AIFl@sh is a monthly collection of critical upgrades and changes across the GCC’s AI landscape – with a smattering of relevant changes from outside of the region. To subscribe to the newsletter on LinkedIn, click here.

GCC

Kingdom of Saudi Arabia

SDAIA – Draft responsible AI policy

On 3 April 2026, SDAIA hosted a draft responsible AI policy on the Istitlaa platform for public consultation. The draft policy focuses on responsible AI adoption, risk mitigation, continuous assessment, role clarity and effective response mechanisms, and is intended to support trustworthy AI use across the kingdom.
Building on the success of Vision 2030, Saudi Arabia is rapidly moving from broad AI ambition and ethics principles towards more operational governance expectations. Organisations should start preparing AI inventories, use-case ownership, testing controls, risk classification, monitoring processes and evidence of accountability, as these are likely to become central to responsible AI deployment in the Kingdom.

The United Arab Emirates

Agentic AI in government services

On 23 April 2026, the UAE announced plans to transform 50% of federal government sectors, services and operations to agentic AI within two years, building an AI-based framework that can monitor changes, analyse events, recommend changes, manage operations and perform actions, with a dedicated task force overseeing implementation.

By making autonomous AI systems part of public-service delivery, the UAE is moving from digital government to AI-operated government, which raises practical governance questions around human oversight, explainability, escalation, accountability, service quality, data protection and auditability.

Sultanate of Oman

No new Oman-specific AI law or policy update was identified for March 2026.

Kingdom of Bahrain

National AI ecosystem – From policy to practical adoption

While no new Bahrain-specific AI law/policy updates were identified for April 2026, Bahrain’s official AI portal hosts Bahrain’s AI policy and ethical AI guidelines, the UNESCO AI readiness assessment, AI procurement guidance and other interesting/useful content on AI-related issues including workforce upskilling; AI use in construction, agriculture, courtrooms and chatbots; and public-sector innovation- all of which reflects Bahrain’s focus on implementation maturity.

For organisations, this means AI governance should be embedded into business as usual, rather than treated as a standalone compliance exercise.

State of Qatar

Shura Council – AI governance and legislative review

On 27 April 2026, Qatar’s Shura Council discussed AI governance and reviewed draft AI-related legislation. The discussions highlighted the importance of establishing a comprehensive legal framework, with particular focus on data protection, privacy, ethical use, and alignment with national interests, while keeping pace with rapid technological developments.

With Qatar moving from policy-level guidance towards more formal legislative oversight, in-scope organisations should begin strengthening AI governance frameworks in anticipation of future regulatory requirements.

State of Kuwait

No new Kuwait-specific AI law or policy update was identified for March 2026.

International

European Union

EU AI Act: Majority of obligations due from 2 August 2026

The EU’s AI Act started coming into force on 1 August 2024. As of 2 August 2026, most obligations come into effect and enforcement begins, including rules for high-risk AI systems listed in Annex III, Article 50 transparency obligations and measures supporting innovation such as regulatory sandboxes. EU member states should have designated national competent authorities and adopted penalty rules by the effective date.

With August 2026 the main operational compliance deadline for many AI deployers and providers, especially those using AI in areas such as employment, education, access to essential services, law enforcement, migration, biometric systems and certain democratic processes, organisations in scope should assess – now! – whether any AI use falls within Annex III, complete risk assessments, assign accountability, prepare technical and user documentation, implement human oversight, and maintain logs and monitoring controls.

India

AI governance and economic group

On 16 April 2026, India’s MeitY constituted the AI governance and economic group (AIGEG) as a high-level inter-ministerial body to coordinate national AI governance policy, responsible AI innovation and labour-market impact considerations. The group reflects India’s AI governance guidelines, which recommend institutions such as an AI governance group, a technology & policy expert committee and an AI safety institute.

India is choosing an institutional and coordination-led model rather than immediately relying on a single standalone AI law. This could mean AI obligations emerge through sector regulators, government guidance and existing legal frameworks rather than a single consolidated AI statute.

China

Draft rules on digital humans and human-like AI

On 3 April 2026, China’s cyberspace regulator released for public comment (until 6 May 2026) draft regulations governing digital humans and virtual human content. The draft regulations require clear labelling of digital human content, prohibit digital humans from developing intimate relationships with children (users under 18) and ban services that could mislead children or fuel addiction. The regulations would also prohibit digital humans being created using another person’s personal information without consent, the use of virtual humans to bypass identity verification systems and the dissemination of content that endangers national security or public order.

China is signalling that regulators are likely to increasingly scrutinise AI companions, virtual influencers, avatars and other human-like AI services where there are significant risks relating to children, consent, addiction, identity misuse, public order and manipulation.

South Africa

Withdrawal of draft AI policy over fake AI-generated sources

On 26 April 2026, South Africa withdrew its first draft national AI policy after it was found to include fake AI-generated references. The minister described the issue as a serious credibility and integrity failure and emphasised the need for vigilant human oversight when AI is used.

This is one of the clearest real-world governance lessons for 2026 (so far!): AI governance is not only about regulating AI systems, but also about how governments and organisations use AI in their own policy, research and documentation processes. Verification, source validation and human review should be treated as core AI controls.