AI 규제

The EU AI Act, which has a phased implementation schedule, imposes requirements on AI systems based on their risk classification, and may require conformity assessments, registration, and ongoing monitoring for certain AI systems.

Non-compliant companies under the EU AI Act may be subject to administrative fines.

The EU AI Act entered into force on August 1, 2024, and the majority of the substantive requirements are expected to apply from August 2, 2026, and though the European Commission has proposed an extension to December 2, 2027, such extension is not yet finalized or effective.

At the same time, the White House's Executive Order, Removing Barriers to American Leadership in Artificial Intelligence, prioritizes deregulation, while its AI Action Plan emphasizes accelerating American innovation leadership.

As our engagement with artificial intelligence tools and technologies increases, we may be impacted by emerging artificial intelligence rules, regulations, and frameworks globally, including the AI Act and the EU Product Liability Directive (the “Directive”).

For example, the EU AI Act has gone into effect and several U.S. states are also enacting laws governing the use of AI.

For example, in October 2025, the Senate passed the “GAIN AI Act” in the NDAA.

For example, the EU’s Artificial Intelligence Act (“AI Act”) entered into force on August 1, 2024.

Certain provisions of the EU AI Act could require us to alter or restrict our use of AI both in features or products available to our users and in our systems that interact with our users.

AI laws and regulations, such as the European Union's AI Act, impose compliance obligations on AI systems that process personal data.

Several jurisdictions where we operate are considering or have proposed or enacted legislation and policies regulating AI, including the European Union’s AI Act, and lack of consistency among different regulatory regimes may increase our regulatory and compliance burdens.

AI Act, other international regimes, and emerging developments with respect to U.S. federal and state regulations, rules, and industry standards governing AI may require us and our third-party developers to incur significant costs to modify, maintain, or align our business practices, services, and solutions to comply with rules and regulations, the nature of which cannot be determined at this time and may be inconsis

Additionally, AI-specific legal frameworks, such as the EU AI Act, the Utah Artificial Intelligence Policy Act, Colorado'’s law governing the use of automated decision-making technology (SB 26-189), the Texas Responsible Artificial Intelligence Governance Act, regulations issued under the CCPA governing automated decision-making technology, and similar laws and regulations that have passed, gone into effect or are be

For example, in the EU, the first set of provisions under the EU’s AI Act became effective in February 2025, with additional provisions becoming effective on later dates.

These factors may include, without limitation: changes in actual or anticipated AI-driven demand for AI-related infrastructure or compute power to support AI models, tools, and other applications, including due to slower-than-anticipated adoption of AI technologies, increases in compute efficiency, or oversupply of AI-related infrastructure compute power; advances in fabrication processes, technology inflections or c

Our implementation of robust AI governance and risk management frameworks, designed to ensure our responsible use of AI and help us to comply with emerging laws and regulations, may not be sufficient protection against these emerging risks.

For example, the European Union’s Artificial Intelligence Act (the “EU AI Act”) entered into force on August 1, 2024, with the first set of provisions taking effect on February 2, 2025.

Compliance with our FTC consent order, the GDPR, U.S. state privacy laws, youth social media laws, the ePrivacy Directive, the DMA, the DSA, the OSA, the EU AI Act, and other regulatory and legislative privacy requirements require significant operational resources and modifications to our business practices, and any compliance failures may have a material adverse effect on our business, reputation, and financial resu

In particular, new and emerging regulations, such as the European Union Artificial Intelligence Act (the EU AI Act), impose or are expected to impose enhanced obligations related to the development, deployment, transparency, governance, risk management, and use of certain AI systems, including those classified as high-risk, and may subject us to significant fines, penalties, operational restrictions, or changes to ou

We have experienced, and expect to continue to experience, instances in which the AI solutions we enable or offer produce unintended consequences, are used or customized in unforeseen ways by customers or partners, or operate in a manner inconsistent with our responsible AI policies and practices.

Additionally, obligations under the EU AI Act have gone into effect and will continue to be implemented in phases through 2030, and other jurisdictions have passed or are considering similarly focused legislation.

In the EU, several recently adopted or proposed legislative initiatives may affect our business, including the EU Pharma Package, the EU HTA -R, the EU Critical Medicines Act, and the EU Biotech Act, as well as legislation such as the EU AI Act, EU Data Act, and the EU Health Data Space Regulation, among others.

The laws governing AI are often principle-based and vague and, until market practice and enforcement patterns are established, there is substantial uncertainty around compliance requirements.

For instance, the EU has adopted a comprehensive AI Act that establishes harmonized rules across Europe, with key provisions for high-risk AI systems taking effect in August 2026.

Other legislation has been introduced or proposed at the federal and state level, and there remains uncertainty at the federal level regarding the regulation of AI and ML Technologies.

environment, including the enactment of the EU AI Act,

Separately, as the regulatory framework for machine learning technology and AI evolves, new state laws and regulations are emerging, such as the Colorado AI Act which will go into effect on February 1, 2026, and California’s AB 2013, which requires generative AI developers to post information on their websites regarding the data used to train their AI systems.

Any inadequacy or failure in compliance with our responsible use of AI/ML policies and procedures or emerging laws, regulations and standards governing AI/ML use could cause our technology products not to operate as intended or to produce outcomes, including possible regulatory enforcement action or litigation that could have a material and adverse effect on our business, reputation, results of operations, financial