Really glad you brought up FINRA, as I think it's the model that will ultimately work best for AI regulation. Despite their protestations, FINRA is almost a "quasi-governmental" organization at this point. I think of it as the SEC being ultimately in charge, but FINRA is responsible for the nitty-gritty, technical details of the regulations.
I think with AI, you'll need an industry body because they'll have the needed AI knowledge and expertise about the technology itself, but ultimately a government oversight body carries the legal force of the state.
This is the only good take. Obviously you need the expertise to write effective regulation that limits harm and externalities while still allowing important technical development. But that authority should come from the state, and nothing near anything run by VCs or big tech firms. Otherwise you wind up in regimes like the one we're in now where we still don't have comprehensive privacy policy regulating companies like Google and Meta.
I think with AI, you'll need an industry body because they'll have the needed AI knowledge and expertise about the technology itself, but ultimately a government oversight body carries the legal force of the state.