AI Compliance Obligations Explained

Short guides tied to the same obligations we tag on every regulation page. Each link lists the statutes that mention it in our database.

Last reviewed April 8, 2026.

Transparency notice

A transparency notice tells people that AI plays a role in a decision that affects them. It usually covers what the system does, what catego

24 regulations

Opt-out mechanism

An opt-out mechanism lets a person decline purely automated processing and still receive service where the law requires it. Privacy style AD

20 regulations

Profiling disclosure

Profiling disclosure explains that you use automated means to evaluate people and what the consequences are. It often works together with op

20 regulations

Record-keeping

Record-keeping obligations require you to retain evidence that you complied with AI rules: assessments, notices, audit outputs, and change l

17 regulations

Disclosure

General AI disclosures cover content provenance, bot identity, or model limits depending on the statute. They overlap with transparency noti

11 regulations

Impact assessment

An AI impact assessment is a structured review of how an automated system affects people. It records what data the system uses, what decisio

11 regulations

Consent

Consent requirements mean you must obtain clear permission before certain AI processing, often video interviews or biometric analysis. Silen

9 regulations

Risk management

AI risk management is an ongoing program that identifies, ranks, and treats risks from AI systems. It borrows from privacy and security prog

6 regulations

Consumer notification

Consumer notification is an affirmative message when AI materially affects someone, beyond a static notice on a website. Some AI transparenc

6 regulations

Bias testing

Bias testing is the technical work that measures whether outcomes differ across demographic or other sensitive slices. It can support a form

5 regulations

Data retention

Data retention rules cap how long interview recordings, model inputs, or candidate artifacts may live in storage. They reduce harm if data l

4 regulations

Data access rights

Data access rights let individuals obtain the personal data you use in automated decisions and sometimes get a plain recap of the logic. The

4 regulations

Human review

Human review is the right of a person affected by automation to have a real person reconsider the outcome. Many privacy laws pair this with

3 regulations

Human oversight

Human oversight means a qualified person can monitor, intervene, or stop an AI system when risk spikes. It is broader than a single appeal r

2 regulations

Bias audit

A bias audit is an independent review focused on whether an automated employment tool disadvantages people in protected groups. New York Cit

1 regulation

Then run a scan to see which obligations land on your desk first.

Start your free scan