Government and regulation watch

The July 26 forum is non-binding, but it shows portable controls - data provenance, evaluation, content transparency, security testing and auditable human oversight - matter for cross-border enterprises.

Some high-risk obligations get more time, while the Article 50 transparency framework still approaches. For each use case, map role, jurisdiction, risk class and applicable date separately.

Enterprises need an AI inventory, an owner, data lineage, impact assessment and incident response. Developers and start-ups need machine-readable provenance, user disclosure and evaluation hooks. Contractors and operators need monitoring, approval, breach-reporting and evidence clauses. Consumers may see more disclosure and labelling awareness, though deception will not disappear entirely. Investors and governments should assess implementation, power and skills, not model access alone.