AI and data laws

311 moving · 704 enacted

Everything on file

New Jersey

Artificial Intelligence Task Force

Establishes the New Jersey Artificial Intelligence Task Force to study emerging AI technologies and issue findings on their potential impacts and recommendations for government use.

In force
Delaware
DelawareHB 154

Delaware Personal Data Privacy Act

Creates a comprehensive consumer data privacy law giving Delaware residents rights over personal data and imposing duties on businesses that process it.

In force
Texas
TexasSB 2105

Texas data broker law

Requires data brokers to register annually with the Secretary of State, post consumer notices and maintain a data security program, with civil penalties.

In force
Texas
TexasHB 1666

Digital asset service provider commingling

Bars digital asset service providers from commingling customer funds with company funds and requires them to make customer holdings information available to customers and auditors and to report annually, with administrative penalties.

In force
Texas
TexasSB 1929

Registration of crypto mining large loads

Requires virtual currency mining facilities in the ERCOT region with more than 75 megawatts of interruptible load to register with the Public Utility Commission as large flexible loads.

In force
Arkansas
ArkansasSB 396

Social Media Safety Act

Requires large social media companies to verify users' ages through a third party and obtain parental consent for users under 18.

In force
Oregon
OregonHB 2052

Data broker registration

Requires data brokers that collect, sell or license brokered personal data in Oregon to register annually with the Department of Consumer and Business Services.

In force
Oregon
OregonSB 619

Oregon Consumer Privacy Act

Gives Oregon consumers rights to access, correct, delete and opt out of the sale, targeted advertising and profiling uses of their personal data, and sets duties for controllers and processors enforced by the Attorney General.

In force
Nigeria
NigeriaNigeria Data Protection Act, 2023

Nigeria Data Protection Act 2023

Establishes the Nigeria Data Protection Commission and sets rules for the lawful processing of personal data, data subject rights and cross-border data transfers.

In force
Tennessee
TennesseeHB 1181 / SB 73

Tennessee Information Protection Act

Creates a comprehensive consumer data privacy law giving Tennessee residents rights to access, correct, delete and opt out of the sale and targeted advertising use of their personal data.

In force
Washington
WashingtonSB 5152

Synthetic media in campaigns

Lets candidates sue over undisclosed synthetic media in electioneering communications that depict them, unless the media carries a disclosure that it was manipulated.

In force
Washington
WashingtonHB 1155

My Health My Data Act

Requires consent before collecting or sharing consumer health data, bans selling it without signed authorization, restricts geofencing around health facilities and gives consumers a private right of action.

In force
Vietnam
VietnamDecree 13/2023/ND-CPunverified

Decree on Personal Data Protection

Sets Viet Nam's first comprehensive personal data protection rules, defining basic and sensitive personal data and prohibiting the sale of personal data.

In force
Iowa
IowaSF 262

Iowa consumer data protection act

Creates a comprehensive consumer data privacy law giving consumers rights to access, delete and obtain their data and to opt out of the sale of personal data and targeted advertising, enforced by the Attorney General.

In force
United States (federal)

Facial Recognition and Biometric Technology Moratorium Act of 2023

A House bill in Congress, now in committee. Latest step: Referred to the Committee on the Judiciary, and in addition to the Committee on Oversight and Accountability, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.

In committee
Kenya
KenyaAct No. 24 of 2019

Data Protection Act, 2019

Establishes the Office of the Data Protection Commissioner and sets rules for processing personal data, data subject rights and transfers of personal data out of Kenya.

In force
Tanzania
TanzaniaAct No. 11 of 2022unverified

Personal Data Protection Act, 2022

Sets minimum requirements for collecting and processing personal data by public and private bodies and establishes the Personal Data Protection Commission.

In force
African Union
African Unionunverified

AU Data Policy Framework

Provides a common framework for African Union member states to harmonise data governance, enable cross-border data flows and build a shared continental data space.

Adopted