{ "as_of": "2026-08-11", "sectors": { "consumer": "Consumer Platforms", "crypto": "Crypto & Digital Assets", "infra": "Data Centers & Infrastructure", "finserv": "Financial Services", "health": "Healthcare", "hr": "HR & Workforce", "media": "Media & Creative" }, "geos": { "us": "US Federal", "ca-state": "California", "ny": "New York", "co": "Colorado", "tx": "Texas", "eu": "European Union", "uk": "United Kingdom", "de": "Germany", "fr": "France", "br": "Brazil", "at": "Austria" }, "jurisdictions": { "US": "United States (federal)", "UK": "United Kingdom", "DE": "Germany", "FR": "France", "IT": "Italy", "EU": "European Union", "BR": "Brazil", "AR": "Argentina", "MX": "Mexico", "AU": "Australia", "SG": "Singapore", "CN": "China", "IN": "India", "CA": "Canada", "JP": "Japan", "TR": "Turkey", "AT": "Austria", "CO": "Colombia", "ID": "Indonesia", "AE": "United Arab Emirates" }, "categories": { "minors": "Protection of Minors", "healthcare": "Healthcare", "data-centers": "Data Centers & Compute", "governance": "Governance & Regulatory Frameworks", "gov-use": "Government Use & Procurement", "anti-discrimination": "Anti-Discrimination & Fairness", "disclosures": "Transparency & Disclosures", "hiring": "Employment & Hiring", "deepfakes": "Deepfakes & Synthetic Media", "consumer-financial": "Consumer & Financial Protection", "education": "Education", "privacy": "Privacy & Data", "elections": "Elections & Political Speech", "public-safety": "Public Safety & Law Enforcement", "frontier": "Frontier / Model-Level Regulation" }, "us_states": { "AL": "Alabama", "AK": "Alaska", "AZ": "Arizona", "AR": "Arkansas", "CA": "California", "CO": "Colorado", "CT": "Connecticut", "DE": "Delaware", "FL": "Florida", "GA": "Georgia", "HI": "Hawaii", "ID": "Idaho", "IL": "Illinois", "IN": "Indiana", "IA": "Iowa", "KS": "Kansas", "KY": "Kentucky", "LA": "Louisiana", "ME": "Maine", "MD": "Maryland", "MA": "Massachusetts", "MI": "Michigan", "MN": "Minnesota", "MS": "Mississippi", "MO": "Missouri", "MT": "Montana", "NE": "Nebraska", "NV": "Nevada", "NH": "New Hampshire", "NJ": "New Jersey", "NM": "New Mexico", "NY": "New York", "NC": "North Carolina", "ND": "North Dakota", "OH": "Ohio", "OK": "Oklahoma", "OR": "Oregon", "PA": "Pennsylvania", "RI": "Rhode Island", "SC": "South Carolina", "SD": "South Dakota", "TN": "Tennessee", "TX": "Texas", "UT": "Utah", "VT": "Vermont", "VA": "Virginia", "WA": "Washington", "WV": "West Virginia", "WI": "Wisconsin", "WY": "Wyoming" }, "eu_members_with_eu_coverage": [ "FR", "IT", "DE", "AT" ], "briefs": [ { "id": "brief:consumer--at", "sector": "consumer", "geo": "at", "sector_name": "Consumer Platforms", "geo_name": "Austria", "url": "/brief/consumer--at.html", "overview": "Austria adds national privacy, e-commerce and consumer-contract rules to directly applicable European Union laws, including the General Data Protection Regulation (GDPR), the Digital Services Act (DSA) and the Artificial Intelligence Act (AI Act), affecting data use, platform transparency, content notices, artificial intelligence governance, advertising and cancellation rights. There is no single Austrian online-minors law today: protection mainly comes from these European Union laws, provincial youth-protection rules and, for video-sharing products, audiovisual-media rules. Sector-specific rules may therefore bind you today depending on your product, especially if it is a social app, chatbot, content platform or video-sharing service.", "instruments": [ { "name": "Datenschutzgesetz (DSG)", "status": "in force", "year": 1999, "url": "https://www.ris.bka.gv.at/GeltendeFassung.wxe?Abfrage=Bundesnormen&Gesetzesnummer=10001597", "summary": "The DSG supplements the GDPR and includes Austria’s constitutional right to data confidentiality, national rules on data-protection enforcement and specific provisions affecting data-subject rights and remedies. Tech companies should map user, behavioral, location, biometric, training and minors’ data flows against both the GDPR and DSG." }, { "name": "Koordinator-für-digitale-Dienste-Gesetz (KDD-G)", "status": "in force", "year": 2023, "url": "https://ris.bka.gv.at/eli/bgbl/i/2023/182/P0/NOR40258868", "summary": "The KDD-G implements and enforces the EU Digital Services Act in Austria, designating KommAustria as the Austrian Digital Services Coordinator and providing national powers, procedures and sanctions. Platforms should be ready for DSA notice-and-action, user complaint, transparency, advertising, recommender-system and minors-safety requirements." }, { "name": "Verordnung über harmonisierte Vorschriften für künstliche Intelligenz (AI Act)", "status": "adopted, phasing in", "year": 2024, "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj", "summary": "The directly applicable EU AI Act applies to providers and deployers of AI systems offered or used in Austria, including consumer-facing chatbots and recommendation or moderation systems. Companies must classify systems, prohibit banned practices, provide required AI disclosures, implement risk-management and documentation controls, and prepare for obligations that phase in through 2026 and 2027." }, { "name": "E-Commerce-Gesetz (ECG)", "status": "in force", "year": 2001, "url": "https://www.ris.bka.gv.at/GeltendeFassung.wxe?Abfrage=Bundesnormen&Gesetzesnummer=20001703", "summary": "The ECG sets Austrian rules for information-society services, including provider identification, commercial communications, electronic contracting and intermediary liability. Consumer platforms should maintain clear legal notices, identify advertising and sponsors, and document when hosting or intermediary-liability protections apply." }, { "name": "Fern- und Auswärtsgeschäfte-Gesetz (FAGG)", "status": "in force", "year": 2014, "url": "https://www.ris.bka.gv.at/NormDokument.wxe?Abfrage=Bundesnormen&Gesetzesnummer=20008847&Paragraf=0", "summary": "The FAGG governs Austrian consumer contracts concluded online, including subscriptions, paid app features, digital content and digital services. Product teams must provide pre-contract information, obtain compliant checkout consent, support withdrawal rights or valid withdrawal waivers, and handle digital-service conformity and cancellation requirements." } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Austrian Data Protection Authority (Datenschutzbehörde, DSB) supervises the GDPR and Datenschutzgesetz (DSG). KommAustria is Austria’s Digital Services Coordinator under the Koordinator-für-digitale-Dienste-Gesetz (KDD-G), with RTR Medien supporting DSA dispute-resolution functions; the European Commission also supervises VLOPs and VLOSEs. ([dsb.gv.at](https://dsb.gv.at/home/home?utm_source=openai))" }, { "q": "Do we need a license, permit, or registration?", "a": "The briefing identifies no general Austrian license, permit, or platform registration for ordinary social apps, chatbots, or content platforms. You must still meet the E-Commerce-Gesetz (ECG) information and provider-identification rules and the Fern- und Auswärtsgeschäfte-Gesetz (FAGG) requirements for online consumer contracts; additional requirements depend on whether the product is a video-sharing platform or another regulated audiovisual service." }, { "q": "What are the main data and privacy obligations?", "a": "Comply with the GDPR together with Austria’s Datenschutzgesetz (DSG), including a lawful basis, transparent notices, data-subject rights, processor and international-transfer controls, security, breach response, and retention limits. Map user, behavioral, location, biometric, training, profiling, and minors’ data, and conduct impact assessments where required; extra safeguards depend on the processing, age of users, and whether the service uses high-risk profiling or sensitive data." }, { "q": "Which AI-specific rules apply?", "a": "The directly applicable EU AI Act applies to AI features offered or used in Austria, including consumer chatbots, recommendation systems, and moderation tools. Classify each system, avoid prohibited practices, provide required AI-generated-content or chatbot disclosures, and implement risk-management, documentation, monitoring, and human-oversight controls; duties depend on whether the company is a provider, deployer, importer, or distributor and on the system’s classification. The main implementation milestones include August 2, 2026 and August 2, 2027." }, { "q": "What are the enforcement and penalty risks?", "a": "The DSB can investigate and impose GDPR sanctions, including fines of up to EUR 20 million or 4% of worldwide annual turnover, while KommAustria can enforce the DSA through the KDD-G, with maximum fines of 6% of worldwide annual turnover and periodic penalties of up to 5% of average daily worldwide turnover. The AI Act allows fines of up to EUR 35 million or 7% of worldwide annual turnover for prohibited practices and up to EUR 15 million or 3% for specified other breaches; ECG and FAGG violations can also lead to consumer claims, injunctions, contract remedies, and administrative or court…" } ] }, { "id": "brief:consumer--br", "sector": "consumer", "geo": "br", "sector_name": "Consumer Platforms", "geo_name": "Brazil", "url": "/brief/consumer--br.html", "overview": "As of August 5, 2026, Brazil has no comprehensive federal artificial intelligence law in force, so companies mainly follow existing rules on personal data, internet services, consumer protection, e-commerce, and minors’ safety. The General Data Protection Law (LGPD), the Civil Rights Framework for the Internet, the Consumer Defense Code, and Decree No. 7.962/2013 cover data use, automated decisions, online services, advertising, contracts, and customer rights; the Digital Child and Adolescent Statute, in force since March 17, 2026, and Decree No. 12.880/2026 add safety, age checks, parental controls, reporting, and limits on profiling and advertising for services aimed at, or likely to be used by, minors. Nothing sector-specific binds them today unless their product is directed at or likely to be accessed by children or adolescents, in which case the 2026 minors’ safety rules apply.", "instruments": [ { "name": "Lei Geral de Proteção de Dados Pessoais (LGPD) — Law No. 13.709/2018", "status": "in force", "year": 2018, "url": "https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709compilado.htm", "summary": "Applies to personal-data processing by apps, platforms, chatbots, and AI systems where personal data is involved, including account data, personalization, profiling, model development and fine-tuning, sharing, retention, security, and international transfers. Operators need an applicable legal basis, transparent notices, data-subject rights processes, security and governance controls, incident procedures, and…" }, { "name": "Estatuto Digital da Criança e do Adolescente (ECA Digital) — Law No. 15.211/2025", "status": "in force since March 17, 2026", "year": 2025, "url": "https://www.planalto.gov.br/ccivil_03/_ato2023-2026/2025/lei/l15211.htm", "summary": "Applies nationwide to information-technology products and services directed to children or adolescents or likely to be accessed by them, regardless of the provider’s location. It requires prevention, protection, information, and security measures; privacy- and safety-oriented design; risk and impact documentation; age-assurance and parental-supervision mechanisms; controls for inappropriate or prohibited content;…" }, { "name": "Decreto No. 12.880/2026 — Regulation of the ECA Digital and National Policy for Promotion and Protection of Children’s and Adolescents’ Rights in the Digital Environment", "status": "in force", "year": 2026, "url": "https://www.planalto.gov.br/ccivil_03/_ato2023-2026/2026/decreto/d12880.htm", "summary": "Regulates Law No. 15.211/2025 and establishes implementing rules and a federal policy for children’s and adolescents’ digital rights. For relevant operators, it details age-assurance terminology and controls, age signals, privacy and data-minimization requirements for age assessment, restrictions on reuse and profiling of age-assurance data, parental-supervision tools, content and service access controls,…" }, { "name": "Marco Civil da Internet — Law No. 12.965/2014", "status": "in force", "year": 2014, "url": "https://www.planalto.gov.br/ccivil_03/_ato2011-2014/2014/lei/l12965.htm", "summary": "Sets baseline rules for internet applications and providers, including privacy, freedom of expression, user rights, application-access logs, lawful cooperation, and intermediary liability for third-party content. Consumer platforms and chatbot operators should align logging, retention, disclosure, notice-and-response, account governance, and content-moderation workflows with the statute and its implementing…" }, { "name": "Código de Defesa do Consumidor (Consumer Defense Code) — Law No. 8.078/1990", "status": "in force", "year": 1990, "url": "https://www.planalto.gov.br/ccivil_03/leis/l8078compilado.htm", "summary": "Applies to digital services supplied to consumers, including paid services and, where a consumer relationship exists, advertiser-supported platforms. It governs clear and accurate information, advertising, contracts and terms, abusive or deceptive practices, service defects, consumer complaints, data-file rights, and civil and administrative liability for consumer harm. AI-enabled functionality can create compliance…" }, { "name": "Decreto No. 7.962/2013 (Decreto do Comércio Eletrônico) — E-commerce Regulation", "status": "in force", "year": 2013, "url": "https://www.planalto.gov.br/ccivil_03/_ato2011-2014/2013/decreto/d7962.htm", "summary": "Regulates the Consumer Defense Code for electronic contracting. It requires clear, prominent, and readily accessible information about the supplier, product or service, and transaction; provides rules for electronic contracting, facilitated consumer service, confirmation and correction of orders, and exercise of the statutory right of withdrawal; and requires prompt communication with payment providers and refunds…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The primary federal regulator is the Autoridade Nacional de Proteção de Dados (ANPD), which supervises the LGPD and has regulatory and supervisory responsibilities under the ECA Digital and Decree No. 12.880/2026. Consumer-facing conduct may also involve the Ministry of Justice and Public Security (MJSP), SENACON, PROCONs, and the courts, depending on the issue; the ANPD, MJSP, and Secom/PR are specifically involved in ECA Digital implementation." }, { "q": "Do we need a license, permit, or registration?", "a": "No general federal AI, platform, chatbot, or consumer-app license, permit, or registration is required under the instruments in the briefing. The Marco Civil da Internet, LGPD, Consumer Defense Code, Decree No. 7.962/2013, ECA Digital, and Decree No. 12.880/2026 impose operational and compliance duties rather than a general licensing regime; any separate authorization depends on the product or regulated activity." }, { "q": "What are the main data and privacy obligations?", "a": "Under the LGPD, operators must identify a lawful basis, provide transparent notices, honor data-subject rights, maintain security and governance controls, manage incidents, regulate sharing and international transfers, and document retention and processing practices. These duties cover account data, personalization, profiling, automated decisions, model development or fine-tuning, and age-assurance data; the ECA Digital and Decree No. 12.880/2026 add child-focused minimization, parental-supervision, and limits on reuse or profiling of age-assurance information." }, { "q": "Which AI-specific rules apply?", "a": "Brazil has no comprehensive federal AI statute in force as of August 5, 2026, so AI systems mainly fall under the LGPD, Marco Civil da Internet, Consumer Defense Code, and, where minors may access the service, the ECA Digital and Decree No. 12.880/2026. The LGPD is relevant to automated decisions and model-related personal-data processing, while the Consumer Defense Code addresses misleading, unsafe, discriminatory, or inadequately disclosed AI outputs, recommendations, advertising, profiling, and service characteristics; PL No. 2.338/2023 remains non-binding unless enacted." }, { "q": "What are the enforcement and penalty risks?", "a": "The ANPD may issue warnings and corrective orders, impose daily or simple fines, publicize violations, block or delete data, suspend processing or database operations, and prohibit processing activities. Under LGPD Article 52, a simple fine can reach 2% of Brazilian revenue from the preceding year, excluding taxes, capped at R$50 million per infraction; consumer and minors’ safety failures can also create administrative, civil, contractual, and platform-liability exposure under the Consumer Defense Code, Decree No. 7.962/2013, Marco Civil da Internet, ECA Digital, and Decree No. 12.880/2026." } ] }, { "id": "brief:consumer--ca-state", "sector": "consumer", "geo": "ca-state", "sector_name": "Consumer Platforms", "geo_name": "California", "url": "/brief/consumer--ca-state.html", "overview": "California imposes broad consumer-privacy duties plus targeted rules for children’s online services, data brokers, and generative AI, with obligations depending on your data practices, whether you are a data broker, what you know about users’ ages, how your feeds work, and whether you develop, host, or distribute AI systems or content. Plan for privacy governance, consumer-rights requests, data-broker registration and deletion processes, age and parental-consent controls, safer product design, AI-content disclosures, and training-data records; requirements are phased in, and some children’s-safety rules are currently blocked by court orders or awaiting implementing regulations.", "instruments": [ { "name": "California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA)", "status": "in force", "year": 2018, "url": "https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?article=&chapter=&division=3.&lawCode=CIV&part=4.&title=1.81.5.", "summary": "California’s core consumer-privacy regime applies to covered businesses meeting statutory thresholds and regulates the collection, use, disclosure, sale, and sharing of California residents’ personal information. It provides rights including access, deletion, correction, portability, and opt-out rights relating to sale, sharing, targeted advertising, and certain automated decisionmaking, with additional rules for…" }, { "name": "Children’s Online Privacy Protection Rule (COPPA Rule)", "status": "in force", "year": 1998, "url": "https://www.ftc.gov/business-guidance/resources/complying-coppa-frequently-asked-questions", "summary": "The federal rule applies to child-directed online services and to general-audience services with actual knowledge that they collect personal information from children under 13. Covered operators must provide compliant privacy notices, obtain verifiable parental consent when required, provide parental access and deletion rights, limit collection and retention, and maintain reasonable security. It remains relevant to…" }, { "name": "Protecting Our Kids from Social Media Addiction Act (SB 976)", "status": "partially in force; portions subject to preliminary injunction and 2027 implementation", "year": 2024, "url": "https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?article=&chapter=24.&division=20.&lawCode=HSC&part=&title=", "summary": "For operators of services that provide covered personalized or ‘addictive’ feeds as a significant part of the service, SB 976 regulates access by California users under 18 to addictive feeds and certain notification features. From January 1, 2025 through December 31, 2026, the principal restrictions generally apply when the operator has actual knowledge that a user is a minor; beginning January 1, 2027, the statute…" }, { "name": "California AI Transparency Act (SB 942), as amended by AB 853", "status": "in force; phased requirements beginning August 2, 2026, January 1, 2027, and January 1, 2028", "year": 2024, "url": "https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?article=&chapter=25.&division=8.&lawCode=BPC&part=&title=", "summary": "SB 942 was enacted in 2024 and amended by AB 853, which was approved by the Governor and chaptered on October 13, 2025; AB 853 is enacted law, not a pending bill. The Act is operative on August 2, 2026 for covered providers of publicly accessible generative-AI systems with more than 1,000,000 monthly visitors or users. Covered providers must offer a no-cost AI-detection tool for qualifying image, video, and audio…" }, { "name": "Generative Artificial Intelligence: Training Data Transparency (AB 2013)", "status": "in force", "year": 2024, "url": "https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202320240AB2013", "summary": "AB 2013 was approved by the Governor and chaptered on September 28, 2024. On or before January 1, 2026, and before each subsequent release or substantial modification made publicly available to Californians, developers of covered generative-AI systems or services released on or after January 1, 2022 must post website documentation about the training data. Required documentation includes a high-level summary of…" }, { "name": "California Delete Act (SB 362)", "status": "in force; data-broker deletion processing began August 1, 2026", "year": 2023, "url": "https://cppa.ca.gov/regulations/drop.html", "summary": "The Delete Act regulates businesses that meet California’s data-broker definition, including consumer platforms that collect personal information from sources other than the consumer and sell that information to third parties. Covered data brokers must register annually with the California Privacy Protection Agency, pay applicable fees, provide required disclosures, and use the Agency’s Delete Request and Opt-out…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The California Privacy Protection Agency (CPPA) administers and enforces the CCPA/CPRA and oversees data-broker registration and the Delete Request and Opt-out Platform (DROP). The California Attorney General and California Department of Justice enforce state consumer-protection, SB 976, and AI-transparency requirements, while the Federal Trade Commission (FTC) enforces COPPA; city attorneys and county counsels may also enforce specified California AI-transparency provisions." }, { "q": "Do we need a license, permit, or registration?", "a": "There is no general California license or permit for operating a consumer platform, chatbot, or generative-AI service under the briefing. Registration is required if the business qualifies as a data broker under the California Delete Act: it must register annually with the CPPA, pay applicable fees, provide required disclosures, and use DROP; other requirements depend on whether the product is covered by the CCPA/CPRA, COPPA, SB 976, or the AI statutes." }, { "q": "What are the main data and privacy obligations?", "a": "Covered businesses must comply with the CCPA/CPRA’s notice, access, deletion, correction, portability, opt-out, sensitive-data, retention, contract, and security requirements, including controls for sale, sharing, targeted advertising, and certain automated decisionmaking. Child-directed services or services with actual knowledge of users under 13 must also comply with COPPA’s parental-consent, notice, access, deletion, collection, retention, and security rules; data brokers additionally must operate the Delete Act registration and DROP workflows." }, { "q": "Which AI-specific rules apply?", "a": "AB 2013 requires developers of covered generative-AI systems or services released on or after January 1, 2022 to publish training-data documentation by January 1, 2026 and before later public releases or substantial modifications. SB 942, as amended by AB 853, applies from August 2, 2026 to covered publicly accessible generative-AI providers above the statutory user threshold, with AI-detection and provenance-disclosure duties; additional obligations begin January 1, 2027 for large online platforms and GenAI-hosting platforms, and January 1, 2028 for specified capture-device manufacturers.…" }, { "q": "What are the enforcement and penalty risks?", "a": "The CPPA or Attorney General may seek CCPA/CPRA administrative or civil penalties of up to $2,663 per violation or $7,988 for intentional violations and violations involving consumers under 16, with private breach damages generally ranging from $107 to $799 per consumer per incident under the adjusted 2025 amounts. COPPA violations can carry FTC civil penalties of up to $53,088 per violation, and violations of the California AI Transparency Act carry $5,000 per violation per day; regulators may also seek injunctions, corrective orders, deletion, disgorgement, or other relief." } ] }, { "id": "brief:consumer--co", "sector": "consumer", "geo": "co", "sector_name": "Consumer Platforms", "geo_name": "Colorado", "url": "/brief/consumer--co.html", "overview": "Colorado consumer-tech and artificial-intelligence companies serving Colorado residents generally face privacy rules, artificial-intelligence discrimination and consumer-disclosure rules, protections for minors, and federal Children’s Online Privacy Protection Act requirements for children under 13. The Colorado Artificial Intelligence Act, Senate Bill 24-205, remains the main artificial-intelligence law, but Senate Bill 25B-004 delays its requirements until June 30, 2026; a separate conversational-artificial-intelligence law generally begins imposing duties on January 1, 2027. Nothing sector-specific binds every company today, because obligations depend on the product, data practices, users’ ages, artificial-intelligence features, and whether a service meets Colorado’s social-media platform definition.", "instruments": [ { "name": "Colorado Privacy Act (CPA), including minor-data amendments under SB24-041", "status": "in force; minor-data amendments effective October 1, 2025", "year": 2021, "url": "https://coag.gov/resources/colorado-privacy-act/", "summary": "The CPA generally applies to covered controllers doing business in Colorado or targeting Colorado residents, subject to statutory thresholds, and requires privacy notices, data minimization, security safeguards, data-protection assessments, and consent for certain sensitive-data processing. Consumers generally have rights to access, correct, delete, obtain portability, and opt out of sale, targeted advertising, and…" }, { "name": "Colorado Artificial Intelligence Act (SB24-205), as amended by SB25B-004", "status": "in force; operative SB24-205 requirements effective June 30, 2026", "year": 2024, "url": "https://leg.colorado.gov/bills/SB25B-004", "summary": "SB24-205 regulates developers and deployers of high-risk artificial intelligence systems used in consequential decisions. Developers must use reasonable care against known or reasonably foreseeable algorithmic-discrimination risks and support compliance through system disclosures, documentation, impact-assessment information, public risk-management disclosures, and reporting of discovered risks. Deployers must use…" }, { "name": "Conversational Artificial Intelligence Service Operator Requirements (HB26-1263)", "status": "adopted; act effective August 12, 2026, with substantive operator duties generally effective January 1, 2027", "year": 2026, "url": "https://leg.colorado.gov/bills/HB26-1263", "summary": "The law covers operators that make available or control access to publicly available conversational AI services that primarily simulate human conversation through textual, visual, or aural communications. Beginning January 1, 2027, operators must use commercially reasonable or generally accepted methods to estimate or obtain user age and must provide specified protections for minor account holders and minor users,…" }, { "name": "Privacy Protections for Children's Online Data (SB24-041)", "status": "in force; effective October 1, 2025", "year": 2024, "url": "https://leg.colorado.gov/bills/SB24-041", "summary": "SB24-041 is the enacted Colorado Privacy Act amendment specifically addressing online services, products, and features offered to consumers whom the controller knows or willfully disregards are minors. It requires reasonable care against heightened risks of harm and data-protection assessments where such risks exist; absent required consent, it restricts targeted advertising, sale, consequential-decision profiling,…" }, { "name": "Healthier Social Media Use by Youth (HB24-1136)", "status": "in force; platform function requirement applies on or after January 1, 2026", "year": 2024, "url": "https://leg.colorado.gov/bills/HB24-1136", "summary": "This is a narrower social-media rule, not a generally applicable requirement for all consumer apps or AI companies. For a statutory social-media platform, the law requires a function for users under 18 that provides information about social media's effects on the developing brain and youth mental and physical health, or displays a notification every 30 minutes when the user has spent one hour on social media during…" }, { "name": "Children's Online Privacy Protection Rule (COPPA Rule)", "status": "in force", "year": 2000, "url": "https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa", "summary": "The federal rule applies to child-directed online services that collect personal information from children under 13 and to general-audience services with actual knowledge that they are collecting such information. Covered operators generally need a compliant privacy policy, direct notice to parents, verifiable parental consent, parental access and deletion rights, reasonable security, retention limits, and…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Colorado Department of Law, led by the Attorney General and including its Technology & Privacy Protection Unit, is the principal state regulator for the Colorado Privacy Act (CPA), SB24-205, and HB26-1263; Colorado district attorneys also enforce the CPA. The Federal Trade Commission (FTC) enforces the federal COPPA Rule, while the Colorado General Assembly enacted the relevant statutes and the Attorney General has rulemaking authority for the CPA and SB24-205." }, { "q": "Do we need a license, permit, or registration?", "a": "The briefing identifies no general Colorado license, permit, or registration requirement merely to operate a consumer app, chatbot, social platform, or AI service. Compliance is instead triggered by the product’s data practices, minor audience, AI functions, consequential-decision use, or status as a statutory social-media platform or conversational-AI service; HB26-1263 adds annual reporting to the Department of Law for covered conversational-AI operators beginning January 1, 2027." }, { "q": "What are the main data and privacy obligations?", "a": "The CPA requires covered controllers to provide privacy notices, minimize data collection, maintain reasonable security, conduct required data-protection assessments, obtain consent for certain sensitive-data processing, and honor access, correction, deletion, portability, sale, targeted-advertising, and profiling rights. Under SB24-041, effective October 1, 2025, protections apply when the controller knows or willfully disregards that a consumer is a minor, including limits on targeted advertising, sale, consequential-decision profiling, undisclosed secondary uses, excessive retention,…" }, { "q": "Which AI-specific rules apply?", "a": "SB24-205, as amended by SB25B-004, imposes operative duties beginning June 30, 2026 on developers and deployers of high-risk AI used in consequential decisions, including risk management, impact assessments, documentation, consumer notices, correction and human-review appeal processes, public disclosures, and algorithmic-discrimination reporting; it also requires disclosure when a consumer interacts with AI. HB26-1263 generally imposes additional duties beginning January 1, 2027 on publicly available conversational-AI services, including age estimation, persistent AI disclosure, minor…" }, { "q": "What are the enforcement and penalty risks?", "a": "CPA and SB24-041 violations are deceptive trade practices enforceable by the Colorado Attorney General and district attorneys, with civil penalties of up to $20,000 per violation; SB24-205 violations are deceptive trade practices enforced by the Attorney General and carry the same Colorado Consumer Protection Act penalty framework. HB26-1263 violations are enforceable by the Attorney General at up to $5,000 per violation, with each violating conversational-AI output potentially treated as a separate violation, and COPPA violations can draw FTC civil penalties of up to $53,088 per violation." } ] }, { "id": "brief:consumer--de", "sector": "consumer", "geo": "de", "sector_name": "Consumer Platforms", "geo_name": "Germany", "url": "/brief/consumer--de.html", "overview": "A Germany-facing consumer platform must comply with European Union rules on personal data, online services, artificial intelligence, business fairness and data access, plus German rules on enforcing the Digital Services Act, protecting children, media content, cookies and access to devices. The Digital Services Act is enforced in Germany by the Federal Network Agency under the German Digital Services Act, with the German states and their Commission for the Protection of Minors in the Media also involved in child and media-content matters. No single sector-specific rule binds the platform today unless it operates as a social network, hosting service, chatbot, marketplace, search engine, video-sharing service, connected-product provider or data-processing service, or is likely to be used by children.", "instruments": [ { "name": "General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679", "status": "in force; applicable since 25 May 2018", "year": 2016, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679", "summary": "The principal EU data-protection framework for consumer platforms and AI operators processing personal data in connection with accounts, profiling, recommender systems, moderation, targeted advertising, analytics, safety tools and chatbot interactions. It requires a lawful basis, transparency, purpose limitation, data minimisation, retention controls, security, processor governance, data-subject rights, breach…" }, { "name": "Digital Services Act (DSA) — Regulation (EU) 2022/2065", "status": "in force; generally applicable since 17 February 2024", "year": 2022, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065", "summary": "The core EU framework for intermediary services, hosting services, online platforms, online marketplaces, search engines and very large online platforms or search engines. It imposes rules on terms and conditions, points of contact, notice-and-action procedures, statements of reasons, complaints and out-of-court dispute settlement, trusted flaggers, advertising transparency, trader traceability, recommender-system…" }, { "name": "Artificial Intelligence Act — Regulation (EU) 2024/1689", "status": "in force; phased application, including prohibitions and AI-literacy duties from 2 February 2025 and further obligations on later statutory dates", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689", "summary": "The EU's horizontal AI framework applies to relevant providers, deployers, importers, distributors and other operators, including operators outside the EU whose systems or outputs are used in the Union. It prohibits specified AI practices, regulates high-risk systems, imposes transparency duties for certain interactive, generative and biometric systems, establishes obligations for general-purpose AI model providers,…" }, { "name": "Germany-specific digital, youth-protection and device-privacy framework: Digitale-Dienste-Gesetz (DDG), Jugendmedienschutz-Staatsvertrag (JMStV), Jugendschutzgesetz (JuSchG) and Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG)", "status": "in force; DDG effective since 14 May 2024; current JMStV version effective since 1 December 2025; TDDDG effective since 1 December 2021 under its 2021 enactment and renamed from TTDSG in 2024; JuSchG in force in its amended form", "year": 2024, "url": "https://www.gesetze-im-internet.de/ddg/BJNR0950B0024.html", "summary": "The DDG supplies Germany's national framework for implementing and enforcing parts of the DSA, designates the Bundesnetzagentur as Digital Services Coordinator, and contains additional German information and digital-service provisions. The JMStV, originally concluded in 2002 and currently in its version effective from 1 December 2025, governs youth protection in electronic media and addresses harmful or…" }, { "name": "Platform-to-Business Regulation — Regulation (EU) 2019/1150 — and German Act against Unfair Competition (UWG)", "status": "P2B Regulation in force and applicable since 12 July 2020; UWG in force in its amended form", "year": 2019, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32019R1150", "summary": "The Platform-to-Business Regulation applies where an online intermediation service or online search engine serves business users or corporate website users offering goods or services to EU consumers. It requires transparent terms, advance notice of changes, explanation of ranking parameters, disclosure of differentiated treatment, restrictions and reasons for suspension or termination, internal complaint handling…" }, { "name": "EU Data Act — Regulation (EU) 2023/2854", "status": "in force; generally applicable since 12 September 2025", "year": 2023, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32023R2854", "summary": "The Data Act creates rights and obligations concerning access to and use of data generated by connected products and related services, business-to-business and business-to-government data sharing, contractual fairness for data-sharing terms, switching between data-processing services, interoperability and safeguards against unlawful third-country access to non-personal data. It matters to consumer platforms and AI…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Bundesnetzagentur acts as Germany’s Digital Services Coordinator under the Digitale-Dienste-Gesetz (DDG) and coordinates national Digital Services Act (DSA) enforcement. Data protection is supervised by the competent German Länder data-protection authorities and, within its remit, the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI); youth and media matters may also involve the Bundeszentrale für Kinder- und Jugendmedienschutz (BzKJ), the Landesmedienanstalten and the Kommission für Jugendmedienschutz (KJM). The responsible authority depends on the service,…" }, { "q": "Do we need a license, permit, or registration?", "a": "Generally, the briefing does not identify a general Germany-specific licence, permit or pre-market registration for consumer platforms, chatbots or ordinary AI features under the GDPR, DSA, AI Act, DDG, JMStV, JuSchG or TDDDG. Instead, providers must meet substantive duties such as points of contact, terms and conditions, notice-and-action procedures, complaints handling, transparency, youth-protection controls and, where applicable, AI Act conformity and documentation requirements. Any additional filing or approval depends on the product perimeter, such as a designated very large service,…" }, { "q": "What are the main data and privacy obligations?", "a": "The GDPR requires a lawful basis, transparency, purpose limitation, data minimisation, retention controls, security, processor governance, data-subject rights, breach procedures, impact assessments where required and safeguards for automated decision-making. For accounts, profiling, recommender systems, targeted advertising, moderation, safety tools and chatbot interactions, document the processing purposes, roles, lawful bases and retention periods. The TDDDG separately governs access to or storage of information on users’ devices, including cookies, SDKs and local storage; assess that step…" }, { "q": "Which AI-specific rules apply?", "a": "The Artificial Intelligence Act (Regulation (EU) 2024/1689) applies according to the operator’s role as provider, deployer, importer, distributor or other relevant actor, including in some cases where an operator outside the EU makes systems or outputs available in the Union. The relevant duties may include prohibitions, AI-literacy measures, transparency for interactive or synthetic-content systems, high-risk requirements, governance, risk management, logging, human oversight, accuracy, robustness, cybersecurity and general-purpose-AI obligations; prohibitions and AI-literacy duties have…" }, { "q": "What are the enforcement and penalty risks?", "a": "GDPR infringements can attract administrative fines of up to EUR 20 million or 4% of worldwide annual turnover, with a lower tier of EUR 10 million or 2% for specified obligations. Under the DSA, the European Commission can fine very large online platforms and search engines up to 6% of worldwide annual turnover, while Member State enforcement rules must allow up to 6% for non-compliance and up to 1% for certain information or inspection failures; corrective measures can also include orders and restrictions. The AI Act allows fines up to EUR 35 million or 7% of worldwide annual turnover for…" } ] }, { "id": "brief:consumer--eu", "sector": "consumer", "geo": "eu", "sector_name": "Consumer Platforms", "geo_name": "European Union", "url": "/brief/consumer--eu.html", "overview": "EU consumer-facing technology and artificial intelligence (AI) businesses may be covered by rules on online platforms and content, personal data, AI systems, digital-market power, connected-product data, cybersecurity, consumer contracts, and accessibility, including the Digital Services Act, the General Data Protection Regulation, the Artificial Intelligence Act, the Digital Markets Act, the Data Act, the Cyber Resilience Act, the Consumer Rights Directive, and the European Accessibility Act. The Artificial Intelligence Act’s rules for general-purpose AI models have applied since August 2, 2025, while its other requirements start in stages, and the Consumer Rights Directive and European Accessibility Act depend on national implementing laws; today, no single sector-specific rule automatically applies to every operator, although the relevant rules bind you if your product is a qualifying online platform, uses covered AI or connected products, processes personal data, or falls within the other defined categories.", "instruments": [ { "name": "Digital Services Act", "status": "in force", "year": 2022, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065", "summary": "Applies according to the service's role and functionality to intermediary services, hosting services, online platforms, and very large online platforms or search engines offering services in the EU. A standalone chatbot is not regulated merely because it is a chatbot; DSA obligations arise when the product or feature is part of a qualifying intermediary service or online platform. Relevant duties include…" }, { "name": "Artificial Intelligence Act", "status": "in force; staged application", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689", "summary": "Creates risk-based obligations for providers, deployers, importers, and distributors of AI systems and for providers of general-purpose AI models. Prohibited-practice and AI-literacy rules began applying on February 2, 2025. Governance rules and GPAI obligations, including technical documentation, downstream information, copyright-compliance policies, training-content summaries, and systemic-risk duties, began…" }, { "name": "Digital Markets Act", "status": "in force", "year": 2022, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R1925", "summary": "Applies to designated gatekeepers and their core platform services, rather than to consumer-tech companies solely because they operate a popular app. Relevant obligations include restrictions on combining or using certain personal data across services without the required choice and consent, interoperability and access requirements in specified contexts, limits on self-preferencing and anti-steering restrictions,…" }, { "name": "Data Act", "status": "in force; applies generally from September 12, 2025", "year": 2023, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32023R2854", "summary": "Regulates access to and use of data generated by connected products and related services, including consumer devices and IoT products, and governs certain business-to-business and business-to-government data-sharing situations. It gives users rights to access and share data generated by connected products, imposes data-access and fair-contract duties on data holders, addresses cloud-switching and interoperability,…" }, { "name": "Cyber Resilience Act", "status": "in force; main obligations apply from December 11, 2027", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R2847", "summary": "Imposes horizontal cybersecurity and vulnerability-handling requirements on products with digital elements placed on the EU market, including many hardware and software products, and assigns duties across manufacturers, importers, and distributors. Operators that develop or market consumer software, connected devices, AI-enabled products, or product-related digital components may need cybersecurity-by-design, risk…" }, { "name": "Consumer Rights Directive and European Accessibility Act", "status": "in force; national implementation and sector-specific application", "year": 2011, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32011L0083", "summary": "The Consumer Rights Directive (2011) governs distance and off-premises consumer contracts, pre-contract information, withdrawal rights, digital-content and digital-service contracts, delivery and payment information, and certain consumer-remedy and cancellation processes; it is implemented through Member State law and has been amended for modern digital practices. The European Accessibility Act is Directive (EU)…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The European Commission is the central enforcer for the Digital Markets Act and directly supervises very large online platforms and search engines under the Digital Services Act; Member State Digital Services Coordinators enforce the DSA for other intermediary services. National data-protection authorities, coordinated by the European Data Protection Board, enforce the GDPR, while the European AI Office and designated national competent authorities oversee the AI Act. Depending on the product, national consumer-protection, market-surveillance, notifying, cybersecurity, and accessibility…" }, { "q": "Do we need a license, permit, or registration?", "a": "There is generally no blanket EU operating licence for a consumer social app, chatbot, or online service under the briefing. Obligations depend on the product’s role: qualifying intermediaries must meet DSA transparency and compliance duties; designated DMA gatekeepers have Commission notification and compliance obligations; high-risk AI systems and products with digital elements may require conformity assessment, technical documentation, CE-related processes, or market-surveillance engagement under the AI Act and Cyber Resilience Act. Consumer Rights Directive and European Accessibility Act…" }, { "q": "What are the main data and privacy obligations?", "a": "The GDPR requires a lawful basis, transparent notices, purpose limitation, data minimisation, retention controls, security, data-subject rights, breach governance, and appropriate processor and international-transfer arrangements; high-risk processing may require a data-protection impact assessment and a data-protection officer. Children’s data, profiling, behavioural advertising, biometric or sensitive data, and chatbot conversations require particular scrutiny. The DMA adds consent and choice constraints for combining personal data by gatekeepers, while the Data Act adds user access and…" }, { "q": "Which AI-specific rules apply?", "a": "The AI Act applies on a risk basis: prohibited practices and AI-literacy duties have applied since February 2, 2025; GPAI obligations have applied since August 2, 2025; and the principal application date is August 2, 2026, with Article 6(1) obligations applying from August 2, 2027 under the briefing. Chatbots may require disclosure that users are interacting with AI, synthetic or manipulated content may require labelling, and high-risk systems require risk management, data governance, documentation, logging, human oversight, accuracy, robustness, and cybersecurity; the DSA separately requires…" }, { "q": "What are the enforcement and penalty risks?", "a": "The DSA allows fines of up to 6% of worldwide annual turnover, the DMA up to 10% or 20% for repeated infringements, and the GDPR up to €20 million or 4% of worldwide annual turnover, whichever is higher. Under the AI Act, prohibited practices can attract up to €35 million or 7% of worldwide turnover, other operator violations up to €15 million or 3%, and misleading information up to €7.5 million or 1%; systematic DMA breaches can also lead to behavioural or structural remedies, while the DSA can support corrective orders and, in extreme cases, service suspension proceedings." } ] }, { "id": "brief:consumer--fr", "sector": "consumer", "geo": "fr", "sector_name": "Consumer Platforms", "geo_name": "France", "url": "/brief/consumer--fr.html", "overview": "France’s Digital Services Act, an European Union regulation for online platforms, is enforced by the French audiovisual and digital communications regulator, the data protection regulator, and the consumer and competition authority under the Law to Secure and Regulate the Digital Space. The General Data Protection Regulation and France’s Informatique et Libertés Act govern personal and training-data use, while the Artificial Intelligence Act adds rules for AI models, systems, transparency, and prohibited practices; nothing uniquely sector-specific binds the business today beyond the rules triggered by its platform, data, content, advertising, or AI activities.", "instruments": [ { "name": "Digital Services Act (Regulation (EU) 2022/2065)", "status": "in force", "year": 2022, "url": "https://eur-lex.europa.eu/eli/reg/2022/2065/oj", "summary": "Applies to intermediary services and online platforms serving EU users, including social networks, marketplaces and chatbot or content-hosting services. It requires notice-and-action systems, explanations and appeals for moderation decisions, advertising and recommender transparency, trader identification where relevant, and enhanced risk, audit and minors-safety controls for very large platforms." }, { "name": "General Data Protection Regulation (Regulation (EU) 2016/679)", "status": "in force", "year": 2016, "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "summary": "Governs personal-data collection, profiling, personalization, safety monitoring, advertising and AI training or deployment involving identifiable users. Companies need a lawful basis, purpose limitation, data-subject rights, security, processor controls and risk assessments; France sets the online-consent age at 15 through its national law." }, { "name": "Loi visant à sécuriser et à réguler l’espace numérique (SREN)", "status": "partially in force", "year": 2024, "url": "https://www.legifrance.gouv.fr/loda/id/JORFTEXT000049563368", "summary": "France’s principal national digital-platform law, implementing and supplementing the DSA and amending the LCEN. It strengthens Arcom’s, CNIL’s and DGCCRF’s enforcement roles, adds online-minor protections and pornography age-assurance measures, supports rapid action against illegal content, and creates French procedural and transparency requirements." }, { "name": "Artificial Intelligence Act (Regulation (EU) 2024/1689)", "status": "adopted, phasing in", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689", "summary": "Applies to providers and deployers of AI systems and general-purpose AI models placed on or used in the EU market. Prohibited-practice and AI-literacy rules already apply, GPAI obligations began in 2025, and most remaining rules apply from 2 August 2026, with certain high-risk obligations extended to 2027 or 2028; transparency duties cover AI-generated or manipulated content and user interaction with AI." }, { "name": "Loi Informatique et Libertés", "status": "in force", "year": 1978, "url": "https://www.cnil.fr/fr/le-cadre-national/la-loi-informatique-et-libertes", "summary": "France’s national data-protection statute supplements the GDPR and gives the CNIL its supervisory and enforcement framework. For consumer platforms, the key French-specific point is that a child under 15 generally needs joint consent with a holder of parental authority when consent is the legal basis for an online-service data processing." } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "Arcom is France’s Digital Services Coordinator under the SREN framework and supervises the DSA, while CNIL handles data-protection matters and DGCCRF handles consumer-protection and marketplace provisions. The European Commission directly supervises very large online platforms and search engines, and the AI Act may also involve the designated French market-surveillance and notified-authority framework depending on the AI system. ([arcom.fr](https://www.arcom.fr/en/professional-space/regulations-on-digital-services-or-dsa-obligations-and-concerned-services?utm_source=openai))" }, { "q": "Do we need a license, permit, or registration?", "a": "There is generally no single French licence or prior authorisation to operate a consumer platform, chatbot or content service, but the DSA, GDPR, SREN and AI Act impose obligations based on the service’s role and features. Online platforms may need to provide information for the DSA transparency database, and additional procedures apply if the product is a marketplace, hosts regulated content, uses age assurance, or falls within a high-risk AI category.…" }, { "q": "What are the main data and privacy obligations?", "a": "The GDPR and Loi Informatique et Libertés require a lawful basis, purpose limitation, transparency, data-subject rights, security, processor controls and risk assessments for user data, profiling, personalisation, safety monitoring, advertising and AI training or deployment. For children, France generally requires joint consent with a holder of parental authority when consent is the legal basis for an online service and sets the relevant online-consent age at 15; the service must also apply appropriate safeguards and comply with DSA and SREN minors’ protections." }, { "q": "Which AI-specific rules apply?", "a": "The AI Act applies according to whether the company is a provider or deployer of an AI system or general-purpose AI model, and whether the system is prohibited, high-risk or subject to transparency duties. Prohibited-practice and AI-literacy rules already apply; GPAI obligations began in 2025, and from 2 August 2026 most remaining requirements apply, including Article 50 transparency for user interaction and AI-generated or manipulated content, subject to specific transitional and high-risk extensions." }, { "q": "What are the enforcement and penalty risks?", "a": "CNIL GDPR fines can reach €20 million or 4% of worldwide annual turnover, while DSA fines can reach 6% of global annual turnover, with periodic penalties of up to 5% of average daily worldwide turnover and possible access restrictions as a last resort. Under the AI Act, prohibited-practice violations can reach €35 million or 7% of worldwide annual turnover, while certain other operator breaches can reach €15 million or 3%; Arcom, CNIL, DGCCRF, the Commission and other competent authorities may also order corrective measures, investigations or cessation of non-compliance.…" } ] }, { "id": "brief:consumer--ny", "sector": "consumer", "geo": "ny", "sector_name": "Consumer Platforms", "geo_name": "New York", "url": "/brief/consumer--ny.html", "overview": "New York’s rules for consumer-facing artificial intelligence and online platforms cover minors’ safety, children’s personal data, cybersecurity, content removal, and truthful marketing. The SAFE for Kids Act restricts addictive feeds and overnight notifications for users under 18 on covered social-media platforms, while the New York Child Data Protection Act limits processing, advertising, sale, and sharing of minors’ data; the Stop Hacks and Improve Electronic Data Security Act requires reasonable security safeguards and breach notifications. Federal requirements also may apply, including the Children’s Online Privacy Protection Act for services directed to children and the Tools to Address Known Exploitation by Immobilizing Technological Deepfakes on Websites and Networks Act for user-generated intimate imagery, and New York prohibits misleading claims about artificial intelligence capabilities, safety, privacy, moderation, or performance; these sector-specific obligations may bind you today if your product falls within those categories.", "instruments": [ { "name": "New York SAFE for Kids Act", "status": "adopted; final rules released July 28, 2026; statutory requirements effective January 25, 2027", "year": 2024, "url": "https://ag.ny.gov/press-release/2026/attorney-general-james-and-governor-hochul-release-final-safe-kids-act-rules", "summary": "Applies to covered social-media or addictive online platforms within the statute’s scope, including platforms displaying user-generated content and meeting the rules’ criteria for addictive feeds. For users under 18, covered operators must generally disable algorithmically personalized addictive feeds by default and provide content from followed or otherwise selected accounts in a set sequence, unless valid parental…" }, { "name": "New York Child Data Protection Act (NYCDPA), N.Y. Gen. Bus. Law §§ 899-ee et seq.", "status": "in force since June 20, 2025", "year": 2023, "url": "https://ag.ny.gov/child-data-protection-act-guidance", "summary": "Applies principally to operators of websites, online services, online applications, mobile applications, connected devices, or portions thereof that control the purposes and means of processing personal data and are primarily directed to minors or have actual knowledge that a user is a minor. Operators generally may not collect, use, share, or sell minors’ personal data for advertising or other non-permissible…" }, { "name": "New York SHIELD Act (Stop Hacks and Improve Electronic Data Security Act)", "status": "in force", "year": 2019, "url": "https://ag.ny.gov/resources/organizations/data-breach-reporting/shield-act", "summary": "Applies to businesses that maintain covered private information of New York residents, including consumer-platform and AI operators holding account credentials, biometric information, financial information, or other covered data. Operators must develop, implement, and maintain reasonable administrative, technical, and physical safeguards, including risk assessment, security training, service-provider controls,…" }, { "name": "Children’s Online Privacy Protection Rule (COPPA), 16 C.F.R. Part 312", "status": "in force", "year": 1998, "url": "https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa", "summary": "Applies to operators of services directed to children under 13 and operators with actual knowledge that they collect personal information from children under 13. Core obligations include verifiable parental consent, parental access and deletion rights, limits on collection and disclosure, data-security protections, data-retention controls, and clear privacy notices. AI chatbot, tutoring, gaming, social, and…" }, { "name": "TAKE IT DOWN Act, Pub. L. 119-12", "status": "in force; platform notice-and-removal obligations effective May 19, 2026", "year": 2025, "url": "https://www.ftc.gov/business-guidance/resources/complying-take-it-down-act", "summary": "Covered platforms that host, publish, curate, or facilitate user-generated content must provide a clear and conspicuous process for reporting nonconsensual intimate visual depictions, including qualifying AI-generated or digitally altered depictions. After receiving a valid request, the platform must remove the reported content and known identical copies within 48 hours. The Act is particularly relevant to social,…" }, { "name": "New York General Business Law § 350 (false advertising)", "status": "in force", "year": 1963, "url": "https://ag.ny.gov/publications/advertising-guidelines-auto-dealers", "summary": "Prohibits false advertising in the conduct of business, trade, commerce, or furnishing services in New York. For consumer AI and online-platform operators, material misrepresentations or omissions in advertising and product interfaces may create exposure, including claims about model accuracy, safety, privacy, age suitability, human review, moderation, data use, security, or whether content is AI-generated.…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The New York State Office of the Attorney General (OAG) is the principal state enforcer for the SAFE for Kids Act, NYCDPA, SHIELD Act, and New York false-advertising rules. The Federal Trade Commission (FTC) enforces COPPA and the TAKE IT DOWN Act, while New York courts impose statutory remedies and penalties." }, { "q": "Do we need a license, permit, or registration?", "a": "The briefing identifies no general New York license, permit, or business registration specific to consumer AI, chatbot, social-media, or content-hosting services. Covered operators may instead need product-level compliance measures, including annual certification of each SAFE for Kids age-assurance method, depending on whether the product is a covered addictive online platform." }, { "q": "What are the main data and privacy obligations?", "a": "The NYCDPA restricts collection, use, sharing, sale, targeted advertising, and third-party disclosure involving minors’ personal data, with informed consent or strict-necessity conditions; COPPA adds verifiable parental consent, access and deletion rights, security, retention limits, and notices for children under 13. The SHIELD Act requires reasonable administrative, technical, and physical safeguards and breach notifications, while SAFE for Kids requires age-assurance data minimization, purpose limitation, security, and deletion or restricted retention. Which duties apply depends on the…" }, { "q": "Which AI-specific rules apply?", "a": "The briefing does not identify a single New York law governing all AI systems. AI chatbots, social feeds, and companion products may implicate the SAFE for Kids Act, NYCDPA, and COPPA; platforms hosting or facilitating AI-generated intimate imagery must follow the TAKE IT DOWN Act’s notice-and-removal process and remove validly reported content and known identical copies within 48 hours. New York General Business Law § 350 also applies to claims about AI accuracy, safety, privacy, moderation, human review, security, and whether content is AI-generated." }, { "q": "What are the enforcement and penalty risks?", "a": "The OAG may seek injunctions, restitution, disgorgement, damages, and civil penalties of up to $5,000 per SAFE for Kids violation; SHIELD Act penalties can reach $5,000 per reasonable-safeguards violation or $20 per failed breach notification, capped at $250,000. FTC enforcement under the TAKE IT DOWN Act may impose civil penalties of $53,088 per violation, and COPPA, NYCDPA, and GBL § 350 add federal or state enforcement and consumer-redress exposure." } ] }, { "id": "brief:consumer--tx", "sector": "consumer", "geo": "tx", "sector_name": "Consumer Platforms", "geo_name": "Texas", "url": "/brief/consumer--tx.html", "overview": "Texas consumer-platform and AI businesses must comply with the Texas Data Privacy and Security Act for personal-data processing, Texas Business and Commerce Code Chapter 503 for commercial collection and use of biometric identifiers such as facial geometry, voiceprints, and fingerprints, and the Texas Responsible Artificial Intelligence Governance Act for specified AI risks. The Securing Children Online through Parental Empowerment Act took effect on September 1, 2024, but its core content-moderation rules are currently blocked by a federal preliminary injunction and remain in litigation; the federal Children’s Online Privacy Protection Act applies to services aimed at children under 13 or knowingly collecting their information, and the federal TAKE IT DOWN Act covers platforms handling nonconsensual intimate images, including AI-generated images. Yes, sector-specific rules bind them today if they process biometrics, serve or knowingly collect data from children, deploy covered AI systems, or host nonconsensual intimate imagery.", "instruments": [ { "name": "Texas Data Privacy and Security Act", "status": "in force", "year": 2023, "url": "https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-privacy-rights/texas-data-privacy-and-security-act", "summary": "Applies to covered businesses conducting business in Texas or producing products or services consumed by Texas residents, subject to statutory exemptions. Consumer-platform and AI operators must provide privacy notices and consumer rights, honor opt-outs from targeted advertising, sale of personal data, and certain profiling, obtain consent for sensitive-data processing, maintain reasonable data security, and…" }, { "name": "Texas Responsible Artificial Intelligence Governance Act (TRAIGA; enacted as HB 149)", "status": "enacted June 22, 2025; in force effective January 1, 2026", "year": 2025, "url": "https://capitol.texas.gov/tlodocs/89R/billtext/html/HB00149F.HTM", "summary": "The enacted Texas AI governance law is HB 149, not SB 196. Effective January 1, 2026, it regulates specified development and deployment of AI systems in Texas, including prohibitions on intentional manipulation to encourage self-harm, harm to others, or criminal activity; intentional impairment of constitutional rights; and intentional unlawful discrimination. It also addresses certain biometric-data practices,…" }, { "name": "Securing Children Online through Parental Empowerment Act (SCOPE Act)", "status": "enacted and effective September 1, 2024; core content-moderation and related provisions are subject to a federal preliminary injunction and ongoing litigation, so enforcement is partial and provision-specific", "year": 2023, "url": "https://capitol.texas.gov/tlodocs/88R/billtext/html/HB00018F.htm", "summary": "Applies to covered digital-service providers, including consumer apps and platforms that collect or process personal identifying information. The Act establishes requirements concerning known minors, parental consent and controls, harmful interactions, account and service design, and algorithmic recommendations. The central provisions requiring platforms to restrict or moderate minors’ access to specified content…" }, { "name": "Texas Capture or Use of Biometric Identifier Act, Business & Commerce Code Chapter 503", "status": "in force; amended effective January 1, 2026 in connection with TRAIGA", "year": 2009, "url": "https://statutes.capitol.texas.gov/Docs/BC/pdf/BC.503.pdf", "summary": "Governs commercial capture and handling of biometric identifiers, including retina or iris scans, fingerprints, voiceprints, and records of hand or face geometry. Operators generally must inform individuals before commercial capture and obtain consent, may not sell, lease, or otherwise disclose captured identifiers without the required consent or statutory basis, must maintain a reasonable care standard, and must…" }, { "name": "Children’s Online Privacy Protection Rule (COPPA Rule), 16 C.F.R. Part 312", "status": "in force; amended rule effective June 23, 2025, with general compliance required by April 22, 2026", "year": 1998, "url": "https://www.ftc.gov/business-guidance/privacy-security/childrens-privacy", "summary": "Applies to operators of websites and online services directed to children under 13 and to general-audience services with actual knowledge that they collect personal information from children under 13. It requires direct notice and verifiable parental consent, parental access and deletion rights, limits on collection, use, disclosure, retention, and targeted advertising, and reasonable security. The April 22, 2025…" }, { "name": "TAKE IT DOWN Act, Section 3", "status": "in force effective May 19, 2026", "year": 2025, "url": "https://www.ftc.gov/business-guidance/resources/complying-take-it-down-act", "summary": "Covered platforms, including many social, messaging, gaming, and image or video services, must establish a notice-and-removal process for nonconsensual intimate visual depictions, including AI-generated material. After receiving a valid request, the platform must remove the reported material and known identical copies as soon as possible and no later than 48 hours, subject to the Act’s conditions and procedures." } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Texas Attorney General is the principal state enforcer for the Texas Data Privacy and Security Act, TRAIGA, and related consumer-protection obligations; it may investigate, seek injunctions, and pursue civil penalties. The Federal Trade Commission enforces COPPA and Section 3 of the TAKE IT DOWN Act, while the Texas Department of Information Resources and the Artificial Intelligence Council administer TRAIGA’s regulatory-sandbox and oversight framework; federal courts control the SCOPE Act injunction and related litigation." }, { "q": "Do we need a license, permit, or registration?", "a": "Ordinary operation of a covered consumer platform or chatbot does not require a general Texas license, permit, or registration under the instruments in the briefing. A separate authorization may apply if the product operates in a separately regulated sector, and TRAIGA’s optional AI regulatory sandbox requires approval from the Texas Department of Information Resources; the need therefore depends on the business activity and whether the company elects sandbox participation." }, { "q": "What are the main data and privacy obligations?", "a": "Under the Texas Data Privacy and Security Act, covered operators must provide privacy notices, honor rights and opt-outs for targeted advertising, data sales, and certain profiling, obtain consent for sensitive-data processing, maintain reasonable security, and complete assessments for specified processing. Chapter 503 adds notice and consent before commercial biometric capture, limits disclosure, requires reasonable care and timely destruction; COPPA adds parental notice and verifiable consent for covered children under 13, while the SCOPE Act and TAKE IT DOWN Act add minors-safety and…" }, { "q": "Which AI-specific rules apply?", "a": "TRAIGA, enacted as HB 149 and effective January 1, 2026, applies to specified AI development and deployment risks, including intentional manipulation to encourage self-harm, harm to others, or criminal activity, intentional impairment of constitutional rights, and intentional unlawful discrimination. It also addresses certain biometric practices and disclosures by specified AI users, but it does not require every ordinary consumer chatbot to provide a universal AI disclosure; applicability depends on the system’s function, deployment context, users, and biometric or behavioral features." }, { "q": "What are the enforcement and penalty risks?", "a": "The TDPSA allows the Texas Attorney General to seek up to $7,500 per violation after the statutory cure process, and TRAIGA provides $10,000–$12,000 for curable violations, $80,000–$200,000 for uncurable violations, and $2,000–$40,000 per day for continuing violations, plus injunctions, fees, and costs. COPPA and the TAKE IT DOWN Act can expose a platform to FTC civil penalties of up to $53,088 per violation; TAKE IT DOWN violations also require removal of validly reported material and known identical copies within 48 hours, while SCOPE exposure depends on which provisions remain outside the…" } ] }, { "id": "brief:consumer--uk", "sector": "consumer", "geo": "uk", "sector_name": "Consumer Platforms", "geo_name": "United Kingdom", "url": "/brief/consumer--uk.html", "overview": "UK technology and AI operators serving consumers, including social apps, chatbots, marketplaces and services likely to be used by children, must comply with the Online Safety Act, the UK law regulating safety duties for covered online services, plus data-protection rules whenever they collect, infer, generate, or use personal data in AI. They must also follow consumer laws covering digital-content and service quality, pre-contract information, cancellations, and unfair trading under the Digital Markets, Competition and Consumers Act, the UK law governing digital-market competition and consumer protection; the UK has no single comprehensive AI law in force.", "instruments": [ { "name": "Online Safety Act", "status": "in force; duties and regulatory requirements are phased", "year": 2023, "url": "https://www.legislation.gov.uk/ukpga/2023/50/contents", "summary": "Applies primarily to regulated user-to-user services, search services and certain other in-scope online services. Operators must assess and mitigate illegal-content and child-safety risks, maintain appropriate systems and processes, provide reporting and complaints mechanisms, keep records, and comply with applicable Ofcom codes, information requests and enforcement measures. Services likely to be accessed by…" }, { "name": "UK GDPR and Data Protection Act 2018", "status": "in force, as amended", "year": 2018, "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/explaining-decisions-made-with-artificial-intelligence/part-1-the-basics-of-explaining-ai/legal-framework/", "summary": "Regulates personal data collected, inferred, generated or otherwise processed by consumer products and AI systems, including data used for training, testing, profiling and deployment. Core requirements include a lawful basis, transparency, purpose limitation, data minimisation, security, rights handling, DPIAs where required, governance of processors and safeguards for solely automated decisions. The Data (Use and…" }, { "name": "Digital Markets, Competition and Consumers Act", "status": "in force; subscription-contract provisions and some other measures remain subject to commencement and implementation steps", "year": 2024, "url": "https://www.legislation.gov.uk/ukpga/2024/13/contents", "summary": "Its consumer-protection provisions apply broadly to traders, including online and AI-enabled consumer businesses, and from 6 April 2025 replace and update the Consumer Protection from Unfair Trading Regulations 2008 for new commercial practices. They address misleading actions and omissions, aggressive practices, professional diligence, drip pricing, fake reviews and other unfair commercial practices, with direct…" }, { "name": "Consumer Rights Act", "status": "in force", "year": 2015, "url": "https://www.legislation.gov.uk/ukpga/2015/15/contents", "summary": "Governs consumer contracts for goods, digital content and services, including many software, app, chatbot and AI-enabled offerings. Digital content must meet statutory standards of satisfactory quality, fitness for purpose and conformity with description; services must be performed with reasonable care and skill and within a reasonable time where no timeframe is agreed. The Act provides remedies such as repair,…" }, { "name": "Consumer Contracts (Information, Cancellation and Additional Charges) Regulations", "status": "in force, subject to the DMCC Act’s subscription-contract overlay when that regime applies", "year": 2013, "url": "https://www.legislation.gov.uk/uksi/2013/3134/contents", "summary": "Applies to many distance and online consumer contracts, including purchases of digital content and services. Operators must provide specified pre-contract information, obtain required express consent for certain additional charges, observe rules on commencement of services and digital content during the cancellation period, and generally provide a 14-day cancellation right for qualifying distance contracts, subject…" }, { "name": "Children’s Code (Age Appropriate Design Code)", "status": "in force", "year": 2020, "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/childrens-information/childrens-code-guidance-and-resources/age-appropriate-design-a-code-of-practice-for-online-services/", "summary": "This statutory ICO data-protection code applies to information-society services likely to be accessed by children, including apps, games, social platforms, search services and websites, even where they are not specifically directed at children. Its 15 standards address best interests, high-privacy defaults, data minimisation, profiling, geolocation, parental controls, transparency, age-appropriate design and…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "Ofcom is the principal regulator for services within the Online Safety Act, including user-to-user and search services, with duties focused on illegal content, child safety, risk assessments and complaints. The Information Commissioner’s Office (ICO) oversees the UK GDPR, Data Protection Act 2018 and Children’s Code; the Competition and Markets Authority (CMA) enforces the Digital Markets, Competition and Consumers Act’s consumer-protection rules and its separate strategic-market-status regime." }, { "q": "Do we need a license, permit, or registration?", "a": "Generally, no general UK AI or consumer-platform licence, permit or registration is required under the Online Safety Act, UK GDPR and Data Protection Act 2018, Children’s Code, Consumer Rights Act, Consumer Contracts Regulations or Digital Markets, Competition and Consumers Act. Instead, obligations attach according to the product’s functions, users and commercial model; a service may fall within Ofcom’s regime, the Children’s Code, subscription rules or CMA strategic-market-status designation depending on those features." }, { "q": "What are the main data and privacy obligations?", "a": "Under the UK GDPR and Data Protection Act 2018, operators must establish a lawful basis, provide transparency, respect purpose limitation and data minimisation, secure personal data, handle data-subject rights, govern processors and complete DPIAs where required. These duties cover personal data collected, inferred or generated by consumer products and data used to train, test, profile or deploy AI; solely automated decisions require additional safeguards. Services likely to be accessed by children must also take the Children’s Code into account, including high-privacy defaults,…" }, { "q": "Which AI-specific rules apply?", "a": "The UK has no single comprehensive AI Act in force, so AI compliance primarily comes from technology-neutral and sectoral instruments. The UK GDPR and Data Protection Act 2018 govern personal data used in AI training, testing, profiling and deployment, while the Online Safety Act may apply to AI chatbots or platforms that meet its service definitions; the Consumer Rights Act, Consumer Contracts Regulations and Digital Markets, Competition and Consumers Act govern digital-content quality, service performance, disclosures, cancellation, subscriptions and unfair commercial practices. The exact…" }, { "q": "What are the enforcement and penalty risks?", "a": "Ofcom can impose up to £18 million or 10% of qualifying worldwide revenue, whichever is greater, and may seek measures including site-blocking in the most serious Online Safety Act cases. The ICO can impose up to £17.5 million or 4% of worldwide annual turnover, whichever is higher, for serious UK GDPR or Data Protection Act breaches; the CMA can impose up to 10% of global turnover for consumer-protection infringements, while additional remedies include compliance directions, refunds, repair, replacement, repeat performance, price reduction and cancellation rights." } ] }, { "id": "brief:consumer--us", "sector": "consumer", "geo": "us", "sector_name": "Consumer Platforms", "geo_name": "US Federal", "url": "/brief/consumer--us.html", "overview": "United States consumer-facing technology and AI companies face federal consumer-protection and child-privacy rules, plus the TAKE IT DOWN Act, which took effect on May 19, 2025 and requires notice-and-removal procedures for nonconsensual intimate imagery. State laws, especially California’s, can impose operational requirements covering privacy, sensitive and biometric data, minors, profiling, targeted advertising, model training, synthetic media, election deepfakes, output labeling, and moderation; Section 230 of the Communications Decency Act and Section 512 of the Digital Millennium Copyright Act provide conditional liability protections, not general AI-safety duties. Nothing sector-specific binds them today based solely on being a consumer-facing technology or AI company, but their specific product, users, data, and states of operation may trigger additional requirements.", "instruments": [ { "name": "Federal Trade Commission Act, Section 5", "status": "in force", "year": 1914, "url": "https://www.ftc.gov/legal-library/browse/statutes/federal-trade-commission-act", "summary": "Section 5 prohibits unfair or deceptive acts or practices within the FTC's jurisdiction. For AI and consumer-platform operators, exposure commonly arises from materially misleading claims or omissions about model capabilities, accuracy, safety, moderation, privacy, data use, human oversight, or security, and from practices alleged to be unfair because they cause substantial consumer injury that consumers cannot…" }, { "name": "Children's Online Privacy Protection Act and COPPA Rule", "status": "in force; FTC Rule amendments adopted in 2025", "year": 1998, "url": "https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa", "summary": "COPPA applies to operators of services directed to children under 13 and to operators with actual knowledge that they collect personal information from children under 13. Covered operators must provide parental notice, obtain verifiable parental consent in covered circumstances, permit parental access and deletion, limit collection, use, and retention, maintain confidentiality and security, and obtain separate…" }, { "name": "TAKE IT DOWN Act; Section 230 and DMCA Section 512 content-liability frameworks", "status": "TAKE IT DOWN Act in force; Section 230 and DMCA Section 512 in force as conditional liability frameworks", "year": 2025, "url": "https://www.ftc.gov/business-guidance/resources/complying-take-it-down-act", "summary": "The TAKE IT DOWN Act requires covered platforms, including many social, messaging, image/video-sharing, and gaming services, to provide a clear notice-and-removal process for nonconsensual intimate images, including AI-generated or digitally altered images, and to remove the reported content and known identical copies within 48 hours of a valid request. The FTC began enforcing the platform obligations on May 19,…" }, { "name": "California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA)", "status": "in force; CPRA amendments and California Privacy Protection Agency regulations operative", "year": 2018, "url": "https://www.leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?article=&chapter=&division=3.&lawCode=CIV&part=4.&title=1.81.5.", "summary": "The CCPA, amended by the 2020 CPRA, governs covered businesses handling California residents' personal information. Consumer-platform and AI operators must address notice, access, deletion, correction, portability, opt-outs from sale and cross-context behavioral advertising, limits on sensitive-personal-information use, nondiscrimination, contracts with service providers and contractors, reasonable security, and…" }, { "name": "Other comprehensive state consumer-privacy laws, including Virginia, Colorado, Connecticut, Utah, and comparable state regimes", "status": "in force; requirements vary by state and continue to expand", "year": 2021, "url": "https://law.lis.virginia.gov/vacode/title59.1/chapter53/", "summary": "State comprehensive privacy laws materially govern consumer AI and platform operations beyond California. Examples include the Virginia Consumer Data Protection Act, Colorado Privacy Act, Connecticut Data Privacy Act, and Utah Consumer Privacy Act, together with newer state equivalents and amendments. Common requirements include notices, access/correction/deletion/portability rights, opt-outs from sale, targeted…" }, { "name": "California generative-AI, synthetic-media, election-deepfake, and biometric/privacy laws", "status": "in force; specified requirements became operative January 1, 2025 or January 1, 2026", "year": 2024, "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?highlight=true&keyword=Depiction+&lawCode=CIV§ionNum=1708.86.", "summary": "California's AI-specific rules include AB 2013, which requires developers of covered generative-AI systems or services made available to Californians to publish high-level training-data documentation on or before January 1, 2026 and before later covered releases or substantial modifications; SB 942, the California AI Transparency Act, which requires covered providers to support AI-content disclosures and provide a…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Federal Trade Commission (FTC) is the principal federal regulator for Section 5 of the FTC Act, COPPA, and the TAKE IT DOWN Act. In California, the California Privacy Protection Agency (CPPA) and California Attorney General enforce the CCPA/CPRA, while other state attorneys general and state privacy regulators enforce comparable state laws; courts also interpret Section 230, DMCA Section 512, and state requirements." }, { "q": "Do we need a license, permit, or registration?", "a": "The briefing identifies no general federal AI or consumer-platform license, permit, or registration requirement. Compliance obligations instead attach based on the product, users, data, content, and states involved, including privacy notices and rights processes, COPPA procedures, California AI disclosures, and TAKE IT DOWN notice-and-removal workflows." }, { "q": "What are the main data and privacy obligations?", "a": "Under COPPA, covered services must provide parental notice, obtain verifiable parental consent where required, support parental access and deletion, limit collection and retention, and maintain security. Under the CCPA/CPRA and comparable state laws, operators must address notices, access, deletion, correction, portability, opt-outs from sale and targeted advertising, sensitive-data limits, processor contracts, purpose limitation, assessments where required, and reasonable security; the exact duties depend on the states, data, audience, and processing activities." }, { "q": "Which AI-specific rules apply?", "a": "Relevant instruments include California AB 2013 training-data documentation, SB 942 AI-content disclosures and detection tools, election-related synthetic-media laws AB 2839 and AB 2655, California Civil Code section 1708.86 and Penal Code section 311.1 for synthetic sexual imagery involving apparent minors, and state biometric/privacy laws. Section 5 of the FTC Act also applies to misleading or unfair claims about AI accuracy, safety, moderation, privacy, data use, oversight, or security, while applicability depends on the product, deployment, audience, and content." }, { "q": "What are the enforcement and penalty risks?", "a": "The FTC may seek corrective orders, injunctions, civil penalties, and other relief for deceptive or unfair practices, COPPA violations, or TAKE IT DOWN Act failures; TAKE IT DOWN violations may carry civil penalties of up to $53,088 per violation. California CCPA penalties are up to $2,663 per violation or $7,988 for intentional violations and violations involving consumers the business knows are under 16, with additional state remedies and private exposure where applicable; Section 230 and DMCA Section 512 remain conditional liability frameworks rather than immunity from regulatory…" } ] }, { "id": "brief:crypto--at", "sector": "crypto", "geo": "at", "sector_name": "Crypto & Digital Assets", "geo_name": "Austria", "url": "/brief/crypto--at.html", "overview": "Yes. If you provide crypto services such as custody, trading, exchange, transfers, advice or portfolio management, the EU Markets in Crypto-Assets Regulation, known as MiCA, generally requires authorisation or a qualifying notification and imposes conduct, disclosure, governance and security rules, with Austria’s Financial Market Authority supervising and enforcing them. Today, anti-money-laundering and EU Travel Rule requirements apply, the Digital Operational Resilience Act applies to authorised crypto service providers, and the EU AI Act may apply depending on how your artificial intelligence system is used.", "instruments": [ { "name": "Markets in Crypto-Assets Regulation (MiCA)", "status": "in force", "year": 2023, "url": "https://eur-lex.europa.eu/eli/reg/2023/1114/oj", "summary": "The core EU regime for token issuers and crypto-asset service providers. It covers public offerings and admission to trading, asset-referenced tokens, e-money tokens, custody, trading platforms, exchange, transfer, execution, advice and portfolio management; relevant activities require authorisation, notification or compliance with issuer-specific rules, with the Austrian FMA as competent authority.…" }, { "name": "MiCA-Verordnung-Vollzugsgesetz (MiCA-VVG)", "status": "in force", "year": 2024, "url": "https://www.ris.bka.gv.at/eli/bgbl/I/2024/111", "summary": "Austria’s implementing statute designates and equips the FMA, establishes Austrian reporting and enforcement mechanisms, and provides administrative sanctions for unauthorised crypto-asset services and breaches of MiCA. It also contains Austria’s transitional arrangements, including the treatment of former virtual-asset service providers during the MiCA migration.…" }, { "name": "Finanzmarkt-Geldwäschegesetz (FM-GwG)", "status": "in force", "year": 2016, "url": "https://www.ris.bka.gv.at/GeltendeFassung.wxe?Abfrage=Bundesnormen&Gesetzesnummer=20009769", "summary": "Austria’s financial-sector AML/CFT statute applies to relevant crypto businesses and supports FMA supervision alongside MiCA. Affected operators need risk assessments, customer and beneficial-owner identification, enhanced due diligence where required, internal controls, training, suspicious-transaction reporting and targeted-financial-sanctions controls; legacy VASP registration is not a substitute for MiCA…" }, { "name": "Transfer of Funds Regulation / EU Travel Rule Regulation", "status": "in force", "year": 2023, "url": "https://eur-lex.europa.eu/eli/reg/2023/1113/oj", "summary": "This directly applicable regulation requires crypto-asset service providers involved in transfers to collect, transmit, retain and make available originator and beneficiary information, including for transfers involving self-hosted addresses in the circumstances specified by the Regulation. It also requires controls addressing restrictive-measures compliance and creates operational requirements for data exchange…" }, { "name": "Digital Operational Resilience Act (DORA)", "status": "in force", "year": 2022, "url": "https://eur-lex.europa.eu/eli/reg/2022/2554/oj", "summary": "DORA applies to MiCA-authorised crypto-asset service providers and issuers of asset-referenced tokens from 17 January 2025. It requires ICT risk management, incident classification and reporting, resilience testing, cyber controls, business continuity and oversight of critical ICT third-party providers—particularly important for cloud, wallet, exchange, AI and blockchain infrastructure.…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Austrian Financial Market Authority (FMA) is the competent national authority for MiCA authorisations, notifications, supervision, reporting and enforcement under the MiCA-Verordnung-Vollzugsgesetz (MiCA-VVG). ESMA and EBA remain relevant at EU level through MiCA guidance and supervisory coordination, while the responsible authority can differ if the product also constitutes a payment, e-money, investment-service or banking activity. ([fma.gv.at](https://www.fma.gv.at/en/fma-takes-over-casp-supervision-in-austria/?utm_source=openai))" }, { "q": "Do we need a license, permit, or registration?", "a": "Generally yes: custody, operation of a trading platform, exchange, transfer, execution, advice and portfolio management require MiCA authorisation, unless an eligible regulated financial entity uses the MiCA notification route under Article 60. Token issuance may instead require a white paper, public-offering or admission-to-trading compliance, or specific authorisation for asset-referenced tokens and e-money tokens; former Austrian VASP registration under the Finanzmarkt-Geldwäschegesetz (FM-GwG) is not a substitute for MiCA authorisation.…" }, { "q": "What are the main data and privacy obligations?", "a": "The FM-GwG requires risk assessments, customer and beneficial-owner identification, enhanced due diligence where necessary, internal controls, staff training, suspicious-transaction reporting and sanctions-screening controls. The EU Travel Rule Regulation requires providers involved in crypto transfers to collect, transmit, retain and make available originator and beneficiary information, including specified controls for self-hosted addresses; DORA additionally requires ICT-risk, incident-reporting, resilience-testing, cybersecurity, continuity and critical-ICT-provider oversight.…" }, { "q": "Which AI-specific rules apply?", "a": "The EU Artificial Intelligence Act applies according to the AI system and use case, not merely because the company operates in crypto; assess AI used for credit, risk, fraud, customer profiling, trading, advice or other high-impact workflows. DORA also applies to MiCA-authorised crypto-asset service providers and requires governance and resilience controls for AI, cloud, wallet, exchange and blockchain infrastructure used in the regulated service." }, { "q": "What are the enforcement and penalty risks?", "a": "The FMA can impose administrative sanctions under the MiCA-VVG for unauthorised crypto-asset services and breaches of MiCA, including fines of up to €700,000 or twice the benefit obtained for specified violations; certain serious market-abuse breaches can reach €5 million or three times the benefit. Risks also include authorisation or notification failure, misleading disclosures, AML or Travel Rule deficiencies, sanctions-control failures, operational-resilience shortcomings and product shutdown or corrective measures.…" } ] }, { "id": "brief:crypto--br", "sector": "crypto", "geo": "br", "sector_name": "Crypto & Digital Assets", "geo_name": "Brazil", "url": "/brief/crypto--br.html", "overview": "Brazil now has a federal licensing and supervision framework for virtual-asset service providers, led by the Central Bank of Brazil, covering intermediaries, custodians, brokers, governance, technology, security, customer protection and anti-money-laundering controls; tokenized instruments, meaning digital representations of assets, that qualify as securities remain regulated by the Brazilian Securities Commission, including public-offering and market-conduct rules. Stablecoins, meaning cryptoassets designed to maintain a stable value, and cross-border crypto activity may also trigger foreign-exchange and international-capital reporting requirements, but no sector-specific federal AI regime binds them today beyond these financial, cybersecurity and Lei Geral de Proteção de Dados Pessoais requirements.", "instruments": [ { "name": "Lei dos Ativos Virtuais", "status": "in force", "year": 2022, "url": "https://www.planalto.gov.br/ccivil_03/_ato2019-2022/2022/lei/l14478.htm", "summary": "Law 14,478 establishes Brazil's core virtual-asset framework, defines virtual assets and regulated services, requires authorization and supervision of service providers, and extends consumer-protection and AML-related duties. It excludes securities and other legally regulated financial assets, so a token may instead fall under CVM rules." }, { "name": "Resolução BCB nº 520", "status": "in force", "year": 2025, "url": "https://www.bcb.gov.br/estabilidadefinanceira/exibenormativo?numero=520&tipo=Resolu%C3%A7%C3%A3o%20BCB", "summary": "This is the main operating rule for virtual-asset service providers and took effect on February 2, 2026. It defines intermediary, custodian and broker models; sets authorization, governance, technology, internal-control, security, customer-information and conduct requirements; and restricts regulated financial institutions from dealing with unlicensed providers from October 30, 2026, subject to the rule's transition…" }, { "name": "Resolução BCB nº 521", "status": "partially in force", "year": 2025, "url": "https://www.bcb.gov.br/estabilidadefinanceira/exibenormativo?numero=521&tipo=Resolu%C3%A7%C3%A3o%20BCB", "summary": "This rule brings specified virtual-asset activities into Brazil's foreign-exchange and international-capital framework, including international crypto transfers, transfers involving self-custodied wallets, and purchases or sales of fiat-referenced virtual assets. Most provisions began on February 2, 2026, while additional reporting provisions began on May 4, 2026, creating customer-identification,…" }, { "name": "Resolução CVM nº 160", "status": "in force", "year": 2022, "url": "https://conteudo.cvm.gov.br/cvm_institucional/legislacao/resolucoes/resol160.html", "summary": "If a token or crypto arrangement is a security, public distribution and secondary-market activity can fall under CVM Resolution 160 and the Securities Law framework. A technology platform facilitating an offering may need a registered or exempt offering structure and must control marketing, disclosures, investor communications and distribution activities; the CVM has treated investment contracts linked to crypto…" }, { "name": "Lei Geral de Proteção de Dados Pessoais (LGPD)", "status": "in force", "year": 2018, "url": "https://www.gov.br/mj/pt-br/assuntos/sua-protecao/sedigi/Lei13709.pdf", "summary": "The LGPD applies to personal-data processing by crypto, payments and AI companies, including KYC data, transaction histories, biometric onboarding, wallet analytics and fraud models. The product must define lawful bases, transparency, data-subject rights, security controls, processor arrangements, retention practices and international-transfer safeguards." } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Banco Central do Brasil (BCB) is the principal regulator, authoriser and supervisor for virtual-asset service providers under Lei dos Ativos Virtuais and Resolução BCB nº 520. The Comissão de Valores Mobiliários (CVM) oversees tokens and arrangements that qualify as securities, including offerings and market conduct; the Autoridade Nacional de Proteção de Dados (ANPD) enforces the LGPD for personal-data processing. ([bcb.gov.br](https://www.bcb.gov.br/meubc/faqs/p/guarda-e-negociacao-de-moedas-virtuais?utm_source=openai))" }, { "q": "Do we need a license, permit, or registration?", "a": "Usually, yes: a provider operating as an intermediary, custodian or broker must obtain BCB authorisation under Lei dos Ativos Virtuais, Resolução BCB nº 519 and Resolução BCB nº 520, subject to applicable transition rules. A token or product that is a security may instead require a CVM-compliant offering or market structure under Resolução CVM nº 160, while international transfers, self-custodied-wallet activity and fiat-referenced tokens trigger Resolução BCB nº 521 controls and reporting.…" }, { "q": "What are the main data and privacy obligations?", "a": "The LGPD applies to KYC data, transaction histories, biometric onboarding, wallet analytics and AI fraud models. The company must establish lawful bases, provide transparency, support data-subject rights, apply security controls, govern processors, define retention periods and protect international transfers; the precise requirements depend on the data and processing activity. ([gov.br](https://www.gov.br/anpd/pt-br/assuntos/noticias/sancoes-administrativas-o-que-muda-apos-1o-de-agosto-de-2021?utm_source=openai))" }, { "q": "Which AI-specific rules apply?", "a": "Brazil has no standalone federal AI-specific crypto regime in the briefing. AI products must comply with the applicable BCB and CVM financial rules, cybersecurity and customer-protection controls, AML and travel-rule processes where relevant, and the LGPD requirements governing automated data processing; obligations depend on whether the AI is used for onboarding, trading, custody, surveillance, advice or another regulated function." }, { "q": "What are the enforcement and penalty risks?", "a": "Risks include BCB supervisory and authorisation action for unlicensed or non-compliant virtual-asset services, CVM enforcement for unlawful securities offerings or market conduct, and liability under consumer-protection and AML rules. LGPD violations can lead to warnings and a simple fine of up to 2% of Brazilian revenue, excluding taxes, capped at R$50 million per infraction, along with other corrective sanctions; serious facts may also create civil or criminal exposure. ([planalto.gov.br](https://www.planalto.gov.br/ccivil_03/_ato2019-2022/2022/lei/l14478.htm?utm_source=openai))" } ] }, { "id": "brief:crypto--ca-state", "sector": "crypto", "geo": "ca-state", "sector_name": "Crypto & Digital Assets", "geo_name": "California", "url": "/brief/crypto--ca-state.html", "overview": "Today, California requires many crypto businesses serving residents, including exchanges, custodians, wallet providers, stablecoin issuers (digital tokens designed to maintain a stable value), and some payment services, to obtain authorization under the Digital Financial Assets Law, while money-transmission and securities rules still apply. Sector-specific obligations may bind you now if you handle customer assets or funds, offer tokens that qualify as securities, process sensitive customer or transaction data, or provide AI above the statutory scale threshold, which must support data provenance and disclosures.", "instruments": [ { "name": "Digital Financial Assets Law (DFAL)", "status": "in force", "year": 2023, "url": "https://dfpi.ca.gov/regulated-industries/digital-financial-assets/", "summary": "From July 1, 2026, a company conducting covered digital-financial-asset business with or for California residents generally must hold a DFPI license, have submitted an application, or qualify for an exemption. The regime covers activities such as exchanging, storing, transferring, and issuing redeemable digital financial assets, and imposes consumer-protection, disclosure, custody, reserve, capital, liquidity,…" }, { "name": "Money Transmission Act", "status": "in force", "year": 2011, "url": "https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?article=&chapter=1.&division=1.2.&lawCode=FIN&part=&title=", "summary": "A company may not conduct, advertise, solicit, or hold itself out as providing money transmission in California unless licensed, exempt, or acting as an authorized agent. The statute remains relevant to fiat on/off-ramps, payment flows, stored value, stablecoin-related arrangements, and custody or wallet models that receive or transmit customer funds; DFAL does not automatically eliminate other required licenses.…" }, { "name": "California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA)", "status": "in force", "year": 2018, "url": "https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?article=&chapter=&division=3.&lawCode=CIV&part=4.&title=1.81.5.", "summary": "Covered companies must provide notices and honor rights concerning personal information used for onboarding, KYC, transaction monitoring, marketing, analytics, fraud detection, and AI training or inference. The framework includes limits and controls for selling or sharing data, sensitive personal information, service providers, automated decisionmaking, security, and consumer requests; CPPA regulations and later…" }, { "name": "Corporate Securities Law of 1968", "status": "in force", "year": 1968, "url": "https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?article=&chapter=&division=1.&lawCode=CORP&part=1.&title=4.", "summary": "A token, investment contract, or other digital asset that is a security may require California qualification or an applicable exemption before being offered or sold to California users. Offering materials and promotional communications must not contain material misstatements or omissions, so token design, staking yields, governance rights, platform marketing, and secondary-market functionality require securities…" }, { "name": "California AI Transparency Act", "status": "in force", "year": 2024, "url": "https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202320240SB942", "summary": "Effective January 1, 2026, covered providers of publicly accessible generative-AI systems with more than 1 million monthly visitors or users must include clear disclosures and technically feasible latent provenance information in generated or altered image, video, and audio content. Providers licensing such systems must preserve disclosure capability contractually and may need to revoke use within 96 hours after…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The California Department of Financial Protection and Innovation (DFPI) administers the Digital Financial Assets Law (DFAL), the Money Transmission Act, and California securities requirements for covered crypto and financial activities. The California Privacy Protection Agency (CPPA) enforces the CCPA/CPRA, while the California Attorney General, city attorneys, and county counsel may enforce the California AI Transparency Act. ([dfpi.ca.gov](https://dfpi.ca.gov/regulated-industries/digital-financial-assets/?utm_source=openai))" }, { "q": "Do we need a license, permit, or registration?", "a": "Generally, from July 1, 2026, a business conducting covered digital-financial-asset activity with or for California residents must hold a DFPI license, submit a completed application, or qualify for an exemption under the DFAL. A separate Money Transmission Act license may still apply to fiat on/off-ramps, payment flows, stored value, stablecoin arrangements, or custody and wallet models that receive or transmit customer funds; token offerings may separately require securities qualification or an exemption under the Corporate Securities Law of 1968. The result depends mainly on the product…" }, { "q": "What are the main data and privacy obligations?", "a": "Under the CCPA/CPRA, covered companies must provide privacy notices and support rights concerning onboarding, KYC, transaction monitoring, marketing, analytics, fraud detection, and AI training or inference data. They must control selling and sharing, sensitive personal information, service-provider disclosures, automated decisionmaking, security, and consumer requests, while tracking CPPA regulations on risk assessments, cybersecurity audits, and automated decisionmaking. ([cppa.ca.gov](https://cppa.ca.gov/webapplications/complaint?utm_source=openai))" }, { "q": "Which AI-specific rules apply?", "a": "The California AI Transparency Act applies from January 1, 2026 to covered providers of publicly accessible generative-AI systems with more than 1 million monthly visitors or users. Providers must include clear disclosures and technically feasible latent provenance information in generated or altered image, video, and audio content; licensed systems require contractual preservation of that capability, and disabling modifications may require license revocation within 96 hours.…" }, { "q": "What are the enforcement and penalty risks?", "a": "DFPI can issue stop orders, deny, suspend, or revoke licenses, bring civil actions, freeze assets, appoint receivers, obtain restitution, and assess penalties; DFAL penalties can reach $100,000 per day for unlicensed activity and $20,000 per day for material violations. The AI Transparency Act provides for $5,000 per violation, with each day treated as a separate violation, and the CPPA's published 2025 indexed CCPA amounts are up to $2,663 per violation or $7,988 for intentional or known-under-16 violations. Securities misstatements, privacy failures, and unlicensed money transmission create…" } ] }, { "id": "brief:crypto--co", "sector": "crypto", "geo": "co", "sector_name": "Crypto & Digital Assets", "geo_name": "Colorado", "url": "/brief/crypto--co.html", "overview": "Colorado regulates crypto based on what the business does, not where it is located. Today, no single crypto-specific rule automatically binds a software operator, but custody, exchange, payments, or control of customer funds can trigger money-transmitter licensing, while a token offering, trading platform, staking service, or market-making activity may trigger federal securities or commodities rules. Federal anti-money-laundering and stablecoin rules, plus Colorado privacy and artificial intelligence requirements for consequential decisions, may also apply.", "instruments": [ { "name": "Bank Secrecy Act and FinCEN MSB rules", "status": "in force", "year": 1970, "url": "https://www.fincen.gov/resources/statutes-regulations/guidance/application-fincens-regulations-persons-administering", "summary": "A business that administers, exchanges, accepts, or transmits convertible virtual currency may be a FinCEN money services business. Covered operators generally need FinCEN registration, a risk-based AML program, customer identification and monitoring, suspicious-activity reporting, recordkeeping, sanctions controls, and applicable travel-rule procedures." }, { "name": "Federal securities laws: Securities Act of 1933 and Securities Exchange Act of 1934", "status": "in force", "year": 1933, "url": "https://www.sec.gov/resources-small-businesses/capital-raising-building-blocks/crypto-assets-federal-securities-laws", "summary": "Tokens or tokenized assets may be securities, making offerings subject to registration or an exemption and disclosure rules. Platforms, brokers, trading interfaces, custodians, and staking or market-making arrangements can trigger broker-dealer, exchange, ATS, custody, books-and-records, and anti-fraud or anti-manipulation requirements." }, { "name": "Guiding and Establishing National Innovation for U.S. Stablecoins Act (GENIUS Act)", "status": "adopted, phasing in", "year": 2025, "url": "https://www.congress.gov/bill/119th-congress/senate-bill/1582", "summary": "The Act creates a federal and state-permitted framework for payment-stablecoin issuers, including reserve, redemption, disclosure, examination, and illicit-finance requirements. A company issuing, distributing, redeeming, servicing, or providing technology for payment stablecoins should determine whether it is an issuer, permitted issuer, agent, or service provider and track implementing rules." }, { "name": "Colorado Money Transmission Modernization Act", "status": "in force", "year": 2025, "url": "https://leg.colorado.gov/bills/HB25-1201", "summary": "Colorado replaced its prior Money Transmitters Act with a modernized licensing regime effective August 6, 2025. Software exchanges, custodians, wallet providers, payment platforms, and stablecoin businesses should analyze whether their control, receipt, transmission, or redemption of fiat or value substituting for money requires a Colorado license, financial safeguards, permissible investments, agent controls, and…" }, { "name": "Colorado Privacy Act", "status": "in force", "year": 2021, "url": "https://coag.gov/resources/colorado-privacy-act/", "summary": "Covered operators must provide privacy notices, honor access, correction, deletion, and opt-out rights, use reasonable security, minimize data, and conduct data-protection assessments for specified processing. KYC records, wallet addresses linked to individuals, behavioral analytics, fraud models, targeted advertising, and sensitive financial or precise-location data may create material compliance obligations." } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The principal authorities are FinCEN under the Bank Secrecy Act, the SEC and CFTC under federal securities and commodities laws, and Colorado’s Department of Regulatory Agencies—especially its Division of Banking for money transmitters. The Colorado Attorney General enforces the Colorado Privacy Act and related data-security rules; the relevant authority depends on whether the product involves securities, commodities, money transmission, stablecoins, or personal data.…" }, { "q": "Do we need a license, permit, or registration?", "a": "Often yes, but it depends on the product flow. Covered virtual-currency administrators, exchangers, or transmitters generally need FinCEN MSB registration and a BSA/AML program; custody, exchange, payments, fiat or stablecoin redemption, or control of customer funds may also require a Colorado license under the Colorado Money Transmission Modernization Act, while token offerings, trading venues, brokerage, custody, staking, or market-making may require SEC or CFTC registration, an exemption, or another federal authorization.…" }, { "q": "What are the main data and privacy obligations?", "a": "The Colorado Privacy Act requires covered operators to provide clear privacy notices, minimize data, use reasonable security, conduct required data-protection assessments, and honor access, correction, deletion, portability, and opt-out rights. KYC records, linked wallet addresses, transaction histories, behavioral analytics, fraud models, targeted advertising, and sensitive financial or precise-location data should be mapped by purpose, retention period, access controls, and processing role. ([coag.gov](https://coag.gov/resources/colorado-privacy-act/?utm_source=openai))" }, { "q": "Which AI-specific rules apply?", "a": "Colorado’s Automated Decision-Making Technology law should be planned for where AI affects customer access, eligibility, pricing, fraud decisions, or other consequential outcomes; under the briefing, it takes effect January 1, 2027. The required controls will depend on whether the AI makes or materially supports a consequential decision, including governance, impact assessment, notice, explanation, human review, and remediation processes where applicable." }, { "q": "What are the enforcement and penalty risks?", "a": "Risks include FinCEN civil money penalties and possible criminal prosecution for unregistered or noncompliant MSB activity, SEC or CFTC enforcement for unregistered offerings or venues, Colorado license suspension or cease-and-desist orders, consumer-protection claims, and Colorado Privacy Act enforcement by the Attorney General or district attorneys. HB25-1201 also permits Colorado banking authorities to issue cease-and-desist orders and treats acting as a money-transmitter agent without a license or falsifying related records as class 2 misdemeanors; exposure depends on the activity,…" } ] }, { "id": "brief:crypto--de", "sector": "crypto", "geo": "de", "sector_name": "Crypto & Digital Assets", "geo_name": "Germany", "url": "/brief/crypto--de.html", "overview": "The European Union’s Markets in Crypto-Assets Regulation (MiCA) sets the main rules for issuing tokens, stablecoins, crypto-asset services, trading platforms, custody and market abuse, while Germany’s Crypto Markets Supervision Act (KMAG) gives the Federal Financial Supervisory Authority (BaFin) supervisory and enforcement powers and the German Money Laundering Act (GwG) provides anti-money-laundering rules; the European Union Transfer of Funds Regulation adds the crypto “travel rule,” requiring information to accompany transfers. A technology provider is not automatically exempt: sector-specific rules bind you today if your product controls customer assets, executes transactions, operates a trading venue, issues tokens or performs another regulated crypto function. Artificial intelligence products must also be assessed under the phased European Union Artificial Intelligence Act, particularly its rules on prohibited practices, transparency, general-purpose models and future high-risk systems.", "instruments": [ { "name": "Markets in Crypto-Assets Regulation (MiCA)", "status": "in force", "year": 2023, "url": "https://eur-lex.europa.eu/eli/reg/2023/1114/oj", "summary": "MiCA is the main rulebook for crypto-asset issuance and offers, ARTs and EMTs, crypto-asset service providers, trading venues, custody, exchange, execution, advice, transfer services and market-abuse controls. A company that performs a regulated crypto-asset service generally needs EU authorisation or must operate through an authorised entity; white papers, conduct controls, safeguarding, governance and operational…" }, { "name": "Kryptomärkteaufsichtsgesetz (KMAG)", "status": "in force", "year": 2024, "url": "https://www.gesetze-im-internet.de/kmag/", "summary": "KMAG is Germany’s MiCA implementation and supervision statute. It assigns BaFin powers, sets German application, reporting, enforcement and sanctioning rules, and contained the transition regime for firms previously operating under German crypto permissions; that transition generally ended on December 31, 2025. ([gesetze-im-internet.de](https://www.gesetze-im-internet.de/kmag/BJNR1B60B0024.html?utm_source=openai))" }, { "name": "Geldwäschegesetz (GwG)", "status": "in force", "year": 2017, "url": "https://www.gesetze-im-internet.de/gwg_2017/", "summary": "The German AML Act applies to relevant crypto-asset service providers and other obliged entities, requiring customer and beneficial-owner identification, risk analysis, internal controls, recordkeeping, suspicious-transaction reporting to the FIU and sanctions-screening processes. Product architecture, onboarding, wallet-risk analytics and automated monitoring must support auditable AML controls rather than merely…" }, { "name": "Regulation on information accompanying transfers of funds and certain crypto-assets (EU Travel Rule Regulation)", "status": "in force", "year": 2023, "url": "https://eur-lex.europa.eu/eli/reg/2023/1113/oj", "summary": "This regulation requires EU crypto-asset service providers to collect, transmit, retain and check originator and beneficiary information for covered crypto transfers, including procedures for missing information and restrictive-measures controls. The rules do not generally apply to person-to-person transfers without a crypto-asset service provider, but they create significant API, data-governance and…" }, { "name": "Artificial Intelligence Act", "status": "partially in force", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689", "summary": "The AI Act applies according to the AI system’s function and the company’s role, not because the product is crypto-related. Prohibitions and core definitions already apply, GPAI obligations apply, and transparency rules are being phased in; following Regulation (EU) 2026/1744, most high-risk obligations apply from December 2, 2027, or August 2, 2028 for AI embedded in regulated products.…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "BaFin (Bundesanstalt für Finanzdienstleistungsaufsicht) is Germany’s main supervisor for MiCA and applies the Kryptomärkteaufsichtsgesetz (KMAG). The FIU is relevant for suspicious-transaction reporting under the Geldwäschegesetz (GwG), while data-protection and AI authorities may also be relevant depending on the processing and AI use case. ([gesetze-im-internet.de](https://www.gesetze-im-internet.de/kmag/BJNR1B60B0024.html?utm_source=openai))" }, { "q": "Do we need a license, permit, or registration?", "a": "Usually, yes, if the business issues crypto-assets, controls customer assets, operates a trading venue, executes or transfers transactions, exchanges crypto-assets, or provides advice or portfolio management: MiCA authorisation, implemented and supervised in Germany through the KMAG, is generally required. The precise requirement depends on the product and may instead fall under the KWG, WpIG, eWpG or payment-services rules, particularly for security tokens, tokenised deposits, staking and fiat payment flows; the German transition for legacy crypto permissions generally ended on December 31,…" }, { "q": "What are the main data and privacy obligations?", "a": "The GwG requires customer and beneficial-owner identification, risk analysis, internal controls, records, suspicious-transaction reporting to the FIU and sanctions screening. The EU Travel Rule Regulation requires covered crypto-asset service providers to collect, transmit, retain and check originator and beneficiary information, including procedures for missing information; person-to-person transfers without a crypto-asset service provider are generally outside its scope. The system design must therefore support lawful, secure and auditable data processing rather than merely provide…" }, { "q": "Which AI-specific rules apply?", "a": "The Artificial Intelligence Act applies according to the AI system’s function and the company’s role, not simply because the product is crypto-related. Prohibitions and core definitions already apply, GPAI obligations apply where relevant, and transparency duties are phased in; following Regulation (EU) 2026/1744, most high-risk obligations apply from December 2, 2027, or August 2, 2028 for AI embedded in regulated products. The classification depends on the AI use case, model role and whether the system is embedded in a regulated product." }, { "q": "What are the enforcement and penalty risks?", "a": "BaFin can investigate, demand information and documents, issue supervisory orders and take authorisation or market-access measures under MiCA and the KMAG; AML failures can also trigger GwG enforcement. Under KMAG, specified breaches can carry administrative fines of up to €15 million for legal entities, with lower caps for other categories, turnover-based fines in certain cases and increases of up to three times the gains obtained or losses avoided. ([gesetze-im-internet.de](https://www.gesetze-im-internet.de/kmag/__47.html?utm_source=openai))" } ] }, { "id": "brief:crypto--eu", "sector": "crypto", "geo": "eu", "sector_name": "Crypto & Digital Assets", "geo_name": "European Union", "url": "/brief/crypto--eu.html", "overview": "If the company runs a regulated crypto business involving digital tokens, stablecoins, trading platforms, custody, or other crypto services, the Markets in Crypto-Assets Regulation (MiCA) imposes authorization and market-abuse requirements, while the Digital Operational Resilience Act (DORA) covers information and communications technology resilience and anti-money-laundering rules include the crypto “travel rule.” The General Data Protection Regulation (GDPR) applies to customer, transaction, and identity data, and the Artificial Intelligence Act adds risk-based requirements if the company develops or deploys AI; today, no crypto-sector-specific rules bind the company unless its business model falls within these regulated activities, with the entity’s location and level of decentralization also decisive.", "instruments": [ { "name": "Markets in Crypto-Assets Regulation (MiCA)", "status": "in force", "year": 2023, "url": "https://eur-lex.europa.eu/eli/reg/2023/1114/oj", "summary": "MiCA regulates crypto-asset issuance and offerings, asset-referenced tokens, e-money tokens, trading admission, market abuse, and crypto-asset services such as exchange, execution, custody, transfer, advice, and portfolio management. A company providing covered services generally needs authorization as a crypto-asset service provider, while token issuers face white-paper, governance, reserve, conduct, and disclosure…" }, { "name": "Digital Operational Resilience Act (DORA)", "status": "in force", "year": 2022, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2554", "summary": "DORA applies to regulated financial entities, including MiCA-authorised crypto-asset service providers, and requires ICT-risk management, incident reporting, resilience testing, business continuity, subcontracting controls, and oversight of critical technology providers. Product architecture, cloud arrangements, smart-contract dependencies, key management, cybersecurity, and outsourced AI services should be…" }, { "name": "Regulation on information accompanying transfers of funds and certain crypto-assets (Crypto Travel Rule)", "status": "in force", "year": 2023, "url": "https://eur-lex.europa.eu/eli/reg/2023/1113/oj", "summary": "The regulation requires crypto-asset service providers involved in covered transfers to collect, transmit, retain, and verify originator and beneficiary information, and to establish risk-based procedures for missing or incomplete data. It also requires controls for restrictive measures and coordination with GDPR when processing transfer information, including for transfers involving self-hosted addresses.…" }, { "name": "General Data Protection Regulation (GDPR)", "status": "in force", "year": 2016, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679", "summary": "GDPR governs personal-data processing in onboarding, KYC, transaction monitoring, fraud detection, wallet analytics, customer support, and AI model development or operation. The company needs a lawful basis, purpose limitation, data minimization, retention controls, data-subject rights, processor governance, security measures, and safeguards for automated decision-making where applicable.…" }, { "name": "Artificial Intelligence Act (AI Act)", "status": "partially in force", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689", "summary": "The AI Act applies to AI systems and general-purpose AI models placed on or used in the EU, including tools for trading, onboarding, credit or risk assessment, fraud monitoring, customer interaction, and compliance operations. Prohibited-practice, AI-literacy, governance, general-purpose-model, transparency, and high-risk obligations apply on a phased timetable; classification depends on the use and system role, not…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The primary supervisor is the Member State’s designated national competent authority, which handles MiCA authorisations and supervision; ESMA coordinates CASP supervision, market-integrity standards and the central MiCA register. The EBA supervises significant asset-referenced-token and e-money-token issuers, while national data-protection authorities enforce GDPR and national authorities oversee AML, payments and e-money requirements where those regimes apply.…" }, { "q": "Do we need a license, permit, or registration?", "a": "Usually, yes: a company providing covered services such as custody, exchange, execution, transfer, advice or portfolio management generally needs MiCA authorisation as a crypto-asset service provider, and issuers must meet MiCA white-paper and disclosure requirements. Asset-referenced-token and e-money-token issuers require the relevant authorisation, while additional payment-services or electronic-money authorisation may apply where the product also handles customer funds or qualifies as an e-money service; genuinely decentralised activity depends on whether an identifiable operator or…" }, { "q": "What are the main data and privacy obligations?", "a": "Under GDPR, onboarding, KYC, transaction monitoring, fraud detection, wallet analytics, support and AI processing require a lawful basis, purpose limitation, data minimisation, retention controls, security, processor governance and safeguards for automated decision-making. The Crypto Travel Rule requires covered CASPs to collect, transmit, retain and verify originator and beneficiary information, including risk-based procedures for incomplete data and transfers involving self-hosted addresses. MiCA-authorised firms must also integrate DORA controls for ICT risk, incidents, resilience testing,…" }, { "q": "Which AI-specific rules apply?", "a": "The AI Act applies according to the system’s use and role, not simply because the business is crypto: prohibited practices, AI-literacy, transparency, general-purpose-model and high-risk obligations apply on a phased timetable. Trading, onboarding, credit or risk assessment, fraud monitoring, customer interaction and compliance tools may trigger different categories depending on their function, while GDPR still governs the personal data and automated decisions involved. For a regulated firm, DORA also covers the resilience and outsourcing risks of AI services used in the operating model.…" }, { "q": "What are the enforcement and penalty risks?", "a": "MiCA authorities can investigate, order conduct to stop, restrict products or services and impose administrative measures; for legal persons, national rules must provide maximum fines of at least EUR 5 million for specified infringements, with market-abuse infringements under Articles 89–92 reaching at least EUR 15 million or 15% of annual turnover, and potentially multiples of gains. GDPR penalties can reach EUR 20 million or 4% of worldwide annual turnover, while AI Act fines can reach EUR 35 million or 7% of worldwide annual turnover for prohibited practices, with lower tiers for other…" } ] }, { "id": "brief:crypto--fr", "sector": "crypto", "geo": "fr", "sector_name": "Crypto & Digital Assets", "geo_name": "France", "url": "/brief/crypto--fr.html", "overview": "In France, the European Union Markets in Crypto-Assets Regulation (MiCA) now governs crypto-asset issuance, stablecoins, trading, custody, exchange and related services, alongside France’s Monetary and Financial Code and supervision mainly by the Financial Markets Authority (AMF) and the Prudential Supervision and Resolution Authority (ACPR). Yes, sector-specific rules bind crypto businesses today: transitional arrangements for French crypto-asset service providers ended on June 30, 2026, and businesses must meet financial-crime, European Union travel-rule, operational-resilience and General Data Protection Regulation (GDPR) requirements; using AI does not remove these duties and may trigger additional requirements.", "instruments": [ { "name": "Markets in Crypto-Assets Regulation (MiCA)", "status": "in force", "year": 2023, "url": "https://eur-lex.europa.eu/eli/reg/2023/1114/oj", "summary": "MiCA governs issuers and public offers of many crypto-assets, asset-referenced tokens and e-money tokens, and requires authorisation for crypto-asset service providers such as exchanges, trading platforms, custodians, brokers and portfolio managers. In France, the AMF is the principal authority for MiCA authorisations, with the ACPR involved where payment or electronic-money activities are implicated." }, { "name": "French Monetary and Financial Code: crypto-asset services and AML/CFT framework", "status": "in force", "year": 2019, "url": "https://www.legifrance.gouv.fr/codes/section_lc/LEGITEXT000006072026/LEGISCTA000038509568/", "summary": "The Code contains France's PSAN registration and authorisation rules, residual national rules supporting MiCA, financial-crime controls, sanctions and the boundary between crypto-asset services, payment services, electronic money and financial instruments. A technology provider may be regulated itself if it performs a listed service or controls customer assets, rather than merely supplying software to a regulated…" }, { "name": "Transfer of Funds Regulation (Travel Rule Regulation)", "status": "in force", "year": 2023, "url": "https://eur-lex.europa.eu/eli/reg/2023/1113/oj", "summary": "This Regulation requires information to accompany transfers of crypto-assets involving EU crypto-asset service providers and imposes procedures for missing or incomplete information, including controls for restrictive measures. Wallet, exchange and custody products therefore need transaction-data capture, screening, interoperability and exception-handling workflows." }, { "name": "Digital Operational Resilience Act (DORA)", "status": "in force", "year": 2022, "url": "https://eur-lex.europa.eu/eli/reg/2022/2554/oj", "summary": "DORA applies to covered financial entities, including crypto-asset service providers authorised under MiCA, and requires ICT-risk management, incident reporting, resilience testing, business continuity and controls over ICT third parties. A software or AI vendor serving a regulated crypto firm will usually face these requirements contractually, while a vendor designated as a critical ICT third-party provider can…" }, { "name": "General Data Protection Regulation (GDPR)", "status": "in force", "year": 2016, "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "summary": "GDPR governs KYC data, wallet addresses linked to individuals, transaction histories, fraud signals, biometrics, analytics and AI-model inputs or outputs involving identifiable users. Companies need a lawful basis, minimisation and retention controls, processor and international-transfer arrangements, security measures, data-subject rights processes and safeguards for automated decision-making." } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The AMF is the principal French authority for MiCA authorisations and crypto-asset supervision. The ACPR is involved where activities also constitute payment services or electronic-money activities, while the French Monetary and Financial Code provides national rules on PSAN activities, AML/CFT and sanctions. The relevant authority can vary where the product is a financial instrument, payment instrument or electronic money rather than a MiCA crypto-asset." }, { "q": "Do we need a license, permit, or registration?", "a": "Usually, yes: MiCA requires authorisation for crypto-asset service providers such as exchanges, trading platforms, custodians, brokers and portfolio managers, and imposes disclosure and other requirements on relevant token issuers and public offers. The French Monetary and Financial Code contains residual PSAN rules, but the PSAN transition arrangements ended on June 30, 2026. The required status depends on whether the product is a MiCA service, payment or electronic-money activity, MiFID financial-instrument activity, or another regulated activity such as staking or lending." }, { "q": "What are the main data and privacy obligations?", "a": "Under the GDPR, companies must establish a lawful basis, minimise and limit retention of KYC data, wallet addresses, transaction histories, fraud indicators, biometrics and AI-related data, and maintain security, processor, international-transfer and data-subject-rights controls. The Transfer of Funds Regulation requires crypto-asset transfer information, screening and exception handling, including procedures for missing or incomplete data. DORA adds ICT-risk management, incident reporting, resilience testing, business continuity and third-party ICT controls for covered financial entities." }, { "q": "Which AI-specific rules apply?", "a": "The EU AI Act may apply to customer-facing models, profiling, fraud and AML systems, biometric functions and automated decisions, alongside GDPR safeguards for transparency, lawful processing, human oversight and individual rights. DORA governance is also relevant where AI affects ICT risk, security, continuity or outsourced technology used by an authorised crypto business. The applicable requirements depend on the AI system’s purpose, risk classification, deployment role and whether it makes or materially supports decisions about customers." }, { "q": "What are the enforcement and penalty risks?", "a": "The AMF and ACPR can investigate and sanction breaches of MiCA, the French Monetary and Financial Code, AML/CFT rules, the Transfer of Funds Regulation, DORA and related consumer-protection obligations. Risks include administrative fines, injunctions, restrictions or suspension of activities, withdrawal of authorisation or registration, remediation and public enforcement measures; serious conduct can also create civil or criminal exposure. Penalty exposure depends on the breached instrument, the entity’s status, the conduct’s seriousness and factors such as duration, cooperation and affected…" } ] }, { "id": "brief:crypto--ny", "sector": "crypto", "geo": "ny", "sector_name": "Crypto & Digital Assets", "geo_name": "New York", "url": "/brief/crypto--ny.html", "overview": "No technology- or AI-specific rule binds the company merely because it serves New York customers; rules depend on what it does. Handling virtual currency, meaning digital assets, may require a New York BitLicense, a state license for certain virtual-currency businesses, or a limited-purpose trust charter, and may also trigger federal money-transfer and anti-money-laundering rules; token offerings, trading platforms, staking, tokenized assets, or issuing payment stablecoins, digital tokens designed to maintain a stable value, may trigger federal securities or payment-stablecoin laws. If regulated by New York’s Department of Financial Services, the company must also meet cybersecurity, governance, customer-protection, recordkeeping, and disclosure requirements across its software, cloud, wallet, and AI systems.", "instruments": [ { "name": "New York Virtual Currency Regulation (23 NYCRR Part 200; BitLicense)", "status": "in force", "year": 2015, "url": "https://www.dfs.ny.gov/virtual_currency_businesses", "summary": "A company generally needs a BitLicense, or an appropriate New York limited-purpose trust charter, to transmit, custody, exchange, buy or sell, or issue virtual currency involving New York or New York residents. The regime also imposes AML, capital and financial-resource, cybersecurity, consumer-protection, custody, books-and-records, complaint-handling, and marketing-disclosure requirements." }, { "name": "Bank Secrecy Act and FinCEN Money Services Business Regulations", "status": "in force", "year": 1970, "url": "https://www.ecfr.gov/current/title-31/subtitle-B/chapter-X/part-1022", "summary": "A crypto exchange, hosted-wallet provider, administrator, or other business transmitting convertible virtual currency may be a federal money transmitter and MSB. Registration, a risk-based AML program, customer identification, suspicious-activity reporting, recordkeeping, sanctions controls, and funds-transfer Travel Rule data handling can apply even where the product is delivered entirely through software or…" }, { "name": "Federal Securities Act of 1933 and Securities Exchange Act of 1934", "status": "in force", "year": 1933, "url": "https://www.sec.gov/rules-regulations/2026/03/s7-2026-09", "summary": "Token offerings, tokenized securities, staking or other arrangements involving investment contracts, and platforms facilitating trading in digital securities can require securities registration or an exemption, broker-dealer or ATS registration, and continuing disclosure, custody, books-and-records, anti-fraud, and anti-manipulation controls. The SEC's March 17, 2026 interpretation provides the current agency…" }, { "name": "Guiding and Establishing National Innovation for U.S. Stablecoins Act of 2025 (GENIUS Act)", "status": "adopted, phasing in", "year": 2025, "url": "https://www.congress.gov/bill/119th-congress/senate-bill/1582", "summary": "The Act establishes a federal and state-qualified issuer framework for payment stablecoins, including permitted-issuer status, one-to-one reserve backing, redemption and reserve disclosures, custody and segregation expectations, and federal oversight. A company issuing, distributing, listing, safeguarding, or integrating a payment stablecoin must determine whether the asset and its role fall within the Act;…" }, { "name": "New York Cybersecurity Requirements for Financial Services Companies (23 NYCRR Part 500)", "status": "in force", "year": 2017, "url": "https://www.dfs.ny.gov/industry_guidance/cybersecurity", "summary": "BitLicensees and other DFS-regulated entities must maintain a written cybersecurity program, risk assessment, governance and reporting processes, access controls, incident response, vulnerability management, and protections for nonpublic information. For AI and crypto products, this reaches model and API access, private-key and wallet security, cloud providers, vendor risk, customer data, and operational resilience." } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The New York Department of Financial Services (DFS) is the primary state regulator for virtual-currency businesses and cybersecurity under 23 NYCRR Parts 200 and 500. Federal authorities include FinCEN under the Bank Secrecy Act, the SEC under the Federal Securities Acts, and, where relevant, the CFTC; Treasury, the OCC, and the Federal Reserve are also relevant to payment stablecoin implementation under the GENIUS Act." }, { "q": "Do we need a license, permit, or registration?", "a": "Usually, a company transmitting, custodying, exchanging, buying or selling, or issuing virtual currency for New York customers needs a BitLicense under 23 NYCRR Part 200 or an appropriate limited-purpose trust charter. Federal MSB registration and Bank Secrecy Act compliance may also apply, while token securities, trading venues, staking arrangements, derivatives, and payment stablecoins can require additional SEC, CFTC, or GENIUS Act registration or permitted-issuer status depending on the product and role." }, { "q": "What are the main data and privacy obligations?", "a": "DFS-regulated firms must protect nonpublic information through the written cybersecurity program, risk assessment, access controls, vulnerability management, incident response, governance, and reporting required by 23 NYCRR Part 500. The Bank Secrecy Act and FinCEN MSB rules also require customer-identification data, suspicious-activity reporting, books and records, sanctions controls, and Travel Rule information handling." }, { "q": "Which AI-specific rules apply?", "a": "The briefing identifies no separate New York AI licensing regime for these activities; AI functions are governed through DFS cybersecurity, governance, consumer-protection, and operational-resilience requirements. Part 500 therefore applies to model and API access, customer data, cloud and vendor risk, wallet and private-key security, and incident response, with model-governance controls needed where AI supports transaction monitoring, trading, customer decisions, or compliance." }, { "q": "What are the enforcement and penalty risks?", "a": "Breaches can lead to DFS supervisory action, civil monetary penalties, remediation orders, license suspension or revocation, and customer restitution, alongside FinCEN, SEC, or CFTC penalties for AML, securities, market-abuse, disclosure, custody, or registration violations. Criminal exposure can also arise from willful Bank Secrecy Act, sanctions, fraud, or market-manipulation conduct; the amount and type of penalty depend on the regulator, violation, customer impact, duration, and cooperation." } ] }, { "id": "brief:crypto--tx", "sector": "crypto", "geo": "tx", "sector_name": "Crypto & Digital Assets", "geo_name": "Texas", "url": "/brief/crypto--tx.html", "overview": "A Texas crypto or AI company does not face one crypto-specific license today, but a business that holds customer funds, runs an exchange or brokerage, provides payment services, or issues stablecoins, which are digital tokens designed to maintain a stable value, may face federal anti-money-laundering rules and a Texas money-transmission license. Token offerings and trading venues, which involve selling or facilitating trades in digital assets, may also be subject to federal securities laws, while Texas privacy law covers customer identity, transaction, behavioral, and AI-training data; DeFi, staking, and non-custodial software depend on the company’s actual control, handling of customer funds, marketing, and transaction execution.", "instruments": [ { "name": "Bank Secrecy Act and FinCEN MSB regulations", "status": "in force", "year": 1970, "url": "https://www.ecfr.gov/current/title-31/subtitle-B/chapter-X/part-1022", "summary": "A business that administers, exchanges, or transmits convertible virtual currency can be a federal money services business or money transmitter. Registration, risk-based AML programs, customer identification, sanctions screening, suspicious-activity reporting, recordkeeping, and the funds-transfer Travel Rule may apply." }, { "name": "Texas Money Services Modernization Act", "status": "in force", "year": 2023, "url": "https://statutes.capitol.texas.gov/?artSec=&chapter=FI.152&code=FI&tab=1", "summary": "Texas Finance Code Chapter 152 requires a money-transmission license for covered money services conducted for Texas customers, subject to statutory exemptions. The definition of money or monetary value includes certain fully reserved, redeemable sovereign-currency stablecoins, and licensees face capital, safeguarding, reporting, cybersecurity, receipt, and examination requirements." }, { "name": "Federal securities laws: Securities Act of 1933 and Securities Exchange Act of 1934", "status": "in force", "year": 1933, "url": "https://www.sec.gov/rules-regulations/2026/03/s7-2026-09", "summary": "Token offerings, tokenized securities, staking or marketing arrangements, and platforms that trade or facilitate transactions in digital securities can require registration, an exemption, broker-dealer or alternative-trading-system permissions, disclosures, custody controls, and market-abuse controls. The SEC's March 2026 interpretation is effective and provides the current federal framework for distinguishing…" }, { "name": "GENIUS Act", "status": "adopted, phasing in", "year": 2025, "url": "https://www.congress.gov/bill/119th-congress/senate-bill/1582", "summary": "The federal payment-stablecoin regime limits issuance to permitted issuers and requires one-to-one reserves, redemption arrangements, reserve disclosures, supervision, and Bank Secrecy Act compliance. A technology provider, wallet, exchange, or distributor may also need to verify that the stablecoins it supports are issued by permitted issuers and comply with distribution restrictions." }, { "name": "Texas Data Privacy and Security Act", "status": "in force", "year": 2023, "url": "https://statutes.capitol.texas.gov/Docs/BC/pdf/BC.541.pdf", "summary": "The Act applies to covered businesses processing Texas residents' personal data, including KYC information, wallet identifiers, transaction histories, support data, biometrics, and data used to train or operate AI systems. It requires privacy notices, consumer-rights processes, processor contracts, reasonable security, consent for certain sensitive-data uses, and data-protection assessments for specified high-risk…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The key authorities are FinCEN for Bank Secrecy Act and MSB obligations, the Texas Department of Banking and Texas Banking Commissioner for Texas Finance Code Chapter 152 money-transmission supervision, and the SEC for token offerings, digital securities, broker-dealer, ATS, custody, and market-abuse issues. The CFTC becomes relevant for digital-commodity fraud or manipulation and derivatives, while the Texas Attorney General may enforce Texas privacy requirements; the applicable authority depends on the product and activity.…" }, { "q": "Do we need a license, permit, or registration?", "a": "Often, yes. A custodial wallet, exchange, broker, payment product, or stablecoin service may require FinCEN MSB registration and a Texas money-transmission license under the Bank Secrecy Act and Texas Money Services Modernization Act, while token offerings or digital-security trading may require SEC registration or an exemption plus broker-dealer or ATS permissions. Stablecoin issuance also depends on whether the company is a permitted issuer under the GENIUS Act; the result varies with control of customer funds, transaction execution, custody, leverage, staking, and whether the token is a…" }, { "q": "What are the main data and privacy obligations?", "a": "The Texas Data Privacy and Security Act requires covered businesses to provide privacy notices, operate consumer-rights processes, use processor contracts, maintain reasonable security, obtain consent for certain sensitive-data uses, and conduct data-protection assessments for specified high-risk processing. Relevant data includes KYC records, wallet identifiers, transaction histories, support records, biometrics, behavioral data, and information used to train or operate AI systems. These duties apply alongside Bank Secrecy Act recordkeeping, customer-identification, sanctions-screening,…" }, { "q": "Which AI-specific rules apply?", "a": "The briefing identifies no standalone Texas crypto-AI license or comprehensive AI statute for these companies. AI systems using KYC, transaction, behavioral, biometric, or customer-support data must comply with the Texas Data Privacy and Security Act, including notice, consent where required, processor-contract, security, consumer-rights, and high-risk data-protection-assessment obligations. Additional controls depend on whether the AI makes or materially supports customer, fraud, credit, trading, staking, or compliance decisions." }, { "q": "What are the enforcement and penalty risks?", "a": "Regulators may impose civil monetary penalties, disgorgement, injunctions, remedial compliance requirements, license suspension or revocation, trading or product restrictions, and referrals for criminal enforcement. Principal triggers are unregistered money transmission or securities activity, AML/KYC or Travel Rule failures, inadequate safeguarding or segregation of customer assets, misleading token or reserve disclosures, market manipulation, and privacy or AI-data violations; the briefing does not specify a single penalty schedule. As an example of the scale, the CFTC required a $41…" } ] }, { "id": "brief:crypto--uk", "sector": "crypto", "geo": "uk", "sector_name": "Crypto & Digital Assets", "geo_name": "United Kingdom", "url": "/brief/crypto--uk.html", "overview": "UK crypto businesses currently need registration with the Financial Conduct Authority under anti-money-laundering rules if they provide covered exchange or custody services, and their promotions to UK consumers must follow financial-promotion rules. A broader regime under the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, covering stablecoin issuance, trading platforms, dealing, arranging, custody and staking, is expected to start on 25 October 2027. Nothing sector-specific currently binds their use of AI, but data protection, cybersecurity, governance and existing financial-services rules still apply.", "instruments": [ { "name": "Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026", "status": "adopted, phasing in", "year": 2026, "url": "https://www.legislation.gov.uk/uksi/2026/102/contents/made", "summary": "Creates the UK’s principal future cryptoasset perimeter by adding regulated activities such as qualifying stablecoin issuance, cryptoasset trading platforms, dealing, arranging, safeguarding and staking. It also introduces designated-activity controls for public offers, admissions and related disclosures; the regime is expected to apply from 25 October 2027, with FCA applications opening in September 2026." }, { "name": "Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017", "status": "in force", "year": 2017, "url": "https://www.legislation.gov.uk/uksi/2017/692/contents/made", "summary": "Requires in-scope cryptoasset exchange providers and custodian wallet providers to register with the FCA and operate AML/CTF controls, including customer due diligence, suspicious-activity reporting, risk assessments, record keeping and the UK cryptoasset Travel Rule. Firms should design wallet, exchange and AI-enabled transaction-monitoring workflows around these obligations." }, { "name": "Financial Services and Markets Act 2000", "status": "in force", "year": 2000, "url": "https://www.legislation.gov.uk/ukpga/2000/8/contents", "summary": "Provides the core UK financial-services perimeter, including the general prohibition on carrying on regulated activities without FCA or PRA permission and the framework for the Regulated Activities Order. Tokenised securities, derivatives, collective-investment structures, payment products and other crypto-related offerings may already fall within this regime, with authorisation, conduct, prudential and…" }, { "name": "Financial Services and Markets Act 2000 (Financial Promotion) Order 2005", "status": "in force", "year": 2005, "url": "https://www.legislation.gov.uk/uksi/2005/1529/contents/made", "summary": "Together with section 21 of FSMA and FCA cryptoasset-promotion rules, restricts financial promotions for qualifying cryptoassets to UK consumers. Website copy, apps, social-media campaigns, influencer content, referral programmes and automated or AI-generated advertising must use an authorised route and meet requirements on fair, clear and non-misleading risk communication." }, { "name": "UK General Data Protection Regulation", "status": "in force", "year": 2016, "url": "https://www.legislation.gov.uk/eur/2016/679/contents", "summary": "Applies to personal-data processing by crypto and AI operators, including KYC data, wallet and transaction analytics, sanctions screening, fraud detection, profiling and customer-support models. Companies need a lawful basis, data-minimisation and retention controls, security measures, processor governance, rights handling and safeguards for solely automated decisions; the Data Protection Act 2018 supplements the UK…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Financial Conduct Authority (FCA) is the main supervisor for cryptoasset AML registration, financial promotions and the future cryptoasset authorisation regime under the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026. HM Treasury sets policy and recognises systemic stablecoins; the Bank of England and Prudential Regulation Authority may have prudential or systemic-stablecoin roles, while the Payment Systems Regulator, Information Commissioner’s Office, Office of Financial Sanctions Implementation and UK Financial Intelligence Unit are relevant for payments, data,…" }, { "q": "Do we need a license, permit, or registration?", "a": "Until 25 October 2027, firms providing in-scope exchange or custodian-wallet services generally need FCA registration under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, and UK consumer promotions must use an authorised or registered route under section 21 of the Financial Services and Markets Act 2000 and the Financial Services and Markets Act 2000 (Financial Promotion) Order 2005. From 25 October 2027, activities including qualifying stablecoin issuance, trading platforms, dealing, arranging, safeguarding and staking will…" }, { "q": "What are the main data and privacy obligations?", "a": "The UK General Data Protection Regulation, supplemented by the Data Protection Act 2018, applies to KYC data, wallet and transaction analytics, sanctions screening, fraud detection, profiling and AI-supported customer service. Firms need a lawful basis, data minimisation, retention and security controls, processor governance, individual-rights procedures and safeguards for solely automated decisions; the Money Laundering Regulations 2017 also require records and monitoring proportionate to AML/CTF risks." }, { "q": "Which AI-specific rules apply?", "a": "There is no standalone UK AI law applying specifically to this crypto perimeter in the briefing. AI systems remain subject to the UK General Data Protection Regulation, cybersecurity, governance and applicable financial-services controls, including the Money Laundering Regulations 2017 for AI-enabled transaction monitoring and the Financial Promotion Order 2005 for automated or AI-generated marketing." }, { "q": "What are the enforcement and penalty risks?", "a": "Operating without required FCA registration or authorisation, breaching AML/CTF or Travel Rule duties, or issuing non-compliant promotions can lead to FCA supervisory action, prohibition, fines and criminal enforcement; illegal cryptoasset promotions are a criminal offence. Data breaches can also trigger ICO enforcement, with UK GDPR maximum fines of £17.5 million or 4% of worldwide annual turnover for the higher tier, and £8.7 million or 2% for the standard tier; FCA enforcement has included a £338,000 penalty for market-abuse surveillance failures in 2026.…" } ] }, { "id": "brief:crypto--us", "sector": "crypto", "geo": "us", "sector_name": "Crypto & Digital Assets", "geo_name": "US Federal", "url": "/brief/crypto--us.html", "overview": "In the United States, no sector-specific rule binds a crypto or AI product merely because it uses blockchain or AI today; obligations depend on what it does, such as issuing or trading tokens, which are digital assets that may be securities, offering derivatives, which are contracts whose value depends on another asset, or providing exchange, custody, wallet, payment, or stablecoin services, where a stablecoin is a digital token designed to maintain a fixed value. These activities can trigger requirements from the Securities and Exchange Commission (SEC), the Commodity Futures Trading Commission (CFTC), the Financial Crimes Enforcement Network (FinCEN), and other regulators, including registration, customer disclosures, anti-money-laundering checks, sanctions screening, recordkeeping, and cybersecurity and consumer-protection controls; the Guiding and Establishing National Innovation for United States Stablecoins Act (GENIUS Act), signed on July 18, 2025, also created a federal framework for payment-stablecoin issuers.", "instruments": [ { "name": "Bank Secrecy Act", "status": "in force", "year": 1970, "url": "https://www.fincen.gov/resources/statutes-regulations/guidance/application-fincens-regulations-persons-administering", "summary": "A business that exchanges, accepts, transmits, or administers convertible virtual currency may be a FinCEN money services business and must generally register, maintain an AML program, conduct customer and transaction monitoring, file required reports, retain records, and comply with the Travel Rule. The analysis turns on the company’s actual flow of funds and control over wallets or transactions, including…" }, { "name": "Securities Exchange Act of 1934", "status": "in force", "year": 1934, "url": "https://www.sec.gov/file/securities-exchange-act-1934-0", "summary": "If a platform facilitates trading in crypto assets that are securities, it may need registration or an exemption as a broker-dealer, alternative trading system, exchange, clearing agency, or other regulated intermediary. Anti-fraud, market-manipulation, reporting, recordkeeping, and custody rules can apply to automated matching, market-making, staking, and AI-driven trading or surveillance.…" }, { "name": "Securities Act of 1933", "status": "in force", "year": 1933, "url": "https://www.sec.gov/file/1963pdf", "summary": "A token or digital asset offered as an investment contract or other security generally must be registered with the SEC or offered under an available exemption. Issuers and technology providers should assess the token’s economic rights, promotional representations, development promises, distribution model, disclosures, resale restrictions, and the role of AI-generated marketing or investor communications.…" }, { "name": "Commodity Exchange Act", "status": "in force", "year": 1936, "url": "https://www.cftc.gov/LawRegulation/index.htm", "summary": "The CEA governs futures, options, swaps, and other derivatives referencing digital commodities, and gives the CFTC authority over designated contract markets, swap execution facilities, clearing, intermediaries, and related conduct. Spot-market fraud and manipulation can also create CFTC exposure, even where the underlying digital asset is not itself a security.…" }, { "name": "GENIUS Act", "status": "adopted, phasing in", "year": 2025, "url": "https://www.congress.gov/bill/119th-congress/senate-bill/1582", "summary": "The Act creates a federal and state framework for payment stablecoin issuance, including permitted-issuer requirements, one-to-one reserve backing, redemption, custody, disclosures, supervision, and AML coverage. A digital asset service provider generally cannot offer or sell a payment stablecoin in the United States unless the issuer satisfies the Act’s permitted-issuer or qualifying foreign-issuer rules;…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The principal federal authorities are the SEC for securities offerings, trading venues, broker-dealers, custody, disclosures, and market abuse; the CFTC for futures, options, swaps, leveraged products, and related derivatives conduct; and FinCEN under the Bank Secrecy Act for money-transmission, AML, recordkeeping, and Travel Rule obligations. OFAC administers sanctions controls, while federal and state authorities may supervise payment stablecoin activity under the GENIUS Act and applicable licensing regimes." }, { "q": "Do we need a license, permit, or registration?", "a": "Often, yes, but the requirement depends on the product’s activity and control over funds or transactions. A token offering may require Securities Act of 1933 registration or an exemption; a securities trading platform may need Securities Exchange Act of 1934 registration or an exemption as a broker-dealer, ATS, exchange, or other intermediary; derivatives may require Commodity Exchange Act registration; and exchange, custody, wallet, or payment activity may require FinCEN MSB registration and state money-transmitter licensing. Payment stablecoin issuance or distribution also depends on…" }, { "q": "What are the main data and privacy obligations?", "a": "The briefing identifies obligations centered on data security, AML and sanctions monitoring, customer and transaction records, Travel Rule information, and required disclosures rather than one crypto-specific federal privacy regime. The company should limit access to wallet, identity, transaction, and investor data, retain required records under the Bank Secrecy Act and Securities Exchange Act of 1934, and protect systems against cybersecurity and operational failures. The exact requirements depend on whether the product is a money transmitter, securities intermediary, derivatives…" }, { "q": "Which AI-specific rules apply?", "a": "The briefing identifies no standalone federal AI licensing regime for these products; AI obligations arise indirectly through cybersecurity, supervisory, consumer-protection, disclosure, and financial-services controls. AI-generated marketing or investor communications must not create misleading securities disclosures under the Securities Act of 1933, while AI-driven matching, market-making, trading, staking, or surveillance remains subject to applicable Securities Exchange Act of 1934 anti-fraud, manipulation, recordkeeping, and custody requirements. Firms should also govern model access,…" }, { "q": "What are the enforcement and penalty risks?", "a": "Authorities may pursue injunctions, disgorgement, civil monetary penalties, trading or registration restrictions, license loss, and—where applicable—criminal penalties for unregistered offerings, unlawful securities or derivatives activity, AML or Travel Rule failures, sanctions violations, fraud, manipulation, inadequate disclosures, or custody failures. The SEC can enforce the Securities Act of 1933 and Securities Exchange Act of 1934; the CFTC can enforce the Commodity Exchange Act; and FinCEN and OFAC can act against Bank Secrecy Act and sanctions violations. AI increases risk when…" } ] }, { "id": "brief:finserv--at", "sector": "finserv", "geo": "at", "sector_name": "Financial Services", "geo_name": "Austria", "url": "/brief/finserv--at.html", "overview": "Austria applies EU financial-services, technology and AI rules alongside national licensing and anti-money-laundering laws, mainly enforced by the Financial Market Authority. A technology company is directly regulated if it provides banking, payment, crypto or other financial services, and may face indirect outsourcing, technology-risk and contract requirements when serving regulated firms. Today, no sector-specific rule binds the company unless its product performs a regulated financial service or uses AI for credit, insurance, fraud, identity or customer-facing decisions.", "instruments": [ { "name": "Bankwesengesetz (BWG)", "status": "in force", "year": 1993, "url": "https://www.ris.bka.gv.at/GeltendeFassung.wxe?Abfrage=Bundesnormen&Gesetzesnummer=10004827", "summary": "The Austrian Banking Act defines regulated banking activities such as deposit-taking, payment-account business and lending, and generally requires an FMA licence before they are carried out commercially. A technology company may therefore need its own authorisation, a licensed-bank structure or a carefully bounded outsourcing/technology role; governance, outsourcing and prudential controls also matter where the…" }, { "name": "Zahlungsdienstegesetz 2018 (ZaDiG 2018)", "status": "in force", "year": 2018, "url": "https://www.ris.bka.gv.at/GeltendeFassung.wxe?Abfrage=Bundesnormen&Gesetzesnummer=20010182", "summary": "ZaDiG 2018 governs payment services and payment institutions in Austria, including payment initiation, account information, money remittance and related customer rights. Platforms that move funds, initiate payments, access account data or present themselves as the payment provider should test the licensing perimeter, conduct requirements, safeguarding, authentication, incident and disclosure obligations.…" }, { "name": "Digital Operational Resilience Act (DORA), Regulation (EU) 2022/2554", "status": "in force", "year": 2022, "url": "https://eur-lex.europa.eu/eli/reg/2022/2554/oj", "summary": "DORA applies to EU financial entities, including banks, payment institutions, investment firms, insurers and many crypto providers, and regulates ICT risk management, incident reporting, resilience testing and ICT third-party risk. A SaaS, cloud, AI or infrastructure vendor serving regulated firms should expect detailed security, audit, continuity, incident, subcontracting and exit requirements in customer…" }, { "name": "Artificial Intelligence Act, Regulation (EU) 2024/1689", "status": "adopted, phasing in", "year": 2024, "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj", "summary": "The AI Act imposes risk-based duties on providers and deployers of AI systems, with particularly important rules for high-risk uses such as creditworthiness or credit-scoring decisions and certain insurance-related assessments. Financial-services firms and their technology suppliers should document the system's role, data and controls, manage human oversight and accuracy, provide required notices, and preserve logs…" }, { "name": "Finanzmarkt-Geldwäschegesetz (FM-GwG)", "status": "in force", "year": 2016, "url": "https://www.ris.bka.gv.at/GeltendeFassung.wxe?Abfrage=Bundesnormen&Gesetzesnummer=20009769", "summary": "The Austrian FM-GwG imposes AML and counter-terrorist-financing duties on credit and financial institutions and, following the crypto framework changes, on crypto-asset service providers. A fintech or crypto technology operator that is itself an obliged entity, or that materially supports onboarding, transaction monitoring, sanctions screening or suspicious-activity workflows, needs risk-based KYC, beneficial-owner,…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Austrian Financial Market Authority (FMA) is the principal regulator for banks, payment institutions, investment and insurance firms, crypto-asset service providers, licensing, AML supervision and unauthorised financial business. The Oesterreichische Nationalbank (OeNB) supports macroprudential and payment-system supervision, the European Central Bank supervises significant banks, and the Austrian Datenschutzbehörde enforces GDPR and the Datenschutzgesetz. ([fma.gv.at](https://www.fma.gv.at/en/financial-market-supervision-in-austria/?utm_source=openai))" }, { "q": "Do we need a license, permit, or registration?", "a": "It depends on whether the product performs a regulated activity rather than merely supplying software. Deposit-taking, lending and other banking transactions generally require an FMA licence under the Bankwesengesetz (BWG); payment initiation, account information, money remittance or moving customer funds may require authorisation or registration under ZaDiG 2018; and crypto-asset services may require FMA authorisation under MiCA, while a technology-only or bounded outsourcing role may be structured through a licensed institution.…" }, { "q": "What are the main data and privacy obligations?", "a": "Apply the GDPR and Austria’s Datenschutzgesetz to lawful basis, transparency, purpose limitation, data minimisation, retention, data-subject rights, profiling and automated decision-making, with special-category data requiring particular care. AI and cloud deployments also need appropriate processor terms, security and breach processes, records, impact assessments where required, and controls for cross-border hosting; the Austrian Datenschutzbehörde can order corrective measures and impose GDPR fines.…" }, { "q": "Which AI-specific rules apply?", "a": "The Artificial Intelligence Act, Regulation (EU) 2024/1689, applies on a risk-based basis, with high-risk obligations relevant to creditworthiness or credit-scoring decisions and certain insurance assessments. Providers and deployers should classify the system and their role, maintain risk management, technical documentation and logs, ensure accuracy, human oversight and required notices, while GDPR continues to govern the underlying data and automated decisions; DORA adds ICT-risk and resilience duties where the system supports a regulated financial entity.…" }, { "q": "What are the enforcement and penalty risks?", "a": "The FMA can investigate, prohibit unauthorised business, publish investor warnings, revoke or refuse licences and impose administrative fines of up to EUR 5 million for unauthorised financial business. The Datenschutzbehörde can impose GDPR fines of up to EUR 20 million or 4% of worldwide annual turnover for serious infringements, alongside corrective orders and compensation exposure; AML failures under the FM-GwG, AI Act non-compliance, DORA breaches and contractual outsourcing failures add supervisory, operational and reputational risk.