704 matches
TexasBars digital asset service providers from commingling customer funds with company funds and requires them to make customer holdings information available to customers and auditors and to report annually, with administrative penalties.
TexasRequires virtual currency mining facilities in the ERCOT region with more than 75 megawatts of interruptible load to register with the Public Utility Commission as large flexible loads.
ArkansasRequires large social media companies to verify users' ages through a third party and obtain parental consent for users under 18.
ChinaSets rules for providers offering generative AI services to the public in China, covering training data legality, content controls, labeling, user protection, security assessments and algorithm filing.
United States (federal)Establishes a program to prohibit or require notice of U.S. investments in Chinese semiconductors, quantum technologies and AI systems.
OregonRequires data brokers that collect, sell or license brokered personal data in Oregon to register annually with the Department of Consumer and Business Services.
OregonGives Oregon consumers rights to access, correct, delete and opt out of the sale, targeted advertising and profiling uses of their personal data, and sets duties for controllers and processors enforced by the Attorney General.
United NationsHuman Rights Council resolution asking States and companies to address the human rights risks of new and emerging digital technologies, including artificial intelligence, across their life cycle.
LouisianaRequires social media platforms to verify ages and obtain parental consent before minors under 16 can open accounts, and limits data collection and messaging for minors.
ConnecticutAdds consumer health data protections to the Connecticut Data Privacy Act and creates duties for online services that offer products or features to minors.
TexasProhibits the use of TikTok and other covered social media applications on devices owned or leased by governmental entities.
TexasCreated a state Artificial Intelligence Advisory Council to study and monitor AI systems developed or used by state agencies.
NigeriaEstablishes the Nigeria Data Protection Commission and sets rules for the lawful processing of personal data, data subject rights and cross-border data transfers.
TexasEstablishes the Texas Semiconductor Innovation Consortium to support semiconductor research, manufacturing and workforce development in Texas.
FloridaCreates consumer data privacy rights for large controllers, limits government requests to social media platforms, and restricts how online platforms likely accessed by children use their data.
ConnecticutRequires inventories and impact assessments of AI systems used by state agencies and sets policies for state government use of AI.
TennesseeCreates a comprehensive consumer data privacy law giving Tennessee residents rights to access, correct, delete and opt out of the sale and targeted advertising use of their personal data.
MontanaRequires commercial websites that publish a substantial amount of material harmful to minors to verify users' ages and creates civil liability for failing to do so.
WashingtonLets candidates sue over undisclosed synthetic media in electioneering communications that depict them, unless the media carries a disclosure that it was manipulated.
IndianaCreates a comprehensive consumer data privacy law giving Indiana consumers rights to confirm, correct, delete and obtain their personal data and to opt out of targeted advertising, sales and profiling.
WashingtonRequires consent before collecting or sharing consumer health data, bans selling it without signed authorization, restricts geofencing around health facilities and gives consumers a private right of action.
MississippiMakes commercial entities that publish material harmful to minors on the internet liable if they do not use reasonable age verification.
VietnamSets Viet Nam's first comprehensive personal data protection rules, defining basic and sensitive personal data and prohibiting the sale of personal data.
ArkansasRequires reasonable age verification by websites publishing material harmful to minors and creates liability for failing to do so.
United States (federal)Bars federal agencies from operational use of commercial spyware that poses national security or counterintelligence risks.
IowaCreates a comprehensive consumer data privacy law giving consumers rights to access, delete and obtain their data and to opt out of the sale of personal data and targeted advertising, enforced by the Attorney General.
Protocol to the Budapest Convention on enhanced international cooperation and direct disclosure of electronic evidence, including requests to service providers for subscriber information.
ChinaRegulates deep synthesis technologies such as face swapping and voice cloning, requiring providers to verify users, label synthetic content, obtain consent for editing biometric features and conduct security assessments.
CaliforniaVoter-approved initiative that amended and expanded the CCPA with new consumer privacy protections and created the California Privacy Protection Agency.
KenyaEstablishes the Office of the Data Protection Commissioner and sets rules for processing personal data, data subject rights and transfers of personal data out of Kenya.
TanzaniaSets minimum requirements for collecting and processing personal data by public and private bodies and establishes the Personal Data Protection Commission.
Provides a common framework for African Union member states to harmonise data governance, enable cross-border data flows and build a shared continental data space.
LouisianaMakes commercial publishers and distributors of material harmful to minors liable if they do not use reasonable age verification on their websites.
VermontRequires an inventory of automated decision systems used by Vermont state government and creates an AI council to oversee state AI use and a code of ethics.
ConnecticutCreates a comprehensive consumer data privacy law giving Connecticut residents rights to access, correct, delete and opt out of the sale, targeted advertising and profiling use of their personal data.
UtahEnacts a comprehensive consumer privacy law giving Utah residents rights to access, delete and opt out of the sale and targeted advertising use of their personal data.
United Arab EmiratesSets the UAE federal framework for processing personal data, including consent requirements, data subject rights and rules on cross-border transfers.
United NationsThe first global standard on AI ethics, a voluntary UNESCO recommendation setting values, principles and policy action areas for Member States on the ethical development and use of AI.
ColoradoCreates a comprehensive consumer data privacy law giving Colorado residents rights to access, correct, delete and opt out of the sale and targeted advertising use of their personal data.
South AfricaSets minimum conditions for the lawful processing of personal information by public and private bodies, establishes the Information Regulator and regulates direct marketing, automated decision making and cross-border transfers.
VirginiaCreates a comprehensive consumer data privacy framework giving Virginia residents rights to access, correct, delete and opt out of the sale, targeted advertising and profiling use of their personal data.
GhanaEstablishes Ghana's Cyber Security Authority to regulate cybersecurity activities and promote the development of cybersecurity in the country.
Sets the African Union plan to build an integrated digital single market in Africa by 2030 through digital infrastructure, skills, regulation and cybersecurity.
CaliforniaCreates the California Consumer Privacy Act, giving residents rights to know, delete and opt out of the sale of personal information that businesses collect about them.
TexasMakes it a crime to create and publish a deep fake video within 30 days of an election with intent to injure a candidate or influence the result.
IllinoisRequires employers that use AI to analyze video job interviews to notify applicants, explain how the AI works, obtain consent and limit sharing of the videos.
Amending protocol that modernises the Council of Europe data protection convention (Convention 108), strengthening data subject rights, accountability and oversight of cross-border data flows.
GhanaSets Ghana's rules on the protection of personal data and establishes a Data Protection Commission.
IllinoisRequires private entities to give notice and get written consent before collecting biometric identifiers, sets retention and destruction rules, and gives individuals a private right of action.
VirginiaLaunches a pilot using agentic AI to review state regulations and guidance for redundancies and conflicts with statute, and directs agencies to use AI in future periodic regulatory reviews.
Legislationsby Glyph