Lilly Tech Systems
AI Compliance & Regulation Deep Dive
Master every AI regulation that matters. 50 deep dives across 300 lessons covering EU AI Act in implementation depth, US federal & state regulation, international (UK, Singapore, China, Japan, India, Brazil, Canada, Australia), standards (ISO 42001, ISO 23894, ISO 23053, IEEE 7000-series, NIST RMF Playbook), sector-specific rules (financial services, healthcare, hiring, education, insurance, criminal justice, kids, consumer), privacy compliance (GDPR, CCPA/CPRA, HIPAA, state laws, sectoral US privacy), and building AI compliance programs end-to-end.
All Topics
50 compliance topics organized into 7 categories. Each has 6 detailed lessons with templates, checklists, and code patterns.
EU AI Act Deep Dive
EU AI Act Architecture & Scope
Master the structure of the EU AI Act. Learn the legal architecture, definitions, scope (territorial and personal), exceptions, and how it interacts with GDPR, DSA, and DMA.
6 LessonsRisk Categorization Methodology
Master the EU AI Act's risk-based approach. Learn the 4-tier risk classification, Annex III high-risk list, presumption rules, and how to classify your own AI system.
6 LessonsProhibited AI Practices
Master the prohibited AI practices in Article 5. Learn each prohibited use case in detail: subliminal manipulation, social scoring, real-time biometric ID, emotion recognition, and predictive policing.
6 LessonsHigh-Risk AI Obligations
Master the obligations for high-risk AI systems. Learn the risk management system, data governance, technical documentation, record-keeping, transparency, human oversight, and accuracy/robustness requirements.
6 LessonsGPAI / Foundation Model Rules
Master the rules for general-purpose AI models. Learn Article 51 systemic risk threshold, codes of practice, transparency obligations, copyright compliance, and downstream provider obligations.
6 LessonsConformity Assessment Process
Master the conformity assessment for high-risk AI. Learn internal control vs third-party assessment, harmonized standards, common specifications, and the assessment procedure.
6 LessonsNotified Bodies & CE Marking
Navigate notified bodies and CE marking. Learn how to find a notified body, the assessment process, CE marking requirements, EU declaration of conformity, and the EU database.
6 LessonsEU AI Office & Enforcement
Understand AI Act enforcement. Learn the EU AI Office, national competent authorities, market surveillance, complaint procedures, post-market monitoring, and incident reporting.
6 LessonsAI Act Penalties & Sanctions
Understand AI Act penalties. Learn the three penalty bands (35M/15M/7.5M EUR or % of turnover), how penalties are calculated, mitigating factors, and enforcement priorities.
6 LessonsImplementation Timeline & Transition
Master the AI Act implementation timeline. Learn the staggered effective dates (prohibited Feb 2025, GPAI Aug 2025, high-risk Aug 2026, all Aug 2027), and transition planning.
6 LessonsUS AI Regulation
US Federal AI Policy Landscape
Map US federal AI policy. Learn the AI Executive Order (Biden 2023, Trump revisions 2025), OMB memos, NIST role, agency-specific rules, and the federal preemption debate.
6 LessonsAI Executive Order Implementation
Master the AI Executive Order operationally. Learn the dual-use foundation model reporting, infrastructure usage reporting, AI talent surge, AISI mandate, and ongoing changes.
6 LessonsOMB M-24-10 Federal AI Use
Master OMB M-24-10 governing federal AI use. Learn the safety-impacting and rights-impacting AI definitions, minimum risk practices, CAIO role, and inventory requirements.
6 LessonsNIST AI RMF Implementation
Implement NIST AI RMF in depth. Learn the GOVERN-MAP-MEASURE-MANAGE functions in detail, the Playbook, the GenAI Profile, and how to operationalize NIST RMF.
6 LessonsState AI Laws (CO, CA, NY, IL)
Master the state AI law patchwork. Learn Colorado AI Act, California SB 1047 fallout + AB 1008/2013, NYC LL 144, IL HB 3773, TX AI bills, and multi-state compliance strategy.
6 LessonsEEOC AI Hiring Guidance
Master EEOC AI hiring guidance. Learn the 2023 ADA/Title VII guidance, four-fifths rule application to AI, vendor liability, accommodation duties, and audit requirements.
