AI Obligation Atlas

Human oversight of automated decisions

Requirements to preserve meaningful human review, intervention, or override of automated and AI-driven decisions.

7 jurisdictions8 laws & guidance6 binding← All obligations

US States3 laws

C.R.S. § 6-1-1701 et seq.

State of Colorado

Binding

Developers and deployers of Automated Decision-Making Technology making consequential decisions about Colorado consumers.

Law · Pending

Ind. Code ch. 27-1-52 (Payment of Health Claims)

State of Indiana

Binding

Indiana health insurers and health maintenance organizations — may not use automated systems or artificial intelligence as the sole basis to downcode a health claim based on medical necessity without a human reviewing the beneficiary medical record; healthcare providers may not use automated tools to submit claims without review by the provider or billing professional.

Law · In Force

NRS 414.099 / 704.1833

State of Nevada

Binding

State and local emergency management plans and public-utility disaster-response decisions — final emergency response, resource allocation, and utility shutdown decisions must not be made solely by AI.

Law · In Force

US Federal3 laws

CMS AI Playbook v4 — Auditable Data Lineage and Oversight

United States (federal)

Guidance

Use of AI in workflows that influence Medicare or Medicaid claims, prior authorization, or coverage decisions.

Guidance · In Force

False Claims Act

United States (federal)

Binding

Submission of false or fraudulent claims for payment to the U.S. government, including by AI-influenced clinical documentation and billing systems.

Law · In Force

FINRA 2026 Annual Regulatory Oversight Report — generative artificial intelligence examination themes

United States (Federal)

Guidance

FINRA member firms using generative AI or autonomous AI agents.

Guidance · In Force

Americas1 law

Law on Promotion of Artificial Intelligence Use (Law No. 31814) and Regulation (Supreme Decree No. 115-2025-PCM)

Republic of Peru

Binding

Developers and deployers of AI systems in Peru's public administration, state companies, and private sector (excluding personal use and national defence/security).

Law · In Force

Brazil1 law

Lei nº 13.709, de 14 de agosto de 2018 (Lei Geral de Proteção de Dados Pessoais)

Federative Republic of Brazil

Binding

Processing of personal data carried out in Brazil, by data subjects located in Brazil at the time of collection, or for the offering of goods or services to individuals in Brazil.

Law · In Force

Sourced from the LegisGate™ intelligence library — our single source of truth (SSOT). Theme membership is computed deterministically from curated library text; run a LegisGate™ report to see how these obligations apply to your specific AI tool.

Talk to usWe're here to help