AI and data laws

311 moving · 704 enacted

Everything on file

European Union
European UnionCOM(2026) 504 (2026/0139(COD))

Chips Act 2.0

Proposed regulation that would replace the 2023 Chips Act with a Chips for Europe Initiative 2.0, support for first-of-a-kind and strategic semiconductor projects, and stronger coordination to prevent supply dependencies.

Proposed
United States (federal)

Stop Rogue AI Act

A House bill in Congress, now in committee. Latest step: Referred to the Committee on Science, Space, and Technology, and in addition to the Committee on Oversight and Government Reform, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.

In committee
European Union
European UnionRegulation (EU) 2023/2854

Data Act

Sets rules on who can access and use data generated by connected products and related services, on business-to-government data sharing in exceptional need, and on switching between cloud and data processing services.

In force
European Union
European UnionRegulation (EU) 2024/2847

Cyber Resilience Act

Sets mandatory cybersecurity requirements for hardware and software products with digital elements sold in the EU, including vulnerability handling and incident reporting duties for manufacturers.

In force
South Korea
South KoreaAct No. 21445

Personal Information Protection Act Amendment

Amends PIPA after large data breaches to make company heads ultimately responsible for data protection, require notice of possible breaches, mandate privacy certification for large handlers, and allow fines of up to 10 percent of total revenue for repeated or massive violations.

In force
California
CaliforniaSB 1119

Companion Chatbots: Children's Safety (Adam's Law)

Requires companion chatbot operators, beginning July 1, 2027, to perform and document child safety risk assessments and meet other child safety duties before offering new or substantially modified chatbots in California.

Enacted
California
CaliforniaAB 2246

Online Services Accessed by Children

Repeals the enjoined Age-Appropriate Design Code Act and replaces it with similar duties requiring online services likely to be accessed by children to take reasonable steps to prevent specified risks of harm.

Enacted
United States (federal)

Data Center Fair Share Act

A House bill in Congress, now in committee. Latest step: Referred to the Committee on Energy and Commerce, and in addition to the Committee on Transportation and Infrastructure, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.

In committee
Chile
ChileBoletin 16821-19 (merged with 15869-19)

Chile AI Systems Bill

Government bill to regulate artificial intelligence systems in Chile using a risk-based approach.

Passed one chamber
United States (federal)

Doctors Not AI Act of 2026

A House bill in Congress, now in committee. Latest step: Referred to the Committee on Energy and Commerce, and in addition to the Committees on Ways and Means, and Education and Workforce, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.

In committee
Australia
AustraliaAct No. 15, 2025

Scams Prevention Framework Act 2025

Amends the Competition and Consumer Act 2010 to create a Scams Prevention Framework imposing scam prevention, detection, reporting and response obligations on designated sectors such as banks, telecommunications and digital platforms.

In force
California
CaliforniaAB 2023

Companion Chatbots: Children's Safety

Would have required companion chatbot operators to perform annual child safety risk assessments and audits, with Attorney General reporting and a private right of action for harmed children.

Failed
France
FranceLoi n. 2026-813 du 24 aout 2026

Law protecting minors from the risks of social networks

French law on protecting minors from social network risks whose central ban on social media access for under-15s was struck down by the Constitutional Council, leaving provisions amending the Penal Code and the 2004 digital economy law and requiring schools to address screen exposure and restrict mobile phones.

In force
France
FranceDecision n. 2026-911 DC

Constitutional Council decision on the under-15 social media ban

Constitutional Council decision striking down the law's blanket ban on social network access for under-15s as a disproportionate restriction on freedom of expression and communication, citing the lack of any parental authorization, service-specific risk assessment or legal safeguards for age verification data.

Ruled
New Jersey

New Jersey Kids Code Act

Codifies the New Jersey Age-Appropriate Design Code, requiring online services to limit collection of children's data, set high-privacy defaults for minors and restrict engagement-maximizing features.

Enacted
United States (federal)

Kids Online Safety Act

Would set a duty of care for covered online platforms to prevent specified harms to minors and require default safeguards and parental tools.

In committee