Policy desk

Obligations: Companies must exercise caution when using AI tools, not blindly trust or grant permissions to unknown AI services. They must set clear behavioral boundaries and strict permissions for AI agents, not casually open internet access or content editing rights.

Open-weight LLMs in recruitment show significant gender and racial biases, potentially violating compliance requirements under regulations like the EU AI Act.

Obligations: Companies must engage in global AI governance discussions and align with emerging international safety standards.

Obligations: Companies operating in South Korea must comply with the government's directive to accelerate AI research and applications, while strengthening risk prevention measures for deepfakes, cyberattacks, and privacy. • Opportunities: South Korea's continued push for AI development presents opportunities for companies to participate in AI research, development, and application projects, especially in the semiconductor and hardware sectors. • Deadlines: The government plans to soon announce the next phase of its autonomous AI foundational model plan, creating a timeline for companies to prepare for potential new regulations or funding opportunities.

Obligations: Companies in the electronics manufacturing sector must align their R&D and production strategies with the plan's goals, particularly in developing advanced chips and promoting domestic operating systems.

EU member states will form an alliance to ensure AI supply chain security, increasing compliance costs and collaboration opportunities.

OpenAI will adjust its R&D strategy to prioritize safety assessments, potentially slowing down the iteration of frontier technologies.

Obligations: Frontier AI developers must comply with consistent safety requirements under a federal framework and undergo independent audits. • Opportunities: Establishing unified safety standards and collaborative frameworks can enhance the safety of AI development and boost industry confidence. • Deadlines: The call for immediate action is made, but specific regulations and frameworks have not yet been issued.

Obligations: AI companies, particularly those in the US, are under pressure to demonstrate responsible development and transparency regarding their AI models.

Companies must master their proprietary tacit knowledge to build continuous learning loops and reduce reliance on single model vendors.

Companies must ensure their AI research aligns with the principles of human control and benefit for humanity, avoiding pursuits of meaningless or harmful superintelligence. • Companies should retain control over their unique knowledge and build autonomous continuous learning loops, not becoming dependent on any single model provider. • Microsoft will publish a 'Code of Conduct' for public consultation, providing clear guidance for the industry.

Obligations: Participating companies must offer AI-related apprenticeships to program graduates, matching their existing skill requirements and job vacancies.

Obligations: AI data center operators may be subject to new environmental health regulations if the plan is adopted, requiring compliance with stricter air quality standards. • Opportunities: Companies investing in AI data centers in the US could gain from a streamlined regulatory process if the plan is implemented. • Deadlines: The plan's adoption hinges on the president's decision, with no specific timeline mentioned in the report.

Obligations: Recipients must publicly disclose research findings on AI risks to regulators and the public. • Opportunities: Grants provide resources for AI safety research, potentially accelerating safer AI development. • Deadlines: Recipients must submit quarterly progress reports and final research outcomes within 18 months of grant approval.

Obligations: AI companies may be required to embed auditors and adhere to shared safety standards.

The government will support the promotion of new energy vehicles and green smart home appliances in rural areas, providing market opportunities for related enterprises.

Tech companies must take higher responsibility, needing to strengthen content moderation and risk control to avoid child harm from negligence• Violations will face high fines, increasing compliance costs and risks• Companies must immediately assess existing systems to ensure compliance with the new regulations after the law takes effect

Obligations: Software companies are required to participate in the initiative, develop intelligent software products, and cooperate with terminal manufacturers for joint innovation. • Opportunities: Companies can benefit from government funding and support to develop new intelligent software products and participate in the creation of benchmark applications. • Deadlines: By 2028, the initiative aims to cover 20,000 large-scale software enterprises and create 100 benchmark applications.

Obligations: Companies participating in the IIFAA working group must contribute to the development of a unified standard for AI agent identity, ensuring compliance with emerging trust frameworks.

Obligations: Companies operating AI data centers in Indonesia may be required to contribute to rising electricity tariff costs, potentially increasing operational expenses.

Obligations: Companies expanding into ASEAN from China must align their strategies with China Unicom's 'Fifteenth Five-Year' investment plans and development initiatives.

The EU's cybersecurity agency gains access to a high-performance AI model for vulnerability detection, enhancing its cybersecurity defense capabilities.

EU agencies gain access to high-performance AI models, facilitating their assessment and oversight of AI safety.

Lists 11 new professions and 23 new job types, covering digital and green professions.

From 1 July 2027, L3/L4 automated driving systems must meet the mandatory safety requirements; non-compliant models cannot be sold.

Obligations: Companies providing AI services must comply with the National Security Department's guidance to prevent data leakage through unauthorized API intermediary stations. • Opportunities: Adhering to the guidelines can enhance user trust and data security, reducing the risk of reputational damage. • Deadlines: No specific deadline is mentioned, but companies should immediately implement recommended security measures to mitigate risks.

Internet-exposed or outdated PLCs are high-risk targets; operators must immediately audit and harden external exposure