…" } ] }, { "id": "brief:finserv--br", "sector": "finserv", "geo": "br", "sector_name": "Financial Services", "geo_name": "Brazil", "url": "/brief/finserv--br.html", "overview": "Brazil regulates fintech and AI-enabled financial services by activity: the Central Bank of Brazil supervises authorized payment, lending, foreign-exchange and, from February 2, 2026, virtual-asset providers; the Brazilian Securities Commission supervises securities and investment activities; and the National Council of Private Insurance and the Superintendence of Private Insurance supervise insurance. The General Data Protection Law applies to credit scoring, fraud detection, identity checks, profiling, automated decisions, personalization and AI development, while anti-money-laundering, cybersecurity, outsourcing, incident-response, consumer-protection and disclosure duties depend on the business model and whether it operates directly or through an authorized partner. As of August 5, 2026, Brazil has no generally applicable AI law, and Bill 2,338/2023 remains pending in the Chamber of Deputies; sector-specific rules bind the company today only if its activities fall within one of these regulated financial sectors.", "instruments": [ { "name": "Lei Geral de Proteção de Dados Pessoais (LGPD) and Código de Defesa do Consumidor — Laws Nos. 13.709/2018 and 8.078/1990", "status": "in force", "year": 2018, "url": "https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709compilado.htm", "summary": "The LGPD applies to personal-data processing by fintech, lending, payments, crypto, securities and insurance-tech operators, including onboarding, KYC, fraud analytics, credit scoring, profiling, automated decisions, personalization and AI training or deployment. It requires an applicable legal basis, purpose and necessity controls, data-subject rights processes, security measures, governance, processor oversight…" }, { "name": "Brazilian AML/CFT framework — Law No. 9.613/1998, BCB Circular No. 3.978/2020, CVM Resolution No. 50/2021 and applicable COAF/SUSEP rules", "status": "in force", "year": 1998, "url": "https://www.planalto.gov.br/ccivil_03/leis/l9613compilado.htm", "summary": "Law No. 9.613/1998 and sector rules are core requirements for regulated fintechs, payment institutions, credit fintechs, securities intermediaries and virtual-asset providers, with insurance and capitalization entities subject to applicable SUSEP/CNSP rules. Covered operators must maintain risk-based AML/CFT programs, customer identification and qualification, beneficial-owner and politically exposed-person…" }, { "name": "BCB financial-market perimeter, credit/payment institutions and cyber-operational requirements — Law No. 12.865/2013; CMN Resolution No. 5.050/2022; CMN Resolution No. 4.893/2021; BCB Resolutions Nos. 80/2021, 81/2021 and 85/2021", "status": "in force", "year": 2021, "url": "https://www.bcb.gov.br/estabilidadefinanceira/exibenormativo?numero=4893&tipo=Resolu%C3%A7%C3%A3o+CMN", "summary": "Technology companies that operate payment accounts, issue electronic money or payment instruments, acquire transactions, initiate payments, provide regulated payment services, or conduct direct-credit or peer-to-peer lending may need BCB authorization or an authorized-partner model. CMN Resolution No. 5.050/2022 governs Sociedade de Crédito Direto (SCD) and Sociedade de Empréstimo entre Pessoas (SEP) activities. The…" }, { "name": "Brazil Open Finance framework — Joint Resolution No. 1/2020 and related CMN/BCB regulations, including BCB Resolution No. 32/2020 and Circular No. 4.015/2020", "status": "in force", "year": 2020, "url": "https://normativos.bcb.gov.br/Lists/Normativos/Attachments/51028/Res_Conj_0001_v7_L.pdf", "summary": "Open Finance applies primarily to financial institutions, payment institutions and other entities authorized by the BCB, with mandatory or voluntary participation depending on the institution and applicable scope. It governs standardized sharing of customer data and financial services through APIs, consent journeys, authentication, revocation, interoperability, participant governance, technical standards, security,…" }, { "name": "CVM securities and investment-platform framework — CVM Resolutions Nos. 35/2021, 50/2021 and 88/2022", "status": "in force", "year": 2021, "url": "https://conteudo.cvm.gov.br/legislacao/resolucoes/resol035.html", "summary": "CVM perimeter rules apply where a fintech or AI operator intermediates, distributes, advises on or operates a platform involving securities, investment products, tokenized securities or public offerings. Resolution No. 35 governs intermediation in regulated securities markets; Resolution No. 50 governs AML/CFT, risk assessment, customer and beneficial-owner identification, monitoring, records and reporting in the…" }, { "name": "Virtual assets and insurance-tech perimeter — Law No. 14.478/2022; Decree No. 11.563/2023; BCB Resolutions Nos. 519, 520 and 521/2025; Decreto-Lei No. 73/1966; CNSP Resolution No. 415/2021; SUSEP Circular No. 635/2021; CNSP Resolution No. 381/2020", "status": "in force", "year": 2022, "url": "https://www.bcb.gov.br/estabilidadefinanceira/exibenormativo?numero=520&tipo=Resolu%C3%A7%C3%A3o+BCB", "summary": "Law No. 14.478/2022 established the legal framework for virtual assets, while Decree No. 11.563/2023 designated the BCB as the authority responsible for regulating, authorizing and supervising virtual-asset service providers. The operational authorization regime is now implemented principally by BCB Resolutions Nos. 519 and 520, effective February 2, 2026, with Resolution No. 521 covering specified foreign-exchange…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Banco Central do Brasil (BCB) supervises authorized payment institutions, credit fintechs, foreign-exchange entities and, from February 2, 2026, regulated virtual-asset service providers; the Comissão de Valores Mobiliários (CVM) supervises securities, investment platforms, crowdfunding and securities-related token activity. The Conselho Nacional de Seguros Privados (CNSP) and Superintendência de Seguros Privados (SUSEP) regulate insurance, brokers and Open Insurance, while the Autoridade Nacional de Proteção de Dados (ANPD) enforces the LGPD; COAF receives suspicious-activity reports…" }, { "q": "Do we need a license, permit, or registration?", "a": "It depends on the activity: operating payment accounts or instruments, initiating payments, providing direct-credit or peer-to-peer lending, conducting regulated foreign exchange, or providing regulated virtual-asset services generally requires BCB authorization or an expressly permitted authorized-partner structure. Securities intermediation, investment advice, crowdfunding, public offerings and securities-related token activity may require CVM registration or authorization, while insurance operations and brokerage require the applicable CNSP/SUSEP authorization; a pure software vendor may…" }, { "q": "What are the main data and privacy obligations?", "a": "The LGPD applies to onboarding, KYC, fraud detection, credit scoring, profiling, automated decisions, personalization and AI training or deployment, requiring a valid legal basis, purpose limitation, necessity, security, governance, processor oversight, international-transfer controls and processes for data-subject rights. Article 20 is especially relevant to automated decisions affecting credit or consumer profiles, and the Código de Defesa do Consumidor requires clear, accurate, non-misleading explanations and effective complaint handling. Open Finance and Open Insurance use also requires…" }, { "q": "Which AI-specific rules apply?", "a": "As of August 5, 2026, Brazil has no generally applicable enacted AI statute; PL 2.338/2023 remains pending in the Chamber of Deputies. AI systems are instead governed through the LGPD, especially Article 20, the Código de Defesa do Consumidor, AML/CFT controls, and sector rules such as CMN Resolution No. 4.893/2021, BCB Resolution No. 85/2021, CVM Resolutions Nos. 35/2021, 50/2021 and 88/2022, and applicable CNSP/SUSEP rules; models should be documented, tested, monitored, secure, explainable where required, and subject to human escalation." }, { "q": "What are the enforcement and penalty risks?", "a": "The ANPD may impose a warning, daily fine, public disclosure, data blocking or deletion, suspension of database or processing activity, and a simple fine of up to 2% of Brazilian gross revenue, capped at R$50 million per infraction. AML/CFT violations under Law No. 9.613/1998 can lead to fines up to R$20 million, temporary management disqualification for up to 10 years, and suspension or cancellation of authorization; BCB and CVM may also impose administrative fines, suspend or revoke authorization or registration, and restrict activities under their sanctioning regimes." } ] }, { "id": "brief:finserv--ca-state", "sector": "finserv", "geo": "ca-state", "sector_name": "Financial Services", "geo_name": "California", "url": "/brief/finserv--ca-state.html", "overview": "California regulates fintech and AI companies mainly by what they do, not by their technology label, including lending, loan brokering or servicing, money transmission, digital-asset custody or exchange, debt collection, consumer-finance services, and important decisions about underwriting, insurance claims, eligibility, fraud, or marketing. The California Consumer Privacy Act, a state privacy law amended by the California Privacy Rights Act, can apply to financial institutions and others meeting its thresholds, while California’s finalized privacy rules effective January 1, 2026 add privacy-risk assessments, cybersecurity audits, and automated-decisionmaking requirements, with some compliance dates delayed. The Department of Financial Protection and Innovation licenses and supervises money transmitters, digital-asset firms, lenders, consumer-finance providers, and debt collectors, and California’s Insurance Code, the state’s insurance law, imposes nondiscrimination, transparency, documentation, utilization-review, and insurer-oversight rules for insurance AI.", "instruments": [ { "name": "California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including 2026 CCPA, cybersecurity-audit, risk-assessment, ADMT, and insurance regulations", "status": "in force", "year": 2018, "url": "https://cppa.ca.gov/regulations/ccpa_updates.html", "summary": "Generally applies to a for-profit business doing business in California that collects personal information and satisfies one or more statutory thresholds, including annual gross revenue above the statutory amount as adjusted for inflation, annually buying, selling, or sharing personal information of at least 100,000 consumers or households, or deriving at least 50 percent of annual revenue from selling or sharing…" }, { "name": "California Consumer Financial Protection Law (CCFPL), California Financial Code Division 24, sections 90000 et seq.", "status": "in force", "year": 2020, "url": "https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?article=&chapter=6.&division=24.&lawCode=FIN&part=&title=", "summary": "Enacted in 2020 and effective January 1, 2021, the CCFPL gives the Department of Financial Protection and Innovation (DFPI) nonexclusive oversight and enforcement authority over the offering and provision of consumer financial products and services under California consumer-finance laws and, to the extent permitted, federal consumer-finance laws. It authorizes DFPI investigations, examinations, administrative and…" }, { "name": "California Money Transmission Act and Digital Financial Assets Law", "status": "in force", "year": 2023, "url": "https://leginfo.legislature.ca.gov/faces/codesTOCSelected.xhtml?tocCode=FIN&tocTitle=+Financial+Code+-+FIN", "summary": "The Money Transmission Act, Financial Code Division 1.2, generally requires licensing or an applicable exemption or agency relationship for receiving money for transmission, selling or issuing payment instruments, or issuing or selling stored value; it also imposes application, financial-condition, examination, security, reporting, recordkeeping, agent, and consumer-disclosure requirements. The Digital Financial…" }, { "name": "California Financing Law (CFL), California Financial Code Division 9, sections 22000 et seq.", "status": "in force", "year": 1994, "url": "https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?article=1.&chapter=1.&division=9.&lawCode=FIN&part=&title=", "summary": "The CFL governs finance lenders and brokers making or brokering consumer and commercial loans and generally requires covered finance lenders and brokers to obtain DFPI licenses unless an exemption applies. It imposes application, licensing, books-and-records, reporting, examination, loan-documentation, disclosure, fee, servicing, advertising, and conduct requirements, with additional rules for consumer loans,…" }, { "name": "California Debt Collection Licensing Act and Rosenthal Fair Debt Collection Practices Act", "status": "in force", "year": 2020, "url": "https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?article=2.&chapter=&division=25.&lawCode=FIN&part=&title=", "summary": "The Debt Collection Licensing Act was enacted in 2020, became effective January 1, 2021, and became operative January 1, 2022. It generally requires persons engaged in the business of collecting consumer debt in California, including covered debt buyers and applicable out-of-state collectors serving California residents, to obtain DFPI licensing and comply with application, reporting, examination, assessment,…" }, { "name": "California AI Transparency Act (SB 942) and California Insurance Code requirements for algorithmic underwriting, claims, and utilization management", "status": "in force", "year": 2024, "url": "https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202320240SB942", "summary": "SB 942 was chaptered as Chapter 291 of the Statutes of 2024 and its California AI Transparency Act provisions became operative January 1, 2026. For covered providers of publicly accessible generative-AI systems with more than 1 million monthly California visitors or users, it requires a no-cost publicly accessible AI-detection tool and specified manifest and latent disclosures for covered synthetic image, video, and…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The California Department of Financial Protection and Innovation (DFPI) oversees consumer finance, lending, money transmission, digital financial assets, and debt collection. The California Privacy Protection Agency (CPPA) administers the CCPA/CPRA, while the California Department of Insurance (CDI) oversees insurer and insurance-AI conduct; the applicable health-plan regulator may also matter for utilization review. The California Legislature and California courts establish the governing requirements, including the California Consumer Financial Protection Law (CCFPL), California Financing…" }, { "q": "Do we need a license, permit, or registration?", "a": "It depends on the product and the company's operational role, not merely on whether it uses AI. DFPI authorization may be required for lending or brokering under the California Financing Law, money transmission or stored value under the Money Transmission Act, covered digital-asset activity under the DFAL, and consumer-debt collection under the Debt Collection Licensing Act; registration or information-gathering requirements may also arise under the CCFPL. A technology provider may still need authorization if it markets, brokers, services, holds funds or assets, operates transaction…" }, { "q": "What are the main data and privacy obligations?", "a": "The CCPA, as amended by the CPRA, can apply when entity-level thresholds are met, with separate duties for service providers, contractors, and other data recipients; financial institutions are not categorically exempt. Companies must address notices and disclosures, data-use and sharing controls, consumer rights, retention, security, vendor governance, and applicable data-level exemptions such as those under the Gramm-Leach-Bliley Act or Fair Credit Reporting Act. Beginning in 2026, covered processing may require privacy-risk assessments, while ADMT requirements generally begin January 1,…" }, { "q": "Which AI-specific rules apply?", "a": "The CCPA/CPRA rules cover AI uses involving underwriting, fraud detection, marketing, eligibility, profiling, retention, security, and data sharing, including the new risk-assessment and ADMT requirements. SB 942 applies primarily to covered publicly accessible generative-AI providers exceeding one million monthly California users or visitors, requiring an AI-detection tool and disclosures for covered synthetic image, video, and audio content. Insurance AI must also satisfy California Insurance Code nondiscrimination, transparency, documentation, oversight, and examination requirements; under…" }, { "q": "What are the enforcement and penalty risks?", "a": "DFPI may investigate, examine, demand records, impose administrative consequences, bring civil actions, and affect a company's ability to operate under the CCFPL and activity-specific regimes. Privacy, lending, payments, digital-asset, and collection violations can create consumer-remediation, disclosure, recordkeeping, licensing, cybersecurity, and unfair-or-deceptive-conduct exposure, while the Rosenthal Act adds risks for abusive or inaccurate automated collection practices. Insurance regulators may examine algorithms and models and pursue corrective action for discrimination, inadequate…" } ] }, { "id": "brief:finserv--co", "sector": "finserv", "geo": "co", "sector_name": "Financial Services", "geo_name": "Colorado", "url": "/brief/finserv--co.html", "overview": "Colorado regulates technology and artificial intelligence (AI) companies when they lend, service or collect debts, handle residential mortgages, transmit money or stored value, perform insurance activities, or use certain automated systems for consequential decisions. Senate Bill 26-189 became law on May 14, 2026, replacing the relevant provisions of Senate Bill 24-205, and its substantive automated-decision requirements generally begin January 1, 2027, but coverage depends on specific statutory criteria and is not universal. Nothing sector-specific binds a company today merely because it is a technology or AI company, although regulated activities or partnerships with licensed financial institutions can trigger Colorado and federal obligations, including the Gramm-Leach-Bliley Act, the Equal Credit Opportunity Act, the Fair Credit Reporting Act, and Bank Secrecy Act anti-money-laundering rules.", "instruments": [ { "name": "Colorado Automated Decision-Making Technology provisions (SB26-189; repealing and reenacting SB24-205 provisions)", "status": "enacted; signed May 14, 2026; substantive ADMT requirements generally effective January 1, 2027", "year": 2026, "url": "https://leg.colorado.gov/bills/SB26-189", "summary": "SB26-189 repeals and reenacts Colorado’s statutory standards for automated decision-making technology originally created by SB24-205. Beginning January 1, 2027, the framework applies to covered developers and deployers using ADMT that processes personal data and generates predictions, recommendations, classifications, rankings, scores, or other outputs used to make, guide, or assist decisions concerning individuals…" }, { "name": "Colorado Uniform Consumer Credit Code and Colorado Fair Debt Collection Practices Act", "status": "in force; amended periodically; CFDCPA provisions currently codified in Title 5, Article 16", "year": 1971, "url": "https://content.leg.colorado.gov/sites/default/files/images/olls/crs2024-title-05.pdf", "summary": "The Uniform Consumer Credit Code governs covered consumer-credit transactions and regulates supervised lenders, sales finance companies, credit sellers, certain nonbank lenders, consumer-credit servicing, private education lending, nonbank mortgage servicing, credit-services organizations, and related activities. The Colorado Fair Debt Collection Practices Act regulates collection agencies, solicitors, debt…" }, { "name": "Colorado Money Transmission Modernization Act (HB25-1201)", "status": "enacted; effective August 6, 2025; replaced the prior Money Transmitters Act", "year": 2025, "url": "https://leg.colorado.gov/bills/HB25-1201", "summary": "HB25-1201 enacted Colorado’s Model Money Transmission Modernization Act and replaced the prior money-transmission statute. Payment processors, remittance providers, stored-value and wallet operators, marketplaces, custodial or settlement platforms, and certain digital-asset businesses must determine whether their activity constitutes money transmission, qualifies for an exemption, or must be conducted through a…" }, { "name": "Colorado Privacy Act (SB21-190)", "status": "in force effective July 1, 2023; implementing rules in force and subject to amendment", "year": 2021, "url": "https://leg.colorado.gov/bills/sb21-190", "summary": "The Colorado Privacy Act applies to covered controllers and processors doing business in Colorado or targeting Colorado residents when statutory thresholds are met. It provides rights to access, correct, delete, and port personal data and to opt out of sale, targeted advertising, and certain profiling, including profiling that may involve automated decision-making. Covered businesses must provide privacy notices,…" }, { "name": "Colorado Mortgage Loan Originator Licensing and Mortgage Company Registration Act", "status": "in force; current Part 7 was enacted through HB19-1172 and is administered through the Colorado Board of Mortgage Loan Originators and applicable mortgage-company registration requirements", "year": 2019, "url": "https://content.leg.colorado.gov/sites/default/files/images/olls/crs2024-title-12.pdf", "summary": "Part 7 of Title 12 is the Colorado Mortgage Loan Originator Licensing and Mortgage Company Registration Act. Individuals may not originate or offer to originate residential mortgage loans, or act or offer to act as mortgage loan originators, without required state licensing and Nationwide Multistate Licensing System and Registry registration. The framework also addresses mortgage-company registration, supervision,…" }, { "name": "Colorado Insurance Code (Title 10, C.R.S.) and health-care AI requirements (HB26-1139)", "status": "Title 10 insurance requirements are in force; HB26-1139 enacted and its AI utilization-review requirements generally effective January 1, 2027", "year": 2026, "url": "https://leg.colorado.gov/bills/HB26-1139", "summary": "The Colorado Insurance Code governs insurers, producers, adjusters, health plans, claims and underwriting functions, market conduct, unfair discrimination, licensing, solvency, records, examinations, and consumer protections. Technology companies may be directly regulated when acting as insurers, producers, adjusters, administrators, claims handlers, utilization-review entities, or other licensed or delegated…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Colorado Department of Law, including the Attorney General, Consumer Credit Unit, and CFDCPA Administrator, oversees consumer credit, debt collection, consumer protection, and SB26-189 enforcement. The Colorado Department of Regulatory Agencies includes the Division of Real Estate and Board of Mortgage Loan Originators for mortgage activity, the Division of Insurance for insurance activity, and the state banking regulator for money transmission; the responsible authority depends on the product and function. The Attorney General’s SB26-189 materials identify the Department of Law as the…" }, { "q": "Do we need a license, permit, or registration?", "a": "Possibly, based on the company’s actual activity rather than its technology label. Licensing or registration may apply under the Colorado Uniform Consumer Credit Code and Colorado Fair Debt Collection Practices Act, the Colorado Money Transmission Modernization Act (HB25-1201), the Mortgage Loan Originator Licensing and Mortgage Company Registration Act, or the Colorado Insurance Code; mortgage companies must register through NMLS and mortgage loan originators require Colorado licensing and NMLS registration. A partner-bank or partner-lender model does not eliminate analysis of the company’s…" }, { "q": "What are the main data and privacy obligations?", "a": "The Colorado Privacy Act requires covered controllers and processors to provide access, correction, deletion, and portability rights; honor opt-outs for sale, targeted advertising, and certain profiling; recognize Global Privacy Control; obtain consent for specified sensitive-data processing; complete data-protection assessments for covered high-risk processing; and maintain reasonable security. Financial institutions and data covered by GLBA, FCRA, or other laws may qualify for exclusions, but a technology vendor must separately analyze whether it acts as a processor for an excluded…" }, { "q": "Which AI-specific rules apply?", "a": "SB26-189 applies beginning January 1, 2027 to covered developers and deployers of automated decision-making technology that processes personal data and materially influences consequential decisions in financial or lending services, insurance, or other listed domains; obligations can include technical documentation, notices, impact or risk assessments, data-access and correction rights, meaningful human review, recordkeeping, and anti-discrimination controls. HB26-1139 adds January 1, 2027 requirements for AI used in covered health-care utilization review, including clinical consideration,…" }, { "q": "What are the enforcement and penalty risks?", "a": "Regulators may investigate, examine records and models, deny or revoke licenses or registrations, issue cease-and-desist orders, require remediation or restitution, and pursue injunctions or civil actions. SB26-189 violations are deceptive trade practices enforceable by the Attorney General under the Colorado Consumer Protection Act, with civil penalties of up to $20,000 per violation; the amount can rise to $50,000 per violation when the violation is against an elderly person. The law generally provides a 60-day cure opportunity before an action when cure is possible, but that protection…" } ] }, { "id": "brief:finserv--de", "sector": "finserv", "geo": "de", "sector_name": "Financial Services", "geo_name": "Germany", "url": "/brief/finserv--de.html", "overview": "Germany’s financial, data, operational-resilience and artificial-intelligence rules apply alongside national licensing, insurance-supervision and anti-money-laundering laws, with the Federal Financial Supervisory Authority (BaFin) as the main financial regulator. A technology company generally does not need a financial licence if it only provides software or infrastructure, but it may need one if it directly provides banking, lending, payment, electronic-money, insurance or crypto-asset services, and regulated customers will require strong controls, security, audits, incident reporting and access rights. The General Data Protection Regulation (GDPR) and Germany’s Federal Data Protection Act govern personal data, while the European Union Artificial Intelligence Act makes credit-scoring and creditworthiness systems generally high-risk from August 2, 2026, although fraud-detection systems are exempt; nothing sector-specific appears to bind the company today unless it directly conducts a regulated activity or supplies such an artificial-intelligence system.", "instruments": [ { "name": "Kreditwesengesetz (KWG) and Geldwäschegesetz (GwG)", "status": "in force", "year": "1961/2017", "url": "https://www.gesetze-im-internet.de/kredwg/BJNR008810961.html", "summary": "The KWG requires authorisation for German banking business and financial services, including deposit-taking, lending, investment services and other activities within the German prudential perimeter. The current KWG text was re-promulgated on September 9, 1998, although the Act's original enactment date is July 10, 1961. Crypto-asset activities covered by MiCA should be assessed primarily under MiCA rather than…" }, { "name": "Zahlungsdiensteaufsichtsgesetz (ZAG), implementing PSD2 and EMD2", "status": "in force", "year": 2017, "url": "https://www.gesetze-im-internet.de/zag_2018/BJNR244610017.html", "summary": "The ZAG, enacted on July 17, 2017 and applicable in its PSD2/EMD2 framework from January 13, 2018, regulates German payment institutions and electronic-money institutions. It covers payment services, account-information and payment-initiation services, issuing and acquiring, money remittance, e-money issuance, authorisation, passporting, safeguarding of client funds, own-funds and governance requirements, security…" }, { "name": "Regulation (EU) 2023/1114 on markets in crypto-assets (MiCA)", "status": "in force and applicable", "year": 2023, "url": "https://eur-lex.europa.eu/eli/reg/2023/1114/oj", "summary": "MiCA establishes the EU framework for crypto-asset issuers, asset-referenced tokens, e-money tokens and crypto-asset service providers. Its provisions for asset-referenced tokens and e-money tokens applied from June 30, 2024, and the main crypto-asset-service-provider regime applied from December 30, 2024. Covered crypto-asset services generally require MiCA authorisation, subject to any applicable transitional or…" }, { "name": "Versicherungsaufsichtsgesetz (VAG) and Digital Operational Resilience Act (DORA), Regulation (EU) 2022/2554", "status": "in force; DORA has applied since January 17, 2025", "year": "2015/2022", "url": "https://www.gesetze-im-internet.de/vag_2016/BJNR043410015.html", "summary": "The VAG was enacted on April 1, 2015 and has applied in its current framework since January 1, 2016. It governs the authorisation and supervision of German insurance and reinsurance business, including solvency, governance, risk management, technical provisions, investments and protection of policyholders. An insurtech that underwrites risk, operates as an insurer or performs regulated insurance distribution must…" }, { "name": "Regulation (EU) 2016/679 (GDPR), supplemented in Germany by the Bundesdatenschutzgesetz (BDSG)", "status": "in force", "year": "2016/2017", "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "summary": "The GDPR and BDSG govern personal-data processing in KYC, fraud detection, credit scoring, lending, customer support, insurance pricing, behavioural analytics and AI development or deployment. The operator must determine controller and processor roles, establish a lawful basis, apply purpose limitation and data minimisation, provide required notices, control retention and international transfers, implement security…" }, { "name": "Artificial Intelligence Act, Regulation (EU) 2024/1689", "status": "in force; principal rules apply from August 2, 2026; certain product-safety high-risk rules apply from August 2, 2027", "year": 2024, "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj", "summary": "The AI Act applies to providers, deployers and other operators of AI systems placed on the EU market or used in the EU. Systems intended to evaluate the creditworthiness of natural persons or establish their credit score are generally high-risk under Annex III, except systems used for financial-fraud detection. Systems intended for risk assessment and pricing concerning natural persons in life or health insurance…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "BaFin is the principal German federal supervisor for banks, financial services firms, payment and e-money institutions, insurers, crypto businesses and financial-sector AML compliance; it generally works with the Deutsche Bundesbank, while the ECB has powers for significant banks. Data protection is supervised by the competent German data-protection authority, such as the BfDI or a Länder authority, and the Financial Intelligence Unit within the Generalzolldirektion receives and analyses suspicious-transaction reports under the GwG." }, { "q": "Do we need a license, permit, or registration?", "a": "You generally need authorisation or registration if your company itself conducts regulated banking, lending, investment, payment, e-money, insurance, insurance-distribution or crypto-asset services under the KWG, ZAG, VAG, MiCA or applicable GwG rules. A pure software or infrastructure provider normally does not need a financial licence solely for supplying technology, but the analysis changes if it acts as an agent, handles client funds, performs the regulated service, or is an outsourcing or ICT third-party provider." }, { "q": "What are the main data and privacy obligations?", "a": "The GDPR and BDSG require a documented controller/processor allocation, lawful basis, purpose limitation, data minimisation, transparency, retention controls, secure processing and compliant international transfers; a DPIA may be required for high-risk scoring, fraud, KYC or AI use cases. Credit-scoring and automated-decision systems must also comply with BDSG rules and GDPR Article 22, including applicable human intervention, the opportunity to express a view and the ability to contest a significant decision. Financial-sector rules such as the ZAG and GwG can add specific fraud-prevention,…" }, { "q": "Which AI-specific rules apply?", "a": "From August 2, 2026, the AI Act’s principal rules apply, including high-risk requirements for systems evaluating the creditworthiness or credit score of natural persons, except systems specifically used for financial-fraud detection, and for life- or health-insurance risk assessment and pricing. Providers must address risk management, data governance, documentation, logging, human oversight, accuracy, cybersecurity, conformity and post-market monitoring; deployers must follow instructions, monitor systems, maintain relevant logs and take corrective action. GDPR Article 22, the BDSG scoring…" }, { "q": "What are the enforcement and penalty risks?", "a": "BaFin can investigate, impose supervisory measures, require remediation or additional own funds, restrict activities, publish measures and ultimately affect an authorisation; breaches of the KWG, ZAG, MiCA, VAG or GwG can also create administrative, contractual and, where applicable, criminal exposure. GDPR infringements can attract fines of up to €20 million or 4% of worldwide annual turnover, whichever is higher, while the AI Act allows up to €35 million or 7% for prohibited AI practices and up to €15 million or 3% for specified provider or deployer obligations." } ] }, { "id": "brief:finserv--eu", "sector": "finserv", "geo": "eu", "sector_name": "Financial Services", "geo_name": "European Union", "url": "/brief/finserv--eu.html", "overview": "EU fintech regulation combines broad rules on data protection, cybersecurity and AI with sector-specific licensing, conduct, financial-strength and anti-financial-crime requirements. Your company may need authorization if it directly provides payments, e-money, crypto or other regulated financial services, while serving banks and other regulated firms can impose significant contractual and operational duties; AI used for credit, insurance, fraud, customer onboarding or financial-crime decisions may add controls, with national licensing and supervisory practices also important.", "instruments": [ { "name": "Digital Operational Resilience Act (DORA)", "status": "in force and applicable since January 17, 2025", "year": 2022, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2554", "summary": "DORA applies to most regulated financial entities and establishes requirements for ICT risk management, incident reporting, resilience testing, business continuity, information sharing and ICT third-party risk. Technology vendors are commonly affected through regulated-customer contractual flow-downs and may face direct EU-level oversight if designated as critical ICT third-party providers. DORA is generally more…" }, { "name": "General Data Protection Regulation (GDPR)", "status": "in force", "year": 2016, "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "summary": "The GDPR governs personal-data processing across fintech, lending, payments, crypto and insurtech products, including profiling, automated decision-making, fraud monitoring and customer onboarding. Operators need an appropriate lawful basis, transparent notices, data-subject rights, security controls, processor and subprocessor governance, retention controls and, where relevant, safeguards for solely automated…" }, { "name": "Artificial Intelligence Act, as amended by the Digital Omnibus on AI", "status": "in force with phased application; amended by Regulation (EU) 2026/1744, which is in force", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689", "summary": "The AI Act prohibits specified AI practices and imposes obligations including AI literacy, governance, transparency and requirements for high-risk systems on a phased timetable. AI used to evaluate the creditworthiness or establish the credit score of natural persons is generally a high-risk use, subject to the Act's scope and exceptions; certain life- and health-insurance risk-assessment and pricing uses are also…" }, { "name": "Markets in Crypto-Assets Regulation (MiCA)", "status": "in force; applicable in stages from June 30, 2024 and December 30, 2024", "year": 2023, "url": "https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=CELEX:32023R1114", "summary": "MiCA regulates crypto-asset issuance, public offers, admission to trading and crypto-asset services in the EU. A technology company providing covered crypto-asset services may need authorization as a crypto-asset service provider, while issuers and offerors may need compliant white papers. Requirements include conduct of business, prudential safeguards, governance, conflicts management, client-asset protection,…" }, { "name": "EU payment-services framework: PSD2 and the PSD3/Payment Services Regulation package", "status": "PSD2 is in force; PSD3 and the Payment Services Regulation remain successor proposals and are not yet in force", "year": 2023, "url": "https://eur-lex.europa.eu/procedure/EN/2023_210", "summary": "PSD2 and the national laws implementing it remain central where a technology company executes payment transactions, provides payment accounts, offers account-information or payment-initiation services, issues or distributes e-money, or operates through a regulated payment institution. Depending on the activity, authorization, safeguarding, governance, capital, strong customer authentication, operational-security,…" }, { "name": "EU anti-money-laundering package: AMLR, AMLD6 and AMLA Regulation", "status": "adopted and in force with phased application; AMLR generally applies from July 10, 2027, while AMLD6 requires national transposition and AMLA is being established under its founding regulation", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1624", "summary": "The package comprises Regulation (EU) 2024/1624 (AMLR), Directive (EU) 2024/1640 (AMLD6) and Regulation (EU) 2024/1620 establishing the Anti-Money Laundering Authority (AMLA). It strengthens and harmonizes customer due diligence, beneficial-owner identification, politically exposed person controls, suspicious-transaction reporting, internal controls, recordkeeping, group-wide risk management and supervisory…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The primary authorities are the relevant national competent authorities: financial supervisors and central banks for payments, e-money, lending and insurance; securities or crypto supervisors for MiCA; data-protection authorities for GDPR; Financial Intelligence Units for AML; and national AI market-surveillance authorities for the AI Act. At EU level, the EBA, ESMA, EIOPA, ECB where banking supervision is relevant, AMLA, the European Commission’s AI Office, the European Data Protection Supervisor for EU institutions, and the DORA supervisory authorities are key; the specific mix depends on…" }, { "q": "Do we need a license, permit, or registration?", "a": "A license or authorization is generally required if the company itself executes payment transactions, provides payment accounts, account-information or payment-initiation services, issues or distributes e-money, provides covered crypto-asset services under MiCA, distributes insurance, assumes underwriting risk, or performs another regulated financial activity. PSD2 and national implementing laws remain current for payment services; MiCA authorization applies to covered crypto-asset service providers, while the PSD3/Payment Services Regulation package is not yet in force. A technology vendor…" }, { "q": "What are the main data and privacy obligations?", "a": "The GDPR requires a lawful basis, transparent privacy notices, data-subject rights, security controls, processor and subprocessor governance, retention limits, and appropriate safeguards for profiling and solely automated decisions producing legal or similarly significant effects. These duties cover onboarding, fraud monitoring, credit or insurance profiling, AML screening, customer support and model training where personal data is used. The company must also control access, document processing roles and purposes, and manage data sharing with regulated customers and vendors." }, { "q": "Which AI-specific rules apply?", "a": "The AI Act applies on a phased timetable and adds AI literacy, governance, transparency and system-specific controls. AI used to evaluate the creditworthiness or establish the credit score of natural persons is generally high-risk, and certain life- and health-insurance risk-assessment or pricing uses are also high-risk, subject to scope and exceptions; relevant providers and deployers may need risk management, data governance, technical documentation, logging, monitoring, human oversight, accuracy, robustness and cybersecurity controls. GDPR Article 22 and related transparency and fairness…" }, { "q": "What are the enforcement and penalty risks?", "a": "Risks include investigations, information requests, remediation orders, suspension or loss of authorization, public disclosure, contractual termination and civil or consumer claims. GDPR fines can reach EUR 20 million or 4% of worldwide annual turnover; AI Act fines can reach EUR 35 million or 7% for prohibited practices, and EUR 15 million or 3% for specified operator violations. MiCA requires national maximum fines of at least EUR 5 million for certain infringements and up to 15% of annual turnover for specified violations, while DORA permits periodic penalty payments of up to 1% of a…" } ] }, { "id": "brief:finserv--fr", "sector": "finserv", "geo": "fr", "sector_name": "Financial Services", "geo_name": "France", "url": "/brief/finserv--fr.html", "overview": "A French fintech or AI operator is bound by sector-specific rules today only if its product performs a regulated financial activity, such as payments, electronic money, lending intermediation, investment services or digital-asset services; software-only delivery does not avoid licensing, conduct, anti-money-laundering or customer-protection duties. The French Monetary and Financial Code, Consumer Code and Data Protection Act apply alongside European Union rules including the Digital Operational Resilience Act and Artificial Intelligence Act, with oversight from the Autorité de contrôle prudentiel et de résolution, Autorité des marchés financiers and data protection regulator, particularly on cybersecurity, outsourcing, explainability, bias and auditability.", "instruments": [ { "name": "Code monétaire et financier", "status": "in force", "year": 2000, "url": "https://www.legifrance.gouv.fr/codes/texte_lc/LEGITEXT000006072026/", "summary": "This is the core French rulebook for regulated financial activities, including payment services, electronic money, banking and lending activities, investment services, AML/CFT controls and digital-asset services. A technology company may need authorization, registration, a regulated-partner structure or specific controls depending on what its software actually does and whether it handles client funds, executes…" }, { "name": "Loi Informatique et Libertés", "status": "in force", "year": 1978, "url": "https://www.legifrance.gouv.fr/loda/id/JORFTEXT000000886460/", "summary": "This French data-protection statute supplements the GDPR and gives the CNIL national enforcement powers and sector-specific rules. It is central for credit scoring, fraud detection, identity verification, behavioral analytics, insurance pricing and generative-AI systems using customer or employee data, including lawful basis, data minimization, automated-decision safeguards, security and impact assessments." }, { "name": "Code de la consommation", "status": "in force", "year": 1993, "url": "https://www.legifrance.gouv.fr/codes/texte_lc/LEGITEXT000006069565/", "summary": "The Code applies to suppliers and intermediaries of financial services and contains rules for distance selling, pre-contract information, withdrawal rights, marketing, unfair or misleading practices and consumer communications. Product flows, chatbot scripts, comparison or recommendation logic and AI-generated explanations must be designed so that customers receive clear, accurate and non-manipulative information." }, { "name": "Digital Operational Resilience Act (DORA), Regulation (EU) 2022/2554", "status": "in force", "year": 2022, "url": "https://eur-lex.europa.eu/eli/reg/2022/2554/oj", "summary": "DORA has applied since January 17, 2025 and imposes ICT-risk management, incident reporting, resilience testing, access and audit rights, and third-party-risk controls on in-scope financial entities. A technology vendor serving banks, insurers, payment firms, investment firms or crypto-asset service providers will commonly face flow-down requirements on security, subcontracting, service continuity, evidence,…" }, { "name": "Artificial Intelligence Act, Regulation (EU) 2024/1689", "status": "partially in force", "year": 2024, "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj", "summary": "The AI Act is phasing in: prohibited practices and AI-literacy duties already apply, most obligations apply from August 2, 2026, and certain high-risk systems embedded in regulated products phase in later. Creditworthiness assessment and certain life or health insurance risk-assessment or pricing systems can be high-risk, requiring risk management, data governance, technical documentation, logging, human oversight,…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The main authorities are the ACPR (banking, payment, electronic-money and insurance supervision), the AMF (investment services, markets and relevant digital-asset activities), and the CNIL (personal-data protection). The DGCCRF is relevant for consumer-protection and misleading-practice issues, while the applicable AI Act market-surveillance authority depends on the system and financial sector; ACPR involvement is particularly relevant for high-risk financial AI. ([acpr.banque-france.fr](https://acpr.banque-france.fr/fr?utm_source=openai))" }, { "q": "Do we need a license, permit, or registration?", "a": "Possibly: the Code monétaire et financier requires authorization, registration or a regulated-partner structure when the product performs a regulated activity such as payment services, electronic money, lending intermediation, investment services or digital-asset services. Software-only delivery does not avoid licensing, AML/CFT, prudential or conduct rules; the outcome depends on whether the company handles client funds, executes transactions, advises, intermediates or provides custody or other crypto services. Insurance distribution, underwriting or administration also requires a separate…" }, { "q": "What are the main data and privacy obligations?", "a": "The GDPR and Loi Informatique et Libertés require a documented lawful basis, purpose limitation, data minimization, retention controls, security, data-subject rights and processor governance. Credit scoring, fraud detection, identity verification, insurance pricing, behavioral analytics and generative-AI use of customer or employee data may require safeguards for automated decisions, explainability, bias controls and a data-protection impact assessment; the exact measures depend on the processing risk and decision architecture.…" }, { "q": "Which AI-specific rules apply?", "a": "The AI Act applies alongside the GDPR, Loi Informatique et Libertés, Code monétaire et financier and sector rules: prohibited practices and AI-literacy duties already apply, while most obligations apply from August 2, 2026. Creditworthiness assessment and certain life- or health-insurance risk-assessment or pricing systems can be high-risk, requiring risk management, data governance, technical documentation, logging, human oversight, accuracy, robustness and cybersecurity; DORA additionally requires ICT-risk management, incident reporting, resilience testing and third-party controls for…" }, { "q": "What are the enforcement and penalty risks?", "a": "ACPR sanctions can include warnings, activity restrictions, withdrawal of authorization and fines of up to €100 million, with a 10% annual-net-turnover alternative for certain AML/CFT breaches; AMF fines can reach €100 million, 10 times the benefit obtained or 15% of annual turnover, depending on the breach and person sanctioned. CNIL GDPR fines can reach €20 million or 4% of worldwide annual turnover, and AI Act penalties can reach €35 million or 7% of worldwide turnover for prohibited practices, or €15 million or 3% for many other obligations.…" } ] }, { "id": "brief:finserv--ny", "sector": "finserv", "geo": "ny", "sector_name": "Financial Services", "geo_name": "New York", "url": "/brief/finserv--ny.html", "overview": "New York regulates the financial activity a technology company performs, not whether it calls itself a software vendor or works through a bank, lender, insurer, or licensed financial-services partner. Today, sector-specific rules can bind the company directly if it transmits money, issues payment instruments, or conducts virtual-currency activity, and the Financial Crimes Enforcement Network’s Bank Secrecy Act and anti-money-laundering requirements can apply to qualifying money-services businesses; the New York Stop Hacks and Improve Electronic Data Security Act applies generally to businesses handling New York residents’ private information. New York has no single comprehensive artificial-intelligence law for these sectors, but existing cybersecurity, data-security, fair-lending, consumer-protection, and insurance rules still apply, often through contracts and oversight by regulated partners.", "instruments": [ { "name": "New York DFS Cybersecurity Regulation (23 NYCRR Part 500)", "status": "in force; materially amended effective November 1, 2023", "year": 2017, "url": "https://www.dfs.ny.gov/industry_guidance/cybersecurity", "summary": "Part 500 applies directly, subject to exemptions, to entities regulated by NYDFS, including covered banks, lenders, money transmitters, virtual-currency businesses, and insurers within the regulation’s scope. It requires a risk-based cybersecurity program, governance, risk assessments, access controls and multifactor authentication, monitoring, testing, incident reporting, business-continuity measures, and…" }, { "name": "New York Money Transmitter Licensing (Banking Law Article XIII-B; NYDFS regulations and licensing requirements)", "status": "in force", "year": 1979, "url": "https://www.dfs.ny.gov/apps_and_licensing/money_transmitters", "summary": "A company that receives money for transmission, transmits money, issues or sells certain payment instruments, or performs covered payment functions for New York users generally needs a NYDFS license unless an exemption applies. The regime includes application and approval requirements, minimum capital or permissible-investment requirements, bonding or security, agent oversight, books and records, reporting,…" }, { "name": "New York Virtual Currency Regulation (23 NYCRR Part 200; BitLicense and limited-purpose trust-company framework)", "status": "in force", "year": 2015, "url": "https://www.dfs.ny.gov/virtual_currency_businesses", "summary": "Businesses conducting defined virtual-currency business activity involving New York generally need a BitLicense under Part 200 or an appropriate NYDFS limited-purpose trust-company charter, subject to applicable exemptions and fact-specific determinations. Licensees must address capital, custody and safeguarding of customer assets, consumer disclosures, AML and sanctions controls, cybersecurity, books and records,…" }, { "name": "FinCEN Bank Secrecy Act and AML Rules for Money Services Businesses", "status": "in force", "year": 1970, "url": "https://www.fincen.gov/resources/statutes-and-regulations/bank-secrecy-act", "summary": "The Bank Secrecy Act authorizes and requires federal AML, reporting, recordkeeping, and related controls for covered financial institutions and qualifying money-services businesses. Fintechs, payment processors, money transmitters, certain prepaid-access businesses, and many crypto or digital-asset businesses may need to determine whether they are an MSB, register with FinCEN where required, maintain a written…" }, { "name": "New York SHIELD Act (Stop Hacks and Improve Electronic Data Security Act; General Business Law §§ 899-aa and 899-bb)", "status": "in force", "year": 2019, "url": "https://ag.ny.gov/resources/organizations/data-breach-reporting", "summary": "The SHIELD Act applies to businesses that own or license New York residents’ private information, including many fintech, lending, payments, insurtech, and digital-asset operators. It requires reasonable administrative, technical, and physical safeguards appropriate to the business’s size and complexity and risk, and it strengthens New York’s breach-notification requirements. Covered companies must maintain a…" }, { "name": "Equal Credit Opportunity Act and Regulation B (12 CFR Part 1002)", "status": "in force", "year": 1974, "url": "https://www.consumerfinance.gov/rules-policy/regulations/1002/", "summary": "ECOA and Regulation B prohibit covered creditors from discriminating in covered credit transactions and require creditors to provide required action notices, including specific and accurate principal reasons for adverse action. Those obligations apply when creditors use complex algorithms, machine learning, alternative data, or other AI; model opacity does not excuse a creditor from identifying the actual reasons…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The New York State Department of Financial Services (NYDFS) is the primary state regulator for money transmission, payment instruments, virtual currency, regulated lenders, insurers, and the New York DFS Cybersecurity Regulation (23 NYCRR Part 500). Federal authorities include FinCEN for Bank Secrecy Act and AML obligations, the CFPB for ECOA and Regulation B, and the FTC where its Safeguards Rule or consumer-protection jurisdiction applies; the New York Attorney General enforces the SHIELD Act and related consumer-protection laws." }, { "q": "Do we need a license, permit, or registration?", "a": "It depends on whether the company itself receives money for transmission, transmits money, issues covered payment instruments, or conducts defined virtual-currency business involving New York. Those activities can require a NYDFS money-transmitter license under Banking Law Article XIII-B, a BitLicense under 23 NYCRR Part 200, or a limited-purpose trust-company charter; qualifying money-services businesses may also need FinCEN registration and a written AML program. Using a bank, lender, insurer, or licensed partner does not by itself remove the need to analyze the company’s own activities." }, { "q": "What are the main data and privacy obligations?", "a": "The New York SHIELD Act requires businesses that own or license New York residents’ private information to maintain reasonable administrative, technical, and physical safeguards and comply with breach-notification requirements. NYDFS-regulated entities must also comply with 23 NYCRR Part 500, including risk assessments, access controls, multifactor authentication, monitoring, incident reporting, business continuity, and third-party-service-provider security policies. Technology vendors commonly assume these controls through contracts, diligence, audit rights, incident escalation, retention…" }, { "q": "Which AI-specific rules apply?", "a": "New York has not adopted one comprehensive statewide AI statute for these financial sectors, so AI is governed mainly through existing cybersecurity, data-security, fair-lending, consumer-protection, and insurance-supervision rules. For lending, ECOA and Regulation B require the creditor to avoid discrimination and provide specific, accurate principal reasons for adverse action even when decisions use machine learning, alternative data, or complex algorithms. For insurance, NYDFS Insurance Circular Letter No. 7, issued July 11, 2024, addresses insurer governance of AI and external consumer…" }, { "q": "What are the enforcement and penalty risks?", "a": "Operating without a required NYDFS license, violating Part 500 or Part 200, failing to maintain AML controls, mishandling private information, or making discriminatory credit decisions can lead to supervisory findings, remediation orders, civil monetary penalties, restitution or consumer redress, license suspension or revocation, and restrictions on business activity. NYDFS, FinCEN, the CFPB, the FTC, and the New York Attorney General may pursue separate or coordinated actions, while regulated customers may terminate contracts or require corrective measures. The exposure depends on the…" } ] }, { "id": "brief:finserv--tx", "sector": "finserv", "geo": "tx", "sector_name": "Financial Services", "geo_name": "Texas", "url": "/brief/finserv--tx.html", "overview": "A Texas fintech or AI company must map each product and workflow to its actual role, such as lender, credit-data user, payment or money-transmission provider, digital-asset or stablecoin business, insurance intermediary, financial-data processor, or technology vendor serving a regulated institution. Federal rules may apply directly when a nonbank performs a regulated function, while Texas licensing and consumer-credit obligations depend on the activity and transaction structure; a token does not automatically trigger Texas money-transmission rules. The Texas Responsible Artificial Intelligence Governance Act has applied since January 1, 2026, and the federal payment-stablecoin framework under the GENIUS Act begins on the earlier of January 18, 2027, or 120 days after final implementing regulations, so no single sector-specific rule necessarily binds the company today without knowing its activities.", "instruments": [ { "name": "Gramm-Leach-Bliley Act, FTC Safeguards Rule, and Fair Credit Reporting Act", "status": "in force", "year": 1999, "url": "https://www.ftc.gov/legal-library/browse/statutes/gramm-leach-bliley-act", "summary": "The Gramm-Leach-Bliley Act, enacted in 1999, requires covered financial institutions to provide specified privacy notices and protect consumers' nonpublic personal information. The FTC Safeguards Rule, 16 C.F.R. Part 314, requires covered nonbank financial institutions to maintain a written information-security program, oversee service providers, and report certain security events. The Fair Credit Reporting Act,…" }, { "name": "Equal Credit Opportunity Act / Regulation B and Truth in Lending Act / Regulation Z", "status": "in force", "year": 1974, "url": "https://www.consumerfinance.gov/rules-policy/regulations/1002/", "summary": "The Equal Credit Opportunity Act was enacted in 1974 and is implemented principally by Regulation B, 12 C.F.R. Part 1002. It prohibits discrimination in covered credit transactions and requires compliant application evaluation, recordkeeping, creditor notices, and specific adverse-action reasons; using a complex or machine-learning model does not eliminate the creditor's explanation duties. The Truth in Lending Act…" }, { "name": "Electronic Fund Transfer Act / Regulation E", "status": "in force", "year": 1978, "url": "https://www.consumerfinance.gov/rules-policy/regulations/1005/", "summary": "The Electronic Fund Transfer Act, enacted in 1978 and implemented by Regulation E, 12 C.F.R. Part 1005, governs covered consumer electronic fund transfers, prepaid accounts, remittance transfers, and certain access-device arrangements. Depending on the product and contractual structure, a fintech or AI operator may face initial and periodic disclosure, authorization, error-resolution, unauthorized-transfer…" }, { "name": "Bank Secrecy Act / FinCEN MSB rules and Texas Finance Code Chapter 152 Money Services Modernization Act", "status": "in force", "year": 1970, "url": "https://www.fincen.gov/resources/statutes-and-regulations/bank-secrecy-act", "summary": "The Bank Secrecy Act was enacted in 1970. A business that is a money services business based on its activities may need FinCEN registration, a risk-based anti-money-laundering program, customer and transaction records, suspicious-activity reporting, and related controls. Texas Finance Code Chapter 152 generally requires a Texas license for covered money-transmission or currency-exchange activity and imposes…" }, { "name": "Texas Finance Code consumer-lending and credit-access rules; OCCC regulation; and FTC Act Section 5", "status": "in force", "year": 1973, "url": "https://occc.texas.gov/industry/regulated-lenders/", "summary": "Texas consumer-lending obligations include Finance Code Chapter 342 and related Office of Consumer Credit Commissioner rules for regulated consumer loans, including licensing of non-depository lenders making, transacting, or collecting loans at rates above 10%, permitted rate structures, contract and disclosure requirements, examinations, reporting, and servicing-related compliance. Finance Code Chapter 393 governs…" }, { "name": "Texas Data Privacy and Security Act and Texas Responsible Artificial Intelligence Governance Act", "status": "in force", "year": 2023, "url": "https://statutes.capitol.texas.gov/Docs/BC/pdf/BC.541.pdf | https://capitol.texas.gov/billlookup/BillSummary.aspx?Bill=HB149&LegSess=89R", "summary": "The Texas Data Privacy and Security Act was enacted in 2023 and became effective July 1, 2024. Subject to its exclusions and financial-sector exemptions, it governs covered processing of Texas residents' personal data and provides consumer rights, controller duties, processor-contract requirements, security obligations, and data-protection-assessment requirements. The Texas Responsible Artificial Intelligence…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The main authorities are the Consumer Financial Protection Bureau, Federal Trade Commission, FinCEN, Texas Office of Consumer Credit Commissioner, Texas Department of Banking, and Texas Attorney General. The Texas Department of Insurance is relevant when the product performs insurance-intermediary or insurance-related functions; responsibility also depends on whether the company is a lender, creditor, data furnisher, payment provider, money transmitter, stablecoin business, servicer, or technology vendor. The Texas Department of Banking licenses and supervises covered money-services…" }, { "q": "Do we need a license, permit, or registration?", "a": "Possibly, and the answer follows the activity and control structure rather than the company's technology label. A non-depository lender making, transacting, or collecting regulated consumer loans generally needs an OCCC license under Texas Finance Code Chapter 342; a covered money transmitter or currency exchanger generally needs a Texas Department of Banking license under Chapter 152 and may also need FinCEN MSB registration. Credit-services organizations, credit-access businesses, insurance activities, custody, settlement, and stablecoin issuance can trigger additional requirements, while a…" }, { "q": "What are the main data and privacy obligations?", "a": "Map each workflow under the Gramm-Leach-Bliley Act, the FTC Safeguards Rule, and the Fair Credit Reporting Act, identifying whether the company is a financial institution, service provider, consumer-report user, furnisher, or consumer reporting agency. Covered nonbank financial institutions need a written information-security program, service-provider oversight, and applicable security-incident reporting; FCRA requires permissible purpose, accuracy, dispute handling, furnisher controls, and required notices. The Texas Data Privacy and Security Act may impose consumer rights, controller and…" }, { "q": "Which AI-specific rules apply?", "a": "The Texas Responsible Artificial Intelligence Governance Act applies from January 1, 2026, to covered persons developing or deploying AI in Texas and restricts specified rights-impairing, discriminatory, biometric, manipulative, and other prohibited uses while requiring disclosures and governance measures. For credit products, ECOA and Regulation B still require compliant evaluation, recordkeeping, and specific adverse-action reasons, and FCRA applies to consumer-report use and related data practices; model complexity does not remove explanation duties. The applicable obligations depend on…" }, { "q": "What are the enforcement and penalty risks?", "a": "Risks include examinations, corrective orders, cease-and-desist orders, license suspension or revocation, administrative penalties, federal enforcement under the FTC Act and financial-services statutes, and consumer claims where available. Under TRAIGA, Texas Attorney General materials state that civil penalties may range from $10,000 to $12,000 for a curable violation or breach of an AG statement, $80,000 to $200,000 for an uncurable violation, and $2,000 to $40,000 per day for a continuing violation; the statute does not provide a private right of action. Texas enforcement can also be…" } ] }, { "id": "brief:finserv--uk", "sector": "finserv", "geo": "uk", "sector_name": "Financial Services", "geo_name": "United Kingdom", "url": "/brief/finserv--uk.html", "overview": "UK fintech and AI businesses are regulated mainly by what they do, not by using technology or AI: sector-specific rules apply today if they carry on regulated investment, lending, insurance, payment, electronic-money or cryptoasset activities, or communicate financial promotions. The Financial Conduct Authority’s rules bind authorised firms, including requirements on governance, outsourcing, operational resilience, customer complaints and the Consumer Duty, but generally do not directly bind an unregulated technology supplier; UK data-protection law still applies when personal data is used for AI training, profiling, fraud detection, credit decisions, insurance pricing or customer support. No comprehensive United Kingdom AI Act exists, and the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, made on 4 February 2026, are not expected to start until 25 October 2027, with applications scheduled from 30 September 2026 to 28 February 2027, so no new cryptoasset regime binds them today.", "instruments": [ { "name": "Financial Services and Markets Act 2000", "status": "in force, as amended", "year": 2000, "url": "https://www.legislation.gov.uk/ukpga/2000/8/contents", "summary": "The core UK financial-services perimeter statute. A technology or AI company generally needs FCA or PRA authorisation, or must rely on an applicable exemption or appointed-representative structure, if it carries on a regulated activity. The Act also supplies the regulators' authorisation, rule-making, supervision and enforcement powers and underpins the framework for regulated cryptoasset activities." }, { "name": "FCA Handbook, including the Consumer Duty", "status": "in force", "year": 2013, "url": "https://handbook.fca.org.uk/handbook", "summary": "The FCA Handbook is the FCA's binding rulebook for regulated firms, supplemented by guidance. It contains requirements relevant to fintech, lending, payments, insurance technology, cryptoasset firms and AI-enabled operations, including governance and systems controls, outsourcing, operational resilience, financial promotions, complaints, prudential matters, sector-specific conduct and the Consumer Duty. The Consumer…" }, { "name": "Financial Services and Markets Act 2000 (Financial Promotion) Order 2005", "status": "in force, as amended", "year": 2005, "url": "https://www.legislation.gov.uk/uksi/2005/1529/contents", "summary": "Defines controlled investments, controlled activities and exemptions relevant to the financial-promotion restriction in section 21 of FSMA. A fintech, lender, insurer, cryptoasset operator or AI platform communicating or approving promotions to UK recipients must assess whether the communication is a financial promotion, whether an exemption applies, and whether approval by an authorised person is required. Digital…" }, { "name": "Consumer Credit Act 1974", "status": "in force, as amended", "year": 1974, "url": "https://www.legislation.gov.uk/ukpga/1974/39/contents", "summary": "Regulates consumer-credit and consumer-hire agreements and related businesses and transactions. It is relevant to digital lenders, buy-now-pay-later providers, credit-brokers, embedded-finance platforms and AI systems used for affordability, creditworthiness, collections or customer communications. Requirements include prescribed information and form, agreement and notice rules, licensing or authorisation…" }, { "name": "Payment Services Regulations 2017 and Electronic Money Regulations 2011", "status": "in force, as amended", "year": 2017, "url": "https://www.legislation.gov.uk/uksi/2017/752/contents", "summary": "The Payment Services Regulations 2017 govern payment services such as transfers, card payments, direct debits, account-information and payment-initiation services, while the Electronic Money Regulations 2011 govern electronic-money issuance and electronic-money institutions. Together they drive authorisation or registration, capital and governance requirements, safeguarding, outsourcing, customer information, strong…" }, { "name": "UK GDPR and Data Protection Act 2018", "status": "in force, as amended by the Data (Use and Access) Act 2025", "year": 2018, "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/", "summary": "Governs the processing of personal data in AI training and testing, profiling, fraud prevention, creditworthiness assessment, insurance pricing, identity verification, customer support and targeted communications. Operators need an appropriate lawful basis, transparency, purpose limitation, data minimisation, accuracy, storage limitation, security, processor and sub-processor governance, international-transfer…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Financial Conduct Authority (FCA) is the main conduct, authorisation and financial-promotion regulator for most fintech, lending, payments, insurance-tech and crypto activities; the Prudential Regulation Authority (PRA), part of the Bank of England, supervises prudentially significant banks, insurers and investment firms. The Information Commissioner’s Office (ICO) regulates data protection and information rights, while HM Treasury sets financial-services policy and sponsors much of the legislative framework." }, { "q": "Do we need a license, permit, or registration?", "a": "It depends on the activity and role, not on the use of AI: authorisation or registration may be required under the Financial Services and Markets Act 2000, the Payment Services Regulations 2017, the Electronic Money Regulations 2011, the Consumer Credit Act 1974 or the financial-promotion regime under the Financial Services and Markets Act 2000 (Financial Promotion) Order 2005. Firms may need FCA or PRA authorisation, an exemption or an appointed-representative structure, while an unregulated technology vendor generally does not need financial authorisation unless it performs or communicates…" }, { "q": "What are the main data and privacy obligations?", "a": "The UK GDPR and Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025, apply to AI training and testing, profiling, fraud detection, creditworthiness assessment, insurance pricing, identity verification and customer support involving personal data. Core duties include a lawful basis, transparency, purpose limitation, data minimisation, accuracy, retention controls, security, processor and sub-processor governance, international-transfer safeguards and processes for data-subject rights. Solely automated decisions producing legal or similarly significant effects require…" }, { "q": "Which AI-specific rules apply?", "a": "The UK has no single comprehensive AI Act for financial services; requirements arise through the FCA Handbook, including governance and systems controls, outsourcing, operational resilience, financial promotions, complaints, sector conduct and the Consumer Duty, together with UK data-protection law. AI model risk, bias, explainability, monitoring, human oversight and third-party-provider controls should be addressed where they affect regulated activities or customer outcomes. The Consumer Duty generally binds regulated firms, including relevant firms in a distribution chain, but does not…" }, { "q": "What are the enforcement and penalty risks?", "a": "The FCA can impose financial penalties, withdraw or vary permissions, prohibit individuals, issue public censure, seek restitution or injunctions, and prosecute unauthorised activity or misconduct; its 2025 published fines included a £39,314,700 penalty against Barclays Bank plc. The ICO can enforce data-protection breaches, with the maximum UK GDPR fine generally being £17.5 million or 4% of worldwide annual turnover, whichever is higher. Risk depends on the product and failure, especially unauthorised activity, unlawful financial promotions, poor Consumer Duty outcomes, weak operational…" } ] }, { "id": "brief:finserv--us", "sector": "finserv", "geo": "us", "sector_name": "Financial Services", "geo_name": "US Federal", "url": "/brief/finserv--us.html", "overview": "In the United States, a technology company can be regulated if it transmits money, offers payments or stored-value products, provides or facilitates credit, uses consumer-report information, handles private financial data, or provides consumer financial services, even if it is not a bank. State licenses often apply alongside federal rules, especially for money transmission, lending, credit servicing, debt collection, and insurance; the Bank Secrecy Act governs applicable anti-money-laundering and reporting duties, while sanctions rules are mainly administered by the Office of Foreign Assets Control. AI creates no exemption, so systems must support fair lending, accurate explanations when credit is denied, truthful marketing, data security, and consumer protection, while crypto, securities, derivatives, insurance, or bank-partner arrangements may add further requirements. No sector-specific rule necessarily binds them today without knowing their activities, but these obligations apply as soon as they conduct the relevant regulated activity.", "instruments": [ { "name": "Bank Secrecy Act and OFAC sanctions authorities", "status": "in force", "year": "1970 / various", "url": "https://www.fincen.gov/resources/statutes-and-regulations/bank-secrecy-act", "summary": "The BSA and its implementing regulations impose AML, reporting, recordkeeping, and—where applicable—FinCEN registration obligations on covered financial institutions and money services businesses, including qualifying money transmitters and certain virtual-currency businesses. BSA coverage is based on the activities and status specified in the statute and regulations; it does not itself create general state-style…" }, { "name": "Gramm-Leach-Bliley Act and FTC Safeguards Rule", "status": "in force", "year": 1999, "url": "https://www.ftc.gov/legal-library/browse/rules/safeguards-rule", "summary": "GLBA applies to covered financial institutions and their handling of consumers' nonpublic personal information; it does not automatically cover every fintech or technology vendor that handles financial data. Depending on the entity's activities, regulator, and coverage, obligations may include privacy notices and restrictions on information sharing under GLBA's privacy provisions and a written information-security…" }, { "name": "Equal Credit Opportunity Act (ECOA) and Regulation B", "status": "in force", "year": 1974, "url": "https://www.consumerfinance.gov/rules-policy/regulations/1002/", "summary": "ECOA and Regulation B prohibit discrimination in covered credit transactions and impose requirements concerning application evaluation, adverse-action notices, recordkeeping, and related credit practices. Creditors remain responsible for decisions made with vendor-supplied or AI/ML technology. A complex or opaque model is not a defense to failing to provide accurate, specific principal reasons for adverse action;…" }, { "name": "Fair Credit Reporting Act and Electronic Fund Transfer Act (Regulations V and E)", "status": "in force", "year": "1970 / 1978", "url": "https://www.consumerfinance.gov/compliance/compliance-resources/other-applicable-requirements/fair-credit-reporting-act/", "summary": "The FCRA governs consumer-reporting agencies, furnishers, users, resellers, and certain users of consumer-report and alternative-data products. Covered operators must establish permissible purposes, address accuracy and dispute obligations, protect report information, and provide required adverse-action disclosures. These requirements are material to AI underwriting, identity, fraud, employment, tenant-screening,…" }, { "name": "FTC Act Section 5 and Dodd-Frank Wall Street Reform and Consumer Protection Act / Consumer Financial Protection Act (UDAAP)", "status": "in force", "year": "1914 / 2010", "url": "https://www.ftc.gov/about-ftc/mission/enforcement-authority", "summary": "Section 5 of the FTC Act prohibits unfair or deceptive acts or practices in or affecting commerce and is central to fintech and AI product claims, advertising, privacy representations, data-security statements, fraud-prevention claims, servicing practices, and algorithmic outcomes. The Consumer Financial Protection Act separately prohibits covered persons and service providers from engaging in unfair, deceptive, or…" }, { "name": "State money-transmitter and lending-licensing laws, state comprehensive privacy laws, and NYDFS Cybersecurity Regulation (23 NYCRR Part 500)", "status": "in force", "year": "various; NYDFS Part 500 effective 2017", "url": "https://www.dfs.ny.gov/industry_guidance/cybersecurity", "summary": "State regimes are separate from federal BSA registration and may require money-transmitter, payment, virtual-currency, consumer-lending, loan-servicing, debt-collection, mortgage, or other licenses depending on the product, entity role, customer location, and state law. State comprehensive privacy laws impose varying requirements concerning notice, consumer rights, sensitive data, profiling, targeted advertising,…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "Key federal authorities include the CFPB, FTC, FinCEN, and OFAC, with state financial regulators such as the New York Department of Financial Services also relevant. The SEC, CFTC, banking regulators, and state insurance regulators may apply depending on whether the company handles securities, derivatives, deposits, custody, insurance, or a bank-partner arrangement." }, { "q": "Do we need a license, permit, or registration?", "a": "It depends on the product, contractual role, customer locations, and state law. Money transmission, payment or stored-value products, virtual-currency activity, lending, loan servicing, debt collection, mortgage activity, and insurance commonly require state licenses, while qualifying money services businesses and certain virtual-currency businesses may require FinCEN registration under the Bank Secrecy Act; federal BSA registration does not replace state licensing." }, { "q": "What are the main data and privacy obligations?", "a": "Covered financial institutions must assess GLBA obligations, including applicable privacy notices, information-sharing limits, and the FTC Safeguards Rule's written information-security program, risk assessment, access controls, service-provider oversight, testing, and incident response. The FCRA and Regulation V govern permissible purposes, accuracy, disputes, report security, and adverse-action disclosures for consumer-report data, while Regulation E and state privacy laws may add payment, error-resolution, consumer-rights, profiling, data-minimization, and vendor-contracting requirements;…" }, { "q": "Which AI-specific rules apply?", "a": "There is no general AI exemption from financial-services regulation. ECOA and Regulation B require nondiscriminatory credit practices and accurate, specific adverse-action reasons; the FCRA applies where consumer reports or qualifying alternative data are used; and the FTC Act Section 5 and Consumer Financial Protection Act UDAAP provisions address deceptive AI claims, material omissions, unfair outcomes, privacy representations, fraud claims, servicing, collections, and vendor conduct." }, { "q": "What are the enforcement and penalty risks?", "a": "The CFPB and FTC can pursue consumer-finance and AI-related violations involving discrimination, UDAAP, deceptive marketing, privacy, data security, servicing, or collections, while FinCEN and OFAC can act on BSA/AML, reporting, recordkeeping, and sanctions failures. State regulators may impose license conditions, civil penalties, restitution, injunctions, supervisory actions, or license suspension or revocation; crypto, securities, derivatives, insurance, and bank-partner structures create additional enforcement exposure depending on the activity." } ] }, { "id": "brief:health--at", "sector": "health", "geo": "at", "sector_name": "Healthcare", "geo_name": "Austria", "url": "/brief/health--at.html", "overview": "Austria does not have a single digital-health licensing law for startups. Instead, obligations depend on whether your product is only software or handles electronic health data, performs a regulated medical function, supports medical practice, or meets a cybersecurity threshold under applicable European Union laws, including the General Data Protection Regulation (GDPR), the Medical Devices Regulation and In Vitro Diagnostic Medical Devices Regulation, and the Artificial Intelligence Act. Nothing sector-specific automatically binds you today unless your product falls into one of those categories.", "instruments": [ { "name": "Gesundheitstelematikgesetz 2012 (GTelG 2012)", "status": "in force", "year": 2012, "url": "https://www.ris.bka.gv.at/GeltendeFassung.wxe?Abfrage=Bundesnormen&Gesetzesnummer=20008120", "summary": "Austria's specific statute for processing and electronically transmitting health and genetic data. It adds Austrian requirements around confidentiality, access control, authentication, logging, data-security measures and approved health-data exchange patterns that can affect platforms, APIs, clinical AI workflows and integrations with healthcare providers.…" }, { "name": "Medizinproduktegesetz 2021 (MPG 2021)", "status": "in force", "year": 2021, "url": "https://ris.bka.gv.at/NormDokument.wxe?Abfrage=Bundesnormen&Anlage=&Gesetzesnummer=20011580&Paragraf=0&Uebergangsrecht=", "summary": "Austria's national medical-device framework supplementing the EU MDR and IVDR. Software that qualifies as a medical device must account for Austrian competent-authority procedures, language and labeling requirements, clinical investigations, in-house products, enforcement and post-market interfaces.…" }, { "name": "Datenschutzgesetz (DSG)", "status": "in force", "year": 1999, "url": "https://ris.bka.gv.at/geltendeFassung.wxe?Abfrage=Bundesnormen&Gesetzesnummer=10001597", "summary": "Austria's national supplement to the GDPR, including the constitutional right to data protection, Austrian rules on data-subject rights and exemptions, and the enforcement role of the Austrian Data Protection Authority. It matters to health-data controllers and processors, AI training and validation datasets, employee access, research uses and vendor arrangements.…" }, { "name": "Ärztegesetz 1998 (ÄrzteG 1998)", "status": "in force", "year": 1998, "url": "https://www.ris.bka.gv.at/geltendeFassung.wxe?Abfrage=Bundesnormen&Gesetzesnummer=10011138", "summary": "Austria's professional statute governing the exercise and organization of the medical profession. A telehealth or clinical-AI business should map whether its workflow constitutes, supports or markets medical practice, ensure that medical acts are performed by appropriately authorized physicians, and allocate documentation, confidentiality, supervision and professional-responsibility duties accordingly.…" }, { "name": "Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026)", "status": "adopted, phasing in", "year": 2026, "url": "https://ris.bka.gv.at/eli/bgbl/i/2025/94/P0/NOR40273913", "summary": "Austria's NIS2 implementation statute is scheduled to apply from October 1, 2026. Depending on sector, size and service role, healthcare operators and technology providers such as cloud, managed-service or other critical suppliers may face registration, risk-management, incident-reporting, governance and supply-chain cybersecurity duties.…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Austrian Data Protection Authority (Datenschutzbehörde, DSB) oversees GDPR and Datenschutzgesetz (DSG) compliance; the Federal Office for Safety in Health Care (BASG) supervises medical devices under the EU MDR/IVDR and Medizinproduktegesetz 2021 (MPG 2021). The Austrian Medical Chamber is relevant to physicians and professional conduct under Ärztegesetz 1998, while the Federal Ministry of the Interior’s cybersecurity authority administers the NISG 2026; Austrian HealthCERT also has a sector-specific health-cybersecurity role.…" }, { "q": "Do we need a license, permit, or registration?", "a": "Austria has no general digital-health licence for startups. Requirements depend on whether the product is a medical device or IVD, performs or supports medical practice, processes electronic health data, or falls within NISG 2026 scope: medical-device products may require MDR/IVDR conformity assessment, CE marking, BASG procedures and registrations, while telehealth workflows must use appropriately authorized physicians under ÄrzteG 1998. In-scope entities under NISG 2026 must register or self-declare as required from October 1, 2026.…" }, { "q": "What are the main data and privacy obligations?", "a": "Apply the GDPR together with Austria’s Datenschutzgesetz (DSG) and, for electronic health or genetic data, the Gesundheitstelematikgesetz 2012 (GTelG 2012). Map data flows for collection, model training and validation, hosting, support access, exports and provider integrations; implement lawful bases and special-category safeguards, data-subject rights, processor and vendor controls, confidentiality, access restrictions, authentication, logging, security measures and appropriate breach handling. The exact controls depend on whether the company is a controller, processor, healthcare provider…" }, { "q": "Which AI-specific rules apply?", "a": "The EU AI Act applies directly and must be assessed alongside the GDPR, DSG, GTelG 2012, MDR/IVDR, MPG 2021 and ÄrzteG 1998. Classify the system before launch by its intended purpose, clinical role, risk category and provider/deployer role; medical-device AI may trigger both AI Act and MDR/IVDR conformity, documentation, monitoring and human-oversight duties, while clinical workflows must preserve physician responsibility and professional confidentiality. NISG 2026 may add cybersecurity governance and incident duties where the company or service provider is in scope." }, { "q": "What are the enforcement and penalty risks?", "a": "The main risks are corrective orders, processing restrictions, medical-device inspections and market measures, professional sanctions, cybersecurity enforcement and reputational or contractual liability. GDPR fines can reach EUR 20 million or 4% of worldwide annual turnover; specified DSG offences can carry up to EUR 50,000, ÄrzteG 1998 provides disciplinary fines up to EUR 36,340 and unauthorized medical practice can reach EUR 21,800 in aggravated cases. From October 1, 2026, NISG 2026 fines can reach EUR 10 million or 2% of worldwide turnover for essential entities, EUR 7 million or 1.4%…" } ] }, { "id": "brief:health--br", "sector": "health", "geo": "br", "sector_name": "Healthcare", "geo_name": "Brazil", "url": "/brief/health--br.html", "overview": "As of August 5, 2026, Brazil has no comprehensive federal artificial intelligence statute in force, and Bill No. 2,338/2023, which would regulate artificial intelligence, is still being considered by the Chamber of Deputies. Sector-specific rules do bind healthcare technology and artificial intelligence companies today: the General Personal Data Protection Law (LGPD) covers sensitive health and genetic data, the National Health Surveillance Agency (ANVISA) regulates software used for medical purposes, and the Telehealth Law No. 14,510/2022 and medical-profession rules apply to remote care. Medical artificial intelligence is also specifically governed by the Federal Council of Medicine’s Resolution No. 2,454/2026, covering its research, development, oversight, auditing, monitoring, and responsible use.", "instruments": [ { "name": "Lei nº 13.709/2018 — Lei Geral de Proteção de Dados Pessoais (LGPD)", "status": "in force", "year": 2018, "url": "https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709compilado.htm", "summary": "Core federal data-protection law for health-tech and AI operators. Health and genetic data are sensitive personal data. Controllers and operators must identify an applicable lawful basis, comply with purpose, adequacy, necessity, transparency, security, prevention, and accountability principles, respect data-subject rights, manage processor relationships, address security incidents, and observe the rules for…" }, { "name": "Resolução CD/ANPD nº 19/2024 — Regulamento de Transferência Internacional de Dados e cláusulas-padrão contratuais", "status": "in force", "year": 2024, "url": "https://www.gov.br/anpd/pt-br/acesso-a-informacao/institucional/atos-normativos/regulamentacoes_anpd/resolucao-cd-anpd-no-19-de-23-de-agosto-de-2024", "summary": "Governs international transfers of personal data under LGPD Articles 33–36, which is particularly relevant to cloud hosting, cross-border clinical analytics, global AI development, vendor support, and transfers of Brazilian health data to foreign group companies or service providers. Operators must identify a valid LGPD transfer mechanism, use ANPD-approved standard contractual clauses where applicable without…" }, { "name": "ANVISA medical-device framework — RDC nº 751/2022, RDC nº 657/2022, and RDC nº 848/2024", "status": "in force", "year": 2022, "url": "https://www.gov.br/anvisa/en/regulation-of-products/medical-devices", "summary": "RDC nº 751/2022 establishes medical-device risk classification, notification and registration regimes, labeling, and instructions for use; Rule 12 addresses Software as a Medical Device risk classification. RDC nº 657/2022 provides the specific regularization framework for SaMD, including scope, exclusions, intended-use, labeling, instructions-for-use, and safety-and-performance considerations. RDC nº 848/2024…" }, { "name": "Lei nº 14.510/2022 — Telessaúde", "status": "in force", "year": 2022, "url": "https://www.planalto.gov.br/ccivil_03/_ato2019-2022/2022/lei/l14510.htm", "summary": "Authorizes and disciplines telessaúde nationwide and applies to remote services involving regulated health professions. It establishes professional autonomy, free and informed patient consent, the right to refuse remote care and request in-person care, safe and quality assistance, confidentiality, compliance with professional scope, and digital responsibility. It also requires medical-service intermediary companies…" }, { "name": "Resolução CFM nº 2.314/2022 — Regulamenta o exercício da telemedicina", "status": "in force", "year": 2022, "url": "https://sistemas.cfm.org.br/normas/arquivos/resolucoes/BR/2022/2314_2022.pdf", "summary": "CFM's professional rule for physician telemedicine, revoking Resolução CFM nº 1.643/2002. It governs teleconsultation, teleinterconsultation, telediagnosis, telesurgery, telemonitoring, teletriage, and teleconsulting. It requires physician assessment of whether telemedicine is clinically appropriate, physician autonomy and final responsibility, informed patient consent, patient-record documentation, confidentiality,…" }, { "name": "Resolução CFM nº 2.454/2026 — Normatiza o uso da inteligência artificial na medicina", "status": "in force", "year": 2026, "url": "https://sistemas.cfm.org.br/normas/arquivos/resolucoes/BR/2026/2454_2026.pdf", "summary": "Brazil's current profession-specific AI rule for medicine. It addresses research, development, governance, auditing, monitoring, training, and responsible use of AI models, systems, and applications in medical settings. It requires proportionate auditability and monitoring, transparency concerning accuracy, efficacy, safety, limitations, and scientific evidence, respect for physician autonomy and human…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The key federal authorities are the Autoridade Nacional de Proteção de Dados (ANPD) for LGPD compliance, Agência Nacional de Vigilância Sanitária (ANVISA) for medical devices and Software as a Medical Device, and the Conselho Federal de Medicina (CFM), together with the relevant Conselhos Regionais de Medicina (CRMs), for physician practice, telemedicine, and medical AI. The Ministry of Health and other professional councils may also matter for SUS procurement, clinical research, records, interoperability, or non-medical regulated professions." }, { "q": "Do we need a license, permit, or registration?", "a": "There is no single general federal AI license. ANVISA notification or registration may be required under RDC nº 751/2022 and RDC nº 657/2022 when software has a medical purpose, with the route depending on its risk classification and intended use; RDC nº 848/2024 adds essential safety and performance requirements. Telessaúde companies that directly or indirectly contract physicians must address Lei nº 14.510/2022, including registration with the relevant CRM and appointment of a medical technical director, while physician telemedicine must comply with Resolução CFM nº 2.314/2022." }, { "q": "What are the main data and privacy obligations?", "a": "Under Lei nº 13.709/2018 (LGPD), health and genetic data are sensitive personal data, so companies must establish a lawful basis, limit processing to specified and necessary purposes, provide transparency, protect confidentiality and security, manage controllers and operators, support data-subject rights, address incidents, and document accountability. Resolução CD/ANPD nº 19/2024 applies to international transfers, including foreign cloud hosting, group-company access, vendor support, and cross-border AI development; the company must use a valid transfer mechanism, including ANPD-approved…" }, { "q": "Which AI-specific rules apply?", "a": "Resolução CFM nº 2.454/2026 is the principal profession-specific AI rule for medicine and covers AI research, development, governance, auditing, monitoring, training, deployment, updates, and retraining. It requires proportionate auditability, transparency about accuracy, efficacy, safety, limitations, and evidence, physician autonomy and human responsibility, patient consent or refusal, confidentiality, secure and lawful data sharing, and lifecycle controls; ANVISA rules also apply when the AI product qualifies as SaMD under RDC nº 751/2022, RDC nº 657/2022, and RDC nº 848/2024." }, { "q": "What are the enforcement and penalty risks?", "a": "The ANPD may impose warnings, publicize the violation, block or delete personal data, suspend processing, and impose a simple fine of up to 2% of Brazilian revenue excluding taxes, capped at R$50 million per infraction, plus a daily fine subject to the statutory cap. ANVISA may take administrative action against unregularized or noncompliant medical devices, while physicians may face ethical sanctions under CFM rules, including for breaches of Resolução CFM nº 2.454/2026; exposure also depends on the product’s medical purpose, data flows, clinical role, and whether the company provides…" } ] }, { "id": "brief:health--ca-state", "sector": "health", "geo": "ca-state", "sector_name": "Healthcare", "geo_name": "California", "url": "/brief/health--ca-state.html", "overview": "Today, no single artificial intelligence law governs a California healthcare technology company; its duties depend on whether it is a business associate under the Health Insurance Portability and Accountability Act (HIPAA), handles information covered by California’s Confidentiality of Medical Information Act (CMIA), collects consumer health data under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), or falls under the Federal Trade Commission’s Health Breach Notification Rule. Sector-specific rules bind the company today if it supports covered healthcare providers using generative artificial intelligence for patient clinical communications under California Assembly Bill 3030, or if its software is a medical device subject to the United States Food and Drug Administration; healthcare contracts may also impose these duties even when the company is not itself a healthcare provider.", "instruments": [ { "name": "Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy, Security, and Breach Notification Rules", "status": "in force", "year": 1996, "url": "https://www.hhs.gov/hipaa/for-professionals/index.html", "summary": "Applies to HIPAA covered entities and business associates, including technology companies that perform services involving protected health information on behalf of covered entities. The Privacy Rule limits uses and disclosures and grants individual rights; the Security Rule requires administrative, physical, and technical safeguards for electronic protected health information; and the Breach Notification Rule…" }, { "name": "California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA)", "status": "in force; CPRA amendments effective January 1, 2023, with major cybersecurity-audit, risk-assessment, and automated-decisionmaking regulations effective January 1, 2026", "year": 2018, "url": "https://cppa.ca.gov/regulations/ccpa_updates.html", "summary": "May apply to California businesses, service providers, contractors, and other covered entities that collect or process consumers’ personal information, including health-related information that is not fully excluded by the CCPA’s medical-information and HIPAA exemptions. Depending on role and processing, obligations include notice, purpose limitation, data minimization, access, deletion, correction, portability,…" }, { "name": "California Confidentiality of Medical Information Act (CMIA)", "status": "in force", "year": 1981, "url": "https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?division=&chapter=1.5.&part=2.6.&lawCode=CIV&title=1.", "summary": "Protects medical information held by California healthcare providers, plans, and specified service providers, and can reach technology vendors that create, receive, maintain, or transmit medical information on their behalf. It restricts use and disclosure, requires authorization or another permitted basis for many disclosures, imposes security and breach-related duties, and supports contractual controls for vendors…" }, { "name": "Federal Food, Drug, and Cosmetic Act and FDA medical-device requirements for device software", "status": "in force", "year": 1938, "url": "https://www.fda.gov/medical-devices/device-advice-comprehensive-regulatory-assistance/overview-device-regulation", "summary": "Applies nationwide when software satisfies the statutory medical-device definition based on its intended use and is not excluded or exempted. Requirements are risk- and classification-dependent: device establishments generally must register and list devices, and applicable products may require quality-system compliance, labeling controls, medical-device reporting, complaint and record controls, and premarket…" }, { "name": "California AB 3030 (2024), Health care services: artificial intelligence", "status": "in force; enacted as Chapter 848, Statutes of 2024, generally effective January 1, 2025", "year": 2024, "url": "https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202320240AB3030", "summary": "Requires a California health facility, clinic, physician’s office, or office of a group practice that uses generative AI to generate written or verbal patient communications concerning patient clinical information to include a disclosure that the communication was generated by generative AI and clear instructions for contacting a human healthcare provider, employee, or other appropriate person. The disclosure must…" }, { "name": "FTC Health Breach Notification Rule, 16 C.F.R. Part 318", "status": "in force; 2024 amendments effective July 29, 2024", "year": 2009, "url": "https://www.ftc.gov/legal-library/browse/rules/health-breach-notification-rule", "summary": "Applies principally to vendors of personal health records, personal-health-record-related entities, and their service providers that are not covered by HIPAA. Following a breach of unsecured, individually identifiable health information in a personal health record, covered entities must notify affected consumers, the FTC, and in some circumstances the media; service providers must notify the covered entity. The rule…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The main authorities are the U.S. Department of Health and Human Services Office for Civil Rights (HHS OCR) for HIPAA, the Federal Trade Commission (FTC) for the Health Breach Notification Rule and deceptive or unfair practices, the California Privacy Protection Agency (CPPA) and California Attorney General for the CCPA/CPRA, and the FDA’s Center for Devices and Radiological Health (CDRH) for regulated device software. California’s AB 3030 is implemented primarily through the covered healthcare providers that use the technology, with vendor duties usually flowing through contracts and product…" }, { "q": "Do we need a license, permit, or registration?", "a": "There is no general California license or permit for operating a healthcare AI or digital-health company. FDA establishment registration and device listing apply when the software is a medical device; additional quality, reporting, labeling, and premarket requirements depend on intended use, classification, exemptions, and pathway, and registration or listing alone is not FDA clearance or approval. HIPAA business-associate agreements, CMIA contracts, and provider or health-plan requirements are compliance obligations rather than general operating licenses." }, { "q": "What are the main data and privacy obligations?", "a": "Map each data flow and contractual role under HIPAA, CMIA, the CCPA as amended by the CPRA, and, where applicable, the FTC Health Breach Notification Rule. Core duties include permitted-use and disclosure limits, minimum-necessary handling, notices and consumer rights, sensitive-personal-information controls, service-provider or contractor terms, safeguards, subcontractor flow-downs, incident response, and breach notifications. The governing instrument depends on whether the company is a HIPAA business associate, handles CMIA medical information, collects health data directly, or operates a…" }, { "q": "Which AI-specific rules apply?", "a": "AB 3030 applies to covered California healthcare providers using generative AI for written or verbal patient clinical communications; vendors should support AI disclosures, human-contact instructions, escalation, and auditability unless a licensed or certified provider reviews the communication. The CCPA/CPRA’s automated-decisionmaking requirements may apply to consequential workflows, with ADMT requirements for significant decisions beginning January 1, 2027, while qualifying businesses may face 2026 cybersecurity-audit and risk-assessment duties. FDA device-software controls apply when…" }, { "q": "What are the enforcement and penalty risks?", "a": "HHS OCR can investigate HIPAA violations and require corrective action, resolution agreements, or civil money penalties; the FTC can enforce the FTC Health Breach Notification Rule and treat violations as unfair or deceptive practices, with penalties of up to $53,088 per violation. The CPPA and California Attorney General can enforce the CCPA/CPRA, while FDA actions for noncompliant device software can include warning letters, inspections, recalls, and action against unregistered, uncleared, or misleadingly marketed products. Contract termination, indemnity claims, customer audits,…" } ] }, { "id": "brief:health--co", "sector": "health", "geo": "co", "sector_name": "Healthcare", "geo_name": "Colorado", "url": "/brief/health--co.html", "overview": "Colorado health-tech companies may face federal and state rules depending on their role, product, data, customers, and intended use: the Health Insurance Portability and Accountability Act (HIPAA) can apply when they handle protected health information for a covered health-care organization, while Colorado privacy and breach laws, federal consumer-protection rules, and health-data breach rules may also apply. The Food and Drug Administration may regulate software that is a medical device or controls or supports one; Colorado’s Automated Decision-Making Technology Act, Senate Bill 26-189, became law on May 14, 2026, and requirements for systems materially influencing consequential decisions, including access to health-care services, generally begin January 1, 2027. Nothing sector-specific appears to bind every Colorado health-tech operator today, but obligations may already apply based on the company’s specific product, data, customers, and claims.", "instruments": [ { "name": "Health Insurance Portability and Accountability Act of 1996 (HIPAA), including the Privacy, Security, and Breach Notification Rules", "status": "in force", "year": 1996, "url": "https://www.hhs.gov/hipaa/for-professionals/privacy/index.html", "summary": "HIPAA applies to covered entities—health plans, health-care clearinghouses, and most health-care providers—and to business associates that perform covered functions or services involving protected health information. For covered products and services, operators must apply the Privacy Rule’s use and disclosure limits, provide required notices and individual rights, implement the Security Rule’s administrative,…" }, { "name": "Colorado Privacy Act", "status": "in force; effective July 1, 2023", "year": 2021, "url": "https://coag.gov/resources/colorado-privacy-act/", "summary": "The Colorado Privacy Act applies to covered controllers and processors handling personal data of Colorado residents acting in an individual or household context, subject to statutory thresholds, exemptions, and exclusions, including specified health information and entities or data regulated under other laws. For non-exempt health, biometric, genetic, and other sensitive data, operators may need privacy notices,…" }, { "name": "Colorado Security Breach Notification Law, C.R.S. § 6-1-716", "status": "in force", "year": 2006, "url": "https://content.leg.colorado.gov/sites/default/files/images/olls/crs2024-title-06.pdf", "summary": "The law applies to persons and commercial entities that maintain, own, or license covered personal information, including medical information, health-insurance identifiers, biometric data used for online-account authentication, and certain credentials. After a prompt, good-faith investigation determines that a breach occurred and misuse has occurred or is reasonably likely, the operator generally must notify…" }, { "name": "Federal Trade Commission Act § 5 and Health Breach Notification Rule, 16 C.F.R. Part 318", "status": "in force", "year": 1914, "url": "https://www.ftc.gov/legal-library/browse/rules/health-breach-notification-rule", "summary": "Section 5 of the FTC Act prohibits unfair or deceptive acts or practices and may apply to health-tech operators’ privacy representations, security practices, health claims, AI-performance claims, disclosures of health data, consent flows, and user-interface design. The Health Breach Notification Rule separately applies principally to vendors of personal health records and related entities outside HIPAA, including…" }, { "name": "Federal Food, Drug, and Cosmetic Act: Medical-Device Software and Digital-Health Requirements", "status": "in force", "year": 1938, "url": "https://www.fda.gov/medical-devices/digital-health-center-excellence/device-software-functions-including-mobile-medical-applications", "summary": "Software may be a medical device when its intended use includes diagnosis, cure, mitigation, treatment, or prevention of disease, or when it controls or materially supports a regulated device. Depending on the function, risk classification, and marketing pathway, an operator may face FDA registration and listing, quality-management and design-control requirements, premarket notification, De Novo or PMA review,…" }, { "name": "Colorado Automated Decision-Making Technology Act, SB26-189", "status": "enacted and effective May 14, 2026; covered operational requirements generally begin January 1, 2027", "year": 2026, "url": "https://leg.colorado.gov/bills/SB26-189", "summary": "SB26-189 repealed and reenacted the prior AI provisions created by SB24-205 and regulates developers and deployers of automated decision-making technology that processes personal data and generates outputs used to make, guide, or assist decisions concerning individuals. A consequential decision includes a decision concerning access to, eligibility for, or compensation related to health-care services. For covered…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The principal authorities are HHS’s Office for Civil Rights (OCR) for HIPAA, the Federal Trade Commission (FTC) for Section 5 and the Health Breach Notification Rule, FDA’s Center for Devices and Radiological Health for regulated medical-device software, and the Colorado Attorney General for the Colorado Privacy Act, Colorado breach law, Colorado Consumer Protection Act, and SB26-189. CMS may also matter for certain HIPAA administrative-standard issues, depending on the operator’s role." }, { "q": "Do we need a license, permit, or registration?", "a": "There is no single Colorado health-tech license identified in the briefing; the answer depends on the product’s function, intended use, customer relationship, and regulated activity. Software that qualifies as a medical device may require FDA establishment registration and device listing, quality-system and design controls, and a 510(k), De Novo, or PMA pathway; FY2026 FDA fees include an $11,423 establishment-registration fee, subject to applicable exemptions." }, { "q": "What are the main data and privacy obligations?", "a": "If the company is a HIPAA covered entity or business associate, it must follow the Privacy, Security, and Breach Notification Rules, including permitted-use limits, notices and individual rights, safeguards for electronic protected health information, documentation, and breach notices. Non-exempt data may also trigger the Colorado Privacy Act’s notices, minimization, sensitive-data consent, consumer-rights, processor-contract, assessment, opt-out, and security requirements, while C.R.S. § 6-1-716 generally requires Colorado resident notice without unreasonable delay and within 30 days after…" }, { "q": "Which AI-specific rules apply?", "a": "SB26-189, Colorado’s Automated Decision-Making Technology Act, applies to covered developers and deployers of automated decision-making technology that processes personal data and materially influences consequential decisions, including access to or eligibility for health-care services. Covered developers must provide technical documentation and update notices, while deployers generally must provide point-of-interaction notice, explain an adverse decision within 30 days, support data correction, and provide meaningful human review and reconsideration; operational requirements generally begin…" }, { "q": "What are the enforcement and penalty risks?", "a": "OCR may impose HIPAA civil money penalties ranging from $127 to $63,973 per violation, with annual caps that can reach $1,919,173 for an identical requirement; recent OCR resolutions also show million-dollar settlements. FTC Health Breach Notification Rule violations may carry civil penalties of up to $53,088 per violation, and Colorado Consumer Protection Act violations can carry up to $20,000 per violation, with SB26-189 violations treated as deceptive trade practices enforceable by the Colorado Attorney General. FDA exposure can include warning letters, recalls or corrections, device…" } ] }, { "id": "brief:health--de", "sector": "health", "geo": "de", "sector_name": "Healthcare", "geo_name": "Germany", "url": "/brief/health--de.html", "overview": "Germany has no single healthcare-tech licence that binds every founder today, but the applicable rules depend on whether the product is a medical device or in-vitro diagnostic medical device, uses AI covered by the European Union Artificial Intelligence Act, seeks statutory health-insurance reimbursement as a digital health application, processes health data under the General Data Protection Regulation (GDPR), or falls within German cybersecurity rules implementing the Network and Information Systems Directive 2 (NIS2). The digital health application route is a listing and reimbursement process run by the Federal Institute for Drugs and Medical Devices under Social Code Book V and the Digital Health Applications Ordinance, not a general operating licence; the European Health Data Space Regulation is already in force but applies in stages. As of August 5, 2026, Germany’s Health Data Infrastructure Act is still only a draft under preparation by the Federal Ministry of Health, not an approved or effective law.", "instruments": [ { "name": "Regulation (EU) 2024/1689 (EU AI Act)", "status": "in force; staged application, with most provisions applying from August 2, 2026 and certain regulated-product high-risk obligations applying from August 2, 2027", "year": 2024, "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj", "summary": "The AI Act applies directly to providers, deployers, importers and distributors of in-scope AI systems. AI embedded in medical devices or IVDs can fall within the high-risk regime where the product is subject to third-party conformity assessment under the MDR or IVDR; other healthcare uses may be high-risk or may trigger rules on prohibited practices, transparency, AI literacy or general-purpose AI depending on the…" }, { "name": "Regulation (EU) 2016/679 (GDPR), supplemented in Germany by the Bundesdatenschutzgesetz (BDSG)", "status": "in force and directly applicable; BDSG in force as Germany’s supplementary data-protection statute", "year": 2016, "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "summary": "GDPR governs processing of personal data, including health data, by healthcare-tech and AI operators acting as controllers, joint controllers or processors. Core requirements include a lawful basis and an Article 9 condition for health-data processing, purpose limitation, data minimisation, accuracy, storage limitation, privacy by design and default, records of processing, processor contracts, data-subject rights,…" }, { "name": "Regulation (EU) 2017/745 (MDR) and Regulation (EU) 2017/746 (IVDR), implemented and enforced in Germany principally through the Medizinprodukterecht-Durchführungsgesetz (MPDG)", "status": "MDR and IVDR in force and applicable with transitional provisions; MPDG in force in Germany", "year": 2017, "url": "https://eur-lex.europa.eu/eli/reg/2017/745/oj", "summary": "The MDR and IVDR regulate medical devices, software with a medical intended purpose and in-vitro diagnostic devices placed on the EU market. Operators must determine regulatory qualification and classification, appoint an EU authorised representative where required, establish a quality-management system, prepare technical documentation and clinical or performance evidence, conduct conformity assessment, issue an EU…" }, { "name": "Directive (EU) 2022/2555 (NIS2), implemented in Germany through the 2025 BSIG", "status": "NIS2 is in force at EU level; Germany’s new BSIG was enacted on December 2, 2025 and entered into force on December 6, 2025", "year": 2022, "url": "https://eur-lex.europa.eu/eli/dir/2022/2555/oj", "summary": "The German BSIG transposes NIS2-style cybersecurity obligations for particularly important and important entities, including entities in covered healthcare and digital-infrastructure sectors and certain relevant suppliers. Scope depends on the entity’s activity, sector, size and statutory classification; a technology vendor may be covered directly or may face contractual flow-down requirements from covered…" }, { "name": "Fünftes Buch Sozialgesetzbuch (SGB V) and Digitale-Gesundheitsanwendungen-Verordnung (DiGAV)", "status": "in force; DiGA reimbursement and listing framework administered principally by BfArM", "year": 2020, "url": "https://www.gesetze-im-internet.de/sgb_5/BJNR024820988.html", "summary": "SGB V establishes the statutory-health-insurance framework for DiGA, including the insured person’s entitlement, BfArM’s directory under section 139e, manufacturer applications, evidence of safety, functionality, quality, data protection, data security and positive healthcare effects, trial listings, and remuneration rules. DiGAV specifies the application procedure and evidence requirements, including security,…" }, { "name": "Regulation (EU) 2025/327 (European Health Data Space Regulation), together with Germany’s Gesundheitsdatennutzungsgesetz (GDNG) and the draft Gesetz für Daten und digitale Innovation im Gesundheitswesen (GeDIG)", "status": "EHDS Regulation and GDNG in force; EHDS applies in stages; GeDIG remains a draft and is not enacted or in force as of August 5, 2026", "year": 2025, "url": "https://eur-lex.europa.eu/eli/reg/2025/327/oj", "summary": "The EHDS Regulation creates EU-wide rules for individuals’ access to and control of electronic health data, primary use in healthcare, interoperability of electronic health record systems, and secondary use for research, innovation, policy and regulatory purposes. It imposes obligations on relevant data holders, health-data access bodies, electronic health-record system manufacturers and other market participants,…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The main German authorities are the Federal Institute for Drugs and Medical Devices (BfArM) for DiGA listings and certain medical-device functions, the Federal Office for Information Security (BSI) for BSIG/NIS2 cybersecurity supervision, and the Federal Commissioner for Data Protection and Freedom of Information (BfDI) or the competent Länder data-protection authority for GDPR matters. Medical-device market surveillance is handled principally by the competent Länder authorities under the MPDG, while notified bodies conduct required MDR/IVDR conformity assessments; the Federal Ministry of…" }, { "q": "Do we need a license, permit, or registration?", "a": "There is no general German operating licence for healthcare technology. If the product is a medical device or IVD, the MDR/IVDR and MPDG generally require classification, conformity assessment, CE marking, technical documentation, registration and post-market obligations, with clinical investigations or performance studies requiring the applicable German approvals; a non-EU manufacturer may also need an EU authorised representative. A DiGA requires BfArM listing under SGB V and DiGAV only to access the statutory-health-insurance reimbursement pathway, while BSIG registration applies if the…" }, { "q": "What are the main data and privacy obligations?", "a": "GDPR, supplemented by the BDSG, requires a lawful basis plus an Article 9 condition for health-data processing, purpose limitation, minimisation, accuracy, retention controls, privacy by design and default, security measures, processor contracts, records of processing, data-subject rights, breach notification and compliant international transfers. A DPIA and a data-protection officer are commonly required for large-scale or systematic processing of health data, and controller, joint-controller and processor roles must be documented; the GDNG and staged EHDS rules add German and EU…" }, { "q": "Which AI-specific rules apply?", "a": "The EU AI Act applies directly, with most provisions applying from August 2, 2026 and certain high-risk obligations for AI embedded in MDR- or IVDR-regulated products applying from August 2, 2027. Medical-device or IVD software can therefore face coordinated AI Act and MDR/IVDR duties covering risk management, data governance, technical documentation, logging, transparency, human oversight, accuracy, robustness, cybersecurity, post-market monitoring and incident reporting; other healthcare AI may instead trigger rules on prohibited practices, transparency, AI literacy or general-purpose AI…" }, { "q": "What are the enforcement and penalty risks?", "a": "GDPR enforcement can include processing bans, corrective orders and administrative fines of up to €20 million or 4% of worldwide annual turnover, whichever is higher, alongside compensation claims under the BDSG. For BSIG-covered entities, the BSI can order remediation, conduct audits, impose registration and evidence duties, and in serious cases support suspension of a permit or temporary management bans; fines can reach €10 million for particularly important entities or €7 million for important entities, with turnover-based ceilings of 2% and 1.4% respectively for large companies.…" } ] }, { "id": "brief:health--eu", "sector": "health", "geo": "eu", "sector_name": "Healthcare", "geo_name": "European Union", "url": "/brief/health--eu.html", "overview": "Today, the rules that can directly bind a healthcare technology or AI company are the General Data Protection Regulation, which governs personal health and other personal data, and the Medical Device Regulation or In Vitro Diagnostic Medical Devices Regulation, if the software or product meets the relevant medical-device definition. The Artificial Intelligence Act, the European Health Data Space Regulation, the Data Act, the Network and Information Security Directive, and the Cyber Resilience Act add obligations for certain AI systems, health-data sharing, connected-device data, cybersecurity, incident reporting, and digital products, but whether they bind you now depends on your product, role, and each law’s implementation timetable.", "instruments": [ { "name": "General Data Protection Regulation (GDPR)", "status": "in force", "year": 2016, "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj?locale=en", "summary": "The baseline framework for processing patient, professional, genetic, biometric, and other personal data. Companies must establish lawful bases and applicable conditions for special-category health data, provide transparency, govern processors and international transfers, support data-subject rights, conduct DPIAs where required, and implement appropriate security and breach-response controls." }, { "name": "Medical Device Regulation (MDR) and In Vitro Diagnostic Medical Device Regulation (IVDR)", "status": "in force; different application dates apply", "year": 2017, "url": "https://eur-lex.europa.eu/eli/reg/2017/745/oj?locale=en", "summary": "Software intended for a medical purpose can itself be a medical device under Regulation (EU) 2017/745 (MDR), which has applied since 26 May 2021. Diagnostic software and related products may fall under Regulation (EU) 2017/746 (IVDR), whose main application date was 26 May 2022; the official IVDR text is https://eur-lex.europa.eu/eli/reg/2017/746/oj?locale=en. Covered operators need classification, quality and…" }, { "name": "Artificial Intelligence Act", "status": "in force; phased application", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689", "summary": "The Act establishes risk-based requirements for AI providers and deployers, including prohibitions, transparency, governance, documentation, human oversight, monitoring, and incident controls. Chapters I and II have applied since 2 February 2025, and most general provisions and governance rules since 2 August 2025. Most high-risk obligations under the main regime apply from 2 August 2026. High-risk AI systems that…" }, { "name": "European Health Data Space Regulation (EHDS)", "status": "in force; phased application", "year": 2025, "url": "https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=CELEX:32025R0327", "summary": "Regulation (EU) 2025/327 establishes common rules, standards, infrastructures, and governance for primary and secondary use of electronic health data. It also imposes requirements relevant to electronic health record systems and certain interoperable wellness applications. The Regulation entered into force on 26 March 2025 and generally applies from 26 March 2027, with major primary-use, secondary-use, and…" }, { "name": "Data Act", "status": "in force; phased application", "year": 2023, "url": "https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng", "summary": "Regulation (EU) 2023/2854 governs fair access to and use of data generated by connected products and related services, including connected health devices and certain IoT products. It creates user data-access and sharing rights, obligations for manufacturers and data holders, rules for business-to-business and public-sector data sharing, protections against unfair contractual terms, and requirements facilitating…" }, { "name": "NIS2 Directive and Cyber Resilience Act (CRA)", "status": "NIS2 in force with national transposition-dependent implementation; CRA in force with phased application", "year": 2022, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555", "summary": "Directive (EU) 2022/2555 (NIS2) requires covered essential and important entities, including in-scope healthcare and digital-service operators, to implement cybersecurity risk management, incident reporting, supply-chain controls, business continuity, vulnerability handling, and management accountability. NIS2 required Member States to adopt and publish transposition measures by 17 October 2024 and apply them from…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The main authorities are Member State data-protection supervisory authorities for the GDPR; national medical-device competent authorities, the European Commission, the Medical Device Coordination Group, and designated notified bodies for the MDR and IVDR; and national AI competent authorities plus the European AI Office for the AI Act. Cybersecurity oversight involves Member State NIS2 competent authorities, national CSIRTs, and ENISA, while Data Act, EHDS, and CRA responsibilities are assigned through designated national authorities and market-surveillance bodies. The responsible authority…" }, { "q": "Do we need a license, permit, or registration?", "a": "There is no single EU healthcare-technology license, but a product that qualifies as a medical device or IVD generally needs MDR or IVDR classification, conformity assessment, technical documentation, a declaration of conformity, CE marking, and applicable EUDAMED actor and device registration; third-party assessment by a notified body may be required. AI systems can also require AI Act conformity assessment and registration where they fall within a high-risk regime, while NIS2, EHDS, the Data Act, and the CRA generally impose operational, security, reporting, or product-compliance duties…" }, { "q": "What are the main data and privacy obligations?", "a": "Under the GDPR, companies must establish a lawful basis and the applicable Article 9 condition for health, genetic, or biometric data; provide transparency; govern processors; support data-subject rights; control international transfers; conduct DPIAs where required; and implement appropriate security, retention, access, and breach-response controls. The EHDS adds interoperability, logging, access rights, permitted secondary-use, governance, and EHR-system conformity requirements, while the Data Act adds user access and sharing rights for data generated by connected health products and…" }, { "q": "Which AI-specific rules apply?", "a": "The AI Act applies on a risk-based basis, including prohibitions, transparency duties, governance, documentation, human oversight, monitoring, and incident controls. AI embedded in or functioning as a regulated medical device or IVD may be high-risk and must be coordinated with MDR or IVDR quality, risk-management, clinical or performance-evidence, conformity-assessment, and post-market requirements; as of August 5, 2026, most high-risk obligations apply from August 2, 2026, while the regulated-product high-risk regime applies from August 2, 2027. General-purpose AI obligations apply where…" }, { "q": "What are the enforcement and penalty risks?", "a": "GDPR violations can lead to corrective orders, processing restrictions, and fines of up to €20 million or 4% of worldwide annual turnover, whichever is higher, for the most serious infringements. AI Act penalties can reach €35 million or 7% of worldwide annual turnover for prohibited practices, €15 million or 3% for specified operator or notified-body violations, and €7.5 million or 1% for false, incomplete, or misleading information; GDPR, AI Act, MDR, and IVDR enforcement can also cause product withdrawal, suspension, or loss of market access. NIS2 and CRA consequences include incident and…" } ] }, { "id": "brief:health--fr", "sector": "health", "geo": "fr", "sector_name": "Healthcare", "geo_name": "France", "url": "/brief/health--fr.html", "overview": "Yes, sector-specific rules bind you today if your software hosts identifiable health data, performs or supports a medical act, qualifies as a medical device, or seeks reimbursement from France’s national health insurance system. These include the European Union’s General Data Protection Regulation (GDPR), Medical Devices Regulation, Artificial Intelligence Act, and French requirements on health-data hosting, telemedicine, medical-device enforcement, reimbursement, and consumer claims. The relevant authorities include the French data protection regulator, the National Agency for the Safety of Medicines and Health Products, the French National Authority for Health, and the Digital Health Agency, so you should assess product classification, data architecture, and marketing claims before launch.", "instruments": [ { "name": "Loi Informatique et Libertés", "status": "in force", "year": 1978, "url": "https://www.legifrance.gouv.fr/loda/id/JORFTEXT000000886460", "summary": "France's national data-protection framework supplements the GDPR and gives the CNIL powers and specific rules relevant to health data, research, sensitive processing and certain national procedures. Health-tech companies must document lawful bases, information notices, security, processor arrangements, retention and data-subject rights, with additional requirements for some research or public-interest processing." }, { "name": "Code de la santé publique", "status": "in force", "year": 2000, "url": "https://www.legifrance.gouv.fr/codes/id/LEGITEXT000006072665", "summary": "The Code regulates French telemedicine and telesurveillance, professional involvement in remote care, prescriptions and health-sector digital services. It also provides the French enforcement framework for software that qualifies as a medical device under the EU Medical Devices Regulation, including market-access, vigilance and regulator-facing requirements." }, { "name": "Certification HDS for hosting personal health data", "status": "in force", "year": 2018, "url": "https://esante.gouv.fr/labels-certifications/hebergement-des-donnees-de-sante", "summary": "A company hosting personal health data collected for prevention, diagnosis, care or medico-social follow-up generally must use an HDS-certified hosting provider, or obtain certification itself when it falls within the hosting activities. The requirement covers relevant cloud, infrastructure, platform, administration and backup arrangements, including outsourced hosting chains." }, { "name": "Code de la sécurité sociale: PECAN for digital medical devices and telesurveillance", "status": "in force", "year": 2022, "url": "https://www.legifrance.gouv.fr/codes/article_lc/LEGIARTI000048703007", "summary": "The Social Security Code creates an anticipatory, time-limited reimbursement pathway for qualifying therapeutic digital medical devices and medical telesurveillance activities. Applicants must meet conditions including CE marking for the relevant indication, data-protection and interoperability/security compliance, real-world-use obligations and commitments to seek permanent reimbursement listing." }, { "name": "Code de la consommation", "status": "in force", "year": 1993, "url": "https://www.legifrance.gouv.fr/codes/id/LEGITEXT000006069565", "summary": "Consumer-facing health apps, telehealth platforms and digital therapeutics must avoid misleading claims about clinical performance, diagnostic accuracy, safety, outcomes, pricing and the service's medical nature. Subscription, interface, advertising and pre-contract information must also comply with French consumer-protection rules." } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The main authorities are the CNIL for data protection, ANSM for medical-device safety and enforcement, HAS—including its CNEDiMTS committee—for health-technology assessment and reimbursement, and the Agence du Numérique en Santé for national digital-health standards and HDS-related frameworks. The relevant authority depends on whether the product processes health data, performs or enables telemedicine, qualifies as a medical device, or seeks Assurance Maladie reimbursement. ([has-sante.fr](https://www.has-sante.fr/jcms/c_419486/qu-est-ce-que-la-cnedimts?utm_source=openai))" }, { "q": "Do we need a license, permit, or registration?", "a": "There is no single French licence for every health-tech company. Requirements depend on the product: telemedicine or telesurveillance functions may trigger obligations under the Code de la santé publique; software qualifying as a medical device must meet the EU Medical Devices Regulation and French ANSM enforcement framework; hosting personal health data generally requires an HDS-certified host; and reimbursement may require HAS evaluation and the PECAN or permanent reimbursement pathway under the Code de la sécurité sociale.…" }, { "q": "What are the main data and privacy obligations?", "a": "Apply the GDPR together with the Loi Informatique et Libertés: document a lawful basis, provide compliant notices, implement security measures, manage processors and retention, and support data-subject rights. Additional safeguards apply to certain research or public-interest processing, and identifiable health data hosted for prevention, diagnosis, care or medico-social follow-up generally must be handled through an HDS-certified hosting arrangement, including relevant outsourced cloud and backup services. ([esante.gouv.fr](https://esante.gouv.fr/ens/offre/hds?utm_source=openai))" }, { "q": "Which AI-specific rules apply?", "a": "The EU AI Act applies directly in France, alongside the EU Medical Devices Regulation and the French Code de la santé publique. Classify each AI function before release, especially clinical decision-support, diagnostic, therapeutic and monitoring features: the obligations depend on whether the AI is a high-risk system and whether the software is also a medical device, with CE, safety, documentation, monitoring and regulator-facing requirements potentially applying." }, { "q": "What are the enforcement and penalty risks?", "a": "The CNIL can impose GDPR administrative fines of up to €20 million or 4% of the undertaking’s worldwide annual turnover, whichever is higher. ANSM and the Code de la santé publique create medical-device enforcement risks including corrective measures, restrictions, suspension, withdrawal and vigilance obligations; misleading clinical, safety, performance or pricing claims can also trigger action under the Code de la consommation, while reimbursement may be refused or withdrawn if HAS, CE, security, interoperability or real-world-use conditions are not met.…" } ] }, { "id": "brief:health--ny", "sector": "health", "geo": "ny", "sector_name": "Healthcare", "geo_name": "New York", "url": "/brief/health--ny.html", "overview": "As of today, New York healthcare technology and artificial intelligence companies face overlapping federal and state rules, not one artificial intelligence law: the Health Insurance Portability and Accountability Act applies to covered healthcare entities and their business associates, while non-covered consumer health apps may still face the Federal Trade Commission’s Health Breach Notification Rule and New York’s breach and data-security laws. Sector-specific requirements bind you today if your software is intended for medical use and may be regulated by the Food and Drug Administration as a medical device, or if you provide telehealth or healthcare staffing services, which can trigger practitioner licensing, telehealth, reimbursement, patient-protection, registration, and reporting requirements.", "instruments": [ { "name": "HIPAA Privacy, Security, and Breach Notification Rules", "status": "in force", "year": "2000, 2003, 2009", "url": "https://www.hhs.gov/hipaa/for-professionals/index.html", "summary": "The HIPAA Privacy Rule governs uses and disclosures of protected health information by covered entities and relevant business associates; the Security Rule requires administrative, physical, and technical safeguards for electronic protected health information; and the Breach Notification Rule requires notices after breaches of unsecured protected health information. Technology vendors serving providers, plans, or…" }, { "name": "New York SHIELD Act — General Business Law § 899-bb", "status": "in force; effective March 21, 2020", "year": 2019, "url": "https://www.nysenate.gov/legislation/laws/GBS/899-BB", "summary": "The SHIELD Act requires any person or business owning or licensing computerized data containing New York residents' private information to develop, implement, and maintain reasonable administrative, technical, and physical safeguards. Health-tech and AI operators should maintain a written security program, conduct risk assessments, manage workforce and service-provider controls, protect data in software and…" }, { "name": "New York breach-notification law — General Business Law § 899-aa", "status": "in force; substantially amended, including a 30-day notice deadline, effective March 21, 2020 and later amendments", "year": 2005, "url": "https://www.nysenate.gov/legislation/laws/GBS/899-AA", "summary": "Section 899-aa requires businesses holding computerized data containing defined private information to notify affected New York residents after unauthorized access to or acquisition of that information. The current law includes medical information and health-insurance information within private information, generally requires notice to affected residents within 30 days after discovery, and requires specified notices…" }, { "name": "FTC Health Breach Notification Rule — 16 C.F.R. Part 318", "status": "in force; substantially amended in 2024, with amendments effective July 29, 2024", "year": 2009, "url": "https://www.ftc.gov/legal-library/browse/rules/health-breach-notification-rule", "summary": "The Rule applies principally to vendors of personal health records, personal-health-record related entities, and their service providers that are not regulated by HIPAA. It covers many consumer health apps, connected devices, and similar technologies. A breach of unsecured identifiable health information, including certain unauthorized disclosures, can require notice to affected consumers, the FTC, and sometimes the…" }, { "name": "Federal Food, Drug, and Cosmetic Act medical-device provisions", "status": "in force", "year": 1938, "url": "https://www.fda.gov/medical-devices/overview-device-regulation/code-federal-regulations-cfr", "summary": "The FD&C Act supplies FDA's statutory authority over medical devices, with implementing requirements primarily in Title 21 of the CFR. For technology and AI operators, software may be a device when its intended use meets the statutory definition, including certain functions for diagnosis, treatment, prevention, monitoring, or clinical decision support. Depending on classification and product features, obligations…" }, { "name": "New York Public Health Law Article 29-G and related telehealth rules; applicable Article 29-K platform-registration requirements", "status": "in force", "year": "2015; Article 29-K added in 2023", "url": "https://www.nysenate.gov/legislation/laws/PBH/A29-G", "summary": "Article 29-G establishes New York telehealth definitions and delivery requirements, including the role of distant and originating sites and the categories of licensed practitioners who may provide telehealth. New York telehealth regulations and Medicaid guidance address delivery modalities, documentation, reimbursement, remote patient monitoring, audio-only services, and program-specific requirements. Platforms…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The principal federal authorities are HHS, through its Office for Civil Rights (OCR), for HIPAA; the Federal Trade Commission (FTC) for the Health Breach Notification Rule and consumer-protection enforcement; and the FDA, particularly its Center for Devices and Radiological Health (CDRH), for software that qualifies as a medical device. New York authorities include the Attorney General for General Business Law §§ 899-aa and 899-bb, the Department of Health (DOH) for telehealth and Article 29-K platform registration, and New York professional licensing authorities for practitioner licensure…" }, { "q": "Do we need a license, permit, or registration?", "a": "There is no blanket New York license for a healthcare technology company solely because it uses health data or AI. Registration, authorization, or licensing depends on the product: FDA establishment registration, device listing, and possibly premarket authorization may apply under the FD&C Act; telehealth delivery must use appropriately licensed practitioners; and a platform that provides or procures temporary healthcare personnel may require DOH registration and reporting under Public Health Law Article 29-K." }, { "q": "What are the main data and privacy obligations?", "a": "If the company is a HIPAA covered entity or business associate, it must comply with the HIPAA Privacy, Security, and Breach Notification Rules, including required business-associate agreements, permitted-use limits, safeguards, incident response, and breach support. Non-HIPAA operators may still be subject to the FTC Health Breach Notification Rule, New York’s SHIELD Act, and General Business Law § 899-aa; New York generally requires resident notice within 30 days, while the FTC Rule generally requires notice without unreasonable delay and within 60 days. Covered entities must also notify the…" }, { "q": "Which AI-specific rules apply?", "a": "The main AI-specific issue is whether the software’s intended use makes it a medical device under the FD&C Act, including functions for diagnosis, treatment, prevention, monitoring, or clinical decision support. If so, obligations can include registration and listing, quality and design controls, premarket submission or authorization, labeling, postmarket reporting, cybersecurity, and controlled model or software changes; the analysis depends on intended use, clinical claims, automation level, and update practices. General FDA guidance should not be treated as a statute or regulation." }, { "q": "What are the enforcement and penalty risks?", "a": "HHS OCR can require corrective action, resolution agreements, and HIPAA civil money penalties; the FTC can seek up to $53,088 per violation for noncompliance with the Health Breach Notification Rule. New York’s Attorney General can seek injunctions and, for knowing or reckless violations of § 899-aa, the greater of $5,000 or up to $20 per failed notification, capped at $250,000 under that provision; SHIELD Act violations can carry up to $5,000 per violation through General Business Law § 350-d. FDA enforcement can include warning letters, injunctions, seizure, recalls, device bans, civil…" } ] }, { "id": "brief:health--tx", "sector": "health", "geo": "tx", "sector_name": "Healthcare", "geo_name": "Texas", "url": "/brief/health--tx.html", "overview": "A Texas healthcare technology company is governed by overlapping federal and Texas rules, not one general artificial intelligence (AI) healthcare law: the Health Insurance Portability and Accountability Act (HIPAA) applies to covered healthcare organizations and their service providers, while Texas Health and Safety Code Chapter 181 can cover more businesses handling protected health information. Consumer health apps and connected devices may also face the Federal Trade Commission’s Health Breach Notification Rule, and Texas’s Data Privacy and Security Act may cover non-HIPAA personal data, subject to exemptions.\n\nThe Texas Responsible Artificial Intelligence Governance Act takes effect on January 1, 2026 and adds requirements for certain healthcare AI deployments; the Food and Drug Administration regulates software that qualifies as a medical device, and telehealth platforms must follow Texas licensing and telemedicine rules. Sector-specific obligations already bind the company today if it handles protected health information, operates a covered consumer health service, sells regulated medical-device software, or provides telehealth, but no single healthcare-specific AI regime applies to every company.", "instruments": [ { "name": "HIPAA Privacy, Security, and Breach Notification Rules, 45 C.F.R. Parts 160 and 164", "status": "in force", "year": 1996, "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C", "summary": "Applies to covered entities and business associates handling protected health information. Healthcare technology operators may need compliant uses and disclosures, business-associate agreements, individual-rights workflows, administrative, physical, and technical safeguards, security risk analysis, incident response, breach assessment and notification, and related documentation. HIPAA does not automatically apply to…" }, { "name": "Texas Medical Records Privacy Act, Health and Safety Code Chapter 181", "status": "in force", "year": 2001, "url": "https://statutes.capitol.texas.gov/Docs/HS/pdf/HS.181.pdf", "summary": "Texas law defines covered entities broadly to include persons that assemble, collect, analyze, use, evaluate, store, or transmit protected health information, including business associates, information-management entities, healthcare providers, and persons maintaining internet sites. It imposes Texas confidentiality, authorization, disclosure, security, and breach-notification requirements that can reach technology…" }, { "name": "FTC Health Breach Notification Rule, 16 C.F.R. Part 318", "status": "in force; amended rule effective July 29, 2024", "year": 2009, "url": "https://www.ftc.gov/legal-library/browse/rules/health-breach-notification-rule", "summary": "Applies principally to vendors of personal health records, PHR-related entities, and their service providers that are not covered by HIPAA. A covered breach involving unsecured individually identifiable health information can trigger notice to affected consumers, the FTC, and sometimes the media; service providers must notify the relevant PHR vendor or entity. Health apps, connected-device services, and consumer…" }, { "name": "Texas Data Privacy and Security Act, Business and Commerce Code Chapter 541", "status": "in force; generally effective July 1, 2024", "year": 2023, "url": "https://statutes.capitol.texas.gov/Docs/BC/pdf/BC.541.pdf", "summary": "Applies to qualifying businesses conducting business in Texas or producing products or services consumed by Texas residents, subject to entity, data, and small-business exemptions. For health-tech operators, the Act is most relevant to personal data outside HIPAA and other statutory exemptions. It provides access, correction, deletion, portability, and specified opt-out rights; requires privacy notices and…" }, { "name": "Texas Responsible Artificial Intelligence Governance Act, House Bill 149, 89th Legislature", "status": "in force effective January 1, 2026; certain implementation steps remain due by September 1, 2026", "year": 2025, "url": "https://capitol.texas.gov/billlookup/BillSummary.aspx?Bill=HB149&LegSess=89R", "summary": "Regulates specified development and deployment of AI systems in Texas and includes provisions relevant to technology and healthcare operators. It requires specified disclosures in covered consumer interactions, including disclosures by certain healthcare service providers; prohibits specified AI uses, including intentional incitement or encouragement of self-harm, harm, or criminal activity, unlawful discrimination,…" }, { "name": "FDA medical-device requirements for software: FD&C Act device provisions, including Sections 201(h) and 520(o), 21 C.F.R. Parts 800-898, and FDA software/AI guidance", "status": "in force; guidance is generally nonbinding, while applicable statutes and regulations are binding", "year": 1976, "url": "https://www.fda.gov/medical-devices/regulatory-accelerator/medical-device-software-guidance-navigator", "summary": "Software with a device intended use, including certain diagnostic, monitoring, treatment, control, or clinical-decision functions, may be regulated as a medical device; Section 520(o) excludes specified non-device software functions. Depending on classification and intended use, operators may face establishment registration and listing, 510(k), De Novo, or PMA requirements, labeling under 21 C.F.R. Part 801,…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The main authorities are HHS’s Office for Civil Rights for HIPAA, the Federal Trade Commission for the Health Breach Notification Rule, the Texas Attorney General for Texas Health and Safety Code Chapter 181, the Texas Data Privacy and Security Act, and the Texas Responsible Artificial Intelligence Governance Act, and the FDA for regulated medical-device software. The Texas Medical Board is relevant when the platform provides telehealth or clinical services, employs or contracts with clinicians, or materially supports diagnosis or treatment." }, { "q": "Do we need a license, permit, or registration?", "a": "There is no general Texas license for operating a healthcare-AI or health-data company, but FDA-regulated device software may require establishment registration, device listing, and a 510(k), De Novo, or PMA before marketing, depending on classification and intended use. A company providing clinical telehealth must separately satisfy Texas Medical Board licensure and telemedicine requirements; a HIPAA business-associate agreement is a compliance instrument, not a license." }, { "q": "What are the main data and privacy obligations?", "a": "Apply the HIPAA Privacy, Security, and Breach Notification Rules when the company is a covered entity or business associate, including business-associate agreements, permitted-use controls, individual-rights workflows, safeguards, risk analysis, incident response, and breach assessment. Texas Health and Safety Code Chapter 181 may apply more broadly to persons handling protected health information; the FTC Health Breach Notification Rule may apply to non-HIPAA health apps, connected devices, and personal-health-record services; and the Texas Data Privacy and Security Act may govern non-exempt…" }, { "q": "Which AI-specific rules apply?", "a": "The Texas Responsible Artificial Intelligence Governance Act, House Bill 149, is effective January 1, 2026 and can require specified disclosures in covered consumer interactions, including certain healthcare-service-provider interactions, while prohibiting specified harmful, discriminatory, rights-impairing, or self-harm-related AI uses. If the AI performs a regulated medical-device function, the FD&C Act device provisions, 21 C.F.R. Parts 800–898, FDA software and AI guidance, cybersecurity controls, change-control documentation, and the Quality Management System Regulation effective…" }, { "q": "What are the enforcement and penalty risks?", "a": "HHS OCR may investigate HIPAA violations and impose civil money penalties; the FTC may seek civil penalties of up to $51,744 per Health Breach Notification Rule violation. The Texas Attorney General may enforce the Texas Data Privacy and Security Act, including civil penalties of up to $7,500 per violation, and HB 149 authorizes injunctions and civil penalties of $10,000–$12,000 for specified curable violations, $80,000–$200,000 for specified uncurable violations, and $2,000–$40,000 per day for continuing violations; FDA noncompliance can also lead to inspections and device-enforcement…" } ] }, { "id": "brief:health--uk", "sector": "health", "geo": "uk", "sector_name": "Healthcare", "geo_name": "United Kingdom", "url": "/brief/health--uk.html", "overview": "The UK has no single AI law: healthcare AI is governed by overlapping rules on data protection, electronic marketing and cookies, medical devices, healthcare-service registration, and consumer protection. AI or software intended for a medical purpose may be regulated as a medical device in Great Britain, while Northern Ireland also follows EU medical-device rules; a company directly providing diagnosis, treatment, triage, or medical advice may need registration in the relevant UK nation, but selling software to providers does not automatically require it. Plan for stricter controls on health, genetic, and certain biometric data, including lawful processing, transparency, security, clinical evidence, post-market monitoring, and truthful claims.", "instruments": [ { "name": "UK General Data Protection Regulation (UK GDPR)", "status": "in force", "year": 2016, "url": "https://www.gov.uk/data-protection", "summary": "The principal framework for personal-data processing by digital-health, clinical-AI, telehealth and health-data companies. Health and genetic data, and biometric data used for unique identification, are generally special-category data. Operators need an Article 6 lawful basis and, where applicable, an Article 9 condition; they must apply purpose limitation, data minimisation, accuracy, retention and security…" }, { "name": "Data Protection Act 2018", "status": "in force", "year": 2018, "url": "https://www.legislation.gov.uk/ukpga/2018/12/contents", "summary": "A principal UK data-protection instrument that supplements the UK GDPR and establishes separate regimes for certain processing, including law-enforcement processing, as well as rules on the ICO, enforcement, exemptions and safeguards. For healthcare technology and AI operators, it is relevant to special-category processing, research and statistical processing, safeguards for automated decision-making,…" }, { "name": "Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR)", "status": "in force", "year": 2003, "url": "https://www.legislation.gov.uk/uksi/2003/2426/contents", "summary": "Applies to consumer-facing digital-health and telehealth marketing, electronic communications, cookies and similar tracking technologies. Operators must comply with rules on unsolicited direct marketing by email, text and other electronic messages; automated calling; caller identification and directory information where relevant; and storage of or access to information on users’ devices, including consent…" }, { "name": "Medical Devices Regulations 2002", "status": "in force", "year": 2002, "url": "https://www.legislation.gov.uk/uksi/2002/618/contents", "summary": "In Great Britain, software and AI intended by the manufacturer to perform a medical purpose can fall within the UK medical-device regime, including software used for diagnosis, prevention, monitoring, prediction, prognosis or treatment. Depending on the device and operator role, obligations can include qualification and classification, conformity assessment, technical and clinical evidence, quality management,…" }, { "name": "Health and Social Care Act 2008", "status": "in force", "year": 2008, "url": "https://www.legislation.gov.uk/ukpga/2008/14/contents", "summary": "In England, a technology company that directly provides a regulated healthcare activity—such as treatment, diagnostic or screening services, or clinical advice and triage—may need registration with the Care Quality Commission and must meet applicable regulatory requirements. The Act is not a UK-wide substitute for the devolved regimes: Scotland uses distinct arrangements involving Healthcare Improvement Scotland and…" }, { "name": "Digital Markets, Competition and Consumers Act 2024", "status": "in force", "year": 2024, "url": "https://www.legislation.gov.uk/ukpga/2024/13/contents", "summary": "Its consumer-protection provisions apply generally to traders, including consumer-facing health apps, telehealth subscriptions and digital-health services. The regime prohibits unfair commercial practices, including misleading actions or omissions and aggressive practices; introduces rules concerning pricing, fake reviews and subscription contracts; and gives the CMA direct consumer-enforcement powers. Health and…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Information Commissioner’s Office (ICO) enforces the UK GDPR, Data Protection Act 2018 and PECR; the Medicines and Healthcare products Regulatory Agency (MHRA) administers and enforces the Medical Devices Regulations 2002. Healthcare-service registration is handled by the Care Quality Commission (CQC) in England, Healthcare Improvement Scotland and the Care Inspectorate in Scotland, Healthcare Inspectorate Wales and Care Inspectorate Wales in Wales, and the Regulation and Quality Improvement Authority in Northern Ireland; the Competition and Markets Authority (CMA) enforces relevant…" }, { "q": "Do we need a license, permit, or registration?", "a": "There is no single AI licence. Registration with the MHRA and, depending on the product and role, conformity assessment, UK Responsible Person arrangements, conformity marking, clinical evidence and post-market controls may apply to medical-purpose software in Great Britain; Northern Ireland follows the EU Medical Devices Regulation and EU In Vitro Diagnostic Regulation route. A company directly providing regulated diagnosis, treatment, screening, triage or clinical advice may also need healthcare-service registration in the relevant UK nation, while supplying software to a registered…" }, { "q": "What are the main data and privacy obligations?", "a": "Under the UK GDPR and Data Protection Act 2018, health, genetic and qualifying biometric data generally require special-category handling, with an Article 6 lawful basis and, where applicable, an Article 9 condition. You must apply purpose limitation, data minimisation, accuracy, retention and security controls; provide privacy information; manage rights, processors and international transfers; conduct DPIAs where required; and assess profiling or solely automated decisions. PECR separately governs electronic marketing, cookies and similar tracking, including consent requirements that may…" }, { "q": "Which AI-specific rules apply?", "a": "The UK has no single horizontal AI Act for these businesses. AI with a medical purpose can be regulated as a medical device under the Medical Devices Regulations 2002, requiring classification, conformity assessment, technical and clinical evidence, quality management, vigilance and post-market surveillance; in Great Britain, the post-market-surveillance regulations took effect on June 16, 2025. The exact obligations depend on the software’s intended medical purpose, risk classification, learning or change characteristics, market and whether the company provides clinical services itself; the…" }, { "q": "What are the enforcement and penalty risks?", "a": "The ICO can impose UK GDPR and DPA 2018 fines up to £17.5 million or 4% of worldwide annual turnover, whichever is higher, with a lower tier of £8.7 million or 2%; PECR breaches can also trigger enforcement. Under the Digital Markets, Competition and Consumers Act 2024, the CMA can impose consumer-law penalties up to £300,000 or 10% of global turnover, whichever is higher, while CQC offences can carry fixed penalties such as £4,000 and unlimited court fines for carrying on regulated activity without registration or breaching quality and safety requirements. The MHRA can investigate and…" } ] }, { "id": "brief:health--us", "sector": "health", "geo": "us", "sector_name": "Healthcare", "geo_name": "US Federal", "url": "/brief/health--us.html", "overview": "The United States has no single general AI law, so obligations depend on your role and product: health-information rules may apply if you handle protected health information for a covered healthcare organization, consumer-health-data laws may apply to health apps and devices, and medical-device rules may apply to software that meets the medical-device definition. Certified health-information technology, substance-use-disorder records, consumer-protection rules, and state laws such as Washington’s My Health My Data Act and California’s California Consumer Privacy Act and California Privacy Rights Act may also matter. Nothing sector-specific binds you today unless your product or activities fall into one of those categories.", "instruments": [ { "name": "HIPAA Privacy, Security, and Breach Notification Rules (45 CFR Parts 160 and 164) and Business-Associate Requirements", "status": "in force", "year": 1996, "url": "https://www.hhs.gov/hipaa/for-professionals/index.html", "summary": "HIPAA, enacted in 1996, is implemented through the Privacy, Security, Breach Notification, and Enforcement Rules in 45 CFR Parts 160 and 164. The rules apply directly to covered entities and, for specified obligations, to business associates that create, receive, maintain, or transmit protected health information on behalf of covered entities or other business associates. Technology and AI operators may therefore…" }, { "name": "Confidentiality of Substance Use Disorder Patient Records (42 CFR Part 2)", "status": "in force; 2024 amendments required compliance by February 16, 2026", "year": 1972, "url": "https://www.hhs.gov/hipaa/for-professionals/regulatory-initiatives/fact-sheet-42-cfr-part-2-final-rule/index.html", "summary": "Part 2 protects patient-identifying records maintained by federally assisted programs or activities relating to substance-use-disorder diagnosis, treatment, or referral. Technology companies acting for Part 2 programs, qualified service organizations, health information exchanges, or other entities handling Part 2 records must support Part 2’s consent, use-and-disclosure, security, redisclosure, patient-rights,…" }, { "name": "FDA Medical-Device Requirements for Device Software and Software as a Medical Device (FD&C Act; Title 21 CFR Parts 800–1299)", "status": "in force", "year": 1976, "url": "https://www.fda.gov/medical-devices/device-advice-comprehensive-regulatory-assistance/overview-device-regulation", "summary": "The Medical Device Amendments of 1976 supplied the core modern statutory framework for FDA device regulation. Software is subject to FDA medical-device requirements when its intended use and functionality meet the device definition, including certain diagnostic, monitoring, treatment, control, image-analysis, and clinical-decision-support functions. Depending on classification and exemptions, obligations may include…" }, { "name": "FTC Act Section 5 and Health Breach Notification Rule (16 CFR Part 318)", "status": "in force", "year": "1914/2009", "url": "https://www.ftc.gov/legal-library/browse/rules/health-breach-notification-rule", "summary": "Section 5 of the FTC Act prohibits unfair or deceptive acts or practices, including misleading privacy statements, unsupported health, safety, efficacy, or AI-performance claims, deceptive design, and inadequate data-security representations. The Health Breach Notification Rule, originally issued in 2009 and codified at 16 CFR Part 318, applies principally to vendors of personal health records and related entities…" }, { "name": "HTI-1 Final Rule: Health IT Certification Program Updates, Algorithm Transparency, and Information Sharing", "status": "adopted and in force; implementation phases continue", "year": 2024, "url": "https://healthit.gov/regulations/hti-rules/hti-1-final-rule/", "summary": "The January 9, 2024 HTI-1 final rule primarily affects developers and suppliers of ONC-certified health IT rather than every AI product used in healthcare. It establishes transparency requirements for predictive algorithms and other decision-support interventions supplied as part of certified health IT, including information intended to help users evaluate fairness, appropriateness, validity, effectiveness, and…" }, { "name": "California Consumer Privacy Act, as amended by the California Privacy Rights Act, and Washington My Health My Data Act", "status": "in force", "year": "2018/2020/2023", "url": "https://cppa.ca.gov/faq", "summary": "These state regimes are important for consumer-facing health apps, digital-health platforms, data intermediaries, and AI services that fall outside HIPAA or operate in addition to HIPAA. California’s CCPA, as amended by the CPRA, treats health information and related categories as sensitive personal information and provides rights and obligations concerning notice, access, correction, deletion, opt-out of sale or…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The main federal authorities are the U.S. Department of Health and Human Services (HHS), especially its Office for Civil Rights (OCR) for HIPAA and 42 CFR Part 2; the Food and Drug Administration (FDA) for regulated medical-device software; the Federal Trade Commission (FTC) for consumer health privacy and marketing; and the Assistant Secretary for Technology Policy/Office of the National Coordinator for Health Information Technology (ASTP/ONC) for certified health IT. HHS’s Office of Inspector General (OIG) enforces information-blocking penalties, while the Department of Justice may pursue…" }, { "q": "Do we need a license, permit, or registration?", "a": "There is no general federal AI license or permit. If the product meets the medical-device definition under the FD&C Act and Title 21 CFR Parts 800–1299, requirements may include FDA establishment registration and device listing, 510(k) clearance, PMA approval, De Novo classification, IDE authorization, and postmarket reporting, depending on intended use, risk, classification, and exemptions; FDA FY2026 fees include an $11,423 annual establishment-registration fee for most establishments. ONC certification applies primarily if the company develops or supplies certified health IT, while a HIPAA…" }, { "q": "What are the main data and privacy obligations?", "a": "For HIPAA covered entities and business associates, the HIPAA Privacy, Security, and Breach Notification Rules in 45 CFR Parts 160 and 164 require permitted-use controls, minimum-necessary procedures, individual-rights support, risk analysis, administrative, physical, and technical safeguards, subcontractor controls, documentation, and breach notification. Systems handling substance-use-disorder records must also comply with 42 CFR Part 2, including consent, redisclosure, security, patient-rights, documentation, and breach-notification requirements; the 2024 amendments required compliance by…" }, { "q": "Which AI-specific rules apply?", "a": "The United States has no single general federal AI statute in this framework; obligations depend on the product’s function, role, claims, and distribution channel. FDA medical-device requirements apply when AI software performs regulated diagnostic, monitoring, treatment, control, image-analysis, or clinical-decision-support functions, while the HTI-1 Final Rule imposes predictive-algorithm transparency and related certification duties when the algorithm is supplied as part of ONC-certified health IT; the QMSR effective February 2, 2026 is a general device quality-system rule, not an AI…" }, { "q": "What are the enforcement and penalty risks?", "a": "HHS OCR can require corrective action plans and settlements and may impose HIPAA civil monetary penalties ranging from $127 to $63,973 per violation, with annual caps that can reach $1,919,173 for identical requirements; Part 2 penalties align with HIPAA, and criminal matters may be referred to DOJ. FTC Health Breach Notification Rule violations can reach $53,088 per violation, while HHS OIG can impose up to $1 million per information-blocking violation on covered health-IT developers, HINs, and HIEs, with ONC certification termination or bans also possible. FDA enforcement can include…" } ] }, { "id": "brief:hr--at", "sector": "hr", "geo": "at", "sector_name": "HR & Workforce", "geo_name": "Austria", "url": "/brief/hr--at.html", "overview": "Yes. Today, the European Union Artificial Intelligence Act (EU AI Act), a directly applicable European Union regulation, generally treats AI used for recruitment, promotion, dismissal, performance reviews, or worker monitoring as high-risk and bans some workplace emotion-recognition uses; the General Data Protection Regulation (GDPR), Austria’s employment and equality laws, and Austrian employee-representation rules also apply. The exact duties depend on whether you are an employer, software vendor, recruitment marketplace, or workforce-monitoring provider, and Austria may require an employment-agency licence, so sector-specific rules do bind you today.", "instruments": [ { "name": "Artificial Intelligence Act", "status": "adopted, phasing in", "year": 2024, "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj", "summary": "AI systems used for recruitment, candidate evaluation, promotion, termination, task allocation, performance monitoring, or worker evaluation are generally classified as high-risk and trigger governance, risk-management, data-quality, documentation, human-oversight, accuracy, and monitoring duties. Workplace emotion-recognition systems are prohibited except for limited medical or safety reasons; transparency and…" }, { "name": "Datenschutzgesetz (DSG)", "status": "in force", "year": 1999, "url": "https://www.ris.bka.gv.at/eli/bgbl/i/1999/165/P0/NOR40195899", "summary": "The Austrian DSG supplements the GDPR and constitutionally protects individuals’ personal data, with the Austrian Data Protection Authority as the principal regulator. It is especially relevant to applicant profiles, inferred traits, biometrics, monitoring telemetry, workplace analytics, automated decisions, data-subject rights, and national rules on data-protection enforcement and exemptions." }, { "name": "Arbeitsverfassungsgesetz (ArbVG), especially § 96", "status": "in force", "year": 1974, "url": "https://www.ris.bka.gv.at/eli/bgbl/1974/22/P96/NOR40123095", "summary": "In an Austrian undertaking with a works council, introducing personnel questionnaires beyond basic job-related information, or technical control and monitoring systems that affect human dignity, requires the works council’s consent to be legally effective. A SaaS vendor should therefore provide consultation-ready documentation, configurable monitoring controls, and contractual support for works-council processes." }, { "name": "Gleichbehandlungsgesetz (GlBG)", "status": "in force", "year": 2004, "url": "https://www.ris.bka.gv.at/Dokumente/Bundesnormen/NOR40255849/NOR40255849.html", "summary": "The GlBG prohibits direct and indirect discrimination in recruitment, employment conditions, promotion, pay, training, and termination on protected grounds including sex, ethnicity, religion or belief, age, and sexual orientation. It also requires gender-neutral and non-discriminatory job advertising, so ranking, screening, matching, and ad-targeting features should be tested for disparate outcomes and…" }, { "name": "Arbeitsmarktförderungsgesetz (AMFG)", "status": "in force", "year": 1969, "url": "https://www.ris.bka.gv.at/eli/bgbl/1969/31/P2/NOR40029974", "summary": "A platform that goes beyond software provision and actually brings jobseekers together with employers may be treated as carrying out Arbeitsvermittlung, which includes certain publication and distribution of job offers and applications. Commercial employment mediation generally requires the relevant Austrian trade authorization and must comply with AMFG restrictions, including rules affecting foreign-worker…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The principal authority is the Austrian Data Protection Authority (Datenschutzbehörde, DSB), which enforces the GDPR and Austrian Datenschutzgesetz (DSG). Equality matters may involve the Gleichbehandlungsanwaltschaft and Gleichbehandlungskommission under the Gleichbehandlungsgesetz (GlBG), while employment-mediation activity may involve the Gewerbebehörde and Arbeitsmarktservice Österreich (AMS). Works councils are not regulators, but under § 96 Arbeitsverfassungsgesetz (ArbVG) their consent can be legally required for certain monitoring systems and personnel questionnaires; AI Act…" }, { "q": "Do we need a license, permit, or registration?", "a": "Ordinary HR software or AI provision does not generally require an Austrian sector-specific licence solely because it uses AI. If the platform actually brings jobseekers and employers together, it may perform Arbeitsvermittlung under the Arbeitsmarktförderungsgesetz (AMFG), generally requiring the relevant Austrian Gewerbeberechtigung and GISA registration. The answer depends on whether the business is merely a software vendor or operates the matching, publication, application-distribution, or placement service itself." }, { "q": "What are the main data and privacy obligations?", "a": "The GDPR and Austrian Datenschutzgesetz (DSG) require a lawful and transparent purpose, data minimisation, accuracy, retention limits, security, data-subject rights, and appropriate controller/processor arrangements. Applicant profiles, inferred traits, biometrics, monitoring telemetry, behavioural analytics, and automated rankings require particular scrutiny, including special-category rules, a data-protection impact assessment where high risk, breach procedures, and often a data protection officer. In undertakings with a works council, § 96 ArbVG may require prior consent for personnel…" }, { "q": "Which AI-specific rules apply?", "a": "The EU Artificial Intelligence Act generally treats recruitment, candidate evaluation, promotion, termination, task allocation, performance monitoring, and worker evaluation systems as high-risk, triggering risk management, data-quality, technical documentation, logging, human oversight, accuracy, cybersecurity, monitoring, transparency, and AI-literacy duties. Workplace emotion-recognition systems are prohibited except for limited medical or safety purposes, and the Act applies on a staged timetable that reaches its general August 2, 2026 phase. The exact duties depend on whether the company…" }, { "q": "What are the enforcement and penalty risks?", "a": "The DSB can investigate and impose GDPR fines of up to €20 million or 4% of worldwide annual turnover for the most serious infringements, and up to €10 million or 2% for other specified infringements; Austrian courts may also award data-protection damages. Under the AI Act, prohibited practices can attract up to €35 million or 7% of worldwide annual turnover, while many provider, deployer, and transparency breaches can reach €15 million or 3%, subject to the Act’s SME rule. Additional exposure includes GlBG compensation and administrative sanctions, AMFG consequences for unlicensed employment…" } ] }, { "id": "brief:hr--br", "sector": "hr", "geo": "br", "sector_name": "HR & Workforce", "geo_name": "Brazil", "url": "/brief/hr--br.html", "overview": "As of August 5, 2026, Brazil has no comprehensive AI-specific law binding hiring or workforce systems, but companies are still governed by the Brazilian General Data Protection Law (LGPD), the Consolidation of Labor Laws, anti-discrimination laws, disability-accessibility rules, and racial-equality laws. These rules require a lawful purpose, transparency, security, data-subject rights, safeguards for solely automated professional decisions, and controls against discriminatory or inaccessible outputs; vendors may be directly exposed when their tools rank, screen, monitor, profile, or otherwise influence workers, even though customers usually retain employer duties. No sector-specific AI rule binds them today, and Bill No. 2,338/2023, approved by the Senate and sent to the Chamber of Deputies, is not yet law.", "instruments": [ { "name": "Lei Geral de Proteção de Dados Pessoais (LGPD) — Lei nº 13.709/2018", "status": "in force", "year": 2018, "url": "https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709compilado.htm", "summary": "The core framework for candidate, employee, contractor, biometric, health, performance, location, communications, and monitoring data. It requires a lawful basis, purpose limitation, necessity, transparency, security, incident response, governance, controller/processor allocation, data-subject rights, and controls for international transfers and sharing. Article 20 gives the data subject the right to request review…" }, { "name": "Consolidação das Leis do Trabalho (CLT) — Decreto-Lei nº 5.452/1943", "status": "in force", "year": 1943, "url": "https://www.planalto.gov.br/ccivil_03/decreto-lei/del5452compilado.htm", "summary": "The principal federal labor-law code governing employment relationships and the customer's duties as employer. It covers employment-status concepts, employer direction and control, employment records and registration, payroll and working-time records, working hours, overtime, rest periods, workplace rules, and evidentiary obligations. For AI and workforce-technology operators, the CLT makes accurate, auditable…" }, { "name": "Lei nº 9.029/1995 — Proibição de Práticas Discriminatórias nas Relações de Trabalho", "status": "in force", "year": 1995, "url": "https://www.planalto.gov.br/ccivil_03/leis/l9029.htm", "summary": "Prohibits discriminatory or limiting practices affecting access to or continuation of employment. It addresses prohibited discrimination in hiring, promotion, retention, and employment conditions, including grounds such as sex, pregnancy, marital or family status, race, color, ethnicity, age, disability, and rehabilitation status, subject to the statute's text and amendments. HR-technology providers should assess…" }, { "name": "Lei Brasileira de Inclusão da Pessoa com Deficiência (Estatuto da Pessoa com Deficiência) — Lei nº 13.146/2015", "status": "in force", "year": 2015, "url": "https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2015/lei/l13146.htm", "summary": "Establishes equality, non-discrimination, accessibility, reasonable accommodation, and inclusive-work requirements for persons with disabilities. It expressly prohibits discrimination in recruitment, selection, hiring, admission examinations, continued employment, promotion, and professional rehabilitation, and requires accessible and inclusive work environments. Operators of recruiting portals, assessments,…" }, { "name": "Lei nº 7.716/1989 — Crimes Resultantes de Preconceito de Raça ou de Cor", "status": "in force", "year": 1989, "url": "https://www.planalto.gov.br/ccivil_03/leis/l7716compilado.htm", "summary": "Defines criminal offenses resulting from discrimination or prejudice based on race, color, ethnicity, religion, or national origin, with provisions addressing obstruction of access to public employment and promotion and other discriminatory conduct. The statute is not an AI-governance regime and does not automatically make every biased model output a crime, but it creates serious escalation risk where a system is…" }, { "name": "Estatuto da Igualdade Racial — Lei nº 12.288/2010", "status": "in force", "year": 2010, "url": "https://www.planalto.gov.br/ccivil_03/_ato2007-2010/2010/lei/l12288.htm", "summary": "Sets federal policy and rights protections aimed at racial equality and combating racial discrimination, including equal opportunities and access to work, education, and public life. It complements Law No. 7.716/1989 and amended related anti-discrimination provisions. For HR and workforce-technology operators, it supports requirements for race-discrimination risk assessment, representative testing datasets,…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Autoridade Nacional de Proteção de Dados (ANPD) is the principal federal regulator for LGPD compliance, including data processing, automated decisions, security, and sanctions. Labor matters may involve the Ministry of Labor and Employment and labor inspectors, the Labor Courts, and the Ministério Público do Trabalho; discrimination with potential criminal implications may also involve police, prosecutors, and criminal courts." }, { "q": "Do we need a license, permit, or registration?", "a": "No AI-specific license, permit, or registration is required under the briefing for recruiting, monitoring, profiling, or workforce tools. The operator must still meet LGPD obligations and ordinary corporate, labor, and sector-specific requirements, if applicable; the answer depends on the customer’s industry and the product’s actual functions." }, { "q": "What are the main data and privacy obligations?", "a": "Under the Lei Geral de Proteção de Dados Pessoais (LGPD — Lei nº 13.709/2018), the company must identify a lawful basis, limit processing to specified purposes and necessary data, provide transparency, apply security and governance measures, manage incidents and international transfers, and support data-subject rights. It must also define whether it acts as controller, joint controller, or processor, allocate responsibilities contractually, preserve audit and decision records, and support Article 20 requests for review of decisions made solely through automated processing, including…" }, { "q": "Which AI-specific rules apply?", "a": "Brazil has no comprehensive AI-specific law in force for hiring or workforce systems as of August 5, 2026. The main AI-relevant safeguards are LGPD Article 20, the CLT, Lei nº 9.029/1995 on employment discrimination, Lei nº 13.146/2015 on disability inclusion and accessibility, Lei nº 7.716/1989 on racial-discrimination crimes, and Lei nº 12.288/2010 on racial equality; PL nº 2.338/2023 remains under consideration and is not binding law." }, { "q": "What are the enforcement and penalty risks?", "a": "The ANPD may issue warnings, publicize violations, block or delete data, suspend processing or databases, prohibit processing activities, and impose a simple fine of up to 2% of Brazilian revenue, excluding taxes, capped at R$50 million per infraction, plus daily fines within the statutory cap. Labor and civil exposure can include correction of employment decisions, damages, reinstatement with back pay, or double remuneration under Lei nº 9.029/1995, whose administrative fine is ten times the employer’s highest salary and increases by 50% for repeat offenses; intentional racial discrimination…" } ] }, { "id": "brief:hr--ca-state", "sector": "hr", "geo": "ca-state", "sector_name": "HR & Workforce", "geo_name": "California", "url": "/brief/hr--ca-state.html", "overview": "California does not require a general artificial intelligence or human-resources technology license; instead, several overlapping rules apply. The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), has generally covered applicant, employee, contractor, and customer workforce data since broad exemptions expired on January 1, 2023; the Fair Employment and Housing Act (FEHA) covers artificial-intelligence-assisted employment decisions, and California Civil Rights Council rules took effect on October 1, 2025. If the product handles background checks, the federal Fair Credit Reporting Act and California Investigative Consumer Reporting Agencies Act may also apply, while pay-transparency rules affect recruiting and compensation workflows, so sector-specific obligations bind them today even though no standalone artificial intelligence licensing regime does.", "instruments": [ { "name": "California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA)", "status": "in force", "year": 2018, "url": "https://oag.ca.gov/privacy/ccpa", "summary": "A workforce-tech vendor may be a CCPA service provider or contractor when processing personal information for an employer, but may be a direct business when it determines processing purposes and means, uses data outside the permitted contractual role, sells or shares information, or otherwise meets the statutory definition. The broad employee, applicant, contractor, and business-to-business exemptions expired…" }, { "name": "California Fair Employment and Housing Act (FEHA), Cal. Gov. Code §§ 12900 et seq.", "status": "in force", "year": 1980, "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=GOV§ionNum=12940.", "summary": "FEHA prohibits covered employers, employment agencies, labor organizations, and other covered entities from discriminating in hiring, selection, promotion, compensation, termination, training, and working conditions on protected grounds. For HR and AI operators, a vendor’s screening, ranking, interview, assessment, monitoring, scheduling, or accommodation functionality can create or contribute to liability when it…" }, { "name": "California Civil Rights Council Employment Regulations Regarding Automated-Decision Systems, Title 2 California Code of Regulations", "status": "in force; effective October 1, 2025", "year": 2025, "url": "https://calcivilrights.ca.gov/wp-content/uploads/sites/32/2025/06/Final-Text-regulations-automated-employment-decision-systems.pdf", "summary": "The Civil Rights Council’s final employment regulations clarify how existing FEHA requirements apply to automated-decision systems, algorithms, and AI in employment. They address adverse impact and discrimination in automated screening and selection, disability-related medical inquiries, reasonable accommodation, and the use of agents and vendors. Covered employers and entities must retain employment records,…" }, { "name": "California pay-transparency requirements, Labor Code § 432.3, including SB 1162 and subsequent amendments", "status": "in force; current amendments effective January 1, 2026", "year": 2022, "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=LAB§ionNum=432.3.", "summary": "Employers may not seek or rely on an applicant’s salary history, must provide a pay scale upon request, and employers with 15 or more employees must include the pay scale in job postings. When a covered employer uses a third party to publish a posting, the employer must provide the pay scale and the third party must include it. Employers must retain job-title and wage-rate history during employment and for three…" }, { "name": "Fair Credit Reporting Act (FCRA), 15 U.S.C. §§ 1681 et seq.", "status": "in force", "year": 1970, "url": "https://www.ftc.gov/business-guidance/resources/what-employment-background-screening-companies-need-know-about-fair-credit-reporting-act", "summary": "A company that compiles or provides background dossiers, consumer reports, or algorithmic scores used for hiring, promotion, reassignment, retention, or termination may be a consumer reporting agency. The FCRA requires a permissible purpose, client certifications, reasonable accuracy procedures, applicant or employee disclosure and authorization before obtaining a report, and pre- and post-adverse-action notices.