AI and data laws

311 moving · 704 enacted

Everything on file

Mississippi

Cloud Center of Excellence

Establishes a Cloud Center of Excellence in the Department of Information Technology Services to manage phased cloud adoption, security and governance across state agencies.

In force
Montana
MontanaSB 212

Montana Right to Compute Act

Limits government restrictions on private ownership and use of computational resources and requires deployers of critical AI systems controlling critical infrastructure to adopt a risk management policy and shutdown capability.

In force
Washington
WashingtonHB 1205

Forged digital likeness crime

Makes it a crime to knowingly distribute a forged digital likeness of a real person with intent to defraud, harass, threaten or intimidate.

In force
Oklahoma
OklahomaHB 1203

Strategic Bitcoin Reserve Act

Would let the State Treasurer and state retirement funds invest a share of public funds in bitcoin and other digital assets.

Failed
European Union
European UnionCOM(2025) 165

AI Continent Action Plan

Commission communication setting out actions to make the EU a leading AI continent, covering computing infrastructure such as AI factories and gigafactories, data, skills, AI uptake and simpler implementation of the AI Act.

Adopted
United States (federal)

NO FAKES Act of 2025

Would create a federal right protecting individuals' voice and visual likeness from unauthorized AI generated digital replicas.

Introduced
Rwanda
Rwandaunverified

Africa Declaration on Artificial Intelligence

Declaration adopted at the Global AI Summit on Africa setting a shared African vision to use AI for economic competitiveness and to promote ethical, trustworthy and inclusive AI governance.

Adopted
United Nations
United NationsA/HRC/RES/58/6

Neurotechnology and human rights

Asks the Human Rights Council Advisory Committee to draft recommended guidelines on applying the existing human rights framework to the design, development and use of neurotechnologies, for presentation at the Council's 64th session.

Adopted
South Dakota

Deepfakes to influence an election

Makes it a misdemeanor to distribute a deepfake of a candidate with intent to injure the candidate within a set period before an election unless it carries a disclosure.

In force
European Union
European UnionCommission Implementing Regulation (EU) 2025/454

AI Act scientific panel implementing regulation

Sets the rules for establishing and operating the AI Act scientific panel of independent experts that advises the AI Office, including on systemic risks from general-purpose AI models.

In force
Utah
UtahHB 418

Digital Choice Act (Data Sharing Amendments)

Requires social media platforms to let Utah users export their data and to support interoperability so users can move their content and connections to other services.

In force
European Union
European UnionRegulation (EU) 2025/327

European Health Data Space Regulation

Gives people control over and cross-border access to their electronic health data and sets a framework for the secondary use of health data for research, innovation and policy making.

In force
Kentucky

State government AI governance and election synthetic media

Requires the Commonwealth Office of Technology to set AI policy standards and creates an Artificial Intelligence Governance Committee for state agency AI use, and creates a cause of action over undisclosed synthetic media in electioneering communications.

In force
Kentucky
KentuckyHB 701

Blockchain digital assets

Protects individuals' use of digital assets and self-custody wallets, sets rules for running blockchain nodes and digital asset mining, and exempts certain blockchain activities from money transmitter and securities rules.

In force
Turkey
TurkeyLaw No. 7545

Cybersecurity Law (Siber Guvenlik Kanunu)

Establishes the Cybersecurity Directorate as the national authority for protecting cyberspace and critical infrastructure, with powers over audits, incident response, security standards and certification of cybersecurity products and professionals.

In force
United States (federal)

Thaler v. Perlmutter

The D.C. Circuit held that the Copyright Act requires human authorship and upheld the Copyright Office's refusal to register a work created autonomously by an AI system.

Ruled
Kentucky
KentuckyHB 473

Consumer data privacy amendments

Amends the Kentucky Consumer Data Protection Act to exempt certain HIPAA-covered health care information and limited data sets and to clarify data protection assessments for profiling.

In force