Law / Frameworks / MIT mitigations Draft / Governance & Oversight Controls

MIT mitigations 1.7Societal Impact Assessment

Processes that assess AI systems' effects on society, including impacts on employment, power dynamics, political processes, and cultural values.MIT AI Risk Mitigation Taxonomy, preliminary taxonomy, July 2025, 1.7

We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of 14 Nov 2026.

The kinds of duty that reach it: DPIA.

14: laws
12: jurisdictions
0: with court rulings behind them
2: not yet in force
6: proposed, not law

Related controls in other frameworks the same duties, in at least two laws we track, reach both

NIST AI RMFMAP 5.1 Likelihood and magnitude of each identified impact (both potentially..., 10 laws
NIST AI RMFMANAGE 1.3 Responses to the AI risks deemed high priority, as identified by the MAP..., 5 laws
NIST AI RMFMEASURE 2.10 Privacy risk of the AI system – as identified in the MAP function – is..., 4 laws
NIST AI 600-1GAI-RISK-04 Data Privacy, 14 laws
NIST AI 200-22.4 Synthesize & Interrogate, 14 laws
FINOS AIGFAIR-PREV-005 System Acceptance Testing, 14 laws
ETSI EN 304 2235.1.2-1 Business need and security risks written down and assessed before deciding..., 14 laws
ETSI EN 304 2235.1.3-1 Threat modelling and risk management, reviewed regularly and covering..., 14 laws

A law in force is unmarked; the rest wear their state: not yet in force proposed

AI governance

7 laws, 7 jurisdictions

Jurisdiction	Law	How it reaches this control
Andorra	Council of Europe Framework Convention on Artificial Intelligence, signed by Andorra proposed	Through its DPIA duty. What it requires
Armenia	Council of Europe Framework Convention on Artificial Intelligence, signed by Armenia proposed	Through its DPIA duty. What it requires
Canada	Council of Europe Framework Convention on Artificial Intelligence, signed by Canada proposed	Through its DPIA duty. What it requires
El Salvador	Ley de Fomento a la Inteligencia Artificial y Tecnologías, marco institucional, registro y evaluación de riesgos	Through its DPIA duty. What it requires
European Union	AI Act, Article 26(9) (using Article 13 information for a data protection impact assessment) from 2 Dec 2027, in 13 months	Through its DPIA duty. What it requires
Moldova	Council of Europe Framework Convention on Artificial Intelligence, signed by Moldova proposed	Through its DPIA duty. What it requires
United Kingdom	Council of Europe Framework Convention on Artificial Intelligence, signed by the United Kingdom proposed	Through its DPIA duty. What it requires

AI risk obligations

4 laws, 4 jurisdictions

Jurisdiction	Law	How it reaches this control
European Union	AI Act, Article 27 (fundamental rights impact assessment) from 2 Dec 2027, in 13 months	Through its DPIA duty. What it requires
Italy	Decreto Legislativo 160/2026, After-the-Fact Facial Recognition Integrated in Video Surveillance (Art. 10)	Through its DPIA duty. What it requires
Kyrgyzstan	Digital Code, Chapter 23: AI system design and risk-management obligations	Through its DPIA duty. What it requires
New Jersey	AI-based electronic monitoring and automated employment decision systems in employment and public services (S4075 / A4981) proposed	Through its DPIA duty. What it requires

AI prohibited practices

1 law, 1 jurisdiction

Jurisdiction	Law	How it reaches this control
Italy	Decreto Legislativo 160/2026, Police Biometric AI: Dataset Labelling and Real-Time Remote Identification (Artt. 7-9, 13)	Through its DPIA duty. What it requires

AI sector rules

1 law, 1 jurisdiction

Jurisdiction	Law	How it reaches this control
Mauritius	FSC Fintech Series Guidance Notes 4, responsible use of artificial intelligence in financial services	Through its DPIA duty. What it requires

AI training data

1 law, 1 jurisdiction

Jurisdiction	Law	How it reaches this control
Hungary	Act XLVII of 1997 on Health Data, Section 35/A(4) to (8), Conditions for AI Development on Electronic Health Service Space Data	Through its DPIA duty. What it requires

Full text of the MIT AI Risk Mitigation Taxonomy, CC BY 4.0. MIT AI Risk Initiative (MIT FutureTech), AI Risk Mitigation Taxonomy. Data from the MIT AI Risk Initiative is licensed under CC BY 4.0. Cite as: Mapping AI Risk Mitigations: Evidence Scan & Draft Mitigation Taxonomy Every control of the framework.