Sources & Methodology

AI Governance Brief is an independent publication focused on AI governance. Its analysis is grounded in primary regulatory sources and established institutional guidance. A structured sourcing and review approach is used to ensure accuracy and policy relevance.

Source Policy

All content published on AI Governance Brief is based on a curated set of authoritative sources. These sources are reviewed continuously and updated as regulatory frameworks evolve.

Primary Sources

Primary sources form the foundation of all analysis and are used wherever possible:

  • EUR-Lex — Official EU legislation, delegated acts, and implementing acts
  • European Commission — Regulatory proposals, guidance, and communications
  • EU AI Office — Oversight and implementation of the EU AI Act
  • European Data Protection Board — GDPR guidance and enforcement interpretation
  • National data protection authorities (e.g. AP, CNIL, ICO)
  • International Organization for Standardization / International Electrotechnical Commission — AI governance and management system standards (including ISO/IEC 42001)
  • National Institute of Standards and Technology — AI Risk Management Framework
  • Organisation for Economic Co-operation and Development — OECD AI Principles and observatory materials

Secondary Sources

Secondary sources are used to contextualize or interpret primary materials. These sources are always clearly distinguished from regulatory text:

  • Established international law firms (e.g. Freshfields, Clifford Chance, Linklaters)
  • Recognised research institutes and think tanks (e.g. Ada Lovelace Institute, CDEI, TNO)
  • Official consultation responses and regulatory impact assessments

Explicit Exclusions

The following sources are not used as primary references:

  • Opinion-only blog posts or influencer commentary
  • Unsourced newsletters or personal Substacks
  • Medium articles without institutional backing
  • Social media posts as standalone evidence

Where commentary is referenced, it is treated as interpretation rather than authority.

Methodology

Research and Monitoring

Regulatory developments are monitored on an ongoing basis, with particular attention to:

  • Legislative updates and amendments
  • Regulatory guidance and enforcement actions
  • Standardization initiatives and implementation frameworks

Updates are assessed for relevance, scope, and practical implications for organizations operating or deploying AI systems.

Analysis and Synthesis

Each article or briefing is developed through the following process:

  1. Source identification — Relevant primary and secondary materials are collected
  2. Verification — Key claims are cross-checked against original sources
  3. Synthesis — Regulatory requirements and governance implications are summarized
  4. Contextualization — Practical relevance is explained without providing legal advice

The focus is on explaining what the rule is, why it matters, and what types of organizations may be affected.

Use of AI Tools

AI-assisted tools may be used to support drafting, summarisation, and internal organisation of materials. All published content is:

  • Reviewed by a human editor
  • Fact-checked against original sources
  • Edited to remove speculative or advisory language

AI tools do not replace editorial judgment.

Editorial Independence

AI Governance Brief operates independently and does not accept sponsored content, paid placements, or affiliate links. Any references to tools or services are contextual and non-promotional.

This publication does not provide legal advice. Readers should consult qualified professionals for legal or regulatory guidance specific to their circumstances.