AI policy | enforcement | standards
The single feed your general counsel and your CIO can both trust
An editorial ledger of every material AI rule, enforcement action and standard published this quarter, ranked by impact on your sector.
How the ledger reads
You receive one ledger, sector-tagged, with each row carrying the citation, the operative date, the affected control and the recommended action for your firm.
Where two regulators conflict (for example, against a national supervisor's guidance), the ledger states the conflict and the position we hold for clients. You can disagree with the position. We will not hide it.
Subscribers report a 60 to 80 per cent reduction in time spent reconciling regulatory feeds, based on a 32-firm subscriber survey. The methodology is published in the appendix and you can reproduce the calculation against your own scanning hours.
This quarter's ledger
ActivePending
- Active rule
enters into force
Cross-sector · EU & UK distribution
Inventory in-scope systems against Articles 5, 8 and 9. Confirm which existing controls already evidence compliance before committing new spend.
Article 9 conflict with national supervisor guidance; see editorial position.
- Active rule
AI management system standard
All sectors · audit committee scope
Map your existing ISO 27001 control set first; most firms reach 70 to 80 per cent of 42001 before any AI-specific spend.
- Active rule
model risk management expectations
Banking · UK PRA-regulated firms
Validate that AI and ML models are inside the scope of your existing model risk register, with documented validation evidence keyed to the four expectation areas.
Articles in this section
Every Lookout article, listed once.
EU AI Act
Article 8 of the EU AI Act, read for an operating board
Article 8 is the governance article the rest of the Act depends on. We translate it for the executive who has to sign the technical documentation.
Archive
Every dispatch the desk has issued, in chronological order
The full archive of the Late Edition, searchable to two minutes from any dispatch back to the first issue.
DIFC
DIFC Reg 10 explained for a Middle East operating committee
The first AI-specific personal-data rule in the GCC, translated for a board that will not read the original regulation.
Field note
What Article 5 actually prohibits, and what your team can ignore
A 12-minute read for the executive who has been told the EU AI Act will stop everything and wants to know which 4 per cent it actually stops.
Glossary
Plain English glossary
The terms an executive needs to read AI papers without a translator.
Almanac
Quarterly outlook
What changes in AI regulation between now and the end of next year.
Standards
Four AI standards, side by side, in plain English
ISO 42001, NIST AI RMF, ISO 27001 and the EU AI Act mapped to one control set.
Watch list
Every AI deadline that affects your firm in the next 18 months
A live ledger of consultations, transition periods and enforcement dates, filtered to your sector and jurisdiction.
“If a rule changes on a Tuesday, you should not hear about it on a Friday.”