704 matches
United KingdomStatutory report under sections 135 and 136 of the Data (Use and Access) Act responding to the 2024 to 2025 consultation, stating that a broad text and data mining exception with opt-out is no longer the government's preferred approach and committing to further evidence gathering and work on input transparency.
UtahAmends the 2025 App Store Accountability Act's age verification and parental consent provisions.
BrazilSets duties for providers of digital products and services likely to be accessed by children and adolescents, including age verification, parental supervision tools and protection against harmful content.
WashingtonUpdates Washington's personality rights law to cover forged digital likenesses, including AI-generated voice and image replicas.
CaliforniaRequires online services likely to be accessed by children to assess and mitigate risks to children and to configure default privacy settings to a high level of privacy.
United States (federal)Directs federal action against cybercrime, online fraud and predatory schemes targeting Americans.
AlabamaCreates a study commission on artificial intelligence and children's internet safety.
United States (federal)Announces a pledge under which large AI and data center companies commit to pay the full cost of the power they use so household electricity bills do not rise.
IndianaProhibits the operation of virtual currency kiosks in Indiana, enforceable by the Attorney General as a deceptive consumer sales violation.
MississippiDefines the term artificial intelligence in Mississippi law.
WyomingCreates protections and penalties for deepfakes and other digitally created exploitative sexual images of minors.
WyomingSets data privacy requirements for how Wyoming government entities collect, use and share personal data.
WyomingAmends the Wyoming Stable Token Act governing the state-issued stable token.
WyomingRegulates virtual currency kiosks, commonly called crypto ATMs, operating in Wyoming.
VermontRequires disclosure of synthetic media, including AI-generated deepfakes, in election-related communications within a set period before an election.
New MexicoEnacts the Driver Privacy and Safety Act, limiting the sharing of automated license plate reader information and requiring reporting, with enforcement and penalties.
AustraliaSets mandatory security standards under the Cyber Security Act 2024 for consumer internet-connected devices, including rules against universal default passwords.
IndianaRequires state retirement and savings plans to offer a self-directed brokerage account with at least one cryptocurrency investment option, and sets rules for public agencies on cryptocurrency.
VirginiaRequires social media platforms to use commercially reasonable age screening and limit users under 16 to one hour per day per platform unless a parent consents to more.
IndiaAmends India's IT Rules 2021 to define synthetically generated information and require intermediaries to label AI-generated content, embed provenance metadata and act faster on unlawful deepfakes.
BrazilAmends the LGPD to establish the Agencia Nacional de Protecao de Dados (ANPD) as a special autonomous federal agency, creates a data protection regulation and enforcement career, and sets the ECA Digital's entry into force for 2026-03-17.
AlabamaRequires app store providers and developers to verify user ages and obtain parental consent for minors, enforceable by the Attorney General and by parents.
MinnesotaCreates a crime for disseminating deep fakes to influence an election, a crime for nonconsensual dissemination of sexual deep fakes, and a civil cause of action for victims of nonconsensual sexual deep fakes.
United KingdomReforms UK data protection law, creates frameworks for digital verification services and smart data, restructures the Information Commissioner's Office, adds an offence of creating or requesting intimate images of adults without consent, and requires government reports on copyright and AI.
South CarolinaRequires covered online services to use reasonable care with minors' personal data, limit data collection from minors, restrict compulsive-use design features and provide parental controls, with Attorney General enforcement.
UtahRequires app stores to verify users' ages and obtain parental consent before minors download apps or make purchases, and to share age category data with developers.
KansasExtends child sexual exploitation crimes to images that are morphed from or indistinguishable from a real child or generated without any actual child, and bars disseminating items that purport to depict an identifiable person.
IsraelTemporarily empowers authorized officials of the Shin Bet, the National Cyber Directorate or the defense ministry's security directorate to declare an attack on a hosting or digital service provider a severe cyber attack and to direct the provider's response.
TexasGovernor directive banning AI and social media apps affiliated with the People's Republic of China and the Chinese Communist Party, including DeepSeek, RedNote and Lemon8, from government-issued devices and adding them to the state prohibited technologies list.
TexasGovernor directive adding Chinese-affiliated AI companies, hardware and software to the state prohibited technologies list for state employees and devices and naming the Texas Cyber Command lead agency for identifying such threats.
SingaporeGives organisations voluntary guidance on deploying AI agents responsibly, with technical and non-technical measures to manage risks while keeping humans accountable.
United States (federal)Section 232 proclamation finding that semiconductor imports threaten national security and adjusting imports of chips, chipmaking equipment and derivative products.
New JerseyDirects state agencies to prioritize children's mental health in digital environments and establishes an Office of Youth Online Mental Health Safety and Awareness.
KazakhstanSets principles, a three-level risk classification, prohibited practices and machine-readable labeling of synthetic content for AI systems in Kazakhstan, and addresses copyright in AI-generated works.
TaiwanSets Taiwan's basic AI governance framework with the National Science and Technology Council as competent authority, seven governance principles, a risk classification framework coordinated by the Ministry of Digital Affairs, and labeling and accountability rules for high-risk AI.
MaineRegulates employer electronic surveillance of employees to protect workers.
CaliforniaRegulations that give consumers rights to access and opt out of businesses' use of automated decisionmaking technology and require certain businesses to conduct risk assessments and annual cybersecurity audits.
ChinaAmends the Cybersecurity Law to add a provision supporting AI research, infrastructure, ethics and risk monitoring, raise fines for network security violations, and align liability with the Data Security Law and Personal Information Protection Law.
VietnamSets a statutory framework for collecting, processing and transferring personal data in Viet Nam, replacing Decree 13/2023/ND-CP as the main personal data protection rule.
MalaysiaRequires licensed application, content and network service providers to mitigate harmful content, provide reporting mechanisms and protect child users, with enforcement by the Malaysian Communications and Multimedia Commission.
TexasBans developing or deploying AI systems for certain intentional harms such as behavioral manipulation toward self-harm, unlawful discrimination, government social scoring and sexual deepfakes of minors, requires state agencies to disclose AI use to consumers, and creates an AI regulatory sandbox and the Texas Artificial Intelligence Council, enforced by the attorney general.
United Arab EmiratesRequires digital platforms and internet service providers operating in or targeting the UAE to protect users under 18, including age verification, parental consent for data collection from children under 13, privacy-by-default settings and blocking children's access to online gambling.
European UnionAmends the Directive on administrative cooperation in taxation to require crypto-asset service providers to report their users' crypto-asset transactions to tax authorities, with automatic exchange of that information between member states.
NevadaRequires election communications that include synthetic media to disclose that the image, video or audio has been manipulated and lets depicted candidates seek an injunction.
European UnionAdds harmonised procedural rules for how national data protection authorities cooperate and handle complaints in cross-border GDPR cases.
VietnamProvides a legal framework for Viet Nam's digital technology industry, including semiconductors, AI, digital technology parks and digital assets.
ChinaSets out the certification route for transferring personal information out of China, including which handlers may use it, the certification bodies and process, and supervision of certified transfers.
MontanaCreates a property right in an individual's name, voice and visual likeness, including digital depictions, and sets penalties for unauthorized use.
Hong KongImposes statutory cybersecurity obligations on designated critical infrastructure operators in Hong Kong, covering organizational measures, preventive security measures and incident reporting, overseen by a new Commissioner's Office.
JapanSets government guidelines under the AI Promotion Act on the steps AI developers, providers and users should take to ensure AI is researched, developed and used appropriately.
Legislationsby Glyph