Transparency Obligations

Definition and scope

Disclosure of training data, model cards, system-card requirements.

The cross-jurisdiction picture below shows how each of 29 tracked instruments treats this topic. The patterns vary substantially — explicit conflicts exist where instruments take incompatible positions, and 5 regimes are silent, leaving gaps that future policy work could address.

Historical primacy & cross-jurisdiction tension

First addressed by OECD AI Principles (Recommendation) on 2019-05-22 (governs). Subsequent regimes have either codified, diverged from, or remained silent on this baseline.

• ConflictInterim Measures for Generative AI Service Management↔EU AI Act
• Forum-shoppingEU AI Act↔Executive Order 14179 — Removing Barriers to American Leadership in AI
• Forum-shoppingG7 Hiroshima AI Process Code of Conduct↔African Union Continental AI Strategy
• Forum-shoppingOECD AI Principles (Recommendation)↔NYC Local Law 144 of 2021 (Automated Employment Decision Tools)

Cross-jurisdiction coverage

Conflicts and divergence

Instruments that take explicitly conflicting positions on Transparency Obligations.

• conflicts
  Interim Measures for Generative AI Service Management— Art. 4 + Algorithm Recommendation Rules — disclosure to CAC, not public; conflicts with EU public-disclosure model

Silent regimes — gap signal

Instruments that do not address Transparency Obligations — candidates for future policy work.

• Executive Order 14179 — Removing Barriers to American Leadership in AIUS
• African Union Continental AI StrategyAfrican_Union
• NYC Local Law 144 of 2021 (Automated Employment Decision Tools)US
• Colorado Artificial Intelligence Act (SB 24-205)US
• Illinois HB 3773 / Public Act 103-0804 (AI Employment Discrimination)US

Related enforcement cases

Documented enforcement actions where regulators invoked a rule against a deploying organisation, with the primary-source case record and the lesson the field has drawn from each.

