AI and data laws

311 moving · 704 enacted

Everything on file

704 matches

Canada
Canadaunverified

EU-Canada Digital Trade Agreement

The agreement facilitates cross border data flows and strengthens regulatory cooperation between Canada and the European Union.

Adopted
New York
New Yorkunverified

Child AI Chatbot Protection Bills

New York enacted legislation to protect children from risks associated with artificial intelligence chatbots and internet-connected baby monitors.

Enacted
New York
New Yorkunverified

Chatbot Companion Ban for Minors

New York Governor Kathy Hochul signed legislation banning artificial intelligence chatbots from acting as friends or romantic partners to minors.

Enacted
United States (federal)

GSA LLM Clause

The General Services Administration issued a procurement clause barring language models from training on government data.

In force
South Korea
South Koreaunverified

Digital Asset Basic Act

South Korea established capital and reserve requirements for stablecoin issuers under new digital asset legislation.

Enacted
Delaware
DelawareHB 380

Delaware Personal Data Privacy Act Amendments

Amends the Delaware Personal Data Privacy Act to align it with other states' laws, including lowering the applicability threshold to entities processing data of at least 15,000 consumers.

Enacted
California

Employment: Automated Decision Systems

Would require employers to give notice about automated decision systems used in employment decisions and bar retaliation against workers who assert their rights, enforced by the Labor Commissioner.

Enacted
California
CaliforniaSB 1000

California AI Transparency Act Revisions

Would recast the California AI Transparency Act, removing the user threshold for covered providers and replacing AI detection tools with disclosure verification tools, as an urgency statute.

Enacted
California
CaliforniaSB 1111

Digital Replicas

Would clarify that the right of publicity and false impersonation laws cover digital replicas of a person's voice or likeness.

Enacted
California
Californiaunverified

Robo-bosses ban bill

This bill prohibits employers from using artificial intelligence systems to autonomously terminate workers.

Enacted
California
CaliforniaAB 1883

Workplace Surveillance Tools

Would bar employers from using AI workplace surveillance tools to collect neural data or recognize workers' emotional states, with civil penalties of up to $500 per violation.

Enacted
California
Californiaunverified

No Robo Bosses Act

California enacted a law that prohibits employers from relying on artificial intelligence for certain employment decisions.

Enacted
California
CaliforniaAB 1609

Customer Service Chatbots

Would bar large businesses from representing a customer service chatbot as human and require them to offer access to a human agent, generally within 15 minutes of a request.

Enacted
California

Consumer Privacy: Deletion Requests

Would expand the CCPA right to delete to all personal information a business has collected about a consumer and require businesses to offer an online method for submitting privacy requests.

Enacted
Texas
Texasunverified

TRAIGA

The law bans certain high-risk artificial intelligence uses, restricts intentional discrimination, sets sector-specific rules, and authorizes penalties enforced by the attorney general.

In force
United Nations
United NationsA/RES/79/243

UN Convention against Cybercrime

A global treaty requiring parties to criminalize certain offences committed through information and communications technology systems and to cooperate on sharing electronic evidence of serious crimes, which enters into force 90 days after the 40th ratification.

Adopted
California
CaliforniaSB 1168

Data Centers: Rate Structures

Requires the Public Utilities Commission to assess rate structures so that data centers pay a reasonable share of transmission, distribution and procurement costs tied to their loads.

Enacted
California
CaliforniaAB 1577

Data Centers: Reporting

Requires data center owners or operators to report information such as location, size, power usage effectiveness and onsite generator fuel use to the California Energy Commission.

Enacted
California
CaliforniaAB 2469

Data Centers: Water Use Disclosures

Bars cities and counties from approving permits for new or expanded data centers unless the applicant provides prescribed water use information and other conditions are met.

Enacted
California
CaliforniaAB 2383

Electricity: Data Centers

Requires each electrical corporation to file transmission, distribution and generation service tariffs for participating data center customers.

Enacted
California
CaliforniaAB 2619

Water Resources: Data Centers

Requires data center operators to give their water supplier a good faith estimate of expected water use and water source before applying for a local business license or permit.

Enacted
Japan
JapanAct No. 56 of 2026

Act on the Protection of Personal Information Amendment

Amends Japan's personal information law to allow data sharing without consent for statistics and AI development, strengthen protections for children under 16 and facial feature data, and introduce administrative surcharges for serious violations.

In force
European Union
European UnionRegulation (EU) 2023/2854

Data Act

Sets rules on who can access and use data generated by connected products and related services, on business-to-government data sharing in exceptional need, and on switching between cloud and data processing services.

In force
European Union
European UnionRegulation (EU) 2024/2847

Cyber Resilience Act

Sets mandatory cybersecurity requirements for hardware and software products with digital elements sold in the EU, including vulnerability handling and incident reporting duties for manufacturers.

In force
South Korea
South KoreaAct No. 21445

Personal Information Protection Act Amendment

Amends PIPA after large data breaches to make company heads ultimately responsible for data protection, require notice of possible breaches, mandate privacy certification for large handlers, and allow fines of up to 10 percent of total revenue for repeated or massive violations.

In force