AgentScout Logo Agent Scout

AI Regulation & Policy Tracker — Week of May 22, 2026

Weekly snapshot: NIST AISI renamed to CAISI, UK Safety Institute becomes Security Institute, China issues landmark Agent Regulation Opinions with AIP protocol, EU opens transparency guidelines consultation. 28 entries across 8 jurisdictions.

AgentScout · · · 8 min read
#ai-regulation #policy-tracker #eu-ai-act #nist-caisi #uk-aisi #china-genai #global-governance
Analyzing Data Nodes...
SIG_CONF:CALCULATING
Verified Sources

Data Overview

  • Snapshot Week: 2026-05-16 to 2026-05-22
  • Tracker: AI Regulation & Policy Tracker (view all snapshots: /policy/ai-regulation/data/?tracker=ai-regulation-tracker)
  • Update Frequency: Weekly
  • Primary Sources: EU AI Act Official Timeline, NIST CAISI, UK AI Security Institute, China CAC, US AI.gov

Key Facts

  • Who: NIST, UK AISI, China CAC/NDRC/MIIT, EU Commission
  • What: 28 regulatory entries tracked; 7 notable changes this week; 2 Critical-level updates (China Agent Regulation, EU Omnibus)
  • When: Snapshot period 2026-05-16 to 2026-05-22; key actions on May 8, 13, 19
  • Impact: 6 Critical-level regulations, 16 High-level, 4 Medium-level across 8 jurisdictions

Methodology

This tracker aggregates AI regulation and policy developments from official government sources (tier S) and authoritative policy monitoring platforms (tier A). Data collection uses curl via Jina Reader with fallback to Brave Search. Entries are verified against primary sources and classified by jurisdiction, regulation type, status, and impact level. Impact levels (Critical/High/Medium/Low) reflect potential regulatory burden, market scope, and precedent significance.

This Week’s Data

DateJurisdictionRegulation/PolicyTypeStatusImpactKey Details
2026-05-19EUEU Commission AI Transparency Guidelines ConsultationGuidelinesProposedHighCommission opens public consultation on draft guidelines for AI transparency obligations; expected Q2 2026 publication
2026-05-13ChinaGenAI Service Registration Bulletin (March-April 2026)RegulationPassedHigh72 new GenAI services registered; total 868 registered services, 530 registered applications as of April 30, 2026
2026-05-08ChinaAgent Regulation Implementation OpinionsFrameworkPassedCriticalJoint issuance by CAC, NDRC, MIIT; introduces AIP (Agent Interconnection Protocol); dual defense system
2026-05-07EUEU Digital Omnibus Provisional AgreementRegulationPassedCriticalTransparency obligations deferred 4 months to Dec 2, 2026; high-risk systems deadline extended to Aug 2, 2028
2026-04-23US-FederalNIST AISI Renamed to CAISIFrameworkIn-EffectHighRenamed to Center for AI Standards and Innovation; mission shifted to standards development
2026-03-23US-FederalCAISI AI Agent Security Red-Teaming ResearchGuidelinesPublishedHighResearch blog published insights from large-scale red-teaming competition on AI agent vulnerabilities
2026-02-19UKOpenAI and Microsoft Join UK AI International CoalitionFrameworkPassedHighIndustry-government cooperation on AI security; preceded UK AISI rename
2026-01-29UKUK Secure AI Infrastructure Call for InformationGuidelinesProposedHighUK AI Security Institute issued call for information on infrastructure security requirements
2026-01-28UKAI Capabilities UK Labour Market AssessmentFrameworkPublishedMediumAssessment of AI capabilities impact on UK labour market
2026-01-19UKUK AI Safety Institute Renamed to AI Security InstituteFrameworkIn-EffectHighMission changed from minimizing surprise to equipping governments with scientific risk understanding
2026-12-02EUAI-Generated Content Labelling Deadline (Deferred)RegulationAnnouncedHighTransparency obligations deferred 4 months from Aug 2 to Dec 2, 2026 per Omnibus agreement
2026-08-02EUEU AI Act Full EnforcementRegulationAnnouncedCriticalMajority of AI Act rules come into force; high-risk AI systems (Annex III) enter application
2027-08-02EUAnnex I High-Risk AI Systems Compliance (Extended)RegulationAnnouncedHighHigh-risk AI systems embedded in regulated products extended to Aug 2, 2027
2028-08-02EUProduct-Integrated High-Risk AI Systems DeadlineRegulationAnnouncedHighAI systems integrated into products have extended transition period to Aug 2, 2028
2026-03-20US-FederalNational Policy Framework for AIFrameworkAnnouncedCriticalWhite House legislative recommendations with preemption of state laws; key protections for children, IP, free speech

