The world has bifurcated into 2 regulatory camps: EU’s binding, risk-based AI Act (with the world’s toughest penalties) and EU-inspired laws in South Korea, Brazil, and (formerly) Colorado on on side;

2025-11-28 · Source: Pascal’s Substack · Field: Legal & Regulatory — Compliance & Risk Management, Regulatory Affairs & Government Relations, Artificial Intelligence & Machine Learning · Depth: Expert, extended

Summary

Global AI regulation has bifurcated into two distinct camps: the EU's binding, risk-based AI Act, featuring penalties up to €35M or 7% of global turnover, and EU-inspired laws in South Korea, Brazil, and formerly Colorado; contrasted with a "pro-innovation" soft-law approach led by the US federal government, UK, Japan, India, Singapore, and Australia. A critical compliance date is August 2, 2026, for EU AI Act transparency (Article 50) and GPAI penalty enforcement, though most high-risk obligations are deferred to December 2, 2027. The US has actively moved towards deregulation and preemption of state AI laws through a December 2025 Executive Order and a DOJ task force. Across all jurisdictions, voluntary standards like ISO/IEC 42001 and the NIST AI RMF are increasingly serving as the de facto compliance backbone, often integrated into law as safe harbors or routes to presumed conformity.

Key takeaway

For Directors of AI/ML overseeing global deployments, you must prioritize a comprehensive AI inventory to map systems against diverse regulatory regimes. Ensure compliance with the EU AI Act's August 2, 2026 transparency deadline and prepare for high-risk obligations by December 2, 2027. Adopt ISO/IEC 42001 and NIST AI RMF as a unified compliance backbone, even as US federal preemption efforts create state-level volatility.

Key insights

Global AI regulation is bifurcated, with voluntary standards increasingly forming the de facto compliance backbone.

Principles

• AI regulation splits into binding risk-based laws and soft-law approaches.
• Voluntary standards like ISO/IEC 42001 are becoming mandatory baselines.
• US federal policy actively preempts state AI laws.

Method

Implement a global AI inventory, map systems to applicable regimes, and adopt recognized frameworks like NIST AI RMF and ISO/IEC 42001.

In practice

• Meet EU AI Act Article 50 transparency by August 2, 2026.
• Comply with California SB 53 and Illinois HB 3773 now.
• Pursue ISO/IEC 42001 certification for global assurance.

Topics

• AI Regulation
• AI Standards
• EU AI Act
• NIST AI RMF
• ISO/IEC 42001
• Global Compliance

Best for: CTO, VP of Engineering/Data, Executive, Legal Professional, Director of AI/ML, Consultant

Related on AIssential

• The EU AI Act, Decoded — The EU AI Act establishes a phased, risk-based regulatory framework for AI systems used within Europe.
• OpenAI's Altman urges urgent global AI regulation - Latest news from Azerbaijan — Urgent global AI regulation is needed, potentially via an IAEA-like international body, to manage risks and ensure equitable access.
• The Attribution Gap: Why Every AI Regulation Leads Back to Identity and Authorization — Enterprises face significant legal and regulatory liability for AI agent actions without verifiable identity and authorization trails.
• OpenAI unveils security framework, citing emerging regulations — AI providers are proactively establishing governance frameworks to meet diverse, rapidly evolving state and international regulatory demands.
• Best AI Governance Tools in 2026: 10 Platforms I Evaluated for Compliance, Risk, and Audit Readiness — AI governance tools are essential for managing AI systems, ensuring compliance, and mitigating risks in a regulated environment.
• What the EU AI Omnibus Deal Changes for the AI Act and What Lies Ahead — The EU AI Omnibus adjusts AI Act deadlines and data use, balancing industry needs with fundamental rights and safety.

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by Pascal’s Substack.