…" }, { "name": "California Investigative Consumer Reporting Agencies Act (ICRAA), Civil Code §§ 1786–1786.60", "status": "in force", "year": 1975, "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1786.20", "summary": "ICRAA applies to companies that collect, evaluate, compile, report, transmit, or communicate investigative consumer reports for employment and related purposes. Covered products must control permissible purposes, identify and verify users, obtain written user agreements and certifications, use reasonable procedures for maximum possible accuracy, retain reports for two years, maintain privacy-practice disclosures,…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The California Privacy Protection Agency (CPPA) and California Attorney General oversee CCPA/CPRA privacy enforcement; the California Civil Rights Department (CRD) enforces FEHA, while the California Civil Rights Council issues FEHA employment regulations, including the automated-decision-system rules effective October 1, 2025. The Federal Trade Commission (FTC) and U.S. Department of Justice enforce the FCRA, and California courts and the Department of Industrial Relations administer applicable Labor Code pay-transparency requirements." }, { "q": "Do we need a license, permit, or registration?", "a": "No general California AI, HR-technology, license, or permit is required under the briefing. Registration or specialized compliance may arise from the product’s function—for example, a background-screening product may be a consumer reporting agency under the FCRA and an investigative consumer reporting agency under ICRAA, while a data-broker or other separately regulated business may have additional requirements." }, { "q": "What are the main data and privacy obligations?", "a": "Under the CCPA, as amended by the CPRA, classify the company as a service provider, contractor, direct business, or another covered entity; the broad employee, applicant, contractor, and business-to-business exemptions expired January 1, 2023. Controls should cover notices, access, correction, deletion, opt-outs, sensitive-personal-information limits, contractual restrictions, retention, security, and downstream disclosures, with the exact duties depending on whether the vendor determines processing purposes or uses data outside its permitted role. Background-screening products must also…" }, { "q": "Which AI-specific rules apply?", "a": "FEHA applies when AI or algorithms assist hiring, screening, ranking, interviewing, promotion, termination, monitoring, scheduling, accommodation, or other employment practices; human review does not eliminate liability. The California Civil Rights Council’s Employment Regulations Regarding Automated-Decision Systems, under Title 2 of the California Code of Regulations and effective October 1, 2025, address adverse impact, discrimination, disability-related inquiries, reasonable accommodation, vendor oversight, documentation, and at least four years of employment-record retention. These rules…" }, { "q": "What are the enforcement and penalty risks?", "a": "CCPA violations can result in CPPA administrative fines of up to $2,663 per violation or $7,988 for intentional violations or violations involving minors under the current adjusted thresholds; qualifying security breaches can also create private damages of $107 to $799 per consumer per incident or actual damages, whichever is greater. FEHA remedies can include back pay, front pay, reinstatement, emotional-distress and punitive damages, injunctions, attorney’s fees, and costs, with exposure depending on the discriminatory practice and resulting harm. FCRA and ICRAA violations can produce…" } ] }, { "id": "brief:hr--co", "sector": "hr", "geo": "co", "sector_name": "HR & Workforce", "geo_name": "Colorado", "url": "/brief/hr--co.html", "overview": "Today, a Colorado HR-technology company must comply with generally applicable privacy, employment-discrimination, background-reporting, criminal-history, age-question, and pay-transparency rules, and federal requirements apply if it provides background reports, worker profiles, scores, or other information used in hiring decisions. Colorado Senate Bill 26-189 has been enacted and replaces the artificial intelligence provisions of Colorado Senate Bill 24-205, with the new automated-employment-decision requirements taking effect on January 1, 2027; the earlier February 1, 2026 and June 30, 2026 dates are no longer the permanent framework. Nothing uniquely sector-specific from these Colorado artificial-intelligence rules binds the company today, but its product must already support accurate reporting, privacy controls, accessibility, notices, human review, bias testing, audit records, and pay and job-posting compliance where applicable, and providing scoring software alone does not automatically make it a consumer reporting agency.", "instruments": [ { "name": "Colorado Automated Decision-Making Technology Act (SB26-189), transitioning from SB24-205 as delayed by SB25B-004", "status": "enacted May 14, 2026; principal requirements apply January 1, 2027", "year": 2026, "url": "https://leg.colorado.gov/bills/SB26-189", "summary": "SB26-189 repeals and reenacts the AI provisions originally created by SB24-205. It regulates automated decision-making technology that processes personal data and generates predictions, recommendations, classifications, rankings, scores, or other outputs used to make, guide, or assist consequential decisions, including employment decisions. For covered ADMT, developers must provide deployers with technical…" }, { "name": "Colorado Privacy Act and CPA Rules", "status": "in force since July 1, 2023", "year": 2021, "url": "https://coag.gov/resources/colorado-privacy-act/", "summary": "The Colorado Privacy Act applies to covered controllers and processors handling Colorado consumer data, subject to statutory thresholds and exemptions. It provides access, correction, deletion, portability, and opt-out rights; requires privacy notices, appropriate security, data-protection assessments for certain processing, and consent for specified sensitive-data processing. Colorado Attorney General guidance…" }, { "name": "Fair Credit Reporting Act (FCRA)", "status": "in force", "year": 1970, "url": "https://www.consumerfinance.gov/compliance/circulars/consumer-financial-protection-circular-2024-06-background-dossiers-and-algorithmic-scores-for-hiring-promotion-and-other-employment-decisions/", "summary": "FCRA coverage turns on product functions and data flows, not marketing labels. A vendor may be a consumer reporting agency when, for monetary compensation or similar consideration, it regularly assembles or evaluates consumer information for furnishing consumer reports to third parties, and the output is used or expected to be used for employment purposes. Background dossiers, third-party data compilations, and…" }, { "name": "Colorado Anti-Discrimination Act (CADA) and federal employment-discrimination laws", "status": "in force", "year": "1959/1963/1964/1967/1990", "url": "https://ccrd.colorado.gov/", "summary": "CADA prohibits covered employment discrimination and retaliation in Colorado. Federal law separately includes Title VII of the Civil Rights Act of 1964, the Equal Pay Act of 1963, the Age Discrimination in Employment Act of 1967, and the Americans with Disabilities Act of 1990. Employment tests, resume-ranking tools, interview analysis, worker-monitoring systems, productivity scores, and other selection or…" }, { "name": "Colorado Chance to Compete Act", "status": "in force; criminal-history restrictions effective September 1, 2021", "year": 2019, "url": "https://cdle.colorado.gov/dlss/labor-laws-by-topic/job-postings-and-hiring", "summary": "The Colorado Chance to Compete Act, commonly called Colorado's ban-the-box law, generally prohibits employers from asking about or relying on an applicant's criminal history on an initial employment application. Later-stage inquiries and use of criminal-history information remain subject to statutory limits, applicable federal law, and the Colorado Posting, Screening, and Transparency Rules. HR-tech operators…" }, { "name": "Colorado Job Application Fairness Act and Equal Pay for Equal Work Act Part 2, implemented in part by the Posting, Screening, and Transparency Rules", "status": "JAFA in force July 1, 2024; Equal Pay for Equal Work Act Part 2 in force since January 1, 2021 and amended effective January 1, 2024; POST Rules 7 CCR 1103-18 in force", "year": "2023/2021/2024", "url": "https://cdle.colorado.gov/dlss/labor-laws-by-topic/job-postings-and-hiring", "summary": "The Job Application Fairness Act generally prohibits employers from requesting age-identifying information on an initial employment application, including date of birth and graduation or attendance dates, subject to limited exceptions. Equal Pay for Equal Work Act Part 2 requires covered employers to include compensation, benefits, and application-deadline information in job postings; provide notices of Colorado job…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Colorado Attorney General is the principal authority for the Colorado Automated Decision-Making Technology Act, Colorado Privacy Act enforcement, and Colorado Consumer Protection Act matters; the AG must issue ADMT implementing rules before January 1, 2027. The Colorado Department of Labor and Employment’s Division of Labor Standards and Statistics administers the Chance to Compete Act, Job Application Fairness Act, Equal Pay for Equal Work Act Part 2, and 7 CCR 1103-18 POST Rules, while the Colorado Civil Rights Division enforces CADA; federal authorities include the EEOC and, for…" }, { "q": "Do we need a license, permit, or registration?", "a": "The briefing identifies no general Colorado license, permit, or registration requirement for an HR-tech or AI vendor merely because it operates in Colorado. The answer depends on the product’s function and data flows: a vendor may have FCRA consumer-reporting obligations if it regularly assembles or evaluates consumer information for employment reports, but the briefing does not identify a separate CRA license; customer contracts and role classification should distinguish developer, deployer, software-only provider, employer, and consumer reporting agency roles." }, { "q": "What are the main data and privacy obligations?", "a": "Separate applicant, employee, consumer, administrator, and customer-employee data, and document controller-versus-processor roles because the Colorado Privacy Act generally exempts individuals acting in an employment context, job applicants, and employment-record data. Covered CPA processing requires applicable privacy notices, access, correction, deletion, portability, and opt-out mechanisms; sensitive-data consent, security safeguards, data-protection assessments, retention controls, and deletion workflows may also apply. FCRA-covered products should support permissible-purpose and…" }, { "q": "Which AI-specific rules apply?", "a": "The Colorado Automated Decision-Making Technology Act, SB26-189, repeals and reenacts the AI provisions originally created by SB24-205, as delayed by SB25B-004, with principal requirements beginning January 1, 2027. It covers ADMT that processes personal data and produces predictions, recommendations, classifications, rankings, scores, or similar outputs used to make, guide, or assist consequential employment decisions; developers must provide technical documentation and material-update notices, while deployers must provide point-of-interaction notice, adverse-outcome explanations, correction…" }, { "q": "What are the enforcement and penalty risks?", "a": "SB26-189 violations are enforceable as deceptive trade practices under the Colorado Consumer Protection Act, without creating a new private right of action; the Colorado Attorney General must adopt implementing rules before January 1, 2027. A Colorado AG or district attorney may seek up to $20,000 per CCPA violation, or up to $50,000 when the violation is committed against an elderly person. Separate exposure may arise from CADA and federal discrimination claims, FCRA disputes and adverse-action failures, CDLE complaints or orders under the POST Rules, and contractual or customer claims, with…" } ] }, { "id": "brief:hr--de", "sector": "hr", "geo": "de", "sector_name": "HR & Workforce", "geo_name": "Germany", "url": "/brief/hr--de.html", "overview": "Today, no single sector-specific rule automatically binds every German human-resources technology company: your obligations depend on whether you provide an artificial intelligence system regulated by the European Union Artificial Intelligence Act, process applicant or employee data under the General Data Protection Regulation and Germany’s Federal Data Protection Act, or provide communications or digital services covered by the Telecommunications and Telemedia Data Protection Act. If your product supports hiring or employment decisions, the employer using it may also face German works-council, anti-discrimination and pay-transparency duties, which can affect you through your contract and data-processing role.", "instruments": [ { "name": "Artificial Intelligence Act (Regulation (EU) 2024/1689)", "status": "adopted and directly applicable; phased application, with the principal provisions applying from 2 August 2026 and certain provisions applying earlier or later", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex:32024R1689", "summary": "The Act directly imposes duties on an HR-tech company when it is a provider, importer, distributor or deployer of an AI system; customer employers are separately responsible for deployer duties. AI used for recruitment, candidate filtering, selection, employment decisions, task allocation, performance evaluation, or worker-management and worker-monitoring is generally high-risk under Annex III. Certain workplace…" }, { "name": "General Data Protection Regulation and Federal Data Protection Act (GDPR/BDSG)", "status": "in force; the BDSG supplements the GDPR in Germany", "year": 2016, "url": "https://www.gesetze-im-internet.de/bdsg_2018/", "summary": "The GDPR governs applicant and employee personal data, profiling, monitoring, special-category data, international transfers, processor arrangements, security, retention, transparency, data-subject rights and DPIAs. Article 22 safeguards may apply to decisions based solely on automated processing that produce legal or similarly significant effects; the provision is not a blanket prohibition, but qualifying decisions…" }, { "name": "Works Constitution Act (Betriebsverfassungsgesetz, BetrVG)", "status": "in force", "year": 1972, "url": "https://www.gesetze-im-internet.de/betrvg/BJNR000130972.html", "summary": "These duties primarily bind the employer where a German works council exists, but materially affect product deployment. Section 90 requires the employer to inform and consult the works council about planned technical facilities, work methods and workflows, expressly including the use of AI; the works council may treat expert assistance as necessary when assessing AI. Section 87(1)(6) can require co-determination…" }, { "name": "General Act on Equal Treatment (Allgemeines Gleichbehandlungsgesetz, AGG)", "status": "in force", "year": 2006, "url": "https://www.gesetze-im-internet.de/agg/BJNR189710006.html", "summary": "The AGG primarily binds employers and protects applicants and employees against direct and indirect discrimination in recruitment, selection, employment conditions, promotion and other employment matters on the statutory protected grounds. It does not generally impose a freestanding employment-discrimination duty on an HR-tech vendor merely because the vendor supplies software. A vendor can nevertheless face…" }, { "name": "Telecommunications-Digital-Services-Data-Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, TDDDG)", "status": "in force; last amended in 2026", "year": 2021, "url": "https://www.gesetze-im-internet.de/ttdsg/BJNR198210021.html", "summary": "The TDDDG is relevant where an HR product qualifies as a telecommunications service or digital service and handles electronic communications, traffic or usage data, or accesses information stored on employee devices. It protects the confidentiality of communications, regulates processing of traffic and location data, and generally requires consent or another applicable legal basis for accessing or storing…" }, { "name": "Pay Transparency Directive (Directive (EU) 2023/970)", "status": "in force at EU level; Member State transposition deadline was 7 June 2026, and German implementing measures and amendments to the existing Entgelttransparenzgesetz should be verified before relying on the current national framework", "year": 2023, "url": "https://eur-lex.europa.eu/eli/dir/2023/970/oj/eng", "summary": "The Directive is relevant to compensation benchmarking, salary-band, job-evaluation, recruiting and pay-equity analytics. Its core duties primarily concern Member States and employers, including pay information for applicants, employee access to pay information, reporting obligations for qualifying employers, joint pay assessments and stronger enforcement. HR-tech providers generally support the employer’s…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The main data-protection authorities are the Federal Commissioner for Data Protection and Freedom of Information (BfDI) and the competent data-protection authority of the relevant German Land; their jurisdiction depends on the responsible body and processing activity. For AI Act market surveillance, the Bundesnetzagentur is the designated authority for relevant Annex III high-risk systems, while the European Commission and its AI Office retain EU-level roles. Works councils are not regulators, but under the BetrVG they are important deployment stakeholders with information, consultation and…" }, { "q": "Do we need a license, permit, or registration?", "a": "There is no general German license, permit or registration requirement merely for supplying ordinary HR-tech SaaS. Requirements depend on the product and role: an AI Act provider, importer, distributor or deployer may need to satisfy high-risk conformity, documentation, quality-management, logging and market-access requirements, while TDDDG duties arise only if the service qualifies as a telecommunications or digital service or accesses information on employee devices." }, { "q": "What are the main data and privacy obligations?", "a": "The GDPR and BDSG govern applicant and employee data, including legal basis, transparency, purpose limitation, minimisation, retention, security, processor contracts, international transfers, data-subject rights and DPIAs; BDSG Section 26 is the central German employment-data rule. Article 22 safeguards apply where solely automated processing produces legal or similarly significant effects, including human intervention and the ability to contest where the provision applies. The vendor is commonly a GDPR processor but may be a controller or joint controller depending on its purposes and role;…" }, { "q": "Which AI-specific rules apply?", "a": "The Artificial Intelligence Act (Regulation (EU) 2024/1689) generally classifies AI used for recruitment, candidate filtering, selection, employment decisions, task allocation, performance evaluation, worker management or worker monitoring as high-risk under Annex III. Providers face risk-management, data-governance, technical-documentation, logging, human-oversight, accuracy, robustness, cybersecurity, quality-management and incident-related duties, while deployers have operational, monitoring and workplace-notice duties. Certain workplace practices, including emotion inference in the…" }, { "q": "What are the enforcement and penalty risks?", "a": "German data-protection authorities can investigate, order compliance, restrict or prohibit processing, require erasure or rectification, and impose GDPR fines of up to EUR 20 million or 4% of worldwide annual turnover, whichever is higher. Under AI Act Article 99, prohibited-practice violations can reach EUR 35 million or 7% of worldwide annual turnover, other specified operator breaches EUR 15 million or 3%, and misleading information EUR 7.5 million or 1%, subject to the applicable rules for undertakings and SMEs. Additional exposure includes works-council disputes under the BetrVG, AGG…" } ] }, { "id": "brief:hr--eu", "sector": "hr", "geo": "eu", "sector_name": "HR & Workforce", "geo_name": "European Union", "url": "/brief/hr--eu.html", "overview": "If your human-resources or workforce technology uses artificial intelligence for recruitment, selection, promotion, termination, task allocation, or worker-performance evaluation, the European Union Artificial Intelligence Act is sector-specific and binds you today through its rules on prohibited workplace uses, including emotion-recognition systems except for medical or safety reasons, and its high-risk employment framework. You must also comply with the General Data Protection Regulation, plus European Union rules on equality, gender equality, platform work, and employee information, which can require appropriate product design, data governance, documentation, contracts, human oversight, auditability, and implementation support for employers and platforms.", "instruments": [ { "name": "Artificial Intelligence Act (Regulation (EU) 2024/1689)", "status": "in force, phasing in", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689", "summary": "The AI Act applies generally from August 2, 2026, with certain provisions applying earlier or later. Employment-related AI systems—including systems used for recruitment or selection, decisions on promotion or termination, task allocation based on individual behavior or characteristics, and monitoring or evaluating performance—are generally high-risk under Annex III, subject to the Act’s classification rules and…" }, { "name": "General Data Protection Regulation (Regulation (EU) 2016/679)", "status": "in force", "year": 2016, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679", "summary": "The GDPR governs processing of personal data in recruiting, employee monitoring, HR analytics, profiling, biometric or emotion-related systems, and automated employment decisions. Operators must establish a lawful basis, observe purpose limitation and data minimisation, apply heightened safeguards to special-category data, provide required notices and data-subject rights, implement security and governance controls,…" }, { "name": "Employment Equality Directive (Council Directive 2000/78/EC)", "status": "in force", "year": 2000, "url": "https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=CELEX:32000L0078", "summary": "This directive establishes a general framework against discrimination in employment and occupation on grounds of religion or belief, disability, age, and sexual orientation. It covers access to employment, promotion, vocational training, and employment and working conditions, including indirect discrimination from apparently neutral criteria. It is not the EU’s general all-ground employment-equality instrument and…" }, { "name": "Equal Treatment Directive (Directive 2006/54/EC) (Recast Gender Equality Directive)", "status": "in force", "year": 2006, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32006L0054", "summary": "This directive implements equal opportunities and equal treatment of men and women in employment and occupation. It covers access to employment and self-employment, selection and recruitment criteria, promotion, vocational training, working conditions, dismissals, and occupational social-security schemes, and includes the principle of equal pay for equal work or work of equal value. It prohibits direct and indirect…" }, { "name": "Directive on Improving Working Conditions in Platform Work (Directive (EU) 2024/2831)", "status": "adopted, not yet fully transposed; transposition due December 2, 2026", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024L2831", "summary": "This directive applies to digital labour platforms organizing platform work performed in the EU, regardless of where the platform is established. It regulates automated monitoring and decision-making, including recruitment, access to assignments, earnings, working time, promotion, safety, and account restriction or termination. It restricts processing through such systems of data concerning emotional or…" }, { "name": "Employee Information and Consultation Directive (Directive 2002/14/EC)", "status": "in force", "year": 2002, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32002L0014", "summary": "This directive establishes a general framework for informing and consulting employees through their representatives on the undertaking’s recent and probable activities, employment situation and trends, and decisions likely to lead to substantial changes in work organization or contractual relations. The detailed thresholds and procedures are implemented through national law. Although duties primarily fall on…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The European Commission’s European AI Office oversees coherent implementation and enforcement of the Artificial Intelligence Act, while Member State-designated national competent and market-surveillance authorities enforce it nationally. National data protection authorities enforce the GDPR, coordinated through the European Data Protection Board; national equality, labor, employment, and court authorities also matter under Directives 2000/78/EC, 2006/54/EC, Directive 2002/14/EC, and applicable national law. The exact authority depends on the company’s operator role, product function, and…" }, { "q": "Do we need a license, permit, or registration?", "a": "There is no general EU license or permit for ordinary HR or workforce-technology software. If the product is an AI Act employment-related high-risk system, the provider must satisfy requirements such as risk management, technical documentation, logging, quality management, conformity assessment, and post-market monitoring before placing it on the market; deployers must implement the required controls. The precise process depends on whether the company is a provider, deployer, importer, distributor, or more than one operator role, and on the system’s classification." }, { "q": "What are the main data and privacy obligations?", "a": "Under the General Data Protection Regulation, companies must establish a lawful basis, limit processing to specified purposes, minimise data, protect special-category data, provide notices, honour data-subject rights, apply security and governance controls, and conduct a data protection impact assessment where required. Article 22 restricts solely automated decisions producing legal or similarly significant effects, subject to its conditions and safeguards. Employment-processing, workplace-monitoring, biometric, emotion-related, and automated-decision uses also require review of Member State…" }, { "q": "Which AI-specific rules apply?", "a": "Under the Artificial Intelligence Act (Regulation (EU) 2024/1689), recruitment, selection, promotion, termination, task allocation based on individual characteristics or behavior, and worker-performance monitoring or evaluation are generally high-risk uses, subject to the Act’s classification rules and exceptions; the Act generally applies from August 2, 2026. Workplace emotion-recognition systems are prohibited except for medical or safety reasons, and employers using high-risk systems must inform workers and their representatives before use. For digital labor platforms, Directive (EU)…" }, { "q": "What are the enforcement and penalty risks?", "a": "The AI Act allows fines of up to €35 million or 7% of worldwide annual turnover for prohibited AI practices, up to €15 million or 3% for specified provider, deployer, importer, distributor, and transparency breaches, and up to €7.5 million or 1% for supplying incorrect, incomplete, or misleading information; for SMEs and start-ups, the applicable fine is capped at the lower amount or percentage. GDPR penalties can reach €20 million or 4% of worldwide annual turnover for serious breaches, including unlawful processing, data-subject-rights violations, and certain transfer violations, or €10…" } ] }, { "id": "brief:hr--fr", "sector": "hr", "geo": "fr", "sector_name": "HR & Workforce", "geo_name": "France", "url": "/brief/hr--fr.html", "overview": "A France-based human resources technology company must follow the General Data Protection Regulation (GDPR), France’s Informatique et Libertés data-protection framework, and the French Labour Code when handling candidate or employee data, recruitment, evaluations, monitoring, and discrimination risks. The European Union Artificial Intelligence Act treats many employment and workforce artificial intelligence systems as high-risk and bans some workplace uses, including emotion recognition; the Digital Services Act may also apply if the product is an online job or workforce platform hosting user content. Sector-specific rules already bind the company today, even though the exact obligations depend on its product and use cases.", "instruments": [ { "name": "Regulation (EU) 2016/679 (GDPR)", "status": "in force", "year": 2016, "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "summary": "Governs processing of candidate, employee, applicant, and user data, including lawful basis, transparency, data minimization, retention, security, processor contracts, international transfers, DPIAs, and data-subject rights. Profiling and solely automated decisions with significant effects require particular safeguards, including meaningful human intervention where applicable." }, { "name": "Loi Informatique et Libertés", "status": "in force", "year": 1978, "url": "https://www.legifrance.gouv.fr/loda/id/JORFTEXT000000886460/", "summary": "France’s national data-protection statute supplements the GDPR and defines CNIL’s powers, national rules, certain conditions for sensitive-data processing, and enforcement mechanisms. It is especially relevant where HR tools process biometric, health, diversity, disciplinary, or other sensitive workforce data." }, { "name": "Code du travail", "status": "in force", "year": 2008, "url": "https://www.legifrance.gouv.fr/codes/id/LEGITEXT000006072050/", "summary": "Recruitment questions must be directly and necessarily related to the job or professional aptitude, and employees must be informed in advance about evaluation methods. Monitoring and evaluation systems must be relevant and proportionate, and automated tools cannot be designed or deployed in ways that produce prohibited discrimination in hiring, performance management, promotion, or termination." }, { "name": "Regulation (EU) 2024/1689 (Artificial Intelligence Act)", "status": "partially in force", "year": 2024, "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj", "summary": "AI systems used for recruitment, selection, promotion, termination, task allocation, performance evaluation, or worker monitoring are generally high-risk and require controls such as risk management, data governance, technical documentation, logging, human oversight, accuracy, robustness, cybersecurity, and deployer instructions. Certain practices are prohibited, including workplace emotion-recognition systems…" }, { "name": "Regulation (EU) 2022/2065 (Digital Services Act)", "status": "in force", "year": 2022, "url": "https://eur-lex.europa.eu/eli/reg/2022/2065/oj", "summary": "Applies conditionally where the product is an online platform or hosting service that makes job listings, worker profiles, reviews, or other user content available to the public. Relevant duties can include notice-and-action procedures, terms transparency, user redress, advertising disclosures, trader or advertiser information, and systemic-risk controls for larger platforms." } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The CNIL is the principal authority for the GDPR and Loi Informatique et Libertés, while the inspection du travail and labour courts are relevant for Code du travail requirements on recruitment, evaluation, monitoring, and discrimination. If the product is a public online platform, Arcom is France’s Digital Services Coordinator, working with the CNIL and DGCCRF; the European Commission is additionally relevant for very large platforms. ([arcom.fr](https://www.arcom.fr/en/professional-space/regulations-on-digital-services-or-dsa-obligations-and-concerned-services?utm_source=openai))" }, { "q": "Do we need a license, permit, or registration?", "a": "There is no general French HR-technology licence or operating permit identified under the GDPR, Loi Informatique et Libertés, Code du travail, or AI Act. Compliance instead requires governance measures such as records, DPIAs where required, processor arrangements, and— for an AI Act high-risk system—technical documentation, logging, human oversight, and any applicable conformity assessment; a public online platform may also have DSA transparency-database registration duties, depending on its size and service model.…" }, { "q": "What are the main data and privacy obligations?", "a": "Under the GDPR and Loi Informatique et Libertés, the operator must establish a lawful basis, give clear notices, minimize data, set retention limits, secure processing, manage processors and international transfers, conduct DPIAs where required, and support data-subject rights. Candidate and employee profiling or solely automated decisions require particular safeguards, including meaningful human intervention where applicable. The Code du travail also requires recruitment questions to be directly and necessarily job-related, advance information about evaluation methods, proportionate…" }, { "q": "Which AI-specific rules apply?", "a": "Under Regulation (EU) 2024/1689, AI used for recruitment, selection, promotion, termination, task allocation, performance evaluation, or worker monitoring is generally high-risk and requires risk management, data governance, documentation, logging, human oversight, accuracy, robustness, cybersecurity, and deployer instructions. Workplace emotion-recognition systems are prohibited subject to the Act’s exceptions. As of August 7, 2026, the main high-risk obligations applying from August 2, 2026 are in force; the exact duties depend on whether the company is a provider, deployer, or other…" }, { "q": "What are the enforcement and penalty risks?", "a": "The CNIL can order compliance, restrict or suspend processing and data flows, make sanctions public, and impose GDPR fines of up to €20 million or 4% of worldwide annual turnover. AI Act breaches can reach €35 million or 7% of worldwide turnover for prohibited practices, and up to €15 million or 3% for other specified provider or notified-body obligations. If the DSA applies, national fines can reach 6% of worldwide annual turnover, while labour-law violations may also trigger injunctions, civil claims, discrimination proceedings, and other administrative or criminal consequences depending on…" } ] }, { "id": "brief:hr--ny", "sector": "hr", "geo": "ny", "sector_name": "HR & Workforce", "geo_name": "New York", "url": "/brief/hr--ny.html", "overview": "New York City’s Local Law 144, a law regulating automated employment decision tools that help make hiring or promotion decisions, currently requires covered employers to obtain annual independent bias audits, publish summaries, and notify affected candidates or employees; vendors typically face related contractual duties. New York State requirements cover employment discrimination, electronic-monitoring notices, and employee and applicant data security, while federal Title VII of the Civil Rights Act of 1964, the Americans with Disabilities Act, the Age Discrimination in Employment Act, and Section 5 of the Federal Trade Commission Act may also apply depending on the product and business model. As of August 5, 2026, no generally applicable New York statewide private-sector artificial-intelligence hiring-tool regime comparable to New York City’s law has been identified, so no additional sector-specific New York rule broadly binds them today, although the tools should still address accessibility, security, transparency, data minimization, human review, and discrimination risks.", "instruments": [ { "name": "New York City Local Law 144 of 2021 and DCWP AEDT Rules", "status": "Binding. Local Law 144 was enacted January 15, 2022, with an enactment number of Local Law 144 of 2021. DCWP's implementing rules became effective July 5, 2023, and DCWP enforcement began July 5, 2023.", "year": "2021 law; 2023 implementing rules", "url": "https://home4.nyc.gov/site/dca/about/automated-employment-decision-tools.page", "summary": "Applies to NYC employers and employment agencies using an AEDT to screen NYC residents for hiring or promotion decisions. An AEDT is a computational process derived from machine learning, statistical modeling, data analytics, or artificial intelligence that issues a score, classification, or recommendation used to substantially assist or replace discretionary employment decision-making. Before use, the tool must…" }, { "name": "New York City Human Rights Law, Title 8 of the Administrative Code, including Local Laws 32 and 59 of 2022", "status": "Binding. The NYC Human Rights Law applies to employment decisions. Local Law 32, as amended by Local Law 59, requires covered NYC job, promotion, and transfer advertisements to state the minimum and maximum salary or hourly-wage range the employer in good faith believes it would pay.", "year": "NYC Human Rights Law originally enacted in 1945; Local Law 32 enacted January 15, 2022; Local Law 59 enacted May 12, 2022; salary-transparency requirements effective November 1, 2022", "url": "https://home4.nyc.gov/site/cchr/law/text-of-the-law.page", "summary": "The NYC Human Rights Law prohibits discrimination and retaliation in hiring, job postings, compensation, performance evaluation, promotion, discipline, termination, and other employment terms. It covers employers, employment agencies, and agents within its scope and protects broad classes, including race, color, creed, age, national origin, immigration or citizenship status, gender, sexual orientation, disability,…" }, { "name": "New York State Human Rights Law, Executive Law Article 15", "status": "Binding statewide law, as amended. The New York State Division of Human Rights administers and enforces the law.", "year": "1945; amended substantially over time", "url": "https://dhr.ny.gov/new-york-state-human-rights-law", "summary": "The New York State Human Rights Law prohibits discrimination, harassment, and retaliation in employment and applies to employers, employment agencies, and labor organizations within its coverage. Protected characteristics include, among others, age, race, creed, color, national origin, sex, pregnancy-related conditions, sexual orientation, gender identity or expression, disability, marital status, familial status,…" }, { "name": "New York SHIELD Act, General Business Law §§ 899-aa and 899-bb", "status": "Binding. The SHIELD Act was signed July 25, 2019. It requires covered businesses that own or license New York residents' private information, and businesses that maintain such information for security-program purposes, to implement reasonable safeguards and comply with applicable breach-notification requirements.", "year": "2019 law; principal security and breach-notification amendments effective March 21, 2020", "url": "https://ag.ny.gov/resources/organizations/data-breach-reporting/shield-act", "summary": "The SHIELD Act applies to businesses that own or license computerized data containing New York residents' private information and imposes reasonable-security obligations on businesses that maintain such information. Private information can include identifiers combined with account credentials, biometric information, or other specified data elements. Businesses must implement reasonable administrative, technical, and…" }, { "name": "New York Civil Rights Law § 52-c, Employers Engaged in Electronic Monitoring; Prior Notice Required", "status": "Binding for covered private-sector employers. The provision was enacted as Chapter 583 of the Laws of 2021 and excludes New York State and its political subdivisions.", "year": "2021 law; effective May 7, 2022", "url": "https://nyassembly.gov/leg/?Chamber%26nbspVideo%2FTranscript=Y&Floor%26nbspVotes=Y&LFIN=Y&Memo=Y&Summary=Y&Text=Y&bn=A00430&default_fld=%0D%0A&leg_video=&term=2021", "summary": "A covered employer that monitors or intercepts employee telephone conversations or transmissions, electronic mail or transmissions, or internet access or usage through an electronic device or system must provide prior written or electronic notice upon hiring to employees subject to monitoring, obtain acknowledgment, and post the notice conspicuously. The statute excludes processes used solely for system maintenance…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "Key authorities are the NYC Department of Consumer and Worker Protection (DCWP) for Local Law 144 of 2021 and its AEDT Rules, the NYC Commission on Human Rights for Title 8 of the Administrative Code, and the New York State Division of Human Rights for Executive Law Article 15. The New York Attorney General enforces the SHIELD Act, while the EEOC and FTC may enforce applicable federal employment-discrimination and deceptive-practices requirements." }, { "q": "Do we need a license, permit, or registration?", "a": "A software vendor operating on a vendor-only basis generally does not need a New York license, permit, or registration under the instruments in the briefing. A company that itself operates as an employment agency in New York City needs a DCWP employment-agency license; the answer otherwise depends on whether the company is acting as an employer, employment agency, labor organization, government entity, or technology vendor." }, { "q": "What are the main data and privacy obligations?", "a": "The New York SHIELD Act, General Business Law §§ 899-aa and 899-bb, requires reasonable administrative, technical, and physical safeguards, vendor due diligence and contractual security requirements, access control, retention and disposal controls, incident response, and breach notices when applicable. New York Civil Rights Law § 52-c additionally requires covered private-sector employers using individualized electronic monitoring to provide prior notice, obtain acknowledgment, and post the notice; vendors should support those workflows and document monitored channels, retention, and…" }, { "q": "Which AI-specific rules apply?", "a": "In New York City, Local Law 144 of 2021 and the DCWP AEDT Rules require a qualifying AEDT used for covered hiring or promotion screening to undergo an impartial independent bias audit within the prior year, have required audit information publicly available, and support notices at least 10 business days before use, including assessed qualifications or characteristics. The NYC Human Rights Law and New York State Human Rights Law also require assessment of disparate treatment, disparate impact, accessibility, reasonable accommodation, retaliation, and meaningful human review across screening,…" }, { "q": "What are the enforcement and penalty risks?", "a": "Violations of Local Law 144 can carry a civil penalty of up to $500 for a first violation and each additional violation on the same day, and $500 to $1,500 for each subsequent violation; each day of unlawful use and each missing notice can count separately. Under SHIELD Act § 899-aa, knowing or reckless failure to provide required breach notice can result in the greater of $5,000 or up to $20 per failed-notification instance, capped at $250,000, plus injunctions and actual costs or losses. Discrimination findings may bring compensation, policy changes, reversed employment decisions, and other…" } ] }, { "id": "brief:hr--tx", "sector": "hr", "geo": "tx", "sector_name": "HR & Workforce", "geo_name": "Texas", "url": "/brief/hr--tx.html", "overview": "Texas hiring and workforce-technology companies can face federal and Texas liability when their products affect hiring, promotion, performance reviews, monitoring, background checks, biometrics, or AI-assisted employment decisions, including under Texas Labor Code Chapter 21, the state’s employment anti-discrimination law. Texas’s AI statute, the state law governing certain artificial-intelligence uses, took effect January 1, 2026, while the Texas privacy statute, the state’s consumer-data protection law, generally excludes applicants and employees acting in an employment context. Prioritize bias and disability testing, accessibility and accommodations, human review, notice and consent, data accuracy and security, retention limits, and clear employer-versus-vendor responsibility.", "instruments": [ { "name": "Federal employment-discrimination framework: Title VII, ADEA, ADA, GINA, and related EEOC regulations", "status": "in force", "year": "1964/1967/1990/2008", "url": "https://www.eeoc.gov/laws/guidance/employment-tests-and-selection-procedures", "summary": "Title VII of the Civil Rights Act of 1964 covers race, color, religion, sex, and national origin; the ADEA of 1967 covers age 40 and older; the ADA of 1990 covers disability; and GINA of 2008 covers genetic information. These laws apply to covered employers and can affect vendors whose tools screen, rank, recommend, monitor, or otherwise influence hiring, promotion, termination, compensation, or other employment…" }, { "name": "Uniform Guidelines on Employee Selection Procedures", "status": "in force", "year": 1978, "url": "https://www.eeoc.gov/laws/guidance/employment-tests-and-selection-procedures", "summary": "The Uniform Guidelines, adopted in 1978 and codified at 29 C.F.R. Part 1607, provide federal guidance for validating employment tests and other selection procedures under Title VII disparate-impact principles. AI-enabled assessments, ranking models, résumé screeners, personality tools, interview systems, and similar products should be demonstrably job-related and consistent with business necessity, supported by…" }, { "name": "Fair Credit Reporting Act", "status": "in force", "year": 1970, "url": "https://www.ftc.gov/business-guidance/resources/what-employment-background-screening-companies-need-know-about-fair-credit-reporting-act", "summary": "The FCRA applies to consumer reporting agencies and employment-screening vendors that provide consumer reports used as a factor in employment decisions. Covered operators must use reasonable procedures for maximum possible accuracy, maintain permissible purposes, provide required disclosures and certifications, support applicant or employee access and dispute rights, and enable employers to complete the required…" }, { "name": "Texas Labor Code Chapter 21 (Texas Commission on Human Rights Act)", "status": "in force", "year": 1993, "url": "https://statutes.capitol.texas.gov/Docs/LA/pdf/LA.21.pdf", "summary": "Chapter 21 prohibits covered employment discrimination based on race, color, religion, sex, national origin, disability, and age; prohibits retaliation and discriminatory notices or advertisements; addresses disparate impact, reasonable workplace accommodation, and aiding or abetting discrimination. Private employers generally are covered at 15 or more employees for each working day in 20 or more weeks of the…" }, { "name": "Texas Capture or Use of Biometric Identifier Act", "status": "in force", "year": 2009, "url": "https://statutes.capitol.texas.gov/Docs/BC/pdf/BC.503.pdf", "summary": "Texas Business and Commerce Code Chapter 503 generally requires advance notice and consent before capturing a retina or iris scan, fingerprint, voiceprint, or record of hand or face geometry for a commercial purpose. Operators must restrict disclosure, maintain reasonable care and security, and destroy covered biometric identifiers within the statutory period after the purpose for collection expires, subject to…" }, { "name": "Texas Artificial Intelligence Protection Act (Business and Commerce Code Chapter 552)", "status": "in force; effective January 1, 2026", "year": 2025, "url": "https://statutes.capitol.texas.gov/?artSec=552.052&chapter=BC.552&code=BC&tab=1", "summary": "Chapter 552, effective January 1, 2026, regulates specified artificial-intelligence practices, including prohibited manipulation of human behavior, discriminatory deployment with unlawful intent, certain biometric categorization and sensitive-data practices, and specified sexually explicit or child-related content. It also provides enforcement mechanisms involving the Texas attorney general and state agencies. For…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The principal authorities are the U.S. Equal Employment Opportunity Commission (EEOC) for Title VII, the ADEA, the ADA, GINA, and related regulations; the Federal Trade Commission (FTC) for FCRA obligations; and the Texas Workforce Commission Civil Rights Division for Texas Labor Code Chapter 21. The Texas Attorney General has primary enforcement authority under the Texas Artificial Intelligence Protection Act (Business and Commerce Code Chapter 552), with other state agencies potentially involved where the statute permits." }, { "q": "Do we need a license, permit, or registration?", "a": "The briefing identifies no general Texas license, permit, or registration for an HR, hiring, monitoring, or workforce-AI product. Compliance duties depend on the operator’s role—such as employer agent, employment agency, consumer reporting agency, or service provider—and Chapter 553 approval applies only if the operator elects to participate in Texas’s AI regulatory sandbox." }, { "q": "What are the main data and privacy obligations?", "a": "Apply the FCRA when the product provides consumer reports or third-party background information used for employment decisions: maintain maximum possible accuracy, obtain required authorization and disclosures, support access and disputes, and enable pre-adverse- and adverse-action procedures. For biometric features, the Texas Capture or Use of Biometric Identifier Act generally requires advance notice and consent, restricted disclosure, reasonable security, and timely destruction; Texas Business and Commerce Code Chapter 541 generally excludes applicants and employees acting in an employment…" }, { "q": "Which AI-specific rules apply?", "a": "Texas Artificial Intelligence Protection Act, Business and Commerce Code Chapter 552, has applied since January 1, 2026 and prohibits specified practices including intentional unlawful discrimination, manipulation of human behavior, and certain biometric categorization or sensitive-data uses. Employment tools must also comply with Title VII, the ADEA, the ADA, GINA, Texas Labor Code Chapter 21, and the Uniform Guidelines on Employee Selection Procedures by documenting job-relatedness, business necessity, validation, disparate-impact testing, accessibility, accommodation pathways, human…" }, { "q": "What are the enforcement and penalty risks?", "a": "Discrimination exposure can include investigations, litigation, injunctive relief, reinstatement, back pay, attorney’s fees, and compensatory or punitive damages; under federal discrimination law, combined compensatory and punitive damages are capped at $50,000 to $300,000 based on employer size, while age-discrimination cases may include liquidated damages. FCRA, biometric, Texas Chapter 21, and Chapter 552 violations can produce separate statutory, equitable, administrative, or contractual consequences, and the Texas Attorney General may seek civil penalties, injunctive relief, attorney’s…" } ] }, { "id": "brief:hr--uk", "sector": "hr", "geo": "uk", "sector_name": "HR & Workforce", "geo_name": "United Kingdom", "url": "/brief/hr--uk.html", "overview": "UK HR and workforce technology is governed by overlapping data-protection, equality, employment and agency-work rules, not a standalone United Kingdom AI Act. The United Kingdom General Data Protection Regulation and Data Protection Act 2018 regulate worker data, profiling, monitoring, biometrics, health information, security, transparency and automated decisions; the Data (Use and Access) Act 2025 changed these rules, with most relevant changes effective on 5 February 2026 and complaint provisions on 19 June 2026. Nothing sector-specific binds them today, but the Equality Act 2010 and employment rules apply if their software affects recruitment, pay, promotion, performance, dismissal, working time, leave or agency work.", "instruments": [ { "name": "UK GDPR and Data Protection Act 2018", "status": "in force, as amended", "year": 2016, "url": "https://www.legislation.gov.uk/eur/2016/679/contents", "summary": "The core regime for personal data processed by hiring, HR analytics, employee-monitoring, workforce-management, biometric and workplace-health products. Operators and their customers must address a lawful basis, purpose limitation, minimisation, accuracy, retention, security, transparency, data-subject rights, processor governance and DPIAs for high-risk processing. Before the Data (Use and Access) Act 2025…" }, { "name": "Equality Act 2010", "status": "in force", "year": 2010, "url": "https://www.legislation.gov.uk/ukpga/2010/15/contents", "summary": "Hiring and workforce technology must not cause unlawful direct discrimination, indirect discrimination, discrimination arising from disability, harassment or victimisation involving protected characteristics. The risk applies when a customer or agency uses a vendor’s software in recruitment, promotion, pay, performance management, scheduling or dismissal. Operators should support accessibility and reasonable…" }, { "name": "Data (Use and Access) Act 2025", "status": "in force in stages; relevant data-protection provisions largely in force", "year": 2025, "url": "https://www.legislation.gov.uk/ukpga/2025/18/contents", "summary": "The Act amends, rather than replaces, the UK GDPR and Data Protection Act 2018. Section 80 replaced UK GDPR Article 22 with Articles 22A–22D for significant decisions based solely on automated processing. The amended framework is more permissive for non-special-category data than the pre-existing Article 22 regime, but requires safeguards including clear information about the decision, a right to make…" }, { "name": "Working Time Regulations 1998, National Minimum Wage Act 1998, and Conduct of Employment Agencies and Employment Businesses Regulations 2003", "status": "in force, as amended; scope depends on product and business model", "year": 1998, "url": "https://www.legislation.gov.uk/uksi/1998/1833/contents", "summary": "These employment-specific rules are material for workforce platforms that schedule or record working time, administer breaks, rest, annual leave or night work, calculate or support minimum-wage compliance, or operate employment-agency or employment-business workflows. Products should preserve reliable time and pay records, support the applicable 48-hour average-week rules and rest entitlements, avoid workflows that…" }, { "name": "ICO employment-practices guidance, including the legacy Employment Practices Code and current recruitment, records, monitoring and workers’ health guidance", "status": "current ICO operational guidance; legacy Employment Practices Code withdrawn from the current employment-information guidance set", "year": 2023, "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/", "summary": "The ICO’s current employment guidance provides practical expectations for recruitment and selection, employment records, worker monitoring, automated decision-making, biometrics and health information. The former Employment Practices Code covered recruitment, employment records, monitoring at work and workers’ health, but the ICO removed it from the current guidance set and replaced it with topic-specific UK GDPR…" }, { "name": "Employment Rights Act 2025", "status": "adopted and phasing in through commencement regulations", "year": 2025, "url": "https://www.legislation.gov.uk/ukpga/2025/36/contents", "summary": "The Act received Royal Assent on 18 December 2025 and introduces staged changes affecting workforce-management products, including guaranteed-hours and shift-notice rights for relevant workers, flexible working, statutory sick pay, family leave, tips, dismissal protections, collective rights, agency workers and employment information. It does not itself create a general AI-specific regime, but products that generate…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The main authorities are the Information Commissioner’s Office (ICO) for the UK GDPR, Data Protection Act 2018 and Data (Use and Access) Act 2025; the Equality and Human Rights Commission (EHRC) for the Equality Act 2010; and employment tribunals and courts for individual employment claims. The Employment Agency Standards Inspectorate within the Department for Business and Trade oversees regulated employment agencies and employment businesses, while HM Revenue & Customs enforces National Minimum Wage requirements where the product supports pay or agency workflows." }, { "q": "Do we need a license, permit, or registration?", "a": "There is no standalone UK AI licence or permit for HR, hiring or workforce technology. Requirements depend on the business model: ordinary HR software is generally subject to compliance duties rather than sector licensing, but a platform that performs regulated employment-agency or employment-business functions must comply with the Conduct of Employment Agencies and Employment Businesses Regulations 2003 and may face Employment Agency Standards enforcement." }, { "q": "What are the main data and privacy obligations?", "a": "The UK GDPR and Data Protection Act 2018 require a lawful basis, purpose limitation, minimisation, accuracy, retention controls, security, transparency, data-subject rights, processor governance and DPIAs for high-risk processing. Hiring, monitoring, biometric and workplace-health products should provide clear notices, audit trails, challenge routes and special-category safeguards; the Data (Use and Access) Act 2025 amendments to significant solely automated decisions largely took effect on 5 February 2026, with data-subject complaint provisions taking effect on 19 June 2026." }, { "q": "Which AI-specific rules apply?", "a": "The UK has no standalone UK AI Act for these products. AI-enabled hiring, profiling, monitoring and workforce decisions are governed mainly by the UK GDPR and Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025, including Articles 22A–22D safeguards for significant solely automated decisions; the Equality Act 2010 also applies where outputs contribute to discriminatory recruitment, pay, promotion, performance or dismissal. The practical controls depend on whether the decision is solely automated, has a significant effect, uses special-category data, or involves…" }, { "q": "What are the enforcement and penalty risks?", "a": "The ICO can impose a higher-tier fine of up to £17.5 million or 4% of worldwide annual turnover, whichever is higher, for relevant UK GDPR and Data Protection Act breaches. Equality Act claims can result in uncapped compensation, while National Minimum Wage failures can require arrears plus a penalty of up to 200% of arrears, capped at £20,000 per worker; regulated employment-agency breaches can lead to prosecution, unlimited fines and prohibition from operating." } ] }, { "id": "brief:hr--us", "sector": "hr", "geo": "us", "sector_name": "HR & Workforce", "geo_name": "US Federal", "url": "/brief/hr--us.html", "overview": "No single United States federal law specifically regulates artificial intelligence in human resources today, but existing employment, consumer-reporting, and civil-rights laws apply depending on what the product does and how customers use it. Nothing sector-specific binds the company solely because it provides human-resources technology, although it may have direct obligations if it acts as an employment agency, representative, consumer reporting agency, or contracting party, or handles protected information.", "instruments": [ { "name": "Title VII of the Civil Rights Act of 1964", "status": "in force", "year": 1964, "url": "https://www.eeoc.gov/statutes/title-vii-civil-rights-act-1964", "summary": "Prohibits employment discrimination based on race, color, religion, sex, and national origin. Automated recruiting, selection, promotion, compensation, monitoring, and termination tools can create disparate-treatment or disparate-impact exposure. Vendors should support job-related validation, outcome testing, documentation, and remediation, particularly where the provider acts as an employment agency or agent or…" }, { "name": "Title I of the Americans with Disabilities Act of 1990", "status": "in force", "year": 1990, "url": "https://www.eeoc.gov/statutes/titles-i-and-v-americans-disabilities-act-1990-ada", "summary": "Prohibits employment discrimination against qualified individuals with disabilities and requires reasonable accommodation in covered employment processes. AI assessments, video interviews, speech or facial analysis, productivity scoring, and monitoring tools must not screen out qualified individuals because of disability unless the criterion is job-related and consistent with business necessity. Products and…" }, { "name": "Fair Credit Reporting Act", "status": "in force", "year": 1970, "url": "https://www.ftc.gov/business-guidance/resources/what-employment-background-screening-companies-need-know-about-fair-credit-reporting-act", "summary": "Applies when a company furnishes consumer reports used for employment purposes, potentially making an HR technology provider a consumer reporting agency. Relevant controls include permissible purpose, client certifications, reasonable procedures to assure maximum possible accuracy, file-access and dispute processes, required disclosures and authorizations, and support for pre-adverse- and adverse-action notices.…" }, { "name": "Uniform Guidelines on Employee Selection Procedures, 29 C.F.R. Part 1607", "status": "in force as federal employment-selection guidelines", "year": 1978, "url": "https://www.ecfr.gov/current/title-29/subtitle-B/chapter-XIV/part-1607", "summary": "Provides federal guidelines for validating employee-selection procedures and evaluating adverse impact. They are especially relevant to automated résumé screening, ranking, testing, interviewing, and other selection tools. Technology providers should help customers identify the construct and job requirements measured, conduct professionally accepted validation studies where appropriate, monitor selection rates and…" }, { "name": "Genetic Information Nondiscrimination Act of 2008, Title II", "status": "in force; Title II effective November 21, 2009", "year": 2008, "url": "https://www.eeoc.gov/statutes/genetic-information-nondiscrimination-act-2008", "summary": "Prohibits covered employers, employment agencies, labor organizations, and related entities from discriminating based on genetic information and generally restricts requesting, requiring, or purchasing such information. It also limits disclosure and requires confidentiality. HR products should avoid collecting or inferring genetic information, including family medical history, for employment decisions; segregate and…" }, { "name": "42 U.S.C. § 1981 (Civil Rights Act of 1866, as amended)", "status": "in force", "year": 1866, "url": "https://uscode.house.gov/view.xhtml?edition=prelim&num=0&req=granuleid%3AUSC-prelim-title42-section1981", "summary": "Guarantees all persons the same right to make and enforce contracts as white citizens, including the making, performance, modification, and termination of contractual relationships. It provides an independent federal claim for intentional racial discrimination in employment contracting and related vendor or staffing arrangements, including potentially discriminatory contracting decisions involving HR technology.…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Equal Employment Opportunity Commission (EEOC) is the principal federal authority for Title VII, Title I of the ADA, GINA Title II, and the ADEA, while the Federal Trade Commission (FTC) is a principal authority for the FCRA and Section 5 of the FTC Act. Federal courts and private litigants also enforce 42 U.S.C. § 1981, and the relevant authority depends on whether the company acts as a software vendor, employment agency, agent, consumer reporting agency, or contracting party." }, { "q": "Do we need a license, permit, or registration?", "a": "Generally, no single federal AI license, permit, or registration is required merely to sell HR or workforce technology. Requirements change if the product functions as a consumer reporting agency under the Fair Credit Reporting Act, acts as an employment agency or agent, or performs a regulated activity; state and local requirements are outside this federal-level assessment." }, { "q": "What are the main data and privacy obligations?", "a": "The Fair Credit Reporting Act requires applicable consumer reporting agencies and furnishers to use a permissible employment purpose, obtain required certifications and authorizations, maintain reasonable procedures for maximum possible accuracy, support file access and disputes, and enable pre-adverse- and adverse-action notices. GINA Title II requires avoiding the collection or inference of genetic information for employment decisions, restricting disclosure, and maintaining confidentiality; ADA-related disability information must also be handled lawfully and used to support accommodations…" }, { "q": "Which AI-specific rules apply?", "a": "The United States has no single comprehensive federal AI law for HR technology. The main applicable instruments are Title VII, Title I of the ADA, the Uniform Guidelines on Employee Selection Procedures in 29 C.F.R. Part 1607, GINA Title II, and 42 U.S.C. § 1981, with the ADEA and Section 5 of the FTC Act also relevant from the briefing’s watchlist. These rules require nondiscrimination, job-related validation, adverse-impact monitoring, accessibility and accommodation support, protection of genetic information, accurate product claims, documentation, and remediation; they do not generally…" }, { "q": "What are the enforcement and penalty risks?", "a": "Risks include EEOC charges, investigations, conciliation, agency litigation, private lawsuits, injunctions, back pay or front pay, compensatory and punitive damages where available, and corrective-action or recordkeeping orders under the employment statutes. FCRA violations can lead to consumer claims, statutory or actual damages, attorney’s fees, and FTC enforcement, while misleading accuracy, bias, compliance, or effectiveness claims and unfair data practices may create additional FTC Act exposure. The size and type of penalty depend on the instrument implicated, the company’s role, the…" } ] }, { "id": "brief:infra--at", "sector": "infra", "geo": "at", "sector_name": "Data Centers & Infrastructure", "geo_name": "Austria", "url": "/brief/infra--at.html", "overview": "As of August 7, 2026, an AI or cloud operator in Austria must comply with directly applicable European Union rules, including the General Data Protection Regulation, the Artificial Intelligence Act, the Data Act, the Digital Operational Resilience Act, and the Network and Information Security Directive, where relevant, plus Austrian infrastructure and data-protection laws. Sector-specific Austrian requirements already apply today depending on the business, particularly cybersecurity, data-center energy reporting, facility permits, electricity-market rules, and data protection, while the main duties under the Austrian Network and Information Systems Act 2026 for covered cloud, data-center, and managed-service providers begin on October 1, 2026; physical infrastructure also requires early coordination with provincial planning, building, and environmental authorities.", "instruments": [ { "name": "Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026)", "status": "adopted, phasing in", "year": 2026, "url": "https://ris.bka.gv.at/eli/bgbl/i/2025/94/P0/NOR40273913", "summary": "Austria's NIS2 implementation law covers, among others, providers of cloud-computing services, data-center services, managed services and public electronic communications, subject to scope and size thresholds. Core registration, risk-management, incident-reporting, governance and supervisory requirements generally apply from October 1, 2026; data-center services are specifically captured at 5 MW IT capacity and…" }, { "name": "Bundes-Energieeffizienzgesetz (EEffG)", "status": "in force", "year": 2014, "url": "https://www.ris.bka.gv.at/geltendefassung.wxe?abfrage=bundesnormen&gesetzesnummer=20008914", "summary": "Owners and operators of Austrian data centers with at least 500 kW of installed IT electrical capacity must publish and annually update specified information, including capacity, traffic, stored and processed data, energy-efficiency indicators, water use, waste-heat use and renewable-energy use. The reporting obligation has applied since May 15, 2024, subject to limited exceptions such as defense and…" }, { "name": "Datenschutzgesetz (DSG)", "status": "in force", "year": 2018, "url": "https://www.ris.bka.gv.at/GeltendeFassung.wxe?Abfrage=Bundesnormen&Gesetzesnummer=10001597", "summary": "The DSG supplements the GDPR in Austria and constitutionally protects the confidentiality of personal data. It matters to AI and cloud companies processing customer, employee, telemetry, identity, training or inference data, including through Austrian public-sector or regulated-industry deployments." }, { "name": "Gewerbeordnung 1994 (GewO 1994)", "status": "in force", "year": 1994, "url": "https://www.ris.bka.gv.at/geltendefassung.wxe?abfrage=bundesnormen&gesetzesnummer=10007517", "summary": "A data center or other fixed technical installation may qualify as a commercial operating facility requiring approval before construction or operation if its machinery, operating method or equipment can affect protected interests such as neighbors, safety, health, emissions or traffic. The approval analysis should cover generators, cooling systems, batteries, fuel storage, noise, emergency systems and substantial…" }, { "name": "Elektrizitätswirtschaftsgesetz (ElWG)", "status": "in force", "year": 2025, "url": "https://www.ris.bka.gv.at/geltendefassung.wxe?abfrage=bundesnormen&gesetzesnummer=20013066", "summary": "The ElWG is relevant where a technology company owns or operates generation, storage, charging, aggregation or flexibility assets, or otherwise acts as an electricity undertaking rather than merely consuming power. It provides the Austrian framework for electricity-market participation, network access, metering and data use, balancing and flexibility services, and related authorization requirements." } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The main Austrian authorities are the Federal Ministry of the Interior’s NIS authority for NISG 2026 supervision, the Austrian Data Protection Authority (Datenschutzbehörde) for the GDPR and Datenschutzgesetz (DSG), and E-Control for electricity-market matters under the Elektrizitätswirtschaftsgesetz (ElWG). District administrative authorities and provincial authorities are relevant for Gewerbeordnung 1994 approvals and Land-level building, zoning, environmental and waste-heat requirements; CERT.at is the national cybersecurity incident-response contact.…" }, { "q": "Do we need a license, permit, or registration?", "a": "There is no single Austrian license for an AI or cloud business. A covered cloud, data-center or managed-service provider must register and meet the NISG 2026 obligations from October 1, 2026; a fixed data-center installation may require approval under the Gewerbeordnung 1994, and data centers with at least 500 kW installed IT capacity must meet the Bundes-Energieeffizienzgesetz disclosure requirements. An ElWG authorization or market registration is relevant only if the company operates generation, storage, charging, aggregation, flexibility or other electricity-market assets, while…" }, { "q": "What are the main data and privacy obligations?", "a": "The GDPR and Austrian Datenschutzgesetz (DSG) apply to customer, employee, identity, telemetry, training and inference data. Companies must establish a lawful basis, provide transparency, control processor and subprocessor arrangements, honor data-subject rights, secure systems, assess high-risk processing through DPIAs where required, manage international transfers, and report qualifying breaches. The detailed controls depend on whether the company is controller, processor or joint controller and on the use of biometric, sensitive, public-sector or regulated-industry data." }, { "q": "Which AI-specific rules apply?", "a": "The EU AI Act applies directly, alongside the GDPR and DSG, with duties determined by the system’s role and risk category. Providers and deployers may face requirements for prohibited-practice screening, high-risk risk management, data governance, technical documentation, logging, transparency, human oversight, accuracy, cybersecurity and post-market monitoring; general-purpose AI obligations apply where the company develops or places such models on the market. The exact requirements depend on whether the company is a provider, deployer, importer or distributor and on the AI system’s intended…" }, { "q": "What are the enforcement and penalty risks?", "a": "Under NISG 2026, serious breaches can reach €10 million or 2% of worldwide annual turnover for essential entities and €7 million or 1.4% for important entities, with separate registration and cooperation offences carrying fines of up to €50,000, or €100,000 for repeat violations. GDPR enforcement can include corrective orders, processing bans and fines up to €20 million or 4% of worldwide annual turnover, while the AI Act can reach €35 million or 7% for prohibited practices and lower tiers for other breaches. Additional risks include denial or withdrawal of facility approvals,…" } ] }, { "id": "brief:infra--br", "sector": "infra", "geo": "br", "sector_name": "Data Centers & Infrastructure", "geo_name": "Brazil", "url": "/brief/infra--br.html", "overview": "As of August 5, 2026, Brazil has no comprehensive federal artificial-intelligence law in force, so there is no AI-specific rule binding you today. Your main obligations instead come from the General Data Protection Law (LGPD), overseen by the National Data Protection Authority (ANPD), covering personal data used for training, services, monitoring, identity systems, cloud operations, international transfers, and security incidents, plus internet, copyright, environmental-permitting, and child-safety rules where relevant.", "instruments": [ { "name": "Lei Geral de Proteção de Dados Pessoais (LGPD) — Lei nº 13.709/2018", "status": "in force", "year": 2018, "url": "https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709.htm", "summary": "The LGPD applies to processing operations carried out in Brazil, to activities directed at offering goods or services or processing data of individuals located in Brazil, and to personal data collected in Brazil, subject to statutory exceptions. It is relevant to AI training and evaluation datasets, inference inputs and outputs containing personal data, customer and employee systems, telemetry, identity and access…" }, { "name": "Marco Civil da Internet — Lei nº 12.965/2014", "status": "in force", "year": 2014, "url": "https://www.planalto.gov.br/ccivil_03/_ato2011-2014/2014/lei/l12965.htm", "summary": "The Internet Civil Framework governs internet connection and application providers, including cloud, hosting, platform, and AI-service operators depending on their role. It addresses privacy, security, network neutrality, preservation and disclosure of connection and application-access records, and civil liability for third-party content. Operators should classify their services and roles, maintain legally required…" }, { "name": "Lei Geral do Licenciamento Ambiental — Lei nº 15.190/2025", "status": "in force", "year": 2025, "url": "https://www.planalto.gov.br/ccivil_03/_ato2023-2026/2025/lei/l15190.htm", "summary": "Law No. 15.190/2025 establishes general federal rules for prior environmental licensing of activities or undertakings that use environmental resources, are actually or potentially polluting, or may cause environmental degradation. It entered into force 180 days after official publication. Data-center construction, expansion, operation, backup generation, cooling systems, water use, waste management, and associated…" }, { "name": "Lei nº 9.610/1998 — Lei de Direitos Autorais", "status": "in force", "year": 1998, "url": "https://www.planalto.gov.br/ccivil_03/leis/l9610.htm", "summary": "Brazil's Copyright Law protects literary, artistic, and scientific works and regulates rights of reproduction, adaptation, distribution, communication, and other exploitation. It does not establish a comprehensive AI-specific text-and-data-mining exception. AI developers and operators should therefore assess whether training-data collection, dataset reproduction, fine-tuning, retrieval, model distribution, generated…" }, { "name": "Estatuto Digital da Criança e do Adolescente — Lei nº 15.211/2025", "status": "in force", "year": 2025, "url": "https://www.planalto.gov.br/ccivil_03/_ato2023-2026/2025/lei/l15211.htm", "summary": "The statute protects children and adolescents in digital environments and applies to information-technology products or services directed to them or likely to be accessed by them, regardless of the provider's location. Law No. 15.352/2026 set its effective date as March 17, 2026. Covered providers must prioritize the best interests of minors and implement proportionate privacy, data-protection, security,…" }, { "name": "Regulamento de Comunicação de Incidente de Segurança — Resolução CD/ANPD nº 15/2024", "status": "in force", "year": 2024, "url": "https://www.gov.br/anpd/pt-br/canais_atendimento/agente-de-tratamento/comunicado-de-incidente-de-seguranca-cis", "summary": "ANPD Resolution CD/ANPD No. 15 of April 24, 2024 regulates the investigation and communication of security incidents involving personal data under the LGPD. Where an incident may cause relevant risk or harm to data subjects, the controller must communicate it to the ANPD and affected data subjects within three business days, subject to any specific statutory deadline. Cloud and AI operators should maintain…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Autoridade Nacional de Proteção de Dados (ANPD) is the principal federal authority for LGPD compliance, including international transfers and security-incident reporting. Environmental licensing is handled by the competent federal, state, or municipal authority; IBAMA acts for licensing within federal competence, while state and municipal environmental bodies handle projects allocated to them. Courts and other legally authorized authorities may require disclosure of records under the Marco Civil da Internet, and copyright or consumer disputes may involve the competent judicial or…" }, { "q": "Do we need a license, permit, or registration?", "a": "There is no general federal AI registration or operating license in force as of August 5, 2026. Data-center construction, expansion, and operation should be screened under the Lei Geral do Licenciamento Ambiental (Lei nº 15.190/2025), including backup generation, cooling, water use, waste, grid, and site works; the required license or authorization depends on the project and competent federal, state, or municipal authority. Additional construction, zoning, fire-safety, water, waste, energy, and grid approvals may also apply." }, { "q": "What are the main data and privacy obligations?", "a": "Under the LGPD (Lei nº 13.709/2018), identify a lawful basis, define purposes, observe data-minimization and transparency principles, support data-subject rights, maintain governance and security controls, and allocate controller-processor responsibilities. Apply ANPD Resolution CD/ANPD No. 19/2024 to international transfers, using an available mechanism such as adequacy, standard contractual clauses, specific contractual clauses, or global corporate rules. Under ANPD Resolution CD/ANPD No. 15/2024, a controller must notify the ANPD and affected data subjects within three business days when a…" }, { "q": "Which AI-specific rules apply?", "a": "Brazil has no comprehensive federal AI statute in force as of August 5, 2026, so there is no single AI-specific licensing or model-governance regime. AI operations remain subject to the LGPD, Marco Civil da Internet, Lei nº 9.610/1998 (Copyright Law), Lei nº 15.190/2025 for infrastructure licensing, and Lei nº 15.211/2025 when products are directed to or likely to be accessed by minors. Monitor PL 2.338/2023 and PL 6.237/2025, which remain legislative watchlist items rather than current law; obligations vary by product role, data use, infrastructure, and likelihood of access by minors." }, { "q": "What are the enforcement and penalty risks?", "a": "The ANPD may impose warnings, corrective measures, public disclosure, data blocking or deletion, restrictions on processing, suspension of database or processing operations, and a simple fine of up to 2% of Brazilian revenue excluding taxes, capped at R$50 million per infraction, plus a daily fine subject to that limit. Marco Civil, copyright, consumer, child-safety, and environmental breaches can also create judicial, administrative, civil-liability, licensing, or operational consequences, with the specific exposure depending on the conduct and responsible authority. Unlicensed or improperly…" } ] }, { "id": "brief:infra--ca-state", "sector": "infra", "geo": "ca-state", "sector_name": "Data Centers & Infrastructure", "geo_name": "California", "url": "/brief/infra--ca-state.html", "overview": "California regulates technology and AI operators through privacy, AI transparency, environmental review, energy and building standards, utility and local permits, and air-quality rules for backup generators. The California Consumer Privacy Act and California Privacy Rights Act, California privacy laws, require covered businesses handling residents’ personal information to address account, telemetry, logging, deletion, model-training, and vendor processes; regulations effective January 1, 2026 add conditional risk assessments, cybersecurity audits, and automated-decisionmaking requirements. Assembly Bill 2013, a law requiring training-data documentation for certain public generative-AI systems, and Senate Bill 942, a law requiring content disclosure, provenance, and detection tools, mainly affect AI developers and providers rather than infrastructure-only operators.", "instruments": [ { "name": "California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including 2026 CCPA regulations", "status": "in force; 2026 regulations effective January 1, 2026", "year": 2018, "url": "https://www.leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?article=&chapter=&division=3.&lawCode=CIV&part=4.&title=1.81.5.", "summary": "Applies to covered businesses that collect or process California consumers’ personal information, including information handled through cloud services, account systems, telemetry, security monitoring, model training, and AI products. Core duties include notices, purpose limitation, consumer access, deletion, correction, opt-out and sensitive-personal-information rights, service-provider and contractor contracts, and…" }, { "name": "California Environmental Quality Act (CEQA)", "status": "in force", "year": 1970, "url": "https://www.leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?article=&chapter=2.6.&division=13.&lawCode=PRC&part=&title=", "summary": "CEQA can require environmental review before a public agency approves a discretionary data-center, power, transmission, water, fuel, or related infrastructure project. For a technology or AI operator, review may address energy demand, greenhouse-gas emissions, water use, noise, air quality, traffic, habitat, and cumulative effects. The process can impose mitigation measures, redesign requirements, permit conditions,…" }, { "name": "California Building Energy Efficiency Standards (Title 24, Part 6; 2025 Energy Code)", "status": "in force; applies to covered permit applications submitted on or after January 1, 2026", "year": 2025, "url": "https://www.energy.ca.gov/programs-and-topics/programs/building-energy-efficiency-standards/2025-building-energy-efficiency", "summary": "The 2025 Energy Code governs covered new buildings and qualifying additions or alterations, including nonresidential facilities used for compute, cloud, and data-center operations. It affects envelope performance, HVAC and cooling systems, ventilation, controls, electrical systems, demand management, compliance documentation, and energy-performance calculations. Operators should integrate the code into site design,…" }, { "name": "California Green Building Standards Code (CALGreen), Title 24, Part 11", "status": "in force; 2025 CALGreen provisions effective January 1, 2026", "year": 2025, "url": "https://www.hcd.ca.gov/building-standards/calgreen", "summary": "CALGreen applies statewide to covered newly constructed buildings and, where specified, additions and alterations. For data-center and digital-infrastructure projects, it can affect planning and design, water efficiency and conservation, material conservation and resource efficiency, environmental quality, construction practices, commissioning-related documentation, and other mandatory or applicable green-building…" }, { "name": "Generative Artificial Intelligence Training Data Transparency Act (AB 2013; Civil Code Title 15.2)", "status": "in force; operative January 1, 2026", "year": 2024, "url": "https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202320240AB2013", "summary": "A developer that designs, codes, produces, or substantially modifies a generative AI system or service for public use must post documentation on its website on or before January 1, 2026, and before subsequent public availability of covered systems or substantial modifications released on or after January 1, 2022. The documentation must include a high-level dataset summary covering sources or owners, intended…" }, { "name": "California AI Transparency Act (SB 942; Business and Professions Code Chapter 25)", "status": "in force; operative January 1, 2026", "year": 2024, "url": "https://www.leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202320240SB942", "summary": "Applies to a covered provider that creates, codes, or produces a publicly accessible generative-AI system with more than 1,000,000 monthly visitors or users in California. Covered providers must make a no-cost, publicly accessible AI-detection tool available; offer users the option to include clear and conspicuous manifest disclosures identifying qualifying image, video, and audio content as AI-generated; include…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The California Privacy Protection Agency (CPPA) and California Attorney General oversee CCPA/CPRA compliance, while the California Energy Commission (CEC) administers the Energy Code and certain power-plant licensing and enforcement functions. CEQA review is handled by the applicable public-agency lead agency; local city and county building, planning, fire, zoning, and permitting departments act as authorities having jurisdiction for Title 24 and CALGreen. Air districts, CARB, utilities, and other state or local agencies may also control emissions, climate-reporting, interconnection, water,…" }, { "q": "Do we need a license, permit, or registration?", "a": "There is no single California license for operating a cloud, compute, colocation, or data-center business, but physical projects commonly require local building, zoning, fire, grading, electrical, water, wastewater, and utility approvals, plus CEQA review where a public-agency discretionary approval is involved. Backup generators and other stationary sources may require air-district permits; power facilities at or above 50 megawatts may require CEC certification, and qualifying projects may use the CEC opt-in certification process. CCPA registration is not generally required unless the…" }, { "q": "What are the main data and privacy obligations?", "a": "Covered businesses must map CCPA/CPRA duties across account data, telemetry, logs, security monitoring, model-training data, and vendor workflows, including notices, purpose limitation, access, deletion, correction, opt-out, sensitive-personal-information rights, reasonable security, and service-provider or contractor contracts. The CCPA regulations effective January 1, 2026 add conditional privacy-risk-assessment and annual cybersecurity-audit duties for specified businesses and processing activities, while ADMT access and opt-out requirements generally begin January 1, 2027 for covered…" }, { "q": "Which AI-specific rules apply?", "a": "AB 2013 applies principally when the company develops or substantially modifies a generative-AI system or service for public use, requiring website documentation summarizing covered training datasets beginning January 1, 2026. SB 942 applies to covered providers of publicly accessible generative-AI systems exceeding one million California monthly users or visitors and requires a free detection tool, manifest and latent provenance disclosures, and license-revocation procedures for disabled disclosures. Infrastructure-only cloud, compute, and colocation providers generally fall outside these…" }, { "q": "What are the enforcement and penalty risks?", "a": "CCPA violations can trigger CPPA administrative fines of up to $2,663 per violation or $7,988 per intentional violation, including violations involving consumers known to be under 16; the Attorney General may also bring civil enforcement actions, and qualifying security breaches can create statutory damages of $107 to $799 per consumer per incident or actual damages, whichever is greater. Physical-project risks include permit denial or delay, CEQA mitigation and redesign obligations, litigation, air-district enforcement, utility or energization delays, and CEC penalties for significant…" } ] }, { "id": "brief:infra--co", "sector": "infra", "geo": "co", "sector_name": "Data Centers & Infrastructure", "geo_name": "Colorado", "url": "/brief/infra--co.html", "overview": "Colorado’s rules can apply even without a Colorado headquarters if a company develops, deploys, or offers covered AI systems affecting Colorado consumers, handles Colorado residents’ personal data, or operates facilities with stationary pollution sources. For data centers and compute facilities, fuel-burning equipment such as backup generators, boilers, and turbines may require air-quality notices, construction or operating permits, monitoring, records, and reports under the Colorado Air Pollution Prevention and Control Act and Air Quality Control Commission Regulation 3; these sector-specific obligations bind them today if they operate such equipment, while the Colorado Artificial Intelligence Act and Colorado Privacy Act apply only when their activities meet those laws’ coverage thresholds.", "instruments": [ { "name": "Colorado Artificial Intelligence Act (SB24-205), as amended by SB25B-004", "status": "in force; SB25B-004 moved the SB24-205 requirements’ effective date to June 30, 2026", "year": 2024, "url": "https://leg.colorado.gov/bills/SB25B-004", "summary": "SB24-205 requires developers and deployers of covered high-risk artificial-intelligence systems to use reasonable care to protect consumers from known or reasonably foreseeable risks of algorithmic discrimination. The framework includes developer disclosures and documentation, information supporting deployer impact assessments, public risk-management disclosures, reporting of discovered algorithmic discrimination,…" }, { "name": "Colorado Privacy Act (SB21-190) and Colorado Privacy Act Rules (4 CCR 904-3)", "status": "in force; CPA effective July 1, 2023, with rules filed in 2023", "year": 2021, "url": "https://coag.gov/resources/colorado-privacy-act/", "summary": "The Colorado Privacy Act applies to covered controllers and processors conducting business in Colorado or targeting Colorado residents and meeting statutory thresholds. It can reach cloud platforms, AI services, telemetry and observability systems, model-input pipelines, logs, support tools, and account-management systems. Obligations include meaningful privacy notices, access, correction, deletion, portability, and…" }, { "name": "Colorado Consumer Data Security and Breach Notification Law", "status": "in force", "year": 2018, "url": "https://leg.colorado.gov/laws/session-laws/HB18-1128/266/download", "summary": "Colorado law requires entities that maintain covered personal information to implement reasonable security procedures and practices and maintain a written policy for the destruction of personal information. After discovering a possible security breach, the entity must conduct a prompt, good-faith investigation. Colorado residents generally must be notified without unreasonable delay and no later than 30 days after…" }, { "name": "Colorado Air Pollution Prevention and Control Act, C.R.S. Title 25, Article 7", "status": "in force", "year": 1979, "url": "https://cdphe.colorado.gov/index.php/aqcc-statutes-and-regulations", "summary": "The Colorado Air Pollution Prevention and Control Act, C.R.S. § 25-7-101 et seq., authorizes the state air-quality program and AQCC rules governing stationary sources. For technology and AI operators, the Act supports requirements for preconstruction review and permits, operating permits, emissions controls, monitoring, recordkeeping, reporting, inspections, enforcement, and Title V permitting for major stationary…" }, { "name": "Colorado Air Quality Control Commission Regulation 3: Stationary Source Permitting and Air Pollutant Emission Notice Requirements", "status": "in force; current version adopted November 21, 2025, and effective January 14, 2026", "year": 2025, "url": "https://cdphe.colorado.gov/index.php/aqcc-regulations", "summary": "Regulation 3 establishes Colorado’s APEN, construction-permit, general-permit, permit-exemption, operating-permit, emissions-monitoring, recordkeeping, reporting, fee, and related stationary-source requirements. It applies by source type, emissions quantity, and facility-wide aggregation, so operators must evaluate generator fleets and other emitting equipment collectively rather than unit by unit. Regulation 3 also…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Colorado Attorney General’s Office and district attorneys enforce the Colorado Privacy Act, while the Attorney General’s Office is the principal state authority for the Colorado Artificial Intelligence Act. The Colorado Department of Public Health and Environment’s Air Pollution Control Division administers stationary-source permitting and enforcement under the Colorado Air Pollution Prevention and Control Act and AQCC Regulation 3; the Air Quality Control Commission adopts the applicable air rules." }, { "q": "Do we need a license, permit, or registration?", "a": "There is no general Colorado AI, privacy, or data-center registration identified in the briefing. Facility operators must evaluate APEN and construction-permit requirements under AQCC Regulation 3 before constructing or modifying emitting equipment, including generators, boilers, turbines, and fuel-burning units; operating permits, general permits, exemptions, or Title V permits depend on source type, aggregated emissions, and facility location." }, { "q": "What are the main data and privacy obligations?", "a": "Covered controllers and processors must provide meaningful notices, honor access, correction, deletion, portability, and opt-out rights, accept recognized universal opt-out mechanisms such as Global Privacy Control, obtain consent for sensitive-data processing, minimize data, use processor contracts, complete qualifying data-protection assessments, and maintain reasonable safeguards. The Colorado Consumer Data Security and Breach Notification Law also requires written destruction policies, reasonable security procedures, prompt investigation, and notice to affected residents within 30 days…" }, { "q": "Which AI-specific rules apply?", "a": "The Colorado Artificial Intelligence Act, SB24-205 as amended by SB25B-004, applies from June 30, 2026 to covered developers and deployers of high-risk AI systems affecting Colorado consumers. It requires reasonable care against known or reasonably foreseeable algorithmic discrimination, developer documentation and disclosures, deployer impact assessments and monitoring, public risk-management disclosures, reporting of discovered discrimination, and consumer disclosure when a person interacts with AI; exact duties depend on whether the company is the developer, deployer, or provider of a…" }, { "q": "What are the enforcement and penalty risks?", "a": "Privacy and AI violations can lead to investigations and enforcement by the Colorado Attorney General’s Office and, for the Colorado Privacy Act, district attorneys; AI violations may also be treated as unfair or deceptive trade-practice violations. Air violations can result in CDPHE enforcement, monetary penalties, corrective projects, permit conditions or sanctions, and public settlements, with exposure depending on the statute, permit, emissions, violation duration, and affected community." } ] }, { "id": "brief:infra--de", "sector": "infra", "geo": "de", "sector_name": "Data Centers & Infrastructure", "geo_name": "Germany", "url": "/brief/infra--de.html", "overview": "Germany’s rules for digital infrastructure and artificial intelligence companies include the Energy Efficiency Act for qualifying data centers and certain information-technology operators, the Act on the Federal Office for Information Security, strengthened by Germany’s legislation implementing the European Union Network and Information Security Directive 2 (NIS2) from December 6, 2025, and the Critical Infrastructure Resilience Act for designated critical facilities. The European Union Artificial Intelligence Act, General Data Protection Regulation, and Data Act also apply where relevant, so sector-specific obligations do bind companies today, depending on their services, size, data processing, and whether they operate critical infrastructure.", "instruments": [ { "name": "Energy Efficiency Act (EnEfG)", "status": "in force", "year": 2023, "url": "https://www.gesetze-im-internet.de/enefg/", "summary": "Applies directly to qualifying data centers and certain IT operators. The statutory data-center definition generally covers facilities with at least 300 kW of non-redundant electrical connection capacity, subject to exclusions and specific provisions. Requirements include energy-performance targets, renewable-electricity coverage, reuse of energy and waste heat, energy or environmental management systems, customer…" }, { "name": "BSI Act (BSIG), as recast by Germany’s NIS2 Implementation Act", "status": "in force since December 6, 2025", "year": 2025, "url": "https://www.gesetze-im-internet.de/bsig_2025/", "summary": "The Act of December 2, 2025, implementing the NIS2 Directive and replacing the prior 2009 BSIG framework, entered into force on December 6, 2025 and was amended on March 11, 2026. It establishes German requirements for particularly important and important entities, including risk-management measures, governance accountability, supply-chain and incident-response controls, registration, evidence and audit duties, and…" }, { "name": "Artificial Intelligence Act (Regulation (EU) 2024/1689)", "status": "in force with phased application", "year": 2024, "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj", "summary": "Applies to providers, deployers, importers, distributors, and other operators of covered AI systems and general-purpose AI models in Germany. Prohibitions and AI-literacy requirements apply from February 2, 2025; governance, penalties, and general-purpose-AI obligations began applying from August 2, 2025, while the broader regime is phased according to system category and applicable transitional rules. Relevant…" }, { "name": "General Data Protection Regulation (GDPR), supplemented by the Federal Data Protection Act (BDSG)", "status": "in force", "year": 2016, "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "summary": "Applies whenever the company processes personal data, including customer, employee, administrator, telemetry, access-log, support, or AI-training data. Cloud and infrastructure providers commonly act as processors but may also be controllers for their own operations. Obligations include a lawful processing basis, processor contracts, security measures, records and governance, retention controls,…" }, { "name": "EU Data Act (Regulation (EU) 2023/2854)", "status": "in force; generally applicable from September 12, 2025", "year": 2023, "url": "https://eur-lex.europa.eu/eli/reg/2023/2854/oj", "summary": "Directly applies to relevant providers of data-processing services, including cloud and other infrastructure providers offering services to customers in the EU, as well as to manufacturers, users, data holders, and data recipients in covered contexts. For cloud and compute operators, the most relevant requirements concern switching and porting, interoperability, removal of technical and contractual barriers,…" }, { "name": "KRITIS-Dachgesetz (Act on Strengthening the Physical Resilience of Critical Facilities)", "status": "in force since March 17, 2026, with some provisions deferred", "year": 2026, "url": "https://www.gesetze-im-internet.de/kritisdachg/", "summary": "Establishes Germany’s cross-sector physical-resilience framework for operators of facilities designated as critical. Digital-infrastructure operators are not covered merely because they operate a data center or cloud service; applicability depends on the relevant critical service, sector, facility classification, significance or threshold criteria, and any implementing rules or administrative determinations. Where…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The key German authorities are the Federal Office for Information Security (BSI) for the BSIG/NIS2 cybersecurity regime, the Federal Office of Economics and Export Control (BAFA), including its Federal Energy Efficiency Centre (BfEE), for EnEfG data-centre registration and reporting, and the Federal Network Agency (Bundesnetzagentur) for the EU Data Act. Data protection is supervised by the Federal Commissioner for Data Protection and Freedom of Information (BfDI) and, for most private-sector companies, the competent Länder data-protection authority; AI enforcement involves the designated…" }, { "q": "Do we need a license, permit, or registration?", "a": "There is no single Germany-wide license for operating cloud, compute, or data-centre infrastructure under the instruments in the briefing. Registration or reporting can nevertheless be mandatory: qualifying data centres generally must submit information to the EnEfG data-centre register, entities covered by the BSIG must register and maintain required contact and evidence arrangements, and facilities covered by the KRITIS-Dachgesetz must register after the relevant critical-facility classification; construction, energy, environmental, and site permits depend on the facility and project." }, { "q": "What are the main data and privacy obligations?", "a": "Under the GDPR and BDSG, map customer, employee, telemetry, access-log, support, security, and AI-training data; identify controller or processor status; document a lawful basis, processor contracts, security measures, retention, data-subject rights, breach response, records, privacy by design, and international-transfer safeguards. Under the EU Data Act, covered cloud and other data-processing providers must address switching, portability, interoperability, data-access rights, contractual fairness, and safeguards against unlawful third-country access, with the precise duties depending on the…" }, { "q": "Which AI-specific rules apply?", "a": "The EU AI Act applies according to the company’s role as provider, deployer, importer, distributor, or other operator of an AI system or general-purpose AI model. Relevant duties include AI literacy, prohibited-practice controls, risk classification, technical documentation, logging, quality and risk management, human oversight, cybersecurity, transparency, conformity assessment, post-market monitoring, and GPAI obligations; the applicable package depends on the system category, model role, and use case. As of August 2, 2026, the main high-risk Annex III, transparency, sandbox, and remaining…" }, { "q": "What are the enforcement and penalty risks?", "a": "The GDPR permits administrative fines up to €20 million or 4% of worldwide annual turnover, whichever is higher, while the AI Act provides thresholds up to €35 million or 7% for prohibited practices or certain data infringements, €15 million or 3% for other obligations, and €7.5 million or 1% for misleading information. EnEfG breaches can attract fines up to €100,000 for specified data-centre, management-system, and waste-heat duties and up to €50,000 for other listed breaches; the BSI can also order audits, remediation, disclosures, and other measures under the BSIG, while KRITIS-Dachgesetz…" } ] }, { "id": "brief:infra--eu", "sector": "infra", "geo": "eu", "sector_name": "Data Centers & Infrastructure", "geo_name": "European Union", "url": "/brief/infra--eu.html", "overview": "There is no single sector-wide rule that binds every operator today, but the Network and Information Security Directive 2 (NIS2), through national implementing laws, may apply to qualifying cloud, data-centre and digital-infrastructure providers, while the Critical Entities Resilience Directive may add duties if a Member State designates an operator as critical; the General Data Protection Regulation applies whenever personal data is processed. The Artificial Intelligence Act is already in force with staggered obligations, including later dates for some high-risk systems after the 2026 amendment, while the Data Act covers data access and cloud switching, the Cyber Resilience Act will set cybersecurity requirements for products with digital elements, and the Energy Efficiency Directive requires data-centre owners and operators with at least 500 kilowatts of installed information-technology power demand to report and publicly disclose specified information annually.", "instruments": [ { "name": "NIS2 Directive and Critical Entities Resilience Directive (CER)", "status": "in force; applied through national implementation and Member State designation mechanisms", "year": 2022, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555", "summary": "NIS2 applies through national implementing laws to qualifying entities in digital infrastructure, including many cloud-computing service providers, data-centre service providers, content-delivery networks, managed-service providers and managed-security-service providers, subject to scope and size rules. It requires cybersecurity risk-management measures, incident reporting, business continuity, supply-chain…" }, { "name": "General Data Protection Regulation (GDPR)", "status": "in force", "year": 2016, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679", "summary": "GDPR applies to infrastructure, cloud and AI operators that process personal data, including customer and employee data, telemetry, logs, identifiers, support records, security data, and training or evaluation data containing personal information. Operators must establish a lawful basis, provide required notices, define controller and processor roles, implement security and privacy-by-design measures, support…" }, { "name": "Artificial Intelligence Act", "status": "in force with staggered applicability, as amended in 2026", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689", "summary": "The AI Act applies to companies that develop, provide, import, distribute or deploy covered AI systems, and to providers of general-purpose AI models. Prohibitions and general provisions began applying in stages; general-purpose AI obligations began applying on 2 August 2025. Following Regulation (EU) 2026/1744, the principal high-risk-system requirements apply from 2 December 2027 for systems classified under…" }, { "name": "Data Act", "status": "in force and generally applicable from 12 September 2025", "year": 2023, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32023R2854", "summary": "The Data Act governs access to and use of data generated by connected products and related services, business-to-business and business-to-government data sharing, unfair contractual terms, and switching between data-processing services. Cloud and infrastructure providers should support export of customer data and digital assets, interoperability and open interfaces, functional equivalence where applicable, secure…" }, { "name": "Cyber Resilience Act", "status": "in force; main product obligations apply from 11 December 2027", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R2847", "summary": "The Cyber Resilience Act imposes horizontal cybersecurity requirements on manufacturers, importers and distributors of products with digital elements, which can include hardware, software, connected equipment, security products and certain infrastructure products supplied by tech or AI operators. Covered products must be designed, developed and maintained with appropriate cybersecurity, supported by vulnerability…" }, { "name": "Energy Efficiency Directive (recast)", "status": "in force; implemented through Member State measures and supplemented by Delegated Regulation (EU) 2024/1364", "year": 2023, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32023L1791", "summary": "Article 12 requires Member States to require owners and operators of data centres in their territory with installed IT power demand of at least 500 kW to make specified Annex VII energy and sustainability information publicly available by the first reporting deadline and annually thereafter, subject to trade-secret and confidentiality protections. Delegated Regulation (EU) 2024/1364 specifies the indicators and…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The relevant authorities are the Member State NIS2 competent authorities and CSIRTs, CER-designated national authorities, national data protection authorities coordinated through the EDPB, and national energy or data-centre reporting authorities. For AI, the European Commission’s AI Office supervises general-purpose AI models, while national market-surveillance and notifying authorities supervise AI systems; ENISA supports EU cybersecurity coordination, and national market-surveillance authorities also enforce the Cyber Resilience Act." }, { "q": "Do we need a license, permit, or registration?", "a": "There is no single EU-wide license for operating a data centre, cloud service, compute platform, or AI company. NIS2 may require registration or notification under the relevant Member State implementing law; CER applies if a Member State designates the operator as critical. Separate site permits and approvals—such as planning, environmental, grid, water, waste-heat, and physical-security approvals—depend on the Member State and site, while the Energy Efficiency Directive requires annual reporting and public disclosure for data centres with at least 500 kW of installed IT power demand." }, { "q": "What are the main data and privacy obligations?", "a": "Under the GDPR, determine controller and processor roles, establish lawful bases, provide notices, apply privacy by design and appropriate security, support data-subject rights, control retention and subprocessors, conduct impact assessments where required, and use valid international-transfer mechanisms. These duties cover customer and employee data, logs, telemetry, identifiers, support records, security data, and training or evaluation data containing personal information; they continue alongside the Data Act and AI Act. National data protection authorities enforce the GDPR, with the EDPB…" }, { "q": "Which AI-specific rules apply?", "a": "The AI Act applies according to the company’s role as provider, deployer, importer, distributor, or provider of a general-purpose AI model, and requires classification of prohibited, high-risk, transparency, and other covered uses. Relevant controls include technical documentation, quality management, human oversight, monitoring, incident reporting, AI literacy, and GPAI obligations; GPAI obligations began on 2 August 2025, while the briefing’s amended high-risk dates are 2 December 2027 for Article 6(2)/Annex III systems and 2 August 2028 for Article 6(1)/Annex I systems. The Cyber…" }, { "q": "What are the enforcement and penalty risks?", "a": "NIS2 requires national penalties of at least EUR 10 million or 2% of worldwide turnover for essential entities and EUR 7 million or 1.4% for important entities; GDPR fines can reach EUR 20 million or 4% of worldwide turnover. AI Act fines can reach EUR 35 million or 7% for prohibited practices, EUR 15 million or 3% for other operator obligations, and EUR 7.5 million or 1% for misleading information; CRA fines can reach EUR 15 million or 2.5%, EUR 10 million or 2%, or EUR 5 million or 1%, depending on the breach. CER, the Data Act, and Energy Efficiency Directive obligations add corrective…" } ] }, { "id": "brief:infra--fr", "sector": "infra", "geo": "fr", "sector_name": "Data Centers & Infrastructure", "geo_name": "France", "url": "/brief/infra--fr.html", "overview": "France is governed by the directly applicable European Union General Data Protection Regulation, Artificial Intelligence Act, Data Act, and Network and Information Security Directive 2 framework, plus French rules on cloud services, cybersecurity, data protection, site permits, and data-center energy performance. The main sector-specific rule today is the energy regime for data centers, including reporting and heat-reuse duties for facilities using at least 1 megawatt: it mainly binds the data-center owner or operator, while a company running software on third-party infrastructure is primarily subject to digital-service, data-processing, and cybersecurity rules.", "instruments": [ { "name": "Code de l’énergie — performance énergétique des centres de données", "status": "in force", "year": 2025, "url": "https://www.legifrance.gouv.fr/codes/section_lc/LEGITEXT000023983208/LEGISCTA000051544638/", "summary": "Data centers are subject to national rules on energy efficiency, data reporting and public disclosure. Facilities with installed power of at least 1 MW must valorize waste heat, subject to defined exemptions or technical-economic justification; non-compliance can lead to formal notice and administrative fines." }, { "name": "Loi visant à sécuriser et à réguler l’espace numérique (SREN)", "status": "in force", "year": 2024, "url": "https://www.legifrance.gouv.fr/loda/id/JORFTEXT000049563368/", "summary": "The law adds French enforcement and implementation rules for major EU digital regulations and imposes specific duties on cloud providers, including transparency about governing jurisdictions, data-access protections and certain switching or interoperability requirements. It also creates national rules affecting hosting providers and online services, including protection of minors and cooperation with authorities." }, { "name": "Loi Informatique et Libertés", "status": "in force", "year": 1978, "url": "https://www.legifrance.gouv.fr/loda/id/JORFTEXT000000886460/", "summary": "This is France’s national data-protection framework supplementing the GDPR and designating the CNIL as the French supervisory authority. It matters for AI training, inference logs, telemetry, employee monitoring, customer data, biometric or sensitive data and security measures where personal data are processed." }, { "name": "Loi n° 2018-133 du 26 février 2018 et décret n° 2018-384 — sécurité des réseaux et systèmes d’information", "status": "partially in force", "year": 2018, "url": "https://www.legifrance.gouv.fr/loda/id/JORFTEXT000036644772", "summary": "The current French NIS framework imposes risk-management, security-control and significant-incident reporting duties on covered digital service providers, including qualifying cloud services. It remains an important current baseline while France completes the transition to the broader NIS2 regime." }, { "name": "Code de l’environnement — installations classées pour la protection de l’environnement (ICPE)", "status": "in force", "year": 1976, "url": "https://www.legifrance.gouv.fr/codes/section_lc/LEGITEXT000006074220/LEGISCTA000006159282/", "summary": "A physical data center may require ICPE declaration, registration or authorization depending on equipment and quantities, including backup generators, fuel storage, batteries, refrigerants and other hazardous substances. The applicable permit, technical prescriptions, monitoring and environmental controls are site-specific and generally fall on the facility operator." } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The CNIL is the French data-protection authority under the Loi Informatique et Libertés and GDPR. The ANSSI is the national cybersecurity authority for the current NIS framework and the transition to NIS2, including qualifying cloud services. For physical facilities, the relevant authorities are generally the prefecture and DREAL for ICPE and environmental controls, together with local planning and building authorities; energy obligations are enforced by the competent administrative authority.…" }, { "q": "Do we need a license, permit, or registration?", "a": "There is generally no single France-wide licence for an AI, cloud or compute-software business. A physical data center may require an ICPE declaration, registration or authorization, plus planning, building, water-use and electricity-connection approvals depending on generators, fuel, batteries, refrigerants and other site equipment. Facilities with installed power of at least 1 MW must also address the Code de l’énergie reporting, disclosure and waste-heat valorization regime; NIS registration or notification duties depend on whether the company is a covered digital-service provider or…" }, { "q": "What are the main data and privacy obligations?", "a": "The GDPR and Loi Informatique et Libertés apply to personal data used in AI training, inference logs, telemetry, employee monitoring, customer data, biometrics and sensitive-data processing. The company must establish a lawful basis, provide required information, respect data-subject rights, apply retention and security controls, manage processor and international-transfer arrangements, and complete a DPIA where the processing presents high risk. The detailed requirements depend on whether the company acts as controller, processor or both and on the data categories and processing scale." }, { "q": "Which AI-specific rules apply?", "a": "The EU AI Act applies directly in France, with obligations depending on whether the company provides, deploys, imports or distributes an AI system and on its risk classification, including prohibited, high-risk, transparency or general-purpose-AI rules. The Loi Informatique et Libertés and GDPR remain relevant where the system processes personal data, while SREN supplies French implementation and enforcement provisions for certain digital and cloud activities. A company merely operating software on third-party infrastructure will usually face the AI, data and cybersecurity rules directly,…" }, { "q": "What are the enforcement and penalty risks?", "a": "The CNIL can issue orders, restrict or suspend processing and impose GDPR fines of up to €20 million or 4% of worldwide annual turnover, whichever is higher; simplified French proceedings can impose up to €20,000 and daily penalty payments can apply. Under the Code de l’énergie, failure to comply after formal notice with applicable data-center obligations can lead to an administrative fine of up to €50,000 per data center, while certain broader energy-efficiency breaches can reach 2% of turnover or 4% for a repeat violation. Cybersecurity, cloud, SREN and ICPE breaches can also lead to…" } ] }, { "id": "brief:infra--ny", "sector": "infra", "geo": "ny", "sector_name": "Data Centers & Infrastructure", "geo_name": "New York", "url": "/brief/infra--ny.html", "overview": "New York’s current rules for artificial intelligence and digital-infrastructure operators, including data centers, cloud platforms, and energy-intensive computing facilities, mainly cover site approval, environmental review, building and energy standards, cybersecurity, and data-breach response. Executive Order No. 62, issued July 14, 2026, temporarily pauses certain incomplete discretionary state permits for qualifying data centers that consume or could consume at least 50 megawatts, but does not stop local approvals or apply to every facility of that size; the Stop Hacks and Improve Electronic Data Security Act (SHIELD Act) also requires reasonable safeguards for New York residents’ private data and breach notifications. The Responsible AI Safety and Education Act (RAISE Act), as amended in 2026, will apply to qualifying large frontier-model developers from January 1, 2027; no sector-specific rule currently binds every operator, but local zoning, utility connections, water, air, wastewater, and other permits may apply.", "instruments": [ { "name": "Executive Order No. 62: Establishing a Temporary Moratorium on Data Centers in New York", "status": "in force", "year": 2026, "url": "https://www.governor.ny.gov/executive-order/no-62-establishing-temporary-moratorium-data-centers-new-york-while-state-develops", "summary": "Issued July 14, 2026. The order covers data centers or contiguous-site facilities with characteristics such as high-density computing, specialized cooling, cloud or data-processing operations, and energy consumption or capability of 50 MW or more, subject to specified exclusions for facilities primarily used for manufacturing, research, education, or medical care. Until the Department of Public Service submits the…" }, { "name": "State Environmental Quality Review Act (SEQRA), ECL Article 8, and 6 NYCRR Part 617", "status": "in force", "year": 1975, "url": "https://dec.ny.gov/regulatory/permits-licenses/seqr", "summary": "SEQRA applies when a state, regional, or local agency must exercise discretionary approval, funding, or direct action. Data-center construction, expansion, utility-related work, and associated infrastructure may require environmental assessment and, depending on significance, a full environmental impact statement. Current review should account for energy demand, water use and quality, air emissions, noise, and…" }, { "name": "New York State Uniform Fire Prevention and Building Code and Energy Conservation Construction Code", "status": "in force", "year": 2025, "url": "https://dos.ny.gov/notice-adoption", "summary": "The 2025 Uniform Code and 2025 Energy Code were adopted July 25, 2025, and became fully effective December 31, 2025. Building-permit applications submitted on or after that date must comply with the 2025 codes, including requirements affecting commercial data-center buildings and their structural, electrical, mechanical, fire-protection, and energy systems. New York also permits more restrictive local construction…" }, { "name": "New York SHIELD Act, including General Business Law §§ 899-aa and 899-bb", "status": "in force", "year": 2019, "url": "https://ag.ny.gov/resources/organizations/data-breach-reporting/shield-act", "summary": "The Stop Hacks and Improve Electronic Data Security Act, signed July 25, 2019, amended New York’s breach-notification law and added a broader data-security obligation. A person or business that owns or licenses computerized data containing New York residents’ private information must develop, implement, and maintain reasonable administrative, technical, and physical safeguards. The law covers unauthorized access as…" }, { "name": "Responsible Artificial Intelligence Safety and Education (RAISE) Act framework, Chapter 699 of the Laws of 2025, as amended by Chapter 96 of the Laws of 2026", "status": "enacted; effective January 1, 2027", "year": 2026, "url": "https://assembly.ny.gov/leg/?Actions=Y&Memo=Y&Summary=Y&Text=Y&Votes=Y&bn=A09449&leg_video=1&term=", "summary": "The enacted RAISE framework, originally enacted in Chapter 699 of the Laws of 2025 and amended by Chapter 96 of the Laws of 2026, applies to qualifying frontier models developed, deployed, or operating in New York and to large frontier-model developers. It requires a frontier-AI framework and safety protocols, disclosure of specified information, periodic summaries of catastrophic-risk assessments, and reporting of…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "Key authorities are the New York State Department of Environmental Conservation (DEC) for SEQRA and environmental permits; the Department of State and State Fire Prevention and Building Code Council for the Uniform and Energy Codes; the Department of Public Service (DPS) for utility and interconnection matters; and local governments and building officials for zoning, construction, and local approvals. The New York Attorney General enforces the SHIELD Act and the RAISE Act, while the Governor’s Executive Order No. 62 directs the temporary data-center moratorium and related state work." }, { "q": "Do we need a license, permit, or registration?", "a": "There is no single statewide data-center, cloud, or compute-operator license identified in the briefing. Projects commonly require local zoning and building approvals, SEQRA review under ECL Article 8 and 6 NYCRR Part 617, and permits or approvals tied to utilities, air, water withdrawals, wastewater, and other site impacts; the exact package depends on the facility, location, and activities. Covered data centers consuming or capable of consuming at least 50 MW may also face Executive Order No. 62’s hold on specified incomplete discretionary DEC permissions, but the order does not block local…" }, { "q": "What are the main data and privacy obligations?", "a": "Under the New York SHIELD Act, a business that owns or licenses computerized data containing New York residents’ private information must maintain reasonable administrative, technical, and physical safeguards. Unauthorized access or acquisition can trigger notice to affected residents and specified New York authorities as soon as reasonably possible and without unreasonable delay, subject to statutory exceptions; cloud, colocation, managed-compute, and AI providers should allocate these duties contractually when processing customer data." }, { "q": "Which AI-specific rules apply?", "a": "The enacted RAISE Act framework, consisting of Chapter 699 of the Laws of 2025 as amended by Chapter 96 of the Laws of 2026, takes effect January 1, 2027 and applies to qualifying frontier models and large frontier-model developers connected to New York. Covered developers must maintain a frontier-AI framework and safety protocols, make specified disclosures, provide periodic catastrophic-risk assessment summaries, and report critical safety incidents to the state within 72 hours after facts support a reasonable belief that an incident occurred; application depends on whether the company is a…" }, { "q": "What are the enforcement and penalty risks?", "a": "The Attorney General may seek injunctive relief, restitution, and penalties for SHIELD Act violations, while RAISE Act violations can carry civil penalties of up to $1 million for a first violation and $3 million for each subsequent violation. Separate exposure can arise from denied or delayed DEC permits, SEQRA deficiencies, building-code enforcement, local approval violations, and utility or environmental noncompliance; the practical consequences depend on the violated instrument and project stage." } ] }, { "id": "brief:infra--tx", "sector": "infra", "geo": "tx", "sector_name": "Data Centers & Infrastructure", "geo_name": "Texas", "url": "/brief/infra--tx.html", "overview": "Texas requirements depend on whether you are an AI or software company, a data-center operator, or both. Today, no single rule binds every operator: the Texas Responsible Artificial Intelligence Governance Act, Texas Data Privacy and Security Act, and biometric-identifier rules may apply based on your activities, while large computing facilities may also face Electric Reliability Council of Texas and Public Utility Commission of Texas electricity-planning rules, plus air, water, wastewater, and stormwater permits. Federal export controls, consumer-protection law, and industry-specific cybersecurity rules may also apply, but they are outside this Texas-focused summary.", "instruments": [ { "name": "Texas Responsible Artificial Intelligence Governance Act (House Bill 149; Business & Commerce Code Chapter 551)", "status": "in force effective January 1, 2026", "year": 2025, "url": "https://capitol.texas.gov/billlookup/BillSummary.aspx?Bill=HB149&LegSess=89R", "summary": "HB 149 creates Texas’s AI-specific regulatory framework. Its operative provisions primarily address persons that develop or deploy AI systems in Texas and specified conduct involving those systems, rather than applying merely because a company offers a product or service used by Texas residents. The Act prohibits specified harmful, rights-impairing, discriminatory, social-scoring, and sexually…" }, { "name": "Texas Data Privacy and Security Act (Business & Commerce Code Chapter 541)", "status": "in force effective July 1, 2024", "year": 2023, "url": "https://statutes.capitol.texas.gov/Docs/BC/pdf/BC.541.pdf", "summary": "The TDPSA applies to covered controllers conducting business in Texas or producing products or services consumed by Texas residents, subject to statutory thresholds and exemptions. AI, cloud, and software companies that determine the purposes and means of processing Texas residents’ personal data may need privacy notices, consumer-rights processes, data minimization and purpose-limitation controls, consent for…" }, { "name": "Texas Capture or Use of Biometric Identifier Act (Business & Commerce Code Chapter 503)", "status": "in force", "year": 2009, "url": "https://statutes.capitol.texas.gov/Docs/BC/pdf/BC.503.pdf", "summary": "Chapter 503 governs commercial capture, possession, disclosure, and destruction of biometric identifiers, including retina or iris scans, fingerprints, voiceprints, and records of hand or face geometry. A covered operator must provide notice and obtain consent before commercial capture, may not sell, lease, or disclose the identifier absent the statutory conditions and consent, must protect and destroy identifiers…" }, { "name": "Senate Bill 6: Large-Load Planning, Interconnection, and Demand Management (Public Utility Regulatory Act, Utilities Code, and Water Code)", "status": "in force effective June 20, 2025; key requirements depend on PUCT/ERCOT implementation", "year": 2025, "url": "https://capitol.texas.gov/billlookup/BillSummary.aspx?Bill=SB6&LegSess=89R", "summary": "SB 6 requires the Public Utility Commission of Texas to adopt standards for interconnecting large-load customers in the ERCOT region and addresses co-location, transmission planning, financial commitments, expedited interconnection, backup generation, and demand management. The statute expressly requires a reliability service for large-load customers with demand of at least 75 MW and requires curtailment protocols…" }, { "name": "Texas Clean Air Act and TCEQ Air-Permit Rules", "status": "in force", "year": 1989, "url": "https://statutes.capitol.texas.gov/GetStatute.aspx?Code=HS&Value=382.051", "summary": "Data-center and AI-compute operators using diesel or natural-gas backup generators, emergency engines, fire pumps, boilers, cooling equipment, or on-site generation must determine whether construction and operating authorization is required under the Texas Clean Air Act and TCEQ rules, including 30 TAC Chapters 106 and 116. Depending on the equipment and emissions profile, authorization may involve permit-by-rule,…" }, { "name": "Texas Water Code and TCEQ TPDES, Stormwater, and Industrial-Wastewater Requirements", "status": "in force", "year": 1977, "url": "https://www.tceq.texas.gov/permitting/wastewater/industrial/", "summary": "A data center or dedicated cooling facility may require authorization for cooling-tower blowdown, reverse-osmosis reject, process wastewater, sanitary wastewater, construction stormwater, or industrial stormwater. Depending on the discharge and site, the operator may need TPDES coverage, an individual or general permit, a Texas Land Application Permit, pretreatment approval, or other TCEQ authorization. Project…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Texas Attorney General is the principal enforcer for the Texas Data Privacy and Security Act, biometric-identifier rules, and AI-related requirements; the Texas Artificial Intelligence Council and Department of Information Resources support implementation of the Texas Responsible Artificial Intelligence Governance Act. The Public Utility Commission of Texas and ERCOT oversee SB 6 large-load planning, interconnection, demand management, and reliability requirements, while the Texas Commission on Environmental Quality handles air, water, wastewater, and stormwater authorizations.…" }, { "q": "Do we need a license, permit, or registration?", "a": "There is no single Texas license required merely to operate an AI, cloud, or compute business. A facility may need TCEQ air authorization under the Texas Clean Air Act and 30 TAC Chapters 106 or 116, plus TPDES, Texas Land Application Permit, pretreatment, stormwater, water-supply, or related approvals depending on its generators, cooling systems, water use, and discharges. Large loads subject to SB 6 may also face PUCT/ERCOT interconnection standards, site-control and financial-commitment requirements, and an initial transmission-screening study fee of at least $100,000; registration may…" }, { "q": "What are the main data and privacy obligations?", "a": "Under the Texas Data Privacy and Security Act, a covered controller may need privacy notices, consumer-rights procedures, data minimization and purpose limitation, sensitive-data consent, opt-outs for targeted advertising and profiling, processor contracts, data-protection assessments, and reasonable administrative, technical, and physical security. A pure infrastructure provider generally has processor-level duties, while a company determining the purposes and means of processing is treated as a controller. Commercial capture or use of fingerprints, voiceprints, iris or retina scans, or hand…" }, { "q": "Which AI-specific rules apply?", "a": "The Texas Responsible Artificial Intelligence Governance Act, House Bill 149 and Business & Commerce Code Chapter 551, is in force effective January 1, 2026, for persons that conduct business in Texas, provide products or services used by Texas residents, or develop or deploy AI systems in Texas. It prohibits specified harmful, rights-impairing, discriminatory, social-scoring, and sexually explicit-content-related AI conduct and imposes targeted disclosure duties on specified users, including governmental agencies and health-care service providers. A cloud, hosting, or compute operator is not…" }, { "q": "What are the enforcement and penalty risks?", "a": "The Texas Attorney General has exclusive enforcement authority under the Texas Data Privacy and Security Act and may seek injunctions and civil penalties of up to $7,500 per violation after the statutory cure process; the Act provides no private right of action. Biometric-identifier violations can carry civil penalties of up to $25,000 per violation, enforceable by the Attorney General. Environmental violations may trigger TCEQ enforcement, while SB 6 creates additional PUCT financial-penalty exposure for covered expedited-interconnection customers that fail to curtail load or deploy backup…" } ] }, { "id": "brief:infra--uk", "sector": "infra", "geo": "uk", "sector_name": "Data Centers & Infrastructure", "geo_name": "United Kingdom", "url": "/brief/infra--uk.html", "overview": "The United Kingdom has no single generally applicable artificial intelligence law: operators are mainly governed by the United Kingdom General Data Protection Regulation and the Data Protection Act 2018, the Privacy and Electronic Communications Regulations, cyber-security and electronic-communications rules, national-security investment screening, copyright, product-safety and environmental laws. Sector-specific obligations bind you today only if your activities trigger them, such as operating public electronic communications networks under the Communications Act 2003 as amended by the Telecommunications (Security) Act 2021, providing connected or regulated products, or running facilities needing environmental permits; the Data (Use and Access) Act 2025 introduces further changes in phases. Cloud, computing, data-centre and AI-service operators should therefore assess these existing regimes rather than look for one dedicated AI framework.", "instruments": [ { "name": "Data Protection Act 2018 (supplementing the UK GDPR)", "status": "in force; amended by the Data (Use and Access) Act 2025 with some changes subject to phased commencement", "year": 2018, "url": "https://www.legislation.gov.uk/ukpga/2018/12/contents", "summary": "Applies whenever the operator processes personal data, including customer, employee, account, telemetry, biometric, support, security-log or training data. Obligations include lawful and transparent processing, purpose limitation, minimisation, retention, security, processor and subprocessor governance, data-subject rights, international-transfer controls, breach procedures, DPIAs where required, and safeguards for…" }, { "name": "Network and Information Systems Regulations 2018", "status": "in force", "year": 2018, "url": "https://www.legislation.gov.uk/uksi/2018/506/contents", "summary": "Applies to specified operators of essential services and relevant digital service providers, including qualifying cloud-computing services, subject to the statutory definitions, thresholds and regulator arrangements. In-scope operators must take appropriate and proportionate security measures, manage risks to network and information systems, maintain resilience and report qualifying incidents to the competent…" }, { "name": "National Security and Investment Act 2021", "status": "in force", "year": 2021, "url": "https://www.legislation.gov.uk/ukpga/2021/25/contents", "summary": "Creates mandatory notification requirements for qualifying acquisitions in specified activities within 17 defined areas, including artificial intelligence, communications, computing hardware, data infrastructure and energy, but coverage depends on the detailed activities, entity or asset definitions and transaction facts in the Act and regulations. It also permits voluntary notification and government call-in of…" }, { "name": "Privacy and Electronic Communications (EC Directive) Regulations 2003", "status": "in force; amended by subsequent legislation, including the Data (Use and Access) Act 2025", "year": 2003, "url": "https://www.legislation.gov.uk/uksi/2003/2426/contents", "summary": "Overlays the UK GDPR for electronic communications. It is material to AI and infrastructure operators using cookies or similar technologies, device and terminal-access technologies, direct electronic marketing, online identifiers, communications traffic or location data, and certain public communications services. Operators must obtain consent where required, provide prescribed information and respect marketing,…" }, { "name": "Copyright, Designs and Patents Act 1988", "status": "in force", "year": 1988, "url": "https://www.legislation.gov.uk/ukpga/1988/48/contents", "summary": "Governs copyright and related rights in software, code, datasets, text, images, audio, video, broadcasts, databases and other content used, hosted, generated or processed by AI and cloud operators. Relevant controls include rights clearance for training and fine-tuning data, lawful ingestion and indexing, licensing and contractual restrictions, database rights, reproduction and communication to the public, employee…" }, { "name": "Telecommunications (Security) Act 2021 and related Communications Act 2003 telecoms-security framework", "status": "in force for providers of public electronic communications networks or services, with Ofcom oversight and related codes, directions and regulations", "year": 2021, "url": "https://www.legislation.gov.uk/ukpga/2021/31/contents", "summary": "Applies to public electronic communications networks and services, not merely private internal data-centre networks or ordinary cloud services. Covered providers must take appropriate and proportionate measures to identify, reduce and prepare for security compromises, protect network and service availability, performance, functionality and confidentiality, manage supply-chain and vendor risks, comply with applicable…" }, { "name": "Environmental permitting regimes: Environmental Permitting (England and Wales) Regulations 2016; Environmental Authorisations (Scotland) Regulations 2018; and Northern Ireland pollution, waste and water regimes", "status": "in force; requirements vary by UK nation and activity", "year": 2016, "url": "https://www.gov.uk/guidance/check-if-you-need-an-environmental-permit", "summary": "Physical AI and digital-infrastructure assets must be assessed by location and activity. In England and Wales, the Environmental Permitting (England and Wales) Regulations 2016 can require permits for regulated installations, medium combustion plant, specified generators, waste operations, water discharges and related activities. Scotland uses the Environmental Authorisations (Scotland) Regulations 2018, including…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Information Commissioner’s Office (ICO) oversees UK GDPR, the Data Protection Act 2018 and PECR, while Ofcom oversees public electronic communications and telecoms-security duties. NIS oversight depends on the service and designated competent authority; national-security matters are handled by the Secretary of State through the Investment Security Unit in the Cabinet Office. Environmental permissions are handled by the Environment Agency in England, Natural Resources Wales, SEPA in Scotland and the relevant Northern Ireland environmental authority, depending on site and activity." }, { "q": "Do we need a license, permit, or registration?", "a": "There is no single UK operating licence for an AI, cloud, compute or data-centre business. The main permission risk is location- and activity-specific environmental permitting under the Environmental Permitting (England and Wales) Regulations 2016, the Environmental Authorisations (Scotland) Regulations 2018 or Northern Ireland regimes, covering matters such as backup generators, combustion plant, waste, water abstraction, discharges and emissions. Public electronic communications services and qualifying NIS digital-service providers may also face sector-specific authorisation, designation,…" }, { "q": "What are the main data and privacy obligations?", "a": "The UK GDPR and Data Protection Act 2018 require a lawful basis, transparency, purpose limitation, minimisation, retention controls, security, processor and subprocessor governance, data-subject rights, international-transfer safeguards, breach procedures and DPIAs where required. PECR adds rules for cookies and similar technologies, device access, direct marketing, communications traffic and location data. The Data (Use and Access) Act 2025 amends the framework, including areas concerning automated decision-making and PECR, so commencement and transitional provisions must be checked." }, { "q": "Which AI-specific rules apply?", "a": "The UK has no generally applicable AI Act; AI risks are mainly regulated through the UK GDPR and Data Protection Act 2018, PECR, the Copyright, Designs and Patents Act 1988, NIS, telecoms-security, consumer, safety and sector-specific regimes. NSI has a defined artificial-intelligence sector for qualifying acquisitions, and copyright controls apply to training, fine-tuning, hosted or generated content, subject to the UK’s specific text-and-data-mining exceptions. The EU AI Act must be assessed separately where the business places systems, models or related services on the EU market or into…" }, { "q": "What are the enforcement and penalty risks?", "a": "The ICO can issue UK GDPR fines up to £17.5 million or 4% of worldwide annual turnover, whichever is higher; NIS penalties can reach £17 million for the most serious material contraventions. NSI non-compliance can lead to a business penalty of up to 5% of worldwide turnover or £10 million, whichever is higher, plus criminal penalties, while Ofcom can impose up to 10% of relevant turnover or £100,000 per day for continuing telecoms-security failures. Environmental breaches can trigger permit suspension, prosecution and, in England, unlimited variable monetary penalties; copyright infringement…" } ] }, { "id": "brief:infra--us", "sector": "infra", "geo": "us", "sector_name": "Data Centers & Infrastructure", "geo_name": "US Federal", "url": "/brief/infra--us.html", "overview": "No single federal law specifically governs private AI-infrastructure operators today, but they may face export controls on advanced-computing equipment and support, Clean Air Act permits and emissions limits for data-center power systems, consumer-protection rules covering privacy, cybersecurity, breach reporting, and AI claims, and state laws affecting sites and data handling. The Cybersecurity Incident Reporting for Critical Infrastructure Act requires covered critical-infrastructure entities to report certain cyber incidents once its implementing rule takes effect, while Department of Justice restrictions limit some transfers of bulk sensitive personal data and United States government-related data. Federal agencies and their contractors must meet the Federal Information Security Modernization Act’s security requirements, and cloud providers serving agencies may need the Federal Risk and Authorization Management Program’s security assessment, but no sector-specific rule binds every private operator today.", "instruments": [ { "name": "Export Administration Regulations (EAR), under the Export Control Reform Act of 2018 (ECRA)", "status": "in force", "year": "EAR regulatory framework: 1979; ECRA: 2018", "url": "https://www.bis.gov/regulations/ear", "summary": "The EAR, administered by the Bureau of Industry and Security under authority principally supplied by ECRA, controls exports, reexports, transfers, and specified activities involving advanced-computing integrated circuits, servers, software, technology, and related services. AI-cloud and data-center operators should classify products and technology, screen customers, end users, owners, destinations, and transactions,…" }, { "name": "Clean Air Act and implementing stationary-source air rules", "status": "in force", "year": "1970; major amendments 1990", "url": "https://www.epa.gov/stationary-sources-air-pollution/clean-air-act-resources-data-centers", "summary": "Data-center stationary combustion turbines, engines, and backup generators may be subject to Clean Air Act new-source-performance standards, hazardous-air-pollutant standards, monitoring, recordkeeping, and federal or delegated air permits. State and local air agencies issue most facility permits under programs implementing federal minimum requirements. Site design, generator type, fuel, emissions, operating hours,…" }, { "name": "Federal Trade Commission Act Section 5", "status": "in force", "year": "1914; Section 5 amended and expanded in 1938", "url": "https://www.ftc.gov/legal-library/browse/statutes/federal-trade-commission-act", "summary": "Section 5 of the FTC Act prohibits unfair or deceptive acts or practices and is a principal federal basis for enforcement involving privacy representations, cybersecurity promises, AI and model-performance claims, data practices, and security controls. Cloud and AI operators should align disclosures, contracts, retention and deletion practices, security controls, incident response, consumer-rights processes, and…" }, { "name": "Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) and CISA implementing rulemaking", "status": "CIRCIA statute in force; implementing rule not final or effective as of August 5, 2026", "year": "2022; NPRM 2024; supplemental stakeholder engagement 2026", "url": "https://www.cisa.gov/topics/cyber-threats-and-advisories/cyber-incident-reporting-critical-infrastructure-act-circia", "summary": "CIRCIA, enacted as Division Y of the Consolidated Appropriations Act, 2022, requires CISA to establish reporting requirements for covered critical-infrastructure entities concerning covered cyber incidents and ransom payments. CISA published an NPRM on April 4, 2024 and continued rulemaking and stakeholder engagement in 2026; the NPRM is not final law. Data-center, cloud, managed-service, and AI-infrastructure…" }, { "name": "DOJ Data Security Program, 28 C.F.R. Part 202", "status": "in force from April 8, 2025; specified due-diligence, audit, annual-reporting, and rejected-transaction reporting requirements effective October 5, 2025", "year": "Executive Order 14117: 2024; final rule: 2025", "url": "https://www.justice.gov/nsd/data-security", "summary": "The DOJ Data Security Program implements Executive Order 14117 through regulations issued under the International Emergency Economic Powers Act. It prohibits or restricts certain transactions that provide countries of concern or covered persons access to U.S.-government-related data or Americans' bulk sensitive personal data, including genomic, geolocation, biometric, health, and financial data. Cloud, hosting,…" }, { "name": "Federal Information Security Modernization Act (FISMA) of 2014 and FedRAMP federal cloud certification program", "status": "in force; FedRAMP Consolidated Rules for 2026 are current program rules, with mandatory application to all stakeholders scheduled for January 1, 2027", "year": "FISMA: 2002; FISMA 2014: 2014; FedRAMP Authorization Act: 2022", "url": "https://csrc.nist.gov/topics/laws-and-regulations/laws/fisma", "summary": "FISMA 2002, as amended by the Federal Information Security Modernization Act of 2014, requires federal agencies to establish information-security programs for agency systems, including systems provided or managed by contractors or other sources, and supplies the statutory basis for agency risk-management, security-control, assessment, and incident-reporting obligations. The FedRAMP Authorization Act of 2022…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The principal federal authorities are the Bureau of Industry and Security (BIS) for the Export Administration Regulations (EAR), the Environmental Protection Agency (EPA) and delegated state or local air agencies for the Clean Air Act, the Federal Trade Commission (FTC) under Section 5, CISA for CIRCIA, and the Department of Justice National Security Division for the DOJ Data Security Program. For federal-agency cloud work, FISMA, NIST requirements, the FedRAMP program, and the relevant contracting agency also matter." }, { "q": "Do we need a license, permit, or registration?", "a": "There is no single federal AI-infrastructure registration or operating license. An EAR license may be required for specified exports, reexports, transfers, services, or support; Clean Air Act permits may be required for stationary combustion equipment based on emissions and potential to emit; and the DOJ Data Security Program may require authorization or specified safeguards for restricted transactions. FedRAMP certification supports an agency authorization-to-operate decision but does not itself grant an agency ATO, and requirements depend on the product, transaction, site, and customer." }, { "q": "What are the main data and privacy obligations?", "a": "Operators must ensure that privacy, cybersecurity, retention, deletion, incident-response, and consumer-rights practices match their representations under FTC Act Section 5 and comply with applicable state privacy, security, and breach-notification laws, including California's CCPA/CPRA. The DOJ Data Security Program adds controls for transactions involving Americans' bulk sensitive personal data or U.S.-government-related data, including due diligence, audits, reporting, contractual safeguards, and security measures. CIRCIA reporting applies only if the operator is a covered…" }, { "q": "Which AI-specific rules apply?", "a": "AI infrastructure is principally regulated through technology, data, export-control, and contracting rules rather than a comprehensive federal AI statute. The EAR may cover advanced-computing chips, servers, software, technology, cloud access, and related support; FTC Act Section 5 covers deceptive AI capability or performance claims and unfair data or security practices; and the DOJ Data Security Program can affect AI workloads that access covered bulk data. FISMA and FedRAMP requirements apply when services process federal information or are proposed for federal-agency use." }, { "q": "What are the enforcement and penalty risks?", "a": "BIS can pursue export-control enforcement for unlicensed transactions, prohibited support, or inadequate screening; EPA and air agencies can impose permit and emissions consequences; and the FTC can seek orders, monetary relief where authorized, refunds or redress, and other remedies for deceptive or unfair conduct. DOJ enforcement can restrict or penalize prohibited or noncompliant data transactions, while CIRCIA creates reporting exposure after its rule becomes effective. Federal-contract violations can produce corrective actions, loss of authorization, contract remedies, or exclusion from…" } ] }, { "id": "brief:media--at", "sector": "media", "geo": "at", "sector_name": "Media & Creative", "geo_name": "Austria", "url": "/brief/media--at.html", "overview": "As of August 7, 2026, Austria’s artificial intelligence (AI) media and creative businesses mainly follow European Union rules, including the Artificial Intelligence Act, the General Data Protection Regulation (GDPR) and the Digital Services Act, alongside Austrian copyright, likeness, online-information and service-provider laws. The Artificial Intelligence Act’s key transparency and general-purpose AI requirements are already active, including disclosure rules for synthetic media and deepfakes. No sector-specific Austrian rule appears to bind a software-only provider today, but hosting user content, running a marketplace, publishing media, advertising or using personal data can create substantially broader obligations.", "instruments": [ { "name": "Regulation (EU) 2024/1689 (Artificial Intelligence Act)", "status": "partially in force", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689", "summary": "The main AI-specific framework: prohibited practices, provider/deployer duties, general-purpose-AI requirements and transparency rules for AI-generated or manipulated content. For generative-media products, build in classification, documentation, human-oversight, copyright-policy and synthetic-content disclosure controls; Article 50 transparency obligations apply from August 2, 2026.…" }, { "name": "Regulation (EU) 2016/679 (General Data Protection Regulation)", "status": "in force", "year": 2016, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679", "summary": "Applies when the product processes identifiable faces, voices, names, prompts, user accounts, behavioral data or training data. Key issues include lawful basis, transparency, purpose limitation, data-subject rights, processor/controller allocation, DPIAs for high-risk processing and special-category or biometric-data restrictions.…" }, { "name": "Regulation (EU) 2022/2065 (Digital Services Act)", "status": "in force", "year": 2022, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065", "summary": "Relevant when the company hosts, recommends, distributes or otherwise intermediates user-generated content. It can require notice-and-action systems, explanations for moderation decisions, complaint handling, advertising transparency, protection of minors and additional risk-management duties for very large platforms.…" }, { "name": "Urheberrechtsgesetz (UrhG)", "status": "in force", "year": 1936, "url": "https://www.ris.bka.gv.at/GeltendeFassung.wxe?Abfrage=Bundesnormen&Gesetzesnummer=10001848", "summary": "Controls use of copyrighted text, images, music, film and other creative works in training, inputs, outputs, marketing and platform features. Section 78 also protects a person’s likeness where publication or distribution infringes legitimate interests, making consent, rights clearance, takedown and provenance processes central for deepfakes and synthetic likeness products.…" }, { "name": "E-Commerce-Gesetz (ECG)", "status": "in force", "year": 2001, "url": "https://www.ris.bka.gv.at/GeltendeFassung.wxe?Abfrage=Bundesnormen&Gesetzesnummer=20001703", "summary": "Sets Austrian information and identification duties for online service providers, including readily accessible provider details and contact information. It is a baseline compliance layer for SaaS, API and creator-platform websites and must be coordinated with DSA information duties where the service is an intermediary.…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "At Austrian level, the Datenschutzbehörde (DSB) supervises and enforces the GDPR, while KommAustria is Austria’s Digital Services Coordinator under the Digital Services Act and oversees intermediary services, platforms and video-sharing services. The European Commission and the AI Office remain relevant for EU-level AI Act and very-large-platform matters; Austrian AI Act market-surveillance and notifying authorities depend on the national designation and the product category. ([dsb.gv.at](https://dsb.gv.at/ueber-die-datenschutzbehoerde/aufgaben-taetigkeiten?utm_source=openai))" }, { "q": "Do we need a license, permit, or registration?", "a": "There is generally no Austrian AI licence, permit or general registration requirement for ordinary software, SaaS or API services; the ECG instead requires accessible provider-identification and contact information. A product may face additional authorisation or conformity requirements if it also operates as a regulated intermediary, publishes media, or falls within a product-specific high-risk regime. ([rtr.at](https://www.rtr.at/medien/aktuelles/publikationen/Publikationen/Publikationen_2025/DSC_Report_2024-E.pdf?utm_source=openai))" }, { "q": "What are the main data and privacy obligations?", "a": "The GDPR and Austrian Datenschutzgesetz apply to identifiable faces, voices, names, accounts, prompts, behavioural data and training data: establish a lawful basis, provide transparent notices, limit purposes, minimise data, define controller/processor roles, secure processing, honour data-subject rights and assess DPIA, biometric-data and special-category-data requirements. Breaches may require notification, and retention, international transfers, profiling and use of children’s data require product-specific controls.