HumanoidGPT · Part of The Humanoid Group

AI Regulation for Robots

AI rules were written mostly with software in mind, but robots put AI inside machines that move. This guide explains how the EU AI Act, the US NIST framework and India's governance guidelines reach robots, and what that means for buyers.

By Arjun Rao · Updated

The EU AI Act and robots

Regulation (EU) 2024/1689, the Artificial Intelligence Act, sorts AI systems by risk. Under Article 6(1), an AI system is high-risk when it is a safety component of a product, or is itself a product, covered by the EU harmonisation laws listed in Annex I, and that product must undergo a third-party conformity assessment. Annex I includes the product laws for machinery, toys and radio equipment, which is why AI that stops a robot injuring people can land in this category. High-risk status brings duties covering risk management, data governance, record-keeping, human oversight, accuracy and cybersecurity. The Act's obligations take effect in phases, so check which ones apply on your timeline.

The NIST AI Risk Management Framework

In the United States, the National Institute of Standards and Technology released the AI Risk Management Framework, AI RMF 1.0, on 26 January 2023. It is intended for voluntary use rather than being law, and it organises AI risk work into four functions: Govern, Map, Measure and Manage. NIST added a Generative AI Profile, NIST AI 600-1, in July 2024. For a robot programme, the framework gives a shared structure for questions such as who is accountable for the robot's AI, what could go wrong in your setting, how performance and failures are measured, and how risks are treated over the robot's working life. It also works well as a frame for supplier questionnaires.

India's approach to AI governance

India has chosen not to write a separate AI law for now. The India AI Governance Guidelines, issued by the Ministry of Electronics and Information Technology, state that existing regulations can address many AI risks, pointing to the country's information technology, data protection and consumer laws alongside sector regulators. The guidelines set out seven principles, propose an AI Governance Group, a Technology and Policy Expert Committee and an AI Safety Institute, and recommend a national database of AI incidents. They lean on voluntary measures while noting that some baseline measures could become mandatory later. For robots sold in India, existing product, data and sector rules remain the main obligations.

What buyers should ask robot makers

Regulation will not tell you whether a particular humanoid is safe, but it does give you a checklist. Ask the maker whether any AI in the robot acts as a safety component and, if the robot is sold in the EU, how it is being assessed under the AI Act. Ask for documentation of training data sources, testing, logging and human oversight features, and for an explanation of how software updates are controlled. Ask how the maker maps its practices to a framework such as the NIST AI RMF, and how incidents are reported. For robots like the Xiaomi CyberOne or Unitree G1, the answers depend on market and model, so get them in writing for your country.

Sources and further reading

Common questions

Does the EU AI Act apply to robots sold outside Europe?

The Act covers AI systems placed on the EU market, and systems whose output is used in the EU, wherever the provider is based. A robot sold only in other countries falls under local rules instead, though some makers design to EU requirements so one product can be sold widely.

Which rules cover a robot's physical safety rather than its AI?

Machinery, product safety and workplace safety laws, together with robot safety standards, still govern how a robot must be designed and used. AI rules sit on top of them rather than replacing them, so a compliant AI system does not make an unsafe machine acceptable.

Visit The Humanoid Group

People also search for EU AI Act robots, high-risk AI safety component, NIST AI Risk Management Framework, AI RMF robots, India AI governance guidelines and MeitY AI guidelines.