Frameworks are guidance you choose to follow. Regulation is different: it sets requirements that organizations must meet, with penalties when they do not. As AI moves into hiring, credit, healthcare, and public services, more of these rules now apply to the systems you build or buy.
The best-known example is the EU AI Act, which sorts AI systems into risk tiers (prohibited, high, limited, and minimal) and attaches obligations to each, from documentation and human oversight to transparency duties. Alongside the law sit standards such as ISO/IEC 42001, a certifiable management system for AI, and a growing set of national and state-level rules. Compliance means mapping your systems to these requirements and keeping evidence that you meet them.
Watch the lessons in order, then continue on to Governance, Privacy & Incident Response, where you will see how an organization runs all of this day to day.
A walkthrough of the EU AI Act’s risk-based approach and the obligations it places on providers and deployers, with a view to building a compliance strategy.
A practical look at what the EU AI Act means for people who build, deploy, or sell software in the European Union.
An introduction to ISO/IEC 42001, the first certifiable standard for managing AI responsibly, and what it asks of an organization.
A briefing on the wider compliance landscape, including the EU AI Act, US federal requirements, and state-level regulation, with a plan for getting started.