Glossary

AI Regulatory Framework

What is AI Regulatory Framework?

An AI regulatory framework comprises the laws, standards and oversight structures governing how AI is developed and used. In the EU, the central law is the AI Act (Regulation (EU) 2024/1689), which takes a risk-based approach: prohibitions have applied since February 2025, obligations for general-purpose AI models since August 2025 and transparency duties since August 2026. Following the “Digital Omnibus” (Regulation (EU) 2026/1744), high-risk obligations apply from 2 December 2027 or 2 August 2028 (as of October 2026; not legal advice).

Topics

Regulation
EU AI Act
Compliance

Try KI.ordo

Agents, flows and templates in one workspace – free 24-hour demo.

Start demo

← All terms

Related terms

AI Supervisory Authorities

AI supervisory authorities are public bodies that monitor compliance with AI rules. At EU level, the European Commission's AI Office coordinates implementation of the AI Act and supervises general-purpose AI models. In Germany, the implementing act KI-MIG (in force since 29 July 2026) makes the Federal Network Agency (Bundesnetzagentur) the central market surveillance authority, while sector regulators such as BaFin remain responsible. Under the Digital Omnibus, high-risk obligations apply only from December 2027 or August 2028 (as of October 2026; not legal advice).

Regulation
EU AI Act
+2

Data protection regulations

Data protection regulations are legal rules governing the handling of personal data. In the EU the General Data Protection Regulation (GDPR) is the key framework; among other things it requires a legal basis for every processing activity, data minimisation, transparency towards data subjects and data processing agreements with service providers. When using AI, organisations need to clarify which data ends up in inputs, knowledge sources and logs, and where it is processed.

GDPR
data protection
+1

AI Ethics

AI ethics deals with the moral questions surrounding the development and use of AI: fairness and discrimination, transparency and explainability, data protection, responsibility for errors, safety and the effects on work and society. For organisations it becomes concrete in guidelines, risk assessments, human oversight and honest communication about AI's limitations. Example: before a CV screening tool is introduced, it is checked for whether it disadvantages particular groups.

Ethics
Responsibility
+1

Compliance reporting

Compliance reporting is the regular, traceable documentation of whether an organisation meets legal requirements, standards and internal policies. A typical report sets out the period and scope, the status of each requirement, deviations, and measures with owners and deadlines. It serves management, supervisory boards, auditors or authorities as evidence, for example on data protection or information security.

compliance
report
+1

Template