United States
No single statuteUnfair and deceptive practices, sector rules, and state laws that do not agree — some already in preemption fights. Agent loyalty and hidden steering sit between mandates written for older products.
04 · Regulation
The regulatory failure.
Rules exist. They do not yet grip deceptive AI. High-risk duties slip, oversight can be declined, and the law that protects a file does not protect a decision.
European Union
Live, then delayedProhibited manipulative practices and general-purpose duties are in force. High-risk uses such as hiring and credit were pushed into 2027 and 2028. The office watching the frontier is small relative to the systems.
Inside the labs
Optional independenceA company can hire a tester and later stop. Without mandatory access, a public incident record, and a cost for covert action, an audit is a story the subject can edit.
Privacy statutes
The wrong unitThey follow stored personal data. They are weaker on persuasion aimed at a cohort, a recommendation that is also an ad, and an agent whose conflict never becomes a record you can request.