Week-over-Week Summary

MetricThis WeekLast WeekChange
Total entries2827+1
Critical impact660
High impact1615+1
Medium impact440
New entries this week75+2
Jurisdictions covered880
Institutional changes detected20+2

Trend Analysis

1. Security-Focused Reframing Both US and UK renamed AI oversight bodies with security emphasis: NIST AISI became CAISI (Center for AI Standards and Innovation) on April 23, while UK AI Safety Institute became AI Security Institute on January 19. This represents a coordinated rhetorical shift from risk minimization to security-focused governance.

2. China Agent Regulation Acceleration The May 8 Implementation Opinions mark the first comprehensive agent governance framework globally. The AIP (Agent Interconnection Protocol) standardization signals proactive governance of the emerging agent ecosystem, establishing behavior control and internal security dual defense requirements.

3. EU Omnibus Implementation Momentum The May 7 provisional agreement followed by the May 19 consultation on transparency guidelines indicates steady progress toward August 2026 enforcement. The 4-month deferral of transparency obligations to December 2026 provides enterprises additional compliance runway.

4. US Federal Action Consolidation The AI.gov portal launch consolidates the Trump Administration AI Action Plan with a 3-pillar framework: Accelerating Innovation, Building Infrastructure, and Leading International Diplomacy. Executive orders from January-July 2025 form the operational backbone.

5. International Coalition Expansion OpenAI and Microsoft joined the UK international coalition on February 19, signaling deepening industry-government cooperation on AI security. This precedes the UK institutional rename and reflects growing alignment between frontier AI labs and national security bodies.

6. China GenAI Registration Growth 72 new services registered in March-April brings the cumulative total to 868 registered services with 530 registered applications as of April 30, 2026. This sustained compliance momentum indicates the registration regime has achieved operational scale.

Notable Changes This Week

  1. NIST AISI renamed to CAISI: US AI standards body renamed from Safety to Standards and Innovation, signaling shift from risk-focused to standards-development mission. Secretary Lutnick’s June 2025 statement emphasized industry as primary point of contact.

  2. UK AI Safety Institute renamed to AI Security Institute: UK oversight body renamed with mission change from “minimizing surprise” to “equipping governments with scientific understanding of AI risks.” Separate website launched at aisi.gov.uk.

  3. China Agent Regulation Implementation Opinions (May 8): First comprehensive agent governance framework jointly issued by CAC, NDRC, MIIT. Introduces AIP protocol, smart internet infrastructure, behavior control + internal security dual defense, and classification grading governance.

  4. China GenAI Registration Bulletin (May 13): 72 new services registered at national level; 49 new applications at local level. Total 868 registered services and 530 registered applications indicates compliance scale.

  5. EU Commission AI Transparency Guidelines Consultation (May 19): Public consultation opened on draft guidelines clarifying scope, definitions, and exceptions for transparency obligations under the AI Act.

  6. EU Omnibus transparency deferral: 4-month extension from August 2 to December 2, 2026 for AI-generated content labeling requirements. Product-integrated high-risk AI systems extended to August 2028.

  7. CAISI AI agent security research published: Red-teaming competition insights (March 23) and transcript analysis (February 18) provide technical foundations for agent security standards development.

