As AI laws evolve globally, businesses face a complex challenge. They must adopt AI quickly to stay competitive while navigating a patchwork of regulations—from the EU AI Act to US state laws.
This new wave of legislation has been compared to Europe’s General Data Protection Regulation (GDPR), which required companies to adopt new controls and policies to manage data and protect consumer privacy. Today, AI regulations are rewriting corporate compliance yet again. And the stakes are high: Violations of the EU AI Act can carry fines of up to 7% of global revenue.
A framework for moving forward with confidence
But regulatory frameworks aren’t simply a business hurdle or potential source of fines, they can give companies clarity. For organizations operating across borders, clear rules can provide a framework for how to move forward with AI.
Flutter Entertainment operates brands around the world, which requires managing AI deployments across multiple regulatory environments. “[The regulation] is giving us that perimeter in which we can play and operate,” says John Williams, Lead IAM Strategy Architect for Flutter Entertainment. “It allows us to move with a bit more confidence.”
Extending identity controls to AI agents
To ensure they adhere to emerging regulation, especially as AI agent adoption grows, organizations are turning to a familiar control layer: identity.
Just like human employees, AI agents can access applications and data. "AI agents require the same primitives as your human identities," Okta CPO Ely Kahn says.
By applying identity controls to AI agents, businesses are better equipped to answer four key questions:
Where are my agents?
What can they do?
What are they doing?
How do I respond?
Collaborating on open standards
Because AI agents move across applications and cloud platforms, securing them is too large a task for any single company.
"There's not one organization that can solve what we're trying to do in AI today," says Matt Ellard, Okta’s SVP and GM for EMEA.
To meet this challenge, Okta and its partners formed the Blueprint Alliance. This industry coalition is advancing an open, multi-vendor reference architecture to help organizations govern the full agentic stack and adapt to new AI regulation.
Watch the video above to learn more about how global businesses like DCC Energy and Flutter Entertainment are navigating emerging AI regulations with identity.
