Law / Frameworks / NIST AI 200-2 Draft / The TEVV-Athlon Framework

NIST AI 200-2 2.4Synthesize & Interrogate

Finally, evaluators will analyze the collected data to synthesize information from the TEVV-Athlon and generate relevant insights for the organization. The synthesis of results determines how the information gathered through the evaluation influences organizational decisions regarding the assessed AI system.NIST TEVV-Athlon Framework for Evaluating AI Systems, initial public draft, August 2026 (NIST AI 200-2 ipd), 2.4

We read each law below as bearing on this step. That does not mean the step, done well, meets the law: what each law asks is on its own page. Law library as of 19 Oct 2026.

The kinds of duty that reach it: DPIA.

13: laws
11: jurisdictions
0: with court rulings behind them
2: not yet in force
5: proposed, not law

Related controls in other frameworks the same duties, in at least two laws we track, reach both

NIST AI RMFMAP 5.1 Likelihood and magnitude of each identified impact (both potentially..., 9 laws
NIST AI RMFMANAGE 1.3 Responses to the AI risks deemed high priority, as identified by the MAP..., 5 laws
NIST AI RMFMEASURE 2.10 Privacy risk of the AI system – as identified in the MAP function – is..., 4 laws
NIST AI 600-1GAI-RISK-04 Data Privacy, 13 laws
MIT mitigations1.2 Risk Management, 13 laws
MIT mitigations1.7 Societal Impact Assessment, 13 laws
MIT mitigations3.1 Testing & Auditing, 13 laws
FINOS AIGFAIR-PREV-005 System Acceptance Testing, 13 laws
ETSI EN 304 2235.1.2-1 Business need and security risks written down and assessed before deciding..., 13 laws
ETSI EN 304 2235.1.3-1 Threat modelling and risk management, reviewed regularly and covering..., 13 laws

A law in force is unmarked; the rest wear their state: not yet in force proposed

AI governance

7 laws, 7 jurisdictions

Jurisdiction	Law	How it reaches this step
Andorra	Council of Europe Framework Convention on Artificial Intelligence, signed by Andorra proposed	Through its DPIA duty. What it requires
Armenia	Council of Europe Framework Convention on Artificial Intelligence, signed by Armenia proposed	Through its DPIA duty. What it requires
Canada	Council of Europe Framework Convention on Artificial Intelligence, signed by Canada proposed	Through its DPIA duty. What it requires
El Salvador	Ley de Fomento a la Inteligencia Artificial y Tecnologías, marco institucional, registro y evaluación de riesgos	Through its DPIA duty. What it requires
European Union	AI Act, Article 26(9) (using Article 13 information for a data protection impact assessment) from 2 Dec 2027, in 13 months	Through its DPIA duty. What it requires
Moldova	Council of Europe Framework Convention on Artificial Intelligence, signed by Moldova proposed	Through its DPIA duty. What it requires
United Kingdom	Council of Europe Framework Convention on Artificial Intelligence, signed by the United Kingdom proposed	Through its DPIA duty. What it requires

AI risk obligations

3 laws, 3 jurisdictions

Jurisdiction	Law	How it reaches this step
European Union	AI Act, Article 27 (fundamental rights impact assessment) from 2 Dec 2027, in 13 months	Through its DPIA duty. What it requires
Italy	Decreto Legislativo 160/2026, After-the-Fact Facial Recognition Integrated in Video Surveillance (Art. 10)	Through its DPIA duty. What it requires
Kyrgyzstan	Digital Code, Chapter 23: AI system design and risk-management obligations	Through its DPIA duty. What it requires

AI prohibited practices

1 law, 1 jurisdiction

Jurisdiction	Law	How it reaches this step
Italy	Decreto Legislativo 160/2026, Police Biometric AI: Dataset Labelling and Real-Time Remote Identification (Artt. 7-9, 13)	Through its DPIA duty. What it requires

AI sector rules

1 law, 1 jurisdiction

Jurisdiction	Law	How it reaches this step
Mauritius	FSC Fintech Series Guidance Notes 4, responsible use of artificial intelligence in financial services	Through its DPIA duty. What it requires

AI training data

1 law, 1 jurisdiction

Jurisdiction	Law	How it reaches this step
Hungary	Act XLVII of 1997 on Health Data, Section 35/A(4) to (8), Conditions for AI Development on Electronic Health Service Space Data	Through its DPIA duty. What it requires

Excerpts of the NIST TEVV-Athlon Framework for Evaluating AI Systems, public domain (a US government work). Every step of the framework.