REGULATORY GLOSSARY
Quality Management System (Art. 17): Definition & EU AI Act Application (Art. 17) | governances.app
Providers of high-risk AI systems must establish a quality management system under Article 17 covering policies, procedures, and instructions to ensure compliance throughout development, testing, deployment, and monitoring. The QMS must include post-market monitoring plans, data governance procedures, change management protocols, and a document retention policy of at least 10 years.
Author: Ioan Ciprian Popa (Managing Partner, Vantages Applied AI) | RFC 8785 SHA-256:
87c9a0110b23197347b8f11ece07d11f5e4bb582e721d4484c4817c890f1963bMulti-Jurisdiction & 12-Sector Regulatory Equivalency (EU AI Act, NIST AI RMF, ISO/IEC 42001)
| Jurisdiction | Statutory & Framework Instruments | Articles / Controls | VOS Evidence Artifact |
|---|---|---|---|
| EU (European Union) | EU AI Act (Reg. 2024/1689), GPAI Code of Practice & Revised PLD (2024/2853) | Art. 9–15, 26–27, 50, 53–55, 71–73 | RFC 8785 Evidence Pack + Art. 14 Oversight + PQC SEAL |
| US (Federal & States) | NIST AI RMF 1.0, Colorado SB 21-169 / SB 24-205, CA SB 942 / AB 2013, TX TRAIGA, IL HB 3773, NYC LL144 | GOVERN 1.1–6.2, MAP, MEASURE, MANAGE | Algorithmic Impact & Bias Audit + Watermark Provenance |
| UK (United Kingdom) | UK Data (Use and Access) Act 2025, UK AISI Frontier Safety, FCA/ICO/MHRA Guidance | 5 Cross-Sector Principles + Statutory Data Access | Regulator-Aligned Safety Case & Audit Trail |
| CH / CoE (Switzerland) | Council of Europe Framework Convention on AI (CETS No. 225), Swiss FADP (nDSG) & FINMA | Human Dignity, Rule of Law & Democratic Safeguards | Treaty CETS 225 Impact Record & FADP Transparency Log |
| SG (Singapore) | IMDA Model AI Governance Framework (GenAI & Agentic AI 2025/2026), AI Verify & MAS FEAT | Agentic Action Boundaries, Tool Allowlists & FEAT | Bounded Agent Authority & Zero-Debit Refusal Receipt |
| CA / JP / KR / AU | Canada AIDA / Treasury Board, Japan AISI / METI, South Korea AI Basic Act (2026), Australia Voluntary AI Standard | High-Impact AI Guardrails, Transparency & Human-in-the-Loop | Multi-Regime Crosswalk & Cryptographic Verification URL |
| BR / IN (Global South) | Brazil AI Bill 2338/2023 & LGPD Art. 20, India DPDP Act 2023, MeitY Advisory & RBI FREE-AI | Automated Decision Review, Fiduciary Consent & Fairness | Adverse Action Explanation & Redacted Audit Record |