NeuralWatch
Sourced research and analysis.

AI policy and ethics watchdog — regulation, accountability, governance.

Independent watchdog coverage of AI policy and ethics. The EU AI Act, NIST AI RMF, FTC and DOJ enforcement actions, state-level AI laws, and the gap between corporate AI principles and corporate AI behavior. Sourced, dated, no take pieces without evidence.

Working paper

EU AI Act GPAI Obligations: The Code of Practice and the Enforcement Gap

GPAI obligations under the EU AI Act started applying on 2 August 2025, but the AI Office cannot enforce until August 2026. The voluntary Code of Practice fills the interim — and reveals what the Act counts as 'compliance' before any fine exists.

Read the paper
The Berlaymont building, headquarters of the European Commission in Brussels

Recent research

The Texas State Capitol dome in Austin against a blue sky
state-law

Texas TRAIGA (HB 149): What the New AI Law Actually Requires

Texas enacted the Responsible AI Governance Act in June 2025, effective January 1, 2026. The pared-back final version dropped disparate-impact and landed on intent-based prohibitions, a NIST safe harbor, and AG-only enforcement — and diverges sharply from Colorado.

The dome of the California State Capitol against a clear blue sky
state-law

State AI Law Is the Only AI Law. Everywhere It's Crumbling.

Colorado's legislature just gutted the 2024 Colorado AI Act, leaving only post-hoc notification after adverse AI decisions. California, Texas, and New York have all retreated in similar fashion. A pattern is forming.

A minimalist white meeting room with a conference table and chairs
nist-rmf

AI Governance: What It Is, What It Requires, and How to Build It

AI governance defines the policies, controls, and oversight structures that determine how AI systems are approved, deployed, and monitored. Here is what the term actually means operationally — and what regulators now require.

A chemist working with glassware at a laboratory bench
nist-rmf

AI Risk Assessment: What the NIST AI RMF and EU AI Act Require

A practical breakdown of AI risk assessment under the NIST AI Risk Management Framework and EU AI Act — what organizations must evaluate, how to structure the process, and what a GRC team should do this quarter.

Rows of network equipment racks in a server room
nist-rmf

NIST AI RMF: What It Is, What It Requires, and How to Use It

The NIST AI Risk Management Framework (AI RMF 1.0) is the U.S. benchmark for trustworthy AI. This guide covers all four core functions, the GenAI profile, and practical steps for GRC teams implementing it in 2026.

A tower of the New York State Capitol in Albany framed by trees
state-law

State AI Laws in 2026: Colorado, California, and New York

Three states have passed binding AI-specific legislation with direct obligations on developers and deployers. Here is what each law requires, where they overlap, and where they conflict.

Why trust us

Trusted by researchers across the AI security community

NeuralWatch is part of a 26-site editorial network covering adversarial ML, AI governance, defensive tooling, and ops engineering — all open access.

26
Sites in network
Across 6 topic clusters
400+
Expert articles
And growing daily
Daily
New content
Automated + editorial
Free
Always free to read
Newsletter included
Subscribe

NeuralWatch — in your inbox

AI policy and ethics watchdog — regulation, accountability, governance. — delivered when there's something worth your inbox.

No spam. Unsubscribe anytime.