…" }, { "q": "Which AI-specific rules apply?", "a": "Regulation (EU) 2024/1689, the Artificial Intelligence Act, applies through its prohibited-practice, provider/deployer, general-purpose-AI and transparency rules; as of August 2, 2026, Article 50 requires disclosure measures for relevant AI-generated or manipulated content, including deepfakes and synthetic media. Generative-media providers should implement classification, technical documentation, human-oversight, copyright-policy and provenance or disclosure controls, with the exact duties depending on whether the system is GPAI, high-risk, or a limited-risk media tool." }, { "q": "What are the enforcement and penalty risks?", "a": "AI Act breaches can reach EUR 35 million or 7% of worldwide annual turnover for prohibited practices, EUR 15 million or 3% for specified operator and Article 50 obligations, and EUR 7.5 million or 1% for misleading information; SMEs and start-ups receive the lower applicable ceiling. DSA fines can reach 6% of worldwide annual turnover, with up to 5% of average daily worldwide turnover for periodic penalty payments, while GDPR enforcement by the DSB can include corrective orders and fines up to the GDPR’s statutory ceilings; Austrian UrhG, ECG, Mediengesetz and UWG exposure also includes…" } ] }, { "id": "brief:media--br", "sector": "media", "geo": "br", "sector_name": "Media & Creative", "geo_name": "Brazil", "url": "/brief/media--br.html", "overview": "As of August 5, 2026, Brazil has no general artificial intelligence (AI) law in force, and its federal AI framework, mainly Bill No. 2,338/2023, remains pending in Congress. Companies creating, hosting, distributing, recommending, monetizing, or advertising synthetic content must instead follow general rules on data use, copyright, privacy, image and voice rights, consumer and advertising accuracy, platform responsibilities, non-consensual intimate synthetic content, and child safety. Nothing sector-specific binds them today, but these horizontal and targeted rules already apply.", "instruments": [ { "name": "Lei Geral de Proteção de Dados Pessoais (LGPD) — Lei nº 13.709/2018", "status": "in force", "year": 2018, "url": "https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709compilado.htm", "summary": "Applies to personal-data processing in digital products, including identifiable faces, voices, biometric data, behavioral data, prompts, account data, training data, and generated outputs linked to identifiable people. Operators should document lawful bases and purposes, provide transparent notices, implement security and incident-response controls, honor data-subject rights, govern international transfers, assess…" }, { "name": "Marco Civil da Internet — Lei nº 12.965/2014, regulated by Decreto nº 8.771/2016 and amended by Decreto nº 12.975/2026", "status": "in force; Decreto nº 12.975/2026 entered into force on July 19, 2026", "year": 2014, "url": "https://www.planalto.gov.br/ccivil_03/_ato2011-2014/2014/lei/l12965.htm", "summary": "Establishes the federal framework for internet applications, including privacy, communications secrecy, records retention, court orders, user rights, and intermediary liability. Decreto nº 8.771/2016 remains the established implementing regulation; Decreto nº 12.975/2026 amended it and now adds platform duties concerning risk management, systemic failure, illegal or criminal third-party content, notices, paid…" }, { "name": "Código de Defesa do Consumidor — Lei nº 8.078/1990", "status": "in force", "year": 1990, "url": "https://www.planalto.gov.br/ccivil_03/leis/l8078compilado.htm", "summary": "Applies to paid or consumer-facing AI products and services, including subscriptions, creative tools, marketplaces, advertising services, and branded synthetic media. Operators must avoid misleading or abusive advertising, provide clear and accurate information about capabilities, limitations, provenance, material risks, and commercial terms, and address liability for defective or unsafe services. Interfaces,…" }, { "name": "Lei de Direitos Autorais — Lei nº 9.610/1998", "status": "in force", "year": 1998, "url": "https://www.planalto.gov.br/ccivil_03/leis/l9610.htm", "summary": "Governs reproduction, adaptation, distribution, public communication, licensing, moral rights, and related rights relevant to training inputs, prompts, outputs, music, images, video, scripts, performances, and other creative materials. Operators should document rights to ingest, store, transform, and commercially exploit protected works; define permitted-use and opt-out processes where applicable; manage attribution…" }, { "name": "Código Civil — Lei nº 10.406/2002; and Decreto nº 12.976/2026 on protection of women online and digital violence", "status": "in force; Decreto nº 12.976/2026 entered into force on July 19, 2026", "year": 2002, "url": "https://www.planalto.gov.br/ccivil_03/leis/2002/l10406compilada.htm", "summary": "The Civil Code protects personality rights, including name, pseudonym, privacy, honor, reputation, image, and commercial uses of a person's name or image; these rules are central to likeness, voice-cloning, digital replicas, endorsements, and synthetic representations. Separately, Decreto nº 12.976/2026 establishes federal platform duties for digital violence against women. It defines intimate content to include…" }, { "name": "Estatuto Digital da Criança e do Adolescente — Lei nº 15.211/2025, as amended by Lei nº 15.352/2026", "status": "in force since March 17, 2026", "year": 2025, "url": "https://www.planalto.gov.br/ccivil_03/_ato2023-2026/2025/lei/l15211.htm", "summary": "Applies to information-technology products or services directed to children or adolescents in Brazil or likely to be accessed by them, regardless of the operator's location. It requires the best interests of minors, elevated privacy, data-protection and security measures, prevention and information duties, parental-supervision tools, age-appropriate design, risk-sensitive safeguards, and controls over harmful…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The principal federal regulator is the Agência Nacional de Proteção de Dados (ANPD), which oversees the LGPD and, under Lei nº 15.211/2025, Lei nº 15.352/2026, and the related decrees, also supervises children’s digital rights. Consumer-facing products and advertising may be investigated by Senacon/DPDC and state or municipal Procons; courts and the Ministério Público remain relevant for civil rights, copyright, personality-rights, platform-liability, and digital-violence claims." }, { "q": "Do we need a license, permit, or registration?", "a": "Generally, no AI-specific license, permit, or registration is required under the instruments in force as of August 5, 2026. Companies must still satisfy ordinary corporate, tax, consumer, data-protection, and sector-specific requirements, and platform operators may need Brazilian representation, documented moderation and complaint procedures, notice-and-action channels, and evidence-preservation controls under the Marco Civil da Internet and Decreto nº 12.975/2026. The answer depends on whether the product is merely a creative tool, or also hosts, recommends, monetizes, advertises, or…" }, { "q": "What are the main data and privacy obligations?", "a": "Under the LGPD — Lei nº 13.709/2018 — companies must establish and document lawful bases, purposes, transparency notices, security and incident-response measures, data-subject rights processes, international-transfer safeguards, and governance for automated decisions. The analysis covers identifiable faces, voices, biometric and behavioral data, prompts, account data, training data, and generated outputs linked to identifiable people, with heightened controls for sensitive data and minors. The ECA Digital — Lei nº 15.211/2025, as amended by Lei nº 15.352/2026 — adds age-appropriate design,…" }, { "q": "Which AI-specific rules apply?", "a": "Brazil has no general AI statute in force as of August 5, 2026; PL No. 2.338/2023 remains pending in Congress. AI products are instead governed by the LGPD, Marco Civil da Internet and Decreto nº 12.975/2026, Código de Defesa do Consumidor, Lei nº 9.610/1998, Código Civil, Decreto nº 12.976/2026, and the ECA Digital. Decreto nº 12.976/2026 is especially specific: it treats AI-generated or manipulated intimate material as covered content, prohibits generating or modifying prohibited intimate content depicting a third party, and generally requires removal of unauthorized third-party intimate…" }, { "q": "What are the enforcement and penalty risks?", "a": "The ANPD may impose warnings, publicization, data blocking or deletion, temporary database suspension, daily fines, and a simple fine of up to 2% of Brazilian revenue, excluding taxes, capped at R$50 million per infraction under LGPD Article 52. Consumer authorities may impose CDC administrative fines calculated by factors such as the violation’s severity, economic advantage, and the provider’s financial condition, while courts may order takedowns, injunctions, damages, or activity restrictions for misleading advertising, copyright infringement, or unlawful likeness and privacy uses. Platform…" } ] }, { "id": "brief:media--ca-state", "sector": "media", "geo": "ca-state", "sector_name": "Media & Creative", "geo_name": "California", "url": "/brief/media--ca-state.html", "overview": "California has no single artificial intelligence law for media and creative companies, but several rules may apply depending on your role and data use. The California Consumer Privacy Act applies only if you meet its business thresholds and handle Californians’ personal information, with new regulations effective January 1, 2026, risk-assessment duties starting in 2026, and automated decision-making technology rules for significant decisions generally starting January 1, 2027; separate transparency rules for artificial-intelligence providers and developers also begin January 1, 2026. Nothing sector-specific binds every company today, but companies handling synthetic likenesses, deepfakes, election content, or artificial-intelligence training data may already need consent, disclosure, provenance, takedown, and moderation controls.", "instruments": [ { "name": "California Consumer Privacy Act (CCPA), as amended by CPRA", "status": "in force; 2025 CPPA amendments and regulations effective January 1, 2026", "year": 2018, "url": "https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?article=&chapter=&division=3.&lawCode=CIV&part=4.&title=1.81.5.", "summary": "Applies to a for-profit entity doing business in California that collects Californians’ personal information, determines the purposes and means of processing, and meets at least one statutory threshold: annual gross revenue above the applicable $25 million threshold, buying/selling/sharing personal information of at least 100,000 consumers or households annually, or deriving at least 50 percent of annual revenue…" }, { "name": "California AI transparency and training-data disclosure requirements (SB 942 and AB 2013)", "status": "in force; principal operative requirements effective January 1, 2026", "year": 2024, "url": "https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202320240SB942", "summary": "SB 942, the California AI Transparency Act, requires covered generative-AI providers to provide users with a plainly visible disclosure for AI-generated or altered image, video, and audio content and to provide latent or hidden disclosure/provenance functionality when technically feasible. Providers licensing covered systems must contractually preserve the disclosure capability and must revoke a license within 96…" }, { "name": "California Bot Disclosure Law (SB 1001; Business and Professions Code §§ 17940–17943)", "status": "in force; effective January 1, 2019 and operative July 1, 2019", "year": 2018, "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=BPC§ionNum=17941.", "summary": "A person using a bot to communicate or interact online with a California resident may not use it with the intent to mislead the person about its artificial identity in order to deceive about the communication’s content to incentivize a purchase or sale of goods or services or influence a vote in an election, unless the bot is clearly and conspicuously disclosed. The rule is relevant to AI customer-service agents,…" }, { "name": "Deepfake pornography provisions (Civil Code § 1708.86, as amended by AB 621)", "status": "in force; AB 621 effective January 1, 2026", "year": 2025, "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1708.86.", "summary": "The statute creates civil exposure for creating and intentionally disclosing, intentionally disclosing, or knowingly facilitating or recklessly aiding nonconsensual digitized sexually explicit material, including material depicting a person who was a minor when it was created. An operator that owns, operates, or controls a deepfake-pornography service is presumed to have engaged in creation and intentional…" }, { "name": "Election-related deceptive synthetic media restrictions (AB 2839; Elections Code § 20012)", "status": "in force, subject to a partial injunction as to named plaintiffs and ongoing litigation", "year": 2024, "url": "https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202320240AB2839", "summary": "During specified election windows, a person, committee, or other entity may not knowingly distribute with malice an advertisement or other election communication containing materially deceptive digitally created or modified audio or visual media concerning candidates, elections officials, elected officials, voting equipment, voting sites, or related election matters. The statute includes disclosure requirements and…" }, { "name": "Digital-replica publicity rights and performer-contract rules (AB 1836; Civil Code § 3344.1, and AB 2602; Labor Code § 927)", "status": "in force; both provisions effective January 1, 2025", "year": 2024, "url": "https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202320240AB1836", "summary": "AB 1836 extends California’s deceased-personality publicity-rights framework to highly realistic digital replicas. Producing, distributing, or making available a deceased personality’s digital-replica voice or likeness in an expressive audiovisual work or sound recording generally requires prior consent from the statutory rights holder, with exceptions for news, public affairs, comment, criticism, scholarship,…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The California Privacy Protection Agency (CPPA) and the California Attorney General’s Office are the principal authorities for CCPA implementation and enforcement. California courts and public prosecutors handle civil claims and enforcement involving nonconsensual sexual deepfakes, publicity rights, digital replicas, and election-related synthetic media; election officials are relevant to election-content escalation and takedown processes." }, { "q": "Do we need a license, permit, or registration?", "a": "California does not impose a general AI, synthetic-media, or creative-technology license, permit, or registration requirement in the briefing. Product-specific rights are still required: obtain documented, scope-limited consent or licensing for living or deceased persons’ voices and likenesses under Civil Code § 3344 and AB 1836, and use sufficiently specific, properly represented performer contracts under AB 2602. Whether additional requirements apply depends on the product, data role, and content being produced or distributed." }, { "q": "What are the main data and privacy obligations?", "a": "The CCPA, as amended by the CPRA, applies when a for-profit business doing business in California determines the purposes and means of processing Californians’ personal information and meets a statutory threshold, including the briefing’s applicable $25 million revenue threshold, processing at least 100,000 consumers or households, or deriving at least 50% of revenue from selling or sharing personal information. Covered operators should provide privacy notices and access, deletion, correction, and opt-out mechanisms; govern prompts, uploads, accounts, voice or likeness data, personalization,…" }, { "q": "Which AI-specific rules apply?", "a": "SB 942 requires covered generative-AI providers to give plainly visible disclosures for AI-generated or altered image, video, and audio content and, when technically feasible, latent provenance or disclosure functionality; AB 2013 requires training-dataset documentation for covered generative-AI systems. SB 1001 requires clear bot disclosure in covered deceptive commercial or election interactions, while AB 621 and Civil Code § 1708.86 address nonconsensual sexually explicit deepfakes, including service-provider facilitation. AB 2839 governs specified deceptive election synthetic media, and…" }, { "q": "What are the enforcement and penalty risks?", "a": "The CPPA and Attorney General can pursue CCPA enforcement, with administrative or civil penalties generally reaching up to $2,663 per violation and $7,988 for intentional violations under the current inflation-adjusted figures; data-breach claims can also expose a business to statutory damages of up to $750 per consumer per incident. Under Civil Code § 1708.86, private statutory damages can reach $50,000 for a nonmalicious violation and $250,000 for a malicious violation, while public prosecutors may seek $25,000 per violation or $50,000 for malicious conduct, plus injunctions and fees.…" } ] }, { "id": "brief:media--co", "sector": "media", "geo": "co", "sector_name": "Media & Creative", "geo_name": "Colorado", "url": "/brief/media--co.html", "overview": "Colorado regulates covered personal-data use and deceptive AI claims under the Colorado Privacy Act, a consumer-data privacy law, and general consumer-protection rules. Its main AI law, SB26-189, which repealed and reenacted SB24-205, governs high-impact AI, while separate laws cover public conversational-AI services, election deepfake disclosures, and nonconsensual intimate digital depictions. Most 2026 AI compliance requirements begin January 1, 2027, though some SB26-189 disclosure and enforcement provisions take effect earlier.", "instruments": [ { "name": "Colorado Privacy Act", "status": "in force", "year": 2021, "url": "https://coag.gov/resources/colorado-privacy-act/", "summary": "The Colorado Privacy Act, enacted through SB21-190 and effective July 1, 2023, applies to covered controllers and processors that process Colorado consumers' personal data. Relevant duties for generative-media and AI operators include privacy notices, access, correction, deletion and portability rights, opt-outs from sale, targeted advertising and certain profiling, consent for sensitive-data processing,…" }, { "name": "Colorado Artificial Intelligence Act (SB24-205), Consumer Protections for Artificial Intelligence", "status": "enacted; original AI provisions scheduled for repeal and reenactment through SB26-189", "year": 2024, "url": "https://leg.colorado.gov/bills/sb24-205", "summary": "SB24-205 is Colorado's original AI-specific consumer-protection framework. As enacted, it addresses high-risk artificial intelligence systems and algorithmic-discrimination risks, requires developers to provide deployers with specified system information and impact-assessment documentation, requires disclosure when a consumer interacts with an AI system intended to interact with consumers, authorizes Attorney…" }, { "name": "Automated Decision-Making Technology", "status": "enacted; most operative requirements effective January 1, 2027; specified disclosure and enforcement provisions effective May 14, 2026", "year": 2026, "url": "https://leg.colorado.gov/bills/SB26-189", "summary": "SB26-189 repeals and reenacts the principal AI provisions created by SB24-205. It covers automated decision-making technology that processes personal data and generates outputs used to make, guide or assist consequential decisions involving education, employment, housing, financial or lending services, insurance, health care, or essential government services and public benefits. Beginning January 1, 2027, developers…" }, { "name": "Conversational Artificial Intelligence Service Operator Requirements", "status": "enacted; operative requirements effective January 1, 2027", "year": 2026, "url": "https://leg.colorado.gov/bills/HB26-1263", "summary": "HB26-1263 applies to a person, partnership, corporation or entity that develops and makes publicly available a conversational artificial intelligence service or offers one to a consumer. Operators must disclose that users are interacting with AI, implement a protocol for prompts concerning suicidal ideation or self-harm, and report annually to the Attorney General on that protocol. Operators must use commercially…" }, { "name": "Candidate Election Deepfake Disclosures", "status": "in force; effective July 1, 2024", "year": 2024, "url": "https://leg.colorado.gov/bills/hb24-1147", "summary": "HB24-1147 regulates communications related to candidates for elective office that contain deepfakes produced using generative AI. A person may not distribute a communication containing an undisclosed or improperly disclosed deepfake with knowledge or reckless disregard for its deceptiveness or falsity. Required disclosures must use the statutory concept that the image, audio, video or multimedia was edited and…" }, { "name": "Preventing Unauthorized Disclosure of Intimate Digital Depictions Act / Intimate Digital Depictions Criminal & Civil Actions", "status": "in force; effective August 6, 2025", "year": 2025, "url": "https://leg.colorado.gov/bills/sb25-288", "summary": "SB25-288 creates a civil cause of action for the nonconsensual disclosure or threatened disclosure of an intimate digital depiction and updates criminal provisions involving computer-generated or digitally altered intimate material, including realistic computer depictions in child-sexual-exploitation provisions. Liability generally turns on knowing or reckless disregard of lack of consent and resulting or threatened…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Colorado Attorney General is the principal regulator for the Colorado Privacy Act, Colorado Consumer Protection Act, SB24-205, SB26-189, and the public conversational-AI requirements, including rulemaking and enforcement. The Colorado Secretary of State administers and enforces HB24-1147 election-related deepfake disclosures; Colorado courts may hear candidate actions and the civil claims authorized by SB25-288." }, { "q": "Do we need a license, permit, or registration?", "a": "The briefing identifies no Colorado-specific AI license, permit, or registration requirement for generative-media, synthetic-content, or creative-AI companies. Compliance depends instead on the product's role and use, including whether it processes covered personal data, operates a public conversational-AI service, supports election communications, or distributes intimate digital depictions; ordinary business, professional, advertising, and sector-specific requirements remain separate." }, { "q": "What are the main data and privacy obligations?", "a": "Covered controllers and processors must address Colorado Privacy Act duties including privacy notices, access, correction, deletion, portability, opt-outs from sale, targeted advertising and certain profiling, consent for sensitive-data processing, data-protection assessments, processor contracts, reasonable security, and universal opt-out mechanisms. Model training is not independently regulated as such, but training-related processing is covered when it involves personal data within the Act's scope; SB26-189 also requires covered ADMT developers and deployers to retain compliance records…" }, { "q": "Which AI-specific rules apply?", "a": "SB26-189 applies from January 1, 2027, when an automated decision-making technology processes personal data and materially influences consequential decisions in areas such as employment, housing, lending, insurance, health care, education, or essential government services; it requires technical documentation, notices, data-access and correction rights, and meaningful human review. HB26-1263 applies from January 1, 2027, to public conversational-AI services and adds AI disclosures, self-harm protocols, age estimation, and minor-safety controls; HB24-1147 governs disclosed candidate-election…" }, { "q": "What are the enforcement and penalty risks?", "a": "The Attorney General may enforce SB26-189 through the Colorado Consumer Protection Act, treating violations as deceptive trade practices; the civil penalty can reach $20,000 per violation, with a generally available 60-day cure notice before January 1, 2030 when cure is possible, subject to exceptions for knowing or repeated violations. The Secretary of State may impose at least $100 per HB24-1147 violation involving unpaid advertising or at least 10% of the amount paid or spent on the communication, and affected candidates may seek injunctions, damages, and fees; SB25-288 separately creates…" } ] }, { "id": "brief:media--de", "sector": "media", "geo": "de", "sector_name": "Media & Creative", "geo_name": "Germany", "url": "/brief/media--de.html", "overview": "In Germany, a technology or artificial intelligence (AI) operator must follow the European Union’s Artificial Intelligence Act, the General Data Protection Regulation, and, if it operates a platform or intermediary service, the Digital Services Act, alongside German rules on copyright, personal data, likenesses, advertising, cookies and electronic communications. Generative and synthetic-media businesses must address training-data rights, consent for identifiable people, labelling of synthetic content, user complaints and potentially misleading advertising. Nothing sector-specific generally requires an ordinary AI or creative-software business to obtain a German licence today, but hosting, recommendations, user content, marketplaces, video sharing or audiovisual media can trigger additional duties under the Digital Services Act and German media and digital-services rules.", "instruments": [ { "name": "Artificial Intelligence Act (Regulation (EU) 2024/1689)", "status": "in force; most provisions apply from 2 August 2026, with staggered earlier and later application dates", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689", "summary": "The central AI-specific rule for providers, deployers, importers and distributors of AI systems, and for providers of general-purpose AI models, placing systems on the EU market or using them in the EU. Relevant duties include prohibited-practice restrictions, AI-literacy measures, risk-management and conformity-assessment requirements for high-risk systems, general-purpose-model documentation and copyright-policy…" }, { "name": "General Data Protection Regulation (Regulation (EU) 2016/679)", "status": "in force; applies since 25 May 2018", "year": 2016, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679", "summary": "The core data-protection regime for personal data processed by AI and media businesses, including faces, voices, biometric data, performer and customer information, prompts, account data, moderation records and identifiable training or evaluation data. Operators must establish a lawful basis, provide required notices, respect purpose limitation, data minimisation, accuracy, retention and data-subject rights, assess…" }, { "name": "Digital Services Act (Regulation (EU) 2022/2065)", "status": "in force; generally applicable since 17 February 2024", "year": 2022, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065", "summary": "Applies conditionally when the operator provides an intermediary service, hosting service, online platform, marketplace, recommender system or similar user-to-user media function. Depending on the service category and scale, duties include points of contact, terms and conditions, notice-and-action procedures, statements of reasons, complaint and redress mechanisms, transparency reporting, trader traceability,…" }, { "name": "Telecommunications-Digital-Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, TDDDG)", "status": "in force", "year": 2024, "url": "https://www.gesetze-im-internet.de/ttdsg/", "summary": "German rules for confidentiality and privacy in telecommunications and digital services, including access to or storage of information on users’ terminal equipment. For online AI and media services, operators should assess cookie, SDK, pixel, local-storage, fingerprinting, analytics, advertising and similar tracking technologies under the TDDDG alongside the GDPR, obtain consent where required, document applicable…" }, { "name": "Copyright Act (Urheberrechtsgesetz, UrhG)", "status": "in force", "year": 1965, "url": "https://www.gesetze-im-internet.de/urhg/", "summary": "Governs protected works and related rights implicated by dataset acquisition, copying, text-and-data mining, model training, output generation, distribution, public communication, adaptation and use of performances, photographs, films and broadcasts. Operators should document lawful access to training material, assess the text-and-data-mining exceptions and rights reservations, respect licensing and contractual…" }, { "name": "Act against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb, UWG)", "status": "in force", "year": 2004, "url": "https://www.gesetze-im-internet.de/uwg_2004/", "summary": "Applies to commercial practices directed at German consumers or competitors, including advertising, influencer and advertorial content, rankings, product claims, endorsements and reviews. AI operators can face injunction, removal, information and damages exposure for misleading claims about model capabilities or media authenticity, fabricated testimonials or reviews, undisclosed commercial communications,…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "At EU level, the European Commission’s AI Office supervises general-purpose AI models and coordinates AI Act enforcement; national market-surveillance and notifying authorities handle other AI Act duties. In Germany, the relevant bodies include the competent data-protection authority—usually the relevant Landesbehörde, with the BfDI responsible for specified federal, telecommunications and postal cases—the Bundesnetzagentur as Digital Services Coordinator under the DDG, the BzKJ and, for media services, the Landesmedienanstalten." }, { "q": "Do we need a license, permit, or registration?", "a": "Ordinary AI, generative-media and creative-software products generally do not require a German operating licence or permit. Obligations can arise instead from the product’s function: high-risk AI may require conformity assessment and registration under the AI Act, while hosting, user-content, recommender, marketplace, video-sharing or broadcaster-like services can trigger DSA, DDG, TDDDG or Medienstaatsvertrag duties, depending on the service model." }, { "q": "What are the main data and privacy obligations?", "a": "Under the GDPR, faces, voices, biometric data, performer information, prompts, account data, moderation records and identifiable training or evaluation data require a documented lawful basis, notices, purpose limitation, minimisation, retention controls, data-subject rights, processor and transfer arrangements, security and privacy-by-design; high-risk processing may require a DPIA. The TDDDG requires a separate assessment of cookies, SDKs, pixels, local storage, fingerprinting, analytics and advertising access to terminal equipment, with consent where required. Identifiable likenesses also…" }, { "q": "Which AI-specific rules apply?", "a": "The AI Act applies to providers, deployers, importers, distributors and general-purpose AI-model providers placing systems on the EU market or using them in the EU. Relevant duties include prohibited-practice controls, AI literacy, high-risk risk management and conformity assessment where applicable, GPAI documentation and copyright-policy duties, and transparency or labelling for certain synthetic and manipulated content; the exact obligations depend on the system’s risk classification and whether the product is a model, AI system or platform. The UrhG governs lawful dataset access,…" }, { "q": "What are the enforcement and penalty risks?", "a": "GDPR breaches can attract administrative fines up to €20 million or 4% of worldwide annual turnover, while DSA breaches can attract German fines up to 6% of worldwide annual turnover, with up to 1% for certain misleading information or inspection failures. Under the AI Act, prohibited-practice breaches can reach €35 million or 7% of worldwide annual turnover, and other specified operator breaches up to €15 million or 3%; the competent authority and applicable procedural route depend on the obligation. German enforcement also includes DSA orders and complaints through the Bundesnetzagentur,…" } ] }, { "id": "brief:media--eu", "sector": "media", "geo": "eu", "sector_name": "Media & Creative", "geo_name": "European Union", "url": "/brief/media--eu.html", "overview": "For an European Union-facing media or creative technology operator, the main rules are the Artificial Intelligence Act (AI Act), General Data Protection Regulation (GDPR), Digital Services Act (DSA), copyright, audiovisual-media, and electronic privacy rules. As of August 5, 2026, the Artificial Intelligence Act is generally in force: its bans and general rules have applied since February 2, 2025, rules for general-purpose AI and governance since August 2, 2025, and most remaining rules, including synthetic-content transparency duties, since August 2, 2026; certain high-risk AI obligations apply from August 2, 2027. Nothing uniquely sector-specific binds the operator today solely because it is a media or creative technology business, but the applicable obligations depend on whether it processes personal data, hosts or recommends user content, provides video services, or uses advertising, cookies, tracking, electronic marketing, or communications data.", "instruments": [ { "name": "Artificial Intelligence Act", "status": "in force and generally applicable as of August 2, 2026; selected provisions applied earlier and certain high-risk obligations under Article 6(1) apply from August 2, 2027", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689", "summary": "Regulation (EU) 2024/1689 applies to relevant providers, deployers, importers, distributors, and other operators placing AI systems or general-purpose AI models on the EU market or using them in the EU, including certain operators established outside the EU where the system output is used in the Union. For media and creative operators, relevant duties include prohibited-practice restrictions, AI literacy, GPAI-model…" }, { "name": "General Data Protection Regulation", "status": "in force", "year": 2016, "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "summary": "Regulation (EU) 2016/679 governs processing of personal data in product operation, model development and evaluation, personalization, moderation, analytics, identity verification, and likeness or voice features. Identifiable facial images, voices, prompts, account data, and training or evaluation records may be personal data. Faces and voices are not automatically biometric data: the special-category rule covers…" }, { "name": "Digital Services Act", "status": "in force and fully applicable to covered services since February 17, 2024, subject to service-specific scope and the applicable rules for designated very large platforms and search engines", "year": 2022, "url": "https://eur-lex.europa.eu/eli/reg/2022/2065/oj/eng", "summary": "Regulation (EU) 2022/2065 applies according to the service model to intermediary, hosting, online-platform, marketplace, and very-large-platform or search-engine activities. A media or creative AI operator that hosts or distributes user or synthetic content may face notice-and-action procedures, statements of reasons, complaint and redress mechanisms, trusted-flagger and authority cooperation, advertising…" }, { "name": "Copyright and Related Rights in the Digital Single Market Directive", "status": "in force; implemented through Member State national law", "year": 2019, "url": "https://eur-lex.europa.eu/eli/dir/2019/790/oj", "summary": "Directive (EU) 2019/790 does not create a standalone EU rule specifically authorizing or prohibiting AI training. Its text-and-data-mining provisions provide a mandatory scientific-research exception for eligible research organizations and cultural-heritage institutions, and a broader exception for lawfully accessible works where the rightholder has not expressly reserved the right, including through appropriate…" }, { "name": "Audiovisual Media Services Directive", "status": "in force; Directive (EU) 2018/1808 amendments were required to be transposed by September 19, 2020 and operate through Member State law", "year": 2018, "url": "https://eur-lex.europa.eu/eli/dir/2018/1808/oj", "summary": "Directive (EU) 2018/1808 amends Directive 2010/13/EU and is relevant where an operator provides an audiovisual media service, on-demand audiovisual service, or video-sharing platform service, including certain services or sections of social-media products where audiovisual content is an essential functionality. Video-sharing-platform providers must take appropriate measures concerning illegal or harmful audiovisual…" }, { "name": "ePrivacy Directive", "status": "in force; implemented through Member State national law", "year": 2002, "url": "https://eur-lex.europa.eu/eli/dir/2002/58/oj", "summary": "Directive 2002/58/EC supplements data-protection law for electronic communications. It governs confidentiality of communications, security and breach-related obligations, traffic and location data, cookies and similar technologies that store information in or access a user’s terminal equipment, and unsolicited electronic marketing. A media or AI operator should assess consent or other permitted conditions for…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The European Commission, including the AI Office and its DSA enforcement function, is central for EU-level supervision; national AI market-surveillance authorities and notified bodies handle relevant AI Act functions. National data-protection authorities enforce the GDPR, coordinated by the European Data Protection Board (EDPB); national Digital Services Coordinators enforce the DSA, while national media, communications, consumer-protection, and copyright authorities apply the AVMSD, ePrivacy rules, consumer rules, and national copyright law." }, { "q": "Do we need a license, permit, or registration?", "a": "Usually there is no single EU-wide license, permit, or general registration for an AI media or creative business. Requirements depend on the product and role: audiovisual or video-sharing services may face national authorization or notification rules, DSA-covered services must meet platform obligations, and the AI Act may impose conformity, documentation, registration, or representative requirements for particular system categories rather than granting a general operating license. Copyright licensing may also be required for training inputs, outputs, or user-uploaded works under Directive…" }, { "q": "What are the main data and privacy obligations?", "a": "Under the GDPR, identifiable faces, voices, prompts, account information, training data, evaluation records, and likeness or voice features may be personal data, requiring a lawful basis, purpose limitation, minimization, transparency, retention controls, rights handling, processor and international-transfer arrangements, security, and breach procedures. Faces and voices are not automatically biometric data; the special-category rules apply when specific technical processing enables or confirms unique identification, while the ePrivacy Directive separately governs cookies, pixels, SDKs,…" }, { "q": "Which AI-specific rules apply?", "a": "As of August 2, 2026, the Artificial Intelligence Act generally applies: prohibited practices and general provisions have applied since February 2, 2025, GPAI and governance provisions since August 2, 2025, and Article 50 synthetic-content transparency duties since August 2, 2026. Relevant duties include AI literacy, disclosure when users interact with AI, machine-readable marking for certain generated or manipulated outputs, deepfake disclosure, public-interest text disclosure, and GPAI documentation and copyright-policy duties; certain Article 6(1) high-risk obligations apply from August 2,…" }, { "q": "What are the enforcement and penalty risks?", "a": "AI Act violations can reach €35 million or 7% of worldwide annual turnover for prohibited practices, and up to €15 million or 3% for specified operator obligations; GDPR violations can bring corrective orders, processing bans, and fines up to €20 million or 4% of worldwide annual turnover. DSA fines can reach 6% of worldwide annual turnover, with the European Commission primarily supervising VLOPs and VLOSEs and national Digital Services Coordinators handling other covered services; additional exposure includes national sanctions, takedowns, copyright claims, damages, and sector-specific…" } ] }, { "id": "brief:media--fr", "sector": "media", "geo": "fr", "sector_name": "Media & Creative", "geo_name": "France", "url": "/brief/media--fr.html", "overview": "A France-facing AI media company must comply with the EU AI Act, the General Data Protection Regulation (the EU privacy law), and the Digital Services Act (online-platform rules), plus French rules on data, copyright, online safety, and advertising. Near-term obligations include labelling AI-generated content, using personal data and training material lawfully, handling takedown and moderation requests, and controlling synthetic faces and voices; France also imposes criminal penalties for undisclosed, non-consensual synthetic images or audio and disclosure rules for AI-generated influencer advertising. Nothing sector-specific clearly binds the company today without knowing whether it provides AI, deploys it, hosts content, operates a platform, or intermediates advertising.", "instruments": [ { "name": "Regulation (EU) 2024/1689 (Artificial Intelligence Act)", "status": "partially in force", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex:32024R1689", "summary": "AI providers and deployers must classify systems by risk and meet transparency, governance, documentation and safety requirements. For synthetic audio, image, video and text, providers must support machine-readable detection or marking, while deployers must disclose deepfakes; most provisions apply from August 2, 2026, with some high-risk product rules later." }, { "name": "Loi Informatique et Libertés (Law No. 78-17 of January 6, 1978)", "status": "in force", "year": 1978, "url": "https://www.legifrance.gouv.fr/loda/id/JORFTEXT000000886460/", "summary": "This is France's national data-protection framework alongside the GDPR and gives the CNIL investigation, enforcement and sector-specific powers. It matters for training and operating models on faces, voices, biometric or behavioural data, user content, moderation data and analytics, including French rules on sensitive processing and individual rights." }, { "name": "Code de la propriété intellectuelle", "status": "in force", "year": 1992, "url": "https://www.legifrance.gouv.fr/codes/texte_lc/LEGITEXT000006069414/", "summary": "French copyright and related-rights rules govern training inputs, scraping, model outputs, adaptation, distribution and use of protected music, images, text, performances and audiovisual works. The text-and-data-mining exceptions require lawful access and allow rights holders to reserve their rights, including through machine-readable means; separate permission is generally needed for commercial uses outside an…" }, { "name": "Loi visant à sécuriser et à réguler l'espace numérique (SREN), including amended Code pénal Article 226-8", "status": "in force", "year": 2024, "url": "https://www.legifrance.gouv.fr/loda/id/JORFTEXT000049563368", "summary": "France's SREN law implements and supplements parts of the EU digital-services regime and strengthens national online-safety enforcement. Article 226-8 of the Criminal Code covers public dissemination of non-consensual synthetic images or speech that is not clearly identified as algorithmically generated, with higher penalties when published through an online communication service." }, { "name": "Regulation (EU) 2022/2065 (Digital Services Act), as implemented and supervised in France under SREN", "status": "in force", "year": 2022, "url": "https://eur-lex.europa.eu/eli/reg/2022/2065/oj/fra", "summary": "If the company hosts user content, operates a marketplace or provides a platform, the DSA requires notice-and-action, terms transparency, complaint handling, advertising transparency and risk controls, with enhanced duties for very large platforms. France's Arcom is the national Digital Services Coordinator and works with other authorities on enforcement." } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The CNIL supervises GDPR and the Loi Informatique et Libertés issues, including personal-data, biometric-data and security processing. Arcom is France’s Digital Services Coordinator under the SREN and DSA, working with the CNIL and DGCCRF on platform, moderation, advertising and consumer-protection matters. French courts and prosecutors may also enforce the Code pénal, including Article 226-8, and copyright disputes under the Code de la propriété intellectuelle.…" }, { "q": "Do we need a license, permit, or registration?", "a": "There is no general French AI licence or permit identified in the briefing. Registration or formal compliance steps depend on the product role: an online platform may need DSA transparency-database registration, while high-risk AI systems may require the AI Act’s conformity, documentation and governance steps. A standalone model or creative tool is not automatically subject to a sector-wide French registration merely because it uses generative AI.…" }, { "q": "What are the main data and privacy obligations?", "a": "The GDPR and Loi Informatique et Libertés require a lawful, transparent and secure basis for processing training data, user content, moderation data and analytics, with particular controls for faces, voices, biometric data and behavioural data. The company should map controller and processor roles, support data-subject rights, limit collection and retention, and document security and governance measures. Training and fine-tuning datasets must also be checked for personal data, biometric information and voice or likeness-related rights." }, { "q": "Which AI-specific rules apply?", "a": "Under Regulation (EU) 2024/1689, applicability depends on whether the company is an AI provider, deployer or another operator and on the system’s risk classification; from August 2, 2026, the main transparency, governance and safety requirements apply, including machine-readable marking for synthetic outputs and deepfake disclosure. The SREN and amended Criminal Code Article 226-8 prohibit public dissemination of non-consensual synthetic images or speech without clear algorithmic disclosure, while Law No. 2023-451 requires AI-generated influencer faces or silhouettes in advertising to be…" }, { "q": "What are the enforcement and penalty risks?", "a": "The CNIL can order compliance, restrict or suspend processing and impose GDPR fines up to €20 million or 4% of worldwide annual turnover, whichever is higher. AI Act penalties can reach €35 million or 7% of worldwide annual turnover for prohibited practices or certain data breaches, and €15 million or 3% for other obligations; the applicable ceiling depends on the infringement and company size. Under Criminal Code Article 226-8, undisclosed non-consensual synthetic images or speech can bring one year’s imprisonment and a €15,000 fine, rising to two years and €45,000 when committed through an…" } ] }, { "id": "brief:media--ny", "sector": "media", "geo": "ny", "sector_name": "Media & Creative", "geo_name": "New York", "url": "/brief/media--ny.html", "overview": "New York has no single, generally applicable artificial intelligence law for ordinary generative-media products, but operators may still face rules on publicity rights and digital replicas, nonconsensual intimate images, deceptive advertising, data security and breach response, children’s data, and federal platform, copyright, and intimate-image requirements. As of today, no sector-specific New York rule generally binds ordinary downstream media or creative deployers, although they should document permission to use people’s likenesses and intellectual property, obtain consent, provide takedowns, substantiate advertising claims, protect children’s data, and maintain security and incident-response procedures. The New York Responsible Artificial Intelligence Safety and Education Act separately covers certain large frontier-model developers and is generally effective January 1, 2027, so ordinary deployers should check whether they meet its developer and model thresholds rather than assume it applies to them.", "instruments": [ { "name": "New York Civil Rights Law §§ 50, 50-f and 50-g; General Business Law § 396-b (right of publicity, digital replicas, and synthetic performers in advertising)", "status": "In force. Civil Rights Law §§ 50-f and 50-g were enacted by Chapter 304 of the Laws of 2020. Civil Rights Law § 50-f was amended by Chapter 616 of the Laws of 2025, signed December 11, 2025. General Business Law § 396-b was amended by Chapter 617 of the Laws of 2025, signed December 11, 2025; the synthetic-performer advertising disclosure requirement took effect June 9, 2026.", "year": "2020; 2025", "url": "https://assembly.state.ny.us/leg/?Actions=Y&Summary=Y&Text=Y&bn=S08391&term=2025", "summary": "New York protects living individuals against unauthorized commercial use of name, portrait, picture, or voice and provides a post-mortem right covering certain deceased performers and personalities, including specified digital-replica uses. Chapter 616 of the Laws of 2025 revised the definitions and post-mortem digital-replica framework. Separately, General Business Law § 396-b requires a person who produces or…" }, { "name": "New York Civil Rights Law §§ 52-b and 52-c; Penal Law § 245.15 and related provisions concerning nonconsensual intimate images and digitally altered images", "status": "In force. Civil Rights Law § 52-b was enacted by Chapter 109 of the Laws of 2019 and amended by Part MM of Chapter 58 of the Laws of 2024. The 2024 amendments expressly address images created or altered by digitization and related deepfake terminology. Penal Law § 245.15 was also amended through the 2024 budget legislation. The draft's attribution to a 2023 Chapter 513 amendment is incorrect.", "year": "2019; 2024", "url": "https://assembly.state.ny.us/2024budget/bills2024/enacted/A8808c.pdf", "summary": "New York provides civil remedies for specified unlawful dissemination or publication of nonconsensual intimate images and deepfakes and criminalizes unlawful dissemination or publication of intimate images under Penal Law § 245.15. The civil framework can apply to an image created or altered by digitization, including a deepfake, where the statutory intent, identifiability, intimacy, and lack-of-consent requirements…" }, { "name": "New York General Business Law §§ 349 and 350 (deceptive practices and false advertising)", "status": "In force. Section 349 prohibits deceptive acts or practices in the conduct of business; § 350 prohibits false advertising. The New York Attorney General and, in appropriate circumstances, private plaintiffs can pursue covered violations.", "year": "1970; 1941", "url": "https://assembly.state.ny.us/leg/?Actions=Y&Summary=Y&Text=Y&bn=A03490&term=2025", "summary": "These provisions apply to consumer-facing claims about generative-media tools, synthetic performers, detection accuracy, provenance, copyright clearance, safety, privacy, endorsements, model capability, and output reliability. A technology or AI operator can face enforcement or private litigation where a material representation, omission, interface design, or marketing practice is misleading or likely to mislead…" }, { "name": "New York Child Data Protection Act, General Business Law Article 39-FF, §§ 899-ee through 899-mm", "status": "In force since June 20, 2025. The Act was enacted by Chapter 121 of the Laws of 2024. The Attorney General has issued implementation guidance and has rulemaking authority under the Act.", "year": "2024", "url": "https://ag.ny.gov/child-data-protection-act-guidance", "summary": "The Child Data Protection Act regulates covered online services that are primarily directed to minors or have actual knowledge or willful disregard that they are collecting personal data from minors under 18, subject to statutory exceptions. For covered users under 18, operators generally may not sell, share, or process personal data for targeted advertising, profiling, or other covered purposes unless the…" }, { "name": "New York SHIELD Act, General Business Law §§ 899-aa and 899-bb; State Technology Law § 208", "status": "In force. The Stop Hacks and Improve Electronic Data Security Act was enacted as Chapter 117 of the Laws of 2019. Its data-security requirements under General Business Law § 899-bb became effective March 21, 2020. Section 899-aa governs breach notification for covered private-information breaches; § 899-bb requires covered businesses that own or license computerized data containing New York residents' private information to maintain reasonable safeguards.", "year": "2019; 2020", "url": "https://assembly.state.ny.us/leg/?Actions=Y&Summary=Y&Text=Y&bn=S05575&term=2019", "summary": "The SHIELD Act requires covered businesses that own or license computerized data containing New York residents' private information to develop, implement, and maintain reasonable safeguards appropriate to the business's size, complexity, and the nature and scope of its activities. Section 899-aa requires notification of qualifying breaches of private information and coordination with applicable governmental notices.…" }, { "name": "Federal baseline: Copyright Act and DMCA, 17 U.S.C. §§ 106, 512 and 1201; FTC Act § 5, 15 U.S.C. § 45; Communications Decency Act § 230, 47 U.S.C. § 230; TAKE IT DOWN Act, Public Law 119-12", "status": "In force. These federal statutes apply independently of New York law. The DMCA provides conditional copyright safe harbors and anti-circumvention rules; FTC Act § 5 prohibits unfair or deceptive acts or practices; Section 230 provides conditional immunity for specified third-party content while preserving statutory exceptions; and the TAKE IT DOWN Act became Public Law 119-12 on May 19, 2025. The TAKE IT DOWN Act's covered-platform removal provisions became subject to FTC enforcement on May 19, 2026.", "year": "1914; 1976; 1996; 1998; 2025", "url": "https://www.ftc.gov/business-guidance/resources/complying-take-it-down-act", "summary": "The Copyright Act governs exclusive rights in source works and outputs to the extent copyright subsists; the DMCA provides conditional notice-and-takedown safe harbors and anti-circumvention rules. A qualifying service provider seeking § 512 protection should designate a DMCA agent, adopt and reasonably implement a repeat-infringer policy, respond expeditiously to valid notices, and avoid material misrepresentations…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The principal New York authority is the Office of the Attorney General, which can enforce General Business Law §§ 349 and 350, the Child Data Protection Act, and related online-safety requirements. Other relevant authorities include New York courts and private plaintiffs for publicity, deepfake, and consumer claims; the New York Department of State and State Police for SHIELD Act breach notifications; and the FTC for federal consumer-protection and TAKE IT DOWN Act enforcement." }, { "q": "Do we need a license, permit, or registration?", "a": "There is no generally applicable New York AI license, permit, or registration requirement for ordinary generative-media products. You do need documented rights and written authorization for commercial use of an identifiable person’s name, image, likeness, voice, or digital replica under Civil Rights Law §§ 50, 50-f, and 50-g, and you should designate a DMCA agent and maintain the required notice-and-takedown processes if seeking § 512 safe-harbor protection. Whether additional obligations apply depends on whether the company is a covered frontier-model developer, covered platform, or…" }, { "q": "What are the main data and privacy obligations?", "a": "The SHIELD Act, General Business Law §§ 899-aa and 899-bb and State Technology Law § 208, requires reasonable safeguards, data inventories, incident response, and qualifying breach notices for covered New York private information, including potentially biometric, voice, identity, account, and payment data. The Child Data Protection Act, General Business Law Article 39-FF, restricts covered processing of data from users under 18, requires minimization, purpose limitation, retention and deletion controls, and incorporates COPPA standards for users under 13. Operators should also secure prompts,…" }, { "q": "Which AI-specific rules apply?", "a": "New York’s main AI-specific obligations arise from existing rules applied to synthetic media: Civil Rights Law §§ 50-f and 50-g and General Business Law § 396-b for likenesses, digital replicas, and synthetic performers; Civil Rights Law §§ 52-b and 52-c and Penal Law § 245.15 for nonconsensual intimate deepfakes; and General Business Law §§ 349 and 350 for misleading claims about AI capability, provenance, safety, detection, endorsements, or copyright clearance. Covered advertisements using a qualifying synthetic performer require a conspicuous disclosure under § 396-b, while covered…" }, { "q": "What are the enforcement and penalty risks?", "a": "Risks include New York Attorney General enforcement, private litigation, injunctions, compensatory and punitive damages, attorney fees, criminal misdemeanors for certain unlawful intimate-image dissemination, federal FTC enforcement, copyright claims, and loss of DMCA safe-harbor protection. Under General Business Law § 396-b, violations carry a $1,000 civil penalty for a first violation and $5,000 for subsequent violations, subject to statutory exclusions and exemptions. The practical exposure depends on the conduct, the operator’s role, whether the content involves an identifiable person or…" } ] }, { "id": "brief:media--tx", "sector": "media", "geo": "tx", "sector_name": "Media & Creative", "geo_name": "Texas", "url": "/brief/media--tx.html", "overview": "Texas’s Responsible Artificial Intelligence Governance Act, the state’s main AI law, applies to businesses operating in Texas, serving Texas residents, or developing or deploying AI in Texas. Together with Texas consumer-data and biometric-privacy rules, the Deceptive Trade Practices-Consumer Protection Act, a consumer-protection law, and laws on sexually explicit synthetic media and elections, it can require AI-interaction disclosures, consent for biometric data, privacy and advertising compliance, truthful marketing, removal of nonconsensual intimate content, and restrictions on political deepfakes or certain AI uses.", "instruments": [ { "name": "Texas Responsible Artificial Intelligence Governance Act (Tex. Bus. & Com. Code chs. 551–554)", "status": "in force", "year": 2025, "url": "https://capitol.texas.gov/tlodocs/89R/billtext/html/HB00149F.HTM", "summary": "House Bill 149 was enacted in 2025 and is effective January 1, 2026. It applies to covered developers and deployers, including operators serving Texas users or developing or deploying AI in Texas. A person operating an AI system intended to interact with consumers must disclose the AI interaction before or at the time of interaction through a clear, conspicuous, plain-language disclosure without a dark pattern. The…" }, { "name": "Texas Data Privacy and Security Act (Tex. Bus. & Com. Code ch. 541)", "status": "in force", "year": 2023, "url": "https://statutes.capitol.texas.gov/Docs/BC/pdf/BC.541.pdf", "summary": "House Bill 4, enacted in 2023, created Chapter 541; the principal provisions became effective July 1, 2024, with the authorized-agent provision for targeted-advertising opt-outs effective January 1, 2025. Covered controllers and processors must address consumer rights and requests, privacy notices, sensitive-data consent, sale disclosures, security obligations, targeted-advertising and profiling opt-outs,…" }, { "name": "Texas Capture or Use of Biometric Identifier Act (Tex. Bus. & Com. Code ch. 503)", "status": "in force", "year": 2009, "url": "https://statutes.capitol.texas.gov/Docs/BC/pdf/BC.503.pdf", "summary": "Chapter 503, originally effective April 1, 2009, regulates commercial capture and use of biometric identifiers, including voiceprints and records of hand or face geometry. Before commercial capture, the operator generally must inform the individual and obtain consent; biometric identifiers may not be sold, leased, or otherwise disclosed without consent, must be protected from unauthorized disclosure, and generally…" }, { "name": "Texas Artificial Intimate Visual Material and Deepfake Liability Act (S.B. 441; Tex. Penal Code §21.165 and Tex. Civ. Prac. & Rem. Code ch. 98B)", "status": "in force", "year": 2025, "url": "https://capitol.texas.gov/tlodocs/89R/billtext/html/SB00441F.HTM", "summary": "Senate Bill 441 was enacted in 2025 and took effect September 1, 2025. It expands the criminal offense for unlawful production or distribution of certain sexually explicit media to cover visual depictions created or altered through software, machine learning, AI, or other technological means, and adds an offense for certain threats to produce or distribute deepfake media. Chapter 98B creates civil liability for…" }, { "name": "Texas Deceptive Trade Practices-Consumer Protection Act (Tex. Bus. & Com. Code ch. 17)", "status": "in force", "year": 1973, "url": "https://statutes.capitol.texas.gov/Docs/BC/pdf/BC.17.pdf", "summary": "Chapter 17 prohibits false, misleading, or deceptive acts or practices in trade or commerce and provides consumer-protection enforcement and remedies. For consumer-facing AI, media, advertising, influencer, and synthetic-content products, operators should substantiate objective claims about model capability, accuracy, safety, provenance, performance, audience reach, moderation, likeness authorization, and data…" }, { "name": "Texas Election Code §§255.004–255.005 (True Source of Communication; Misrepresentation of Identity)", "status": "in force", "year": 2019, "url": "https://statutes.capitol.texas.gov/Docs/EL/pdf/EL.255.pdf", "summary": "The relevant election provisions were amended in 2019. Section 255.004 is titled True Source of Communication and covers political advertising or campaign communications that purport to emanate from a source other than the true source; it also makes it an offense, with intent to injure a candidate or influence an election, to create a deepfake video and cause it to be published or distributed within 30 days of an…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Texas Attorney General is the central civil-enforcement authority, including exclusive enforcement under Chapter 552 of the Texas Responsible Artificial Intelligence Governance Act and enforcement of Chapter 503 and consumer-protection laws. Texas courts impose civil penalties and injunctions; prosecutors and law-enforcement authorities address the criminal offenses under Penal Code §21.165, while applicable Texas licensing agencies may impose sanctions against licensed entities." }, { "q": "Do we need a license, permit, or registration?", "a": "The briefing identifies no general Texas license, permit, or AI registration requirement for generative-media, synthetic-content, likeness, voice, advertising, or platform businesses. Compliance duties attach based on the company’s role and conduct—such as developer, deployer, advertiser, website or application owner, nudification application, payment processor, or distributor—and separate licensing rules may apply if the business operates in a regulated sector." }, { "q": "What are the main data and privacy obligations?", "a": "Under the Texas Data Privacy and Security Act, covered controllers and processors must provide privacy notices, honor consumer rights, obtain consent for sensitive data, disclose sales, maintain security, support targeted-advertising and profiling opt-outs, conduct required data-protection assessments, and use processor contracts. Map face, voice, likeness, audience, behavioral, training, and moderation data to Chapter 541; Chapter 503 separately generally requires notice and consent for commercial capture of voiceprints or face geometry, restricts disclosure, requires reasonable security,…" }, { "q": "Which AI-specific rules apply?", "a": "Effective January 1, 2026, the Texas Responsible Artificial Intelligence Governance Act applies to covered businesses serving Texas users or developing or deploying AI in Texas and requires a clear, conspicuous, plain-language disclosure before or at an AI interaction. It prohibits specified AI development or deployment, including intentional manipulation toward self-harm, harm to others, or criminal activity; intentional impairment of constitutional rights; intentional unlawful discrimination; and certain systems intended to produce illegal sexual material or deepfake media. S.B. 441…" }, { "q": "What are the enforcement and penalty risks?", "a": "The Attorney General may investigate, issue demands, require cure, seek injunctions, and pursue Chapter 552 penalties of $10,000–$12,000 per uncured curable violation, $80,000–$200,000 per uncurable violation, and $2,000–$40,000 for each day of a continuing violation; Chapter 552 provides no private right of action. Chapter 503 carries an Attorney General civil penalty of up to $25,000 per biometric violation, while S.B. 441 creates criminal exposure, conditional civil liability, and deceptive-trade-practice exposure for qualifying synthetic intimate-media conduct and failures to operate…" } ] }, { "id": "brief:media--uk", "sector": "media", "geo": "uk", "sector_name": "Media & Creative", "geo_name": "United Kingdom", "url": "/brief/media--uk.html", "overview": "The UK does not have one overarching AI law; instead, AI and creative-technology companies must comply with existing rules on personal data, electronic marketing and tracking, copyright and performer rights, consumer claims and advertising, and online platforms. The Online Safety Act, the UK law governing specified user-to-user, search, and pornography services with UK links, applies only to services meeting those definitions, so deepfakes are not automatically covered simply because a service can create or enable them; obligations depend largely on whether you provide models or software, advertising or analytics, or a platform hosting user content.", "instruments": [ { "name": "UK GDPR and Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025", "status": "in force, with Data (Use and Access) Act 2025 provisions subject to staggered commencement; data-subject complaint provisions commenced on 19 June 2026", "year": 2018, "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/explaining-decisions-made-with-artificial-intelligence/part-1-the-basics-of-explaining-ai/legal-framework/", "summary": "These rules apply where personal data is collected, used to train or test models, processed in prompts, or generated as an identifiable likeness, voice, profile or inference. Companies need an appropriate lawful basis, transparency, purpose limitation, data minimisation, security, retention and rights processes, with DPIAs and safeguards for profiling or solely automated decisions where relevant. The Data (Use and…" }, { "name": "Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR)", "status": "in force, as amended", "year": 2003, "url": "https://www.legislation.gov.uk/uksi/2003/2426/contents", "summary": "PECR overlays UK data-protection law for electronic marketing, cookies and similar tracking technologies, traffic and location data, and communications confidentiality. It is especially relevant to AI and media businesses using pixels, SDKs, audience-measurement tools, behavioural profiling, targeted advertising, email, SMS, push notifications or automated calls. Consent or another applicable PECR condition is…" }, { "name": "Online Safety Act 2023", "status": "partially in force, with duties and categorisation requirements commencing in stages", "year": 2023, "url": "https://www.legislation.gov.uk/ukpga/2023/50/contents", "summary": "The Act applies to specified regulated user-to-user services, search services and services publishing or displaying regulated provider pornographic content where the service has UK links. It does not generally regulate a model or tool merely because it can generate or facilitate deepfakes. For an in-scope service, relevant duties include illegal-content and children’s risk assessments, proportionate measures to…" }, { "name": "Digital Markets, Competition and Consumers Act 2024", "status": "in force for relevant consumer-protection provisions from 6 April 2025; other provisions and regimes commence separately", "year": 2024, "url": "https://www.legislation.gov.uk/ukpga/2024/13/contents", "summary": "The Act replaced the main consumer-protection role previously performed by the Consumer Protection from Unfair Trading Regulations 2008 and prohibits unfair commercial practices, including misleading actions, misleading omissions, fake or false reviews and other conduct likely to distort consumer decisions. It is relevant to AI products marketed to consumers, synthetic endorsements, AI-generated testimonials,…" }, { "name": "Copyright, Designs and Patents Act 1988", "status": "in force", "year": 1988, "url": "https://www.legislation.gov.uk/ukpga/1988/48/contents", "summary": "The Act governs restricted acts involving copyright works, including reproduction, adaptation, communication and licensing, and contains provisions concerning computer-generated works and performers’ rights. It is central to source-content licensing, output infringement, music and audiovisual rights, and the use of protected performances. However, the Act should not be described as establishing a general rule that…" }, { "name": "UK Code of Non-broadcast Advertising and Direct & Promotional Marketing (CAP Code) and UK Code of Broadcast Advertising (BCAP Code)", "status": "in force as self-regulatory advertising codes; current CAP Code is the 12th edition published in 2024, while the BCAP Code dates from 2008 and is amended periodically", "year": "2024/2008", "url": "https://www.asa.org.uk/codes-and-rulings/advertising-codes.html", "summary": "The CAP Code governs non-broadcast advertising, sales promotions and direct marketing, while the BCAP Code governs television and radio advertising and sponsorship credits. They apply to AI-generated or AI-assisted advertising, synthetic endorsements, influencer content and claims about AI products. Marketing communications must be legal, decent, honest and truthful, clearly identifiable as advertising, and not…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Information Commissioner’s Office (ICO) oversees the UK GDPR, Data Protection Act 2018 and PECR; Ofcom regulates in-scope services under the Online Safety Act 2023; and the Competition and Markets Authority (CMA), courts and Trading Standards enforce relevant consumer-protection provisions under the Digital Markets, Competition and Consumers Act 2024. The Advertising Standards Authority (ASA) administers the CAP and BCAP Codes, with persistent non-compliance capable of referral to Trading Standards or Ofcom." }, { "q": "Do we need a license, permit, or registration?", "a": "There is no general UK AI licence, permit or registration requirement under the briefing’s framework. You may instead need permissions or licences for source content, music, audiovisual works, performances, likenesses or voices under the Copyright, Designs and Patents Act 1988 and related rights; an ICO registration or data-protection fee may also depend on your processing activities and exemptions. If the product is an in-scope Online Safety Act service, duties depend on its service category and UK links rather than on a general AI permit." }, { "q": "What are the main data and privacy obligations?", "a": "Under the UK GDPR and Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025, establish a lawful basis, provide transparency, respect purpose limitation and data minimisation, secure and retain data appropriately, and operate processes for data-subject rights. These obligations can cover training and testing data, prompts, generated identifiable faces or voices, profiles, inferences and solely automated decisions; DPIAs and additional safeguards may be required for high-risk profiling or automation. PECR separately governs cookies, SDKs, pixels, similar tracking,…" }, { "q": "Which AI-specific rules apply?", "a": "The UK has no single omnibus AI Act in the briefing; the main AI-relevant controls are applied through existing regimes. UK GDPR rules apply to personal-data-driven models and identifiable synthetic likenesses, the Copyright, Designs and Patents Act 1988 governs copying, licensing, outputs and performers’ rights, and the CAP and BCAP Codes require advertising to be identifiable, truthful and not misleading about synthetic content, endorsements or performance. The Online Safety Act applies to specified user-to-user, search and pornography services with UK links, so deepfake duties depend on…" }, { "q": "What are the enforcement and penalty risks?", "a": "The ICO can issue warnings, reprimands, enforcement notices and UK GDPR/DPA monetary penalties of up to £17.5 million or 4% of worldwide annual turnover, whichever is higher; PECR breaches can carry penalties up to £500,000. Ofcom can fine an in-scope Online Safety Act service up to £18 million or 10% of qualifying worldwide revenue, whichever is greater, while the CMA can impose up to £300,000 or 10% of global turnover for consumer-protection infringements; the ASA can require advertising to be amended or withdrawn and can refer persistent breaches to statutory bodies." } ] }, { "id": "brief:media--us", "sector": "media", "geo": "us", "sector_name": "Media & Creative", "geo_name": "US Federal", "url": "/brief/media--us.html", "overview": "As of today, the United States has no single federal law specifically regulating AI in media and creative products. Your obligations depend on what the product does and what data it uses: consumer-protection rules cover deceptive claims, synthetic endorsements, impersonation, and unfair design; copyright law covers training data, inputs, outputs, licensing, and user uploads; and Section 230 of the Communications Decency Act affects intermediary liability and content moderation. The TAKE IT DOWN Act creates federal notice-and-removal duties for nonconsensual intimate images, including covered AI-generated forgeries, while child-privacy, privacy, biometric-data, security, consent, and data-governance requirements may also apply, especially under California’s California Consumer Privacy Act and California Privacy Rights Act and Illinois’s Biometric Information Privacy Act; nothing sector-specific binds you today unless your product triggers one of these functions or data uses.", "instruments": [ { "name": "Federal Trade Commission Act", "status": "in force", "year": 1914, "url": "https://www.ftc.gov/legal-library/browse/statutes/federal-trade-commission-act", "summary": "Section 5 prohibits unfair or deceptive acts or practices and is the principal federal consumer-protection basis for enforcement against misleading AI-generated advertising, fabricated endorsements, undisclosed synthetic testimonials, impersonation, deceptive likeness or detection claims, and unsafe or unfair product practices. Operators should substantiate claims about accuracy, authenticity, consent, provenance,…" }, { "name": "Copyright Act, including DMCA Section 512", "status": "in force", "year": 1976, "url": "https://www.copyright.gov/512/", "summary": "Copyright law governs licensing and infringement risks involving training materials, prompts, music, images, video, text, voice, and generated outputs; it does not categorically resolve whether particular training or outputs are lawful. Hosting or user-content services seeking Section 512 safe-harbor protection must designate and register a DMCA agent, publish the agent's contact information, maintain…" }, { "name": "Communications Decency Act Section 230", "status": "in force", "year": 1996, "url": "https://uscode.house.gov/view.xhtml?edition=prelim&num=0&req=granuleid%3AUSC-prelim-title47-section230", "summary": "Section 230 generally limits treating an interactive computer service as the publisher or speaker of information supplied by another content provider and protects good-faith actions to restrict objectionable material. It is central to user-content platforms distributing synthetic media, but it is not a blanket immunity: it does not eliminate liability for a platform's own content or conduct, and statutory exceptions…" }, { "name": "TAKE IT DOWN Act", "status": "in force", "year": 2025, "url": "https://www.govinfo.gov/app/details/PLAW-119publ12", "summary": "Public Law 119-12 criminalizes intentional publication of nonconsensual intimate visual depictions, including digitally forged depictions that are indistinguishable from authentic imagery, subject to the Act's statutory requirements. Beginning May 19, 2026, covered platforms must maintain a notice process for identifiable individuals or authorized representatives and, after a valid request, remove the reported…" }, { "name": "Children's Online Privacy Protection Act and COPPA Rule", "status": "in force; FTC Rule amendments published April 22, 2025, with general amendment compliance due April 22, 2026 unless an earlier date applies", "year": 1998, "url": "https://www.ftc.gov/legal-library/browse/federal-register-notices/16-cfr-part-312-coppa-final-rule-amendments", "summary": "COPPA applies to services directed to children under 13 and to general-audience services with actual knowledge that they collect personal information from children under 13. Covered AI media services must provide parental notice, obtain verifiable parental consent, give parents access and deletion rights, limit collection, use, retention, and disclosure, maintain reasonable security, and comply with the 2025…" }, { "name": "California Consumer Privacy Act/California Privacy Rights Act and Illinois Biometric Information Privacy Act", "status": "in force", "year": "2018/2020; 2008", "url": "https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?article=&chapter=&division=3.&lawCode=CIV&part=4.&title=1.81.5.; https://www.ilga.gov/ftp/ILCS/Ch%200740/Act%200014/074000140F.html", "summary": "The CCPA, as amended by the CPRA, imposes California-specific notice, access, deletion, correction, opt-out, sensitive-personal-information, contractual, security, and limits-on-use obligations for covered businesses, including obligations relevant to voice, facial, image, creator, audience, and inferred-profile data. Illinois BIPA separately requires informed written consent before collecting, capturing,…" } ], "faq": [ { "q": "Who are the key regulators and authorities?", "a": "The Federal Trade Commission is the principal federal consumer-protection authority for deceptive AI advertising, synthetic endorsements, impersonation, likeness claims, and unsafe or unfair practices. The U.S. Copyright Office administers DMCA Section 512 registrations, the Department of Justice enforces federal criminal provisions including the TAKE IT DOWN Act, and state attorneys general, state privacy authorities, courts, and private plaintiffs may enforce state privacy and biometric rules." }, { "q": "Do we need a license, permit, or registration?", "a": "There is no general federal AI license, permit, or operating registration for media and creative services. If the service hosts user content and seeks DMCA Section 512 safe-harbor protection, it must designate and register a DMCA agent, publish the agent’s contact information, maintain notice-and-takedown and counter-notice procedures, and adopt a repeat-infringer policy; other requirements depend on the product’s data flows and audience." }, { "q": "What are the main data and privacy obligations?", "a": "COPPA requires parental notice and verifiable parental consent for covered services collecting information from children under 13, plus access, deletion, minimization, retention, disclosure, and security controls; the 2025 amendments specifically expand treatment of biometric identifiers and certain third-party disclosures. The CCPA/CPRA and Illinois BIPA add notice, access, deletion, correction, opt-out, sensitive-data, consent, retention, disclosure, vendor, and security obligations, with BIPA requiring informed written consent before obtaining covered biometric identifiers or information.…" }, { "q": "Which AI-specific rules apply?", "a": "The Federal Trade Commission Act, especially Section 5, applies to deceptive AI-generated advertising, fabricated endorsements, undisclosed synthetic testimonials, impersonation, deceptive likeness or detection claims, and unsupported claims about accuracy, authenticity, consent, provenance, compensation, or safety. The Copyright Act and DMCA govern training inputs, user uploads, licenses, outputs, and takedowns; Section 230 shapes intermediary liability without providing blanket immunity; and the TAKE IT DOWN Act requires covered platforms, beginning May 19, 2026, to remove validly reported…" }, { "q": "What are the enforcement and penalty risks?", "a": "FTC exposure includes investigations, administrative or federal actions, injunctive orders, consumer redress, and civil penalties where authorized, particularly for deceptive claims or unsafe practices. Copyright failures can lead to infringement litigation, damages, and loss of DMCA Section 512 safe-harbor protection; TAKE IT DOWN violations can create federal criminal exposure, while CCPA/CPRA enforcement and BIPA claims can produce injunctions, monetary relief, and statutory damages, with the precise consequences depending on the conduct, service role, affected data, and jurisdiction." } ] } ], "baselines": [ { "id": "baseline:AR", "jurisdiction": "AR", "jurisdiction_name": "Argentina", "url": "/jurisdiction/ar.html", "overview": "Argentina does not have an economy-wide, AI-specific law in force as of August 6, 2026. AI is mainly regulated under existing personal data protection, consumer, copyright, and sector-specific laws, while two narrow federal rules apply only to security forces and the National Public Sector. Enforcement is handled by existing data protection, consumer, judicial, and sector regulators rather than an AI-specific authority.", "instruments": [ { "name": "Personal Data Protection Act No. 25.326 and Decree 1558/2001", "status": "in force", "year": 2000, "url": "https://www.argentina.gob.ar/normativa/nacional/ley-25326-64790/texto", "summary": "This is the main legal constraint for AI systems that collect, train on, infer from, or otherwise process personal data. Companies must address lawful collection and purpose, data quality, security, access and correction rights, deletion where applicable, disclosure and transfers, and risks from profiling or automated processing.…" }, { "name": "Consumer Protection Act No. 24.240", "status": "in force", "year": 1993, "url": "https://www.argentina.gob.ar/normativa/nacional/638/actualizacion", "summary": "AI products and services offered to consumers must meet general duties of truthful and adequate information, fair contracting, service conformity, and liability for harm. This is relevant to AI assistants, recommendation systems, automated customer service, marketing claims, and products whose outputs may mislead users or fail to perform as advertised.…" }, { "name": "Copyright and Intellectual Property Act No. 11.723", "status": "in force", "year": 1933, "url": "https://www.argentina.gob.ar/normativa/nacional/42755/actualizacion", "summary": "The Act protects literary, artistic, scientific, software, photographic, audiovisual, and compiled-data works. It contains no AI-specific training exception or generative-AI safe harbor, so companies should assess licensing, reproduction, adaptation, scraping, output use, and provenance risks when building or deploying generative systems.…" }, { "name": "Resolution 428/2024, Protocol for Prevention Police Work Using Digital Open Sources", "status": "in force", "year": 2024, "url": "https://www.argentina.gob.ar/normativa/nacional/resoluci%C3%B3n-428-2024-399894/texto", "summary": "This binding protocol regulates the use of AI, machine learning, automated information-processing tools, and similar technologies in preventive work by Federal Police and Federal Security Forces. It requires use to be limited to the regulated activity and supervised by the Ministry of Security, so it generally does not govern ordinary private-sector deployments.…", "ai_specific": true }, { "name": "Resolution SIGEN 197/2026, Guide to AI Controls", "status": "in force", "year": 2026, "url": "https://www.boletinoficial.gob.ar/detalleAviso/primera/343375/20260622", "summary": "The resolution approves a risk-based AI control guide applicable across the National Public Sector. It addresses internal control, alignment, transparency, accountability, and risk management for public-sector AI initiatives, and is not a horizontal compliance regime for private companies unless they operate within or contract into the covered public-sector framework.…", "ai_specific": true } ], "faq": [ { "q": "Is there an AI-specific law in force here?", "a": "No. As of August 6, 2026, Argentina has no economy-wide, AI-specific law in force. Two narrow federal rules apply to the Federal Police and security forces, and to the National Public Sector." }, { "q": "Who are the key regulators for AI?", "a": "AI is overseen in practice by the data-protection authority, consumer authorities, courts, and sector regulators. Enforcement is not handled by a single AI-specific regulator." }, { "q": "Which rules apply to AI systems today?", "a": "The main rules are the Personal Data Protection Act and Decree 1558/2001, the Consumer Protection Act, and the Copyright and Intellectual Property Act. Resolution 428/2024 applies to certain police and security-force uses, while Resolution SIGEN 197/2026 applies across the National Public Sector." }, { "q": "What is coming next, and when?", "a": "The source does not identify any broader upcoming AI law or provide a future timetable. As of August 6, 2026, the applicable framework remains the existing general laws and the two narrow federal rules already in force." }, { "q": "What are the enforcement and penalty risks?", "a": "Authorities may apply data-protection, consumer, copyright, and sector rules to AI-related conduct, with courts also involved. Risks include issues involving unlawful data processing, misleading information, unfair contracts, service failures, harm, unauthorized copying or adaptation, and noncompliance with applicable public-sector or security-force controls." } ] }, { "id": "baseline:AU", "jurisdiction": "AU", "jurisdiction_name": "Australia", "url": "/jurisdiction/au.html", "overview": "Australia has no general federal AI-specific law in force today, but existing privacy, consumer protection, copyright and online safety laws regulate AI, including targeted online safety codes that directly cover some generative AI and companion chatbot services. The Privacy and Other Legislation Amendment Act 2024, a law changing privacy rules, includes automated decision-making transparency requirements that start on 10 December 2026. Regulators are already issuing guidance, investigating conduct and imposing civil penalties or removal orders.", "instruments": [ { "name": "Privacy Act 1988", "status": "in force", "year": 1988, "url": "https://www.legislation.gov.au/C2004A03712/latest/text", "summary": "The Australian Privacy Principles apply when an organisation covered by the Act collects, uses, discloses, stores or trains AI systems using personal information. Companies must assess purpose limitation, notice, data quality, security, overseas disclosures, access and correction, and eligible data breach obligations before putting personal information into an AI product or model.…" }, { "name": "Competition and Consumer Act 2010, Schedule 2 Australian Consumer Law", "status": "in force", "year": 2010, "url": "https://www.legislation.gov.au/C2004A00109/latest", "summary": "The Australian Consumer Law applies to AI products and services, including claims about accuracy, autonomy, safety, performance and the presence of AI capabilities. Misleading or deceptive conduct, false representations, unfair practices and unsafe products can attract ACCC enforcement, including against AI-washing and overstated model capabilities.…" }, { "name": "Online Safety Act 2021 and Online Safety Codes", "status": "in force", "year": 2021, "url": "https://www.legislation.gov.au/C2021A00076/latest", "summary": "The Act and registered industry codes bind relevant online services, including some services that provide or integrate generative AI. Age-Restricted Material Codes now require qualifying AI chatbots and generative AI services capable of producing pornography, high-impact violence or self-harm material to use age assurance or equivalent safeguards, with eSafety able to direct compliance and pursue substantial…" }, { "name": "Copyright Act 1968", "status": "in force", "year": 1968, "url": "https://www.legislation.gov.au/C1968A00063/latest", "summary": "Copyright rules apply to training inputs, retrieval corpora, software, generated outputs and the way AI outputs are communicated or supplied. Australia currently has no general text-and-data-mining exception, so companies need a defensible rights, licensing and infringement position for material used to develop or operate AI systems.…" }, { "name": "Privacy and Other Legislation Amendment Act 2024, automated decision-making reforms", "status": "adopted, phasing in", "year": 2024, "url": "https://www.legislation.gov.au/C2024A00128/", "summary": "The Act is in force, but its new APP 1.7 to 1.9 automated decision-making transparency obligation starts on 10 December 2026. APP entities using personal information in computer-assisted decisions that could significantly affect an individual's rights or interests will need privacy-policy information about the types of information used and the types of automated decisions made.…", "ai_specific": true } ], "faq": [ { "q": "Is there an AI-specific law in force here?", "a": "No general federal AI-specific law is in force in Australia today. However, targeted online safety codes impose direct obligations on some generative AI and companion chatbot services." }, { "q": "Who are the key regulators for AI?", "a": "The key regulators are the Office of the Australian Information Commissioner, the Australian Competition and Consumer Commission and the eSafety Commissioner. They issue guidance, investigate conduct and use enforcement powers where existing rules apply." }, { "q": "Which rules apply to AI systems today?", "a": "The Privacy Act 1988 applies when covered organisations collect, use, disclose, store or train AI systems using personal information. The Australian Consumer Law, Online Safety Act and registered codes, and Copyright Act also apply, including rules on misleading claims, safety safeguards, privacy, copyright and online services." }, { "q": "What is coming next, and when?", "a": "The Privacy and Other Legislation Amendment Act 2024 has been enacted, but its automated decision-making transparency rules start on 10 December 2026. Covered entities using personal information in computer-assisted decisions that could significantly affect rights or interests will then need to describe relevant information types and automated decision types in their privacy policies." }, { "q": "What are the enforcement and penalty risks?", "a": "Enforcement is active, including investigations and civil penalties by the OAIC and ACCC, and compliance directions or removal powers by eSafety. Risks include privacy breaches, misleading AI claims, unsafe products, copyright infringement and failure to meet online safety code obligations, with substantial penalties possible under the applicable rules." } ] }, { "id": "baseline:AT", "jurisdiction": "AT", "jurisdiction_name": "Austria", "url": "/jurisdiction/at.html", "overview": "Austria has no standalone national AI law; companies are mainly governed by the EU AI Act, an EU regulation that applies directly, with most provisions taking effect on August 2, 2026. AI use must also comply with the GDPR, the EU data-protection regulation, Austrian privacy law, the Digital Services Act for online platforms, consumer and marketing rules, and cybersecurity requirements, while Austria is still preparing its national implementation law and final enforcement arrangements.", "instruments": [ { "name": "EU Artificial Intelligence Act", "status": "partially in force", "year": 2024, "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj", "summary": "This is the core AI-specific rule for companies placing AI systems or general-purpose AI models on the Austrian market, or deploying them in Austria. Prohibitions and AI-literacy duties have applied since February 2, 2025, GPAI and governance rules since August 2, 2025, and the main system obligations and transparency rules apply from August 2, 2026, with some high-risk rules phased to 2027.", "ai_specific": true }, { "name": "KommAustria-Gesetz, section 20c", "status": "in force", "year": 2001, "url": "https://ris.bka.gv.at/NormDokument.wxe?Abfrage=Bundesnormen&Gesetzesnummer=20001213&Paragraf=20c", "summary": "Austria's main national AI-specific rule establishes an AI Service Desk and an AI Advisory Board at RTR. It does not create a general Austrian licensing, registration, or deployment regime for private companies, but RTR guidance is an important practical source while the national implementation framework is completed.", "ai_specific": true }, { "name": "General Data Protection Regulation and Austrian Data Protection Act", "status": "in force", "year": 2016, "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "summary": "The GDPR applies to personal data used for AI training, fine-tuning, prompts, inference, monitoring, profiling, and automated decisions, including when the company uses a third-party model. Companies need a lawful basis, transparency, data minimization, appropriate security, DPIAs where required, and safeguards for solely automated decisions with significant effects; the Austrian Data Protection Authority can…" }, { "name": "Digital Services Act", "status": "in force", "year": 2022, "url": "https://eur-lex.europa.eu/eli/reg/2022/2065/oj", "summary": "The DSA is central for AI products that operate as online platforms, hosting services, recommender systems, marketplaces, or content-distribution services. It can require terms and process controls, notice-and-action systems, user and ad transparency, protection of minors, and risk-management measures for very large platforms and search engines." }, { "name": "Austrian Consumer Protection Act and Unfair Competition Act", "status": "in force", "year": 1979, "url": "https://ris.bka.gv.at/eli/bgbl/1979/140/P0/NOR11002485", "summary": "Customer-facing AI products remain subject to ordinary consumer-contract, digital-content, misleading-practices, and unfair-marketing rules. AI-generated claims, recommendations, pricing, chatbot statements, and product descriptions must not mislead consumers, and digital services must meet applicable conformity and warranty requirements." }, { "name": "Network and Information Systems Security Act 2026", "status": "partially in force", "year": 2025, "url": "https://ris.bka.gv.at/eli/bgbl/i/2025/94/P0/NOR40273913", "summary": "The NISG 2026 implements the expanded EU cybersecurity framework for Austrian essential and important entities, including certain digital, cloud, communications, health, energy, transport, and other operators. Where an AI deployment supports an in-scope service, the company must integrate risk management, incident reporting, governance, and supply-chain security into its AI and infrastructure controls; important…" } ], "faq": [ { "q": "Is there an AI-specific law in force here?", "a": "Austria has no standalone national AI Act. The EU AI Act is directly applicable and is already partly in force, while Austria has limited institutional rules establishing the RTR AI Service Desk and AI Advisory Board." }, { "q": "Who are the key regulators for AI?", "a": "RTR, through its AI Service Desk and AI Advisory Board, is Austria’s main national AI-specific institutional contact. The Austrian Data Protection Authority can investigate GDPR and Austrian data-protection violations, while the final allocation of some AI enforcement responsibilities is still being prepared." }, { "q": "Which rules apply to AI systems today?", "a": "The EU AI Act applies partly today, including its prohibitions and AI-literacy duties, with GPAI and governance rules also in force from August 2, 2025. AI systems must also comply with the GDPR and Austrian data-protection law, the Digital Services Act where relevant, consumer and unfair-marketing rules, and cybersecurity requirements for in-scope operators." }, { "q": "What is coming next, and when?", "a": "Most EU AI Act system obligations and transparency rules apply from August 2, 2026, with some high-risk rules phased in during 2027. Important operative provisions of Austria’s NISG 2026 are scheduled to apply from October 1, 2026, while Austria’s national AI Act implementation law and final enforcement allocation are still being prepared." }, { "q": "What are the enforcement and penalty risks?", "a": "Enforcement is becoming real now, and companies can face action for breaches of the EU AI Act, GDPR, DSA, consumer rules, or cybersecurity requirements. The Austrian Data Protection Authority can investigate and impose corrective measures and fines, while AI Act enforcement responsibilities and the wider national implementation framework are still being finalized." } ] }, { "id": "baseline:BR", "jurisdiction": "BR", "jurisdiction_name": "Brazil", "url": "/jurisdiction/br.html", "overview": "As of August 6, 2026, Brazil has no comprehensive federal AI-specific law in force. AI is instead governed mainly by the LGPD, Brazil’s data protection law, consumer law, the Marco Civil da Internet, Brazil’s internet framework law, and 2026 platform rules covering systemic risks, illegal content, and AI-generated intimate deepfakes; the ECA Digital, Brazil’s child online safety law, also applies to products likely to be used by children or adolescents. Enforcement is active and increasing, but Brazil has no general AI licensing or conformity assessment system.", "instruments": [ { "name": "Lei Geral de Proteção de Dados Pessoais (LGPD)", "status": "in force", "year": 2018, "url": "https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709.htm", "summary": "Applies whenever an AI system processes personal data, including for training, profiling, recommendation, fraud detection, biometrics or automated decisions. Companies must establish a lawful basis, observe purpose and necessity limits, secure the processing, respect data-subject rights and manage international transfers and incidents; the ANPD can investigate and impose sanctions.…" }, { "name": "Marco Civil da Internet", "status": "in force", "year": 2014, "url": "https://www.planalto.gov.br/ccivil_03/_ato2011-2014/2014/lei/l12965.htm", "summary": "Sets baseline duties for internet connection and application providers, including privacy, security, logging, user rights and rules for intermediary liability. It is particularly important for AI products that host, rank, recommend or moderate user-generated content. ([planalto.gov.br](https://www.planalto.gov.br/ccivil_03/_ato2011-2014/2014/lei/_leis2014.htm?utm_source=openai))" }, { "name": "Decreto nº 12.975/2026", "status": "in force", "year": 2026, "url": "https://www.planalto.gov.br/ccivil_03/_ato2023-2026/2026/decreto/d12975.htm", "summary": "Updates the Marco Civil regulation and imposes operational duties on internet application providers, especially platforms, concerning transparency, risk monitoring, prevention and mitigation of systemic failures, illegal content, fraud and paid promotion. It matters for AI platforms that distribute or amplify user content, although it is not a general AI law.…" }, { "name": "Decreto nº 12.976/2026", "status": "in force", "year": 2026, "url": "https://www.planalto.gov.br/ccivil_03/_ato2023-2026/2026/decreto/d12976.htm", "summary": "Creates binding platform duties on digital violence against women, expressly covering AI-generated or AI-manipulated intimate content. Covered platforms must implement safeguards against generating or modifying intimate deepfakes, operate reporting channels and remove specified content within set time limits.…", "ai_specific": true }, { "name": "Estatuto Digital da Criança e do Adolescente", "status": "in force", "year": 2025, "url": "https://www.planalto.gov.br/ccivil_03/_ato2023-2026/2025/lei/l15211.htm", "summary": "Applies to technology products or services directed at, or likely to be accessed by, children and adolescents. AI services in scope must provide elevated privacy, safety and security, prevention, information and parental-control measures, with ANPD oversight and implementing rules under Decreto nº 12.880/2026.…" }, { "name": "Código de Defesa do Consumidor", "status": "in force", "year": 1990, "url": "https://www.planalto.gov.br/ccivil_03/leis/l8078compilado.htm", "summary": "Applies to AI products and services offered to consumers, including SaaS, chatbots, recommendation systems and automated customer service. It prohibits misleading or abusive practices, requires clear information and supports liability for defective or unsafe services, regardless of whether the harm was caused by an algorithm or a human.…" } ], "faq": [ { "q": "Is there an AI-specific law in force here?", "a": "No. As of August 6, 2026, Brazil has no comprehensive federal AI-specific law in force. There is also no general AI licensing or conformity-assessment regime." }, { "q": "Who are the key regulators for AI?", "a": "The key enforcement bodies are the ANPD, consumer authorities, courts and sector regulators. The ANPD oversees data protection and has specific oversight under the ECA Digital." }, { "q": "Which rules apply to AI systems today?", "a": "The LGPD applies when AI systems process personal data, including for training, profiling, recommendations, fraud detection, biometrics or automated decisions. The Marco Civil da Internet, consumer law, the ECA Digital and the 2026 platform rules on systemic risks, illegal content, fraud, paid promotion and AI-generated intimate deepfakes may also apply, depending on the product and use case." }, { "q": "What is coming next, and when?", "a": "The source does not identify a further comprehensive AI law or provide a future timetable. The ECA Digital is already in force, with implementing rules under Decreto nº 12.880/2026, and the platform rules in Decretos nº 12.975/2026 and nº 12.976/2026 are already in force." }, { "q": "What are the enforcement and penalty risks?", "a": "Enforcement is real and becoming more active, led by the ANPD, consumer authorities, courts and sector regulators. The ANPD can investigate and impose sanctions under the LGPD, while consumer law supports liability for misleading or abusive practices and defective or unsafe services. The source does not specify particular penalty amounts." } ] }, { "id": "baseline:CA", "jurisdiction": "CA", "jurisdiction_name": "Canada", "url": "/jurisdiction/ca.html", "overview": "Canada has no federal AI-specific law in force as of August 6, 2026. The proposed Artificial Intelligence and Data Act, which would have regulated AI systems, did not become law, so companies currently rely on privacy, competition, electronic communications, and sector-specific rules, with enforcement including 2026 findings against OpenAI and X/xAI. There is no general federal AI licensing, model-registration, or mandatory risk-classification regime for private companies.", "instruments": [ { "name": "Personal Information Protection and Electronic Documents Act (PIPEDA)", "status": "in force", "year": 2000, "url": "https://laws-lois.justice.gc.ca/ENG/ACTS/P-8.6/index.html", "summary": "PIPEDA governs the collection, use, disclosure, retention, accuracy, access, consent, and security of personal information in commercial activities, subject to provincial substantially similar laws. For AI, this covers training data, prompts, user inputs, model outputs containing personal information, profiling, and safeguards against foreseeable misuse." }, { "name": "Competition Act", "status": "in force", "year": 1985, "url": "https://laws-lois.justice.gc.ca/eng/acts/c-34/", "summary": "The Act prohibits materially false or misleading representations, including claims about an AI system’s capabilities, accuracy, performance, safety, or use of AI. It also applies to AI-enabled pricing, advertising, automated sales, and conduct that may restrict competition." }, { "name": "Canada’s Anti-Spam Legislation (CASL)", "status": "in force", "year": 2010, "url": "https://laws-lois.justice.gc.ca/eng/acts/E-1.6/", "summary": "CASL applies when AI agents or automated systems send commercial electronic messages, including email, SMS, and some automated voice or messaging activity. Companies generally need consent, sender identification, and an unsubscribe mechanism, with additional rules for software installation and certain electronic conduct." }, { "name": "Directive on Automated Decision-Making", "status": "in force", "year": 2019, "url": "https://www.tbs-sct.canada.ca/pol/doc-eng.aspx?id=32592", "summary": "This binding federal government policy applies to departments and agencies using automated systems to support or make administrative decisions, including requirements for impact assessment, transparency, quality, recourse, human intervention, and monitoring. It does not generally bind private-sector deployments, but it matters to companies supplying or operating AI systems for the federal government.", "ai_specific": true }, { "name": "OSFI Guideline E-23: Model Risk Management", "status": "adopted, phasing in", "year": 2025, "url": "https://www.osfi-bsif.gc.ca/en/guidance/guidance-library/guideline-e-23-model-risk-management-2027", "summary": "E-23 sets supervisory expectations for federally regulated financial institutions managing model risk, including AI and machine-learning models. It is relevant to banks, insurers, trust and loan companies, and technology providers whose AI is used in regulated financial processes; its stated effective date is May 1, 2027.", "ai_specific": true } ], "faq": [ { "q": "Is there an AI-specific law in force here?", "a": "No. Canada has no federal AI-specific law in force today. The proposed Artificial Intelligence and Data Act in former Bill C-27 did not become law, and there is no general federal AI licensing, model-registration, or mandatory risk-classification regime for private companies." }, { "q": "Who are the key regulators for AI?", "a": "The Privacy Commissioner enforces privacy rules relevant to AI, including PIPEDA, and has issued 2026 findings against OpenAI and X/xAI. The Competition Bureau applies established competition and marketing rules to AI-related conduct. OSFI is relevant to federally regulated financial institutions and their use of AI models." }, { "q": "Which rules apply to AI systems today?", "a": "PIPEDA applies to personal information used in AI, including training data, prompts, user inputs, model outputs, profiling, and security safeguards, subject to substantially similar provincial laws. The Competition Act covers misleading AI claims, AI-enabled pricing, advertising, automated sales, and conduct that may restrict competition. CASL applies to commercial electronic messages sent by AI agents or automated systems, while the Directive on Automated Decision-Making applies to federal departments and agencies and OSFI Guideline E-23 applies to model risk management in federally…" }, { "q": "What is coming next, and when?", "a": "The proposed Artificial Intelligence and Data Act did not become law, so no federal AI-specific regime is currently scheduled by the source. OSFI Guideline E-23 is phasing in and has a stated effective date of May 1, 2027. The source does not identify another future AI law or implementation date." }, { "q": "What are the enforcement and penalty risks?", "a": "Enforcement is becoming more active under existing laws, with the Privacy Commissioner issuing 2026 findings against OpenAI and X/xAI. The Competition Bureau can apply established rules to misleading AI claims, pricing, advertising, automated sales, and competition conduct. Companies may also face compliance risks under PIPEDA, CASL, federal automated-decision rules, and OSFI expectations, although the source does not specify penalty amounts." } ] }, { "id": "baseline:CN", "jurisdiction": "CN", "jurisdiction_name": "China", "url": "/jurisdiction/cn.html", "overview": "China has no comprehensive national AI law in force as of today. Instead, AI is regulated by targeted rules from the Cyberspace Administration of China covering generative AI, algorithms, deep synthesis, and synthetic-content labeling, alongside broader personal-information and network-data security laws. These rules apply mainly to public-facing internet services in China and may require content controls, user disclosures, algorithm filings, security reviews, data governance, and record retention, with regulators able to order corrections, suspend services, or impose penalties.", "instruments": [ { "name": "Interim Measures for the Management of Generative Artificial Intelligence Services", "status": "in force", "year": 2023, "url": "https://www.cac.gov.cn/2023-07/13/c_1690898327029107.htm", "summary": "The core national rule for public-facing generative AI services in China, including services offered through APIs. Providers must manage training-data legality and quality, protect personal information, prevent unlawful or harmful content, conduct security measures and complaint handling, and complete applicable algorithm filing and security-assessment procedures. Violations can lead to warnings, correction orders,…", "ai_specific": true }, { "name": "Provisions on the Administration of Internet Information Service Algorithm Recommendation", "status": "in force", "year": 2021, "url": "https://www.cac.gov.cn/2022-01/04/c_1642894606364259.htm", "summary": "Applies to internet services using recommendation, ranking, search, filtering, scheduling, personalization, and certain generative or synthetic algorithms. Providers must establish algorithm-safety controls, disclose the use and basic principles of recommendation, offer a non-personalized or opt-out option, protect minors, control unlawful content, and file covered algorithms with the CAC.…", "ai_specific": true }, { "name": "Provisions on the Administration of Internet Information Service Deep Synthesis", "status": "in force", "year": 2022, "url": "https://www.cac.gov.cn/2022-12/11/c_1672221949354811.htm", "summary": "Governs deepfake and other deep-synthesis services, including synthetic text, images, audio, video, and virtual scenes. Providers must review users and content, add required identifiers, retain logs, manage security incidents, and complete applicable filing or security-assessment procedures.…", "ai_specific": true }, { "name": "Measures for the Labeling of Artificial Intelligence-Generated and Synthetic Content", "status": "in force", "year": 2025, "url": "https://www.cac.gov.cn/2025-03/14/c_1743654684782215.htm", "summary": "Since September 1, 2025, covered providers must apply visible labels and embedded metadata to AI-generated or synthetic text, images, audio, video, and virtual scenes. Platforms must detect or rely on user declarations of synthetic content, add notices where appropriate, preserve specified logs for at least six months in some no-visible-label cases, and disclose labeling rules in user agreements.…", "ai_specific": true }, { "name": "Personal Information Protection Law", "status": "in force", "year": 2021, "url": "https://www.miit.gov.cn/jgsj/zfs/fl/art/2022/art_515a4b20c12f430eab54bb4f56d89f56.html", "summary": "This is the main privacy regime for AI training, fine-tuning, inference, profiling, and employee or customer data use. It requires a lawful basis, purpose limitation, data minimization, transparency, safeguards for sensitive personal information, rules for automated decision-making, individual rights, and controls on cross-border transfers.…" }, { "name": "Regulation on Network Data Security Management", "status": "in force", "year": 2024, "url": "https://www.cac.gov.cn/2024-09/30/c_1729384452307680.htm", "summary": "Effective January 1, 2025, this administrative regulation operationalizes network-data security obligations for AI companies handling large, sensitive, or potentially important datasets. It requires data-security systems, classification and protection measures, incident response, important-data identification and reporting where applicable, and enhanced obligations for large platforms and important-data processors.…" } ], "faq": [ { "q": "Is there an AI-specific law in force here?", "a": "No. China does not yet have a comprehensive national AI law in force. AI is governed by a layered set of AI-specific rules covering generative AI, algorithms, deep synthesis, and synthetic-content labeling, supported by privacy and network-data security laws." }, { "q": "Who are the key regulators for AI?", "a": "The Cyberspace Administration of China, or CAC, is the central regulator identified in the current AI rules. It oversees areas including algorithm filings, generative AI, deep synthesis, synthetic-content labeling, and network-data security, while enforcement can also rely on the underlying cybersecurity, data-security, and personal-information laws." }, { "q": "Which rules apply to AI systems today?", "a": "Public-facing AI services, including API services, may be subject to the generative AI measures, algorithm recommendation provisions, deep-synthesis provisions, and synthetic-content labeling measures. The Personal Information Protection Law applies to training, fine-tuning, inference, profiling, and use of employee or customer data, while the Regulation on Network Data Security Management applies to relevant data-security activities. Requirements can include content controls, disclosures, algorithm filings, security assessments, data governance, incident response, and record retention." }, { "q": "What is coming next, and when?", "a": "A comprehensive national AI law remains a legislative work item rather than an enacted statute. The source gives no expected enactment date. The synthetic-content labeling measures have applied since September 1, 2025, and the network-data security regulation has been effective since January 1, 2025." }, { "q": "What are the enforcement and penalty risks?", "a": "Enforcement is active and administrative. Regulators publish filing lists, conduct platform campaigns, and can order rectification, suspend services, or issue warnings. Violations may also trigger penalties under the Cybersecurity Law, Data Security Law, and Personal Information Protection Law." } ] }, { "id": "baseline:CO", "jurisdiction": "CO", "jurisdiction_name": "Colombia", "url": "/jurisdiction/co.html", "overview": "Colombia does not yet have a comprehensive AI statute in force. Its current framework combines the binding personal data regime, sector and consumer law, the adopted CONPES 4144 National Artificial Intelligence Policy, and public-sector ethical guidance. A pending Senate bill proposes a horizontal, risk-based AI framework, but its obligations are not yet law.", "instruments": [ { "name": "Law 1581 of 2012 on Personal Data Protection", "status": "in force", "year": 2012, "url": "https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=49981", "summary": "The main binding baseline for AI systems processing personal data. It governs authorization, purpose, access, correction, security, sensitive data, controller and processor duties, and oversight by the Superintendence of Industry and Commerce." }, { "name": "Decree 1377 of 2013", "status": "in force", "year": 2013, "url": "https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=53646", "summary": "The decree partially implements Law 1581 and adds operational requirements for notices, authorization, policies, sensitive data, and controller and processor practices." }, { "name": "CONPES 4144 National Artificial Intelligence Policy", "status": "adopted policy", "year": 2025, "url": "https://colaboracion.dnp.gov.co/CDT/Conpes/Econ%C3%B3micos/4144.pdf", "summary": "The national roadmap contains more than 100 actions through 2030. It directs public investment, institution building, skills, infrastructure, research, responsible adoption, and future policy work, but is not a horizontal private-sector compliance statute." }, { "name": "Public-Sector Ethical AI Guide", "status": "guidance", "year": 2025, "url": "https://www.dnp.gov.co/Prensa_/Noticias/Paginas/gobierno-impulsa-guia-etica-de-inteligencia-artificial.aspx", "summary": "The guide supports transparent, accountable, rights-respecting public-sector AI and can influence government procurement and vendor expectations." } ], "faq": [ { "q": "Is there an AI-specific law in force?", "a": "No comprehensive AI statute is in force. Personal data, consumer, constitutional, competition, and sector rules apply today. CONPES 4144 is an adopted policy roadmap, and Bill 043/2025 remains a proposal." }, { "q": "Who regulates AI today?", "a": "Authority depends on the issue. The Superintendence of Industry and Commerce is central for personal data, consumer protection, and competition. Sector regulators and public bodies retain their existing mandates." }, { "q": "What should companies monitor next?", "a": "Monitor Bill 043/2025, implementation actions under CONPES 4144, public procurement guidance, and any sector-specific rules affecting automated decisions, sensitive data, financial services, health, employment, or children." } ] }, { "id": "baseline:EU", "jurisdiction": "EU", "jurisdiction_name": "European Union", "url": "/jurisdiction/eu.html", "overview": "The EU has an AI-specific law, the AI Act, which is directly binding but takes effect in stages: bans on certain AI practices and AI-literacy duties started on February 2, 2025, general-purpose AI duties on August 2, 2025, and most transparency rules on August 2, 2026. The 2026 Digital Omnibus delayed most high-risk AI requirements to December 2, 2027 for Annex III systems and August 2, 2028 for AI built into regulated products, while the GDPR, Digital Services Act, consumer-protection laws, and NIS2 cybersecurity rules continue to apply.", "instruments": [ { "name": "Artificial Intelligence Act", "status": "partially in force", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689", "summary": "The AI Act regulates providers, deployers, importers, and distributors according to the AI system's risk category. Prohibitions, AI-literacy duties, general-purpose AI obligations, governance, penalties, and most transparency rules apply now, while the 2026 Digital Omnibus delayed most high-risk obligations to December 2, 2027 or August 2, 2028.", "ai_specific": true }, { "name": "General Data Protection Regulation", "status": "in force", "year": 2016, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679", "summary": "GDPR applies whenever an AI system processes personal data, including for training, profiling, personalization, monitoring, or automated decision-making. Companies must establish a lawful basis, meet transparency and data-governance duties, respect data-subject rights, conduct impact assessments where required, and manage processors and international transfers." }, { "name": "Digital Services Act", "status": "in force", "year": 2022, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065", "summary": "The DSA applies to online intermediaries, platforms, marketplaces, and search services offered in the EU, including where AI powers ranking, recommendation, advertising, moderation, or synthetic-content features. It imposes notice-and-action, explanation, transparency, risk-management, advertising, researcher-access, and protections for minors, with enhanced duties for very large platforms and search engines." }, { "name": "Unfair Commercial Practices Directive", "status": "in force", "year": 2005, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32005L0029", "summary": "The directive applies when AI is used to market, sell, recommend, personalize, or influence consumer decisions. Misleading claims, hidden commercial intent, deceptive personalization, fake reviews, and materially distorting consumer behavior can trigger enforcement even where the AI Act does not apply." }, { "name": "NIS2 Directive", "status": "in force", "year": 2022, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555", "summary": "NIS2 binds covered essential and important entities, including many organizations in digital infrastructure, health, energy, transport, finance, manufacturing, and public administration. Where an AI system supports a covered service, companies may need risk-management controls, incident reporting, supply-chain security, business continuity, and management accountability." } ], "faq": [ { "q": "Is there an AI-specific law in force here?", "a": "Yes. The EU AI Act is directly binding and is being phased in, with prohibitions, AI-literacy duties, and general-purpose AI obligations already applying, while other requirements take effect later." }, { "q": "Who are the key regulators for AI?", "a": "Enforcement is led by national authorities, the European AI Office, data-protection regulators, and sector regulators. Their roles depend on the AI system, the organization using it, and the regulated sector involved." }, { "q": "Which rules apply to AI systems today?", "a": "The AI Act applies according to the system's risk category, with prohibitions, AI-literacy duties, general-purpose AI obligations, governance, penalties, and most transparency rules applying on the stated timetable. GDPR applies when AI processes personal data, the Digital Services Act applies to covered online services, consumer-protection rules apply to AI-enabled marketing and influence, and NIS2 applies to covered entities and services." }, { "q": "What is coming next, and when?", "a": "Most transparency rules apply from August 2, 2026. The 2026 Digital Omnibus delayed most high-risk AI obligations to December 2, 2027 for Annex III systems and August 2, 2028 for AI embedded in regulated products." }, { "q": "What are the enforcement and penalty risks?", "a": "Companies may face enforcement from national authorities, the European AI Office, data-protection regulators, and sector regulators. Risk areas include AI Act penalties, GDPR requirements and enforcement, DSA duties, consumer-protection violations such as misleading claims or fake reviews, and NIS2 obligations including incident reporting and management accountability." } ] }, { "id": "baseline:FR", "jurisdiction": "FR", "jurisdiction_name": "France", "url": "/jurisdiction/fr.html", "overview": "France has no standalone, comprehensive AI-specific law; AI is mainly governed by the directly applicable EU AI Act, an EU regulation that is already partly in force, with prohibited practices and AI literacy rules applying, general-purpose AI obligations applying, and the remaining rules phased in, including recently delayed deadlines for high-risk systems. The GDPR, an EU privacy regulation, and France’s Data Protection Act are the main practical constraints on using personal data, while consumer, employment, health, product-safety, cybersecurity, and platform rules may also apply; enforcement is already active through CNIL, DGCCRF, Arcom, and sector regulators, although France’s AI Act market-surveillance system is still being established.", "instruments": [ { "name": "Artificial Intelligence Act, as amended by Regulation (EU) 2026/1744", "status": "partially in force", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=OJ:L_202601744", "summary": "The EU AI Act applies directly in France. Prohibited practices and AI literacy obligations already apply, general-purpose AI model rules apply, and the main system requirements are phasing in; the 2026 amendment moves many high-risk obligations to 2 December 2027 for Annex III systems and 2 August 2028 for AI embedded in regulated products.", "ai_specific": true }, { "name": "General Data Protection Regulation", "status": "in force", "year": 2016, "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "summary": "The GDPR applies whenever an AI system processes personal data, including for training, fine-tuning, inference, monitoring, profiling, or employee management. Companies must address lawful basis, transparency, data-subject rights, purpose limitation, data minimization, security, automated decision-making, impact assessments, and processor or joint-controller arrangements." }, { "name": "Loi Informatique et Libertés", "status": "in force", "year": 1978, "url": "https://www.legifrance.gouv.fr/loda/id/JORFTEXT000000886460/", "summary": "This French statute supplements the GDPR, sets national rules and exemptions, and provides the legal basis for CNIL supervision and enforcement in France. CNIL guidance on AI development, scraping, model training, security, and high-risk processing is an important indicator of enforcement expectations." }, { "name": "Loi visant à sécuriser et à réguler l'espace numérique", "status": "in force", "year": 2024, "url": "https://www.legifrance.gouv.fr/loda/id/JORFTEXT000049563368/", "summary": "This French law supplies national implementation and enforcement arrangements for the EU Digital Services Act, including the roles of Arcom, CNIL, and DGCCRF. It matters when AI is used in an online platform, recommender system, chatbot, search service, content-moderation workflow, or service handling illegal or harmful content, especially involving minors." }, { "name": "Code de la consommation", "status": "in force", "year": 1993, "url": "https://www.legifrance.gouv.fr/codes/id/LEGITEXT000006069565/", "summary": "French consumer law applies to AI products and services marketed to consumers, including AI-generated claims, automated customer interactions, subscription terms, pricing, recommendations, and disclosures about system capabilities. Misleading commercial practices, unfair terms, unsafe products, and inadequate pre-contract information can trigger DGCCRF action even where the AI Act does not apply." } ], "faq": [ { "q": "Is there an AI-specific law in force here?", "a": "France has no standalone, comprehensive French AI Act. The EU AI Act applies directly in France and is already partially in force, including rules on prohibited practices, AI literacy, and general-purpose AI models." }, { "q": "Who are the key regulators for AI?", "a": "Key regulators include CNIL for data protection, DGCCRF for consumer and product-related issues, and Arcom for online platform and digital-service matters. Sector regulators may also be involved, while France’s market-surveillance structure for the AI Act is still being operationalized." }, { "q": "Which rules apply to AI systems today?", "a": "The EU AI Act, GDPR, and France’s Data Protection Act are the main rules. Depending on the use case, the Digital Services framework, consumer law, employment, health, product-safety, and cybersecurity rules may also apply." }, { "q": "What is coming next, and when?", "a": "The EU AI Act’s remaining requirements are phasing in. Following the 2026 amendment, many high-risk obligations apply from 2 December 2027 for Annex III systems and from 2 August 2028 for AI embedded in regulated products." }, { "q": "What are the enforcement and penalty risks?", "a": "Enforcement is already real through CNIL, DGCCRF, Arcom, and sector regulators, even though the AI Act market-surveillance structure is still being set up. Risks include action over unlawful personal-data processing, misleading consumer practices, unsafe products, platform obligations, and breaches of applicable AI Act requirements." } ] }, { "id": "baseline:DE", "jurisdiction": "DE", "jurisdiction_name": "Germany", "url": "/jurisdiction/de.html", "overview": "Germany has an AI-specific legal framework, mainly the directly applicable EU AI Act rather than a standalone German AI law; as of August 6, 2026, its main rules are in force, with additional high-risk product rules starting August 2, 2027. Germany’s AI implementation law, the KI-DUG, entered into force on July 29, 2026 and establishes enforcement authorities, fines, and the Bundesnetzagentur’s coordinating role, while the GDPR, Digital Services Act, consumer law, and sector-specific rules may also apply.", "instruments": [ { "name": "EU Artificial Intelligence Act", "status": "partially in force", "year": 2024, "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng", "summary": "The main AI-specific rulebook for companies placing AI systems or general-purpose AI models on the German market or using them in Germany. Prohibited practices and AI-literacy duties have applied since February 2, 2025; general-purpose AI rules since August 2, 2025; transparency and many high-risk obligations apply from August 2, 2026, with some product-related high-risk rules phased in later.", "ai_specific": true }, { "name": "General Data Protection Regulation", "status": "in force", "year": 2016, "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng", "summary": "The GDPR applies whenever an AI system processes personal data, including training, profiling, personalization, monitoring, and automated decision-making. Companies must establish a lawful basis, provide required information, apply data minimization and security controls, manage processor relationships, assess high-risk processing, and respect individual rights." }, { "name": "Digital Services Act", "status": "in force", "year": 2022, "url": "https://eur-lex.europa.eu/eli/reg/2022/2065/oj/eng", "summary": "The DSA binds online intermediaries, hosting services, platforms, and search engines that use AI for recommendation, ranking, moderation, advertising, or content generation. Relevant duties include notice-and-action processes, transparency about recommender systems and advertising, safeguards for minors, and additional risk-management and audit duties for very large platforms and search engines." }, { "name": "Act against Unfair Competition, UWG", "status": "in force", "year": 2004, "url": "https://www.gesetze-im-internet.de/uwg_2004/BJNR141400004.html", "summary": "The UWG applies to AI-enabled marketing, sales claims, chatbots, personalization, and commercial practices aimed at consumers. It prohibits misleading claims and material omissions, including unsupported claims about an AI product's accuracy, autonomy, safety, or performance." }, { "name": "Digital Services Act Implementation Act, DDG", "status": "in force", "year": 2024, "url": "https://www.gesetze-im-internet.de/ddg/", "summary": "The German DDG supplies national enforcement and institutional rules around the DSA and digital services. It matters to AI companies operating platforms or intermediary services because it identifies German supervisory mechanisms and supports measures against non-compliant services." }, { "name": "German AI Act Implementation Act (Gesetz zur Durchführung der Verordnung über künstliche Intelligenz; Article 1: KI-Marktüberwachungs- und Innovationsförderungsgesetz (KI-MIG))", "status": "in force", "year": 2026, "url": "https://bmds.bund.de/themen/kuenstliche-intelligenz/ki-regulierung", "summary": "Germany’s national implementing legislation for the EU AI Act entered into force on July 29, 2026. It establishes the national supervisory and coordination framework, including the Bundesnetzagentur’s central role, complaint handling, enforcement powers, fines, and innovation support.", "ai_specific": true } ], "faq": [ { "q": "Is there an AI-specific law in force here?", "a": "Yes. Germany’s AI-specific framework is based mainly on the directly applicable EU AI Act, rather than a standalone German AI code. Germany’s KI-DUG entered into force on July 29, 2026 and establishes national authorities, enforcement powers, fines, and the Bundesnetzagentur’s coordinating role." }, { "q": "Who are the key regulators for AI?", "a": "The Bundesnetzagentur has a central coordinating role under Germany’s AI implementation framework. The KI-DUG also establishes national supervisory and enforcement authorities, including complaint-handling mechanisms. Additional German supervisory mechanisms apply under the GDPR, the Digital Services Act, and the DDG where relevant." }, { "q": "Which rules apply to AI systems today?", "a": "The EU AI Act applies, including bans and AI-literacy duties, general-purpose AI rules, transparency duties, and many high-risk obligations, depending on the system and use. The GDPR applies when AI processes personal data, while the Digital Services Act and DDG can apply to platforms and intermediary services. The UWG also applies to AI-enabled marketing, sales claims, chatbots, personalization, and other consumer-facing commercial practices." }, { "q": "What is coming next, and when?", "a": "As of August 6, 2026, transparency duties and many high-risk AI obligations apply under the EU AI Act. Further high-risk product rules are phased in for August 2, 2027. Supervisory guidance and risk-based investigations are expected to develop before there is a settled body of German case law and large-scale enforcement practice." }, { "q": "What are the enforcement and penalty risks?", "a": "The KI-DUG provides national authorities with complaint-handling powers, enforcement powers, and fines, with the Bundesnetzagentur coordinating nationally. Other applicable frameworks, including the GDPR, Digital Services Act, DDG, and UWG, may also create supervisory or enforcement exposure. Enforcement infrastructure now exists, but German case law and large-scale enforcement practice are still developing." } ] }, { "id": "baseline:IN", "jurisdiction": "IN", "jurisdiction_name": "India", "url": "/jurisdiction/in.html", "overview": "No, India does not currently have a standalone, cross-sector AI law or general AI licensing regime. Its main AI-specific binding rule is a 2026 amendment to the Information Technology Rules, which requires online intermediaries to prevent, label, trace the origin of, and remove realistic synthetic audio, video, and audiovisual content. Other AI uses are governed by general privacy, cybersecurity, consumer-protection, and sector-specific rules, while most operational duties under the Digital Personal Data Protection framework are not generally due until May 13, 2027.", "instruments": [ { "name": "Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, as amended in 2026", "status": "in force", "year": 2021, "url": "https://www.meity.gov.in/documents/act-and-policies/information-technology-intermediary-guidelines-and-digital-media-ethics-code-rules-2021-it-rules-2021-IjM5QjMtQWa?pageTitle=Information-Technology-%28Intermediary-Guidelines-and-Digital-Media-Ethics-Code%29-Rules%2C-2021-%28IT-Rules%2C-2021%29", "summary": "The February 20, 2026 amendments define synthetically generated information and impose AI-specific duties on intermediaries that enable users to create, upload or share realistic synthetic media. Relevant companies must use reasonable technical measures to prevent unlawful synthetic content, and significant social media intermediaries must obtain user declarations, verify them and display prominent labels and…", "ai_specific": true }, { "name": "Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025", "status": "partially in force", "year": 2023, "url": "https://www.meity.gov.in/documents/act-and-policies/digital-personal-data-protection-rules-2025-gDOxUjMtQWa", "summary": "The framework governs digital personal data used to train, fine-tune, operate or monitor AI systems where the processing falls within its scope. Institutional and certain administrative provisions are already effective, but most substantive obligations, including notice, consent, processing duties and data-principal rights, are scheduled to take effect 18 months after November 13, 2025, on May 13, 2027." }, { "name": "CERT-In Directions under section 70B of the Information Technology Act, 2000", "status": "in force", "year": 2022, "url": "https://cert-in.org.in/Directions70B.jsp", "summary": "The directions apply as relevant to companies, service providers, intermediaries, cloud providers and other covered entities operating AI infrastructure or products in India. They require incident reporting to CERT-In within prescribed timelines, retention of ICT logs for 180 days, time synchronisation, and cooperation with information requests and investigations." } ], "faq": [ { "q": "Is there an AI-specific law in force here?", "a": "India has no standalone, cross-sector AI law or general AI licensing regime in force. The main AI-specific binding rule is the 2026 amendment to the IT Rules, which covers realistic synthetic audio, visual and audiovisual content and imposes duties on relevant intermediaries." }, { "q": "Who are the key regulators for AI?", "a": "CERT-In is the specifically identified authority for cybersecurity obligations, incident reporting, information requests and investigations under the IT Act. AI oversight also involves the authorities responsible for administering the IT Rules and the Digital Personal Data Protection framework, depending on the system and its use." }, { "q": "Which rules apply to AI systems today?", "a": "The 2026 amendments to the IT Rules apply to intermediaries that enable users to create, upload or share realistic synthetic media, including duties on prevention, labelling, provenance and takedown. CERT-In Directions apply to covered entities operating AI infrastructure or products, including incident reporting, 180-day log retention, time synchronisation and cooperation with investigations. The DPDP framework applies where AI systems process digital personal data within its scope, but most substantive obligations are not generally due until May 13, 2027." }, { "q": "What is coming next, and when?", "a": "The main scheduled development is the start of most substantive operational obligations under the DPDP framework, including notice, consent, processing duties and data-principal rights. These obligations are scheduled to take effect on May 13, 2027, which is 18 months after November 13, 2025." }, { "q": "What are the enforcement and penalty risks?", "a": "Enforcement is active for online content and cybersecurity, so intermediaries and covered AI companies face practical compliance and investigation risk under the IT Rules and CERT-In Directions. Risks include failures involving synthetic-content prevention, labelling, provenance, takedown, incident reporting, log retention or cooperation with information requests. The source does not specify penalty amounts or particular sanctions." } ] }, { "id": "baseline:ID", "jurisdiction": "ID", "jurisdiction_name": "Indonesia", "url": "/jurisdiction/id.html", "overview": "Indonesia currently regulates AI through personal data and electronic systems law, sector rules, and the official 2023 AI Ethics Circular. Two draft presidential regulations, one on AI ethics and one on the National AI Roadmap 2026-2029, were finalized across ministries in May 2026 for submission to the President. They are not yet enacted rules.", "instruments": [ { "name": "Law 27 of 2022 on Personal Data Protection", "status": "in force", "year": 2022, "url": "https://jdih.komdigi.go.id/produk_hukum/view/id/832/t/undangundang%2Bnomor%2B27%2Btahun%2B2022", "summary": "The horizontal privacy law governs personal data processing, controller and processor duties, data-subject rights, security, transfers, breaches, and penalties. It is the main binding baseline for data-intensive AI." }, { "name": "Ministerial Circular 9 of 2023 on AI Ethics", "status": "official guidance", "year": 2023, "url": "https://jdih.komdigi.go.id/produk_hukum/view/id/883/t/surat%2Bedaran%2Bmenteri%2Bkomunikasi%2Bdan%2Binformatika%2Bnomor%2B9%2Btahun%2B2023", "summary": "The circular addresses AI programming businesses and public and private electronic system operators. It calls for internal policies based on safety, transparency, accountability, personal data protection, accessibility, sustainability, and human values." }, { "name": "Electronic Information and Transactions Framework", "status": "in force", "year": 2008, "url": "https://jdih.komdigi.go.id/produk_hukum/view/id/167/t/undangundang%2Bnomor%2B11%2Btahun%2B2008", "summary": "Electronic system operators remain subject to existing requirements on lawful electronic information, system reliability, content, security, and government supervision. AI services do not sit outside this framework." }, { "name": "Ministerial Decision 117 of 2026", "status": "sector guidance", "year": 2026, "url": "https://jdih.komdigi.go.id/produk_hukum/view/id/1015/t/keputusan%2Bmenteri%2Bkomunikasi%2Bdan%2Bdigital%2Bnomor%2B117%2Btahun%2B2026", "summary": "The decision provides official guidance for responsible AI use in education, including governance, ethics, safety, and capability building." } ], "faq": [ { "q": "Is there a comprehensive AI law in force?", "a": "No. The current AI-specific reference is Ministerial Circular 9/2023, read with binding data protection, electronic systems, consumer, intellectual property, and sector rules." }, { "q": "What is changing?", "a": "The government finalized cross-ministry discussion of draft presidential regulations on AI ethics and the National AI Roadmap 2026-2029 in May 2026. Both require final adoption before they can be treated as enacted instruments." }, { "q": "Who is the key regulator?", "a": "The Ministry of Communication and Digital Affairs is central for electronic systems, personal data policy, and national AI governance. Sector regulators remain important for finance, health, education, employment, and other regulated uses." } ] }, { "id": "baseline:IT", "jurisdiction": "IT", "jurisdiction_name": "Italy", "url": "/jurisdiction/it.html", "overview": "As of August 6, 2026, Italy has an AI-specific national law, Law No. 132/2025, but it mainly provides a framework for governance and sector-specific rules rather than replacing the EU AI Act, which is the primary source of AI obligations. Businesses must also consider the GDPR, Italy’s Privacy Code, the Digital Services Act, consumer and cybersecurity laws, with enforcement involving ACN, AgID, the Italian Data Protection Authority, AGCOM, consumer authorities, and sector regulators.", "instruments": [ { "name": "EU AI Act", "status": "partially in force", "year": 2024, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32024R1689", "summary": "This is the core AI-specific regime for companies placing AI systems or general-purpose AI models on the Italian market or deploying them in Italy. Prohibited practices and AI-literacy obligations apply, GPAI obligations apply, and the 2026 Digital Omnibus revised the timing of many high-risk obligations to December 2, 2027 for Annex III systems and August 2, 2028 for Annex I systems.", "ai_specific": true }, { "name": "Law No. 132/2025 on Artificial Intelligence", "status": "in force", "year": 2025, "url": "https://www.gazzettaufficiale.it/atto/vediMenuHTML?atto.codiceRedazionale=25G00143&atto.dataPubblicazioneGazzetta=2025-09-25&tipoSerie=serie_generale&tipoVigenza=originario", "summary": "Italy's national AI law entered into force on October 10, 2025. It sets national principles and sectoral rules for areas including health, work, public administration, justice, education and copyright, designates AgID and ACN as national AI authorities, and delegates further implementing legislation, but it does not replace the EU AI Act's harmonized product obligations.", "ai_specific": true }, { "name": "General Data Protection Regulation and Italian Privacy Code", "status": "in force", "year": 2016, "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "summary": "Any AI system processing personal data must have a lawful basis, meet transparency, purpose limitation, minimization, security and data-subject rights requirements, and address automated decision-making where applicable. Italy's Privacy Code supplements the GDPR, and the Italian Data Protection Authority has actively scrutinized AI training data, scraping, chatbots, biometric data and synthetic media." }, { "name": "Digital Services Act", "status": "in force", "year": 2022, "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R2065", "summary": "The DSA applies when AI is used in an online platform, hosting service, search engine, recommender system, advertising system or content-moderation workflow. It requires notice-and-action processes, transparency around recommender systems and advertising, safeguards for minors, and additional systemic-risk controls for very large platforms and search engines." }, { "name": "Italian Consumer Code", "status": "in force", "year": 2005, "url": "https://www.normattiva.it/atto/caricaDettaglioAtto?atto.codiceRedazionale=005G0232&atto.dataPubblicazioneGazzetta=2005-10-08&tipoDettaglio=originario", "summary": "Consumer-facing AI products and services remain subject to rules against misleading commercial practices, hidden advertising, unfair contract terms, inadequate pre-contract information and defective digital content or services. AI claims about accuracy, autonomy, safety, personalization or expected results must be supportable and presented clearly." }, { "name": "Italian NIS2 Decree, Legislative Decree No. 138/2024", "status": "in force", "year": 2024, "url": "https://www.gazzettaufficiale.it/eli/id/2024/10/01/24G00155/SG", "summary": "For entities in covered essential and important sectors, including certain digital infrastructure, cloud, managed service, health, energy, transport and public-sector environments, AI deployments fall within broader cybersecurity risk-management, incident-reporting, supply-chain and management-accountability duties. It is not an AI law, but it can materially govern the security architecture and operational controls…" } ], "faq": [ { "q": "Is there an AI-specific law in force here?", "a": "Yes. Italy’s Law No. 132/2025 entered into force on October 10, 2025. It is mainly a framework, governance and sectoral law, and does not replace the directly applicable EU AI Act or its harmonized product obligations." }, { "q": "Who are the key regulators for AI?", "a": "AgID and ACN are Italy’s designated national AI authorities. The Italian Data Protection Authority, AGCOM, consumer authorities and sector regulators also have important powers, depending on the AI system and its use. ACN and AgID are making enforcement operational." }, { "q": "Which rules apply to AI systems today?", "a": "The EU AI Act is the main AI-specific regime, with prohibitions and AI-literacy duties already applying and GPAI obligations in force. GDPR and Italy’s Privacy Code, the Digital Services Act, the Italian Consumer Code and cybersecurity rules such as the Italian NIS2 Decree may also apply. Italy’s Law No. 132/2025 adds national principles and sectoral rules for areas including health, work, public administration, justice, education and copyright." }, { "q": "What is coming next, and when?", "a": "The EU AI Act’s high-risk obligations have revised implementation dates under the 2026 Digital Omnibus. Obligations for Annex III systems are scheduled for December 2, 2027, while those for Annex I systems are scheduled for August 2, 2028. Italy’s AI law also delegates further implementing legislation." }, { "q": "What are the enforcement and penalty risks?", "a": "Authorities are already acting against AI-related privacy and digital risks, including issues involving training data, scraping, chatbots, biometric data and synthetic media. Noncompliance may also trigger action under the DSA, consumer law and cybersecurity rules, depending on the deployment. The source identifies enforcement powers and active scrutiny but does not specify penalty amounts." } ] }, { "id": "baseline:JP", "jurisdiction": "JP", "jurisdiction_name": "Japan", "url": "/jurisdiction/jp.html", "overview": "Japan has an AI-specific law, the Act on Promotion of Research and Development and Utilization of AI-related Technology, which fully took effect on September 1, 2025. It mainly promotes AI development and sets governance responsibilities rather than imposing EU AI Act-style licensing or risk categories, so companies are primarily regulated through personal data protection, copyright, consumer and advertising, and sector-specific laws, with AI enforcement still largely guidance-led.", "instruments": [ { "name": "Act on Promotion of Research and Development and Utilization of AI-related Technology", "status": "in force", "year": 2025, "url": "https://www.cao.go.jp/press/new_wave/20251003.html", "summary": "Japan's first AI-specific law establishes national AI governance structures, an AI Basic Plan, and government measures to promote trustworthy AI. It does not create a general licensing system, prohibited-practice list, or broad mandatory conformity assessment for private AI providers, but it supports government guidance, information requests, recommendations, and public disclosure in cases of serious risk or…", "ai_specific": true }, { "name": "Act on the Protection of Personal Information", "status": "in force", "year": 2003, "url": "https://www.ppc.go.jp/en/legal/", "summary": "The APPI governs the collection, use, retention, security, transfer, and disclosure of personal information used to train, test, or operate AI systems. Companies must define purposes of use, handle sensitive personal information carefully, manage vendors and overseas transfers, respond to data-subject rights, and report certain breaches; the PPC has issued specific warnings on generative AI use." }, { "name": "Copyright Act", "status": "in force", "year": 1970, "url": "https://www.bunka.go.jp/english/policy/copyright/", "summary": "Copyright law applies to training data, retrieval corpora, prompts, model outputs, and downstream distribution. Japanese law contains exceptions that can permit certain information-analysis uses, but permission may still be required where uses exceed the exception, substitute for exploitation of the work, or involve infringing outputs; the Agency for Cultural Affairs' AI copyright interpretation is useful but…" }, { "name": "Act against Unjustifiable Premiums and Misleading Representations", "status": "in force", "year": 1962, "url": "https://www.caa.go.jp/en/policy/representation/", "summary": "AI-generated claims about product performance, accuracy, safety, savings, or capabilities must not materially mislead consumers. The Consumer Affairs Agency can require reasonable substantiation for performance claims and impose corrective measures or surcharges, so AI vendors should validate marketing claims and disclose material limitations where needed." }, { "name": "Act on Improving Transparency and Fairness of Specified Digital Platforms", "status": "in force", "year": 2020, "url": "https://www.meti.go.jp/english/policy/mono_info_service/information_economy/digital_platforms/index.html", "summary": "This regime matters mainly to designated large digital platform operators, including certain online marketplaces and app-store businesses that use or distribute AI systems. Covered operators must disclose terms and procedures, maintain fair dealing systems, and submit annual reports, but ordinary AI SaaS providers are generally outside its scope." } ], "faq": [ { "q": "Is there an AI-specific law in force here?", "a": "Yes. Japan’s Act on Promotion of Research and Development and Utilization of AI-related Technology fully took effect on September 1, 2025. It is mainly a promotion, governance, and coordination framework, not an EU AI Act-style licensing or risk-classification regime, and most private-sector duties are responsibilities or efforts supported by government guidance." }, { "q": "Who are the key regulators for AI?", "a": "The Personal Information Protection Commission oversees personal information issues, including data used to train, test, or operate AI systems. The Consumer Affairs Agency handles misleading consumer and advertising claims. The government also uses the AI-specific Act to coordinate policy, issue guidance, request information, make recommendations, and publicly disclose serious risks or non-cooperation." }, { "q": "Which rules apply to AI systems today?", "a": "AI deployments are principally governed by the Act on the Protection of Personal Information, copyright law, consumer and advertising rules, and applicable sector-specific rules. The AI-specific Act also applies, but it does not create a general licensing system, prohibited-practice list, or broad mandatory conformity assessment for private AI providers. Large designated digital platforms may also face transparency and fairness obligations." }, { "q": "What is coming next, and when?", "a": "The AI-specific Act is already fully in force as of September 1, 2025. It establishes national AI governance structures and an AI Basic Plan, with further government guidance and measures to promote trustworthy AI. The source does not provide additional dates for future rules." }, { "q": "What are the enforcement and penalty risks?", "a": "AI-specific enforcement remains comparatively light and guidance-led, but the government may request information, issue recommendations, and publicly disclose serious risks or non-cooperation. More concrete risks arise under adjacent regimes, where the Personal Information Protection Commission and Consumer Affairs Agency can investigate and take administrative action. Misleading performance claims may lead to corrective measures or surcharges, while privacy breaches, improper data handling, copyright infringement, and failures by covered platforms create additional exposure." } ] }, { "id": "baseline:MX", "jurisdiction": "MX", "jurisdiction_name": "Mexico", "url": "/jurisdiction/mx.html", "overview": "Mexico does not have a comprehensive federal AI law in force today. A narrow reform effective May 15, 2026, governs AI-enabled transformation, imitation, and synthetic generation of performers’ voices and interpretations, but it is not a general AI regime. AI is otherwise regulated under existing data protection, consumer protection, copyright, and intellectual property laws, enforced by existing authorities, while comprehensive AI legislation remains pending in Congress.", "instruments": [ { "name": "Federal Law on Protection of Personal Data Held by Private Parties", "status": "in force", "year": 2025, "url": "https://www.diputados.gob.mx/LeyesBiblio/pdf/LFPDPPP.pdf", "summary": "This is the main horizontal constraint on AI systems processing personal data, including training data, prompts, biometric data, profiling, and automated inferences. Companies must establish a lawful, informed, and controlled processing basis, provide privacy notices, respect ARCO rights, use appropriate security measures, and manage processors and data transfers." }, { "name": "Federal Consumer Protection Law", "status": "in force", "year": 1992, "url": "https://www.diputados.gob.mx/LeyesBiblio/ref/lfpc.htm", "summary": "AI products and services must not use misleading advertising, hidden limitations, unfair contract terms, or deceptive claims about accuracy, autonomy, safety, or performance. Consumer-facing AI services should document claims, disclose material limitations, and maintain complaint and redress processes where outputs affect purchasing or service decisions." }, { "name": "Federal Copyright Law", "status": "in force", "year": 1996, "url": "https://www.diputados.gob.mx/LeyesBiblio/ref/lfda.htm", "summary": "The law remains central when a company trains or deploys generative AI using copyrighted works, produces copyrighted outputs, or distributes synthetic content incorporating protected works or performances. Rights clearance, contractual permissions, and controls against unauthorized reproduction or transformation should be addressed separately from AI model performance." }, { "name": "Decreto por el que se reforman y adicionan diversas disposiciones de la Ley Federal del Trabajo y de la Ley Federal del Derecho de Autor, en materia de derechos de las personas trabajadoras artistas intérpretes o ejecutantes", "status": "in force", "year": 2026, "url": "https://www.diputados.gob.mx/LeyesBiblio/ref/lft/LFT_ref54_14may26.pdf", "summary": "Amends labor and copyright law to protect artists, interpreters, and performers against AI-generated cloning or simulation of their image, voice, or performances. It requires specific contractual terms and consent for AI-related uses and grants enforceable rights against unauthorized substitution or impersonation.", "ai_specific": true } ], "faq": [ { "q": "Is there an AI-specific law in force here?", "a": "Mexico has no comprehensive federal AI law in force today. A narrow reform effective May 15, 2026, covers AI-enabled transformation, imitation, and synthetic generation of performers’ voices and interpretations, but it is not a general AI regime." }, { "q": "Who are the key regulators for AI?", "a": "There is no dedicated AI regulator or general AI licensing system. Existing authorities and courts handle AI-related issues, especially the Secretariat for Anti-Corruption and Good Government for private-sector data protection, PROFECO for consumer matters, and INDAUTOR or IMPI for copyright and intellectual property issues." }, { "q": "Which rules apply to AI systems today?", "a": "The main rules are the federal data protection, consumer protection, copyright, and intellectual property frameworks. These cover personal-data processing, privacy notices, ARCO rights, security, misleading claims, consumer redress, copyrighted training data and outputs, and permissions for protected works or performances. A reform also protects artists, interpreters, and performers against unauthorized AI cloning or simulation of their image, voice, or performances." }, { "q": "What is coming next, and when?", "a": "Comprehensive AI legislation remains pending in Congress, and no further timing is provided in the source. The performer-focused reform is already in force effective May 15, 2026, with specific contractual and consent requirements for relevant AI uses." }, { "q": "What are the enforcement and penalty risks?", "a": "AI-related enforcement is handled under existing laws by the relevant authorities and courts, rather than by a dedicated AI regulator. Risks include action over unlawful personal-data processing, misleading or deceptive consumer practices, copyright or intellectual property violations, and unauthorized cloning or impersonation of performers. The source does not specify penalty amounts." } ] }, { "id": "baseline:SG", "jurisdiction": "SG", "jurisdiction_name": "Singapore", "url": "/jurisdiction/sg.html", "overview": "Singapore does not currently have a comprehensive AI-specific law or binding, economy-wide AI rule in force. AI is regulated through existing laws, including the Personal Data Protection Act, consumer protection and online harms laws, and sector-specific rules; government tools such as the Model AI Governance Framework, which provides voluntary guidance, and AI Verify, which tests AI systems, are not legislation. Regulators can investigate, issue orders, impose financial penalties, restrict services, or bring proceedings when AI use breaches these laws.", "instruments": [ { "name": "Personal Data Protection Act 2012", "status": "in force", "year": 2012, "url": "https://sso.agc.gov.sg/Act/PDPA2012", "summary": "The main horizontal constraint on AI using personal data. Companies must address consent or another valid basis, purpose limitation, notification, accuracy, security, retention, overseas transfers, access and correction, accountability, and breach notification across AI training, fine-tuning, inference, monitoring, and vendor use." }, { "name": "Consumer Protection (Fair Trading) Act 2003", "status": "in force", "year": 2003, "url": "https://sso.agc.gov.sg/Act/CPFTA2003", "summary": "AI products and services sold to consumers must not mislead, make false claims, exploit consumers, or misrepresent capabilities, accuracy, approval, performance, or benefits. This is relevant to AI marketing, automated sales, recommender systems, chatbots, and AI-enabled goods and services." }, { "name": "Online Criminal Harms Act 2023", "status": "in force", "year": 2023, "url": "https://sso.agc.gov.sg/Act/OCHA2023", "summary": "Online service providers can be subject to stop-communication, disabling, access-blocking, account-restriction, app-removal, and service-restriction directions relating to online criminal activity. AI platforms and services should have processes for responding to government directions and limiting AI-enabled scams, fraud, and other criminal content." }, { "name": "Code of Practice for Online Safety: Social Media Services", "status": "in force", "year": 2023, "url": "https://www.imda.gov.sg/-/media/imda/files/regulations-and-licensing/regulations/online-safety/2025/online-safety-assessment-report-designated-social-media-services.pdf", "summary": "The Code is legally binding on designated social media services, currently including major services such as Facebook, Instagram, TikTok, X, YouTube, and HardwareZone. It requires systems and processes to reduce harmful content exposure, protect children, provide reporting and user-safety tools, and support accountability, including where AI is used for generation, ranking, recommendation, or moderation." }, { "name": "MAS Notices on Technology Risk Management", "status": "in force", "year": 2024, "url": "https://www.mas.gov.sg/-/media/mas-media-library/regulation/faqs/trpd/faqs---notice-on-technology-risk-management/updated-faqs-trm-notice-feb-2024-final.pdf", "summary": "These binding notices apply to specified financial institutions, including banks, insurers, payment firms, capital-markets firms, and financial advisers. An AI system that forms part of a regulated institution's technology environment may need to meet requirements on critical systems, resilience, incident reporting, security, outsourcing, and protection of customer information." } ], "faq": [ { "q": "Is there an AI-specific law in force here?", "a": "No. Singapore has no comprehensive AI-specific statute or binding, economy-wide AI rule in force today. The Model AI Governance Frameworks, AI Verify, and related assurance tools are influential but voluntary." }, { "q": "Who are the key regulators for AI?", "a": "The key regulators named in the source are the Personal Data Protection Commission, the Infocomm Media Development Authority, the Competition and Consumer Commission of Singapore, and sector regulators. The Monetary Authority of Singapore is relevant for specified financial institutions. Their roles depend on the laws and sectors involved." }, { "q": "Which rules apply to AI systems today?", "a": "AI systems may be subject to the Personal Data Protection Act, including rules on personal data use, security, retention, overseas transfers, access, correction, accountability, and breach notification. Consumer-facing AI must comply with the Consumer Protection (Fair Trading) Act, while the Online Criminal Harms Act and the Code of Practice for Online Safety apply to relevant online services. MAS technology risk management notices also apply to specified financial institutions and their technology environments." }, { "q": "What is coming next, and when?", "a": "The source does not identify a forthcoming AI-specific law or provide a timeline for new rules. For now, the stated position is that Singapore relies on existing laws, sector requirements, and voluntary tools such as the Model AI Governance Frameworks and AI Verify." }, { "q": "What are the enforcement and penalty risks?", "a": "Enforcement can include investigations, directions, financial penalties, service restrictions, and legal proceedings when an AI deployment breaches an existing regime. Under the Online Criminal Harms Act, authorities may also direct providers to stop communications, disable or block access, restrict accounts, remove apps, or restrict services. The specific risk depends on the applicable law, sector, and conduct." } ] }, { "id": "baseline:TR", "jurisdiction": "TR", "jurisdiction_name": "Turkey", "url": "/jurisdiction/tr.html", "overview": "No, Türkiye does not have a comprehensive, AI-specific law in force as of August 6, 2026. AI deployments are mainly governed by the Personal Data Protection Law, internet and platform rules, consumer protection law, and cybersecurity requirements for covered entities, while the Turkish Data Protection Authority’s AI and generative-AI guidance is supervisory guidance rather than a standalone law. Enforcement is active under these existing rules, and AI-specific bills remain pending in Parliament.", "instruments": [ { "name": "Personal Data Protection Law No. 6698", "status": "in force", "year": 2016, "url": "https://www.kvkk.gov.tr/Icerik/6649/Personal-Data-Protection-Law", "summary": "This is the central regime for AI systems that collect, train on, infer from, or generate personal data. Companies must establish a lawful processing basis, provide notices, respect data-subject rights including objections to solely automated outcomes, secure data, manage international transfers, and address special-category data such as biometric and health data." }, { "name": "Law No. 5651 on Regulation of Publications on the Internet and Combating Crimes Committed through Such Publications", "status": "in force", "year": 2007, "url": "https://www.tbmm.gov.tr/Yasama/Kanun/f72877be-36ba-037b-e050-007f01005610", "summary": "This applies to online services that host, distribute, or facilitate user content, including AI-generated content and social-network functionality. Depending on the service and user scale, obligations can include content-removal and access-blocking processes, cooperation with authorities, representation in Türkiye, response handling, and periodic reporting." }, { "name": "Cybersecurity Law No. 7545", "status": "in force", "year": 2025, "url": "https://siberguvenlik.gov.tr/mevzuat", "summary": "The law establishes Türkiye’s national cybersecurity framework and applies broadly to public and private entities operating in cyberspace, with more substantial duties for designated or critical entities. AI companies should assess whether their systems, data, cloud infrastructure, or sectoral activities trigger security controls, incident obligations, audits, or requirements imposed through implementing rules." } ], "faq": [ { "q": "Is there an AI-specific law in force here?", "a": "No. As of August 6, 2026, Türkiye has no comprehensive AI-specific law in force. The Turkish Data Protection Authority has issued AI and generative-AI guidance, but this is supervisory guidance rather than a standalone AI statute." }, { "q": "Who are the key regulators for AI?", "a": "The Turkish Data Protection Authority is a key regulator because the Personal Data Protection Law applies to many AI activities involving personal data. Other relevant regulators and authorities enforce internet and platform rules, consumer protection law, and cybersecurity requirements, depending on the system and sector." }, { "q": "Which rules apply to AI systems today?", "a": "AI systems may be subject to Personal Data Protection Law No. 6698, including rules on lawful processing, notices, data-subject rights, security, international transfers, and special-category data. Online services may also be subject to Law No. 5651, including content-removal, access-blocking, cooperation, representation, response-handling, and reporting duties. Cybersecurity Law No. 7545 may impose security controls, incident obligations, audits, or other requirements, especially on designated or critical entities." }, { "q": "What is coming next, and when?", "a": "AI-specific bills remain pending in Parliament. The source does not provide a date for their adoption or entry into force. Until then, AI deployments continue to be governed mainly by existing data protection, internet and platform, consumer protection, and cybersecurity rules." }, { "q": "What are the enforcement and penalty risks?", "a": "Enforcement is active, with regulators using existing powers against data-processing, online content, platform conduct, and cybersecurity failures. The specific risk depends on which rules apply, whether the entity is covered, and the nature of the failure. The source does not specify particular penalty amounts." } ] }, { "id": "baseline:AE", "jurisdiction": "AE", "jurisdiction_name": "United Arab Emirates", "url": "/jurisdiction/ae.html", "overview": "The UAE does not currently have a single comprehensive federal AI statute. Its framework combines binding federal personal data and cyber law, national AI policy instruments, emirate and free-zone rules, and sector supervision. The UAE Charter and National AI Security Policy set important governance expectations, while regulated firms may face more specific requirements in jurisdictions such as the DIFC.", "instruments": [ { "name": "Federal Decree-Law 45 of 2021 on Personal Data Protection", "status": "in force", "year": 2021, "url": "https://u.ae/en/about-the-uae/digital-uae/data/data-protection-laws", "summary": "The federal privacy law governs electronic personal data processing inside and outside the UAE, including lawful processing, data security, individual rights, transfers, and controller and processor duties. Some free zones maintain separate data regimes." }, { "name": "UAE Charter for the Development and Use of Artificial Intelligence", "status": "adopted charter", "year": 2024, "url": "https://ai.gov.ae/wp-content/uploads/2024/07/UAEAI-Methaq-EN2-3.pdf", "summary": "The charter establishes national principles for safety, privacy, fairness, transparency, human oversight, accountability, accessibility, and compliance with applicable law." }, { "name": "National Cyber Security Policy for Artificial Intelligence", "status": "national policy", "year": 2026, "url": "https://u.ae/en/about-the-uae/strategies-initiatives-and-awards/policies/cyber-activities/The-National-Cyber-Security-Policy-for-Artificial-Intelligence", "summary": "The policy defines minimum AI security requirements across governance, inventories, secure development, model and data protection, operational safety, adversarial attacks, monitoring, incident response, and performance evaluation." }, { "name": "DIFC Data Protection Law 5 of 2020", "status": "in force in DIFC", "year": 2020, "url": "https://u.ae/-/media/Documents-2022/Data_Protection_Law_final--DIFC.pdf", "summary": "Organizations operating in the DIFC must assess its separate data protection regime, including accountability, lawful processing, rights, transfers, security, and requirements relevant to automated processing." } ], "faq": [ { "q": "Is there a federal AI Act?", "a": "No comprehensive federal AI statute is in force. Binding obligations arise from federal privacy, cyber, consumer, employment, and sector law, plus emirate and free-zone regimes. National AI instruments provide policy and security benchmarks." }, { "q": "Does one UAE data law apply everywhere?", "a": "No. Federal law is central, but financial free zones such as the DIFC and ADGM maintain separate data protection and regulatory frameworks. Scope depends on establishment, activity, customers, and data flows." }, { "q": "Which AI rules matter most for financial firms?", "a": "A firm should identify its regulator and legal jurisdiction first. The DFSA has published AI risk-management expectations for DIFC firms, while other federal, emirate, free-zone, and sector requirements may apply elsewhere." } ] }, { "id": "baseline:UK", "jurisdiction": "UK", "jurisdiction_name": "United Kingdom", "url": "/jurisdiction/uk.html", "overview": "The UK does not have a single, comprehensive AI-specific law equivalent to the EU AI Act. AI is mainly regulated through existing data protection, online safety, consumer protection, equality and sector-specific laws, with targeted AI rules in some newer legislation. The ICO, Ofcom and CMA actively enforce these rules, but the UK has no single AI regulator or general AI licensing regime.", "instruments": [ { "name": "Data (Use and Access) Act 2025", "status": "partially in force", "year": 2025, "url": "https://www.legislation.gov.uk/ukpga/2025/18/contents", "summary": "This is not a general AI Act, but it contains targeted AI provisions, including duties concerning AI and copyright reporting and amendments affecting automated decision-making under UK data protection law. It also created offences concerning the creation or request of non-consensual intimate-image deepfakes, with provisions brought into force in stages.…", "ai_specific": true }, { "name": "UK General Data Protection Regulation and Data Protection Act 2018", "status": "in force", "year": 2018, "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/", "summary": "These rules bind AI systems that process personal data, covering lawful basis, transparency, purpose limitation, minimisation, accuracy, security, individual rights, impact assessments and safeguards for significant automated decisions. The ICO treats AI deployment as an ordinary data-protection compliance issue with heightened risks, not as a separate exempt category.…" }, { "name": "Online Safety Act 2023", "status": "in force", "year": 2023, "url": "https://www.legislation.gov.uk/ukpga/2023/50/contents", "summary": "The Act applies to in-scope user-to-user services, search services and some chatbot or answer-engine services. Providers must conduct illegal-content and child-safety risk assessments, operate proportionate systems and processes, keep records and comply with Ofcom codes; AI-generated material shared by users is generally treated as user-generated content.…" }, { "name": "Digital Markets, Competition and Consumers Act 2024", "status": "in force", "year": 2024, "url": "https://www.legislation.gov.uk/ukpga/2024/13/contents", "summary": "For consumer-facing AI products, the Act prohibits misleading actions and omissions, aggressive practices, hidden mandatory fees and fake reviews, and gives the CMA direct enforcement powers. AI-generated recommendations, claims about model capability, pricing, subscriptions and autonomous purchasing behaviour must therefore be accurate, fair and professionally diligent.…" }, { "name": "Equality Act 2010", "status": "in force", "year": 2010, "url": "https://www.legislation.gov.uk/ukpga/2010/15/contents", "summary": "AI used in recruitment, employment, housing, education, financial services or other protected activities must not cause unlawful discrimination. Liability can arise from biased training data, proxy variables, automated ranking, profiling or a failure to provide reasonable adjustments, even where a vendor supplied the system." }, { "name": "Crime and Policing Act 2026", "status": "partially in force", "year": 2026, "url": "https://www.legislation.gov.uk/ukpga/2026/20/contents", "summary": "The Act creates targeted offences for making, adapting, supplying or offering tools that generate child sexual abuse material or non-consensual intimate images, including relevant AI models and services. It also gives ministers powers intended to bring currently unregulated AI chatbots into parts of the Online Safety Act framework, subject to commencement and secondary legislation.