AI Compliance for Transparency
Transparency is addressed by 50 regulatory updates across 8 jurisdictions and 7 frameworks. This page tracks how regulators worldwide are approaching transparency in the context of artificial intelligence.
Framework Requirements for Transparency
Regulations Covering Transparency
US Federal(20)
SEC announces internal AI task force
The SEC announced an internal AI task force on 1 August 2025 to coordinate responsible AI adoption across the agency; the announcement does not introduce a new external compliance obligation.
FTC AI enforcement actions on deceptive claims and substantiation
These records cover separate FTC proceedings concerning AI claims, an AI companion chatbot inquiry, and the later setting aside of the Rytr order; they do not establish a common new compliance deadline.
FTC AI enforcement posture remains active across deceptive claims and AI investments
The FTC’s AI hub and related matters, including Rytr, Workado, and DoNotPay, show that the agency continues to police deceptive AI claims and conduct, so AI product and marketing teams should assume ongoing enforcement scrutiny now.
FTC finalizes orders against Cox Media Group and two other firms over deceptive AI-powered marketing claims
On 2026-08-27, the FTC finalized orders and $930,000 in settlements after alleging the firms falsely claimed an AI-powered “active listening” ad service and deceptive customer consent, creating immediate enforcement risk for any AI marketing claims that are not fully substantiated.
Historical Congressional source: no current AI obligation identified
The linked source is a 1996 Congressional bill record and does not establish a current AI compliance update. It is retained here to explain the correction to the earlier entry.
European Union(12)
AI Act consultations and implementation guidance for GPAI, sandboxes, and transparency
The Commission has opened or advanced multiple AI Act implementation workstreams for GPAI, high-risk classification, transparency, and regulatory sandboxes, meaning providers and deployers must now align their implementation plans to the emerging guidance rather than wait for finalised national practice.
EU AI Act implementation consultations advance on GPAI, transparency, high-risk classification and sandboxes
The Commission’s AI Act consultations on GPAI, transparency obligations, high-risk classification, sandboxes, and the scientific panel show that the operational rulebook is still being finalized, so affected providers should engage now to shape interpretation.
EU AI Office and supervisors call for enhanced governance for frontier AI in financial services
EU financial supervisors and the AI Office are signaling stronger governance and consistent supervision expectations for frontier AI models in the financial sector, so firms should treat this as an immediate AI Act implementation and risk-governance update rather than a future issue.
EU AI Office and Commission implementation guidance for AI Act and GPAI code
The Commission and AI Office have moved from policy design into active AI Act implementation by issuing operational guidance on transparency, GPAI obligations, and governance, making immediate compliance mapping necessary for providers facing Article 50 and GPAI code expectations.
CJEU preliminary reference on whether AI software can be a high-risk AI system
A 2026 CJEU preliminary reference asks whether software using AI elements qualifies as a high-risk AI system, which could materially affect classification, oversight, and traceability expectations under the AI Act.
United Kingdom(4)
FCA confirms no new AI-specific rules for financial services
The FCA says it is not planning AI-specific regulation and will rely on existing frameworks such as Consumer Duty and SM&CR, so firms should focus on fitting AI governance into current control regimes rather than waiting for a new rulebook.
ICO AI and data protection guidance remains active but under review
The ICO says its AI guidance supports audit and enforcement activity and is under review following the Data (Use and Access) Act 2025, so UK organizations should keep using it as the current baseline while planning for revisions.
ICO AI and data protection guidance remains active and under review
The ICO says its AI guidance is not statutory but is used for audit and enforcement, and it is under review due to the UK’s newer data legislation, so organizations should treat it as live supervisory guidance.
ICO AI and data protection guidance remains the regulator’s operational baseline
The ICO says its AI guidance is both compliance best practice and the basis for audit/enforcement activity, so organizations processing personal data in AI systems must treat it as current supervisory expectation, not optional advice.
Switzerland(4)
Swiss FDPIC guidance on AI and data protection, plus legislative roadmap
The FDPIC has made clear that Switzerland’s data protection law already applies to AI-supported processing and that the federal government is targeting an AI bill by the end of 2026, so organizations should harden transparency and automated-decision controls now.
FDPIC guidance and enforcement focus on AI and data protection
The FDPIC states that the Swiss FADP applies directly to AI-supported processing and is actively pursuing investigations, so organizations using AI with personal data must now evidence transparency, proportionality, purpose limitation, and human review readiness.
FDPIC says Swiss data-protection law applies directly to AI-supported processing
On 2025-05-08, the FDPIC reiterated that Switzerland’s data-protection law already applies directly to AI-supported processing, meaning transparency, purpose limitation, and data-subject rights must be built into current AI operations now.
FDPIC confirms Swiss data-protection law applies directly to AI
The FDPIC reiterates that the Swiss Federal Data Protection Act applies directly to AI-supported processing, so organizations cannot wait for a separate AI statute before fixing transparency, automated-decision, and human-review controls.
California(4)
California AI bills on healthcare, employment, and transparency
California state AI bills AB2575, SB947, SB503, AB1979, and SB1159 advanced in late August 2026, signaling continued movement on healthcare AI, automated decision systems, and AI transparency/governance.
California SB947 on employment automated decision systems
California SB947 would regulate employment automated decision systems, so employers and HR vendors should begin mapping any hiring, promotion, or screening tools against likely disclosure and oversight obligations while the bill is still moving.
California AI bills advance on employment, health care, and governance
Multiple California AI bills moved forward on August 12-13, 2026, including measures on automated decision systems, agentic AI, transparency, and health-care AI, so companies operating in California should treat state legislative tracking as an active near-term compliance task.
California AI and privacy legislative activity remains active
California’s AI/privacy legislative tracker and related materials show continuing state-level momentum on transparency, governance, and AI-specific consumer rights, so deployers should expect additional California requirements to layer on top of federal obligations.
International(3)
AICPA SOC 2 resources reaffirm current Trust Services Criteria for AI-enabled services
AICPA’s SOC resources confirm the current Trust Services Criteria baseline and do not create AI-specific rules, but they reinforce that AI-enabled services must still satisfy existing security, privacy, and processing integrity controls in audits.
ISO/IEC 42006:2025 defines requirements for AI management system certification bodies
ISO/IEC 42006:2025 supplements the requirements for bodies auditing and certifying AI management systems against ISO/IEC 42001; the ISO catalog records its publication in July 2025.
ISO/IEC 42001 certification ecosystem expands with new accreditation and audit guidance
ISO/IEC 42001 is increasingly operationalized through new accreditation and certification guidance, so organizations adopting the standard now need to validate which certifiers and audit bodies are recognized.
Singapore(2)
Singapore updates agentic AI governance framework and PDPC personal-data guidance
Singapore has updated its model AI governance framework for agentic AI and already has advisory guidelines for personal-data use in AI recommendation and decision systems, so organizations should refresh governance, human oversight, and data-use controls now.
Singapore updates its Model AI Governance Framework for Agentic AI
IMDA updated its agentic AI governance framework in May 2026, so organizations using autonomous or multi-agent systems should refresh their control assumptions, human accountability model, and end-user transparency now.
Colorado(1)
Weekly digest
Leave your email to get each issue in your inbox. Free, no account required.
We use your email only for the digest. Privacy policy