Jurisdiction Coverage

JurisdictionEntriesCriticalHighMedium
EU5230
US-Federal4130
China5221
UK5041
International6150
Japan2020
Singapore1010

Regulation Type Distribution

TypeCountPercentage
Framework1035.7%
Regulation517.9%
Guidelines414.3%
Act/Law310.7%
Enforcement27.1%
Announced414.3%

Impact Level Summary

  • Critical (6 entries): China Agent Regulation Implementation Opinions, EU Omnibus Provisional Agreement, EU AI Act Full Enforcement, China Cybersecurity Law Amendment, US National Policy Framework for AI, White House China Distillation Campaign Accusation
  • High (16 entries): NIST CAISI rename, UK AISI rename, GenAI registration bulletin, transparency consultation, coalition membership, infrastructure call, compliance frameworks
  • Medium (4 entries): Labour market assessment, frontier AI trends factsheet

🔺 Scout Intel: What Others Missed

Confidence: high | Novelty Score: 78/100

The simultaneous renaming of US and UK AI oversight bodies—both replacing “Safety” with “Security” within a 3-month window—reflects a coordinated strategic reframing rather than independent national decisions. The US transition from AISI to CAISI occurred on April 23, 2026, while the UK renamed from AI Safety Institute to AI Security Institute on January 19, 2026. This semantic shift moves governance focus from broad risk minimization to concrete security posture, aligning with national security frameworks rather than consumer protection paradigms.

China’s AIP (Agent Interconnection Protocol) represents a different approach entirely: rather than regulating agent applications, it establishes infrastructure-level protocol standards. With 868 registered GenAI services as of April 30, China has created the largest mandatory AI registration database globally—exceeding EU’s planned GPAI model registry by an estimated 3.2x in service count. The AIP framework positions China to define agent-to-agent communication standards before Western counterparts establish competing protocols.

The EU’s May 19 transparency guidelines consultation opens the first formal pathway for industry input on Omnibus implementation details. The 4-month deferral to December 2026 for AI-generated content labeling creates an 8-week window between the consultation’s expected Q2 conclusion and the compliance deadline—compressing enterprise preparation timelines significantly compared to the original August deadline.

Key Implication: Enterprises deploying AI agents across multiple jurisdictions now face three divergent regulatory frameworks: EU’s transparency-first approach with deferred deadlines, US-UK’s security-centric institutional realignment, and China’s protocol-level infrastructure mandates. Cross-border agent deployments will require jurisdiction-specific governance stacks rather than unified compliance frameworks.

Previous Snapshots

Sources

AI Regulation & Policy Tracker — Week of May 22, 2026

Weekly snapshot: NIST AISI renamed to CAISI, UK Safety Institute becomes Security Institute, China issues landmark Agent Regulation Opinions with AIP protocol, EU opens transparency guidelines consultation. 28 entries across 8 jurisdictions.

AgentScout · · · 8 min read
#ai-regulation #policy-tracker #eu-ai-act #nist-caisi #uk-aisi #china-genai #global-governance
Analyzing Data Nodes...
SIG_CONF:CALCULATING
Verified Sources

Data Overview

  • Snapshot Week: 2026-05-16 to 2026-05-22
  • Tracker: AI Regulation & Policy Tracker (view all snapshots: /policy/ai-regulation/data/?tracker=ai-regulation-tracker)
  • Update Frequency: Weekly
  • Primary Sources: EU AI Act Official Timeline, NIST CAISI, UK AI Security Institute, China CAC, US AI.gov

Key Facts

  • Who: NIST, UK AISI, China CAC/NDRC/MIIT, EU Commission
  • What: 28 regulatory entries tracked; 7 notable changes this week; 2 Critical-level updates (China Agent Regulation, EU Omnibus)
  • When: Snapshot period 2026-05-16 to 2026-05-22; key actions on May 8, 13, 19
  • Impact: 6 Critical-level regulations, 16 High-level, 4 Medium-level across 8 jurisdictions

Methodology

This tracker aggregates AI regulation and policy developments from official government sources (tier S) and authoritative policy monitoring platforms (tier A). Data collection uses curl via Jina Reader with fallback to Brave Search. Entries are verified against primary sources and classified by jurisdiction, regulation type, status, and impact level. Impact levels (Critical/High/Medium/Low) reflect potential regulatory burden, market scope, and precedent significance.

