Laws written for AI, and laws that already reach it
AI legal compliance draws on two sources. A small but growing set of laws targets AI directly. New York City, for example, requires a bias audit and notice before employers use certain automated tools in hiring and promotion decisions, several states have passed broader AI statutes that have since been delayed, narrowed, or replaced, and the European Union's AI rules apply in phases to companies serving that market. At the federal level, there have been efforts to limit state AI rules, and how that plays out remains unsettled. Just as important are general laws that apply regardless of technology: anti-discrimination rules, consumer protection and false advertising law, privacy statutes, and intellectual property.
Claims, contracts, and disclosures
Regulators have taken action against companies that overstated what their AI products could do, so marketing claims about accuracy, autonomy, or human oversight should be checked against how the system actually performs. Contracts with AI vendors deserve close reading on who owns inputs and outputs, whether your data may be used for training, how security incidents are reported, and who bears responsibility if the tool produces discriminatory or infringing results. Some laws require telling people when they are interacting with an AI system or when an automated decision affects them. Keep records of testing, the purpose of each tool, and who approved its use.
Sequencing the work
Since the rules are moving, a useful program focuses on where risk is concentrated now. We start with the uses that affect people's jobs, credit, housing, health, or legal rights, because those draw the most specific legal requirements and the most scrutiny. Then we look at customer-facing tools and marketing claims, followed by vendor contracts. We also set up a way to track changes in the laws that matter to your business, including effective dates that have been delayed or are being challenged, so that the program can adjust without starting over.