What new AI rules mean for agents at work.

It depends on where you operate and what the agent does. In India, the DPDP Act covers personal data, the MCA audit trail rule covers accounting software, and RBI's draft model-risk guidance would cover banks and NBFCs. The EU AI Act applies when output is used in the EU. ISO/IEC 42001 and the NIST AI RMF are voluntary.

For AI agents, two dates stand out. The core duties of data fiduciaries under India's DPDP Act apply from 13 May 2027, and EU AI Act high-risk duties for Annex III systems apply from 2 December 2027, after the Digital Omnibus on AI moved the date. RBI's model-risk guidance is still a draft, published for consultation on 24 June 2026.

Neither is law. ISO/IEC 42001:2023 is a voluntary management system standard that an accredited body can certify you against. The NIST AI RMF is voluntary and has no certification. Buyers increasingly ask suppliers to describe AI controls in NIST terms, and ISO/IEC 42001 auditors look for evidence that controls actually operated.

No. Each explainer summarises the official text in plain words, links to it and shows the date it was last reviewed against it. Mappings to elan1 platforms are drafts for your counsel and auditors, not certification, legal advice or regulator approval. Take your counsel's view before you act on any of it.