The official texts, standards and trackers behind our work, each with a short note on what it is and when it’s useful. We link to the original wherever we can, so you can check any claim at its source.
EU law
The official texts and the bodies that apply them.
European Union | Law
EU AI Act (Regulation (EU) 2024/1689)
The full official text of the EU’s AI law: risk categories, banned practices, high-risk duties, transparency rules and fines.
eur-lex.europa.eu
European Union | Law
Digital Omnibus on AI (Regulation (EU) 2026/1744)
The July 2026 amendment to the AI Act. It moved the high-risk deadlines to December 2027 and August 2028 and changed several duties, including AI literacy.
eur-lex.europa.eu
European Commission | Guidance
AI Act overview
The Commission’s main page on the AI Act, with the timeline, guidelines and news on how the law is applied.
digital-strategy.ec.europa.eu
European Commission | Tool
AI Act Service Desk
The official help platform for the AI Act: an AI Act Explorer, a compliance checker, FAQs and a way to send questions.
ai-act-service-desk.ec.europa.eu
European Commission | Regulator
European AI Office
The EU body inside the Commission that supervises general-purpose AI models and supports national enforcement of the AI Act.
digital-strategy.ec.europa.eu
European Commission | Code
General-Purpose AI Code of Practice
A voluntary code that helps makers of general-purpose AI models meet their AI Act duties on transparency, copyright, and safety and security.
digital-strategy.ec.europa.eu
European Union | Law
GDPR (Regulation (EU) 2016/679)
The EU’s data protection law. Still the rules that most often apply when AI uses personal data.
eur-lex.europa.eu
European Data Protection Board | Guidance
EDPB
The joint board of EU data protection regulators. It publishes guidelines and opinions, including on AI models and personal data.
edpb.europa.eu
International principles and treaties
The shared principles most national AI policies build on.
Council of Europe | Treaty
Framework Convention on Artificial Intelligence
The first legally binding international treaty on AI, human rights, democracy and the rule of law, opened for signature in September 2024.
coe.int
OECD | Principles
OECD AI Principles
Adopted in 2019 and updated in 2024. The basis of many national AI policies, and of the AI system definition the EU AI Act uses.
oecd.ai
UNESCO | Principles
Recommendation on the Ethics of AI
The global standard on AI ethics, adopted by UNESCO’s member states in November 2021.
unesco.org
Standards and frameworks
Voluntary frameworks and international standards for running AI governance in practice.
NIST | Framework
NIST AI Risk Management Framework
A free, voluntary US framework for managing AI risk, built on four functions: Govern, Map, Measure and Manage.
nist.gov
NIST | Framework
Generative AI Profile (NIST AI 600-1)
Applies the AI RMF to generative AI, with 12 risks that generative AI creates or makes worse, and suggested actions for each.
nvlpubs.nist.gov
NIST | Tool
NIST AI Resource Center
NIST’s hub for the AI RMF Playbook, crosswalks to other frameworks and related guidance.
airc.nist.gov
ISO/IEC | Standard
ISO/IEC 42001
The international standard for an AI management system. Organizations can be certified against it. Paid standard.
iso.org
ISO/IEC | Standard
ISO/IEC 23894
Guidance on managing AI risk, built on the general risk management standard ISO 31000. Paid standard.
iso.org
ISO/IEC | Standard
ISO/IEC 22989
AI concepts and terminology: the shared vocabulary that the other ISO AI standards use.
iso.org
United States
No single federal AI law, so these are the regulators and local laws we follow most.
Federal Trade Commission | Enforcement
Operation AI Comply
The FTC’s September 2024 crackdown on deceptive AI claims and schemes, showing how existing consumer law applies to AI.
ftc.gov
New York City | Law
Automated Employment Decision Tools (Local Law 144)
Rules and FAQs for New York City’s law on AI in hiring and promotion: yearly bias audits and notices to candidates.
nyc.gov
Colorado | Law
SB26-189, Automated Decision-Making Technology
The 2026 law that replaced the original Colorado AI Act. It focuses on notices and consumer rights and takes effect on 1 January 2027.
leg.colorado.gov
California Privacy Protection Agency | Regulation
CCPA regulation updates
California’s privacy regulator, including its rules on automated decision-making technology for significant decisions.
cppa.ca.gov
United Kingdom
No general AI law yet, so regulators apply existing law.
Information Commissioner’s Office | Guidance
ICO guidance on AI and data protection
The UK data protection regulator’s guidance on using AI lawfully under the UK GDPR, including fairness and automated decisions.
ico.org.uk
UK Government | Research
AI Security Institute
The UK government body that tests advanced AI models and researches AI safety and security.
aisi.gov.uk
AI security
Where we start when we look at how AI systems are attacked.
OWASP | Framework
OWASP Top 10 for LLM Applications
The most common security risks in apps built on large language models, from prompt injection to excessive agency. Free and community-run.
genai.owasp.org
MITRE | Knowledge base
MITRE ATLAS
A knowledge base of real attack tactics and techniques used against AI systems, modeled on MITRE ATT&CK.
atlas.mitre.org
NIST | Report
Adversarial Machine Learning (NIST AI 100-2 E2025)
NIST’s taxonomy of attacks on machine learning and generative AI systems, with their known mitigations.
csrc.nist.gov
Incident trackers and other tools
Useful for research and for keeping up with what’s happening.
OECD | Database
OECD AI Incidents Monitor
A searchable database of AI incidents and hazards reported in the news worldwide.
oecd.ai
Responsible AI Collaborative | Database
AI Incident Database
A public, community-run collection of real-world AI harms and near misses.
incidentdatabase.ai
Future of Life Institute | Unofficial
EU AI Act Explorer
An unofficial, easy-to-browse version of the AI Act text with summaries. Handy for reading, but cite the official EUR-Lex text.
artificialintelligenceact.eu
IAPP | Certification
AI Governance Professional (AIGP)
The IAPP’s AI governance certification, with its exam outline (Body of Knowledge) and candidate handbook.
iapp.org
Links checked on 27 October 2026. We have no affiliation with these organizations, and listing a source isn’t an endorsement by them or of them. If a link breaks or a better source exists, email danilo@peritumai.com.