{
  "meta": {
    "generated": "2026-09-01T00:00:00Z",
    "license": {
      "name": "EveryAILaw Data License v1.4.1",
      "url": "https://everyailaw.com/data-license.html",
      "summary": "Direct use, evaluation, research, citation, internal tooling, and machine/agent querying (including by LLMs and via MCP) are free via the public Free Endpoint, no permission required. Commercial redistribution, or embedding the corpus into a Product or Service made available to a Third Party, requires a Commercial Agreement.",
      "commercial": "https://paice.work/contact/"
    },
    "description": "Standards-to-obligations crosswalk. Maps which voluntary standards address which compliance obligations, and which binding regulations share those obligations.",
    "standards_count": 9,
    "obligations_count": 10
  },
  "by_obligation": {
    "ai-literacy": {
      "name": "AI Literacy & Training",
      "regulations": [
        "eu-ai-act"
      ],
      "standards": []
    },
    "bias-prevention": {
      "name": "Bias & Discrimination Prevention",
      "regulations": [
        "connecticut-pa26-15",
        "illinois-hb3773",
        "texas-traiga",
        "eu-ai-act",
        "coe-cets-225",
        "nyc-ll144",
        "california-ads-employment-regs",
        "nj-ai-employment-rules",
        "colorado-insurance-ai",
        "kz-ai-law",
        "it-ai-law"
      ],
      "standards": [
        "oecd-ai-principles"
      ]
    },
    "conformity-assessment": {
      "name": "Conformity Assessment",
      "regulations": [
        "eu-ai-act",
        "vn-ai-law",
        "sv-ai-promotion-act",
        "us-eo-ai-innovation-security",
        "cn-ai-content-labeling"
      ],
      "standards": []
    },
    "data-governance": {
      "name": "Data Governance",
      "regulations": [
        "california-ab2013",
        "georgia-sb540",
        "iowa-sf2417",
        "rhode-island-ai-mental-health",
        "uz-ai-amendments",
        "utah-sb149",
        "au-privacy-act-adm",
        "us-eo-14319",
        "in-dpdp",
        "it-ai-law",
        "nebraska-lb525",
        "colorado-hb26-1263"
      ],
      "standards": [
        "iso-42001",
        "eu-gpai-code-of-practice"
      ]
    },
    "explainability": {
      "name": "Explainability",
      "regulations": [
        "california-ccpa-admt",
        "connecticut-pa26-15",
        "pe-ai-law"
      ],
      "standards": [
        "sg-ai-governance-framework"
      ]
    },
    "human-oversight": {
      "name": "Human Oversight",
      "regulations": [
        "colorado-sb26-189",
        "cms-medicare-advantage",
        "california-sb1120",
        "idaho-s1297",
        "georgia-sb540",
        "oregon-sb1546",
        "washington-hb2225",
        "rhode-island-ai-mental-health",
        "rhode-island-healthcare-ai-notice",
        "pe-ai-law",
        "uz-ai-amendments",
        "vermont-act156",
        "utah-sb149",
        "eu-ai-act",
        "uk-dpa-2018-adm",
        "colorado-cpa-rules",
        "kr-ai-basic-act",
        "vn-ai-law",
        "br-ai-bill",
        "coe-cets-225",
        "california-ab3030",
        "mx-lfpdppp",
        "qa-qcb-ai-guideline",
        "it-ai-law",
        "mt-ai-regulations",
        "hawaii-sb3001",
        "maine-ai-mental-health"
      ],
      "standards": [
        "sg-ai-governance-framework",
        "oecd-ai-principles",
        "g7-hiroshima-ai-process",
        "iso-38507"
      ]
    },
    "incident-reporting": {
      "name": "Incident Reporting",
      "regulations": [
        "connecticut-pa26-15",
        "california-sb53",
        "california-sb243",
        "new-york-raise",
