Law / Frameworks / NIST AI RMF / Govern

NIST AI RMF, GovernGOVERN 4.1

Organizational policies and practices are in place to foster a critical thinking and safety-first mindset in the design, development, deployment, and uses of AI systems to minimize potential negative impacts.NIST AI Risk Management Framework, version 1.0, January 2023 (NIST AI 100-1), GOVERN 4.1

We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Corpus as of 29 Sep 2026.

3: laws
3: places
0: with court rulings behind them
2: not yet in force

A law in force is unmarked; the rest wear their state: not yet in force

AI governance

3 laws, 3 places

Place	Law	What it asks, as read here
California	Transparency in Frontier Artificial Intelligence Act (SB 53)	Do not retaliate against a covered employee who discloses, in good faith and with reasonable cause, that your activities pose a catastrophic-risk danger to public health or safety or that you violated this Act; if you are a large frontier developer, also provide an internal channel for anonymous disclosure of that kind
Connecticut	Frontier Developer Catastrophic-Risk Whistleblower Protections from 1 Oct 2026, in 2 days	If you are a frontier developer, do not retaliate against a covered employee for reporting a reasonable, good-faith belief that your activity poses a specific and substantial danger to public health or safety through a catastrophic risk. Give covered employees notice of their rights under this section, at hiring and periodically afterward.
Illinois	Artificial Intelligence Safety Measures Act from 1 Jan 2027, in 3 months	Do not adopt or enforce a rule, policy or contract that stops a covered employee disclosing, and do not retaliate against a covered employee for disclosing, information they have reasonable cause to believe shows that your activities pose a specific and substantial danger to public health or safety from a catastrophic risk, or that you violated the Act.

Place

Law

What it asks, as read here

California

Transparency in Frontier Artificial Intelligence Act (SB 53)

Do not retaliate against a covered employee who discloses, in good faith and with reasonable cause, that your activities pose a catastrophic-risk danger to public health or safety or that you violated this Act; if you are a large frontier developer, also provide an internal channel for anonymous disclosure of that kind

Connecticut

Frontier Developer Catastrophic-Risk Whistleblower Protections from 1 Oct 2026, in 2 days

If you are a frontier developer, do not retaliate against a covered employee for reporting a reasonable, good-faith belief that your activity poses a specific and substantial danger to public health or safety through a catastrophic risk.

Give covered employees notice of their rights under this section, at hiring and periodically afterward.

Illinois

Artificial Intelligence Safety Measures Act from 1 Jan 2027, in 3 months

Do not adopt or enforce a rule, policy or contract that stops a covered employee disclosing, and do not retaliate against a covered employee for disclosing, information they have reasonable cause to believe shows that your activities pose a specific and substantial danger to public health or safety from a catastrophic risk, or that you violated the Act.

Full text of the NIST AI Risk Management Framework, public domain (a US government work). Every control of the framework.