AI and data laws

311 moving · 704 enacted

Everything on file

704 matches

Kentucky

Kentucky Consumer Data Protection Act

Creates a comprehensive consumer data privacy law giving consumers rights to access, correct, delete and obtain their data and to opt out of targeted advertising, sales and profiling, enforced by the Attorney General.

In force
Nevada
NevadaSB 370

Consumer health data privacy

Requires entities that collect consumer health data to maintain a privacy policy and bars collecting or sharing that data without affirmative consent, with limits on geofencing around health facilities.

In force
Oregon
OregonSB 1571

Disclosure of AI in campaign communications

Requires campaign communications that use synthetic media created with artificial intelligence to carry a disclosure, with civil penalties enforced through the Secretary of State.

In force
Oregon
OregonHB 4153

Task Force on Artificial Intelligence

Creates a legislative Task Force on Artificial Intelligence to recommend definitions of AI terms for use in Oregon law, with a report due December 1, 2024.

In force
Tennessee
TennesseeHB 2091 / SB 2096

Ensuring Likeness, Voice, and Image Security (ELVIS) Act

Adds voice to the personal rights protected under Tennessee's right of publicity law and expands protections against unauthorized commercial use of a person's name, voice, likeness or image, including AI-generated imitations.

In force
Jordan
JordanLaw No. 24 of 2023unverified

Personal Data Protection Law

Jordan's first comprehensive data protection law, requiring consent for most processing, granting access, correction and erasure rights, and creating a Personal Data Protection Board under the Ministry of Digital Economy and Entrepreneurship.

In force
Indiana
IndianaSB 150

Artificial intelligence and cybersecurity

Creates an artificial intelligence task force to study state agency use of AI and sets technology resource and cybersecurity policy requirements for public entities.

In force
Utah
UtahHB 464

Social Media Amendments

Creates a private right of action against social media companies for mental health harms to minors caused by excessive use of algorithmically curated platforms.

In force
Brazil
BrazilResolucao TSE 23.732/2024unverified

TSE Resolution 23.732/2024 on AI in electoral propaganda

Amends TSE Resolution 23.610/2019 on electoral propaganda, adding rules on the use of artificial intelligence in campaign content, including labeling of synthetic content and a ban on deepfakes.

In force
African Union

AfCFTA Protocol on Digital Trade

Adds a digital trade protocol to the African Continental Free Trade Area Agreement, setting common rules on digital trade, cross-border data transfers, personal data protection and online consumer protection.

Adopted
Washington
WashingtonEO 24-01

Artificial Intelligence

Directs state agencies to develop guidance, procurement rules and risk assessments for the responsible use of generative AI in state government.

In force
United Nations
United NationsA/RES/78/241

Lethal autonomous weapons systems (2023)

The first General Assembly resolution on lethal autonomous weapons systems, asking the Secretary-General to collect views of States and others on the challenges they raise and to report to the 79th session.

Adopted
Montana
MontanaSB 419

Ban TikTok in Montana

Prohibits TikTok from operating in Montana and bars app stores from offering it to Montana users, with daily penalties for violations.

Enacted
Rwanda
RwandaLaw No 058/2021 of 13/10/2021

Law relating to the protection of personal data and privacy

Sets rules for processing personal data in Rwanda, gives data subjects rights, requires registration of data controllers and processors, and designates the National Cyber Security Authority as supervisory authority.

In force
New Jersey

Artificial Intelligence Task Force

Establishes the New Jersey Artificial Intelligence Task Force to study emerging AI technologies and issue findings on their potential impacts and recommendations for government use.

In force
Delaware
DelawareHB 154

Delaware Personal Data Privacy Act

Creates a comprehensive consumer data privacy law giving Delaware residents rights over personal data and imposing duties on businesses that process it.

In force
Texas
TexasSB 2105

Texas data broker law

Requires data brokers to register annually with the Secretary of State, post consumer notices and maintain a data security program, with civil penalties.

In force