Policy desk

Generative AI medical device developers can submit feedback during the open docket period and directly shape the future regulatory framework.

Exporting non-public large model, agent, or computing cluster technologies via licensing, sale, or weight delivery requires interim registration with MOFCOM during the transition; in-flight transactions are also covered, with no grandfathering.

Export of large models, AI agents and computing cluster technologies would become restricted, so cross-border licensing, partnerships and deployments need export-control review

Companies exporting large model, agent, or computing cluster technologies must complete export licensing or pre-export registration for the 23 AI items

Overseas localised deployment of restricted large models falls under export control and requires a licence (automatic licence available for deployment on overseas self-owned cloud); API calls, SaaS apps and lightweight on-device deployment are outside scope.

Model developers will face questions from the EU AI Office regarding recent incidents and must cooperate with investigations

Provides companies with a legal framework to prevent misuse of celebrity voices

Data centre operators must provide equivalent renewable energy to their power consumption, increasing operational costs

Chinese AI companies must ensure compliant handling of user data and prevent unauthorized data transfers

Obligations: AI companies may face increased regulatory scrutiny and potential legal action over data usage and its impact on news publishers. • Opportunities: Companies may need to develop more transparent data practices and collaborate with news organizations to mitigate negative impacts. • Deadlines: The FTC consultation period is open for public comments until a specified date, after which the agency will consider feedback before potentially adopting new guidelines.

Obligations: AI companies such as Anthropic and OpenAI are obligated to provide third-party assessors with full access to resources, information, and direct communication channels with the board, free from interference.

Obligations: US policymakers must act within approximately one year to establish effective AI regulatory guardrails to prevent AI from going out of control.

Obligations: AI companies must ensure their content training practices comply with existing copyright laws to avoid costly litigation and financial penalties. • Opportunities: Companies may need to invest in developing and licensing alternative training data sources to mitigate legal risks. • Deadlines: While no specific deadlines are mentioned, the ongoing legal proceedings and potential court rulings will set precedents for future AI content usage.

Obligations: Companies proposing data center projects in San Jose must undergo a more rigorous public review process and provide detailed disclosures on energy consumption, water usage, and environmental impact assessments. • Opportunities: Companies that can demonstrate responsible development and community benefits may gain public support and approval for their projects. • Deadlines: The city is currently consulting the public, and while no specific deadline is mentioned, companies must align with the city's proposed review framework before project approval.

Obligations: Companies must engage in global AI governance discussions and align with emerging international safety standards.

Obligations: AI companies, particularly those in the US, are under pressure to demonstrate responsible development and transparency regarding their AI models.

Obligations: Companies in the AI industry are urged to consider slowing down development and implementing independent monitoring systems. • Opportunities: Early adopters of independent monitoring and transparency measures may gain trust and competitive advantage. • Deadlines: Companies should prepare for potential future regulatory frameworks and industry standards.

Obligations: Recipients must publicly disclose research findings on AI risks to regulators and the public. • Opportunities: Grants provide resources for AI safety research, potentially accelerating safer AI development. • Deadlines: Recipients must submit quarterly progress reports and final research outcomes within 18 months of grant approval.

Obligations: AI companies may be required to embed auditors and adhere to shared safety standards.

Obligations: Software companies are required to adapt their workforce to new roles and skills, such as front-line deployment engineers (FDEs) and new job titles like 'Generative AI System Application Operator'.

Company Obligations: UpDoc is required to lead the ADVOCATE project, collaborating with Microsoft, OpenAI, etc., to develop an autonomous clinical AI system for cardiovascular care, and must comply with ARPA-H's funding requirements and project specifications.

Obligations: AI companies, especially those in the US, must be prepared to respond to official inquiries and provide detailed documentation on AI model security and incident handling procedures. • Opportunities: Companies with robust incident response and documentation practices may be viewed more favorably in regulatory scrutiny. • Deadlines: Companies must ensure timely submission of required documents to avoid potential penalties or reputational damage.

Obligations: Companies expanding into ASEAN from China must align their strategies with China Unicom's 'Fifteenth Five-Year' investment plans and development initiatives.

Obligations: Companies must ensure their fuel cell electric vehicles meet the new hydrogen emission rate limit and integrate mandatory hydrogen refueling communication functions for 70MPa tanks to pass the revised safety standard.

Use of AI in development but must meet quality and legal compliance standards

Require policymakers not to treat each innovation in isolation.

Technical innate fragility is difficult to eliminate, affecting output stability and reliability.

Obligations: Companies providing AI services must comply with the National Security Department's guidance to prevent data leakage through unauthorized API intermediary stations. • Opportunities: Adhering to the guidelines can enhance user trust and data security, reducing the risk of reputational damage. • Deadlines: No specific deadline is mentioned, but companies should immediately implement recommended security measures to mitigate risks.