One-size-fits-all rules won’t properly accommodate the characteristics of every industry making use of AI and its impact on individuals, but we can define an appropriate risk-based AI governance policy framework based on three pillars: accountability, transparency and fairness.