Law / Frameworks / NIST AI RMF / Govern
NIST AI RMF, GovernGOVERN 1.2
The characteristics of trustworthy AI are integrated into organizational policies, processes, procedures, and practices.NIST AI Risk Management Framework, version 1.0, January 2023 (NIST AI 100-1), GOVERN 1.2
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
- 6
- laws
- 6
- jurisdictions
- 0
- with court rulings behind them
- 0
- not yet in force
- 2
- proposed, not law
A law in force is unmarked; the rest wear their state: proposed
AI governance
2 laws, 2 jurisdictions| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 Portugal |
Portuguese Charter of Human Rights in the Digital Era, Article 9, Use of Artificial Intelligence and Robots |
Guide your use of artificial intelligence by respect for fundamental rights, balancing explainability, security, transparency and responsibility, and set up processes to avoid bias and discrimination (Article 9(1)). |
 Switzerland |
Council of Europe Framework Convention on Artificial Intelligence, Swiss Signature proposed |
Each Party to the Convention must adopt or maintain measures to ensure that activities within the lifecycle of artificial intelligence systems are consistent with its obligations to protect human rights (Article 4), that adequate transparency and oversight requirements are in place (Article 8), that accountability and responsibility for adverse impacts are ensured (Article 9), and that equality and the prohibition of discrimination are respected (Article 10); Article 1(2) has each Party give effect to the Convention through legislative, administrative or other measures. |
AI risk obligations
2 laws, 2 jurisdictions| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 Georgia |
Council of Europe Framework Convention on AI, Georgia's signature proposed |
Comply with the Convention's fundamental principles across an AI system's lifecycle: human dignity and individual autonomy, equality and non-discrimination, respect for privacy and personal data protection, transparency and oversight, accountability and responsibility, reliability, and safe innovation. |
 Uzbekistan |
Law on Informatization, use of artificial intelligence in information resources and systems |
An app that creates an information resource using artificial intelligence, or operates an information system that functions on artificial-intelligence technology, in Uzbekistan must not let that resource or system harm a person's life, health, freedom, honor, or dignity, or violate their other inalienable rights. |
AI sector rules
2 laws, 2 jurisdictions| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 Italy |
Legge 132/2025, Sector Human-Oversight and Disclosure Duties (Artt. 4, 11, 13) |
If you are an employer or client deploying AI in the workplace, inform workers of the AI's use as required by Article 1-bis of Decreto Legislativo 152/1997, and keep the AI's use in employment safe, reliable, transparent, non-discriminatory, and respectful of workers' dignity and personal data (art. 11). |
 United States |
FINRA Regulatory Notice 24-09, FINRA reminds members of regulatory obligations when using generative artificial intelligence and large language models |
FINRA says a firm that uses generative AI tools as part of its supervisory system, such as to review electronic correspondence, should address technology governance in its policies and procedures, including model risk management, data privacy and integrity, and the reliability and accuracy of the AI model (Rule 3110). |
Full text of the NIST AI Risk Management Framework, public domain (a US government work). Every control of the framework.