Law / Frameworks / MIT mitigations Draft / Transparency & Accountability Controls
MIT mitigations 4.4Governance Disclosure
Formal disclosure mechanisms that communicate governance structures, decision frameworks, and safety commitments to enhance transparency and enable external oversight of high-stakes AI decisions.MIT AI Risk Mitigation Taxonomy, preliminary taxonomy, July 2025, 4.4
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
The kinds of duty that reach it: licensing.
- 4
- laws
- 3
- jurisdictions
- 0
- with court rulings behind them
- 2
- not yet in force
Related controls in other frameworks the same duties, in at least two laws we track, reach both
- NIST AI RMFGOVERN 1.1 Legal and regulatory requirements involving AI are understood, managed, and..., 4 laws
- NIST AI 600-1GAI-RISK-10 Intellectual Property, 4 laws
- NIST AI 600-1GAI-RISK-07 Human-AI Configuration, 3 laws
- NIST AI 200-22.3 Apply & Measure, 3 laws
- NIST AI 200-24.3 Composing a TEVV Toolbox, 3 laws
- OWASP LLM Top 10LLM03:2026 Excessive Agency, 3 laws
- OWASP Agentic Top 10ASI09 Human-Agent Trust Exploitation, 3 laws
- FINOS AIGFAIR-PREV-005 System Acceptance Testing, 3 laws
- FINOS AIGFAIR-PREV-006 Data Quality & Classification/Sensitivity, 3 laws
- FINOS AIGFAIR-PREV-024 Human-in-the-Loop Action Approval Gate, 3 laws
- 3 more in the FINOS AIGF
- ETSI EN 304 2235.1.4-1 Capability for human oversight designed in and maintained., 3 laws
- ETSI EN 304 2235.2.1-1 Full inventory of assets, including their dependencies and connections., 3 laws
- ETSI EN 304 2235.2.4-1 Developers keep an audit trail of system design and post-deployment..., 3 laws
- 1 more in the ETSI EN 304 223
A law in force is unmarked; the rest wear their state: not yet in force
AI governance
2 laws, 2 jurisdictions| Jurisdiction | Law | How it reaches this control |
|---|---|---|
 European Union |
AI Act, Article 26(8) (public-authority deployer registration) from , in 13 months |
Through its licensing duty. What it requires |
 Vanuatu |
Digital Transformation Act 2025, ICT service permit for AI and AI-related data services |
Through its licensing duty. What it requires |
AI risk obligations
1 law, 1 jurisdiction| Jurisdiction | Law | How it reaches this control |
|---|---|---|
| European Union |
AI Act, Article 16 (obligations of providers of high-risk AI systems) from , in 13 months |
Through its licensing duty. What it requires |
AI sector rules
1 law, 1 jurisdiction| Jurisdiction | Law | How it reaches this control |
|---|---|---|
 Mauritius |
Financial Services (Robotic and Artificial Intelligence Enabled Advisory Services) Rules 2021 |
Through its licensing duty. What it requires |
Full text of the MIT AI Risk Mitigation Taxonomy, CC BY 4.0. MIT AI Risk Initiative (MIT FutureTech), AI Risk Mitigation Taxonomy. Data from the MIT AI Risk Initiative is licensed under CC BY 4.0. Cite as: Mapping AI Risk Mitigations: Evidence Scan & Draft Mitigation Taxonomy Every control of the framework.