AI and data laws

311 moving · 704 enacted

Platforms and antitrust

199 on file · 124 became law · 23 still moving · 11 moved in 30 days

Australia

Children's Online Privacy Code

A binding privacy code being developed by the OAIC under the Privacy Act, as required by the 2024 amendments, to set how online services likely to be accessed by children handle their personal information.

Proposed
Texas
TexasSB 2420

App Store Accountability Act

Requires mobile app stores to verify user ages, obtain parental consent before minors download apps or make purchases, and share age-category data with developers.

In force
European Union

DSA non-compliance decision against Temu

Commission decision fining Temu 200 million euros under the Digital Services Act for failing to properly identify and assess the systemic risks of illegal products offered on its marketplace.

Ruled
Minnesota
MinnesotaHF 4138

Stop Harms from Addictive Social Media (minor accounts)

Requires large social media platforms to estimate users' ages, obtain verifiable parental consent for accounts of children 15 and under, set those accounts to the most private settings, and bar addictive features and targeted ads on them.

Enacted
Michigan
MichiganSB 758

Michigan Kids Code Act

Would create the Michigan Kids Code Act setting privacy and design requirements for online services used by minors.

Passed one chamber
Kansas
KansasSB 372

App Store Accountability Act

Would have required app stores and developers to verify ages and obtain parental consent for minors, enforced under the Kansas Consumer Protection Act and a private right of action.

Failed
Mississippi

Mississippi Keeping Kids Safe Online Act

Regulates interactive computer service providers offering certain services to minors and directs the Department of Education to publish internet safety resources and a social media safety curriculum.

In force
Kentucky
KentuckyHB 227

Addictive online platforms and AI companions

Would have required AI companion platforms and social media platforms to verify ages and obtain verifiable parental consent for children, with Attorney General enforcement and a private right of action.

Failed
Washington
WashingtonHB 1170

AI content provenance disclosure

Requires providers of generative AI systems to include provenance disclosures in AI-created or AI-modified image, video and audio content and to offer tools to detect them.

Enacted
Brazil
BrazilLei 15.211/2025 (PL 2628/2022)

Digital Statute of Children and Adolescents (ECA Digital)

Sets duties for providers of digital products and services likely to be accessed by children and adolescents, including age verification, parental supervision tools and protection against harmful content.

In force
Florida
FloridaSB 1722

Application Stores

Would have required app store providers to verify user ages and obtain parental consent for minors' accounts.

Failed
Utah
UtahSB 142

App Store Accountability Act

Requires app stores to verify users' ages and obtain parental consent before minors download apps or make purchases, and to share age category data with developers.

In force
Texas

Ban on Chinese AI and social media apps on state devices

Governor directive banning AI and social media apps affiliated with the People's Republic of China and the Chinese Communist Party, including DeepSeek, RedNote and Lemon8, from government-issued devices and adding them to the state prohibited technologies list.

In force
Malaysia
MalaysiaAct 866

Online Safety Act 2025

Requires licensed application, content and network service providers to mitigate harmful content, provide reporting mechanisms and protect child users, with enforcement by the Malaysian Communications and Multimedia Commission.

In force
United Arab Emirates
United Arab EmiratesFederal Decree-Law No. 26 of 2025unverified

Child Digital Safety Law

Requires digital platforms and internet service providers operating in or targeting the UAE to protect users under 18, including age verification, parental consent for data collection from children under 13, privacy-by-default settings and blocking children's access to online gambling.

In force
Japan
JapanAct No. 58 of 2024

Mobile Software Competition Act

Regulates designated providers of key smartphone software such as operating systems and app stores, barring self-preferencing and unfair treatment of app developers and requiring more open platforms, enforced by the Japan Fair Trade Commission.

In force
United States (federal)

Sunset Section 230 Act

Would repeal Section 230 of the Communications Act of 1934, which shields online platforms from liability for most user content.

Introduced
United States (federal)
United States (federal)No. 1:20-cv-03010

United States v. Google LLC (search)

The court found Google unlawfully maintained a monopoly in general search and later imposed remedies that bar exclusive distribution deals and require some data sharing, without ordering a Chrome divestiture.

Ruled
Florida

Online Protections for Minors

Bars social media accounts for children under 14, requires parental consent for 14 and 15 year olds, and requires age verification for websites with material harmful to minors.

In force
California
CaliforniaAB 1043

Digital Age Assurance Act

Requires operating system providers to collect a user's age at account setup and send an age bracket signal to app stores and developers, beginning January 1, 2027.

Enacted
California

Social Media Warning Law

Requires social media platforms to show users a black box warning when they first access the platform each day, after 3 hours of use and hourly after that, beginning January 1, 2027.

Enacted
European Union
European UnionOJ C/2025/5519

DSA Guidelines on the Protection of Minors Online

Commission guidelines under Article 28 of the Digital Services Act setting out measures online platforms accessible to minors should take to ensure a high level of privacy, safety and security, including age assurance methods and protections against grooming, harmful content and exploitative commercial practices.

Adopted