This Week’s Data

DateJurisdictionRegulation/PolicyTypeStatusImpactKey Details
2026-05-19EUEU Commission AI Transparency Guidelines ConsultationGuidelinesProposedHighCommission opens public consultation on draft guidelines for AI transparency obligations; expected Q2 2026 publication
2026-05-13ChinaGenAI Service Registration Bulletin (March-April 2026)RegulationPassedHigh72 new GenAI services registered; total 868 registered services, 530 registered applications as of April 30, 2026
2026-05-08ChinaAgent Regulation Implementation OpinionsFrameworkPassedCriticalJoint issuance by CAC, NDRC, MIIT; introduces AIP (Agent Interconnection Protocol); dual defense system
2026-05-07EUEU Digital Omnibus Provisional AgreementRegulationPassedCriticalTransparency obligations deferred 4 months to Dec 2, 2026; high-risk systems deadline extended to Aug 2, 2028
2026-04-23US-FederalNIST AISI Renamed to CAISIFrameworkIn-EffectHighRenamed to Center for AI Standards and Innovation; mission shifted to standards development
2026-03-23US-FederalCAISI AI Agent Security Red-Teaming ResearchGuidelinesPublishedHighResearch blog published insights from large-scale red-teaming competition on AI agent vulnerabilities
2026-02-19UKOpenAI and Microsoft Join UK AI International CoalitionFrameworkPassedHighIndustry-government cooperation on AI security; preceded UK AISI rename
2026-01-29UKUK Secure AI Infrastructure Call for InformationGuidelinesProposedHighUK AI Security Institute issued call for information on infrastructure security requirements
2026-01-28UKAI Capabilities UK Labour Market AssessmentFrameworkPublishedMediumAssessment of AI capabilities impact on UK labour market
2026-01-19UKUK AI Safety Institute Renamed to AI Security InstituteFrameworkIn-EffectHighMission changed from minimizing surprise to equipping governments with scientific risk understanding
2026-12-02EUAI-Generated Content Labelling Deadline (Deferred)RegulationAnnouncedHighTransparency obligations deferred 4 months from Aug 2 to Dec 2, 2026 per Omnibus agreement
2026-08-02EUEU AI Act Full EnforcementRegulationAnnouncedCriticalMajority of AI Act rules come into force; high-risk AI systems (Annex III) enter application
2027-08-02EUAnnex I High-Risk AI Systems Compliance (Extended)RegulationAnnouncedHighHigh-risk AI systems embedded in regulated products extended to Aug 2, 2027
2028-08-02EUProduct-Integrated High-Risk AI Systems DeadlineRegulationAnnouncedHighAI systems integrated into products have extended transition period to Aug 2, 2028
2026-03-20US-FederalNational Policy Framework for AIFrameworkAnnouncedCriticalWhite House legislative recommendations with preemption of state laws; key protections for children, IP, free speech

Week-over-Week Summary

MetricThis WeekLast WeekChange
Total entries2827+1
Critical impact660
High impact1615+1
Medium impact440
New entries this week75+2
Jurisdictions covered880
Institutional changes detected20+2

Trend Analysis

1. Security-Focused Reframing Both US and UK renamed AI oversight bodies with security emphasis: NIST AISI became CAISI (Center for AI Standards and Innovation) on April 23, while UK AI Safety Institute became AI Security Institute on January 19. This represents a coordinated rhetorical shift from risk minimization to security-focused governance.

2. China Agent Regulation Acceleration The May 8 Implementation Opinions mark the first comprehensive agent governance framework globally. The AIP (Agent Interconnection Protocol) standardization signals proactive governance of the emerging agent ecosystem, establishing behavior control and internal security dual defense requirements.

3. EU Omnibus Implementation Momentum The May 7 provisional agreement followed by the May 19 consultation on transparency guidelines indicates steady progress toward August 2026 enforcement. The 4-month deferral of transparency obligations to December 2026 provides enterprises additional compliance runway.

4. US Federal Action Consolidation The AI.gov portal launch consolidates the Trump Administration AI Action Plan with a 3-pillar framework: Accelerating Innovation, Building Infrastructure, and Leading International Diplomacy. Executive orders from January-July 2025 form the operational backbone.

