AutoPIL Regulatory Library

AI Governance Across
the Regulatory Landscape

Provision-by-provision enforcement at the data access layer — before sensitive data enters the agent context window. 74 regulations across 12 industries.

74

Regulations

12

Industries

Federal Global / EU State Industry Std

Key Frameworks

Featured Regulations

EU resident data protection with AI-specific obligations under Articles 22 and 25.

Risk-based AI governance framework. High-risk enforcement begins August 2026.

HIPAA Privacy Rule

Minimum necessary standard for PHI — enforced per retrieval, not post-filter.

HIPAA Security Rule

Required audit controls for ePHI: §164.312(a) access control, §164.312(b) audit log.

Section 302/404 financial record integrity for AI-assisted reporting and audit.

Broker-dealer supervision, surveillance, and 3110/4511/4512 recordkeeping.

SOC 2 / ISO 27001

CC6 logical access controls and Type II audit evidence for AI-governed data access.

Cardholder data access restrictions and audit log requirements for Req 10.

Browse by Industry

12 Regulated Industries

Financial Services

17 regulations covered. See enforcement details.

17 regulationsBCBS 239 — Risk Data…Bank Secrecy Act (BS…CCPA / CPRA and Stat…CFTC Commodity Excha…

7 regulations covered. See enforcement details.

7 regulations21st Century Cures A…DEA Controlled Subst…FDA 21 CFR Part 11 —…GDPR Article 9 — Spe…

11 regulations covered. See enforcement details.

11 regulationsCCPA / CPRA (Califor…CFAA — Computer Frau…CLOUD Act — Regulato…COPPA — Children's O…

6 regulations covered. See enforcement details.

6 regulationsAI Fairness / Algori…ERISA — Employee Ret…FCRA — Credit-Based …Gramm-Leach-Bliley A…

3 regulations covered. See enforcement details.

3 regulationsCALEA — Communicatio…CPNIs (47 CFR Part 6…FCC Communications A…

8 regulations covered. See enforcement details.

8 regulationsCJIS Security Policy…EO 14028 — Improving…FAR / DFARS — Federa…FISMA / NIST Risk Ma…

3 regulations covered. See enforcement details.

3 regulationsNERC CIP Standards —…NRC Nuclear Safetys …SEC Climate Disclosu…

3 regulations covered. See enforcement details.

3 regulationsCMMC — Cybersecurity…ISO 9001 / AS9100 Qu…ITAR / EAR Export Co…

4 regulations covered. See enforcement details.

4 regulationsCCPA / CPRA (Retail)…FCRA (Retail Credit …FTC Act Section 5 (U…PCI DSS (Retail) — R…

4 regulations covered. See enforcement details.

4 regulationsFair Housing Act — R…FinCEN Geographic Ta…HMDA — Home Mortgage…TILA / TRID (Lending…

1 regulations covered. See enforcement details.

1 regulationsCBP Customss (19 CFR…

7 regulations covered. See enforcement details.

7 regulationsCMS Part D Complianc…DEA Controlled Subst…DSCSA — Drug Supply …FDA Drug Approval (N…

0 regulations covered. See enforcement details.

Full Directory

All 74 Regulations

Energy

NERC CIP Standards — Regulatory Reference

NRC Nuclear Safety Regulations (10 CFR) — Regulatory Reference

SEC Climate Disclosure Rule (2024) — Regulatory Reference

Financial Services

BCBS 239 — Risk Data Aggregation and Risk Reporting — Regulatory Reference

Bank Secrecy Act (BSA) — Regulatory Reference

CCPA / CPRA and State Privacy Laws (Financial Services) — Regulatory Reference

CFTC Commodity Exchange Act — Regulatory Reference

DORA — EU Digital Operational Resilience Act — Regulatory Reference

Dodd-Frank Wall Street Reform and Consumer Protection Act — Regulatory Reference

FINRA Rules (Broker-Dealer Conduct) — Regulatory Reference

Foreign Account Tax Compliance Act (FATCA) — Regulatory Reference

Gramm-Leach-Bliley Act (GLBA) — Regulatory Reference

MiFID II (EU Markets in Financial Instruments Directive) — Regulatory Reference

NY DFS 23 NYCRR Part 500 (Cybersecurity) — Regulatory Reference

OCC / Basel III Capital Rules — Regulatory Reference

PCI DSS (Payment Card Industry Data Security Standard) — Regulatory Reference

SEC Regulation S-P — Regulatory Reference

SR 11-7 — Federal Reserve / OCC Model Risk Management Guidance — Regulatory Reference

