61 / 70 · 07 Security Testing for AI Apps · AI Regulation and Compliance Testing← prev⊞ allnext →☰ Read as one page
10.6Regulation Comparison
| Aspect | EU AI Act | NIST AI RMF | China AI Regulations |
|---|---|---|---|
| Scope | Mandatory (EU market) | Voluntary (US) | Mandatory (China) |
| Risk classification | 4 tiers | Context-dependent | Algorithm-specific |
| Bias testing | Required for high-risk | Recommended | Required for recommendation algorithms |
| Transparency | Required at all levels | Core principle | Required (watermarking for generated content) |
| Audit trail | Required for high-risk | Recommended | Required |
| Human oversight | Required for high-risk | Recommended | Required for high-impact decisions |
| Penalties | Up to 7% of global revenue | None (voluntary) | Administrative penalties |
| Effective | Phased 2024-2028 (high-risk obligations deferred to Dec 2027 by the Digital Omnibus) | Published Jan 2023 | Various dates from 2023 |