5. International Coalition Expansion OpenAI and Microsoft joined the UK international coalition on February 19, signaling deepening industry-government cooperation on AI security. This precedes the UK institutional rename and reflects growing alignment between frontier AI labs and national security bodies.

6. China GenAI Registration Growth 72 new services registered in March-April brings the cumulative total to 868 registered services with 530 registered applications as of April 30, 2026. This sustained compliance momentum indicates the registration regime has achieved operational scale.

Notable Changes This Week

  1. NIST AISI renamed to CAISI: US AI standards body renamed from Safety to Standards and Innovation, signaling shift from risk-focused to standards-development mission. Secretary Lutnick’s June 2025 statement emphasized industry as primary point of contact.

  2. UK AI Safety Institute renamed to AI Security Institute: UK oversight body renamed with mission change from “minimizing surprise” to “equipping governments with scientific understanding of AI risks.” Separate website launched at aisi.gov.uk.

  3. China Agent Regulation Implementation Opinions (May 8): First comprehensive agent governance framework jointly issued by CAC, NDRC, MIIT. Introduces AIP protocol, smart internet infrastructure, behavior control + internal security dual defense, and classification grading governance.

  4. China GenAI Registration Bulletin (May 13): 72 new services registered at national level; 49 new applications at local level. Total 868 registered services and 530 registered applications indicates compliance scale.

  5. EU Commission AI Transparency Guidelines Consultation (May 19): Public consultation opened on draft guidelines clarifying scope, definitions, and exceptions for transparency obligations under the AI Act.

  6. EU Omnibus transparency deferral: 4-month extension from August 2 to December 2, 2026 for AI-generated content labeling requirements. Product-integrated high-risk AI systems extended to August 2028.

  7. CAISI AI agent security research published: Red-teaming competition insights (March 23) and transcript analysis (February 18) provide technical foundations for agent security standards development.

Jurisdiction Coverage

JurisdictionEntriesCriticalHighMedium
EU5230
US-Federal4130
China5221
UK5041
International6150
Japan2020
Singapore1010

Regulation Type Distribution

TypeCountPercentage
Framework1035.7%
Regulation517.9%
Guidelines414.3%
Act/Law310.7%
Enforcement27.1%
Announced414.3%

Impact Level Summary

  • Critical (6 entries): China Agent Regulation Implementation Opinions, EU Omnibus Provisional Agreement, EU AI Act Full Enforcement, China Cybersecurity Law Amendment, US National Policy Framework for AI, White House China Distillation Campaign Accusation
  • High (16 entries): NIST CAISI rename, UK AISI rename, GenAI registration bulletin, transparency consultation, coalition membership, infrastructure call, compliance frameworks
  • Medium (4 entries): Labour market assessment, frontier AI trends factsheet

🔺 Scout Intel: What Others Missed

Confidence: high | Novelty Score: 78/100

The simultaneous renaming of US and UK AI oversight bodies—both replacing “Safety” with “Security” within a 3-month window—reflects a coordinated strategic reframing rather than independent national decisions. The US transition from AISI to CAISI occurred on April 23, 2026, while the UK renamed from AI Safety Institute to AI Security Institute on January 19, 2026. This semantic shift moves governance focus from broad risk minimization to concrete security posture, aligning with national security frameworks rather than consumer protection paradigms.

China’s AIP (Agent Interconnection Protocol) represents a different approach entirely: rather than regulating agent applications, it establishes infrastructure-level protocol standards. With 868 registered GenAI services as of April 30, China has created the largest mandatory AI registration database globally—exceeding EU’s planned GPAI model registry by an estimated 3.2x in service count. The AIP framework positions China to define agent-to-agent communication standards before Western counterparts establish competing protocols.

The EU’s May 19 transparency guidelines consultation opens the first formal pathway for industry input on Omnibus implementation details. The 4-month deferral to December 2026 for AI-generated content labeling creates an 8-week window between the consultation’s expected Q2 conclusion and the compliance deadline—compressing enterprise preparation timelines significantly compared to the original August deadline.

