Each supervisor's instruments, reconciled and encoded.

Versioned policy-as-code. A new circular is a Jurisdiction Pack release, not a project.

Inventory as at 19 August 2026.

What's in a Pack

A Jurisdiction Pack is signed policy-as-code: each instrument becomes controls, mappings and tests that ship into Govern, Guard, Observe and Respond. The tables below are the public inventory, not the encoded pack. A gold check can appear on any row in any pack and cites a first-party source. A secondary mark means the row is corroborated, not first-party ticked. Pack status describes encoding progress, not citation availability. Hong Kong and Singapore are in build. Other packs stay inventory until they move to in build.

Roadmap

  1. Hong Kong In build
  2. Singapore In build
  3. Australia / New Zealand Authoring
  4. United Kingdom Authoring
  5. United States Scoped
  6. Canada Scoped
  7. European Union Planned
  8. Southeast Asia Planned
  9. East Asia Planned
In build
Encoding has started. A gold check on any row in any pack cites a first-party source.
Authoring
Inventory is being drafted. Rows without a tick are a hypothesis list pending first-party sourcing.
Scoped
Markets and seed instruments are identified. Rows without a tick are a hypothesis list pending first-party sourcing.
Planned
Pack composition is decided. Rows without a tick are a hypothesis list pending first-party sourcing.

Jump to

Filters need JavaScript. Without it, every pack stays visible and browser find works on the full set.

How to read Force, Status and Issued*

Hong Kong

HKMA, SFC, Insurance Authority (IA), MPFA, PCPD, FSTB, DPO, OGCIO In build

Last reviewed: 2026-08-19

14 of 15 instruments cite a first-party source. Uncited rows stay in the table without a tick.

Instrument Authority Issued* Force* Status* Source
High-level Principles on Artificial Intelligence B1/15C B9/29C Risk-management limb for authorized institutions (AIs). Supplemented by hk-genai-cp Supplemented by hk-altdata HKMA 2019-11-01 Supervisory expectation In force
BRDR
Consumer Protection in respect of Use of Big Data Analytics and Artificial Intelligence by Authorized Institutions B1/15C B9/67C General consumer-protection limb. Supplemented by hk-genai-cp Supplemented by hk-altdata HKMA 2019-11-05 Supervisory expectation In force
BRDR
Consumer Protection in respect of Use of Generative Artificial Intelligence B1/15C B9/67C Customer-facing applications only. Supplements hk-hlp Supplements hk-bdai Supplemented by hk-altdata HKMA 2024-08-19 Supervisory expectation In force
BRDR
Use of Artificial Intelligence for Monitoring of Suspicious Activities B10/1C B1/15C HKMA 2024-09-09 Elapsed deadline 2025-03 (Board-signed plan; HKMA sets timing per institution.) Supervisory expectation In force
BRDR
Arrangement for Generative A.I. Sandbox B1/15C Annex sets the Sandbox arrangement. HKMA 2024-09-20 Guidance In force
BRDR
Joint Circular on the Expansion of Generative Artificial Intelligence Sandbox HKMA/B1/15C; SFO/IS/009/2026; INS/TEC/10/48; SU/CTC/2026/001 HKMA, SFC, Insurance Authority (IA), MPFA 2026-03-05 Elapsed deadline 2026-06-30 (Sandbox++ applications close.) Guidance In force
Consumer Protection in the Use of Alternative Data B4/1C B9/32C B9/60C Credit assessment, onboarding and product delivery. Supplements hk-hlp Supplements hk-bdai Supplements hk-genai-cp HKMA 2026-03-26 Supervisory expectation In force
BRDR
Guidance on the Ethical Development and Use of Artificial Intelligence PCPD 2021-08-18 Guidance In force
Artificial Intelligence: Model Personal Data Protection Framework PCPD 2024-06-11 Guidance In force
Checklist on Guidelines for the Use of Generative AI by Employees PCPD 2025-03-31 Guidance In force
Policy Statement on Responsible Application of Artificial Intelligence in the Financial Market FSTB 2024-10-28 Guidance In force
Circular to licensed corporations - Use of generative AI language models 24EC55 SFC 2024-11-12 Supervisory expectation In force
Hong Kong Generative Artificial Intelligence Technical and Application Guideline Formulated HKGAI; v1.1 December 2025. DPO 2025-04-15 Guidance In force
Ethical Artificial Intelligence Framework DPO succeeded OGCIO 2024-07-01. OGCIO 2023-08 Guidance In force
Dedicated Artificial Intelligence Governance Guideline Insurance Authority (IA) Expected 2026-12 Guidance Announced Unverified

