The easiest way to regulate the AI industry - and any industry for that matter - is to make the board personally liable for any crimes committed by their product. Not liable in a corporate sense with a fine and a slap on the wrist, when their AI hacks into a water reservoir and causes 500 million of flood damage, but in a 20 years in federal prison sense. Same goes for self driving cars, or any other computer, machinery or combination thereof where humans are placing trust in its safe and legal operation. There should be a corporate negligence law of sorts that says if a company is not following the law, industry best practice, including auditing and implementation of all safeguards, safety and other mitigations then they are exposed to criminal liability.