{"data":{"slug":"global-ai-regulatory-applicability-matrix","title":"Global AI Regulatory Applicability Matrix","type":"crosswalk","formats":["xlsx"],"topics":["inventory","governance"],"frameworks":["eu-ai-act","colorado-ai-act"],"short":"Every binding AI instrument on record, by jurisdiction, with status, application date, who it binds and the use cases it covers, as a matrix to mark which apply to you.","covers":{"categories":["governance_accountability"]},"version":7,"dataset_version":"81260cf1b508","generated_at":"2026-11-12T07:31:18+00:00","citations":108,"downloads":4,"files":[{"format":"xlsx","filename":"global-ai-regulatory-applicability-matrix-v7.xlsx","bytes":32997,"url":"https://aipolicytracker.org/templates/global-ai-regulatory-applicability-matrix#download"}],"url":"https://aipolicytracker.org/templates/global-ai-regulatory-applicability-matrix","inside":["Matrix sheet: jurisdiction, instrument, status, applies from, binding, actors, use cases, applies-to-us dropdown, owner","Deadlines sheet: every dated milestone on those instruments","Record links throughout"],"legal_basis":["eu-ai-act","us-colorado-automated-decision-making-technology-act"],"caveat":null,"covered_obligations":[{"slug":"australia-vaiss-accountability-and-risk-management","title":"Establish accountability processes and a risk-management process (guardrails 1 and 2)","policy":"australia-voluntary-ai-safety-standard","source_reference":"Guardrails 1 and 2","url":"https://aipolicytracker.org/obligations/australia-vaiss-accountability-and-risk-management"},{"slug":"us-california-sb-53-whistleblower-protections","title":"Frontier developers must protect employees who report catastrophic-risk concerns","policy":"us-california-sb-53","source_reference":"Labor Code Section 1107 (as added by SB 53)","url":"https://aipolicytracker.org/obligations/us-california-sb-53-whistleblower-protections"},{"slug":"eu-ai-act-deployer-obligations","title":"Use high-risk AI as instructed, monitor it and inform affected people","policy":"eu-ai-act","source_reference":"Article 26","url":"https://aipolicytracker.org/obligations/eu-ai-act-deployer-obligations"},{"slug":"eu-ai-act-art-16-provider-obligations","title":"Providers must meet the full set of provider duties for high-risk AI","policy":"eu-ai-act","source_reference":"Article 16","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-16-provider-obligations"},{"slug":"eu-ai-act-art-21-cooperation-with-authorities","title":"Providers must supply conformity evidence and log access to authorities on request","policy":"eu-ai-act","source_reference":"Article 21","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-21-cooperation-with-authorities"},{"slug":"eu-ai-act-art-22-authorised-representative","title":"Non-EU providers must appoint an EU authorised representative for high-risk AI","policy":"eu-ai-act","source_reference":"Article 22","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-22-authorised-representative"},{"slug":"eu-ai-act-art-25-value-chain-becoming-provider","title":"Deployers, distributors and importers must assume provider duties when they rebrand or substantially modify high-risk AI","policy":"eu-ai-act","source_reference":"Article 25(1) and 25(2)","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-25-value-chain-becoming-provider"},{"slug":"eu-ai-act-art-26-10-post-remote-biometric-identification-authorisation","title":"Law-enforcement deployers must obtain authorisation for post-remote biometric identification and report annually","policy":"eu-ai-act","source_reference":"Article 26(10)","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-26-10-post-remote-biometric-identification-authorisation"},{"slug":"eu-ai-act-art-52-systemic-risk-notification","title":"Providers of GPAI models must notify the Commission within two weeks of meeting the systemic-risk threshold","policy":"eu-ai-act","source_reference":"Article 52(1)","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-52-systemic-risk-notification"},{"slug":"eu-ai-act-art-54-gpai-authorised-representative","title":"Non-EU providers of GPAI models must appoint an EU authorised representative","policy":"eu-ai-act","source_reference":"Article 54","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-54-gpai-authorised-representative"},{"slug":"india-ai-guidelines-principles-and-risk-based-governance","title":"Adopt the guiding principles and risk-based governance (voluntary)","policy":"india-ai-governance-guidelines","source_reference":"Guiding principles and recommendations sections","url":"https://aipolicytracker.org/obligations/india-ai-guidelines-principles-and-risk-based-governance"},{"slug":"nepal-ai-policy-responsible-ai-principles","title":"Government bodies to promote ethical, responsible and inclusive AI (policy commitment)","policy":"nepal-national-ai-policy","source_reference":"Policy