到 2026 年,各国政府究竟如何监管 AI?By 2026, In What Ways Are Governments Reining In AI?

⚖️ AI 政策⏱15 分钟阅读📅更新于 2026 年 6 月

布鲁塞尔的 AI 法案、华盛顿的行政令、北京严格的内容规则——本文看看世界各地政府正在怎样书写人工智能监管的未来。

◆知微•⚖️ AI 政策 · ⏱15 分钟阅读 · 2026 年 6 月 23 日
⚖️ AI Policy⏱ 15 min read📅 Updated June 2026

Brussels' AI Act, Washington's executive orders, Beijing's tight content rules — here is how governments across the map are writing the future of artificial intelligence oversight.

◆知微•⚖️ AI Policy · ⏱ 15 min read · June 23, 2026

人工智能已经走出研究实验室,站到了全球政策的正中央。2026 年,每一个政府都被同一个问题紧逼:怎样监管 AI,才不至于把它背后的创新一并扼杀?

凡是在问「到 2026 年各国政府如何监管 AI」的人,都并不孤单。从布鲁塞尔到北京,从华盛顿到威斯敏斯特,立法者正在起草的规则,将决定未来二三十年 AI 如何被建造、部署和使用。本指南把每一种主要进路拆开讲清楚,让你看清全局,也看清它与你的关系。

012026 年监管 AI 为何举足轻重

生成式模型与自主智能体把 AI 推得够快,使治理变得紧迫,因为缺乏规则的系统会给日常用户带来严重的风险:隐私侵犯、算法偏见、岗位被替代,以及有害深度伪造的泛滥。

各国政府已挺身应对这些担忧,同时仍惦念着 AI 创新带来的经济红利,最终拼成一块全球大拼图——法律、行政令、自愿框架——每一块都折射出不同的文化价值观、政治体制和经济目标。若想随时比较各国进展,OECD 通过其 OECD AI 政策观察站维护着一份实时更新的国家政策追踪表,是这一领域少有的真正实用的官方参考。

60+
已出台 AI 政策举措的国家数量
€35M
欧盟 AI 法案罚款上限
2026
欧盟 AI 法案全面执行之时

02欧盟 AI 法案:全球第一部综合性 AI 法律

放眼世界,没有哪部 AI 监管比欧盟的 AI 法案更雄心勃勃、更完备。它于 2024 年通过,到 2026 年全面生效,建立起一套基于风险、把系统分成四个层级的体系;完整法条刊载于欧盟官方法律门户,即 EUR-Lex 上的 Regulation (EU) 2024/1689,想逐条查阅尽可前往。

🚫禁止类

不可接受风险

彻底禁止。这一档涵盖操纵行为、利用弱点,或为政府社会评分铺路的系统。
⚠️严格规则

高风险

施以严格规则。医疗、执法、教育、就业和关键基础设施均在其列。
📋透明度

有限风险

须履行透明度义务。当对面是 AI——聊天机器人、深度伪造、生成内容——时,必须告知用户。
✅无规则

最低风险

没有特别义务。绝大多数 AI 应用,从垃圾邮件过滤器、电子游戏到各类 AI 工具,都落在这一档。

若想要一份更温和、面向新手的解读,可读我们自撰的欧盟 AI 法案通俗解读,也可参考欧盟委员会在其 AI 监管框架页面上的摘要。

欧盟 AI 法案规定的罚款

  • 涉及被禁止的 AI 行为:€35 million,或全球营业额的 7%
  • 其他违规:€15 million,或全球营业额的 3%
  • 提供不实信息:€7.5 million,或全球营业额的 1.5%

03美国:行政令与机构主导的规则

欧盟走的是一部综合性法律,美国则选择了更分散、更看重创新的路线,而 2026 年的美国 AI 治理立在三根支柱上:

美国 AI 治理的三根支柱
  1. 📜
    行政令
    →
    🏢
    机构指引
    →
    🤝
    自愿承诺

美国关键 AI 监管举措

  • 《安全 AI 行政令》(2023 年,2025 年扩充):要求强大模型接受安全测试,设定内容认证标准,并保护消费者数据。
  • NIST AI 风险管理框架:由美国国家标准与技术研究院发布并维护、供自愿采用,为各组织识别和管理 AI 风险提供统一结构。
  • SEC、FTC、EEOC 指引:各机构分别把现有法律套用到金融、广告和就业领域的 AI 上。
  • 州级法律:科罗拉多、加利福尼亚等州正就隐私、深度伪造和消费者保护通过有针对性的法案。

04中国:严格而精准的 AI 内容规则

中国在 AI 治理上姿态异常强硬,自 2022 年起出台了一连串有针对性的规则。它并非靠一部综合性法律,而是由国家互联网信息办公室(CAC)联合多个部委,监管具体的 AI 应用;政府自己关于生成式 AI 办法的公告,见国务院官方英文网站。

相关规则颁布年份规制对象核心义务
算法推荐治理规定2022驱动算法推荐的信息流必须向用户提供退出选项;禁止基于歧视的差别定价
深度合成治理规定2023合成深度伪造媒体AI 生产的内容须强制加标签
生成式 AI 管理办法2023建立在 LLM 之上的生成式 AI输出须体现「社会主义核心价值观」
AI 安全标准2025国家层面的 AI 安全每个模型都必须通过强制性安全评估

中国路线的独特之处,在于把严格内容管控与对 AI 产业的有力扶持并置:企业必须向政府注册系统,并确保输出贴合官方价值观。

05英国、加拿大、日本及其他国家

三大强国之外,还有许多国家正在打造自己的 AI 规则,关键进路一览如下:

🇬🇧灵活

英国

鼓励创新的立场,配合分行业指引。英国没有单一 AI 法律,现有监管机构(ICO、FCA、CMA)在各自领域执行规则,并由政府的 AI 安全研究所提供支持,对前沿模型做风险测试。
🇨🇦变动中

加拿大

拟议中的《人工智能与数据法》(AIDA)本会为高影响 AI 设定基于风险的规则,但 2025 年 1 月议会休会、该法案随之搁置在议程上,至今未被重新提出。眼下加拿大依靠隐私法、行业指引和一份自愿行为准则,同时拟定替代框架。
🇯🇵自愿

日本

在政府大力支持 AI 创新下采用自愿行业指引,几乎没有约束性监管,重心放在伦理原则上。
🇧🇷演进中

巴西

正在制定一套以欧盟 AI 法案为蓝本的全面 AI 框架,聚焦基本权利与风险分类。

06AI 企业如何履行监管义务

对 AI 公司而言,穿行这片错综复杂的监管领域是一大挑战,头部企业正重金投入安全与合规。想了解模型安全的技术一面,可读我们关于 AI 企业如何让模型更安全的指南。

AI 公司内部的合规流程
  1. 1

    风险归类
    确定该系统适用哪一个监管层级

    2

    安全测试
    开展红队测试、偏见审查和安全核验

    3

    留存文档
    归档技术文件、合规材料和透明度报告

    4

    上市后盯防
    持续做上市后监督,并就任何事故向监管机构通报

常见合规策略

  • 自愿承诺:许多公司签署了美国白宫 AI 承诺,同意开展安全测试和加水印。
  • 第三方审计:引入独立机构核验 AI 的安全性与对规则的遵守。
  • 内容溯源:采用 C2PA 等标准给 AI 生成内容加水印,官方技术规范见内容溯源与真实性联盟。
  • 模型卡与系统卡:公开发布文档,说明系统能做什么、不能做什么。

07这些规则如何影响日常用户

监管绝非抽象政策,而是直接落进日常生活,以下是 AI 治理对普通用户的意义:

