The Global AI Regulatory Environment (2026-27)
Global AI Regulatory Environment
A briefing for executives · Winter 2026–27 · 119 pages · Epistemic Systems Lab
Which AI rules apply to your organisation, what do they require, and who has to answer for them? This briefing answers those questions across fourteen jurisdictions. It is written for boards, general counsel, risk and compliance leads, and the people who train them.
The EU regulates the AI system, several US states regulate the decision, China regulates the service, and California, New York and Illinois regulate the model. One product can fall outside one regime and inside another. The report sorts a single system into the regimes that reach it, sets out what each one requires, and lays out a plan for the next four quarters.
Use it to
- Answer the board’s question of what applies to us, using seven questions and an exposure matrix
- Assign legal roles across the group, and see when buying, branding or repurposing a system makes you its provider
- Check a supplier’s AI certificate before you accept it
- Build one control library for the EU AI Act, ISO/IEC 42001, the NIST AI Risk Management Framework and IEEE CertifAIEd
- Decide who needs training, in what, and at what cost
- Run internal briefings straight from the chapters
Coverage
The EU AI Act in its consolidated text with the Digital Omnibus amendments; the United Kingdom; China, Japan, South Korea, Taiwan, Singapore and India; US federal action and state law in force; Canada, Brazil, the United Arab Emirates, Saudi Arabia, Australia and the Council of Europe convention. The report has eighteen tables, a glossary and a full list of the instruments relied on.
Included with the licence
- An interactive crosswalk of twenty-three requirements across four frameworks
- A decision support tool that returns the regimes, deadlines and citations for one system
The links arrive with your download.
How it was made
The research team read the legal instruments and official registers at source. Every statement is dated and cited, and a separate verification pass checked each claim before release. The full method is set out at the front of the report.
Licence