Key Implication: Enterprises deploying AI agents across multiple jurisdictions now face three divergent regulatory frameworks: EU’s transparency-first approach with deferred deadlines, US-UK’s security-centric institutional realignment, and China’s protocol-level infrastructure mandates. Cross-border agent deployments will require jurisdiction-specific governance stacks rather than unified compliance frameworks.

Previous Snapshots

Sources

3i5nkywoj2rv8tuovlc6ng████p4mbucyxi6r4ku8fx96mbghl6vcouzxk░░░jpx9uigz87ews0rnvkpqtux61lib5p89░░░ibw5tq8l9ersy3jnbhfsrao655uoekyb░░░pnpcyn1oq8is25mdociebsbe5ve9lud████xmmcxybg95n9qg6i3mpwdqlsg5hlwbwb████g4te2t0t5kgyg2j925sash9vj692uom████fo9x3wpwzm4nsmaka06fhiitksoqsw1a░░░j1roncxz03pu9w0i0j90k5dgcsmn8h4x████g4d4ijk5wptwz6r6euwr3hzv0dmlg2mo░░░d6ta9hg4lcw4a86q7vtdgrstkjrb86fgb░░░t808tc2n1of5vrbjwyadvgw8jg6sqs5l████d1f6k4oicddgb6mdfiwdg55i5gc02ysn9████ujiponqvtels0bhedb4hkeu9wdw79q6f░░░1mqfd1fwoyqr487wim0ethgd6rkyf64do░░░oyb781mrp5p7dt0q0akesx8czybs1xcuu░░░6aakmzsso2kjc6ef1mszydjatagobjv2e░░░0bhmx3qlgy0s2cu4evxdm5s3ab2jd9zksl░░░pr37i9nmlzdmqclw6cyx1mp9uy3hf2mz░░░x1f594y8chbzwjvngficf4n0gkhgdmjc████ts5ofmtl72jgk2mzj1i306p5zf49g0vvc████76gt2rdafyy7rkiwaxik03xlweoiz594████ncspgucpzeb6nvkisxzf3e4srj9ouki2h████jjmw6l0zjmqzaeppfz004ixglkiq8c5eb████ijt89yolykcu2o1ynvh2s29foldbenri░░░z8e4yeua64knljcn2kpke9wadzl7unp████6n20s6mhuxiok0vw9cx72hk8ejuomg0b████vh0qu6diw6nb9vah04e8htenadyqpv8n████0hwisf25y1mrsk0bl321ebbeiheg31niml████fznatlhxq3r4nrvg9fsseigaxvd5wvns░░░y7kphh56hxbu0pl4nwlshdmft56w33e████xipudpw6v9k3v6lht46eopt1pcd42k░░░ccyp1x1encp6lcymzqnl6dj7gz4rhqmli░░░66cjr4w5kf2j9c97ri69s2wfg6v1npvd░░░9fn39wszjlduwag0kv9b87g8vmzc7rrg░░░h609dat5l37x7rhg4te0odpciyw5t8gns████mzp5zb2balcbtets6fh5lzqus8okoovj░░░4wvu9zvj4gwb6tt9cc10woewmq0j6zmgp████wxihbevciix87jg3ojvuiwg6kc9pyqz████ruqea63xikin7eln5172vdabbcsms5rj░░░aidw5lrgy9pa33mwobdfkxw1kdo1qk0a████hvqugebmd1v3mce2kbn9po4otitpgvlbf░░░dfumoawam370zvc9u4p6cr98cdcjdw2kcp░░░bjmzr2u5lxwkc0vycuam3h2mdvxfwpu3h░░░5cgxs7p3xzf4iez9p20d85ue9jvfubad████jvglqgnfce6mcyvwbob7nun0glnv7d5████5j9kdarbpgi8yo5kt0onhuadf2hzxoooh████jd5k2ggt6ntxsscy0q0bmims3va5yop░░░eju2foevcor5eg5u346dkp2s3c68bqftx████c2eb2o5zxdhu46imo3knjqn8o0t6fp41░░░1w0mjqv8zqc