Supervisory activity

  • AML/CFT Regtech: Case Studies and Insights HKMA · 2021-01-21
  • AML/CFT Regtech: Case Studies and Insights Volume 2 HKMA · 2023-09-25
  • Thematic Review of Transaction Monitoring Systems and Use of Artificial Intelligence HKMA · 2024-04-17
  • Supervisory Policy Manual (SPM): Updated Module CG-6 on Competence and Ethical Behaviour HKMA · 2024-05-23
  • Artificial Intelligence Cohort Programme and Centres of Excellence Insurance Authority (IA) · 2025-08-18 · Second cohort 2026-06-15.
  • Compliance checks on organisations' use of artificial intelligence PCPD · 2026-05-19

Singapore

MAS, PDPC, IMDA, AI Verify Foundation In build

Last reviewed: 2026-08-19

Instrument Authority Issued* Force* Status* Source
Principles to Promote Fairness, Ethics, Accountability and Transparency (FEAT) in the Use of Artificial Intelligence and Data Analytics in Singapore's Financial Sector FEAT MAS 2018-11-12 Guidance In force
Technology Risk Management Guidelines MAS 2021-01-18 Guidance In force
Proposed Guidelines on Artificial Intelligence Risk Management for Financial Institutions P017-2025 MAS 2025-11-13 Elapsed deadline 2026-01-31 (Consultation closed; MAS reviewing feedback.) Consultation Consultation closed
AI Risk Management Operationalisation Handbook Project MindForge MAS 2026-03-20 Guidance In force
Proposed Amendments to Notices on Technology Risk Management P012-2026 Amends TRM Notices (binding when made), not the TRM Guidelines. MAS 2026-06-10 Elapsed deadline 2026-07-31 (Consultation closed; MAS reviewing feedback.) Consultation Consultation closed
Advisory Guidelines on use of Personal Data in AI Recommendation and Decision Systems PDPC 2024-03-01 Guidance In force
Advisory Guidelines on the Use of Personal Data in Generative AI PDPC 2026-07-20 Guidance In force
Model AI Governance Framework (Second Edition) Second edition. Voluntary. IMDA 2020-01-21 Guidance In force
AI Verify Testing toolkit, not a legal instrument. IMDA, AI Verify Foundation 2022
Model AI Governance Framework for Agentic AI First published Jan 2026. Version 1.5 dated 20 May 2026. IMDA, AI Verify Foundation 2026-01 Guidance In force

Supervisory activity

  • Veritas Toolkit and methodology publications MAS · 2019-11

Australia / New Zealand

APRA, OAIC, DISR, NAIC, Office of the Privacy Commissioner (OPC), Stats NZ, PM&C Authoring

Inventory unverified · compiled 2026-08-19

Inventory unverified, compiled 2026-08-19. Rows without a tick are a hypothesis list pending first-party sourcing.

Instrument Authority Market Issued* Force* Status*
CPS 230 Operational Risk Management APRA AU 2023-07-17 Supervisory expectation In force
Privacy Act ADM reforms OAIC AU 2026 Deadline 2026-12-10 Statute
Voluntary AI Safety Standard DISR, NAIC AU 2024-09-05 Guidance Superseded
Privacy Amendment Act IPP3A Indirect collection transparency. Office of the Privacy Commissioner (OPC) NZ 2026-05 Statute
Algorithm Charter for Aotearoa New Zealand Stats NZ NZ 2020-07 Guidance
Biometric Information Privacy Code Office of the Privacy Commissioner (OPC) NZ Expected 2026-09 Consultation Announced

Supervisory activity

  • Prudential board literacy mandate for AI model challenge APRA · 2026-04-30
  • Office of AI and mandatory AI standards PM&C · 2026-07-15

United Kingdom

PRA, BoE, FCA, ICO, Cabinet Office, OPSS, UK Parliament Authoring

Inventory unverified · compiled 2026-08-19

Inventory unverified, compiled 2026-08-19. Rows without a tick are a hypothesis list pending first-party sourcing.

