Law / Frameworks / NIST AI 600-1
NIST Generative AI Profile
Below are its 12 controls in the framework's own order, and under each one the laws we track that bear on it. Each mapping is our reading that a law bears on a control, never a finding that running the control meets the law.
Where the law lands in the framework
8of 12 controls have law557laws198jurisdictions
Of these laws, 465 are in force, 68 not yet in force, 2 blocked by a court, and 22 proposed and not law.
- in force
- not yet in force
- blocked by a court
- proposed
- no law we track
Read through the kinds of duty each AI, scraping and news aggregation law we track carries, counting a kind of duty only where the law's own requirement lines, as read against the NIST AI Risk Management Framework, bear it out.
| Control | What it says | Laws, by state | Laws | Jurisdictions | Not yet in force | Blocked | Proposed |
|---|---|---|---|---|---|---|---|
| GAI-RISK-01 | CBRN Information or Capabilities no law we track | no law we track | |||||
| GAI-RISK-02 | Confabulation no law we track | no law we track | |||||
| GAI-RISK-03 | Dangerous, Violent, or Hateful Content 4 laws, 3 not yet in force | 4 | 4 | 3 | 0 | 0 | |
| GAI-RISK-04 | Data Privacy 32 laws, 9 not yet in force, 8 proposed | 32 | 23 | 9 | 0 | 8 | |
| GAI-RISK-05 | Environmental Impacts no law we track | no law we track | |||||
| GAI-RISK-06 | Harmful Bias or Homogenization no law we track | no law we track | |||||
| GAI-RISK-07 | Human-AI Configuration 169 laws, 46 not yet in force, 1 blocked, 15 proposed | 169 | 80 | 46 | 1 | 15 | |
| GAI-RISK-08 | Information Integrity 289 laws, 37 not yet in force, 2 blocked, 20 proposed | 289 | 132 | 37 | 2 | 20 | |
| GAI-RISK-09 | Information Security 177 laws, 10 not yet in force, 2 proposed | 177 | 121 | 10 | 0 | 2 | |
| GAI-RISK-10 | Intellectual Property 61 laws, 3 not yet in force | 61 | 46 | 3 | 0 | 0 | |
| GAI-RISK-11 | Obscene, Degrading, and/or Abusive Content 202 laws, 18 not yet in force, 2 blocked, 9 proposed | 202 | 113 | 18 | 2 | 9 | |
| GAI-RISK-12 | Value Chain and Component Integration 167 laws, 4 not yet in force | 167 | 115 | 4 | 0 | 0 | |
Where the law and the framework part
4 of the 12 controls have no law we track under them.
The framework's text
Full text of the NIST Generative AI Profile, public domain (a US government work).
Read it from the publisher: nvlpubs.nist.gov