AI and data laws

Moving311Enacted704

311 moving · 704 enacted

Everything on file

Became lawClear all

704 matches

Montana
MontanaHB 178

Limit government use of AI systems

Limits state and local government use of AI systems, prohibits certain uses such as cognitive behavioral manipulation, and requires disclosure and human review of AI-generated decisions.

In force
Nevada
NevadaAB 325

Artificial intelligence in emergency management plans

Requires state and local emergency management plans to ensure final emergency response and resource decisions are not made by artificial intelligence and bars utilities from shutting off service based solely on AI.

In force
California
CaliforniaSB 53

Transparency in Frontier Artificial Intelligence Act

Requires large frontier AI developers to publish frontier AI frameworks and transparency reports, report critical safety incidents to the state, protects whistleblowers and sets up a consortium to plan a public computing cluster called CalCompute.

In force
California
CaliforniaAB 2839

Elections: Deceptive Media in Advertisements

Prohibits knowingly distributing materially deceptive AI-generated or digitally altered election content about candidates, officials and election workers within set periods around elections.

In force
Peru
PeruLey 31814

Peru Law Promoting the Use of Artificial Intelligence

Promotes the use of artificial intelligence for Peru's economic and social development and designates the Presidency of the Council of Ministers' digital government secretariat as the national technical authority on AI.

In force
Peru
PeruDecreto Supremo 115-2025-PCM

Regulation of Peru's AI Law (Law 31814)

Approves the regulation of Law 31814, setting a risk-based framework for AI use with prohibited and high-risk uses and phased compliance deadlines for public entities and private developers and deployers.

In force
China
ChinaGuo Xin Ban Tong Zi (2025) No. 2

Measures for Labeling AI-Generated Synthetic Content

Requires providers of AI generation services and content distribution platforms to add explicit visible labels and implicit metadata labels to AI-generated text, audio, images, video and virtual scenes, and bars removing or forging those labels.

In force
Texas
TexasHB 581

Age verification for AI nudify tools

Requires commercial websites and apps that offer tools to create artificial sexual material using real people's likenesses to verify users are adults, with civil penalties.

In force
Texas
TexasSB 20

AI-generated obscene depictions of children

Creates a criminal offense for possessing, promoting or producing obscene visual material that appears to depict a child, including AI-generated or animated images.

In force
Texas
TexasSB 441

Deepfake sexual media and artificial intimate visual material

Creates civil liability and expands criminal offenses for producing or distributing nonconsensual sexually explicit deepfake media and artificial intimate visual material, with an affirmative defense for AI application providers that prohibit and take steps to prevent such content.

In force
Texas
TexasSB 1188

Electronic health records and AI in health care

Sets electronic health record requirements, including storage of records in the United States, and allows practitioners to use AI for diagnostic recommendations only if they review AI-generated records and disclose the use to patients.

In force
Texas
TexasHB 130

Genetic information security

Bars covered facilities and companies from using genome sequencers or software produced by foreign adversaries and from storing Texans' genome sequencing data in foreign adversary countries, with civil penalties and a private right of action.

In force
Texas
TexasSB 1964

Government use of artificial intelligence

Sets rules for state and local government use of AI, including a Department of Information Resources AI code of ethics and minimum standards, inventories of agency AI systems, and reviews of heightened-scrutiny AI systems used in consequential decisions.

In force
Texas
TexasHB 150

Texas Cyber Command

Establishes the Texas Cyber Command, with a facility in San Antonio, to prevent and respond to cybersecurity incidents, and transfers state cybersecurity duties from the Department of Information Resources to it.

In force
Texas
TexasSB 1343

Data broker notice requirements

Updates the notice that data brokers must post on their websites and include with their Texas registration statements.

In force
Texas
TexasSB 2121

Data broker regulation amendments

Broadens the definition of data broker to any business that collects, processes or transfers personal data it did not collect directly from the individual, removing the principal-revenue test from the 2023 law.

In force
China
ChinaGuo Fa (2025) No. 11

Opinions on Deepening the AI Plus Action

Sets China's national plan to integrate AI across science, industry, consumption, public services, governance and international cooperation, targeting over 70 percent adoption of intelligent terminals and agents by 2027 and over 90 percent by 2030.

Adopted
Brazil
BrazilResolucao CD/ANPD No. 19/2024

ANPD International Data Transfer Regulation

Sets rules under the LGPD for international transfers of personal data and approves standard contractual clauses that controllers using contractual clauses must adopt.

In force
Israel
IsraelPrivacy Protection Law (Amendment No. 13), 5784-2024

Israel Privacy Protection Law Amendment No. 13

Comprehensively amends Israel's Privacy Protection Law, updating core definitions, narrowing database registration duties, requiring privacy officers for certain bodies and giving the Privacy Protection Authority administrative enforcement powers including financial sanctions.

In force
Mississippi
MississippiHB 1126

Walker Montgomery Protecting Children Online Act

Requires digital service providers to register users' ages, obtain parental consent for minors, limit collection of minors' data and mitigate harms to minors, and adds morphed images of children to the child exploitation crime.

In force
European Union
European UnionRegulation (EU) 2024/1083

European Media Freedom Act

Sets common rules to protect media pluralism and editorial independence, including safeguards against spyware use on journalists, transparency of media ownership and state advertising, and treatment of media content by very large online platforms.

In force
European Union
European Union

General-Purpose AI Code of Practice

Voluntary code drawn up by independent experts that gives general-purpose AI model providers a way to show compliance with AI Act transparency, copyright and safety and security obligations.

Adopted
Minnesota
MinnesotaHF 4757

Minnesota Consumer Data Privacy Act (2024 commerce omnibus)

Omnibus commerce and cannabis bill that enacted the Minnesota Consumer Data Privacy Act (Minn. Stat. chapter 325O), giving consumers rights to access, correct, delete and port their personal data, opt out of targeted advertising, sale and profiling, and question the result of significant profiling decisions, enforced by the attorney general.

In force