AI Governance Obligation Mapper: EU, India and US
Where IP meets regulation in fast-moving technology: open-source licensing, AI governance across the EU, India and the US, chip layout-design protection, and climate-tech classification.
Key developmentsUpdated Oct 2026 · 8 items
- EU high-risk AI obligations apply (Annex III)Upcoming
Risk management, data governance, conformity assessment and registration for stand-alone high-risk systems.
Source: EUR-Lex ↗ - EU Digital Omnibus on AI enters into force
Regulation (EU) 2026/1744 moves Annex III high-risk duties to 2 December 2027 and Annex I to 2 August 2028; transparency duties stay on 2 August 2026.
Source: EUR-Lex ↗ - Colorado AI Act amended and effective date delayed
SB 26-189 replaces "high-risk AI" with automated decision-making technology, drops impact assessments, voids indemnities for a party's own discriminatory acts, and takes effect 1 January 2027.
Source: Holland & Knight ↗ - India introduces mandatory labelling for AI-generated content
IT Rules amendment, in force 20 February 2026: prominent labels, provenance metadata, user declarations on large platforms and 3-hour takedowns.
Source: Hogan Lovells ↗ - DPIIT working paper proposes a hybrid licensing model for AI training
A mandatory blanket licence for training on copyrighted works, with government-set royalties due once the AI is commercialised. Comments closed about 7 January 2026.
Source: Fox Mandal ↗ - DPDP Rules notified, phased over 12–18 months
Data Protection Board set up first; consent-manager and substantive data-fiduciary duties follow over 12 to 18 months.
Source: Mondaq ↗ - MeitY releases India AI Governance Guidelines
Principles-based, light-touch framework under the IndiaAI Mission; relies on existing law rather than a new AI statute.
Source: SCC Online ↗ - US Copyright Office releases its report on generative AI training
Part 3 of its AI series questions whether fair use covers all training on copyrighted works.
Source: US Copyright Office ↗
| Obligation | Applies from | Status |
|---|---|---|
| EU · Screen the use case against prohibited practices (Art. 5)AI Act | 02 Feb 2025 | In force |
| EU · AI literacy measures for staff and operators (Art. 4)AI Act | 02 Feb 2025 | In force |
| India · Label synthetic content prominently and embed provenance metadata that users cannot stripIT Rules, 2021 as amended Feb 2026; platforms with 50 lakh+ users must also collect user declarations | 20 Feb 2026 | In force |
| EU · Tell people they are interacting with an AI system (Art. 50(1))AI Act; not deferred by the Omnibus | 02 Aug 2026 | In force |
| EU · Machine-readable marking of AI-generated output (Art. 50(2))Short grace period for systems already on the market | 02 Aug 2026 | In force |
| India · Notice, consent, purpose limitation and security safeguards for personal data, including training dataDPDP Act, 2023; substantive duties 18 months after the DPDP Rules were notified in Nov 2025 | 13 May 2027 | Upcoming |
| India · Align with the India AI Governance Guidelines (accountability, transparency, grievance redress)MeitY, Nov 2025; principles-based, no new statute | — | Voluntary |
| Colorado · No duties under the Colorado AI Act unless the system makes or shapes consequential decisionsScope test | — | Not triggered |
EU dates reflect Regulation (EU) 2024/1689 as amended by the AI Omnibus, Regulation (EU) 2026/1744, in force 27 July 2026. India reflects the IT Rules amendment in force 20 February 2026, the DPDP Rules, 2025 and the voluntary India AI Governance Guidelines (November 2025). Colorado reflects the AI Act as amended in May 2026. US federal law has no general AI statute; sector regulators still apply. Updated October 2026.
Desk reference · AI governance instruments compared
| Instrument | Approach | Reaches | Teeth |
|---|---|---|---|
| EU AI Act | Risk tiers: prohibited, high-risk, transparency, GPAI | Providers and deployers serving the EU, wherever based | Fines up to 7% of global turnover for prohibited practices |
| India AI Governance Guidelines | Principles and institutions; no new AI statute | Voluntary, with sector regulators applying existing law | Indirect, through IT Act, DPDP Act and sector rules |
| India IT Rules (2026 amendment) | Labelling and provenance of synthetic content | Intermediaries; extra duties for large social platforms | Loss of safe-harbour protection |
| DPDP Act, 2023 | Consent and purpose limits on personal data | Anyone processing digital personal data of people in India | Penalties set by the Data Protection Board |
| Colorado AI Act | Duties around consequential decisions, narrowed in 2026 | Developers and deployers serving Colorado consumers | Attorney General enforcement |
Tools
Annex III Classifier
Walk a use case through the EU high-risk categories and the Article 6(3) exemptions.
Transparency Notice Builder
Draft the user-facing AI disclosure and synthetic-content label for EU and Indian rules.
AI-Assisted Invention Worksheet
Record human contribution per claim element, for inventorship positions in the US, EP and India.
Questions practitioners ask.
Short answers to the questions US patent attorneys and in-house teams ask most about India, with the rule behind each one. Reviewed October 2026.
Does the EU AI Act apply to US companies?
Yes, when a US company places an AI system on the EU market or its output is used in the EU. Prohibitions apply from 2 February 2025, general-purpose model duties from 2 August 2025, and transparency duties from 2 August 2026.
When do EU AI Act high-risk obligations apply after the AI Omnibus?
Regulation (EU) 2026/1744, in force 27 July 2026, moved stand-alone high-risk systems under Annex III to 2 December 2027. AI embedded in products under EU product-safety law (Annex I) moved to 2 August 2028.
Does India have an AI law?
Not a dedicated statute. MeitY's India AI Governance Guidelines (November 2025) are voluntary. Binding rules come from existing law: the IT Rules amendment requiring labels on synthetic content from 20 February 2026, and the DPDP Act, 2023, whose main duties phase in by May 2027.
More tools.
Live toolIndia Patent Deadline Calculator
Calculate Indian patent deadlines under the 2024 Rules: 31-month national phase, Form 18, Form 3, FER response, Form 27 and renewals. Indian forms mapped to US practice.
Live toolOpen-Source Licence Compatibility Checker
Check GPL, LGPL, AGPL, MPL, Apache-2.0 and MIT components against your outbound licence for distributed, SaaS and internal products. EU Cyber Resilience Act dates included.
Live toolChip IP Protection Planner
Plan chip IP protection: US mask work registration (17 U.S.C. 908), India SICLD Act layout-design filing bar, 10-year terms and patent grace periods in the US, EP and India.
Live toolClimate-Tech Classifier
Suggest CPC Y02 and Y04S climate-tech tags from an abstract for green patent landscapes and portfolio reporting, with India carbon market developments.
Live toolIndia IP Assignment Check
Why work-made-for-hire fails for Indian contractors. Check assignments against Copyright Act s.19 defaults, Patents Act s.68, Section 39 foreign filing and stamp duty.
Live toolConsultation Comment Builder
Track Indian IP, AI and data policy developments with sources, and draft clause-by-clause comments for Indian government consultations.
Live · FlagshipFFL Planner
Sequence foreign filing licences and first filings across jurisdictions, including India s.39 and US 35 U.S.C. 184 permissions.