AI Regulation in US Federal

US Federal has 200 tracked AI regulatory updates across 5 frameworks. This page provides an overview of the current regulatory landscape, upcoming deadlines, and recent enforcement activity.

200
Regulations
5
Frameworks
0
Upcoming Deadlines
2026-11-01
Last Updated

Recent Regulatory Updates

guidance2026-11-01

No SEC regulatory update in supplied sources

The supplied materials do not contain an SEC rule, order, or guidance update, so no SEC regulation can be distilled from the record.

HIPAAguidance2026-11-01

HIPAA Enforcement Data Dashboard and Complaint Outcomes

HHS publishes enforcement data showing how OCR closes cases, including technical assistance, corrective action, and other resolution categories, and notes that most investigations can take multiple years.

HIPAAexecutive-action2026-11-01

HIPAA Regulatory Initiatives on Reproductive Health and Security Rule

HHS says remaining Notice of Privacy Practices modifications from the reproductive health privacy rule remain in effect and must be complied with by February 16, 2026, while the agency also has a proposed Security Rule overhaul pending.

HIPAAguidance2026-11-01

FDA AI-enabled medical device public list and transparency resource

The FDA’s AI-enabled medical device list is a periodically updated transparency resource that identifies authorized devices and encourages sponsors to include enough information in public summaries to support future tagging of foundation-model-based functionality.

HIPAAguidance2026-11-01

FDA AI-enabled medical devices overview and resource list

The FDA describes its risk-based oversight of AI-enabled medical devices and provides a periodically updated public list for transparency and regulatory expectations.

GDPRenforcement2026-10-25

AP fine for Uber automated driver blocking

The AP fined Uber nearly 825 million euros for fully automated driver deactivations without human review and for insufficient transparency about automated decision-making.

NIST AI RMFexecutive-action2026-10-25

HTI-5 proposed rule advances AI-enabled interoperability and deregulatory health IT changes

HHS says the HTI-5 proposed rule would streamline the ONC certification program, update information blocking regulations, and promote FHIR-based AI-enabled interoperability, with public comment open for 60 days after publication.

HIPAAguidance2026-10-25

HHS points HIPAA-covered entities and business associates to periodic risk analysis guidance

HHS says OCR issues periodic guidance on the HIPAA Security Rule and that risk analysis is the first step in identifying and implementing safeguards for e-PHI.

HIPAAguidance2026-10-25

HHS covered-entity and business-associate scope guidance

HHS explains that the HIPAA Rules apply to covered entities and business associates, and that covered entities must use written business associate arrangements when delegating functions to business associates.

HIPAAguidance2026-10-25

FDA draft guidance on lifecycle management and marketing submissions for AI-enabled devices

The FDA’s draft guidance recommends documentation and lifecycle-management practices for marketing submissions covering AI-enabled device software functions.

NIST AI RMFenforcement2026-10-25

FTC action against IntelliVision over AI facial-recognition bias claims

The FTC finalized an order against IntelliVision Technologies after allegations that it made false or unsubstantiated claims that its AI facial-recognition software was free of gender or racial bias.

NIST AI RMFenforcement2026-10-25

FTC finalizes order against accessiBe over AI accessibility claims

The FTC finalized an order requiring accessiBe to pay $1 million after allegations that it misrepresented its AI web accessibility tool as making any website WCAG-compliant.

NIST AI RMFenforcement2026-10-25

FTC final order against Workado requires substantiation for AI content detection claims

The FTC approved a final order barring Workado from advertising the accuracy or efficacy of its AI content detection products unless it has competent and reliable evidence supporting the claims.

GDPRcourt-decision2026-10-18

Cheng v. Stoler

A Hawaii appellate court affirmed a five-year order of protection after finding substantial evidence of extreme psychological abuse and domestic abuse.

GDPRcourt-decision2026-10-18

Johnson v. Durrani

An Ohio appellate court affirmed a negligence verdict while reversing an attorney-fee award, holding that the jury’s award stood despite harmless trial errors and that fees were unauthorized on the surviving negligence claim.

Applicable Frameworks

HIPAAGDPRNIST AI RMFCCPA/CPRASOC 2 + AI

Key Topics

Weekly digest

Leave your email to get each issue in your inbox. Free, no account required.

We use your email only for the digest. Privacy policy