US AI policy

Generative AI medical device developers can submit feedback during the open docket period and directly shape the future regulatory framework.

AI companies must establish security incident reporting mechanisms to ensure immediate reporting to the US government

AI companies must establish model control and monitoring mechanisms to ensure technical safety

Medical AI product providers must prepare for upcoming FDA regulatory requirements

Requires AI companies to reassess whether their models meet the updated 'frontier model' definition

AI companies must comply with requirements for controlling superintelligence development

AI companies must establish internal control mechanisms to ensure AI system safety

Tech companies must self-regulate AI technology to ensure safe development

Companies must establish internal mechanisms to monitor AI model behavior

Companies must establish robust AI safety control systems with dedicated teams

Companies must hire independent auditors to evaluate AI systems

Must establish comprehensive AI security incident reporting mechanisms to ensure timely disclosure of all unauthorized access attempts

ADAS providers must enhance detection capabilities for stationary or slow-moving vehicles

Tech companies will have direct access to government leadership to express views on AI industry status

U.S. AI companies must adjust model release processes to ensure U.S. agencies review first

AI companies must adjust model release processes to ensure U.S. government gets priority testing access

Obligations: The FAA is obligated to ensure the AI system (like SMART) it deploys for air traffic management meets safety standards and provides reliable routing advice to controllers, while the system itself does not directly control planes. • Opportunities: The AI system can help optimize air traffic flow, reduce congestion, and improve airport operational efficiency. • Deadlines: The system was deployed in the airspace where the American Airlines/Black Hawk collision that killed 67 people in January 2025 occurred, requiring assurance of its safety and effectiveness.

Obligations: Enterprises must invest in building an organizational ontology to provide context for AI agents. • Opportunities: A well-defined ontology enables more effective AI-driven automation and decision-making. • Deadlines: While not explicitly stated, the guide implies a need for immediate action to catch up with the pace of AI-driven network attacks.

Obligations: Companies deploying Meta smart glasses must comply with Meta's privacy guidelines, implementing the indicator light system and applying software updates to prevent vulnerabilities.

Obligations: Data center operators must increase community participation in project approvals and cannot use confidentiality agreements. They must also comply with stricter environmental and energy efficiency standards. • Opportunities: Data centers investing in clean energy may receive priority for grid access. • Deadlines: The framework includes immediate administrative measures and proposed legislation for the 2027 state legislature.

Obligations: AI companies may face legal scrutiny and potential penalties if found to have coordinated to limit AI development speed, violating antitrust laws. • Opportunities: The case highlights the importance of transparent communication and compliance with antitrust regulations in the AI sector. • Deadlines: The court case is ongoing, with the possibility of a collective class-action suit being certified, which could impact the companies' operations and public perception.

Must equip AI models with 'kill switch' functionality and establish independent auditors; - Must collaborate with the expert panel to provide recommendations within two months; - Must comply with California's AI safety regulations, facing compliance risks otherwise.

Obligations: AI companies such as Anthropic and OpenAI are obligated to provide third-party assessors with full access to resources, information, and direct communication channels with the board, free from interference.

Obligations: US AI companies may face increased scrutiny and potential regulatory constraints on their development speed.

Obligations: US policymakers must act within approximately one year to establish effective AI regulatory guardrails to prevent AI from going out of control.

Obligations: OpenAI is required to track, investigate, and publicly disclose instances of model misalignment according to the new framework, which sets criteria and timelines for disclosure.

Obligations: Companies proposing data center projects in San Jose must undergo a more rigorous public review process and provide detailed disclosures on energy consumption, water usage, and environmental impact assessments. • Opportunities: Companies that can demonstrate responsible development and community benefits may gain public support and approval for their projects. • Deadlines: The city is currently consulting the public, and while no specific deadline is mentioned, companies must align with the city's proposed review framework before project approval.

Companies must submit details of agreements with Apple to the court, potentially exposing commercial secrets

Obligations As a model provider, OpenAI has a responsibility to publicly disclose findings of model misalignment and establish clear standards and timelines for tracking, investigating, and disclosing such issues.

Obligations: Leading AI companies such as Anthropic must grant independent assessors access to internal systems and risk teams and accept their findings.