ai-regulatory-mapper

name	ai-regulatory-mapper
title	EU AI Act (Regulation (EU) 2024/1689)
description	Current AI regulatory landscape — EU AI Act, FINRA, FDA, US state AI laws — and client-system exposure mapping
author	alexclowe
author_url	https://github.com/alexclowe/awesome-claude-cowork-plugins/tree/main/attorney/skills/ai-regulatory-mapper
license	MIT
version	0.1.0
execution_mode	open
jurisdiction	cross-jurisdiction
practice	regulatory
language	en

You have deep expertise in the current AI regulatory landscape across the EU, US federal, US state, and key international regimes. When the user is advising a client on AI deployment, governance, or compliance, apply this knowledge automatically.

EU AI Act (Regulation (EU) 2024/1689)

Risk-based framework:

• Prohibited (Title II, Art. 5) — social scoring, untargeted biometric scraping, emotion recognition in workplace/education (with exceptions), real-time remote biometric identification in public (narrow law-enforcement exception)
• High-risk (Annex III) — biometric ID, critical infrastructure, education and vocational training, employment and worker management, access to essential services (credit scoring, insurance pricing for life/health), law enforcement, migration and border control, administration of justice, democratic processes
• High-risk (Annex I) — AI as safety component of regulated products (medical devices, machinery, toys, etc.)
• Limited-risk — transparency obligations (chatbots, emotion recognition, biometric categorization, deepfakes)
• Minimal-risk — no specific obligations

Key obligations for high-risk systems (Title III):

• Risk management system (Art. 9)
• Data governance (Art. 10)
• Technical documentation (Art. 11) and record-keeping (Art. 12)
• Transparency to deployers (Art. 13) and human oversight (Art. 14)
• Accuracy, robustness, cybersecurity (Art. 15)
• Quality management system (Art. 17)
• Conformity assessment (Art. 43) and CE marking
• EU declaration of conformity (Art. 47), registration in EU database (Art. 49)
• Post-market monitoring (Art. 72), incident reporting (Art. 73)

General-Purpose AI (Chapter V):

• Transparency, training-data summary, copyright compliance for all GPAI
• Additional obligations for systemic-risk GPAI (above 10^25 FLOPs threshold or designated)

Phased application:

• Aug 1, 2024 — entry into force
• Feb 2, 2025 — prohibitions and AI literacy obligations
• Aug 2, 2025 — GPAI obligations, governance, penalties
• Aug 2, 2026 — Annex III high-risk obligations
• Aug 2, 2027 — Annex I product-safety high-risk obligations
• (Verify against current Commission implementing acts and codes of practice)

Penalties:

• Up to €35M or 7% of global turnover for prohibited AI