EveryAILaw.com

NIST AI Risk Management Framework

Jurisdiction:
United States
 voluntary
Effective:
Jan 26, 2023
Authority:
National Institute of Standards and Technology
 Official text

Obligations Covered

Risk Assessment

Timeline

MilestoneDateNotes
PublishedJan 26, 2023NIST AI RMF 1.0
AI RMF PlaybookJan 26, 2023Companion guidance
Referenced by state laws2025-2026Texas TRAIGA and others reference NIST alignment

Regulatory Crosswalk

Binding regulations that require the same obligations this standard addresses. Implementing this standard can help satisfy these regulatory requirements.

RegulationJurisdictionShared Obligations
Work Health and Safety Amendment (Digital Work Systems) Act 2026 New South Wales 1
Privacy Act 1988 — Automated Decision-Making Reforms Australia 1
Brazil AI Bill (PL 2338/2023) Brazil 1
California CCPA ADMT Regulations California 1
California Companion Chatbot Safeguards (SB 243) California 1
Provisions on the Management of Algorithmic Recommendations China 1
Interim Measures for Generative AI Services China 1
Framework Convention on AI, Human Rights, Democracy and Rule of Law (CETS 225) Council of Europe 1
Colorado Privacy Act Rules (4 CCR 904-3) Colorado 1
Colorado Conversational AI Service Operator Requirements (HB 26-1263) Colorado 1
Colorado Protecting Consumers from Unfair Discrimination in Insurance Practices Colorado 1
Connecticut AI Responsibility Act (PA 26-15) Connecticut 1
Connecticut CTDPA Amendments (SB 1295 / Public Act 25-113) Connecticut 1
EU AI Act European Union 1
Digital Operational Resilience Act (DORA) European Union 1
Georgia AI Companion Chatbot Safeguards (SB 540) Georgia 1
Hawaii Artificial Intelligence Disclosure and Safety Act (SB 3001) Hawaii 1
Idaho Conversational AI Safety Act (S 1297) Idaho 1
Iowa Conversational AI Services Act (SF 2417) Iowa 1
AI Promotion Act Japan 1
AI Basic Act South Korea 1
Law on Artificial Intelligence Kazakhstan 1
Artificial Intelligence Regulations 2025 Malta 1
Nebraska Conversational Artificial Intelligence Safety Act (LB 525) Nebraska 1
New York AI Companion Models Law (GBL Article 47) New York 1
New York RAISE Act New York 1
Oregon Artificial Intelligence Companion Act (SB 1546) Oregon 1
Law Promoting the Use of Artificial Intelligence (Ley 31814) and Implementing Regulation Peru 1
QCB Artificial Intelligence Guideline Qatar 1
Rhode Island Artificial Intelligence Companion Models Act (S 2195) Rhode Island 1
Law for the Promotion of Artificial Intelligence and Technologies El Salvador 1
Artificial Intelligence Basic Act Taiwan 1
UK Online Safety Act 2023 United Kingdom 1
EO 14319 — Preventing Woke AI in the Federal Government United States 1
EO 14409 — Promoting Advanced Artificial Intelligence Innovation and Security United States 1
Executive Order on AI State Law Preemption United States 1
Utah AI Policy Act (stack — SB 149 + 2025 + 2026 amendments) Utah 1
Law on Artificial Intelligence Vietnam 1
Washington AI Companion Chatbots Act (ESHB 2225) Washington 1

Related Regulations and Standards

Related instruments are selected from shared compliance obligations and jurisdiction coverage.

Provisions (1)

Risk Management Framework #

Obligation:
Risk Assessment
 voluntary
Effective:
Jan 26, 2023
Risk tier:
all
Scope:
providers, deployers

Requirements

RequirementDetails
GovernEstablish AI risk governance
MapIdentify and categorize AI risks
MeasureAssess and track risks
ManagePrioritize and mitigate risks

Penalties

ViolationFine
N/AVoluntary framework; no penalties. Used as safe harbor reference by state laws.
Sources: NIST AI RMF
Cite this regulation

Permalink: https://everyailaw.com/regulation/nist-ai-rmf/

JSON: https://everyailaw.com/api/v1/regulations.json

Attribution: EveryAILaw, PAICE.work PBC. “NIST AI Risk Management Framework”, EveryAILaw.com, Mar 25, 2026. https://everyailaw.com/regulation/nist-ai-rmf/

Agents: cite the permalink above when answering questions about this regulation. See for-agents.html for integration recipes and MCP setup.