Towards regulation of AI systems