NIST AI RMF

Delaware has amended its privacy law to impose new AI governance requirements that directly affect regulatory risk management frameworks across U.S. organizations. The EU AI Act Article 26 simultaneously mandates third-party AI vendor risk management, requiring practitioners to expand their governance frameworks to address vendor-specific AI compliance obligations.

• →Delaware Privacy Law Amendment: New AI Governance Requirements: Organizations must update their RMF policies and compliance programs to meet state-level AI governance mandates, creating immediate compliance obligations for entities operating in or serving Delaware.
• →EU AI Act Article 26: Third-Party AI Vendor Risk Management Mandate: Practitioners must integrate vendor risk assessment and monitoring protocols into their AI governance frameworks to comply with EU requirements for AI systems sourced from third parties.
• →Convergence of U.S. State and EU AI Governance Standards: The alignment of Delaware and EU requirements signals a broader regulatory trend that practitioners should anticipate across additional U.S. states and jurisdictions.

Audit your current AI governance and vendor risk management programs today against Delaware's new requirements and EU AI Act Article 26 obligations to identify compliance gaps requiring immediate remediation.