6 LessonsFTC AI Enforcement
Master FTC AI enforcement. Learn Section 5 unfair/deceptive practices for AI, model destruction remedies, Operation AI Comply, false AI claims, and consumer protection enforcement.
6 LessonsSEC AI Disclosure Rules
Master SEC AI disclosure rules. Learn AI risk factor disclosures, AI-washing enforcement, predictive analytics rule (proposed), Reg SCI for AI, and adviser obligations.
6 LessonsInternational AI Regulation
UK AI Regulation Framework
Master UK AI regulation. Learn the principles-based pro-innovation approach, sectoral regulators (ICO/CMA/FCA/MHRA/Ofcom), AISI's role, and emerging UK AI Bill.
6 LessonsSingapore AI Governance
Master Singapore's pragmatic AI governance. Learn the 2nd edition Model AI Governance Framework, AI Verify Toolkit, GenAI Framework, and Singapore IMDA's role.
6 LessonsChina AI Regulation Deep Dive
Master China's AI regulatory landscape. Learn Generative AI Measures, Algorithm Filing System, Deep Synthesis Provisions, security review, CAC enforcement, and Hong Kong specifics.
6 LessonsJapan AI Strategy
Master Japan's soft-law AI approach. Learn the AI Promotion Act, METI Guidelines, social principles, hub strategy, and the Japan/EU AI cooperation.
6 LessonsIndia DPDPA & AI Strategy
Master India's AI regulatory landscape. Learn the Digital Personal Data Protection Act (DPDPA), India AI Mission, advisory frameworks, and proposed Digital India Act.
6 LessonsBrazil LGPD & AI Strategy
Master Brazil's AI regulatory landscape. Learn LGPD application to AI, the proposed AI Bill (PL 2338/2023), automated decision rights, and ANPD enforcement.
6 LessonsCanada AIDA
Master Canada's AI regulatory landscape. Learn the proposed Artificial Intelligence and Data Act (AIDA), high-impact systems, ISED guidance, and the Canada/US comparison.
6 LessonsAustralia AI Ethics Framework
Master Australia's AI regulatory landscape. Learn the AI Ethics Principles, Voluntary AI Safety Standard, mandatory guardrails proposal, and OAIC role.
6 LessonsStandards & Frameworks
ISO 42001 Implementation
Implement ISO/IEC 42001 in depth. Learn the AI Management System (AMS) clauses, Annex A controls, certification audit process, integrating with existing ISMS, and continual improvement.
6 LessonsISO 23894 (AI Risk Management)
Master ISO/IEC 23894. Learn AI-specific risk management, risk identification techniques for AI, integration with ISO 31000, and the relationship to NIST AI RMF.
6 LessonsISO 23053 (AI Trustworthiness)
Master ISO/IEC 23053 framework. Learn the trustworthy AI framework, trustworthiness characteristics, the assessment approach, and the family of related standards.
6 LessonsIEEE Ethically Aligned Design
Master IEEE Ethically Aligned Design. Learn the IEEE EAD framework, P7000 series of standards, certification programs, and how IEEE complements ISO and NIST.
6 LessonsNIST AI RMF Playbook
Master the NIST AI RMF Playbook. Learn the suggested actions, documentation, AI Actor responsibilities, and how to operationalize the Playbook in your org.
6 LessonsIEEE 7000-Series Standards
Master the IEEE 7000-series. Learn IEEE 7000 (system design ethics), 7001 (transparency), 7002 (data privacy), 7010 (wellbeing), and how to apply each in product development.
6 LessonsSector-Specific Regulation
AI in Financial Services
Master financial services AI regulation. Learn SR 11-7 model risk, MRM in practice, OCC/FRB guidance, FCA AI strategy, MAR, fair lending requirements (ECOA, FHA), and AML implications.
6 LessonsAI in Healthcare (FDA)
Master healthcare AI regulation. Learn FDA SaMD framework, 510(k) pathway, De Novo, PMA, predetermined change control plan (PCCP), HIPAA + AI, and EU MDR/IVDR for AI.
6 LessonsAI in Hiring Regulation
Master hiring AI regulation. Learn NYC LL 144 in implementation detail, IL AI Video Interview Act, MD HB 1202, EEOC ADA & Title VII guidance, and emerging state laws (NJ, CA).
