GRF · Policy Nexus

Technology policy

Artificial intelligence, biotechnology and other emerging technologies change faster than the rules that govern them, and their risks cross sectors and borders. Technology policy covers how governments set rules, standards, oversight and public investment for innovation while protecting safety, rights and security. This page sets out how regulatory risk develops around new technologies, how governance capacity is measured, and which institutions hold the decisions.

02The question

Technology policy: how the risk develops.

AI, biotechnology and innovation. The dossier below sets out how the risk develops, what is measured, where the data come from, how it is modelled and who decides.

Mechanism

The pacing problem

Technologies evolve within months while legislation takes years. Rules written for one generation of technology misfit the next, leaving gaps where harms emerge and overlaps where developers face conflicting obligations.

Mechanism

Fragmented jurisdiction

A single AI system or biotechnology product may fall under data protection, product safety, sector regulators and export controls at once. Divergent national approaches create regulatory arbitrage and uneven protection.

Mechanism

Information asymmetry

Developers know far more about capabilities and failure modes than regulators do. Without disclosure duties, access for testing and technical capacity in supervisory bodies, oversight relies on what firms choose to share.

Mechanism

Dual use and diffusion

Knowledge and tools built for benefit can be misused, and they diffuse across borders through publication, trade and openly released models. Controls at one point are bypassed at another unless they are coordinated internationally.

03Geography

People and hazards in Africa.

Population density, night lights and flood water over Africa, from NASA GIBS. Each layer carries its own date.

The interactive map needs JavaScript; the layer list and sources are below.

Layers 3

People and hazards, for this page

Latest available

NASA GIBS / EOSDIS · ASTER GDEM (METI, NASA) · Blue Marble (NASA) · © OpenStreetMap contributors (ODbL) · Natural Earth

Loading the latest NASA imagery.

Drag to move. Ctrl or ⌘ and scroll, pinch or the buttons to zoom; hover for the values under the pointer; reset returns to the region.

People and hazards, framed on Africa.Satellite and model products as NASA publishes them, each with its own date. They are indicators, not assessments of any place.

Data: NASA GIBS · ASTER GDEM · Blue Marble · © OpenStreetMap contributors · Natural Earth · NASA EONET · U.S. Geological Survey · NOAA GOES-East ABI GeoColorSources and licences

  • We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
  • We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
  • Center for International Earth Science Information Network (CIESIN), Columbia University. 2018. Gridded Population of the World, Version 4 (GPWv4): Population Density, Revision 11. NASA Socioeconomic Data and Applications Center (SEDAC). Licensed under CC BY 4.0. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). doi:10.7927/H49C6VHW. CC BY 4.0
  • VIIRS Black Marble night-time lights, NASA Goddard Space Flight Center; distributed by the NASA Level-1 and Atmosphere Archive and Distribution System (LAADS DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
  • VIIRS near-real-time products (flood, land surface temperature, snow cover, corrected reflectance), NASA LANCE; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
  • NASA Fire Information for Resource Management System (FIRMS), VIIRS 375 m active fire product, NASA LANCE; vector tiles via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
  • ASTER GDEM is a product of METI and NASA (ASTER Global Digital Elevation Model V003, NASA LP DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). Cite as: NASA/METI/AIST/Japan Spacesystems and U.S./Japan ASTER Science Team (2019). ASTER Global Digital Elevation Model V003. doi:10.5067/ASTER/ASTGTM.003. NASA open data
  • Made with Natural Earth. Free vector and raster map data @ naturalearthdata.com. Public domain
  • © OpenStreetMap contributors (ODbL), via NASA GIBS (coastlines, boundaries, roads and place names). Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). ODbL
  • Blue Marble, NASA Earth Observatory; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
  • Context on the globe and flat map: coastlines, boundaries, roads and place names from NASA GIBS reference layers (OpenStreetMap data, ODbL, © OpenStreetMap contributors); Blue Marble imagery as an optional base; 3D terrain and the elevation read-out from the ASTER GDEM elevation colour index (5 m to 200 m classes, exaggerated for legibility). Boundaries are drawn as published and imply no position on any territory.
  • Live events: NASA Earth Observatory Natural Event Tracker (EONET); events are indicative and keep their original source links.
  • Live: NASA EONET Events are indicative, not authority warnings.
  • Live: U.S. Geological Survey Events are indicative, not authority warnings.
  • Live: NOAA GOES-East ABI GeoColor (CIRA). We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS).
  • NASA GIBS: We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS).
  • Optional layers (5 sources in the layer list: live, forecast, observed and context) print their provider credit on the map and here when switched on; forecasts are model output and derived indices are estimates.

