All regulations
European Union
DORA
The Digital Operational Resilience Act establishes uniform requirements for the security of network and information systems supporting EU financial entities - including AI and ICT third parties.
Who it applies to
- Banks, insurers, investment firms and other EU financial entities
- Critical ICT third-party providers, including AI vendors
- Cross-border financial groups operating within the EU
Core obligations
- ICT risk management framework with board accountability
- Incident classification and reporting to competent authorities
- Digital operational resilience testing including TLPT
- Manage and monitor ICT third-party risk concentrations
How Vigil24 helps
- Inventories AI and ICT third-party tools used by staff
- Identifies concentration risk and unapproved vendors
- Generates DORA-aligned third-party risk evidence
Explore other regulations
EU AI Act
Risk tiers, transparency, high-risk AI obligations.
NIST AI RMF
US risk management framework for AI.
GDPR
Personal data, lawful basis, automated decisions.
ISO 42001
AI management system standard.
FCA Consumer Duty
Fair outcomes in UK financial services.
India DPDP Act 2023
Data protection for Indian users.
Singapore Model AI Governance
Responsible AI in Singapore.
ASEAN AI Governance Guide 2024
Regional framework across 10 member states.
UK GDPR & DPA 2018
UK data protection for AI systems processing personal data.
UK Equality Act 2010
Discrimination risk for AI in employment and services.
Colorado ADMT Act (SB 26-189)
Disclosure and human review for consequential AI decisions.
Illinois HRA - AI Amendment
AI in employment decisions under Illinois human rights law.
California AI & ADMT Rules
CCPA/CPRA rules on automated decision-making.
HIPAA
Safeguards for AI touching protected health information.
China Generative AI Measures
Pre-launch assessment and content labelling for GenAI.
China Deep Synthesis Regulations
Labelling and provenance for deepfakes and synthetic media.
Brazil LGPD
Personal data protection for AI in Brazil.
Brazil AI Bill (PL 2338/2023)
Upcoming national AI framework, not yet in force.
Canada - Voluntary Code & ADM Directive
Federal AI code of conduct and ADM directive.