        "georgia-sb540",
        "oregon-sb1546",
        "washington-hb2225",
        "rhode-island-ai-companion",
        "eu-dora",
        "cn-generative-ai",
        "us-eo-ai-innovation-security",
        "colorado-hb26-1263",
        "hawaii-sb3001"
      ],
      "standards": [
        "g7-hiroshima-ai-process"
      ]
    },
    "record-keeping": {
      "name": "Record-Keeping & Documentation",
      "regulations": [
        "colorado-sb26-189",
        "pe-ai-law",
        "utah-sb149",
        "eu-ai-act",
        "eu-dora",
        "cn-deep-synthesis",
        "coe-cets-225",
        "california-ads-employment-regs",
        "in-it-amendment-rules-2026",
        "kz-ai-law",
        "connecticut-sb1295",
        "cn-ai-content-labeling"
      ],
      "standards": [
        "iso-42001",
        "g7-hiroshima-ai-process",
        "eu-gpai-code-of-practice"
      ]
    },
    "risk-assessment": {
      "name": "Risk Assessment",
      "regulations": [
        "california-ccpa-admt",
        "connecticut-pa26-15",
        "new-york-ai-companion-models",
        "california-sb243",
        "new-york-raise",
        "idaho-s1297",
        "georgia-sb540",
        "oregon-sb1546",
        "washington-hb2225",
        "iowa-sf2417",
        "rhode-island-ai-companion",
        "pe-ai-law",
        "utah-sb149",
        "eu-ai-act",
        "eu-dora",
        "uk-online-safety-act",
        "colorado-cpa-rules",
        "cn-algorithm-recommendation",
        "cn-generative-ai",
        "kr-ai-basic-act",
        "vn-ai-law",
        "jp-ai-promotion-act",
        "au-privacy-act-adm",
        "tw-ai-basic-act",
        "br-ai-bill",
        "coe-cets-225",
        "colorado-insurance-ai",
        "us-eo-ai-preemption",
        "us-eo-14319",
        "qa-qcb-ai-guideline",
        "sv-ai-promotion-act",
        "kz-ai-law",
        "mt-ai-regulations",
        "au-nsw-digital-work-systems",
        "us-eo-ai-innovation-security",
        "nebraska-lb525",
        "colorado-hb26-1263",
        "hawaii-sb3001",
        "connecticut-sb1295"
      ],
      "standards": [
        "nist-ai-rmf",
        "sg-ai-governance-framework",
        "oecd-ai-principles",
        "iso-42001",
        "g7-hiroshima-ai-process",
        "eu-gpai-code-of-practice",
        "iso-23894",
        "iso-42005"
      ]
    },
    "transparency": {
      "name": "Transparency & Disclosure",
      "regulations": [
        "colorado-sb26-189",
        "california-ccpa-admt",
        "connecticut-pa26-15",
        "connecticut-sb1295",
        "california-sb53",
        "new-york-ai-companion-models",
        "california-sb243",
        "idaho-s1297",
        "georgia-sb540",
        "oregon-sb1546",
        "washington-hb2225",
        "iowa-sf2417",
        "rhode-island-ai-companion",
        "rhode-island-ai-mental-health",
        "rhode-island-healthcare-ai-notice",
        "pe-ai-law",
        "utah-sb149",
        "eu-ai-act",
        "uk-dpa-2018-adm",
        "uk-online-safety-act",
        "cn-algorithm-recommendation",
        "cn-deep-synthesis",
        "cn-generative-ai",
        "kr-ai-basic-act",
        "vn-ai-law",
        "jp-ai-promotion-act",
        "au-privacy-act-adm",
        "br-ai-bill",
        "coe-cets-225",
        "california-ai-transparency-act",
        "nyc-ll144",
        "california-ab3030",
        "us-eo-ai-preemption",
        "us-eo-14319",
        "in-it-amendment-rules-2026",
        "mx-lfpdppp",
        "qa-qcb-ai-guideline",
        "sv-ai-promotion-act",
        "kz-ai-law",
        "it-ai-law",
        "au-nsw-digital-work-systems",
        "nebraska-lb525",
