704 matches
United NationsCalls on States to respect and protect the right to privacy in the digital age, including in the context of surveillance, data collection and the design, use and governance of artificial intelligence.
ChileOverhauls Chile's personal data protection regime by amending Law 19.628, adding data subject rights such as portability, and creating an independent Personal Data Protection Agency.
European UnionReplaces the 1985 product liability rules and extends no-fault liability for defective products to software, including AI systems, digital manufacturing files and related digital services.
United NationsFollows up resolution 78/241 by deciding to convene open informal consultations in New York in 2025 on lethal autonomous weapons systems, complementing the work of the Group of Governmental Experts under the Convention on Certain Conventional Weapons.
European UnionCreates a legal presumption of employment for people working through digital labour platforms and sets the first EU rules on algorithmic management, including human oversight of automated decisions and limits on processing workers' personal data.
North CarolinaUpdates sexual exploitation of minor laws to cover realistic visual depictions created or modified with algorithms or artificial intelligence, and revises related sex crime provisions.
European UnionSets the technical and methodological cybersecurity risk management requirements under NIS2 for digital infrastructure and digital service providers, such as cloud, data centre and managed security providers, and defines when their incidents count as significant.
PennsylvaniaMakes AI-generated and digitally altered sexual images of children child sexual abuse material and extends the unlawful dissemination of intimate images offense to deepfakes.
BotswanaBotswana's updated data protection law governing the processing of personal data and the rights of data subjects.
United NationsWTSA-24 resolution directing the ITU Telecommunication Standardization Sector to carry out standardization work on AI technologies in support of telecommunications and ICTs.
IndonesiaSets rules on personal data types, data subject rights, processing, controller and processor obligations, cross-border transfers, administrative sanctions and a supervisory institution in Indonesia.
South KoreaAmends the Act on Special Cases Concerning the Punishment of Sexual Crimes to criminalize possessing, buying, storing or viewing sexually explicit deepfakes and to raise the maximum penalty for creating or distributing them to seven years in prison.
United NationsHuman Rights Council resolution affirming that the same rights people have offline must also be protected online, in particular freedom of expression.
DelawareMakes it a crime to distribute a deceptive deepfake of a candidate or party within 90 days of an election unless it carries a disclosure.
DelawareExtends Delaware's civil and criminal remedies for unauthorized intimate images to deepfakes depicting people nude or in sexual conduct.
CaliforniaRequires large online platforms to block or label materially deceptive AI-generated or altered content about candidates and election officials during set periods around elections.
United States (federal)Exempts certain CHIPS Act funded semiconductor manufacturing projects from National Environmental Policy Act review.
MontanaCreates a comprehensive consumer data privacy law giving Montana residents rights to access, correct, delete and opt out of the sale and targeted advertising use of their personal data.
CaliforniaExpands state child sexual abuse material crimes to cover matter that is digitally altered or generated by artificial intelligence.
CaliforniaRequires state agencies to assess risks of generative AI use and to disclose when communications with the public about government services are generated by AI.
CaliforniaRequires developers of generative AI systems released since January 1, 2022 to post documentation on their websites summarizing the data used to train them, by January 1, 2026.
CaliforniaClarifies that personal information under the CCPA can exist in various formats, including artificial intelligence systems capable of outputting personal information.
CaliforniaAdds neural data, meaning information generated by measuring nervous system activity, to the CCPA definition of sensitive personal information.
CaliforniaRequires health facilities, clinics and physician offices that use generative AI for patient clinical communications to include a disclaimer and instructions for reaching a human provider.
CaliforniaRequires health plans and insurers that use AI, algorithms or other software for utilization review to meet specified requirements, including leaving medical necessity decisions to licensed health care professionals.
CaliforniaEstablishes a uniform definition of artificial intelligence across California statutes.
CanadaQuebec law modernizing public and private sector privacy rules in phases, adding privacy governance duties, privacy impact assessments, consent and transparency requirements and a data portability right.
CaliforniaMakes it a crime to intentionally create and distribute realistic computer-generated or digitally altered intimate images of an identifiable person that cause serious emotional distress.
CaliforniaRequires social media platforms to give California users a way to report sexually explicit digital identity theft and to temporarily block reported content while it is reviewed.
CaliforniaMakes contract terms allowing a digital replica of a performer's voice or likeness in new performances unenforceable when specified protections, such as a reasonably specific description of uses and representation, are missing.
CaliforniaMakes a person who produces or distributes a digital replica of a deceased personality's voice or likeness in audiovisual works or sound recordings without prior consent liable for at least $10,000 or actual damages.
CaliforniaRequires committees that run political ads with AI-generated or substantially altered content to disclose that the ad was generated or altered using artificial intelligence.
Saudi ArabiaSaudi Arabia's comprehensive personal data protection law, supervised by SDAIA, governing processing and cross-border transfer of personal data with fines of up to SAR 5 million.
ZimbabweSets Zimbabwe's rules on personal data protection and cybercrime, with 2024 regulations on licensing data controllers and appointing data protection officers.
UtahRequires social media companies to use age assurance and apply default privacy and design protections to accounts of Utah minors.
SingaporeAmends Singapore's parliamentary and presidential election laws to prohibit publishing digitally generated or manipulated online election advertising that realistically depicts a candidate saying or doing something they did not.
European UnionCouncil decision authorising the signing, on behalf of the European Union, of the Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law.
AustraliaCreates Commonwealth offences for transmitting sexual material depicting adults without consent, including material created or altered with AI or other technology.
MalaysiaEstablishes a National Cyber Security Committee, sets duties for national critical information infrastructure entities including incident reporting, and licenses cyber security service providers.
IllinoisAmends the Illinois Human Rights Act to bar employers from using AI that has a discriminatory effect in employment decisions, including using zip codes as a proxy for protected classes, and to require notice to employees.
Sets a continental framework for African Union member states to develop and govern artificial intelligence in support of Agenda 2063 and the Sustainable Development Goals.
IllinoisExpands child pornography offenses to cover sexually explicit images of children created or altered with AI.
IllinoisMakes contract terms allowing the creation of a digital replica of a performer's voice or likeness unenforceable unless the use is reasonably described and the person was represented.
IllinoisAmends the Right of Publicity Act to cover unauthorized digital replicas of a person's identity created with AI and to create liability for distributing them.
IllinoisAmends BIPA so that repeated collection of the same person's biometric data by the same method counts as a single violation for damages, and allows electronic signatures for consent.
New HampshireRequires a disclosure when political advertising uses deceptive synthetic media created with artificial intelligence.
MinnesotaElections omnibus that broadened the election deep fake crime to cover the period before nominating conventions and after absentee voting begins, lowered the knowledge standard to reckless disregard, and made convicted candidates forfeit nomination or office.
BrazilFour-year national AI plan, titled IA para o Bem de Todos, organised in five axes with about R$ 23 billion in planned investment for AI infrastructure including supercomputing, skills, public services, business innovation and regulation.
New JerseyEstablishes the Next New Jersey Program, under which the Economic Development Authority awards tax credits to eligible businesses making artificial intelligence investments in the state.
EthiopiaEthiopia's first comprehensive data protection law, setting rules for collecting and processing personal data, data subject rights, and a supervisory authority.
Legislationsby Glyph