclosure duty. What it requires
Latvia	Law on Digital Operational Resilience of the Financial Market and the Use of Artificial Intelligence, Articles 7, 8(5)-(7), 10(3)-(4) and 11(2)	Through its disclosure duty. What it requires
Moldova	Council of Europe Framework Convention on Artificial Intelligence, signed by Moldova proposed	Through its disclosure duty. What it requires
Portugal	Portuguese Charter of Human Rights in the Digital Era, Article 9, Use of Artificial Intelligence and Robots	Through its disclosure duty. What it requires
United Kingdom	Council of Europe Framework Convention on Artificial Intelligence, signed by the United Kingdom proposed	Through its disclosure duty. What it requires

Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI. Every provision of the framework.