Instrument Authority Issued* Force* Status*
SS1/23 Model risk management principles for banks PRA 2023-05-17 Supervisory expectation In force
Joint PRA / BoE response on safe AI innovation PRA, BoE 2026-04 Guidance
Mills Review into AI in Retail Financial Services FCA 2026-07-06 Report
Statutory Code of Practice on AI and ADM SI 2026/425 ICO 2026-05-12 Subsidiary legislation
Guidance on AI and data protection ICO 2023-03-15 Guidance
Call for Evidence on Regulation of AI and Data-Intensive Technologies Cabinet Office Expected 2026-09-09 Consultation Announced
Product Regulation and Metrology Act 2025 AI-enabled goods recall powers. OPSS 2025-10 Statute
Data (Use and Access) Act 2025 UK Parliament 2025 Statute

United States

Fed, OCC, FDIC, CFPB, NCUA, FHFA, NIST, Executive Office of the President, OMB, CISA, Colorado General Assembly, Colorado Attorney General, Texas Legislature, Texas Attorney General Scoped

Last reviewed: 2026-08-19

Inventory unverified, compiled 2026-08-19. Rows without a tick are a hypothesis list pending first-party sourcing.

7 of 19 instruments cite a first-party source. Uncited rows stay in the table without a tick.

Instrument Authority Market Issued* Force* Status* Source
Model Risk Management SR 26-2; OCC Bulletin 2026-15; FDIC FIL-23-2026 Most relevant above $30bn assets. Footnote 3: governance for tools not covered. Supersedes us-sr11-7 Supersedes us-sr21-8 Fed, OCC, FDIC US 2026-04-17 Supervisory expectation In force
Guidance on Model Risk Management SR 11-7; OCC 2011-12; FDIC FIL-22-2017 FDIC adopted by FIL-22-2017 (2017). Rescinded 2026-04-17. Superseded by us-sr26-2 Fed, OCC, FDIC US 2011-04-04 Supervisory expectation Superseded
Interagency Statement on Model Risk Management for Bank Systems Supporting Bank Secrecy Act/Anti-Money Laundering Compliance SR 21-8; OCC 2021-19; FDIC FIL-27-2021 Superseded by us-sr26-2 Fed, OCC, FDIC US 2021-04-09 Supervisory expectation Superseded
Role of Supervisory Guidance 12 CFR part 4 subpart F; OCC Bulletin 2021-8 Effective 2021-03-15. CFPB and NCUA issued parallel rules; not in this pack. OCC US 2021-02-12 Applies from 2021-03-15 Subsidiary legislation In force
OCC bulletin
Role of Supervisory Guidance 12 CFR part 302 Effective 2021-04-01. FIL-3-2021 is board adoption, not commencement. FDIC US 2021-03-02 Applies from 2021-04-01 Subsidiary legislation In force
Role of Supervisory Guidance 12 CFR part 262 Effective 2021-05-10. Press 2021-03-31 is adoption; Issued is FR 2021-04-08. Fed US 2021-04-08 Applies from 2021-05-10 Subsidiary legislation In force
Board press
Credit Scoring Models – Examination Guidance OCC Bulletin 1997-24 Rescinded 2026-04-17. Not in SR 26-2's supersession list. OCC US 1997 Supervisory expectation Rescinded Unverified
Prohibition on the Use of Reputation Risk by Regulators OCC 2026-12; FDIC FIL-13-2026 Fed did not issue a parallel rule. OCC, FDIC US 2026-04-07 Applies from 2026-06-09 Subsidiary legislation In force
Joint RFI on Financial Institution Use of AI Fed, OCC, FDIC US 2026-05 Deadline 2026-09-15 Consultation Consultation open Unverified
Final Rule on Automated Valuation Models AVM Fed, OCC, FDIC, CFPB, NCUA, FHFA US 2024-06 Subsidiary legislation In force Unverified
AI Risk Management Framework 1.0 NIST US 2023-01-26 Guidance In force Unverified
NIST AI RMF Generative AI Profile AI 600-1 NIST US 2024-07-26 Guidance In force Unverified
NIST SSDF AI Overlay NIST US 2026-01 Guidance In force Unverified
EO 14365 Ensuring a National Policy Framework for Artificial Intelligence Executive Office of the President US 2025-12-11 Guidance In force Unverified
OMB Memo M-26-04 Increasing Public Trust in AI M-26-04 OMB US 2025-12-11 Guidance In force Unverified
National Policy Framework for AI Executive Office of the President US 2026-03-20 Guidance In force Unverified
CISA Binding Operational Directive BOD 26-04 Federal civilian agencies. CISA US 2026-06-25 Subsidiary legislation In force Unverified
Colorado Artificial Intelligence Act CAIA Colorado General Assembly, Colorado Attorney General US, CO 2024-05-17 Applies from 2026-06-30 Statute In force Unverified
Texas Responsible AI Governance Act HB 149 TRAIGA Texas Legislature, Texas Attorney General US, TX 2025-06-22 Applies from 2026-01-01 Statute In force Unverified

Canada

OSFI, FCAC, AMF (Québec) Scoped

Last reviewed: 2026-08-19

Inventory unverified, compiled 2026-08-19. Rows without a tick are a hypothesis list pending first-party sourcing.

