IndiaSets rules for processing digital personal data, including consent, duties of data fiduciaries, rights of data principals and a Data Protection Board with power to impose penalties.
IndiaImplements the DPDP Act 2023 with rules on notice, consent managers, security safeguards, breach intimation, children's data and the Data Protection Board, phased in over 18 months.
European UnionReplaces the Broadband Cost Reduction Directive with rules to cut the cost and speed up the rollout of gigabit networks, covering permits, access to physical infrastructure and fibre-ready buildings.
TaiwanAmends Taiwan's Personal Data Protection Act to make the new Personal Data Protection Commission the competent authority, require breach notification and reporting, mandate data protection officers in public agencies and create an inspection regime for government bodies.
United NationsA UNESCO standard-setting recommendation, mandated by the 42nd General Conference in November 2023, that gives Member States shared values, principles and concrete policy actions for the ethical development and use of neurotechnology.
United States (federal)Would require companies seeking licenses to export advanced AI chips to countries of concern to certify that U.S. buyers get priority access.
EgyptImplementing rules for Law No. 151 of 2020 that set out licensing and permit procedures, controls and standards for processing personal data, and breach notification to the Personal Data Protection Center within 72 hours.
EgyptEgypt's comprehensive data protection law regulating electronic processing of personal data, requiring licences for controllers and processors, and creating the Personal Data Protection Center as regulator.
European UnionSets the technical conditions and procedures under which very large online platforms and search engines must share data with vetted researchers under Article 40 of the Digital Services Act.
CaliforniaRequires large generative AI providers to offer a free AI detection tool and to embed disclosures in AI-generated image, video and audio content.
CaliforniaRequires companion chatbot operators to disclose that the chatbot is AI, maintain protocols against suicide and self-harm content, add safeguards for known minors and report annually to the Office of Suicide Prevention.
CaliforniaRequires operating system providers to collect a user's age at account setup and send an age bracket signal to app stores and developers, beginning January 1, 2027.
CaliforniaRequires social media platforms to show users a black box warning when they first access the platform each day, after 3 hours of use and hourly after that, beginning January 1, 2027.
CaliforniaBars a defendant who developed, modified or used artificial intelligence from arguing that the AI autonomously caused the harm to the plaintiff.
CaliforniaDelays the California AI Transparency Act to August 2, 2026 and adds content provenance duties for large online platforms from 2027 and capture device makers from 2028.
CaliforniaExpands civil liability for digitized sexually explicit material, including material depicting minors, and for services that knowingly enable deepfake pornography services to operate.
CaliforniaAuthorizes the Public Utilities Commission to assess whether utility costs from new data center loads shift costs to other customers and to report its findings to the Legislature.
CaliforniaMakes bans on falsely implying a health care license enforceable against developers and deployers of AI systems that use such terms, letters or phrases.
ItalyItaly's national framework law on artificial intelligence, setting human-centred principles for the research, development and use of AI systems and delegating the government to adopt implementing legislative decrees.
European UnionRequires political advertisements to be labelled with sponsor and funding information, creates an EU repository of online political ads, and restricts targeting and ad delivery techniques that use personal data.
European UnionCommission guidelines under Article 28 of the Digital Services Act setting out measures online platforms accessible to minors should take to ensure a high level of privacy, safety and security, including age assurance methods and protections against grooming, harmful content and exploitative commercial practices.
CaliforniaRequires police reports written fully or partly with AI to include a disclosure, requires the first AI draft to be retained and requires agencies to keep an audit trail.
CaliforniaRequires web browsers to include a consumer setting that sends an opt-out preference signal to businesses, beginning January 1, 2027.
European UnionCommission communication to speed up AI adoption in industry and the public sector through sectoral flagships, SME support, an Apply AI Alliance and an AI Observatory.
CaliforniaRequires data brokers registering with the California Privacy Protection Agency to disclose more of the personal information they collect, such as government ID numbers, login information and citizenship data.
United States (federal)Directs use of artificial intelligence and federal data to accelerate pediatric cancer research.
European UnionProposed directive adapting non-contractual civil liability rules to AI, including disclosure of evidence and a rebuttable presumption of causality, which the Commission withdrew.
CaliforniaMakes it unlawful under the Cartwright Act to use or distribute a common pricing algorithm as part of a conspiracy to restrain trade or to coerce others into adopting its recommended prices.
MontanaMakes it a crime to create or distribute real or digitally fabricated sexually explicit images of a person without consent.
OhioWould declare AI systems nonsentient and prohibit granting them legal personhood.
MontanaRegulates deepfakes of candidates and parties in election and electioneering communications by requiring a disclosure and allowing injunctive relief and penalties.
MontanaLimits state and local government use of AI systems, prohibits certain uses such as cognitive behavioral manipulation, and requires disclosure and human review of AI-generated decisions.
MontanaAmends the Montana Consumer Data Privacy Act by lowering applicability thresholds, adding protections for minors' data and expanding attorney general enforcement.
MontanaAmends Montana privacy law to cover neurotechnology data alongside biometric and genetic data, requiring consent and limiting disclosure.
NevadaRequires state and local emergency management plans to ensure final emergency response and resource decisions are not made by artificial intelligence and bars utilities from shutting off service based solely on AI.
NevadaExpands prohibitions relating to pornography involving minors and revises the penalties for those crimes.
OhioState operating budget that requires the Department of Education and Workforce to develop a model policy on AI use in schools and requires websites offering material harmful to juveniles to verify users' ages.
United States (federal)Approves a framework for a qualified divestiture of TikTok's U.S. operations under the 2024 law and further delays enforcement.
CaliforniaRequires large frontier AI developers to publish frontier AI frameworks and transparency reports, report critical safety incidents to the state, protects whistleblowers and sets up a consortium to plan a public computing cluster called CalCompute.
United States (federal)Would create a federal product liability cause of action for harms caused by AI systems.
United States (federal)Further extended the TikTok enforcement delay.
CaliforniaProhibits knowingly distributing materially deceptive AI-generated or digitally altered election content about candidates, officials and election workers within set periods around elections.
United States (federal)A House bill in Congress, now in committee. Latest step: Referred to the House Committee on Energy and Commerce.
United States (federal)House subcommittee hearing on whether AI should be governed by a national framework or by state laws such as California's.
United States (federal)A Senate bill in Congress, now in committee. Latest step: Read twice and referred to the Committee on Agriculture, Nutrition, and Forestry.
District of ColumbiaCampaign finance overhaul bill that Public Citizen tracks for its provisions on deepfakes in political communications.
CanadaOmnibus government bill on border security and related security measures, including new search and information access powers, which remains at second reading while related border measures were enacted separately in Bill C-12.
United States (federal)Senate subcommittee hearing on harms to children and teens from AI companion chatbots.
United States (federal)Senate subcommittee hearing with OSTP Director Michael Kratsios on the White House AI Action Plan.
United States (federal)Would direct OSTP to run a federal regulatory sandbox letting AI developers seek temporary waivers or changes to federal rules.
Legislationsby Glyph