MR-040 Regulatory compliance Organization scope

Regulatory non-compliance and legal liability

The system or its use breaches laws, regulations, or contractual/ethical obligations, exposing the deployer to enforcement and litigation.

Risk family: Regulatory compliance
MIT domain: 6. Socioeconomic and Environmental
MIT subdomain: 6.5 > Governance failure
AI type: GPAI, Classical_ML, Agentic
Scope: Organization
Source standard: MIT AI Risk Repository v4

Provenance

Source standard

MIT AI Risk Repository v4

MIT source entries

14 entries across 9 papers

Anwar2024Foundational Challenges in Assuring Alignment and Safety of Large Language Models73.06.00
EPIC2023Generating Harms - Generative AI's impact and paths forwards31.08.00
G'sell2024Regulating under Uncertainty: Governance Options for Generative AI47.04.00
Hagendorff2024Mapping the Ethics of Generative AI: A Comprehensive Scoping Review05.11.00
IBM2025AI Risk Atlas65.21.00 65.21.01
Sun2023Safety Assessment of Chinese Large Language Models27.01.07
Uuk2025A Taxonomy of Systemic Risks from General-Purpose AI61.01.07 61.02.13 61.02.40
Wirtz2020The Dark Sides of Artificial Intelligence: An Integrated AI Governance Framework for Public Administration20.01.00 20.01.01 20.01.03
Wirtz2022Governance of artificial intelligence: A risk and guideline-based integrative framework19.06.00

Ev IDs of the entries consolidated into this risk in the MIT AI Risk Repository (V4); the source sheet row appears on hover.

ISO/IEC references

23894 obj A.2; src 1 | 42001 ctrl A.2.3, A.8.5, A.10.4

EU AI Act articles

Art. 26(12) | (umbrella for all EU AI Act obligations)

Framework crosswalk

Every framework item mapped to this risk. Items marked partial overlap only in part; definitions appear on hover where the source licence permits.

Sourcesframeworks that contributed to the register

A.2 ISO/IEC 23894 Annex A A.2

A.10.4 ISO/IEC 42001 Annex A A.10.4
A.2.3 ISO/IEC 42001 Annex A A.2.3
A.8.5 ISO/IEC 42001 Annex A A.8.5

(umbrella for all EU AI Act obligations)
Art. 26(12)

Cross-checksframeworks mapped in to test coverage

ibm-model-usage-rights-restrictions Model usage rights restrictions partial

More in Regulatory compliance

MR-072 MR-073 MR-074 MR-075 MR-076 MR-077 MR-078 MR-079 MR-080 MR-081 MR-082

See all Regulatory compliance risks →

Part of the Deployer AI Risk Register, an open-source resource powered by MindXO. Version 1.0, 3 July 2026. Derived from the MIT AI Risk Repository (V4, December 2025) under CC BY 4.0; an independent derivative work, not endorsed by or affiliated with MIT. Sub-risk decomposition references MITRE ATLAS™ v5.6.0 (© 2021-2026 The MITRE Corporation, reproduced and distributed with permission). ISO/IEC and EU AI Act references are by number only. License: CC BY 4.0. Full attribution and licensing.