AI laws
-
The European Banking Authority Maps the AI Act Against EU Banking and Payments Law for AI That Assesses the Creditworthiness of Natural Persons
In a letter of November 21, 2025, the European Banking Authority tells the European Commission where EU banking and payments law already has obligations relevant to the AI Act's requirements on high-risk AI used to assess creditworthiness, including where the act "does not envisage targeted derogations or other regulatory synergies."
-
The European Commission Says It Starts Enforcing AI Act Rules on August 2
On July 31, 2026, the European Commission said that from August 2 its AI Office and national authorities "will begin enforcing" the AI Act, as new transparency rules start to apply. The same release says the AI Omnibus postponed the application of the rules on high-risk AI systems to December 2, 2027.
-
It Is Not a Defense: Utah's 2025 Law on Generative AI in Consumer Transactions and Regulated Services
Utah's S.B. 226 of 2025 says it is not a defense to the violation of a statute its Division of Consumer Protection administers and enforces that generative AI "made the violative statement" or "undertook the violative act." Someone providing services in a regulated occupation must disclose generative AI in a "high-risk" interaction.
-
Consequential Decisions: Colorado's 2024 Law on High-Risk Artificial Intelligence Systems, May 2024
In May 2024, Colorado's governor approved a law on high-risk AI systems used in consequential decisions, among them decisions on lending, insurance and legal services. As signed, the duty of reasonable care it places on those who develop and deploy such systems applies on and after February 1, 2026.