Sarbanes-Oxley Act (SOX) — Regulatory Reference

UDAAP (Unfair, Deceptive, or Abusive Acts and Practices) — Regulatory Reference

Healthcare

21st Century Cures Act / Information Blocking Rule — Regulatory Reference

DEA Controlled Substance Rules (Healthcare) — Regulatory Reference

FDA 21 CFR Part 11 — Electronic Records, Electronic Signatures — Regulatory Reference

GDPR Article 9 — Special Category (Health) Data — Regulatory Reference

HIPAA Privacy Rule — Regulatory Reference

HIPAA Security Rule (§164.312) — Regulatory Reference

HITECH Act — Regulatory Reference

Insurance

AI Fairness / Algorithmic Bias Rules (State DOI) — Regulatory Reference

ERISA — Employee Retirement Income Security Act — Regulatory Reference

FCRA — Credit-Based Insurance Scoring — Regulatory Reference

Gramm-Leach-Bliley Act (Insurance NPI) — Regulatory Reference

NAIC Model Laws & Guidelines — Regulatory Reference

NYDFS Cyber Insurance Risk Framework — Regulatory Reference

Logistics

CBP Customs Regulations (19 CFR) — Regulatory Reference

Manufacturing

CMMC — Cybersecurity Maturity Model Certification — Regulatory Reference

ISO 9001 / AS9100 Quality Management Systems — Regulatory Reference

ITAR / EAR Export Controls — Regulatory Reference

Pharmacy

CMS Part D Compliance — Regulatory Reference

DEA Controlled Substance Act (Pharmacy) — Regulatory Reference

DSCSA — Drug Supply Chain Security Act — Regulatory Reference

FDA Drug Approval (NDA/ANDA) — Regulatory Reference

FDA REMS Programs — Regulatory Reference

HIPAA (Pharmacy PHI) — Regulatory Reference

State Board of Pharmacy Regulations — Regulatory Reference

Public Sector

CJIS Security Policy — Regulatory Reference

EO 14028 — Improving the Nation's Cybersecurity — Regulatory Reference

FAR / DFARS — Federal Acquisition Regulations — Regulatory Reference

FISMA / NIST Risk Management Framework — Regulatory Reference

FOIA — Freedom of Information Act — Regulatory Reference

FedRAMP Authorization — Regulatory Reference

Privacy Act of 1974 — Regulatory Reference

State Government AI Use Policies — Regulatory Reference

Real Estate

Fair Housing Act — Regulatory Reference

FinCEN Geographic Targeting Orders — Regulatory Reference

HMDA — Home Mortgage Disclosure Act — Regulatory Reference

TILA / TRID (Lending Disclosures) — Regulatory Reference

Retail

CCPA / CPRA (Retail) — Regulatory Reference

FCRA (Retail Credit / Background Checks) — Regulatory Reference

FTC Act Section 5 (Unfair or Deceptive Practices) — Regulatory Reference

PCI DSS (Retail) — Regulatory Reference

Technology

CCPA / CPRA (California) — Regulatory Reference

CFAA — Computer Fraud and Abuse Act — Regulatory Reference

CLOUD Act — Regulatory Reference

COPPA — Children's Online Privacy Protection Act — Regulatory Reference

Digital Markets Act (EU) — Regulatory Reference

EU AI Act (Regulation (EU) 2024/1689) — Regulatory Reference

FTC Act / Section 5 (Privacy) — Regulatory Reference

GDPR (EU General Data Protection Regulation) — Regulatory Reference

NIS2 Directive (EU) — Regulatory Reference

NIST Cybersecurity Framework 2.0 — Regulatory Reference

SOC 2 / ISO 27001 — Regulatory Reference

Telecom

CALEA — Communications Assistance for Law Enforcement Act — Regulatory Reference

CPNI Rules (47 CFR Part 64 Subpart U) — Regulatory Reference

FCC Communications Act (Title II) — Regulatory Reference

AutoPIL Governance Platform

Enforce any of these regulations today

AutoPIL intercepts every AI agent data access call, enforces your policy, and writes a tamper-evident audit record — before sensitive data enters the agent context window.

Start Free Trial View Industries