NYC Local Law 144
Mandates annual bias audits for AI hiring tools in NYC.
$500 first violation • $1,500 subsequent
Multi-Layered Regulation
Navigating the Global AI Patchwork
AI regulation operates across five levels: municipal, state, national, international, and multilateral. Each layer has its own rules, penalties, and enforcement mechanisms. Without a unified compliance strategy, businesses risk falling through the cracks—or worse, facing overlapping and conflicting obligations.
Five Layers of AI Governance
From Local Ordinances to Global Treaties
1. Municipal & Local
Local ordinances focus on consumer protection, labor rights, and algorithmic fairness in employment decisions.
Chicago Municipal Code
Requires consent and disclosures for AI video interview analysis.
Statutory damages + class-action exposure
San Francisco Facial Recognition Ban
Prohibits municipal use of facial recognition and imposes transparency requirements for commercial AI.
Up to $10,000 per violation
2. State & Regional (U.S.)
States are the primary sandbox for AI regulation, focusing on high-risk governance, training data disclosures, and consumer transparency.
Colorado SB 26-189 (ADMT)
Effective January 1, 2027. Notice, disclosure, and opt-out for automated decision-making in consequential domains. The replacement for SB 24-205, repealed on May 14, 2026.
Notice, disclosure, and opt-out obligations
California AB 2013 / SB 942
Mandates training dataset disclosures, safety frameworks, and watermarking for AI media.
Up to $2,500 per violation
Texas TRAIGA
Prohibits AI models designed to induce self-harm, deceive voters, or systematically discriminate.
Up to $10,000 per infraction
3. Federal & National (U.S.)
Federal regulation balances Executive Orders with agency-driven enforcement (FTC, EEOC).
Executive Order 14409
Establishes a unified federal framework for AI, focusing on procurement, defense, and national security.
Loss of federal contracts + debarment
FTC Act (Section 5)
Prosecutes 'unfair or deceptive practices' related to AI, including bias, unauthorized data scraping, and deepfakes.
Up to $51,744 per violation + algorithmic disgorgement
EEOC Algorithmic Accountability
Enforces Title VII against employers using AI hiring tools that result in disparate impact.
Back pay + compensatory/punitive damages
4. International
Comprehensive, horizontal legislation with extraterritorial reach (e.g., EU AI Act, UK framework).
EU AI Act
Risk-based framework with prohibitions on unacceptable risk systems and strict obligations for high-risk AI.
Up to €35M or 7% global turnover
UK AI Regulatory Framework
Decentralized, sector-led approach enforced by existing regulators (ICO, FCA, CMA).
Varies by regulator (e.g., £17.5M or 4% turnover under UK GDPR)
China Generative AI Measures
Mandates adherence to 'Core Socialist Values,' security assessments, and real-name registration for public-facing AI.
Service suspension + criminal liability for executives
5. Cross-Governmental & Multilateral
International treaties and consensus models that influence domestic legislation.
Council of Europe AI Convention
First legally binding international treaty on AI, focusing on human rights, democracy, and the rule of law.
State-level liability under international law
UN AI Resolution
Global consensus resolution calling for safe, secure, and trustworthy AI development.
Diplomatic pressure + trade restrictions
OECD AI Principles
Standards for responsible AI (fairness, transparency, robustness, security, accountability).
Used as benchmark in domestic courts for negligence
Your Roadmap to Compliance
Global AI Compliance Action Plan
1. Conduct an AI Inventory
Map every algorithm, automated tool, and generative model currently deployed internally or offered commercially.
2. Determine Jurisdiction & Risk Class
Check if systems fall under EU AI Act Annex III, Colorado/California/Texas 'consequential decisions,' or NYC AEDTs.
3. Establish Human-in-the-Loop Safeguards
Ensure high-impact decisions (hiring, financing, contract terminations) undergo human review and offer opt-out mechanisms.
4. Implement Technical Disclosures
Embed latent provenance watermarking and user notices across all generative outputs.
5. Automate Auditing & Monitoring
Deploy continuous compliance checks, bias monitoring, and privacy verification as background processes.
The Only Structural Solution
RTFCT Covers Every Jurisdiction, From Day One
The global AI patchwork is complex, but RTFCT simplifies compliance. Our structural layer automatically enforces the strictest common denominator across all jurisdictions—so you can deploy AI anywhere, without fear of regulatory or social calamities.
With RTFCT, you’re not just compliant—you’re future-proof.