Governance Dashboard
At-a-glance regulatory landscape
Last updated: 2026-05-08
Current Events Summary
Colorado SB 26-189 passed two committees unanimously (5-0, 7-0) and needs full Senate and House passage before May 13. White House deliberating pre-release AI model vetting executive order - driven by Anthropic Mythos cybersecurity concerns. TAKE IT DOWN Act platform compliance deadline arrives May 19. California AB 2013 enforcement unblocked after xAI v. Bonta preliminary injunction denial March 4.
US-Federal-State
89/100
Colorado SB 26-189 must pass by May 13 (5 days); if it fails, SB 24-205 effective June 30; TAKE IT DOWN Act FTC enforcement begins May 19; White House considering pre-release AI model vetting EO; no AI czar replacement (Wiles/Bessent coordinating); DOJ Task Force filed zero suits; xAI v. Bonta merits case ongoing
EU
82/100
AI Act high-risk system obligations due August 2, 2026 (86 days); GPAI transparency in force since August 2025; final GPAI Code of Practice published July 2025; enforcement capacity concerns identified; penalties up to 7% global annual turnover
China
72/100
Generative AI regulations, algorithm registration, content alignment requirements; H.R. 8283 (AI model theft) national security framing; Mythos-driven US cybersecurity AI concerns escalating US-China AI competition frame
UK
58/100
ICO guidance, sector-specific rules via existing regulators, pro-innovation approach; UK AISI independently evaluated Anthropic Mythos cyber capabilities - signals increased UK government engagement with frontier AI risks
Risk Level Guide
Critical — Imminent enforcement, active litigation, or major policy shifts
High — Significant regulatory activity, approaching deadlines, substantial risk
Medium — Developing regulation, upcoming deadlines, moderate uncertainty
Low — Stable regulatory environment, minimal near-term changes expected
Recent Stories
Colorado SB 26-189: Five Days to Repeal and Replace SB 24-205
Colorado's formal replacement bill for SB 24-205 was introduced May 1 and has cleared two committees unanimously (Business 5-0, Appropriations 7-0). The Colorado legislature adjourns May 13 - 5 days remain for full Senate and House passage. SB 26-189 replaces the high-risk AI compliance regime with an ADMT notice framework, removes explainability and impact assessment requirements, and pushes the effective date to January 2027. If it fails, SB 24-205 takes effect June 30 in its original form.
White House Weighs Pre-Release AI Model Vetting Executive Order
NYT and Bloomberg reported May 4-5 that the Trump administration is considering requiring government pre-release review of powerful AI models - a potential reversal of the administration's freedom-to-innovate posture. The proposal was triggered by Anthropic's Mythos Preview (released April 7), which can identify zero-day vulnerabilities in all major operating systems and browsers. The White House is testing models from Google, Microsoft, and xAI. No executive order has been issued as of May 8.
TAKE IT DOWN Act - FTC Enforcement Begins May 19
The first federal law directly regulating AI-generated content reaches its platform compliance deadline in 11 days. Covered platforms must have operational notice-and-takedown systems for nonconsensual intimate imagery and AI-generated deepfakes. FTC enforces non-compliance as unfair or deceptive acts. 48-hour removal window and known-copies duty apply.
California AB 2013 Survives xAI Constitutional Challenge
US District Judge Bernal denied xAI's preliminary injunction motion against AB 2013 (AI Training Data Transparency Act) on March 4, 2026. All three constitutional claims - Takings Clause, First Amendment, vagueness - rejected at the preliminary stage. AB 2013 enforcement is unblocked. First federal court ruling on constitutionality of a state AI transparency law.
EU AI Act: 86 Days to High-Risk System Deadline
High-risk AI system obligations under the EU AI Act take effect August 2, 2026 - 86 days away. GPAI transparency obligations in force since August 2, 2025. Final GPAI Code of Practice published July 2025 as compliance pathway for model providers. Enforcement capacity concerns identified but do not affect legal obligations. Penalties up to 7% global annual turnover.
Upcoming Deadlines
May
13
Colorado SB 26-189 - Legislature Adjourns
Colorado legislature adjourns May 13. SB 26-189 (Automated Decision-Making Technology - replacement for SB 24-205) must pass full Senate and House before adjournment. Passed Business Committee 5-0 (May 5) and Appropriations 7-0 (May 6). If it passes: SB 24-205 repealed, new ADMT framework effective January 2027. If it fails: SB 24-205 takes effect June 30 as written.
May
19
TAKE IT DOWN Act - Platform Compliance Deadline
Covered platforms must have compliant notice-and-takedown systems for NCII and AI deepfakes operational by May 19, 2026. FTC enforcement begins. 48-hour removal requirement applies to all valid takedown requests.
Jun
30
Colorado SB 24-205 Fallback Effective Date (If SB 26-189 Fails)
If SB 26-189 does not pass by May 13, SB 24-205 takes full effect June 30 with all impact assessment, documentation, and risk management requirements. Penalties up to $20,000 per violation (AG enforcement only). DOJ preemption challenge expected within days of effective date.
Aug
02
EU AI Act - High-Risk AI System Obligations
Full compliance required for high-risk AI systems (employment, credit, healthcare, education). GPAI transparency obligations in force since August 2, 2025. Penalties up to 7% global annual turnover or EUR 35 million for prohibited practices; up to 3% or EUR 15 million for other violations. 86 days remaining as of May 8.
May
15
Congressional AI Bills Committee Markup (Estimated)
Five AI bills introduced March 25-26 (S.4199, S.4214, H.R.8094, S.4216, S.Con.Res.30) expected in committee markup by mid-May. Watch for preemption amendments. White House pre-release AI vetting executive order, if announced, may overtake the legislative calendar.
Aug
02
EU AI Act Full Application - Annex I High-Risk
Remaining AI Act provisions apply to high-risk systems in Annex I sectors. Full implementation of all EU AI Act requirements.
Jan
01
NY RAISE Act Takes Effect
New York S6953-B (RAISE Act) takes effect for frontier AI model developers with over $500M annual revenue. Requires safety protocols, AI impact assessments, 72-hour incident reporting to new NY AI oversight office. Penalties up to $1M first violation, $3M subsequent.