- SB26-189 Automated Decision-Making Technology — Colorado General Assembly — Enacted-law official summary; checked 26 October 2026.
- California Finalizes Regulations to Strengthen Consumers’ Privacy — CPPA, 23 September 2025 — Official regulator announcement; checked 26 October 2026.
- Guidance on HIPAA & Cloud Computing — HHS Office for Civil Rights — Official regulator guidance; checked 26 October 2026.
- AI Risk Management Framework — NIST — Official standards guidance; checked 26 October 2026.
- Automated Decision-Making Technology & Chatbot Safety Rulemaking — Colorado Attorney General — Official rulemaking status; checked 26 October 2026.
- Timeline for the Implementation of the EU AI Act — European Commission AI Act Service Desk — Official implementation timeline; checked 26 October 2026.
- Legal Advisory: Application of Existing California Laws to Artificial Intelligence — California Attorney General, January 2025 — Official legal advisory; checked 26 October 2026.
- Llama 3.3 Community License Agreement — Meta — Primary licence; checked 26 October 2026.
- The Open Source AI Definition 1.0 — Open Source Initiative — Standards organisation definition; checked 26 October 2026.
- Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile — NIST, July 2024 — Official standards guidance; checked 26 October 2026.
- Policy Statement Concerning the Suppression of Accuracy in Artificial Intelligence Systems — FTC proposal, 30 June 2026 — Official proposal; not treated as final law; checked 26 October 2026.
Evidence boundary: This is desk research and a proposed decision method, not a test of the buyer’s model or an endorsement. Published findings, supplier descriptions and proposed actions are distinguished in the text. Missing private data, quotes and contract terms remain unknown.