AI Risk Register for US

US-specific obligations covered

The output is anchored on the regulations that apply to AI deployments in US. The top frameworks cited:

• Colorado Artificial Intelligence Act (SB 24-205, codified at C.R.S. §§ 6-1-1701 to 6-1-1707)state_legislation · Enacted - not yet in force

  Deployers of high-risk AI systems must conduct impact assessments, implement AI risk management programmes, provide consumers with clear disclosure of AI use and adverse action explanations, and notify developers of discovered risks.

• Texas Responsible AI Governance Act (HB 149)state_legislation · In force

  AI developers and deployers must avoid prohibited uses, provide clear disclosures when consumers interact with AI in consequential contexts, conduct algorithmic-discrimination assessments for in-scope systems, and report adverse incidents to the Texas Attorney General. Compliance with NIST AI RMF and recognised standards is treated as a rebuttable presumption of reasonable care.

• California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA)state_legislation · In force

  Businesses must disclose automated decision-making logic upon consumer request, allow opt-out of profiling for targeted advertising or significant decisions, and conduct and document risk assessments for high-risk data processing activities.

• California Bot Disclosure Law (SB 1001 — Cal. Bus. & Prof. Code §§17940-17943)state_legislation · In force

  Operators of bots that interact with California consumers in commercial or electoral contexts must clearly and conspicuously disclose that the consumer is communicating with a bot, with the disclosure designed to inform a reasonable person communicating with the bot. Disclosure must not be hidden behind interaction or buried in a privacy notice.

How the AI Risk Register approaches this

You select jurisdiction, industry, and risk appetite. The tool produces a register pre-populated with 12 to 18 AI risks relevant to your sector — each already scored on a 5×5 matrix with suggested mitigations.

You receive the same register in both .xlsx and .docx formats: the spreadsheet for live editing and ongoing risk-committee work, and the Word document for paper sign-off and board appendices. Add organisation-specific risks, adjust scores, assign owners, and set review cadence — the starting point is a credible draft, not a blank template.

What you get

• ✓ Arrives as a working spreadsheet — not a PDF — so it fits straight into your risk workflow.
• ✓ Each risk carries the regulatory obligation it maps to, so reviewers can trace the "why" without re-researching.
• ✓ Bias considerations drawn from published evidence relevant to your sector, surfacing failure modes that generic templates miss.
• ✓ Designed to be signed off by a qualified risk owner — the output does not replace that review, it accelerates the drafting stage.

Ready to generate?

$29 · one-time — answer a 6-question intake (including jurisdiction = US), and download your tailored document immediately.

Also available framed for your sector → see industry-specific pages