Layers and dates

  • Population density, 2020: Population: CIESIN, Columbia University, Gridded Population of the World v4.11 (2018), NASA SEDAC, CC BY 4.0 · static
  • Night-time lights, daily: VIIRS Black Marble (VNP46A2), NASA LAADS DAAC · 12 Oct 2026
  • Flood water, 3-day composite: VIIRS Global Flood Product, NASA LANCE · 14 Oct 2026
  • Active fires and thermal anomalies: VIIRS NOAA-20 375 m (FIRMS), NASA LANCE FIRMS · 13 Oct 2026
  • True colour: VIIRS NOAA-20 corrected reflectance, NASA LANCE · 13 Oct 2026
  • Land surface temperature, day, 8-day composite: VIIRS NOAA-20 Level 3, 8-day, NASA LANCE · 14 Sep 2026

04Indicators

What is measured, and how well.

Each indicator carries its unit, its cadence, the kind of source behind it and the evidence label a value would carry. No values are shown: a programme supplies them under its own authority.

IndicatorUnitCadenceSource typeLabel
National AI strategies and policy initiativescount of initiatives by instrument typecontinuousOECD.AI national policy databaseDECLARED
Designated supervisory authority for AI or emerging technologyyes or no, with mandateperiodic reviewNational legislation and gazettesPublished statistics
Regulatory sandboxes and experimentation clausescount of active schemes by sectorannualRegulator registersPublished statistics
Public consultation on draft technology rulesshare of draft rules consulted, with consultation period in daysannualRegulatory impact assessment registersPublished statistics
Regulatory qualityestimate and percentile rankannualWorld Bank Worldwide Governance IndicatorsESTIMATED
Biosafety and biosecurity legal framework coveragecategorical, by functionperiodic reviewWHO and Biological Weapons Convention national reportingDECLARED
Science, technology and innovation policy instrumentscount by instrument type and target groupperiodicEC-OECD STIP CompassDECLARED
05Monitor

Policy tracker.

The screen a team would use to follow this subject: its measures, states and decisions. Names are examples and values are illustrative.

Policy tracker

Technology policy · Member state A · Session 3

2 items for councilGRF · Policy Nexus

Policy cycle

Agenda01
Heat-health action dutyProblem framing
Formulation02
Risk-informed planning law4 options appraised
Drought allocation rulesOptions drafting
Consultation01
DRR strategy refresh272 responses
Adoption01
Building code updateCommittee vote due
Implementation01
Early warning mandateMilestone 4 of 6
Evaluation01
Flood insurance schemeEvaluation year 1

Options appraisal, planning law

A · guidance only38LowMixedHigh
B · duty with standards67MediumPositiveMedium
C · duty, standards, funding78HighPositiveLow

Decision record

Owner
Policy owner
Decision by
Legislative committee
Evidence
synthesis SY-59
GRF role
convenes, does not decide
Policy tracker: the screen's structure, terms and states for Technology policy.Example names and illustrative values; a design, not a record or a live system.
06Sources

Where the evidence comes from.

Named public datasets and institutional records, each with its licence class. Sources by agreement are used only under their terms and never republished.

SourceWhat it givesLicence class
OECD.AI Policy ObservatoryNational AI strategies, policy initiatives and governance bodiesOpen, CC BY 4.0
EC-OECD STIP CompassScience, technology and innovation policy initiatives reported by governmentsOpen, CC BY 4.0
EUR-LexLegislative texts of the European Union, including the AI Act, with consolidated versionsFree reuse with attribution under the Commission reuse decision
Biological Weapons Convention confidence-building measuresState Party declarations on facilities, programmes and legislation, where made publicPublic portion, UN terms
WIPO LexNational intellectual property laws and treatiesFree, WIPO terms
National regulatory impact assessment registersPublished impact assessments and consultation records for technology rulesPublic sector information, national terms
07Policy scenarios

Compare instruments: rules, incentives and information.

