AI regulation: Why, how, when?