Law / Frameworks / NIST AI RMF / Map
NIST AI RMF, MapMAP 1.1
Intended purposes, potentially beneficial uses, context-specific laws, norms and expectations, and prospective settings in which the AI system will be deployed are understood and documented. Considerations include: the specific set or types of users along with their expectations; potential positive and negative impacts of system uses to individuals, communities, organizations, society, and the planet; assumptions and related limitations about AI system purposes, uses, and risks across the development or product AI lifecycle; and related TEVV and system metrics.NIST AI Risk Management Framework, version 1.0, January 2023 (NIST AI 100-1), MAP 1.1
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
- 3
- laws
- 2
- jurisdictions
- 0
- with court rulings behind them
- 2
- not yet in force
A law in force is unmarked; the rest wear their state: not yet in force
AI sector rules
2 laws, 2 jurisdictions| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 European Union |
Toy Safety Regulation, Safety Assessment of Toys Within the Scope of the AI Act (Article 25(2), Point (c)) from , in 3.7 years |
If you are a manufacturer of a toy that falls within the scope of Regulation (EU) 2024/1689, Regulation (EU) 2024/2847 or Directive 2014/53/EU, take account of the particular vulnerabilities of children in relation to the intended use of the toy when your safety assessment assesses and addresses its hazards, and include that assessment in the technical documentation (Article 25(2), point (c), and Article 25(3)). |
 United Kingdom |
Artificial Intelligence (AI) update |
The FCA says a firm should consider its obligations under the Consumer Duty when it uses AI, because AI can raise risks for consumers, for example where AI in risk assessments leaves some customers worse off or excludes them from the market (paragraph 3.25). |
AI risk obligations
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
| European Union |
AI Act, Article 27 (fundamental rights impact assessment) from , in 13 months |
Cover in that assessment: your intended process for using the system, the period and frequency of use, the categories of people likely affected, the specific risks of harm to them, your human oversight measures, and the steps you would take if those risks materialise, including complaint and internal-governance arrangements. |
Full text of the NIST AI Risk Management Framework, public domain (a US government work). Every control of the framework.