🔍透明度

知情权

你有权知道对面是不是 AI,尤其是在客服、招聘和内容场景中。
🛡️隐私

数据保护

GDPR 等隐私法规约束 AI 系统,限制你的数据在多大程度上可用于训练模型。
⚖️公平

公平对待

当 AI 就你的工作、贷款或医疗作出判断时,这些决定不得含有非法歧视。
📢问责

质疑权

许多司法辖区允许你对 AI 驱动的决定提出异议,并要求人工复核。

08专门针对深度伪造的规则

深度伪造已成为全球 AI 治理一个独立的靶子,随着合成媒体飞速进步,各国政府正立下有针对性的规则:

  • 欧盟 AI 法案:要求所有 AI 生成内容(含深度伪造)明确标注为人工操纵的产物。
  • 中国深度合成规定:强制加水印,制作任何深度伪造前都须取得同意。
  • 美国州级法律:若干州已把恶意深度伪造(尤其是选举和未经同意的色情内容)列为刑事犯罪。
  • 平台要求:主要社交平台必须部署检测系统并加标注。

想更善于识破这些 AI 伪造,可看我们关于如何检测 AI 深度伪造的指南,里面有一份完整清单。

09AI 治理的未来走向

AI 规则仍在快速变动,未来几年有一组明确趋势值得关注。国际层面,联合国人工智能高级别咨询机构是推动全球共同治理原则的主要论坛之一。

新兴趋势

  • 国际 AI 条约:联合国等机构正推动全球共享的治理框架。
  • AI 安全研究所:各国正在设立专门政府机构(如英国 AI 安全研究所)评估前沿模型。
  • 内容溯源标准:C2PA 等标准正向全球普及,以确认内容真实。
  • AI 责任法:确定 AI 造成伤害时由谁担责的新规则。
  • 前沿模型监管:为最强大、构成系统性风险的系统设立特别规则。

10常见问题

到 2026 年各国政府如何监管 AI?
2026 年的治理靠一组进路的组合:欧盟用一部基于风险的综合性法律(AI 法案),美国依靠行政令和机构指引,中国对算法和内容执行有针对性的规则,英国、日本等地则偏爱灵活、鼓励创新的框架。安全、透明和问责,是贯穿所有进路的一条线。
欧盟 AI 法案是什么,它如何运作?
欧盟 AI 法案是全球第一部综合性 AI 法律,把系统分成四个风险层级——不可接受(禁止)、高风险(严格规则)、有限风险(要求透明)和最低风险(无特别规则)——且无论公司总部在哪,凡在欧盟境内使用的系统都受其约束。想读得更轻松,可看我们的欧盟 AI 法案通俗解读,或 EUR-Lex 上的官方文本。
美国的 AI 治理与欧洲有何不同?
美国通过行政令、各机构(SEC、FTC、EEOC)量身定制的指引以及科技公司的自愿承诺,走一条更分散、更看重创新的路线。它不依靠一部综合性法律,而是让现有监管者在各自领域行使职权,同时辅以自愿性的 NIST AI 风险管理框架,以及各州就深度伪造、隐私等具体议题新立的法案。
违反 AI 规则会有什么处罚?
欧盟 AI 法案下,被禁止行为的罚款可达 €35 million 或全球年营业额的 7%,其他违规为 €15 million 或 3%,提供不实信息为 €7.5 million 或 1.5%;美国则主要借助现有机构的执法权,处罚因规则而异;中国会处以罚款,也可关停不合规的 AI 服务。
这些法规如何影响日常用户?
强制透明(知道对面是 AI)、数据隐私保障、防止偏见的义务、质疑 AI 决定的权利,以及对深度伪造等有害内容的防范,是 AI 规则保护用户的方式,直接关系你的隐私、招聘和贷款中的公平,以及免受 AI 伤害。进一步了解这些日常用户面临的 AI 风险。
哪个国家的 AI 规则最严?
凭借 AI 法案,欧盟目前握有最严格、最完备的 AI 规则;中国的规则也非常严,但火力集中在算法、深度伪造和内容管控,而非一套综合性框架;美国、英国和日本则走更灵活、鼓励创新的路线,约束性义务更少。
AI 治理的前景如何?
AI 治理的前方,摆着国际治理条约、强制性 AI 安全认证、全球内容认证标准(如 C2PA)、主要国家专门的 AI 安全研究所、新的 AI 责任法,以及针对构成系统性风险的前沿模型的特别规则;预计到 2027-2028 年,全球标准将显著趋同。
◆

知微

我们追踪全球 AI 政策动态,并把它转化为普通用户能用的实用指引。本指南的准确性审核于 2026 年 6 月完成。进一步了解我们的使命,让 AI 治理人人都能看懂。

Artificial intelligence has walked out of the research laboratory and into the heart of global policy. One question presses on every government in 2026: how can AI be governed without choking the innovation behind it?