Three families of instruments side by side against the baseline, each with its own lag and adoption speed, under the coverage and compliance you set; effect sizes are teaching values to replace with evidence. Scenario: named assumptions about the future, not a forecast. The map on this page shows Africa; the model itself is not tied to a place.

Controls

Baseline trend of the outcome
2.0% a year
Coverage of the instrument
70%
Compliance
75%
Effect size, against the teaching value
100%
Years ahead
20 years

Readouts

Largest reduction at the horizon
Regulation
Its reduction against the baseline
21%
Numbers, methods and sources
YearBaselineRegulationEconomic incentiveInformation and capacity
0100.099.598.899.1
1102.0101.2100.199.8
2104.0102.5101.199.9
3106.1103.5101.6100.0
4108.2103.7101.8100.7
5110.4103.2101.7102.1
6112.6102.0101.6103.9
7114.9100.4101.6105.9
8117.299.2102.1108.0
9119.598.6102.9110.1
10121.998.9104.2112.3
11124.399.7105.7114.5
12126.8101.1107.4116.8
13129.4102.7109.4119.2
14131.9104.5111.4121.6
15134.6106.5113.5124.0
16137.3108.5115.7126.5
17140.0110.7118.0129.0
18142.8112.9120.4131.6
19145.7115.1122.8134.2
20148.6117.4125.2136.9

Methods

  1. Tools of government Hood (1983), The Tools of Government, Macmillan
  2. Carrots, sticks and sermons Bemelmans-Videc, Rist and Vedung (1998), Transaction
  3. Diffusion of innovations Rogers (2003), Diffusion of Innovations, Free Press
  4. Uncertainty fan (parameter Monte Carlo) Spiegelhalter, Pearson and Short (2011), Visualising uncertainty about the future, Science 333
  5. One-at-a-time sensitivity (tornado) Saltelli and others (2008), Global Sensitivity Analysis: The Primer, Wiley

Data

The model runs on the teaching values set by the controls. To calibrate it for a place, read it against these admitted layers and series, which this page's map can draw:

  • Borders Natural Earth
  • Cities Natural Earth
Compare instruments: rules, incentives and information. Illustrative teaching model: it runs on the values set by the controls, not on measured data. Methods: Tools of government (Hood (1983), The Tools of Government, Macmillan); Carrots, sticks and sermons (Bemelmans-Videc, Rist and Vedung (1998), Transaction); Diffusion of innovations (Rogers (2003), Diffusion of Innovations, Free Press).
08Decisions

Who decides, and what the evidence serves.

Policy Nexus prepares evidence. The decisions below are taken by the authorities named, under their own rules, and never by the platform.

Who decidesThe questionEvidence this page serves
National legislaturesWhether to legislate horizontally across technologies or through sector rulesComparative review of legislative approaches and their impact assessments
Sector and digital regulatorsHow to supervise AI systems and biotechnology products within existing mandatesSupervisory practice compared across jurisdictions; capacity and disclosure requirements
Data protection authoritiesHow data protection law applies to model development and deploymentPublished decisions and guidance compared across authorities
Ministries of foreign affairs and tradeWhich technologies to control for export, and how to coordinate controls with partnersRecords of multilateral control regimes and treaty obligations

Outputs this topic produces

  • Policy primer on the instruments available for governing AI and biotechnology
  • Comparative brief on supervisory mandates and their technical capacity
  • Review of regulatory sandbox designs, their safeguards and their exit rules
  • Dialogue records from regulator-to-regulator and cross-border exchanges
09Implementation

From mandate to evaluation, by pillar.

The steps an instrument takes from mandate to evaluation, each with the pillar that runs it, and the decisions that stay with the authority. Teaching model with stated illustrative values, not a prediction. The map on this page shows Africa; the model itself is not tied to a place.

