Decorative regulations banner shape
REGULATORY HORIZON

Turn changing AI rules into a clear operating plan

Regulatory obligations differ by market, sector, system risk, and where your AI is used. We translate those obligations into practical controls, accountable owners, and evidence your teams can maintain.

UAE

DIFC Regulation 10 requires AI impact assessments, transparency, and high-risk documentation.

ISO 42001 offers a recognised route for AI management system certification.

Federal PDPL deadlines and the UAE AI strategy continue to shape controls.

Saudi Arabia

SDAIA's responsible AI policy sets proportionate controls for high-risk systems.

NCA ECC applies to AI systems and MLOps in regulated entities.

Saudi PDPL governs personal data processed through AI systems.

European Union

Article 50 transparency, general-purpose AI enforcement, and penalties apply from August 2026.

High-risk obligations phase in through December 2027 and August 2028.

Providers and deployers serving EU customers should prepare now.

Mapped, crosswalked and maintained

Most organisations cannot say which of these apply to their AI systems because they cannot yet name every AI system they run. Discover answers that question in two to three weeks; Managed AI Trust keeps the answer current as the rules move.

Frameworks we mapDIFC Regulation 10 · UAE Federal PDPL · Saudi PDPL · SDAIA Responsible AI Policy · NCA ECC · ISO/IEC 42001 · EU AI Act · SAMA CSF · UAE IA
Find out which rules apply to you Last reviewed September 2026. Regulatory dates change; confirm against the primary source before relying on them.

Common questions

It may apply when you place AI systems on the EU market or provide outputs used by people in the EU. We map scope against your actual products, users, and data flows.

Not universally, but it is an increasingly useful way to demonstrate a repeatable AI management system and support procurement and regulatory assurance.

We crosswalk the UAE, Saudi, EU, and relevant sector frameworks against your AI estate, controls, evidence, and operating model.

Managed AI Trust maintains the regulatory horizon watch and refreshes evidence as obligations, models, and operating conditions change.