OECD Framework for Classifying AI Systems
A comprehensive tool for assessing and categorizing AI systems based on their potential impact and risk levels. Provides organizations with standardized criteria for evaluating AI systems across various dimensions including context, data, algorithms, and governance requirements.
| Jurisdiction | Technical Standards |
|---|---|
| Category | Technical Standards |
| Status | Active |
| Latest development |
Analysis
Key Requirements
The OECD Framework for Classifying AI Systems establishes the following key requirements:
- Multidimensional assessment: Organizations must evaluate AI systems across five core dimensions:
- People & Planet
- Economic Context
- Data & Input
- AI Model
- Task & Output
- Risk-based approach: AI systems must be categorized based on their potential risks and impacts, with higher-risk systems subject to more stringent requirements
- Transparency and explainability: Organizations must ensure AI systems are transparent and their decisions are explainable, especially for high-risk applications
- Ethical considerations: AI development and deployment must align with the OECD AI Principles for responsible and trustworthy AI
- Documentation: Organizations must maintain comprehensive documentation on AI system characteristics, training data, and decision-making processes as outlined in the OECD AI Classification Framework
Compliance Challenges
Organizations face several challenges in complying with the OECD Framework:
- Complexity of assessment: The multidimensional nature of the framework can make it difficult to comprehensively evaluate AI systems, especially for organizations with limited AI expertise
- Evolving technology: Rapid advancements in AI make it challenging to keep assessment criteria up-to-date and relevant
- Balancing innovation and compliance: Organizations struggle to maintain innovation while adhering to strict regulatory requirements, as evidenced by case studies in the financial and healthcare sectors
- Cross-border considerations: Differing international AI regulations can complicate compliance for multinational organizations
Implementation Best Practices
To effectively implement the OECD Framework, organizations should:
- Establish a cross-functional AI governance team: Involve stakeholders from legal, ethics, technical, and business units to ensure comprehensive oversight
- Conduct regular AI system audits: Implement a systematic process for assessing and classifying AI systems using the OECD dimensions
- Develop internal guidelines: Create clear, actionable guidelines for AI development and deployment aligned with the OECD AI Principles
- Invest in training and tools: Provide staff with training on the OECD Framework and invest in AI governance tools to streamline compliance processes
- Engage with regulators and industry peers: Participate in OECD AI policy discussions and share best practices with industry working groups
Recent Updates
The OECD Framework has undergone recent updates:
- 2023 AI System Definition Revision: The OECD definition of AI systems was updated to align with latest technological developments
- 2024 AI Principles Revision: The OECD AI Principles were revised to address emerging challenges and opportunities in AI governance
- Ongoing Framework Refinement: The OECD continues to refine the classification framework based on stakeholder feedback and technological advancements
Related Regulations
The OECD Framework interacts with several related regulations:
- EU AI Act: The European Union's comprehensive AI regulation aligns closely with OECD principles but provides more specific legal requirements
- NIST AI Risk Management Framework: The US National Institute of Standards and Technology framework complements the OECD approach with a focus on AI risk management
- ISO/IEC AI Standards: International standards like ISO/IEC 42001 on AI Management Systems provide technical specifications that support OECD Framework implementation
Industry Impact
The OECD Framework has significant impacts across industries:
- Financial Services: Banks and insurers are adapting risk assessment models to comply with OECD guidelines on AI transparency and fairness
- Healthcare: Medical AI developers are enhancing documentation and explainability of diagnostic and treatment recommendation systems
- Manufacturing: Industrial AI applications are being reassessed for environmental impact in line with the OECD's "People & Planet" dimension
Sources
- OECD Framework for the Classification of AI Systems
- OECD AI Policy Observatory
- OneTrust: Approaching the OECD Framework
- EU Artificial Intelligence Act
- Scrut Automation: AI Compliance Guide
- White & Case: AI Regulatory Tracker
- Digital Government Hub: OECD AI Framework Overview
- OECD Framework Full Report (PDF)
Recent developments
