Industry & Sector Governance

Public bodies cannot offer their users an exit, which is why the obligations run deeper. This covers the memoranda that now govern US federal AI, the fundamental rights impact assessment the EU requires of public deployers, and transparency registers that make algorithms visible.

Clinical AI sits under two regimes at once: device regulation and health system governance. This covers where the device line falls, how a predetermined change control plan lets a model improve after clearance, and what a clinical AI committee has to own.

Financial services carries more overlapping AI rules than any other sector: model risk management, fair lending, prudential supervision, data protection, and now the EU AI Act. This playbook shows governance and risk leaders how to fold AI into the model risk inventory and three lines of defense, meet the 2 August 2026 high-risk deadline, and reuse the SR 11-7 tradition updated by SR 26-2.