AI Regulation Did Not Retreat

Primary sources are linked where cited — the Official Journal, the Federal Register, state legislative texts, and the Mobley v. Workday filings. Current as of July 25, 2026.

On January 20, 2025, the White House revoked the 2023 executive order on safe AI. A week later the EEOC took its AI hiring guidance off its website. In December, a new executive order directed the Attorney General to create a task force with one job: sue states whose AI laws conflict with a “minimally burdensome national policy framework.” Its first target was Colorado, which had passed the most ambitious AI statute in the country. The Justice Department moved to intervene on April 24 of this year. A federal court suspended enforcement three days later, on a motion the state joined. By May 14 Colorado had repealed and replaced the statute with a narrower law.

Then Brussels joined. On July 24, 2026, nine days before its biggest deadline arrived, the European Union published the regulation postponing the AI Act’s high-risk obligations. Hiring, credit, and the other standalone high-risk uses moved from August 2026 to December 2027. AI built into regulated products moved to August 2028. The regulation is in force from July 27.

Read that way, 2026 is the year AI regulation blinked. The comfortable takeaway: pressure’s off; revisit it next budget cycle.

For some companies that is exactly right. If your European exposure is a hiring platform or a credit model, a standalone high-risk system in the Act’s Annex III, you just got sixteen months and the budget that comes with them. The relief is real. Take it.

It is also narrower than the headline. The retreat concerns major statutes and agency guidance. Product certification, state employment law, and discovery still determine what companies pay. Some dates got earlier, and courts developed the rules further.

The date that did not move

The delay everyone quoted has a companion almost nobody quoted. The EU’s new machinery regulation applies on January 20, 2027 (the enacted text said the 14th; a corrigendum moved it). Among the machines it treats as high-risk are safety components with self-evolving behavior: machine learning doing a safety function. For those, self-certification is off the table. A notified body has to assess conformity before the CE mark goes on.

The July regulation amended the machinery rules in the same stroke, and the amendment is more interesting than the delay. It moved AI built into machines out of the AI Act’s direct reach and into machinery law, where the AI-specific requirements will arrive as machinery requirements through delegated acts due by August 2028. The notified body does not wait for them. That obligation is already written, and it starts in January.

A company that builds equipment with a learning function anywhere near a safety system did not get a reprieve this summer. Its date sits about eighteen months ahead of the delayed AI Act deadline it read about, and limited notified-body capacity may create the bottleneck. Moving a different deadline does not add assessors. Add the AI Act’s reach while you are at it: it applies to an American company that sells into the EU, operates there, or has output used there. The delay changed when. It changed nothing about whether.

Classification is the first question. The July regulation drew a line the engineers should see: AI used solely for quality control, optimization, or non-safety assistance is not a safety component unless its failure endangers health or safety. Whether the model on an inspection head performs a safety function or checks tolerances is a design decision before it is a compliance one. Address classification early in the product review. Someone who has read Annex I should assess whether the design needs a conformity assessment.

The docket moved the other way

Derek Mobley applied to more than a hundred jobs through employers running Workday’s screening tools and got past none of them. His lawsuit against Workday (the vendor, not the employers) has produced more usable AI employment law than any statute passed this decade.

In 2024, the court in Mobley v. Workday let discrimination claims proceed on the theory that Workday acts as its customers’ agent: when employers hand the screening function to software, the software company answers under the employment statutes. In 2025, the court preliminarily certified an age-discrimination collective and later expanded it to Workday’s HiredScore AI. This March it held the ADEA protects job applicants, not just employees. In June it kept California fair-employment claims and a disability theory in the case (the algorithm allegedly screens out proxies for illness). It also held that Workday can be directly liable for its own algorithmic decisions; the exposure does not run through its customers.

The order that should reorganize compliance programs, though, is a discovery ruling. In May, the magistrate judge held Workday’s bias-testing data privileged. Lawyers had commissioned the tests and used the results to give legal advice, so the plaintiffs do not get them. Talking about it publicly waived nothing. The court separated saying you test for bias from showing what the testing found.