- — White & Case’s May 2026 global AI regulatory tracker highlights how the OECD Council Recommendation on AI and its definition of an “AI system” are increasingly being used by regulators as a conceptual basis for risk-based AI classification and lifecycle oversight, reinforcing the relevance of the OECD Framework for Classifying AI Systems in current regulatory practice[5][10]. (source)
- — The OECD’s 2024 AI policy implementation report says the OECD Framework for the Classification of AI Systems is already being used beyond OECD work, including by the U.S. NIST AI Risk Management Framework, and notes its relevance to other major AI governance instruments. This is the most recent OECD-policy source in the results, but it is not a “news article” and no additional last-3-months item was provided in the search results.[6] (source)
- — The same OECD report indicates the OECD AI Recommendation remains a live policy reference point and that the updated OECD AI definition has been adopted in the EU AI Act and the Council of Europe AI Convention, reinforcing the classification framework’s policy relevance. No separate newer amendment to the framework itself was identified in the supplied results.[6] (source)
- — OECD’s official framework page continues to describe the tool as a policy aid for evaluating AI systems across five dimensions: People & Planet, Economic Context, Data & Input, AI Model, and Task & Output. The source shows the framework’s current scope, but it does not report a recent update within the last three months.[1] (source)
- — Industry guidance from OneTrust frames the OECD framework as broader than NIST or ISO risk frameworks and useful for data inventories, sector-specific frameworks, and AI risk assessments. This reflects industry uptake and interpretation, not a policy change.[2] (source)
- — IndiaAI reports that the framework is intended to inform national AI strategies by helping policymakers assess risks and opportunities across AI systems. This is an industry/government-facing reaction source, but it is not within the requested last-3-month window.[8] (source)
- — Digital Watch summarized the launch of the framework as a way to support common understanding, tailored policy design, risk assessment, and AI incident reporting. This is background coverage of the launch rather than a recent update.[7] (source)
- — The OECD PDF version confirms the framework’s original purpose and structure and can be used as the canonical source for the classification dimensions. No change notice or revision was present in the supplied search results.[5] (source)
- — The detailed technical annex to the OECD AI incident reporting framework explains how the 5 dimensions and 37 criteria of the OECD Framework for Classifying AI Systems (People & Planet, Economic Context, Data & Input, AI Model, Task & Output) are being operationalised for systematic incident categorisation and regulatory monitoring[9]. (source)
- — OECD publishes a report on developing a common reporting framework for AI incidents that explicitly builds on the OECD Framework for the Classification of AI Systems, using its dimensions and criteria to distinguish AI applications by impact and to support incident reporting, risk assessment and identification of high‑risk systems[9][12]. (source)
- — OECD Ministerial documentation in 2024 explicitly references the OECD Framework for the Classification of AI Systems as a tool to establish a common understanding of how different AI systems work in context, supporting nuanced, risk‑based assessment (for example distinguishing translation systems from diagnostic systems) and informing national AI strategies[13]. (source)
- — OECD issues an explanatory memorandum updating and clarifying the definition of an “AI system” in the 2019 OECD Recommendation on AI, aligning the conceptual definition with technological developments and thereby reinforcing the definitional foundation on which the OECD Framework for Classifying AI Systems is based[2][10][14]. (source)
Read the full guide to OECD Framework for Classifying AI Systems
Related regulations
- Framework Convention on Artificial Intelligence, Human Rights and Democracy — Technical Standards, Active
- IEEE P7003: Algorithmic Bias Considerations — Technical Standards, Active
- IEEE P2863: Organizational Governance of Artificial Intelligence — Technical Standards, Active
- ISO/IEC 23894: Information Technology — Artificial Intelligence — Risk Management — Technical Standards, Active
- Harmonized Standards for EU AI Act Compliance — Technical Standards, Active
- Development Security Operations Framework — Technical Standards, Active
- Center for Internet Security Critical Security Controls — Technical Standards, Active
- Control Objectives for Information and Related Technologies — Technical Standards, Active
Put it into practice
- Generate the policy: NIST AI RMF policy generator (generatepolicy.com)
- Buy the policy pack: NIST AI RMF Implementation Policy (cyberpolicy.shop)
- Build it yourself: Pillar 06 Companion — The 2026 AI Risk Register (ciso.diy)
Browse all regulations · Compliance deadlines · Latest updates