AI and data laws

311 moving · 704 enacted

Everything on file

Indiana
IndianaSB 11

Minor access and use of social media

Would have required social media operators to obtain verifiable parental consent before users under 16 could use their platforms, with Attorney General enforcement.

Failed
New Mexico

Artificial Intelligence Act

Would have enacted the Artificial Intelligence Act to regulate the development and deployment of artificial intelligence systems.

Failed
United States (federal)

Crypto ATM Fraud Prevention Act of 2025

A Senate bill in Congress, now in committee. Latest step: Read twice and referred to the Committee on Banking, Housing, and Urban Affairs. (Sponsor introductory remarks on measure: CR S1347-1348; text: CR S1348-1350)

In committee
Colombia
ColombiaCONPES 4144

Colombia National Artificial Intelligence Policy

Sets Colombia's national AI policy with 106 actions to 2030 across ethics and governance, data and infrastructure, research, skills and adoption, with an estimated investment of about COP 479,273 million.

Adopted
Switzerland

Federal Council approach to AI regulation

Federal Council decision that Switzerland will ratify the Council of Europe AI Convention, amend Swiss law accordingly, and continue sector-specific AI regulation in areas such as health and transport.

Adopted
United States (federal)

Expressing support for blockchain technology and digital assets.

A House resolution in Congress, now in committee. Latest step: Referred to the Committee on Energy and Commerce, and in addition to the Committees on Financial Services, and Agriculture, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.

In committee
European Union
European UnionRegulation (EU) 2025/38

Cyber Solidarity Act

Sets up a European Cybersecurity Alert System of cross-border Cyber Hubs, a Cybersecurity Emergency Mechanism with an EU Cybersecurity Reserve, and a review mechanism for significant incidents.

In force
European Union

Guidelines on prohibited AI practices

Non-binding Commission guidelines with legal explanations and practical examples of the AI practices banned under Article 5 of the AI Act, such as harmful manipulation, social scoring and real-time remote biometric identification.

Adopted
Washington
WashingtonEO 25-05

Data Center Workgroup

Creates a workgroup to study data center energy use, grid impacts, tax incentives and economic benefits and to recommend state policy.

In force
Oklahoma
OklahomaHB 1916

Responsible Deployment of AI Systems Act

Would require deployers of high-risk AI systems to classify, assess and document them and to notify people when such systems influence consequential decisions, and would create an AI council and regulatory sandbox.

Failed
United States (federal)

TikTok Inc. v. Garland

The Supreme Court upheld the Protecting Americans from Foreign Adversary Controlled Applications Act, rejecting TikTok's First Amendment challenge to the divest-or-ban law.

Ruled
New Jersey

New Jersey Data Privacy Act

Creates a comprehensive consumer data privacy law requiring notice of data collection and giving residents rights to access, correct, delete and opt out of the sale, targeted advertising and profiling uses of their personal data.

In force
United Kingdom

AI Opportunities Action Plan

Independent report led by Matt Clifford, adopted by the government, setting out 50 recommendations to expand AI infrastructure, drive AI adoption across the economy and improve public services.

Adopted
Canada
CanadaBill C-27 (44th Parliament, 1st Session)

Digital Charter Implementation Act, 2022 (including AIDA)

Government bill that would have enacted the Consumer Privacy Protection Act, the Personal Information and Data Protection Tribunal Act and the Artificial Intelligence and Data Act; it died when Parliament was prorogued.

Failed
Canada
CanadaBill C-63 (44th Parliament, 1st Session)

Online Harms Act

Government bill that would have enacted the Online Harms Act and amended the Criminal Code and Canadian Human Rights Act to address harmful online content; it died at second reading when Parliament was prorogued.

Failed