6 LessonsAI in Education Regulation
Master education AI regulation. Learn FERPA & AI, Title VI/IX implications, state student privacy laws (CA SOPIPA, NY Ed Law 2-D), Department of Education AI guidance.
6 LessonsAI in Insurance Regulation
Master insurance AI regulation. Learn NAIC Model Bulletin on AI use, Colorado SB 21-169, NY Reg 187, NJ AI bulletin, and state insurance commissioner enforcement.
6 LessonsAI in Criminal Justice
Master criminal justice AI regulation. Learn pretrial risk assessment limits, predictive policing bans (e.g. SF), facial recognition state laws (IL BIPA, MA), and federal proposals.
6 LessonsAI in Children's Products
Master children's AI regulation. Learn COPPA & AI, California Age-Appropriate Design Code, age assurance requirements, EU UCPD, and FTC enforcement on kids' AI.
6 LessonsAI in Consumer Products
Master consumer-product AI regulation. Learn FTC Section 5 unfair/deceptive, ECOA, Fair Housing Act, ADA web accessibility, EU UCPD, and dark-pattern prohibitions.
6 LessonsPrivacy & Data Compliance
GDPR for AI Compliance
Master GDPR for AI. Learn lawful basis selection, Article 22 automated decisions, DPIA for AI, data minimization, accuracy obligations, transfers, and DPO role.
6 LessonsCCPA/CPRA for AI
Master CCPA/CPRA for AI. Learn ADM regulations (proposed), risk assessments, opt-out rights, sensitive personal information rules, employee/B2B data, and CCPA enforcement.
6 LessonsHIPAA & AI
Master HIPAA for AI. Learn PHI in AI training, BAAs with AI vendors, de-identification (Safe Harbor, Expert Determination), Security Rule for AI, and breach response.
6 LessonsState Comprehensive Privacy Laws
Master state comprehensive privacy laws (CO, VA, CT, UT, IA, IN, TN, TX, OR, MT, DE). Learn the common patterns, state divergences, AI-specific provisions, and multi-state strategy.
6 LessonsSectoral US Privacy Laws
Master sectoral US privacy laws applied to AI. Learn GLBA (financial), HIPAA (health), FERPA (education), COPPA (kids), VPPA (video), and Driver's Privacy Protection Act.
6 LessonsCompliance Programs
Building an AI Compliance Program
Build an AI compliance program from scratch. Learn the org design (CAIO, ethics committee, working groups), the policy stack, training requirements, and metrics to track.
6 LessonsAI Compliance Documentation
Master AI compliance documentation. Learn the document set (model cards, data cards, risk registers, DPIAs, audit trails), versioning, retention, and audit-ready filing.
6 LessonsAI Compliance Training
Build AI compliance training programs. Learn the role-based curriculum (engineers, PMs, leaders, sales), measurement of effectiveness, refresh cadence, and sample materials.
6 LessonsAI Incident Reporting & Response
Build AI incident reporting & response. Learn what counts as an AI incident, internal reporting channels, regulator notification (EU AI Act, NIST), root cause analysis, and post-incident review.
6 LessonsAI Compliance Audits & Certifications
Master AI audits and certifications. Learn internal audit programs, third-party audits, ISO 42001 certification path, SOC 2 + AI extension, and preparing for regulator audits.
6 LessonsWhy an AI Compliance Deep Dive?
AI compliance is now load-bearing infrastructure. This track gives you a single map of every major regulation, standard, and operational pattern.
EU AI Act + US
10 deep dives on the EU AI Act (architecture, risk tiers, prohibited practices, high-risk obligations, GPAI, conformity, notified bodies, enforcement, penalties, timeline). 8 deep dives on US federal + state (EO, NIST RMF, OMB, EEOC, FTC, SEC, state laws).
International
UK, Singapore, China, Japan, India, Brazil, Canada, Australia - the full global AI regulation map.
Standards
ISO 42001, ISO 23894 (AI risk), ISO 23053 (trustworthiness), IEEE 7000-series, NIST RMF Playbook, IEEE EAD - implementation depth.
Sectoral + Privacy + Programs
Sector-specific (financial services, healthcare, hiring, education, insurance, criminal justice, kids, consumer); privacy compliance (GDPR, CCPA, HIPAA, state, sectoral); and building AI compliance programs end-to-end.