        "colorado-hb26-1263",
        "hawaii-sb3001",
        "maine-ai-mental-health",
        "cn-ai-content-labeling"
      ],
      "standards": [
        "oecd-ai-principles",
        "g7-hiroshima-ai-process",
        "eu-gpai-code-of-practice"
      ]
    }
  },
  "by_standard": {
    "eu-gpai-code-of-practice": {
      "name": "General-Purpose AI Code of Practice (GPAI CoP)",
      "type": "framework",
      "obligations": [
        "data-governance",
        "record-keeping",
        "risk-assessment",
        "transparency"
      ],
      "related_regulations": [
        "au-nsw-digital-work-systems",
        "au-privacy-act-adm",
        "br-ai-bill",
        "california-ab2013",
        "california-ab3030",
        "california-ads-employment-regs",
        "california-ai-transparency-act",
        "california-ccpa-admt",
        "california-sb243",
        "california-sb53",
        "cn-ai-content-labeling",
        "cn-algorithm-recommendation",
        "cn-deep-synthesis",
        "cn-generative-ai",
        "coe-cets-225",
        "colorado-cpa-rules",
        "colorado-hb26-1263",
        "colorado-insurance-ai",
        "colorado-sb26-189",
        "connecticut-pa26-15",
        "connecticut-sb1295",
        "eu-ai-act",
        "eu-dora",
        "georgia-sb540",
        "hawaii-sb3001",
        "idaho-s1297",
        "in-dpdp",
        "in-it-amendment-rules-2026",
        "iowa-sf2417",
        "it-ai-law",
        "jp-ai-promotion-act",
        "kr-ai-basic-act",
        "kz-ai-law",
        "maine-ai-mental-health",
        "mt-ai-regulations",
        "mx-lfpdppp",
        "nebraska-lb525",
        "new-york-ai-companion-models",
        "new-york-raise",
        "nyc-ll144",
        "oregon-sb1546",
        "pe-ai-law",
        "qa-qcb-ai-guideline",
        "rhode-island-ai-companion",
        "rhode-island-ai-mental-health",
        "rhode-island-healthcare-ai-notice",
        "sv-ai-promotion-act",
        "tw-ai-basic-act",
        "uk-dpa-2018-adm",
        "uk-online-safety-act",
        "us-eo-14319",
        "us-eo-ai-innovation-security",
        "us-eo-ai-preemption",
        "utah-sb149",
        "uz-ai-amendments",
        "vn-ai-law",
        "washington-hb2225"
      ]
    },
    "g7-hiroshima-ai-process": {
      "name": "Hiroshima AI Process – Principles & Code of Conduct",
      "type": "framework",
      "obligations": [
        "human-oversight",
        "incident-reporting",
        "record-keeping",
        "risk-assessment",
        "transparency"
      ],
      "related_regulations": [
        "au-nsw-digital-work-systems",
        "au-privacy-act-adm",
        "br-ai-bill",
        "california-ab3030",
        "california-ads-employment-regs",
        "california-ai-transparency-act",
        "california-ccpa-admt",
        "california-sb1120",
        "california-sb243",
        "california-sb53",
        "cms-medicare-advantage",
        "cn-ai-content-labeling",
        "cn-algorithm-recommendation",
        "cn-deep-synthesis",
        "cn-generative-ai",
        "coe-cets-225",
        "colorado-cpa-rules",
        "colorado-hb26-1263",
        "colorado-insurance-ai",
        "colorado-sb26-189",
        "connecticut-pa26-15",
        "connecticut-sb1295",
        "eu-ai-act",
        "eu-dora",
        "georgia-sb540",
        "hawaii-sb3001",
        "idaho-s1297",
        "in-it-amendment-rules-2026",
        "iowa-sf2417",
        "it-ai-law",
        "jp-ai-promotion-act",
        "kr-ai-basic-act",
        "kz-ai-law",
        "maine-ai-mental-health",
        "mt-ai-regulations",
        "mx-lfpdppp",
