Which regulations specifically apply to AI agents?

Answer

No regulation currently uses the term 'AI agent' — but dozens apply to the actions agents take. The EU AI Act (effective Aug 2025) classifies AI systems by risk tier and imposes requirements on high-risk systems including transparency, human oversight, and record-keeping. The NIST AI RMF provides a voluntary framework. EO 14110 mandates federal AI governance. State laws (Colorado AI Act, Illinois BIPA, CCPA/CPRA) create specific obligations. Industry regulations (HIPAA, GLBA, SOX, BSA/AML) apply when agents operate in regulated domains.