…", "ai_specific": true } ], "faq": [ { "q": "Is there an AI-specific law in force here?", "a": "No. The UK does not have one comprehensive AI-specific law equivalent to the EU AI Act, a single AI regulator, or a general AI licensing regime. It does have targeted AI provisions in newer legislation, including the Data (Use and Access) Act 2025 and the Crime and Policing Act 2026, some of which are only partially in force." }, { "q": "Who are the key regulators for AI?", "a": "The key regulators are the Information Commissioner’s Office, Ofcom and the Competition and Markets Authority. They use their existing powers to investigate and take action in areas including data protection, online safety, consumer protection and competition. There is no single UK AI regulator." }, { "q": "Which rules apply to AI systems today?", "a": "The UK GDPR and Data Protection Act 2018 apply where AI processes personal data, including rules on lawful basis, transparency, security, individual rights and significant automated decisions. The Online Safety Act 2023 applies to in-scope online services, while the Digital Markets, Competition and Consumers Act 2024 and Equality Act 2010 apply to consumer-facing products and uses that may mislead, disadvantage or discriminate. Targeted provisions in the Data (Use and Access) Act 2025 and Crime and Policing Act 2026 also apply as they come into force." }, { "q": "What is coming next, and when?", "a": "The Data (Use and Access) Act 2025 and Crime and Policing Act 2026 are being brought into force in stages, including targeted provisions on AI and copyright reporting, automated decision-making, deepfakes and harmful AI tools. The Crime and Policing Act 2026 also gives ministers powers intended to bring currently unregulated AI chatbots into parts of the Online Safety Act framework. The timing of those chatbot changes depends on commencement and secondary legislation." }, { "q": "What are the enforcement and penalty risks?", "a": "Enforcement is active, with the ICO, Ofcom and CMA investigating and taking action under their existing powers. Risks include action for unlawful personal-data processing, online-safety failures, misleading or unfair consumer practices, and discrimination. The newer legislation also creates criminal offences relating to non-consensual intimate-image deepfakes and tools that generate child sexual abuse material or such images." } ] }, { "id": "baseline:US", "jurisdiction": "US", "jurisdiction_name": "United States (federal)", "url": "/jurisdiction/us.html", "overview": "The United States has no comprehensive federal AI-specific law creating general licensing, risk classification, or safety requirements for private AI developers and users. AI-specific federal laws include the TAKE IT DOWN Act, which addresses certain nonconsensual intimate deepfakes and platform takedowns, and a 2025 federal law that broadly limits state and local AI regulation for ten years, subject to exceptions. Most AI systems are governed instead by existing consumer-protection, privacy, health, child-safety, and financial-discrimination laws, enforced by multiple agencies, especially the FTC, rather than by a single AI regulator.", "instruments": [ { "name": "TAKE IT DOWN Act", "status": "in force", "year": 2025, "url": "https://www.congress.gov/119/plaws/publ12/PLAW-119publ12.pdf", "summary": "The Act criminalizes certain nonconsensual publication of intimate images, including AI-generated digital forgeries. Covered platforms must provide a notice-and-removal process and remove qualifying content and known identical copies within 48 hours of a valid request; the platform provisions became enforceable on May 19, 2026.", "ai_specific": true }, { "name": "Artificial Intelligence and Information Technology Modernization Initiative, P.L. 119-21 §43201", "status": "in force", "year": 2025, "url": "https://www.congress.gov/119/plaws/publ21/PLAW-119publ21.pdf", "summary": "This provision generally bars states and localities from enforcing laws regulating AI models, AI systems, or automated decision systems for ten years, subject to statutory exceptions. It does not create federal AI safety, licensing, disclosure, or model-governance duties for private companies, but it materially changes the state-law landscape and remains important when assessing preemption and litigation risk.", "ai_specific": true }, { "name": "Federal Trade Commission Act, Section 5", "status": "in force", "year": 1914, "url": "https://www.ftc.gov/legal-library/browse/statutes/federal-trade-commission-act", "summary": "Section 5 prohibits unfair or deceptive acts or practices, including misleading claims about AI accuracy, safety, autonomy, performance, or data practices. The FTC has used enforcement actions, settlements, product or model deletion remedies, investigations, and penalties against AI-related conduct, making this the central cross-sector federal regime for commercial AI." }, { "name": "Children's Online Privacy Protection Act and COPPA Rule", "status": "in force", "year": 1998, "url": "https://www.ftc.gov/legal-library/browse/statutes/childrens-online-privacy-protection-act", "summary": "COPPA applies to online services directed to children under 13 and to services with actual knowledge that they collect personal information from children. AI chatbots, educational tools, voice assistants, recommender systems, and companion products may need verifiable parental consent, data minimization, parental access and deletion controls, retention limits, and reasonable security safeguards." }, { "name": "HIPAA Privacy, Security, and Breach Notification Rules", "status": "in force", "year": 1996, "url": "https://www.hhs.gov/hipaa/for-professionals/privacy/index.html", "summary": "For covered health plans, health care providers, clearinghouses, and their business associates, HIPAA governs the use, disclosure, security, and breach reporting of protected health information used by AI systems. AI vendors handling protected health information for covered entities generally need appropriate contractual, access-control, security, minimum-necessary, audit, and incident-response arrangements." }, { "name": "Equal Credit Opportunity Act and Regulation B", "status": "in force", "year": 1974, "url": "https://www.consumerfinance.gov/compliance/circulars/circular-2022-03-adverse-action-notification-requirements-in-connection-with-credit-decisions-based-on-complex-algorithms/", "summary": "Creditors using AI or machine-learning models must comply with ECOA and Regulation B, including nondiscrimination rules and specific, accurate adverse-action reasons. A model's complexity or opacity is not a defense if the creditor cannot explain the principal reasons for a credit denial or other adverse action." } ], "faq": [ { "q": "Is there an AI-specific law in force here?", "a": "There is no comprehensive federal AI law creating a general licensing, risk-classification, or safety regime for private AI developers and deployers. The TAKE IT DOWN Act and a 2025 federal law limiting state and local AI regulation are the two main AI-specific federal measures currently in force." }, { "q": "Who are the key regulators for AI?", "a": "The Federal Trade Commission is the central cross-sector federal enforcer for commercial AI, particularly under Section 5 of the FTC Act. Regulation is fragmented across agencies and sectors, with health, child-safety, privacy, and financial-discrimination rules also shaping oversight." }, { "q": "Which rules apply to AI systems today?", "a": "AI systems may be subject to the FTC Act, COPPA, HIPAA, and ECOA and Regulation B, depending on their use and the organization deploying them. The TAKE IT DOWN Act also applies to certain nonconsensual intimate AI-generated deepfakes and requires covered platforms to provide notice and removal processes." }, { "q": "What is coming next, and when?", "a": "The 2025 federal law generally limits states and localities from enforcing AI, model, and automated-decision-system laws for ten years, subject to statutory exceptions, and it is already in force. The TAKE IT DOWN Act's platform provisions became enforceable on May 19, 2026, while existing sector-specific rules and enforcement continue to apply." }, { "q": "What are the enforcement and penalty risks?", "a": "The FTC actively investigates and brings enforcement actions involving misleading claims about AI accuracy, safety, autonomy, performance, or data practices, using settlements, penalties, investigations, and product or model deletion remedies. Depending on the use case, companies may also face enforcement under COPPA, HIPAA, ECOA and Regulation B, or the TAKE IT DOWN Act." } ] } ], "measures": [ { "id": "m:US-CA:SB11", "jur": "US-CA", "level": "state", "num": "SB11", "title": "Artificial intelligence technology.", "sum": "CA SB11 addresses artificial intelligence technology across multiple domains, including amendments to civil code regarding persona rights (Section 3344), evidence rules for AI-generated content (Evidence Code), and penal provisions for AI misuse. The bill substantively regulates deepfakes,…", "stage": "vetoed", "cats": [ "deepfakes", "privacy", "consumer-financial" ], "secs": [ "media" ], "date": "2026-03-02", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB11" }, { "id": "m:US-CA:SB7", "jur": "US-CA", "level": "state", "num": "SB7", "title": "Employment: automated decision systems.", "sum": "CA SB7 would establish requirements for employers using automated decision systems in employment contexts, likely including transparency, impact assessment, and bias-mitigation obligations. The bill was vetoed but represents a substantive attempt to regulate algorithmic hiring and employment…", "stage": "vetoed", "cats": [ "hiring", "anti-discrimination", "disclosures" ], "secs": [ "hr" ], "date": "2026-03-02", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB7" }, { "id": "m:US-SC:H3431", "jur": "US-SC", "level": "state", "num": "H3431", "title": "South Carolina Social Media Regulation Act", "sum": "SC H3431 regulates how online services collect, use, and protect personal data of minors, including requirements for reasonable care, data-minimization practices, parental controls, and annual compliance reporting. While nominally about 'social media regulation,' the bill's focus on algorithmic…", "stage": "passed", "cats": [ "minors", "privacy" ], "secs": [ "consumer" ], "date": "2026-02-06", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=3431&session=126&summary=B" }, { "id": "m:US-SC:H3049", "jur": "US-SC", "level": "state", "num": "H3049", "title": "Uniform Civil Remedies for Unauthorized Disclosure of Intimate Images Act", "sum": "SC H3049 creates a civil remedy for individuals harmed by unauthorized disclosure of intimate images without consent, including deepfakes and non-consensual intimate imagery (NCII). The bill defines terms, establishes damages, and provides limited exceptions to liability.", "stage": "passed", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-05-26", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=3049&session=126&summary=B" }, { "id": "m:US-WA:SB5094", "jur": "US-WA", "level": "state", "num": "SB5094", "title": "Concerning sexually explicit depictions of minors.", "sum": "WA SB5094 addresses sexually explicit depictions of minors, likely including synthetic or AI-generated child sexual abuse material (CSAM). The bill prohibits creation, distribution, or possession of such depictions.", "stage": "introduced", "cats": [ "deepfakes", "minors" ], "secs": [ "consumer", "media" ], "date": "2026-01-12", "url": "https://app.leg.wa.gov/billsummary?BillNumber=5094&Year=2025&Initiative=false" }, { "id": "m:US-WA:SB5105", "jur": "US-WA", "level": "state", "num": "SB5105", "title": "Revised for 1st substitute: Concerning sexually explicit depictions of minors.", "sum": "WA SB5105 addresses sexually explicit depictions of minors, including those created through synthetic/AI-generated means (deepfakes). The bill establishes prohibitions and penalties for creation, distribution, and possession of such material.", "stage": "passed", "cats": [ "deepfakes", "minors" ], "secs": [ "consumer", "media" ], "date": "2026-03-25", "url": "https://app.leg.wa.gov/billsummary?BillNumber=5105&Year=2025&Initiative=false" }, { "id": "m:US-NY:A00235", "jur": "US-NY", "level": "state", "num": "A00235", "title": "Requires the owner, licensee or operator of a visual or audio generative artificial intelligence system to take steps to prohibit its users from creating unauthorized realistic depictions…", "sum": "This bill requires owners and operators of visual or audio generative AI systems to implement safeguards preventing users from creating unauthorized realistic depictions of public officials. The measure targets deepfake and synthetic media creation as a tool for potential election interference or…", "stage": "introduced", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A235" }, { "id": "m:US-NY:A00222", "jur": "US-NY", "level": "state", "num": "A00222", "title": "Imposes liability for misleading, incorrect, contradictory or harmful information to a user by a chatbot that results in financial loss or other demonstrable harm.", "sum": "This bill establishes liability for chatbots that provide misleading, incorrect, contradictory, or harmful information to users resulting in financial loss or demonstrable harm. It directly targets chatbot accountability and disclosure of chatbot status.", "stage": "introduced", "cats": [ "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-03-05", "url": "https://www.nysenate.gov/legislation/bills/2025/A222" }, { "id": "m:US-NY:A00606", "jur": "US-NY", "level": "state", "num": "A00606", "title": "Requires advertisements to disclose the use of a synthetic performer; imposes a $1,000 civil penalty for a first violation and a $5,000 penalty for any subsequent violation.", "sum": "Requires advertisements containing synthetic performers (AI-generated or deepfake talent) to include clear disclosure to consumers. Establishes civil penalties of $1,000 for first violations and $5,000 for subsequent violations.", "stage": "introduced", "cats": [ "deepfakes", "disclosures", "consumer-financial" ], "secs": [ "media" ], "date": "2026-01-12", "url": "https://www.nysenate.gov/legislation/bills/2025/A606" }, { "id": "m:US-NY:A00768", "jur": "US-NY", "level": "state", "num": "A00768", "title": "Enacts the \"New York artificial intelligence consumer protection act\", in relation to preventing the use of artificial intelligence algorithms to discriminate against protected classes.", "sum": "NY A00768 enacts a consumer protection act focused on preventing AI algorithms from discriminating against protected classes. The bill targets algorithmic discrimination in consumer-facing contexts, likely establishing liability and enforcement mechanisms similar to the Colorado AI Act model.", "stage": "introduced", "cats": [ "anti-discrimination", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A768" }, { "id": "m:US-NY:A00773", "jur": "US-NY", "level": "state", "num": "A00773", "title": "Relates to the use of automated lending decision-making tools by banks for the purposes of making lending decisions; allows loan applicants to consent to or opt out of such use.", "sum": "This bill regulates the use of automated lending decision-making tools by banks, requiring loan applicants to be able to consent to or opt out of algorithmic decisions in lending. It addresses both transparency and borrower autonomy in algorithmic credit decisions.", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination", "disclosures" ], "secs": [ "finserv" ], "date": "2026-04-30", "url": "https://www.nysenate.gov/legislation/bills/2025/A773" }, { "id": "m:US-NY:S00934", "jur": "US-NY", "level": "state", "num": "S00934", "title": "Requires the owner, licensee or operator of a generative artificial intelligence system to conspicuously display a notice on the system's user interface that is reasonably calculated to…", "sum": "Requires owners and operators of generative AI systems to display a conspicuous notice on the user interface warning that outputs may be inaccurate. The notice must be reasonably calculated to consistently inform users of potential errors.", "stage": "engrossed", "cats": [ "disclosures", "consumer-financial" ], "secs": [], "date": "2026-03-09", "url": "https://www.nysenate.gov/legislation/bills/2025/S934" }, { "id": "m:US-NY:S00933", "jur": "US-NY", "level": "state", "num": "S00933", "title": "Establishes the position of chief artificial intelligence officer and such person's functions, powers and duties; including, but not limited to, developing statewide artificial intelligence…", "sum": "Establishes a chief artificial intelligence officer position within New York State to develop statewide AI policies, governance frameworks, and coordinate AI use across all state departments, boards, commissions, agencies, and authorities.", "stage": "engrossed", "cats": [ "governance", "gov-use" ], "secs": [], "date": "2026-03-05", "url": "https://www.nysenate.gov/legislation/bills/2025/S933" }, { "id": "m:US-WA:HB1170", "jur": "US-WA", "level": "state", "num": "HB1170", "title": "Informing users when content is developed or modified by artificial intelligence.", "sum": "WA HB1170 requires users to be informed when content (text, images, audio, video) is developed or modified by artificial intelligence. The bill establishes a transparency mandate effective February 1, 2027, with potential enforcement implications under consumer protection law.", "stage": "passed", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "media" ], "date": "2026-03-24", "url": "https://app.leg.wa.gov/billsummary?BillNumber=1170&Year=2025&Initiative=false" }, { "id": "m:US-WA:HB1169", "jur": "US-WA", "level": "state", "num": "HB1169", "title": "Concerning offenses involving fabricated depictions of minors.", "sum": "WA HB1169 creates criminal offenses for creating, distributing, or possessing fabricated depictions (deepfakes, synthetic media) of minors. The bill directly targets AI-generated or manipulated sexual or nude imagery of children.", "stage": "introduced", "cats": [ "deepfakes", "minors" ], "secs": [ "consumer", "media" ], "date": "2026-01-12", "url": "https://app.leg.wa.gov/billsummary?BillNumber=1169&Year=2025&Initiative=false" }, { "id": "m:US-WA:HB1168", "jur": "US-WA", "level": "state", "num": "HB1168", "title": "Increasing transparency in artificial intelligence.", "sum": "WA HB1168 mandates increased transparency requirements for artificial intelligence systems, likely including disclosure of AI use, training data practices, or algorithmic decision-making to users and/or regulators. The bill establishes baseline transparency obligations as part of state-level AI…", "stage": "introduced", "cats": [ "governance", "disclosures" ], "secs": [], "date": "2026-01-12", "url": "https://app.leg.wa.gov/billsummary?BillNumber=1168&Year=2025&Initiative=false" }, { "id": "m:US-CA:AB93", "jur": "US-CA", "level": "state", "num": "AB93", "title": "Water resources: data centers.", "sum": "CA AB93 adds regulatory provisions to California's Business and Professions Code and Water Code governing water use and resource management by data centers. The bill directly addresses data-center infrastructure policy, a tracked vertical under the AI scope regardless of whether AI is explicitly…", "stage": "vetoed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-22", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB93" }, { "id": "m:US-NY:S01228", "jur": "US-NY", "level": "state", "num": "S01228", "title": "Requires advertisements to disclose the use of a synthetic performer; imposes a $1,000 civil penalty for a first violation and a $5,000 penalty for any subsequent violation.", "sum": "Requires advertisements to disclose when a synthetic performer (AI-generated or deepfaked talent) is used, with civil penalties of $1,000 for first violation and $5,000 for subsequent violations.", "stage": "introduced", "cats": [ "deepfakes", "disclosures", "consumer-financial" ], "secs": [ "media" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S1228" }, { "id": "m:US-NY:S01169", "jur": "US-NY", "level": "state", "num": "S01169", "title": "Regulates the development and use of certain artificial intelligence systems to prevent algorithmic discrimination; requires independent audits of high risk AI systems; provides for…", "sum": "NY S01169 regulates AI systems to prevent algorithmic discrimination, requiring independent audits of high-risk AI systems and establishing enforcement authority with the state attorney general. The bill targets consequential automated decision-making and imposes accountability mechanisms similar…", "stage": "engrossed", "cats": [ "governance", "anti-discrimination", "disclosures" ], "secs": [ "consumer" ], "date": "2026-06-03", "url": "https://www.nysenate.gov/legislation/bills/2025/S1169" }, { "id": "m:US-NY:A01280", "jur": "US-NY", "level": "state", "num": "A01280", "title": "Establishes the crime of unlawful dissemination or publication of a fabricated photographic, videographic, or audio record as a class E felony.", "sum": "NY A01280 criminalizes the unlawful dissemination or publication of fabricated photographic, videographic, or audio records (deepfakes/synthetic media) as a class E felony. The bill targets non-consensual synthetic media distribution without requiring proof of intent to defraud or defame.", "stage": "introduced", "cats": [ "deepfakes" ], "secs": [ "media" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A1280" }, { "id": "m:US-NY:A01205", "jur": "US-NY", "level": "state", "num": "A01205", "title": "Establishes the position of chief artificial intelligence officer and such person's functions, powers and duties; including, but not limited to, developing statewide artificial intelligence…", "sum": "NY A01205 establishes a chief artificial intelligence officer position within state government to develop statewide AI policies, coordinate AI use across all state departments and agencies, and oversee governance of AI tools deployed by the state.", "stage": "introduced", "cats": [ "governance", "gov-use" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A1205" }, { "id": "m:US-NY:A01342", "jur": "US-NY", "level": "state", "num": "A01342", "title": "Requires the collection of oaths of responsible use from users of certain generative or surveillance advanced artificial intelligence systems by the operators of such systems, and…", "sum": "This bill requires operators of generative AI and surveillance AI systems to collect written oaths of responsible use from their users and submit those oaths to the New York Attorney General. It establishes a disclosure and accountability mechanism tied to AI system operators.", "stage": "introduced", "cats": [ "governance", "disclosures", "consumer-financial" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A1342" }, { "id": "m:US-NY:A01338", "jur": "US-NY", "level": "state", "num": "A01338", "title": "Sets rules and procedures for the admissibility of evidence created or processed by artificial intelligence.", "sum": "NY A01338 establishes evidentiary rules and procedures governing the admissibility of evidence that has been created or processed by artificial intelligence systems in legal proceedings. The bill addresses how courts should handle AI-generated or AI-processed evidence, including authentication,…", "stage": "introduced", "cats": [ "governance", "public-safety" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A1338" }, { "id": "m:US-NY:A01332", "jur": "US-NY", "level": "state", "num": "A01332", "title": "Creates a state office of algorithmic innovation to set policies and standards to ensure algorithms are safe, effective, fair, and ethical, and that the state is conducive to promoting…", "sum": "Creates a new state office of algorithmic innovation tasked with setting policies and standards to ensure algorithms are safe, effective, fair, and ethical, while also promoting algorithmic innovation in New York. The office will establish regulatory frameworks and best practices for algorithmic…", "stage": "introduced", "cats": [ "governance", "anti-discrimination" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A1332" }, { "id": "m:US-NY:A01456", "jur": "US-NY", "level": "state", "num": "A01456", "title": "Provides for notice requirements where an insurer authorized to write accident and health insurance in this state, a corporation organized pursuant to article forty-three of this chapter,…", "sum": "NY A01456 requires insurers, health-insurance corporations, and HMOs to provide notice to patients when they use AI-based algorithms in utilization review decisions (determinations of medical-necessity and coverage). The bill establishes transparency obligations around algorithmic decision-making…", "stage": "introduced", "cats": [ "healthcare", "disclosures" ], "secs": [ "finserv", "health" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A1456" }, { "id": "m:US-PA:HB95", "jur": "US-PA", "level": "state", "num": "HB95", "title": "Providing for disclosure of synthetic advertising content and for enforcement.", "sum": "PA HB95 requires disclosure when synthetic advertising content (including deepfakes and AI-generated media) is used in advertisements, with enforcement mechanisms. The bill targets political and commercial ads containing synthetic or manipulated media.", "stage": "engrossed", "cats": [ "disclosures", "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-06-22", "url": "https://www.palegis.us/legislation/bills/2025/hb95" }, { "id": "m:US-NY:A01509", "jur": "US-NY", "level": "state", "num": "A01509", "title": "Requires publishers of books created wholly or partially with the use of generative artificial intelligence to disclose such use of generative artificial intelligence before the completion…", "sum": "This bill mandates that publishers disclose to consumers before purchase if a book was created wholly or partially using generative AI, covering printed and digital formats with text, images, audio, puzzles, or games. The requirement applies at point of sale across all book distribution channels.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "media" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A1509" }, { "id": "m:US-NE:LB172", "jur": "US-NE", "level": "state", "num": "LB172", "title": "Prohibit conduct involving computer-generated child pornography", "sum": "NE LB172 prohibits the creation, distribution, and possession of computer-generated child sexual abuse material (CSAM), treating synthetic/deepfake child pornography as a criminal offense regardless of whether real children were involved in its production.", "stage": "failed/dead", "cats": [ "minors", "deepfakes" ], "secs": [ "consumer", "media" ], "date": "2026-04-17", "url": "https://nebraskalegislature.gov/bills/view_bill.php?DocumentID=59064" }, { "id": "m:US-NY:S01854", "jur": "US-NY", "level": "state", "num": "S01854", "title": "Establishes the New York workforce stabilization act; requires certain businesses to conduct artificial intelligence impact assessments on the application and use of such artificial…", "sum": "NY S01854 requires businesses to conduct AI impact assessments before deploying AI systems and submit them to the Department of Labor, and imposes a 2% surcharge on corporations that use AI, engage in data mining, or displace workers above a threshold via AI automation.", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S1854" }, { "id": "m:US-NY:S01815", "jur": "US-NY", "level": "state", "num": "S01815", "title": "Requires publishers of books created wholly or partially with the use of generative artificial intelligence to disclose such use of generative artificial intelligence before the completion…", "sum": "NY S01815 mandates that publishers disclose the use of generative AI in the creation of books (text, audio, images, games, etc.) before point of sale, covering both print and digital formats. The bill treats AI-generated content as material consumer information requiring pre-purchase transparency.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "media" ], "date": "2026-04-01", "url": "https://www.nysenate.gov/legislation/bills/2025/S1815" }, { "id": "m:US-NY:S01962", "jur": "US-NY", "level": "state", "num": "S01962", "title": "Enacts the \"New York artificial intelligence consumer protection act\", in relation to preventing the use of artificial intelligence algorithms to discriminate against protected classes.", "sum": "NY S01962 enacts the 'New York Artificial Intelligence Consumer Protection Act' to prohibit the use of AI algorithms to discriminate against protected classes. The bill targets algorithmic discrimination in consumer-facing contexts, establishing protections against biased automated decision-making.", "stage": "introduced", "cats": [ "anti-discrimination", "consumer-financial" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S1962" }, { "id": "m:US-NY:A01952", "jur": "US-NY", "level": "state", "num": "A01952", "title": "Requires employers and employment agencies to notify candidates for employment if machine learning technology is used to make hiring decisions prior to the use of such technology.", "sum": "Requires employers and employment agencies to notify job candidates in advance if machine learning technology will be used in hiring decisions. The bill mandates transparency before deployment of algorithmic hiring tools.", "stage": "introduced", "cats": [ "hiring", "disclosures" ], "secs": [ "hr" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A1952" }, { "id": "m:US-GA:SB9", "jur": "US-GA", "level": "state", "num": "SB9", "title": "\"Ensuring Accountability for Illegal AI Activities Act\"; enact", "sum": "GA SB9 amends Georgia's obscenity laws to criminalize the use of artificial intelligence in creating and distributing illegal material (including deepfakes and synthetic media), and establishes sentencing enhancements for defendants who deploy AI in the commission of certain crimes.", "stage": "engrossed", "cats": [ "deepfakes", "public-safety" ], "secs": [ "media" ], "date": "2026-01-28", "url": "https://www.legis.ga.gov/legislation/69351" }, { "id": "m:US-NY:S02414", "jur": "US-NY", "level": "state", "num": "S02414", "title": "Enacts the \"political artificial intelligence disclaimer (PAID) act\"; requires political communications that use synthetic media to disclose that they were created with the assistance of…", "sum": "NY S02414 requires political communications that use synthetic media to include a disclosure that they were created with AI assistance, and mandates that political committees maintain records of synthetic-media usage. The bill targets deepfake and synthetic-media use in the electoral context.", "stage": "introduced", "cats": [ "deepfakes", "elections", "disclosures" ], "secs": [ "media" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S2414" }, { "id": "m:US-AK:HB47", "jur": "US-AK", "level": "state", "num": "HB47", "title": "Chld Sex Abuse Mat; Gen Images; Soc Media", "sum": "AK HB47 creates criminal and civil penalties for distribution of forged digital likenesses (deepfakes) and generated child sexual abuse material (CSAM), with particular focus on protecting minors and regulating social media platforms that facilitate such content generation.", "stage": "engrossed", "cats": [ "deepfakes", "minors" ], "secs": [ "media", "consumer" ], "date": "2026-04-13", "url": "https://www.akleg.gov/basis/Bill/Detail/34?Root=HB47" }, { "id": "m:US-WA:SB5395", "jur": "US-WA", "level": "state", "num": "SB5395", "title": "Making improvements to transparency and accountability in the prior authorization determination process.", "sum": "WA SB5395 strengthens transparency and accountability requirements for prior authorization determinations in health insurance, which are increasingly made or influenced by automated systems. The bill mandates disclosure of decision criteria, reasoning, and appeal processes to improve oversight of…", "stage": "passed", "cats": [ "healthcare", "anti-discrimination", "disclosures" ], "secs": [ "health", "finserv" ], "date": "2026-03-23", "url": "https://app.leg.wa.gov/billsummary?BillNumber=5395&Year=2025&Initiative=false" }, { "id": "m:US-NY:S02487", "jur": "US-NY", "level": "state", "num": "S02487", "title": "Establishes the New York artificial intelligence ethics commission.", "sum": "Establishes a New York artificial intelligence ethics commission to study and advise on AI policy, governance, and ethical frameworks. The commission would serve as a state-level AI task force focused on developing AI governance standards and recommendations.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S2487" }, { "id": "m:US-NE:LB468", "jur": "US-NE", "level": "state", "num": "LB468", "title": "Change provisions relating to inheritance taxes, change certain fee and tax provisions, and eliminate a sales tax exemption relating to data centers", "sum": "NE LB468 eliminates a sales tax exemption for data centers in Nebraska, effectively increasing the tax burden on data-center operations. The bill addresses tax and fee provisions broadly, with data-center taxation as a substantive component.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-17", "url": "https://nebraskalegislature.gov/bills/view_bill.php?DocumentID=58985" }, { "id": "m:US-WA:SB5422", "jur": "US-WA", "level": "state", "num": "SB5422", "title": "Revised for 1st substitute: Allowing bargaining over matters related to certain uses of artificial intelligence.", "sum": "WA SB5422 requires employers to allow collective bargaining over the use of artificial intelligence in the workplace, including decisions about AI deployment, implementation, and impacts on workers. The bill treats certain AI uses as mandatory subjects of bargaining under labor law.", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-01-12", "url": "https://app.leg.wa.gov/billsummary?BillNumber=5422&Year=2025&Initiative=false" }, { "id": "m:US-NE:LB615", "jur": "US-NE", "level": "state", "num": "LB615", "title": "Prohibit distributing deepfakes under the Nebraska Political Accountability and Disclosure Act", "sum": "NE LB615 would prohibit the distribution of deepfakes under Nebraska's Political Accountability and Disclosure Act, establishing enforcement mechanisms for synthetic media related to political speech and candidates.", "stage": "failed/dead", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-04-17", "url": "https://nebraskalegislature.gov/bills/view_bill.php?DocumentID=59674" }, { "id": "m:US-NE:LB525", "jur": "US-NE", "level": "state", "num": "LB525", "title": "Adopt the Agricultural Data Privacy Act and the Conversational Artificial Intelligence Safety Act", "sum": "NE LB525 adopts two acts: the Agricultural Data Privacy Act, governing collection and use of farm data; and the Conversational Artificial Intelligence Safety Act, which imposes disclosure and safety requirements on chatbot and conversational AI systems. The bill requires transparency about AI…", "stage": "passed", "cats": [ "disclosures", "consumer-financial", "privacy" ], "secs": [ "consumer" ], "date": "2026-04-17", "url": "https://nebraskalegislature.gov/bills/view_bill.php?DocumentID=59601" }, { "id": "m:US-VT:S0023", "jur": "US-VT", "level": "state", "num": "S0023", "title": "An act relating to the use of synthetic media in elections", "sum": "VT S0023 regulates the use of synthetic media (deepfakes) in election contexts. The bill addresses the creation and distribution of manipulated audio, video, or images designed to mislead voters about candidates or election integrity.", "stage": "passed", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-03-11", "url": "https://legislature.vermont.gov/bill/status/2026/S.23" }, { "id": "m:US-NE:LB642", "jur": "US-NE", "level": "state", "num": "LB642", "title": "Adopt the Artificial Intelligence Consumer Protection Act", "sum": "NE LB642 adopts a comprehensive Artificial Intelligence Consumer Protection Act, establishing rules for AI transparency, fairness, and accountability in automated decision-making that affects consumers. The bill likely addresses disclosure of AI use, protection against algorithmic discrimination,…", "stage": "failed/dead", "cats": [ "consumer-financial", "disclosures", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-04-17", "url": "https://nebraskalegislature.gov/bills/view_bill.php?DocumentID=58992" }, { "id": "m:US-NY:A03125", "jur": "US-NY", "level": "state", "num": "A03125", "title": "Relates to the use of automated decision tools by landlords for making housing decisions; sets conditions and rules for use of such tools.", "sum": "NY A03125 regulates landlords' use of automated decision tools in housing decisions, setting conditions and rules for deployment. The bill addresses consequential automated decision-making in a high-stakes sector (housing/rental).", "stage": "introduced", "cats": [ "anti-discrimination", "disclosures" ], "secs": [ "consumer" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A3125" }, { "id": "m:US-IL:SB0316", "jur": "US-IL", "level": "state", "num": "SB0316", "title": "BUSINESS-TECH", "sum": "IL SB0316 creates safety requirements for AI companion chatbots, mandating detection and response protocols for suicidal ideation or self-harm, clear disclosure that users are interacting with an automated system, and special protections for minors to prevent harmful content generation. Violations…", "stage": "engrossed", "cats": [ "minors", "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-06-15", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=316&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB0416", "jur": "US-IL", "level": "state", "num": "SB0416", "title": "EDUCATION-TECH", "sum": "IL SB0416 requires school districts to adopt a policy governing artificial intelligence use in schools by the 2027-2028 school year and to maintain and distribute to schools an approved list of AI models at the start of each school year and after revisions.", "stage": "engrossed", "cats": [ "gov-use", "education" ], "secs": [], "date": "2026-05-31", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=416&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB0317", "jur": "US-IL", "level": "state", "num": "SB0317", "title": "BUSINESS-TECH", "sum": "Requires businesses deploying conversational customer service AI in chat interfaces to disclose clearly and conspicuously that the consumer is interacting with an automated system rather than a human. Violations are treated as unlawful practices under Illinois consumer fraud law.", "stage": "engrossed", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-05-31", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=317&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB0315", "jur": "US-IL", "level": "state", "num": "SB0315", "title": "BUSINESS-TECH", "sum": "IL SB0315 creates the Artificial Intelligence Safety Measures Act, establishing a regulatory framework for large frontier AI developers that requires them to implement safety frameworks, conduct catastrophic-risk assessments, publish transparency reports, undergo independent third-party audits,…", "stage": "passed", "cats": [ "governance", "frontier", "disclosures" ], "secs": [], "date": "2026-07-06", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=315&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-WA:HB1622", "jur": "US-WA", "level": "state", "num": "HB1622", "title": "Allowing bargaining over matters related to the use of artificial intelligence.", "sum": "This bill permits labor unions to bargain collectively over employer use of artificial intelligence, treating AI deployment as a mandatory subject of negotiation in unionized workplaces. It establishes a governance framework requiring employers to engage workers' representatives in decisions about…", "stage": "engrossed", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-02-03", "url": "https://app.leg.wa.gov/billsummary?BillNumber=1622&Year=2025&Initiative=false" }, { "id": "m:US-NY:A03411", "jur": "US-NY", "level": "state", "num": "A03411", "title": "Requires the owner, licensee or operator of a generative artificial intelligence system to conspicuously display a notice on the system's user interface that is reasonably calculated to…", "sum": "Requires generative AI system operators to display a conspicuous notice on the user interface warning that the system's outputs may be inaccurate. This is a transparency/disclosure requirement aimed at managing user expectations about AI reliability.", "stage": "engrossed", "cats": [ "disclosures", "consumer-financial" ], "secs": [], "date": "2026-03-09", "url": "https://www.nysenate.gov/legislation/bills/2025/A3411" }, { "id": "m:US-NY:A03327", "jur": "US-NY", "level": "state", "num": "A03327", "title": "Requires any political communication, whether made by phone call, email or other message-based communication, that utilizes an artificial intelligence system to engage in human-like…", "sum": "NY A03327 requires that any political communication using AI systems to engage in human-like conversation must disclose to the recipient that they are communicating with an AI system. The disclosure must be made by reasonable means across phone calls, emails, and message-based platforms.", "stage": "introduced", "cats": [ "elections", "disclosures" ], "secs": [ "media" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A3327" }, { "id": "m:US-NY:A03265", "jur": "US-NY", "level": "state", "num": "A03265", "title": "Enacts the New York artificial intelligence bill of rights to provide residents of the state with rights and protections to ensure that any system making decisions without human…", "sum": "NY A03265 establishes an AI bill of rights for state residents, guaranteeing protections and meaningful oversight for automated systems that make decisions affecting their lives without human intervention. The bill ensures such systems operate lawfully and properly, addressing consequential…", "stage": "introduced", "cats": [ "governance", "anti-discrimination", "disclosures" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A3265" }, { "id": "m:US-NY:A03361", "jur": "US-NY", "level": "state", "num": "A03361", "title": "Creates a temporary state commission to study and investigate how to regulate artificial intelligence, robotics and automation; repeals such commission.", "sum": "NY A03361 establishes a temporary state commission tasked with studying and investigating how New York should regulate artificial intelligence, robotics, and automation. The commission will produce recommendations on regulatory frameworks before being repealed.", "stage": "engrossed", "cats": [ "governance" ], "secs": [], "date": "2026-01-28", "url": "https://www.nysenate.gov/legislation/bills/2025/A3361" }, { "id": "m:US-NY:A03356", "jur": "US-NY", "level": "state", "num": "A03356", "title": "Enacts the \"advanced artificial intelligence licensing act\"; providing for regulation of advanced artificial intelligence systems (Part A); requires registration and licensing of high-risk…", "sum": "NY A03356 establishes a licensing and registration regime for high-risk advanced AI systems, creates an ethical code of conduct for AI developers, and prohibits operation of certain AI systems deemed unsafe or unacceptable. The bill creates a comprehensive state-level regulatory framework covering…", "stage": "introduced", "cats": [ "governance", "frontier", "anti-discrimination" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A3356" }, { "id": "m:US-NY:A03437", "jur": "US-NY", "level": "state", "num": "A03437", "title": "Prohibits food service establishments from using a dynamic pricing model in determining the prices on its menu; requires fixed prices be published on a food service establishment's menu.", "sum": "This bill prohibits food-service establishments from using dynamic pricing models and requires fixed, published menu prices. While not explicitly mentioning AI, algorithmic dynamic pricing systems are a substantive subject under the scope's inclusion of 'automated decision-making' and 'algorithmic…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A3437" }, { "id": "m:US-GA:SB34", "jur": "US-GA", "level": "state", "num": "SB34", "title": "Public Service Commission; costs incurred by an electric utility as a result of providing electric services to commercial data centers from being included in any rates; prohibit", "sum": "GA SB34 prohibits electric utilities from passing data-center electricity costs onto general ratepayers; instead, costs must be recovered solely or substantially from the commercial data centers themselves. This effectively creates a cost-allocation framework for large-load infrastructure serving…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-25", "url": "https://www.legis.ga.gov/legislation/69551" }, { "id": "m:US-GA:HB147", "jur": "US-GA", "level": "state", "num": "HB147", "title": "Georgia Technology Authority; annual inventory of artificial intelligence usage by state agencies; provide", "sum": "GA HB147 requires the Georgia Technology Authority to maintain an annual inventory of artificial intelligence usage across state agencies and issue public reports on that usage. The bill also authorizes the Authority to develop and establish policies governing state agency AI deployment.", "stage": "engrossed", "cats": [ "gov-use" ], "secs": [], "date": "2026-03-18", "url": "https://www.legis.ga.gov/legislation/69569" }, { "id": "m:US-TN:HB0545", "jur": "US-TN", "level": "state", "num": "HB0545", "title": "AN ACT to amend Tennessee Code Annotated, Title 49, relative to artificial intelligence.", "sum": "Requires Tennessee's Department of Education to develop and offer free professional development courses on AI use in the classroom for grades 6–12 teachers, with mandatory completion by August 1, 2028 or within two years of licensure.", "stage": "passed", "cats": [ "education" ], "secs": [], "date": "2026-05-27", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB0545&ga=114" }, { "id": "m:US-CA:SB238", "jur": "US-CA", "level": "state", "num": "SB238", "title": "Workplace surveillance tools.", "sum": "CA SB238 regulates workplace surveillance tools, including automated monitoring systems used by employers to track employee activity and performance. The bill establishes notice, consent, and limitation requirements for employers deploying surveillance technologies in the workplace.", "stage": "engrossed", "cats": [ "hiring", "privacy" ], "secs": [ "hr" ], "date": "2026-07-01", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB238" }, { "id": "m:US-GA:HB171", "jur": "US-GA", "level": "state", "num": "HB171", "title": "Crimes and offenses; obscenity; repeal and replace Code Section 16-12-80", "sum": "GA HB171 prohibits distribution of computer-generated obscene material depicting children and establishes enhanced sentencing for defendants who use artificial intelligence in the commission of certain crimes. The bill creates a statutory framework to treat AI-generated child sexual abuse material…", "stage": "engrossed", "cats": [ "minors", "deepfakes" ], "secs": [ "media", "consumer" ], "date": "2026-03-27", "url": "https://www.legis.ga.gov/legislation/69648" }, { "id": "m:US-ME:LD307", "jur": "US-ME", "level": "state", "num": "LD307", "title": "An Act to Establish the Maine Data Center Coordination Council and Place a Temporary Limitation on Certain Data Centers", "sum": "ME LD307 establishes a Maine Data Center Coordination Council and imposes a temporary moratorium or limitation on certain data centers. The bill directly addresses data-center siting, coordination, and regulatory oversight—a tracked vertical under AI infrastructure policy.", "stage": "vetoed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-29", "url": "https://legislature.maine.gov/legis/bills/display_ps.asp?LD=307&snum=132" }, { "id": "m:US-NY:A03779", "jur": "US-NY", "level": "state", "num": "A03779", "title": "Restricts the use by an employer or an employment agency of electronic monitoring or an automated employment decision tool to screen a candidate or employee for an employment decision…", "sum": "NY A03779 restricts employers and employment agencies from using automated employment decision tools or electronic monitoring to screen candidates or employees unless the tool has undergone an impact assessment within the past year. The bill requires employers to notify job candidates of such tool…", "stage": "introduced", "cats": [ "hiring", "anti-discrimination", "disclosures" ], "secs": [ "hr" ], "date": "2026-05-29", "url": "https://www.nysenate.gov/legislation/bills/2025/A3779" }, { "id": "m:US-NY:A03930", "jur": "US-NY", "level": "state", "num": "A03930", "title": "Regulates the use of artificial intelligence in aiding decisions on rental housing and loans; requires a study on the impact of artificial intelligence and machine learning on housing…", "sum": "NY A03930 regulates the use of AI and machine learning in rental housing and loan decision-making, with a mandate for a state study on AI's impact on housing discrimination and redlining. The bill targets algorithmic bias in consequential financial and housing decisions.", "stage": "introduced", "cats": [ "anti-discrimination", "consumer-financial" ], "secs": [ "finserv" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A3930" }, { "id": "m:US-KS:HB2183", "jur": "US-KS", "level": "state", "num": "HB2183", "title": "Modifying elements in the crimes of sexual exploitation of a child, unlawful transmission of a visual depiction of a child and breach of privacy to prohibit certain acts related to visual…", "sum": "KS HB2183 criminalizes the creation and dissemination of synthetic child sexual abuse material (CSAM), including deepfaked, morphed, or entirely AI-generated visual depictions of children that are indistinguishable from real images. It also prohibits dissemination of non-consensual intimate imagery…", "stage": "passed", "cats": [ "deepfakes", "minors" ], "secs": [ "media" ], "date": "2026-02-06", "url": "https://kslegislature.gov/li/b2025_26/measures/hb2183/" }, { "id": "m:US-NY:A03914", "jur": "US-NY", "level": "state", "num": "A03914", "title": "Establishes criteria for the use of automated employment decision tools; provides for enforcement for violations of such criteria.", "sum": "NY A03914 establishes criteria governing the use of automated employment decision tools (AEDT) in hiring and workplace decisions, and creates enforcement mechanisms for violations. The bill directly addresses algorithmic discrimination and fairness in employment contexts.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A3914" }, { "id": "m:US-NY:A03991", "jur": "US-NY", "level": "state", "num": "A03991", "title": "Establishes requirements for the use of artificial intelligence, algorithm, or other software tools in utilization review and management; defines artificial intelligence.", "sum": "NY A03991 establishes requirements for the use of AI, algorithms, and other software tools in health insurance utilization review and management decisions. The bill defines artificial intelligence and imposes substantive oversight on automated decision-making in insurance coverage determinations.", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "disclosures" ], "secs": [ "health", "finserv" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A3991" }, { "id": "m:US-NY:A03924", "jur": "US-NY", "level": "state", "num": "A03924", "title": "Relates to privacy rights involving digitization; provides that such right of privacy and action for injunction and damages shall include a portrait, picture, likeness or voice created or…", "sum": "This bill expands New York's right-of-privacy laws to explicitly protect against unauthorized creation or alteration of a person's portrait, picture, likeness, or voice through digitization (including deepfakes and synthetic media). It provides a private right of action for injunction and damages.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A3924" }, { "id": "m:US-TN:SB0677", "jur": "US-TN", "level": "state", "num": "SB0677", "title": "AN ACT to amend Tennessee Code Annotated, Title 49, relative to artificial intelligence.", "sum": "Requires Tennessee's Department of Education to develop and offer at least one free, asynchronous professional development course on AI use in the classroom, and mandates that all grades 6–12 teachers complete at least one department-approved AI course by August 1, 2028, or within two years of…", "stage": "passed", "cats": [ "education" ], "secs": [], "date": "2026-05-27", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB0677&ga=114" }, { "id": "m:US-NY:S04276", "jur": "US-NY", "level": "state", "num": "S04276", "title": "Enacts the \"digital fairness act\"; requires any entity that conducts business in New York and maintains the personal information of 500 or more individuals to provide meaningful notice…", "sum": "The Digital Fairness Act requires entities handling personal data of 500+ New York residents to disclose their use of that information and prohibits unlawful discriminatory practices in targeted advertising. While not explicitly framed as AI regulation, algorithmic targeting and discrimination in…", "stage": "introduced", "cats": [ "anti-discrimination", "consumer-financial", "privacy" ], "secs": [ "consumer" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S4276" }, { "id": "m:US-WA:HB1833", "jur": "US-WA", "level": "state", "num": "HB1833", "title": "Creating an artificial intelligence grant program.", "sum": "WA HB1833 establishes a grant program to support artificial intelligence research, development, and educational initiatives. The bill funds AI capability-building through state grants, likely targeting academic institutions and workforce development.", "stage": "engrossed", "cats": [ "governance", "education" ], "secs": [], "date": "2026-03-12", "url": "https://app.leg.wa.gov/billsummary?BillNumber=1833&Year=2025&Initiative=false" }, { "id": "m:US-NY:A04427", "jur": "US-NY", "level": "state", "num": "A04427", "title": "Prohibits the use of external consumer data and information sources being used when determining insurance rates; provides that no insurer shall unfairly discriminate based on race, color,…", "sum": "NY A04427 prohibits insurers from using external consumer data sources and algorithmic/predictive models that rely on such data in ways that unfairly discriminate based on protected characteristics (race, color, national origin, religion, sex, sexual orientation, disability, gender identity, or…", "stage": "introduced", "cats": [ "anti-discrimination", "consumer-financial" ], "secs": [ "finserv" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A4427" }, { "id": "m:US-NY:S04394", "jur": "US-NY", "level": "state", "num": "S04394", "title": "Establishes criteria for the use of automated employment decision tools; provides for enforcement for violations of such criteria.", "sum": "NY S04394 establishes criteria for the lawful use of automated employment decision tools (AEDT) in hiring and employment decisions, and creates enforcement mechanisms for violations. The bill directly addresses algorithmic discrimination and fairness in the employment context.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S4394" }, { "id": "m:US-TN:HB0849", "jur": "US-TN", "level": "state", "num": "HB0849", "title": "AN ACT to amend Tennessee Code Annotated, Title 1, relative to certain conditions of personhood.", "sum": "This bill amends Tennessee law to clarify that artificial intelligence, computer algorithms, software programs, computer hardware, and machines are explicitly excluded from the legal definition of 'person' under state law. It establishes a foundational governance principle that AI systems do not…", "stage": "passed", "cats": [ "governance" ], "secs": [], "date": "2026-04-28", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB0849&ga=114" }, { "id": "m:US-NY:A04550", "jur": "US-NY", "level": "state", "num": "A04550", "title": "Requires the department of labor to study the long-term impact of artificial intelligence on the state workforce including but not limited to job performance, productivity, training,…", "sum": "NY A04550 mandates a Department of Labor study on AI's long-term impact on the state workforce and prohibits state entities from using AI in ways that displace current workers, reduce hours/wages/benefits, or impair collective bargaining agreements.", "stage": "introduced", "cats": [ "governance", "gov-use", "hiring" ], "secs": [ "hr" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A4550" }, { "id": "m:US-CA:AB412", "jur": "US-CA", "level": "state", "num": "AB412", "title": "Generative artificial intelligence: training data: copyrighted materials.", "sum": "CA AB412 adds civil-code provisions governing the use of copyrighted materials in training generative AI models, establishing liability and potentially requiring consent or compensation from rights holders whose works are used to train foundation models.", "stage": "introduced", "cats": [ "privacy", "frontier" ], "secs": [ "media" ], "date": "2026-08-03", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB412" }, { "id": "m:US-IL:HB3021", "jur": "US-IL", "level": "state", "num": "HB3021", "title": "CONSUMER FRAUD-AI DECEPTION", "sum": "IL HB3021 amends consumer-protection law to prohibit deceptive practices in which a chatbot, AI agent, or avatar engages a consumer without clear disclosure that they are communicating with an AI system rather than a human. The bill creates an unlawful practice if the AI interaction may mislead a…", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-04-17", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3021&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-TN:SB1363", "jur": "US-TN", "level": "state", "num": "SB1363", "title": "AN ACT to amend Tennessee Code Annotated, Title 4; Title 5; Title 6; Title 7; Title 12; Title 39; Title 45; Title 47; Title 48; Title 50; Title 55; Title 61; Title 62; Title 65; Title 66;…", "sum": "TN SB1363 requires the Tennessee Attorney General to investigate and report on violations of the Consumer Protection Act (2024–2025) where AI was used to perpetrate unfair or deceptive practices in commerce. The report must be submitted to relevant legislative committees by July 1, 2026.", "stage": "introduced", "cats": [ "governance", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-03-10", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB1363&ga=114" }, { "id": "m:US-TN:SB1362", "jur": "US-TN", "level": "state", "num": "SB1362", "title": "AN ACT to amend Tennessee Code Annotated, Title 4, Chapter 3, Part 31, relative to the artificial intelligence advisory council.", "sum": "This bill amends Tennessee's artificial intelligence advisory council statute to expand the council's membership from 24 to between 24–27 members and directs the council to revise its definition of 'artificial intelligence' and undertake various other procedural changes.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-02-18", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB1362&ga=114" }, { "id": "m:US-ME:LD517", "jur": "US-ME", "level": "state", "num": "LD517", "title": "An Act Regarding Synthetic Media in Campaign Advertising", "sum": "ME LD517 regulates the use of synthetic media (deepfakes) in campaign advertising, requiring disclosure when political ads contain artificially created or manipulated audio or video content. The bill aims to prevent deceptive use of synthetic media in electoral speech.", "stage": "passed", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-03-19", "url": "https://legislature.maine.gov/legis/bills/display_ps.asp?LD=517&snum=132" }, { "id": "m:US-IL:HB3567", "jur": "US-IL", "level": "state", "num": "HB3567", "title": "AI-MEANINGFUL HUMAN REVIEW", "sum": "This bill requires Illinois state agencies to obtain continuous meaningful human review before deploying any automated decision-making system and mandates impact assessments covering system objectives, testing, performance evaluation, and notification/rights procedures. Agencies must submit these…", "stage": "introduced", "cats": [ "governance", "gov-use", "anti-discrimination" ], "secs": [], "date": "2026-03-27", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3567&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB2255", "jur": "US-IL", "level": "state", "num": "SB2255", "title": "SURVEILLANCE DISCRIMINATION", "sum": "IL SB2255 prohibits the use of surveillance data in automated decision systems to set individualized prices for consumers or wages for employees. The bill provides exemptions, creates a private right of action, and empowers the Attorney General to enforce compliance.", "stage": "introduced", "cats": [ "anti-discrimination", "consumer-financial", "hiring" ], "secs": [ "consumer", "hr" ], "date": "2026-05-26", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=2255&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB2181", "jur": "US-IL", "level": "state", "num": "SB2181", "title": "DATA CENTER REPORTING", "sum": "IL SB2181 establishes mandatory annual reporting of energy and water consumption by all data centers operating in Illinois to the Illinois Power Agency, beginning January 1, 2026. The bill also requires a comprehensive study on data centers' impact on ratepayers, with findings due to the…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=2181&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:HB3506", "jur": "US-IL", "level": "state", "num": "HB3506", "title": "ARTIFICIAL INTELLIGENCE SAFETY", "sum": "Illinois HB3506 establishes whistleblower protections for employees of large AI developers, prohibiting employers from preventing disclosure of information about critical-risk activities, policies, or practices to government agencies, law enforcement, or company leadership. The bill includes…", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-01-21", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3506&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-IL:HB3838", "jur": "US-IL", "level": "state", "num": "HB3838", "title": "TICKET SALES-DYNAMIC PRICING", "sum": "IL HB3838 regulates dynamic pricing in ticket sales by requiring sellers to display the full price upfront and prohibiting price increases during a transaction. The bill directly defines and restricts algorithmic pricing practices that use automated systems to adjust prices based on real-time…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-03-27", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3838&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-ME:LD524", "jur": "US-ME", "level": "state", "num": "LD524", "title": "An Act to Protect Children from Technology-facilitated Sexual Abuse", "sum": "ME LD524 addresses technology-facilitated sexual abuse of children, likely including provisions on child sexual abuse material (CSAM), non-consensual intimate images (NCII), deepfakes, and synthetic media used to exploit minors. The bill aims to strengthen criminal penalties and enforcement…", "stage": "passed", "cats": [ "minors", "deepfakes" ], "secs": [ "consumer", "media" ], "date": "2026-04-14", "url": "https://legislature.maine.gov/legis/bills/display_ps.asp?LD=524&snum=132" }, { "id": "m:US-CA:AB502", "jur": "US-CA", "level": "state", "num": "AB502", "title": "Elections: deceptive media in advertisements.", "sum": "CA AB502 amends the Elections Code to regulate deceptive media in political advertisements, targeting deepfakes and synthetic media used to mislead voters. The bill establishes disclosure and prohibition rules for manipulated or AI-generated election content.", "stage": "engrossed", "cats": [ "elections", "deepfakes" ], "secs": [ "media" ], "date": "2026-06-29", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB502" }, { "id": "m:US-CA:SB300", "jur": "US-CA", "level": "state", "num": "SB300", "title": "Companion chatbots.", "sum": "CA SB300 regulates companion chatbots—AI systems designed to simulate emotional or social relationships with users. The bill amends California's Business and Professions Code to establish disclosure and conduct requirements for these chatbots, with particular attention to protections for minors and…", "stage": "introduced", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-08-05", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB300" }, { "id": "m:US-NY:A05216", "jur": "US-NY", "level": "state", "num": "A05216", "title": "Requires state units to purchase a product or service that is or contains an algorithmic decision system that adheres to responsible artificial intelligence standards; specifies content…", "sum": "NY A05216 requires New York state units to procure products and services containing algorithmic decision systems that meet responsible AI standards, and expands the definition of unlawful discriminatory practice to include acts performed through algorithmic systems. The bill mandates adoption of…", "stage": "introduced", "cats": [ "governance", "gov-use", "anti-discrimination" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A5216" }, { "id": "m:US-CA:SB354", "jur": "US-CA", "level": "state", "num": "SB354", "title": "Insurance Information and Privacy Protection Act.", "sum": "CA SB354 amends California's Insurance Information and Privacy Protection Act to strengthen consumer protections in insurance underwriting and rating. The bill likely restricts the use of certain data types and automated decision-making in insurance, addressing algorithmic discrimination and…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination", "privacy" ], "secs": [ "finserv" ], "date": "2026-08-05", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB354" }, { "id": "m:US-CA:SB366", "jur": "US-CA", "level": "state", "num": "SB366", "title": "Employment: artificial intelligence.", "sum": "CA SB366 adds Section 12815.5 to the Government Code to regulate the use of artificial intelligence in employment contexts. The bill addresses AI-driven hiring, promotion, and workplace decisions, likely establishing transparency, bias-audit, or impact-assessment requirements for employers…", "stage": "failed/dead", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-02-02", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB366" }, { "id": "m:US-NY:A05429", "jur": "US-NY", "level": "state", "num": "A05429", "title": "Establishes the New York workforce stabilization act; requires certain businesses to conduct artificial intelligence impact assessments on the application and use of such artificial…", "sum": "NY A05429 establishes the Workforce Stabilization Act, requiring businesses to conduct AI impact assessments before deploying AI systems and submit them to the Department of Labor; it also imposes a 2% surcharge on corporations that use AI, engage in data mining, or displace workers above a…", "stage": "introduced", "cats": [ "governance", "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A5429" }, { "id": "m:US-CA:SB430", "jur": "US-CA", "level": "state", "num": "SB430", "title": "Local agencies: automated decision systems.", "sum": "CA SB430 would establish requirements for local agencies in California to disclose and govern their use of automated decision systems in administrative and quasi-judicial proceedings. The bill mandates transparency, impact assessments, and accountability mechanisms for algorithmic decision-making…", "stage": "failed/dead", "cats": [ "governance", "gov-use", "anti-discrimination" ], "secs": [], "date": "2026-02-02", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB430" }, { "id": "m:US-CA:SB468", "jur": "US-CA", "level": "state", "num": "SB468", "title": "High-risk artificial intelligence systems: duty to protect personal information.", "sum": "SB468 would impose a duty on developers and deployers of high-risk AI systems to protect personal information used in those systems, establishing civil liability for breaches. The bill creates a private right of action and ties protection obligations to the handling of personal data in…", "stage": "failed/dead", "cats": [ "privacy", "anti-discrimination" ], "secs": [], "date": "2026-02-02", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB468" }, { "id": "m:US-ME:LD713", "jur": "US-ME", "level": "state", "num": "LD713", "title": "An Act to Exclude Data Centers from the Business Equipment Tax Exemption and the Dirigo Business Incentives Program and to Require the Department of Economic and Community Development to…", "sum": "ME LD713 excludes data centers from Maine's Business Equipment Tax Exemption and Dirigo Business Incentives Program, and directs the Department of Economic and Community Development to study alternative financial incentive structures for data-center development and operations.", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-14", "url": "https://legislature.maine.gov/legis/bills/display_ps.asp?LD=713&snum=132" }, { "id": "m:US-CA:AB1064", "jur": "US-CA", "level": "state", "num": "AB1064", "title": "Leading Ethical AI Development (LEAD) for Kids Act.", "sum": "CA AB1064 would regulate AI systems and chatbots designed for or marketed to minors, requiring transparency disclosures, safety guardrails, and restrictions on data collection and manipulation. The bill establishes obligations for developers to prevent harms to children and ensure age-appropriate…", "stage": "vetoed", "cats": [ "minors", "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-01-22", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB1064" }, { "id": "m:US-CA:AB1095", "jur": "US-CA", "level": "state", "num": "AB1095", "title": "Data centers: waste heat energy.", "sum": "CA AB1095 amends state law to address waste heat energy recovery and utilization from data centers, likely as part of energy efficiency and grid-management policy. The bill makes an appropriation to support implementation.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-02", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB1095" }, { "id": "m:US-CA:AB1137", "jur": "US-CA", "level": "state", "num": "AB1137", "title": "Reporting mechanism: child sexual abuse material.", "sum": "CA AB1137 amends civil code provisions governing social media platforms' handling of child sexual abuse material (CSAM), likely establishing or strengthening reporting mechanisms and disclosure requirements for platforms to detect and report CSAM.", "stage": "failed/dead", "cats": [ "minors", "disclosures" ], "secs": [ "consumer" ], "date": "2026-02-02", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB1137" }, { "id": "m:US-CA:SB579", "jur": "US-CA", "level": "state", "num": "SB579", "title": "Mental health and artificial intelligence working group.", "sum": "CA SB579 establishes a mental health and artificial intelligence working group to study the intersection of AI and mental-health policy. The bill creates a formal task force to examine how AI systems are used in or affect mental-health care and treatment.", "stage": "failed/dead", "cats": [ "governance", "healthcare" ], "secs": [ "health" ], "date": "2026-02-02", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB579" }, { "id": "m:US-MN:SF1857", "jur": "US-MN", "level": "state", "num": "SF1857", "title": "Minor access to chatbots for conversational purposes by persons prohibition, penalties provided", "sum": "This bill prohibits minors from accessing chatbots for conversational purposes and establishes penalties for persons who facilitate such access. It is a direct restriction on chatbot use by children.", "stage": "introduced", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-04-07", "url": "https://www.revisor.mn.gov/bills/94/2025/0/SF/1857/" }, { "id": "m:US-MN:SF1856", "jur": "US-MN", "level": "state", "num": "SF1856", "title": "Usage of artificial intelligence in the utilization review process prohibition provision", "sum": "This bill prohibits the use of artificial intelligence in the utilization review process for healthcare decisions. It targets automated decision-making in insurance coverage determinations, which directly affects how AI systems are applied to consequential healthcare access decisions.", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "health", "finserv" ], "date": "2026-03-18", "url": "https://www.revisor.mn.gov/bills/94/2025/0/SF/1856/" }, { "id": "m:US-GA:HB566", "jur": "US-GA", "level": "state", "num": "HB566", "title": "NO FAKES Act of 2025; enact", "sum": "GA HB566 creates a right of publicity in voice and visual likeness, prohibiting unauthorized use of 'digital replicas' (synthetically generated representations of individuals) and establishing civil liability and penalties for infringement. The bill requires the Secretary of State to maintain a…", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-02-25", "url": "https://www.legis.ga.gov/legislation/70646" }, { "id": "m:US-CA:SB813", "jur": "US-CA", "level": "state", "num": "SB813", "title": "California Artificial Intelligence Standards and Safety Commission: artificial intelligence safety standards.", "sum": "CA SB813 establishes a new California Artificial Intelligence Standards and Safety Commission tasked with developing AI safety standards and oversight frameworks. The bill creates a state-level governance structure for regulating AI systems and establishing safety requirements.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-08-05", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB813" }, { "id": "m:US-MN:SF1886", "jur": "US-MN", "level": "state", "num": "SF1886", "title": "Individual communication with artificial intelligence disclosure requirement provision", "sum": "MN SF1886 requires disclosure to individuals when they are communicating with artificial intelligence systems, establishing a transparency requirement for AI chatbots and automated conversational agents. The bill mandates that users be informed they are interacting with AI rather than a human.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-03-18", "url": "https://www.revisor.mn.gov/bills/94/2025/0/SF/1886/" }, { "id": "m:US-NY:A06180", "jur": "US-NY", "level": "state", "num": "A06180", "title": "Excludes a production using artificial intelligence or autonomous vehicles in a manner which results in the displacement of employees whose salaries are qualified expenses from the…", "sum": "This bill amends New York's film production tax credit to exclude productions that use AI or autonomous vehicles in a manner that displaces employees. It targets worker protection in the entertainment industry by conditioning tax incentives on maintaining employment levels.", "stage": "introduced", "cats": [ "hiring" ], "secs": [ "media", "hr" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A6180" }, { "id": "m:US-NY:S05668", "jur": "US-NY", "level": "state", "num": "S05668", "title": "Imposes liability for misleading, incorrect, contradictory or harmful information to a user by a chatbot that results in financial loss or other demonstrable harm.", "sum": "This bill establishes liability for chatbots that provide misleading, incorrect, contradictory, or harmful information resulting in financial loss or demonstrable harm to users. It creates a direct cause-of-action framework holding chatbot operators accountable for user injury.", "stage": "introduced", "cats": [ "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S5668" }, { "id": "m:US-NY:A06293", "jur": "US-NY", "level": "state", "num": "A06293", "title": "Establishes the crime of aggravated harassment by means of electronic or digital communication; provides for a private right of action for the unlawful dissemination or publication of deep…", "sum": "NY A06293 criminalizes aggravated harassment via electronic communication and creates a private right of action for unlawful dissemination of deepfakes depicting non-consensual pornography or graphic violence. The bill specifically targets digitized images that alter a person's face or identifiable…", "stage": "introduced", "cats": [ "deepfakes", "minors" ], "secs": [ "media" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A6293" }, { "id": "m:US-NC:H301", "jur": "US-NC", "level": "state", "num": "H301", "title": "Social Media & AI Safety", "sum": "NC H301 addresses safety risks from social media and AI systems, likely including provisions on age-gating, content labeling, chatbot transparency, and protections for minors. The bill title suggests a broad approach to both platform accountability and AI disclosure requirements.", "stage": "engrossed", "cats": [ "minors", "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-06-24", "url": "https://www.ncleg.gov/BillLookUp/2025/H301" }, { "id": "m:US-NY:A06491", "jur": "US-NY", "level": "state", "num": "A06491", "title": "Prohibits the creation and dissemination of synthetic media within sixty days of an election with intent to unduly influence the outcome of an election; makes such act a class E felony.", "sum": "NY A06491 criminalizes the creation and dissemination of synthetic media (deepfakes) within 60 days of an election with intent to influence the election outcome, establishing it as a class E felony. The bill targets election-interference deepfakes specifically.", "stage": "introduced", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A6491" }, { "id": "m:US-NY:A06545", "jur": "US-NY", "level": "state", "num": "A06545", "title": "Imposes liability for damages caused by a chatbot impersonating certain licensed professionals.", "sum": "This bill creates liability for damages when a chatbot impersonates licensed professionals (such as lawyers, doctors, or accountants). It establishes a legal duty of disclosure and accountability for developers/operators of chatbots that misrepresent their nature or qualifications.", "stage": "introduced", "cats": [ "consumer-financial", "disclosures" ], "secs": [], "date": "2026-06-01", "url": "https://www.nysenate.gov/legislation/bills/2025/A6545" }, { "id": "m:US-NY:A06656", "jur": "US-NY", "level": "state", "num": "A06656", "title": "Requires certain companies which utilize artificial intelligence to file responsible capability scaling policies with the chief information officer.", "sum": "Requires companies utilizing artificial intelligence to file responsible capability scaling policies with the state Chief Information Officer. The bill targets scaling practices and safety governance at the company level.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A6656" }, { "id": "m:US-NY:A06578", "jur": "US-NY", "level": "state", "num": "A06578", "title": "Establishes the artificial intelligence training data transparency act requiring developers of generative artificial intelligence models or services to post on the developer's website…", "sum": "NY A06578 requires developers of generative AI models and services to publicly post on their websites information about the datasets used to train those systems, including high-level summaries of the data sources. This is a transparency mandate focused on training-data disclosure.", "stage": "engrossed", "cats": [ "disclosures", "privacy" ], "secs": [ "media" ], "date": "2026-06-04", "url": "https://www.nysenate.gov/legislation/bills/2025/A6578" }, { "id": "m:US-NY:S06278", "jur": "US-NY", "level": "state", "num": "S06278", "title": "Establishes the crime of aggravated harassment by means of electronic or digital communication; provides for a private right of action for the unlawful dissemination or publication of deep…", "sum": "NY S06278 criminalizes aggravated harassment via electronic communication and creates a private right of action for unlawful dissemination of deepfake pornographic or violent synthetic media depicting a real person's face or body.", "stage": "introduced", "cats": [ "deepfakes", "consumer-financial" ], "secs": [ "media" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S6278" }, { "id": "m:US-NY:S06301", "jur": "US-NY", "level": "state", "num": "S06301", "title": "Creates a temporary state commission to study and investigate how to regulate artificial intelligence, robotics and automation; repeals such commission.", "sum": "NY S06301 establishes a temporary state commission to study and investigate how to regulate artificial intelligence, robotics, and automation in New York. The commission will examine regulatory frameworks and then sunset after completing its investigation.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S6301" }, { "id": "m:US-MA:S994", "jur": "US-MA", "level": "state", "num": "S994", "title": "Prohibiting algorithmic rent setting", "sum": "MA S994 prohibits the use of algorithmic systems to set residential rental prices, treating algorithmic rent-setting as a form of consequential automated decision-making. The bill addresses fairness and transparency concerns in housing markets where algorithmic pricing tools may perpetuate…", "stage": "introduced", "cats": [ "anti-discrimination", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-03-12", "url": "https://malegislature.gov/Bills/194/S994" }, { "id": "m:US-MA:H846", "jur": "US-MA", "level": "state", "num": "H846", "title": "Enhancing disclosure requirements for synthetic media in political advertising", "sum": "This bill requires enhanced disclosure requirements for synthetic media (deepfakes) used in political advertising under Massachusetts election law. It mandates that political ads containing AI-generated or manipulated video, audio, or imagery clearly disclose the synthetic nature of the content to…", "stage": "introduced", "cats": [ "deepfakes", "elections", "disclosures" ], "secs": [ "media" ], "date": "2026-02-11", "url": "https://malegislature.gov/Bills/194/H846" }, { "id": "m:US-MA:H1754", "jur": "US-MA", "level": "state", "num": "H1754", "title": "Establishing an internet bill of rights", "sum": "MA H1754 establishes an internet bill of rights governing the processing and movement of personal data. While not AI-specific on its face, the bill's focus on automated data processing and algorithmic decision-making in the digital economy makes it substantively relevant to AI systems that rely on…", "stage": "introduced", "cats": [ "privacy", "anti-discrimination" ], "secs": [], "date": "2026-03-26", "url": "https://malegislature.gov/Bills/194/H1754" }, { "id": "m:US-MA:H614", "jur": "US-MA", "level": "state", "num": "H614", "title": "Relative to issuing guidance regarding setting policies for the use of AI in schools", "sum": "MA H614 directs the state to issue guidance on policies for AI use in schools. The bill establishes a framework for educational institutions to develop and implement responsible AI deployment practices.", "stage": "introduced", "cats": [ "governance", "gov-use", "education" ], "secs": [], "date": "2026-02-09", "url": "https://malegislature.gov/Bills/194/H614" }, { "id": "m:US-MA:H1931", "jur": "US-MA", "level": "state", "num": "H1931", "title": "To enhance protections against child exploitation and misuse of emerging technologies", "sum": "MA H1931 targets child exploitation and misuse of emerging technologies, likely including AI-generated synthetic media (deepfakes) and other automated systems that endanger minors. The bill was accompanied by a study order (H5281) suggesting further investigation of the scope and appropriate…", "stage": "introduced", "cats": [ "minors", "deepfakes" ], "secs": [ "consumer", "media" ], "date": "2026-03-26", "url": "https://malegislature.gov/Bills/194/H1931" }, { "id": "m:US-MA:H495", "jur": "US-MA", "level": "state", "num": "H495", "title": "Reducing emissions from artificial intelligence", "sum": "MA H495 addresses emissions and environmental impacts from artificial intelligence systems, with a focus on the energy footprint of AI infrastructure. The bill appears to target large-load compute and data-center energy consumption tied to AI workloads.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-05", "url": "https://malegislature.gov/Bills/194/H495" }, { "id": "m:US-MA:H2236", "jur": "US-MA", "level": "state", "num": "H2236", "title": "Resolve relative to children’s mental health in social media", "sum": "Establishes a special commission to investigate safe social media use for children, identify platform best practices for protecting child mental health, and develop guidelines for safe use. The commission will examine algorithmic and design features that influence child engagement and mental…", "stage": "introduced", "cats": [ "governance", "minors" ], "secs": [ "consumer" ], "date": "2026-03-30", "url": "https://malegislature.gov/Bills/194/H2236" }, { "id": "m:US-MA:H90", "jur": "US-MA", "level": "state", "num": "H90", "title": "Regulating provenance regarding artificial intelligence", "sum": "MA H90 addresses provenance and transparency requirements for artificial intelligence systems, likely focusing on disclosure of AI training data sources, model origins, and documentation of how AI systems are built and deployed. The bill was accompanied by a study order (H5073), suggesting…", "stage": "introduced", "cats": [ "disclosures", "privacy" ], "secs": [], "date": "2026-02-12", "url": "https://malegislature.gov/Bills/194/H90" }, { "id": "m:US-MA:H1210", "jur": "US-MA", "level": "state", "num": "H1210", "title": "Relative to AI health communications and informed patient consent", "sum": "MA H1210 requires informed patient consent and disclosure when artificial intelligence is used in health communications. The bill establishes rules for AI transparency and patient awareness in clinical and healthcare settings.", "stage": "introduced", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-02-09", "url": "https://malegislature.gov/Bills/194/H1210" }, { "id": "m:US-MA:H83", "jur": "US-MA", "level": "state", "num": "H83", "title": "Establishing a special legislative commission to study load growth due to AI and data centers", "sum": "MA H83 establishes a special legislative commission to study load growth on the electrical grid caused by AI and data centers. The bill directs the commission to investigate infrastructure, energy, and utility impacts of expanding AI and data-center deployment in Massachusetts.", "stage": "introduced", "cats": [ "governance", "data-centers" ], "secs": [ "infra" ], "date": "2026-01-08", "url": "https://malegislature.gov/Bills/194/H83" }, { "id": "m:US-MA:H76", "jur": "US-MA", "level": "state", "num": "H76", "title": "To protect against election misinformation", "sum": "MA H76 addresses materially deceptive election-related communications, likely targeting deepfakes, synthetic media, and false election content distributed online or via automated systems. The bill aims to combat election misinformation through regulations on deceptive AI-generated or manipulated…", "stage": "introduced", "cats": [ "elections", "deepfakes", "disclosures" ], "secs": [ "media" ], "date": "2026-02-11", "url": "https://malegislature.gov/Bills/194/H76" }, { "id": "m:US-MA:H81", "jur": "US-MA", "level": "state", "num": "H81", "title": "Relative to artificial intelligence disclosure", "sum": "MA H81 requires disclosure of artificial intelligence use and would establish transparency requirements for AI systems. The bill was accompanied by a study order (H5073) to examine AI disclosure frameworks.", "stage": "introduced", "cats": [ "disclosures" ], "secs": [], "date": "2026-02-12", "url": "https://malegislature.gov/Bills/194/H81" }, { "id": "m:US-NY:S06394", "jur": "US-NY", "level": "state", "num": "S06394", "title": "Regulates energy consumption by data centers; requires annual disclosure reporting; prohibits incentives in fossil fuel power purchase agreements with utilities.", "sum": "NY S06394 regulates energy consumption by data centers and requires annual disclosure reporting on energy use. It also prohibits utilities from offering incentives tied to fossil fuel power purchase agreements with data centers.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-30", "url": "https://www.nysenate.gov/legislation/bills/2025/S6394" }, { "id": "m:US-NY:A06767", "jur": "US-NY", "level": "state", "num": "A06767", "title": "Prohibits the provision of an artificial intelligence companion to a user unless such artificial intelligence companion contains a protocol for addressing possible suicidal ideation or…", "sum": "NY A06767 requires AI companion chatbots to include safety protocols addressing suicidal ideation, self-harm, harm to others, and financial harm, and mandates disclosure to users that they are interacting with a non-human AI system and information about crisis service providers.", "stage": "engrossed", "cats": [ "minors", "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A6767" }, { "id": "m:US-NY:S06471", "jur": "US-NY", "level": "state", "num": "S06471", "title": "Relates to the use of automated decision tools by landlords for making housing decisions; sets conditions and rules for use of such tools.", "sum": "This bill regulates automated decision tools used by landlords in housing decisions, imposing conditions and rules on their deployment. It addresses algorithmic accountability in a high-stakes consequential-decision context (housing access), similar in scope to CO SB24-205.", "stage": "introduced", "cats": [ "anti-discrimination", "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S6471" }, { "id": "m:US-MN:HF2500", "jur": "US-MN", "level": "state", "num": "HF2500", "title": "Algorithm and AI use prohibited during health insurance prior authorization request review.", "sum": "This bill prohibits health insurance companies from using algorithms or AI systems to make automated decisions during prior authorization request reviews. It effectively mandates human review for insurance coverage determinations in that context.", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "finserv", "health" ], "date": "2026-03-05", "url": "https://www.revisor.mn.gov/bills/94/2025/0/HF/2500/" }, { "id": "m:US-NY:A06874", "jur": "US-NY", "level": "state", "num": "A06874", "title": "Establishes the Artificial Intelligence Literacy Act which establishes an artificial intelligence literacy in the digital equity competitive grant program.", "sum": "NY A06874 establishes an Artificial Intelligence Literacy Act that creates a competitive grant program within the digital equity framework to fund AI literacy education initiatives. The bill aims to expand access to AI education and digital skills training across New York.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A6874" }, { "id": "m:US-NY:A06972", "jur": "US-NY", "level": "state", "num": "A06972", "title": "Creates an artificial intelligence working group within the department of education for the purpose of developing guidance and a model policy on the safe and effective use of artificial…", "sum": "Creates a working group within the New York Department of Education tasked with developing guidance and model policies for safe and effective use of AI in schools. The initiative aims to benefit both students and educators while mitigating potential harms.", "stage": "introduced", "cats": [ "governance", "gov-use", "education" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A6972" }, { "id": "m:US-NY:A07029", "jur": "US-NY", "level": "state", "num": "A07029", "title": "Directs the commissioner of education to make recommendations to the board of regents regarding the incorporation of instruction in artificial intelligence system literacy into the school…", "sum": "NY A07029 directs the New York State Commissioner of Education to recommend AI system literacy curriculum for elementary through high school, with the Board of Regents adopting guidelines if the curriculum is adopted. The bill focuses on AI educational standards and teacher preparation rather than…", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A7029" }, { "id": "m:US-NY:A07278", "jur": "US-NY", "level": "state", "num": "A07278", "title": "Prohibits state agencies and state-owned entities from utilizing large language models or any artificial intelligence systems to make decisions that affect individuals' rights, benefits, or…", "sum": "NY A07278 prohibits New York state agencies and state-owned entities from using large language models or AI systems to make decisions affecting individuals' rights, benefits, or services; all such decisions must be made by human personnel, with limited exceptions and enforcement provisions.", "stage": "introduced", "cats": [ "governance", "gov-use", "anti-discrimination" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A7278" }, { "id": "m:US-NY:S06748", "jur": "US-NY", "level": "state", "num": "S06748", "title": "Requires that every newspaper, magazine or other publication printed or electronically published in this state, which contains the use of generative artificial intelligence or other…", "sum": "Requires all newspapers, magazines, and electronic publications in New York to disclose when generative AI or other information communication technology was used to compose parts of their content.", "stage": "introduced", "cats": [ "disclosures" ], "secs": [ "media" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S6748" }, { "id": "m:US-NY:A07172", "jur": "US-NY", "level": "state", "num": "A07172", "title": "Requires the division of criminal justice services to promulgate a written protocol for the regulation of the use of artificial intelligence and facial recognition technology in criminal…", "sum": "This bill directs New York's Division of Criminal Justice Services to develop a written protocol governing the use of artificial intelligence and facial recognition technology in criminal investigations. It establishes regulatory oversight of AI/facial recognition deployment by law enforcement.", "stage": "introduced", "cats": [ "governance", "gov-use", "public-safety" ], "secs": [], "date": "2026-06-03", "url": "https://www.nysenate.gov/legislation/bills/2025/A7172" }, { "id": "m:US-NY:S06751", "jur": "US-NY", "level": "state", "num": "S06751", "title": "Excludes a production using artificial intelligence or autonomous vehicles in a manner which results in the displacement of employees whose salaries are qualified expenses from the…", "sum": "This bill excludes film productions that use AI or autonomous vehicles in ways that displace employees from qualifying for New York's film production tax credit. It conditions tax-incentive eligibility on workforce protection, effectively using tax policy to discourage AI-driven job displacement in…", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "media", "hr" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S6751" }, { "id": "m:US-ME:LD1301", "jur": "US-ME", "level": "state", "num": "LD1301", "title": "An Act to Prohibit the Use of Artificial Intelligence in the Denial of Health Insurance Claims", "sum": "ME LD1301 prohibits health insurers from using artificial intelligence to deny health insurance claims. The bill addresses automated decision-making in insurance underwriting and utilization review.", "stage": "failed/dead", "cats": [ "healthcare", "consumer-financial", "anti-discrimination" ], "secs": [ "finserv", "health" ], "date": "2026-01-27", "url": "https://legislature.maine.gov/legis/bills/display_ps.asp?LD=1301&snum=132" }, { "id": "m:US-MN:SF3098", "jur": "US-MN", "level": "state", "num": "SF3098", "title": "Prohibition from using artificial intelligence to dynamically set product prices", "sum": "MN SF3098 prohibits the use of artificial intelligence to dynamically set product prices. The bill targets algorithmic pricing practices that may discriminate or unfairly disadvantage consumers.", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-03-18", "url": "https://www.revisor.mn.gov/bills/94/2025/0/SF/3098/" }, { "id": "m:US-NY:S06954", "jur": "US-NY", "level": "state", "num": "S06954", "title": "Requires synthetic content creations system providers to include provenance data on synthetic content produced or modified by a synthetic content creations system that such provider makes…", "sum": "This bill requires providers of synthetic content creation systems to embed provenance data (metadata identifying AI-generated or AI-modified content) in synthetic media they produce or distribute. The requirement applies to systems that generate or modify synthetic audio, video, images, or other…", "stage": "engrossed", "cats": [ "deepfakes", "disclosures" ], "secs": [ "media" ], "date": "2026-06-04", "url": "https://www.nysenate.gov/legislation/bills/2025/S6954" }, { "id": "m:US-NY:S06955", "jur": "US-NY", "level": "state", "num": "S06955", "title": "Establishes the artificial intelligence training data transparency act requiring developers of generative artificial intelligence models or services to post on the developer's website…", "sum": "NY S06955 requires developers of generative AI models and services to publicly post transparent information about the datasets used to train those systems, including high-level summaries of the data sources. This is a training-data transparency mandate aimed at model developers.", "stage": "introduced", "cats": [ "disclosures", "privacy" ], "secs": [], "date": "2026-06-04", "url": "https://www.nysenate.gov/legislation/bills/2025/S6955" }, { "id": "m:US-MN:HF2928", "jur": "US-MN", "level": "state", "num": "HF2928", "title": "Preapplication filings for large water appropriation projects required, permit application information for large water appropriation projects added, level of environmental review for data…", "sum": "MN HF2928 modifies data-center permitting and environmental review requirements, including preapplication filings for large water appropriation projects, exemptions from energy conservation contributions, and specified levels of environmental review for data centers.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-09", "url": "https://www.revisor.mn.gov/bills/94/2025/0/HF/2928/" }, { "id": "m:US-NC:H565", "jur": "US-NC", "level": "state", "num": "H565", "title": "Limit Use of AI Medicaid/Commercial Insurance", "sum": "NC H565 restricts the use of artificial intelligence and automated decision-making systems in Medicaid and commercial insurance underwriting, claims processing, and utilization review. The bill likely aims to prevent algorithmic discrimination and ensure transparency in insurance coverage decisions.", "stage": "engrossed", "cats": [ "healthcare", "anti-discrimination", "consumer-financial" ], "secs": [ "finserv", "health" ], "date": "2026-06-23", "url": "https://www.ncleg.gov/BillLookUp/2025/H565" }, { "id": "m:US-OH:SB163", "jur": "US-OH", "level": "state", "num": "SB163", "title": "Regards AI images, simulated child porn, replica identity fraud", "sum": "OH SB163 requires AI-generated images to include watermarks, prohibits creation and distribution of synthetic child sexual abuse material (simulated CSAM), and criminalizes identity fraud using AI-generated replicas of real persons.", "stage": "engrossed", "cats": [ "deepfakes", "minors", "disclosures" ], "secs": [ "media" ], "date": "2026-05-27", "url": "https://www.legislature.ohio.gov/legislation/136/sb163" }, { "id": "m:US-NY:A07656", "jur": "US-NY", "level": "state", "num": "A07656", "title": "Prohibits political communication containing any photo, video or audio depiction of a candidate created in whole or in part through the use of generative artificial intelligence.", "sum": "This bill prohibits the use of generative AI to create photo, video, or audio depictions of political candidates in campaign communications. It directly targets synthetic media depicting candidates in electoral contexts.", "stage": "introduced", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A7656" }, { "id": "m:US-NY:S07263", "jur": "US-NY", "level": "state", "num": "S07263", "title": "Imposes liability for damages caused by a chatbot impersonating certain licensed professionals.", "sum": "This bill establishes liability for chatbots that impersonate licensed professionals (such as lawyers, doctors, or financial advisors). It creates a legal framework holding developers/operators accountable for damages when a chatbot falsely represents itself as a credentialed professional.", "stage": "introduced", "cats": [ "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-06-05", "url": "https://www.nysenate.gov/legislation/bills/2025/S7263" }, { "id": "m:US-WI:AB228", "jur": "US-WI", "level": "state", "num": "AB228", "title": "Tax incremental financing districts containing qualified data centers. (FE)", "sum": "WI AB228 modifies Wisconsin's tax incremental financing (TIF) district framework to allow qualified data centers to be included and receive tax benefits within TIF zones. The bill aims to incentivize data center investment and development in designated districts.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-23", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/asm/bill/ab228" }, { "id": "m:US-WI:AB245", "jur": "US-WI", "level": "state", "num": "AB245", "title": "Modifying the sales and use tax exemption for qualified data centers. (FE)", "sum": "WI AB245 modifies the sales and use tax exemption for qualified data centers in Wisconsin, expanding or restructuring the conditions under which data-center operators can claim tax relief. The bill amends the state's tax code to adjust definitions and eligibility criteria for the data-center…", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-23", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/asm/bill/ab245" }, { "id": "m:US-WI:SB241", "jur": "US-WI", "level": "state", "num": "SB241", "title": "Tax incremental financing districts containing qualified data centers. (FE)", "sum": "WI SB241 creates a tax incremental financing mechanism for qualified data centers, allowing tax-increment districts to capture incremental property tax revenue for reinvestment in infrastructure supporting data-center development.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-23", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/sen/bill/sb241" }, { "id": "m:US-WI:SB244", "jur": "US-WI", "level": "state", "num": "SB244", "title": "Modifying the sales and use tax exemption for qualified data centers. (FE)", "sum": "WI SB244 modifies the sales and use tax exemption for qualified data centers in Wisconsin, adjusting eligibility criteria and expanding tax incentive provisions for data-center operations.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-23", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/sen/bill/sb244" }, { "id": "m:US-PA:SB293", "jur": "US-PA", "level": "state", "num": "SB293", "title": "Providing for a report on artificial intelligence in the workforce; and imposing duties on the Department of Labor and Industry and Department of Community and Economic Development.", "sum": "PA SB293 directs the Pennsylvania Department of Labor and Industry and Department of Community and Economic Development to prepare a report on the impact of artificial intelligence on the workforce, including implications for employment, worker displacement, and skills development.", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-02-02", "url": "https://www.palegis.us/legislation/bills/2025/sb293" }, { "id": "m:US-NY:S07892", "jur": "US-NY", "level": "state", "num": "S07892", "title": "Directs the commissioner of education to make recommendations to the board of regents regarding the incorporation of instruction in artificial intelligence system literacy into the school…", "sum": "NY S07892 directs the state commissioner of education to recommend AI system literacy instruction for elementary through high school curricula, and requires the board of regents to adopt guidelines if the curriculum is adopted.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S7892" }, { "id": "m:US-NY:S07896", "jur": "US-NY", "level": "state", "num": "S07896", "title": "Prescribes requirements and safeguards for the use of an artificial intelligence, algorithm, or other software tool for the purpose of utilization review for health and accident insurance.", "sum": "NY S07896 establishes requirements and safeguards for AI, algorithms, and software tools used in health and accident insurance utilization review decisions. The bill addresses automated decision-making in a high-stakes healthcare context where algorithmic denials or delays can materially harm…", "stage": "introduced", "cats": [ "healthcare", "consumer-financial", "anti-discrimination" ], "secs": [ "finserv", "health" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S7896" }, { "id": "m:US-NY:S07963", "jur": "US-NY", "level": "state", "num": "S07963", "title": "Requires certain political communications to include provenance data for all audios, images or videos used in such communications; provides for the repeal of certain provisions upon the…", "sum": "Requires political communications to include provenance data (metadata indicating origin and authenticity) for all audio, images, and videos used; aims to combat synthetic media and manipulated content in electoral speech.", "stage": "introduced", "cats": [ "elections", "deepfakes" ], "secs": [ "media" ], "date": "2026-06-05", "url": "https://www.nysenate.gov/legislation/bills/2025/S7963" }, { "id": "m:US-NY:S08115", "jur": "US-NY", "level": "state", "num": "S08115", "title": "Relates to the use of automated lending decision-making tools by banks for the purposes of making lending decisions; allows loan applicants to consent to or opt out of such use.", "sum": "NY S08115 regulates the use of automated lending decision-making tools by banks, requiring explicit consent from loan applicants and allowing them to opt out of algorithmic decisions. The bill addresses both transparency and consumer choice in consequential AI-driven financial decisions.", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "finserv" ], "date": "2026-05-12", "url": "https://www.nysenate.gov/legislation/bills/2025/S8115" }, { "id": "m:US-CA:SCR82", "jur": "US-CA", "level": "state", "num": "SCR82", "title": "Public higher education: artificial intelligence usage.", "sum": "CA SCR82 is a resolution directing California's public higher education systems (UC, CSU, community colleges) to develop policies and guidance on artificial intelligence usage in teaching, research, and administration. It establishes a framework for responsible AI adoption across campuses.", "stage": "introduced", "cats": [ "gov-use", "education" ], "secs": [], "date": "2026-08-05", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SCR82" }, { "id": "m:US-NY:A08546", "jur": "US-NY", "level": "state", "num": "A08546", "title": "Requires certification of filings produced using generative artificial intelligence; requires the brief of an appellant to contain a disclosure of the use of generative artificial…", "sum": "This bill requires attorneys filing documents in New York courts to disclose any use of generative AI in drafting legal briefs and certify that a human has reviewed and verified the content. It establishes transparency and accountability rules for AI-assisted legal work.", "stage": "introduced", "cats": [ "governance", "disclosures" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A8546" }, { "id": "m:US-NY:A08523", "jur": "US-NY", "level": "state", "num": "A08523", "title": "Requires certain political communications to include provenance data for all audios, images or videos used in such communications; provides for the repeal of certain provisions upon the…", "sum": "This bill requires political communications to include provenance data (origin/authenticity metadata) for all audios, images, and videos used, with sunset provisions. It is designed to combat synthetic media and deepfakes in electoral contexts by mandating transparency about media authenticity.", "stage": "introduced", "cats": [ "elections", "deepfakes", "disclosures" ], "secs": [ "media" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A8523" }, { "id": "m:US-NY:A08556", "jur": "US-NY", "level": "state", "num": "A08556", "title": "Prescribes requirements and safeguards for the use of an artificial intelligence, algorithm, or other software tool for the purpose of utilization review for health and accident insurance.", "sum": "NY A08556 establishes requirements and safeguards for the use of AI, algorithms, and software tools in utilization review decisions by health and accident insurers. The bill targets automated decision-making in insurance coverage determinations, a consequential sector where algorithmic bias and…", "stage": "introduced", "cats": [ "healthcare", "consumer-financial", "anti-discrimination" ], "secs": [ "finserv", "health" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A8556" }, { "id": "m:US-NY:A08595", "jur": "US-NY", "level": "state", "num": "A08595", "title": "Enacts the \"New York artificial intelligence transparency for journalism act\"; requires developers of generative artificial intelligence systems or services to post certain information on…", "sum": "Requires developers of generative AI systems to publicly disclose on their website what video, audio, text, and data from journalism publications were used to train their models. Creates a private right of action for journalism providers to sue for damages or seek injunctive relief.", "stage": "introduced", "cats": [ "disclosures", "privacy" ], "secs": [ "media" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A8595" }, { "id": "m:US-NY:S08331", "jur": "US-NY", "level": "state", "num": "S08331", "title": "Enacts the \"New York artificial intelligence transparency for journalism act\"; requires developers of generative artificial intelligence systems or services to post certain information on…", "sum": "NY S08331 requires developers of generative AI systems to publicly disclose on their websites what video, audio, text, and data from covered news publications were used to train their models. It grants journalism providers a private right of action for damages or injunctive relief against…", "stage": "introduced", "cats": [ "disclosures", "privacy" ], "secs": [ "media" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S8331" }, { "id": "m:US-MI:HB4536", "jur": "US-MI", "level": "state", "num": "HB4536", "title": "Insurance: health insurers; use of artificial intelligence tools to make decisions regarding claims; prohibit. Amends 1956 PA 218 (MCL 500.100 - 500.8302) by adding sec. 3406ss.", "sum": "MI HB4536 prohibits health insurers from using artificial intelligence tools to make decisions regarding insurance claims. The bill amends Michigan's Insurance Code to establish this restriction on automated decision-making in health insurance claim processing.", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "consumer-financial" ], "secs": [ "finserv", "health" ], "date": "2026-03-19", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2025-HB-4536" }, { "id": "m:US-MI:HB4537", "jur": "US-MI", "level": "state", "num": "HB4537", "title": "Human services: medical services; use of artificial intelligence tools to make decisions regarding claims; prohibit. Amends 1939 PA 280 (MCL 400.1 - 400.119b) by adding sec. 107b.", "sum": "MI HB4537 prohibits the use of artificial intelligence tools to make decisions regarding medical claims in Michigan's human services program. The bill adds a new section to the state's medical services statute to ban automated decision-making in claims adjudication.", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "health" ], "date": "2026-03-19", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2025-HB-4537" }, { "id": "m:US-NY:A08833", "jur": "US-NY", "level": "state", "num": "A08833", "title": "Establishes understanding artificial intelligence responsibility act requiring developers of covered models to be strictly liable for certain injuries.", "sum": "NY A08833 establishes strict liability for developers of covered AI models for injuries caused by those models. The bill targets large foundation/frontier models and creates a direct legal responsibility framework for model developers.", "stage": "introduced", "cats": [ "frontier", "consumer-financial" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A8833" }, { "id": "m:US-NY:A08884", "jur": "US-NY", "level": "state", "num": "A08884", "title": "Regulates the development and use of certain artificial intelligence systems to prevent algorithmic discrimination; requires independent audits of high risk AI systems; provides for…", "sum": "NY A08884 regulates AI systems to prevent algorithmic discrimination and requires independent audits of high-risk AI systems, with enforcement authority vested in the state attorney general. The bill directly addresses consequential automated decision-making and bias mitigation through mandatory…", "stage": "introduced", "cats": [ "governance", "anti-discrimination", "disclosures" ], "secs": [], "date": "2026-06-01", "url": "https://www.nysenate.gov/legislation/bills/2025/A8884" }, { "id": "m:US-MI:HB4668", "jur": "US-MI", "level": "state", "num": "HB4668", "title": "Trade: business regulation; requirements and safety standards for developers of certain artificial intelligence models; provide for. Creates new act.", "sum": "MI HB4668 creates a new regulatory framework imposing requirements and safety standards on developers of certain artificial intelligence models. The bill establishes baseline obligations for AI model creators, likely targeting large or high-risk systems.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-03-19", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2025-HB-4668" }, { "id": "m:US-PA:HB1667", "jur": "US-PA", "level": "state", "num": "HB1667", "title": "In sales and use tax, further providing for exclusions from tax; in gross receipts tax, further providing for imposition of tax and for establishment of revenue-neutral reconciliation;…", "sum": "PA HB1667 amends Pennsylvania tax law to provide incentives and regulatory framework for data centers, including sales-and-use tax exclusions, gross receipts tax treatment, manufacturing and investment tax credits, and prohibition on taxation of electric energy sales to data centers. The bill…", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-01", "url": "https://www.palegis.us/legislation/bills/2025/hb1667" }, { "id": "m:US-DE:HB233", "jur": "US-DE", "level": "state", "num": "HB233", "title": "An Act To Amend Title 26 Of The Delaware Code Relating To Large Energy Use Facilities.", "sum": "DE HB233 amends Delaware's energy code to regulate large energy-use facilities, including requirements for siting, utility interconnection, and grid impact. The bill directly addresses infrastructure policy for high-load operations typical of data-center deployment.", "stage": "enrolled", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-01", "url": "https://legis.delaware.gov/BillDetail?LegislationId=143381" }, { "id": "m:US-OH:HB392", "jur": "US-OH", "level": "state", "num": "HB392", "title": "Enact the Ohio Right to Compute Act", "sum": "OH HB392 limits further state regulation of computational systems and requires risk-management policies for AI-controlled critical infrastructure. The bill establishes a regulatory floor and preemption framework while mandating safety protocols for AI systems managing essential services.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [ "infra" ], "date": "2026-06-10", "url": "https://www.legislature.ohio.gov/legislation/136/hb392" }, { "id": "m:US-NY:S08451", "jur": "US-NY", "level": "state", "num": "S08451", "title": "Enacts the \"New York fundamental artificial intelligence requirements in (FAIR) news act\"; provides transparency requirements for news media content composed, authored, or otherwise created…", "sum": "The FAIR News Act requires news media outlets to disclose when content is composed, authored, or created using generative AI. This transparency requirement applies to all news media content and aims to help readers distinguish AI-generated from human-authored journalism.", "stage": "engrossed", "cats": [ "disclosures", "elections" ], "secs": [ "media" ], "date": "2026-06-05", "url": "https://www.nysenate.gov/legislation/bills/2025/S8451" }, { "id": "m:US-PA:SB939", "jur": "US-PA", "level": "state", "num": "SB939", "title": "Establishing the Office of Transformation and Opportunity and the Artificial Intelligence, Data Center and Emerging Technology Regulatory Sandbox Program; and providing for powers and…", "sum": "PA SB939 establishes an Office of Transformation and Opportunity and creates a regulatory sandbox program for artificial intelligence, data centers, and emerging technologies. The bill provides permitting authority for high-impact data centers that have their own power generation.", "stage": "introduced", "cats": [ "governance", "data-centers" ], "secs": [ "infra" ], "date": "2026-02-04", "url": "https://www.palegis.us/legislation/bills/2025/sb939" }, { "id": "m:US-NY:A08947", "jur": "US-NY", "level": "state", "num": "A08947", "title": "Enacts the \"youth & teen internet safety and social media literacy act\"; directs the commissioner of education to provide technical assistance to school districts for the development of…", "sum": "NY A08947 directs the state education commissioner to provide technical assistance to school districts in developing age-appropriate curricula covering internet safety, social media literacy, and artificial intelligence. The bill mandates instruction tailored to students' grade levels and abilities…", "stage": "introduced", "cats": [ "education", "minors" ], "secs": [ "consumer" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A8947" }, { "id": "m:US-NY:A08916", "jur": "US-NY", "level": "state", "num": "A08916", "title": "Prohibits licensees from relying on artificial intelligence for tracking and advertisement purposes and using such artificial intelligence to create personalized advertisements.", "sum": "This bill prohibits gambling licensees from using AI for tracking customers and creating personalized advertisements. It restricts both the deployment of AI-driven surveillance and algorithmic targeting in the wagering/racing sector.", "stage": "introduced", "cats": [ "consumer-financial", "privacy" ], "secs": [ "consumer" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A8916" }, { "id": "m:US-NY:S08459", "jur": "US-NY", "level": "state", "num": "S08459", "title": "Prohibits transcripts being made from video conference meetings by artificial intelligence without conspicuous disclosure during such meeting that such meeting may be transcribed by…", "sum": "NY S08459 requires conspicuous disclosure to meeting participants when artificial intelligence may transcribe a video conference, and prohibits AI transcription without that prior notice. The bill addresses transparency and consent around automated recording and processing of meeting content.", "stage": "introduced", "cats": [ "disclosures", "privacy" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S8459" }, { "id": "m:US-WI:AB377", "jur": "US-WI", "level": "state", "num": "AB377", "title": "Establishing English as the official state language, use of artificial intelligence or other machine-assisted translation tools in lieu of appointing English language interpreters, and use…", "sum": "WI AB377 would establish English as Wisconsin's official state language and authorize the use of AI or machine-assisted translation tools as a substitute for hiring human interpreters in government communications. The bill governs how state agencies may deploy translation AI instead of professional…", "stage": "failed/dead", "cats": [ "gov-use" ], "secs": [], "date": "2026-03-23", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/asm/bill/ab377" }, { "id": "m:US-NY:A08962", "jur": "US-NY", "level": "state", "num": "A08962", "title": "Enacts the \"New York fundamental artificial intelligence requirements in (FAIR) news act\"; provides transparency requirements for news media content composed, authored, or otherwise created…", "sum": "This bill requires news media outlets to provide transparency disclosures when content is composed, authored, or created using generative AI. It establishes labeling and disclosure obligations for AI-generated news content.", "stage": "introduced", "cats": [ "disclosures", "elections" ], "secs": [ "media" ], "date": "2026-06-05", "url": "https://www.nysenate.gov/legislation/bills/2025/A8962" }, { "id": "m:US-NY:S08484", "jur": "US-NY", "level": "state", "num": "S08484", "title": "Regulates the use of artificial intelligence in the provision of therapy or psychotherapy services by prohibiting the use of artificial intelligence to assist in providing supplementary…", "sum": "NY S08484 requires explicit patient consent and disclosure before AI can be used to assist in therapy or psychotherapy services in recorded or transcribed sessions. The bill establishes penalties for violations and carves out exceptions for religious counseling, peer support, and educational…", "stage": "introduced", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-06-05", "url": "https://www.nysenate.gov/legislation/bills/2025/S8484" }, { "id": "m:US-PA:HB1834", "jur": "US-PA", "level": "state", "num": "HB1834", "title": "Providing for the regulation of commercial data centers; imposing duties on the Pennsylvania Public Utility Commission, the Department of Human Services and the Pennsylvania Energy…", "sum": "PA HB1834 establishes comprehensive regulatory requirements for commercial data centers in Pennsylvania, including clean firm energy mandates, interconnection standards, backup generation and curtailment rules, utility-commission review, and disclosure requirements. The bill also creates dedicated…", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-31", "url": "https://www.palegis.us/legislation/bills/2025/hb1834" }, { "id": "m:US-NY:A09039", "jur": "US-NY", "level": "state", "num": "A09039", "title": "Establishes the \"accountability of costs for data centers act\"; requires each electric corporation, gas corporation and municipality to establish an independent classification of service…", "sum": "NY A09039 establishes separate rate classifications and cost-accountability frameworks for large-load energy facilities (particularly data centers) under electric and gas utilities and municipalities. It authorizes the Department of Public Service to develop financial surety requirements to ensure…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-01", "url": "https://www.nysenate.gov/legislation/bills/2025/A9039" }, { "id": "m:US-NY:A09028", "jur": "US-NY", "level": "state", "num": "A09028", "title": "Requires real estate brokers and online housing platforms using virtual agents and AI tools to conduct a disparate impact analysis to assess the actual impact of any such virtual agent;…", "sum": "Requires real estate brokers and online housing platforms using virtual agents and AI tools to conduct disparate impact analyses, submit summaries to the NY attorney general, and provide a human-agent option. Establishes anti-discriminatory requirements for AI tools in housing transactions.", "stage": "introduced", "cats": [ "anti-discrimination", "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A9028" }, { "id": "m:US-NY:A09086", "jur": "US-NY", "level": "state", "num": "A09086", "title": "Regulates energy consumption by data centers; requires annual disclosure reporting; prohibits incentives in fossil fuel power purchase agreements with utilities.", "sum": "NY A09086 regulates energy consumption by data centers and requires annual disclosure reporting on their power usage. It also prohibits utilities from offering incentives tied to fossil fuel power purchase agreements with data centers.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-01", "url": "https://www.nysenate.gov/legislation/bills/2025/A9086" }, { "id": "m:US-NY:A09097", "jur": "US-NY", "level": "state", "num": "A09097", "title": "Requires disclosure of use of generative artificial intelligence to clients, criminal defendants, and the court.", "sum": "Requires lawyers and other legal professionals to disclose their use of generative AI to clients, criminal defendants, and the court. Establishes a transparency mandate for AI deployment in legal practice.", "stage": "introduced", "cats": [ "governance", "disclosures" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A9097" }, { "id": "m:US-NY:A09091", "jur": "US-NY", "level": "state", "num": "A09091", "title": "Requires search engines inform users when showing information which was generated using artificial intelligence.", "sum": "NY A09091 requires search engines to disclose to users when search results or displayed information has been generated using artificial intelligence. This is a transparency mandate aimed at helping consumers understand the origin and nature of information they encounter in search results.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-05-05", "url": "https://www.nysenate.gov/legislation/bills/2025/A9091" }, { "id": "m:US-NY:A09106", "jur": "US-NY", "level": "state", "num": "A09106", "title": "Regulates the use of artificial intelligence in the provision of therapy or psychotherapy services by prohibiting the use of artificial intelligence to assist in providing supplementary…", "sum": "NY A09106 requires informed consent and disclosure when AI is used to provide supplementary support during therapy or psychotherapy sessions that are recorded or transcribed. The bill establishes penalties for violations and carves out exceptions for religious counseling, peer-support, and…", "stage": "introduced", "cats": [ "healthcare", "disclosures", "privacy" ], "secs": [ "health" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A9106" }, { "id": "m:US-PA:HB1925", "jur": "US-PA", "level": "state", "num": "HB1925", "title": "Providing for artificial intelligence in facilities, for artificial intelligence use by insurers and for artificial intelligence use by MA or CHIP managed care plans; imposing duties on the…", "sum": "PA HB1925 establishes requirements for artificial intelligence use in healthcare facilities, insurance underwriting, and Medicaid/CHIP managed care plans. The bill imposes duties on three state departments (Health, Insurance, Human Services) and creates penalties for violations, treating AI as a…", "stage": "introduced", "cats": [ "governance", "healthcare", "anti-discrimination" ], "secs": [ "health", "finserv" ], "date": "2026-06-25", "url": "https://www.palegis.us/legislation/bills/2025/hb1925" }, { "id": "m:US-FL:S0146", "jur": "US-FL", "level": "state", "num": "S0146", "title": "Use of Artificial Intelligence by State Agencies", "sum": "FL S0146 directs the Florida Digital Service to conduct a study on the use of artificial intelligence by state agencies. The bill appears to focus on understanding current AI deployment and practices within Florida government.", "stage": "failed/dead", "cats": [ "gov-use" ], "secs": [], "date": "2026-03-13", "url": "https://www.flsenate.gov/Session/Bill/2026/146" }, { "id": "m:US-FL:S0202", "jur": "US-FL", "level": "state", "num": "S0202", "title": "Mandatory Human Reviews of Insurance Claim Denials", "sum": "FL S0202 prohibits insurers from using algorithms, artificial intelligence, or machine learning as the sole basis for denying insurance claims, requiring that claim-denial decisions be made by qualified human professionals. The bill authorizes the Office of Insurance Regulation to conduct market…", "stage": "failed/dead", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "finserv" ], "date": "2026-03-13", "url": "https://www.flsenate.gov/Session/Bill/2026/202" }, { "id": "m:US-MA:S2632", "jur": "US-MA", "level": "state", "num": "S2632", "title": "Relative to the use of artificial intelligence and other software tools in healthcare decision-making", "sum": "MA S2632 addresses the use of artificial intelligence and other software tools in healthcare decision-making, establishing requirements for transparency, accountability, and fairness in automated clinical and administrative decisions. The bill appears designed to ensure that AI systems used in…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "disclosures" ], "secs": [ "health" ], "date": "2026-04-02", "url": "https://malegislature.gov/Bills/194/S2632" }, { "id": "m:US-NY:A09136", "jur": "US-NY", "level": "state", "num": "A09136", "title": "Requires the owner or operator of a new data center to submit to the Public Service Commission a thermal energy network feasibility assessment that identifies potential off-site thermal…", "sum": "Requires new data-center owners/operators to submit thermal-energy network feasibility assessments to the Public Service Commission and to design, construct, and operate facilities to capture and reuse waste heat through thermal networks. The bill addresses energy efficiency and grid impact of…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A9136" }, { "id": "m:US-NY:A09185", "jur": "US-NY", "level": "state", "num": "A09185", "title": "Includes communications generated using artificial intelligence in the definition of falsely reporting an incident in the third degree.", "sum": "This bill amends New York's penal code to explicitly include AI-generated communications within the crime of falsely reporting an incident in the third degree, treating synthetic messages as equivalent to traditional false reports to law enforcement.", "stage": "introduced", "cats": [ "deepfakes", "public-safety" ], "secs": [ "media" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A9185" }, { "id": "m:US-NY:S08540", "jur": "US-NY", "level": "state", "num": "S08540", "title": "Establishes the \"accountability of costs for data centers act\"; requires each electric corporation, gas corporation and municipality to establish an independent classification of service…", "sum": "This bill requires electric corporations, gas corporations, and municipalities to establish a separate service classification for large energy-use facilities (including data centers) and authorizes the Department of Public Service to develop financial surety requirements for those facilities.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-29", "url": "https://www.nysenate.gov/legislation/bills/2025/S8540" }, { "id": "m:US-NY:S08546", "jur": "US-NY", "level": "state", "num": "S08546", "title": "Requires the public service commission establish a grid modernization surcharge imposed on utilities for the energy use of data centers and high-intensity data centers which meet a…", "sum": "NY S08546 requires the Public Service Commission to impose a grid modernization surcharge on utilities for energy consumed by data centers and high-intensity data centers exceeding specified electricity thresholds, with revenues financing grid reliability, capacity expansion, and clean energy…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S8546" }, { "id": "m:US-FL:H0281", "jur": "US-FL", "level": "state", "num": "H0281", "title": "Use of Artificial Intelligence in Psychological, Clinical, Counseling, and Therapy Services", "sum": "FL H0281 prohibits the use of artificial intelligence in the practice of psychology, clinical social work, marriage and family therapy, and mental health counseling, with defined exceptions. The bill defines AI and carves out specific allowable uses in these regulated mental-health professions.", "stage": "failed/dead", "cats": [ "healthcare" ], "secs": [ "health" ], "date": "2026-03-13", "url": "https://www.flsenate.gov/Session/Bill/2026/281" }, { "id": "m:US-OK:HB1782", "jur": "US-OK", "level": "state", "num": "HB1782", "title": "Artificial intelligence education; creating the AI Education Innovation Act, the AI Education Innovation Revolving Fund and the AI Education Advisory Council; effective date.", "sum": "OK HB1782 establishes the AI Education Innovation Act, creating a dedicated revolving fund and advisory council to support artificial intelligence education initiatives across Oklahoma schools and institutions. The bill aims to build AI curriculum, literacy, and workforce development capacity in…", "stage": "engrossed", "cats": [ "governance", "education" ], "secs": [], "date": "2026-04-21", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=hb1782&Session=2600" }, { "id": "m:US-PA:HB2006", "jur": "US-PA", "level": "state", "num": "HB2006", "title": "Providing for safety regarding artificial intelligence in companionship applications; and imposing a penalty.", "sum": "PA HB2006 establishes safety requirements for AI systems used in companionship applications, with particular attention to protecting minors from potential harms. The bill imposes penalties for violations of these safety standards.", "stage": "introduced", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-07-01", "url": "https://www.palegis.us/legislation/bills/2025/hb2006" }, { "id": "m:US-NY:A09219", "jur": "US-NY", "level": "state", "num": "A09219", "title": "Requires experts in professional fields to be consulted when developing and maintaining artificial intelligence technology for use in such fields.", "sum": "This bill requires that experts in professional fields be consulted during the development and maintenance of AI systems intended for use in those fields. It establishes a procedural governance requirement aimed at ensuring domain expertise informs AI design and deployment across professional…", "stage": "introduced", "cats": [ "governance", "anti-discrimination" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A9219" }, { "id": "m:US-NY:A09190", "jur": "US-NY", "level": "state", "num": "A09190", "title": "Prohibits the use of most artificial intelligence in classrooms prior to high school except for AI used for diagnostic purposes or explicit instruction interventions for students with…", "sum": "NY A09190 prohibits most AI use in pre-high-school classrooms, with exceptions for diagnostic assessment and explicit instructional interventions for students with disabilities. The bill directly regulates AI deployment in K-8 educational settings.", "stage": "introduced", "cats": [ "education", "minors" ], "secs": [], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/A9190" }, { "id": "m:US-FL:S0344", "jur": "US-FL", "level": "state", "num": "S0344", "title": "Use of Artificial Intelligence in Psychological, Clinical, Counseling, and Therapy Services", "sum": "FL S0344 prohibits the use of artificial intelligence in the practice of psychology, clinical social work, marriage and family therapy, and mental health counseling. The bill defines AI and imposes restrictions on AI deployment in mental-health and therapeutic contexts.", "stage": "failed/dead", "cats": [ "healthcare" ], "secs": [ "health" ], "date": "2026-03-13", "url": "https://www.flsenate.gov/Session/Bill/2026/344" }, { "id": "m:US-OH:SB326", "jur": "US-OH", "level": "state", "num": "SB326", "title": "Require students complete a high school computer science course", "sum": "OH SB326 requires Ohio school districts to offer and students to complete at least one high school computer science course as a graduation requirement. The bill amends multiple education code sections to mandate this curriculum across public, charter, and non-public schools.", "stage": "engrossed", "cats": [ "education" ], "secs": [], "date": "2026-06-16", "url": "https://www.legislature.ohio.gov/legislation/136/sb326" }, { "id": "m:US-PA:SB1090", "jur": "US-PA", "level": "state", "num": "SB1090", "title": "Providing for disclosures and safeguards relating to the use of artificial intelligence; and imposing duties on the Attorney General.", "sum": "PA SB1090 requires disclosure and safeguards for AI use and grants the Pennsylvania Attorney General enforcement duties over AI-related practices. The bill appears to establish transparency obligations and consumer protections tied to AI systems, with AG oversight authority.", "stage": "engrossed", "cats": [ "governance", "disclosures", "consumer-financial" ], "secs": [], "date": "2026-03-18", "url": "https://www.palegis.us/legislation/bills/2025/sb1090" }, { "id": "m:US-NY:S08589", "jur": "US-NY", "level": "state", "num": "S08589", "title": "Requires covered employers to provide notice to certain affected employees prior to any technological displacement; requires reporting; requires a workforce transition period; makes related…", "sum": "This bill requires covered employers to notify employees before implementing technological displacement (automation/AI), establish a workforce transition period, and report on such deployments. It mandates advance notice and transition support when employers adopt technology that replaces or…", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-05-14", "url": "https://www.nysenate.gov/legislation/bills/2025/S8589" }, { "id": "m:US-NY:A09253", "jur": "US-NY", "level": "state", "num": "A09253", "title": "Requires policing agencies to conduct an inventory of, and develop a publicly-available policy for, any artificial intelligence used to aid criminal investigations.", "sum": "This bill requires law-enforcement agencies in New York to inventory all artificial intelligence systems used in criminal investigations and develop publicly-available policies governing their use. It establishes transparency and accountability mechanisms for police deployment of AI.", "stage": "introduced", "cats": [ "governance", "gov-use", "public-safety" ], "secs": [], "date": "2026-03-17", "url": "https://www.nysenate.gov/legislation/bills/2025/A9253" }, { "id": "m:US-NH:SB439", "jur": "US-NH", "level": "state", "num": "SB439", "title": "Relative to municipal data center zoning.", "sum": "NH SB439 addresses municipal zoning rules for data centers, establishing local land-use authority and procedures for siting large computational infrastructure. The bill falls within the data-centers vertical because data-center siting, zoning, and grid/utility impacts are tracked substantive…", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-14", "url": "https://gc.nh.gov/bill_status/legacy/bs2016/bill_status.aspx?lsr=2236&sy=2026&sortoption=&txtsessionyear=2026&txtbillnumber=SB439" }, { "id": "m:US-FL:H0527", "jur": "US-FL", "level": "state", "num": "H0527", "title": "Mandatory Human Reviews of Insurance Claim Denials", "sum": "FL H0527 permits workers' compensation insurers and HMOs to use AI/machine learning to assist in claims processing, but prohibits AI from being the sole basis for claim denials or payment reductions—all such decisions must be made by qualified human professionals. The bill also grants the Office of…", "stage": "failed/dead", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "finserv" ], "date": "2026-03-13", "url": "https://www.flsenate.gov/Session/Bill/2026/527" }, { "id": "m:US-NH:SB640", "jur": "US-NH", "level": "state", "num": "SB640", "title": "Relative to the use of artificial intelligence to provide services requiring a professional license.", "sum": "NH SB640 addresses the use of artificial intelligence to provide services that normally require a professional license. The bill establishes rules or constraints around when and how AI systems can be deployed in licensed professions, likely touching on accountability, disclosure, and competency…", "stage": "engrossed", "cats": [ "governance", "anti-discrimination" ], "secs": [], "date": "2026-05-14", "url": "https://gc.nh.gov/bill_status/legacy/bs2016/bill_status.aspx?lsr=2088&sy=2026&sortoption=&txtsessionyear=2026&txtbillnumber=SB640" }, { "id": "m:US-NH:HB1265", "jur": "US-NH", "level": "state", "num": "HB1265", "title": "Prohibiting the construction of data centers in the state and establishing a committee to study the environmental impact of data centers.", "sum": "NH HB1265 would prohibit construction of new data centers in New Hampshire and establishes a committee to study their environmental impact. The bill directly addresses data-center siting and energy/grid concerns, which fall within the AI vertical's infrastructure scope.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-11", "url": "https://gc.nh.gov/bill_status/legacy/bs2016/bill_status.aspx?lsr=2482&sy=2026&sortoption=&txtsessionyear=2026&txtbillnumber=HB1265" }, { "id": "m:US-MO:HB1769", "jur": "US-MO", "level": "state", "num": "HB1769", "title": "Establishes the \"AI Non-Sentience and Responsibility Act\"", "sum": "The bill establishes the 'AI Non-Sentience and Responsibility Act,' which likely addresses legal and liability frameworks around AI systems by clarifying that AI is not sentient and establishing responsibility rules for developers and operators. Without access to the full text, the substantive…", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-02-26", "url": "https://house.mo.gov/Bill.aspx?bill=HB1769&year=2026&code=R" }, { "id": "m:US-MO:HB1887", "jur": "US-MO", "level": "state", "num": "HB1887", "title": "Creates the offense of and civil penalties for disclosure of intimate digital depictions", "sum": "MO HB1887 creates criminal and civil penalties for disclosure of intimate digital depictions (non-consensual intimate images, including deepfake or synthetic intimate media). The bill addresses harm from both real and artificially generated intimate imagery.", "stage": "engrossed", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-04-27", "url": "https://house.mo.gov/Bill.aspx?bill=HB1887&year=2026&code=R" }, { "id": "m:US-MO:HB1742", "jur": "US-MO", "level": "state", "num": "HB1742", "title": "Establishes provisions relating to companion chatbots", "sum": "MO HB1742 establishes regulatory provisions governing companion chatbots, likely addressing disclosure, safety, and consumer-protection requirements for AI chatbot systems that interact with users.", "stage": "introduced", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-05-15", "url": "https://house.mo.gov/Bill.aspx?bill=HB1742&year=2026&code=R" }, { "id": "m:US-MO:HB2035", "jur": "US-MO", "level": "state", "num": "HB2035", "title": "Establishes and modifies provisions relating to artificially generated material", "sum": "MO HB2035 establishes provisions regulating artificially generated material, likely addressing disclosure, labeling, or restriction of synthetic media including deepfakes. The bill modifies existing law to create a legal framework for identifying and managing AI-generated content.", "stage": "engrossed", "cats": [ "deepfakes", "disclosures" ], "secs": [ "media" ], "date": "2026-04-29", "url": "https://house.mo.gov/Bill.aspx?bill=HB2035&year=2026&code=R" }, { "id": "m:US-MO:HB2032", "jur": "US-MO", "level": "state", "num": "HB2032", "title": "Establishes age verification measures for companion chatbots", "sum": "MO HB2032 establishes age-verification requirements for companion chatbots, likely requiring disclosure of the chatbot's nature and implementation of mechanisms to prevent or restrict access by minors. The bill targets a specific AI application—conversational AI systems designed as companions—with…", "stage": "introduced", "cats": [ "minors", "disclosures" ], "secs": [ "consumer" ], "date": "2026-04-02", "url": "https://house.mo.gov/Bill.aspx?bill=HB2032&year=2026&code=R" }, { "id": "m:US-MO:HB1913", "jur": "US-MO", "level": "state", "num": "HB1913", "title": "Creates the offense of and civil penalties for disclosure of intimate digital depictions", "sum": "MO HB1913 creates criminal and civil liability for disclosure of intimate digital depictions—including non-consensual deepfakes and synthetic intimate imagery. The bill addresses both the creation and distribution of AI-generated or manipulated sexual content without consent.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-02-26", "url": "https://house.mo.gov/Bill.aspx?bill=HB1913&year=2026&code=R" }, { "id": "m:US-MO:HB2031", "jur": "US-MO", "level": "state", "num": "HB2031", "title": "Establishes the \"Children Harmed by AI Technology Act\"", "sum": "MO HB2031 establishes the 'Children Harmed by AI Technology Act,' creating liability and consumer-protection rules for AI systems that cause harm to minors. The bill appears to address injuries or damages to children from AI-driven products and services.", "stage": "introduced", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-05-15", "url": "https://house.mo.gov/Bill.aspx?bill=HB2031&year=2026&code=R" }, { "id": "m:US-MO:HB1746", "jur": "US-MO", "level": "state", "num": "HB1746", "title": "Establishes the \"AI Nonsentience and Responsibility Act\"", "sum": "Establishes the 'AI Nonsentience and Responsibility Act,' which clarifies that AI systems are not sentient entities and establishes legal frameworks for responsibility and liability in AI deployment and use.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-03-30", "url": "https://house.mo.gov/Bill.aspx?bill=HB1746&year=2026&code=R" }, { "id": "m:US-MO:HB1747", "jur": "US-MO", "level": "state", "num": "HB1747", "title": "Allows a person to bring a cause of action against another person or entity for damages for failing to state certain content is generated or modified using artificial intelligence", "sum": "MO HB1747 creates a private right of action allowing individuals to sue for damages when AI-generated or AI-modified content is not clearly disclosed as such. The bill establishes a disclosure requirement and civil liability mechanism for failing to label synthetic or manipulated content.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "media" ], "date": "2026-04-09", "url": "https://house.mo.gov/Bill.aspx?bill=HB1747&year=2026&code=R" }, { "id": "m:US-MO:SB1012", "jur": "US-MO", "level": "state", "num": "SB1012", "title": "Creates new provisions relating to artificial intelligence", "sum": "MO SB1012 creates new statutory provisions relating to artificial intelligence, though the official description does not specify the substantive scope. Without access to the full bill text, the nature of regulation—whether it addresses AI procurement, governance structures, task forces, or specific…", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-03-19", "url": "https://www.senate.mo.gov/26info/BTS_Web/Bill.aspx?SessionType=R&BillID=469" }, { "id": "m:US-MO:SB1324", "jur": "US-MO", "level": "state", "num": "SB1324", "title": "Creates regulations of artificially generated online content using artificial intelligence", "sum": "MO SB1324 creates regulations governing artificially generated online content produced by AI systems, likely addressing synthetic media, deepfakes, and AI-created digital content. The bill appears to establish disclosure and compliance requirements for AI-generated material shared online.", "stage": "introduced", "cats": [ "deepfakes", "disclosures", "elections" ], "secs": [ "media" ], "date": "2026-03-25", "url": "https://www.senate.mo.gov/BillTracking/Bills/Billinformation?year=2026&billid=307" }, { "id": "m:US-MO:SB1183", "jur": "US-MO", "level": "state", "num": "SB1183", "title": "Creates provisions relating to synthetic media", "sum": "MO SB1183 creates legal provisions specifically governing synthetic media, including likely restrictions, disclosure requirements, or liability rules tied to deepfakes and AI-generated content. The bill's focus on synthetic media as a substantive subject makes it directly relevant to AI regulation.", "stage": "introduced", "cats": [ "deepfakes", "disclosures" ], "secs": [ "media" ], "date": "2026-01-27", "url": "https://www.senate.mo.gov/BillTracking/Bills/Billinformation?year=2026&billid=336" }, { "id": "m:US-MO:SB1395", "jur": "US-MO", "level": "state", "num": "SB1395", "title": "Modifies provisions relating to the unauthorized practice of law as it relates to the use of artificial intelligence", "sum": "MO SB1395 modifies Missouri's unauthorized practice of law statute to address the use of artificial intelligence in legal services. The bill clarifies regulatory boundaries around AI tools and their permissible use in legal practice, likely to prevent non-lawyers from using AI to deliver…", "stage": "introduced", "cats": [ "governance", "consumer-financial" ], "secs": [], "date": "2026-01-27", "url": "https://www.senate.mo.gov/BillTracking/Bills/Billinformation?year=2026&billid=691" }, { "id": "m:US-WI:SB729", "jur": "US-WI", "level": "state", "num": "SB729", "title": "Large energy customer fees; electric utility very large customer class; a renewable resource tariff; building requirements for data centers; water usage by large customers; required pay…", "sum": "WI SB729 establishes regulatory and infrastructure requirements for large-scale data centers in Wisconsin, including building codes, water-usage oversight, utility tariffs for very large customers, and mandatory prevailing wage rates for data-center construction projects.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-06", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/sen/bill/sb729" }, { "id": "m:US-WI:AB722", "jur": "US-WI", "level": "state", "num": "AB722", "title": "Large energy customer fees; electric utility very large customer class; a renewable resource tariff; building requirements for data centers; water usage by large customers; required pay…", "sum": "WI AB722 regulates large data centers by establishing utility rate classes for very large customers, imposing building requirements, water-usage accountability, and prevailing-wage mandates for large-scale data center projects in Wisconsin.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-06", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/asm/bill/ab722" }, { "id": "m:US-NH:HB1406", "jur": "US-NH", "level": "state", "num": "HB1406", "title": "Relative to health carrier recordkeeping requirements in utilization review, including specifications regarding the use of artificial intelligence.", "sum": "NH HB1406 establishes recordkeeping requirements for health carriers conducting utilization review and specifically addresses the use of artificial intelligence in those determinations. The bill aims to create transparency and accountability around algorithmic decision-making in insurance coverage…", "stage": "engrossed", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "health", "finserv" ], "date": "2026-05-05", "url": "https://gc.nh.gov/bill_status/legacy/bs2016/bill_status.aspx?lsr=2971&sy=2026&sortoption=&txtsessionyear=2026&txtbillnumber=HB1406" }, { "id": "m:US-IN:SB0079", "jur": "US-IN", "level": "state", "num": "SB0079", "title": "Data center development.", "sum": "IN SB0079 requires the Indiana utility regulatory commission to establish a working group to forecast future electricity demand from data centers and report findings by October 2026. It mandates quarterly electricity reporting by data center operators and requires local governments to assess power…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-06", "url": "https://iga.in.gov/legislative/2026/bills/senate/79/details" }, { "id": "m:US-FL:H0659", "jur": "US-FL", "level": "state", "num": "H0659", "title": "Interactions with Artificial Intelligence", "sum": "Requires companion chatbot operators to display specified information to users, verify age, and implement protective protocols for minors; violations are treated as unfair or deceptive acts subject to civil action and DLA reporting.", "stage": "failed/dead", "cats": [ "minors", "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-03-13", "url": "https://www.flsenate.gov/Session/Bill/2026/659" }, { "id": "m:US-MO:HB2239", "jur": "US-MO", "level": "state", "num": "HB2239", "title": "Creates the Artificial Intelligence Data Center Environmental Accountability Act", "sum": "MO HB2239 creates the Artificial Intelligence Data Center Environmental Accountability Act, establishing environmental accountability and oversight standards for AI data centers operating in Missouri. The bill appears to address siting, energy consumption, water use, and/or grid impact requirements…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-15", "url": "https://house.mo.gov/Bill.aspx?bill=HB2239&year=2026&code=R" }, { "id": "m:US-ME:LD2052", "jur": "US-ME", "level": "state", "num": "LD2052", "title": "Resolve, to Study the Use of Technology in Classrooms and Study Safeguards Related to Its Use", "sum": "ME LD2052 establishes a study committee to examine the use of technology in Maine classrooms and develop safeguards related to that use. The resolve does not substantively regulate AI systems itself, but directs investigation into classroom technology practices and protective measures.", "stage": "passed", "cats": [ "education" ], "secs": [], "date": "2026-03-25", "url": "https://legislature.maine.gov/legis/bills/display_ps.asp?LD=2052&snum=132" }, { "id": "m:US-NH:HB1506", "jur": "US-NH", "level": "state", "num": "HB1506", "title": "Creating an exception to the restricted uses of artificial intelligence by state agencies.", "sum": "NH HB1506 creates an exception to restrictions on state agencies' use of artificial intelligence, allowing certain AI applications in government operations that would otherwise be prohibited. The bill moves to interim study for further development.", "stage": "introduced", "cats": [ "gov-use" ], "secs": [], "date": "2026-03-11", "url": "https://gc.nh.gov/bill_status/legacy/bs2016/bill_status.aspx?lsr=2507&sy=2026&sortoption=&txtsessionyear=2026&txtbillnumber=HB1506" }, { "id": "m:US-NY:A09297", "jur": "US-NY", "level": "state", "num": "A09297", "title": "Requires hyperscale data centers to offset their electricity demand by funding household electrification measures.", "sum": "NY A09297 requires hyperscale data centers to offset their electricity demand by funding household electrification measures, addressing the grid and energy impact of large-load compute infrastructure.", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-18", "url": "https://www.nysenate.gov/legislation/bills/2025/A9297" }, { "id": "m:US-MO:HB2318", "jur": "US-MO", "level": "state", "num": "HB2318", "title": "Creates provisions relating to artificial intelligence in mental health", "sum": "MO HB2318 creates regulatory provisions governing the use of artificial intelligence in mental health treatment and services. The bill likely addresses transparency, safety, and disclosure requirements for AI-driven mental health applications and clinical decision support systems.", "stage": "introduced", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-03-12", "url": "https://house.mo.gov/Bill.aspx?bill=HB2318&year=2026&code=R" }, { "id": "m:US-MO:HB2321", "jur": "US-MO", "level": "state", "num": "HB2321", "title": "Establishes the \"AI-Generated Content Accountability and Privacy Protection Act of 2026\"", "sum": "MO HB2321 establishes accountability and privacy protections for AI-generated content, likely requiring disclosure of synthetic or machine-generated media and restrictions on unauthorized use of personal data or likenesses in AI systems. The bill directly addresses transparency and consent in AI…", "stage": "introduced", "cats": [ "disclosures", "privacy", "deepfakes" ], "secs": [ "media" ], "date": "2026-02-26", "url": "https://house.mo.gov/Bill.aspx?bill=HB2321&year=2026&code=R" }, { "id": "m:US-MO:HB2368", "jur": "US-MO", "level": "state", "num": "HB2368", "title": "Creates provisions relating to artificial intelligence in mental health", "sum": "MO HB2368 creates provisions regulating the use of artificial intelligence in mental health applications, likely including requirements for transparency, safety standards, or clinical oversight of AI-based mental health tools and services.", "stage": "introduced", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-03-12", "url": "https://house.mo.gov/Bill.aspx?bill=HB2368&year=2026&code=R" }, { "id": "m:US-SC:S0724", "jur": "US-SC", "level": "state", "num": "S0724", "title": "Commercial Data Center Water Usage Report", "sum": "Requires commercial data centers consuming ≥3 million gallons of water monthly to file annual water-usage reports with South Carolina's Department of Environmental Services and establishes penalties for non-compliance.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-13", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=0724&session=126&summary=B" }, { "id": "m:US-WA:SB5870", "jur": "US-WA", "level": "state", "num": "SB5870", "title": "Establishing civil liability for suicide linked to the use of artificial intelligence systems.", "sum": "WA SB5870 establishes civil liability for deaths by suicide that are linked to the use of artificial intelligence systems. The bill creates a direct legal pathway for damages when AI systems contribute to or facilitate self-harm outcomes.", "stage": "introduced", "cats": [ "consumer-financial", "healthcare" ], "secs": [], "date": "2026-01-12", "url": "https://app.leg.wa.gov/billsummary?BillNumber=5870&Year=2025&Initiative=false" }, { "id": "m:US-TN:HB1455", "jur": "US-TN", "level": "state", "num": "HB1455", "title": "AN ACT to amend Tennessee Code Annotated, Title 29; Title 33; Title 39 and Title 47, relative to artificial intelligence.", "sum": "Requires the Tennessee Advisory Commission on Intergovernmental Relations (TACIR) to conduct a comprehensive study of artificial intelligence and submit findings and recommendations to the governor and both legislative speakers by January 31, 2027. The bill amends multiple statutory titles (29, 33,…", "stage": "passed", "cats": [ "governance" ], "secs": [], "date": "2026-05-27", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB1455&ga=114" }, { "id": "m:US-OH:HB628", "jur": "US-OH", "level": "state", "num": "HB628", "title": "License artificial intelligence risk mitigation organizations", "sum": "This bill creates a new independent-verification organization (IVO) license in Ohio to certify and verify artificial intelligence risk mitigation. It establishes regulatory oversight, licensing requirements, and operational standards for entities that audit or validate AI safety and compliance…", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-02-04", "url": "https://www.legislature.ohio.gov/legislation/136/hb628" }, { "id": "m:US-NY:S08616", "jur": "US-NY", "level": "state", "num": "S08616", "title": "Prohibits the use of electronic shelving labels, digital shelf display technology, and surveillance pricing in food retail establishments and drug retail establishments; provides injunctive…", "sum": "This bill prohibits food and drug retailers from using electronic shelving labels, digital shelf displays, and algorithmic 'surveillance pricing' (dynamic pricing based on customer data or behavior). It creates a private right of action with injunctive relief and civil penalties.", "stage": "engrossed", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-06-05", "url": "https://www.nysenate.gov/legislation/bills/2025/S8616" }, { "id": "m:US-OK:SB1241", "jur": "US-OK", "level": "state", "num": "SB1241", "title": "Ticket sales; Oklahoma Fraud and Ticketing Accountability Act; defining terms; prohibiting use of certain bots; requiring disclosures; prohibiting sales; requiring refunds; establishing…", "sum": "OK SB1241 prohibits the use of certain bots in ticket sales, requires disclosures about bot usage, and establishes violations of the Oklahoma Consumer Protection Act with refund remedies. The bill targets automated ticket-purchasing systems that bypass fair access and artificially inflate prices.", "stage": "introduced", "cats": [ "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-03-16", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=sb1241&Session=2600" }, { "id": "m:US-WA:HB2144", "jur": "US-WA", "level": "state", "num": "HB2144", "title": "Requiring notices to employees when electronic monitoring is used to assist employers conducting performance evaluations.", "sum": "Requires employers to notify employees when electronic monitoring systems are used to assist in conducting performance evaluations. The bill mandates transparency around automated or AI-assisted monitoring tools used in employment decisions.", "stage": "introduced", "cats": [ "hiring", "disclosures" ], "secs": [ "hr" ], "date": "2026-02-06", "url": "https://app.leg.wa.gov/billsummary?BillNumber=2144&Year=2025&Initiative=false" }, { "id": "m:US-WA:HB2157", "jur": "US-WA", "level": "state", "num": "HB2157", "title": "Regulating high-risk artificial intelligence system development, deployment, and use.", "sum": "WA HB2157 establishes regulatory frameworks for high-risk AI system development, deployment, and use, likely addressing safety, impact assessment, and oversight of consequential automated decision-making. The bill targets developer and deployer obligations across sectors where AI poses material…", "stage": "introduced", "cats": [ "governance", "frontier", "anti-discrimination" ], "secs": [], "date": "2026-02-19", "url": "https://app.leg.wa.gov/billsummary?BillNumber=2157&Year=2025&Initiative=false" }, { "id": "m:US-TN:HB1461", "jur": "US-TN", "level": "state", "num": "HB1461", "title": "AN ACT to amend Tennessee Code Annotated, Title 4; Title 8 and Title 68, relative to high performance computing facilities.", "sum": "Requires high-performance computing (HPC) facility operators to dedicate 50% of computing output to public benefit, report annual energy consumption and carbon footprint, and undergo compliance audits. The bill directly addresses infrastructure policy for large-load compute facilities.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-04", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB1461&ga=114" }, { "id": "m:US-NH:HB1725", "jur": "US-NH", "level": "state", "num": "HB1725", "title": "Relative to the regulation of artificial intelligence technologies.", "sum": "NH HB1725 proposes regulation of artificial intelligence technologies at the state level. The bill appears to establish a framework for AI oversight, though it was ultimately voted inexpedient to legislate and did not advance.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-02-19", "url": "https://gc.nh.gov/bill_status/legacy/bs2016/bill_status.aspx?lsr=2812&sy=2026&sortoption=&txtsessionyear=2026&txtbillnumber=HB1725" }, { "id": "m:US-MO:SB1444", "jur": "US-MO", "level": "state", "num": "SB1444", "title": "Creates provisions relating to artificial intelligence in mental health", "sum": "MO SB1444 creates regulatory provisions governing the use of artificial intelligence systems in mental health treatment and care. The bill likely addresses AI-enabled psychotherapy, mental-health chatbots, or clinical decision-support tools, with probable requirements around transparency, safety,…", "stage": "introduced", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-04-07", "url": "https://www.senate.mo.gov/BillTracking/Bills/Billinformation?year=2026&billid=19771" }, { "id": "m:US-MI:SB0760", "jur": "US-MI", "level": "state", "num": "SB0760", "title": "Trade: business regulation; availability of companion chatbots to minors; prohibit. Creates new act.", "sum": "MI SB0760 prohibits the availability of companion chatbots to minors. The bill creates a new regulatory framework restricting chatbot products or services designed to simulate emotional or social companionship with users under the age of majority.", "stage": "engrossed", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-04-29", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2025-SB-0760" }, { "id": "m:US-OH:SCR14", "jur": "US-OH", "level": "state", "num": "SCR14", "title": "Urge Congress to reject moratorium on state regulation of AI", "sum": "A concurrent resolution urging Congress to reject any federal moratorium on state regulation of artificial intelligence. The bill asserts Ohio's position that states should retain authority to regulate AI independently.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-02-11", "url": "https://www.legislature.ohio.gov/legislation/136/scr14" }, { "id": "m:US-IL:HB4248", "jur": "US-IL", "level": "state", "num": "HB4248", "title": "ALGORITHMIC PRICE TRANSPARENCY", "sum": "IL HB4248 prohibits 'surveillance pricing'—the practice of using automated systems to charge different prices to consumers based on personal data or profiling. The bill authorizes the Attorney General and State's Attorneys to enforce the ban under consumer-fraud statutes and voids any contractual…", "stage": "engrossed", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-06-01", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=4248&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-MI:SB0762", "jur": "US-MI", "level": "state", "num": "SB0762", "title": "Energy: other; energy and water usage report requirements for data centers; provide for. Amends sec. 5a of 1939 PA 3 (MCL 460.5a).", "sum": "MI SB0762 requires data centers to report energy and water usage to the state, amending Michigan's public utilities statute. The bill establishes transparency and accountability requirements for large-load infrastructure operations.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-01", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2025-SB-0762" }, { "id": "m:US-SC:H4675", "jur": "US-SC", "level": "state", "num": "H4675", "title": "Video Surveillance", "sum": "SC H4675 restricts state and local surveillance systems from storing data on third-party servers and prohibits use of AI or automated systems to track vehicles without judicial oversight. The bill also mandates annual reporting and establishes data retention and storage requirements.", "stage": "introduced", "cats": [ "gov-use", "public-safety", "privacy" ], "secs": [], "date": "2026-01-13", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=4675&session=126&summary=B" }, { "id": "m:US-SC:H4583", "jur": "US-SC", "level": "state", "num": "H4583", "title": "The South Carolina Data Center Responsibility Act", "sum": "SC H4583 establishes regulatory requirements for data centers operating in South Carolina, including sustainability standards and taxpayer-protection provisions. The bill directly addresses large-load infrastructure siting, energy management, and accountability in a sector critical to AI compute…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-18", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=4583&session=126&summary=B" }, { "id": "m:US-SC:H4582", "jur": "US-SC", "level": "state", "num": "H4582", "title": "Artificial Intelligence Electives", "sum": "SC H4582 authorizes South Carolina school districts to offer age-appropriate instruction to students on how to access, utilize, and critically evaluate artificial intelligence tools. The bill amends state education code to make AI literacy electives optional within K-12 curricula.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-01-13", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=4582&session=126&summary=B" }, { "id": "m:US-SC:H4657", "jur": "US-SC", "level": "state", "num": "H4657", "title": "Right to Compute Act", "sum": "The Right to Compute Act requires risk management policies for critical infrastructure controlled by AI systems and establishes conditions under which private computational resources may be restricted. The bill creates a regulatory framework around AI-managed critical infrastructure and defines…", "stage": "introduced", "cats": [ "governance", "data-centers" ], "secs": [ "infra" ], "date": "2026-01-13", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=4657&session=126&summary=B" }, { "id": "m:US-SC:H4591", "jur": "US-SC", "level": "state", "num": "H4591", "title": "Stop Harm from Addictive Social Media", "sum": "SC H4591 requires social media platforms to estimate and verify user age, implement default safety settings for minors, and obtain parental consent for underage accounts. The bill uses algorithmic age-verification and automated account-configuration systems to protect children on social platforms.", "stage": "passed", "cats": [ "minors", "disclosures" ], "secs": [ "consumer" ], "date": "2026-06-03", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=4591&session=126&summary=B" }, { "id": "m:US-MO:SB1455", "jur": "US-MO", "level": "state", "num": "SB1455", "title": "Creates provisions relating to artificial intelligence chatbots", "sum": "MO SB1455 creates regulatory provisions specifically governing artificial intelligence chatbots, likely addressing disclosure requirements, user interaction rules, or consumer protection safeguards tied to chatbot deployment and use.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-02-05", "url": "https://www.senate.mo.gov/BillTracking/Bills/Billinformation?year=2026&billid=27964" }, { "id": "m:US-NY:A09396", "jur": "US-NY", "level": "state", "num": "A09396", "title": "Prohibits the use of electronic shelving labels, digital shelf display technology, and surveillance pricing in food retail establishments and drug retail establishments; provides injunctive…", "sum": "This bill prohibits food and drug retailers from using electronic shelf labels, digital display technology, and algorithmic surveillance pricing. It establishes civil penalties and injunctive relief for violations.", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-06-05", "url": "https://www.nysenate.gov/legislation/bills/2025/A9396" }, { "id": "m:US-FL:S0482", "jur": "US-FL", "level": "state", "num": "S0482", "title": "Artificial Intelligence Bill of Rights", "sum": "FL S0482 restricts government contracting with AI vendors unless certain requirements are met, prohibits contract extensions/renewals with specified entities, and requires companion chatbot platforms to obtain parental consent before minors become account holders and to provide periodic…", "stage": "failed/dead", "cats": [ "governance", "gov-use", "minors" ], "secs": [ "consumer" ], "date": "2026-03-13", "url": "https://www.flsenate.gov/Session/Bill/2026/482" }, { "id": "m:US-TN:SB1493", "jur": "US-TN", "level": "state", "num": "SB1493", "title": "AN ACT to amend Tennessee Code Annotated, Title 29; Title 33; Title 39 and Title 47, relative to artificial intelligence.", "sum": "TN SB1493 directs the Tennessee Advisory Commission on Intergovernmental Relations (TACIR) to conduct a comprehensive study of artificial intelligence and submit findings and recommendations to the Governor and legislative leadership by January 31, 2027.", "stage": "passed", "cats": [ "governance" ], "secs": [], "date": "2026-05-27", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB1493&ga=114" }, { "id": "m:US-FL:H0899", "jur": "US-FL", "level": "state", "num": "H0899", "title": "Task Force on Artificial Intelligence in Public Postsecondary Education", "sum": "Creates a task force to study the use and implications of artificial intelligence in Florida's public postsecondary education system. The task force would examine AI's role in teaching, learning, administration, and student support.", "stage": "failed/dead", "cats": [ "governance", "education" ], "secs": [], "date": "2026-03-13", "url": "https://www.flsenate.gov/Session/Bill/2026/899" }, { "id": "m:US-UT:HB0076", "jur": "US-UT", "level": "state", "num": "HB0076", "title": "Data Center Water Transparency Amendments", "sum": "UT HB0076 mandates transparency and reporting requirements for water consumption by data centers operating in Utah. The bill establishes disclosure and accountability measures for data-center water usage, a resource-intensive component of large-scale compute infrastructure.", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-23", "url": "https://le.utah.gov/~2026/bills/static/HB0076.html" }, { "id": "m:US-SD:HB1005", "jur": "US-SD", "level": "state", "num": "HB1005", "title": "Provide a sales and use tax exemption for goods and services related to data center operations.", "sum": "SD HB1005 provides a sales and use tax exemption for goods and services related to data center operations, reducing the tax burden on data center infrastructure, equipment, and related operational costs.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-04", "url": "https://sdlegislature.gov/#/Session/Bill/26317" }, { "id": "m:US-IN:HB1085", "jur": "US-IN", "level": "state", "num": "HB1085", "title": "Civil liability for child sexual abuse material.", "sum": "IN HB1085 creates civil liability for individuals who knowingly disseminate, facilitate access to, or provide child sexual abuse material (CSAM) or obscene material online, with a private right of action for victims and attorney-general enforcement powers. While not explicitly AI-focused, the bill…", "stage": "introduced", "cats": [ "minors", "deepfakes" ], "secs": [ "consumer" ], "date": "2026-01-13", "url": "https://iga.in.gov/legislative/2026/bills/house/1085/details" }, { "id": "m:US-VA:SB85", "jur": "US-VA", "level": "state", "num": "SB85", "title": "Consumer Data Protection Act; social media platforms & model operators, interoperability interfaces.", "sum": "VA SB85 requires social media platforms and AI model operators to implement third-party interoperability interfaces that allow users to export their social graph data and contextual data associated with AI systems. The bill addresses data portability and user control over personal data used by AI…", "stage": "engrossed", "cats": [ "privacy", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-03-09", "url": "https://lis.virginia.gov/bill-details/20261/SB85" }, { "id": "m:US-WA:HB2225", "jur": "US-WA", "level": "state", "num": "HB2225", "title": "Revised for 1st substitute: Regulating artificial intelligence companion chatbots.", "sum": "WA HB2225 regulates AI companion chatbots, likely addressing disclosure requirements, consumer protections, and safeguards for minors interacting with these systems. The bill became effective on January 1, 2027.", "stage": "passed", "cats": [ "minors", "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-03-24", "url": "https://app.leg.wa.gov/billsummary?BillNumber=2225&Year=2025&Initiative=false" }, { "id": "m:US-WA:SB5956", "jur": "US-WA", "level": "state", "num": "SB5956", "title": "Addressing artificial intelligence, student discipline, and surveillance in public schools.", "sum": "WA SB5956 regulates the use of artificial intelligence, surveillance systems, and automated decision-making in public K–12 schools, including restrictions on facial recognition, predictive discipline systems, and requirements for transparency and parental notification when AI is used to monitor or…", "stage": "engrossed", "cats": [ "education", "minors", "public-safety" ], "secs": [ "consumer" ], "date": "2026-03-12", "url": "https://app.leg.wa.gov/billsummary?BillNumber=5956&Year=2025&Initiative=false" }, { "id": "m:US-IN:SB0173", "jur": "US-IN", "level": "state", "num": "SB0173", "title": "Health care matters.", "sum": "IN SB0173 prohibits utilization review entities from using artificial intelligence as the primary means for making adverse determinations on health insurance coverage, and requires human clinical peer review for certain decisions. The bill also addresses insurance practices including downcoding…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "finserv", "health" ], "date": "2026-01-15", "url": "https://iga.in.gov/legislative/2026/bills/senate/173/details" }, { "id": "m:US-AZ:HB2119", "jur": "US-AZ", "level": "state", "num": "HB2119", "title": "Computer data center; application; deadline", "sum": "AZ HB2119 establishes application procedures and deadlines for computer data center projects in Arizona. The bill regulates the permitting and approval process for data center siting and development.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-22", "url": "https://apps.azleg.gov/BillStatus/BillOverview/83749" }, { "id": "m:US-NM:HB28", "jur": "US-NM", "level": "state", "num": "HB28", "title": "Artificial Intelligence Transparency Act", "sum": "NM HB28 is an artificial intelligence transparency act that mandates disclosure and transparency requirements for AI systems. The bill likely requires developers or deployers of AI to inform users when they are interacting with or subject to AI-driven decisions.", "stage": "introduced", "cats": [ "disclosures" ], "secs": [], "date": "2026-01-21", "url": "https://www.nmlegis.gov/Legislation/Legislation?chamber=H&legtype=B&legno=28&year=26" }, { "id": "m:US-IN:HB1245", "jur": "US-IN", "level": "state", "num": "HB1245", "title": "IURC study of data centers.", "sum": "IN HB1245 directs the Indiana Utility Regulatory Commission to study the impact of data centers and large-load customers on electricity demand, utility costs, and retail electric rates. The study findings must be reported in the IURC's 2026 annual report.