This article, drawn from the From Code to Consequence panel hosted by In the Know Limited, explores a growing global tension in AI governance: what happens when some countries regulate tightly while others take a lighter approach.
At the heart of the discussion was a simple concern. AI systems don’t respect borders, yet regulation does. That mismatch raises an uncomfortable question: if companies can shift development or deployment to less regulated environments, does stricter governance still matter?
The panel’s view was consistent. It does, and arguably more than ever.
One analogy compared regulation to vaccination: partial uptake weakens the overall effect. Another speaker noted that AI doesn’t stay local. Systems, data, and decisions move across jurisdictions, meaning weak regulation in one place can create risk everywhere else.
The EU AI Act was central to the discussion. It follows a risk based model, banning some uses outright and placing strict obligations on high risk applications in areas such as employment, education, and healthcare. Importantly, it applies not just to EU based organisations but to any system affecting EU citizens. That extraterritorial reach changes the equation for global businesses.
Other frameworks sit alongside it. GDPR and UK data protection law govern personal data use, while sector rules such as medical device regulation apply where AI influences diagnosis or treatment. In those cases, oversight, traceability, and human review are not optional extras but legal requirements.
A recurring theme was that compliance is not geography dependent, it is impact dependent. AI is judged by what it does, not where it is built.
The panel also highlighted practical risks: performance drift, over confidence in polished outputs, and failures that emerge only after deployment. These issues reinforce the need for continuous oversight rather than one off checks.
Ultimately, the conclusion of the article is clear. Light touch regimes elsewhere do not weaken stricter ones. They make them more relevant. As AI spreads across borders and industries, governance based on risk, accountability, and human oversight becomes the only workable model for managing real world impact.