Back to Frameworks

OECD Recommendation on Artificial Intelligence (2024 Update)

International (OECD)
v2024
8 domains
8 controls

The OECD Recommendation on Artificial Intelligence, first adopted in May 2019 and updated in May 2024, sets out five values‑based principles: (1) inclusive growth, sustainable development and well‑being; (2) human‑centred values and fairness; (3) transparency and explainability; (4) robustness, security and safety; and (5) accountability. The 2024 update adds specific guidance for generative AI and foundation models, emphasizing responsible development, deployment, and governance of these technologies.

Verified

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (8)

Definitions and Scope

1 controls
Controls in the Definitions and Scope domain of OECD Recommendation on Artificial Intelligence (2024 Update)1 controls
CodeTitle
OECDAI24-1Updated AI System Definition, Foundation Models, and Generative AI Scope

Deployer Responsibilities and Agentic AI

1 controls
Controls in the Deployer Responsibilities and Agentic AI domain of OECD Recommendation on Artificial Intelligence (2024 Update)1 controls
CodeTitle
OECDAI24-7Deployer Responsibilities, Agentic AI, and Engagement with Rights Holders

Frontier Model Risk

1 controls
Controls in the Frontier Model Risk domain of OECD Recommendation on Artificial Intelligence (2024 Update)1 controls
CodeTitle
OECDAI24-3Frontier Model Risk Management, Capability Disclosure, and Independent Evaluation

GenAI Transparency and Provenance

1 controls
Controls in the GenAI Transparency and Provenance domain of OECD Recommendation on Artificial Intelligence (2024 Update)1 controls
CodeTitle
OECDAI24-2Generative AI Transparency, Content Provenance, and Authenticity

Incident Reporting and Information Integrity

1 controls
Controls in the Incident Reporting and Information Integrity domain of OECD Recommendation on Artificial Intelligence (2024 Update)1 controls
CodeTitle
OECDAI24-4AI Incident Reporting, Information Safety, Misinformation, and Manipulation Mitigation

Interoperability and Cross-Border

1 controls
Controls in the Interoperability and Cross-Border domain of OECD Recommendation on Artificial Intelligence (2024 Update)1 controls
CodeTitle
OECDAI24-8Interoperability with International AI Frameworks, Public Reporting, and Cross-Border Governance

Security, IP, Environment

1 controls
Controls in the Security, IP, Environment domain of OECD Recommendation on Artificial Intelligence (2024 Update)1 controls
CodeTitle
OECDAI24-6Security, Model and Data Protection, Intellectual Property, and Environmental Sustainability

Workplace AI, Children, Vulnerable Populations

1 controls
Controls in the Workplace AI, Children, Vulnerable Populations domain of OECD Recommendation on Artificial Intelligence (2024 Update)1 controls
CodeTitle
OECDAI24-5Workplace AI, Worker Voice, Children Protection, and Vulnerable Populations

Your Compliance Coverage

If you comply with OECD Recommendation on Artificial Intelligence (2024 Update), you already cover:

+ 56 more: Administrative Measures for the Security Assessment of Generative AI Services (2023) and Algorithmic Recommendation Management Provisions (2022) (50%), NIST AI Risk Management Framework (AI RMF 1.0) (38%)

