Three Frameworks, Three Timelines — EU Enforcement, UK Sandbox, US State Patchwork Define the Transatlantic Gap

The week of August 19–26 crystallises the three-way regulatory divergence that will govern global law firm AI strategy for the next 24 months. The EU has activated enforcement of a comprehensive, risk-tiered, prescriptive framework — Article 50 is live, GPAI enforcement is active, and Annex III obligations are 16 months away with penalties up to 7% of global turnover. The UK is operating a facilitative, principle-based, sandbox-first model — the AI Growth Lab for legal services is the clearest example: instead of legislating AI in law, the UK government convened the SRA, LSB, CLC, and ICO in a single programme to help innovators navigate existing rules. The US has no federal AI law; binding private-sector AI obligations are state-level, inconsistent across jurisdictions, and bar-association ethics guidance — while converging on the same underlying duties — varies in its specificity and enforceability from state to state. For law firms and legal departments with transatlantic practice or operations, this divergence is not a compliance calendar problem to be managed jurisdiction by jurisdiction: it is a governance architecture problem that requires a framework that is simultaneously EU-compliant, UK-aligned, and US-ethics-compatible. Firms that build their AI governance posture to EU standards will be over-compliant in the UK and the US — which is increasingly where sophisticated clients want their outside counsel to be.