AI Regulation

AI regulation is the body of laws, binding rules and official guidance that governs how artificial intelligence systems are developed, sold and used, covering risks such as safety, discrimination, deception, privacy and copyright. As of October 2026 the most detailed framework is the European Union's AI Act; the US has no federal AI statute and relies on state laws and executive action; China regulates through targeted rules; and the UK has so far avoided AI-specific legislation.

The EU AI Act entered into force on August 1, 2024 and applies in stages, with a risk-based structure:

• Prohibited practices, such as social scoring and certain manipulative or biometric uses, have been banned since February 2, 2025.
• Rules for general-purpose AI models, including technical documentation, a copyright compliance policy and a public summary of training content, have applied since August 2, 2025. A voluntary General-Purpose AI Code of Practice, published July 10, 2025 and signed by providers including OpenAI, Anthropic, Google, Microsoft and Mistral, is the main way to show compliance.
• Transparency duties under Article 50 have applied since August 2, 2026: people must be told when they are dealing directly with an AI system, AI-generated content must be marked in a machine-readable way, and deepfakes and AI-generated text published to inform the public on matters of public interest must be labeled unless a human has reviewed it and holds editorial responsibility. Systems already on the market before that date have until December 2, 2026 for the marking requirement.
• Obligations for high-risk systems, such as AI used in hiring, credit or education, were delayed by the AI Omnibus amendment, Regulation (EU) 2026/1744, which entered into force on July 27, 2026. They now apply from December 2, 2027 for stand-alone high-risk systems and August 2, 2028 for AI embedded in regulated products (European Commission).

Fines reach up to €35 million or 7% of global annual turnover for prohibited practices. The Act applies to any provider placing AI on the EU market or whose outputs are used in the EU, wherever it is based. The Omnibus also gives the Commission's AI Office oversight of certain AI systems built on general-purpose models and embedded in very large online platforms and search engines, which could reach AI features inside the largest search engines.

In the US, Executive Order 14365 of December 11, 2025 set up a Justice Department task force to challenge state AI laws, but an executive order cannot preempt state law and Congress has passed no federal standard. State rules therefore apply: California's Transparency in Frontier AI Act (SB 53) has applied to the largest model developers since January 1, 2026, and Colorado replaced its 2024 AI Act with a narrower automated-decision law, SB 26-189, signed May 14, 2026 and effective January 1, 2027. China's measures requiring visible and metadata labels on AI-generated text, images, audio and video took effect September 1, 2025. In the UK, a March 2026 government report dropped the proposed text-and-data-mining copyright exception with opt-out as its preferred option and committed to gather more evidence first.

For marketers and GEO teams, three parts matter most. Labeling rules affect how AI-assisted content is published in the EU and China. Training-data transparency and copyright rules, including the EU's TDM rights reservation mechanism, shape what publishers can control about AI training data and how publisher licensing deals are struck. And new oversight of AI systems inside search engines may eventually affect how AI answers attribute sources. For the technical side of reducing harm, see AI safety.