Introduction
AI products sit within rules about data, people, trade, competition, and rights, as well as AI-specific rules. A system may fall outside one AI category and still be subject to privacy, consumer-protection, employment, or sector obligations. Start by identifying the activity, the actors, the jurisdictions, and the sources that apply.
This module provides an educational map. The legal snapshot was checked on 2 October 2026 UTC. A specific transaction requires advice based on its facts and the applicable rules. We will distinguish enacted law, obligations in force, draft guidance, reports, court decisions, contracts, and voluntary standards. Your project is a regulatory risk matrix with a process for keeping it current.
Revisit cross-border deployment in Module 12 and system boundaries in Module 23. Start with classification and sources, then privacy and rights, then regulated uses and business implications. Check the current authoritative documents before relying on a rule for a real decision.