Law / Frameworks / MIT mitigations / Transparency & Accountability Controls

MIT mitigations 4.6User Rights & Recourse

Frameworks and procedures that enable users to identify and understand AI system interactions, report issues, request explanations, and seek recourse or remediation when affected by AI systems.MIT AI Risk Mitigation Taxonomy, preliminary taxonomy, July 2025, 4.6

We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Corpus as of 29 Sep 2026.

The kinds of duty that reach it: content labelling, data subject rights, design code, disclosure.

66: laws
42: places
2: with court rulings behind them
13: not yet in force
1: blocked by a court
9: proposed, not law

The same ground elsewhere linked through the kinds of duty both controls are mapped from

NIST AI RMFGOVERN 4.2 Organizational teams document the risks and potential impacts of the AI technology...
NIST AI RMFMEASURE 2.8 Risks associated with transparency and accountability – as identified in the MAP...
NIST AI 600-1GAI-RISK-07 Human-AI Configuration
NIST AI 600-1GAI-RISK-08 Information Integrity
OWASP Agentic Top 10ASI09 Human-Agent Trust Exploitation
NIST Privacy FrameworkID.RA-P1 Contextual factors related to the systems/products/services and the data actions are...
NIST Privacy FrameworkGV.PO-P2 Processes to instill organizational privacy values within system/product/service...
NIST CSF 2.0RS.CO-02 Internal and external stakeholders are notified of incidents
NIST CSF 2.0RC.CO-04 Public updates on incident recovery are shared using approved methods and messaging

A law in force is unmarked; the rest wear their state: not yet in force blocked by a court proposed

AI transparency

45 laws, 34 places

Place	Law	How it reaches this control
Alabama	Distribution of Materially Deceptive Media to Influence an Upcoming Election	Through its content labelling, disclosure duties. What it requires
Belize	Practice Direction No. 18 of 2025, ethical use of generative AI in court proceedings	Through its disclosure duty. What it requires
Brazil	TSE Resolution, AI-Generated Content Disclosure Duty	Through its content labelling duty. What it requires
California	AB 2839, election materially deceptive deepfake disclaimer law blocked by a court	Through its content labelling duty. What it requires
California	AB 730, as extended by AB 972, election deepfake disclosure law	Through its content labelling duty. What it requires
California	California AI Transparency Act (SB 942, as amended by AB 853)	Through its content labelling, disclosure duties. What it requires
California	Companion Chatbot Safety and Accountability Act (SB 243)	Through its disclosure duty. What it requires
Colorado	HB 26-1263 (2026), Conversational AI Service Operator Requirements from 1 Jan 2027, in 3 months	Through its content labelling, design code duties. What it requires
Delaware	House Bill 306 (pending), Computer Communication Act proposed	Through its disclosure duty. What it requires
European Union	AI Act, Article 50 (transparency obligations for AI systems and synthetic content)	Through its content labelling, disclosure duties. What it requires

Show the other 35 laws

European Union	Digital Services Act, Article 35(1)(k) (systemic risk mitigation, synthetic media marking)	Through its content labelling duty. What it requires
Gabon	Ordonnance n°0011/PR/2026, marquage des contenus générés par intelligence artificielle	Through its content labelling duty. What it requires
Greece	Law 5321/2026, National AI Act Implementation Law	Through its content labelling duty. What it requires
Idaho	Conversational AI Safety Act from 1 Jul 2027, in 9 months	Through its content labelling, design code duties. What it requires
Idaho	FAIR Elections Act, disclosure duty for synthetic media in electioneering communications	Through its content labelling duty. What it requires
Idaho	Generative Artificial Intelligence in Education Act, vendor disclosure duty	Through its disclosure duty. What it requires
Illinois	Artificial Intelligence Video Interview Act	Through its disclosure duty. What it requires
Indiana	Use of Digitally Altered Media in Elections (House Enrolled Act 1133, 2024)	Through its content labelling, disclosure duties. What it requires
Iowa	Conversational AI Services Act (Senate File 2417) from 1 Jul 2027, in 9 months	Through its content labelling, design code duties. What it requires
Jamaica	Practice Direction No. 1 of 2025, Use of Generative Artificial Intelligence in Court Proceedings	Through its disclosure duty. What it requires
Kentucky	Synthetic Media Disclosure in Electioneering Communications	Through its content labelling, disclosure duties. What it requires
Kyrgyzstan	Digital Code, Chapter 23: AI interaction and deepfake disclosure duties	Through its content labelling, disclosure duties. What it requires
Louisiana	Act 250 (HB 178), attorney duty to verify and disclose AI-generated evidence	Through its disclosure duty. What it requires
Louisiana	Act 559 (HB 639), AI-generated voice telephone campaign communication disclosure	Through its content labelling duty. What it requires
Louisiana	Act 806 (HB 459), AI-manipulated electioneering communication disclosure	Through its content labelling duty. What it requires
Maine	Synthetic media disclosure in campaign advertising from a date not yet set	Through its content labelling duty. What it requires
Michigan	AI-Generated Political Advertisement and Robocall Disclosure (Public Act 263 of 2023)	Through its content labelling, disclosure duties. What it requires
Michigan	Distribution of Materially Deceptive Election Media (Public Act 265 of 2023)	Through its content labelling duty. What it requires
Nebraska	Conversational Artificial Intelligence Safety Act (LB 525, §§ 12-18) from 1 Jul 2027, in 9 months	Through its content labelling, disclosure duties. What it requires
Nevada	AB 73 (2025), AI-manipulated media disclosure in paid political communications	Through its content labelling, disclosure duties. What it requires
New Mexico	HB 182 (2024), AI-generated and manipulated media disclosure and disclaimer requirements in campaign advertising	Through its content labelling, disclosure duties. What it requires
North Dakota	House Bill 1167 (2025), AI-generated political content disclosure	Through its content labelling, disclosure duties. What it requires
Ohio	S.B. 163, AI-Generated Content Watermark and Provenance Mandate proposed	Through its content labelling, disclosure duties. What it requires
Oregon	AI Companion Chatbot Safety Act (SB 1546) from a date not yet set	Through its content labelling, design code, disclosure duties. What it requires
Oregon	Campaign communication disclosure of synthetic media (SB 1571)	Through its content labelling, disclosure duties. What it requires
Pennsylvania	S.B. 1090, SAFECHAT Act proposed	Through its disclosure duty. What it requires
Puerto Rico	AI disclosure in political advertising and electoral communications	Through its content labelling, disclosure duties. What it requires
Russia	Federal Law No. 243-FZ, Article 9, AI-Generated Content Notice from 1 Mar 2027, in 5 months	Through its content labelling duty. What it requires
Texas	TRAIGA (H.B. 149, 2025), consumer AI-interaction disclosure duty	Through its disclosure duty. What it requires
Turkey	Commercial Advertising Regulation, AI Disclosure Duty	Through its content labelling, disclosure duties. What it requires
United States	AI Labeling Act of 2026 proposed	Through its content labelling, disclosure duties. What it requires
United States	FCC AI Political Ad Disclosure Rulemaking, Docket 24-211 proposed	Through its content labelling, disclosure duties. What it requires
Utah	Digital Content Provenance Standards Act (HB 276, 2026 General Session), Utah Code Title 13 Chapter 72c from 1 Jan 2027, in 3 months	Through its content labelling, disclosure duties. What it requires
Vermont	Vermont Synthetic Media in Elections Act	Through its disclosure duty. What it requires
Wisconsin	2023 Wisconsin Act 123, AI-Generated Content Disclosure in Political Communications	Through its content labelling duty. What it requires