        "nebraska-lb525",
        "new-york-ai-companion-models",
        "new-york-raise",
        "nyc-ll144",
        "oregon-sb1546",
        "pe-ai-law",
        "qa-qcb-ai-guideline",
        "rhode-island-ai-companion",
        "rhode-island-ai-mental-health",
        "rhode-island-healthcare-ai-notice",
        "sv-ai-promotion-act",
        "tw-ai-basic-act",
        "uk-dpa-2018-adm",
        "uk-online-safety-act",
        "us-eo-14319",
        "us-eo-ai-innovation-security",
        "us-eo-ai-preemption",
        "utah-sb149",
        "uz-ai-amendments",
        "vermont-act156",
        "vn-ai-law",
        "washington-hb2225"
      ]
    },
    "iso-23894": {
      "name": "ISO/IEC 23894 AI Risk Management",
      "type": "standard",
      "obligations": [
        "risk-assessment"
      ],
      "related_regulations": [
        "au-nsw-digital-work-systems",
        "au-privacy-act-adm",
        "br-ai-bill",
        "california-ccpa-admt",
        "california-sb243",
        "cn-algorithm-recommendation",
        "cn-generative-ai",
        "coe-cets-225",
        "colorado-cpa-rules",
        "colorado-hb26-1263",
        "colorado-insurance-ai",
        "connecticut-pa26-15",
        "connecticut-sb1295",
        "eu-ai-act",
        "eu-dora",
        "georgia-sb540",
        "hawaii-sb3001",
        "idaho-s1297",
        "iowa-sf2417",
        "jp-ai-promotion-act",
        "kr-ai-basic-act",
        "kz-ai-law",
        "mt-ai-regulations",
        "nebraska-lb525",
        "new-york-ai-companion-models",
        "new-york-raise",
        "oregon-sb1546",
        "pe-ai-law",
        "qa-qcb-ai-guideline",
        "rhode-island-ai-companion",
        "sv-ai-promotion-act",
        "tw-ai-basic-act",
        "uk-online-safety-act",
        "us-eo-14319",
        "us-eo-ai-innovation-security",
        "us-eo-ai-preemption",
        "utah-sb149",
        "vn-ai-law",
        "washington-hb2225"
      ]
    },
    "iso-38507": {
      "name": "ISO/IEC 38507 Governance of AI",
      "type": "standard",
      "obligations": [
        "human-oversight"
      ],
      "related_regulations": [
        "br-ai-bill",
        "california-ab3030",
        "california-sb1120",
        "cms-medicare-advantage",
        "coe-cets-225",
        "colorado-cpa-rules",
        "colorado-sb26-189",
        "eu-ai-act",
        "georgia-sb540",
        "hawaii-sb3001",
        "idaho-s1297",
        "it-ai-law",
        "kr-ai-basic-act",
        "maine-ai-mental-health",
        "mt-ai-regulations",
        "mx-lfpdppp",
        "oregon-sb1546",
        "pe-ai-law",
        "qa-qcb-ai-guideline",
        "rhode-island-ai-mental-health",
        "rhode-island-healthcare-ai-notice",
        "uk-dpa-2018-adm",
        "utah-sb149",
        "uz-ai-amendments",
        "vermont-act156",
        "vn-ai-law",
        "washington-hb2225"
      ]
    },
    "iso-42001": {
      "name": "ISO/IEC 42001 AI Management System",
      "type": "standard",
      "obligations": [
        "data-governance",
        "record-keeping",
        "risk-assessment"
      ],
      "related_regulations": [
        "au-nsw-digital-work-systems",
        "au-privacy-act-adm",
        "br-ai-bill",
        "california-ab2013",
        "california-ads-employment-regs",
        "california-ccpa-admt",
        "california-sb243",
        "cn-ai-content-labeling",
        "cn-algorithm-recommendation",
        "cn-deep-synthesis",
        "cn-generative-ai",
        "coe-cets-225",
        "colorado-cpa-rules",
        "colorado-hb26-1263",
        "colorado-insurance-ai",
        "colorado-sb26-189",
        "connecticut-pa26-15",
