Law / Frameworks / NIST AI RMF / Govern
NIST AI RMF, GovernGOVERN 3.2
Policies and procedures are in place to define and differentiate roles and responsibilities for human-AI configurations and oversight of AI systems.NIST AI Risk Management Framework, version 1.0, January 2023 (NIST AI 100-1), GOVERN 3.2
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
- 5
- laws
- 2
- jurisdictions
- 0
- with court rulings behind them
- 3
- not yet in force
A law in force is unmarked; the rest wear their state: not yet in force
AI risk obligations
2 laws, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 European Union |
AI Act, Article 14 (human oversight) from , in 13 months |
If you are a deployer of a high-risk AI system, assign human oversight to natural persons who have the necessary competence, training and authority, as well as the necessary support. |
| European Union |
AI Act, Article 26(1) to (5) (deployer use, human oversight, input data and monitoring) from , in 13 months |
If you are the deployer of a high-risk AI system, assign its human oversight to natural persons who have the necessary competence, training and authority, and give them the necessary support. |
AI sector rules
2 laws, 2 jurisdictions| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
| European Union |
EBA Guidelines on loan origination and monitoring (EBA/GL/2020/06), automated models and model governance |
The credit decision-making framework should clearly articulate the decision-making powers and limitations of each decision-maker and of any automated models for credit decision-making purposes, in line with the criteria for such models set out in Section 4.3.4 (paragraph 65). |
 United Arab Emirates |
Model Management Standards: governance, validation and monitoring of the models a bank uses to decide, including artificial intelligence models |
Establish a clear, approved and controlled policy to govern overrides of model results, which applies to all models (Section 3.5.3). |
Data subject rights
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
| European Union |
Platform Work Directive, Transparency, Human Oversight and Human Review of Automated Systems (Articles 9 to 11) from , in 3 weeks |
Ensure sufficient human resources for the effective oversight and evaluation of the impact of those decisions, and give the persons charged with that function the competence, training and authority necessary to exercise it, including for overriding automated decisions (Article 10(2)). |
Full text of the NIST AI Risk Management Framework, public domain (a US government work). Every control of the framework.