Global AI Regulatory Developments | Covington & Burling LLP

What Happened

Covington & Burling, one of the major international law firms with a deep regulatory practice, continues to publish and update tracking resources on global AI regulatory developments. The firm's ongoing coverage — spanning jurisdictions and regulatory regimes — reflects the reality that AI governance is no longer a niche legal specialty but a fast-moving, cross-border compliance challenge that touches nearly every industry deploying machine learning or generative AI systems.

While the underlying material is a resource hub rather than a single news event, its existence and continued expansion are themselves telling: law firms invest in this kind of infrastructure only when client demand justifies it, and that demand is a proxy for how seriously businesses now treat AI regulatory risk.

Why It Matters

The centerpiece of global AI regulation remains the EU AI Act, which entered into force in phases starting in 2024, with obligations for general-purpose AI model providers, high-risk system deployers, and prohibited-practice bans rolling out over a multi-year timeline. Companies operating in or selling into the EU — regardless of where they are headquartered — must now map their products against the Act's risk tiers, documentation requirements, and conformity assessment obligations.

This matters far beyond Europe. The AI Act has become a reference model much as GDPR did for data privacy, prompting other jurisdictions — including the UK, Canada, Brazil, South Korea, and various US states — to draft their own frameworks, sometimes borrowing EU risk-based terminology and sometimes diverging sharply. For multinational companies, this creates a genuine compliance puzzle: an AI system compliant in one jurisdiction may trigger obligations, restrictions, or outright prohibitions elsewhere.

The Bigger Regulatory Picture

Unlike privacy law, which converged around a handful of common principles, AI regulation is fragmenting along multiple axes: risk-based rules (EU), sector-specific guidance (US agencies like the FTC and FDA), voluntary commitments (industry pledges in the US and UK), and state-level statutes (Colorado, California, and others advancing their own AI laws). Firms like Covington positioning themselves as trackers of this landscape signal that in-house counsel and compliance teams increasingly need continuously updated, jurisdiction-by-jurisdiction guidance rather than static advice.

Context and Outlook

Expect regulatory activity to accelerate rather than stabilize in the near term. The EU AI Act's phased enforcement timeline means new obligations continue to take effect through 2026, while national implementing legislation and standards bodies are still finalizing technical specifications. Meanwhile, general-purpose AI providers face growing scrutiny over training data transparency, copyright exposure, and systemic-risk obligations for the most capable models.

For businesses, the practical takeaway is that AI compliance is shifting from a one-time legal review to an ongoing governance function — one requiring the kind of continuous regulatory monitoring that law firms are now productizing as a client service.