[{"data":1,"prerenderedAt":225},["ShallowReactive",2],{"uc-regs":3},[4,13,19,27,35,41,48,55,63,70,77,83,90,97,103,108,115,121,127,133,139,145,151,156,161,168,175,180,186,194,201,207,214,219],{"id":5,"label":6,"issuer":7,"region":8,"url":9,"description":10,"useCases":11,"indexable":12},"eu-ai-act","EU AI Act","European Union","europe","https://eur-lex.europa.eu/eli/reg/2024/1689/oj","Regulation (EU) 2024/1689: risk based rules for AI systems, with obligations for high risk systems listed in Annex III and transparency duties under Article 50.",197,true,{"id":14,"label":15,"issuer":7,"region":8,"url":16,"description":17,"useCases":18,"indexable":12},"gdpr","GDPR","https://eur-lex.europa.eu/eli/reg/2016/679/oj","General Data Protection Regulation, including Article 22 on decisions based solely on automated processing.",180,{"id":20,"label":21,"issuer":22,"region":23,"url":24,"description":25,"useCases":26,"indexable":12},"iso-42001","ISO/IEC 42001","ISO and IEC","global","https://www.iso.org/standard/81230.html","The international management system standard for AI.",110,{"id":28,"label":29,"issuer":30,"region":31,"url":32,"description":33,"useCases":34,"indexable":12},"nist-ai-rmf","NIST AI Risk Management Framework","NIST","north-america","https://www.nist.gov/itl/ai-risk-management-framework","Voluntary US framework to map, measure, manage and govern AI risk, with a generative AI profile.",83,{"id":36,"label":37,"issuer":7,"region":8,"url":38,"description":39,"useCases":40,"indexable":12},"dora","DORA","https://eur-lex.europa.eu/eli/reg/2022/2554/oj","Digital Operational Resilience Act for financial entities: ICT risk, incident reporting and third party risk, including AI providers.",66,{"id":42,"label":43,"issuer":44,"region":8,"url":45,"description":46,"useCases":47,"indexable":12},"uk-gdpr","UK GDPR","Information Commissioner's Office","https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/","The UK's version of the GDPR, including rules on solely automated decisions.",64,{"id":49,"label":50,"issuer":51,"region":8,"url":52,"description":53,"useCases":54,"indexable":12},"uk-consumer-duty","FCA Consumer Duty","Financial Conduct Authority","https://www.fca.org.uk/firms/consumer-duty","UK rules that require firms to deliver good outcomes for retail customers, including through automated channels.",47,{"id":56,"label":57,"issuer":58,"region":59,"url":60,"description":61,"useCases":62,"indexable":12},"mas-ai-risk-management","MAS AI risk management guidelines","Monetary Authority of Singapore","asia-pacific","https://www.mas.gov.sg/news/media-releases/2025/mas-guidelines-for-artificial-intelligence-risk-management","Singapore's supervisory expectations for AI risk management at financial institutions, building on the FEAT principles.",36,{"id":64,"label":65,"issuer":66,"region":59,"url":67,"description":68,"useCases":69,"indexable":12},"apra-cps-230","APRA CPS 230","Australian Prudential Regulation Authority","https://www.apra.gov.au/operational-risk-management","Australian operational risk standard covering critical operations and material service providers.",25,{"id":71,"label":72,"issuer":73,"region":23,"url":74,"description":75,"useCases":76,"indexable":12},"pci-dss","PCI DSS","PCI Security Standards Council","https://www.pcisecuritystandards.org/","Security standard for any system that stores, processes or transmits cardholder data.",20,{"id":78,"label":79,"issuer":80,"region":31,"url":81,"description":82,"useCases":76,"indexable":12},"us-sr-11-7","SR 11-7 model risk management","Federal Reserve and OCC","https://www.federalreserve.gov/boarddocs/srletters/2011/sr1107.htm","US supervisory guidance on model risk management, applied by banks to AI and machine learning models.",{"id":84,"label":85,"issuer":86,"region":8,"url":87,"description":88,"useCases":89,"indexable":12},"uk-atrs","UK