AI and data laws

311 moving · 704 enacted

Everything on file

Kenya
KenyaAct No. 17 of 2025

Computer Misuse and Cybercrimes (Amendment) Act, 2025

Amends Kenya's Computer Misuse and Cybercrimes Act of 2018, including new offences and powers for the National Computer and Cybercrimes Coordination Committee to act against unlawful websites and applications.

In force
Vietnam
VietnamLaw No. 116/2025/QH15

Law on Cybersecurity 2025

Combines the 2018 Law on Cybersecurity and the 2015 Law on Cyberinformation Security into one law, with the Ministry of Public Security as the coordinating body for incident response and cybercrime investigations.

In force
European Union
European UnionRegulation (EU) 2023/1114

Markets in Crypto-Assets Regulation (MiCA)

Sets EU-wide rules for issuing and offering crypto-assets, including asset-referenced tokens and e-money tokens, and for authorising and supervising crypto-asset service providers.

In force
California

Digital Financial Assets Law

Requires businesses engaged in digital financial asset activity with California residents to obtain a license from the Department of Financial Protection and Innovation.

In force
United States (federal)

Chatrie v. United States

The Supreme Court held that police conducted a Fourth Amendment search when they obtained a suspect's Google location history through a geofence warrant, and vacated and remanded the Fourth Circuit's judgment.

Ruled
Singapore

Online Safety (Relief and Accountability) Act 2025

Creates a Commissioner of Online Safety and Online Safety Commission that can direct takedowns and account restrictions for online harms such as intimate image abuse, doxxing and harassment, and creates statutory torts for victims.

In force
United Kingdom
United Kingdom2026 c. 20

Crime and Policing Act 2026

Broad criminal justice Act that among other things creates offences for making, possessing or supplying AI tools designed to generate child sexual abuse images, possessing guidance on creating such images, and making or supplying purported intimate image (nudification) generators.

In force
Pennsylvania

Consumer Data Privacy Act

Would create a comprehensive consumer data privacy law giving Pennsylvanians rights to access, correct, delete and opt out of the sale of their personal data.

Passed one chamber
United States (federal)

CREATE AI Act of 2025

Would establish the National Artificial Intelligence Research Resource to give U.S. researchers, educators and students access to AI data, computing and tools.

In committee
United States (federal)

READ AI Models Act

A House bill in Congress, now in committee. Latest step: Ordered to be Reported in the Nature of a Substitute (Amended) by the Yeas and Nays: 35 - 0.

In committee
United States (federal)

NO FAKES Act of 2026

Would create a federal intellectual property right protecting individuals' voice and visual likeness from unauthorized digital replicas, with notice and takedown rules for platforms.

In committee
United States (federal)

Artificial Intelligence Data Center Moratorium Act

A House bill in Congress, now in committee. Latest step: Referred to the Committee on Energy and Commerce, and in addition to the Committee on Foreign Affairs, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.

In committee
European Union
European UnionCOM(2026) 16

Digital Networks Act

Proposed regulation that would merge the European Electronic Communications Code, the BEREC Regulation and the radio spectrum programme into one telecoms law, with a single passport for operators, longer spectrum licences and national plans to phase out copper networks.

Proposed
Canada
CanadaBill C-22 (45th Parliament, 1st Session)

Lawful Access Act, 2026

Government bill giving law enforcement new tools to obtain subscriber information and other data from electronic service providers in investigations.

Passed one chamber
Canada
CanadaBill C-16 (45th Parliament, 1st Session), S.C. 2026, c. 19

Protecting Victims Act

Criminal law bill that among other measures extends the offence of non-consensual distribution of intimate images to realistic fabricated depictions of an identifiable person, covering sexual deepfakes.

Enacted
Massachusetts

Massachusetts Data Privacy Act

Would create a comprehensive consumer data privacy law with data minimization rules and limits on selling sensitive data such as location data; the Senate passed S.2619, the engrossed version of S.2516 and S.2608, and the House passed its own amended text.

Passed both
Brazil
BrazilRE 1037396 (Tema 987) and RE 1057258 (Tema 533)

STF ruling on Marco Civil da Internet article 19 platform liability

Declares article 19 of the Marco Civil da Internet partially unconstitutional and holds internet application providers civilly liable for certain third-party content after notice, and without notice for paid ads, bot networks and a list of serious crimes, until Congress legislates.

Ruled
Canada
CanadaBill C-36 (45th Parliament, 1st Session)

Protecting Privacy and Consumer Data Act (Bill C-36)

Government bill that would enact the Protecting Privacy and Consumer Data Act and amend PIPEDA to modernize federal private sector privacy law, including protections for children's data.

Introduced
Pennsylvania

Disclosure of AI-generated content

Would treat distributing AI-generated content without a required disclosure as an unfair method of competition enforceable by the Attorney General.

Passed one chamber
Canada
CanadaBill C-34 (45th Parliament, 1st Session)

Safe Social Media Act (Digital Safety Act)

Government bill that would enact the Digital Safety Act and the Digital Safety Commission of Canada Act to impose safety duties on social media services and AI chatbots, with a focus on children.

Introduced