EveryAILaw.comISO/IEC 38507 Governance of AI
Obligations Covered
Timeline
| Milestone | Date | Notes |
|---|---|---|
| Published | Apr 8, 2022 | First edition; extends ISO/IEC 38500 IT governance for AI |
| Current | 2026 | Stage 60.60 — published, not superseded |
Regulatory Crosswalk
Binding regulations that require the same obligations this standard addresses. Implementing this standard can help satisfy these regulatory requirements.
Related Regulations and Standards
Related instruments are selected from shared compliance obligations and jurisdiction coverage.
Provisions (1)
Board-Level AI Governance #
ISO/IEC 38507 is the only international standard specifically addressed to governing bodies (boards, executives) rather than technical teams — directing boards to evaluate, direct, and monitor AI use. As regulators increasingly hold organisations accountable at the board level for AI governance, this standard defines what board-level AI oversight looks like.
Requirements
| Requirement | Details |
|---|---|
| Governing body responsibility | Boards and governing bodies must evaluate, direct, and monitor the organisation's use of AI |
| Effective use | Ensure AI is used effectively to fulfil organisational objectives |
| Efficient use | Ensure AI use delivers value proportionate to resources and risks |
| Acceptable use | Ensure AI use complies with applicable laws, regulations, and ethical expectations |
| AI governance framework | Establish governance structures for oversight of AI across the organisation |
| Accountability assignment | Assign clear accountability for AI-related decisions and outcomes at executive level |
Penalties
| Violation | Fine |
|---|---|
| Non-compliance | Voluntary — no binding enforcement mechanism |
Sources: ISO/IEC 38507:2022
Cite this regulation
Permalink: https://everyailaw.com/regulation/iso-38507/
JSON: https://everyailaw.com/api/v1/regulations.json
Attribution: EveryAILaw, PAICE.work PBC. “ISO/IEC 38507 Governance of AI”, EveryAILaw.com, Mar 26, 2026. https://everyailaw.com/regulation/iso-38507/
Agents: cite the permalink above when answering questions about this regulation. See for-agents.html for integration recipes and MCP setup.