AI and data laws

311 moving · 704 enacted

Everything on file

United States (federal)

CREATE AI Act of 2023

Would establish the National Artificial Intelligence Research Resource to give researchers and students access to computing power, data and AI tools.

In committee
Malaysia
MalaysiaAct 854

Cyber Security Act 2024

Establishes a National Cyber Security Committee, sets duties for national critical information infrastructure entities including incident reporting, and licenses cyber security service providers.

In force
Illinois
IllinoisHB 3773

AI in Employment (Illinois Human Rights Act amendment)

Amends the Illinois Human Rights Act to bar employers from using AI that has a discriminatory effect in employment decisions, including using zip codes as a proxy for protected classes, and to require notice to employees.

In force
Illinois
IllinoisHB 4762

Digital Voice and Likeness Protection Act

Makes contract terms allowing the creation of a digital replica of a performer's voice or likeness unenforceable unless the use is reasonably described and the person was represented.

In force
Illinois
IllinoisSB 2979

BIPA Amendment (Procedure and Damages)

Amends BIPA so that repeated collection of the same person's biometric data by the same method counts as a single violation for damages, and allows electronic signatures for consent.

In force
Minnesota
MinnesotaHF 4772

2024 elections omnibus (deep fake election crime amendments)

Elections omnibus that broadened the election deep fake crime to cover the period before nominating conventions and after absentee voting begins, lowered the knowledge standard to reckless disregard, and made convicted candidates forfeit nomination or office.

In force
Brazil
BrazilPBIA 2024-2028

Brazilian Artificial Intelligence Plan (PBIA) 2024-2028

Four-year national AI plan, titled IA para o Bem de Todos, organised in five axes with about R$ 23 billion in planned investment for AI infrastructure including supercomputing, skills, public services, business innovation and regulation.

Adopted
United States (federal)

DEFIANCE Act of 2024

Would create a federal civil remedy for people depicted in sexually explicit deepfakes made or shared without consent.

Passed one chamber
Ethiopia
EthiopiaProclamation No. 1321/2024

Personal Data Protection Proclamation

Ethiopia's first comprehensive data protection law, setting rules for collecting and processing personal data, data subject rights, and a supervisory authority.

In force
European Union
European UnionCouncil Regulation (EU) 2024/1732

EuroHPC AI Factories amendment

Amends the EuroHPC Joint Undertaking regulation to add an AI Factories pillar giving start-ups and innovators access to AI-optimised supercomputers.

In force
United States (federal)
United States (federal)No. 22-277 (with No. 22-555, NetChoice v. Paxton)

Moody v. NetChoice, LLC

The Supreme Court vacated appellate rulings on Florida and Texas laws regulating large social media platforms' content moderation and remanded the facial First Amendment challenges for proper analysis.

Ruled
Texas
TexasHB 4

Texas Data Privacy and Security Act (TDPSA)

Comprehensive consumer data privacy law giving Texans rights to access, correct, delete and opt out of the sale, targeted advertising and profiling uses of their personal data, enforced by the attorney general.

In force
United States (federal)

Murthy v. Missouri

The Supreme Court held that the states and social media users lacked standing to seek an injunction against federal officials over alleged pressure on platforms to moderate content.

Ruled
United States (federal)

American Privacy Rights Act of 2024

Would create a comprehensive federal consumer data privacy standard with data minimization rules, rights to access, correct and delete data, and preemption of many state privacy laws.

Introduced
New York
New YorkS 7695-B / A 8149-A

New York Child Data Protection Act

Bars online operators from collecting, using or selling personal data of users under 18 unless strictly necessary or with informed consent.

In force