AI Governance: Frameworks and Legal Risks