  1. Mandate and problem framing Competent authority (outside the programme)
    A competent authority frames the problem and the mandate under its own rules. Howlett, Ramesh and Perl (2009)
  2. Evidence and system model Foundry
    The system is modelled with its feedbacks, data and stated limits. OECD (2014), principle 2
  3. Options appraised with scenarios Foundry
    Instruments are compared under scenarios, with uncertainty shown. Hood (1983)
  4. Exercise with stakeholders Universe
    The options are tested in an exercise with those who would implement and bear them. OECD (2014), principle 3
  5. Standard or guidance drafted Nexus Standards
    What works is codified as a standard or guidance, open to comment. Nexus Standards process
  6. Decision by the authority Competent authority (outside the programme)
    The authority decides, outside the programme, with the evidence on record. Howlett, Ramesh and Perl (2009)
  7. Capacity and training Risk Academy
    Those who implement are trained on the decided instrument and its data. Sendai Framework (2015), priority 2
  8. Monitoring and public report Reports
    Indicators are published with sources, limits and corrections. OECD (2014), principle 5
  9. Evaluation and revision Nexus Standards
    Results return to the standard and the model: the cycle closes. Howlett, Ramesh and Perl (2009)

Methods

  1. Policy cycle Howlett, Ramesh and Perl (2009), Studying Public Policy, Oxford University Press
  2. Governance of critical risks OECD (2014), Recommendation of the Council on the Governance of Critical Risks
  3. Layered drawing of directed graphs Sugiyama, Tagawa and Toda (1981), IEEE SMC 11
From mandate to evaluation, by pillar: the steps as recorded, each with its pillar; sources as cited on each step.
10Core questions

What experts ask.

Technology policy experts ask how to govern what is not yet fully understood.

  • How should policy respond to risks that are uncertain, emerging and potentially severe?
  • Which instruments, such as standards, licensing, liability, testing or public investment, fit which technologies?
  • How can regulators build the technical capacity to oversee rapidly changing technologies?
  • How do different jurisdictions' approaches interact, and where is international coordination needed?
  • How are the benefits and harms of technology distributed across society?
11Twin and cascade simulator

Exercise a cascade in technology policy with the people who decide.

Assembled from the Nexus Standards area profile Political and governance risk standards: the hazards it names, the systems and communities that carry the loss, the controls and institutions that dampen it and the data that observe it. Pick an initiating event and step through the cascade to see where mandates meet and which decisions fall to whom. The Map view places the run on an example geography with open data. Every weight is a stated assumption. An exercise for dialogue, not a forecast, an assessment or a position. To model a place of your own choosing, open the full System Builder.

Controls

  • NS-0 Constitution and principles
  • NS-9 Contextual UNIs (deployments, instances, programme instances)
  • NS-10 Policies and clauses (machine-readable obligations: definition, binding, evaluation and enforcement)
  • NS-11 Verification and monitoring (evidence, attestations, zero-trust conformance observation)
  • NRS-H112 Hazard family: Governance and institutional failure (NHS-1 soc.governance)
  • NRS-U9 Universe platform profile: Financial Regulation Nexus
  • NRS-H59 Hazard family: Economic shocks and governance failure (NHS-1 soc.economic)
  • NRS-H118 Hazard family: Organised crime and illicit economies (NHS-1 soc.crime)
  • NRS-A5 Built-in licensing and rights
  • NRS-U24 Universe platform profile: Policy Nexus

Observation

  • Worldwide Governance Indicators (listed for reference)
  • V-Dem dataset (listed for reference)
  • Global SDG Indicators Database (listed for reference)
  • Proportion of population satisfied with their last experience of public services
  • Proportion of population who believe decision-making is inclusive and responsive
  • Number of countries that adopt and implement national DRR strategies in line with the Sendai Framework
12Mechanisms and drivers

The pacing problem.

Technologies such as AI and biotechnology develop faster than legislative and regulatory processes. Early on, little is known about risks, so regulation risks being either premature or too late. Once a technology is embedded, it becomes harder to change. This dilemma has led to approaches such as risk-based regulation, regulatory sandboxes, mandatory testing and disclosure, and adaptive rules that are revisited as evidence accumulates.

Technology policy also involves strong economic and geopolitical interests. Concentration of capabilities in a few firms or countries raises competition and security questions. Divergent national rules can fragment markets or push activity to less regulated jurisdictions, while coordinated standards can raise the floor of safety everywhere.

