Legislationsby Glyph
VermontVermontH.410
Use and oversight of AI in state government (Act 132 of 2022)
Requires an inventory of automated decision systems used by Vermont state government and creates an AI council to oversee state AI use and a code of ethics.
Everything on file
VermontConnecticutConnecticutSB 6
Connecticut Data Privacy Act (An Act Concerning Personal Data Privacy and Online Monitoring)
Creates a comprehensive consumer data privacy law giving Connecticut residents rights to access, correct, delete and opt out of the sale, targeted advertising and profiling use of their personal data.
UtahUtahSB 227
Utah Consumer Privacy Act
Enacts a comprehensive consumer privacy law giving Utah residents rights to access, delete and opt out of the sale and targeted advertising use of their personal data.
United Arab EmiratesUnited Arab EmiratesFederal Decree-Law No. 45 of 2021
UAE Personal Data Protection Law (PDPL)
Sets the UAE federal framework for processing personal data, including consent requirements, data subject rights and rules on cross-border transfers.
United NationsUnited NationsUNESCO Recommendation on the Ethics of Artificial Intelligen
Recommendation on the Ethics of Artificial Intelligence
The first global standard on AI ethics, a voluntary UNESCO recommendation setting values, principles and policy action areas for Member States on the ethical development and use of AI.
ColoradoColoradoSB 21-190
Colorado Privacy Act (Protect Personal Data Privacy)
Creates a comprehensive consumer data privacy law giving Colorado residents rights to access, correct, delete and opt out of the sale and targeted advertising use of their personal data.
South AfricaSouth AfricaAct 4 of 2013
Protection of Personal Information Act (POPIA)
Sets minimum conditions for the lawful processing of personal information by public and private bodies, establishes the Information Regulator and regulates direct marketing, automated decision making and cross-border transfers.
United States (federal)United States (federal)H.R. 3907
Facial Recognition and Biometric Technology Moratorium Act of 2021
A House bill in Congress, now in committee. Latest step: Referred to the Committee on the Judiciary, and in addition to the Committee on Oversight and Reform, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
United States (federal)United States (federal)S. 2052
Facial Recognition and Biometric Technology Moratorium Act of 2021
A Senate bill in Congress, now in committee. Latest step: Read twice and referred to the Committee on the Judiciary.
United States (federal)United States (federal)H.R. 1610
Rural Broadband Window of Opportunity Act
A House bill in Congress, now in committee. Latest step: Referred to the Subcommittee on Communications and Technology.
VirginiaVirginiaHB 2307 / SB 1392
Virginia Consumer Data Protection Act
Creates a comprehensive consumer data privacy framework giving Virginia residents rights to access, correct, delete and opt out of the sale, targeted advertising and profiling use of their personal data.
GhanaCybersecurity Act, 2020
Establishes Ghana's Cyber Security Authority to regulate cybersecurity activities and promote the development of cybersecurity in the country.
African Unionunverified
Digital Transformation Strategy for Africa (2020-2030)
Sets the African Union plan to build an integrated digital single market in Africa by 2030 through digital infrastructure, skills, regulation and cybersecurity.
CaliforniaCaliforniaAB 375
California Consumer Privacy Act of 2018 (CCPA)
Creates the California Consumer Privacy Act, giving residents rights to know, delete and opt out of the sale of personal information that businesses collect about them.
TexasTexasSB 751
Election deepfake video offense
Makes it a crime to create and publish a deep fake video within 30 days of an election with intent to injure a candidate or influence the result.
IllinoisIllinoisHB 2557
Artificial Intelligence Video Interview Act
Requires employers that use AI to analyze video job interviews to notify applicants, explain how the AI works, obtain consent and limit sharing of the videos.
Protocol amending Convention 108 (Convention 108+)
Amending protocol that modernises the Council of Europe data protection convention (Convention 108), strengthening data subject rights, accountability and oversight of cross-border data flows.
GhanaData Protection Act, 2012
Sets Ghana's rules on the protection of personal data and establishes a Data Protection Commission.
IllinoisIllinoisSB 2400
Biometric Information Privacy Act (BIPA, 740 ILCS 14)
Requires private entities to give notice and get written consent before collecting biometric identifiers, sets retention and destruction rules, and gives individuals a private right of action.
New HampshireAge verification for access to pornographic material
Would have required commercial entities to verify users' ages before allowing access to pornographic material.
VirginiaAgentic AI regulatory review pilot (Executive Order 51)
Launches a pilot using agentic AI to review state regulations and guidance for redundancies and conflicts with statute, and directs agencies to use AI in future periodic regulatory reviews.
EgyptEgyptunverified
Egypt National AI Strategy, Second Edition (2025-2030)
Sets Egypt's roadmap for moving from early adoption to large-scale use of artificial intelligence across government and economic sectors, guided by ethical and human-centred principles.
New HampshireHarmful acts solicited through responsive generative communication
Criminalizes and creates a private right of action for facilitating, encouraging or soliciting certain acts through responsive generative AI communication to a child.
IndiaIndiaunverified
India AI Governance Guidelines
Sets out principles and a six-pillar framework for AI governance in India that relies mainly on existing laws, voluntary measures and new institutions such as an AI Governance Group and the AI Safety Institute.
New HampshireParental consent and age verification for digital application platforms
Would have required app platforms to verify users' ages and obtain parental consent for minors.
RwandaRwandaunverified
Rwanda National AI Policy
Sets Rwanda's policy for using artificial intelligence to drive economic growth and public sector transformation, including trustworthy AI adoption in government and responsible adoption in the private sector.
VirginiaArtificial Intelligence Chatbots Act
Would have barred operators from offering companion chatbots in Virginia unless the chatbots were incapable of specified harmful behaviors.
New MexicoNew MexicoHB 28
Artificial Intelligence Transparency Act
Would have enacted the Artificial Intelligence Transparency Act.
New MexicoNew MexicoHB 174
Chatbot Safety Act
Would have enacted the Chatbot Safety Act to regulate AI chatbots.
New MexicoNew MexicoHB 22
Distribution of sensitive and deepfake images
Would have addressed the distribution of sensitive images and deepfake images of people without consent.
New HampshireUse of AI to provide services requiring a professional license
Would have regulated the use of artificial intelligence to provide services that require a professional license.
New HampshireUse of information technology and AI systems by state agencies
Would have revised rules on state agency use of information technology and artificial intelligence systems.