Regulators are expected to assess the principles and apply them proportionately to AI use cases in their remit under existing law, focusing on risks in context (weighing the cost of missed opportunities), integrating them into monitoring, investigation and enforcement, and issuing or updating guidance that explains how the principles interact with existing legislation and what compliance looks like; not every principle will be relevant to every regulator, and where principles conflict regulators use judgement and share their reasoning. Technology-agnostic regulators may rely on existing outcome-based rules if these cover AI risks.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.