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-05", "url": "https://iga.in.gov/legislative/2026/bills/house/1245/details" }, { "id": "m:US-IN:HB1182", "jur": "US-IN", "level": "state", "num": "HB1182", "title": "Digital sexual image abuse.", "sum": "IN HB1182 criminalizes possession and distribution of digitally created or modified sexual images that depict individuals without consent, including computer-generated deepfake sexual content. The bill establishes criminal offenses specifically targeting synthetic sexual media.", "stage": "introduced", "cats": [ "deepfakes", "minors" ], "secs": [ "media" ], "date": "2026-01-05", "url": "https://iga.in.gov/legislative/2026/bills/house/1182/details" }, { "id": "m:US-IN:HB1183", "jur": "US-IN", "level": "state", "num": "HB1183", "title": "Digital sexual image abuse.", "sum": "IN HB1183 criminalizes creation, possession, and distribution of synthetic sexual images—computer-generated or AI-modified depictions of real individuals in sexual situations. The bill enhances penalties, making distribution a Level 6 felony.", "stage": "introduced", "cats": [ "deepfakes" ], "secs": [ "media" ], "date": "2026-01-05", "url": "https://iga.in.gov/legislative/2026/bills/house/1183/details" }, { "id": "m:US-IN:HB1201", "jur": "US-IN", "level": "state", "num": "HB1201", "title": "Various mental health and insurance matters.", "sum": "IN HB1201 prohibits AI systems from impersonating or substituting for licensed mental health professionals, and establishes various insurance requirements including network adequacy verification, reimbursement parity for mental health services, and claim audit limitations.", "stage": "introduced", "cats": [ "healthcare", "consumer-financial" ], "secs": [ "finserv", "health" ], "date": "2026-01-22", "url": "https://iga.in.gov/legislative/2026/bills/house/1201/details" }, { "id": "m:US-FL:H1007", "jur": "US-FL", "level": "state", "num": "H1007", "title": "Data Centers", "sum": "FL H1007 regulates data-center siting, permitting, and utility infrastructure by restricting nondisclosure agreements, maintaining local land-use authority, imposing water-use restrictions on large-scale data centers, and requiring the Public Service Commission to develop tariff and service…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-11", "url": "https://www.flsenate.gov/Session/Bill/2026/1007" }, { "id": "m:US-ME:LD2082", "jur": "US-ME", "level": "state", "num": "LD2082", "title": "An Act to Regulate the Use of Artificial Intelligence in Providing Certain Mental Health Services", "sum": "ME LD2082 regulates the use of artificial intelligence in the delivery of mental health services, likely establishing requirements for disclosure, safety standards, and oversight of AI-driven therapeutic or psychiatric applications. The bill appears to create guardrails around when and how AI can…", "stage": "passed", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-04-08", "url": "https://legislature.maine.gov/legis/bills/display_ps.asp?LD=2082&snum=132" }, { "id": "m:US-IN:HB1271", "jur": "US-IN", "level": "state", "num": "HB1271", "title": "Payment of health claims.", "sum": "IN HB1271 regulates health insurance claims processing, requiring human review before automated submission of claims and prohibiting retroactive rate reductions and certain audit/recoupment practices. The bill directly addresses automated decision-making in healthcare billing and insurance…", "stage": "passed", "cats": [ "healthcare", "consumer-financial" ], "secs": [ "finserv", "health" ], "date": "2026-03-04", "url": "https://iga.in.gov/legislative/2026/bills/house/1271/details" }, { "id": "m:US-CA:SB867", "jur": "US-CA", "level": "state", "num": "SB867", "title": "Toys: companion chatbots.", "sum": "CA SB867 regulates companion chatbots marketed to or used by minors, establishing requirements for disclosure, data handling, and safety guardrails. The bill amends California's business-and-professions code to impose obligations on developers of chatbot products designed for or accessible to…", "stage": "engrossed", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-07-01", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB867" }, { "id": "m:US-VT:S0207", "jur": "US-VT", "level": "state", "num": "S0207", "title": "An act relating to prohibiting surveillance pricing", "sum": "VT S0207 prohibits 'surveillance pricing'—the practice of using personal data, browsing history, location, or algorithmic profiling to set discriminatory prices for consumers. The bill targets algorithmic pricing systems that leverage behavioral or demographic data to charge different prices to…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination", "privacy" ], "secs": [ "consumer" ], "date": "2026-01-06", "url": "https://legislature.vermont.gov/bill/status/2026/S.207" }, { "id": "m:US-IN:HB1333", "jur": "US-IN", "level": "state", "num": "HB1333", "title": "Land use and development.", "sum": "IN HB1333 establishes tax incentives and local-agreement requirements for qualified data center users in Indiana, including a mandate that data center operators contribute at least 1% of foregone taxes to local units after June 30, 2026. The bill also expands the definition of energy-production…", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-05", "url": "https://iga.in.gov/legislative/2026/bills/house/1333/details" }, { "id": "m:US-VT:S0205", "jur": "US-VT", "level": "state", "num": "S0205", "title": "An act relating to a temporary moratorium on AI data centers and a report on the construction and operation of AI data centers in Vermont", "sum": "This bill imposes a temporary moratorium on the construction and operation of AI data centers in Vermont and directs the state to conduct a comprehensive report on the impacts and implications of AI data center development.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-06", "url": "https://legislature.vermont.gov/bill/status/2026/S.205" }, { "id": "m:US-FL:S1194", "jur": "US-FL", "level": "state", "num": "S1194", "title": "Artificial Intelligence in Education", "sum": "FL S1194 requires the State Board of Education to adopt statewide standards and policies for AI use in schools, direct the department to provide teacher training on AI, and mandate digital literacy and AI ethics instruction for specified grade levels. The bill also requires school district…", "stage": "failed/dead", "cats": [ "education", "disclosures" ], "secs": [], "date": "2026-03-13", "url": "https://www.flsenate.gov/Session/Bill/2026/1194" }, { "id": "m:US-VA:HB153", "jur": "US-VA", "level": "state", "num": "HB153", "title": "Data centers; site assessment, sound profile of the high energy use facility.", "sum": "VA HB153 requires localities to mandate site assessments examining sound, water, agricultural, and environmental impacts before approving rezoning or permits for new high-energy-use facilities (data centers). The bill carves out existing facilities seeking expansions of 100 MW or less.", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-13", "url": "https://lis.virginia.gov/bill-details/20261/HB153" }, { "id": "m:US-VA:HB154", "jur": "US-VA", "level": "state", "num": "HB154", "title": "Data centers; use of emergency generation unit, disclosure requirements.", "sum": "Requires Virginia data centers operating emergency generation units to publicly disclose within 24 hours when those units will be in operation. This is grid-and-infrastructure accountability policy tied to data-center operations.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-18", "url": "https://lis.virginia.gov/bill-details/20261/HB154" }, { "id": "m:US-NY:A09449", "jur": "US-NY", "level": "state", "num": "A09449", "title": "Implements transparency requirements for developers of AI models; requires the establishment of an office for oversite of AI model developer transparency and reporting; makes related…", "sum": "NY A09449 establishes transparency and reporting requirements for AI model developers and creates a dedicated state office to oversee compliance with those requirements. The bill targets large-scale or frontier AI developers with mandatory disclosure obligations.", "stage": "introduced", "cats": [ "governance", "disclosures", "frontier" ], "secs": [], "date": "2026-02-25", "url": "https://www.nysenate.gov/legislation/bills/2025/A9449" }, { "id": "m:US-KY:HB33", "jur": "US-KY", "level": "state", "num": "HB33", "title": "AN ACT relating to data privacy.", "sum": "KY HB33 amends the Kentucky Consumer Data Protection Act to prohibit \"surveillance pricing\"—the use of automated-decision systems to set or display personalized prices based on individualized consumer data. The bill defines key terms including automated-decision systems, base price, individualized…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-01-13", "url": "https://apps.legislature.ky.gov/record/26RS/hb33.html" }, { "id": "m:US-AZ:HB2133", "jur": "US-AZ", "level": "state", "num": "HB2133", "title": "Sexual material; consent; synthetic depiction", "sum": "AZ HB2133 regulates synthetic sexual depictions—likely deepfake pornography and AI-generated intimate imagery—with consent and age-related provisions. The bill addresses creation, distribution, and possession of non-consensual synthetic sexual material.", "stage": "vetoed", "cats": [ "deepfakes", "minors" ], "secs": [ "media" ], "date": "2026-06-19", "url": "https://apps.azleg.gov/BillStatus/BillOverview/83779" }, { "id": "m:US-WA:SB5984", "jur": "US-WA", "level": "state", "num": "SB5984", "title": "Revised for 1st substitute: Regulating artificial intelligence companion chatbots.", "sum": "WA SB5984 regulates artificial intelligence companion chatbots, likely addressing disclosure requirements, user protections, and safeguards for minors interacting with AI chatbots. The bill establishes rules for how chatbot providers must operate and inform users.", "stage": "engrossed", "cats": [ "minors", "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-03-12", "url": "https://app.leg.wa.gov/billsummary?BillNumber=5984&Year=2025&Initiative=false" }, { "id": "m:US-VA:HB171", "jur": "US-VA", "level": "state", "num": "HB171", "title": "Student instruction; Internet safety, policy to include key modern digital safety topics.", "sum": "VA HB171 requires Virginia school divisions to integrate instruction on AI-generated content into their internet safety curriculum alongside online scams and misinformation. The bill treats AI literacy as a key modern digital safety topic for K–12 students.", "stage": "passed", "cats": [ "education", "minors" ], "secs": [ "consumer" ], "date": "2026-04-02", "url": "https://lis.virginia.gov/bill-details/20261/HB171" }, { "id": "m:US-NY:S08645", "jur": "US-NY", "level": "state", "num": "S08645", "title": "Authorizes ORES to issue siting permits for battery energy storage systems for use by data centers, regardless of the expected storage or transmission capacity of such battery energy…", "sum": "NY S08645 authorizes the state Office of Renewable Energy Siting (ORES) to issue permits for battery energy storage systems serving data centers, and requires data centers to submit carbon reduction plans. The bill removes capacity thresholds and co-location requirements to streamline permitting.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S8645" }, { "id": "m:US-IL:HB4319", "jur": "US-IL", "level": "state", "num": "HB4319", "title": "DATA CENTER-PROPERTY RTS", "sum": "IL HB4319 creates a compensation mechanism for property owners whose land and businesses are harmed by data-center construction or operation within 1,000 feet, including noise, vibration, traffic, environmental impacts, and property-value loss. The bill establishes an appraisal procedure and…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-14", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=4319&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-TN:HB1470", "jur": "US-TN", "level": "state", "num": "HB1470", "title": "AN ACT to amend Tennessee Code Annotated, Title 33; Title 47 and Title 63, relative to mental health.", "sum": "TN HB1470 prohibits AI systems from advertising or representing themselves as qualified mental health professionals. The bill amends Tennessee law across health, insurance, and regulatory codes to enforce this restriction.", "stage": "passed", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-04-06", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB1470&ga=114" }, { "id": "m:US-SD:HB1038", "jur": "US-SD", "level": "state", "num": "HB1038", "title": "Allow the Public Utilities Commission to assess actual costs to data centers that are customers of public utilities.", "sum": "SD HB1038 directs the Public Utilities Commission to assess actual costs (rather than standard tariffs or estimates) to data centers that are customers of public utilities, enabling cost-reflective utility pricing for large-load infrastructure. This is squarely within data-center policy governance…", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-30", "url": "https://sdlegislature.gov/#/Session/Bill/26923" }, { "id": "m:US-FL:S1344", "jur": "US-FL", "level": "state", "num": "S1344", "title": "Companion Artificial Intelligence Chatbots", "sum": "FL S1344 requires operators of companion AI chatbots to implement age verification, create user accounts, and apply protective measures (including parental consent/restrictions) when minors are detected. Violations are treated as deceptive and unfair trade practices under Florida's…", "stage": "failed/dead", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-03-13", "url": "https://www.flsenate.gov/Session/Bill/2026/1344" }, { "id": "m:US-MO:HB2862", "jur": "US-MO", "level": "state", "num": "HB2862", "title": "Prohibits digital impersonation of a person and provides for injunctive relief", "sum": "MO HB2862 prohibits the digital impersonation of a person (including through synthetic media, deepfakes, or AI-generated likenesses) and creates a private right of action for injunctive relief. The bill targets unauthorized creation and use of digital replicas or synthetic representations of…", "stage": "introduced", "cats": [ "deepfakes", "consumer-financial" ], "secs": [ "media" ], "date": "2026-02-26", "url": "https://house.mo.gov/Bill.aspx?bill=HB2862&year=2026&code=R" }, { "id": "m:US-FL:S1346", "jur": "US-FL", "level": "state", "num": "S1346", "title": "Public Records/Department of Legal Affairs/Artificial Intelligence Violations", "sum": "FL S1346 creates a public-records exemption for investigative files held by the Florida Department of Legal Affairs when investigating violations of AI-related laws. The bill includes a sunset clause requiring future legislative review of the exemption.", "stage": "failed/dead", "cats": [ "governance" ], "secs": [], "date": "2026-03-13", "url": "https://www.flsenate.gov/Session/Bill/2026/1346" }, { "id": "m:US-VA:SB93", "jur": "US-VA", "level": "state", "num": "SB93", "title": "Data centers; taxes on banks that are tenants of a center.", "sum": "VA SB93 modifies Virginia tax policy for data centers by removing the retail sales and use tax exemption on computer equipment when a bank is a tenant, and makes bank computer equipment and peripherals in data centers subject to the bank franchise tax. The bill targets the tax treatment of data…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-05", "url": "https://lis.virginia.gov/bill-details/20261/SB93" }, { "id": "m:US-NY:S08721", "jur": "US-NY", "level": "state", "num": "S08721", "title": "Creates penalties for likenesses altered or created by artificial intelligence being used for commercial gain; establishes a private right of action for the unlawful dissemination of still…", "sum": "NY S08721 criminalizes the commercial use of AI-altered or AI-generated likenesses of real people and creates a private right of action for victims of unlawful dissemination of such synthetic still or video images. The bill targets non-consensual synthetic media and deepfakes used for profit.", "stage": "introduced", "cats": [ "deepfakes", "consumer-financial" ], "secs": [ "media" ], "date": "2026-01-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S8721" }, { "id": "m:US-VA:SB130", "jur": "US-VA", "level": "state", "num": "SB130", "title": "Data centers; site assessment, definition of high energy use facility.", "sum": "VA SB130 establishes siting and environmental-review requirements for new high-energy-use facilities (HEUFs), including mandatory sound, water, agricultural, and historic-resource assessments before rezoning or special-use approval. The bill does not apply to expansions of existing facilities under…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-03", "url": "https://lis.virginia.gov/bill-details/20261/SB130" }, { "id": "m:US-NY:S08706", "jur": "US-NY", "level": "state", "num": "S08706", "title": "Requires covered businesses to annually report to the department of labor regarding the impact of artificial intelligence on hiring and the nature of artificial intelligence use for the…", "sum": "NY S08706 requires covered businesses to annually report to the Department of Labor on their use of AI in hiring and its impact on employment decisions, and directs the DOL to publish an aggregate annual report on AI hiring practices statewide with penalties for non-compliance.", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-06-04", "url": "https://www.nysenate.gov/legislation/bills/2025/S8706" }, { "id": "m:US-VA:SB94", "jur": "US-VA", "level": "state", "num": "SB94", "title": "Data centers; site assessment, sound profile of the high energy use facility.", "sum": "VA SB94 requires site assessments examining sound, water, agricultural, and environmental impacts before approval of new high-energy-use facilities (including data centers) in Virginia localities. The bill empowers localities to enforce siting standards and environmental reviews for large compute…", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-13", "url": "https://lis.virginia.gov/bill-details/20261/SB94" }, { "id": "m:US-NY:A09487", "jur": "US-NY", "level": "state", "num": "A09487", "title": "Provides for the use of automated employment decision-making tools and artificial intelligence systems by a county, city, town, village, school district, board of cooperative educational…", "sum": "This bill establishes rules for the use of automated employment decision-making tools and AI systems by public employers, including state universities, city/county governments, schools, and community colleges. It amends the effectiveness (implementation timeline) of such tools.", "stage": "introduced", "cats": [ "gov-use", "hiring" ], "secs": [ "hr" ], "date": "2026-01-21", "url": "https://www.nysenate.gov/legislation/bills/2025/A9487" }, { "id": "m:US-KY:HB227", "jur": "US-KY", "level": "state", "num": "HB227", "title": "AN ACT relating to addictive online platforms.", "sum": "KY HB227 establishes protections for minors on AI companion platforms and social media by requiring age verification, parental consent for accounts, and prohibiting addictive design features and predatory data collection. It creates private rights of action and Attorney General enforcement…", "stage": "engrossed", "cats": [ "minors", "consumer-financial", "privacy" ], "secs": [ "consumer" ], "date": "2026-04-01", "url": "https://apps.legislature.ky.gov/record/26RS/hb227.html" }, { "id": "m:US-IN:HB1421", "jur": "US-IN", "level": "state", "num": "HB1421", "title": "Ban on employer use of automated decision systems.", "sum": "IN HB1421 prohibits employers from relying exclusively on automated decision systems in employment decisions and requires disclosure and conditions before using such systems. It grants the Department of Labor enforcement authority and creates a private right of action for covered individuals and…", "stage": "introduced", "cats": [ "hiring", "anti-discrimination", "disclosures" ], "secs": [ "hr" ], "date": "2026-01-08", "url": "https://iga.in.gov/legislative/2026/bills/house/1421/details" }, { "id": "m:US-OK:HB2992", "jur": "US-OK", "level": "state", "num": "HB2992", "title": "Corporation Commission; creating the Data Center Customer Ratepayer Protection Act of 2026; effective date; emergency.", "sum": "OK HB2992 creates the Data Center Customer Ratepayer Protection Act of 2026, establishing regulatory frameworks and protections for utility customers affected by large data-center operations and their demands on Oklahoma's electric grid and infrastructure.", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-11", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=hb2992&Session=2600" }, { "id": "m:US-IN:SB0234", "jur": "US-IN", "level": "state", "num": "SB0234", "title": "Energy utility matters.", "sum": "IN SB0234 regulates energy utility tariffs and cost recovery for large-load customers (including data centers), requiring utilities to secure reimbursement of project costs from large-load customers and capping rate increases. The bill also restricts utilities from recovering lobbying, political,…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-08", "url": "https://iga.in.gov/legislative/2026/bills/senate/234/details" }, { "id": "m:US-NY:S08831", "jur": "US-NY", "level": "state", "num": "S08831", "title": "Provides for the use of automated employment decision-making tools and artificial intelligence systems by a county, city, town, village, school district, board of cooperative educational…", "sum": "This bill regulates the use of automated employment decision-making tools and AI systems by public employers (counties, cities, schools, state universities, community colleges, etc.) in New York. It establishes requirements for how these entities may deploy AEDT and AI in hiring and employment…", "stage": "passed", "cats": [ "gov-use", "hiring" ], "secs": [ "hr" ], "date": "2026-02-13", "url": "https://www.nysenate.gov/legislation/bills/2025/S8831" }, { "id": "m:US-NY:S08828", "jur": "US-NY", "level": "state", "num": "S08828", "title": "Implements transparency requirements for developers of AI models; requires the establishment of an office for oversite of AI model developer transparency and reporting; makes related…", "sum": "NY S08828 establishes transparency and reporting requirements for developers of AI models and creates a dedicated state office to oversee compliance with those requirements. The bill targets model-level transparency obligations and enforcement infrastructure for AI developers.", "stage": "passed", "cats": [ "governance", "disclosures", "frontier" ], "secs": [], "date": "2026-03-27", "url": "https://www.nysenate.gov/legislation/bills/2025/S8828" }, { "id": "m:US-IN:SB0257", "jur": "US-IN", "level": "state", "num": "SB0257", "title": "Electricity rate increases due to data centers.", "sum": "Indiana SB0257 restricts the Indiana Utility Regulatory Commission from approving electricity rate increases for electric utilities that serve data centers or high-load facilities with fewer than 50 full-time employees. The bill effectively caps utility cost recovery for data-center power…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-08", "url": "https://iga.in.gov/legislative/2026/bills/senate/257/details" }, { "id": "m:US-FL:S1458", "jur": "US-FL", "level": "state", "num": "S1458", "title": "Artificial Intelligence in Higher Education", "sum": "Creates a study group to examine artificial intelligence in higher education, with a mandate to report findings and recommendations to the Governor and Legislature. The bill establishes membership, duties, and reporting deadlines for the study group.", "stage": "failed/dead", "cats": [ "governance", "education" ], "secs": [], "date": "2026-03-13", "url": "https://www.flsenate.gov/Session/Bill/2026/1458" }, { "id": "m:US-MS:SB2075", "jur": "US-MS", "level": "state", "num": "SB2075", "title": "Images or audio altered or created by digitization; criminalize dissemination of in certain circumstances.", "sum": "MS SB2075 criminalizes the unlawful dissemination of intimate or non-intimate images or audio that have been created or altered by digitization (including deepfakes and synthetic media) without consent, with intent to cause harm. The bill applies to depictions where the person can be reasonably…", "stage": "failed/dead", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-02-03", "url": "https://billstatus.ls.state.ms.us/2026/pdf/history/SB/SB2075.xml" }, { "id": "m:US-MS:SB2046", "jur": "US-MS", "level": "state", "num": "SB2046", "title": "Mississippians' Right to Name, Likeness and Voice Act; enact.", "sum": "MS SB2046 establishes property rights in individuals' names, likenesses, and voices, and creates liability for commercial use or infringement of these rights without consent. The bill is designed to protect against unauthorized creation and use of synthetic representations, including AI-generated…", "stage": "failed/dead", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-03-03", "url": "https://billstatus.ls.state.ms.us/2026/pdf/history/SB/SB2046.xml" }, { "id": "m:US-MS:SB2050", "jur": "US-MS", "level": "state", "num": "SB2050", "title": "Artificial intelligence; require disclosure when used in political advertisements.", "sum": "MS SB2050 requires disclosure when artificial intelligence is used in qualified political advertisements, with civil penalties enforced by the Attorney General or aggrieved parties. The bill defines AI use, specifies disclosure requirements, and provides exemptions from liability for certain…", "stage": "failed/dead", "cats": [ "elections", "disclosures" ], "secs": [ "media" ], "date": "2026-03-03", "url": "https://billstatus.ls.state.ms.us/2026/pdf/history/SB/SB2050.xml" }, { "id": "m:US-ME:LD2162", "jur": "US-ME", "level": "state", "num": "LD2162", "title": "An Act to Regulate and Prevent Children's Access to Artificial Intelligence Chatbots with Human-like Features and Social Artificial Intelligence Companions", "sum": "This bill would regulate AI chatbots with human-like features and social AI companions, restricting children's access to such systems and requiring disclosure requirements. The legislation targets companion chatbots designed to simulate social relationships with minors.", "stage": "failed/dead", "cats": [ "minors", "disclosures" ], "secs": [ "consumer" ], "date": "2026-04-29", "url": "https://legislature.maine.gov/legis/bills/display_ps.asp?LD=2162&snum=132" }, { "id": "m:US-RI:S2010", "jur": "US-RI", "level": "state", "num": "S2010", "title": "Promotes transparency and accountability in the use of artificial intelligence by health insurers to manage coverage and claims.", "sum": "RI S2010 requires health insurers to disclose their use of AI in coverage and claims decisions, and establishes transparency and accountability mechanisms for algorithmic decision-making in insurance utilization review. The bill directly addresses automated decision-making in a regulated sector…", "stage": "engrossed", "cats": [ "healthcare", "disclosures", "anti-discrimination" ], "secs": [ "finserv", "health" ], "date": "2026-06-09", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-FL:S1694", "jur": "US-FL", "level": "state", "num": "S1694", "title": "Technology Education", "sum": "FL S1694 mandates that high school computer science courses include instruction on artificial intelligence as part of general education core requirements with a technology component. The bill establishes AI literacy as a substantive element of secondary STEM education.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-03-06", "url": "https://www.flsenate.gov/Session/Bill/2026/1694" }, { "id": "m:US-FL:H1395", "jur": "US-FL", "level": "state", "num": "H1395", "title": "Artificial Intelligence", "sum": "FL H1395 comprehensively regulates AI use by government and commercial entities, requiring parental consent for minors using companion chatbots, mandating AI disclosures and protective measures, prohibiting non-consensual commercial use of personal likeness/name in AI, restricting sale of personal…", "stage": "failed/dead", "cats": [ "governance", "gov-use", "minors" ], "secs": [ "consumer" ], "date": "2026-03-13", "url": "https://www.flsenate.gov/Session/Bill/2026/1395" }, { "id": "m:US-PA:SB1113", "jur": "US-PA", "level": "state", "num": "SB1113", "title": "Providing for artificial intelligence in facilities, for artificial intelligence use by insurers and for artificial intelligence use by MA or CHIP managed care plans; imposing duties on the…", "sum": "PA SB1113 regulates AI use by insurers and Medicaid/CHIP managed care plans in healthcare facilities and decision-making. The bill imposes duties on state health, insurance, and human services agencies to oversee and enforce AI compliance, with penalties for violations.", "stage": "introduced", "cats": [ "healthcare", "consumer-financial", "anti-discrimination" ], "secs": [ "finserv", "health" ], "date": "2026-01-09", "url": "https://www.palegis.us/legislation/bills/2025/sb1113" }, { "id": "m:US-WI:AB840", "jur": "US-WI", "level": "state", "num": "AB840", "title": "Certain requirements related to data centers.", "sum": "WI AB840 creates new statutory requirements governing data center siting, utility interconnection, and grid management in Wisconsin. The bill addresses infrastructure policy for large-load facilities, including provisions on energy, permitting, and utility coordination.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-23", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/asm/bill/ab840" }, { "id": "m:US-FL:H1503", "jur": "US-FL", "level": "state", "num": "H1503", "title": "Computer Science Education and Certification", "sum": "FL H1503 requires high schools to include artificial intelligence instruction in computer science courses and directs the State Board of Education to establish separate computer science subject-area coverages across specified grade levels, with the Department of Education presenting recommended AI…", "stage": "failed/dead", "cats": [ "education" ], "secs": [], "date": "2026-03-13", "url": "https://www.flsenate.gov/Session/Bill/2026/1503" }, { "id": "m:US-FL:H1517", "jur": "US-FL", "level": "state", "num": "H1517", "title": "Approval of Data Center Facilities", "sum": "FL H1517 requires data center facility applicants to disclose specified information to the Florida Department of Environmental Protection and mandates existing data centers to provide similar disclosures; DEP must publish this information publicly and adopt implementing rules.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-13", "url": "https://www.flsenate.gov/Session/Bill/2026/1517" }, { "id": "m:US-FL:S0484", "jur": "US-FL", "level": "state", "num": "S0484", "title": "Data Centers", "sum": "FL S0484 regulates large-load data centers by preserving local zoning authority, establishing minimum utility tariff and service requirements, restricting water-use permits for large-scale data centers, and requiring a state study on data-center construction and operations.", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-08", "url": "https://www.flsenate.gov/Session/Bill/2026/484" }, { "id": "m:US-FL:S1118", "jur": "US-FL", "level": "state", "num": "S1118", "title": "Public Records/Data Centers", "sum": "FL S1118 creates a public-records exemption for information about plans, intentions, or interests related to data-center location decisions. The exemption includes a sunset provision requiring future legislative review.", "stage": "introduced", "cats": [ "governance", "data-centers" ], "secs": [ "infra" ], "date": "2026-03-13", "url": "https://www.flsenate.gov/Session/Bill/2026/1118" }, { "id": "m:US-VA:SB141", "jur": "US-VA", "level": "state", "num": "SB141", "title": "Political campaign advertisements; synthetic media, penalty.", "sum": "VA SB141 prohibits electioneering communications containing synthetic media from being published or broadcast without a conspicuous disclosure label stating the content has been altered or artificially generated. The bill establishes civil penalties up to $25,000 and criminal penalties (Class 1…", "stage": "engrossed", "cats": [ "deepfakes", "elections", "disclosures" ], "secs": [ "media" ], "date": "2026-03-14", "url": "https://lis.virginia.gov/bill-details/20261/SB141" }, { "id": "m:US-MD:HB9", "jur": "US-MD", "level": "state", "num": "HB9", "title": "3-1-1 Systems - Expansion Program and Oversight Board - Establishment", "sum": "MD HB9 establishes a 3-1-1 Oversight Board and expands Maryland's non-emergency call system to use AI for answering questions and routing calls, with mandatory statewide rollout after an initial pilot period in select counties.", "stage": "introduced", "cats": [ "gov-use", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-01-28", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB0009?ys=2026RS" }, { "id": "m:US-MD:SB114", "jur": "US-MD", "level": "state", "num": "SB114", "title": "3-1-1 Systems - Expansion Program and Oversight Board - Establishment", "sum": "MD SB114 establishes a 3-1-1 Oversight Board and mandates use of artificial intelligence to answer citizen questions and route calls in Maryland counties, with a phased expansion plan to statewide deployment. The bill creates governance and oversight structures for government use of AI in…", "stage": "passed", "cats": [ "gov-use", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-05-12", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0114?ys=2026RS" }, { "id": "m:US-MD:SB8", "jur": "US-MD", "level": "state", "num": "SB8", "title": "Criminal Law - Identity Fraud - Artificial Intelligence and Deepfake Representations", "sum": "MD SB8 criminalizes the use of AI-generated deepfake representations and fraudulent personal identifying information to cause physical injury, emotional distress, or economic damages, with penalties up to 10 years imprisonment and $15,000 fines for multiple victims.", "stage": "passed", "cats": [ "deepfakes", "consumer-financial" ], "secs": [ "media" ], "date": "2026-05-12", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0008?ys=2026RS" }, { "id": "m:US-MD:SB141", "jur": "US-MD", "level": "state", "num": "SB141", "title": "Election Law - Election Misinformation, Election Disinformation, and Deepfakes", "sum": "MD SB141 prohibits knowing or reckless creation, use, or dissemination of election-related deepfakes that produce materially false information, and requires the State Administrator of Elections to take corrective action and publicly communicate accurate information upon credible reports of election…", "stage": "passed", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-05-12", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0141?ys=2026RS" }, { "id": "m:US-MD:HB145", "jur": "US-MD", "level": "state", "num": "HB145", "title": "Election Law - Election Misinformation, Election Disinformation, and Deepfakes", "sum": "MD HB145 prohibits knowingly or recklessly using or disseminating deepfakes that produce materially false election information, and requires the State Administrator of Elections to take corrective action and communicate accurate information when credible reports of election misinformation—including…", "stage": "engrossed", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-04-10", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB0145?ys=2026RS" }, { "id": "m:US-MD:HB148", "jur": "US-MD", "level": "state", "num": "HB148", "title": "Consumer Protection and Labor and Employment - Surveillance-Based Price and Wage Setting - Prohibition", "sum": "MD HB148 prohibits surveillance-based price setting and wage setting, treating violations as unfair or deceptive trade practices under Maryland consumer protection law. The bill targets algorithmic pricing and wage-determination systems that rely on personal data collection or monitoring.", "stage": "introduced", "cats": [ "consumer-financial", "hiring" ], "secs": [ "consumer", "hr" ], "date": "2026-01-19", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB0148?ys=2026RS" }, { "id": "m:US-MD:HB184", "jur": "US-MD", "level": "state", "num": "HB184", "title": "Criminal Law - Identity Fraud - Artificial Intelligence and Deepfake Representations", "sum": "MD HB184 criminalizes the use of deepfakes and AI-generated representations to commit identity fraud, cause physical injury, emotional distress, or economic harm. It establishes penalties up to 10 years imprisonment and $15,000 in fines for multiple victims.", "stage": "introduced", "cats": [ "deepfakes", "consumer-financial" ], "secs": [ "media" ], "date": "2026-01-16", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB0184?ys=2026RS" }, { "id": "m:US-MD:HB120", "jur": "US-MD", "level": "state", "num": "HB120", "title": "Moratorium on Construction of New Data Centers - Co-Location and Generation Contingency", "sum": "MD HB120 imposes a statewide moratorium on construction of new data centers, with an exception if the legislature passes separate legislation permitting co-location of data centers with natural gas, nuclear, or small modular reactor power generation facilities.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-19", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB0120?ys=2026RS" }, { "id": "m:US-VA:HB323", "jur": "US-VA", "level": "state", "num": "HB323", "title": "Data centers; Department of Energy shall lead efforts to accelerate use of waste heat, report.", "sum": "Virginia HB323 directs the Department of Energy to lead efforts to accelerate the reuse of waste heat from data centers across the Commonwealth. The bill establishes a work group and requires a report with findings, legislative proposals, and recommendations by September 1, 2026.", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-13", "url": "https://lis.virginia.gov/bill-details/20261/HB323" }, { "id": "m:US-VA:HB310", "jur": "US-VA", "level": "state", "num": "HB310", "title": "Artificial Intelligence Workforce Impact Act; established, report.", "sum": "VA HB310 requires state agencies to report quarterly on workforce impacts from AI system use, and mandates transition plans (retraining, job placement, career services) when an agency experiences 10+ workforce disruptions in a fiscal year due to AI. The Department of Human Resource Management must…", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-02-18", "url": "https://lis.virginia.gov/bill-details/20261/HB310" }, { "id": "m:US-OK:SB1521", "jur": "US-OK", "level": "state", "num": "SB1521", "title": "Artificial intelligence; definitions; requiring operators make certain disclosure; preventative measures for minor account holders; prohibitions; enforcement authority to Attorney General;…", "sum": "OK SB1521 regulates AI operators by requiring disclosure to users, implementing preventative measures to protect minors on AI platforms, and establishing enforcement authority with the Attorney General to impose civil penalties for violations.", "stage": "engrossed", "cats": [ "minors", "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-04-29", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=sb1521&Session=2600" }, { "id": "m:US-VT:H0644", "jur": "US-VT", "level": "state", "num": "H0644", "title": "An act relating to regulating the use of artificial intelligence in the provision of mental health services", "sum": "VT H0644 regulates the use of artificial intelligence in mental health service delivery, likely requiring transparency about AI use and establishing standards for clinical safety and patient protection in psychotherapy and mental-health applications.", "stage": "introduced", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-01-13", "url": "https://legislature.vermont.gov/bill/status/2026/H.644" }, { "id": "m:US-TN:SB1580", "jur": "US-TN", "level": "state", "num": "SB1580", "title": "AN ACT to amend Tennessee Code Annotated, Title 33; Title 47 and Title 63, relative to mental health.", "sum": "TN SB1580 prohibits developing or deploying AI systems that advertise or represent themselves as qualified mental health professionals. The bill amends Tennessee's mental health, communications, and consumer-protection laws to enforce this restriction.", "stage": "passed", "cats": [ "healthcare", "consumer-financial" ], "secs": [ "health" ], "date": "2026-04-06", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB1580&ga=114" }, { "id": "m:US-KY:HB318", "jur": "US-KY", "level": "state", "num": "HB318", "title": "AN ACT relating to property rights in name, voice, and likeness.", "sum": "KY HB318 establishes property rights in individuals' names, voices, and likenesses, and creates a civil cause of action for unauthorized use. While facially a personality-rights bill, it directly addresses a key AI use case: non-consensual synthetic media and voice cloning.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-01-20", "url": "https://apps.legislature.ky.gov/record/26RS/hb318.html" }, { "id": "m:US-TN:SB1600", "jur": "US-TN", "level": "state", "num": "SB1600", "title": "AN ACT to amend Tennessee Code Annotated, Title 5; Title 6; Title 7; Title 10; Title 62; Title 65; Title 68 and Title 69, relative to data centers.", "sum": "TN SB1600 requires data centers to register with the Tennessee Public Utilities Commission and mandates that electric and water utilities report usage and rates for registered data centers to enable regulatory oversight and transparency of large-load infrastructure.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-13", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB1600&ga=114" }, { "id": "m:US-CA:AB1577", "jur": "US-CA", "level": "state", "num": "AB1577", "title": "Data centers: reporting.", "sum": "CA AB1577 adds reporting requirements for data centers to the Public Resources Code, mandating disclosure of energy consumption and related operational metrics. The bill addresses large-load infrastructure accountability and grid impact, which fall within the data-center vertical regardless of AI…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-08-03", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB1577" }, { "id": "m:US-NY:S08874", "jur": "US-NY", "level": "state", "num": "S08874", "title": "Requires disclosure of the use of artificial intelligence in customer services at the point of interaction with the customer; defines terms.", "sum": "This bill mandates that businesses disclose their use of artificial intelligence to customers at the point of interaction—i.e., when a customer is engaging with an AI system in customer service. The bill defines relevant terms to clarify what constitutes AI use requiring disclosure.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-01-13", "url": "https://www.nysenate.gov/legislation/bills/2025/S8874" }, { "id": "m:US-VA:HB507", "jur": "US-VA", "level": "state", "num": "HB507", "title": "Data centers; permit requirements, emission limits for certain engine-generator sets.", "sum": "VA HB507 establishes permit requirements and emission limits for data-center engine-generator sets, prohibiting the Department of Environmental Quality from issuing air permits for new data-center applications after July 1, 2026, unless generators meet Tier 4 equivalent emission standards.", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-08", "url": "https://lis.virginia.gov/bill-details/20261/HB507" }, { "id": "m:US-VA:HB503", "jur": "US-VA", "level": "state", "num": "HB503", "title": "Electric utilities; cost recovery, costs substantially related to serving data center customers.", "sum": "VA HB503 regulates cost recovery by electric utilities for infrastructure and service provision to large data centers (≥100 MW peak demand), requiring that such costs be recovered solely from data center customers rather than spread across the general rate base.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-12", "url": "https://lis.virginia.gov/bill-details/20261/HB503" }, { "id": "m:US-VA:HB511", "jur": "US-VA", "level": "state", "num": "HB511", "title": "Data centers; industrial zoning.", "sum": "VA HB511 requires localities to review and amend zoning ordinances to designate data centers as industrial uses, optimize siting, and mitigate negative impacts (particularly noise and proximity to residential areas) through sound modeling, setbacks, building-height requirements, and developer…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-23", "url": "https://lis.virginia.gov/bill-details/20261/HB511" }, { "id": "m:US-VT:S0241", "jur": "US-VT", "level": "state", "num": "S0241", "title": "An act relating to regulating the use of artificial intelligence in the provision of mental health services", "sum": "VT S0241 regulates the use of artificial intelligence in the provision of mental health services, likely establishing requirements for transparency, safety, and appropriate use of AI and automated systems in clinical and therapeutic contexts.", "stage": "introduced", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-01-13", "url": "https://legislature.vermont.gov/bill/status/2026/S.241" }, { "id": "m:US-NE:LB1010", "jur": "US-NE", "level": "state", "num": "LB1010", "title": "Adopt the Large Load Customer Regulation Act, provide for eminent domain relating to energy storage and regulation and taxation of energy storage resources, and change provisions relating…", "sum": "NE LB1010 adopts the Large Load Customer Regulation Act and establishes regulatory and tax frameworks for energy storage, cryptocurrency mining operations, and data centers in Nebraska. The bill addresses siting, utility interconnection, and taxation of large-load infrastructure including data…", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "finserv", "infra" ], "date": "2026-04-17", "url": "https://nebraskalegislature.gov/bills/view_bill.php?DocumentID=63217" }, { "id": "m:US-IA:SSB3014", "jur": "US-IA", "level": "state", "num": "SSB3014", "title": "A bill for an act relating to the use of artificial intelligence systems and related software by state agencies for employment and other purposes.", "sum": "IA SSB3014 establishes rules for how Iowa state agencies can procure and deploy AI systems and related software, with explicit attention to employment contexts. The bill addresses government use of AI in hiring and personnel decisions, requiring oversight of automated decision-making by state…", "stage": "introduced", "cats": [ "gov-use", "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-01-27", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=SSB3014" }, { "id": "m:US-NY:S08872", "jur": "US-NY", "level": "state", "num": "S08872", "title": "Prohibits algorithmic wage-setting; provides for exceptions; provides for penalties for violation; creates a private right of action.", "sum": "NY S08872 prohibits employers from using algorithmic systems to set wages, with limited exceptions, and creates a private right of action for workers harmed by violations. The bill treats wage-setting algorithms as a form of automated decision-making subject to restriction.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-01-13", "url": "https://www.nysenate.gov/legislation/bills/2025/S8872" }, { "id": "m:US-VA:HB496", "jur": "US-VA", "level": "state", "num": "HB496", "title": "Certain data from water users; water use consumption for domestic, etc., purposes, data centers.", "sum": "This Virginia bill requires water users who supply water to other parties to report potable and reclaimed water consumption separately, with explicit tracking for data centers holding air permits from the Department of Environmental Quality. The bill establishes ongoing water-use data collection…", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-13", "url": "https://lis.virginia.gov/bill-details/20261/HB496" }, { "id": "m:US-VA:HB580", "jur": "US-VA", "level": "state", "num": "HB580", "title": "Consumer Counsel, Division of; establishing mechanisms for receiving and investigating complaints.", "sum": "VA HB580 expands the Division of Consumer Counsel's mandate to receive and investigate complaints involving emerging technologies, including AI fraud and abuse, with authority to refer cases to relevant federal, state, and local enforcement agencies. The bill creates a consumer-complaint mechanism…", "stage": "passed", "cats": [ "governance", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-04-06", "url": "https://lis.virginia.gov/bill-details/20261/HB580" }, { "id": "m:US-VA:HJR32", "jur": "US-VA", "level": "state", "num": "HJR32", "title": "Higher educational institutions; JLARC to study artificial intelligence use policies.", "sum": "VA HJR32 directs the Joint Legislative Audit and Review Commission (JLARC) to study AI use policies at Virginia's higher education institutions, evaluate them on academic integrity, data privacy, equity, transparency, and faculty autonomy, and develop a model policy plus curated resources for a…", "stage": "passed", "cats": [ "governance", "gov-use", "education" ], "secs": [], "date": "2026-04-01", "url": "https://lis.virginia.gov/bill-details/20261/HJ32" }, { "id": "m:US-VA:HB641", "jur": "US-VA", "level": "state", "num": "HB641", "title": "Virginia's Great Outdoors Act; established, creates data center land conservation tax.", "sum": "Virginia's Great Outdoors Act establishes a $3-per-square-foot data center land conservation tax effective January 1, 2027, with no less than $250 million in revenues directed to land preservation, tribal commitment, battlefield preservation, and farmland/forestland conservation funds.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-11", "url": "https://lis.virginia.gov/bill-details/20261/HB641" }, { "id": "m:US-AL:SB63", "jur": "US-AL", "level": "state", "num": "SB63", "title": "Health care plans; to regulate the use of artificial intelligence in determinations of coverage", "sum": "AL SB63 regulates the use of artificial intelligence in health insurance coverage determinations. The bill establishes requirements for transparency and fairness in AI-driven coverage decisions by health care plans.", "stage": "passed", "cats": [ "healthcare", "anti-discrimination", "disclosures" ], "secs": [ "finserv", "health" ], "date": "2026-04-17", "url": "https://alison.legislature.state.al.us/bill-search" }, { "id": "m:US-VA:HB658", "jur": "US-VA", "level": "state", "num": "HB658", "title": "State Corporation Commission; cost allocation proceedings for certain electric utilities.", "sum": "VA HB658 directs the State Corporation Commission to review whether electric utilities are imposing unreasonable cost allocation on non-data-center customers to subsidize transmission, generation, and distribution costs for data centers. The bill requires findings by January 1, 2027–2028 on whether…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-18", "url": "https://lis.virginia.gov/bill-details/20261/HB658" }, { "id": "m:US-SC:S0784", "jur": "US-SC", "level": "state", "num": "S0784", "title": "Energy", "sum": "SC S0784 amends South Carolina energy law to establish specific regulatory terms for electric service to commercial data centers, including utility reporting requirements on water usage and tax incentives for data-center equipment and operations.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-14", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=0784&session=126&summary=B" }, { "id": "m:US-VA:HB607", "jur": "US-VA", "level": "state", "num": "HB607", "title": "Aggregate air pollution; Department of Environmental Quality to study, data center generators.", "sum": "VA HB607 directs the Department of Environmental Quality to conduct a three-year study of aggregate air pollution in areas with high concentrations of data centers and to model scenarios for managing minor air permits for data center generators and monitoring needs. The bill focuses on…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-27", "url": "https://lis.virginia.gov/bill-details/20261/HB607" }, { "id": "m:US-VA:HB591", "jur": "US-VA", "level": "state", "num": "HB591", "title": "Data centers; policy of the Commonwealth.", "sum": "Virginia HB591 establishes state policy to encourage responsible data center operation while protecting grid reliability, affordability, and renewable deployment. It mandates coordination between data centers and grid operators, incentivizes demand response and energy storage, requires reporting of…", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-09", "url": "https://lis.virginia.gov/bill-details/20261/HB591" }, { "id": "m:US-IA:SSB3013", "jur": "US-IA", "level": "state", "num": "SSB3013", "title": "A bill for an act relating to the ownership of artificial intelligence output and trained artificial intelligence.(See SF 2199.)", "sum": "This bill addresses ownership rights over AI-generated outputs and trained AI models themselves, establishing a legal framework for who owns the intellectual property and derivative works created through AI systems. It defines property rights in both the outputs produced by AI and the trained…", "stage": "introduced", "cats": [ "privacy", "frontier" ], "secs": [ "media" ], "date": "2026-02-04", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=SSB3013" }, { "id": "m:US-VA:HB589", "jur": "US-VA", "level": "state", "num": "HB589", "title": "Data centers; certain data from water users, water use consumption.", "sum": "This bill requires water users providing water to data centers to report monthly water consumption data to Virginia's State Water Control Board, including volumes of reclaimed water used. It is a data-center infrastructure accountability measure focused on water use disclosure and grid/utility…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-18", "url": "https://lis.virginia.gov/bill-details/20261/HB589" }, { "id": "m:US-VA:HB635", "jur": "US-VA", "level": "state", "num": "HB635", "title": "Artificial Intelligence Chatbots Act; established, prohibited practices, penalties.", "sum": "VA HB635 regulates companion chatbots by requiring operators to include persistent disclaimers that users are not talking to humans, pop-up notifications at intervals, and protocols to detect and respond to suicidal ideation or self-harm. Violations are treated as unfair practices under Virginia's…", "stage": "introduced", "cats": [ "minors", "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-02-09", "url": "https://lis.virginia.gov/bill-details/20261/HB635" }, { "id": "m:US-IL:SB2786", "jur": "US-IL", "level": "state", "num": "SB2786", "title": "PROCUREMENT-LOCAL GOV AI", "sum": "IL SB2786 authorizes the Department of Central Management Services to conduct a 6-month pilot program testing artificial intelligence applications in local government procurement modernization across up to 7 municipalities under 200,000 population. The bill funds a comprehensive study to evaluate…", "stage": "introduced", "cats": [ "gov-use" ], "secs": [], "date": "2026-01-13", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=2786&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB2780", "jur": "US-IL", "level": "state", "num": "SB2780", "title": "$CMS-AI PROCUREMENT", "sum": "This bill appropriates $250,000 to the Illinois Department of Central Management Services to fund a pilot program with Amp AI (Nozma) aimed at modernizing procurement processes through artificial intelligence.", "stage": "introduced", "cats": [ "gov-use" ], "secs": [], "date": "2026-07-02", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=2780&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-AL:SB129", "jur": "US-AL", "level": "state", "num": "SB129", "title": "Artificial intelligence; disclosure of artificial intelligence-generated content required, enforcement provided", "sum": "AL SB129 requires disclosure of AI-generated content and provides enforcement mechanisms for violations. The bill appears to mandate that users or creators be informed when content has been produced by artificial intelligence systems.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "media" ], "date": "2026-01-13", "url": "https://alison.legislature.state.al.us/bill-search" }, { "id": "m:US-SC:S0788", "jur": "US-SC", "level": "state", "num": "S0788", "title": "Artificial Intelligence and Therapy or Psychotherapy", "sum": "SC S0788 regulates the use of AI in therapy and psychotherapy by requiring licensed professionals to disclose AI use to patients and obtain informed consent before using AI to assist in or conduct therapeutic sessions. The bill prohibits unlicensed entities from offering therapy services via AI,…", "stage": "engrossed", "cats": [ "healthcare", "disclosures", "privacy" ], "secs": [ "health" ], "date": "2026-04-30", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=0788&session=126&summary=B" }, { "id": "m:US-IL:HB4411", "jur": "US-IL", "level": "state", "num": "HB4411", "title": "SCH CD-COMPUTER SCIENCE REQ", "sum": "IL HB4411 requires all Illinois high school students to complete one year of computer science and artificial intelligence as a graduation prerequisite beginning in the 2028–2029 school year, and directs the State Board of Education to create teaching endorsements and curriculum guidelines for K–12…", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-04-15", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=4411&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-VA:HB669", "jur": "US-VA", "level": "state", "num": "HB669", "title": "Impersonation of certain licensed professionals by chatbot; definitions, notice, civil liability.", "sum": "HB669 prohibits chatbots from providing substantive responses, advice, or actions that would constitute unlicensed practice of regulated professions (medicine, law, dentistry, nursing, mental health, teaching, etc.). It requires proprietors to disclose to users that they are interacting with a…", "stage": "introduced", "cats": [ "disclosures", "consumer-financial", "healthcare" ], "secs": [ "health" ], "date": "2026-02-18", "url": "https://lis.virginia.gov/bill-details/20261/HB669" }, { "id": "m:US-WA:SB6120", "jur": "US-WA", "level": "state", "num": "SB6120", "title": "Regulating high-risk artificial intelligence system development, deployment, and use.", "sum": "WA SB6120 establishes regulatory requirements for high-risk AI system development, deployment, and use, creating substantive oversight mechanisms for consequential AI systems. The bill appears to create governance structures and risk-management obligations for AI developers and deployers, including…", "stage": "introduced", "cats": [ "governance", "frontier", "anti-discrimination" ], "secs": [], "date": "2026-01-14", "url": "https://app.leg.wa.gov/billsummary?BillNumber=6120&Year=2025&Initiative=false" }, { "id": "m:US-VA:HB758", "jur": "US-VA", "level": "state", "num": "HB758", "title": "Artificial Intelligence Chatbots and Minors Act; established, prohibited practices, penalties.", "sum": "Virginia HB758 prohibits deployers from offering chatbots with human-like features or social AI companions to minors, requiring age verification systems and establishing violations as prohibited practices under the Virginia Consumer Protection Act.", "stage": "introduced", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-02-18", "url": "https://lis.virginia.gov/bill-details/20261/HB758" }, { "id": "m:US-WA:HB2481", "jur": "US-WA", "level": "state", "num": "HB2481", "title": "Prohibiting surveillance-based price discrimination and surge pricing for retail goods.", "sum": "WA HB2481 prohibits retailers from using surveillance data and algorithmic systems to dynamically adjust prices based on individual consumer characteristics or behavior, and restricts surge pricing on retail goods. The bill targets automated decision-making that discriminates through personalized…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-02-07", "url": "https://app.leg.wa.gov/billsummary?BillNumber=2481&Year=2025&Initiative=false" }, { "id": "m:US-VA:HB784", "jur": "US-VA", "level": "state", "num": "HB784", "title": "RS and UT; commercial and industrial exemptions, disclosure of data center operator exemption.", "sum": "This bill requires Virginia's Department of Taxation to publish annual reports disclosing the names of all data center operators receiving retail sales and use tax exemptions, along with the exemption amounts claimed, whether job creation and capital investment targets were met, and employment and…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-11", "url": "https://lis.virginia.gov/bill-details/20261/HB784" }, { "id": "m:US-VA:HB713", "jur": "US-VA", "level": "state", "num": "HB713", "title": "Fostering Access, Innovation, and Responsibility in Artificial Intelligence Act; established.", "sum": "VA HB713 establishes the FAIR AI Act, requiring developers of base AI models to clearly disclose key elements in terms of service, creates an enforcement fund for addressing AI system misuse and bias, and limits legal defenses for defendants in cases where AI systems cause harm. The bill takes…", "stage": "introduced", "cats": [ "disclosures", "anti-discrimination", "frontier" ], "secs": [], "date": "2026-02-18", "url": "https://lis.virginia.gov/bill-details/20261/HB713" }, { "id": "m:US-VA:HB824", "jur": "US-VA", "level": "state", "num": "HB824", "title": "Data centers; energy generation and storage, report.", "sum": "VA HB824 directs the Department of Energy to convene a work group to study energy generation, storage, and backup systems for data centers in Virginia, with a focus on cost-feasibility and potential partnerships with public universities. The work group must report findings and recommendations to…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-18", "url": "https://lis.virginia.gov/bill-details/20261/HB824" }, { "id": "m:US-VA:HB668", "jur": "US-VA", "level": "state", "num": "HB668", "title": "Mental health service providers; use of artificial intelligence system, civil penalty.", "sum": "VA HB668 permits mental health service providers to use AI systems for administrative and supplementary support, but prohibits AI from directly delivering therapy or counseling without a licensed provider present. The bill enforces compliance with health records privacy requirements and establishes…", "stage": "introduced", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-02-18", "url": "https://lis.virginia.gov/bill-details/20261/HB668" }, { "id": "m:US-VA:HB797", "jur": "US-VA", "level": "state", "num": "HB797", "title": "Artificial intelligence; framework for person/entity acting as an independent verification org.", "sum": "VA HB797 directs the Joint Commission on Technology and Science to evaluate the feasibility of creating a framework for independent verification organizations to assess AI models and applications against safety and best-practices standards for preventing personal injury and property damage. The…", "stage": "passed", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-04-08", "url": "https://lis.virginia.gov/bill-details/20261/HB797" }, { "id": "m:US-GA:SB398", "jur": "US-GA", "level": "state", "num": "SB398", "title": "Wiretapping, Eavesdropping, Surveillance, and Related Offenses; criminal offenses of virtual peeping; establish", "sum": "GA SB398 criminalizes the use of generative AI to create unauthorized or non-consensual images of individuals (including synthetic/deepfake pornography and related non-consensual intimate imagery). The bill establishes criminal penalties for 'virtual peeping'—generating AI images without…", "stage": "engrossed", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-03-31", "url": "https://www.legis.ga.gov/legislation/72204" }, { "id": "m:US-CA:SB886", "jur": "US-CA", "level": "state", "num": "SB886", "title": "California Technology Innovation and Ratepayer Protection Act.", "sum": "CA SB886 adds Chapter 14 to the Public Utilities Code to establish rules governing electricity infrastructure, including provisions related to large-load facilities and utility modernization that directly impact data center siting, energy consumption, and grid capacity.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-08-05", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB886" }, { "id": "m:US-CA:SB887", "jur": "US-CA", "level": "state", "num": "SB887", "title": "California Environmental Quality Act: environmental leadership development projects: data centers: clean energy powerplant projects.", "sum": "CA SB887 amends the California Environmental Quality Act to streamline environmental review and permitting for data-center and clean-energy power-plant projects by creating expedited CEQA pathways and establishing new categorical exemptions for qualifying environmental leadership and energy…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-08-05", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB887" }, { "id": "m:US-NJ:S329", "jur": "US-NJ", "level": "state", "num": "S329", "title": "Extends crime of identity theft to include fraudulent impersonation or false depiction by means of artificial intelligence or deepfake technology.", "sum": "NJ S329 extends the crime of identity theft to explicitly cover fraudulent impersonation and false depiction created using artificial intelligence or deepfake technology. The bill criminalizes the use of these tools to misrepresent someone's identity.", "stage": "introduced", "cats": [ "deepfakes", "consumer-financial" ], "secs": [ "media" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/S329" }, { "id": "m:US-NJ:S1840", "jur": "US-NJ", "level": "state", "num": "S1840", "title": "Creates \"New Jersey Responsible AI Advancement and Workforce Protection Act.\"", "sum": "Creates the New Jersey Responsible AI Advancement and Workforce Protection Act, establishing requirements for responsible AI development and deployment with a focus on workforce protection and employment-related automated decision systems.", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/S1840" }, { "id": "m:US-NJ:S735", "jur": "US-NJ", "level": "state", "num": "S735", "title": "Prohibits advertising artificial intelligence system as licensed mental health professional.", "sum": "NJ S735 prohibits advertising or marketing an artificial intelligence system as if it were a licensed mental health professional. The bill creates a disclosure and truth-in-advertising requirement to prevent AI mental-health tools from misrepresenting their regulatory status or qualifications.", "stage": "introduced", "cats": [ "healthcare", "consumer-financial", "disclosures" ], "secs": [ "health" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/S735" }, { "id": "m:US-NJ:S680", "jur": "US-NJ", "level": "state", "num": "S680", "title": "Requires energy usage plan for proposed artificial intelligence data centers and cryptocurrency mining facilities; requires all electricity for artificial intelligence data centers and…", "sum": "NJ S680 requires AI data centers and cryptocurrency mining facilities to submit energy usage plans and mandates that all electricity for these facilities come from new clean energy sources.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra", "finserv" ], "date": "2026-03-16", "url": "https://www.njleg.state.nj.us/bill-search/2026/S680" }, { "id": "m:US-NJ:S1029", "jur": "US-NJ", "level": "state", "num": "S1029", "title": "Requires collection of data by health insurers regarding health insurance claims and decisions made using automated utilization management systems.", "sum": "NJ S1029 requires health insurers to collect and report data on claims and coverage decisions made by automated utilization management systems. The bill creates transparency and accountability mechanisms for algorithmic decision-making in insurance coverage determinations.", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "disclosures" ], "secs": [ "finserv", "health" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/S1029" }, { "id": "m:US-NJ:S2862", "jur": "US-NJ", "level": "state", "num": "S2862", "title": "Requires school districts to provide instruction on artificial intelligence; requires Secretary of Higher Education to develop artificial intelligence model curricula.", "sum": "NJ S2862 requires New Jersey school districts to provide instruction on artificial intelligence and directs the Secretary of Higher Education to develop model AI curricula for implementation across the state's education system.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/S2862" }, { "id": "m:US-NJ:S1802", "jur": "US-NJ", "level": "state", "num": "S1802", "title": "Requires artificial intelligence companies to conduct safety tests and report results to Office of Information Technology.", "sum": "Requires AI companies to conduct safety tests and report results to New Jersey's Office of Information Technology. Establishes a reporting and oversight mechanism for AI safety practices at the state level.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/S1802" }, { "id": "m:US-NJ:SR18", "jur": "US-NJ", "level": "state", "num": "SR18", "title": "Urges states in PJM Interconnection region to require data centers to obtain electricity from new zero- or low-emission sources of energy.", "sum": "This resolution urges states within the PJM Interconnection region to require data centers to source electricity from new zero- or low-emission energy sources. It addresses the grid and energy infrastructure demands of large-load facilities that power AI systems and compute operations.", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-23", "url": "https://www.njleg.state.nj.us/bill-search/2026/SR18" }, { "id": "m:US-NJ:S2129", "jur": "US-NJ", "level": "state", "num": "S2129", "title": "Prohibits and imposes criminal penalty on disclosure of certain intentionally deceptive audio or visual media within 90 days of election.", "sum": "NJ S2129 criminalizes the disclosure of intentionally deceptive audio or visual media (deepfakes and synthetic media) within 90 days of an election. The bill establishes penalties for distributing election-related deepfakes in the critical pre-election period.", "stage": "introduced", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/S2129" }, { "id": "m:US-NJ:S2274", "jur": "US-NJ", "level": "state", "num": "S2274", "title": "Requires owner or operator of data center to submit water and energy usage report to BPU.", "sum": "NJ S2274 requires data-center owners or operators to submit water and energy usage reports to the Board of Public Utilities. This is direct regulation of data-center infrastructure, a tracked vertical under AI policy due to the resource intensity of large-scale AI compute and model training.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/S2274" }, { "id": "m:US-NJ:S2130", "jur": "US-NJ", "level": "state", "num": "S2130", "title": "Establishes Deep Fake Technology Unit in DLPS; appropriates $2 million.", "sum": "This bill establishes a dedicated Deep Fake Technology Unit within New Jersey's Division of Law and Public Safety and appropriates $2 million in funding. The unit will focus on detection, investigation, and enforcement related to deepfake and synthetic media.", "stage": "introduced", "cats": [ "governance", "deepfakes" ], "secs": [ "media" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/S2130" }, { "id": "m:US-NJ:S2942", "jur": "US-NJ", "level": "state", "num": "S2942", "title": "Establishes public-private partnerships to develop artificial intelligence job training.", "sum": "NJ S2942 establishes public-private partnerships to develop artificial intelligence job training programs. The bill aims to build workforce capacity in AI through collaborative training initiatives between government and industry.", "stage": "introduced", "cats": [ "governance", "education" ], "secs": [ "hr" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/S2942" }, { "id": "m:US-NJ:S1159", "jur": "US-NJ", "level": "state", "num": "S1159", "title": "Prohibits deepfake pornography and imposes criminal and civil penalties for non-consensual disclosure.", "sum": "NJ S1159 prohibits the creation and non-consensual disclosure of deepfake pornography, establishing both criminal and civil penalties for violations. The bill targets synthetic sexual media created without consent, addressing harms from AI-generated intimate imagery.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/S1159" }, { "id": "m:US-NJ:S451", "jur": "US-NJ", "level": "state", "num": "S451", "title": "Establishes \"Forbidding the Algorithmic Inflation of Rent (FAIR) Act.\"", "sum": "The FAIR Act prohibits landlords and property managers from using algorithmic systems to set or inflate rental prices in a manner that constitutes unfair or deceptive practice. The bill targets automated decision-making in housing markets to prevent algorithmic discrimination and price manipulation.", "stage": "introduced", "cats": [ "anti-discrimination", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-06-30", "url": "https://www.njleg.state.nj.us/bill-search/2026/S451" }, { "id": "m:US-NJ:SR52", "jur": "US-NJ", "level": "state", "num": "SR52", "title": "Urges generative artificial intelligence companies to make voluntary commitments regarding employee whistleblower protections.", "sum": "NJ SR52 urges generative AI companies to voluntarily adopt employee whistleblower protections, addressing internal accountability and safety concerns within the AI development industry.", "stage": "introduced", "cats": [ "frontier" ], "secs": [ "hr" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/SR52" }, { "id": "m:US-VA:SB269", "jur": "US-VA", "level": "state", "num": "SB269", "title": "Mental health service providers; definitions, use of artificial intelligence system, civil penalty.", "sum": "VA SB269 permits mental health service providers to use AI systems to assist in therapy or counseling, but requires the provider to maintain full responsibility for all interactions, outputs, and data use; it prohibits AI from delivering therapy independently and establishes a $10,000 civil penalty…", "stage": "engrossed", "cats": [ "healthcare", "privacy" ], "secs": [ "health" ], "date": "2026-03-02", "url": "https://lis.virginia.gov/bill-details/20261/SB269" }, { "id": "m:US-IL:HJR0050", "jur": "US-IL", "level": "state", "num": "HJR0050", "title": "PRP & ISBE AI ANALYSIS", "sum": "Directs the Illinois Professional Review Panel and State Board of Education to analyze and model the impacts of artificial intelligence and related technologies on education funding costs, with findings due to the legislature and governor by December 31, 2027.", "stage": "introduced", "cats": [ "governance", "education" ], "secs": [], "date": "2026-07-01", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=50&GAID=18&DocTypeID=HJR&SessionID=114&GA=104" }, { "id": "m:US-OH:HB646", "jur": "US-OH", "level": "state", "num": "HB646", "title": "Create the Data Center Study Commission", "sum": "OH HB646 creates a Data Center Study Commission and enacts new regulatory framework for data centers in Ohio, covering siting, utility infrastructure, tax incentives, and grid management. The bill amends multiple sections of the Ohio Revised Code to establish standards and oversight for data-center…", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-10", "url": "https://www.legislature.ohio.gov/legislation/136/hb646" }, { "id": "m:US-VA:HB999", "jur": "US-VA", "level": "state", "num": "HB999", "title": "Virginia Human Rights Act; equal credit opportunities, Virginia Fair Housing Law, nondiscrimination.", "sum": "VA HB999 prohibits deployment of automated decision systems in credit, housing, and employment contexts that cause discrimination or disparate impact, and requires disclosure of such systems to affected individuals, annual bias assessments, and two-year documentation retention.", "stage": "introduced", "cats": [ "anti-discrimination", "disclosures" ], "secs": [ "finserv", "hr" ], "date": "2026-02-18", "url": "https://lis.virginia.gov/bill-details/20261/HB999" }, { "id": "m:US-VA:HB868", "jur": "US-VA", "level": "state", "num": "HB868", "title": "Political campaign advertisements; synthetic media, penalty.", "sum": "This bill prohibits electioneering communications containing synthetic media (deepfakes or artificially generated content) from being published or broadcast without a conspicuous disclosure label. It establishes civil penalties up to $25,000 and criminal penalties for willful violations, and grants…", "stage": "introduced", "cats": [ "deepfakes", "elections", "disclosures" ], "secs": [ "media" ], "date": "2026-02-06", "url": "https://lis.virginia.gov/bill-details/20261/HB868" }, { "id": "m:US-VA:HB982", "jur": "US-VA", "level": "state", "num": "HB982", "title": "Political campaign advertisements; synthetic media, penalty.", "sum": "This bill prohibits electioneering communications containing synthetic media from being published or broadcast without a conspicuous disclosure statement. It establishes civil penalties up to $25,000 and criminal penalties for willful violations, and grants registered voters standing to seek…", "stage": "introduced", "cats": [ "deepfakes", "elections", "disclosures" ], "secs": [ "media" ], "date": "2026-02-18", "url": "https://lis.virginia.gov/bill-details/20261/HB982" }, { "id": "m:US-VA:HB897", "jur": "US-VA", "level": "state", "num": "HB897", "title": "Retail Sales and Use Tax; exemption for data centers, delayed effective date.", "sum": "VA HB897 modifies the existing data center sales and use tax exemption to require operators to meet increasingly stringent clean-energy and decarbonization standards beginning in 2027, including restrictions on carbon-emitting co-located generators, renewable energy procurement targets by 2029, and…", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-03", "url": "https://lis.virginia.gov/bill-details/20261/HB897" }, { "id": "m:US-AZ:HB2311", "jur": "US-AZ", "level": "state", "num": "HB2311", "title": "Artificial intelligence service; disclosures; requirements", "sum": "AZ HB2311 requires artificial intelligence services to disclose to consumers when they are interacting with AI and to provide clear information about AI capabilities and limitations. The bill establishes transparency and labeling requirements for AI service providers.", "stage": "vetoed", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-06-19", "url": "https://apps.azleg.gov/BillStatus/BillOverview/84047" }, { "id": "m:US-OK:HB3176", "jur": "US-OK", "level": "state", "num": "HB3176", "title": "State development; Oklahoma Gas, Artificial Intelligence, and Space Research Hub; National Laboratory; Oklahoma Department of Commerce; effective date.", "sum": "OK HB3176 establishes an Oklahoma Gas, Artificial Intelligence, and Space Research Hub and National Laboratory under the Oklahoma Department of Commerce to advance state development in AI, energy, and space sectors. The bill appears to create a state-level governance and research infrastructure…", "stage": "engrossed", "cats": [ "governance", "data-centers" ], "secs": [ "infra" ], "date": "2026-04-16", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=hb3176&Session=2600" }, { "id": "m:US-VA:HB961", "jur": "US-VA", "level": "state", "num": "HB961", "title": "Retail Sales and Use Tax; commercial and industrial exemptions, data centers.", "sum": "VA HB961 modifies Virginia's retail sales and use tax exemption for data centers, limiting the exemption to equipment purchases before operations begin or as part of energy-efficiency refresh cycles starting July 1, 2026. The bill directly addresses tax policy for data-center infrastructure siting…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-11", "url": "https://lis.virginia.gov/bill-details/20261/HB961" }, { "id": "m:US-OK:SB1706", "jur": "US-OK", "level": "state", "num": "SB1706", "title": "Foreign ownership of land; prohibiting foreign principals from renting, leasing, or having a controlling interest in data centers. Effective date.", "sum": "OK SB1706 prohibits foreign principals from renting, leasing, or holding a controlling interest in data centers within Oklahoma. The bill targets foreign ownership and control of critical compute infrastructure.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-03", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=sb1706&Session=2600" }, { "id": "m:US-VA:HB1186", "jur": "US-VA", "level": "state", "num": "HB1186", "title": "Artificial intelligence; use of systems for student instruction.", "sum": "Virginia requires the Department of Education to compile guidance on safe, ethical, and equitable use of AI systems in public K–12 instruction and mandates school boards adopt consistent policies. The bill establishes a pilot program (through 2030) to fund and evaluate innovative AI applications in…", "stage": "passed", "cats": [ "governance", "gov-use", "education" ], "secs": [], "date": "2026-04-13", "url": "https://lis.virginia.gov/bill-details/20261/HB1186" }, { "id": "m:US-VA:HB1257", "jur": "US-VA", "level": "state", "num": "HB1257", "title": "Law-enforcement agencies; use of certain technologies & interrogation practices; forensic lab.", "sum": "VA HB1257 directs the Department of Criminal Justice Services to establish a comprehensive regulatory framework for law-enforcement use of generative AI, machine learning systems, and audiovisual surveillance technologies, including mandatory model policies, training standards, and agency adoption…", "stage": "introduced", "cats": [ "governance", "gov-use", "public-safety" ], "secs": [], "date": "2026-02-02", "url": "https://lis.virginia.gov/bill-details/20261/HB1257" }, { "id": "m:US-OK:HB3299", "jur": "US-OK", "level": "state", "num": "HB3299", "title": "Crimes and punishments; creating and disseminating a digitization or synthetic media; making certain acts unlawful; emergency.", "sum": "OK HB3299 criminalizes the creation and dissemination of synthetic media or deepfakes, with explicit focus on non-consensual intimate imagery and election-related synthetic content. The bill makes unlawful acts related to digitization and synthetic media creation.", "stage": "introduced", "cats": [ "deepfakes", "consumer-financial" ], "secs": [ "media" ], "date": "2026-02-26", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=hb3299&Session=2600" }, { "id": "m:US-OK:HB3397", "jur": "US-OK", "level": "state", "num": "HB3397", "title": "Data centers; defining terms; requiring Corporation Commission provide for certain classification of service; effective date.", "sum": "OK HB3397 directs the Oklahoma Corporation Commission to establish a classification scheme for data-center services and defines key data-center terms. The bill appears to create regulatory or tariff structures for data-center operations, which aligns with utility and grid oversight of compute…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-03", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=hb3397&Session=2600" }, { "id": "m:US-NY:A09533", "jur": "US-NY", "level": "state", "num": "A09533", "title": "Requires covered employers to provide notice to certain affected employees prior to any technological displacement; requires reporting; requires a workforce transition period; makes related…", "sum": "NY A09533 requires covered employers to notify affected employees before implementing technological displacement (including AI and automated systems), establish a workforce transition period, and report on such deployments. The bill treats automation-driven job elimination as a consequential…", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-04-28", "url": "https://www.nysenate.gov/legislation/bills/2025/A9533" }, { "id": "m:US-VA:HB1170", "jur": "US-VA", "level": "state", "num": "HB1170", "title": "Law-enforcement agencies & sheriff's dept.; policy on use of covered artificial intelligence syst.", "sum": "Requires Virginia's Department of Criminal Justice Services to establish a model policy for law-enforcement use of covered AI systems by October 2026, and mandates all state/local law-enforcement agencies and sheriff's departments adopt compliant written policies by January 2027, with policies…", "stage": "introduced", "cats": [ "governance", "gov-use", "public-safety" ], "secs": [], "date": "2026-02-02", "url": "https://lis.virginia.gov/bill-details/20261/HB1170" }, { "id": "m:US-NE:LB1064", "jur": "US-NE", "level": "state", "num": "LB1064", "title": "Adopt the Large Load Customer Regulation Act", "sum": "NE LB1064 adopts the Large Load Customer Regulation Act, establishing regulatory frameworks for large electricity consumers—including data centers and compute-intensive facilities. The bill addresses siting, utility tariffs, and grid-management policies for high-load infrastructure.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-17", "url": "https://nebraskalegislature.gov/bills/view_bill.php?DocumentID=62971" }, { "id": "m:US-WV:SB70", "jur": "US-WV", "level": "state", "num": "SB70", "title": "Protecting state and local government systems and data from foreign entities", "sum": "WV SB70 prohibits state and local government procurement and use of software, applications, or AI tools owned by entities in designated foreign adversary nations, aiming to protect government systems and citizen data from foreign cyberattacks and surveillance.", "stage": "introduced", "cats": [ "gov-use", "privacy" ], "secs": [], "date": "2026-02-06", "url": "http://www.wvlegislature.gov/Bill_Status/Bills_history.cfm?input=70&year=2026&sessiontype=RS&btype=bill" }, { "id": "m:US-OK:SB1734", "jur": "US-OK", "level": "state", "num": "SB1734", "title": "Schools; creating the Oklahoma Responsible Technology in Schools Act; requiring development of guidance for use of artificial intelligence and emerging technologies. Effective date.…", "sum": "OK SB1734 requires Oklahoma schools to develop and implement guidance on the use of artificial intelligence and emerging technologies in educational settings. The bill establishes a framework for responsible AI adoption across public K-12 schools.", "stage": "passed", "cats": [ "governance", "gov-use", "education" ], "secs": [], "date": "2026-05-13", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=sb1734&Session=2600" }, { "id": "m:US-OK:HB3394", "jur": "US-OK", "level": "state", "num": "HB3394", "title": "Hyperscale data centers; Oklahoma Hyperscale Data Center Directory Act; Oklahoma Corporation Commission; directory; electrical utilities; water providers; effective date.", "sum": "OK HB3394 establishes the Oklahoma Hyperscale Data Center Directory Act, requiring the Oklahoma Corporation Commission to create and maintain a directory of hyperscale data centers and coordinate with electrical utilities and water providers on siting, infrastructure, and resource allocation.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-12", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=hb3394&Session=2600" }, { "id": "m:US-VA:HB1252", "jur": "US-VA", "level": "state", "num": "HB1252", "title": "Virginia Residential Landlord and Tenant Act; algorithmic pricing device use by certain landlords.", "sum": "This bill requires large landlords (10+ units or 10%+ ownership stake) who use algorithmic pricing devices to disclose that use in writing and provide plain-language summaries of the factors the algorithm considers. Tenants gain the right to request human review of any rent determination or…", "stage": "introduced", "cats": [ "anti-discrimination", "disclosures", "consumer-financial" ], "secs": [], "date": "2026-02-03", "url": "https://lis.virginia.gov/bill-details/20261/HB1252" }, { "id": "m:US-VA:HB1250", "jur": "US-VA", "level": "state", "num": "HB1250", "title": "Technology Governance and Coordination Program; established, report, sunset.", "sum": "Establishes a Technology Governance and Coordination Program within Virginia's Office of the Attorney General to coordinate the Commonwealth's response to emergent technologies including AI, algorithmic systems, biometric systems, and automated decision-making tools. Requires annual reporting to…", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-02-18", "url": "https://lis.virginia.gov/bill-details/20261/HB1250" }, { "id": "m:US-OK:HB3544", "jur": "US-OK", "level": "state", "num": "HB3544", "title": "Technology; artificial intelligence; companions; minors; safety; civil penalties; effective date.", "sum": "OK HB3544 regulates AI companion chatbots and automated systems directed at or accessible to minors, establishing safety requirements and civil penalties for violations. The bill addresses child protection and consumer harm in the context of interactive AI systems.", "stage": "engrossed", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-04-21", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=hb3544&Session=2600" }, { "id": "m:US-WA:HB2515", "jur": "US-WA", "level": "state", "num": "HB2515", "title": "Addressing emerging large energy use facilities.", "sum": "WA HB2515 addresses regulatory and utility frameworks for large energy-use facilities, including data centers. The bill likely establishes siting requirements, utility-grid coordination, and possibly tax or tariff provisions for high-load infrastructure.", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-12", "url": "https://app.leg.wa.gov/billsummary?BillNumber=2515&Year=2025&Initiative=false" }, { "id": "m:US-CO:HB1030", "jur": "US-CO", "level": "state", "num": "HB1030", "title": "Data Center & Utility Modernization", "sum": "CO HB1030 facilitates data center development in Colorado while modernizing utility infrastructure and the electrical grid to support large computational loads. The bill includes workforce development, clean energy alignment, and consumer/environmental protections tied to data center siting and…", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-07", "url": "https://leg.colorado.gov/bills/HB26-1030" }, { "id": "m:US-AZ:HB2452", "jur": "US-AZ", "level": "state", "num": "HB2452", "title": "Comprehensive plans; data centers; nuclear", "sum": "AZ HB2452 addresses comprehensive land-use planning for data centers and nuclear infrastructure in Arizona. The bill likely includes siting, zoning, utility interconnection, and grid-load provisions relevant to large-scale compute facilities.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-26", "url": "https://apps.azleg.gov/BillStatus/BillOverview/84224" }, { "id": "m:US-OK:HB3545", "jur": "US-OK", "level": "state", "num": "HB3545", "title": "Technology; artificial intelligence; state agencies; prohibited uses; permitted uses; Office of Management and Enterprise Services; effective date.", "sum": "OK HB3545 establishes prohibited and permitted uses of artificial intelligence by Oklahoma state agencies, with oversight by the Office of Management and Enterprise Services. The bill sets governance rules for how state government deploys AI systems and likely includes guardrails against…", "stage": "engrossed", "cats": [ "gov-use", "anti-discrimination" ], "secs": [], "date": "2026-04-01", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=hb3545&Session=2600" }, { "id": "m:US-WA:HB2503", "jur": "US-WA", "level": "state", "num": "HB2503", "title": "Regulating artificial intelligence training data.", "sum": "WA HB2503 regulates how AI systems use personal data for training, likely imposing transparency and consent requirements around training-data sourcing and use. The bill addresses data privacy and disclosure obligations tied specifically to AI model development.", "stage": "introduced", "cats": [ "privacy", "disclosures" ], "secs": [], "date": "2026-01-30", "url": "https://app.leg.wa.gov/billsummary?BillNumber=2503&Year=2025&Initiative=false" }, { "id": "m:US-OK:HB3546", "jur": "US-OK", "level": "state", "num": "HB3546", "title": "Technology; personhood; artificial intelligence; effective date.", "sum": "OK HB3546 addresses the legal status and personhood implications of artificial intelligence systems, likely establishing regulatory or definitional frameworks for how AI entities are treated under Oklahoma law. The bill appears to create substantive governance structures around AI's legal standing…", "stage": "engrossed", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-04-21", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=hb3546&Session=2600" }, { "id": "m:US-TN:SB1682", "jur": "US-TN", "level": "state", "num": "SB1682", "title": "AN ACT to amend Tennessee Code Annotated, Title 5; Title 6; Title 7; Title 10; Title 62; Title 65; Title 68 and Title 69, relative to data centers.", "sum": "Requires data centers in Tennessee to register with the Public Utilities Commission and mandates that electric and water utilities report usage and rates for those facilities to the commission for compilation and publication.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-03", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB1682&ga=114" }, { "id": "m:US-AZ:HB2409", "jur": "US-AZ", "level": "state", "num": "HB2409", "title": "Artificial intelligence; statewide education program", "sum": "AZ HB2409 establishes a statewide artificial intelligence education program, likely aimed at building AI literacy and curriculum standards across Arizona schools and/or higher education institutions.", "stage": "engrossed", "cats": [ "education" ], "secs": [], "date": "2026-03-09", "url": "https://apps.azleg.gov/BillStatus/BillOverview/84172" }, { "id": "m:US-WA:SB6171", "jur": "US-WA", "level": "state", "num": "SB6171", "title": "Addressing emerging large energy use facilities.", "sum": "WA SB6171 addresses regulatory and utility frameworks for emerging large energy-use facilities, which would include data centers supporting AI compute and training infrastructure. The bill likely targets siting, grid impact, utility tariffs, or permitting for high-load electrical consumers.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-04", "url": "https://app.leg.wa.gov/billsummary?BillNumber=6171&Year=2025&Initiative=false" }, { "id": "m:US-MD:HB314", "jur": "US-MD", "level": "state", "num": "HB314", "title": "Automation Technology Deployment Assessment and Displaced Employee Retraining Fund - Established", "sum": "MD HB314 requires employers with 100+ employees that reduce workforce by ≥10 employees while using automation technology to report details on automation deployment and displaced workers to the Secretary of Labor, and to pay an assessment fee per displaced employee.", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-02-17", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB0314?ys=2026RS" }, { "id": "m:US-TN:SB1700", "jur": "US-TN", "level": "state", "num": "SB1700", "title": "AN ACT to amend Tennessee Code Annotated, Title 29; Title 37 and Title 47, relative to artificial intelligence.", "sum": "TN SB1700 directs the Tennessee Advisory Commission on Intergovernmental Relations (TACIR) to conduct a comprehensive study of potential regulation of artificial intelligence systems and generative AI chatbots in the state. The study will inform future legislative action on AI governance.", "stage": "passed", "cats": [ "governance" ], "secs": [], "date": "2026-05-27", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB1700&ga=114" }, { "id": "m:US-AZ:HB2467", "jur": "US-AZ", "level": "state", "num": "HB2467", "title": "Data centers; incentives repeal; requirements", "sum": "AZ HB2467 addresses data-center incentives and requirements, including potential repeal of existing tax incentives and new operational or siting rules for data centers.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-22", "url": "https://apps.azleg.gov/BillStatus/BillOverview/84240" }, { "id": "m:US-OK:SB2037", "jur": "US-OK", "level": "state", "num": "SB2037", "title": "Artificial intelligence; requiring informed consent for use by licensed mental health professional or health care provider; authorizing and prohibiting certain uses. Emergency.", "sum": "OK SB2037 requires licensed mental health professionals and healthcare providers to obtain informed consent before using AI systems in patient care, and establishes authorized and prohibited uses of AI in clinical settings. The bill treats AI as a substantive clinical tool requiring explicit…", "stage": "introduced", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-02-03", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=sb2037&Session=2600" }, { "id": "m:US-WI:SB843", "jur": "US-WI", "level": "state", "num": "SB843", "title": "Certain requirements related to data centers.", "sum": "WI SB843 creates statutory requirements for data centers in Wisconsin, establishing regulatory authority over siting, utility interconnection, and operational standards. The bill amends public utility and general statutes to govern data-center development and grid integration.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-23", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/sen/bill/sb843" }, { "id": "m:US-AZ:HB2490", "jur": "US-AZ", "level": "state", "num": "HB2490", "title": "Rental price fixing; algorithmic pricing", "sum": "AZ HB2490 addresses algorithmic pricing in rental markets, likely prohibiting or regulating the use of automated systems to coordinate or manipulate rental prices. The bill treats algorithmic pricing as a form of price fixing, extending antitrust and consumer-protection principles to automated…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-01-21", "url": "https://apps.azleg.gov/BillStatus/BillOverview/84267" }, { "id": "m:US-VA:HB1261", "jur": "US-VA", "level": "state", "num": "HB1261", "title": "Law-enforcement agencies; use of certain technology & interrogation practices; forensic laboratory.", "sum": "VA HB1261 directs the Department of Criminal Justice Services to establish a comprehensive framework and model policies for law-enforcement use of generative AI, machine learning systems, audiovisual surveillance, and interrogation practices, with mandatory training standards and agency compliance…", "stage": "introduced", "cats": [ "gov-use", "public-safety" ], "secs": [], "date": "2026-02-02", "url": "https://lis.virginia.gov/bill-details/20261/HB1261" }, { "id": "m:US-OK:SB2038", "jur": "US-OK", "level": "state", "num": "SB2038", "title": "Health Insurance; prohibiting issue of outcomes with AI; requiring decisions to be made by provider; requiring disclosures. Emergency.", "sum": "OK SB2038 prohibits health insurers from issuing coverage outcomes determined by AI systems, requiring that decisions be made by human providers instead. The bill mandates disclosure requirements and is designated as emergency legislation.", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "disclosures" ], "secs": [ "finserv", "health" ], "date": "2026-02-03", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=sb2038&Session=2600" }, { "id": "m:US-IA:HF2082", "jur": "US-IA", "level": "state", "num": "HF2082", "title": "A bill for an act relating to restrictions on the use of artificial intelligence, and creating a civil cause of action.", "sum": "IA HF2082 restricts the use of artificial intelligence and creates a civil cause of action, likely targeting algorithmic harms or consequential automated decisions. The bill's specific restrictions and liability mechanisms are not detailed in the title alone, but the civil remedy framework suggests…", "stage": "introduced", "cats": [ "anti-discrimination", "consumer-financial" ], "secs": [], "date": "2026-01-15", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=HF2082" }, { "id": "m:US-OK:SB1967", "jur": "US-OK", "level": "state", "num": "SB1967", "title": "Hospital and Medical Services Utilization Review Act; requiring utilization review organization that uses AI to adhere to requirements; prohibiting AI from making certain determinations.…", "sum": "This bill regulates the use of AI by utilization review organizations in hospital and medical services, requiring compliance with specified requirements and prohibiting AI from making certain determinations autonomously. It targets algorithmic decision-making in insurance and medical claim review…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "health" ], "date": "2026-02-03", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=sb1967&Session=2600" }, { "id": "m:US-IA:SSB3039", "jur": "US-IA", "level": "state", "num": "SSB3039", "title": "A bill for an act relating to the use of synthetic media in campaign materials, and making penalties applicable.", "sum": "IA SSB3039 regulates the use of synthetic media (deepfakes) in campaign materials and establishes penalties for violations. The bill directly addresses AI-generated or manipulated media in the context of political speech and elections.", "stage": "introduced", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-01-21", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=SSB3039" }, { "id": "m:US-OK:HB3675", "jur": "US-OK", "level": "state", "num": "HB3675", "title": "Health insurance; review agents; artificial intelligence system; adverse determinations; effective date.", "sum": "OK HB3675 regulates the use of artificial intelligence systems by health insurers in making adverse determinations (claim denials, coverage decisions). The bill establishes requirements for AI review agents and sets rules around how insurers deploy automated decision-making in insurance…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "finserv", "health" ], "date": "2026-02-11", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=hb3675&Session=2600" }, { "id": "m:US-OK:HB3959", "jur": "US-OK", "level": "state", "num": "HB3959", "title": "Technology; Protecting Consumers and Jobs from Predatory Pricing Act; personalized algorithmic pricing; consumer data; food retailers; effective date.", "sum": "OK HB3959 regulates personalized algorithmic pricing by food retailers, prohibiting the use of consumer data to set individualized prices in a manner that disadvantages consumers. The bill aims to protect consumers from discriminatory or predatory pricing practices enabled by automated…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-02-04", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=hb3959&Session=2600" }, { "id": "m:US-NE:LB1083", "jur": "US-NE", "level": "state", "num": "LB1083", "title": "Adopt the Transparency in Artificial Intelligence Risk Management Act, create a fund, and change provisions relating to records which may be withheld from the public", "sum": "NE LB1083 establishes a Transparency in Artificial Intelligence Risk Management Act, creating a dedicated fund and modifying public-records exemptions to govern disclosure and transparency requirements around AI systems and their risks.", "stage": "failed/dead", "cats": [ "governance", "disclosures" ], "secs": [], "date": "2026-04-17", "url": "https://nebraskalegislature.gov/bills/view_bill.php?DocumentID=63049" }, { "id": "m:US-OK:SB2085", "jur": "US-OK", "level": "state", "num": "SB2085", "title": "Artificial intelligence; establishing certain rights; prohibiting certain actions by certain entities; requiring certain actions by certain entities. Effective date.", "sum": "OK SB2085 establishes rights related to artificial intelligence and imposes prohibitions and affirmative obligations on certain entities regarding AI systems. The bill's specific provisions on consequential decisions, transparency, and entity conduct suggest a broad AI governance framework similar…", "stage": "introduced", "cats": [ "anti-discrimination", "disclosures", "consumer-financial" ], "secs": [], "date": "2026-02-03", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=sb2085&Session=2600" }, { "id": "m:US-AZ:HB2592", "jur": "US-AZ", "level": "state", "num": "HB2592", "title": "Artificial intelligence; state agencies; rules", "sum": "AZ HB2592 requires state agencies to adopt rules governing their use of artificial intelligence systems, establishing procedural and oversight requirements for AI deployment across government. The bill creates a framework for state-level AI governance and accountability in agency operations.", "stage": "vetoed", "cats": [ "gov-use" ], "secs": [], "date": "2026-06-19", "url": "https://apps.azleg.gov/BillStatus/BillOverview/84376" }, { "id": "m:US-VA:HB1294", "jur": "US-VA", "level": "state", "num": "HB1294", "title": "Use of artificial intelligence-based tools; covered artificial intelligence, disclosure of use.", "sum": "VA HB1294 requires law-enforcement agencies to disclose any use of covered AI tools in criminal investigations through police reports, with detailed audit trails, draft retention, and timely notification to prosecutors and subjects. The bill also grants the Attorney General and residents…", "stage": "introduced", "cats": [ "gov-use", "public-safety", "disclosures" ], "secs": [], "date": "2026-02-02", "url": "https://lis.virginia.gov/bill-details/20261/HB1294" }, { "id": "m:US-AZ:HB2631", "jur": "US-AZ", "level": "state", "num": "HB2631", "title": "Data centers; tax relief; repeal", "sum": "AZ HB2631 addresses tax relief and potential repeal of tax provisions related to data centers. The bill appears to modify Arizona's tax incentive structure for data-center development and operations.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-22", "url": "https://apps.azleg.gov/BillStatus/BillOverview/84445" }, { "id": "m:US-VA:HB1295", "jur": "US-VA", "level": "state", "num": "HB1295", "title": "Law enforcement; artificial intelligence inventory, civil action.", "sum": "VA HB1295 mandates that all state and local law-enforcement agencies inventory any AI systems they use and publicly disclose that inventory annually by November 1st. The bill creates enforcement mechanisms allowing the Attorney General and private residents to bring civil actions against agencies…", "stage": "introduced", "cats": [ "gov-use", "public-safety" ], "secs": [], "date": "2026-02-02", "url": "https://lis.virginia.gov/bill-details/20261/HB1295" }, { "id": "m:US-OK:HB4083", "jur": "US-OK", "level": "state", "num": "HB4083", "title": "Technology; deployers; AI chatbots; minors; age verification systems; emergency situations; effective date.", "sum": "OK HB4083 regulates AI chatbots accessible to minors by requiring age verification systems and disclosure that users are interacting with AI, with carve-outs for emergency situations.", "stage": "introduced", "cats": [ "minors", "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-02-03", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=hb4083&Session=2600" }, { "id": "m:US-VT:H0714", "jur": "US-VT", "level": "state", "num": "H0714", "title": "An act relating to automated employment decision making and State employees", "sum": "VT H0714 regulates the use of automated employment decision tools by Vermont state government in hiring, promotion, and personnel decisions. The bill likely establishes requirements for transparency, bias testing, and accountability in algorithmic employment systems affecting state workers.", "stage": "introduced", "cats": [ "gov-use", "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-01-16", "url": "https://legislature.vermont.gov/bill/status/2026/H.714" }, { "id": "m:US-AZ:HB2738", "jur": "US-AZ", "level": "state", "num": "HB2738", "title": "Cost responsibility agreements; data centers", "sum": "AZ HB2738 addresses cost responsibility agreements between data centers and utilities or municipalities, likely establishing frameworks for how data centers share infrastructure costs. The bill appears to focus on the financial and operational relationship between large-load facilities and local…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-22", "url": "https://apps.azleg.gov/BillStatus/BillOverview/84585" }, { "id": "m:US-OK:HB4219", "jur": "US-OK", "level": "state", "num": "HB4219", "title": "Data centers; Data Centers Act of 2026; effective date.", "sum": "OK HB4219 enacts the Data Centers Act of 2026, establishing regulatory framework for data-center siting, operations, and utility infrastructure in Oklahoma. The bill addresses large-load energy and grid management tied to data-center deployment.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-09", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=hb4219&Session=2600" }, { "id": "m:US-OK:HB4348", "jur": "US-OK", "level": "state", "num": "HB4348", "title": "Civil proceedings; duties of attorneys and legal advisor; duties concerning exhibits believed to be false, misleading, or manipulated; sanctions or disciplinary action; effective date.", "sum": "OK HB4348 imposes duties on attorneys and legal advisors to disclose and report exhibits they believe to be false, misleading, or manipulated (including deepfakes and synthetic media) in civil proceedings, with sanctions or disciplinary action for violations.", "stage": "introduced", "cats": [ "deepfakes", "disclosures" ], "secs": [ "media" ], "date": "2026-02-03", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=hb4348&Session=2600" }, { "id": "m:US-OK:HB4194", "jur": "US-OK", "level": "state", "num": "HB4194", "title": "Data centers; Data Center Decommissioning Act; proper decommissioning; Oklahoma Corporation Commission; financial assurance; effective date.", "sum": "OK HB4194 establishes a Data Center Decommissioning Act requiring proper decommissioning procedures and financial assurance mechanisms for data centers, overseen by the Oklahoma Corporation Commission. The bill addresses accountability and infrastructure standards for data-center operations.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-03", "url": "https://www.oklegislature.gov/BillInfo.aspx?Bill=hb4194&Session=2600" }, { "id": "m:US-AZ:HB2737", "jur": "US-AZ", "level": "state", "num": "HB2737", "title": "Chatbot regulations; personal data; requirements", "sum": "AZ HB2737 regulates chatbots by requiring disclosure of their nature to users, imposing restrictions on collection and use of personal data, and establishing requirements for data handling and user consent.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial", "privacy" ], "secs": [ "consumer" ], "date": "2026-01-21", "url": "https://apps.azleg.gov/BillStatus/BillOverview/84582" }, { "id": "m:US-AZ:HB2702", "jur": "US-AZ", "level": "state", "num": "HB2702", "title": "Data centers; TPT distribution; solar", "sum": "AZ HB2702 addresses data center policy in Arizona, specifically regulating transaction privilege tax (TPT) distribution and solar energy integration for data centers. The bill appears to focus on fiscal and infrastructure incentives tied to data-center siting and energy sourcing.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-22", "url": "https://apps.azleg.gov/BillStatus/BillOverview/84509" }, { "id": "m:US-RI:H7119", "jur": "US-RI", "level": "state", "num": "H7119", "title": "Requires DOA provide inventory of all state agencies using artificial intelligence (AI); establishes a 13 member permanent commission to monitor the use of AI in state government and makes…", "sum": "This bill requires Rhode Island's Department of Administration to create an inventory of all state agencies using artificial intelligence and establishes a permanent 13-member commission to monitor government AI use, evaluate impacts, and recommend policy.", "stage": "introduced", "cats": [ "governance", "gov-use" ], "secs": [], "date": "2026-04-08", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-AZ:HB2820", "jur": "US-AZ", "level": "state", "num": "HB2820", "title": "Data centers; incentives; repeal; requirements", "sum": "AZ HB2820 establishes incentives, requirements, and regulatory frameworks for data-center development in Arizona, including potential tax incentives, utility infrastructure coordination, and operational standards. The bill addresses siting, energy/grid integration, and economic development tied to…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-26", "url": "https://apps.azleg.gov/BillStatus/BillOverview/84654" }, { "id": "m:US-GA:SB410", "jur": "US-GA", "level": "state", "num": "SB410", "title": "State Sales and Use Taxes; the data center equipment sales and use tax exemption; repeal", "sum": "GA SB410 repeals Georgia's sales and use tax exemption for data center equipment, effectively increasing the tax burden on data center operators and infrastructure investments in the state.", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-10", "url": "https://www.legis.ga.gov/legislation/72285" }, { "id": "m:US-NY:S08928", "jur": "US-NY", "level": "state", "num": "S08928", "title": "Enacts the \"artificial intelligence workforce impact transparency act\"; requires that each notice include a statement as to whether the employment losses described are the result, in whole…", "sum": "NY S08928 requires employers to disclose in layoff notices whether employment losses resulted from AI, automation, or machine-based processes, and establishes a two-year pilot program to track compliance and policy impact.", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-01-16", "url": "https://www.nysenate.gov/legislation/bills/2025/S8928" }, { "id": "m:US-FL:S7030", "jur": "US-FL", "level": "state", "num": "S7030", "title": "Public Records/Investigations by the Department of Legal Affairs", "sum": "FL S7030 creates public-records exemptions for the Department of Legal Affairs' investigations and notifications related to violations involving companion chatbots and bot-related consumer protection harms. The bill shields investigation details from disclosure and requires information to remain…", "stage": "failed/dead", "cats": [ "governance", "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-03-13", "url": "https://www.flsenate.gov/Session/Bill/2026/7030" }, { "id": "m:US-NE:LB1111", "jur": "US-NE", "level": "state", "num": "LB1111", "title": "Require an annual data center load report to the Nebraska Power Review Board, provide powers and duties for public power suppliers, allow and require regulation of data centers, and change…", "sum": "NE LB1111 requires annual data center load reporting to the Nebraska Power Review Board and grants public power suppliers authority to regulate data centers, including provisions on siting and utility impacts. The bill also addresses cryptocurrency mining operations under the same regulatory…", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-17", "url": "https://nebraskalegislature.gov/bills/view_bill.php?DocumentID=63375" }, { "id": "m:US-MS:HB1035", "jur": "US-MS", "level": "state", "num": "HB1035", "title": "MS Future Innovators Act; enact to require high school computer science or CTE with embedded computer science course.", "sum": "MS HB1035 mandates that high school students complete a computer science or CTE course with embedded computer science before graduation, with instruction required to cover fundamental concepts of emerging technologies including artificial intelligence.", "stage": "failed/dead", "cats": [ "education" ], "secs": [], "date": "2026-03-03", "url": "https://billstatus.ls.state.ms.us/2026/pdf/history/HB/HB1035.xml" }, { "id": "m:US-MS:HB1048", "jur": "US-MS", "level": "state", "num": "HB1048", "title": "Artifical intelligence; prohibit use of in professional mental and behavioral health care.", "sum": "MS HB1048 prohibits the use of artificial intelligence for providing professional mental and behavioral health care, and bars AI providers from representing that their systems can deliver such care. The bill allows exceptions only for administrative and supplementary support services and subjects…", "stage": "failed/dead", "cats": [ "healthcare" ], "secs": [ "health" ], "date": "2026-02-03", "url": "https://billstatus.ls.state.ms.us/2026/pdf/history/HB/HB1048.xml" }, { "id": "m:US-MS:HB840", "jur": "US-MS", "level": "state", "num": "HB840", "title": "Criminal offenses; enhance penalties for certain if artificial intelligence was used in the commission of.", "sum": "MS HB840 creates enhanced criminal penalties (6–12 months for misdemeanors, 2+ years for felonies) for defendants who knowingly use AI systems to commit designated offenses, and specifically prohibits creation, distribution, or possession of AI-generated child sexual abuse material (CSAM) that…", "stage": "failed/dead", "cats": [ "deepfakes", "minors" ], "secs": [], "date": "2026-02-03", "url": "https://billstatus.ls.state.ms.us/2026/pdf/history/HB/HB0840.xml" }, { "id": "m:US-HI:SB2212", "jur": "US-HI", "level": "state", "num": "SB2212", "title": "Relating To Artificial Intelligence Literacy Education.", "sum": "HI SB2212 requires Hawaii's Department of Education to develop and implement a statewide AI literacy curriculum for 11th and 12th graders as a graduation requirement, beginning in the 2027–2028 school year. The bill also establishes an advisory council and a three-year grant pilot program to…", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-01-26", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SB&billnumber=2212&year=2026" }, { "id": "m:US-HI:SB2167", "jur": "US-HI", "level": "state", "num": "SB2167", "title": "Relating To The Hawaii Patients' Bill Of Rights And Responsibilities Act.", "sum": "HI SB2167 revises Hawaii's Patients' Bill of Rights to add explicit provisions on automated decision systems in healthcare (likely insurance prior authorization and utilization review), strengthen medical data protection, and expand the insurance commissioner's enforcement authority. The bill…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "privacy" ], "secs": [ "health" ], "date": "2026-01-26", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SB&billnumber=2167&year=2026" }, { "id": "m:US-HI:SB2304", "jur": "US-HI", "level": "state", "num": "SB2304", "title": "Relating To Identity Theft.", "sum": "HI SB2304 expands identity-theft law to explicitly criminalize fraudulent impersonation or false depiction created through artificial intelligence or materially deceptive synthetic media. The bill treats AI-generated deepfakes and synthetic media as instruments of identity fraud.", "stage": "introduced", "cats": [ "deepfakes", "consumer-financial" ], "secs": [ "media" ], "date": "2026-01-30", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SB&billnumber=2304&year=2026" }, { "id": "m:US-HI:SB2076", "jur": "US-HI", "level": "state", "num": "SB2076", "title": "Relating To Publicity Rights.", "sum": "HI SB2076 expands Hawaii's publicity-rights law to explicitly protect individuals from unauthorized use of their digital replicas, adding 'digital replica' to the definition of protected 'likeness.' The bill directly addresses synthetic media and AI-generated representations of real people.", "stage": "introduced", "cats": [ "deepfakes" ], "secs": [ "media" ], "date": "2026-02-06", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SB&billnumber=2076&year=2026" }, { "id": "m:US-HI:SB2281", "jur": "US-HI", "level": "state", "num": "SB2281", "title": "Relating To The Use Of Artificial Intelligence In Health Care.", "sum": "Hawaii SB2281 requires healthcare providers using AI in patient interactions to disclose that fact to patients, and mandates that providers using AI for consequential clinical decisions establish qualified human oversight, conduct performance monitoring, and maintain records. The Department of…", "stage": "introduced", "cats": [ "healthcare", "disclosures", "anti-discrimination" ], "secs": [ "health" ], "date": "2026-02-18", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SB&billnumber=2281&year=2026" }, { "id": "m:US-HI:SB2135", "jur": "US-HI", "level": "state", "num": "SB2135", "title": "Relating To Privacy.", "sum": "HI SB2135 establishes nonconsensual disclosure of intimate or private images as a criminal offense, with enhanced penalties when the offense targets minors or vulnerable adults and proximately causes death. The bill addresses image-based abuse including deepfakes and synthetic intimate media.", "stage": "passed", "cats": [ "deepfakes", "minors", "privacy" ], "secs": [ "consumer", "media" ], "date": "2026-07-07", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SB&billnumber=2135&year=2026" }, { "id": "m:US-GA:HB1012", "jur": "US-GA", "level": "state", "num": "HB1012", "title": "Local government; construction or development of new data centers for a specified time; prohibit", "sum": "GA HB1012 prohibits the construction or development of new data centers in Georgia for a specified time period, with limited exceptions. The bill amends local government law to restrict data-center siting.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-28", "url": "https://www.legis.ga.gov/legislation/72319" }, { "id": "m:US-VA:SB384", "jur": "US-VA", "level": "state", "num": "SB384", "title": "Artificial intelligence; framework for person/entity acting as an independent verification org.", "sum": "Directs Virginia's Joint Commission on Technology and Science to evaluate the feasibility of establishing a framework for independent verification organizations that assess AI models and applications for adherence to safety standards aimed at preventing personal injury and property damage. The…", "stage": "passed", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-04-08", "url": "https://lis.virginia.gov/bill-details/20261/SB384" }, { "id": "m:US-VA:SB393", "jur": "US-VA", "level": "state", "num": "SB393", "title": "Virginia's Great Outdoors Act; established, creates data center land conservation tax.", "sum": "Virginia's Great Outdoors Act creates a $3-per-square-foot tax on data center facilities (effective 2027) and directs at least $250 million of revenues to land preservation, tribal funds, battlefield preservation, and farmland/forestland conservation programs.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-10", "url": "https://lis.virginia.gov/bill-details/20261/SB393" }, { "id": "m:US-VA:SB336", "jur": "US-VA", "level": "state", "num": "SB336", "title": "Tier 2 emergency generators; SCC shall evaluate impact of requiring data centers to limit use, etc.", "sum": "VA SB336 directs the State Corporation Commission to evaluate the impact of requiring data centers to limit use of Tier 2 emergency generators and prioritize Tier 4 equivalent or better generators, with a report due October 15, 2026. The bill addresses environmental and grid-reliability concerns…", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-06", "url": "https://lis.virginia.gov/bill-details/20261/SB336" }, { "id": "m:US-VA:SB394", "jur": "US-VA", "level": "state", "num": "SB394", "title": "Artificial intelligence; use of systems for student instruction.", "sum": "VA SB394 requires the Department of Education to compile guidance on safe, ethical, and equitable use of AI systems in K–12 instruction and establish a pilot program to fund and evaluate innovative AI applications in schools through 2030. School boards must adopt policies aligned with the…", "stage": "passed", "cats": [ "gov-use", "education" ], "secs": [], "date": "2026-04-13", "url": "https://lis.virginia.gov/bill-details/20261/SB394" }, { "id": "m:US-VA:SB365", "jur": "US-VA", "level": "state", "num": "SB365", "title": "Fostering Access, Innovation, and Responsibility in Artificial Intelligence Act; established.", "sum": "Virginia's FAIR AI Act requires developers of base AI models to disclose key elements in terms of service, establishes an enforcement fund for misuse and bias violations, and limits legal defenses for AI systems that cause harm. The bill takes effect July 1, 2027.", "stage": "introduced", "cats": [ "disclosures", "anti-discrimination", "frontier" ], "secs": [], "date": "2026-02-04", "url": "https://lis.virginia.gov/bill-details/20261/SB365" }, { "id": "m:US-VA:SB466", "jur": "US-VA", "level": "state", "num": "SB466", "title": "Electric utilities; cost recovery, costs substantially related to serving data center customers.", "sum": "VA SB466 prohibits electric utilities from recovering the costs of constructing or extending electric distribution infrastructure that primarily serves data-center loads from other customer classes, requiring data-center operators to bear those infrastructure costs directly.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-12", "url": "https://lis.virginia.gov/bill-details/20261/SB466" }, { "id": "m:US-WV:HB4509", "jur": "US-WV", "level": "state", "num": "HB4509", "title": "Relating to restoring local jurisdiction to state political subdivisions over certain electric power facilities.", "sum": "WV HB4509 restores local government jurisdiction over micro-grid districts and certified high-impact data centers, reversing state preemption and allowing counties and municipalities to regulate these facilities locally.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-19", "url": "http://www.wvlegislature.gov/Bill_Status/Bills_history.cfm?input=4509&year=2026&sessiontype=RS&btype=bill" }, { "id": "m:US-WV:HB4496", "jur": "US-WV", "level": "state", "num": "HB4496", "title": "To force any media/internet creator providing artificial intelligence created videos to have an identifying marker that allows viewers to know that the video is not real.", "sum": "WV HB4496 requires that artificially generated videos be marked with an identifying label to disclose to viewers that the content is not authentic. The bill aims to protect West Virginians by ensuring transparency around AI-created media.", "stage": "introduced", "cats": [ "deepfakes", "disclosures" ], "secs": [ "media" ], "date": "2026-01-19", "url": "http://www.wvlegislature.gov/Bill_Status/Bills_history.cfm?input=4496&year=2026&sessiontype=RS&btype=bill" }, { "id": "m:US-VA:SB465", "jur": "US-VA", "level": "state", "num": "SB465", "title": "Retail Sales and Use Tax; exemption for data centers.", "sum": "VA SB465 creates a sales and use tax exemption for data center operators, contingent on meeting energy efficiency standards (power usage effectiveness ≤1.2 or top 15% efficiency comparable) and procuring 90% carbon-free renewable energy by January 1, 2028.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-17", "url": "https://lis.virginia.gov/bill-details/20261/SB465" }, { "id": "m:US-MS:SB2294", "jur": "US-MS", "level": "state", "num": "SB2294", "title": "Education; institute initiatives to promote literacy in math, reading, finance, computer science, and civics.", "sum": "MS SB2294 establishes statewide literacy, math, finance, and civics initiatives while requiring all public high school students to complete at least one computer science or CTE course that includes instruction on emerging technologies such as artificial intelligence, effective with the 2029–2030…", "stage": "passed", "cats": [ "education" ], "secs": [], "date": "2026-04-08", "url": "https://billstatus.ls.state.ms.us/2026/pdf/history/SB/SB2294.xml" }, { "id": "m:US-VA:SB585", "jur": "US-VA", "level": "state", "num": "SB585", "title": "Virginia Fair Housing Law, et al.; personalized algorithmic pricing disclosures, prohibitions.", "sum": "VA SB585 prohibits landlords and housing platforms from using algorithmic pricing or protected-class data to discriminate in rental decisions, and requires disclosure of personalized algorithmic pricing in residential leasing. It also bars landlords from using software or algorithmic tools to…", "stage": "introduced", "cats": [ "anti-discrimination", "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-02-04", "url": "https://lis.virginia.gov/bill-details/20261/SB585" }, { "id": "m:US-VA:SB500", "jur": "US-VA", "level": "state", "num": "SB500", "title": "Health insurance; prior authorization for health care services.", "sum": "VA SB500 regulates health insurance prior authorization by requiring faster response times and establishing provider approval-rate tiers. Crucially, it mandates that insurers disclose to providers and enrollees when artificial-intelligence based tools were used to deny a prior authorization request.", "stage": "introduced", "cats": [ "healthcare", "disclosures" ], "secs": [ "finserv", "health" ], "date": "2026-01-26", "url": "https://lis.virginia.gov/bill-details/20261/SB500" }, { "id": "m:US-VA:SB586", "jur": "US-VA", "level": "state", "num": "SB586", "title": "Health carriers; use of artificial intelligence, disclosures.", "sum": "Requires health carriers to disclose their use of artificial intelligence in claims management to the state insurance regulator and to enrollees/providers when AI is used to deny coverage, with a mandatory appeal process. The bill mandates submission of all AI decision-making information to…", "stage": "engrossed", "cats": [ "healthcare", "disclosures", "anti-discrimination" ], "secs": [ "finserv", "health" ], "date": "2026-02-23", "url": "https://lis.virginia.gov/bill-details/20261/SB586" }, { "id": "m:US-VA:SB553", "jur": "US-VA", "level": "state", "num": "SB553", "title": "Certain data from water users; water use consumption for domestic, etc., purposes, data centers.", "sum": "VA SB553 requires water users who provide water to data centers to report separately the volume of potable and reclaimed water supplied to data centers with air permits, as part of regular state water withdrawal reporting. The bill mandates disaggregated water-consumption tracking for data center…", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-13", "url": "https://lis.virginia.gov/bill-details/20261/SB553" }, { "id": "m:US-VA:SB552", "jur": "US-VA", "level": "state", "num": "SB552", "title": "Siting of large data centers; site assessment, standards, civil penalties.", "sum": "VA SB552 establishes siting and environmental-review standards for large data centers in Virginia, requiring applicants to conduct site assessments covering noise, light, water, air, and traffic impacts, with enforcement by the Department of Environmental Quality and Attorney General. The bill…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-02", "url": "https://lis.virginia.gov/bill-details/20261/SB552" }, { "id": "m:US-VA:SB521", "jur": "US-VA", "level": "state", "num": "SB521", "title": "Data centers; rainwater harvesting systems.", "sum": "VA SB521 requires new or substantially expanded data centers to install rainwater harvesting systems capturing runoff from at least 30% of roof surface area and use it for non-potable needs including cooling. The bill mandates certification of system designers and inspectors, and authorizes state…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-03", "url": "https://lis.virginia.gov/bill-details/20261/SB521" }, { "id": "m:US-UT:HB0286", "jur": "US-UT", "level": "state", "num": "HB0286", "title": "Artificial Intelligence Transparency Amendments", "sum": "UT HB0286 mandates transparency requirements for artificial intelligence systems, likely requiring disclosure of AI use, training data, or algorithmic decision-making to end users or regulators.", "stage": "failed/dead", "cats": [ "disclosures" ], "secs": [], "date": "2026-03-06", "url": "https://le.utah.gov/~2026/bills/static/HB0286.html" }, { "id": "m:US-MS:SB2354", "jur": "US-MS", "level": "state", "num": "SB2354", "title": "Artificial Intelligence Fraud and Accountability Act; enact.", "sum": "MS SB2354 creates a civil cause of action and liability framework for AI fraud, defining it as the knowing development or use of AI systems for fraudulent purposes. The bill allows injured parties to seek damages, including punitive damages for willful violations, and to obtain injunctive relief…", "stage": "failed/dead", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [], "date": "2026-02-03", "url": "https://billstatus.ls.state.ms.us/2026/pdf/history/SB/SB2354.xml" }, { "id": "m:US-WA:SB6231", "jur": "US-WA", "level": "state", "num": "SB6231", "title": "Revised for engrossed: Removing a tax exemption for the replacement of equipment for data centers.", "sum": "WA SB6231 removes a tax exemption for the replacement of equipment used in data centers, effectively increasing the tax burden on data-center operators for hardware refresh cycles. This is direct tax-policy regulation of data-center infrastructure and operational costs.", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-01", "url": "https://app.leg.wa.gov/billsummary?BillNumber=6231&Year=2025&Initiative=false" }, { "id": "m:US-MS:SB2429", "jur": "US-MS", "level": "state", "num": "SB2429", "title": "Artificial Intelligence in Education Task Force Act; enact.", "sum": "Establishes a task force to evaluate potential applications of artificial intelligence in K-12 education and develop policy recommendations for responsible and effective use by students and educators. The task force will make recommendations on incorporating AI into educational standards and…", "stage": "failed/dead", "cats": [ "governance", "education" ], "secs": [], "date": "2026-02-03", "url": "https://billstatus.ls.state.ms.us/2026/pdf/history/SB/SB2429.xml" }, { "id": "m:US-NE:LB1131", "jur": "US-NE", "level": "state", "num": "LB1131", "title": "Adopt the Domestic Violence and Human Trafficking Service Providers Tax Credit Act and eliminate personal property tax and sales and use tax exemptions relating to data centers", "sum": "NE LB1131 eliminates personal property tax and sales/use tax exemptions for data centers in Nebraska, restructuring tax incentives for data-center infrastructure. The bill also includes a separate domestic violence and human trafficking tax credit.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-17", "url": "https://nebraskalegislature.gov/bills/view_bill.php?DocumentID=62766" }, { "id": "m:US-PA:HB2151", "jur": "US-PA", "level": "state", "num": "HB2151", "title": "Providing for data center ordinance assistance.", "sum": "PA HB2151 amends municipal law to provide assistance and frameworks for local governments adopting data center ordinances. The bill facilitates local regulation of data center siting, development, and operations.", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-23", "url": "https://www.palegis.us/legislation/bills/2025/hb2151" }, { "id": "m:US-WV:HCR4", "jur": "US-WV", "level": "state", "num": "HCR4", "title": "Requesting the Joint Committee on Technology & Infrastructure to establish a Genesis Working Group to coordinate statewide planning for artificial intelligence, high-performance computing,…", "sum": "This resolution requests the establishment of a Genesis Working Group under the Joint Committee on Technology & Infrastructure to coordinate statewide planning for artificial intelligence, high-performance computing, digital infrastructure, and energy-based economic development. The working group…", "stage": "introduced", "cats": [ "governance", "data-centers" ], "secs": [ "infra" ], "date": "2026-01-30", "url": "http://www.wvlegislature.gov/Bill_Status/Resolution_History.cfm?year=2026&sessiontype=RS&input4=4&billtype=CR&houseorig=H&btype=res" }, { "id": "m:US-PA:HB2150", "jur": "US-PA", "level": "state", "num": "HB2150", "title": "Providing for annual reporting of energy consumption and water consumption by data centers; and imposing a penalty.", "sum": "PA HB2150 requires data centers to file annual reports on energy and water consumption and establishes penalties for non-compliance. This is direct regulation of data-center infrastructure operations tied to resource accountability.", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-23", "url": "https://www.palegis.us/legislation/bills/2025/hb2150" }, { "id": "m:US-KS:HB2479", "jur": "US-KS", "level": "state", "num": "HB2479", "title": "Authorizing electronic monitoring with victim notification as a condition of release prior to trial for certain offenders charged with a domestic violence offense, domestic battery,…", "sum": "KS HB2479 expands criminal penalties for non-consensual image-based abuse, including deepfakes and synthetic intimate imagery, by modifying blackmail statutes to cover threatened dissemination of nude or sexually explicit recordings or images of an identifiable person. It also tightens…", "stage": "passed", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-04-09", "url": "https://kslegislature.gov/li/b2025_26/measures/hb2479/" }, { "id": "m:US-OH:HB650", "jur": "US-OH", "level": "state", "num": "HB650", "title": "Establish Frontier Technologies and Quantum Computing Commission", "sum": "Establishes a state Frontier Technologies and Quantum Computing Commission to study and advise on emerging technologies including quantum computing and related advanced computing systems. The commission will examine policy, regulatory, and infrastructure implications of frontier technology…", "stage": "engrossed", "cats": [ "governance", "frontier" ], "secs": [ "infra" ], "date": "2026-03-25", "url": "https://www.legislature.ohio.gov/legislation/136/hb650" }, { "id": "m:US-VT:H0727", "jur": "US-VT", "level": "state", "num": "H0727", "title": "An act relating to sustainable data center deployment", "sum": "VT H0727 establishes requirements for sustainable data center deployment in Vermont, addressing siting, energy efficiency, water use, and grid impacts of large-load computing infrastructure.", "stage": "vetoed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-29", "url": "https://legislature.vermont.gov/bill/status/2026/H.727" }, { "id": "m:US-AL:HB291", "jur": "US-AL", "level": "state", "num": "HB291", "title": "Crimes and offenses; crime of distribution of materially deceptive media established, permanent injunctive relief authorized", "sum": "AL HB291 establishes a new crime for distribution of materially deceptive media (deepfakes and synthetic content) and authorizes permanent injunctive relief. The bill targets false or manipulated audiovisual content created or altered to deceive.", "stage": "introduced", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-01-20", "url": "https://alison.legislature.state.al.us/bill-search" }, { "id": "m:US-WA:SB6254", "jur": "US-WA", "level": "state", "num": "SB6254", "title": "Leveraging artificial intelligence to improve Washington's regulatory climate through streamlining language in rules and regulatory guidance documents.", "sum": "WA SB6254 directs Washington state to use artificial intelligence to streamline and simplify the language in regulatory rules and guidance documents. The bill is about government use of AI as a tool to improve regulatory clarity and accessibility.", "stage": "introduced", "cats": [ "gov-use" ], "secs": [], "date": "2026-01-21", "url": "https://app.leg.wa.gov/billsummary?BillNumber=6254&Year=2025&Initiative=false" }, { "id": "m:US-MS:HB1242", "jur": "US-MS", "level": "state", "num": "HB1242", "title": "Mississippi Dyslexia Generative Artificial Intelligence Education and Workforce Development Act; create.", "sum": "MS HB1242 establishes a state-funded, open-access generative AI system paired with dyslexia curriculum for use in schools, correctional facilities, workforce training, and adult education. The bill designates implementation partners, authorizes pilot programs, and requires reporting and evaluation…", "stage": "failed/dead", "cats": [ "gov-use", "education" ], "secs": [], "date": "2026-02-03", "url": "https://billstatus.ls.state.ms.us/2026/pdf/history/HB/HB1242.xml" }, { "id": "m:US-HI:HB1676", "jur": "US-HI", "level": "state", "num": "HB1676", "title": "Relating To Artificial Intelligence.", "sum": "HI HB1676 establishes a task force to develop guidelines and recommendations for AI use in Hawaii's public K–12 education system, with an appropriation to support the effort.", "stage": "engrossed", "cats": [ "governance", "education" ], "secs": [], "date": "2026-03-23", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HB&billnumber=1676&year=2026" }, { "id": "m:US-HI:HB1681", "jur": "US-HI", "level": "state", "num": "HB1681", "title": "Relating To Privacy.", "sum": "HI HB1681 establishes criminal penalties for nonconsensual distribution of intimate images, which includes deepfakes and synthetic intimate media created without consent.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-02-10", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HB&billnumber=1681&year=2026" }, { "id": "m:US-CA:AB1609", "jur": "US-CA", "level": "state", "num": "AB1609", "title": "Customer service chatbots.", "sum": "CA AB1609 adds new requirements to the Business and Professions Code governing customer service chatbots, requiring disclosure and transparency rules for AI-powered conversational systems. The bill establishes obligations for businesses deploying chatbots to clearly disclose their use of artificial…", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-08-03", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB1609" }, { "id": "m:US-WV:HB4682", "jur": "US-WV", "level": "state", "num": "HB4682", "title": "Fourth Amendment Restoration Act", "sum": "WV HB4682 prohibits law-enforcement officers and local officials from using, implementing, or adopting specified surveillance and artificial intelligence technologies. The bill aims to restore Fourth Amendment protections by restricting deployment of AI-enabled surveillance systems by government…", "stage": "introduced", "cats": [ "gov-use", "public-safety", "privacy" ], "secs": [], "date": "2026-01-21", "url": "http://www.wvlegislature.gov/Bill_Status/Bills_history.cfm?input=4682&year=2026&sessiontype=RS&btype=bill" }, { "id": "m:US-WV:HB4683", "jur": "US-WV", "level": "state", "num": "HB4683", "title": "Prevent depletion of groundwater and aquifers", "sum": "WV HB4683 protects groundwater and aquifer supplies from depletion by restricting data-center cooling water use. The bill directly addresses infrastructure policy for large-load compute facilities, a tracked vertical regardless of AI motivation.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-21", "url": "http://www.wvlegislature.gov/Bill_Status/Bills_history.cfm?input=4683&year=2026&sessiontype=RS&btype=bill" }, { "id": "m:US-NE:LB1185", "jur": "US-NE", "level": "state", "num": "LB1185", "title": "Adopt the Conversational Artificial Intelligence Safety Act", "sum": "NE LB1185 establishes a Conversational Artificial Intelligence Safety Act imposing safety, transparency, and accountability requirements on developers and deployers of conversational AI systems. The bill addresses chatbot disclosures, training practices, and liability frameworks for consumer harms.", "stage": "failed/dead", "cats": [ "frontier", "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-04-17", "url": "https://nebraskalegislature.gov/bills/view_bill.php?DocumentID=63873" }, { "id": "m:US-TN:SB1832", "jur": "US-TN", "level": "state", "num": "SB1832", "title": "AN ACT to amend Tennessee Code Annotated, Title 4; Title 8 and Title 68, relative to high performance computing facilities.", "sum": "Requires high-performance computing (HPC) facility operators to dedicate 50% of computing output to public benefit, report annual energy consumption and carbon footprint, and undergo internal and external compliance audits. The bill regulates HPC infrastructure siting, energy use, and…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-10", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB1832&ga=114" }, { "id": "m:US-RI:H7190", "jur": "US-RI", "level": "state", "num": "H7190", "title": "Promotes transparency and accountability in the use of artificial intelligence by health insurers to manage coverage and claims.", "sum": "This bill requires health insurers to provide transparency and accountability in their use of artificial intelligence for coverage decisions and claims management. It likely mandates disclosure of AI use, algorithmic impact assessments, and safeguards against discriminatory automated…", "stage": "introduced", "cats": [ "healthcare", "disclosures", "anti-discrimination" ], "secs": [ "finserv", "health" ], "date": "2026-03-03", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-TN:HB1847", "jur": "US-TN", "level": "state", "num": "HB1847", "title": "AN ACT to amend Tennessee Code Annotated, Title 5; Title 6; Title 7; Title 13 and Title 65, relative to data centers.", "sum": "TN HB1847 prohibits municipalities and electric utilities from paying for or absorbing the cost of electrical infrastructure needed to serve data centers, effectively requiring data-center operators to fund their own grid connection and upgrades. This is squarely within AI infrastructure policy, as…", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-18", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB1847&ga=114" }, { "id": "m:US-PA:HB2153", "jur": "US-PA", "level": "state", "num": "HB2153", "title": "In taxation by school districts, further providing for definitions, providing for disposition of data center property tax revenue and further providing for school district tax notices.", "sum": "PA HB2153 amends the Taxpayer Relief Act to specifically address property-tax treatment and revenue disposition for data centers in Pennsylvania school districts. The bill establishes tax rules and notice requirements tied to data center property.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-21", "url": "https://www.palegis.us/legislation/bills/2025/hb2153" }, { "id": "m:US-NY:A09581", "jur": "US-NY", "level": "state", "num": "A09581", "title": "Requires covered businesses to annually report to the department of labor regarding the impact of artificial intelligence on hiring and the nature of artificial intelligence use for the…", "sum": "NY A09581 requires covered businesses to annually report to the Department of Labor on their use of AI in hiring and its documented impact on hiring outcomes; the Department must then file a public annual report synthesizing these findings, with penalties for non-compliance.", "stage": "engrossed", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-06-04", "url": "https://www.nysenate.gov/legislation/bills/2025/A9581" }, { "id": "m:US-MS:HB1605", "jur": "US-MS", "level": "state", "num": "HB1605", "title": "MS Artifical Intelligence and Stem Eduaction Act; create.", "sum": "MS HB1605 authorizes the use of AI to support STEM instruction in public schools, creating pilot programs for AI-assisted learning, teacher support, and career pathways. The bill includes safeguards for student data privacy.", "stage": "failed/dead", "cats": [ "education", "minors", "privacy" ], "secs": [], "date": "2026-02-03", "url": "https://billstatus.ls.state.ms.us/2026/pdf/history/HB/HB1605.xml" }, { "id": "m:US-WA:SB6284", "jur": "US-WA", "level": "state", "num": "SB6284", "title": "Providing consumer protections for artificial intelligence systems.", "sum": "WA SB6284 establishes consumer protections for artificial intelligence systems, likely covering transparency requirements, algorithmic fairness, and disclosure obligations for AI-driven automated decision-making affecting consumers. The bill's focus on 'consumer protections' suggests it targets…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination", "disclosures" ], "secs": [ "consumer" ], "date": "2026-02-06", "url": "https://app.leg.wa.gov/billsummary?BillNumber=6284&Year=2025&Initiative=false" }, { "id": "m:US-KY:HB455", "jur": "US-KY", "level": "state", "num": "HB455", "title": "AN ACT relating to artificial intelligence and declaring an emergency.", "sum": "KY HB455 restricts use of AI by licensed therapy and psychotherapy professionals in Kentucky, prohibiting AI-assisted supplementary support in recorded sessions and requiring disclosure/transparency around any AI use. It also prohibits unlicensed parties from advertising therapy services and grants…", "stage": "engrossed", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-02-24", "url": "https://apps.legislature.ky.gov/record/26RS/hb455.html" }, { "id": "m:US-NY:A09641", "jur": "US-NY", "level": "state", "num": "A09641", "title": "Prohibits algorithmic wage-setting; provides for exceptions; provides for penalties for violation; creates a private right of action.", "sum": "NY A09641 prohibits the use of algorithms to set wages, with exceptions, and creates a private right of action for violations. The bill imposes penalties on employers who use automated decision-making systems to determine or adjust worker compensation.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-01-21", "url": "https://www.nysenate.gov/legislation/bills/2025/A9641" }, { "id": "m:US-NY:A09638", "jur": "US-NY", "level": "state", "num": "A09638", "title": "Prohibits the use of a wage-fixing algorithm in combination with personal or behavioral data to set or recommend wages or compensation; defines terms; establishes penalties for violations…", "sum": "NY A09638 prohibits the use of wage-fixing algorithms combined with personal or behavioral data to set or recommend employee compensation. The bill establishes penalties for violations of this prohibition.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-01-21", "url": "https://www.nysenate.gov/legislation/bills/2025/A9638" }, { "id": "m:US-LA:SB5", "jur": "US-LA", "level": "state", "num": "SB5", "title": "Provides for the regulation of mental health chatbots that use artificial intelligence technology. (gov sig)", "sum": "LA SB5 establishes regulatory requirements for mental health chatbots that use artificial intelligence technology. The bill creates a framework governing how these AI systems operate in the mental health and psychotherapy context.", "stage": "introduced", "cats": [ "healthcare", "consumer-financial" ], "secs": [ "health" ], "date": "2026-03-09", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=SB5&sbi=y" }, { "id": "m:US-NY:A09654", "jur": "US-NY", "level": "state", "num": "A09654", "title": "Enacts the New York Artificial Intelligence Civil Rights Act establishing protections for individual rights with respect to computational algorithms; establishes protections against the use…", "sum": "NY A09654 establishes the New York Artificial Intelligence Civil Rights Act, prohibiting developers and deployers from using algorithms that discriminate or cause disparate impact in consequential decisions (employment, banking, healthcare, criminal justice, public accommodations, government…", "stage": "introduced", "cats": [ "anti-discrimination", "disclosures" ], "secs": [ "finserv", "health", "hr" ], "date": "2026-01-21", "url": "https://www.nysenate.gov/legislation/bills/2025/A9654" }, { "id": "m:US-NY:A09601", "jur": "US-NY", "level": "state", "num": "A09601", "title": "Prohibits the use of automated systems to make employment decisions unless there is a meaningful human review of the output of such automated system prior to the final employment decision;…", "sum": "NY A09601 requires employers to obtain meaningful human review before making final employment decisions using automated systems, and mandates notification to job applicants that such systems are in use. Applicants who receive adverse decisions may request human review of the automated determination.", "stage": "introduced", "cats": [ "hiring", "disclosures" ], "secs": [ "hr" ], "date": "2026-01-21", "url": "https://www.nysenate.gov/legislation/bills/2025/A9601" }, { "id": "m:US-TN:HB1866", "jur": "US-TN", "level": "state", "num": "HB1866", "title": "AN ACT to amend Tennessee Code Annotated, Title 8, Chapter 27; Title 56 and Title 71, relative to health insurance.", "sum": "TN HB1866 creates the 'Regulate Artificial Intelligence in Health Care Act,' amending Tennessee insurance and health-care law to impose substantive rules on AI and automated decision-making systems used in health insurance coverage, utilization review, and clinical settings.", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "finserv", "health" ], "date": "2026-03-11", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB1866&ga=114" }, { "id": "m:US-MS:HB1504", "jur": "US-MS", "level": "state", "num": "HB1504", "title": "Mississippians' Right to Name, Likeness and Voice Act; enact.", "sum": "MS HB1504 establishes a property right in individuals' names, likenesses, and voices, and imposes liability on persons or entities who infringe these rights—including through commercial use or AI-generated synthetic reproductions. The bill includes a First Amendment defense and clarifies its…", "stage": "failed/dead", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-02-03", "url": "https://billstatus.ls.state.ms.us/2026/pdf/history/HB/HB1504.xml" }, { "id": "m:US-CA:SB903", "jur": "US-CA", "level": "state", "num": "SB903", "title": "Mental health professionals: artificial intelligence.", "sum": "CA SB903 adds regulatory requirements for mental health professionals using artificial intelligence in clinical practice, likely requiring disclosure, oversight, and standards for AI-assisted psychotherapy and mental-health decision-making.", "stage": "introduced", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-08-05", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB903" }, { "id": "m:US-HI:HB1782", "jur": "US-HI", "level": "state", "num": "HB1782", "title": "Relating To Artificial Intelligence For The Protection Of Minors.", "sum": "HI HB1782 establishes safeguards, protections, oversight, and penalties governing interactions between minors and AI companion systems or conversational AI services. The bill creates a regulatory framework with effective date of January 1, 2027 to protect children from risks associated with AI…", "stage": "engrossed", "cats": [ "minors", "disclosures" ], "secs": [ "consumer" ], "date": "2026-04-23", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HB&billnumber=1782&year=2026" }, { "id": "m:US-HI:HB1787", "jur": "US-HI", "level": "state", "num": "HB1787", "title": "Relating To Health Care.", "sum": "HB1787 restricts health insurers' use of AI, algorithms, and software tools to make autonomous decisions in utilization review for health insurance claims. It requires a licensed health care provider to review and approve all adverse actions issued by a health carrier.", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "finserv", "health" ], "date": "2026-01-26", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HB&billnumber=1787&year=2026" }, { "id": "m:US-TN:SB1998", "jur": "US-TN", "level": "state", "num": "SB1998", "title": "AN ACT to amend Tennessee Code Annotated, Title 47 and Title 53, relative to consumer protection.", "sum": "TN SB1998 prohibits food retail establishments from using personalized algorithmic pricing and requires nondigital price displays. The bill directly regulates automated decision-making in consumer pricing contexts.", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-03-10", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB1998&ga=114" }, { "id": "m:US-TN:SB1999", "jur": "US-TN", "level": "state", "num": "SB1999", "title": "AN ACT to amend Tennessee Code Annotated, Title 7 and Title 65, relative to energy.", "sum": "TN SB1999 amends Tennessee energy law to establish tariff and accountability rules specifically for data centers and AI infrastructure. The bill is titled the 'Data Center, Artificial Intelligence, and Clean Transition Tariff Accountability Act' and modifies utility regulation (Title 65) and…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-10", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB1999&ga=114" }, { "id": "m:US-TN:SB2010", "jur": "US-TN", "level": "state", "num": "SB2010", "title": "AN ACT to amend Tennessee Code Annotated, Title 8, Chapter 27; Title 56 and Title 71, relative to health insurance.", "sum": "Tennessee's 'Regulate Artificial Intelligence in Health Care Act' establishes rules governing the use of AI and automated decision-making systems in health insurance, including utilization review, coverage determinations, and related healthcare decisions. The bill likely imposes transparency,…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "disclosures" ], "secs": [ "finserv", "health" ], "date": "2026-04-07", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB2010&ga=114" }, { "id": "m:US-UT:HB0320", "jur": "US-UT", "level": "state", "num": "HB0320", "title": "Office of Artificial Intelligence Policy Amendments", "sum": "This bill amends Utah's Office of Artificial Intelligence Policy, likely modifying the structure, mandate, or operational authority of the state's AI governance body. The bill substantively addresses government AI policy administration and institutional framework.", "stage": "passed", "cats": [ "governance" ], "secs": [], "date": "2026-03-18", "url": "https://le.utah.gov/~2026/bills/static/HB0320.html" }, { "id": "m:US-TN:HB1898", "jur": "US-TN", "level": "state", "num": "HB1898", "title": "AN ACT to amend Tennessee Code Annotated, Title 4; Title 10, Chapter 7; Title 47; Title 58 and Title 68, relative to artificial intelligence.", "sum": "TN HB1898 enacts the 'Artificial Intelligence Public Safety and Child Protection Transparency Act,' amending multiple Tennessee code titles to establish transparency and safety requirements for AI systems, with particular focus on child protection and public-safety applications.", "stage": "engrossed", "cats": [ "minors", "public-safety", "disclosures" ], "secs": [ "consumer" ], "date": "2026-04-20", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB1898&ga=114" }, { "id": "m:US-ID:S1227", "jur": "US-ID", "level": "state", "num": "S1227", "title": "Adds to existing law to establish provisions regarding generative artificial intelligence in public education.", "sum": "ID S1227 establishes provisions governing the use of generative AI in Idaho public schools and educational settings. The bill addresses how schools may deploy, regulate, or integrate generative AI tools in teaching, learning, and student-safety contexts.", "stage": "passed", "cats": [ "education", "minors" ], "secs": [], "date": "2026-03-19", "url": "https://legislature.idaho.gov/sessioninfo/2026/legislation/S1227/" }, { "id": "m:US-TN:SB2071", "jur": "US-TN", "level": "state", "num": "SB2071", "title": "AN ACT to amend Tennessee Code Annotated, Title 47, relative to programmable money.", "sum": "This bill prohibits requiring use of programmable money and bars issuers from denying transactions based on certain factors; issuers must provide reasons for transaction denials upon request, with violations treated as Consumer Protection Act breaches.", "stage": "introduced", "cats": [ "anti-discrimination", "consumer-financial" ], "secs": [ "finserv" ], "date": "2026-04-07", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB2071&ga=114" }, { "id": "m:US-AL:HB325", "jur": "US-AL", "level": "state", "num": "HB325", "title": "AI chatbots; unfair or deceptive trade practice for failing to notify consumer about AI chatbot; private right of action and enforcement provided for", "sum": "AL HB325 requires businesses using AI chatbots to notify consumers that they are interacting with an AI system, and designates failure to do so as an unfair or deceptive trade practice. The bill provides private right of action and enforcement mechanisms for violations.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-01-22", "url": "https://alison.legislature.state.al.us/bill-search" }, { "id": "m:US-AL:HJR51", "jur": "US-AL", "level": "state", "num": "HJR51", "title": "Artificial Intelligence and Children's Internet Safety Study Commission, created", "sum": "Establishes a study commission to examine artificial intelligence and children's internet safety, with a focus on how AI systems affect minors online. The commission will investigate risks and recommend policy solutions.", "stage": "passed", "cats": [ "governance", "minors" ], "secs": [ "consumer" ], "date": "2026-03-10", "url": "https://alison.legislature.state.al.us/bill-search" }, { "id": "m:US-MS:HB1717", "jur": "US-MS", "level": "state", "num": "HB1717", "title": "Mississippi Medical Judgement Protection Act; create.", "sum": "MS HB1717 requires healthcare providers and facilities using AI that materially contributes to diagnosis, treatment, or clinical decisions to disclose that use in the medical record and obtain licensed clinician review and approval. It also prohibits automated denial or delay of insurance…", "stage": "failed/dead", "cats": [ "healthcare", "disclosures", "anti-discrimination" ], "secs": [ "health" ], "date": "2026-02-03", "url": "https://billstatus.ls.state.ms.us/2026/pdf/history/HB/HB1717.xml" }, { "id": "m:US-IA:HSB609", "jur": "US-IA", "level": "state", "num": "HSB609", "title": "A bill for an act modifying the duties of the workforce development board, state board of education, and department of education related to cyber and artificial intelligence.(See HF 2528.)", "sum": "This bill modifies the duties of Iowa's workforce development board, state board of education, and department of education to address cyber and artificial intelligence education and training. It appears to establish or expand AI curriculum, literacy, and workforce-development initiatives across…", "stage": "introduced", "cats": [ "gov-use", "education" ], "secs": [], "date": "2026-02-16", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=HSB609" }, { "id": "m:US-MS:HB1720", "jur": "US-MS", "level": "state", "num": "HB1720", "title": "Artificial intelligence; prohibit use in provision of professional mental and behaioral health care.", "sum": "MS HB1720 prohibits the use of artificial intelligence in the provision of professional mental and behavioral health care services by licensed providers, with a narrow carve-out for administrative and supplementary support uses. The bill subjects violating licensees to disciplinary action by their…", "stage": "failed/dead", "cats": [ "healthcare" ], "secs": [ "health" ], "date": "2026-02-03", "url": "https://billstatus.ls.state.ms.us/2026/pdf/history/HB/HB1720.xml" }, { "id": "m:US-TN:HB1946", "jur": "US-TN", "level": "state", "num": "HB1946", "title": "AN ACT to amend Tennessee Code Annotated, Title 29; Title 37 and Title 47, relative to artificial intelligence.", "sum": "TN HB1946 directs the Tennessee Advisory Commission on Intergovernmental Relations (TACIR) to conduct a comprehensive study of how the state should regulate artificial intelligence systems and generative AI chatbots. The bill does not implement direct regulation but establishes a formal process to…", "stage": "passed", "cats": [ "governance" ], "secs": [], "date": "2026-05-27", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB1946&ga=114" }, { "id": "m:US-TN:SB2105", "jur": "US-TN", "level": "state", "num": "SB2105", "title": "AN ACT to amend Tennessee Code Annotated, Title 49, relative to education.", "sum": "Requires Tennessee public charter schools and school districts to adopt and publish policies governing student, teacher, and staff use of artificial intelligence for instructional and assignment purposes on school websites.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-02-05", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB2105&ga=114" }, { "id": "m:US-AL:HB324", "jur": "US-AL", "level": "state", "num": "HB324", "title": "Artificial intelligence; age verification systems required for chatbots, safeguard protocols required, therapy chatbot requirements established, private right of action and enforcement…", "sum": "AL HB324 requires age-verification systems for chatbots, establishes safeguard protocols for all chatbot services, and imposes specific requirements on therapy chatbots including licensing and liability protections. The bill creates a private right of action for violations.", "stage": "introduced", "cats": [ "minors", "healthcare", "consumer-financial" ], "secs": [ "consumer", "health" ], "date": "2026-01-22", "url": "https://alison.legislature.state.al.us/bill-search" }, { "id": "m:US-TN:SB2112", "jur": "US-TN", "level": "state", "num": "SB2112", "title": "AN ACT to amend Tennessee Code Annotated, Title 5; Title 6; Title 7; Title 10; Title 62; Title 65; Title 68 and Title 69, relative to data centers.", "sum": "TN SB2112 requires data centers to register with the department of revenue and mandates that fuel suppliers and electric/water utilities report usage and rates for registered data centers to the state. The commissioner must compile and publish this information.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-24", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB2112&ga=114" }, { "id": "m:US-IA:SF2094", "jur": "US-IA", "level": "state", "num": "SF2094", "title": "A bill for an act relating to computer science and artificial intelligence education, including high school curricula and graduation requirements, practitioner preparation programs, and…", "sum": "IA SF2094 establishes computer science and artificial intelligence education requirements in Iowa high schools, including curriculum standards, graduation requirements, teacher preparation programs, and college-admissions alignment for AI and computer science coursework.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-01-28", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=SF2094" }, { "id": "m:US-TN:SB2128", "jur": "US-TN", "level": "state", "num": "SB2128", "title": "AN ACT to amend Tennessee Code Annotated, Title 5; Title 6; Title 7; Title 13 and Title 65, relative to data centers.", "sum": "TN SB2128 prohibits municipalities and electric utilities from paying for or subsidizing electrical infrastructure costs required to serve data centers, shifting the full cost burden to data-center operators. The bill amends multiple titles of Tennessee Code to enforce this cost-allocation…", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-18", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB2128&ga=114" }, { "id": "m:US-WA:SB6299", "jur": "US-WA", "level": "state", "num": "SB6299", "title": "Concerning artificial intelligence and instructional staff.", "sum": "WA SB6299 addresses the use of artificial intelligence by instructional staff in K-12 education settings. The bill establishes policies or restrictions governing how teachers and school personnel may deploy or interact with AI systems in their instructional roles.", "stage": "introduced", "cats": [ "education", "hiring" ], "secs": [], "date": "2026-01-23", "url": "https://app.leg.wa.gov/billsummary?BillNumber=6299&Year=2025&Initiative=false" }, { "id": "m:US-TN:HB2039", "jur": "US-TN", "level": "state", "num": "HB2039", "title": "AN ACT to amend Tennessee Code Annotated, Title 47, relative to programmable money.", "sum": "TN HB2039 prohibits mandatory use of programmable money and requires issuers to provide reasons when denying transactions. It treats violations as Consumer Protection Act breaches with enforcement and relief mechanisms.", "stage": "failed/dead", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "finserv" ], "date": "2026-03-11", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB2039&ga=114" }, { "id": "m:US-AZ:SB1380", "jur": "US-AZ", "level": "state", "num": "SB1380", "title": "Large load customers; energy costs", "sum": "AZ SB1380 addresses energy costs and tariff structures for large load customers, which typically includes data centers and compute-intensive infrastructure. The bill likely establishes or modifies utility rates, grid access, or tax treatment for high-consumption industrial users.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-27", "url": "https://apps.azleg.gov/BillStatus/BillOverview/84933" }, { "id": "m:US-HI:SB2585", "jur": "US-HI", "level": "state", "num": "SB2585", "title": "Relating To Artificial Intelligence.", "sum": "HI SB2585 requires the Hawaii Department of Health to establish an AI-enhanced online clearinghouse of evidence-based treatment and prevention programs, with mandatory regular audits of any AI models used and annual reporting to the Legislature.", "stage": "introduced", "cats": [ "gov-use", "healthcare" ], "secs": [ "health" ], "date": "2026-01-28", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SB&billnumber=2585&year=2026" }, { "id": "m:US-NM:SB68", "jur": "US-NM", "level": "state", "num": "SB68", "title": "Artificial Intelligence Government Use Act", "sum": "NM SB68 establishes rules and requirements for state government agencies' use and procurement of artificial intelligence systems. The bill likely addresses transparency, accountability, and fairness in how state entities deploy AI in decision-making and operations.", "stage": "introduced", "cats": [ "gov-use", "anti-discrimination" ], "secs": [], "date": "2026-01-22", "url": "https://www.nmlegis.gov/Legislation/Legislation?chamber=S&legtype=B&legno=68&year=26" }, { "id": "m:US-NM:HB141", "jur": "US-NM", "level": "state", "num": "HB141", "title": "Artificial Intelligence Accountability Act", "sum": "NM HB141 establishes accountability requirements for artificial intelligence systems used in consequential decisions, likely including transparency, impact assessment, and anti-discrimination provisions. The bill creates a framework for state oversight and enforcement of AI accountability standards.", "stage": "introduced", "cats": [ "governance", "anti-discrimination", "disclosures" ], "secs": [], "date": "2026-01-22", "url": "https://www.nmlegis.gov/Legislation/Legislation?chamber=H&legtype=B&legno=141&year=26" }, { "id": "m:US-RI:S2195", "jur": "US-RI", "level": "state", "num": "S2195", "title": "Creates additional safety features for AI companion technology that include addressing suicidal ideation, potential physical harm or financial harm to others expressed by a user. It also…", "sum": "RI S2195 mandates safety features for AI companion chatbots to detect and respond to expressions of suicidal ideation, physical harm, or financial harm, and requires disclosure that the AI companion lacks human emotions. The bill targets protection of users—particularly minors—from harmful outcomes…", "stage": "passed", "cats": [ "minors", "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-06-22", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-TN:HB2054", "jur": "US-TN", "level": "state", "num": "HB2054", "title": "AN ACT to amend Tennessee Code Annotated, Title 7 and Title 65, relative to energy.", "sum": "TN HB2054 enacts the 'Data Center, Artificial Intelligence, and Clean Transition Tariff Accountability Act,' amending Tennessee's energy code (Title 7 and Title 65) to establish utility tariffs and regulatory frameworks for data centers and AI infrastructure, likely addressing grid capacity, energy…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-04", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB2054&ga=114" }, { "id": "m:US-NY:S09028", "jur": "US-NY", "level": "state", "num": "S09028", "title": "Prohibits employers from engaging in discrimination on the basis of a protected class when using artificial intelligence for recruitment, hiring, promotion, renewal of employment, selection…", "sum": "This bill prohibits employers from using artificial intelligence in recruitment, hiring, promotion, training, discipline, and other employment decisions in ways that discriminate based on protected classes. It directly targets algorithmic bias and discriminatory automated decision-making in the…", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-01-23", "url": "https://www.nysenate.gov/legislation/bills/2025/S9028" }, { "id": "m:US-RI:S2266", "jur": "US-RI", "level": "state", "num": "S2266", "title": "Prohibits the use of algorithmic pricing by landlords to determine the amount of rent to charge a residential tenant.", "sum": "This bill prohibits landlords from using algorithmic pricing systems to set residential rent amounts. It directly addresses automated decision-making in a consequential consumer context (housing affordability and fair rental pricing).", "stage": "introduced", "cats": [ "anti-discrimination", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-05-07", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-VA:HB1451", "jur": "US-VA", "level": "state", "num": "HB1451", "title": "Warehouse employers; required disclosures and recordkeeping, civil penalties.", "sum": "VA HB1451 requires large warehouse employers (500+ employees) to disclose the use of automated or algorithmic management systems for monitoring and evaluating employee performance, and to provide written descriptions of work quotas, incentives, and potential penalties. The bill also mandates…", "stage": "introduced", "cats": [ "hiring", "anti-discrimination", "disclosures" ], "secs": [ "hr" ], "date": "2026-02-10", "url": "https://lis.virginia.gov/bill-details/20261/HB1451" }, { "id": "m:US-TN:HB2047", "jur": "US-TN", "level": "state", "num": "HB2047", "title": "AN ACT to amend Tennessee Code Annotated, Title 67, Chapter 6, relative to qualified data centers.", "sum": "TN HB2047 creates a tax-credit eligibility framework for qualified data centers, requiring them to certify compliance with labor and immigration laws within the prior 12 months. The bill incentivizes data-center investment through job-tax credits conditioned on labor-law compliance.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-15", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB2047&ga=114" }, { "id": "m:US-WV:HB4770", "jur": "US-WV", "level": "state", "num": "HB4770", "title": "Establishing limitations on the use of artificial intelligence and artificial intelligence technology to deliver mental health care, with exceptions for administrative support functions", "sum": "WV HB4770 restricts the use of artificial intelligence and AI technology in the delivery of mental health care services in West Virginia, while permitting AI for administrative support functions. The bill establishes regulatory limitations on clinical and therapeutic AI deployment.", "stage": "introduced", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-02-03", "url": "http://www.wvlegislature.gov/Bill_Status/Bills_history.cfm?input=4770&year=2026&sessiontype=RS&btype=bill" }, { "id": "m:US-TN:HB2052", "jur": "US-TN", "level": "state", "num": "HB2052", "title": "AN ACT to amend Tennessee Code Annotated, Title 47 and Title 53, relative to consumer protection.", "sum": "TN HB2052 prohibits food retail establishments from using personalized algorithmic pricing and requires nondigital price presentation. The bill directly addresses algorithmic discrimination in pricing by preventing automated, individualized price discrimination in grocery and food retail.", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-03-04", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB2052&ga=114" }, { "id": "m:US-RI:S2197", "jur": "US-RI", "level": "state", "num": "S2197", "title": "Establishes regulations regarding the use of artificial intelligence in mental health care treatments.", "sum": "RI S2197 establishes regulatory requirements for the use of artificial intelligence systems in mental health care treatments. The bill creates oversight mechanisms and standards for AI deployment in behavioral healthcare and psychiatric settings.", "stage": "passed", "cats": [ "healthcare" ], "secs": [ "health" ], "date": "2026-06-22", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-VA:HB1514", "jur": "US-VA", "level": "state", "num": "HB1514", "title": "Employment decisions; automated decision systems, civil penalty.", "sum": "VA HB1514 requires state agencies and local government employers using automated decision systems in employment decisions to comply with compliance audits, disclosures, opt-out mechanisms, annual testing, and human oversight requirements. It prohibits final employment decisions based solely on…", "stage": "introduced", "cats": [ "hiring", "anti-discrimination", "disclosures" ], "secs": [ "hr" ], "date": "2026-02-18", "url": "https://lis.virginia.gov/bill-details/20261/HB1514" }, { "id": "m:US-SD:HB1125", "jur": "US-SD", "level": "state", "num": "HB1125", "title": "Create a taskforce to study the impact of artificial intelligence systems on the state.", "sum": "SD HB1125 creates a state taskforce to study the impact of artificial intelligence systems on South Dakota. The bill establishes a formal review mechanism to assess how AI affects the state and its operations.