REGULATORY GLOSSARY
GRC (Governance Risk and Compliance): Definition & EU AI Act Application (Art. 9) | governances.app
Governance, Risk, and Compliance (GRC) is an integrated framework for aligning IT, business strategy, and regulatory compliance. In AI governance, GRC extends to model risk, algorithmic bias, and automated decision-making oversight under the EU AI Act.
Author: Ioan Ciprian Popa (Managing Partner, Vantages Applied AI) | RFC 8785 SHA-256:
8eade4e3ddb1c0d1e0769aea14327e9a7194c20606b8212f3ffede41ae2de505Multi-Jurisdiction & 12-Sector Regulatory Equivalency (EU AI Act, NIST AI RMF, ISO/IEC 42001)
| Jurisdiction | Statutory & Framework Instruments | Articles / Controls | VOS Evidence Artifact |
|---|---|---|---|
| EU (European Union) | EU AI Act (Reg. 2024/1689), GPAI Code of Practice & Revised PLD (2024/2853) | Art. 9–15, 26–27, 50, 53–55, 71–73 | RFC 8785 Evidence Pack + Art. 14 Oversight + PQC SEAL |
| US (Federal & States) | NIST AI RMF 1.0, Colorado SB 21-169 / SB 24-205, CA SB 942 / AB 2013, TX TRAIGA, IL HB 3773, NYC LL144 | GOVERN 1.1–6.2, MAP, MEASURE, MANAGE | Algorithmic Impact & Bias Audit + Watermark Provenance |
| UK (United Kingdom) | UK Data (Use and Access) Act 2025, UK AISI Frontier Safety, FCA/ICO/MHRA Guidance | 5 Cross-Sector Principles + Statutory Data Access | Regulator-Aligned Safety Case & Audit Trail |
| CH / CoE (Switzerland) | Council of Europe Framework Convention on AI (CETS No. 225), Swiss FADP (nDSG) & FINMA | Human Dignity, Rule of Law & Democratic Safeguards | Treaty CETS 225 Impact Record & FADP Transparency Log |
| SG (Singapore) | IMDA Model AI Governance Framework (GenAI & Agentic AI 2025/2026), AI Verify & MAS FEAT | Agentic Action Boundaries, Tool Allowlists & FEAT | Bounded Agent Authority & Zero-Debit Refusal Receipt |
| CA / JP / KR / AU | Canada AIDA / Treasury Board, Japan AISI / METI, South Korea AI Basic Act (2026), Australia Voluntary AI Standard | High-Impact AI Guardrails, Transparency & Human-in-the-Loop | Multi-Regime Crosswalk & Cryptographic Verification URL |
| BR / IN (Global South) | Brazil AI Bill 2338/2023 & LGPD Art. 20, India DPDP Act 2023, MeitY Advisory & RBI FREE-AI | Automated Decision Review, Fiduciary Consent & Fairness | Adverse Action Explanation & Redacted Audit Record |