See all 59 mapped frameworks ↓

Maps to 59 other frameworks

8 total controls
ASEAN Guide on AI Governance and Ethics
6 source controls mapped|11 target controls covered
75%
Canada Artificial Intelligence and Data Act (AIDA)
5 source controls mapped|5 target controls covered
63%
Australia AI Ethics Framework
4 source controls mapped|7 target controls covered
50%
NIST AI Risk Management Framework (AI RMF 1.0)
3 source controls mapped|7 target controls covered
38%
Voluntary Principles on Security and Human Rights (VPs)
2 source controls mapped|1 target controls covered
25%
Vermont Artificial Intelligence and Consumer Data Act (AICDA)
2 source controls mapped|1 target controls covered
25%
UN Guiding Principles on Business and Human Rights (UNGPs)
2 source controls mapped|1 target controls covered
25%
ISO 14001
2 source controls mapped|3 target controls covered
25%
ISO 26000:2010
2 source controls mapped|5 target controls covered
25%
ISO 37000:2021 - Governance of Organizations
2 source controls mapped|4 target controls covered
25%
ISO 20400:2017 - Sustainable Procurement
2 source controls mapped|6 target controls covered
25%
BREEAM - Building Research Establishment Environmental Assessment Method
2 source controls mapped|2 target controls covered
25%
ISO/IEC 38500:2024 - Governance of IT
2 source controls mapped|2 target controls covered
25%
Automotive SPICE (ASPICE) v4.0 - Process Assessment Model
2 source controls mapped|2 target controls covered
25%
Illinois Biometric Information Privacy Act (BIPA)
2 source controls mapped|2 target controls covered
25%
ISO/IEC 23894:2023
2 source controls mapped|3 target controls covered
25%
UK Defence Standard 05-138 - Cyber Security for Defence Suppliers
1 source controls mapped|1 target controls covered
13%
Protective Security Policy Framework (PSPF) Release 2024
1 source controls mapped|1 target controls covered
13%
Open Banking Security
1 source controls mapped|1 target controls covered
13%
EASA Part-IS - Information Security in Aviation
1 source controls mapped|3 target controls covered
13%
API 1164
1 source controls mapped|1 target controls covered
13%
FFIEC IT Examination Handbook
1 source controls mapped|3 target controls covered
13%
FFIEC Cybersecurity Assessment Tool (CAT)
1 source controls mapped|2 target controls covered
13%
APRA CPS 230 Operational Risk Management
1 source controls mapped|3 target controls covered
13%
BS 65000:2014 - Guidance on Organizational Resilience
1 source controls mapped|2 target controls covered
13%
FBI CJIS Security Policy
1 source controls mapped|1 target controls covered
13%
ISO/IEC 27557:2022 - Organisational Privacy Risk Management
1 source controls mapped|5 target controls covered
13%
IEC 60601-1 - Medical Electrical Equipment Safety
1 source controls mapped|3 target controls covered
13%
NIST SP 800-53 Rev 5
1 source controls mapped|3 target controls covered
13%
NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements
1 source controls mapped|2 target controls covered
13%
AML/CTF Act 2006 (Australia)
1 source controls mapped|1 target controls covered
13%
IAIS Insurance Core Principles (ICPs)
1 source controls mapped|2 target controls covered
13%
Annex 11 to EU GMP - Computerised Systems
1 source controls mapped|1 target controls covered
13%
NIST Cybersecurity Framework 2.0
1 source controls mapped|3 target controls covered
13%
ISO 22320:2018
1 source controls mapped|1 target controls covered
13%
APRA CPS 234
1 source controls mapped|3 target controls covered
13%
ISO 31000
1 source controls mapped|3 target controls covered
13%
ISO 28001:2007 Supply Chain Security Management
1 source controls mapped|1 target controls covered
13%
AS9100D:2016 - Quality Management Systems for Aviation, Space, and Defence
1 source controls mapped|2 target controls covered
13%
AS9100D - Aerospace Quality Management System
1 source controls mapped|3 target controls covered
13%
ISO/IEC 27003:2017
1 source controls mapped|3 target controls covered
13%
IEC 62304:2015 Medical Device Software Lifecycle Processes
1 source controls mapped|3 target controls covered
13%
13%
ISO 27005
1 source controls mapped|3 target controls covered
13%
Aged Care Quality Standards (Australia)
1 source controls mapped|1 target controls covered
13%
ISO/IEC 23837 - Security Requirements for Quantum Key Distribution
1 source controls mapped|2 target controls covered
13%
NIST SP 1800-32
1 source controls mapped|1 target controls covered
13%
ICH Q10 - Pharmaceutical Quality System
1 source controls mapped|1 target controls covered
13%
O-RAN WG11 Security Specification
1 source controls mapped|1 target controls covered
13%
NRF Cybersecurity and Data Privacy Framework (National Retail Federation)
1 source controls mapped|1 target controls covered
13%
NIST Privacy Framework
1 source controls mapped|1 target controls covered
13%
ICAO Annex 17 - Aviation Security (AVSEC)
1 source controls mapped|1 target controls covered
13%
ISO 27019
1 source controls mapped|1 target controls covered
13%
IEC 62443
1 source controls mapped|1 target controls covered
13%
Vietnam Law on Cybersecurity (No. 24/2018/QH14)
1 source controls mapped|1 target controls covered
13%
Florida Digital Bill of Rights (FDBR)
1 source controls mapped|1 target controls covered
13%
Digital Economy Partnership Agreement (DEPA)
1 source controls mapped|1 target controls covered
13%

Frequently Asked Questions

What is OECD Recommendation on Artificial Intelligence (2024 Update)?

OECD Recommendation on Artificial Intelligence (2024 Update) is a compliance framework from International (OECD) with 8 domains and 8 controls. The OECD Recommendation on Artificial Intelligence, first adopted in May 2019 and updated in May 2024, sets out five values‑based principles: (1) inclusive growth, sustainable development and well‑being; (2) human‑centred values and fairness; (3) transparency and explainability; (4) robustness, security and safety; and (5) accountability. The 2024 update adds specific guidance for generative AI and foundation models, emphasizing responsible development, deployment, and governance of these technologies. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

How many controls does OECD Recommendation on Artificial Intelligence (2024 Update) have?

OECD Recommendation on Artificial Intelligence (2024 Update) has 8 controls organised across 8 domains. The largest domains are Definitions and Scope (1 controls), Deployer Responsibilities and Agentic AI (1 controls), Frontier Model Risk (1 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

What frameworks does OECD Recommendation on Artificial Intelligence (2024 Update) map to?

OECD Recommendation on Artificial Intelligence (2024 Update) maps to 59 other compliance frameworks. The top mapping partners are ASEAN Guide on AI Governance and Ethics (75% coverage), Canada Artificial Intelligence and Data Act (AIDA) (63% coverage), Australia AI Ethics Framework (50% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I get started with OECD Recommendation on Artificial Intelligence (2024 Update) compliance?

Start your OECD Recommendation on Artificial Intelligence (2024 Update) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about OECD Recommendation on Artificial Intelligence (2024 Update) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 8 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 718 frameworks.

Get Started Free →

Free forever — no credit card required