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-02-04", "url": "https://sdlegislature.gov/#/Session/Bill/26539" }, { "id": "m:US-VA:HB1515", "jur": "US-VA", "level": "state", "num": "HB1515", "title": "Local approval of data centers; temporary moratorium.", "sum": "VA HB1515 imposes a temporary moratorium on local approval of new data center siting applications until either all pending interconnection requests from data center customers to electric utilities are fulfilled, or July 1, 2028, whichever is earlier. The bill effectively restricts data center…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-06", "url": "https://lis.virginia.gov/bill-details/20261/HB1515" }, { "id": "m:US-TN:HB2061", "jur": "US-TN", "level": "state", "num": "HB2061", "title": "AN ACT to amend Tennessee Code Annotated, Title 5; Title 6; Title 7; Title 10; Title 62; Title 65; Title 68 and Title 69, relative to data centers.", "sum": "TN HB2061 requires data centers to register with the Tennessee Public Utilities Commission and mandates electric and water utilities serving those facilities to report usage and rates to the commission for compilation and publication.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-11", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB2061&ga=114" }, { "id": "m:US-KS:HB2537", "jur": "US-KS", "level": "state", "num": "HB2537", "title": "Increasing the penalties for the crime of sexual extortion when an offender is 18 years of age or older and the victim is less than 18 years of age or a dependent adult, creating the crimes…", "sum": "KS HB2537 increases criminal penalties for sexual extortion involving minors or dependent adults, and creates new aggravated offenses. The bill requires the attorney general to prepare educational materials about these crimes, which likely encompasses synthetic media and deepfake-based sextortion.", "stage": "passed", "cats": [ "minors", "deepfakes" ], "secs": [], "date": "2026-04-09", "url": "https://kslegislature.gov/li/b2025_26/measures/hb2537/" }, { "id": "m:US-VA:SB796", "jur": "US-VA", "level": "state", "num": "SB796", "title": "Artificial Intelligence Companion Chatbots and Minors Act; established, enforcement, civil penalty.", "sum": "VA SB796 requires AI chatbot operators to implement safeguards, notify emergency services of imminent harm to users, disclose the non-human nature of chatbots at regular intervals, and report covered incidents to the Attorney General. The bill creates enforcement authority for the Attorney General…", "stage": "engrossed", "cats": [ "minors", "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-03-02", "url": "https://lis.virginia.gov/bill-details/20261/SB796" }, { "id": "m:US-WA:SB6312", "jur": "US-WA", "level": "state", "num": "SB6312", "title": "Prohibiting surveillance-based price discrimination and surge pricing for retail goods.", "sum": "WA SB6312 prohibits retailers from using surveillance data and automated systems to apply dynamic or discriminatory pricing to individual customers. The bill targets algorithmic price discrimination and surge pricing practices in retail goods sales.", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-02-04", "url": "https://app.leg.wa.gov/billsummary?BillNumber=6312&Year=2025&Initiative=false" }, { "id": "m:US-VA:HB1521", "jur": "US-VA", "level": "state", "num": "HB1521", "title": "Digital innovation & infrastructure; establishing rights in digital property & technology resources.", "sum": "VA HB1521 establishes a regulatory framework for critical infrastructure facilities controlled by critical artificial intelligence systems, requiring risk management policies and creating safe harbors for compliance. The bill preempts local regulation and provides enforcement and remedies for…", "stage": "introduced", "cats": [ "governance", "public-safety" ], "secs": [ "infra" ], "date": "2026-02-02", "url": "https://lis.virginia.gov/bill-details/20261/HB1521" }, { "id": "m:US-WA:HB2655", "jur": "US-WA", "level": "state", "num": "HB2655", "title": "Providing a retail sales and use tax exemption for the construction and equipping of new data centers located in a county east of the Cascades that borders another state and has a…", "sum": "WA HB2655 provides a retail sales and use tax exemption for the construction and equipping of new data centers in counties east of the Cascades that border another state and have a population of at least 500,000. This is a tax-incentive policy designed to attract data-center investment to a…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-06", "url": "https://app.leg.wa.gov/billsummary?BillNumber=2655&Year=2025&Initiative=false" }, { "id": "m:US-WA:HB2667", "jur": "US-WA", "level": "state", "num": "HB2667", "title": "Providing consumer protections for artificial intelligence systems.", "sum": "WA HB2667 establishes consumer protections for artificial intelligence systems, likely addressing transparency, fairness, and accountability in how AI systems impact consumers. The bill's scope appears to cover disclosure requirements, algorithmic discrimination prevention, and consumer harm…", "stage": "introduced", "cats": [ "consumer-financial", "disclosures", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-01-26", "url": "https://app.leg.wa.gov/billsummary?BillNumber=2667&Year=2025&Initiative=false" }, { "id": "m:US-HI:HB1887", "jur": "US-HI", "level": "state", "num": "HB1887", "title": "Relating To Artificial Intelligence Literacy Education.", "sum": "HB1887 requires Hawaii's Department of Education to develop and implement a statewide AI literacy curriculum for 11th and 12th grade students as a graduation requirement, beginning in the 2027-2028 school year. The bill also establishes an advisory council on AI education and funds a three-year…", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-02-03", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HB&billnumber=1887&year=2026" }, { "id": "m:US-HI:SB2788", "jur": "US-HI", "level": "state", "num": "SB2788", "title": "Relating To Artificial Intelligence For The Protection Of Minors.", "sum": "HI SB2788 establishes safeguards, protections, oversight, and penalties specifically for AI companion systems and conversational AI services when they interact with minors. The bill creates a regulatory framework to govern how these AI systems operate in relation to children.", "stage": "introduced", "cats": [ "minors", "disclosures" ], "secs": [ "consumer" ], "date": "2026-01-30", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SB&billnumber=2788&year=2026" }, { "id": "m:US-HI:HB1954", "jur": "US-HI", "level": "state", "num": "HB1954", "title": "Relating To Identity Theft.", "sum": "HB1954 expands Hawaii's identity-theft statute to criminalize fraudulent impersonation or false depiction accomplished through artificial intelligence or materially deceptive media (deepfakes/synthetic media). The bill treats AI-generated or AI-manipulated false depictions as predicate offenses in…", "stage": "introduced", "cats": [ "deepfakes", "consumer-financial" ], "secs": [ "media" ], "date": "2026-01-28", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HB&billnumber=1954&year=2026" }, { "id": "m:US-HI:HB1968", "jur": "US-HI", "level": "state", "num": "HB1968", "title": "Relating To Permitting.", "sum": "HI HB1968 directs the Department of Business, Economic Development, and Tourism to develop an AI-assisted pre-compliance intake pilot platform in collaboration with a county to streamline permitting processes. The bill appropriates funds and requires the department to establish metrics to measure…", "stage": "introduced", "cats": [ "gov-use" ], "secs": [], "date": "2026-02-11", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HB&billnumber=1968&year=2026" }, { "id": "m:US-HI:SB2768", "jur": "US-HI", "level": "state", "num": "SB2768", "title": "Relating To Health Care.", "sum": "This bill restricts the use of artificial intelligence, algorithms, and software tools in health insurance utilization-review decisions and requires a licensed health care provider to review all adverse actions taken by insurers. It targets automated or algorithmic decision-making in insurance…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "health", "finserv" ], "date": "2026-01-30", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SB&billnumber=2768&year=2026" }, { "id": "m:US-HI:SB3027", "jur": "US-HI", "level": "state", "num": "SB3027", "title": "Relating To The Patients' Bill Of Rights.", "sum": "This bill establishes requirements for health carriers' use of automated decision support tools in claims determinations and utilization review, including safeguards for protected health information and reporting obligations. It directly regulates algorithmic decision-making in insurance…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "disclosures" ], "secs": [ "health", "finserv" ], "date": "2026-01-30", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SB&billnumber=3027&year=2026" }, { "id": "m:US-HI:SB2908", "jur": "US-HI", "level": "state", "num": "SB2908", "title": "Relating To Permitting.", "sum": "HI SB2908 appropriates funds for Hawaii's Department of Business, Economic Development, and Tourism to develop an AI-assisted pre-compliance intake pilot platform in collaboration with a selected county, with matching-funds requirements and success metrics. The bill treats AI as a tool to…", "stage": "engrossed", "cats": [ "gov-use" ], "secs": [], "date": "2026-03-20", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SB&billnumber=2908&year=2026" }, { "id": "m:US-HI:SB2967", "jur": "US-HI", "level": "state", "num": "SB2967", "title": "Relating To Artificial Intelligence.", "sum": "HI SB2967 establishes consumer-protection requirements for AI systems used in consumer interactions and consequential decisions, including mandatory disclosures, documentation, right to correction/appeal, and human review. It requires risk management and impact assessments for high-risk AI systems,…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination", "disclosures" ], "secs": [ "consumer" ], "date": "2026-02-11", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SB&billnumber=2967&year=2026" }, { "id": "m:US-HI:SB3001", "jur": "US-HI", "level": "state", "num": "SB3001", "title": "Relating To Artificial Intelligence.", "sum": "HI SB3001 requires operators of AI companion chatbots to disclose their nature to users, establish protocols for responding to suicidal ideation and self-harm prompts, and provide special protections for minor users. Violations are treated as unfair or deceptive practices, with annual reporting…", "stage": "passed", "cats": [ "minors", "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-07-14", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SB&billnumber=3001&year=2026" }, { "id": "m:US-HI:SB2953", "jur": "US-HI", "level": "state", "num": "SB2953", "title": "Relating To Insurance.", "sum": "HI SB2953 establishes consumer protections and governance requirements for AI systems used in insurance practices, specifically health insurance benefit determinations and residential property underwriting. The bill mandates review, monitoring, recordkeeping, disclosure, rebuttal, and cure…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination", "disclosures" ], "secs": [ "finserv", "health" ], "date": "2026-01-30", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SB&billnumber=2953&year=2026" }, { "id": "m:US-HI:SB2948", "jur": "US-HI", "level": "state", "num": "SB2948", "title": "Relating To Insurance Fraud.", "sum": "HI SB2948 broadens insurance fraud offenses and clarifies penalties while explicitly authorizing the Insurance Fraud Investigations Branch to use 'fraud analytics' in detecting and investigating claims fraud. The bill also establishes disaster-related fraud offenses and strengthens whistleblower…", "stage": "engrossed", "cats": [ "governance", "consumer-financial" ], "secs": [ "finserv" ], "date": "2026-03-30", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SB&billnumber=2948&year=2026" }, { "id": "m:US-MD:HB530", "jur": "US-MD", "level": "state", "num": "HB530", "title": "Task Force on Proactive Review of Audio and Video Recordings on Special Education Buses", "sum": "Establishes a task force to study the use of AI to proactively review audio and video recordings from special education buses for student safety purposes, with findings due by December 1, 2026. The task force will examine how AI systems can monitor bus environments to detect and prevent safety…", "stage": "introduced", "cats": [ "gov-use", "minors", "public-safety" ], "secs": [ "consumer" ], "date": "2026-02-04", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB0530?ys=2026RS" }, { "id": "m:US-HI:SB2923", "jur": "US-HI", "level": "state", "num": "SB2923", "title": "Relating To Artificial Intelligence.", "sum": "Establishes a new Office of Artificial Intelligence Safety and Regulation within Hawaii's Department of Commerce and Consumer Affairs with broad authority to regulate AI development, deployment, and use. Requires affirmative proof of safety before any AI product can be deployed in the state.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-01-30", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SB&billnumber=2923&year=2026" }, { "id": "m:US-SD:SB127", "jur": "US-SD", "level": "state", "num": "SB127", "title": "Limit nuisances caused by data centers.", "sum": "SD SB127 addresses nuisances caused by data centers, including regulation of siting, noise, energy use, and operational impacts. The bill falls squarely within data-center infrastructure policy, a tracked vertical regardless of AI motivation.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-18", "url": "https://sdlegislature.gov/#/Session/Bill/26300" }, { "id": "m:US-VT:H0776", "jur": "US-VT", "level": "state", "num": "H0776", "title": "An act relating to the use of artificial intelligence in health care coverage decisions", "sum": "VT H0776 regulates the use of artificial intelligence in health care coverage decisions, likely establishing standards for how insurers deploy AI/automated systems in utilization review, prior authorization, and claims determinations. The bill appears aimed at preventing algorithmic discrimination…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "health", "finserv" ], "date": "2026-01-27", "url": "https://legislature.vermont.gov/bill/status/2026/H.776" }, { "id": "m:US-WV:HB4822", "jur": "US-WV", "level": "state", "num": "HB4822", "title": "To redirect data center tax revenue to PEIA, counties, and schools", "sum": "WV HB4822 redirects property tax revenue collected from High Impact Data Centers to schools, counties, and the state Public Insurance Financial Stability Fund, and expands grid-stabilization funding to include all utility types (not only coal/gas). The bill treats data centers as a distinct tax and…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-26", "url": "http://www.wvlegislature.gov/Bill_Status/Bills_history.cfm?input=4822&year=2026&sessiontype=RS&btype=bill" }, { "id": "m:US-WV:HB4832", "jur": "US-WV", "level": "state", "num": "HB4832", "title": "Relating to the use of state water resources", "sum": "WV HB4832 requires high-impact data centers to report water usage to the Department of Environmental Protection and authorizes the state to limit, condition, or prohibit water withdrawals by data centers that pose harm to state water resources. The bill establishes monitoring and regulatory…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-26", "url": "http://www.wvlegislature.gov/Bill_Status/Bills_history.cfm?input=4832&year=2026&sessiontype=RS&btype=bill" }, { "id": "m:US-IA:HF2153", "jur": "US-IA", "level": "state", "num": "HF2153", "title": "A bill for an act requiring community colleges, school districts, and institutions under the control of the state board of regents to adopt policies related to the use of artificial…", "sum": "IA HF2153 requires community colleges, school districts, and state board of regents institutions to adopt policies governing AI use by students and employees. The bill mandates institutional governance frameworks around AI deployment and usage in educational settings.", "stage": "introduced", "cats": [ "gov-use", "education" ], "secs": [], "date": "2026-01-26", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=HF2153" }, { "id": "m:US-SD:SB135", "jur": "US-SD", "level": "state", "num": "SB135", "title": "Protect residents from increased utility costs and utility shortages caused by data centers and clarify authority to regulate data centers.", "sum": "SD SB135 addresses utility costs and potential shortages caused by data centers by clarifying state authority to regulate data-center siting, energy consumption, and grid impact. The bill protects residents from rate increases and supply constraints driven by large-load data-center operations.", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-30", "url": "https://sdlegislature.gov/#/Session/Bill/27028" }, { "id": "m:US-IA:HF2150", "jur": "US-IA", "level": "state", "num": "HF2150", "title": "A bill for an act relating to the use of artificial intelligence for purposes associated with elections, ballot issues, and public officials, providing penalties, and making penalties…", "sum": "IA HF2150 regulates the use of artificial intelligence in election contexts, including its application to ballot issues and public officials, and establishes penalties for violations. The bill appears to target deepfakes and other AI-generated content deployed for electoral purposes.", "stage": "introduced", "cats": [ "elections", "deepfakes" ], "secs": [ "media" ], "date": "2026-01-26", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=HF2150" }, { "id": "m:US-HI:HB2136", "jur": "US-HI", "level": "state", "num": "HB2136", "title": "Relating To Consumer Protection.", "sum": "HB2136 designates pricing practices based on surveillance data as unfair or deceptive acts and unfair methods of competition under Hawaii's consumer-protection laws. The bill targets algorithmic or data-driven price discrimination without explicitly naming AI, but surveillance-based pricing is…", "stage": "introduced", "cats": [ "consumer-financial", "privacy" ], "secs": [ "consumer" ], "date": "2026-01-30", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HB&billnumber=2136&year=2026" }, { "id": "m:US-VT:H0783", "jur": "US-VT", "level": "state", "num": "H0783", "title": "An act relating to chatbot disclosure requirements", "sum": "VT H0783 requires chatbots to disclose to users that they are interacting with an automated system rather than a human. This is a straightforward transparency mandate tied to chatbot deployment.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-01-27", "url": "https://legislature.vermont.gov/bill/status/2026/H.783" }, { "id": "m:US-SD:HB1144", "jur": "US-SD", "level": "state", "num": "HB1144", "title": "Restrict the use of artificial intelligence in therapy and psychotherapy services and to provide a penalty therefor.", "sum": "SD HB1144 restricts the use of artificial intelligence in therapy and psychotherapy services and establishes penalties for violations. The bill effectively bans or heavily constrains AI-delivered mental health services in the state.", "stage": "introduced", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-02-02", "url": "https://sdlegislature.gov/#/Session/Bill/26480" }, { "id": "m:US-VT:H0784", "jur": "US-VT", "level": "state", "num": "H0784", "title": "An act relating to the regulation of chatbots", "sum": "VT H0784 is a chatbot regulation bill that appears to establish disclosure and transparency requirements for chatbot systems. Without access to the full text, the bill likely mandates that operators reveal when users are interacting with automated systems rather than humans, and may include…", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-01-27", "url": "https://legislature.vermont.gov/bill/status/2026/H.784" }, { "id": "m:US-HI:HB2137", "jur": "US-HI", "level": "state", "num": "HB2137", "title": "Relating To Artificial Intelligence.", "sum": "HB2137 prohibits harmful uses of AI-generated realistic digital imitations (deepfakes) and establishes civil liability and remedies for individuals injured by unauthorized creation or use of such synthetic media. The bill includes exemptions for certain lawful uses.", "stage": "passed", "cats": [ "deepfakes", "consumer-financial" ], "secs": [ "media" ], "date": "2026-07-14", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HB&billnumber=2137&year=2026" }, { "id": "m:US-IL:SB2927", "jur": "US-IL", "level": "state", "num": "SB2927", "title": "DCEO-AI IMPACT STUDY", "sum": "Illinois SB2927 directs the Department of Commerce and Economic Opportunity, in consultation with the Department of Labor, to conduct a comprehensive study identifying strategies to protect jobs at risk from artificial intelligence. The study will include specified recommendations and analysis on…", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=2927&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-WV:SB623", "jur": "US-WV", "level": "state", "num": "SB623", "title": "Establishing economic incentives for data centers to locate within WV", "sum": "WV SB623 creates tax incentives (salvage-value treatment, B&O exemption on coal-generated electricity, sales-tax exemption) to attract data-center operations to West Virginia, with a specific focus on coal-powered facilities.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-27", "url": "http://www.wvlegislature.gov/Bill_Status/Bills_history.cfm?input=623&year=2026&sessiontype=RS&btype=bill" }, { "id": "m:US-AZ:SB1467", "jur": "US-AZ", "level": "state", "num": "SB1467", "title": "Data centers; tax relief; repeal.", "sum": "AZ SB1467 provides tax relief and repeals certain provisions related to data centers in Arizona. The bill directly addresses tax incentives and regulatory treatment for data-center infrastructure, a core compute/large-load policy tracked under AI vertical scope.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-02", "url": "https://apps.azleg.gov/BillStatus/BillOverview/85055" }, { "id": "m:US-AZ:SB1463", "jur": "US-AZ", "level": "state", "num": "SB1463", "title": "Data centers; tax relief; repeal..", "sum": "AZ SB1463 provides tax relief and repeals certain provisions related to data centers. The bill appears to modify the tax treatment and regulatory framework for data-center operations in Arizona.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-02", "url": "https://apps.azleg.gov/BillStatus/BillOverview/85051" }, { "id": "m:US-VT:H0792", "jur": "US-VT", "level": "state", "num": "H0792", "title": "An act relating to liability standards for developers and deployers of artificial intelligence systems", "sum": "VT H0792 establishes liability standards specifically for developers and deployers of artificial intelligence systems, addressing the legal responsibility and accountability framework for AI actors. The bill creates substantive legal duties tied to AI development and deployment, likely covering…", "stage": "introduced", "cats": [ "frontier", "consumer-financial" ], "secs": [], "date": "2026-01-28", "url": "https://legislature.vermont.gov/bill/status/2026/H.792" }, { "id": "m:US-IL:SB2909", "jur": "US-IL", "level": "state", "num": "SB2909", "title": "SCH CD-TEACHER EVALUATION-AI", "sum": "IL SB2909 prohibits use of AI tools to assign numerical scores or qualitative ratings in teacher evaluations or any task requiring professional judgment, while permitting AI for administrative support. The bill restricts automated decision-making in employment evaluation contexts within schools.", "stage": "passed", "cats": [ "education", "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-07-10", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=2909&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-VT:H0804", "jur": "US-VT", "level": "state", "num": "H0804", "title": "An act relating to companion chatbots", "sum": "VT H0804 regulates companion chatbots, likely addressing disclosure requirements, age-appropriate safeguards, and consumer protections for users interacting with AI chatbot systems. The bill's focus on 'companion' chatbots (conversational AI designed for sustained user engagement) suggests rules…", "stage": "introduced", "cats": [ "minors", "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-01-28", "url": "https://legislature.vermont.gov/bill/status/2026/H.804" }, { "id": "m:US-NY:S09051", "jur": "US-NY", "level": "state", "num": "S09051", "title": "Prohibits artificial intelligence companions from using features which are considered unsafe for minors; defines terms; specifies what are considered unsafe features.", "sum": "This bill prohibits AI companion chatbots from incorporating features deemed unsafe for minors, and requires clear definition of what constitutes unsafe functionality in these systems. It establishes guardrails around how AI companions can interact with or present to child users.", "stage": "engrossed", "cats": [ "minors", "disclosures" ], "secs": [ "consumer" ], "date": "2026-06-05", "url": "https://www.nysenate.gov/legislation/bills/2025/S9051" }, { "id": "m:US-HI:HB2357", "jur": "US-HI", "level": "state", "num": "HB2357", "title": "Relating To Artificial Intelligence.", "sum": "HI HB2357 prohibits music streaming platforms from hosting, distributing, or making available music performed by or attributed to AI-generated artists within Hawaii. Violations are treated as unfair methods of competition and unfair/deceptive trade practices.", "stage": "introduced", "cats": [ "deepfakes", "consumer-financial" ], "secs": [ "media" ], "date": "2026-02-18", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HB&billnumber=2357&year=2026" }, { "id": "m:US-UT:SB0205", "jur": "US-UT", "level": "state", "num": "SB0205", "title": "Law Enforcement Artificial Intelligence Amendments", "sum": "This bill amends law enforcement AI use, likely establishing rules, oversight, or accountability measures for automated systems deployed by police agencies in Utah. The specific mechanisms are unclear from the title alone, but the bill directly targets AI in a high-stakes government context.", "stage": "failed/dead", "cats": [ "governance", "gov-use", "public-safety" ], "secs": [], "date": "2026-03-06", "url": "https://le.utah.gov/~2026/bills/static/SB0205.html" }, { "id": "m:US-AZ:HB2949", "jur": "US-AZ", "level": "state", "num": "HB2949", "title": "Energy costs; large data centers", "sum": "AZ HB2949 addresses energy costs and regulatory treatment of large data centers, likely including tax incentives, utility rates, or grid-impact rules specific to high-compute facilities.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-05", "url": "https://apps.azleg.gov/BillStatus/BillOverview/85088" }, { "id": "m:US-NM:HB174", "jur": "US-NM", "level": "state", "num": "HB174", "title": "Chatbot Safety Act", "sum": "The Chatbot Safety Act regulates chatbot transparency and safety requirements, likely including disclosure obligations to users that they are interacting with an AI system and measures to protect minors from harmful content or manipulation. The bill addresses consumer-facing chatbot harms and…", "stage": "introduced", "cats": [ "disclosures", "consumer-financial", "minors" ], "secs": [ "consumer" ], "date": "2026-01-27", "url": "https://www.nmlegis.gov/Legislation/Legislation?chamber=H&legtype=B&legno=174&year=26" }, { "id": "m:US-KS:SB400", "jur": "US-KS", "level": "state", "num": "SB400", "title": "Requiring data centers to use closed-loop cooling systems to mitigate water consumption.", "sum": "KS SB400 mandates that data centers use closed-loop cooling systems to reduce water consumption. The bill addresses environmental and resource constraints on large-scale compute infrastructure.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-28", "url": "https://kslegislature.gov/li/b2025_26/measures/sb400/" }, { "id": "m:US-MD:SB387", "jur": "US-MD", "level": "state", "num": "SB387", "title": "Food Retailers and Third-Party Food Delivery Service Providers - Dynamic Pricing and Personal Data (Protection From Predatory Pricing Act)", "sum": "MD SB387 prohibits food retailers and third-party delivery services from using dynamic pricing algorithms or consumer data (including protected-class data) to set prices for goods and services. Violations are enforceable as unfair or deceptive trade practices.", "stage": "engrossed", "cats": [ "consumer-financial", "anti-discrimination", "privacy" ], "secs": [ "consumer" ], "date": "2026-03-24", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0387?ys=2026RS" }, { "id": "m:US-MD:SB375", "jur": "US-MD", "level": "state", "num": "SB375", "title": "County Boards of Education - Artificial Intelligence Training Program - Requirement", "sum": "MD SB375 requires the State Department of Education to develop or approve an AI training program for county board of education members, with mandatory annual completion covering AI technology developments, best practices in educational settings, and new guidance. The training may be delivered in…", "stage": "introduced", "cats": [ "gov-use", "education" ], "secs": [], "date": "2026-02-19", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0375?ys=2026RS" }, { "id": "m:US-HI:HB2466", "jur": "US-HI", "level": "state", "num": "HB2466", "title": "Relating To Education.", "sum": "HB2466 requires Hawaii's Department of Education to prohibit electronic device usage during instructional time and to implement a social media and artificial intelligence literacy education campaign. The bill mandates reporting on implementation after three years and every five years thereafter.", "stage": "introduced", "cats": [ "education", "minors" ], "secs": [ "consumer" ], "date": "2026-02-02", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HB&billnumber=2466&year=2026" }, { "id": "m:US-MD:HB560", "jur": "US-MD", "level": "state", "num": "HB560", "title": "Sales and Use Tax and Property Tax - Exemptions for Data Centers - Repeal", "sum": "This bill repeals existing sales and use tax exemptions and property-tax-reduction authority for qualified data centers in Maryland. It removes incentives that currently apply to personal property and equipment used at data-center facilities.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-28", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB0560?ys=2026RS" }, { "id": "m:US-MO:SB1598", "jur": "US-MO", "level": "state", "num": "SB1598", "title": "Modifies provisions relating to medical malpractice for the use of artificial intelligence by health care providers", "sum": "MO SB1598 modifies medical malpractice liability standards specifically for healthcare providers who use artificial intelligence in clinical practice. The bill establishes a legal framework governing the duty of care and liability exposure when AI systems are involved in diagnosis, treatment, or…", "stage": "introduced", "cats": [ "healthcare", "consumer-financial" ], "secs": [ "health" ], "date": "2026-02-05", "url": "https://www.senate.mo.gov/BillTracking/Bills/Billinformation?year=2026&billid=2581464" }, { "id": "m:US-WV:HB4854", "jur": "US-WV", "level": "state", "num": "HB4854", "title": "Prohibiting the state or any political subdivision from subsidizing any data center in West Virginia", "sum": "WV HB4854 prohibits the state of West Virginia and its political subdivisions from providing subsidies, tax breaks, or other financial incentives to data-center operators. The bill is a direct constraint on data-center infrastructure policy and development.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-28", "url": "http://www.wvlegislature.gov/Bill_Status/Bills_history.cfm?input=4854&year=2026&sessiontype=RS&btype=bill" }, { "id": "m:US-WV:SB652", "jur": "US-WV", "level": "state", "num": "SB652", "title": "Relating to distribution of tax revenues collected from data centers", "sum": "WV SB652 modifies the distribution of ad valorem property tax revenues from high-impact data centers, directing 80% of collected taxes to the counties where the facilities are sited. The bill directly addresses data-center tax policy and local revenue allocation.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-28", "url": "http://www.wvlegislature.gov/Bill_Status/Bills_history.cfm?input=652&year=2026&sessiontype=RS&btype=bill" }, { "id": "m:US-ID:H0542", "jur": "US-ID", "level": "state", "num": "H0542", "title": "Adds to existing law to establish the Stop Harms from Addictive Social Media Act.", "sum": "Idaho's Stop Harms from Addictive Social Media Act regulates social-media platforms' use of algorithmic features and design practices that foster addiction, particularly targeting protection of minors. The law likely addresses algorithmic recommendation systems, notification manipulation, and other…", "stage": "passed", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-04-02", "url": "https://legislature.idaho.gov/sessioninfo/2026/legislation/H0542/" }, { "id": "m:US-NJ:A2069", "jur": "US-NJ", "level": "state", "num": "A2069", "title": "Requires Commissioner of Labor and Workforce Development to conduct study and issue report on impact of artificial intelligence on growth of State's economy.", "sum": "NJ A2069 directs the Commissioner of Labor and Workforce Development to study and report on artificial intelligence's impact on New Jersey's economic growth. The bill creates a fact-finding and advisory mechanism rather than imposing direct regulation.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/A2069" }, { "id": "m:US-RI:H7331", "jur": "US-RI", "level": "state", "num": "H7331", "title": "Requires that certain data centers requiring large amounts of electricity be required to fund the cost of necessary infrastructure improvements to supply such electricity.", "sum": "RI H7331 requires data centers that consume large amounts of electricity to fund the cost of necessary infrastructure improvements to the electrical grid needed to support their operations.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-07", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-NJ:A390", "jur": "US-NJ", "level": "state", "num": "A390", "title": "Establishes NJ Artificial Intelligence Advisory Council.", "sum": "NJ A390 establishes a New Jersey Artificial Intelligence Advisory Council, a study/task-force body to examine AI policy and governance in the state. The council will advise on AI regulation, procurement, and related government strategy.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/A390" }, { "id": "m:US-NJ:A3076", "jur": "US-NJ", "level": "state", "num": "A3076", "title": "Requires AG to study use of artificial intelligence for certain law enforcement purposes and issue report.", "sum": "NJ A3076 requires the Attorney General to study the use of artificial intelligence in law enforcement and produce a report on findings. This is a governance and study bill focused on government use of AI in public-safety contexts.", "stage": "introduced", "cats": [ "gov-use", "public-safety" ], "secs": [], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/A3076" }, { "id": "m:US-NJ:A1359", "jur": "US-NJ", "level": "state", "num": "A1359", "title": "Prohibits deepfake pornography and imposes criminal and civil penalties for non-consensual disclosure.", "sum": "NJ A1359 criminalizes the creation and non-consensual distribution of deepfake pornography, imposing both criminal penalties and civil liability. The bill targets synthetic sexual imagery generated without consent.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/A1359" }, { "id": "m:US-NJ:A2770", "jur": "US-NJ", "level": "state", "num": "A2770", "title": "Establishes surcharge for electric public utility service to certain data centers during certain periods; establishes \"Grid Modernization Fund\" in BPU.", "sum": "NJ A2770 establishes a surcharge on electric utility service for certain data centers during peak periods and creates a 'Grid Modernization Fund' within the Board of Public Utilities to manage grid infrastructure investments tied to data-center demand.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/A2770" }, { "id": "m:US-NJ:A3058", "jur": "US-NJ", "level": "state", "num": "A3058", "title": "Establishes Deepfake Technology Unit in DLPS; appropriates $2 million.", "sum": "NJ A3058 establishes a dedicated Deepfake Technology Unit within the New Jersey Division of Law and Public Safety and appropriates $2 million to fund it. The unit will likely focus on detection, investigation, and enforcement related to deepfake and synthetic media threats.", "stage": "introduced", "cats": [ "gov-use", "deepfakes" ], "secs": [ "media" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/A3058" }, { "id": "m:US-NJ:A3307", "jur": "US-NJ", "level": "state", "num": "A3307", "title": "Regulates artificial intelligence in news media industry; establishes \"Artificial Intelligence In Communications Oversight Committee.\"", "sum": "This bill regulates AI use in news media and establishes an oversight committee to govern the application of artificial intelligence in the communications industry. It appears to mandate transparency and accountability measures for AI deployed in news production and distribution.", "stage": "introduced", "cats": [ "governance", "disclosures" ], "secs": [ "media" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/A3307" }, { "id": "m:US-RI:H7350", "jur": "US-RI", "level": "state", "num": "H7350", "title": "Creates additional safety features for AI companion technology that include addressing suicidal ideation, potential physical harm or financial harm to others expressed by a user. It also…", "sum": "RI H7350 mandates safety features for AI companion chatbots to detect and respond to expressions of suicidal ideation, physical harm, or financial harm, and requires disclosure that the AI companion lacks human emotions.", "stage": "passed", "cats": [ "minors", "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-06-22", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-RI:H7349", "jur": "US-RI", "level": "state", "num": "H7349", "title": "Establishes regulations regarding the use of artificial intelligence in mental health care treatments.", "sum": "RI H7349 establishes regulations for the use of artificial intelligence in mental health care treatments, requiring oversight and standards for AI-driven mental health interventions. The bill sets requirements for how AI systems must be deployed, monitored, and disclosed in clinical and therapeutic…", "stage": "passed", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-06-22", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-NJ:A2710", "jur": "US-NJ", "level": "state", "num": "A2710", "title": "Establishes \"Authentic Relationships Act\"; prohibits artificial intelligence relationship simulation.", "sum": "NJ A2710 prohibits artificial intelligence systems from simulating romantic or intimate relationships. The bill targets chatbots and similar AI systems designed to create parasocial or emotionally dependent interactions with users.", "stage": "introduced", "cats": [ "consumer-financial", "minors" ], "secs": [ "consumer" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/A2710" }, { "id": "m:US-NJ:A2616", "jur": "US-NJ", "level": "state", "num": "A2616", "title": "Requires OIT to develop NJ generative artificial intelligence program and implement artificial intelligence education courses with county governments; appropriates $1.5 million.", "sum": "This bill directs New Jersey's Office of Information Technology (OIT) to develop a generative AI program and implement AI education courses in partnership with county governments, with a $1.5 million appropriation. It is primarily an education and workforce-development initiative with a…", "stage": "introduced", "cats": [ "gov-use", "education" ], "secs": [], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/A2616" }, { "id": "m:US-NJ:A3989", "jur": "US-NJ", "level": "state", "num": "A3989", "title": "Restricts use and sale of algorithmic devices for establishing rent price or occupancy of residential property.", "sum": "NJ A3989 restricts the use and sale of algorithmic devices (pricing algorithms) that set rental prices or occupancy criteria for residential properties. The bill targets algorithmic discrimination in housing by preventing landlords and property managers from deploying automated decision systems for…", "stage": "introduced", "cats": [ "anti-discrimination", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/A3989" }, { "id": "m:US-NJ:A2620", "jur": "US-NJ", "level": "state", "num": "A2620", "title": "Establishes task force to research and report on potential sources of funding for artificial intelligence initiatives and appropriate tax incentives to support businesses impacted by…", "sum": "NJ A2620 establishes a task force to research funding sources and tax incentives for AI initiatives, and to identify tax support for businesses affected by AI expansion. The bill is a study/planning mechanism rather than direct regulation.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/A2620" }, { "id": "m:US-NJ:A3585", "jur": "US-NJ", "level": "state", "num": "A3585", "title": "Prohibits and imposes criminal penalty on disclosure of certain intentionally deceptive audio or visual media within 90 days of election.", "sum": "NJ A3585 criminalizes the disclosure of intentionally deceptive synthetic audio or visual media (deepfakes) within 90 days of an election. The bill creates a criminal penalty for distribution of election-related deepfakes in the critical pre-election period.", "stage": "introduced", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/A3585" }, { "id": "m:US-NJ:AR101", "jur": "US-NJ", "level": "state", "num": "AR101", "title": "Urges generative artificial intelligence and content sharing platforms to make voluntary commitments to prevent and remove harmful content.", "sum": "NJ AR101 urges generative AI and content-sharing platforms to voluntarily commit to preventing and removing harmful content. It is a non-binding resolution encouraging industry self-regulation rather than imposing statutory requirements.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/AR101" }, { "id": "m:US-NJ:A2478", "jur": "US-NJ", "level": "state", "num": "A2478", "title": "Establishes Artificial Intelligence Ethics Board in DOLWD.", "sum": "Establishes an Artificial Intelligence Ethics Board within New Jersey's Department of Labor and Workforce Development to advise on AI policy, governance, and ethical standards. The board will likely oversee AI use in labor and employment contexts.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/A2478" }, { "id": "m:US-NJ:A2312", "jur": "US-NJ", "level": "state", "num": "A2312", "title": "Creates separate crime for items depicting sexual exploitation or abuse of children; concerns computer generated or manipulated sexually explicit images.", "sum": "NJ A2312 creates a separate criminal offense for computer-generated or manipulated sexually explicit images depicting minors, addressing synthetic child sexual abuse material (CSAM) and deepfake child exploitation.", "stage": "engrossed", "cats": [ "deepfakes", "minors" ], "secs": [ "media" ], "date": "2026-05-04", "url": "https://www.njleg.state.nj.us/bill-search/2026/A2312" }, { "id": "m:US-VT:H0814", "jur": "US-VT", "level": "state", "num": "H0814", "title": "An act relating to neurological rights and the use of artificial intelligence technology in health and human services", "sum": "VT H0814 establishes neurological rights protections and regulates the use of artificial intelligence technology in health and human services contexts. The bill addresses how AI systems may access, process, or make decisions based on neurological data and brain-derived information in healthcare…", "stage": "passed", "cats": [ "healthcare", "privacy" ], "secs": [ "health" ], "date": "2026-05-19", "url": "https://legislature.vermont.gov/bill/status/2026/H.814" }, { "id": "m:US-NJ:A3966", "jur": "US-NJ", "level": "state", "num": "A3966", "title": "Requires DEP to conduct study of short and long term effects of water use by large-scale data centers.", "sum": "This bill requires New Jersey's Department of Environmental Protection to study the short- and long-term effects of water consumption by large-scale data centers. The study will inform future policy on data-center environmental impact and resource management.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-16", "url": "https://www.njleg.state.nj.us/bill-search/2026/A3966" }, { "id": "m:US-NJ:A3072", "jur": "US-NJ", "level": "state", "num": "A3072", "title": "Establishes Artificial Intelligence Grant Program in Office of Secretary of Higher Education.", "sum": "NJ A3072 establishes a grant program within the Office of the Secretary of Higher Education to fund artificial intelligence initiatives in higher education institutions. The bill directly addresses AI as a substantive subject by creating dedicated funding and institutional support for AI…", "stage": "introduced", "cats": [ "governance", "education" ], "secs": [], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/A3072" }, { "id": "m:US-NJ:A3065", "jur": "US-NJ", "level": "state", "num": "A3065", "title": "Establishes civil right of action for misuse of individual's name, image, likeness, or voice.", "sum": "NJ A3065 establishes a civil right of action for unauthorized use of an individual's name, image, likeness, or voice. This directly addresses harms from synthetic media and deepfakes, as well as broader misappropriation of identity.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/A3065" }, { "id": "m:US-NJ:A796", "jur": "US-NJ", "level": "state", "num": "A796", "title": "Requires electric public utilities to develop and apply special rules for certain data centers to protect non-data center customers from increased costs.", "sum": "NJ A796 requires electric public utilities to develop special tariff or rate rules for data centers to prevent their high-load electricity consumption from driving up costs for non-data-center customers. The bill directly addresses large-load infrastructure policy and grid management tied to…", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-07", "url": "https://www.njleg.state.nj.us/bill-search/2026/A796" }, { "id": "m:US-NJ:S3263", "jur": "US-NJ", "level": "state", "num": "S3263", "title": "Regulates use of artificial intelligence-enabled video interview in hiring process.", "sum": "This bill regulates the use of AI-enabled video interview systems in employment hiring decisions. It addresses algorithmic bias and fairness concerns specific to automated candidate evaluation tools.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-02-02", "url": "https://www.njleg.state.nj.us/bill-search/2026/S3263" }, { "id": "m:US-NJ:A3064", "jur": "US-NJ", "level": "state", "num": "A3064", "title": "Requires social media platforms to cooperate with nonprofit organization initiatives to remove nonconsensual intimate images or videos.", "sum": "NJ A3064 requires social media platforms to cooperate with nonprofit organizations in identifying and removing nonconsensual intimate images or videos. The bill establishes a framework for platforms to work with outside groups on detection and takedown of intimate imagery without consent.", "stage": "engrossed", "cats": [ "deepfakes", "privacy" ], "secs": [ "consumer", "media" ], "date": "2026-05-18", "url": "https://www.njleg.state.nj.us/bill-search/2026/A3064" }, { "id": "m:US-NJ:A1021", "jur": "US-NJ", "level": "state", "num": "A1021", "title": "Creates standards for independent bias auditing of automated employment decision tools.", "sum": "NJ A1021 establishes standards for independent bias auditing of automated employment decision tools (AEDT), requiring third-party audits to detect and mitigate algorithmic discrimination in hiring systems.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/A1021" }, { "id": "m:US-NJ:A3497", "jur": "US-NJ", "level": "state", "num": "A3497", "title": "Establishes \"Forbidding the Algorithmic Inflation of Rent (FAIR) Act.\"", "sum": "The FAIR Act regulates algorithmic systems used to set or inflate residential rental prices, treating algorithmic rental-pricing decisions as a form of automated decision-making subject to fairness and transparency requirements. The bill addresses how landlords and property managers deploy…", "stage": "passed", "cats": [ "anti-discrimination", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-07-20", "url": "https://www.njleg.state.nj.us/bill-search/2026/A3497" }, { "id": "m:US-IA:HSB635", "jur": "US-IA", "level": "state", "num": "HSB635", "title": "A bill for an act relating to the ownership of artificial intelligence output and trained artificial intelligence.(See HF 2691.)", "sum": "IA HSB635 addresses ownership rights for AI-generated output and trained AI models themselves. The bill establishes legal frameworks for who owns the intellectual property and derivatives created by or through artificial intelligence systems.", "stage": "introduced", "cats": [ "frontier", "privacy" ], "secs": [ "media" ], "date": "2026-02-23", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=HSB635" }, { "id": "m:US-NJ:A2774", "jur": "US-NJ", "level": "state", "num": "A2774", "title": "Prohibits agreements intended to conceal certain information concerning development of data centers under MLUL.", "sum": "NJ A2774 prohibits agreements that conceal information about data-center development under the Municipal Land Use Law (MLUL). The bill targets transparency in land-use and permitting processes for data-center projects.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/A2774" }, { "id": "m:US-NJ:A1170", "jur": "US-NJ", "level": "state", "num": "A1170", "title": "Requires submission of energy usage plan to BPU for proposed artificial intelligence data centers; requires all electricity for artificial intelligence data centers to be derived from new…", "sum": "NJ A1170 requires AI data centers to submit energy usage plans to the Board of Public Utilities and mandates that all electricity consumed by AI data centers come from new clean energy sources.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/A1170" }, { "id": "m:US-NJ:A1323", "jur": "US-NJ", "level": "state", "num": "A1323", "title": "Requires boards of education and boards of trustees to adopt policy on use of surveillance systems with artificial intelligence capabilities.", "sum": "This bill requires New Jersey school boards and boards of trustees to adopt formal policies governing the use of surveillance systems equipped with AI capabilities. It establishes a governance and oversight framework for AI-enabled surveillance in educational settings.", "stage": "engrossed", "cats": [ "governance", "gov-use", "education" ], "secs": [ "consumer" ], "date": "2026-03-02", "url": "https://www.njleg.state.nj.us/bill-search/2026/A1323" }, { "id": "m:US-NJ:A799", "jur": "US-NJ", "level": "state", "num": "A799", "title": "Prohibits advertising artificial intelligence system as licensed mental health professional.", "sum": "NJ A799 prohibits advertising or marketing an artificial intelligence system as a licensed mental health professional. The bill creates a disclosure requirement: AI mental-health tools must not falsely claim licensure or professional credentials.", "stage": "introduced", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-01-13", "url": "https://www.njleg.state.nj.us/bill-search/2026/A799" }, { "id": "m:US-HI:HB2597", "jur": "US-HI", "level": "state", "num": "HB2597", "title": "Relating To Artificial Intelligence.", "sum": "HB2597 directs Hawaii's Chief Data Officer to develop and deploy a public-facing AI chatbot on the state's open data portal and to create a governance framework for evaluating, selecting, and publicly reporting on AI tools and vendors used across state agencies.", "stage": "engrossed", "cats": [ "gov-use", "disclosures" ], "secs": [], "date": "2026-03-30", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HB&billnumber=2597&year=2026" }, { "id": "m:US-VT:H0816", "jur": "US-VT", "level": "state", "num": "H0816", "title": "An act relating to regulating the use of artificial intelligence in the provision of mental health services", "sum": "VT H0816 regulates the use of artificial intelligence in the delivery and provision of mental health services. The bill likely establishes requirements for transparency, oversight, and standards governing AI systems used in psychotherapy, counseling, and mental health treatment.", "stage": "passed", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-05-29", "url": "https://legislature.vermont.gov/bill/status/2026/H.816" }, { "id": "m:US-GA:HB1059", "jur": "US-GA", "level": "state", "num": "HB1059", "title": "Data Center Impact Assessment and Development Moratorium Act of 2026; enact", "sum": "Georgia HB1059 imposes a moratorium on construction or development of new data centers and establishes a Data Center Impact Assessment Commission to study their effects. The bill directly addresses data-center siting, energy/utility impact, and policy accountability—core concerns for large-load…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-02", "url": "https://www.legis.ga.gov/legislation/72510" }, { "id": "m:US-HI:HB2499", "jur": "US-HI", "level": "state", "num": "HB2499", "title": "Relating To Demographic Data.", "sum": "HB2499 requires Hawaii's Office of Enterprise Technology Services to establish statewide standards for collecting and reporting race and ethnicity demographic data across state and county agencies, with explicit transparency and accountability requirements tied to AI systems that use this data. The…", "stage": "introduced", "cats": [ "governance", "anti-discrimination", "disclosures" ], "secs": [], "date": "2026-02-06", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HB&billnumber=2499&year=2026" }, { "id": "m:US-HI:HB2591", "jur": "US-HI", "level": "state", "num": "HB2591", "title": "Relating To Artificial Intelligence.", "sum": "HB2591 directs Hawaii's Chief Data Officer to develop a public-facing AI chatbot on the state's open data portal to help citizens find information, and to establish a procurement and governance framework for AI tools used across state agencies with mandatory reporting of AI vendors and use cases.", "stage": "introduced", "cats": [ "gov-use", "disclosures" ], "secs": [], "date": "2026-02-02", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HB&billnumber=2591&year=2026" }, { "id": "m:US-KS:HR6023", "jur": "US-KS", "level": "state", "num": "HR6023", "title": "Opposing the federal preemption of state laws that regulate artificial intelligence.", "sum": "KS HR6023 is a resolution opposing federal preemption of state AI regulation, asserting Kansas's right to enact its own AI laws independent of federal mandates. It is a statement of legislative intent on state regulatory sovereignty over AI policy.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-01-29", "url": "https://kslegislature.gov/li/b2025_26/measures/hr6023/" }, { "id": "m:US-HI:HB2500", "jur": "US-HI", "level": "state", "num": "HB2500", "title": "Relating To Artificial Intelligence.", "sum": "HB2500 requires developers and deployers of algorithmic decision systems to disclose their use and provide individuals with access and correction rights for data used in those systems. It also imposes joint and several liability on developers and deployers for violations of law resulting from the…", "stage": "introduced", "cats": [ "anti-discrimination", "disclosures", "consumer-financial" ], "secs": [], "date": "2026-02-06", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HB&billnumber=2500&year=2026" }, { "id": "m:US-HI:HB2537", "jur": "US-HI", "level": "state", "num": "HB2537", "title": "Relating To The Patients' Bill Of Rights.", "sum": "HB2537 establishes patient rights and carrier obligations regarding prior authorization and claims determinations, with specific requirements for health carriers' use of automated decision support tools in utilization review. The bill mandates safeguards for protected health information and expands…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "disclosures" ], "secs": [ "health", "finserv" ], "date": "2026-02-02", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HB&billnumber=2537&year=2026" }, { "id": "m:US-HI:HB2502", "jur": "US-HI", "level": "state", "num": "HB2502", "title": "Relating To Artificial Intelligence.", "sum": "HI HB2502 requires operators of conversational AI services to disclose their AI nature to users, implement safety protocols to prevent and respond to suicidal ideation, and provide specific protections for minor account holders. Operators must file annual compliance reports with the state and face…", "stage": "introduced", "cats": [ "disclosures", "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-02-11", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HB&billnumber=2502&year=2026" }, { "id": "m:US-KS:SB405", "jur": "US-KS", "level": "state", "num": "SB405", "title": "Making it unlawful for a person to knowingly train artificial intelligence to encourage or support suicide or the unlawful killing of another person, provide emotional support, develop…", "sum": "KS SB405 makes it unlawful to knowingly train AI systems to encourage suicide or violence, provide emotional support, develop emotional relationships, simulate healthcare professionals, impersonate humans, or encourage isolation. The bill targets harmful uses of AI chatbots and autonomous systems,…", "stage": "introduced", "cats": [ "minors", "healthcare", "consumer-financial" ], "secs": [ "consumer", "health" ], "date": "2026-02-09", "url": "https://kslegislature.gov/li/b2025_26/measures/sb405/" }, { "id": "m:US-HI:HB2607", "jur": "US-HI", "level": "state", "num": "HB2607", "title": "Relating To Publicity Rights.", "sum": "HB2607 protects individuals' publicity and likeness rights against unauthorized use in AI-generated deepfakes. The bill creates legal remedies for non-consensual synthetic media featuring a person's image, voice, or likeness.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-02-06", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HB&billnumber=2607&year=2026" }, { "id": "m:US-NM:HB212", "jur": "US-NM", "level": "state", "num": "HB212", "title": "Voice & Visual Likeness Rights Act", "sum": "This bill protects individuals' voice and visual likeness rights, likely addressing unauthorized creation and use of synthetic replicas—a core deepfake concern. The legislation establishes rights and remedies for misuse of a person's identity in synthetic media.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-01-28", "url": "https://www.nmlegis.gov/Legislation/Legislation?chamber=H&legtype=B&legno=212&year=26" }, { "id": "m:US-CA:AB1651", "jur": "US-CA", "level": "state", "num": "AB1651", "title": "State Bar of California: artificial intelligence.", "sum": "CA AB1651 adds Section 6060.15 to the Business and Professions Code to regulate attorneys' use of artificial intelligence, likely requiring disclosure and governance standards for lawyers deploying or relying on AI tools in legal practice.", "stage": "enrolled", "cats": [ "governance", "disclosures" ], "secs": [], "date": "2026-08-10", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB1651" }, { "id": "m:US-IA:HSB643", "jur": "US-IA", "level": "state", "num": "HSB643", "title": "A bill for an act relating to the use of synthetic media in campaign materials, and making penalties applicable.(See HF 2609.)", "sum": "This bill regulates the use of synthetic media (deepfakes) in campaign materials and establishes penalties for violations. It directly addresses the creation and deployment of manipulated audio/video content in political contexts.", "stage": "introduced", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-02-19", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=HSB643" }, { "id": "m:US-SD:SB168", "jur": "US-SD", "level": "state", "num": "SB168", "title": "Regulate the use of chatbots by minors.", "sum": "SD SB168 regulates chatbot use by minors, likely requiring disclosures or restrictions on how chatbots interact with children. The bill directly addresses automated conversational systems and their application to a protected population.", "stage": "introduced", "cats": [ "minors", "disclosures" ], "secs": [ "consumer" ], "date": "2026-02-12", "url": "https://sdlegislature.gov/#/Session/Bill/26549" }, { "id": "m:US-OR:HB4103", "jur": "US-OR", "level": "state", "num": "HB4103", "title": "Relating to artificial intelligence.", "sum": "Creates the Senator Aaron Woods Commission on Artificial Intelligence to monitor and report on the state's use of AI technologies, and directs the Oregon Department of Administrative Services to hire a Chief Artificial Intelligence Officer responsible for developing the state's strategic vision on…", "stage": "failed/dead", "cats": [ "governance", "gov-use", "privacy" ], "secs": [], "date": "2026-03-06", "url": "https://olis.oregonlegislature.gov/liz/2026R1/Measures/Overview/HB4103" }, { "id": "m:US-VT:H0822", "jur": "US-VT", "level": "state", "num": "H0822", "title": "An act relating to the regulation of generative artificial intelligence systems", "sum": "VT H0822 is a comprehensive regulation of generative AI systems, likely covering safety frameworks, transparency requirements, and safeguards for consequential uses. The bill directly addresses large-scale generative AI systems and their governance.", "stage": "introduced", "cats": [ "frontier", "disclosures", "anti-discrimination" ], "secs": [], "date": "2026-01-29", "url": "https://legislature.vermont.gov/bill/status/2026/H.822" }, { "id": "m:US-SD:SB170", "jur": "US-SD", "level": "state", "num": "SB170", "title": "Require the provision of a notice to consumers, interacting with certain chatbots or other human-simulating computer technologies that could mislead or deceive the consumer.", "sum": "SD SB170 requires chatbots and other human-simulating computer technologies to disclose to consumers that they are interacting with automated systems rather than humans, preventing deceptive or misleading experiences. The bill targets AI systems capable of mimicking human behavior in ways that…", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-02-17", "url": "https://sdlegislature.gov/#/Session/Bill/26551" }, { "id": "m:US-IA:HF2204", "jur": "US-IA", "level": "state", "num": "HF2204", "title": "A bill for an act relating to the requirements for chatbot deployers, including required protocols, limitations on data collection, and requirements for minors to interact with artificial…", "sum": "IA HF2204 establishes requirements for chatbot deployers, including protocols for AI companions and therapeutic chatbots used by minors, limitations on data collection, and disclosure requirements. The bill creates civil and punitive penalties and private causes of action for violations.", "stage": "introduced", "cats": [ "minors", "disclosures", "consumer-financial" ], "secs": [ "consumer", "health" ], "date": "2026-01-29", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=HF2204" }, { "id": "m:US-OR:SB1546", "jur": "US-OR", "level": "state", "num": "SB1546", "title": "Relating to artificial intelligence companions.", "sum": "OR SB1546 requires operators of AI companion chatbots to disclose to users that they are interacting with software (not a human), implement protocols to detect and prevent outputs that could induce suicidal or self-harm ideation, and take special protective steps for minor users. Operators must…", "stage": "passed", "cats": [ "disclosures", "minors", "consumer-financial" ], "secs": [ "consumer", "health" ], "date": "2026-04-06", "url": "https://olis.oregonlegislature.gov/liz/2026R1/Measures/Overview/SB1546" }, { "id": "m:US-WV:SB658", "jur": "US-WV", "level": "state", "num": "SB658", "title": "Relating to certified microgrid district projects and certified high impact data center projects", "sum": "WV SB658 addresses regulatory authority over certified microgrid districts and certified high-impact data center projects, restoring local control to counties and municipalities. The bill impacts the siting, permitting, and governance framework for data-center infrastructure projects in West…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-29", "url": "http://www.wvlegislature.gov/Bill_Status/Bills_history.cfm?input=658&year=2026&sessiontype=RS&btype=bill" }, { "id": "m:US-WV:HB4948", "jur": "US-WV", "level": "state", "num": "HB4948", "title": "To create a buffer zone between a data center and residence, school or house of worship", "sum": "WV HB4948 establishes a minimum 500-foot buffer zone between data-center construction or operation and residential properties, schools, and houses of worship. The bill is a land-use and siting regulation for data-center infrastructure.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-29", "url": "http://www.wvlegislature.gov/Bill_Status/Bills_history.cfm?input=4948&year=2026&sessiontype=RS&btype=bill" }, { "id": "m:US-OR:HB4054", "jur": "US-OR", "level": "state", "num": "HB4054", "title": "Relating to downcoding.", "sum": "OR HB4054 requires health insurers using AI or automated technology to downcode insurance claims to notify providers each time and to offer an appeals process for those automated decisions. The bill targets a specific form of algorithmic decision-making in healthcare reimbursement.", "stage": "failed/dead", "cats": [ "healthcare", "anti-discrimination", "disclosures" ], "secs": [ "health", "finserv" ], "date": "2026-03-06", "url": "https://olis.oregonlegislature.gov/liz/2026R1/Measures/Overview/HB4054" }, { "id": "m:US-SD:SB169", "jur": "US-SD", "level": "state", "num": "SB169", "title": "Place requirements on the use of artificial intelligence systems by health carriers in making determinations about the provision of health care services.", "sum": "SD SB169 would impose requirements on health insurance carriers' use of AI systems when making determinations about health care coverage and authorization. The bill targets algorithmic decision-making in insurance utilization review and related health-care determinations.", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "disclosures" ], "secs": [ "health", "finserv" ], "date": "2026-02-17", "url": "https://sdlegislature.gov/#/Session/Bill/26550" }, { "id": "m:US-VT:H0829", "jur": "US-VT", "level": "state", "num": "H0829", "title": "An act relating to notification of robocalls that use an artificial voice", "sum": "VT H0829 requires notification to recipients when robocalls use artificial or synthetic voice technology. The bill establishes disclosure requirements for calls generated by AI/voice synthesis systems.", "stage": "introduced", "cats": [ "deepfakes", "disclosures" ], "secs": [ "media" ], "date": "2026-01-29", "url": "https://legislature.vermont.gov/bill/status/2026/H.829" }, { "id": "m:US-OH:HB663", "jur": "US-OH", "level": "state", "num": "HB663", "title": "Create the Artificial Intelligence Study Commission", "sum": "Creates an Artificial Intelligence Study Commission to examine and make recommendations on the use of artificial intelligence in state and local government operations.", "stage": "introduced", "cats": [ "gov-use" ], "secs": [], "date": "2026-02-04", "url": "https://www.legislature.ohio.gov/legislation/136/hb663" }, { "id": "m:US-SC:S0867", "jur": "US-SC", "level": "state", "num": "S0867", "title": "Data Center Development", "sum": "SC S0867 establishes a comprehensive regulatory framework for data center development in South Carolina, including siting permits, operational efficiency and water standards, infrastructure and environmental assessments, utility rate coordination, and decommissioning requirements. The bill creates…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-06", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=0867&session=126&summary=B" }, { "id": "m:US-IA:SF2166", "jur": "US-IA", "level": "state", "num": "SF2166", "title": "A bill for an act relating to the publication of electioneering communications containing synthetic media, and providing penalties.", "sum": "IA SF2166 regulates the publication of electioneering communications that contain synthetic media (deepfakes), establishing disclosure and penalty requirements for political ads using synthetic or manipulated audio/video.", "stage": "introduced", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-02-03", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=SF2166" }, { "id": "m:US-KS:HB2594", "jur": "US-KS", "level": "state", "num": "HB2594", "title": "Modifying the elements of the crime of blackmail related to threatened dissemination of any image, video or other recording of another identifiable person who is nude or engaged in sexual…", "sum": "KS HB2594 modifies blackmail/extortion law to address threatened dissemination of intimate images and recordings (nude or sexual activity). The bill clarifies that such threats constitute a breach of privacy and tightens the statutory elements of the crime.", "stage": "engrossed", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-03-27", "url": "https://kslegislature.gov/li/b2025_26/measures/hb2594/" }, { "id": "m:US-KS:HB2592", "jur": "US-KS", "level": "state", "num": "HB2592", "title": "Creating the Kansas task force on artificial intelligence and emerging technologies to study such technologies and make recommendations to the legislature.", "sum": "KS HB2592 establishes a Kansas task force on artificial intelligence and emerging technologies to study these technologies and make recommendations to the legislature. The task force will conduct a systematic review and provide policy guidance on AI regulation and oversight.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-02-09", "url": "https://kslegislature.gov/li/b2025_26/measures/hb2592/" }, { "id": "m:US-OH:HB665", "jur": "US-OH", "level": "state", "num": "HB665", "title": "Regulate the use of pricing algorithms", "sum": "OH HB665 amends Ohio's Revised Code to regulate the use of pricing algorithms, establishing rules around algorithmic pricing practices. The bill targets automated decision-making in commercial pricing and likely includes transparency, fairness, or disclosure requirements tied to algorithmic pricing…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-02-04", "url": "https://www.legislature.ohio.gov/legislation/136/hb665" }, { "id": "m:US-WI:AB959", "jur": "US-WI", "level": "state", "num": "AB959", "title": "The legal status of artificial intelligence.", "sum": "WI AB959 proposes to establish the legal status and personhood of artificial intelligence systems within Wisconsin law. The bill creates a new statutory framework (s. 134.44) to define how AI entities are treated under the state's legal system.", "stage": "failed/dead", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-03-23", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/asm/bill/ab959" }, { "id": "m:US-WI:AB965", "jur": "US-WI", "level": "state", "num": "AB965", "title": "Artificial intelligence systems that simulate humanlike relationships with children and providing a penalty.", "sum": "WI AB965 would prohibit AI systems designed to simulate humanlike relationships with children and impose penalties for violation. The bill targets companion chatbots and similar AI that create parasocial bonds with minors.", "stage": "failed/dead", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-03-23", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/asm/bill/ab965" }, { "id": "m:US-IL:SB2996", "jur": "US-IL", "level": "state", "num": "SB2996", "title": "ELEC CD-AI ADVERT DISCLOSURE", "sum": "Requires that qualified political advertisements generated in whole or substantially by AI include a clear and conspicuous disclosure statement. The bill provides exemptions, civil penalties, injunctive relief, and attorney's fees for violations.", "stage": "introduced", "cats": [ "elections", "disclosures" ], "secs": [ "media" ], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=2996&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB2993", "jur": "US-IL", "level": "state", "num": "SB2993", "title": "AI-PRESCRIBING MEDICATION", "sum": "IL SB2993 prohibits licensed medical practitioners from using AI to prescribe medication unless they maintain full control and responsibility over the prescription decision. The bill grants the Department of Financial and Professional Regulation authority to investigate violations and establish…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "health" ], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=2993&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-WA:HB2708", "jur": "US-WA", "level": "state", "num": "HB2708", "title": "Removing a tax exemption for the replacement of equipment for data centers.", "sum": "WA HB2708 removes a tax exemption for replacement equipment in data centers, effectively increasing the tax burden on data-center operators for capital equipment upgrades.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-30", "url": "https://app.leg.wa.gov/billsummary?BillNumber=2708&Year=2025&Initiative=false" }, { "id": "m:US-IL:HB4705", "jur": "US-IL", "level": "state", "num": "HB4705", "title": "ARTIFICIAL INTELLIGENCE SAFETY", "sum": "IL HB4705 requires large frontier AI model developers and chatbot providers to create, implement, and publicly post safety and child protection plans, with oversight by the Attorney General through incident reporting mechanisms, third-party audits, and whistleblower protections. The bill…", "stage": "introduced", "cats": [ "governance", "frontier", "minors" ], "secs": [ "consumer" ], "date": "2026-05-08", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=4705&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB3027", "jur": "US-IL", "level": "state", "num": "SB3027", "title": "NO AI IN HEALTH CARE PRICING", "sum": "IL SB3027 prohibits hospitals from using artificial intelligence to set or influence healthcare pricing or billing decisions. The bill treats AI pricing/billing as a consequential automated decision subject to fairness constraints under healthcare and consumer-protection law.", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "consumer-financial" ], "secs": [ "health" ], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3027&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB2995", "jur": "US-IL", "level": "state", "num": "SB2995", "title": "CONSUMER FRAUD-AI DISCLOSURE", "sum": "IL SB2995 amends consumer fraud law to require clear disclosure when AI is used to communicate with consumers in a manner that could mislead them into thinking they're speaking with a human, and mandates notification whenever AI is used to sell goods or services. The bill also requires businesses…", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=2995&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-MD:SB427", "jur": "US-MD", "level": "state", "num": "SB427", "title": "Property Taxes - Authority of Counties to Establish a Subclass and Set a Special Rate for Personal Property of Data Centers", "sum": "MD SB427 authorizes Baltimore City and Maryland counties to establish a special personal-property tax subclass and set preferential tax rates for qualified data centers. The bill applies to taxable years beginning after June 30, 2026.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-04", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0427?ys=2026RS" }, { "id": "m:US-RI:S2346", "jur": "US-RI", "level": "state", "num": "S2346", "title": "Establishes property, tangible, sales and use tax exemptions as incentives for the location of qualified data centers in Rhode Island.", "sum": "RI S2346 establishes property, tangible, sales, and use tax exemptions to incentivize the location of qualified data centers in Rhode Island. The bill is a tax-incentive mechanism for data-center siting and infrastructure development.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-10", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-VT:H0846", "jur": "US-VT", "level": "state", "num": "H0846", "title": "An act relating to artificial intelligence and elections", "sum": "VT H0846 addresses the use of artificial intelligence and automated systems in elections, likely covering deepfake/synthetic media risks to election integrity, AI-generated political content, and disclosure requirements for AI-manipulated election-related materials.", "stage": "introduced", "cats": [ "elections", "deepfakes", "disclosures" ], "secs": [ "media" ], "date": "2026-01-30", "url": "https://legislature.vermont.gov/bill/status/2026/H.846" }, { "id": "m:US-PA:HB2175", "jur": "US-PA", "level": "state", "num": "HB2175", "title": "Providing for consumer protection and for artificial intelligence and chatbots; imposing duties on the Bureau of Consumer Protection in the Office of Attorney General; and imposing…", "sum": "PA HB2175 amends Pennsylvania's consumer-protection law to impose duties on the Bureau of Consumer Protection regarding artificial intelligence and chatbots, including disclosure and transparency requirements. The bill creates new enforcement mechanisms and penalties for violations tied to AI and…", "stage": "introduced", "cats": [ "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-03-19", "url": "https://www.palegis.us/legislation/bills/2025/hb2175" }, { "id": "m:US-MS:HB1810", "jur": "US-MS", "level": "state", "num": "HB1810", "title": "\"Mississippi Human Capital Supplemental Tax Act\"; create.", "sum": "MS HB1810 establishes a supplemental tax on artificial intelligence displacement of human workers, with proceeds funding a workforce transition and development fund. The bill creates an AI Workforce Impact Advisory Council to oversee the program and provide policy guidance on worker displacement…", "stage": "failed/dead", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-02-25", "url": "https://billstatus.ls.state.ms.us/2026/pdf/history/HB/HB1810.xml" }, { "id": "m:US-NY:A10047", "jur": "US-NY", "level": "state", "num": "A10047", "title": "Establishes disclosure requirements for AI-generated or materially AI-altered media depicting historically recognized human disasters when such media is publicly distributed; requires…", "sum": "NY A10047 requires disclosure of AI-generated or materially AI-altered media depicting historical disasters when publicly distributed, and mandates that platform operators allow labeling of such content. The attorney general is empowered to enforce these disclosure requirements.", "stage": "introduced", "cats": [ "deepfakes", "disclosures", "consumer-financial" ], "secs": [ "media" ], "date": "2026-01-30", "url": "https://www.nysenate.gov/legislation/bills/2025/A10047" }, { "id": "m:US-NY:A10049", "jur": "US-NY", "level": "state", "num": "A10049", "title": "Requires the public service commission establish a grid modernization surcharge imposed on utilities for the energy use of data centers and high-intensity data centers which meet a…", "sum": "NY A10049 requires the Public Service Commission to establish a grid modernization surcharge on utilities for the energy consumption of data centers and high-intensity data centers that exceed specified electricity or IT-load thresholds, with revenues directed to a fund financing grid reliability,…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-30", "url": "https://www.nysenate.gov/legislation/bills/2025/A10049" }, { "id": "m:US-NY:S09089", "jur": "US-NY", "level": "state", "num": "S09089", "title": "Enacts the \"food delivery worker safety and fair algorithms act\" to prohibit food delivery platforms from utilizing or deploying any algorithmic management system that requires or…", "sum": "NY S09089 prohibits food delivery platforms from using algorithmic management systems that impose unrealistic time windows, penalize workers for traffic or safety compliance, or incentivize unsafe conduct. The bill restricts algorithmic deactivation, deprioritization, pay reduction, or bonus…", "stage": "introduced", "cats": [ "anti-discrimination", "hiring" ], "secs": [ "hr" ], "date": "2026-01-30", "url": "https://www.nysenate.gov/legislation/bills/2025/S9089" }, { "id": "m:US-IL:HB4735", "jur": "US-IL", "level": "state", "num": "HB4735", "title": "TRANSPARENCY IN DOWNCODING ACT", "sum": "IL HB4735 prohibits health insurers from using automated systems to downcode medical claims and requires that downcoding decisions be made by licensed physicians rather than algorithms. The bill also bars discriminatory downcoding patterns and establishes enforcement and appeal mechanisms.", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "health", "finserv" ], "date": "2026-05-05", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=4735&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-MD:HB712", "jur": "US-MD", "level": "state", "num": "HB712", "title": "Civil Actions - Product Liability - Artificial Intelligence Systems", "sum": "MD HB712 creates a product-liability cause of action against AI developers and deployers for defective design, inadequate warnings, and breach of warranty, and grants the Attorney General enforcement authority. The bill establishes liability frameworks specifically for AI systems, treating them as…", "stage": "introduced", "cats": [ "consumer-financial", "frontier" ], "secs": [], "date": "2026-02-05", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB0712?ys=2026RS" }, { "id": "m:US-SD:HB1246", "jur": "US-SD", "level": "state", "num": "HB1246", "title": "Prohibit nondisclosure of certain agreements related to data centers.", "sum": "SD HB1246 would prohibit nondisclosure agreements (NDAs) in contracts between data-center operators and the state or local governments, requiring transparency of deal terms. This falls within data-center policy because it directly addresses accountability and transparency in data-center incentive…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-20", "url": "https://sdlegislature.gov/#/Session/Bill/27243" }, { "id": "m:US-VT:H0855", "jur": "US-VT", "level": "state", "num": "H0855", "title": "An act relating to defenses in civil actions based on harm caused by artificial intelligence", "sum": "VT H0855 establishes legal defenses in civil liability actions for harms caused by artificial intelligence systems. The bill addresses how courts should treat AI-caused injuries, likely creating a framework for when AI developers or deployers may claim reduced liability.", "stage": "introduced", "cats": [ "consumer-financial" ], "secs": [], "date": "2026-02-03", "url": "https://legislature.vermont.gov/bill/status/2026/H.855" }, { "id": "m:US-AZ:SB1786", "jur": "US-AZ", "level": "state", "num": "SB1786", "title": "Artificial intelligence; content verification", "sum": "AZ SB1786 requires AI systems to verify and label synthetic or AI-generated content, establishing transparency and disclosure obligations for artificial intelligence used to create or modify digital media. The bill addresses deepfakes and synthetic media by mandating content-origin attribution.", "stage": "engrossed", "cats": [ "disclosures", "deepfakes" ], "secs": [ "media" ], "date": "2026-05-05", "url": "https://apps.azleg.gov/BillStatus/BillOverview/85450" }, { "id": "m:US-NY:A10118", "jur": "US-NY", "level": "state", "num": "A10118", "title": "Enacts the \"food delivery worker safety and fair algorithms act\" to prohibit food delivery platforms from utilizing or deploying any algorithmic management system that requires or…", "sum": "This bill prohibits food delivery platforms from using algorithmic management systems that impose unrealistic time windows, penalize workers for missing estimates without accounting for traffic/weather, or incentivize unsafe driving. It bars algorithmic penalties or pay reductions tied to workers'…", "stage": "introduced", "cats": [ "anti-discrimination", "hiring" ], "secs": [ "hr" ], "date": "2026-02-02", "url": "https://www.nysenate.gov/legislation/bills/2025/A10118" }, { "id": "m:US-IL:HB4804", "jur": "US-IL", "level": "state", "num": "HB4804", "title": "REGISTERED NURSE USE OF AI", "sum": "Illinois bill that regulates registered nurses' use of AI in direct patient care, requiring validation and bias monitoring, prohibiting AI substitution for nursing services, mandating patient transparency, and barring sole-reliance on AI for staffing and clinical triage decisions. Creates grounds…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "disclosures" ], "secs": [ "health" ], "date": "2026-03-27", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=4804&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB3120", "jur": "US-IL", "level": "state", "num": "SB3120", "title": "DCEO-DATA CENTERS", "sum": "IL SB3120 amends Illinois commerce law to require new and existing data centers seeking qualifying-business status to disclose their water stewardship strategies in applications and annual state reports. The bill establishes water-management accountability as a condition for data-center incentives.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3120&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB3114", "jur": "US-IL", "level": "state", "num": "SB3114", "title": "TRANSPARENCY IN DOWNCODING ACT", "sum": "IL SB3114 regulates health insurers' use of algorithms and automated systems to downcode medical claims, requiring human review of all downcoding decisions and prohibiting discriminatory or targeted downcoding practices against providers treating complex/chronic conditions.", "stage": "passed", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "finserv", "health" ], "date": "2026-07-10", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3114&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-AZ:SB1717", "jur": "US-AZ", "level": "state", "num": "SB1717", "title": "Biometric identifiers; commercial use; prohibitions", "sum": "AZ SB1717 prohibits commercial use of biometric identifiers (facial recognition, fingerprints, iris scans, etc.) without explicit consent and establishes enforcement mechanisms. The bill directly restricts automated biometric collection and analysis by private entities and government.", "stage": "introduced", "cats": [ "privacy", "public-safety" ], "secs": [ "consumer" ], "date": "2026-02-09", "url": "https://apps.azleg.gov/BillStatus/BillOverview/85367" }, { "id": "m:US-IL:SB3180", "jur": "US-IL", "level": "state", "num": "SB3180", "title": "AI DATA PRIVACY ACT", "sum": "IL SB3180 prohibits AI deployers from training models on user data and retaining that training data indefinitely without specified conditions; violations are treated as unlawful consumer practices and create a private right of action.", "stage": "introduced", "cats": [ "privacy", "consumer-financial" ], "secs": [], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3180&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:HB4799", "jur": "US-IL", "level": "state", "num": "HB4799", "title": "AI SAFETY MEASURES ACT", "sum": "IL HB4799 requires large frontier AI developers to adopt and publish safety frameworks addressing catastrophic risk, transparency, and cybersecurity, with mandatory incident reporting to the Attorney General and civil penalties for non-compliance. It also establishes a state-managed public cloud…", "stage": "introduced", "cats": [ "governance", "frontier", "disclosures" ], "secs": [], "date": "2026-02-06", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=4799&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-GA:SB444", "jur": "US-GA", "level": "state", "num": "SB444", "title": "Private Review Agents; certain decisions with regard to the provision of insurance coverage for healthcare services shall not be based solely on artificial intelligence systems; provide", "sum": "GA SB444 prohibits private review agents (insurance utilization reviewers) from making healthcare coverage decisions based solely on AI systems or software tools. The bill requires human oversight in insurance authorization decisions, effectively banning fully automated denial or approval of…", "stage": "passed", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "finserv", "health" ], "date": "2026-05-05", "url": "https://www.legis.ga.gov/legislation/72666" }, { "id": "m:US-CA:SB947", "jur": "US-CA", "level": "state", "num": "SB947", "title": "Employment: automated decision systems.", "sum": "CA SB947 adds a new section to California's Labor Code requiring employers to disclose the use of automated decision systems (ADS) in employment and establish fairness, transparency, and accountability standards for such systems. The bill mandates impact assessments and bias audits for ADS used in…", "stage": "introduced", "cats": [ "hiring", "anti-discrimination", "disclosures" ], "secs": [ "hr" ], "date": "2026-08-05", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB947" }, { "id": "m:US-CA:SB951", "jur": "US-CA", "level": "state", "num": "SB951", "title": "Employment: technological displacement: notice.", "sum": "CA SB951 requires employers to provide notice to workers when implementing technological systems (including AI and automation) that displace jobs, and mandates negotiation or consultation obligations with affected workers and labor representatives.", "stage": "introduced", "cats": [ "hiring" ], "secs": [ "hr" ], "date": "2026-08-05", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB951" }, { "id": "m:US-IL:SB3263", "jur": "US-IL", "level": "state", "num": "SB3263", "title": "AI PROVENANCE DATA ACT", "sum": "IL SB3263 requires AI tool providers to embed provenance labels (metadata revealing whether content was AI-generated) in images, videos, and audio, and to make available free tools to read those labels. The bill sets compliance requirements for large online platforms, device manufacturers, and…", "stage": "introduced", "cats": [ "disclosures", "deepfakes" ], "secs": [ "media" ], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3263&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB3262", "jur": "US-IL", "level": "state", "num": "SB3262", "title": "COMPANION AI PROTECTION ACT", "sum": "IL SB3262 regulates companion AI chatbots by prohibiting specified harmful features, requiring operators to disclose to users that they are interacting with an AI product, and mandating safeguards including crisis intervention protocols. The bill establishes auditing, reporting, and enforcement…", "stage": "introduced", "cats": [ "minors", "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3262&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB3261", "jur": "US-IL", "level": "state", "num": "SB3261", "title": "ARTIFICIAL INTELLIGENCE SAFETY", "sum": "IL SB3261 requires frontier AI model developers and large chatbot providers to create, implement, and publicly disclose safety and child protection plans. It establishes an Attorney General mechanism for reporting safety incidents, mandates third-party audits, protects whistleblowers, and imposes…", "stage": "introduced", "cats": [ "governance", "frontier", "minors" ], "secs": [ "consumer" ], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3261&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB3312", "jur": "US-IL", "level": "state", "num": "SB3312", "title": "AI SAFETY MEASURES ACT", "sum": "Illinois SB3312 establishes a statewide AI safety framework requiring large frontier developers to adopt safety protocols addressing catastrophic risk, transparency, and cybersecurity, with mandatory incident reporting to state emergency/homeland security agencies and civil penalties for…", "stage": "introduced", "cats": [ "governance", "frontier", "data-centers" ], "secs": [], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3312&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-VT:H0875", "jur": "US-VT", "level": "state", "num": "H0875", "title": "An act relating to the possession and promotion of child sexual abuse materials to include computer-generated images", "sum": "VT H0875 expands the definition of child sexual abuse material (CSAM) to include computer-generated or synthetic images of minors, criminalizing their possession and promotion. This directly addresses AI-generated deepfake and synthetic media harms to children.", "stage": "introduced", "cats": [ "minors", "deepfakes" ], "secs": [ "consumer", "media" ], "date": "2026-02-04", "url": "https://legislature.vermont.gov/bill/status/2026/H.875" }, { "id": "m:US-TN:HB2463", "jur": "US-TN", "level": "state", "num": "HB2463", "title": "AN ACT to amend Tennessee Code Annotated, Section 39-17-1002; Section 67-6-102 and Title 68, relative to the Bring Your Own Generation (BYOG) Act.", "sum": "The Bring Your Own Generation (BYOG) Act amends Tennessee utility and tax law to allow private entities to generate and supply their own electrical power. This directly impacts large data-center operators seeking to self-provision compute infrastructure with dedicated power generation.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-18", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB2463&ga=114" }, { "id": "m:US-TN:SB2680", "jur": "US-TN", "level": "state", "num": "SB2680", "title": "AN ACT to amend Tennessee Code Annotated, Title 4; Title 7; Title 8; Title 47, Chapter 18; Title 65 and Title 68, relative to products connected to foreign adversaries.", "sum": "This bill prohibits electric utilities and high-performance computing centers in Tennessee from using transformers, parts, or equipment manufactured or controlled by foreign adversaries, and requires them to report compliance to the state comptroller. It directly targets data-center infrastructure…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-10", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB2680&ga=114" }, { "id": "m:US-TN:SB2618", "jur": "US-TN", "level": "state", "num": "SB2618", "title": "AN ACT to amend Tennessee Code Annotated, Title 4; Title 10; Title 16; Title 36; Title 37; Title 38; Title 39; Title 40; Title 45; Title 47; Title 48; Title 49; Title 53; Title 63; Title…", "sum": "This bill requires Tennessee's artificial intelligence advisory council to publish its annual findings on the economic, labor, and ethical impacts of AI on the state legislature's website, in addition to submitting reports to the governor and legislative speakers. The bill amends multiple sections…", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-02-05", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB2618&ga=114" }, { "id": "m:US-TN:SB2681", "jur": "US-TN", "level": "state", "num": "SB2681", "title": "AN ACT to amend Tennessee Code Annotated, Section 39-17-1002; Section 67-6-102 and Title 68, relative to the Bring Your Own Generation (BYOG) Act.", "sum": "TN SB2681 enacts the 'Bring Your Own Generation Act,' which amends Tennessee tax and utility code to establish rules for distributed energy generation (BYOG) facilities. The bill creates a regulatory and tax framework for on-site or behind-the-meter power generation, likely intended to support…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-07", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB2681&ga=114" }, { "id": "m:US-TN:HB2456", "jur": "US-TN", "level": "state", "num": "HB2456", "title": "AN ACT to amend Tennessee Code Annotated, Title 5; Title 6; Title 7; Title 10; Title 62; Title 65; Title 68 and Title 69, relative to data centers.", "sum": "TN HB2456 requires data centers to register with the Department of Revenue and mandates that fuel suppliers and electric/water utilities report usage rates and fuel/service delivery to registered data centers. The bill directs the commissioner to compile and publish aggregated utility usage and…", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-18", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB2456&ga=114" }, { "id": "m:US-TN:SB2321", "jur": "US-TN", "level": "state", "num": "SB2321", "title": "AN ACT to amend Tennessee Code Annotated, Title 2 and Title 39, Chapter 17, relative to deepfakes in election communications.", "sum": "This bill prohibits the distribution of electoral deepfakes within 90 days of an election if the person or entity knows or should have known the content is a deceptive depiction of a candidate or political party, and establishes civil penalties with enumerated exceptions.", "stage": "introduced", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-02-05", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB2321&ga=114" }, { "id": "m:US-TN:SB2521", "jur": "US-TN", "level": "state", "num": "SB2521", "title": "AN ACT to amend Tennessee Code Annotated, Title 2; Title 4; Title 8; Title 10; Title 16; Title 29; Title 36; Title 37; Title 38; Title 39; Title 40; Title 45; Title 47; Title 48; Title 49;…", "sum": "This bill expands the mandate of Tennessee's artificial intelligence advisory council to include recommendations on strategies to detect and minimize fraud committed using AI. The bill amends multiple state code sections to integrate AI-fraud detection requirements into the council's annual…", "stage": "introduced", "cats": [ "governance", "consumer-financial" ], "secs": [], "date": "2026-03-10", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB2521&ga=114" }, { "id": "m:US-TN:SB2653", "jur": "US-TN", "level": "state", "num": "SB2653", "title": "AN ACT to amend Tennessee Code Annotated, Title 5; Title 6; Title 7; Title 10; Title 62; Title 65; Title 68 and Title 69, relative to the Tennessee Data Center Impact Review Act.", "sum": "TN SB2653 creates the Tennessee Data Center Impact Review Act, establishing a regulatory framework for data-center siting, permitting, and operational oversight across multiple state code sections governing utilities, environmental impact, and infrastructure.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-07", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB2653&ga=114" }, { "id": "m:US-TN:HB2619", "jur": "US-TN", "level": "state", "num": "HB2619", "title": "AN ACT to amend Tennessee Code Annotated, Title 4; Title 8; Title 56 and Title 71, relative to insurance.", "sum": "TN HB2619 prohibits health insurance entities from using 'downcoding'—an automated practice that reduces reimbursement codes to prevent providers from collecting full fees for services rendered. The bill establishes a commission to review insurance practices and addresses automated decision-making…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "finserv", "health" ], "date": "2026-04-15", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB2619&ga=114" }, { "id": "m:US-TN:SB2171", "jur": "US-TN", "level": "state", "num": "SB2171", "title": "AN ACT to amend Tennessee Code Annotated, Title 4; Title 10, Chapter 7; Title 47; Title 58 and Title 68, relative to artificial intelligence.", "sum": "TN SB2171 enacts the 'Artificial Intelligence Public Safety and Child Protection Transparency Act,' amending multiple Tennessee code titles to establish AI-related transparency and safety requirements, particularly focused on child protection and public safety applications of AI systems.", "stage": "introduced", "cats": [ "minors", "public-safety", "disclosures" ], "secs": [ "consumer" ], "date": "2026-04-15", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB2171&ga=114" }, { "id": "m:US-TN:HB2214", "jur": "US-TN", "level": "state", "num": "HB2214", "title": "AN ACT to amend Tennessee Code Annotated, Title 2 and Title 39, Chapter 17, relative to deepfakes in election communications.", "sum": "TN HB2214 prohibits distribution of electoral deepfakes within 90 days of an election if the distributor knows or should know the content is a deceptive depiction of a candidate or political party, and establishes civil penalties for violations. The bill carves out exceptions and amends Tennessee…", "stage": "introduced", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-03-10", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB2214&ga=114" }, { "id": "m:US-TN:HB2464", "jur": "US-TN", "level": "state", "num": "HB2464", "title": "AN ACT to amend Tennessee Code Annotated, Title 4; Title 7; Title 8; Title 47, Chapter 18; Title 65 and Title 68, relative to products connected to foreign adversaries.", "sum": "TN HB2464 prohibits electric utilities and high-performance computing centers in Tennessee from using transformers, parts, or equipment manufactured or controlled by foreign adversaries, and requires such entities to report compliance to the comptroller.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-04", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB2464&ga=114" }, { "id": "m:US-TN:HB2392", "jur": "US-TN", "level": "state", "num": "HB2392", "title": "AN ACT to amend Tennessee Code Annotated, Title 5; Title 6; Title 7; Title 10; Title 62; Title 65; Title 68 and Title 69, relative to the Tennessee Data Center Impact Review Act.", "sum": "Creates the Tennessee Data Center Impact Review Act, establishing a regulatory framework for data-center siting, permitting, and environmental/utility impacts across multiple state codes (energy, water, tax, land use). The bill directly addresses large-load infrastructure deployment and…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-18", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB2392&ga=114" }, { "id": "m:US-TN:HB2586", "jur": "US-TN", "level": "state", "num": "HB2586", "title": "AN ACT to amend Tennessee Code Annotated, Title 2; Title 4; Title 8; Title 10; Title 16; Title 29; Title 36; Title 37; Title 38; Title 39; Title 40; Title 45; Title 47; Title 48; Title 49;…", "sum": "TN HB2586 expands requirements for Tennessee's AI advisory council to include recommendations on detecting and minimizing AI-enabled fraud in their annual reports to state leadership. The bill amends multiple statutory titles to incorporate AI fraud-risk guidance into state policy.", "stage": "introduced", "cats": [ "governance", "consumer-financial" ], "secs": [], "date": "2026-02-05", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB2586&ga=114" }, { "id": "m:US-TN:HB2416", "jur": "US-TN", "level": "state", "num": "HB2416", "title": "AN ACT to amend Tennessee Code Annotated, Title 49, relative to education.", "sum": "Requires all public charter schools and schools under local board management in Tennessee to publish their governing board-adopted policies on artificial intelligence use by students, teachers, and staff for instructional and assignment purposes on their websites.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-02-05", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=HB2416&ga=114" }, { "id": "m:US-TN:SB2584", "jur": "US-TN", "level": "state", "num": "SB2584", "title": "AN ACT to amend Tennessee Code Annotated, Title 67, Chapter 6, relative to qualified data centers.", "sum": "TN SB2584 amends Tennessee tax law to require qualified data centers applying for job tax credits to certify compliance with labor and immigration laws over the prior 12 months. The bill regulates data-center incentive eligibility by tying tax credits to worker-protection compliance.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-20", "url": "https://wapp.capitol.tn.gov/apps/Billinfo/Default?BillNumber=SB2584&ga=114" }, { "id": "m:US-KY:HB544", "jur": "US-KY", "level": "state", "num": "HB544", "title": "AN ACT relating to data centers.", "sum": "KY HB544 regulates retail electric service to large data centers by requiring Public Service Commission approval of tariffs for customers with aggregate capacity over 100 megawatts and mandating that all new infrastructure costs be assigned to the data center customer rather than spread to other…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-10", "url": "https://apps.legislature.ky.gov/record/26RS/hb544.html" }, { "id": "m:US-KS:SB467", "jur": "US-KS", "level": "state", "num": "SB467", "title": "Enacting the use of artificial intelligence in medical decisions transparency act and requiring that all medical necessity determinations be made by a competent licensed physician or…", "sum": "KS SB467 requires that all medical necessity determinations be made by a licensed physician or healthcare professional rather than AI or automated systems alone, and mandates transparency when AI is used in medical decisions. The bill addresses both the use of AI in consequential healthcare…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "health" ], "date": "2026-02-04", "url": "https://kslegislature.gov/li/b2025_26/measures/sb467/" }, { "id": "m:US-CT:SB00005", "jur": "US-CT", "level": "state", "num": "SB00005", "title": "An Act Concerning Online Safety.", "sum": "Connecticut's comprehensive AI bill establishes a statewide AI Policy Office, governance structures (AI working group, learning lab, academy), and requires frontier model developers to implement internal safety processes and synthetic-content detectability. It also prohibits discriminatory use of…", "stage": "passed", "cats": [ "governance", "anti-discrimination", "disclosures" ], "secs": [ "consumer" ], "date": "2026-05-27", "url": "https://www.cga.ct.gov/asp/cgabillstatus/cgabillstatus.asp?selBillType=Bill&bill_num=SB00005&which_year=2026" }, { "id": "m:US-GA:SB455", "jur": "US-GA", "level": "state", "num": "SB455", "title": "Georgia Artificial Intelligence Commission; establishment", "sum": "Establishes the Georgia Artificial Intelligence Commission to study, advise on, and coordinate state policy around AI systems; the commission will be housed within the Georgia Technology Authority and produce annual reports on AI governance matters.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-02-04", "url": "https://www.legis.ga.gov/legislation/72792" }, { "id": "m:US-WY:HB0091", "jur": "US-WY", "level": "state", "num": "HB0091", "title": "Ban on government social scoring with AI.", "sum": "WY HB0091 prohibits government entities from using AI to calculate social scores or to identify persons via biometric data or image gathering, with specified exceptions. The bill restricts government deployment of consequential AI systems for surveillance and scoring purposes.", "stage": "failed/dead", "cats": [ "gov-use", "anti-discrimination", "public-safety" ], "secs": [], "date": "2026-02-23", "url": "https://www.wyoleg.gov/Legislation/2026/HB0091" }, { "id": "m:US-CT:SB00004", "jur": "US-CT", "level": "state", "num": "SB00004", "title": "An Act Concerning Consumer Privacy And Protection.", "sum": "CT SB00004 expands Connecticut's data-privacy protections by requiring disclosure of personalized algorithmic pricing, restricting facial recognition technology, prohibiting the sale of precise geolocation and automated license plate reader data, and eliminating employment exemptions from profiling…", "stage": "passed", "cats": [ "consumer-financial", "privacy", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-05-27", "url": "https://www.cga.ct.gov/asp/cgabillstatus/cgabillstatus.asp?selBillType=Bill&bill_num=SB00004&which_year=2026" }, { "id": "m:US-CA:AB1700", "jur": "US-CA", "level": "state", "num": "AB1700", "title": "e-Safety Commission: youth online protection.", "sum": "Establishes a California e-Safety Commission to develop and enforce standards for online platforms' protection of youth, likely including rules on algorithmic recommendation, content moderation, and disclosure of automated systems affecting minors.", "stage": "introduced", "cats": [ "governance", "minors", "disclosures" ], "secs": [ "consumer" ], "date": "2026-03-23", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB1700" }, { "id": "m:US-MD:HB895", "jur": "US-MD", "level": "state", "num": "HB895", "title": "Food Retailers and Third-Party Delivery Service Providers - Dynamic Pricing and Personal Data (Protection From Predatory Pricing Act)", "sum": "MD HB895 prohibits food retailers and third-party delivery services from using dynamic pricing algorithms or personal consumer data to set prices, and bars use of protected-class data in pricing decisions. Violations are treated as unfair/deceptive trade practices subject to enforcement and…", "stage": "passed", "cats": [ "consumer-financial", "anti-discrimination", "privacy" ], "secs": [ "consumer" ], "date": "2026-04-28", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB0895?ys=2026RS" }, { "id": "m:US-MD:HB795", "jur": "US-MD", "level": "state", "num": "HB795", "title": "Health Insurance - Artificial Intelligence - Grievance Process and Reporting (AI Health Insurance Accountability Act of 2026)", "sum": "MD HB795 requires health insurance carriers to provide human review of grievances arising from AI/algorithmic adverse decisions and to report data on such grievances. The bill establishes accountability mechanisms for automated decision-making in insurance utilization review and coverage denials.", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "consumer-financial" ], "secs": [ "health", "finserv" ], "date": "2026-02-23", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB0795?ys=2026RS" }, { "id": "m:US-MD:HB883", "jur": "US-MD", "level": "state", "num": "HB883", "title": "Consumer Protection - Artificial Intelligence - Behavioral Health Care Prohibitions", "sum": "MD HB883 prohibits AI developers from making false or misleading claims about behavioral health care capabilities and requires certain notice/protocol disclosures for AI sold to consumers in Maryland. Violations are treated as unfair or deceptive trade practices under Maryland's consumer-protection…", "stage": "engrossed", "cats": [ "healthcare", "consumer-financial", "disclosures" ], "secs": [ "health", "consumer" ], "date": "2026-03-25", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB0883?ys=2026RS" }, { "id": "m:US-MD:HB799", "jur": "US-MD", "level": "state", "num": "HB799", "title": "Maryland Co-Location Energy Innovation and Reliability Act", "sum": "MD HB799 requires the Public Service Commission to adopt regulations governing the construction of power-generation stations that are co-located with data centers but operate independently of the main electric grid. This addresses energy infrastructure and grid-management issues specific to large…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-05", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB0799?ys=2026RS" }, { "id": "m:US-SD:HB1301", "jur": "US-SD", "level": "state", "num": "HB1301", "title": "Limit costs and risks associated with electricity use by data centers and impose a moratorium.", "sum": "SD HB1301 addresses electricity costs and risks associated with data-center operations and imposes a moratorium on new or expanded data-center projects. The bill directly regulates data-center siting, energy consumption, and grid impact—core infrastructure policy for compute-intensive AI deployment.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-18", "url": "https://sdlegislature.gov/#/Session/Bill/27287" }, { "id": "m:US-SD:SB232", "jur": "US-SD", "level": "state", "num": "SB232", "title": "Impose a one-year moratorium on the construction or expansion of hyperscale data centers.", "sum": "SD SB232 imposes a one-year moratorium on the construction or expansion of hyperscale data centers in South Dakota. The moratorium appears designed to pause large-scale data-center development pending further study or policy consideration.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-18", "url": "https://sdlegislature.gov/#/Session/Bill/27269" }, { "id": "m:US-IL:HB4945", "jur": "US-IL", "level": "state", "num": "HB4945", "title": "SCH CD-TECHNOLOGY GUIDANCE", "sum": "IL HB4945 directs the State Board of Education to develop statewide guidance for school districts on teaching artificial intelligence, quantum computing, and other rapidly growing technologies as part of workforce development curriculum. The bill requires a comprehensive review of AI-education…", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-03-27", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=4945&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB3368", "jur": "US-IL", "level": "state", "num": "SB3368", "title": "CHATBOT RESPONSE LIABILITY ACT", "sum": "IL SB3368 imposes liability on chatbot proprietors for materially misleading or harmful information that causes financial or bodily harm, and requires clear disclosure to users that they are interacting with AI rather than a human. It also mandates parental consent for minors using companion…", "stage": "introduced", "cats": [ "consumer-financial", "minors", "disclosures" ], "secs": [ "consumer" ], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3368&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:HB4985", "jur": "US-IL", "level": "state", "num": "HB4985", "title": "SURVEILLANCE-BASED PRICING", "sum": "IL HB4985 prohibits the use of surveillance data within automated decision systems to set individualized prices for goods or services, with limited exemptions. The bill creates a private right of action and authorizes Attorney General enforcement.", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-03-27", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=4985&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB3384", "jur": "US-IL", "level": "state", "num": "SB3384", "title": "AI COMPANION MODEL SAFETY ACT", "sum": "Illinois SB3384 requires AI companion operators to implement protocols detecting and addressing suicidal ideation or self-harm expressions, and to disclose clearly and conspicuously that users are communicating with an AI system. Revenue from civil penalties funds the state suicide-prevention…", "stage": "introduced", "cats": [ "consumer-financial", "minors", "disclosures" ], "secs": [ "consumer" ], "date": "2026-05-25", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3384&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-SD:SB234", "jur": "US-SD", "level": "state", "num": "SB234", "title": "Modify provisions pertaining to the purchasing of goods and services related to data center operations.", "sum": "SD SB234 modifies state procurement rules and purchasing provisions for goods and services related to data center operations, likely addressing tax treatment, siting incentives, utility rates, or operational standards for large-load infrastructure.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-18", "url": "https://sdlegislature.gov/#/Session/Bill/27289" }, { "id": "m:US-IL:SB3364", "jur": "US-IL", "level": "state", "num": "SB3364", "title": "HUMAN RIGHTS-AI-VIOLATIONS", "sum": "IL SB3364 amends the Illinois Human Rights Act to require disclosure when AI is used in real estate transactions, loan/credit-card processing, and public-accommodation access decisions. Failure to disclose such AI use is classified as a civil rights violation, with enforcement delegated to the…", "stage": "introduced", "cats": [ "disclosures", "anti-discrimination", "consumer-financial" ], "secs": [ "finserv", "consumer" ], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3364&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:HB5003", "jur": "US-IL", "level": "state", "num": "HB5003", "title": "AI-ASSISTED THERAPY RESEARCH", "sum": "IL HB5003 creates a regulatory pathway for AI-assisted therapy and psychotherapy services by exempting qualified research programs from unauthorized therapy prohibitions, subject to strict requirements including licensed professional oversight, approved research protocols, and departmental…", "stage": "introduced", "cats": [ "governance", "healthcare" ], "secs": [ "health" ], "date": "2026-03-27", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=5003&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-IL:HB4988", "jur": "US-IL", "level": "state", "num": "HB4988", "title": "FRAUD-ARTIFICIAL INTELLIGENCE", "sum": "IL HB4988 requires owners, licensees, or operators of generative AI systems to display a conspicuous warning on the user interface notifying users of the limitations of generative AI systems. Violations constitute unlawful practices under the Consumer Fraud and Deceptive Business Practices Act,…", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [], "date": "2026-03-27", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=4988&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-IA:SF2199", "jur": "US-IA", "level": "state", "num": "SF2199", "title": "A bill for an act relating to the ownership of artificial intelligence output and trained artificial intelligence.(Formerly SSB 3013.)", "sum": "IA SF2199 addresses ownership and intellectual-property rights in AI-generated outputs and trained AI models. The bill clarifies who owns the rights to content produced by AI systems and the trained models themselves.", "stage": "introduced", "cats": [ "frontier", "privacy" ], "secs": [ "media" ], "date": "2026-03-19", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=SF2199" }, { "id": "m:US-IL:HB5044", "jur": "US-IL", "level": "state", "num": "HB5044", "title": "CHATBOT PROVIDER-LIABILITY", "sum": "IL HB5044 establishes strict liability for chatbot providers, making them liable for any injury caused by their chatbot regardless of fault or contractual relationship with the user. Users harmed by a chatbot can sue for actual damages, injunctive relief, and attorney fees.", "stage": "introduced", "cats": [ "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-03-27", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=5044&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-SD:SB235", "jur": "US-SD", "level": "state", "num": "SB235", "title": "Protect residents from increased utility costs and utility shortages caused by data centers, to clarify authority to regulate data centers, and to modify provisions pertaining to the…", "sum": "SD SB235 addresses utility cost and shortage concerns caused by data centers in South Dakota by clarifying state regulatory authority over data-center operations and modifying procurement rules for data-center purchases of goods and services.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-18", "url": "https://sdlegislature.gov/#/Session/Bill/27290" }, { "id": "m:US-IL:HB4987", "jur": "US-IL", "level": "state", "num": "HB4987", "title": "SURVEILLANCE-BASED WAGES", "sum": "IL HB4987 prohibits employers from using surveillance data within automated decision systems to set individualized wages for employees, with limited exemptions. The bill creates a private right of action and authorizes the Attorney General to enforce the restrictions.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-03-27", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=4987&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB3444", "jur": "US-IL", "level": "state", "num": "SB3444", "title": "AI MODEL SAFETY", "sum": "IL SB3444 creates a liability safe harbor for developers of frontier AI models who publish safety/security protocols and transparency reports, unless they intentionally or recklessly cause critical harms. The bill sunsets if federal regulation of frontier models is enacted.", "stage": "introduced", "cats": [ "governance", "frontier", "disclosures" ], "secs": [], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3444&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:HB4980", "jur": "US-IL", "level": "state", "num": "HB4980", "title": "HUMAN CONTROL OF AI ACT", "sum": "IL HB4980 requires public employers and contractors to obtain meaningful and continuing human review before using automated decision-making systems for specified functions, and mandates initial and biennial impact assessments plus assessments before material changes. The bill includes…", "stage": "introduced", "cats": [ "gov-use", "anti-discrimination", "hiring" ], "secs": [ "hr" ], "date": "2026-04-17", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=4980&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-PA:HB2198", "jur": "US-PA", "level": "state", "num": "HB2198", "title": "Repealing provisions relating to Computer Data Center Equipment Incentive Program; and, in general provisions, providing for data centers.", "sum": "PA HB2198 repeals the existing Computer Data Center Equipment Incentive Program and provides new general provisions for data centers in Pennsylvania's Tax Reform Code. The bill restructures tax policy and incentives governing data-center development and operations.", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-26", "url": "https://www.palegis.us/legislation/bills/2025/hb2198" }, { "id": "m:US-AZ:HB4009", "jur": "US-AZ", "level": "state", "num": "HB4009", "title": "Data centers; state lands; map", "sum": "AZ HB4009 addresses data-center siting and use of state lands, including provisions related to mapping and location of data centers in Arizona. The bill directly regulates physical infrastructure policy for data centers, which is a tracked vertical under AI policy scope.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-26", "url": "https://apps.azleg.gov/BillStatus/BillOverview/85520" }, { "id": "m:US-AZ:HB4005", "jur": "US-AZ", "level": "state", "num": "HB4005", "title": "Artificial intelligence; course; public schools", "sum": "AZ HB4005 requires Arizona public schools to offer a course on artificial intelligence. The bill aims to build AI literacy and understanding among K–12 students.", "stage": "vetoed", "cats": [ "education" ], "secs": [], "date": "2026-06-19", "url": "https://apps.azleg.gov/BillStatus/BillOverview/85516" }, { "id": "m:US-NH:SB657", "jur": "US-NH", "level": "state", "num": "SB657", "title": "Relative to the use of information technology and artificial intelligence systems by state agencies.", "sum": "NH SB657 establishes requirements and oversight for state agencies' use of information technology and artificial intelligence systems. The bill appears to create governance frameworks, accountability measures, and potentially procurement or deployment standards for AI and IT systems within New…", "stage": "engrossed", "cats": [ "gov-use" ], "secs": [], "date": "2026-05-21", "url": "https://gc.nh.gov/bill_status/legacy/bs2016/bill_status.aspx?lsr=3270&sy=2026&sortoption=&txtsessionyear=2026&txtbillnumber=SB657" }, { "id": "m:US-MI:HR0240", "jur": "US-MI", "level": "state", "num": "HR0240", "title": "A resolution to urge a temporary pause on discretionary state-level incentives for data center construction, request a comprehensive review of the fiscal, utility, environmental, and local…", "sum": "Michigan HR0240 calls for a temporary pause on state discretionary incentives for data center construction and directs a comprehensive review of the fiscal, utility, environmental, and local governance impacts of data center development in the state. House committees are tasked with examining these…", "stage": "introduced", "cats": [ "governance", "data-centers" ], "secs": [ "infra" ], "date": "2026-02-04", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HR-0240" }, { "id": "m:US-KY:HB559", "jur": "US-KY", "level": "state", "num": "HB559", "title": "AN ACT relating to data privacy, portability, and interoperability.", "sum": "KY HB559 establishes consumer data rights and interoperability requirements for social media companies and AI model operators, requiring them to implement data-sharing interfaces and comply with Attorney General enforcement. The bill grants rulemaking and enforcement authority to Kentucky's AG and…", "stage": "introduced", "cats": [ "privacy", "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-02-11", "url": "https://apps.legislature.ky.gov/record/26RS/hb559.html" }, { "id": "m:US-NM:HB330", "jur": "US-NM", "level": "state", "num": "HB330", "title": "Ai Ethics As School Science Elective", "sum": "NM HB330 establishes AI ethics as a school science elective course offering for secondary students. The bill creates a curriculum framework to teach students about ethical implications and responsible use of artificial intelligence systems.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-02-04", "url": "https://www.nmlegis.gov/Legislation/Legislation?chamber=H&legtype=B&legno=330&year=26" }, { "id": "m:US-CA:SB978", "jur": "US-CA", "level": "state", "num": "SB978", "title": "Data centers: labor: electricity rates.", "sum": "CA SB978 amends the Public Utilities Code to regulate labor standards and electricity rates for data centers. The bill addresses utility tariffs and labor protections for large-load facilities, which aligns with the AI vertical's interest in data-center infrastructure policy.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-14", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB978" }, { "id": "m:US-MD:HB940", "jur": "US-MD", "level": "state", "num": "HB940", "title": "Large Load Customers - Electric System Interconnection and Demand Response Program", "sum": "MD HB940 exempts certain large load customers from standard interconnection requirements and establishes a streamlined process for them to connect to the electric grid and contract for service, with potential prioritization. The bill directly addresses large-load infrastructure siting and utility…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-10", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB0940?ys=2026RS" }, { "id": "m:US-MD:SB597", "jur": "US-MD", "level": "state", "num": "SB597", "title": "Higher Education - Maryland Artificial Intelligence Partnership", "sum": "Establishes the Maryland Artificial Intelligence Partnership within the University System of Maryland to serve as a coordinating hub for AI initiatives across the state. Creates an AI Public Services Fellowship and an AI Incubation Lab to help state agencies adopt and develop AI capabilities.", "stage": "passed", "cats": [ "gov-use", "education" ], "secs": [], "date": "2026-05-26", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0597?ys=2026RS" }, { "id": "m:US-MD:HB952", "jur": "US-MD", "level": "state", "num": "HB952", "title": "Consumer Protection - Companion Chatbots - Regulation", "sum": "MD HB952 requires companion-chatbot operators to publish protocols, limit data collection, establish complaint systems, and implement enhanced protections for minor users. It also mandates reporting of suicide-related data to the state's Office of Suicide Prevention.", "stage": "engrossed", "cats": [ "minors", "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-03-23", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB0952?ys=2026RS" }, { "id": "m:US-MD:HB924", "jur": "US-MD", "level": "state", "num": "HB924", "title": "Child Exploitation Material - Civil and Criminal Actions (Safe Kids Act)", "sum": "The bill expands Maryland's child sexual abuse material (CSAM) laws to explicitly include AI-generated synthetic child sexual abuse imagery, increasing penalties and enabling civil actions. It also raises the age threshold for child victims from 16 to 18 in certain pornography crimes.", "stage": "introduced", "cats": [ "minors", "deepfakes" ], "secs": [ "consumer", "media" ], "date": "2026-02-05", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB0924?ys=2026RS" }, { "id": "m:US-MD:SB596", "jur": "US-MD", "level": "state", "num": "SB596", "title": "Large Load Customers - Electric System Interconnection and Demand Response Program", "sum": "MD SB596 establishes interconnection and demand-response rules for large load customers on Maryland's electric grid, including expedited processes and prioritization for entities with substantial power demands. The bill directly addresses siting, grid integration, and tariff/service frameworks for…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-24", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0596?ys=2026RS" }, { "id": "m:US-CO:HB1139", "jur": "US-CO", "level": "state", "num": "HB1139", "title": "Use of Artificial Intelligence in Health Care", "sum": "CO HB1139 regulates the use of artificial intelligence systems in healthcare settings, establishing requirements for transparency, accountability, and fairness in clinical AI deployment. The bill likely addresses disclosure of AI use to patients, bias audits, and governance of automated…", "stage": "passed", "cats": [ "healthcare", "disclosures", "anti-discrimination" ], "secs": [ "health" ], "date": "2026-06-02", "url": "https://leg.colorado.gov/bills/HB26-1139" }, { "id": "m:US-WV:HB5205", "jur": "US-WV", "level": "state", "num": "HB5205", "title": "Requiring the State Board of Education to create model policies on the use of technology and artifical intelligence in a public school classroom", "sum": "WV HB5205 directs the State Board of Education to establish model policies governing the use of technology and artificial intelligence in public school classrooms, including definitions of AI, county-board implementation requirements, support for students with technology-related learning…", "stage": "introduced", "cats": [ "gov-use", "governance", "education" ], "secs": [], "date": "2026-02-05", "url": "http://www.wvlegislature.gov/Bill_Status/Bills_history.cfm?input=5205&year=2026&sessiontype=RS&btype=bill" }, { "id": "m:US-IA:SSB3118", "jur": "US-IA", "level": "state", "num": "SSB3118", "title": "A bill for an act relating to utilization review organizations' use of artificial intelligence, prior authorization determinations and exemptions, and prepayment audits, and including…", "sum": "This bill regulates utilization review organizations' use of artificial intelligence in prior authorization determinations and prepayment audits for healthcare coverage decisions. It establishes rules, exemptions, and accountability mechanisms for AI-driven utilization review, which is a form of…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "health" ], "date": "2026-02-19", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=SSB3118" }, { "id": "m:US-IL:HB5113", "jur": "US-IL", "level": "state", "num": "HB5113", "title": "SCH CD-AI USE IN EDUC COMM", "sum": "IL HB5113 requires the State Board of Education to establish an AI Use in Education Commission to research and recommend best practices for AI and smartphone use in schools, with reporting requirements and sunset on January 1, 2030.", "stage": "introduced", "cats": [ "governance", "education" ], "secs": [], "date": "2026-03-27", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=5113&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB3502", "jur": "US-IL", "level": "state", "num": "SB3502", "title": "AI PRODUCT LIABILITY ACT", "sum": "This bill establishes product-liability rules for AI system developers and deployers, defining when each party bears responsibility for defects, inadequate warnings, or breaches of warranty. It clarifies that deployers can be held liable as developers only if they materially modify the system or…", "stage": "introduced", "cats": [ "consumer-financial", "frontier" ], "secs": [], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3502&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IA:SF2226", "jur": "US-IA", "level": "state", "num": "SF2226", "title": "A bill for an act relating to the use of automated adjudication systems by health carriers, and including civil penalties.", "sum": "This bill regulates the use of automated adjudication systems (AI/algorithmic decision-making) by health insurance carriers and establishes civil penalties for violations. It directly addresses algorithmic decision-making in health insurance claims processing and likely includes accountability and…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "consumer-financial" ], "secs": [ "finserv", "health" ], "date": "2026-02-10", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=SF2226" }, { "id": "m:US-IL:SB3601", "jur": "US-IL", "level": "state", "num": "SB3601", "title": "PROFESSIONAL AI OVERSIGHT ACT", "sum": "IL SB3601 requires licensed professionals in regulated industries to disclose clearly and prominently when a person is interacting with AI rather than a human, specifying the AI's purpose both verbally (for oral exchanges) and in writing (for written exchanges). Violations trigger civil penalties…", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3601&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB3578", "jur": "US-IL", "level": "state", "num": "SB3578", "title": "DATA CENTERS-FOREIGN OWNERSHIP", "sum": "Creates the Data Center Construction by Foreign Adversaries Act, requiring Illinois state agencies to jointly study energy consumption and certify that new data centers built by foreign adversary-owned or -headquartered companies do not burden regional power grids (PJM/MISO) before construction is…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-01", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3578&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB3702", "jur": "US-IL", "level": "state", "num": "SB3702", "title": "REGISTERED NURSE USE OF AI", "sum": "IL SB3702 regulates the use of AI in nursing care by requiring healthcare entities to validate AI systems, monitor for bias, train nurses on AI limits and failure modes, ensure transparency of AI recommendations, and prohibit fully automated staffing/triage decisions. The bill amends the Nurse…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "disclosures" ], "secs": [ "health" ], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3702&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-NY:S09132", "jur": "US-NY", "level": "state", "num": "S09132", "title": "Prohibits the use of a wage-fixing algorithm in combination with personal or behavioral data to set or recommend wages or compensation; defines terms; establishes penalties for violations…", "sum": "NY S09132 prohibits the use of wage-fixing algorithms that combine personal or behavioral data to set or recommend employee compensation. The bill establishes penalties for violations.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-02-05", "url": "https://www.nysenate.gov/legislation/bills/2025/S9132" }, { "id": "m:US-IL:SB3735", "jur": "US-IL", "level": "state", "num": "SB3735", "title": "EDUC-TECH RTS/BIOMETRIC INFO", "sum": "IL SB3735 establishes student and parental rights to opt out of school-issued digital devices and automated/AI grading systems, prohibits K–12 schools from purchasing biometric systems, and restricts operators of educational platforms from using student data to train AI models without explicit…", "stage": "introduced", "cats": [ "minors", "education", "privacy" ], "secs": [ "consumer" ], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3735&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB3657", "jur": "US-IL", "level": "state", "num": "SB3657", "title": "CONSUMER FRAUD-DIGITAL PRICING", "sum": "IL SB3657 prohibits retailers from using surveillance-based price setting or surveillance data in automated decision systems to set individualized prices for consumers, and requires physical coupon alternatives to digital offers. The bill treats algorithmic pricing discrimination as an unlawful…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-03-27", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3657&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-NJ:S3379", "jur": "US-NJ", "level": "state", "num": "S3379", "title": "Requires data center owners and operators to submit semi-annual water and energy usage reports to BPU.", "sum": "NJ S3379 requires data center owners and operators to submit semi-annual reports on water and energy usage to the Board of Public Utilities. This is direct regulation of data-center infrastructure operations, a tracked vertical regardless of AI motivation.", "stage": "enrolled", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-30", "url": "https://www.njleg.state.nj.us/bill-search/2026/S3379" }, { "id": "m:US-IL:SB3492", "jur": "US-IL", "level": "state", "num": "SB3492", "title": "SCH CD-TECHNOLOGY GUIDANCE", "sum": "The bill authorizes the Illinois State Board of Education to develop statewide guidance on workforce-development curriculum for teaching artificial intelligence, quantum computing, and other emerging technologies. It requires a comprehensive review of similar programs in other states and allows for…", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3492&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-AL:SB270", "jur": "US-AL", "level": "state", "num": "SB270", "title": "Electric Utilities; review by Public Service Commission of certain contracts with large load data centers further provided for", "sum": "AL SB270 requires the Alabama Public Service Commission to review and approve contracts between electric utilities and large-load data centers, establishing regulatory oversight of utility agreements with data-center operators.", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-17", "url": "https://alison.legislature.state.al.us/bill-search" }, { "id": "m:US-IL:SB3571", "jur": "US-IL", "level": "state", "num": "SB3571", "title": "WARN ACT-AI LAYOFFS", "sum": "IL SB3571 amends the Worker Adjustment and Retraining Notification (WARN) Act to require employers to disclose AI-related job impacts when reporting mass layoffs or closings, including the number of employees laid off due to AI replacement or automation. The Department of Commerce and Economic…", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3571&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:SR0610", "jur": "US-IL", "level": "state", "num": "SR0610", "title": "PD365/ISBE-ARTIFICIAL INTEL", "sum": "IL SR0610 urges the Illinois State Board of Education to develop statewide guidelines for ethical AI use in K-12 classrooms, including student-data protections, algorithmic transparency, bias monitoring, and AI/digital literacy in curricula. It also encourages educator professional development and…", "stage": "introduced", "cats": [ "education", "anti-discrimination", "disclosures" ], "secs": [], "date": "2026-02-05", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=610&GAID=18&DocTypeID=SR&SessionID=114&GA=104" }, { "id": "m:US-IL:SB3590", "jur": "US-IL", "level": "state", "num": "SB3590", "title": "AI PRODUCT LIABILITY ACT", "sum": "IL SB3590 establishes a product-liability framework for AI systems, holding developers liable for defective design, inadequate warnings, and warranty failures, while deployers can be held liable if they materially modify the product or intentionally misuse it contrary to express warranties.", "stage": "introduced", "cats": [ "consumer-financial", "frontier" ], "secs": [], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3590&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-SC:S0896", "jur": "US-SC", "level": "state", "num": "S0896", "title": "Chatbot Regulation", "sum": "SC S0896 enacts the 'Chatbot Protection Act,' establishing restrictions on chatbot activities and civil remedies under South Carolina consumer protection law. The bill regulates how chatbots can operate and interact with consumers, likely requiring disclosure and limiting deceptive practices.", "stage": "introduced", "cats": [ "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-05-06", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=0896&session=126&summary=B" }, { "id": "m:US-AZ:HB4040", "jur": "US-AZ", "level": "state", "num": "HB4040", "title": "Public schools; universities; AI policies", "sum": "AZ HB4040 requires public schools and universities to establish policies governing the use of artificial intelligence in educational settings. The bill addresses AI adoption, use cases, and governance frameworks within K–12 and higher-education institutions.", "stage": "introduced", "cats": [ "governance", "education" ], "secs": [], "date": "2026-06-13", "url": "https://apps.azleg.gov/BillStatus/BillOverview/85556" }, { "id": "m:US-IL:SB3761", "jur": "US-IL", "level": "state", "num": "SB3761", "title": "DATA CENTERS-VARIOUS", "sum": "IL SB3761 establishes regulatory requirements for data centers in Illinois, including a self-direct program for renewable energy procurement discounts, mandatory pre-construction disclosure to the Illinois Commerce Commission (effective Jan. 1, 2027), and annual water-consumption reporting to the…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3761&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-WY:HB0102", "jur": "US-WY", "level": "state", "num": "HB0102", "title": "Protecting kids from deepfakes and exploitative images.", "sum": "WY HB0102 criminalizes the use of AI to create synthetic sexual material involving children, to promote self-harm, and to censor political speech, while providing immunity to AI developers under specified conditions. The bill also clarifies that use of AI to commit a criminal offense is not a valid…", "stage": "passed", "cats": [ "deepfakes", "minors", "elections" ], "secs": [ "media", "consumer" ], "date": "2026-03-07", "url": "https://www.wyoleg.gov/Legislation/2026/HB0102" }, { "id": "m:US-MD:HB995", "jur": "US-MD", "level": "state", "num": "HB995", "title": "Health Occupations - Behavioral Health Care Providers - Use of Artificial Intelligence", "sum": "MD HB995 prohibits behavioral health care providers from using AI to directly deliver behavioral health services to patients, while permitting AI use for administrative tasks if providers obtain informed consent and meet specified conditions. The bill establishes guardrails around AI deployment in…", "stage": "introduced", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-03-19", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB0995?ys=2026RS" }, { "id": "m:US-OH:HCR31", "jur": "US-OH", "level": "state", "num": "HCR31", "title": "Urge Congress to reject any moratorium on state AI laws", "sum": "A resolution urging Congress to reject any federal moratorium on state AI regulation. The bill takes a position on federalism and the authority of states to enact their own artificial-intelligence laws.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-02-04", "url": "https://www.legislature.ohio.gov/legislation/136/hcr31" }, { "id": "m:US-NY:S09144", "jur": "US-NY", "level": "state", "num": "S09144", "title": "Imposes a moratorium on the issuance of permits for new data centers; requires the public service commission to issue an order or orders to minimize the impact of new data centers on…", "sum": "NY S09144 imposes a moratorium on new data-center permits and directs the Public Service Commission to minimize the impact of data centers on electricity and gas rates for residential, commercial, and industrial consumers. The bill extends these requirements to the Long Island Power Authority.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-12", "url": "https://www.nysenate.gov/legislation/bills/2025/S9144" }, { "id": "m:US-IL:SB3901", "jur": "US-IL", "level": "state", "num": "SB3901", "title": "MARRIAGE ACT-EVIDENCE", "sum": "IL SB3901 amends family law to address the misuse of AI-generated evidence in marriage and dissolution proceedings. It requires courts to review proposed evidence that may have been generated by AI under the evidentiary standard of Supreme Court Rule 901, with explicit legislative acknowledgment…", "stage": "introduced", "cats": [ "deepfakes", "disclosures" ], "secs": [ "media" ], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3901&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-WI:SB969", "jur": "US-WI", "level": "state", "num": "SB969", "title": "Prohibiting nondisclosure agreements intended to conceal information about a data center from the public.", "sum": "WI SB969 prohibits nondisclosure agreements that would conceal public information about data centers. The bill aims to increase transparency regarding data-center siting, operations, and impacts by blocking confidentiality provisions that shield facility details from public disclosure.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-23", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/sen/bill/sb969" }, { "id": "m:US-RI:H7543", "jur": "US-RI", "level": "state", "num": "H7543", "title": "Requires that video or photography generated by artificial intelligence or “AI” that is posted on a public platform contain a marking disclosing that it has been generated by AI.", "sum": "Requires that video or photography generated by AI posted on public platforms include a marking or disclosure indicating AI generation. This is a transparency-focused measure targeting synthetic media distribution.", "stage": "introduced", "cats": [ "disclosures", "deepfakes" ], "secs": [ "media" ], "date": "2026-04-08", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-RI:H7538", "jur": "US-RI", "level": "state", "num": "H7538", "title": "Requires healthcare providers and healthcare facilities to inform patients of the use of artificial intelligence to memorialize patient visits.", "sum": "RI H7538 requires healthcare providers and facilities to disclose to patients when artificial intelligence is being used to memorialize or document patient visits. The bill mandates transparency around AI use in clinical documentation and record-keeping.", "stage": "passed", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-06-22", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-IL:SB3830", "jur": "US-IL", "level": "state", "num": "SB3830", "title": "DATA CENTERS-VARIOUS", "sum": "IL SB3830 regulates data-center operations in Illinois by establishing a renewable-energy procurement discount program for data centers, imposing water-discharge and water-consumption monitoring and disclosure requirements, and directing state agencies to track and publish aggregated data-center…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-22", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=3830&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-WI:SB932", "jur": "US-WI", "level": "state", "num": "SB932", "title": "The legal status of artificial intelligence.", "sum": "WI SB932 seeks to establish the legal status and framework for artificial intelligence systems within Wisconsin law. The bill appears to create foundational statutory language addressing how AI is defined and regulated at the state level.", "stage": "failed/dead", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-03-23", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/sen/bill/sb932" }, { "id": "m:US-RI:S2499", "jur": "US-RI", "level": "state", "num": "S2499", "title": "Creates a comprehensive statutory framework to address and regulate the use of artificial intelligence in the workplace, considering the interests of employers and employees.", "sum": "RI S2499 establishes a comprehensive statutory framework governing the use of artificial intelligence in employment contexts, addressing both employer and employee interests. The bill likely covers AI use in hiring, performance management, and other workplace decisions, with protections against…", "stage": "engrossed", "cats": [ "hiring", "anti-discrimination", "disclosures" ], "secs": [ "hr" ], "date": "2026-06-05", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-IL:HB5513", "jur": "US-IL", "level": "state", "num": "HB5513", "title": "HYPERSCALE DATA CENTERS", "sum": "IL HB5513 establishes comprehensive environmental, water, and energy regulations for hyperscale data centers, including cumulative impact assessments, community benefits agreements, water resource planning with public hearings, renewable energy procurement mandates, and annual reporting…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-27", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=5513&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-WI:SB939", "jur": "US-WI", "level": "state", "num": "SB939", "title": "Artificial intelligence systems that simulate humanlike relationships with children and providing a penalty.", "sum": "WI SB939 would regulate AI systems designed to simulate humanlike relationships with children, imposing restrictions and penalties on such companion chatbots or relational AI aimed at minors.", "stage": "failed/dead", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-03-23", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/sen/bill/sb939" }, { "id": "m:US-KY:HB593", "jur": "US-KY", "level": "state", "num": "HB593", "title": "AN ACT relating to data centers.", "sum": "KY HB593 establishes regulatory requirements for electric service contracts to data centers, including tariff filing, impact studies, and cost-allocation safeguards to prevent rate impacts on other utility customers. The bill addresses infrastructure, service standards, and cost responsibility for…", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-31", "url": "https://apps.legislature.ky.gov/record/26RS/hb593.html" }, { "id": "m:US-IL:SB4004", "jur": "US-IL", "level": "state", "num": "SB4004", "title": "AQUIFER PROTECTION ACT", "sum": "IL SB4004 restricts data-center water withdrawals from the Mahomet Aquifer, requiring existing facilities to transition to alternative sources by January 2028 and prohibiting new permits for aquifer use. The bill also mandates transparency on data-center water use by blocking confidentiality…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-17", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=4004&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-IL:HB5607", "jur": "US-IL", "level": "state", "num": "HB5607", "title": "ADVANCED TECHNOLOGY LEADERSHIP", "sum": "IL HB5607 establishes the Advanced Technology Leadership Act, which requires data centers (specifically 'covered data centers') to self-generate or procure eligible renewable energy certificates equal to certain percentages of their annual State electricity consumption, with compliance measured on…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-27", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=5607&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-IL:SB4016", "jur": "US-IL", "level": "state", "num": "SB4016", "title": "HYPERSCALE DATA CENTERS", "sum": "IL SB4016 establishes comprehensive environmental, water, and energy regulations for hyperscale data centers, including cumulative impact assessments, water resource planning with quarterly reporting, stringent energy codes, renewable energy procurement mandates, and community benefit agreements…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-30", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=4016&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-NY:A10141", "jur": "US-NY", "level": "state", "num": "A10141", "title": "Imposes a moratorium on the issuance of permits for new data centers; requires the public service commission to issue an order or orders to minimize the impact of new data centers on…", "sum": "NY A10141 imposes a moratorium on new data-center permits and requires the Public Service Commission to issue orders minimizing the impact of data centers on electricity and gas rates for residential, commercial, and industrial users. The bill extends these provisions to the Long Island Power…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-12", "url": "https://www.nysenate.gov/legislation/bills/2025/A10141" }, { "id": "m:US-ID:H0609", "jur": "US-ID", "level": "state", "num": "H0609", "title": "Amends existing law to revise a sales tax exemption for data center equipment and to revise a property tax exemption for certain capital investments.", "sum": "ID H0609 revises Idaho's sales and property tax exemptions for data center equipment and certain capital investments. The bill adjusts tax incentives that directly affect the cost structure of large-load compute infrastructure.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-10", "url": "https://legislature.idaho.gov/sessioninfo/2026/legislation/H0609/" }, { "id": "m:US-KS:SB499", "jur": "US-KS", "level": "state", "num": "SB499", "title": "Enacting the Kansas age-appropriate design code act to require businesses to assess and mitigate risks of compulsive use in minors, enacting the Kansas stopping likeness abuse by…", "sum": "KS SB499 is a three-part bill: (1) requiring businesses to assess and mitigate compulsive-use risks for minors; (2) creating a private right of action for unauthorized creation and distribution of digital replicas of individuals' likenesses; and (3) prohibiting deceptive chatbot practices and…", "stage": "introduced", "cats": [ "minors", "deepfakes", "disclosures" ], "secs": [ "consumer", "media" ], "date": "2026-02-10", "url": "https://kslegislature.gov/li/b2025_26/measures/sb499/" }, { "id": "m:US-AZ:HB4080", "jur": "US-AZ", "level": "state", "num": "HB4080", "title": "Artificial intelligence; nursing tasks; pilot", "sum": "AZ HB4080 establishes a pilot program to evaluate the use of artificial intelligence in nursing tasks, likely examining how AI systems can support or augment clinical nursing functions. The bill appears to authorize a study or demonstration project to assess AI's role in healthcare delivery within…", "stage": "introduced", "cats": [ "gov-use", "healthcare" ], "secs": [ "health" ], "date": "2026-06-13", "url": "https://apps.azleg.gov/BillStatus/BillOverview/85602" }, { "id": "m:US-CA:SB1000", "jur": "US-CA", "level": "state", "num": "SB1000", "title": "California AI Transparency Act.", "sum": "CA SB1000 amends California's Business and Professions Code sections related to artificial intelligence transparency requirements. The bill mandates disclosure and labeling obligations for AI systems, likely requiring companies to inform consumers when they are interacting with or being evaluated…", "stage": "engrossed", "cats": [ "disclosures", "consumer-financial" ], "secs": [], "date": "2026-07-02", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB1000" }, { "id": "m:US-MD:HB1082", "jur": "US-MD", "level": "state", "num": "HB1082", "title": "Large Load Customers - Data Centers and Rate Schedule Requirements", "sum": "This bill applies rate-schedule requirements to data centers as large-load electric customers in Maryland, modifying the timeline for electric companies to submit rate schedules to the Public Service Commission. It addresses utility and grid tariff policy for data-center operations.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-12", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB1082?ys=2026RS" }, { "id": "m:US-MD:HB1057", "jur": "US-MD", "level": "state", "num": "HB1057", "title": "Education - Artificial Intelligence - Guidelines, Professional Development, and Collaborative (Artificial Intelligence Ready Schools Act)", "sum": "MD HB1057 requires the State Department of Education to develop and publish guidance on artificial intelligence use in schools, establish professional development strategies for educators, and mandate that local school systems designate AI coordinators. The bill creates an online platform to…", "stage": "engrossed", "cats": [ "governance", "education" ], "secs": [], "date": "2026-04-13", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB1057?ys=2026RS" }, { "id": "m:US-MD:SB827", "jur": "US-MD", "level": "state", "num": "SB827", "title": "Consumer Protection and Product Liability - Chatbots", "sum": "MD SB827 regulates chatbot design, deployment, and disclosure in Maryland, establishing safety and privacy protections for all users with enhanced safeguards for minors under 13, mandatory warning displays, and treating chatbots as products subject to product liability. The bill applies these…", "stage": "introduced", "cats": [ "consumer-financial", "minors", "disclosures" ], "secs": [ "consumer" ], "date": "2026-02-12", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0827?ys=2026RS" }, { "id": "m:US-MD:SB889", "jur": "US-MD", "level": "state", "num": "SB889", "title": "Consumer Protection and Labor and Employment - Electronic Shelving Labels and Surveillance-Based Price and Wage Setting - Prohibitions", "sum": "MD SB889 prohibits surveillance-based price setting for consumer goods and services, bans food retailers from using electronic shelving labels to display prices, and prohibits employers from using surveillance-based wage setting. These practices are treated as unfair or deceptive trade practices…", "stage": "introduced", "cats": [ "consumer-financial", "hiring" ], "secs": [ "consumer", "hr" ], "date": "2026-02-12", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0889?ys=2026RS" }, { "id": "m:US-MD:SB720", "jur": "US-MD", "level": "state", "num": "SB720", "title": "Education - Artificial Intelligence - Guidelines, Professional Development, and Collaborative (Artificial Intelligence Ready Schools Act)", "sum": "MD SB720 requires the State Department of Education to develop guidance, best practices, and evaluative tools for AI use in K-12 schools, and establishes a collaborative body to coordinate AI policy in public education. The bill creates an online platform to educate educators, parents, and students…", "stage": "passed", "cats": [ "governance", "education" ], "secs": [], "date": "2026-05-26", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0720?ys=2026RS" }, { "id": "m:US-LA:SB42", "jur": "US-LA", "level": "state", "num": "SB42", "title": "Prohibits using artificial intelligence to create child sexual abuse materials. (8/1/26)", "sum": "LA SB42 prohibits the use of artificial intelligence to create child sexual abuse material (CSAM). The bill directly targets AI-generated synthetic child sexual abuse content and became effective August 1, 2026.", "stage": "passed", "cats": [ "minors", "deepfakes" ], "secs": [ "media", "consumer" ], "date": "2026-06-09", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=SB42&sbi=y" }, { "id": "m:US-MO:SB1654", "jur": "US-MO", "level": "state", "num": "SB1654", "title": "Creates new provisions relating to work performance standards for warehouse employees", "sum": "MO SB1654 establishes work-performance standards for warehouse employees, likely addressing algorithmic management and automated performance monitoring systems used in fulfillment centers. The bill appears designed to regulate how employers use automated decision-making to set productivity quotas,…", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-02-12", "url": "https://www.senate.mo.gov/BillTracking/Bills/Billinformation?year=2026&billid=4209224" }, { "id": "m:US-MA:H5094", "jur": "US-MA", "level": "state", "num": "H5094", "title": "Enhancing disclosure requirements for synthetic media in political advertising", "sum": "This bill strengthens disclosure requirements for synthetic media (deepfakes, AI-generated or manipulated audio/video) used in political advertising in Massachusetts. It requires clear labeling and disclaimers when synthetic media appears in campaign ads to protect voters from deception.", "stage": "engrossed", "cats": [ "deepfakes", "elections", "disclosures" ], "secs": [ "media" ], "date": "2026-02-12", "url": "https://malegislature.gov/Bills/194/H5094" }, { "id": "m:US-SC:S0902", "jur": "US-SC", "level": "state", "num": "S0902", "title": "Data Centers", "sum": "SC S0902 establishes a comprehensive regulatory framework for data center siting and operations in South Carolina, requiring Public Service Commission certification before operation and imposing standards for operational efficiency, water use, infrastructure adequacy, environmental impact,…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-10", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=0902&session=126&summary=B" }, { "id": "m:US-SC:H5138", "jur": "US-SC", "level": "state", "num": "H5138", "title": "Chatbot Regulation", "sum": "SC H5138 enacts the 'Chatbot Protection Act,' establishing restrictions on chatbot activities and creating a civil cause of action. The bill directly regulates chatbot disclosure, transparency, and consumer protection in South Carolina.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-02-10", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=5138&session=126&summary=B" }, { "id": "m:US-MA:H5093", "jur": "US-MA", "level": "state", "num": "H5093", "title": "To protect against election misinformation", "sum": "MA H5093 addresses election misinformation, likely including provisions on deepfakes, synthetic media, or AI-generated false content used to interfere with elections. The bill aims to protect election integrity by regulating or penalizing the creation and distribution of AI-enabled misinformation.", "stage": "engrossed", "cats": [ "elections", "deepfakes" ], "secs": [ "media" ], "date": "2026-02-12", "url": "https://malegislature.gov/Bills/194/H5093" }, { "id": "m:US-KS:HB2772", "jur": "US-KS", "level": "state", "num": "HB2772", "title": "Enacting the Kansas age-appropriate design code act to require businesses to assess and mitigate risks of compulsive use in minors; enacting the Kansas stopping likeness abuse by…", "sum": "KS HB2772 is a three-part bill requiring businesses to assess and mitigate compulsive-use risks in minors, creating a private right of action against unauthorized digital replication and distribution of individuals' likenesses, and prohibiting deceptive practices in chatbot interactions with…", "stage": "introduced", "cats": [ "minors", "deepfakes", "disclosures" ], "secs": [ "consumer", "media" ], "date": "2026-02-10", "url": "https://kslegislature.gov/li/b2025_26/measures/hb2772/" }, { "id": "m:US-KY:SB175", "jur": "US-KY", "level": "state", "num": "SB175", "title": "AN ACT relating to the establishment of the Kentucky Health Command.", "sum": "KY SB175 establishes the Kentucky Health Command to develop and operate standards for an AI-assisted virtual health platform that rural healthcare providers can contract to use for non-diagnostic support functions. The bill explicitly prohibits the platform from diagnosing, treating, or practicing…", "stage": "introduced", "cats": [ "governance", "gov-use", "healthcare" ], "secs": [ "health" ], "date": "2026-02-10", "url": "https://apps.legislature.ky.gov/record/26RS/sb175.html" }, { "id": "m:US-GA:SB488", "jur": "US-GA", "level": "state", "num": "SB488", "title": "Torts; generative artificial intelligence systems shall constitute personal property for purposes of certain actions for product liability alleging injury to a minor; provide", "sum": "The bill establishes that generative AI systems constitute personal property for purposes of product-liability actions alleging injury to minors, and creates rebuttable presumptions regarding manufacturer and seller liability in such cases.", "stage": "introduced", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-03-06", "url": "https://www.legis.ga.gov/legislation/73067" }, { "id": "m:US-CA:SB1011", "jur": "US-CA", "level": "state", "num": "SB1011", "title": "Energy: Utility Infrastructure AI Safety, Oversight, and Workforce Protection Act.", "sum": "CA SB1011 establishes oversight, safety, and workforce-protection requirements for AI systems used in utility infrastructure and energy management. The bill adds new regulatory authority under the Public Utilities Code to govern how utilities deploy and manage AI-driven systems.", "stage": "introduced", "cats": [ "governance", "data-centers" ], "secs": [ "infra" ], "date": "2026-05-28", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB1011" }, { "id": "m:US-PA:HB2215", "jur": "US-PA", "level": "state", "num": "HB2215", "title": "Providing for guidelines for user age verification and responsible dialogue; providing for the offense of prohibited promotion of sexually explicit conduct and for the offense of prohibited…", "sum": "PA HB2215 requires guidelines for user age verification and responsible dialogue in platforms (likely including chatbots and AI systems), while criminalizing promotion of sexually explicit conduct and violence. The bill appears to target protection of minors on digital platforms through disclosure…", "stage": "introduced", "cats": [ "minors", "disclosures" ], "secs": [ "consumer" ], "date": "2026-02-11", "url": "https://www.palegis.us/legislation/bills/2025/hb2215" }, { "id": "m:US-RI:H7695", "jur": "US-RI", "level": "state", "num": "H7695", "title": "Establishes property, tangible, sales and use tax exemptions as incentives for the location of qualified data centers in Rhode Island.", "sum": "RI H7695 establishes property, tangible, sales, and use tax exemptions to incentivize qualified data-center projects locating in Rhode Island. The bill directly targets data-center siting and tax policy, a tracked vertical under AI infrastructure.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-07", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-SC:S0920", "jur": "US-SC", "level": "state", "num": "S0920", "title": "Health insurance", "sum": "SC S0920 regulates health insurers' use of AI in prior-authorization decisions, requiring consideration of specific circumstances and mandating certain disclosures to enrollees, with disciplinary penalties for violations.", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "disclosures" ], "secs": [ "finserv", "health" ], "date": "2026-05-06", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=0920&session=126&summary=B" }, { "id": "m:US-CO:HB1195", "jur": "US-CO", "level": "state", "num": "HB1195", "title": "Psychotherapy Artificial Intelligence Restrictions", "sum": "CO HB1195 restricts the use of artificial intelligence in the delivery or support of psychotherapy services, establishing limitations on how AI systems can be deployed in mental-health treatment contexts. The bill addresses AI use in a sensitive healthcare domain where patient privacy, informed…", "stage": "passed", "cats": [ "healthcare", "privacy" ], "secs": [ "health" ], "date": "2026-06-03", "url": "https://leg.colorado.gov/bills/HB26-1195" }, { "id": "m:US-NY:S09182", "jur": "US-NY", "level": "state", "num": "S09182", "title": "Prohibits allocation of economic development power to data centers; provides for certain caps on amounts and eligibility for industrial development agency financial assistance; provides for…", "sum": "NY S09182 restricts economic development incentives for data centers, caps industrial development agency financial assistance, and requires environmental review for high-load facilities (>20 MW) and projects near Native American territories. The bill aims to control data-center siting and energy…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-22", "url": "https://www.nysenate.gov/legislation/bills/2025/S9182" }, { "id": "m:US-CO:SB102", "jur": "US-CO", "level": "state", "num": "SB102", "title": "Large-Load Data Centers", "sum": "CO SB102 establishes accountability measures for large-load data centers, addressing siting, energy, grid, and infrastructure policy concerns. The bill aims to ensure responsible deployment and operation of data-center facilities.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-11", "url": "https://leg.colorado.gov/bills/SB26-102" }, { "id": "m:US-MD:HB1261", "jur": "US-MD", "level": "state", "num": "HB1261", "title": "Consumer Protection - Artificial Intelligence Toys (Artificial Intelligence Toy Safety Act)", "sum": "MD HB1261 establishes child safety, data privacy, and labeling requirements specifically for toys that incorporate artificial intelligence. The bill prohibits manufacturers from using data collected by AI toys for marketing purposes and imposes transparency obligations on AI toy makers.", "stage": "introduced", "cats": [ "minors", "privacy", "disclosures" ], "secs": [ "consumer" ], "date": "2026-02-18", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB1261?ys=2026RS" }, { "id": "m:US-MD:HB1250", "jur": "US-MD", "level": "state", "num": "HB1250", "title": "Consumer Protection and Product Liability - Chatbots", "sum": "MD HB1250 regulates chatbot design, deployment, and safety in Maryland, establishing user protections including enhanced safeguards for minors under 13, mandatory warnings, and treating chatbots as products subject to liability. The bill applies these requirements to both private…", "stage": "introduced", "cats": [ "consumer-financial", "minors", "disclosures" ], "secs": [ "consumer" ], "date": "2026-02-18", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB1250?ys=2026RS" }, { "id": "m:US-MD:HB1294", "jur": "US-MD", "level": "state", "num": "HB1294", "title": "Criminal Law - Child Sexual Abuse Material - Artificial Intelligence Software", "sum": "MD HB1294 expands child sexual abuse material (CSAM) law to explicitly criminalize computer-generated images created using artificial intelligence software, replacing the term 'child pornography' with 'child sexual abuse material' across relevant statutes.", "stage": "engrossed", "cats": [ "minors", "deepfakes" ], "secs": [ "consumer", "media" ], "date": "2026-03-20", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB1294?ys=2026RS" }, { "id": "m:US-NJ:A4096", "jur": "US-NJ", "level": "state", "num": "A4096", "title": "Requires data center owners and operators to submit semi-annual water and energy usage reports to BPU.", "sum": "NJ A4096 requires data center owners and operators to submit semi-annual reports on water and energy usage to the Board of Public Utilities. This applies to large-load infrastructure broadly, which is tracked as a vertical because of its relationship to AI compute and model training operations.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-30", "url": "https://www.njleg.state.nj.us/bill-search/2026/A4096" }, { "id": "m:US-RI:H7764", "jur": "US-RI", "level": "state", "num": "H7764", "title": "Prohibits the use of algorithmic pricing by landlords to determine the amount of rent to charge a residential tenant.", "sum": "This bill prohibits landlords from using algorithmic pricing systems to set residential rent amounts. It directly restricts automated decision-making in a consequential consumer context.", "stage": "introduced", "cats": [ "anti-discrimination", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-03-18", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-NY:A10216", "jur": "US-NY", "level": "state", "num": "A10216", "title": "Repeals provisions relating to sale and use taxes with respect to data centers to include both personal property purchased by internet data centers and services performed on said personal…", "sum": "NY A10216 repeals sales and use tax exemptions for data centers, removing tax breaks on both personal property purchased by internet data centers and services performed on that equipment. The bill effectively increases the tax burden on data-center operators and infrastructure.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-12", "url": "https://www.nysenate.gov/legislation/bills/2025/A10216" }, { "id": "m:US-MA:H5073", "jur": "US-MA", "level": "state", "num": "H5073", "title": "Study Order", "sum": "MA H5073 is a study order directing an investigation or examination into artificial intelligence policy and implications. The bill does not specify substantive regulatory requirements but establishes a framework for fact-finding on AI issues.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-02-12", "url": "https://malegislature.gov/Bills/194/H5073" }, { "id": "m:US-NY:A10251", "jur": "US-NY", "level": "state", "num": "A10251", "title": "Limits the use of automatic data systems in connection with employment; requires an employer shall provide a written notice that an automatic data system is being used; provides remedies.", "sum": "NY A10251 restricts employers' use of automated data systems in employment decisions and mandates written notice to employees when such systems are deployed. The bill provides legal remedies for violations.", "stage": "introduced", "cats": [ "hiring", "disclosures" ], "secs": [ "hr" ], "date": "2026-02-12", "url": "https://www.nysenate.gov/legislation/bills/2025/A10251" }, { "id": "m:US-NJ:S3611", "jur": "US-NJ", "level": "state", "num": "S3611", "title": "Directs planning boards to submit certain data center development plans to BPU and State Planning Commission and requires State Planning Commission approval for data center development…", "sum": "NJ S3611 establishes state-level oversight of data center development by requiring planning boards to submit development plans to the Board of Public Utilities and State Planning Commission, and mandates State Planning Commission approval for data center projects under the Municipal Land Use Law.…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-19", "url": "https://www.njleg.state.nj.us/bill-search/2026/S3611" }, { "id": "m:US-RI:H7767", "jur": "US-RI", "level": "state", "num": "H7767", "title": "Creates a comprehensive statutory framework to address and regulate the use of artificial intelligence in the workplace, considering the interests of employers and employees.", "sum": "RI H7767 establishes a comprehensive statutory framework regulating artificial intelligence use in the workplace, addressing both employer and employee interests. The bill covers AI-driven hiring, performance monitoring, wage-setting, and related employment decisions.