The defendant kept its own audits out of the case because counsel ran them. A company whose audits were run by the product team, or promised in a policy and never run at all, produces everything. Whoever set up the testing made that choice years before the subpoena. The same document can become a shield or an exhibit.

The ruling is from one district court at the pleading and notice stage. The agent theory has not yet faced decertification or summary judgment, and the privilege order was a win for the defendant who planned ahead. It is also the first sustained judicial treatment of these questions. Vendors, employers, and their lawyers now have rulings to work from.

Federal enforcers spent 2025 stepping back. This docket did not.

The states that reach you anyway

Illinois amended its Human Rights Act effective January 1, 2026. An employer that uses AI in hiring, promotion, discipline, or discharge violates the Act if the use has a discriminatory effect — no intent required. Notice to candidates is mandatory. Using zip codes as a proxy for a protected class is banned by name.

California’s civil-rights regulations on automated-decision systems took effect October 1, 2025, and among other things require keeping automated-decision records for four years. New York City has required bias audits and candidate notice since 2023, and the rule reaches fully remote roles tied to a New York office. A state comptroller’s audit in December embarrassed the enforcement agency into opening real investigations. Colorado’s replacement statute still requires notice, an explanation after an adverse decision, and human review, with obligations starting January 1, 2027. Texas prohibits only intentional discrimination by AI — and the AI claims that survive, Mobley’s included, are disparate-impact claims.

Enforcement is a separate question. A task force that moved Colorado in five months is a standing message to every other legislature and attorney general, and some will read it and flinch. Watch what states do next, not what they passed last year.

Michigan and Ohio have enacted nothing. That is not shelter. A Michigan manufacturer that hires into Illinois is inside the Illinois statute. And where there is no AI law, the older law applies. In February, Connecticut’s Attorney General put companies on notice that his state’s existing anti-discrimination statutes already reach algorithmic discrimination, and that his office intends to enforce them that way. Every state has those. Title VII and Michigan’s Elliott-Larsen Act never needed an algorithm statute to reach a discriminatory screen — disparate-impact doctrine is more than fifty years old and does not care that the practice is a model.

Build and document one AI governance program

Build one program that covers the laws that reach your business. The regimes differ in vocabulary and scope, but they share a short list of controls. Start with the strictest requirements that apply, then document how each control meets them:

• An inventory of where AI touches decisions about people or safety functions — bought, embedded in tools you already license, or shadow.
• A risk tier for each use, set by consequence rather than sophistication.
• Testing for accuracy and disparate impact on a schedule, not once at launch.
• A human reviewer with authority to override the system and enough information to explain the decision later.
• Notice where any regime that reaches you requires it. Notice is cheap; its absence is a statutory violation with your name on it.
• Vendor terms that allocate testing, audit rights, and indemnity. Mobley put vendor-as-agent liability in play; the contract decides what that exposure costs you.
• Records kept to the longest clock that applies — in California, four years.

Before testing begins, decide with counsel which work is privileged and which records you intend to produce. Workday made that choice early and it held. Make it after the complaint arrives and it is an autopsy.

Boards and enterprise buyers will ask for all of this in the vocabulary of NIST’s AI Risk Management Framework or ISO/IEC 42001. Map to them — that is how procurement reads. But the map is not the program. An elaborate program you do not run is worse than a modest one you do. It records controls you promised and skipped. Discovery finds those gaps. I keep a leaner version in this AI governance inventory and oversight checklist; it fits on two pages on purpose.

What the retreat actually is

The change is a retreat of guidance. Agencies withdrew documents. A legislature withdrew a statute. Deadlines moved. Consequence did not retreat. It relocated into certification queues that open in January, into state statutes with effects tests, and into a San Francisco courtroom where the defendant’s audits stayed out of discovery because someone thought about discovery before there was a case.

When the questions come, they will not be about the framework you named. They will be about the one you ran.