We are not attorneys, and nothing on this site is legal advice. This directory may be incomplete or out of date. Always rely on the official sources and your own legal counsel.
AI Compliance by Design: Official Sources and Book Notes
By R. R. Johnson

Directory by topic

1. EU AI Act

IDSourceWhat you will find thereLast verified
EU-001European Commission, AI Act Service DeskThe Commission's official help desk for the AI Act: implementation timeline, article texts, FAQs and guidance.Oct 19, 2026, 6:44 AM CT
EU-002Publications Office of the European Union, EUR-Lex link under reviewThe official legal texts of the AI Act and its amendments, including consolidated versions.Not yet verified (site blocks automated checks; manual check pending)
EU-003European Commission, European AI OfficeGuidelines, codes of practice and consultations under the AI Act.Oct 19, 2026, 6:44 AM CT

2. EU data protection and international frameworks

Entries for this topic are being added.

3. US federal policy and agencies

IDSourceWhat you will find thereLast verified
CFPB-001Consumer Financial Protection BureauWhich CFPB guidance has been withdrawn, and the official text of Regulation B changes.Oct 19, 2026, 6:44 AM CT
FTC-001Federal Trade CommissionFTC actions, orders and policy statements on AI claims and practices.Oct 19, 2026, 6:45 AM CT

4. Colorado

IDSourceWhat you will find thereLast verified
CO-001Colorado Department of Law, Office of the Attorney General link under reviewThe Attorney General's AI page, with rulemaking notices, draft rules, hearing dates and comment instructions for Colorado's AI laws. The related General Assembly page carries the bill.Oct 19, 2026, 6:44 AM CT

5. California

IDSourceWhat you will find thereLast verified
CA-001California Privacy Protection AgencyThe official ADMT, risk assessment and cybersecurity audit regulations and their dates.Oct 19, 2026, 6:44 AM CT

6. Texas

IDSourceWhat you will find thereLast verified
TX-001Texas Legislature, Texas StatutesThe official text of the Texas Responsible Artificial Intelligence Governance Act (Business and Commerce Code ch. 552), and the Attorney General's AI complaint page.Oct 19, 2026, 6:44 AM CT

7. New York City and New York State

IDSourceWhat you will find thereLast verified
NYC-001NYC Department of Consumer and Worker ProtectionLocal Law 144 rules, FAQs and bias audit requirements for automated employment decision tools.Oct 19, 2026, 6:44 AM CT

8. Other states

IDSourceWhat you will find thereLast verified
IL-001Illinois General Assembly and Illinois Department of Human Rights link under reviewThe official text of the Illinois AI employment law (Public Act 103-0804), and the agency that issues rules under it.Oct 19, 2026, 6:44 AM CT

9. Standards: NIST and ISO

IDSourceWhat you will find thereLast verified
ISO-001International Organization for Standardization (ISO) link under reviewThe official listing for the ISO/IEC 42001:2023 AI management system standard, with edition status and purchase details.Not yet verified (site blocks automated checks; manual check pending)
NIST-001National Institute of Standards and TechnologyThe AI Risk Management Framework, its profiles, and draft cybersecurity guidance for AI, including Agentic AI.Oct 19, 2026, 6:44 AM CT

10. Sector rules

IDSourceWhat you will find thereLast verified
CFPB-001Consumer Financial Protection BureauWhich CFPB guidance has been withdrawn, and the official text of Regulation B changes.Oct 19, 2026, 6:44 AM CT
FED-001Board of Governors of the Federal Reserve SystemSupervisory guidance on model risk management for banks (SR 26-2), with the related OCC bulletin.Oct 19, 2026, 6:44 AM CT
SEC-001US Securities and Exchange CommissionOfficial SEC enforcement announcements, including AI-related cases.Oct 19, 2026, 6:44 AM CT

11. Cases and enforcement records

IDSourceWhat you will find thereLast verified
CASE-001US District Court, Northern District of California: Mobley v. Workday, No. 3:23-cv-00770-RFLThe court's case page with selected orders, plus a public copy of the docket on CourtListener (a non-official mirror).Oct 19, 2026, 6:44 AM CT
SEC-001US Securities and Exchange CommissionOfficial SEC enforcement announcements, including AI-related cases.Oct 19, 2026, 6:44 AM CT

12. Agentic AI guidance

IDSourceWhat you will find thereLast verified
NIST-001National Institute of Standards and TechnologyThe AI Risk Management Framework, its profiles, and draft cybersecurity guidance for AI, including Agentic AI.Oct 19, 2026, 6:44 AM CT