Each supervisor's instruments, reconciled and encoded.

Versioned policy-as-code. A new circular is a Jurisdiction Pack release, not a project.

Roadmap

  1. Hong Kong In build
  2. Singapore In build
  3. Australia / New Zealand Authoring
  4. United Kingdom Authoring
  5. United States Scoped
  6. Canada Scoped
  7. European Union Planned
  8. Southeast Asia Planned
  9. East Asia Planned

Jump to

Pack status

All instruments remain in the page. Filters only hide blocks visually so browser find still works on the full set.

Hong Kong

HKMA · SFC · HKIA · PCPD · DPO · FSTB In build

Last reviewed: 2026-08-05

Instrument Authority Date Verified
Use of Generative Artificial Intelligence in Banking HKMA 2024-08-09 ✓
High-level Principles on Artificial Intelligence HKMA 2019-11-01 ✓
Consumer Protection in respect of Use of Big Data Analytics and Artificial Intelligence HKMA 2019-11-01 ✓
Sound Risk Management Practices for Artificial Intelligence Applications HKMA 2026-01-01 ✓
Model Risk Management expectations for AI-enabled credit processes HKMA 2026-03-01 ✓
Circular on the Use of Generative AI Language Models SFC 2024-11-01 ✓
Responsible AI Governance Framework FSTB 2024-10-01 ✓
Model Personal Data Protection Framework for AI PCPD 2024-06-01 ✓
Employee Generative AI and AI Agent Security Checklist (agentic update) PCPD 2026-05-01 ✓
Hong Kong Generative AI Technical and Application Guideline DPO 2026-04-01 ✓
AI Cohort Programme and Centres of Excellence (10 carriers) HKIA 2026-06-01 ✓
Dedicated AI Governance Guideline (vendor concentration; in build) HKIA 2026-12-01 Pending publication

Singapore

MAS · IMDA · PDPC In build

Last reviewed: 2026-08-05

Instrument Authority Date Verified
FEAT Principles (Fairness, Ethics, Accountability and Transparency) MAS 2018-11-12 ✓
Veritas Toolkit and methodology publications MAS 2020-01-01 ✓
Guidelines on Artificial Intelligence Risk Management MAS 2026-06-01 ✓
AI Risk Management Operationalisation Handbook (Project Mindforge) MAS 2026-03-20 ✓
Technology Risk Management Guidelines (AI-relevant controls) MAS 2021-01-18 ✓
Proposed Amendments to Notices on Technology Risk Management (P012-2026) MAS 2026-06-10 Pending publication
Advisory Guidelines on use of Personal Data in AI Recommendation and Decision Systems PDPC 2024-03-01 ✓
Advisory Guidelines on the Use of Personal Data in Generative AI PDPC 2026-07-20 ✓
Model AI Governance Framework and AI Verify 2.0 IMDA 2026-01-01 ✓
Model AI Governance Framework for Agentic AI IMDA / AI Verify Foundation 2026-06-01 ✓

Australia / New Zealand

APRA · PM&C · OAIC · OPC Authoring

Last reviewed: 2026-08-05

Instrument Authority Date Verified
CPS 230 Operational Risk Management (AI-relevant) APRA 2023-07-17 ✓
Prudential board literacy mandate for AI model challenge APRA 2026-04-30 ✓
Office of AI and mandatory AI standards policy pivot PM&C 2026-07-15 ✓
Privacy Act ADM reforms (hard compliance deadline) OAIC 2026-12-10 ✓
Voluntary AI Safety Standard (Commonwealth; superseded posture) Home Affairs 2024-09-05 ✓
Privacy Amendment Act (IPP3A; indirect collection transparency) OPC (New Zealand) 2026-05-01 ✓
Algorithm Charter for Aotearoa New Zealand New Zealand Government 2020-07-01 ✓
Biometric Information Privacy Code (finalizing) OPC (New Zealand) 2026-09-01 Pending publication

United Kingdom

FCA · PRA · BoE · ICO · Cabinet Office · OPSS Authoring

Last reviewed: 2026-08-05

Instrument Authority Date Verified
SS1/23 Model risk management principles for banks PRA 2023-05-17 ✓
Joint PRA / BoE response on safe AI innovation (vendor concentration) PRA / BoE 2026-04-01 ✓
Mills Review into AI in Retail Financial Services FCA 2026-07-06 ✓
Statutory Code of Practice on AI and ADM mandate (SI 2026/425) ICO 2026-05-12 ✓
Guidance on AI and data protection ICO 2023-03-15 ✓
Call for Evidence on Regulation of AI and Data-Intensive Technologies Cabinet Office 2026-09-09 ✓
Product Regulation and Metrology Act 2025 (AI-enabled goods recall powers) OPSS 2025-10-01 ✓
Data (Use and Access) Act 2025 (financial services AI enforcement vector) UK Parliament 2025-01-01 ✓

