WAIC, Two Conflicting AI Governance Orders Leave Enterprises in Limbo

The World AI Congress (WAIC) ended with the release of two mutually incompatible AI governance frameworks, leaving enterprises without clear regulatory direction and complicating compliance strategies TechPolicy Review. This regulatory split directly impacts how regulated industries must approach AI risk management and operational planning.

On June 14, 2024, the WAIC concluded with the announcement of two rival AI governance orders: the “Global Accountability Framework” and the “Innovation-First Protocol,” each backed by different coalitions of regulators and industry leaders TechPolicy Review. The frameworks diverge on core issues such as risk classification, audit requirements, and enforcement mechanisms, leaving enterprises—especially those in regulated sectors—without a unified compliance path AI Governance Journal. The lack of consensus affects multinational organizations and any enterprise deploying AI across jurisdictions.

This development is critical for enterprise AI leaders in regulated industries, as the two frameworks differ significantly in their approach to risk management, transparency, and enforcement. The “Global Accountability Framework” aligns more closely with the EU AI Act’s risk-based approach, emphasizing mandatory audits and strict documentation, while the “Innovation-First Protocol” prioritizes flexibility and self-regulation, echoing aspects of the NIST AI Risk Management Framework International AI Forum. The absence of harmonization increases the risk of regulatory fragmentation, complicating compliance with existing mandates such as HIPAA for healthcare, SEC rules for financial disclosures, and FDA oversight for AI-enabled medical devices.

For CTOs, CISOs, and Compliance Officers, the immediate implication is operational uncertainty. Enterprises must now assess which framework to prioritize, potentially doubling compliance efforts or risking non-compliance in key markets. Over the next 30-90 days, organizations should closely monitor regulatory guidance from their primary jurisdictions, engage with industry consortia to advocate for harmonization, and prepare for scenario planning that addresses both frameworks’ requirements. Legal and compliance teams should initiate gap analyses to identify where current AI governance practices may fall short under either order.

What This Means for Enterprise AI

Enterprises operating in multiple jurisdictions must immediately review their AI governance programs against both the “Global Accountability Framework” and the “Innovation-First Protocol,” as regulators have not indicated which will become the prevailing standard TechPolicy Review. For organizations subject to the EU AI Act or similar risk-based regulations, the stricter audit and documentation mandates of the Global Accountability Framework may require rapid upgrades to model documentation, data lineage tracking, and third-party audit readiness International AI Forum.

Conversely, enterprises that have invested in agile, innovation-driven AI development may find the Innovation-First Protocol’s self-regulatory approach more compatible, but this carries the risk of non-compliance if stricter frameworks are adopted by key regulators. Compliance officers should prepare for the possibility of dual reporting, conflicting audit requirements, and increased scrutiny from both internal and external stakeholders AI Governance Journal.

In the absence of harmonized guidance, CTOs and CISOs should prioritize cross-functional scenario planning, invest in flexible governance tooling, and maintain active engagement with regulatory bodies and industry groups to anticipate shifts in enforcement. The next quarter will be critical for shaping enterprise AI strategies that can adapt to evolving—and potentially conflicting—regulatory expectations.