EU and US rules reshape AI compliance planning

AI regulation in the EU and the U.S. is converging around shared priorities even as legal structures differ sharply. Both approaches emphasize reducing algorithmic bias, improving transparency, and strengthening accountability, particularly for systems used in areas such as employment, education, financial services, healthcare, housing, and law enforcement.

The EU AI Act establishes a comprehensive risk-based framework with global reach, classifying systems as unacceptable, high, limited, or minimal risk. The EU AI Act entered into force on August 1, 2024, with most provisions due to apply on August 2, 2026. High-risk systems face requirements covering data governance, human oversight, conformity assessments, and post-market monitoring. Fines can reach up to €35 million or 7% of global turnover, whichever is higher.

U.S. governance remains more fragmented. Executive Order (E.O.) 14110 sets federal priorities for safe and trustworthy AI, while the White House OSTP Blueprint for an AI Bill of Rights provides non-binding principles for rights-impacting systems. State laws are filling gaps, led by the Colorado AI Act, which is set to take effect in February 2026, and New York City’s Bias Audit Law for automated employment decision tools.

Companies operating across jurisdictions are being pushed toward adaptable governance programs, risk assessments, clear disclosures, and internal controls aligned with the strictest applicable standards.