Anyone asking how governments are reining in AI by 2026 has plenty of company. Lawmakers from Brussels to Beijing, Washington to Westminster, are drafting the rules that will decide how AI gets built, deployed and used for a generation. This guide unpacks every major approach so the picture — and its bearing on you — comes clear.

01Why Governing AI Carries Weight in 2026

Generative models and autonomous agents have carried AI forward fast enough to make governance urgent, because unregulated systems carry serious risks for everyday users: privacy breaches, biased algorithms, jobs displaced and a tide of harmful deepfakes.

Governments have stepped forward to meet those worries while still weighing the economic prize of AI innovation, and the outcome is a worldwide patchwork — statutes, executive orders, voluntary frameworks — each mirroring different cultural values, political arrangements and economic aims. To keep cross-country comparisons current, the OECD runs a continuously updated tracker of national policies through its OECD AI Policy Observatory, among the more genuinely useful official references in this field.

60+
countries running AI policy initiatives
€35M
ceiling on an EU AI Act fine
2026
EU AI Act in full enforcement

02The EU AI Act: The Planet's First Sweeping AI Statute

No AI regulation anywhere is more ambitious or complete than the European Union's AI Act. Adopted in 2024 and in full force by 2026, it sets up a risk-based scheme that places systems in four tiers, and the complete text is available through EUR-Lex under Regulation (EU) 2024/1689, should you want to inspect individual articles.

🚫Prohibited

Unacceptable Risk

An outright ban. Covered here are systems that manipulate conduct, prey on vulnerabilities or open the door to state-run social scoring.
⚠️Strict Rules

High Risk

Heavy rules come into play. Healthcare, policing, education, employment and critical infrastructure are all caught by this tier.
📋Transparency

Limited Risk

Transparency duties apply. People must be told when an AI — a chatbot, a deepfake, generated content — is on the other side of the exchange.
✅No Rules

Minimal Risk

No particular duties attach. The bulk of AI applications, from spam filters and video games to AI-enabled tools, lands here.

For a gentler, beginner-ready walk through the statute, our own plain-language guide to the EU AI Act pairs with the European Commission summary on its AI regulatory framework page.

Fines Written into the EU AI Act

  • €35 million, or 7% of worldwide turnover, where prohibited AI practices are involved
  • €15 million, or 3% of worldwide turnover, for violations of other kinds
  • €7.5 million, or 1.5% of worldwide turnover, where incorrect information is supplied

03The United States: Executive Orders and Rules Driven by Agencies

Where the EU reaches for one sweeping statute, the United States has chosen a more decentralised, innovation-minded path, and US AI governance in 2026 rests on three supports:

The three supports of US AI governance
  1. 📜
    Executive Orders
    →
    🏢
    Agency Guidance
    →
    🤝
    Voluntary Pledges

The Leading US Regulatory Moves on AI

  • Safe AI Executive Order (2023, broadened in 2025): high-capacity models must undergo safety testing, content-authentication benchmarks are laid down, and consumer data gains safeguards.
  • NIST AI Risk Management Framework: offered voluntarily and maintained by the National Institute of Standards and Technology, it supplies a common template organisations use for spotting and controlling AI risk.
  • SEC, FTC, EEOC guidance: separate agencies take the laws already on their books and apply them to AI across finance, advertising and employment.
  • State-level laws: targeted statutes on privacy, deepfakes and consumer protection are passing in Colorado, California and beyond.