objectives and strategies (to be confirmed against the official text)","url":"https://aipolicytracker.org/obligations/nepal-ai-policy-responsible-ai-principles"},{"slug":"singapore-mgf-internal-governance","title":"Establish internal governance structures and measures for AI","policy":"singapore-model-ai-governance-framework","source_reference":"Second edition, Part on internal governance structures and measures","url":"https://aipolicytracker.org/obligations/singapore-mgf-internal-governance"},{"slug":"south-korea-ai-basic-act-art-34-high-impact-ai-user-protection-and-documentation","title":"Operators of high-impact AI must prepare user-protection measures and keep records of their safety and trust measures","policy":"south-korea-framework-act-on-the-development-of-artificial-intelligence-and-establishment-of-a-foundation-for","source_reference":"Article 34(1)","url":"https://aipolicytracker.org/obligations/south-korea-ai-basic-act-art-34-high-impact-ai-user-protection-and-documentation"},{"slug":"south-korea-ai-basic-act-art-36-domestic-representative","title":"Foreign AI business operators above the threshold must designate a domestic representative in Korea","policy":"south-korea-framework-act-on-the-development-of-artificial-intelligence-and-establishment-of-a-foundation-for","source_reference":"Article 36","url":"https://aipolicytracker.org/obligations/south-korea-ai-basic-act-art-36-domestic-representative"},{"slug":"uae-ai-strategy-ethics-and-governance-commitment","title":"Government commitment to AI ethics, governance and regulation (strategy objective)","policy":"uae-national-ai-strategy-2031","source_reference":"Strategy objectives on governance and ethics (reviewer to cite the section)","url":"https://aipolicytracker.org/obligations/uae-ai-strategy-ethics-and-governance-commitment"},{"slug":"uk-principles-fairness","title":"Use AI in ways that are fair and do not discriminate unlawfully","policy":"uk-ai-regulation-white-paper","source_reference":"Principle 3, Part 3","url":"https://aipolicytracker.org/obligations/uk-principles-fairness"},{"slug":"uk-principles-accountability-governance","title":"Establish accountability and governance for AI","policy":"uk-ai-regulation-white-paper","source_reference":"Principle 4, Part 3","url":"https://aipolicytracker.org/obligations/uk-principles-accountability-governance"},{"slug":"us-nist-ai-rmf-govern","title":"Establish AI governance policies, roles and accountability (Govern)","policy":"us-nist-ai-rmf","source_reference":"GOVERN function","url":"https://aipolicytracker.org/obligations/us-nist-ai-rmf-govern"}],"versions":[{"version":7,"generated_at":"2026-11-12T07:31:18+00:00","dataset_version":"81260cf1b508","changelog":"Dataset bdc9006d9119 → 81260cf1b508.","stats":{"sheets":{"Matrix":80,"Deadlines":28},"blocks":0,"headings":0,"citations":108}},{"version":6,"generated_at":"2026-11-12T06:10:04+00:00","dataset_version":"bdc9006d9119","changelog":"Dataset ef1018b7a6a2 → bdc9006d9119.","stats":{"sheets":{"Matrix":80,"Deadlines":28},"blocks":0,"headings":0,"citations":108}},{"version":5,"generated_at":"2026-11-12T05:14:19+00:00","dataset_version":"ef1018b7a6a2","changelog":"Dataset 4559f86f527b → ef1018b7a6a2. Sheet \"Deadlines\": 23 → 28 rows (+5). Record citations: 103 → 108.","stats":{"sheets":{"Matrix":80,"Deadlines":28},"blocks":0,"headings":0,"citations":108}},{"version":4,"generated_at":"2026-10-16T05:30:04+00:00","dataset_version":"4559f86f527b","changelog":"Dataset 1e8ea28a8a93 → 4559f86f527b. Sheet \"Matrix\": 42 → 80 rows (+38). Record citations: 65 → 103.","stats":{"sheets":{"Matrix":80,"Deadlines":23},"blocks":0,"headings":0,"citations":103}},{"version":3,"generated_at":"2026-10-09T05:30:03+00:00","dataset_version":"1e8ea28a8a93","changelog":"Dataset 3335c39da4b7 → 1e8ea28a8a93.","stats":{"sheets":{"Matrix":42,"Deadlines":23},"blocks":0,"headings":0,"citations":65}},{"version":2,"generated_at":"2026-09-27T05:30:03+00:00","dataset_version":"3335c39da4b7","changelog":"Dataset 914895c3103e → 3335c39da4b7. Sheet \"Deadlines\": 22 → 23 rows (+1). Record citations: 64 → 65.","stats":{"sheets":{"Matrix":42,"Deadlines":23},"blocks":0,"headings":0,"citations":65}},{"version":1,"generated_at":"2026-09-26T13:04:39+00:00","dataset_version":"914895c3103e","changelog":"First version, built from dataset 914895c3103e.","stats":{"sheets":{"Matrix":42,"Deadlines":22},"blocks":0,"headings":0,"citations":64}}]},"meta":{"license":"CC BY 4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","disclaimer":"This template is generated from the records on aipolicytracker.org. It is an informational resource, not legal advice, and completing it does not make an organisation compliant with any law or standard. Every row that cites a duty links to the record it came from; check the official source before relying on it."}}