Algorithmic Transparency Recording Standard","UK Government","https://www.gov.uk/government/collections/algorithmic-transparency-recording-standard-hub","Mandatory transparency records for algorithmic tools used by UK central government.",16,{"id":91,"label":92,"issuer":93,"region":23,"url":94,"description":95,"useCases":96,"indexable":12},"fatf-recommendations","FATF Recommendations","Financial Action Task Force","https://www.fatf-gafi.org/en/publications/Fatfrecommendations/Fatf-recommendations.html","Global standards for anti money laundering and counter terrorist financing that national rules implement.",15,{"id":98,"label":99,"issuer":7,"region":8,"url":100,"description":101,"useCases":102,"indexable":12},"eu-amlr","EU Anti Money Laundering Regulation","https://eur-lex.europa.eu/eli/reg/2024/1624/oj","Regulation (EU) 2024/1624: the single EU rulebook for customer due diligence, beneficial ownership and suspicious transaction reporting.",14,{"id":104,"label":105,"issuer":7,"region":8,"url":106,"description":107,"useCases":102,"indexable":12},"nis2","NIS2 Directive","https://eur-lex.europa.eu/eli/dir/2022/2555/oj","Directive (EU) 2022/2555 on cybersecurity for essential and important entities, including telecom networks, energy and public administration.",{"id":109,"label":110,"issuer":111,"region":31,"url":112,"description":113,"useCases":114,"indexable":12},"us-bsa","Bank Secrecy Act","FinCEN","https://www.fincen.gov/resources/statutes-and-regulations/bank-secrecy-act","US anti money laundering law: customer due diligence, suspicious activity reports and record keeping.",13,{"id":116,"label":117,"issuer":7,"region":8,"url":118,"description":119,"useCases":120,"indexable":12},"eu-accessibility-act","European Accessibility Act","https://eur-lex.europa.eu/eli/dir/2019/882/oj","Directive (EU) 2019/882: accessibility requirements for banking services, ecommerce and other digital services, applicable since June 2025.",12,{"id":122,"label":123,"issuer":124,"region":31,"url":125,"description":126,"useCases":120,"indexable":12},"hipaa","HIPAA","US Department of Health and Human Services","https://www.hhs.gov/hipaa/index.html","US rules for the privacy and security of protected health information.",{"id":128,"label":129,"issuer":130,"region":23,"url":131,"description":132,"useCases":120,"indexable":12},"telecom-consumer-rules","Telecom consumer protection rules","National telecom regulators","https://www.berec.europa.eu/","National rules on telecom contracts, switching, billing disputes and marketing consent.",{"id":134,"label":135,"issuer":7,"region":8,"url":136,"description":137,"useCases":138,"indexable":12},"eecc","European Electronic Communications Code","https://eur-lex.europa.eu/eli/dir/2018/1972/oj","Directive (EU) 2018/1972: consumer protection, contract, switching and security rules for telecom operators.",11,{"id":140,"label":141,"issuer":142,"region":31,"url":143,"description":144,"useCases":138,"indexable":12},"us-tcpa","Telephone Consumer Protection Act","Federal Communications Commission","https://www.fcc.gov/consumers/guides/stop-unwanted-robocalls-and-texts","US consent rules for automated and prerecorded calls and texts; the FCC has confirmed AI generated voices count as artificial voices.",{"id":146,"label":147,"issuer":58,"region":59,"url":148,"description":149,"useCases":150,"indexable":12},"mas-notice-626","MAS Notice 626","https://www.mas.gov.sg/regulation/notices/notice-626","Singapore's anti money laundering and counter terrorism financing requirements for banks.",10,{"id":152,"label":153,"issuer":7,"region":8,"url":154,"description":155,"useCases":150,"indexable":12},"mifid-ii","MiFID II","https://eur-lex.europa.eu/eli/dir/2014/65/oj","Directive 2014/65/EU on markets in financial instruments: suitability and appropriateness of advice, record keeping and product