7 of 9 instruments cite a first-party source. Uncited rows stay in the table without a tick.

Instrument Authority Market Issued* Force* Status* Source
Guideline E-23 – Enterprise-Wide Model Risk Management for Deposit-Taking Institutions E-23 DTI only. GIAS and covering Letter rescinded 2025-12-31. Guideline itself to 2027-05-01. Superseded by ca-e23 OSFI CA 2017-09-30 Supervisory expectation In force
Guideline E-23 – Model Risk Management E-23 All FRFIs incl. foreign bank and insurance branches per E-4. OECD AI def. fn.1. Model inventory §C.1, App. 1. Effective 2027-05-01 on the instrument page. Supersedes ca-e23-2017 OSFI CA 2025-09-11 Applies from 2027-05-01 Supervisory expectation Effective from
FIFAI II Joint Report on AI Risks and Opportunities OSFI, FCAC CA 2026-03-23 Report Unverified
Model Risk Management Guideline §1 Introduction and scope. Footer June 2025. No commencement date in the instrument. §3.4 inward; §4.4 AMF-facing on request. Search lautorite.qc.ca. Supplemented by ca-amf-ai AMF (Québec) CA, CA-QC 2025-06 Supervisory expectation
English PDF
Guideline for the Use of Artificial Intelligence §2 takes effect 2027-05-01. §6.1 centralized AIS inventory (not directory), fields App. 2. Footer stamp not Issued. Issued (EN) 2026-04-27. Search lautorite.qc.ca. Supplements ca-amf-mrm AMF (Québec) CA, CA-QC 2026-04 Applies from 2027-05-01 Supervisory expectation Effective from
English PDF
Outsourcing Risk Management Guideline Revoked when TPRM takes effect 2027-04-01. Cited by MRM fn.12. Landing ticks supersession. Search lautorite.qc.ca. Superseded by ca-amf-tprm AMF (Québec) CA, CA-QC 2009-04 Supervisory expectation In force
English PDF
Third-Party Risk Management Guideline §2.1 takes effect 2027-04-01. Supersession ticked from Outsourcing landing; TPRM PDF silent. Issued (EN) 2026-04-27. Search lautorite.qc.ca. Supersedes ca-amf-outsource AMF (Québec) CA, CA-QC 2026-04 Applies from 2027-04-01 Supervisory expectation Effective from
English PDF
Guideline B-13 Technology and Cyber Risk Management OSFI CA 2022-07-13 Applies from 2024-01-01 Supervisory expectation In force Unverified
Guideline B-10 Third-Party Risk Management B-10 In force 2024-05-01 per OSFI consultation-response. Guideline HTML has no date line. Vendor models routed from E-23. OSFI CA 2023-04-24 Applies from 2024-05-01 Supervisory expectation In force
effective date

European Union

European Parliament and the Council, EBA, EIOPA, ESMA Planned

Inventory unverified · compiled 2026-08-19

Inventory unverified, compiled 2026-08-19. Rows without a tick are a hypothesis list pending first-party sourcing.

Instrument Authority Issued* Force* Status*
Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence Regulation (EU) 2024/1689 Prohibited AI systems phase. European Parliament and the Council 2024-06-13 Applies from 2025-02-02 Statute In force
Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence Regulation (EU) 2024/1689 GPAI phase. European AI Office supervises. European Parliament and the Council 2024-06-13 Applies from 2025-08-02 Statute In force
Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence Regulation (EU) 2024/1689 Annex III from 2027-12-02. Annex I from 2028-08-02. Omnibus (EU) 2026/1744. European Parliament and the Council 2024-06-13 Applies from 2027-12-02 Statute Effective from
Digital Operational Resilience Act Regulation (EU) 2022/2554 EBA, EIOPA, ESMA 2022-12-14 Applies from 2025-01-17 Statute In force
Joint ESA Guidelines on the Use of Artificial Intelligence EBA, EIOPA, ESMA 2026-06 Guidance In force

Southeast Asia

ASEAN, National Assembly, House of Representatives (DPR), MDEC, DTI, DOST, DICT, CSC, DEPDev, NPC, Congress of the Philippines, MDES, MHESI, ETDA, Personal Data Protection Committee Planned

Inventory unverified · compiled 2026-08-19

Inventory unverified, compiled 2026-08-19. Rows without a tick are a hypothesis list pending first-party sourcing.

