LexLint.ioBeta

Know the law your code answers to.

Law / Frameworks / OWASP LLM Top 10

OWASP LLM Top 10 LLM02:2026Sensitive Information Disclosure

Sensitive information disclosure occurs when an LLM-integrated system exposes confidential, regulated, privileged, or proprietary data through a channel the data subject, controller, or system owner did not authorize. The channel is not only the final answer: tool-call arguments, reasoning traces, retrieved chunks, multimodal output, logs, telemetry, embeddings, and observable inference properties (timing, token length, log-probabilities, confidence, cache-hit behavior) are all disclosure surfaces. Treat each as an output subject to the same classification and redaction rules.OWASP Top 10 for LLM Applications, 2026 edition, August 2026, LLM02:2026

We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .

The kinds of duty that reach it: security.

4
laws
3
jurisdictions
0
with court rulings behind them
1
not yet in force
1
proposed, not law

Related controls in other frameworks the same duties, in at least two laws we track, reach both

A law in force is unmarked; the rest wear their state: not yet in force proposed

  • European Union
  • Italy

AI risk obligations

2 laws, 2 jurisdictions
JurisdictionLawHow it reaches this control
European Union AI Act, Article 15 (accuracy, robustness and cybersecurity) from , in 13 months

Through its security duty. What it requires
Italy Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them

Through its security duty. What it requires

AI sector rules

1 law, 1 jurisdiction
JurisdictionLawHow it reaches this control
European Union MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6)

Through its security duty. What it requires

AI transparency

1 law, 1 jurisdiction
JurisdictionLawHow it reaches this control
New York City Chatbot Data Privacy, Security, and Transparency proposed

Through its security duty. What it requires

Excerpts of the OWASP Top 10 for LLM Applications, CC BY-SA 4.0. OWASP GenAI Security Project, OWASP Top 10 for LLM Applications 2026, licensed CC BY-SA 4.0. Excerpted: only the first paragraph of each entry's Description is reproduced, verbatim. Every control of the framework.