04China: Strict, Narrowly Aimed Rules on AI Content

Beijing's stance on AI governance is unusually forceful, with a string of targeted rules issued from 2022 onward. Rather than a single sweeping statute, particular AI applications are regulated through the Cyberspace Administration of China (CAC) alongside several other ministries, and the government's own notice of these generative AI rules can be read on the State Council's English-language website.

Rule in QuestionIssued InWhat It CoversThe Central Obligation
Rules Governing Algorithm Recommendation2022Feeds that run algorithmic recommendationsOpt-out must be offered to users; pricing based on discrimination is barred
Rules on Deep Synthesis2023Synthetic deepfake mediaAI-produced content carries a mandatory label
Measures Covering Generative AI2023Generative AI built on LLMsOutputs are required to reflect "core socialist values"
Standards for AI Safety2025Safety of AI at the national levelEvery model must pass mandatory safety evaluations

Beijing's path stands apart through its pairing of tight content control with energetic backing for the AI industry, as companies must register their systems with the state and make sure outputs track official values.

05The UK, Canada, Japan and Beyond

Outside the three leading powers, a great many nations are shaping their own AI rules, and the key approaches at a glance look like this:

🇬🇧Flexible

United Kingdom

A pro-innovation stance paired with sector-specific guidance. No single AI statute exists; current regulators (ICO, FCA, CMA) enforce rules inside their own domains, backed by the government's AI Security Institute, which puts frontier models through risk testing.
🇨🇦In Flux

Canada

The Artificial Intelligence and Data Act (AIDA), as proposed, aimed to impose risk-based duties on high-impact AI, yet it never reached a vote: Parliament's prorogation in January 2025 left it on the order paper, and it has not come forward again. Canada now works with privacy statutes, sector guidance and a voluntary conduct code while a successor is drafted.
🇯🇵Voluntary

Japan

Voluntary industry guidance under strong government backing for AI innovation, with very little binding regulation and the weight placed on ethical principles.
🇧🇷Evolving

Brazil

Work is under way on a full AI framework modelled on the EU AI Act, centred on fundamental rights and the classification of risk.

06How AI Companies Meet Their Regulatory Duties

Steering through this tangled regulatory field is a serious challenge for AI firms, and the leading ones are spending heavily on safety and compliance. The technical side of model safety is covered in our companion piece on how AI companies make models safe.

The compliance workflow inside an AI company
  1. 1

    Classify the Risk
    Decide which regulatory tier covers the system

    2

    Test for Safety
    Perform red-teaming, bias reviews and security checks

    3

    Keep Records
    File technical documentation, conformity papers and public transparency reports

    4

    Watch After Launch
    Run post-market surveillance and notify regulators of any incidents

Compliance Strategies in Common Use

  • Voluntary commitments: the US White House AI pledges drew signatures from many firms pledging safety testing and watermarking.
  • Third-party audits: independent firms are brought in to verify safety and adherence to the rules.
  • Content provenance: standards such as C2PA are deployed to watermark AI-made content, and the Coalition for Content Provenance and Authenticity carries the official technical specification.
  • Model cards & system cards: open documentation laying out what a system can and cannot do.

07How These Rules Reach Everyday Users

Far from abstract policy, the regulations land directly in daily life, and here is what AI governance means for an ordinary user:

🔍Transparency

Right to Know

You are entitled to know an AI is on the other end, above all in customer service, hiring and content.
🛡️Privacy

Data Protection

Privacy statutes such as GDPR bind AI systems, capping how far your data may feed model training.
⚖️Fairness

Fair Treatment

Where AI makes calls about your job, a loan or healthcare, unlawful discrimination has no place in those decisions.
📢Accountability

Right to Challenge

A great many jurisdictions let you contest AI-driven decisions and ask for a person to review them.

