HumanoidGPT · Part of The Humanoid Group
AI Regulation for Robots
AI rules were written mostly with software in mind, but robots put AI inside machines that move. This guide explains how the EU AI Act, the US NIST framework and India's governance guidelines reach robots, and what that means for buyers.
By Arjun Rao · Updated
The EU AI Act and robots
Regulation (EU) 2024/1689, the Artificial Intelligence Act, sorts AI systems by risk. Under Article 6(1), an AI system is high-risk when it is a safety component of a product, or is itself a product, covered by the EU harmonisation laws listed in Annex I, and that product must undergo a third-party conformity assessment. Annex I includes the product laws for machinery, toys and radio equipment, which is why AI that stops a robot injuring people can land in this category. High-risk status brings duties covering risk management, data governance, record-keeping, human oversight, accuracy and cybersecurity. The Act's obligations take effect in phases, so check which ones apply on your timeline.
The NIST AI Risk Management Framework
In the United States, the National Institute of Standards and Technology released the AI Risk Management Framework, AI RMF 1.0, on 26 January 2023. It is intended for voluntary use rather than being law, and it organises AI risk work into four functions: Govern, Map, Measure and Manage. NIST added a Generative AI Profile, NIST AI 600-1, in July 2024. For a robot programme, the framework gives a shared structure for questions such as who is accountable for the robot's AI, what could go wrong in your setting, how performance and failures are measured, and how risks are treated over the robot's working life. It also works well as a frame for supplier questionnaires.
India's approach to AI governance
India has chosen not to write a separate AI law for now. The India AI Governance Guidelines, issued by the Ministry of Electronics and Information Technology, state that existing regulations can address many AI risks, pointing to the country's information technology, data protection and consumer laws alongside sector regulators. The guidelines set out seven principles, propose an AI Governance Group, a Technology and Policy Expert Committee and an AI Safety Institute, and recommend a national database of AI incidents. They lean on voluntary measures while noting that some baseline measures could become mandatory later. For robots sold in India, existing product, data and sector rules remain the main obligations.
What buyers should ask robot makers
Regulation will not tell you whether a particular humanoid is safe, but it does give you a checklist. Ask the maker whether any AI in the robot acts as a safety component and, if the robot is sold in the EU, how it is being assessed under the AI Act. Ask for documentation of training data sources, testing, logging and human oversight features, and for an explanation of how software updates are controlled. Ask how the maker maps its practices to a framework such as the NIST AI RMF, and how incidents are reported. For robots like the Xiaomi CyberOne or Unitree G1, the answers depend on market and model, so get them in writing for your country.
Sources and further reading
- Regulation (EU) 2024/1689 (Artificial Intelligence Act) — EUR-Lex, Publications Office of the European Union.
The AI Act text, including Article 6(1) on AI safety components of products covered by the EU laws listed in Annex I. - AI Risk Management Framework — National Institute of Standards and Technology (NIST).
NIST's voluntary AI RMF 1.0 with its Govern, Map, Measure and Manage functions, plus the Generative AI Profile. - India AI Governance Guidelines: Enabling Safe and Trusted AI Innovation — Ministry of Electronics and Information Technology (MeitY), Government of India, via Press Information Bureau.
India's AI governance plan: rely on existing laws, seven principles, new advisory bodies and a national AI incidents database.
Common questions
Does the EU AI Act apply to robots sold outside Europe?
The Act covers AI systems placed on the EU market, and systems whose output is used in the EU, wherever the provider is based. A robot sold only in other countries falls under local rules instead, though some makers design to EU requirements so one product can be sold widely.
Which rules cover a robot's physical safety rather than its AI?
Machinery, product safety and workplace safety laws, together with robot safety standards, still govern how a robot must be designed and used. AI rules sit on top of them rather than replacing them, so a compliant AI system does not make an unsafe machine acceptable.
People also search for EU AI Act robots, high-risk AI safety component, NIST AI Risk Management Framework, AI RMF robots, India AI governance guidelines and MeitY AI guidelines.