Instrument Authority Market Issued* Force* Status*
ASEAN Guide on AI Governance and Ethics GenAI expansion 2025. ASEAN VN, ID, MY, PH, TH 2024-02 Guidance
Law on Artificial Intelligence National Assembly VN 2026-03 Statute
Personal Data Protection Law UU PDP House of Representatives (DPR) ID 2022-10-17 Statute
National AI Governance and Ethics Guidelines Not assigned MY 2026-06 Guidance
MDEC AI Framework MDEC MY 2026-06 Guidance
National AI Strategy Roadmap 2.0 NAIS-PH DTI, DOST PH 2025-05 Guidance
DICT-CSC Joint Memorandum Circular No. 003 AI procurement ethics. DICT, CSC PH 2026-06 Guidance
National AI Governance Framework DEPDev PH 2026-04 Guidance
Substitute Bill on Artificial Intelligence Development and Regulation DICT PH 2026-07-05 Consultation
Data Privacy Act of 2012 NPC PH 2012 Statute In force
Cybercrime Prevention Act of 2012 Congress of the Philippines PH 2012 Statute In force
National AI Strategy and Action Plan Covering 2022–2027. MDES, MHESI TH 2022 Guidance
Draft Act on Artificial Intelligence ETDA, MDES TH 2026-07-02 Elapsed deadline 2026-08-14 (Consultation 9 Jul–14 Aug 2026.) Consultation Consultation closed
Personal Data Protection Act PDPA Personal Data Protection Committee TH 2019 Applies from 2022-06 Statute In force
Digital Platform Services Decree ETDA TH 2022 Applies from 2023-08 Subsidiary legislation In force

Supervisory activity

  • National AI Committee MDES · 2026-03

East Asia

National Assembly, Ministry of Science and ICT (MSIT), NPC Standing Committee, Legislative Yuan, National Diet Planned

Last reviewed: 2026-08-19

Inventory unverified, compiled 2026-08-19. Rows without a tick are a hypothesis list pending first-party sourcing.

2 of 7 instruments cite a first-party source. Uncited rows stay in the table without a tick.

Instrument Authority Market Issued* Force* Status* Source
Framework Act on the Development of Artificial Intelligence and the Creation of a Foundation for Trust Act No. 20676, as amended by Act No. 21311 Art. 2(4)(d) from 2026-01-24. 21311 (prom. 2026-01-20) on law.go.kr. Research institutes, not safety institutes. KLRI unofficial. Implemented by ea-kr-decree National Assembly, Ministry of Science and ICT (MSIT) KR 2025-01-21 Applies from 2026-01-22 Statute In force
unofficial translation
Enforcement Decree of the Framework Act on the Development of Artificial Intelligence and the Creation of a Foundation for Trust Presidential Decree No. 36053, as amended by Presidential Decree No. 36506 Co-commences 2026-01-22. Partial amendment 2026-07-20 (in force 2026-07-21) operationalises Act No. 21311. Fine ceiling KRW 30m. KLRI unofficial. Implements ea-kr-framework Ministry of Science and ICT (MSIT) KR 2026-01-21 Applies from 2026-01-22 Subsidiary legislation In force
unofficial translation
Cybersecurity Law of the People's Republic of China (2025 Amendment) CSL NPC Standing Committee CN 2025-10-28 Applies from 2026-01-01 Statute In force Unverified
Anthropomorphic AI Framework Not assigned CN 2026-07 Guidance Unverified
Artificial Intelligence Fundamental Act Presidential Office Gazette no. 7837 Also cited as Basic Act. Third day from promulgation (Art. 20; Central Regulation Standards Act). Legislative Yuan TW 2026-01-14 Applies from 2026-01-16 Statute In force Unverified
Act on the Promotion of Research and Development, and Utilization of Artificial Intelligence-related Technologies Act No. 53 of 2025 National Diet JP 2025-06-04 Applies from 2025-09-01 Statute In force Unverified
APPI Amendments Training, DPIA, cross-border data. National Diet JP 2026-01 Statute Unverified

Pack detail for a committee

Request a briefing. We walk the instruments that bind your programme, with verification status plain.

Request a briefing