Why now: AI, data and platform rules are being adopted in many jurisdictions at once, with different models of oversight. Policy Nexus compares those models, convenes the agencies implementing them, and records lessons that can inform Reports and common practice proposals to the Nexus Standards.

13Instruments and commitments

How technology policy is governed: instruments, mandates and commitments.

The instruments, mandates, actors and accountability arrangements a policymaker, diplomat or development agency works with, citing the agreements that set them. Structures follow the frameworks named. Any state or progress drawn is illustrative, not a record.

Policy instrument matrix

The kinds of instrument available on technology policy, by level of government and cooperation.

Instrument typeLocalNationalRegionalGlobal
RegulatoryZoning, building codesLaws, standards, licensingHarmonised rulesConventions and treaties
EconomicLocal levies, grantsBudget lines, taxes, insurance schemesRisk pools, regional fundsFinancing mechanisms
InformationLocal warningsDisclosure, early warning, statisticsData sharing arrangementsGlobal monitoring and reporting
InstitutionalLocal committeesLead agencies, coordination councilsRegional bodies and secretariatsMultilateral mandates
CooperativeCommunity agreementsPartnership compactsMemoranda and joint programmesAgreements and joint commitments
A typology after the OECD Recommendation on the Governance of Critical Risks; examples of instrument types, not an inventory of any country's measures.
Sendai Framework for Disaster Risk Reduction · UNDRRParis Agreement · UNFCCC2030 Agenda and the Sustainable Development Goals · United NationsInternational Health Regulations · WHO
14Methods and data

How the evidence is built, and where it stops.

  1. 01

    Comparative regulation analysis

    Comparing technology rules across jurisdictions with policy and institutional science. Rules are new and evolving.

  2. 02

    Mechanism design

    Designing incentives and institutions for safe development using game theory and mechanism design. Models simplify real behaviour.

  3. 03

    Foresight and scenarios

    Exploring possible developments with decision analysis. Scenarios are not predictions.

  4. 04

    Expert and stakeholder dialogue

    Structured exchange through policy dialogues. Views of affected groups must be sought deliberately.

15Methods

How it is studied, and what the methods cannot say.

  1. Decision analysis under uncertaintyOption appraisal for a policy instrument · Adaptive pathways for public planningApplied here
  2. Policy, institutional and decision scienceMandate mapping for a cross-sector risk · Review of regulatory impact assessmentsApplied here
  3. Game theory and mechanism designStability of a transboundary agreement · Design of a regional risk poolApplied here
  4. Causal inference and impact evaluationStaggered adoption of a reform · Eligibility thresholds in programmesApplied here
16Questions

Questions and answers.

What is the pacing problem?
The gap between the speed of technological change and the speed of law-making. Governments address it through principle-based rules, delegated standards, sandboxes and sunset or review clauses rather than any single instrument.
What is a regulatory sandbox?
A scheme in which a regulator lets firms test products under supervision with defined safeguards, time limits and exit rules. Its public value depends on transparency and on lessons feeding back into the rules.
Does Policy Nexus assess AI systems or products?
No. It compares governance arrangements. Conformity assessment, authorisation and enforcement belong to designated authorities and notified bodies.
Does regulation slow innovation?
It can, but well-designed rules can also build trust and markets. The effect depends on design, and evidence differs across technologies and settings.
Does Policy Nexus advise technology firms?
No. It analyses public policy and convenes dialogue. It does not lobby for or advise any firm.
ReportsContribute

Contribute evidence from this page.

Reports is the Consortium's quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.

Global Risks ForumPolicy NexusEvidence BriefPortfolio and Readiness
Policy Nexus

Bring a governance question to the Forum.

Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.

The Global Risks Forum

Convening · leadership · urgency

Not for profit

Our articles, maps and twins are free to read and free to republish. Readers and partners keep it that way.

Partner with us

Who funds us

GRF is a not-for-profit institution. To ask who funds a piece of work, use the funding questions form.

Independence

Editors and the expert reviewers named on each article decide what we publish. Funders and partners do not review or approve articles before publication.

Licence

Articles: CC BY 4.0. Figures, maps, twins and data: CC BY 4.0. Other uses: ask through the permissions form.