Policy desk

Generative AI medical device developers can submit feedback during the open docket period and directly shape the future regulatory framework.

Model developers will face questions from the EU AI Office regarding recent incidents and must cooperate with investigations

Data centre operators must provide equivalent renewable energy to their power consumption, increasing operational costs

Chinese AI companies must ensure compliant handling of user data and prevent unauthorized data transfers

Obligations: AI companies such as Anthropic and OpenAI are obligated to provide third-party assessors with full access to resources, information, and direct communication channels with the board, free from interference.

Obligations: US policymakers must act within approximately one year to establish effective AI regulatory guardrails to prevent AI from going out of control.

Obligations: Companies proposing data center projects in San Jose must undergo a more rigorous public review process and provide detailed disclosures on energy consumption, water usage, and environmental impact assessments. • Opportunities: Companies that can demonstrate responsible development and community benefits may gain public support and approval for their projects. • Deadlines: The city is currently consulting the public, and while no specific deadline is mentioned, companies must align with the city's proposed review framework before project approval.

Obligations: Companies must engage in global AI governance discussions and align with emerging international safety standards.

Obligations: AI companies, particularly those in the US, are under pressure to demonstrate responsible development and transparency regarding their AI models.

Obligations: Companies in the AI industry are urged to consider slowing down development and implementing independent monitoring systems. • Opportunities: Early adopters of independent monitoring and transparency measures may gain trust and competitive advantage. • Deadlines: Companies should prepare for potential future regulatory frameworks and industry standards.

Obligations: AI companies may be required to embed auditors and adhere to shared safety standards.

Obligations: Software companies are required to adapt their workforce to new roles and skills, such as front-line deployment engineers (FDEs) and new job titles like 'Generative AI System Application Operator'.

Obligations: AI companies, especially those in the US, must be prepared to respond to official inquiries and provide detailed documentation on AI model security and incident handling procedures. • Opportunities: Companies with robust incident response and documentation practices may be viewed more favorably in regulatory scrutiny. • Deadlines: Companies must ensure timely submission of required documents to avoid potential penalties or reputational damage.

Use of AI in development but must meet quality and legal compliance standards

Require policymakers not to treat each innovation in isolation.

Technical innate fragility is difficult to eliminate, affecting output stability and reliability.

Obligations: Companies providing AI services must comply with the National Security Department's guidance to prevent data leakage through unauthorized API intermediary stations. • Opportunities: Adhering to the guidelines can enhance user trust and data security, reducing the risk of reputational damage. • Deadlines: No specific deadline is mentioned, but companies should immediately implement recommended security measures to mitigate risks.