All regulations
United States
HIPAA
Applies to AI systems that process protected health information, requiring safeguards for privacy and security wherever an AI tool touches patient data.
Who it applies to
- Covered entities and business associates using AI
- AI vendors processing PHI on behalf of healthcare organisations
- Clinical, operational and administrative AI use cases
Core obligations
- Apply administrative, physical and technical safeguards to PHI
- Sign Business Associate Agreements with AI vendors
- Log access and disclosures of PHI
- Notify breaches under the HIPAA Breach Notification Rule
How Vigil24 helps
- Flags AI tools handling PHI across your workforce
- Tracks BAAs and vendor safeguards
- Produces HIPAA-aligned access and breach evidence
Explore other regulations
EU AI Act
Risk tiers, transparency, high-risk AI obligations.
NIST AI RMF
US risk management framework for AI.
GDPR
Personal data, lawful basis, automated decisions.
ISO 42001
AI management system standard.
DORA
Operational resilience for finance.
FCA Consumer Duty
Fair outcomes in UK financial services.
India DPDP Act 2023
Data protection for Indian users.
Singapore Model AI Governance
Responsible AI in Singapore.
ASEAN AI Governance Guide 2024
Regional framework across 10 member states.
UK GDPR & DPA 2018
UK data protection for AI systems processing personal data.
UK Equality Act 2010
Discrimination risk for AI in employment and services.
Colorado ADMT Act (SB 26-189)
Disclosure and human review for consequential AI decisions.
Illinois HRA - AI Amendment
AI in employment decisions under Illinois human rights law.
California AI & ADMT Rules
CCPA/CPRA rules on automated decision-making.
China Generative AI Measures
Pre-launch assessment and content labelling for GenAI.
China Deep Synthesis Regulations
Labelling and provenance for deepfakes and synthetic media.
Brazil LGPD
Personal data protection for AI in Brazil.
Brazil AI Bill (PL 2338/2023)
Upcoming national AI framework, not yet in force.
Canada - Voluntary Code & ADM Directive
Federal AI code of conduct and ADM directive.