AI and data laws

311 moving · 704 enacted

Everything on file

Peru
PeruLey 31814

Peru Law Promoting the Use of Artificial Intelligence

Promotes the use of artificial intelligence for Peru's economic and social development and designates the Presidency of the Council of Ministers' digital government secretariat as the national technical authority on AI.

In force
Peru
PeruDecreto Supremo 115-2025-PCM

Regulation of Peru's AI Law (Law 31814)

Approves the regulation of Law 31814, setting a risk-based framework for AI use with prohibited and high-risk uses and phased compliance deadlines for public entities and private developers and deployers.

In force
European Union
European UnionC-413/23 P (ECLI:EU:C:2025:645)

EDPS v SRB (pseudonymised data)

Court of Justice judgment holding that pseudonymised data are not in all cases and for every person personal data, since pseudonymisation may prevent recipients other than the controller from identifying the data subject, and setting aside the General Court's ruling in T-557/20.

Ruled
China
ChinaGuo Xin Ban Tong Zi (2025) No. 2

Measures for Labeling AI-Generated Synthetic Content

Requires providers of AI generation services and content distribution platforms to add explicit visible labels and implicit metadata labels to AI-generated text, audio, images, video and virtual scenes, and bars removing or forging those labels.

In force
Texas
TexasHB 581

Age verification for AI nudify tools

Requires commercial websites and apps that offer tools to create artificial sexual material using real people's likenesses to verify users are adults, with civil penalties.

In force
Texas
TexasSB 20

AI-generated obscene depictions of children

Creates a criminal offense for possessing, promoting or producing obscene visual material that appears to depict a child, including AI-generated or animated images.

In force
Texas
TexasSB 441

Deepfake sexual media and artificial intimate visual material

Creates civil liability and expands criminal offenses for producing or distributing nonconsensual sexually explicit deepfake media and artificial intimate visual material, with an affirmative defense for AI application providers that prohibit and take steps to prevent such content.

In force
Texas
TexasSB 1188

Electronic health records and AI in health care

Sets electronic health record requirements, including storage of records in the United States, and allows practitioners to use AI for diagnostic recommendations only if they review AI-generated records and disclose the use to patients.

In force
Texas
TexasHB 130

Genetic information security

Bars covered facilities and companies from using genome sequencers or software produced by foreign adversaries and from storing Texans' genome sequencing data in foreign adversary countries, with civil penalties and a private right of action.

In force
Texas
TexasSB 1964

Government use of artificial intelligence

Sets rules for state and local government use of AI, including a Department of Information Resources AI code of ethics and minimum standards, inventories of agency AI systems, and reviews of heightened-scrutiny AI systems used in consequential decisions.

In force
Texas
TexasHB 150

Texas Cyber Command

Establishes the Texas Cyber Command, with a facility in San Antonio, to prevent and respond to cybersecurity incidents, and transfers state cybersecurity duties from the Department of Information Resources to it.

In force
Texas
TexasSB 1343

Data broker notice requirements

Updates the notice that data brokers must post on their websites and include with their Texas registration statements.

In force
Texas
TexasSB 2121

Data broker regulation amendments

Broadens the definition of data broker to any business that collects, processes or transfers personal data it did not collect directly from the individual, removing the principal-revenue test from the 2023 law.

In force
China
ChinaGuo Fa (2025) No. 11

Opinions on Deepening the AI Plus Action

Sets China's national plan to integrate AI across science, industry, consumption, public services, governance and international cooperation, targeting over 70 percent adoption of intelligent terminals and agents by 2027 and over 90 percent by 2030.

Adopted
Brazil
BrazilResolucao CD/ANPD No. 19/2024

ANPD International Data Transfer Regulation

Sets rules under the LGPD for international transfers of personal data and approves standard contractual clauses that controllers using contractual clauses must adopt.

In force
Israel
IsraelPrivacy Protection Law (Amendment No. 13), 5784-2024

Israel Privacy Protection Law Amendment No. 13

Comprehensively amends Israel's Privacy Protection Law, updating core definitions, narrowing database registration duties, requiring privacy officers for certain bodies and giving the Privacy Protection Authority administrative enforcement powers including financial sanctions.

In force
Mississippi

Walker Montgomery Protecting Children Online Act

Requires digital service providers to register users' ages, obtain parental consent for minors, limit collection of minors' data and mitigate harms to minors, and adds morphed images of children to the child exploitation crime.

In force
United States (federal)

NetChoice, LLC v. Fitch

The Supreme Court denied NetChoice's application to vacate a Fifth Circuit stay, allowing Mississippi's social media age verification law to be enforced while litigation continues.

Ruled
European Union
European UnionRegulation (EU) 2024/1083

European Media Freedom Act

Sets common rules to protect media pluralism and editorial independence, including safeguards against spyware use on journalists, transparency of media ownership and state advertising, and treatment of media content by very large online platforms.

In force
European Union

General-Purpose AI Code of Practice

Voluntary code drawn up by independent experts that gives general-purpose AI model providers a way to show compliance with AI Act transparency, copyright and safety and security obligations.

Adopted
Minnesota
MinnesotaHF 4757

Minnesota Consumer Data Privacy Act (2024 commerce omnibus)

Omnibus commerce and cannabis bill that enacted the Minnesota Consumer Data Privacy Act (Minn. Stat. chapter 325O), giving consumers rights to access, correct, delete and port their personal data, opt out of targeted advertising, sale and profiling, and question the result of significant profiling decisions, enforced by the attorney general.

In force