The regulator plans safeguards on AI disclosures, accountability and decision-making; cybersecurity framework also under review