The EU has extended compliance timelines for high-risk AI systems, but the underlying obligations remain firmly in place. At the same time, the U.S. is accelerating sector-specific AI governance expectations through NIST’s new Trustworthy AI Profile for Critical Infrastructure.

Different approaches. Same direction.

Both frameworks increasingly expect:

• Documented AI governance
• Human oversight
• Technical robustness
• Lifecycle risk management

For energy companies, the question is no longer whether to establish AI governance, but how to build a unified framework that can withstand scrutiny across jurisdictions.

The extended EU timeline should not be mistaken for reduced regulatory pressure. Organizations that use this runway to develop integrated, defensible AI governance programs will be best positioned as standards continue to mature.

A detailed analysis on this ever evolving landscape is available here.