Health Insurance Portability and Accountability Act — 2026 Security Rule Modernization requiring mandatory MFA, inference-level audit logging, AI system risk assessments, and 6-year PHI access log retention.

First comprehensive US state AI regulation. Requires impact assessments, decision logging, and consumer protections for AI systems making consequential decisions in healthcare, finance, legal, insurance, housing, and employment.

The world's first comprehensive AI regulation. Risk-based framework requiring transparency, traceability, and human oversight for high-risk AI systems. Full enforcement began February 2025 with phased compliance deadlines.

Financial industry AI oversight requiring audit trails for AI-assisted decisions, model risk management, fair lending compliance, and supervisory procedures for AI-generated communications.