AI risk obligations

9 laws, 7 places

Place	Law	How it reaches this control
California	CCPA Automated Decisionmaking Technology Regulations	Through its data subject rights, disclosure duties. What it requires
European Union	AI Act, Article 26(11) (informing individuals subject to an Annex III decision) from 2 Dec 2027, in 14 months	Through its disclosure duty. What it requires
European Union	AI Act, Article 26(7) (informing workers before workplace use) from 2 Dec 2027, in 14 months	Through its disclosure duty. What it requires
European Union	AI Act, Article 86 (right to explanation of individual decision-making)	Through its data subject rights duty. What it requires
Georgia	Council of Europe Framework Convention on AI, Georgia's signature proposed	Through its disclosure duty. What it requires
Indiana	Downcoding of Health Benefits Claims, automated and AI decision-making (House Enrolled Act 1271, 2026)	Through its disclosure duty. What it requires
Nebraska	Ensuring Transparency in Prior Authorization Act, artificial-intelligence utilization review restriction	Through its disclosure duty. What it requires
Peru	Reglamento de la Ley 31814, high-risk AI system duties	Through its disclosure duty. What it requires
South Korea	AI Framework Act, Article 34 (business-operator duties for high-impact AI)	Through its disclosure duty. What it requires

AI governance

6 laws, 6 places

Place	Law	How it reaches this control
Andorra	Council of Europe Framework Convention on Artificial Intelligence, signed by Andorra proposed	Through its disclosure duty. What it requires
Armenia	Council of Europe Framework Convention on Artificial Intelligence, signed by Armenia proposed	Through its disclosure duty. What it requires
California	Transparency in Frontier Artificial Intelligence Act (SB 53)	Through its disclosure duty. What it requires
Illinois	Artificial Intelligence Safety Measures Act from 1 Jan 2027, in 3 months	Through its disclosure duty. What it requires
Moldova	Council of Europe Framework Convention on Artificial Intelligence, signed by Moldova proposed	Through its disclosure duty. What it requires
Vatican City	Guidelines on Artificial Intelligence of Vatican City State (Decree No. DCCII)	Through its content labelling duty. What it requires

AI sector rules

6 laws, 6 places

Place	Law	How it reaches this control
Alabama	SB 63 (2026), Artificial Intelligence in Health Insurance Prior Authorization from 1 Oct 2026, in 2 days	Through its disclosure duty. What it requires
California	Healthcare AI Patient-Communication Disclosure Act (AB 3030)	Through its disclosure duty. What it requires
Illinois	Illinois Human Rights Act, use of artificial intelligence in employment decisions	Through its disclosure duty. What it requires
Ontario	Employment Standards Act, 2000, use of artificial intelligence in job postings	Through its disclosure duty. What it requires
Texas	S.B. 1188 (2025), AI diagnostic disclosure duty in electronic health records	Through its disclosure duty. What it requires
Utah	Health Insurance Preauthorization AI Disclosure (SB 319, 2026 General Session) from 1 Jan 2027, in 3 months	Through its disclosure duty. What it requires

Full text of the MIT AI Risk Mitigation Taxonomy, CC BY 4.0. MIT AI Risk Initiative (MIT FutureTech), AI Risk Mitigation Taxonomy, https://airisk.mit.edu/ai-risk-mitigations. Data from the MIT AI Risk Initiative is licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Cite as: Mapping AI Risk Mitigations: Evidence Scan & Draft Mitigation Taxonomy, https://airisk.mit.edu/blog/mapping-ai-risk-mitigations Every control of the framework.