AI and data laws

311 moving · 704 enacted

Online safety and kids

300 on file · 187 became law · 41 still moving · 16 moved in 30 days

Oregon
OregonSB 1546

AI companion safeguards

Requires operators of AI companions and companion platforms to notify users that they are interacting with artificial output and adds safeguards for users, including minors.

Enacted
Kentucky
KentuckyHB 227

Addictive online platforms and AI companions

Would have required AI companion platforms and social media platforms to verify ages and obtain verifiable parental consent for children, with Attorney General enforcement and a private right of action.

Failed
Washington
WashingtonHB 2225

AI companion chatbot regulation

Regulates AI companion chatbots, including disclosure that users are talking to AI and protections for minors and users at risk of self-harm.

Enacted
Brazil
BrazilLei 15.211/2025 (PL 2628/2022)

Digital Statute of Children and Adolescents (ECA Digital)

Sets duties for providers of digital products and services likely to be accessed by children and adolescents, including age verification, parental supervision tools and protection against harmful content.

In force
Florida
FloridaSB 482

Artificial Intelligence Bill of Rights

Would have created consumer protections for AI use, including limits on AI companion chatbots for minors, and barred governmental entities from contracting with certain foreign AI entities.

Failed
Florida
FloridaSB 1722

Application Stores

Would have required app store providers to verify user ages and obtain parental consent for minors' accounts.

Failed
Brazil
BrazilLei 15.352/2026 (conversion of Medida Provisoria 1.317/2025)

Law restructuring the ANPD as the National Data Protection Agency

Amends the LGPD to establish the Agencia Nacional de Protecao de Dados (ANPD) as a special autonomous federal agency, creates a data protection regulation and enforcement career, and sets the ECA Digital's entry into force for 2026-03-17.

In force
Utah
UtahSB 142

App Store Accountability Act

Requires app stores to verify users' ages and obtain parental consent before minors download apps or make purchases, and to share age category data with developers.

In force
United States (federal)

DEFIANCE Act of 2025

Would create a federal civil remedy for people depicted in sexually explicit deepfakes made or shared without consent.

Passed one chamber
Malaysia
MalaysiaAct 866

Online Safety Act 2025

Requires licensed application, content and network service providers to mitigate harmful content, provide reporting mechanisms and protect child users, with enforcement by the Malaysian Communications and Multimedia Commission.

In force
United Arab Emirates
United Arab EmiratesFederal Decree-Law No. 26 of 2025unverified

Child Digital Safety Law

Requires digital platforms and internet service providers operating in or targeting the UAE to protect users under 18, including age verification, parental consent for data collection from children under 13, privacy-by-default settings and blocking children's access to online gambling.

In force