European UnionCouncil decision concluding, on behalf of the European Union, the Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law, following the Commission proposal COM(2025) 265 and the consent of the European Parliament.
OhioWould enact the Ohio Privacy Act, a comprehensive consumer data privacy law.
MarylandAuthorizes the State Administrator of Elections to act on credible reports of election misinformation or disinformation, including deepfakes, and sets related requirements; cross-filed with HB 145.
MarylandMakes it a crime to use artificial intelligence or deepfake representations of a person to commit identity fraud or cause physical injury, serious emotional distress or economic damage; cross-filed with HB 184.
GeorgiaRequires operators of conversational AI services to make certain disclosures to users as an online safety measure.
OklahomaRequires large-load electricity users such as data centers, AI facilities and crypto mining operations to pay their own electricity and infrastructure costs and requires separate billing terms and advance public notice of new large-load projects.
United States (federal)Would bar AI companion chatbots for minors, require age verification and require chatbots to disclose that they are not human.
United States (federal)Requires the FCC to vet applicants for high cost broadband deployment funding.
FloridaSets minimum tariff and service terms for large load customers such as data centers so their costs are not shifted to other utility customers and confirms local land use authority over them.
MinnesotaWould amend the Minnesota Consumer Data Privacy Act to treat consumer health data as sensitive data and add protections for sensitive data.
IowaAmends Iowa's cryptocurrency kiosk law, including modified civil penalties.
MinnesotaWould establish a moratorium on new data centers and require a Public Utilities Commission report.
AlaskaElection administration omnibus bill; Public Citizen reports its election deepfake provision was removed before final passage, and the governor vetoed the bill.
IndiaBans online money games and their advertising and payment processing, promotes e-sports and social games, and provides for an Online Gaming Authority of India.
United States (federal)Extends the authorities of Title VII of the Foreign Intelligence Surveillance Act, including Section 702, until June 12, 2026.
MaineWould have created a Maine Data Center Coordination Council and placed a temporary limitation on certain large data centers.
FloridaSpecial session version of the AI Bill of Rights that would have set AI consumer protections and limited government AI contracts with certain entities.
MissouriWould have established and modified provisions relating to artificially generated material, including AI-generated depictions of minors.
MaineWould have regulated and restricted children's access to AI chatbots with human-like features and social AI companions.
MichiganWould prohibit making companion AI chatbots available to minors.
United States (federal)Senate bill to establish the National Artificial Intelligence Research Resource for shared AI research computing and data.
MichiganWould create the Michigan Kids Code Act setting privacy and design requirements for online services used by minors.
AustraliaSets security standards for smart devices, requires certain businesses to report ransomware payments, limits use of incident information shared with the government, and creates a Cyber Incident Review Board.
TennesseeClarifies that a person under Tennessee law does not include artificial intelligence, a computer algorithm, software, computer hardware or any machine.
TennesseeCreates a civil action for people whose intimate images, whether real or deepfake, are intentionally disclosed without consent.
MissouriWould have created a criminal offense and civil penalties for disclosing intimate digital depictions of a person without consent.
MaineExcludes data centers from the Business Equipment Tax Exemption and the Dirigo Business Incentives Program.
United States (federal)Temporarily extends the authorities of Title VII of the Foreign Intelligence Surveillance Act, including Section 702 surveillance.
AlabamaCreates a comprehensive consumer data privacy law giving residents rights over personal data processed by businesses and authorizing enforcement.
AlabamaRegulates how health care plans use artificial intelligence when making coverage determinations.
AlabamaLimits the exemption period for data processing center tax abatements, requires collection of certain taxes on purchases, and extends the program sunset.
AlabamaExpands Public Service Commission review of electric utility contracts with large load data centers.
NebraskaWould have adopted the Conversational Artificial Intelligence Safety Act to regulate conversational AI services.
NebraskaWould have adopted the Transparency in Artificial Intelligence Risk Management Act, created a fund and changed provisions on records that may be withheld from the public.
TennesseeWould have enacted the Artificial Intelligence Public Safety and Child Protection Transparency Act; it passed the House but not the Senate before the General Assembly adjourned.
United States (federal)House subcommittee hearing on the U.S. semiconductor ecosystem and computing power for AI.
NebraskaAdopts the Large Load Customer Regulation Act to govern how public power suppliers serve very large electric loads such as data centers, and changes provisions on energy storage and cryptocurrency mining operations.
NebraskaOmnibus consumer and financial bill that adds duties for covered online services under the Age-Appropriate Online Design Code Act and classifies certain social media platform practices as deceptive trade practices.
MaineWould have enacted a comprehensive consumer online data privacy law in Maine.
MaineRegulates how artificial intelligence may be used in providing certain mental health services.
KentuckyAmends the Kentucky Consumer Data Protection Act to bar controllers from collecting automatic content recognition data from smart monitors and TVs without consumer consent.
VirginiaAmends the Virginia Consumer Data Protection Act to bar controllers from selling consumers' precise geolocation data to third parties.
KentuckyCreates a licensing and consumer protection framework for virtual currency kiosk operators under the Department of Financial Institutions.
VirginiaRequires the Department of Education to survey AI use in public school instruction, publish AI safety guidance and run an AI innovation in education pilot program.
KansasWould have required app stores and developers to verify ages and obtain parental consent for minors, enforced under the Kansas Consumer Protection Act and a private right of action.
IdahoSets Public Utilities Commission rules for serving new large electric loads such as data centers to protect other ratepayers.
AlaskaWould have covered AI-generated child sexual abuse material and addressed related social media conduct.
KansasWould have enacted an age-appropriate design code for minors, a private right of action over nonconsensual digital replicas and chatbot transparency rules.
KansasWould have required user accounts, age verification and parental consent for AI chatbot access, content blocking for minors and suicide-risk monitoring.
KansasWould have barred new large load data centers in counties with a drought emergency declared in the preceding three years.
Legislationsby Glyph