Skip to main content
TPDI logo
Back to Layer 6

Capability 6.2.1

Legal & Regulatory Frameworks

Definition

The existence and clarity of national laws and regulations that establish the legal obligations of AI developers, deployers and users. Includes (but not limited to) provisions for privacy, cybersecurity, safety, discrimination, accountability, liability, and mitigating systemic and catastrophic risks.

Examples

  • Horizontal AI laws (e.g. EU AI Act)
  • sector-specific laws
  • 'soft law' (codes, model standards).

Indicators

  • Number and type of AI laws/regulations enacted (e.g. coverage of AI across critical sectors)
  • Clarity of decision on legislative approach
  • Adaptability: presence of review/update mechanisms

National AI Plan

PLAN COMMITMENT

Moderate commitment

Provides policy coherence by noting that 'Agencies and regulators will retain responsibility for identifying, assessing, and addressing potential AI-related harms within their respective policy and regulatory domains' (Action 7). Commits to continuing to assess the suitability of existing laws in the context of AI, while taking targeted action against specific harms (privacy, consumer harms, online safety, copyright, healthcare, medical device software) (Action 7) and that 'if more regulation is needed to address bad actors or broader harms, the government will not hesitate to intervene', but includes no timelines and few specific details on targeted actions or specific gaps, hence marked as moderate. Moderate commitment by government in the plan aligns roughly with the recommendation to close this critical gap, however this is marked for attention given longstanding delays in highly relevant regulatory reforms that pre-date the plan (e.g. privacy). Greater and ongoing attenttion is warranted given this capabilty provides the enabling environment for all capabilities.

Stocktake

Is the Stocktake missing evidence?

Share additional information for potential future Assessments