        "connecticut-sb1295",
        "eu-ai-act",
        "eu-dora",
        "georgia-sb540",
        "hawaii-sb3001",
        "idaho-s1297",
        "in-dpdp",
        "in-it-amendment-rules-2026",
        "iowa-sf2417",
        "it-ai-law",
        "jp-ai-promotion-act",
        "kr-ai-basic-act",
        "kz-ai-law",
        "mt-ai-regulations",
        "nebraska-lb525",
        "new-york-ai-companion-models",
        "new-york-raise",
        "oregon-sb1546",
        "pe-ai-law",
        "qa-qcb-ai-guideline",
        "rhode-island-ai-companion",
        "rhode-island-ai-mental-health",
        "sv-ai-promotion-act",
        "tw-ai-basic-act",
        "uk-online-safety-act",
        "us-eo-14319",
        "us-eo-ai-innovation-security",
        "us-eo-ai-preemption",
        "utah-sb149",
        "uz-ai-amendments",
        "vn-ai-law",
        "washington-hb2225"
      ]
    },
    "iso-42005": {
      "name": "ISO/IEC 42005 AI Impact Assessment",
      "type": "standard",
      "obligations": [
        "risk-assessment"
      ],
      "related_regulations": [
        "au-nsw-digital-work-systems",
        "au-privacy-act-adm",
        "br-ai-bill",
        "california-ccpa-admt",
        "california-sb243",
        "cn-algorithm-recommendation",
        "cn-generative-ai",
        "coe-cets-225",
        "colorado-cpa-rules",
        "colorado-hb26-1263",
        "colorado-insurance-ai",
        "connecticut-pa26-15",
        "connecticut-sb1295",
        "eu-ai-act",
        "eu-dora",
        "georgia-sb540",
        "hawaii-sb3001",
        "idaho-s1297",
        "iowa-sf2417",
        "jp-ai-promotion-act",
        "kr-ai-basic-act",
        "kz-ai-law",
        "mt-ai-regulations",
        "nebraska-lb525",
        "new-york-ai-companion-models",
        "new-york-raise",
        "oregon-sb1546",
        "pe-ai-law",
        "qa-qcb-ai-guideline",
        "rhode-island-ai-companion",
        "sv-ai-promotion-act",
        "tw-ai-basic-act",
        "uk-online-safety-act",
        "us-eo-14319",
        "us-eo-ai-innovation-security",
        "us-eo-ai-preemption",
        "utah-sb149",
        "vn-ai-law",
        "washington-hb2225"
      ]
    },
    "nist-ai-rmf": {
      "name": "NIST AI Risk Management Framework",
      "type": "framework",
      "obligations": [
        "risk-assessment"
      ],
      "related_regulations": [
        "au-nsw-digital-work-systems",
        "au-privacy-act-adm",
        "br-ai-bill",
        "california-ccpa-admt",
        "california-sb243",
        "cn-algorithm-recommendation",
        "cn-generative-ai",
        "coe-cets-225",
        "colorado-cpa-rules",
        "colorado-hb26-1263",
        "colorado-insurance-ai",
        "connecticut-pa26-15",
        "connecticut-sb1295",
        "eu-ai-act",
        "eu-dora",
        "georgia-sb540",
        "hawaii-sb3001",
        "idaho-s1297",
        "iowa-sf2417",
        "jp-ai-promotion-act",
        "kr-ai-basic-act",
        "kz-ai-law",
        "mt-ai-regulations",
        "nebraska-lb525",
        "new-york-ai-companion-models",
        "new-york-raise",
        "oregon-sb1546",
        "pe-ai-law",
        "qa-qcb-ai-guideline",
        "rhode-island-ai-companion",
        "sv-ai-promotion-act",
        "tw-ai-basic-act",
        "uk-online-safety-act",
        "us-eo-14319",
        "us-eo-ai-innovation-security",
        "us-eo-ai-preemption",
        "utah-sb149",
        "vn-ai-law",
        "washington-hb2225"
      ]
    },
    "oecd-ai-principles": {
      "name": "OECD AI Principles",
      "type": "standard",
      "obligations": [
        "bias-prevention",
