AI and data laws

311 moving · 704 enacted

Everything on file

704 matches

Japan
JapanAct No. 58 of 2024

Mobile Software Competition Act

Regulates designated providers of key smartphone software such as operating systems and app stores, barring self-preferencing and unfair treatment of app developers and requiring more open platforms, enforced by the Japan Fair Trade Commission.

In force
United Nations
United NationsA/RES/79/1 (annex I)

Global Digital Compact (Pact for the Future)

The Global Digital Compact, annexed to the Pact for the Future, sets shared objectives on closing digital divides, an inclusive and safe digital space, data governance and international AI governance, including the decision to create a scientific panel and global dialogue on AI.

Adopted
United Nations
United NationsA/RES/80/173

WSIS+20 review outcome document

Outcome of the General Assembly's 20-year review of the World Summit on the Information Society, which makes the Internet Governance Forum a permanent UN forum and schedules the next overall review for 2035.

Adopted
Maryland
MarylandSB 116

Data Center Impact Analysis and Report

Requires state agencies and the University of Maryland to analyze the environmental, energy and economic impacts of data center development and report to the General Assembly; cross-filed with HB 270.

In force
Denmark
DenmarkLov nr. 1618 af 16. december 2025 (L 16, 2025-26)

Danish Data Sharing Act (datadelingsloven)

Danish law supplementing the EU Data Act by designating the Agency for Digital Government as competent authority, giving it powers to request information and issue orders, and allowing fines for violations.

Enacted
Uruguay
UruguayLey 20.212 (arts. 74 and 75)

Uruguay AI provisions in the 2022 Budget Accountability Law

Tasks the digital government agency AGESIC with designing a national data and artificial intelligence strategy, reporting to Parliament with recommendations for AI regulation, and promoting controlled testing environments for innovative projects.

In force
Australia

National AI Plan

Sets out the Australian Government's plan to build AI capability and infrastructure, spread the benefits of AI, and keep Australians safe, including establishing an AI Safety Institute.

Adopted
United Nations
United NationsA/RES/80/58

Artificial intelligence in the military domain (2025)

Reaffirms that international law applies throughout the life cycle of AI in the military domain, takes note of the Secretary-General's report under resolution 79/239 and decides to convene informal exchanges among States in Geneva on its conclusions.

Adopted
United Nations
United NationsA/RES/80/57

Lethal autonomous weapons systems (2025)

Third General Assembly resolution on lethal autonomous weapons systems, calling on parties to the Convention on Certain Conventional Weapons to complete the elements of an instrument under development in the Group of Governmental Experts with a view to future negotiations.

Adopted
United States (federal)
United States (federal)Executive Order 14363

Launching the Genesis Mission

Launches the Genesis Mission, a Department of Energy led effort to build an AI platform using federal scientific datasets to accelerate research.

In force
Florida

Online Protections for Minors

Bars social media accounts for children under 14, requires parental consent for 14 and 15 year olds, and requires age verification for websites with material harmful to minors.

In force
European Union
European UnionRegulation (EU) 2022/868

Data Governance Act

Creates a framework for reusing certain protected public sector data, regulates data intermediation services, and sets rules for data altruism organisations.

In force
India
IndiaAct No. 22 of 2023

Digital Personal Data Protection Act, 2023

Sets rules for processing digital personal data, including consent, duties of data fiduciaries, rights of data principals and a Data Protection Board with power to impose penalties.

In force
India
IndiaG.S.R. 846(E)

Digital Personal Data Protection Rules, 2025

Implements the DPDP Act 2023 with rules on notice, consent managers, security safeguards, breach intimation, children's data and the Data Protection Board, phased in over 18 months.

In force
European Union
European UnionRegulation (EU) 2024/1309

Gigabit Infrastructure Act

Replaces the Broadband Cost Reduction Directive with rules to cut the cost and speed up the rollout of gigabit networks, covering permits, access to physical infrastructure and fibre-ready buildings.

In force
Taiwan
TaiwanPresidential Order Hua-Zong-Yi-Jing-Zi No. 11400114521

Personal Data Protection Act Amendment

Amends Taiwan's Personal Data Protection Act to make the new Personal Data Protection Commission the competent authority, require breach notification and reporting, mandate data protection officers in public agencies and create an inspection regime for government bodies.

Enacted
United Nations
United NationsUNESCO Recommendation on the Ethics of Neurotechnology

Recommendation on the Ethics of Neurotechnology

A UNESCO standard-setting recommendation, mandated by the 42nd General Conference in November 2023, that gives Member States shared values, principles and concrete policy actions for the ethical development and use of neurotechnology.

Adopted
Egypt
EgyptMinisterial Decision No. 816 of 2025unverified

Executive Regulations of the Personal Data Protection Law

Implementing rules for Law No. 151 of 2020 that set out licensing and permit procedures, controls and standards for processing personal data, and breach notification to the Personal Data Protection Center within 72 hours.

In force
Egypt
EgyptLaw No. 151 of 2020unverified

Personal Data Protection Law

Egypt's comprehensive data protection law regulating electronic processing of personal data, requiring licences for controllers and processors, and creating the Personal Data Protection Center as regulator.

In force
California

California AI Transparency Act

Requires large generative AI providers to offer a free AI detection tool and to embed disclosures in AI-generated image, video and audio content.

In force
California

Companion Chatbots

Requires companion chatbot operators to disclose that the chatbot is AI, maintain protocols against suicide and self-harm content, add safeguards for known minors and report annually to the Office of Suicide Prevention.

In force
California
CaliforniaAB 1043

Digital Age Assurance Act

Requires operating system providers to collect a user's age at account setup and send an age bracket signal to app stores and developers, beginning January 1, 2027.

Enacted
California

Social Media Warning Law

Requires social media platforms to show users a black box warning when they first access the platform each day, after 3 hours of use and hourly after that, beginning January 1, 2027.

Enacted
California

Deepfake Pornography

Expands civil liability for digitized sexually explicit material, including material depicting minors, and for services that knowingly enable deepfake pornography services to operate.

In force
Italy
ItalyLegge 23 settembre 2025, n. 132

Italian AI Law (Law No. 132 of 2025)

Italy's national framework law on artificial intelligence, setting human-centred principles for the research, development and use of AI systems and delegating the government to adopt implementing legislative decrees.

In force
European Union
European UnionOJ C/2025/5519

DSA Guidelines on the Protection of Minors Online

Commission guidelines under Article 28 of the Digital Services Act setting out measures online platforms accessible to minors should take to ensure a high level of privacy, safety and security, including age assurance methods and protections against grooming, harmful content and exploitative commercial practices.

Adopted
California

California Opt Me Out Act

Requires web browsers to include a consumer setting that sends an opt-out preference signal to businesses, beginning January 1, 2027.

Enacted
European Union
European UnionCOM(2025) 723

Apply AI Strategy

Commission communication to speed up AI adoption in industry and the public sector through sectoral flagships, SME support, an Apply AI Alliance and an AI Observatory.

Adopted
California

Data Brokers: Data Collection and Deletion

Requires data brokers registering with the California Privacy Protection Agency to disclose more of the personal information they collect, such as government ID numbers, login information and citizenship data.

In force
California

Cartwright Act: Common Pricing Algorithms

Makes it unlawful under the Cartwright Act to use or distribute a common pricing algorithm as part of a conspiracy to restrain trade or to coerce others into adopting its recommended prices.

In force