Law / Frameworks / NIST AI RMF / Govern

NIST AI RMF, GovernGOVERN 2.2

The organization’s personnel and partners receive AI risk management training to enable them to perform their duties and responsibilities consistent with related policies, procedures, and agreements.NIST AI Risk Management Framework, version 1.0, January 2023 (NIST AI 100-1), GOVERN 2.2

We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of 14 Nov 2026.

3: laws
2: jurisdictions
0: with court rulings behind them
0: not yet in force

AI governance

2 laws, 1 jurisdiction

Jurisdiction	Law	What it asks, as read here
European Union	AI Act, Article 4 (AI literacy)	Take measures to support the development of AI literacy among your staff and other people who operate or use AI systems on your behalf, if you are a provider or deployer of an AI system, taking into account their technical knowledge, experience, education and training, the context the AI systems are to be used in, and the persons or groups of persons the AI systems are to be used on.
European Union	AI Literacy - Questions & Answers, the European Commission's reading of Article 4 of the AI Act	Providers and deployers of AI systems should take measures to support the development of AI literacy of their staff and of other persons dealing with the operation and use of AI systems on their behalf, who are not employees but persons broadly under the organizational remit, such as a contractor, a service provider or a client (the page's answers on Article 4(1) and on the target group). Providers and deployers should consider at least four steps in building AI literacy actions: a general understanding of AI within the organization, the organization's role as provider or deployer, the risk of the AI systems provided or deployed, and actions built on that analysis that account for differences in technical knowledge, experience, education and training and for the context of use (the page's answer on the minimum content of a program). +1 more

Jurisdiction

Law

What it asks, as read here

European Union

AI Act, Article 4 (AI literacy)

Take measures to support the development of AI literacy among your staff and other people who operate or use AI systems on your behalf, if you are a provider or deployer of an AI system, taking into account their technical knowledge, experience, education and training, the context the AI systems are to be used in, and the persons or groups of persons the AI systems are to be used on.

European Union

AI Literacy - Questions & Answers, the European Commission's reading of Article 4 of the AI Act

Providers and deployers of AI systems should take measures to support the development of AI literacy of their staff and of other persons dealing with the operation and use of AI systems on their behalf, who are not employees but persons broadly under the organizational remit, such as a contractor, a service provider or a client (the page's answers on Article 4(1) and on the target group).

Providers and deployers should consider at least four steps in building AI literacy actions: a general understanding of AI within the organization, the organization's role as provider or deployer, the risk of the AI systems provided or deployed, and actions built on that analysis that account for differences in technical knowledge, experience, education and training and for the context of use (the page's answer on the minimum content of a program).

+1 more

AI risk obligations

1 law, 1 jurisdiction

Jurisdiction	Law	What it asks, as read here
Italy	Decreto Legislativo 160/2026, Police Use of AI Systems: Human Review, Oversight, Collaborations, Sandbox Basis and Training (Artt. 3-6, 21)	If you are a police force, run courses on AI applied to police activity in your training institutes (art. 6, comma 1).

Full text of the NIST AI Risk Management Framework, public domain (a US government work). Every control of the framework.