        "human-oversight",
        "risk-assessment",
        "transparency"
      ],
      "related_regulations": [
        "au-nsw-digital-work-systems",
        "au-privacy-act-adm",
        "br-ai-bill",
        "california-ab3030",
        "california-ads-employment-regs",
        "california-ai-transparency-act",
        "california-ccpa-admt",
        "california-sb1120",
        "california-sb243",
        "california-sb53",
        "cms-medicare-advantage",
        "cn-ai-content-labeling",
        "cn-algorithm-recommendation",
        "cn-deep-synthesis",
        "cn-generative-ai",
        "coe-cets-225",
        "colorado-cpa-rules",
        "colorado-hb26-1263",
        "colorado-insurance-ai",
        "colorado-sb26-189",
        "connecticut-pa26-15",
        "connecticut-sb1295",
        "eu-ai-act",
        "eu-dora",
        "georgia-sb540",
        "hawaii-sb3001",
        "idaho-s1297",
        "illinois-hb3773",
        "in-it-amendment-rules-2026",
        "iowa-sf2417",
        "it-ai-law",
        "jp-ai-promotion-act",
        "kr-ai-basic-act",
        "kz-ai-law",
        "maine-ai-mental-health",
        "mt-ai-regulations",
        "mx-lfpdppp",
        "nebraska-lb525",
        "new-york-ai-companion-models",
        "new-york-raise",
        "nj-ai-employment-rules",
        "nyc-ll144",
        "oregon-sb1546",
        "pe-ai-law",
        "qa-qcb-ai-guideline",
        "rhode-island-ai-companion",
        "rhode-island-ai-mental-health",
        "rhode-island-healthcare-ai-notice",
        "sv-ai-promotion-act",
        "texas-traiga",
        "tw-ai-basic-act",
        "uk-dpa-2018-adm",
        "uk-online-safety-act",
        "us-eo-14319",
        "us-eo-ai-innovation-security",
        "us-eo-ai-preemption",
        "utah-sb149",
        "uz-ai-amendments",
        "vermont-act156",
        "vn-ai-law",
        "washington-hb2225"
      ]
    },
    "sg-ai-governance-framework": {
      "name": "Model AI Governance Framework",
      "type": "framework",
      "obligations": [
        "explainability",
        "human-oversight",
        "risk-assessment"
      ],
      "related_regulations": [
        "au-nsw-digital-work-systems",
        "au-privacy-act-adm",
        "br-ai-bill",
        "california-ab3030",
        "california-ccpa-admt",
        "california-sb1120",
        "california-sb243",
        "cms-medicare-advantage",
        "cn-algorithm-recommendation",
        "cn-generative-ai",
        "coe-cets-225",
        "colorado-cpa-rules",
        "colorado-hb26-1263",
        "colorado-insurance-ai",
        "colorado-sb26-189",
        "connecticut-pa26-15",
        "connecticut-sb1295",
        "eu-ai-act",
        "eu-dora",
        "georgia-sb540",
        "hawaii-sb3001",
        "idaho-s1297",
        "iowa-sf2417",
        "it-ai-law",
        "jp-ai-promotion-act",
        "kr-ai-basic-act",
        "kz-ai-law",
        "maine-ai-mental-health",
        "mt-ai-regulations",
        "mx-lfpdppp",
        "nebraska-lb525",
        "new-york-ai-companion-models",
        "new-york-raise",
        "oregon-sb1546",
        "pe-ai-law",
        "qa-qcb-ai-guideline",
        "rhode-island-ai-companion",
        "rhode-island-ai-mental-health",
        "rhode-island-healthcare-ai-notice",
        "sv-ai-promotion-act",
        "tw-ai-basic-act",
        "uk-dpa-2018-adm",
        "uk-online-safety-act",
        "us-eo-14319",
        "us-eo-ai-innovation-security",
        "us-eo-ai-preemption",
        "utah-sb149",
        "uz-ai-amendments",
        "vermont-act156",
        "vn-ai-law",
        "washington-hb2225"
      ]
    }
  }
}