• FTC investigation of OpenAIUS · 2023 · ongoing
  Federal Trade Commission v. OpenAI — Civil Investigative Demand alleging consumer-protection violations: misleading claims about ChatGPT capabilities, training-data privacy, and consumer harm from hallucinations.
  Lesson: First US federal enforcement action against a frontier-AI developer. Establishes that pre-AI-statute consumer-protection authority (FTC §5) can be applied to AI services — supports the US 'sectoral / ex-post liability' regime (vs EU's ex-ante AIA). Action remains pending; no judgment yet.
  Source record →news secondary
• New York Times v. OpenAI + MicrosoftUS · 2023 · ongoing
  New York Times Company (private civil litigation) v. OpenAI Inc. + Microsoft Corp. — Unauthorised reproduction of NYT-copyrighted articles in GPT training corpora; output of substantially similar text on prompted query; removal of copyright-management information.
  Lesson: First major frontier-foundation-model copyright lawsuit by a primary news source. Discovery has surfaced disclosure of training-data composition that the EU AIA Art. 53 transparency requirements would have surfaced ex-ante. The case is the highest-stakes ex-post-liability action testing whether US sectoral approach can substitute for ex-ante regulation on training-data rights — outcome will inform 2025-2027 regulatory debates.
  Source record →
• Mobley v. Workday (US AI-hiring class action)US · 2023 · ongoing
  Mobley v. Workday, Inc., No. 3:23-cv-00770 (N.D. Cal.)
  Private civil class action; EEOC amicus participation v. Workday Inc. — Workday's algorithmic hiring tools allegedly screened out applicants on disability, age, and race. Class action seeks to certify Workday as an 'employment agency' under Title VII so disparate-impact theory applies to the algorithm's outputs rather than only its developers.
  Lesson: First major US AI-hiring class action with EEOC amicus support. If Workday is certified as an 'employment agency', US sectoral approach (EEOC + Title VII) substantially expands AI-hiring liability without requiring an AI statute. This is the load-bearing test of whether US 'principles + ex-post liability' approach can substitute for EU AIA Annex III §4 (high-risk employment AI obligations).
  Source record →regulator landing
• CAC Doubao deep-synthesis enforcementCN · 2024–2024
  Cyberspace Administration of China (CAC) v. ByteDance (Doubao) — Doubao deployed deepfake-generation feature without prior CAC algorithm registration; failed to embed mandatory deep-synthesis content-provenance label per Deep Synthesis Provisions Art. 16. CAC requested feature removal pending registration.
  Lesson: First named CN-GENAI-2023 enforcement against a frontier-tier Chinese AI developer. Demonstrates: (1) CN registration regime applies pre-deployment + has bite even against domestic champions; (2) cross-instrument enforcement (GenAI rules + Deep Synthesis rules) is operative; (3) remediation is rapid (weeks not years) but private — no consent decree text published.
  Source record →
• Texas AG v. Pieces Technologies (healthcare AI deceptive practices)US · 2024–2024
  Texas Attorney General v. Pieces Technologies, Inc. — Pieces marketed its generative-AI clinical-summary product to Texas hospitals with materially misleading accuracy claims (alleging severe-hallucination rates orders of magnitude lower than measured in deployment).
  Lesson: First US state-attorney-general action against a generative-AI vendor under state UDAP/UDTPA authority. Settlement (Sep 2024) required: (1) clear disclosure of AI involvement to end-users, (2) accurate marketing-claim substantiation, (3) ongoing monitoring of model output for hallucination rates. Establishes that state AGs can reach AI deployment claims without an AI-specific state statute — through long-standing consumer-protection authority. Likely template for parallel actions by other state AGs.
  Source record →regulator landing
• EDPB ChatGPT TaskforceEU · 2023–2024
  European Data Protection Board (EDPB) — coordinated DPA action v. OpenAI — Italian Garante temporarily banned ChatGPT (Mar-Apr 2023) over alleged lack of legal basis for training-data processing, missing age-verification, and inability to honour data-subject rights. EDPB convened taskforce to coordinate DPA responses.
  Lesson: First EU-wide AI enforcement coordination predating the EU AIA. Established that GDPR applies fully to LLM training + deployment + that DPAs would coordinate via EDPB rather than fragment. ChatGPT resumed Italian service after age-verification + Article-15 right-of-access endpoint additions. Direct precedent for EU AIA Art. 53 implementation timeline.
  Source record →
• CN CAC algorithm-recommendation rectification campaignCN · 2022–2023
  Cyberspace Administration of China (CAC) v. Multiple platforms: Douyin, Kuaishou, Xiaohongshu, Weibo, Taobao (named in CAC public action) — Unregistered or non-compliant algorithm-recommendation systems. Failure to provide opt-out mechanisms. Failure to register algorithms with CAC under the Algorithm Recommendation Provisions.
  Lesson: First operational implementation of pre-deployment AI registration regime. Demonstrated that CAC has enforcement bandwidth + technical capability to audit recommender algorithms at scale. Platforms responded by significantly altering algorithm transparency + opt-out flows. Cited as the working counter-example to the 'registration regimes are unenforceable' claim.
  Source record →
• EEOC v. iTutorGroup (AI age-discrimination consent decree)US · 2022–2023
  EEOC v. iTutorGroup, Inc., No. 1:22-cv-02565 (E.D.N.Y.)
  Equal Employment Opportunity Commission (EEOC) v. iTutorGroup, Inc. — iTutorGroup's recruiting software automatically rejected female applicants aged 55 and older, and male applicants aged 60 and older, regardless of qualifications.
  Lesson: First US EEOC-as-party suit against an AI-mediated hiring tool resolved by consent decree ($365,000 settlement + 5-year monitoring; required revised non-discriminatory application processes; mandatory anti-discrimination training; right to re-apply for rejected applicants). Establishes that pre-AI civil-rights statutes (ADEA, Title VII, ADA) can be applied to algorithmic hiring outputs without requiring a dedicated AI statute — the load-bearing precedent for the US 'sectoral / ex-post liability' regime in employment AI.
  Source record →regulator landing
• HUD / DOJ v. Facebook (ad-targeting Fair Housing Act)US · 2018–2022
  US Department of Housing and Urban Development (HUD) + Department of Justice (DOJ) v. Meta Platforms, Inc. (Facebook) — Facebook's ad-delivery and ad-targeting tools (including 'Special Ad Audience' / Lookalike Audiences) allowed advertisers to exclude users on the basis of protected classes (race, colour, religion, sex, familial status, national origin, disability), and the platform's algorithmic delivery further skewed ad reach.
  Lesson: First major US federal settlement holding a platform liable for discriminatory algorithmic delivery under a pre-AI civil-rights statute. DOJ settlement (June 2022) required Meta to develop a new 'Variance Reduction System' to redress racially-skewed ad delivery + sunset the Special Ad Audience tool. Establishes that algorithmic-delivery discrimination — not just user-facing targeting options — is reachable under FHA. Subsequently cited as the template for analogous reasoning under ECOA (lending) and ADEA (employment).
  Source record →regulator landing

Related debates — rival interpretations & counterevidence

Structured controversies where this topic is the locus of disagreement. Each debate page lays out the competing positions with primary-source citations for each side.

• Open-Source vs Closed-Source Frontier Models — Should the most-capable AI models be released under permissive licenses (open weights), or only via API / structured-access agreements? The dispute is foundational to nearly every frontier-AI governance instrument.
• Pre-Deployment Red-Team vs Post-Deployment Audit — Should AI capability + safety evaluations happen primarily before deployment (red-team gating release), or primarily after (post-deployment audit + incident response)?
• Risk-Based vs Principles-Based vs Ex-Post Liability Regimes — Should AI governance work via (a) risk-based ex-ante categorisation + obligations (EU), (b) high-level principles delegated to sector regulators (UK / OECD / G7), or (c) ex-post liability + civil litigation (US sectoral)?

Related topics

Topics with similar coverage patterns across the tracked instruments.

• Foundation Models / GPAI
• Catastrophic & Existential Risk
• Agentic AI Governance
• Individual Redress
• International Coordination