> You can't have regulators and enforcement until you figure out what it means.

This is patently false. To have regulations and regulators, all you need to have is concrete specifications of what outcomes you want to avoid and what exactly to check.

For example, are you using personally identifiable information to train your models? Oh you are? Well, you should not. And you should prove that you aren't by tracking provenance of your training data.

See? That's verifiable, actionable, and enforceable. The things that regulators track.

Also quite important: the role of a regulator is to review what and how to regulate.