governance.",{"id":157,"label":158,"issuer":7,"region":8,"url":159,"description":160,"useCases":150,"indexable":12},"eu-psd2","PSD2","https://eur-lex.europa.eu/eli/dir/2015/2366/oj","Payment Services Directive 2: strong customer authentication, transaction risk analysis exemptions and open banking access.",{"id":162,"label":163,"issuer":164,"region":8,"url":165,"description":166,"useCases":167,"indexable":12},"eba-loan-origination","EBA Guidelines on loan origination and monitoring","European Banking Authority","https://www.eba.europa.eu/regulation-and-policy/credit-risk/guidelines-on-loan-origination-and-monitoring","Expectations for credit decisioning, including the use of automated models.",9,{"id":169,"label":170,"issuer":171,"region":31,"url":172,"description":173,"useCases":174,"indexable":12},"us-ecoa-reg-b","ECOA and Regulation B","Consumer Financial Protection Bureau","https://www.consumerfinance.gov/rules-policy/regulations/1002/9/","US fair lending rules, including specific reasons in adverse action notices, which also apply when credit decisions use AI models.",8,{"id":176,"label":177,"issuer":7,"region":8,"url":178,"description":179,"useCases":174,"indexable":12},"solvency-ii","Solvency II","https://eur-lex.europa.eu/eli/dir/2009/138/oj","Directive 2009/138/EC: risk based capital, governance and model requirements for insurers.",{"id":181,"label":182,"issuer":7,"region":8,"url":183,"description":184,"useCases":185,"indexable":12},"eu-idd","Insurance Distribution Directive","https://eur-lex.europa.eu/eli/dir/2016/97/oj","Directive (EU) 2016/97: conduct rules for selling insurance, including demands and needs testing and advice.",6,{"id":187,"label":188,"issuer":189,"region":190,"url":191,"description":192,"useCases":193,"indexable":12},"cbuae-ai-guidance","CBUAE guidance on AI and ML","Central Bank of the UAE","middle-east","https://www.centralbank.ae/","UAE central bank expectations for the enabling technologies, AI and machine learning used by licensed financial institutions.",5,{"id":195,"label":196,"issuer":197,"region":8,"url":198,"description":199,"useCases":200,"indexable":12},"pra-ss1-23","PRA SS1/23 model risk management","Prudential Regulation Authority","https://www.bankofengland.co.uk/prudential-regulation/publication/2023/may/model-risk-management-principles-for-banks-ss","UK model risk management principles for banks, covering AI and machine learning models.",4,{"id":202,"label":203,"issuer":204,"region":8,"url":205,"description":206,"useCases":200,"indexable":12},"uk-psr-app-reimbursement","UK APP scam reimbursement rules","Payment Systems Regulator","https://www.psr.org.uk/our-work/app-scams/","Mandatory reimbursement of authorised push payment scam victims by UK payment firms, which shifts scam losses onto banks.",{"id":208,"label":209,"issuer":210,"region":59,"url":211,"description":212,"useCases":213,"indexable":12},"au-scams-prevention-framework","Australian Scams Prevention Framework","Australian Treasury","https://treasury.gov.au/consultation/c2024-573813","Economy wide obligations for banks, telcos and digital platforms to prevent, detect, disrupt and respond to scams.",3,{"id":215,"label":216,"issuer":7,"region":8,"url":217,"description":218,"useCases":213,"indexable":12},"eu-mar","EU Market Abuse Regulation","https://eur-lex.europa.eu/eli/reg/2014/596/oj","Regulation (EU) 596/2014: insider dealing and market manipulation, including the duty to detect and report suspicious orders and transactions.",{"id":220,"label":221,"issuer":222,"region":31,"url":223,"description":224,"useCases":213,"indexable":12},"us-fcra","Fair Credit Reporting Act","Federal Trade Commission","https://www.ftc.gov/legal-library/browse/statutes/fair-credit-reporting-act","US rules on consumer reports, their accuracy and permissible use, relevant to credit scoring and screening.",1790598293747]