7 principles for getting AI regulation right