AI and data laws

311 moving · 704 enacted

Everything on file

704 matches

Rwanda
Rwandaunverified

Africa Declaration on Artificial Intelligence

Declaration adopted at the Global AI Summit on Africa setting a shared African vision to use AI for economic competitiveness and to promote ethical, trustworthy and inclusive AI governance.

Adopted
United Nations
United NationsA/HRC/RES/58/6

Neurotechnology and human rights

Asks the Human Rights Council Advisory Committee to draft recommended guidelines on applying the existing human rights framework to the design, development and use of neurotechnologies, for presentation at the Council's 64th session.

Adopted
South Dakota

Deepfakes to influence an election

Makes it a misdemeanor to distribute a deepfake of a candidate with intent to injure the candidate within a set period before an election unless it carries a disclosure.

In force
European Union
European UnionCommission Implementing Regulation (EU) 2025/454

AI Act scientific panel implementing regulation

Sets the rules for establishing and operating the AI Act scientific panel of independent experts that advises the AI Office, including on systemic risks from general-purpose AI models.

In force
Utah
UtahHB 418

Digital Choice Act (Data Sharing Amendments)

Requires social media platforms to let Utah users export their data and to support interoperability so users can move their content and connections to other services.

In force
European Union
European UnionRegulation (EU) 2025/327

European Health Data Space Regulation

Gives people control over and cross-border access to their electronic health data and sets a framework for the secondary use of health data for research, innovation and policy making.

In force
Kentucky

State government AI governance and election synthetic media

Requires the Commonwealth Office of Technology to set AI policy standards and creates an Artificial Intelligence Governance Committee for state agency AI use, and creates a cause of action over undisclosed synthetic media in electioneering communications.

In force
Kentucky
KentuckyHB 701

Blockchain digital assets

Protects individuals' use of digital assets and self-custody wallets, sets rules for running blockchain nodes and digital asset mining, and exempts certain blockchain activities from money transmitter and securities rules.

In force
Turkey
TurkeyLaw No. 7545

Cybersecurity Law (Siber Guvenlik Kanunu)

Establishes the Cybersecurity Directorate as the national authority for protecting cyberspace and critical infrastructure, with powers over audits, incident response, security standards and certification of cybersecurity products and professionals.

In force
Kentucky
KentuckyHB 473

Consumer data privacy amendments

Amends the Kentucky Consumer Data Protection Act to exempt certain HIPAA-covered health care information and limited data sets and to clarify data protection assessments for profiling.

In force
Colombia
ColombiaCONPES 4144

Colombia National Artificial Intelligence Policy

Sets Colombia's national AI policy with 106 actions to 2030 across ethics and governance, data and infrastructure, research, skills and adoption, with an estimated investment of about COP 479,273 million.

Adopted
Switzerland

Federal Council approach to AI regulation

Federal Council decision that Switzerland will ratify the Council of Europe AI Convention, amend Swiss law accordingly, and continue sector-specific AI regulation in areas such as health and transport.

Adopted
European Union
European UnionRegulation (EU) 2025/38

Cyber Solidarity Act

Sets up a European Cybersecurity Alert System of cross-border Cyber Hubs, a Cybersecurity Emergency Mechanism with an EU Cybersecurity Reserve, and a review mechanism for significant incidents.

In force
European Union

Guidelines on prohibited AI practices

Non-binding Commission guidelines with legal explanations and practical examples of the AI practices banned under Article 5 of the AI Act, such as harmful manipulation, social scoring and real-time remote biometric identification.

Adopted
Washington
WashingtonEO 25-05

Data Center Workgroup

Creates a workgroup to study data center energy use, grid impacts, tax incentives and economic benefits and to recommend state policy.

In force
New Jersey

New Jersey Data Privacy Act

Creates a comprehensive consumer data privacy law requiring notice of data collection and giving residents rights to access, correct, delete and opt out of the sale, targeted advertising and profiling uses of their personal data.

In force
United Kingdom

AI Opportunities Action Plan

Independent report led by Matt Clifford, adopted by the government, setting out 50 recommendations to expand AI infrastructure, drive AI adoption across the economy and improve public services.

Adopted
China
ChinaState Council Order No. 790

Network Data Security Management Regulations

Implements the Cybersecurity Law, Data Security Law and Personal Information Protection Law with detailed rules on personal information handling, important data protection, cross-border data transfers and obligations of large online platforms.

In force
New Hampshire

New Hampshire consumer data privacy law

Creates a comprehensive consumer data privacy law giving residents rights to access, correct, delete and opt out of the sale, targeted advertising and profiling uses of their personal data.

In force