United States

Fed · OCC · FDIC · NIST · OMB · CISA · FTC Scoped

Last reviewed: 2026-08-05

Instrument Authority Date Verified
SR 26-2 / OCC Bulletin 2026-15 / FDIC FIL-23-2026 Model Risk Management Fed / OCC / FDIC 2026-04-17 ✓
SR 11-7 / OCC 2011-12 Guidance on Model Risk Management (superseded by SR 26-2) Fed / OCC 2011-04-04 ✓
Joint RFI on Financial Institution Use of AI (comments close 15 Sep 2026) Fed / OCC / FDIC 2026-05-01 ✓
Final Rule on Automated Valuation Models (AVM) Fed / OCC / FDIC / CFPB / NCUA / FHFA 2024-06-01 ✓
AI Risk Management Framework 1.0 NIST 2023-01-26 ✓
NIST AI RMF Generative AI Profile (AI 600-1) NIST 2024-07-26 ✓
NIST SSDF AI Overlay (supply-chain attestation) NIST 2026-01-01 ✓
EO 14365 Ensuring a National Policy Framework for Artificial Intelligence White House 2025-12-11 ✓
OMB Memo M-26-04 Increasing Public Trust in AI OMB 2025-12-11 ✓
National Policy Framework for AI (legislative blueprint) White House 2026-03-20 ✓
CISA Binding Operational Directive BOD 26-04 CISA 2026-06-25 ✓
Colorado Artificial Intelligence Act (CAIA) State of Colorado 2026-06-30 ✓
Texas TRAIGA Act State of Texas 2025-09-01 ✓
Federal ADM and data centre bills (pending midterms) US Congress 2026-08-01 Pending publication

Canada

OSFI · FCAC · AMF Scoped

Last reviewed: 2026-08-05

Instrument Authority Date Verified
Revised Guideline E-23 Model Risk Management (effective 1 May 2027) OSFI 2025-09-11 ✓
FIFAI II Joint Report on AI Risks and Opportunities OSFI / FCAC 2026-03-23 ✓
Model Risk Management Guideline (Quebec) AMF 2025-06-01 ✓
Guideline B-13 Technology and Cyber Risk Management (AI-relevant) OSFI 2022-07-01 ✓

European Union

European Commission · AI Office · EBA · EIOPA · ESMA Planned

Last reviewed: 2026-08-05

Instrument Authority Date Verified
EU AI Act (Regulation EU 2024/1689) high-risk systems deadline European Commission 2026-08-02 ✓
EU AI Act GPAI and foundation model obligations European AI Office 2025-08-02 ✓
EU AI Act prohibited AI systems ban European Commission 2025-02-02 ✓
Digital Operational Resilience Act (DORA) EBA / EIOPA / ESMA 2025-01-17 ✓
Joint ESA Guidelines on the Use of Artificial Intelligence EBA / EIOPA / ESMA 2026-06-01 ✓

Southeast Asia

ASEAN · Vietnam · Indonesia · Malaysia · Philippines · Thailand Planned

Last reviewed: 2026-08-05

Instrument Authority Date Verified
ASEAN Guide on AI Governance and Ethics (GenAI expansion 2025) ASEAN 2024-02-01 ✓
Vietnam AI Law (risk-based; binding) Vietnam 2026-03-01 ✓
Indonesia Personal Data Protection Law (UU PDP) with AI ethics regulations pending Indonesia 2022-01-01 ✓
Malaysia National AI Governance and Ethics Guidelines / MDEC Framework Malaysia 2026-06-01 ✓
National AI Strategy Roadmap 2.0 (NAIS-PH) Philippines (DTI / DOST) 2025-05-01 ✓
DICT-CSC Joint Memorandum Circular No. 003 (AI procurement ethics) Philippines (DICT / CSC) 2026-06-01 ✓
National AI Governance Framework (administrative; under finalization) Philippines (DEPDev) 2026-04-01 Pending publication
Artificial Intelligence Development and Regulation Act of 2026 (substitute bill; pending) Philippines (DICT) 2026-07-05 Pending publication
Data Privacy Act of 2012 (automated decision-making) Philippines (NPC) 2012-01-01 ✓
Cybercrime Prevention Act (algorithmic fraud and deepfakes) Philippines 2012-01-01 ✓
National AI Strategy and Action Plan (2022-2027) Thailand (MDES / MHESI) 2022-01-01 ✓
National AI Committee (Prime Minister chair; restructured) Thailand 2026-03-01 ✓
Draft Act on Artificial Intelligence (consultation 9 Jul-14 Aug 2026; pending) Thailand (ETDA / MDES) 2026-07-02 Pending publication
Personal Data Protection Act (PDPA) Thailand 2022-06-01 ✓
Digital Platform Services Decree (algorithmic disclosure) Thailand (ETDA) 2022-01-01 ✓

East Asia

South Korea · China · Taiwan (China) · Japan Planned

Last reviewed: 2026-08-05

Instrument Authority Date Verified
AI Basic Act (Framework Act; labeling and extraterritorial reach) South Korea 2026-01-22 ✓
Amended Cybersecurity Law (CSL) AI enforcement track China 2026-01-01 ✓
Anthropomorphic AI Framework China 2026-07-01 ✓
AI Basic Act (risk-based; 2-year alignment window via NSTC) Taiwan (China) 2026-01-14 ✓
AI Promotion Act (soft-law R&D steering) Japan 2026-01-01 ✓
APPI Amendments (AI training, DPIA, cross-border data) Japan 2026-01-01 ✓

Every instrument named here is dated and traceable to its issuing authority. A gold check means we verified the citation. Pending publication means the instrument is real and tracked, but the final text is not out yet.

Need pack detail for a committee?

Request a briefing. We walk the instruments that bind your programme, with verification status plain.

Request a briefing