08Rules Aimed Specifically at Deepfakes

Deepfakes have emerged as a distinct target of AI governance worldwide, and governments are laying down targeted rules as synthetic media races ahead:

  • EU AI Act: content generated by AI — deepfakes included — carries a duty of clear labeling as artificially manipulated.
  • China's Deep Synthesis Rules: watermarks are mandatory, and consent is required before any deepfake is made.
  • US State Laws: malicious deepfakes, most of all around elections and non-consensual pornography, are now criminal offences under laws in several states.
  • Platform Requirements: detection systems and labeling have to be put in place by the major social platforms.

To sharpen your eye for these AI-made fakes, our deepfake-detection walkthrough carries a complete checklist.

09Where AI Governance Is Headed

AI rules are still shifting fast, and the years ahead carry a clear set of trends to watch. On the world stage, a leading venue for shared governance principles is the UN High-Level Advisory Body on Artificial Intelligence.

Emerging Trends

  • International AI Treaty: shared global governance frameworks are being pursued through the UN and similar bodies.
  • AI Safety Institutes: dedicated state bodies, the UK AI Security Institute among them, are being stood up to assess frontier models.
  • Content Provenance Standards: C2PA and kindred standards are spreading worldwide to confirm that content is genuine.
  • AI Liability Laws: fresh rules fixing who answers for harm an AI causes.
  • Frontier Model Regulation: particular rules for the most powerful systems, which carry systemic risk.

10Frequently Asked Questions

How are governments reining in AI by 2026?
A blend of approaches does the governing in 2026: a sweeping risk-based statute (the AI Act) in the EU, executive orders and agency guidance in the United States, targeted rules on algorithms and content in China, and flexible, innovation-minded frameworks in places such as the UK and Japan. Safety, transparency and accountability are the thread running through all of them.
What does the EU AI Act amount to, and on what basis does it work?
Standing as the first sweeping AI statute anywhere, the EU AI Act places systems on one of four rungs of risk — unacceptable and banned; high-risk under strict rules; limited-risk with transparency duties; minimal-risk and free of specific obligations — applying to every system operated on EU soil regardless of the firm's home base. Newcomers may prefer our plain-language treatment of the EU AI Act; the authoritative wording lives in EUR-Lex.
How does US AI governance diverge from Europe's?
The United States takes a more decentralised, innovation-minded route through executive orders, guidance tailored by each agency (SEC, FTC, EEOC) and voluntary pledges from technology firms. of one sweeping statute, it lets current regulators apply their powers within their own fields, adds the NIST AI Risk Management Framework on a voluntary footing, and looks to newly passed state statutes covering narrow questions like privacy and deepfakes.
What fines come with breaking AI rules?
Where prohibited practices are proved, EU AI Act penalties run as high as €35 million or 7% of global yearly turnover; other breaches draw €15 million or 3%, and false information draws €7.5 million or 1.5%. The United States, by contrast, works chiefly through enforcement powers its agencies already hold, so the bite varies rule by rule; Beijing can impose fines and order a non-compliant service to close.
How do the regulations reach everyday users?
Mandatory transparency — knowing an AI is on the other end — data-privacy safeguards, duties to prevent bias, the right to contest AI-driven decisions and defence against harmful content such as deepfakes are how AI rules protect users, bearing directly on your privacy, on fairness in hiring and lending, and on safety from AI-related harm. Read more on these AI risks for everyday users.
Which nation runs the strictest AI rules?
The European Union currently carries the strictest, most complete AI rules through the EU AI Act, and Beijing's rules are very strict too, yet they train their aim on algorithms, deepfakes and content control rather than a sweeping framework, while the United States, UK and Japan keep to more flexible, innovation-minded paths with fewer binding duties.
What lies ahead for AI governance?
International governance treaties, compulsory AI safety certifications, worldwide content-authentication standards (C2PA among them), dedicated AI Safety Institutes across major nations, fresh AI liability laws and particular rules for frontier models carrying systemic risk all lie ahead for AI governance, with substantial convergence toward global standards expected by 2027-2028.
◆

知微

We keep track of AI policy worldwide and render it into practical guidance for ordinary users. This guide's accuracy review was completed in June 2026. Read more about our mission to make AI governance understandable to everyone.