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination", "disclosures" ], "secs": [ "hr" ], "date": "2026-04-15", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-NJ:A4163", "jur": "US-NJ", "level": "state", "num": "A4163", "title": "Provides civil penalties for campaign advertisements containing \"deepfake\" misrepresentations of candidates.", "sum": "NJ A4163 imposes civil penalties on campaign advertisements that contain deepfake misrepresentations of candidates. The bill directly targets synthetic media in the electoral context.", "stage": "introduced", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-02-19", "url": "https://www.njleg.state.nj.us/bill-search/2026/A4163" }, { "id": "m:US-NJ:A4352", "jur": "US-NJ", "level": "state", "num": "A4352", "title": "Requires school districts to provide instruction on artificial intelligence; requires Secretary of Higher Education to develop artificial intelligence model curricula.", "sum": "NJ A4352 mandates that public school districts provide instruction on artificial intelligence and directs the Secretary of Higher Education to develop model AI curricula for use across the state's schools and higher-education institutions.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-02-19", "url": "https://www.njleg.state.nj.us/bill-search/2026/A4352" }, { "id": "m:US-CA:AB1883", "jur": "US-CA", "level": "state", "num": "AB1883", "title": "Workplace surveillance tools.", "sum": "CA AB1883 adds new labor-code protections governing workplace surveillance tools, including algorithmic monitoring and automated decision-making systems used in employment contexts. The bill establishes transparency, consent, and fairness requirements for employers deploying surveillance or…", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-08-03", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB1883" }, { "id": "m:US-CA:AB1898", "jur": "US-CA", "level": "state", "num": "AB1898", "title": "Workplace artificial intelligence tools.", "sum": "CA AB1898 adds new labor-code provisions governing the use of artificial intelligence tools in the workplace, likely covering algorithmic hiring, performance management, and related employment decisions. The bill's placement in labor law suggests it addresses transparency, fairness, and worker…", "stage": "introduced", "cats": [ "hiring", "anti-discrimination", "disclosures" ], "secs": [ "hr" ], "date": "2026-05-14", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB1898" }, { "id": "m:US-CA:SB1050", "jur": "US-CA", "level": "state", "num": "SB1050", "title": "False advertising: synthetic performers.", "sum": "CA SB1050 adds consumer-protection rules prohibiting false advertising through synthetic performers—AI-generated or deepfake representations of real people or fictional characters—without clear disclosure. The bill targets deceptive practices where synthetic media is used to sell goods or services…", "stage": "introduced", "cats": [ "deepfakes", "consumer-financial", "disclosures" ], "secs": [ "media" ], "date": "2026-08-05", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB1050" }, { "id": "m:US-MD:HB1411", "jur": "US-MD", "level": "state", "num": "HB1411", "title": "Data Center Planning and Transparency Act", "sum": "MD HB1411 requires large-scale data center owners/operators to submit disclosure reports to state and local agencies, with the Department of the Environment publishing reports publicly within 30 days. It also mandates that local jurisdictions with populations ≥10,000 adopt comprehensive large-scale…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-13", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB1411?ys=2026RS" }, { "id": "m:US-MD:HB1399", "jur": "US-MD", "level": "state", "num": "HB1399", "title": "Consumer Protection - Consumer Reporting Agencies - Use of Algorithmic Systems", "sum": "MD HB1399 establishes requirements for consumer reporting agencies using algorithmic systems to assemble or evaluate consumer credit information, including assessment thresholds for algorithms, mandatory training for human reviewers, and whistleblower protections. The bill empowers Maryland's…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination", "disclosures" ], "secs": [ "finserv" ], "date": "2026-02-17", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB1399?ys=2026RS" }, { "id": "m:US-MD:HB1534", "jur": "US-MD", "level": "state", "num": "HB1534", "title": "Data Centers - Standards for Operation and Siting", "sum": "MD HB1534 establishes operational and siting standards for data centers, including sound/vibration controls and backup power generation requirements set by the Department of the Environment, and prohibits construction on agricultural land without a compliance report to local authorities.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-13", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB1534?ys=2026RS" }, { "id": "m:US-MD:HB1385", "jur": "US-MD", "level": "state", "num": "HB1385", "title": "Health Insurance - Use of Artificial Intelligence - Human Evaluation", "sum": "Requires that audits, compliance reviews, and performance evaluations of AI, algorithms, or software tools used in health insurance utilization review include assessment by a licensed healthcare professional. Mandates human evaluation findings be used to inform future review and revision of these…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "health", "finserv" ], "date": "2026-02-13", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB1385?ys=2026RS" }, { "id": "m:US-LA:HB119", "jur": "US-LA", "level": "state", "num": "HB119", "title": "Provides relative to unlawful conduct involving images of another person created by artificial intelligence (EN SEE FISC NOTE GF EX)", "sum": "LA HB119 criminalizes the unlawful creation and distribution of AI-generated images of real people without consent, establishing liability for non-consensual synthetic intimate imagery (NCII) and deepfakes. The bill took effect August 1, 2026.", "stage": "passed", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-06-09", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=HB119&sbi=y" }, { "id": "m:US-WI:AB1036", "jur": "US-WI", "level": "state", "num": "AB1036", "title": "Prohibiting nondisclosure agreements intended to conceal information about a data center from the public.", "sum": "WI AB1036 prohibits nondisclosure agreements (NDAs) that would conceal information about data centers from the public, requiring transparency in data-center siting and operations. The bill creates statutory authority for local governments to access and disclose data-center project details.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-23", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/asm/bill/ab1036" }, { "id": "m:US-LA:HB157", "jur": "US-LA", "level": "state", "num": "HB157", "title": "Establishes a cause of action for misuse of artificial intelligence", "sum": "LA HB157 establishes a civil cause of action for misuse of artificial intelligence, creating a private right of action for damages when AI is used improperly or unlawfully. The bill does not specify particular use cases but creates a broad liability framework for AI deployment.", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [], "date": "2026-03-09", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=HB157&sbi=y" }, { "id": "m:US-ID:S1297", "jur": "US-ID", "level": "state", "num": "S1297", "title": "Adds to existing law to establish the Conversational AI Safety Act.", "sum": "Idaho's Conversational AI Safety Act establishes safety and disclosure requirements for conversational AI systems (chatbots, LLMs). The bill likely mandates transparency about AI interaction, user protections, and possibly safety standards for developers deploying conversational agents.", "stage": "passed", "cats": [ "disclosures", "consumer-financial", "frontier" ], "secs": [ "consumer" ], "date": "2026-03-31", "url": "https://legislature.idaho.gov/sessioninfo/2026/legislation/S1297/" }, { "id": "m:US-RI:S2570", "jur": "US-RI", "level": "state", "num": "S2570", "title": "Requires healthcare providers and healthcare facilities to inform patients of the use of artificial intelligence to memorialize patient visits.", "sum": "Requires healthcare providers and facilities to notify patients when artificial intelligence is used to memorialize or document patient visits. This is a transparency mandate tied to a specific healthcare AI application.", "stage": "passed", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-06-22", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-KY:HB641", "jur": "US-KY", "level": "state", "num": "HB641", "title": "AN ACT relating to mental health chatbots.", "sum": "KY HB641 regulates mental health chatbots by requiring suppliers to disclose that the product is AI, prohibit undisclosed product advertising within the chatbot, and handle personally identifiable health information under strict rules. The bill grants enforcement authority to the Attorney General…", "stage": "introduced", "cats": [ "healthcare", "disclosures", "consumer-financial" ], "secs": [ "health", "consumer" ], "date": "2026-02-23", "url": "https://apps.legislature.ky.gov/record/26RS/hb641.html" }, { "id": "m:US-CO:HB1210", "jur": "US-CO", "level": "state", "num": "HB1210", "title": "Prohibit Surveillance Price & Wage Setting", "sum": "CO HB1210 prohibits the use of intimate personal data to make automated inferences that affect a person's financial position, such as pricing, credit decisions, or wage-setting. The bill targets algorithmic systems that leverage sensitive personal information to determine financial outcomes.", "stage": "vetoed", "cats": [ "consumer-financial", "privacy", "anti-discrimination" ], "secs": [ "finserv", "hr", "consumer" ], "date": "2026-06-02", "url": "https://leg.colorado.gov/bills/HB26-1210" }, { "id": "m:US-CA:AB1946", "jur": "US-CA", "level": "state", "num": "AB1946", "title": "Reporting mechanism: child sexual abuse material.", "sum": "CA AB1946 amends civil code provisions governing social media platforms' handling of child sexual abuse material (CSAM), likely establishing or modifying reporting mechanisms and disclosure requirements for platforms that detect or are notified of such content.", "stage": "introduced", "cats": [ "minors", "disclosures" ], "secs": [ "consumer" ], "date": "2026-08-03", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB1946" }, { "id": "m:US-CA:AB1979", "jur": "US-CA", "level": "state", "num": "AB1979", "title": "Health care services: artificial intelligence.", "sum": "CA AB1979 amends California health care law to regulate the use of artificial intelligence in health care services, likely including requirements for transparency, algorithmic accountability, and bias mitigation in clinical decision-support and utilization-review systems.", "stage": "introduced", "cats": [ "healthcare", "disclosures", "anti-discrimination" ], "secs": [ "health" ], "date": "2026-08-03", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB1979" }, { "id": "m:US-CA:AB1988", "jur": "US-CA", "level": "state", "num": "AB1988", "title": "Companion chatbots: crisis interruption pauses.", "sum": "CA AB1988 requires companion chatbots to implement crisis interruption pauses—automated features that detect and interrupt conversations showing signs of crisis or self-harm, with the ability to pause interaction and offer resources. The bill regulates chatbot design and operator duties in a…", "stage": "engrossed", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-06-26", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB1988" }, { "id": "m:US-CA:SB1106", "jur": "US-CA", "level": "state", "num": "SB1106", "title": "Agentic artificial intelligence.", "sum": "CA SB1106 amends California civil and government code to establish rules and accountability mechanisms for agentic AI systems—autonomous AI agents that make or recommend consequential decisions. The bill likely creates disclosure, impact assessment, and liability frameworks for state procurement…", "stage": "introduced", "cats": [ "governance", "gov-use", "frontier" ], "secs": [], "date": "2026-08-05", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB1106" }, { "id": "m:US-WV:HB5590", "jur": "US-WV", "level": "state", "num": "HB5590", "title": "Create a limited and predictable water-quantity review framework for High Impact Data Centers (HIDCs) in West Virginia.", "sum": "WV HB5590 establishes a water-quantity disclosure and regulatory framework specifically for High Impact Data Centers (HIDCs) in West Virginia, addressing environmental and resource-management concerns tied to large-scale data-center operations.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-16", "url": "http://www.wvlegislature.gov/Bill_Status/Bills_history.cfm?input=5590&year=2026&sessiontype=RS&btype=bill" }, { "id": "m:US-IA:HF2469", "jur": "US-IA", "level": "state", "num": "HF2469", "title": "A bill for an act prohibiting the use of an automated decision-making system to alter the price of a product or service for a specific individual based on surveillance data, and providing…", "sum": "IA HF2469 prohibits automated decision-making systems from using surveillance data to set individualized prices for products or services. The bill creates a civil penalty framework for violations of this price-discrimination restriction.", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-02-16", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=HF2469" }, { "id": "m:US-WV:HB5611", "jur": "US-WV", "level": "state", "num": "HB5611", "title": "Certified Microgrid Program", "sum": "WV HB5611 establishes a Certified Microgrid Program to clarify management and regulation of data centers operating in West Virginia growth counties with karst hydrogeology, likely addressing infrastructure siting, energy/water impacts, and grid integration for high-load facilities.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-16", "url": "http://www.wvlegislature.gov/Bill_Status/Bills_history.cfm?input=5611&year=2026&sessiontype=RS&btype=bill" }, { "id": "m:US-WV:HB5620", "jur": "US-WV", "level": "state", "num": "HB5620", "title": "To restore local control in the decision making process in regard to data centers", "sum": "WV HB5620 restores local governmental authority over data-center siting and permitting decisions in West Virginia, shifting control away from state-level preemption. The bill aims to empower municipalities to regulate data-center projects within their jurisdictions.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-16", "url": "http://www.wvlegislature.gov/Bill_Status/Bills_history.cfm?input=5620&year=2026&sessiontype=RS&btype=bill" }, { "id": "m:US-IA:HF2540", "jur": "US-IA", "level": "state", "num": "HF2540", "title": "A bill for an act relating to computer science and artificial intelligence education, including high school curricula and graduation requirements, and practitioner preparation programs, and…", "sum": "Iowa HF2540 establishes computer science and artificial intelligence education requirements for high schools, including curricular standards and graduation requirements, and supports practitioner preparation programs to train educators in AI instruction.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-02-16", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=HF2540" }, { "id": "m:US-ID:H0687", "jur": "US-ID", "level": "state", "num": "H0687", "title": "Adds to existing law to establish provisions regarding unbiased artificial intelligence in state government purchasing.", "sum": "ID H0687 establishes requirements for state government procurement of AI systems to ensure they are unbiased and meet fairness standards. The bill adds provisions to existing procurement law specifically governing the evaluation, selection, and use of artificial intelligence in state purchasing…", "stage": "engrossed", "cats": [ "gov-use", "anti-discrimination" ], "secs": [], "date": "2026-03-03", "url": "https://legislature.idaho.gov/sessioninfo/2026/legislation/H0687/" }, { "id": "m:US-IA:HF2528", "jur": "US-IA", "level": "state", "num": "HF2528", "title": "A bill for an act modifying the duties of the workforce development board, state board of education, and department of education related to cyber and artificial intelligence.(Formerly HSB…", "sum": "IA HF2528 modifies the duties of Iowa's workforce development board, state board of education, and department of education to address cyber and artificial intelligence topics. The bill appears to direct state educational and workforce agencies to incorporate AI-related training, curriculum, or…", "stage": "introduced", "cats": [ "gov-use", "education" ], "secs": [], "date": "2026-02-16", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=HF2528" }, { "id": "m:US-CT:HB05229", "jur": "US-CT", "level": "state", "num": "HB05229", "title": "An Act Concerning Gaming.", "sum": "CT HB05229 restricts the use of artificial intelligence to target certain bets to customers engaged in online sports wagering, as part of a broader gaming regulation bill that also governs advertising, account withdrawals, and customer service requirements for gaming licensees.", "stage": "passed", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-05-19", "url": "https://www.cga.ct.gov/asp/cgabillstatus/cgabillstatus.asp?selBillType=Bill&bill_num=HB05229&which_year=2026" }, { "id": "m:US-GA:HB1351", "jur": "US-GA", "level": "state", "num": "HB1351", "title": "State government; require state agencies to provide a notice to employees when using artificial intelligence in personnel matters", "sum": "GA HB1351 requires state agencies to notify employees when AI is used in personnel matters and to issue disclaimers about such AI use. The bill establishes notice and transparency obligations for government deployment of automated decision-making in employment contexts.", "stage": "introduced", "cats": [ "gov-use", "hiring", "disclosures" ], "secs": [ "hr" ], "date": "2026-02-19", "url": "https://www.legis.ga.gov/legislation/73295" }, { "id": "m:US-GA:SR789", "jur": "US-GA", "level": "state", "num": "SR789", "title": "Senate Study Committee on the Impact of Artificial Intelligence; create", "sum": "GA SR789 establishes a Senate Study Committee charged with examining the impact of artificial intelligence across Georgia. The committee will investigate AI's effects and likely produce findings and recommendations to inform future state policy.", "stage": "passed", "cats": [ "governance" ], "secs": [], "date": "2026-03-31", "url": "https://www.legis.ga.gov/legislation/73299" }, { "id": "m:US-GA:HB1323", "jur": "US-GA", "level": "state", "num": "HB1323", "title": "Electrical service; require new data centers to operate as hybrid power data centers", "sum": "GA HB1323 requires new data centers in Georgia to operate as hybrid power data centers, with certification and enforcement by the Public Service Commission. The bill addresses electrical service regulation and grid integration for data-center infrastructure.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-19", "url": "https://www.legis.ga.gov/legislation/73252" }, { "id": "m:US-CA:AB2023", "jur": "US-CA", "level": "state", "num": "AB2023", "title": "Companion chatbots: children’s safety.", "sum": "CA AB2023 regulates companion chatbots offered to children, requiring safety protections and disclosures. The bill adds Chapter 22.6.1 to the Business and Professions Code to establish rules for AI chatbots that interact with minors.", "stage": "introduced", "cats": [ "minors", "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-08-03", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB2023" }, { "id": "m:US-CA:AB2025", "jur": "US-CA", "level": "state", "num": "AB2025", "title": "Tenancy: digitally altered images: disclosure.", "sum": "CA AB2025 requires landlords and property managers to disclose the use of digitally altered images in rental listings and advertising. The bill establishes liability and enforcement mechanisms for deceptive synthetic media in the housing market.", "stage": "engrossed", "cats": [ "deepfakes", "consumer-financial" ], "secs": [ "media" ], "date": "2026-08-06", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB2025" }, { "id": "m:US-CA:AB2027", "jur": "US-CA", "level": "state", "num": "AB2027", "title": "Worker data: prohibitions: artificial intelligence.", "sum": "CA AB2027 adds prohibitions to California Labor Code governing the use of artificial intelligence in employment contexts, specifically restricting how worker data may be collected, used, and retained by employers deploying AI systems.", "stage": "introduced", "cats": [ "hiring", "privacy" ], "secs": [ "hr" ], "date": "2026-05-14", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB2027" }, { "id": "m:US-CA:SB1111", "jur": "US-CA", "level": "state", "num": "SB1111", "title": "Digital replicas.", "sum": "CA SB1111 amends civil and penal law to regulate digital replicas—synthetic recreations of a person's likeness, voice, or identity. The bill establishes rights, restrictions, and enforcement mechanisms around the creation and use of digital replicas without consent.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-08-05", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB1111" }, { "id": "m:US-CA:SB1119", "jur": "US-CA", "level": "state", "num": "SB1119", "title": "Companion chatbots: children’s safety.", "sum": "CA SB1119 establishes safety requirements for companion chatbots marketed to or used by children, adding new Chapter 22.6.1 to the Business and Professions Code. The bill regulates AI-powered chatbot design, disclosures, and conduct to protect minors from harm.", "stage": "introduced", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-08-05", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB1119" }, { "id": "m:US-MD:HB1595", "jur": "US-MD", "level": "state", "num": "HB1595", "title": "Property Taxes - Authority of Counties to Establish a Subclass and Set a Special Rate for Personal Property of Data Centers", "sum": "MD HB1595 authorizes Baltimore City and Maryland counties to establish a special personal property tax subclass and set a reduced tax rate for qualified data centers. The bill applies to taxable years beginning after June 30, 2026.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-15", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB1595?ys=2026RS" }, { "id": "m:US-UT:HB0585", "jur": "US-UT", "level": "state", "num": "HB0585", "title": "Data Center Amendments", "sum": "UT HB0585 amends Utah law governing data center regulation, siting, and infrastructure policy. The bill addresses operational and regulatory frameworks for data center facilities, which fall within the scope of large-load compute infrastructure tracking.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-06", "url": "https://le.utah.gov/~2026/bills/static/HB0585.html" }, { "id": "m:US-NY:S09236", "jur": "US-NY", "level": "state", "num": "S09236", "title": "Includes communications generated using artificial intelligence in the definition of falsely reporting an incident in the third degree.", "sum": "This bill amends New York Penal Law to explicitly include AI-generated communications within the crime of falsely reporting an incident in the third degree, making it illegal to file false emergency reports or complaints using synthetically generated audio, video, or text.", "stage": "introduced", "cats": [ "deepfakes", "public-safety" ], "secs": [ "media" ], "date": "2026-02-18", "url": "https://www.nysenate.gov/legislation/bills/2025/S9236" }, { "id": "m:US-AK:SB250", "jur": "US-AK", "level": "state", "num": "SB250", "title": "Data Centers, Utilities", "sum": "AK SB250 addresses the siting, utility service, and infrastructure policies governing data centers in Alaska. The bill likely covers utility rates, grid integration, or tax/regulatory incentives for data-center operators.", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-17", "url": "https://www.akleg.gov/basis/Bill/Detail/34?Root=SB250" }, { "id": "m:US-LA:HB197", "jur": "US-LA", "level": "state", "num": "HB197", "title": "Provides for the use of artificial intelligence by healthcare providers", "sum": "LA HB197 addresses the use of artificial intelligence by healthcare providers, establishing a framework for AI deployment in clinical settings. The bill's specific provisions are not detailed in the available description, but it substantively regulates AI as a tool in healthcare delivery.", "stage": "introduced", "cats": [ "healthcare" ], "secs": [ "health" ], "date": "2026-03-09", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=HB197&sbi=y" }, { "id": "m:US-ID:H0727", "jur": "US-ID", "level": "state", "num": "H0727", "title": "Amends existing law to revise a provision regarding video voyeurism and to revise a penalty for disclosing explicit synthetic media.", "sum": "ID H0727 amends Idaho's sex-crime statutes to address video voyeurism and creates or revises penalties for disclosing explicit synthetic media (deepfake pornography). The bill tightens criminal liability around non-consensual intimate imagery created or distributed via synthetic/AI-generated means.", "stage": "passed", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-03-25", "url": "https://legislature.idaho.gov/sessioninfo/2026/legislation/H0727/" }, { "id": "m:US-SC:H5206", "jur": "US-SC", "level": "state", "num": "H5206", "title": "Health insurance", "sum": "SC H5206 requires health insurers using AI to make prior-authorization determinations to consider specified circumstances in their decision-making, disclose AI use to enrollees, and establishes disciplinary actions for violations.", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "disclosures" ], "secs": [ "health", "finserv" ], "date": "2026-02-18", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=5206&session=126&summary=B" }, { "id": "m:US-CT:SB00245", "jur": "US-CT", "level": "state", "num": "SB00245", "title": "An Act Eliminating Certain Tax Incentives For Data Centers.", "sum": "CT SB00245 eliminates certain tax incentives for data centers in Connecticut. The bill directly affects the fiscal environment for data-center siting and operation, which is a tracked vertical under AI infrastructure policy.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-23", "url": "https://www.cga.ct.gov/asp/cgabillstatus/cgabillstatus.asp?selBillType=Bill&bill_num=SB00245&which_year=2026" }, { "id": "m:US-GA:SB530", "jur": "US-GA", "level": "state", "num": "SB530", "title": "Georgia Property Tax Fairness Fund; create", "sum": "GA SB530 creates the Georgia Property Tax Fairness Fund and directs high-technology data center tax collections into that fund, establishing tax incentives and regulatory framework for data center operations in Georgia.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-19", "url": "https://www.legis.ga.gov/legislation/73380" }, { "id": "m:US-CA:AB2169", "jur": "US-CA", "level": "state", "num": "AB2169", "title": "Social media platforms: artificial intelligence models.", "sum": "AB2169 regulates how social media platforms use artificial intelligence models with personal information, likely requiring disclosure and consent mechanisms for AI training or deployment on user data.", "stage": "introduced", "cats": [ "privacy", "disclosures" ], "secs": [ "consumer" ], "date": "2026-05-14", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB2169" }, { "id": "m:US-CA:SB1142", "jur": "US-CA", "level": "state", "num": "SB1142", "title": "Digital Dignity Act.", "sum": "CA SB1142 (Digital Dignity Act) adds protections for personal rights, including provisions related to unauthorized use of a person's likeness, voice, or identity in digital form. The bill appears to address synthetic media and digital replicas without consent, extending California's existing…", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-05-14", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB1142" }, { "id": "m:US-CA:SB1146", "jur": "US-CA", "level": "state", "num": "SB1146", "title": "Advertisement claims: health-related consumer products and services: digital replicas and synthetic performers.", "sum": "CA SB1146 regulates advertisements for health-related consumer products and services that use digital replicas or synthetic performers, requiring disclosure of synthetic media use. The bill aims to prevent deceptive advertising through deepfakes and AI-generated personas in the health and wellness…", "stage": "introduced", "cats": [ "deepfakes", "consumer-financial" ], "secs": [ "health", "media" ], "date": "2026-08-05", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB1146" }, { "id": "m:US-CA:SB1159", "jur": "US-CA", "level": "state", "num": "SB1159", "title": "Artificial intelligence: transparency and governance.", "sum": "CA SB1159 establishes transparency and governance requirements for artificial intelligence use across California state government and agencies. The bill amends multiple sections of the Government Code to create AI disclosure, impact-assessment, and oversight obligations for state entities deploying…", "stage": "engrossed", "cats": [ "governance", "disclosures", "anti-discrimination" ], "secs": [], "date": "2026-07-02", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB1159" }, { "id": "m:US-CA:SB1168", "jur": "US-CA", "level": "state", "num": "SB1168", "title": "Data centers: rate structures.", "sum": "CA SB1168 adds new rate-structure provisions to California's Public Utilities Code governing energy rates for data centers. The bill addresses utility tariffs and pricing frameworks applicable to large-load computing infrastructure.", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-08-06", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB1168" }, { "id": "m:US-SC:H5215", "jur": "US-SC", "level": "state", "num": "H5215", "title": "Data Center Utility Costs", "sum": "SC H5215 regulates utility costs and infrastructure accountability for large-load customers (including data centers) by requiring contracts between utilities and large-load customers, prohibiting cost-shifting to other customer classes, establishing Public Service Commission review standards, and…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-24", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=5215&session=126&summary=B" }, { "id": "m:US-IA:HF2609", "jur": "US-IA", "level": "state", "num": "HF2609", "title": "A bill for an act relating to the use of synthetic media in campaign materials, and making penalties applicable. (Formerly HSB 643.)", "sum": "IA HF2609 regulates the use of synthetic media in campaign materials and establishes penalties for violations. The bill directly addresses deepfakes and synthetic media in the electoral context.", "stage": "engrossed", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-03-17", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=HF2609" }, { "id": "m:US-NJ:S3668", "jur": "US-NJ", "level": "state", "num": "S3668", "title": "Requires notification of use of artificial intelligence system in certain communications with consumers.", "sum": "NJ S3668 requires businesses to notify consumers when they are communicating with or being served by an artificial intelligence system in consumer-facing interactions. The bill establishes a transparency mandate tied to consumer protection.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-02-24", "url": "https://www.njleg.state.nj.us/bill-search/2026/S3668" }, { "id": "m:US-LA:HB230", "jur": "US-LA", "level": "state", "num": "HB230", "title": "Provides for disclosure of artificial intelligence-generated content (OR SEE FISC NOTE GF EX)", "sum": "LA HB230 requires disclosure when content is generated by artificial intelligence. The bill mandates transparency about AI-generated material, likely covering text, images, audio, or video produced by AI systems.", "stage": "introduced", "cats": [ "disclosures" ], "secs": [], "date": "2026-03-09", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=HB230&sbi=y" }, { "id": "m:US-NJ:S3639", "jur": "US-NJ", "level": "state", "num": "S3639", "title": "Requires BPU, DCA, and DEP to establish expedited approval and permitting procedures for artificial intelligence data centers powered by small modular nuclear reactors.", "sum": "This bill directs New Jersey's Board of Public Utilities, Department of Community Affairs, and Department of Environmental Protection to create expedited approval and permitting processes for AI data centers powered by small modular nuclear reactors.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-24", "url": "https://www.njleg.state.nj.us/bill-search/2026/S3639" }, { "id": "m:US-IA:HF2635", "jur": "US-IA", "level": "state", "num": "HF2635", "title": "A bill for an act relating to health carriers standards of conduct; utilization review organizations, artificial intelligence, audits, and prior authorizations; certificate of need…", "sum": "Iowa HF2635 regulates health carriers' use of artificial intelligence in utilization review and prior authorization decisions, imposing standards of conduct and audit requirements on insurers and utilization review organizations. The bill substantively addresses AI-driven insurance coverage denials…", "stage": "passed", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "health", "finserv" ], "date": "2026-05-13", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=HF2635" }, { "id": "m:US-MO:HB3369", "jur": "US-MO", "level": "state", "num": "HB3369", "title": "Prohibits the issuance of permits for construction of data centers for one year in St. Louis", "sum": "MO HB3369 imposes a one-year moratorium on the issuance of permits for new data-center construction in St. Louis. The bill directly regulates data-center siting and development, a tracked vertical under AI infrastructure policy.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-15", "url": "https://house.mo.gov/Bill.aspx?bill=HB3369&year=2026&code=R" }, { "id": "m:US-NJ:S3702", "jur": "US-NJ", "level": "state", "num": "S3702", "title": "Restricts use of certain artificial intelligence generated communications in election campaigns.", "sum": "NJ S3702 restricts the use of AI-generated communications in election campaigns, likely targeting synthetic audio, video, or text used for political messaging. The bill addresses election integrity by limiting deceptive AI-generated content in campaign speech.", "stage": "introduced", "cats": [ "elections", "deepfakes" ], "secs": [ "media" ], "date": "2026-02-24", "url": "https://www.njleg.state.nj.us/bill-search/2026/S3702" }, { "id": "m:US-IA:SF2415", "jur": "US-IA", "level": "state", "num": "SF2415", "title": "A bill for an act relating to provider requirements concerning the mental health of users of an artificial intelligence chatbot, and providing civil penalties.", "sum": "This bill imposes requirements on AI chatbot providers to safeguard the mental health of users, with civil penalties for non-compliance. It appears to address harms from chatbot interactions, particularly around mental-health risks and user wellbeing.", "stage": "introduced", "cats": [ "healthcare", "consumer-financial" ], "secs": [ "consumer", "health" ], "date": "2026-02-24", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=SF2415" }, { "id": "m:US-IA:SF2414", "jur": "US-IA", "level": "state", "num": "SF2414", "title": "A bill for an act relating to automated decision systems used by employers.", "sum": "IA SF2414 regulates automated decision systems (ADS) used by employers in hiring, promotion, discipline, and termination decisions. The bill likely imposes transparency, bias-audit, or impact-assessment requirements on employers deploying algorithmic employment tools.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-02-23", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=SF2414" }, { "id": "m:US-GA:SB540", "jur": "US-GA", "level": "state", "num": "SB540", "title": "Online Internet Safety; certain disclosures related to conversational AI services; require", "sum": "GA SB540 requires operators of conversational AI services to disclose that users are interacting with AI, implement safeguards to limit harmful actions by chatbots toward minors, provide privacy tools, and establish protocols for responding to suicidal ideation or self-harm. The bill is enforceable…", "stage": "passed", "cats": [ "minors", "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-05-11", "url": "https://www.legis.ga.gov/legislation/73452" }, { "id": "m:US-GA:HB1387", "jur": "US-GA", "level": "state", "num": "HB1387", "title": "Ad valorem tax; state-wide homestead exemption in an amount as determined from proceeds generated from collection of certain ad valorem property taxes on data centers", "sum": "GA HB1387 creates a state-wide homestead property-tax exemption funded by ad valorem tax revenues collected on data centers. The bill ties residential tax relief directly to data-center taxation, effectively using data-center operations as a revenue source for homeowner exemptions.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-24", "url": "https://www.legis.ga.gov/legislation/73424" }, { "id": "m:US-GA:HB1399", "jur": "US-GA", "level": "state", "num": "HB1399", "title": "Georgia Likeness, Expression, Generative AI, and Commercial Yield (LEGACY) Act; enact", "sum": "The Georgia LEGACY Act establishes property rights in individuals' likenesses and requires consent before using a person's likeness in any medium, including through generative AI. The bill creates a private right of action for violations and applies to synthetic or AI-generated representations of…", "stage": "introduced", "cats": [ "deepfakes", "privacy", "consumer-financial" ], "secs": [ "media" ], "date": "2026-02-24", "url": "https://www.legis.ga.gov/legislation/73441" }, { "id": "m:US-CA:SB1217", "jur": "US-CA", "level": "state", "num": "SB1217", "title": "Nonconsensual Intimate Image Clearinghouse.", "sum": "CA SB1217 establishes a nonconsensual intimate image clearinghouse—a centralized system for reporting, removing, and combating the distribution of intimate images shared without consent, including deepfake and synthetic intimate imagery. The bill adds civil and criminal enforcement mechanisms under…", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-05-14", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB1217" }, { "id": "m:US-CA:SB1248", "jur": "US-CA", "level": "state", "num": "SB1248", "title": "State agencies: automated decision systems.", "sum": "CA SB1248 establishes requirements for state agencies' use of automated decision systems, likely including procurement rules, impact assessments, and transparency or bias-mitigation standards. The bill creates a new chapter of the Government Code to govern how public sector agencies deploy…", "stage": "introduced", "cats": [ "governance", "gov-use", "anti-discrimination" ], "secs": [], "date": "2026-05-14", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB1248" }, { "id": "m:US-CO:HB1263", "jur": "US-CO", "level": "state", "num": "HB1263", "title": "Conversational Artificial Intelligence Service Operator Requirements", "sum": "CO HB1263 establishes requirements for operators of conversational AI services, likely including disclosure and transparency obligations (e.g., notifying users they are interacting with AI), and potentially restrictions or safeguards around use by minors. The bill addresses operational standards…", "stage": "passed", "cats": [ "disclosures", "consumer-financial", "minors" ], "secs": [ "consumer" ], "date": "2026-05-29", "url": "https://leg.colorado.gov/bills/HB26-1263" }, { "id": "m:US-ID:H0744", "jur": "US-ID", "level": "state", "num": "H0744", "title": "Adds to existing law to establish provisions regarding the capture or use of biometric identifiers.", "sum": "ID H0744 establishes legal provisions governing the capture and use of biometric identifiers (facial recognition, fingerprints, iris/retina scans, etc.). The bill likely addresses when and how government agencies, law enforcement, and private entities can collect, store, and deploy biometric data.", "stage": "introduced", "cats": [ "privacy", "public-safety" ], "secs": [], "date": "2026-02-23", "url": "https://legislature.idaho.gov/sessioninfo/2026/legislation/H0744/" }, { "id": "m:US-CA:AB2383", "jur": "US-CA", "level": "state", "num": "AB2383", "title": "Electricity: data centers.", "sum": "CA AB2383 adds new provisions to the Public Utilities Code governing electricity rates and infrastructure for data centers. The bill directly addresses data-center energy policy, a tracked vertical under AI infrastructure scope.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-08-03", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB2383" }, { "id": "m:US-CA:AB2392", "jur": "US-CA", "level": "state", "num": "AB2392", "title": "Public postsecondary education: generative artificial intelligence systems: procurement standards: training.", "sum": "CA AB2392 establishes procurement standards and training requirements for generative AI systems used by California's public postsecondary institutions (community colleges, CSUs, UCs). The bill mandates standards for responsible AI procurement and likely includes workforce training provisions for…", "stage": "introduced", "cats": [ "gov-use", "education", "disclosures" ], "secs": [], "date": "2026-08-03", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB2392" }, { "id": "m:US-CA:AB2412", "jur": "US-CA", "level": "state", "num": "AB2412", "title": "State agencies or departments: public communications.", "sum": "CA AB2412 amends Government Code Section 11549.66 to impose requirements on state agencies and departments regarding public communications involving artificial intelligence. The bill likely mandates disclosure or transparency rules when state entities use or deploy AI systems in their public-facing…", "stage": "engrossed", "cats": [ "gov-use", "disclosures" ], "secs": [], "date": "2026-06-26", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB2412" }, { "id": "m:US-CA:AB2469", "jur": "US-CA", "level": "state", "num": "AB2469", "title": "Data centers: water use disclosures.", "sum": "CA AB2469 requires data centers to disclose their water usage to state authorities and the public. The bill adds reporting and transparency requirements for water consumption by data facilities.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-08-10", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB2469" }, { "id": "m:US-CA:AB2487", "jur": "US-CA", "level": "state", "num": "AB2487", "title": "Artificial intelligence: education and workforce development.", "sum": "CA AB2487 establishes a new chapter in California's Government Code focused on artificial intelligence education and workforce development. The bill creates formal structures and funding mechanisms to integrate AI literacy and training into California's educational and workforce systems.", "stage": "introduced", "cats": [ "governance", "education" ], "secs": [ "hr" ], "date": "2026-04-07", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB2487" }, { "id": "m:US-CA:AB2504", "jur": "US-CA", "level": "state", "num": "AB2504", "title": "Community colleges: artificial intelligence: pilot program.", "sum": "CA AB2504 establishes a pilot program at California community colleges to study and implement artificial intelligence applications in teaching, learning, and institutional operations. The bill creates a framework for colleges to experiment with AI tools while developing best practices and…", "stage": "introduced", "cats": [ "gov-use", "education" ], "secs": [], "date": "2026-08-03", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB2504" }, { "id": "m:US-CA:AB2545", "jur": "US-CA", "level": "state", "num": "AB2545", "title": "Report: labor force impact: artificial intelligence.", "sum": "CA AB2545 establishes a reporting requirement on the labor-force impact of artificial intelligence, likely directing the state to study or document how AI adoption affects employment, worker displacement, and workforce trends.", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-08-03", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB2545" }, { "id": "m:US-CA:AB2575", "jur": "US-CA", "level": "state", "num": "AB2575", "title": "Health care services: artificial intelligence.", "sum": "CA AB2575 establishes requirements for the use of artificial intelligence in health care services, including provisions on liability, transparency, and algorithmic decision-making in clinical settings. The bill amends the Civil Code, Health and Safety Code, and Labor Code to regulate AI-driven…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "disclosures" ], "secs": [ "health" ], "date": "2026-08-03", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB2575" }, { "id": "m:US-CA:AB2583", "jur": "US-CA", "level": "state", "num": "AB2583", "title": "Office of Small Business Advocate: artificial intelligence.", "sum": "CA AB2583 amends the Government Code to expand the Office of Small Business Advocate's duties to include support and guidance for small businesses adopting or using artificial intelligence. The bill establishes a governance/advisory function rather than substantive AI regulation.", "stage": "introduced", "cats": [ "gov-use" ], "secs": [], "date": "2026-05-14", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB2583" }, { "id": "m:US-CA:AB2619", "jur": "US-CA", "level": "state", "num": "AB2619", "title": "Water resources: data centers.", "sum": "CA AB2619 adds water-management and reporting provisions to California's Business and Professions Code and Water Code specifically targeting data-center operations, including new water-use disclosure and conservation requirements for large data-center facilities.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-08-10", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB2619" }, { "id": "m:US-CA:AB2653", "jur": "US-CA", "level": "state", "num": "AB2653", "title": "State contracts: report: modern foundation models and associated artificial intelligence systems.", "sum": "CA AB2653 requires the state to report on its contracts involving modern foundation models and associated AI systems, establishing transparency and oversight requirements around government procurement of large AI systems.", "stage": "introduced", "cats": [ "gov-use", "frontier" ], "secs": [], "date": "2026-05-14", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB2653" }, { "id": "m:US-CA:AB2656", "jur": "US-CA", "level": "state", "num": "AB2656", "title": "Public employees: notice: artificial intelligence performing service within scope of work.", "sum": "CA AB2656 requires public employers to notify employees when artificial intelligence systems are performing work within their job scope. The bill aims to ensure transparency about AI use in government employment contexts.", "stage": "introduced", "cats": [ "gov-use", "disclosures" ], "secs": [ "hr" ], "date": "2026-08-03", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB2656" }, { "id": "m:US-CA:AB2713", "jur": "US-CA", "level": "state", "num": "AB2713", "title": "California AI Transparency Act: system provenance data.", "sum": "CA AB2713 amends California's AI transparency law to require disclosure of system provenance data—information about the origin, development, and sourcing of AI systems. The bill strengthens transparency requirements for AI systems used in consequential decision-making contexts.", "stage": "engrossed", "cats": [ "governance", "disclosures" ], "secs": [], "date": "2026-06-17", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB2713" }, { "id": "m:US-CA:SB1276", "jur": "US-CA", "level": "state", "num": "SB1276", "title": "Crimes: sexual exploitation of a child.", "sum": "CA SB1276 amends Penal Code sections 311.3 and 11165.1 to strengthen laws against child sexual exploitation, likely including provisions on synthetic child sexual abuse material (CSAM) and deepfake imagery of minors.", "stage": "introduced", "cats": [ "minors", "deepfakes" ], "secs": [ "consumer", "media" ], "date": "2026-08-05", "url": "https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260SB1276" }, { "id": "m:US-IA:SF2421", "jur": "US-IA", "level": "state", "num": "SF2421", "title": "A bill for an act relating to utilization review organizations' use of artificial intelligence, prior authorization determinations and exemptions, and audits, and including applicability…", "sum": "This bill regulates utilization review organizations' use of AI in making prior authorization determinations for healthcare coverage. It establishes requirements for AI-driven decisions, exemptions, and audit procedures to ensure fairness and accountability in insurance utilization review.", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "health", "finserv" ], "date": "2026-03-04", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=SF2421" }, { "id": "m:US-UT:SB0318", "jur": "US-UT", "level": "state", "num": "SB0318", "title": "Data Center Non Disclosure Amendments", "sum": "UT SB0318 amends data center non-disclosure and confidentiality provisions, likely addressing transparency, siting, or operational reporting requirements for data center facilities.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-06", "url": "https://le.utah.gov/~2026/bills/static/SB0318.html" }, { "id": "m:US-IA:HF2691", "jur": "US-IA", "level": "state", "num": "HF2691", "title": "A bill for an act relating to the ownership of artificial intelligence output and trained artificial intelligence.(Formerly HSB 635.)", "sum": "This bill addresses the ownership and property rights of AI-generated output and trained AI models themselves. It establishes legal frameworks for who owns the results of AI systems and the trained models that produce them.", "stage": "introduced", "cats": [ "frontier", "privacy" ], "secs": [ "media" ], "date": "2026-03-19", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=HF2691" }, { "id": "m:US-IA:HF2690", "jur": "US-IA", "level": "state", "num": "HF2690", "title": "A bill for an act relating to water and energy use for data centers, including reporting and tariff requirements, and including effective date provisions.(Formerly HF 2447.)", "sum": "This bill regulates water and energy use by data centers in Iowa, establishing reporting requirements and tariff rules for large-load infrastructure. It directly addresses the siting, energy, and utility grid impacts of data-center operations.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-12", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=HF2690" }, { "id": "m:US-LA:SB110", "jur": "US-LA", "level": "state", "num": "SB110", "title": "Prohibits using a child's image to train artificial intelligence to produce child sexual abuse materials. (8/1/26)", "sum": "LA SB110 prohibits using a child's image to train artificial intelligence systems for the purpose of generating child sexual abuse material (CSAM). The bill criminalizes this specific misuse of AI technology involving minors.", "stage": "passed", "cats": [ "minors", "deepfakes" ], "secs": [ "consumer", "media" ], "date": "2026-05-14", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=SB110&sbi=y" }, { "id": "m:US-MO:HB3390", "jur": "US-MO", "level": "state", "num": "HB3390", "title": "Creates new provisions related to the construction of data centers", "sum": "MO HB3390 creates new provisions governing the construction and siting of data centers in Missouri. The bill likely addresses permitting, zoning, infrastructure requirements, or incentives related to data-center development.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-15", "url": "https://house.mo.gov/Bill.aspx?bill=HB3390&year=2026&code=R" }, { "id": "m:US-LA:HB295", "jur": "US-LA", "level": "state", "num": "HB295", "title": "Prohibits the development of artificial intelligence systems with certain capabilities involving interactions with minors (OR SEE FISC NOTE GF EX)", "sum": "LA HB295 prohibits development of AI systems with certain capabilities for direct interaction with minors, effectively restricting chatbots and automated systems that engage children. The bill targets AI-powered services designed to communicate with or influence minors.", "stage": "introduced", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-03-09", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=HB295&sbi=y" }, { "id": "m:US-MO:HB3393", "jur": "US-MO", "level": "state", "num": "HB3393", "title": "Establishes the \"Megan Meier Act\"", "sum": "The Megan Meier Act establishes legal protections and remedies against the creation and distribution of deepfakes and synthetic media depicting minors, particularly in contexts of harassment, exploitation, or non-consensual intimate imagery. The bill addresses harms from AI-generated or manipulated…", "stage": "introduced", "cats": [ "deepfakes", "minors" ], "secs": [ "consumer", "media" ], "date": "2026-04-02", "url": "https://house.mo.gov/Bill.aspx?bill=HB3393&year=2026&code=R" }, { "id": "m:US-ID:H0756", "jur": "US-ID", "level": "state", "num": "H0756", "title": "Amends and adds to existing law to provide for new large loads.", "sum": "ID H0756 amends Idaho law to establish regulatory and utility framework provisions for new large loads, which typically include data centers and high-power compute facilities. The bill addresses siting, permitting, and utility integration for energy-intensive infrastructure.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-25", "url": "https://legislature.idaho.gov/sessioninfo/2026/legislation/H0756/" }, { "id": "m:US-MI:HB5579", "jur": "US-MI", "level": "state", "num": "HB5579", "title": "Labor: fair employment practices; use of electronic monitoring or automated decisions tools by an employer; prohibit except for certain purposes. Creates new act.", "sum": "MI HB5579 restricts employers' use of electronic monitoring and automated decision-making tools in hiring and employment, permitting such tools only for specified lawful purposes. The bill creates a new act governing fair employment practices tied to algorithmic and surveillance technologies.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-02-26", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-5579" }, { "id": "m:US-SC:H5253", "jur": "US-SC", "level": "state", "num": "H5253", "title": "Ai in education", "sum": "SC H5253 establishes limitations and safeguards for AI use in public schools, including parental notice and consent requirements, mandatory human and teacher oversight, and student data protections. The bill defines key terms and provides enforcement mechanisms and remedies.", "stage": "introduced", "cats": [ "education", "minors", "privacy" ], "secs": [ "consumer" ], "date": "2026-02-24", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=5253&session=126&summary=B" }, { "id": "m:US-PA:HB2246", "jur": "US-PA", "level": "state", "num": "HB2246", "title": "In water resources planning, further providing for State water plan and providing for covered data centers; and promulgating regulations.", "sum": "PA HB2246 amends Pennsylvania's water resources planning law to establish requirements for 'covered data centers,' including provisions for water use, state water plan integration, and regulatory standards. The bill directly addresses data-center siting, water consumption, and grid/utility…", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-01", "url": "https://www.palegis.us/legislation/bills/2025/hb2246" }, { "id": "m:US-GA:HB1439", "jur": "US-GA", "level": "state", "num": "HB1439", "title": "Georgia Surveillance Pricing Act; enact", "sum": "GA HB1439 prohibits 'surveillance pricing'—the use of automated systems to charge different prices to different customers based on personal data or behavioral tracking—in retail food establishments, with limited exceptions. The bill also restricts use of electronic shelf labels and establishes…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-02-26", "url": "https://www.legis.ga.gov/legislation/73558" }, { "id": "m:US-NY:S09288", "jur": "US-NY", "level": "state", "num": "S09288", "title": "Repeals provisions relating to sale and use taxes with respect to data centers to include both personal property purchased by internet data centers and services performed on said personal…", "sum": "This bill repeals tax exemptions for data centers by removing sales and use tax breaks on both personal property purchased by internet data centers and services performed on that property. It effectively increases the tax burden on data center operators in New York.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-25", "url": "https://www.nysenate.gov/legislation/bills/2025/S9288" }, { "id": "m:US-OH:HB710", "jur": "US-OH", "level": "state", "num": "HB710", "title": "Prohibit public support, limit construction of, new data centers", "sum": "OH HB710 prohibits public financial support for new data-center construction and imposes limits on their development in Ohio. The bill amends state law to restrict government subsidies, tax incentives, and other public assistance for data-center projects.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-25", "url": "https://www.legislature.ohio.gov/legislation/136/hb710" }, { "id": "m:US-LA:HB421", "jur": "US-LA", "level": "state", "num": "HB421", "title": "Provides relative to the use of automated decision systems with respect to employment decisions (OR INCREASE GF EX See Note)", "sum": "LA HB421 regulates the use of automated decision systems in employment decisions, establishing rules for how employers may deploy algorithmic tools in hiring, promotion, and other personnel actions. The bill addresses algorithmic fairness and accountability in the employment context.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-03-09", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=HB421&sbi=y" }, { "id": "m:US-LA:HB425", "jur": "US-LA", "level": "state", "num": "HB425", "title": "Provides for consumer protection practices for customers engaging with artificial intelligence (OR SEE FISC NOTE GF EX)", "sum": "LA HB425 establishes consumer protection practices and requirements for customers engaging with artificial intelligence systems. The bill likely addresses transparency, disclosure, and accountability mechanisms to protect consumers from AI-related harms.", "stage": "introduced", "cats": [ "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-03-09", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=HB425&sbi=y" }, { "id": "m:US-MO:SB1750", "jur": "US-MO", "level": "state", "num": "SB1750", "title": "Creates provisions relating to the regulation of large load electric customers", "sum": "MO SB1750 creates regulatory provisions for large load electric customers, which typically includes data centers and other high-energy-consumption facilities. The bill likely addresses utility tariffs, grid management, and operational requirements for entities with substantial electrical demand.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-07", "url": "https://www.senate.mo.gov/BillTracking/Bills/Billinformation?year=2026&billid=6459808" }, { "id": "m:US-AL:SB328", "jur": "US-AL", "level": "state", "num": "SB328", "title": "Artificial Intelligence; state agencies required to perform quarterly AI-assisted review of rules", "sum": "AL SB328 requires Alabama state agencies to perform quarterly AI-assisted reviews of their existing administrative rules and regulations. The bill appears to mandate use of AI tools as a procedural mechanism for rule evaluation, rather than regulating AI itself.", "stage": "introduced", "cats": [ "gov-use" ], "secs": [], "date": "2026-02-25", "url": "https://alison.legislature.state.al.us/bill-search" }, { "id": "m:US-MN:SF3984", "jur": "US-MN", "level": "state", "num": "SF3984", "title": "Prior authorization usage of algorithms or artificial intelligence prohibition provision", "sum": "This bill prohibits the use of algorithms or artificial intelligence in prior authorization decisions for healthcare coverage. It addresses automated decision-making in insurance utilization review, a consequential domain affecting patient access to care.", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "health", "finserv" ], "date": "2026-03-02", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/3984/" }, { "id": "m:US-MN:SF3968", "jur": "US-MN", "level": "state", "num": "SF3968", "title": "Data centers provisions modification", "sum": "MN SF3968 modifies Minnesota's data center provisions, likely addressing siting, utility tariffs, tax incentives, or energy/grid policy for data centers. The bill's placement in the Energy, Utilities, Environment, and Climate committee signals focus on infrastructure and utility regulation.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-26", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/3968/" }, { "id": "m:US-CT:HB05342", "jur": "US-CT", "level": "state", "num": "HB05342", "title": "An Act Concerning The Use Of Artificial Intelligence And Other Means To Generate Deceptive Synthetic Media And Affect Elections.", "sum": "CT HB05342 prohibits the distribution of deceptive synthetic media (deepfakes and artificially generated content) within 90 days before an election or primary. The bill directly targets AI-generated or manipulated audio, video, and imagery used to mislead voters.", "stage": "introduced", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-04-20", "url": "https://www.cga.ct.gov/asp/cgabillstatus/cgabillstatus.asp?selBillType=Bill&bill_num=HB05342&which_year=2026" }, { "id": "m:US-CT:SB00325", "jur": "US-CT", "level": "state", "num": "SB00325", "title": "An Act Prohibiting The Disclosure Of The Residential Address Of Public School Employees Under The Freedom Of Information Act And Establishing A Task Force Concerning Mass Requests Under The…", "sum": "The bill prohibits disclosure of residential addresses of public school employees under Connecticut's Freedom of Information Act and establishes a task force to study how to manage mass FOIA requests generated by artificial intelligence systems.", "stage": "engrossed", "cats": [ "governance", "privacy" ], "secs": [], "date": "2026-04-23", "url": "https://www.cga.ct.gov/asp/cgabillstatus/cgabillstatus.asp?selBillType=Bill&bill_num=SB00325&which_year=2026" }, { "id": "m:US-CT:SB00342", "jur": "US-CT", "level": "state", "num": "SB00342", "title": "An Act Concerning Health Coverage.", "sum": "CT SB00342 restricts health insurers from using automated software tools to downcode or deny insurance claims, and establishes procedural protections (rebuttable presumptions) for adverse-determination review. The bill targets algorithmic decision-making in insurance claim processing and…", "stage": "engrossed", "cats": [ "healthcare", "consumer-financial" ], "secs": [ "health", "finserv" ], "date": "2026-05-06", "url": "https://www.cga.ct.gov/asp/cgabillstatus/cgabillstatus.asp?selBillType=Bill&bill_num=SB00342&which_year=2026" }, { "id": "m:US-GA:SB594", "jur": "US-GA", "level": "state", "num": "SB594", "title": "Internet and E-mail Fraud; the criminal offense of digital identity fraud; establish", "sum": "GA SB594 establishes criminal and civil penalties for 'digital identity fraud' and requires social media platform operators to evaluate claims of such fraud. The bill targets fraudulent impersonation and misrepresentation of identity online, including synthetic or manipulated digital…", "stage": "engrossed", "cats": [ "deepfakes", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-03-25", "url": "https://www.legis.ga.gov/legislation/73658" }, { "id": "m:US-MD:SB989", "jur": "US-MD", "level": "state", "num": "SB989", "title": "Child Exploitation Material - Civil and Criminal Actions (Safe Kids Act)", "sum": "MD SB989 expands Maryland's child exploitation material laws to explicitly include computer-generated images created using artificial intelligence software, and increases the age threshold for victim protection from 16 to 18. The bill also creates civil action and enforcement mechanisms for…", "stage": "introduced", "cats": [ "minors", "deepfakes" ], "secs": [ "consumer", "media" ], "date": "2026-02-18", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0989?ys=2026RS" }, { "id": "m:US-PA:HB2252", "jur": "US-PA", "level": "state", "num": "HB2252", "title": "In sexual offenses, further providing for the offense of unlawful dissemination of intimate image; and, in minors, further providing for the offense of sexual abuse of children.", "sum": "PA HB2252 amends Pennsylvania's sexual offense statutes to strengthen penalties for unlawful dissemination of intimate images and sexual abuse of children. The bill expands protections against non-consensual intimate imagery, which includes synthetic/deepfake intimate content.", "stage": "engrossed", "cats": [ "deepfakes", "minors" ], "secs": [ "consumer", "media" ], "date": "2026-06-18", "url": "https://www.palegis.us/legislation/bills/2025/hb2252" }, { "id": "m:US-SC:S0963", "jur": "US-SC", "level": "state", "num": "S0963", "title": "Artificial intelligence, consumer protection", "sum": "SC S0963 creates a new consumer-protection chapter prohibiting algorithmic discrimination from high-risk AI systems. The bill directly targets consequential automated decisions affecting consumers, modeled on state AI fairness frameworks.", "stage": "introduced", "cats": [ "anti-discrimination", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-02-26", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=0963&session=126&summary=B" }, { "id": "m:US-SC:H5286", "jur": "US-SC", "level": "state", "num": "H5286", "title": "Data Center Moratorium", "sum": "SC H5286 imposes a moratorium on state governmental entities, counties, municipalities, and political subdivisions from approving permits, incentives, or other support for new data centers until January 1, 2028. The bill defines 'data center' for purposes of this prohibition.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-31", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=5286&session=126&summary=B" }, { "id": "m:US-WI:SB1061", "jur": "US-WI", "level": "state", "num": "SB1061", "title": "Moratorium on data centers.", "sum": "WI SB1061 would create a moratorium on the construction and operation of new data centers in Wisconsin. The bill directly addresses data-center siting and expansion policy, a tracked vertical under AI infrastructure.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-23", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/sen/bill/sb1061" }, { "id": "m:US-MN:HF3794", "jur": "US-MN", "level": "state", "num": "HF3794", "title": "Surveillance-based price and wage discrimination prohibited.", "sum": "Prohibits use of surveillance data and automated systems to discriminate in pricing (consumer transactions) and wage-setting (employment). The bill targets algorithmic discrimination enabled by data collection and automated decision-making in both commerce and labor markets.", "stage": "introduced", "cats": [ "anti-discrimination", "consumer-financial", "hiring" ], "secs": [ "consumer", "hr" ], "date": "2026-04-23", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/3794/" }, { "id": "m:US-LA:HB471", "jur": "US-LA", "level": "state", "num": "HB471", "title": "Provides relative to prohibiting surveillance-based price discrimination", "sum": "LA HB471 prohibits surveillance-based price discrimination, preventing businesses from using collected personal data and behavioral tracking to charge different prices to different consumers. The bill targets algorithmic pricing practices enabled by automated data collection and analysis.", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-03-09", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=HB471&sbi=y" }, { "id": "m:US-LA:HB459", "jur": "US-LA", "level": "state", "num": "HB459", "title": "Provides relative to the use of artificial intelligence in political campaigns", "sum": "LA HB459 regulates the use of artificial intelligence in political campaigns, likely addressing deepfakes, synthetic media, and/or disclosure requirements for AI-generated campaign content. The bill became effective August 1, 2026.", "stage": "passed", "cats": [ "elections", "deepfakes", "disclosures" ], "secs": [ "media" ], "date": "2026-06-09", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=HB459&sbi=y" }, { "id": "m:US-MI:HB5594", "jur": "US-MI", "level": "state", "num": "HB5594", "title": "Businesses: other; moratorium on certain approvals for and operation of any new data centers; provide for. Creates new act. TIE BAR WITH: HB 5596'26", "sum": "MI HB5594 creates a moratorium on approvals and operation of new data centers in Michigan. The bill appears designed to restrict or delay large-scale data-center development, which directly implicates the compute and infrastructure needed to train and deploy large AI models.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-03", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-5594" }, { "id": "m:US-AL:HB524", "jur": "US-AL", "level": "state", "num": "HB524", "title": "Artificial Intelligence; state agencies required to perform quarterly AI-assisted review of rules", "sum": "AL HB524 requires state agencies to perform quarterly AI-assisted reviews of their administrative rules. The bill mandates ongoing use of AI systems to audit and evaluate regulatory compliance and rule effectiveness.", "stage": "introduced", "cats": [ "gov-use" ], "secs": [], "date": "2026-02-26", "url": "https://alison.legislature.state.al.us/bill-search" }, { "id": "m:US-WI:SB1066", "jur": "US-WI", "level": "state", "num": "SB1066", "title": "Use of artificial intelligence to deny prior authorization for medical necessity or experimental status.", "sum": "This bill prohibits health insurers from using artificial intelligence to automatically deny prior authorization requests for medical necessity or experimental-status determinations. It establishes guardrails on automated decision-making in insurance utilization review.", "stage": "failed/dead", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "health", "finserv" ], "date": "2026-03-30", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/sen/bill/sb1066" }, { "id": "m:US-MI:HB5595", "jur": "US-MI", "level": "state", "num": "HB5595", "title": "Public utilities: public service commission; moratorium on approvals by the Michigan public service commission of any new enterprise data centers; provide for. Amends 1939 PA 3 (MCL 460.1 -…", "sum": "MI HB5595 imposes a moratorium on the Michigan Public Service Commission's approval of new enterprise data centers. The bill amends the 1939 Public Utilities Act to prevent new large-load facilities from receiving regulatory authorization.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-03", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-5595" }, { "id": "m:US-LA:SB246", "jur": "US-LA", "level": "state", "num": "SB246", "title": "Establishes requirements for health insurance issuers using artificial intelligence or automated decision systems. (8/1/26)", "sum": "LA SB246 establishes requirements for health insurance issuers that use artificial intelligence or automated decision systems, likely covering transparency, fairness, and accountability in coverage and claims decisions.", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "disclosures" ], "secs": [ "health", "finserv" ], "date": "2026-05-28", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=SB246&sbi=y" }, { "id": "m:US-MD:SB992", "jur": "US-MD", "level": "state", "num": "SB992", "title": "Public Utilities - Large Load Customers - Registration and Demand Response Program", "sum": "MD SB992 establishes a registration and oversight framework for large load customers (including data centers) connecting to Maryland's electric grid, and creates a demand response program administered by the Public Service Commission. It also makes registered data centers eligible for a state tax…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-06", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0992?ys=2026RS" }, { "id": "m:US-RI:H7849", "jur": "US-RI", "level": "state", "num": "H7849", "title": "Creates the surveillance pricing and online retailing act that would prohibit algorithmic price increases for online purchases.", "sum": "RI H7849 prohibits algorithmic price increases for online purchases, targeting the practice of using automated decision-making systems to charge different prices to different consumers based on behavioral or personal data. The bill treats dynamic pricing driven by surveillance and profiling as an…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-03-03", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-LA:HB686", "jur": "US-LA", "level": "state", "num": "HB686", "title": "Provides for the unlawful use of artificial intelligence in telephone calls (OR SEE FISC NOTE LF EX)", "sum": "LA HB686 criminalizes the unlawful use of artificial intelligence in telephone calls, likely targeting AI-generated voice deepfakes and synthetic robocalls used for fraud or impersonation.", "stage": "introduced", "cats": [ "deepfakes", "consumer-financial" ], "secs": [ "media" ], "date": "2026-03-09", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=HB686&sbi=y" }, { "id": "m:US-LA:HB639", "jur": "US-LA", "level": "state", "num": "HB639", "title": "Requires disclosure of the use of artificial intelligence in telephone campaign communications", "sum": "LA HB639 requires disclosure when artificial intelligence is used in telephone campaign communications. The bill mandates that callers using AI-generated voices or messages in political calls must inform recipients of the use of AI technology.", "stage": "passed", "cats": [ "elections", "disclosures" ], "secs": [ "media" ], "date": "2026-05-29", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=HB639&sbi=y" }, { "id": "m:US-RI:H7954", "jur": "US-RI", "level": "state", "num": "H7954", "title": "Regulates how certain large social media platforms utilize algorithms.", "sum": "RI H7954 regulates how large social media platforms use algorithms, with a focus on transparency and protecting democratic integrity. The bill likely requires disclosure of algorithmic decision-making and safeguards against algorithmic amplification of harmful content.", "stage": "introduced", "cats": [ "disclosures", "anti-discrimination", "elections" ], "secs": [ "consumer" ], "date": "2026-03-05", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-RI:H8052", "jur": "US-RI", "level": "state", "num": "H8052", "title": "Provides a civil cause of action for individuals injured by artificial intelligence.", "sum": "RI H8052 creates a civil cause of action allowing individuals to sue for harm caused by artificial intelligence systems. The bill establishes a legal pathway for private litigation against AI developers or deployers, though the full scope of covered harms and liability standards is not detailed in…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [], "date": "2026-03-26", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-LA:HB734", "jur": "US-LA", "level": "state", "num": "HB734", "title": "Creates a consumer bill of rights regarding artificial intelligence", "sum": "LA HB734 establishes a consumer bill of rights specifically governing artificial intelligence systems, likely addressing transparency, fairness, and protections for individuals affected by AI-driven decisions. The bill's framework suggests requirements around disclosure, algorithmic accountability,…", "stage": "introduced", "cats": [ "consumer-financial", "disclosures", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-03-30", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=HB734&sbi=y" }, { "id": "m:US-MA:H5175", "jur": "US-MA", "level": "state", "num": "H5175", "title": "Relative to energy affordability, clean power and economic competitiveness", "sum": "An energy and clean-power bill that addresses utility modernization, grid infrastructure, and economic competitiveness. The bill likely includes provisions on large-load infrastructure (data centers, compute facilities) siting, energy tariffs, and grid capacity planning.", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-16", "url": "https://malegislature.gov/Bills/194/H5175" }, { "id": "m:US-LA:HB791", "jur": "US-LA", "level": "state", "num": "HB791", "title": "Provides relative to the regulation of artificial intelligence (OR +$256,243 GF EX See Note)", "sum": "LA HB791 establishes comprehensive regulation of artificial intelligence systems in Louisiana. The bill's title and budget allocation ($256,243 GF) indicate substantive AI governance framework, likely covering consequential decision-making, transparency requirements, and potential state AI…", "stage": "introduced", "cats": [ "governance", "anti-discrimination", "disclosures" ], "secs": [], "date": "2026-03-09", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=HB791&sbi=y" }, { "id": "m:US-LA:SB347", "jur": "US-LA", "level": "state", "num": "SB347", "title": "Provides for the crime of \"unlawful deepfake\" to be added to the definition of power-based violence under the Campus Accountability and Safety Act. (gov sig)", "sum": "LA SB347 criminalizes the creation and distribution of unlawful deepfakes by adding them to the definition of power-based violence under Louisiana's Campus Accountability and Safety Act. The bill specifically targets deepfakes used in campus contexts, treating synthetic media as a form of abuse.", "stage": "passed", "cats": [ "deepfakes", "minors" ], "secs": [ "media" ], "date": "2026-05-29", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=SB347&sbi=y" }, { "id": "m:US-LA:SB362", "jur": "US-LA", "level": "state", "num": "SB362", "title": "Provides that surveillance-based price discrimination is an unfair or deceptive trade practice or act. (8/1/26)", "sum": "LA SB362 designates surveillance-based price discrimination as an unfair or deceptive trade practice under Louisiana consumer protection law. The bill targets algorithmic pricing systems that use personal data collection to charge different prices to different consumers.", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-03-09", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=SB362&sbi=y" }, { "id": "m:US-LA:HB880", "jur": "US-LA", "level": "state", "num": "HB880", "title": "Creates the Louisiana Artificial Intelligence Insurance Fairness Act (OR +$1,029,533 SG EX See Note)", "sum": "LA HB880 creates the Louisiana Artificial Intelligence Insurance Fairness Act, establishing rules governing the use of AI and automated systems in insurance underwriting, rating, and claims decisions. The bill targets algorithmic discrimination and fairness in consequential insurance decisions.", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "finserv" ], "date": "2026-03-09", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=HB880&sbi=y" }, { "id": "m:US-NJ:S3732", "jur": "US-NJ", "level": "state", "num": "S3732", "title": "Prohibits certain businesses from using dynamic, surveillance, or personalized algorithmic pricing when selling groceries to consumers.", "sum": "NJ S3732 prohibits certain businesses from using dynamic, surveillance-based, or personalized algorithmic pricing when selling groceries to consumers. The bill targets price discrimination enabled by automated decision systems in the grocery sector.", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-03-05", "url": "https://www.njleg.state.nj.us/bill-search/2026/S3732" }, { "id": "m:US-MN:HF3893", "jur": "US-MN", "level": "state", "num": "HF3893", "title": "Use of artificial intelligence in psychotherapy services regulated, and civil penalties provided.", "sum": "MN HF3893 regulates the use of artificial intelligence in psychotherapy services and establishes civil penalties for violations. The bill appears to set requirements for how AI can be deployed in mental-health and psychotherapy contexts, likely including disclosure and safety standards.", "stage": "introduced", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-04-09", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/3893/" }, { "id": "m:US-KY:SB330", "jur": "US-KY", "level": "state", "num": "SB330", "title": "AN ACT relating to data centers.", "sum": "KY SB330 prohibits Kentucky public agencies from entering into nondisclosure or confidentiality agreements that expand secrecy beyond statutory limits for data-center projects, and voids contractual provisions that waive or supersede open-records and open-meetings requirements. The bill mandates…", "stage": "introduced", "cats": [ "governance", "data-centers" ], "secs": [ "infra" ], "date": "2026-03-02", "url": "https://apps.legislature.ky.gov/record/26RS/sb330.html" }, { "id": "m:US-KY:SB319", "jur": "US-KY", "level": "state", "num": "SB319", "title": "AN ACT relating to data centers.", "sum": "KY SB319 regulates data centers constructed on agricultural land by requiring owners to file decommissioning plans with the state Energy and Environment Cabinet, post surety bonds for site restoration, and comply with energy and water efficiency standards as a condition of tax-exemption eligibility.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-02", "url": "https://apps.legislature.ky.gov/record/26RS/sb319.html" }, { "id": "m:US-NY:A10379", "jur": "US-NY", "level": "state", "num": "A10379", "title": "Prohibits artificial intelligence companions from using features which are considered unsafe for minors; defines terms; specifies what are considered unsafe features.", "sum": "This bill prohibits AI companion chatbots from using features deemed unsafe for minors, requiring developers to define and restrict unsafe functionality. It establishes guardrails around how AI companions interact with child users.", "stage": "introduced", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-06-04", "url": "https://www.nysenate.gov/legislation/bills/2025/A10379" }, { "id": "m:US-MN:SF4114", "jur": "US-MN", "level": "state", "num": "SF4114", "title": "Constitutional amendment proposal excluding artificial intelligence from the right to free speech", "sum": "This bill proposes a constitutional amendment that would explicitly exclude artificial intelligence systems from First Amendment free-speech protections. It addresses whether AI-generated or AI-mediated speech receives the same constitutional safeguards as human speech.", "stage": "introduced", "cats": [ "frontier", "elections" ], "secs": [], "date": "2026-03-04", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/4114/" }, { "id": "m:US-KY:HB856", "jur": "US-KY", "level": "state", "num": "HB856", "title": "AN ACT relating to data centers.", "sum": "KY HB856 requires data centers to submit water feasibility studies before operations commence and file annual water-usage reports to the Energy and Environment Cabinet. The bill establishes regulatory oversight of data-center environmental impact, specifically water consumption.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-10", "url": "https://apps.legislature.ky.gov/record/26RS/hb856.html" }, { "id": "m:US-RI:S2776", "jur": "US-RI", "level": "state", "num": "S2776", "title": "Requires that certain data centers requiring large amounts of electricity be required to fund the cost of necessary infrastructure improvements to supply such electricity.", "sum": "RI S2776 requires large-load data centers requiring substantial electricity to fund the cost of necessary infrastructure improvements to the grid and utility systems needed to supply that power.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-10", "url": "https://status.rilegislature.gov/" }, { "id": "m:US-KS:SB526", "jur": "US-KS", "level": "state", "num": "SB526", "title": "Requiring data centers to be located on land that was zoned for industrial or manufacturing uses or was not zoned on July 1, 2025, to qualify for the sales tax exemption for qualified data…", "sum": "KS SB526 restricts the sales-tax exemption for qualified data centers to parcels zoned for industrial or manufacturing use as of July 1, 2025, or previously unzoned land. This is a siting and tax-incentive policy narrowing eligibility criteria for data-center projects.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-04", "url": "https://kslegislature.gov/li/b2025_26/measures/sb526/" }, { "id": "m:US-CT:HB05497", "jur": "US-CT", "level": "state", "num": "HB05497", "title": "An Act Establishing A Task Force To Study The Effects Of Artificial Intelligence On The Trades Industry.", "sum": "Establishes a task force to study the effects of artificial intelligence on the trades industry, examining how AI adoption impacts skilled trades work and workforce training. Also requires the Commissioner of Public Health to study feasibility of a certified nursing assistant training program.", "stage": "engrossed", "cats": [ "governance", "education" ], "secs": [ "hr" ], "date": "2026-05-06", "url": "https://www.cga.ct.gov/asp/cgabillstatus/cgabillstatus.asp?selBillType=Bill&bill_num=HB05497&which_year=2026" }, { "id": "m:US-CT:SB00435", "jur": "US-CT", "level": "state", "num": "SB00435", "title": "An Act Concerning Automated Decision Systems Protections For Employees.", "sum": "CT SB00435 establishes requirements for the use of automated employment-related decision systems and AI technologies in hiring and workplace decisions. The bill aims to protect employees from discriminatory or unfair automated decision-making in employment contexts.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-04-20", "url": "https://www.cga.ct.gov/asp/cgabillstatus/cgabillstatus.asp?selBillType=Bill&bill_num=SB00435&which_year=2026" }, { "id": "m:US-ID:H0820", "jur": "US-ID", "level": "state", "num": "H0820", "title": "Amends existing law to revise a sales tax exemption for data center equipment and to revise a certain property tax exemption for certain capital investments.", "sum": "ID H0820 revises Idaho's sales and property tax exemptions for data center equipment and capital investments. The bill modifies existing tax incentives that apply to data center infrastructure.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-05", "url": "https://legislature.idaho.gov/sessioninfo/2026/legislation/H0820/" }, { "id": "m:US-PA:HR425", "jur": "US-PA", "level": "state", "num": "HR425", "title": "Urging the United States Congress to suspend any and all efforts to pass Federal legislation that would impose a moratorium on state-level artificial intelligence regulation; recognizing…", "sum": "PA HR425 is a resolution urging Congress not to impose a federal moratorium on state-level AI regulation, and asserting Pennsylvania's sovereign authority to regulate AI technologies independently. The bill recognizes both the benefits and risks of AI while opposing preemptive federal restrictions…", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-06-24", "url": "https://www.palegis.us/legislation/bills/2025/hr425" }, { "id": "m:US-NY:S09390", "jur": "US-NY", "level": "state", "num": "S09390", "title": "Provides that in any civil, criminal or family court proceeding, where evidence is offered and a party contends that such evidence has been fabricated by means of generative artificial…", "sum": "This bill establishes an evidentiary standard for civil, criminal, and family court proceedings: a party challenging evidence as AI-fabricated must first make a showing sufficient to support a reasonable inference of inauthenticity before a court will conduct an inquiry into the alleged deepfake or…", "stage": "introduced", "cats": [ "deepfakes", "consumer-financial" ], "secs": [ "media" ], "date": "2026-03-06", "url": "https://www.nysenate.gov/legislation/bills/2025/S9390" }, { "id": "m:US-MN:SF4203", "jur": "US-MN", "level": "state", "num": "SF4203", "title": "Exemption of data centers modification for sales and use tax", "sum": "Modifies Minnesota's sales and use tax exemption for data centers. This tax incentive affects the cost structure and siting economics for large-load compute infrastructure used by AI and other intensive workloads.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-17", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/4203/" }, { "id": "m:US-MN:SF4298", "jur": "US-MN", "level": "state", "num": "SF4298", "title": "New data center moratorium established, and Public Utility Commission required to submit a report", "sum": "MN SF4298 establishes a moratorium on new data centers and requires the Public Utility Commission to submit a report on data center impacts. The bill directly addresses data-center siting and utility/grid considerations.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-09", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/4298/" }, { "id": "m:US-MN:SF4233", "jur": "US-MN", "level": "state", "num": "SF4233", "title": "Surveillance-based price and wage discrimination prohibition", "sum": "MN SF4233 prohibits using surveillance data and automated systems to engage in price discrimination or wage discrimination. The bill targets algorithmic decision-making that uses personal data collection to set differential prices or wages for consumers and workers.", "stage": "introduced", "cats": [ "anti-discrimination", "consumer-financial", "hiring" ], "secs": [ "consumer", "hr" ], "date": "2026-03-17", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/4233/" }, { "id": "m:US-MN:SF4296", "jur": "US-MN", "level": "state", "num": "SF4296", "title": "Public hearings and certain disclosures prior to approval of data center development requirement", "sum": "MN SF4296 requires public hearings and certain disclosures prior to approval of data center development projects. The bill establishes procedural and transparency requirements for data center siting decisions.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-18", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/4296/" }, { "id": "m:US-MN:SF4280", "jur": "US-MN", "level": "state", "num": "SF4280", "title": "Use regulation of artificial intelligence in psychotherapy services", "sum": "This bill regulates the use of artificial intelligence in psychotherapy services, likely establishing disclosure, consent, and operational standards for AI-assisted or AI-delivered mental-health treatment. The bill appears to address safety and transparency requirements specific to the clinical…", "stage": "introduced", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-03-09", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/4280/" }, { "id": "m:US-HI:SR32", "jur": "US-HI", "level": "state", "num": "SR32", "title": "Requesting The Department Of Education To Develop Artificial Intelligence Literacy Curricula Plans And Programs For Use In Public Schools.", "sum": "HI SR32 requests the Hawaii Department of Education to develop AI literacy curricula plans and programs for use in public schools. The resolution aims to equip students with foundational knowledge and understanding of artificial intelligence concepts and applications.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-03-19", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SR&billnumber=32&year=2026" }, { "id": "m:US-MD:SB1000", "jur": "US-MD", "level": "state", "num": "SB1000", "title": "Certificates of Public Convenience and Necessity and Construction of Data Centers", "sum": "MD SB1000 regulates data-center construction in Maryland by requiring Public Service Commission approval (certificates of public convenience and necessity) and prohibiting data-center development in certain Baltimore City districts. The bill modifies utility infrastructure rules to apply…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-23", "url": "https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB1000?ys=2026RS" }, { "id": "m:US-HI:SCR33", "jur": "US-HI", "level": "state", "num": "SCR33", "title": "Requesting The Department Of Education To Develop Artificial Intelligence Literacy Curricula Plans And Programs For Use In Public Schools.", "sum": "HI SCR33 requests that Hawaii's Department of Education develop AI literacy curricula plans and programs for use in public schools. The resolution aims to build student understanding of artificial intelligence concepts and applications.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-03-19", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SCR&billnumber=33&year=2026" }, { "id": "m:US-MN:HF4131", "jur": "US-MN", "level": "state", "num": "HF4131", "title": "Surveillance-based price and wage discrimination prohibited.", "sum": "MN HF4131 prohibits surveillance-based price and wage discrimination, targeting the use of automated systems and data collection to dynamically set prices for consumers or wages for workers based on behavioral or personal surveillance. The bill addresses algorithmic discrimination in both consumer…", "stage": "introduced", "cats": [ "anti-discrimination", "consumer-financial", "hiring" ], "secs": [ "consumer", "hr" ], "date": "2026-03-25", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/4131/" }, { "id": "m:US-HI:SCR42", "jur": "US-HI", "level": "state", "num": "SCR42", "title": "Requesting The Department Of The Attorney General To Convene A Youth Digital Safety And Platform Accountability Working Group To Examine Technology-facilitated Abuse In The State And…", "sum": "HI SCR42 requests the Hawaii Attorney General to establish a working group to examine technology-facilitated abuse affecting youth and develop regulatory recommendations for platform accountability and digital safety safeguards.", "stage": "introduced", "cats": [ "governance", "minors" ], "secs": [ "consumer" ], "date": "2026-03-19", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SCR&billnumber=42&year=2026" }, { "id": "m:US-HI:SR41", "jur": "US-HI", "level": "state", "num": "SR41", "title": "Requesting The Department Of The Attorney General To Convene A Youth Digital Safety And Platform Accountability Working Group To Examine Technology-facilitated Abuse In The State And…", "sum": "HI SR41 requests the Hawaii Attorney General to establish a working group to examine technology-facilitated abuse affecting youth and develop regulatory recommendations for platform accountability and digital safety.", "stage": "introduced", "cats": [ "governance", "minors" ], "secs": [ "consumer" ], "date": "2026-03-19", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SR&billnumber=41&year=2026" }, { "id": "m:US-KS:SB531", "jur": "US-KS", "level": "state", "num": "SB531", "title": "Prohibiting the development or operation of any new large load data center in a county that has had a drought emergency declared for such county pursuant to the Kansas emergency management…", "sum": "KS SB531 prohibits the development or operation of new large-load data centers in Kansas counties that have experienced a drought emergency declaration within the preceding three years. The bill addresses resource constraints and environmental impacts associated with data-center siting.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-10", "url": "https://kslegislature.gov/li/b2025_26/measures/sb531/" }, { "id": "m:US-NJ:S3883", "jur": "US-NJ", "level": "state", "num": "S3883", "title": "Requires boards of education to adopt policy on use of surveillance systems with artificial intelligence capabilities.", "sum": "NJ S3883 requires school boards to adopt formal policies governing the use of surveillance systems equipped with AI capabilities. The bill establishes a governance and oversight framework for AI-enabled surveillance in K–12 schools.", "stage": "introduced", "cats": [ "gov-use", "education", "public-safety" ], "secs": [ "consumer" ], "date": "2026-03-12", "url": "https://www.njleg.state.nj.us/bill-search/2026/S3883" }, { "id": "m:US-NJ:A4696", "jur": "US-NJ", "level": "state", "num": "A4696", "title": "Requires owner or operator of data center to submit water and energy usage report to BPU.", "sum": "NJ A4696 requires data-center owners and operators to submit water and energy usage reports to the Board of Public Utilities. This falls within the scope of data-center infrastructure policy covering energy and utility accountability.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-16", "url": "https://www.njleg.state.nj.us/bill-search/2026/A4696" }, { "id": "m:US-NJ:A4710", "jur": "US-NJ", "level": "state", "num": "A4710", "title": "\"Clean Energy AI Incentivization Act\"; directs BPU to incentivize artificial intelligence centers to bring their own self-sufficient, clean energy.", "sum": "NJ A4710 directs the Board of Public Utilities to create incentives for artificial intelligence data centers to develop and operate their own self-sufficient, clean energy infrastructure. The bill treats AI centers as a siting and energy-policy issue, encouraging them to bring independent renewable…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-16", "url": "https://www.njleg.state.nj.us/bill-search/2026/A4710" }, { "id": "m:US-OH:SB374", "jur": "US-OH", "level": "state", "num": "SB374", "title": "Prohibit new data center sales tax exemptions", "sum": "OH SB374 prohibits the state from granting new sales tax exemptions to data centers. The bill amends Ohio tax code to eliminate a tax-incentive pathway for new data-center projects going forward.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-25", "url": "https://www.legislature.ohio.gov/legislation/136/sb374" }, { "id": "m:US-NJ:A4730", "jur": "US-NJ", "level": "state", "num": "A4730", "title": "Requires person or entity to notify certain consumers when communicating with generative artificial intelligence to engage in trade or commerce.", "sum": "NJ A4730 requires any person or entity communicating with consumers via generative AI in a commercial or trade context to disclose that fact to the consumer. The bill mandates transparency about AI involvement in consumer-facing transactions.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-03-16", "url": "https://www.njleg.state.nj.us/bill-search/2026/A4730" }, { "id": "m:US-NJ:A4733", "jur": "US-NJ", "level": "state", "num": "A4733", "title": "Prohibits advertising generative artificial intelligence as able to practice regulated profession or occupation.", "sum": "NJ A4733 prohibits advertising or marketing generative AI systems as capable of performing work that requires a regulated professional license or credential (e.g., law, medicine, accounting). The bill targets deceptive claims about AI capabilities in regulated sectors.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [], "date": "2026-05-28", "url": "https://www.njleg.state.nj.us/bill-search/2026/A4733" }, { "id": "m:US-NJ:A4731", "jur": "US-NJ", "level": "state", "num": "A4731", "title": "Directs professional and occupational boards to promulgate rules for licensee use of generative artificial intelligence.", "sum": "NJ A4731 directs New Jersey's professional and occupational licensing boards to establish rules governing how licensed practitioners (e.g., doctors, lawyers, accountants, engineers) may use generative AI in their practice. The bill aims to ensure responsible adoption across regulated professions…", "stage": "introduced", "cats": [ "governance", "disclosures" ], "secs": [], "date": "2026-05-28", "url": "https://www.njleg.state.nj.us/bill-search/2026/A4731" }, { "id": "m:US-NJ:A4728", "jur": "US-NJ", "level": "state", "num": "A4728", "title": "Regulates deceptive use of artificial intelligence in photo advertising of certain dwellings.", "sum": "NJ A4728 prohibits deceptive use of AI-generated or AI-manipulated images in residential property advertising. The bill targets AI-created photo manipulation that misleads consumers about the appearance or condition of dwellings for sale or rental.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer", "media" ], "date": "2026-05-14", "url": "https://www.njleg.state.nj.us/bill-search/2026/A4728" }, { "id": "m:US-NJ:A4732", "jur": "US-NJ", "level": "state", "num": "A4732", "title": "Requires artificial intelligence companion operators to provide notifications that users are not communicating with human.", "sum": "This bill requires AI companion chatbot operators to notify users that they are not communicating with a human. The requirement targets protection of minors and transparency in AI interactions.", "stage": "introduced", "cats": [ "minors", "disclosures" ], "secs": [ "consumer" ], "date": "2026-03-16", "url": "https://www.njleg.state.nj.us/bill-search/2026/A4732" }, { "id": "m:US-NJ:A4729", "jur": "US-NJ", "level": "state", "num": "A4729", "title": "Requires disclosure to be made when generative artificial intelligence is used to operate chatbots that provide election related information.", "sum": "NJ A4729 requires disclosure when generative AI chatbots are used to provide election-related information to the public. The bill mandates transparency about AI involvement in election communications.", "stage": "introduced", "cats": [ "elections", "disclosures" ], "secs": [ "consumer", "media" ], "date": "2026-05-11", "url": "https://www.njleg.state.nj.us/bill-search/2026/A4729" }, { "id": "m:US-MN:HF4173", "jur": "US-MN", "level": "state", "num": "HF4173", "title": "Certain defined terms maintained, and data center exemptions modified.", "sum": "MN HF4173 modifies exemptions related to data centers, maintaining certain defined terms while adjusting regulatory treatment of data-center operations.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-06", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/4173/" }, { "id": "m:US-MA:S2983", "jur": "US-MA", "level": "state", "num": "S2983", "title": "Prohibiting algorithmic rent setting", "sum": "This bill prohibits the use of algorithmic systems to set rental housing prices in a coordinated or collusive manner, addressing algorithmic price-fixing in the residential rental market. It establishes enforcement mechanisms and penalties for landlords or property managers who use automated…", "stage": "introduced", "cats": [ "anti-discrimination", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-03-12", "url": "https://malegislature.gov/Bills/194/S2983" }, { "id": "m:US-MN:HF4153", "jur": "US-MN", "level": "state", "num": "HF4153", "title": "Criteria for preapplication evaluations of water appropriations for data centers modified, data centers' electricity sales exempted in calculating a utility's solar energy standard, and…", "sum": "This bill modifies water appropriation evaluation criteria for data centers, exempts data-center electricity sales from utility solar-energy-standard calculations, and provides a sales-tax exemption on electricity purchases for data centers.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-12", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/4153/" }, { "id": "m:US-HI:HCR44", "jur": "US-HI", "level": "state", "num": "HCR44", "title": "Urging The Department Of Education To Co-develop A Sixth To Twelfth Grade Artificial Intelligence Literacy And Usage Curriculum With Teachers.", "sum": "HCR44 urges Hawaii's Department of Education to co-develop an AI literacy and usage curriculum for grades 6–12 in collaboration with teachers. The resolution focuses on building student understanding of artificial intelligence systems and their responsible use.", "stage": "engrossed", "cats": [ "education" ], "secs": [], "date": "2026-04-10", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HCR&billnumber=44&year=2026" }, { "id": "m:US-HI:SR71", "jur": "US-HI", "level": "state", "num": "SR71", "title": "Requesting The Hawaii State Commission On The Status Of Women, In Collaboration With The Office Of The Legislative Reference Bureau And Department Of The Attorney General, To Establish A…", "sum": "HI SR71 requests the Hawaii State Commission on the Status of Women to establish a working group and deliver a legislative report on strengthening legal protections for survivors of image-based sexual abuse, including non-consensual intimate imagery and synthetic sexual media.", "stage": "passed", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-05-12", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SR&billnumber=71&year=2026" }, { "id": "m:US-HI:SR90", "jur": "US-HI", "level": "state", "num": "SR90", "title": "Requesting The Hawaii State Energy Office To Convene A Working Group To Study The Potential Impacts Of Large Data Centers On Hawaii's Electric Utilities, Ratepayers, Natural Resources, And…", "sum": "This resolution requests Hawaii's State Energy Office to convene a working group to study the impacts of large data centers on the state's electric utilities, ratepayers, natural resources, and climate goals. The study aims to inform future policy on data-center siting, energy consumption, and grid…", "stage": "passed", "cats": [ "governance", "data-centers" ], "secs": [ "infra" ], "date": "2026-05-12", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SR&billnumber=90&year=2026" }, { "id": "m:US-HI:SCR81", "jur": "US-HI", "level": "state", "num": "SCR81", "title": "Requesting The Hawaii State Commission On The Status Of Women, In Collaboration With The Office Of The Legislative Reference Bureau And Department Of The Attorney General, To Establish A…", "sum": "HI SCR81 requests the Hawaii State Commission on the Status of Women to establish a working group and report on strengthening legal protections for survivors of image-based sexual abuse, which encompasses non-consensual intimate images and AI-generated synthetic sexual content (deepfakes).", "stage": "engrossed", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-04-10", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SCR&billnumber=81&year=2026" }, { "id": "m:US-HI:HR40", "jur": "US-HI", "level": "state", "num": "HR40", "title": "Urging The Department Of Education To Co-develop A Sixth To Twelfth Grade Artificial Intelligence Literacy And Usage Curriculum With Teachers.", "sum": "HI HR40 is a resolution urging Hawaii's Department of Education to co-develop an AI literacy and usage curriculum for grades 6–12 in partnership with teachers. The bill addresses foundational AI education and responsible use in schools.", "stage": "passed", "cats": [ "education" ], "secs": [], "date": "2026-04-02", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HR&billnumber=40&year=2026" }, { "id": "m:US-HI:SCR95", "jur": "US-HI", "level": "state", "num": "SCR95", "title": "Requesting The Hawaii State Energy Office To Convene A Working Group To Study The Potential Impacts Of Large Data Centers On Hawaii's Electric Utilities, Ratepayers, Natural Resources, And…", "sum": "SCR95 requests Hawaii's State Energy Office to convene a working group to study the impacts of large data centers on the state's electric grid, utility ratepayers, natural resources, and climate goals. The resolution is a fact-finding and policy-scoping measure rather than regulatory action.", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-10", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SCR&billnumber=95&year=2026" }, { "id": "m:US-PA:HB2288", "jur": "US-PA", "level": "state", "num": "HB2288", "title": "Providing for artificial intelligence training disclosure.", "sum": "PA HB2288 amends Pennsylvania's consumer protection law to require disclosure of how artificial intelligence systems are trained, likely targeting transparency about training data and methods used by AI developers and deployers. The bill frames AI training disclosure as an unfair or deceptive trade…", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [], "date": "2026-03-13", "url": "https://www.palegis.us/legislation/bills/2025/hb2288" }, { "id": "m:US-WI:AB1099", "jur": "US-WI", "level": "state", "num": "AB1099", "title": "Moratorium on data centers.", "sum": "WI AB1099 proposes a moratorium on the construction and operation of new data centers in Wisconsin. The bill directly addresses data-center siting and infrastructure policy, a tracked vertical under AI scope regardless of explicit AI naming.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-23", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/asm/bill/ab1099" }, { "id": "m:US-WI:AB1109", "jur": "US-WI", "level": "state", "num": "AB1109", "title": "Use of artificial intelligence to deny prior authorization for medical necessity or experimental status.", "sum": "This bill regulates the use of artificial intelligence in insurance prior authorization decisions, specifically prohibiting AI systems from denying coverage based on medical necessity or experimental-status determinations without human review or override mechanisms.", "stage": "failed/dead", "cats": [ "healthcare", "anti-discrimination" ], "secs": [ "finserv", "health" ], "date": "2026-03-30", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/asm/bill/ab1109" }, { "id": "m:US-ID:H0897", "jur": "US-ID", "level": "state", "num": "H0897", "title": "Amends existing law to revise a sales tax exemption for data center equipment and to revise a certain property tax exemption for certain capital investments.", "sum": "ID H0897 revises Idaho's sales tax exemption for data center equipment and property tax exemption for certain capital investments. The bill directly addresses tax incentives and treatment for data-center infrastructure.", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-02", "url": "https://legislature.idaho.gov/sessioninfo/2026/legislation/H0897/" }, { "id": "m:US-ID:H0895", "jur": "US-ID", "level": "state", "num": "H0895", "title": "Adds to existing law to establish limitations on consumptive use of water for cooling certain data centers.", "sum": "ID H0895 establishes limitations on water consumption for cooling data centers, addressing consumptive-use restrictions under existing Idaho water law. The bill became effective July 1, 2026.", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-02", "url": "https://legislature.idaho.gov/sessioninfo/2026/legislation/H0895/" }, { "id": "m:US-HI:HR85", "jur": "US-HI", "level": "state", "num": "HR85", "title": "Requesting The Hawaii State Commission On The Status Of Women To Establish A Working Group And Provide A Report To The Legislature On Ways To Strengthen Prevention, Interventions, And…", "sum": "HI HR85 requests the Hawaii State Commission on the Status of Women to establish a working group and report on ways to prevent, intervene in, and protect survivors of image-based sexual abuse—a category that includes non-consensual deepfake pornography and synthetic intimate imagery.", "stage": "passed", "cats": [ "deepfakes" ], "secs": [ "media" ], "date": "2026-04-09", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HR&billnumber=85&year=2026" }, { "id": "m:US-MN:SF4509", "jur": "US-MN", "level": "state", "num": "SF4509", "title": "Artificial intelligence safety and disclosure requirements establishment (RAISE Act)", "sum": "The RAISE Act establishes artificial intelligence safety and disclosure requirements, likely creating obligations for AI developers and deployers to implement safety measures and provide transparency to users and regulators. The bill appears to target model-level regulation and systemic AI…", "stage": "introduced", "cats": [ "governance", "frontier", "disclosures" ], "secs": [], "date": "2026-04-07", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/4509/" }, { "id": "m:US-HI:HCR93", "jur": "US-HI", "level": "state", "num": "HCR93", "title": "Requesting The Hawaii State Commission On The Status Of Women To Establish A Working Group And Provide A Report To The Legislature On Ways To Strengthen Prevention, Interventions, And…", "sum": "HCR93 requests the Hawaii State Commission on the Status of Women to establish a working group and issue a report on strengthening prevention, interventions, and protections for survivors of image-based sexual abuse—which includes non-consensual intimate imagery, deepfakes, and synthetic sexual…", "stage": "engrossed", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-04-10", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HCR&billnumber=93&year=2026" }, { "id": "m:US-NJ:A4741", "jur": "US-NJ", "level": "state", "num": "A4741", "title": "Restricts use of certain artificial intelligence generated communications in election campaigns.", "sum": "NJ A4741 restricts the use of AI-generated communications in election campaigns, likely targeting synthetic audio, video, or text designed to deceive voters. The bill addresses the use of generative AI and deepfakes in political speech.", "stage": "introduced", "cats": [ "elections", "deepfakes", "disclosures" ], "secs": [ "media" ], "date": "2026-03-19", "url": "https://www.njleg.state.nj.us/bill-search/2026/A4741" }, { "id": "m:US-MN:HF4369", "jur": "US-MN", "level": "state", "num": "HF4369", "title": "Notice and a transitional employment period required for employees displaced by artificial intelligence, and penalties imposed.", "sum": "This bill requires employers to provide advance notice and a transitional employment period for workers displaced by artificial intelligence systems, and imposes penalties for non-compliance. It addresses worker protections and employer accountability in AI-driven workforce automation.", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-03-18", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/4369/" }, { "id": "m:US-OH:SB378", "jur": "US-OH", "level": "state", "num": "SB378", "title": "Enact the Responsible Water Use by Data Centers Act", "sum": "OH SB378 regulates water withdrawal and consumptive use by data centers in Ohio, establishing accountability measures for large-load infrastructure. The bill amends water code sections to govern data-center operations and sustainability.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-25", "url": "https://www.legislature.ohio.gov/legislation/136/sb378" }, { "id": "m:US-NJ:A4769", "jur": "US-NJ", "level": "state", "num": "A4769", "title": "Requires certain State agencies to establish expedited approval and permitting procedures for artificial intelligence data centers powered by small modular nuclear reactors.", "sum": "The bill requires New Jersey state agencies to establish expedited approval and permitting procedures specifically for artificial intelligence data centers powered by small modular nuclear reactors. It addresses infrastructure and energy policy for AI compute facilities.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-19", "url": "https://www.njleg.state.nj.us/bill-search/2026/A4769" }, { "id": "m:US-HI:HR196", "jur": "US-HI", "level": "state", "num": "HR196", "title": "Requesting The Hawaii State Energy Office To Convene A Working Group To Study The Potential Impacts Of Large Data Centers On Hawaii's Electric Utilities, Ratepayers, Natural Resources, And…", "sum": "Hawaii HR196 requests the state energy office to establish a working group to study the impacts of large data centers on Hawaii's electric utilities, ratepayers, natural resources, and climate goals. The resolution addresses grid capacity, energy consumption, and infrastructure planning related to…", "stage": "passed", "cats": [ "governance", "data-centers" ], "secs": [ "infra" ], "date": "2026-04-09", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HR&billnumber=196&year=2026" }, { "id": "m:US-HI:HCR206", "jur": "US-HI", "level": "state", "num": "HCR206", "title": "Requesting The Hawaii State Energy Office To Convene A Working Group To Study The Potential Impacts Of Large Data Centers On Hawaii's Electric Utilities, Ratepayers, Natural Resources, And…", "sum": "HI HCR206 directs the Hawaii State Energy Office to convene a working group to study the impacts of large data centers on the state's electric utilities, ratepayers, natural resources, and climate goals. The resolution addresses grid capacity, energy consumption, and environmental effects of…", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-27", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HCR&billnumber=206&year=2026" }, { "id": "m:US-HI:SCR184", "jur": "US-HI", "level": "state", "num": "SCR184", "title": "Requesting The Hawaii Civil Rights Commission To Examine The Applicability Of Existing State Anti-discrimination Laws To Algorithmic And Automated Decision Systems.", "sum": "HI SCR184 is a resolution requesting the Hawaii Civil Rights Commission to examine how existing state anti-discrimination laws apply to algorithmic and automated decision systems. It directs a study of the regulatory gap between current civil-rights protections and AI/automated decision-making in…", "stage": "passed", "cats": [ "governance", "anti-discrimination" ], "secs": [], "date": "2026-05-12", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SCR&billnumber=184&year=2026" }, { "id": "m:US-HI:HR182", "jur": "US-HI", "level": "state", "num": "HR182", "title": "Requesting The Hawaii Civil Rights Commission To Examine The Applicability Of Existing State Anti-discrimination Laws To Algorithmic And Automated Decision Systems.", "sum": "HI HR182 is a resolution requesting the Hawaii Civil Rights Commission to study whether existing state anti-discrimination laws apply to algorithmic and automated decision systems. It directs the commission to examine the legal applicability and gaps in current protections.", "stage": "passed", "cats": [ "governance", "anti-discrimination" ], "secs": [], "date": "2026-04-09", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HR&billnumber=182&year=2026" }, { "id": "m:US-HI:HCR192", "jur": "US-HI", "level": "state", "num": "HCR192", "title": "Requesting The Hawaii Civil Rights Commission To Examine The Applicability Of Existing State Anti-discrimination Laws To Algorithmic And Automated Decision Systems.", "sum": "HCR192 requests the Hawaii Civil Rights Commission to study how existing state anti-discrimination laws apply to algorithmic and automated decision-making systems. The resolution directs examination of potential gaps and enforcement mechanisms.", "stage": "engrossed", "cats": [ "governance", "anti-discrimination" ], "secs": [], "date": "2026-04-10", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=HCR&billnumber=192&year=2026" }, { "id": "m:US-ID:H0917", "jur": "US-ID", "level": "state", "num": "H0917", "title": "Adds to existing law to require the use of AI to review administrative rules annually.", "sum": "ID H0917 mandates the use of AI to conduct annual reviews of existing administrative rules. This is a government procurement and deployment of AI for regulatory analysis purposes.", "stage": "introduced", "cats": [ "gov-use" ], "secs": [], "date": "2026-03-17", "url": "https://legislature.idaho.gov/sessioninfo/2026/legislation/H0917/" }, { "id": "m:US-MN:SF4575", "jur": "US-MN", "level": "state", "num": "SF4575", "title": "Generative artificial intelligence in official records usage prohibition provision", "sum": "This bill prohibits the use of generative AI in creating, maintaining, or altering official government records. It establishes rules around when and how state agencies can deploy generative AI systems and likely requires disclosure or documentation of AI use in official record-keeping.", "stage": "introduced", "cats": [ "gov-use", "disclosures" ], "secs": [], "date": "2026-03-18", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/4575/" }, { "id": "m:US-MN:SF4576", "jur": "US-MN", "level": "state", "num": "SF4576", "title": "Notice and a transitional employment period required for employees displaced by artificial intelligence, and penalties imposed", "sum": "Requires employers to provide notice and a transitional employment period to workers displaced by artificial intelligence systems, with penalties for non-compliance. The bill establishes worker-protection requirements tied specifically to AI-driven job displacement.", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-04-07", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/4576/" }, { "id": "m:US-MN:SF4573", "jur": "US-MN", "level": "state", "num": "SF4573", "title": "Certain use of artificial intelligence prohibition provision", "sum": "MN SF4573 proposes prohibitions on certain uses of artificial intelligence, with referral to Judiciary and Public Safety suggesting focus on law-enforcement or automated decision-making contexts. The bill's exact scope is unclear from the title alone, but the committee assignment implies…", "stage": "introduced", "cats": [ "public-safety", "anti-discrimination" ], "secs": [], "date": "2026-03-18", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/4573/" }, { "id": "m:US-MN:HF4445", "jur": "US-MN", "level": "state", "num": "HF4445", "title": "Use of automated decision systems in employment settings regulated.", "sum": "MN HF4445 regulates the use of automated decision systems (ADS) in employment settings, establishing requirements for how employers deploy algorithmic tools in hiring, promotion, termination, and other labor decisions. The bill likely includes transparency, bias testing, or impact-assessment…", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-03-18", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/4445/" }, { "id": "m:US-MN:HF4451", "jur": "US-MN", "level": "state", "num": "HF4451", "title": "Use of electronic monitoring tools in employment settings regulated.", "sum": "MN HF4451 regulates the use of electronic monitoring tools in employment settings. The bill likely addresses automated surveillance, tracking, and decision-making systems used by employers to monitor workers.", "stage": "introduced", "cats": [ "hiring", "privacy" ], "secs": [ "hr" ], "date": "2026-03-18", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/4451/" }, { "id": "m:US-MN:HF4452", "jur": "US-MN", "level": "state", "num": "HF4452", "title": "Artificial intelligence chatbot technology requirements provided, and cause of action for harm created.", "sum": "MN HF4452 establishes technology requirements for AI chatbots and creates a private right of action for harm caused by chatbot use or disclosure failures. The bill appears to impose transparency and accountability obligations on chatbot providers.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-03-23", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/4452/" }, { "id": "m:US-IA:HSB766", "jur": "US-IA", "level": "state", "num": "HSB766", "title": "A bill for an act relating to the licensure of artificial intelligence augmented and autonomous service providers, and including penalties.", "sum": "IA HSB766 establishes a licensure framework for AI-augmented and autonomous service providers, creating regulatory oversight and enforcement mechanisms (including penalties) for entities deploying AI systems in service delivery contexts.", "stage": "introduced", "cats": [ "governance", "anti-discrimination" ], "secs": [], "date": "2026-03-24", "url": "https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=HSB766" }, { "id": "m:US-GA:HR1788", "jur": "US-GA", "level": "state", "num": "HR1788", "title": "House Study Committee on Responsible Use of Artificial Intelligence; create", "sum": "GA HR1788 creates a House Study Committee dedicated to examining the responsible use of artificial intelligence. The committee will study AI policy issues and presumably develop recommendations for future legislative action.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-03-20", "url": "https://www.legis.ga.gov/legislation/74217" }, { "id": "m:US-HI:SR165", "jur": "US-HI", "level": "state", "num": "SR165", "title": "Requesting The Hawaii Civil Rights Commission To Examine The Applicability Of Existing State Anti-discrimination Laws To Algorithmic And Automated Decision Systems.", "sum": "HI SR165 is a resolution requesting the Hawaii Civil Rights Commission to study whether existing state anti-discrimination laws apply to algorithmic and automated decision-making systems. It directs a government body to examine legal gaps and compliance frameworks for AI systems under current…", "stage": "passed", "cats": [ "governance", "anti-discrimination" ], "secs": [], "date": "2026-05-12", "url": "https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SR&billnumber=165&year=2026" }, { "id": "m:US-MI:HB5771", "jur": "US-MI", "level": "state", "num": "HB5771", "title": "Consumer protection: other; surveillance pricing; prohibit. Amends secs. 3, 5 & 11 of 1976 PA 331 (MCL 445.903 et seq.) & adds sec. 3p.", "sum": "MI HB5771 prohibits 'surveillance pricing'—the practice of using personal data and algorithmic decision-making to set individualized prices for consumers. The bill amends Michigan's consumer-protection statute to ban discriminatory dynamic pricing based on tracked behavioral or demographic…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-04-14", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-5771" }, { "id": "m:US-OH:SB381", "jur": "US-OH", "level": "state", "num": "SB381", "title": "Require PUCO approval to connect data centers to electrical grid", "sum": "OH SB381 requires the Public Utility Commission of Ohio to approve agreements before data centers can connect to the electrical grid. The bill establishes a regulatory framework governing data-center interconnection and grid management.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-25", "url": "https://www.legislature.ohio.gov/legislation/136/sb381" }, { "id": "m:US-WI:AB1186", "jur": "US-WI", "level": "state", "num": "AB1186", "title": "Prohibiting retail dynamic price gouging of consumer goods and providing a penalty.", "sum": "WI AB1186 prohibits retail dynamic pricing (algorithmic price adjustments) of consumer goods and establishes penalties for violations. The bill targets automated pricing systems that may charge different prices to different consumers for identical products.", "stage": "failed/dead", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-03-23", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/asm/bill/ab1186" }, { "id": "m:US-NJ:A4801", "jur": "US-NJ", "level": "state", "num": "A4801", "title": "Establishes certain protections against demand by large-load addition customers in State.", "sum": "NJ A4801 establishes protections for the state against demands by large-load addition customers, addressing utility and grid impacts from high-demand users. The bill regulates large-load tariffs and demand management, directly falling within data-center and compute infrastructure policy.", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-30", "url": "https://www.njleg.state.nj.us/bill-search/2026/A4801" }, { "id": "m:US-WI:AB1190", "jur": "US-WI", "level": "state", "num": "AB1190", "title": "Algorithmic pricing of essential consumer goods, granting rule-making authority, and providing a penalty.", "sum": "WI AB1190 creates a new statute (100.309) to regulate algorithmic pricing of essential consumer goods, granting the state rule-making authority to set standards and establish penalties for non-compliance. The bill targets automated decision-making systems that dynamically adjust prices for…", "stage": "failed/dead", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-03-30", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/asm/bill/ab1190" }, { "id": "m:US-SC:S1037", "jur": "US-SC", "level": "state", "num": "S1037", "title": "Protecting Children from Chatbots", "sum": "SC S1037 requires chatbot providers to offer a limited-access mode for minors, implement age verification, obtain parental consent for feature access, and prohibit engagement optimization that harms child well-being. The bill establishes incident-reporting procedures and penalties for violations.", "stage": "introduced", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-03-24", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=1037&session=126&summary=B" }, { "id": "m:US-CT:SB00515", "jur": "US-CT", "level": "state", "num": "SB00515", "title": "An Act Concerning The Connecticut Workforce And A Productivity Gap Surcharge.", "sum": "Connecticut bill proposes a workforce-productivity-gap surcharge on employers to recapture revenue lost to employee displacement, while offering a permanent tax exemption for productivity gains achieved through 'collaborative technology' (AI/automation). The Secretary of the Office of Policy and…", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-04-20", "url": "https://www.cga.ct.gov/asp/cgabillstatus/cgabillstatus.asp?selBillType=Bill&bill_num=SB00515&which_year=2026" }, { "id": "m:US-NJ:S4062", "jur": "US-NJ", "level": "state", "num": "S4062", "title": "Establishes certain protections against demand by large-load addition customers in State.", "sum": "NJ S4062 establishes protections for the state against demands by large-load addition customers, likely addressing utility grid and energy impacts from high-consumption facilities such as data centers. The bill aims to regulate or constrain large-load customer leverage in utility negotiations.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-23", "url": "https://www.njleg.state.nj.us/bill-search/2026/S4062" }, { "id": "m:US-MN:SF4636", "jur": "US-MN", "level": "state", "num": "SF4636", "title": "License establishment for artificial intelligence independent verification organizations", "sum": "MN SF4636 establishes a licensing framework for independent verification organizations that audit and certify artificial intelligence systems. The bill creates regulatory infrastructure for third-party AI auditors and validators.", "stage": "introduced", "cats": [ "governance", "anti-discrimination", "disclosures" ], "secs": [], "date": "2026-03-23", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/4636/" }, { "id": "m:US-MN:SF4686", "jur": "US-MN", "level": "state", "num": "SF4686", "title": "Use of electronic monitoring tools regulation in employment settings", "sum": "MN SF4686 regulates the use of electronic monitoring tools (including automated systems) in employment settings, likely establishing disclosure, consent, and limitation rules for employer surveillance technologies. The bill addresses worker monitoring practices that may involve algorithmic or…", "stage": "introduced", "cats": [ "hiring", "privacy" ], "secs": [ "hr" ], "date": "2026-04-07", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/4686/" }, { "id": "m:US-MN:SF4689", "jur": "US-MN", "level": "state", "num": "SF4689", "title": "Use of automated decision systems in employment settings regulation", "sum": "MN SF4689 regulates the use of automated decision systems (ADS) in employment settings, establishing rules for how employers may deploy algorithmic tools in hiring, promotion, and workforce management. The bill likely addresses transparency, bias audits, and accountability mechanisms for…", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-04-09", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/4689/" }, { "id": "m:US-MN:SF4681", "jur": "US-MN", "level": "state", "num": "SF4681", "title": "Various data center exemptions and provisions modifications", "sum": "MN SF4681 modifies various exemptions and provisions related to data centers, including tax incentives, utility rates, siting, or infrastructure requirements. The bill directly addresses data-center policy as tracked in the AI vertical.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-23", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/4681/" }, { "id": "m:US-IL:HR0744", "jur": "US-IL", "level": "state", "num": "HR0744", "title": "DATA CENTERS-SUPPLY OWN ENERGY", "sum": "IL HR0744 urges all data centers in Illinois to supply their own energy rather than drawing from the grid, and directs state agencies (Illinois Power Agency and Illinois Environmental Protection Agency) to develop a plan addressing CO2e and copollutant emissions reductions tied to data-center…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-24", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=744&GAID=18&DocTypeID=HR&SessionID=114&GA=104" }, { "id": "m:US-WI:SB1140", "jur": "US-WI", "level": "state", "num": "SB1140", "title": "Algorithmic pricing of essential consumer goods, granting rule-making authority, and providing a penalty.", "sum": "WI SB1140 creates a statutory prohibition on algorithmic pricing of essential consumer goods and grants the state rule-making authority to enforce the restriction, with penalties for violations. The bill directly targets automated decision-making systems that adjust prices dynamically, a form of…", "stage": "failed/dead", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-03-30", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/sen/bill/sb1140" }, { "id": "m:US-MN:HF4532", "jur": "US-MN", "level": "state", "num": "HF4532", "title": "Artificial intelligence safety and disclosure requirements established, and civil remedies provided.", "sum": "MN HF4532 establishes safety and disclosure requirements for artificial intelligence systems and creates civil remedies for harms caused by AI. The bill appears to address AI safety standards, transparency obligations, and private rights of action for consumers affected by AI systems.", "stage": "introduced", "cats": [ "frontier", "disclosures", "consumer-financial" ], "secs": [], "date": "2026-03-23", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/4532/" }, { "id": "m:US-MN:HF4544", "jur": "US-MN", "level": "state", "num": "HF4544", "title": "License for artificial intelligence independent verification organizations established, advisory council established, rulemaking authorized, and reports required.", "sum": "This bill establishes a licensing regime for independent AI verification organizations and creates an advisory council to oversee AI verification and auditing. It authorizes rulemaking and requires regular reporting on AI verification standards and practices.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-03-23", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/4544/" }, { "id": "m:US-MN:HF4512", "jur": "US-MN", "level": "state", "num": "HF4512", "title": "Public hearings and disclosures prior to approval of data center development required.", "sum": "MN HF4512 requires public hearings and disclosures prior to approval of data center development projects. The bill mandates transparency and community input before permitting new data center facilities.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-09", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/4512/" }, { "id": "m:US-MN:HF4537", "jur": "US-MN", "level": "state", "num": "HF4537", "title": "Certain artificial intelligence use in employment procedures prohibited.", "sum": "MN HF4537 prohibits certain uses of artificial intelligence in employment procedures, likely targeting automated hiring decisions and algorithmic discrimination in recruitment and employment contexts.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-03-23", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/4537/" }, { "id": "m:US-NJ:S4088", "jur": "US-NJ", "level": "state", "num": "S4088", "title": "Prohibits advertising generative artificial intelligence as able to practice regulated profession or occupation.", "sum": "NJ S4088 prohibits advertising or marketing generative AI systems as capable of performing work reserved for licensed regulated professions (e.g., law, medicine, accounting, engineering). The bill targets false or misleading claims about AI's professional competency.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [], "date": "2026-05-04", "url": "https://www.njleg.state.nj.us/bill-search/2026/S4088" }, { "id": "m:US-MN:HF4536", "jur": "US-MN", "level": "state", "num": "HF4536", "title": "Use of generative artificial intelligence in official records prohibited, and civil remedies and enforcement provided.", "sum": "This bill prohibits the use of generative AI in official government records and provides civil remedies and enforcement mechanisms for violations. It appears designed to ensure transparency and accountability in how state agencies document official actions.", "stage": "introduced", "cats": [ "gov-use", "disclosures" ], "secs": [], "date": "2026-03-26", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/4536/" }, { "id": "m:US-NJ:S4075", "jur": "US-NJ", "level": "state", "num": "S4075", "title": "Regulates use of artificial intelligence-based systems for electronic monitoring regarding employment and public services.", "sum": "NJ S4075 regulates the use of AI-based electronic monitoring systems in employment and public services contexts. The bill appears designed to establish guardrails around automated surveillance and decision-making in both workplace and government service delivery.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination", "privacy" ], "secs": [ "hr" ], "date": "2026-05-04", "url": "https://www.njleg.state.nj.us/bill-search/2026/S4075" }, { "id": "m:US-PA:HB2314", "jur": "US-PA", "level": "state", "num": "HB2314", "title": "Providing for a public education campaign focused on educating the public about artificial intelligence and improving AI consumer literacy.", "sum": "PA HB2314 establishes a public education campaign to improve consumer literacy and public understanding of artificial intelligence. The bill focuses on educating the general public about AI capabilities, risks, and impacts.", "stage": "engrossed", "cats": [ "education" ], "secs": [], "date": "2026-06-05", "url": "https://www.palegis.us/legislation/bills/2025/hb2314" }, { "id": "m:US-MN:SF4816", "jur": "US-MN", "level": "state", "num": "SF4816", "title": "Environmental impact statement for data centers requirement provision", "sum": "MN SF4816 requires an environmental impact statement for data centers, addressing siting, energy, and utility infrastructure considerations. The bill establishes procedural requirements for environmental review before data-center development.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-25", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/4816/" }, { "id": "m:US-NE:LR421", "jur": "US-NE", "level": "state", "num": "LR421", "title": "Interim study to examine the current status of artificial intelligence legislation occurring at the state and federal levels to address risks to public safety and to determine what action…", "sum": "NE LR421 is a legislative study directive that instructs Nebraska to examine current state and federal AI legislation and assess public-safety risks to determine what regulatory action the state should take. It is a task-force/study bill focused on governance and policy development.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-03-30", "url": "https://nebraskalegislature.gov/bills/view_bill.php?DocumentID=65874" }, { "id": "m:US-OH:HB786", "jur": "US-OH", "level": "state", "num": "HB786", "title": "Prohibit artificial depiction of a minor for obscene purposes", "sum": "This bill amends Ohio criminal law to prohibit the creation and use of artificially generated depictions of minors for obscene purposes. It targets synthetic CSAM and child sexual abuse material produced via AI, deepfakes, or other generative techniques.", "stage": "introduced", "cats": [ "deepfakes", "minors" ], "secs": [ "media" ], "date": "2026-03-25", "url": "https://www.legislature.ohio.gov/legislation/136/hb786" }, { "id": "m:US-OH:HB784", "jur": "US-OH", "level": "state", "num": "HB784", "title": "Require data center water consumption reports", "sum": "OH HB784 requires data centers to report monthly and yearly water consumption and prohibits them from including water-consumption data in nondisclosure agreements with political subdivisions. The bill targets transparency and accountability in data-center operations, a core infrastructure concern…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-25", "url": "https://www.legislature.ohio.gov/legislation/136/hb784" }, { "id": "m:US-ID:H0945", "jur": "US-ID", "level": "state", "num": "H0945", "title": "Adds to existing law to establish provisions regarding artifical intelligence medical services.", "sum": "ID H0945 establishes regulatory provisions specific to AI medical services, including requirements for how artificial intelligence systems are used in clinical and healthcare contexts. The bill likely addresses disclosure, transparency, or safety standards for deploying AI in medical…", "stage": "introduced", "cats": [ "healthcare", "disclosures" ], "secs": [ "health" ], "date": "2026-03-25", "url": "https://legislature.idaho.gov/sessioninfo/2026/legislation/H0945/" }, { "id": "m:US-MN:SF4927", "jur": "US-MN", "level": "state", "num": "SF4927", "title": "Delivery of professional services preclusion through artificial intelligence directly to consumers", "sum": "This bill would restrict artificial intelligence systems from directly delivering certain professional services (likely legal, medical, financial, or other regulated services) to consumers without human oversight or licensing. The bill appears to establish a regulatory preclusion—prohibiting…", "stage": "introduced", "cats": [ "governance", "consumer-financial" ], "secs": [], "date": "2026-04-07", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/4927/" }, { "id": "m:US-GA:HB1603", "jur": "US-GA", "level": "state", "num": "HB1603", "title": "Georgia Entertainment Artificial Intelligence Accountability and Performer Protection Act; enact", "sum": "Georgia's Entertainment AI Accountability and Performer Protection Act requires consent before using a performer's likeness in a digital replica and creates a private right of action for violations. The bill addresses synthetic media and digital replicas of performers in entertainment contexts.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-03-31", "url": "https://www.legis.ga.gov/legislation/74419" }, { "id": "m:US-WI:SB1171", "jur": "US-WI", "level": "state", "num": "SB1171", "title": "Prohibiting retail dynamic price gouging of consumer goods and providing a penalty.", "sum": "WI SB1171 prohibits retail dynamic price gouging—the use of automated or algorithmic systems to set prices on consumer goods in real time based on demand, inventory, or other factors—and establishes penalties for violations. The bill targets algorithmic pricing strategies that may harm consumers…", "stage": "failed/dead", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-06-01", "url": "https://docs.legis.wisconsin.gov/2025/proposals/reg/sen/bill/sb1171" }, { "id": "m:US-NY:A10715", "jur": "US-NY", "level": "state", "num": "A10715", "title": "Prohibits distribution or publishing any political communication that was produced by or includes materially deceptive media.", "sum": "NY A10715 prohibits the distribution or publishing of political communications that were produced by or include materially deceptive media (synthetic or manipulated content). The bill targets AI-generated deepfakes and synthetic media in the electoral context.", "stage": "introduced", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-04-30", "url": "https://www.nysenate.gov/legislation/bills/2025/A10715" }, { "id": "m:US-PA:SB724", "jur": "US-PA", "level": "state", "num": "SB724", "title": "Providing for regulation of large load customers and public utilities and for community benefits agreements between large load customers and community-based organizations; establishing the…", "sum": "PA SB724 regulates large load customers (including data centers) and their relationships with public utilities, establishes a Data Center LIHEAP Enhancement Fund to support low-income households affected by data-center energy demand, and imposes new duties on state agencies regarding utility rates…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-31", "url": "https://www.palegis.us/legislation/bills/2025/sb724" }, { "id": "m:US-LA:HB1149", "jur": "US-LA", "level": "state", "num": "HB1149", "title": "Requires each public school to incorporate instruction on artificial intelligence into an existing course of study for each student in grades six through twelve (OR NO IMPACT See Note)", "sum": "Requires Louisiana public schools to incorporate artificial intelligence instruction into existing courses for all students in grades 6–12. The bill mandates AI literacy as part of the standard curriculum across middle and high school.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-04-01", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=HB1149&sbi=y" }, { "id": "m:US-LA:HB1184", "jur": "US-LA", "level": "state", "num": "HB1184", "title": "Prohibits public contracts with entities owned or controlled by foreign adversaries for the provision of artificial intelligence technology (OR NO IMPACT See Note)", "sum": "LA HB1184 prohibits Louisiana public contracts with entities owned or controlled by foreign adversaries from providing artificial intelligence technology. The bill is a procurement-level national-security filter on AI vendor relationships.", "stage": "introduced", "cats": [ "gov-use" ], "secs": [], "date": "2026-04-01", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=HB1184&sbi=y" }, { "id": "m:US-LA:HB1206", "jur": "US-LA", "level": "state", "num": "HB1206", "title": "Provides relative to permitting and reporting of water usage at data centers", "sum": "LA HB1206 establishes permitting and reporting requirements for water usage at data centers. The bill regulates a key input to AI compute infrastructure, addressing environmental resource management in the context of large-load facilities.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-01", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=HB1206&sbi=y" }, { "id": "m:US-LA:HB1188", "jur": "US-LA", "level": "state", "num": "HB1188", "title": "Provides relative to protections for minors regarding use of chatbots", "sum": "LA HB1188 establishes protections for minors regarding their use of chatbots, likely including disclosure requirements, age-gating, or restrictions on data collection and interaction. The bill addresses child safety in conversational AI systems.", "stage": "introduced", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-04-01", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=HB1188&sbi=y" }, { "id": "m:US-SC:H5476", "jur": "US-SC", "level": "state", "num": "H5476", "title": "Protecting Children from Chatbots", "sum": "SC H5476 requires chatbot operators to provide a limited-access mode for minors, implement age verification, and obtain parental consent before children access certain features. The bill also prohibits engagement prioritization that harms user wellbeing and establishes incident-reporting and…", "stage": "introduced", "cats": [ "minors", "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-03-31", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=5476&session=126&summary=B" }, { "id": "m:US-NY:A10764", "jur": "US-NY", "level": "state", "num": "A10764", "title": "Enacts the \"utility billing integrity act\" to establish utility billing integrity and consumer protections through anomaly detection, advanced data analytics and the usage of artificial…", "sum": "NY A10764 mandates that utilities implement AI-powered anomaly detection and advanced data analytics systems to review all residential bills before issuance and notify customers when anomalies are detected. The bill establishes billing integrity protections through automated decision-making in a…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [], "date": "2026-04-01", "url": "https://www.nysenate.gov/legislation/bills/2025/A10764" }, { "id": "m:US-SC:H5484", "jur": "US-SC", "level": "state", "num": "H5484", "title": "Energy Affordability Act", "sum": "SC H5484 regulates commercial data centers by requiring electric service terms and conditions, water-use reporting to environmental authorities, decommissioning plans with financial assurance, and offering tax incentives (sales-tax exemptions for equipment and electricity) to data-center operators.…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-01", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=5484&session=126&summary=B" }, { "id": "m:US-SC:S1103", "jur": "US-SC", "level": "state", "num": "S1103", "title": "Stop Harm from Addictive Social Media", "sum": "SC S1103 requires social media platforms to use reasonable means to estimate and verify the age of account holders, establish default account settings for minors, and obtain parental consent. The bill targets algorithmic features and design practices that may be addictive to young users.", "stage": "introduced", "cats": [ "minors", "disclosures" ], "secs": [ "consumer" ], "date": "2026-04-01", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=1103&session=126&summary=B" }, { "id": "m:US-MN:SF4997", "jur": "US-MN", "level": "state", "num": "SF4997", "title": "Artificial intelligence chatbot technology requirements provision", "sum": "MN SF4997 establishes technology requirements for AI chatbots, likely including disclosure and transparency provisions to inform users they are interacting with an automated system rather than a human. The bill appears designed to prevent consumer deception through chatbot interactions.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-04-22", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/4997/" }, { "id": "m:US-NY:S09794", "jur": "US-NY", "level": "state", "num": "S09794", "title": "Requires certification of filings produced using generative artificial intelligence; requires the brief of an appellant to contain a disclosure of the use of generative artificial…", "sum": "This bill requires attorneys filing legal briefs to disclose whether generative AI was used in drafting and to certify that all content was reviewed and verified by a human. It establishes a disclosure and certification regime for generative AI use in legal filings.", "stage": "introduced", "cats": [ "governance", "disclosures" ], "secs": [], "date": "2026-06-05", "url": "https://www.nysenate.gov/legislation/bills/2025/S9794" }, { "id": "m:US-AR:SR8", "jur": "US-AR", "level": "state", "num": "SR8", "title": "To Authorize The Introduction Of A Nonappropriation Bill To Require A Digital Asset Mining Business To Pay A Fee For Extraordinary Electrical Energy Usage And To Implement Oversight…", "sum": "AR SR8 authorizes introduction of a bill to require digital asset mining businesses to pay fees for extraordinary electrical energy usage and establish oversight procedures. The bill addresses large-load infrastructure and grid impact from energy-intensive computing operations.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "finserv", "infra" ], "date": "2026-04-29", "url": "https://arkleg.state.ar.us/Bills/Detail?id=sr8&ddBienniumSession=2025%2F2026F" }, { "id": "m:US-AR:SR10", "jur": "US-AR", "level": "state", "num": "SR10", "title": "To Authorize The Introduction Of A Nonappropriation Bill To Amend The Arkansas Data Centers Act Of 2023 And To Amend The Uniform Money Services Act.", "sum": "This bill authorizes introduction of a nonappropriation bill to amend Arkansas's 2023 Data Centers Act, addressing regulatory or incentive provisions for data-center operations and siting.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra", "finserv" ], "date": "2026-04-29", "url": "https://arkleg.state.ar.us/Bills/Detail?id=sr10&ddBienniumSession=2025%2F2026F" }, { "id": "m:US-NY:S09819", "jur": "US-NY", "level": "state", "num": "S09819", "title": "Directs the department of labor to conduct a study and prepare a report on the effects of artificial intelligence on job losses in the state.", "sum": "Directs New York's Department of Labor to study and report on the effects of artificial intelligence on job losses within the state. The study will document AI-driven workforce displacement and inform future policy.", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-04-07", "url": "https://www.nysenate.gov/legislation/bills/2025/S9819" }, { "id": "m:US-NY:A10852", "jur": "US-NY", "level": "state", "num": "A10852", "title": "Prohibits allocation of economic development power to data centers; provides for certain caps on amounts and eligibility for industrial development agency financial assistance; provides for…", "sum": "NY A10852 restricts economic-development incentives for data centers, caps industrial development agency financial assistance, requires job-maintenance clawback provisions, and designates the Department of Environmental Conservation as mandatory lead agency for environmental review of projects…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-21", "url": "https://www.nysenate.gov/legislation/bills/2025/A10852" }, { "id": "m:US-NY:A10909", "jur": "US-NY", "level": "state", "num": "A10909", "title": "Enacts the \"Shirley Myers White Right To Reconciliation and Digital Identity Repair Act\"; establishes a right for individuals to have outdated, inaccurate, or incomplete public and digital…", "sum": "NY A10909 establishes a legal right for individuals to correct or provide context for outdated, inaccurate, or incomplete information about them in digital and automated systems after a legal matter is resolved. It requires institutions to implement mechanisms preventing individuals from being…", "stage": "introduced", "cats": [ "anti-discrimination", "privacy" ], "secs": [ "consumer" ], "date": "2026-04-08", "url": "https://www.nysenate.gov/legislation/bills/2025/A10909" }, { "id": "m:US-AR:HR1009", "jur": "US-AR", "level": "state", "num": "HR1009", "title": "To Authorize The Introduction Of A Nonappropriation Bill To Require A Digital Asset Mining Business To Pay A Fee For Extraordinary Electrical Energy Usage And To Implement Oversight…", "sum": "AR HR1009 authorizes a bill to impose fees on digital asset mining businesses for extraordinary electrical energy usage and establish oversight procedures for their grid load. While nominally about cryptocurrency mining, digital asset mining is substantively a data-center / compute infrastructure…", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "finserv", "infra" ], "date": "2026-04-29", "url": "https://arkleg.state.ar.us/Bills/Detail?id=hr1009&ddBienniumSession=2025%2F2026F" }, { "id": "m:US-AR:HR1011", "jur": "US-AR", "level": "state", "num": "HR1011", "title": "To Authorize The Introduction Of A Nonappropriation Bill To Amend The Arkansas Data Centers Act Of 2023 And To Amend The Uniform Money Services Act.", "sum": "AR HR1011 authorizes introduction of a nonappropriation bill to amend the Arkansas Data Centers Act of 2023, addressing tax incentives, siting, or operational rules for data-center facilities. The bill also amends money-services law, though that component is outside the AI scope.", "stage": "failed/dead", "cats": [ "data-centers" ], "secs": [ "infra", "finserv" ], "date": "2026-04-29", "url": "https://arkleg.state.ar.us/Bills/Detail?id=hr1011&ddBienniumSession=2025%2F2026F" }, { "id": "m:US-MN:HF4888", "jur": "US-MN", "level": "state", "num": "HF4888", "title": "New data center moratorium established, and Public Utility Commission required to submit a report.", "sum": "Establishes a moratorium on new data centers in Minnesota and requires the Public Utility Commission to submit a report on data center impacts and policy. This directly addresses large-load infrastructure siting and utility/grid concerns tied to data-center expansion.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-05", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/4888/" }, { "id": "m:US-MN:SF5100", "jur": "US-MN", "level": "state", "num": "SF5100", "title": "Data centers provisions modifications", "sum": "MN SF5100 modifies state provisions governing data centers, likely addressing siting, utility interconnection, tax incentives, or grid-load management. The bill's referral to the Energy, Utilities, Environment, and Climate committee suggests focus on infrastructure and resource policy.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-13", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/5100/" }, { "id": "m:US-OH:HB813", "jur": "US-OH", "level": "state", "num": "HB813", "title": "Regards AI-generated products, AI-systems acting as humans", "sum": "OH HB813 requires AI-generated products to include watermarks and mandates disclosure when AI systems interact with humans in a way that could mislead them about the system's nature. The bill targets transparency around synthetic content and deceptive automation.", "stage": "introduced", "cats": [ "disclosures", "deepfakes" ], "secs": [ "media" ], "date": "2026-05-13", "url": "https://www.legislature.ohio.gov/legislation/136/hb813" }, { "id": "m:US-MI:HB5785", "jur": "US-MI", "level": "state", "num": "HB5785", "title": "Use tax: exemptions; compliance with enterprise data center construction labor act; require. Amends sec. 4cc of 1937 PA 94 (MCL 205.94cc). TIE BAR WITH: HB 5786'26, HB 5787'26", "sum": "MI HB5785 amends Michigan's use-tax exemption statute to require enterprise data centers to comply with the state's enterprise data center construction labor act. The bill ties tax incentives for data-center development to adherence to prevailing-wage and labor standards.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-15", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-5785" }, { "id": "m:US-MI:HB5790", "jur": "US-MI", "level": "state", "num": "HB5790", "title": "Local government: financing; requirements for enterprise data centers; modify. Amends sec. 4ee of 1933 PA 167 (MCL 205.54ee).", "sum": "This bill modifies Michigan's local-government financing law to establish or modify requirements for enterprise data centers, amending the tax and financing provisions in the 1933 Public Act. It directly addresses data-center siting, financing, and regulatory treatment at the local level.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-15", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-5790" }, { "id": "m:US-SC:H5526", "jur": "US-SC", "level": "state", "num": "H5526", "title": "Data Center Moratorium", "sum": "SC H5526 imposes a moratorium on state and local governmental entities' processing of permits and applications for new data centers until the General Assembly establishes a comprehensive oversight and approval process. The bill defines 'data center' and effectively halts new data-center development…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-14", "url": "https://www.scstatehouse.gov/billsearch.php?billnumbers=5526&session=126&summary=B" }, { "id": "m:US-MI:HB5777", "jur": "US-MI", "level": "state", "num": "HB5777", "title": "Businesses: other; large-scale data center life cycle financial responsibility act; create. Creates new act.", "sum": "Creates a new act establishing financial responsibility requirements for the lifecycle of large-scale data centers in Michigan, covering siting, operations, and decommissioning obligations.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-15", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-5777" }, { "id": "m:US-MI:HB5787", "jur": "US-MI", "level": "state", "num": "HB5787", "title": "Sales tax: exemptions; compliance with enterprise data center construction labor act; require. Amends sec. 4ee of 1933 PA 167 (MCL 205.54ee). TIE BAR WITH: HB 5785'26, HB 5786'26", "sum": "MI HB5787 amends Michigan's sales tax exemption statute to require enterprise data centers claiming exemptions to comply with the state's enterprise data center construction labor act. This ties tax incentives for data center development to labor compliance standards.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-15", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-5787" }, { "id": "m:US-MI:HB5786", "jur": "US-MI", "level": "state", "num": "HB5786", "title": "Labor: employment preference; prioritization of local union labor; require for the construction of enterprise data centers. Creates new act. TIE BAR WITH: HB 5785'26, HB 5787'26", "sum": "This bill requires that construction of enterprise data centers in Michigan prioritize and utilize local union labor. It creates a new statutory framework governing employment preferences for data-center projects.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra", "hr" ], "date": "2026-04-15", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-5786" }, { "id": "m:US-MI:HB5791", "jur": "US-MI", "level": "state", "num": "HB5791", "title": "Use tax: other; requirements for enterprise data centers; modify. Amends sec. 4cc of 1937 PA 94 (MCL 205.94cc).", "sum": "MI HB5791 modifies Michigan's use-tax exemption for enterprise data centers by amending section 4cc of the 1937 Public Utilities Act. The bill adjusts tax incentives and requirements governing large data-center operations and their utility consumption.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-15", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-5791" }, { "id": "m:US-MN:HF4990", "jur": "US-MN", "level": "state", "num": "HF4990", "title": "Criteria for preapplication evaluations of water appropriations for certain data centers modified, data centers' electricity sales exempted in calculating a utility's solar energy standard,…", "sum": "MN HF4990 modifies criteria for water-appropriation preapplication evaluations for data centers, exempts data-center electricity sales from utility solar-energy-standard calculations, provides other data-center exemptions, and establishes energy-generation redundancy requirements for data centers.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-16", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/4990/" }, { "id": "m:US-MN:HF4979", "jur": "US-MN", "level": "state", "num": "HF4979", "title": "Delivery of professional services through artificial intelligence directly to consumers precluded, and enforcement and penalties provided.", "sum": "This bill prohibits the delivery of professional services directly to consumers through artificial intelligence systems and establishes enforcement mechanisms and penalties for violations. It appears designed to restrict unlicensed AI from performing services that traditionally require human…", "stage": "introduced", "cats": [ "governance", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-04-16", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/4979/" }, { "id": "m:US-NC:S787", "jur": "US-NC", "level": "state", "num": "S787", "title": "AI Ethics and Literacy Across Education", "sum": "NC S787 establishes AI ethics and literacy education requirements across North Carolina's education system, likely mandating curriculum, teacher training, or institutional policies around AI awareness and responsible AI use in schools and higher education.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-04-23", "url": "https://www.ncleg.gov/BillLookUp/2025/S787" }, { "id": "m:US-OH:HB828", "jur": "US-OH", "level": "state", "num": "HB828", "title": "Regards use of automated employment decision tools", "sum": "Ohio HB828 enacts regulations governing the use of automated employment decision tools (AEDT) in hiring and employment decisions. The bill establishes requirements for use, transparency, and accountability of algorithmic hiring systems.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-05-13", "url": "https://www.legislature.ohio.gov/legislation/136/hb828" }, { "id": "m:US-MN:HF5051", "jur": "US-MN", "level": "state", "num": "HF5051", "title": "Disclosures when selling or distributing programs with artificial intelligence required.", "sum": "MN HF5051 requires disclosures when selling or distributing programs that contain artificial intelligence. The bill mandates transparency about AI components in software products distributed to consumers or businesses.", "stage": "introduced", "cats": [ "disclosures" ], "secs": [ "consumer" ], "date": "2026-04-23", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/5051/" }, { "id": "m:US-MI:HB5849", "jur": "US-MI", "level": "state", "num": "HB5849", "title": "Businesses: other; cyber-physical security and operational technology protections for data centers; provide for. Creates new act.", "sum": "Creates a new act establishing cyber-physical security and operational technology (OT) protection standards for data centers. Focuses on securing the infrastructure and systems that operate data-center facilities.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-23", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-5849" }, { "id": "m:US-MI:HB5846", "jur": "US-MI", "level": "state", "num": "HB5846", "title": "Land use: zoning and growth management; zoning overlay districts for data centers; provide for. Creates new act.", "sum": "Creates a new act enabling zoning overlay districts specifically for data centers, addressing land-use and growth-management policy around data-center siting and development.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-23", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-5846" }, { "id": "m:US-PA:SB1297", "jur": "US-PA", "level": "state", "num": "SB1297", "title": "In Computer Data Center Equipment Incentive Program, further providing for application for certification and for separation of facilities, providing for additional eligibility requirements,…", "sum": "PA SB1297 amends the Tax Reform Code of 1971 to modify the Computer Data Center Equipment Incentive Program, adjusting eligibility requirements, certification procedures, facility separation rules, notification, and revocation provisions. The bill strengthens administrative oversight and compliance…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-23", "url": "https://www.palegis.us/legislation/bills/2025/sb1297" }, { "id": "m:US-NY:S10025", "jur": "US-NY", "level": "state", "num": "S10025", "title": "Requires state-level public employers that intend to begin any procurement process or plan to acquire or deploy any new application or technology that utilizes an artificial intelligence…", "sum": "Requires New York state-level public employers to notify certified employee representatives at least 12 months before procuring, acquiring, or deploying any AI model or system. The bill establishes a labor-notification requirement for government AI deployment decisions.", "stage": "introduced", "cats": [ "gov-use", "hiring" ], "secs": [ "hr" ], "date": "2026-05-18", "url": "https://www.nysenate.gov/legislation/bills/2025/S10025" }, { "id": "m:US-MI:HB5899", "jur": "US-MI", "level": "state", "num": "HB5899", "title": "State management: other; artificial intelligence pilot program; establish for state departments and agencies. Creates new act.", "sum": "Establishes an artificial intelligence pilot program for Michigan state departments and agencies to test and evaluate AI applications in government operations. The bill creates a framework for state experimentation with AI systems across executive branch entities.", "stage": "introduced", "cats": [ "gov-use" ], "secs": [], "date": "2026-05-19", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-5899" }, { "id": "m:US-MI:HB5882", "jur": "US-MI", "level": "state", "num": "HB5882", "title": "Local government: other; requirements for a moratorium imposed by a local unit of government on large-scale data centers or cryptocurrency mining facilities; provide for. Creates new act.…", "sum": "MI HB5882 establishes requirements and limitations on local government moratoria on large-scale data centers and cryptocurrency mining facilities. The bill constrains the authority of municipalities to impose or extend moratoriums on data-center development.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-28", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-5882" }, { "id": "m:US-NY:A11048", "jur": "US-NY", "level": "state", "num": "A11048", "title": "Relates to the use of artificial intelligence by insurers and clinical peer reviewers for utilization review; establishes additional notice requirements for adverse determinations.", "sum": "This bill regulates the use of AI by insurers and clinical peer reviewers in utilization review decisions and requires enhanced notice requirements when AI systems issue adverse coverage determinations. It addresses transparency and potential discrimination risks in automated insurance and medical…", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "disclosures" ], "secs": [ "finserv", "health" ], "date": "2026-04-24", "url": "https://www.nysenate.gov/legislation/bills/2025/A11048" }, { "id": "m:US-MN:SF5231", "jur": "US-MN", "level": "state", "num": "SF5231", "title": "Data centers tax exemption repeal; contingent reduction in special education aid appropriation repeal", "sum": "This bill repeals a tax exemption for data centers in Minnesota and repeals a contingent reduction in special education aid appropriations. The repeal of the data-center tax exemption directly implicates large-load compute infrastructure policy and tax incentives.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-28", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/5231/" }, { "id": "m:US-NY:S10049", "jur": "US-NY", "level": "state", "num": "S10049", "title": "Updates the definition of cyberbullying in the dignity for all students act to include intentionally using artificial intelligence to mimic or alter a person's likeness or voice without…", "sum": "This bill amends New York's Dignity for All Students Act to expand the definition of cyberbullying to explicitly include intentional use of AI to mimic or alter a person's likeness or voice without consent. It targets AI-generated deepfakes and synthetic media as a form of school-based harassment.", "stage": "engrossed", "cats": [ "deepfakes", "minors", "education" ], "secs": [ "media", "consumer" ], "date": "2026-05-28", "url": "https://www.nysenate.gov/legislation/bills/2025/S10049" }, { "id": "m:US-FL:S0002", "jur": "US-FL", "level": "state", "num": "S0002", "title": "Artificial Intelligence Bill of Rights", "sum": "FL S0002 restricts governmental contracting with AI vendors unless specified requirements are met, and requires companion chatbot platforms to obtain parental consent before minors can create accounts. It also mandates periodic bot-operator notifications to users.", "stage": "failed/dead", "cats": [ "gov-use", "minors", "disclosures" ], "secs": [ "consumer" ], "date": "2026-04-29", "url": "https://www.flsenate.gov/Session/Bill/2026D/2D" }, { "id": "m:US-FL:S0004", "jur": "US-FL", "level": "state", "num": "S0004", "title": "Public Records/Investigations by the Department of Legal Affairs", "sum": "FL S0004 creates public-records exemptions for the Department of Legal Affairs' investigations and notifications concerning violations of companion chatbot regulations and bot-related consumer-protection laws. The exemption applies both during and after investigation closure, with a legislative…", "stage": "failed/dead", "cats": [ "governance", "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-04-29", "url": "https://www.flsenate.gov/Session/Bill/2026D/4D" }, { "id": "m:US-IL:HB5756", "jur": "US-IL", "level": "state", "num": "HB5756", "title": "ALGORITHMIC PRICING DISCLOSURE", "sum": "IL HB5756 requires online platforms to disclose when they use algorithmic pricing (surveillance pricing) to personalize prices for individual consumers, and grants consumers the right to opt out and receive non-personalized baseline prices. The bill prohibits use of specified personal information…", "stage": "introduced", "cats": [ "consumer-financial", "disclosures", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-05-15", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=5756&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-NC:S864", "jur": "US-NC", "level": "state", "num": "S864", "title": "Safe and Responsible AI in Schools Act", "sum": "The Safe and Responsible AI in Schools Act establishes policies and safeguards for the use of artificial intelligence systems in K–12 schools, addressing student safety, data protection, and responsible deployment of AI tools in educational settings.", "stage": "introduced", "cats": [ "governance", "education", "minors" ], "secs": [], "date": "2026-04-29", "url": "https://www.ncleg.gov/BillLookUp/2025/S864" }, { "id": "m:US-NC:S981", "jur": "US-NC", "level": "state", "num": "S981", "title": "AI in Ed Task Force and Standards", "sum": "NC S981 establishes a task force to study and develop standards for the use of artificial intelligence in education. The bill directs the state to examine AI applications in schools and higher education and recommend governance frameworks.", "stage": "introduced", "cats": [ "governance", "education" ], "secs": [], "date": "2026-05-05", "url": "https://www.ncleg.gov/BillLookUp/2025/S981" }, { "id": "m:US-NC:H1161", "jur": "US-NC", "level": "state", "num": "H1161", "title": "Omnibus Artificial Intelligence Protections", "sum": "NC H1161 is an omnibus bill addressing artificial intelligence protections across multiple dimensions, likely covering AI governance structures, algorithmic fairness/discrimination safeguards, and transparency requirements for AI systems. The specific provisions are not detailed in the title alone,…", "stage": "introduced", "cats": [ "governance", "anti-discrimination", "disclosures" ], "secs": [], "date": "2026-05-04", "url": "https://www.ncleg.gov/BillLookUp/2025/H1161" }, { "id": "m:US-NC:S988", "jur": "US-NC", "level": "state", "num": "S988", "title": "Protecting Workers in the Age of AI Act", "sum": "NC S988 addresses the use of automated decision-making and AI systems in employment contexts, focusing on worker protections including algorithmic hiring, workplace monitoring, and wage-setting systems. The bill likely mandates transparency, impact assessments, or restrictions on AI-driven…", "stage": "introduced", "cats": [ "governance", "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-05-05", "url": "https://www.ncleg.gov/BillLookUp/2025/S988" }, { "id": "m:US-NC:S963", "jur": "US-NC", "level": "state", "num": "S963", "title": "AI Chatbots-Licensing, Safety, & Privacy", "sum": "NC S963 establishes licensing, safety, and privacy requirements specifically for AI chatbots, including disclosure rules, user protections, and provisions related to minors' use. The bill addresses chatbot transparency, safety standards, and data-handling obligations.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial", "minors" ], "secs": [ "consumer" ], "date": "2026-05-04", "url": "https://www.ncleg.gov/BillLookUp/2025/S963" }, { "id": "m:US-NC:S1046", "jur": "US-NC", "level": "state", "num": "S1046", "title": "A.I. in Environmental Permitting", "sum": "NC S1046 addresses the use of artificial intelligence in environmental permitting processes, likely establishing rules or frameworks for how AI systems are deployed in state environmental agency decision-making.", "stage": "introduced", "cats": [ "gov-use" ], "secs": [], "date": "2026-05-04", "url": "https://www.ncleg.gov/BillLookUp/2025/S1046" }, { "id": "m:US-NY:S10133", "jur": "US-NY", "level": "state", "num": "S10133", "title": "Prohibits the use of most artificial intelligence in classrooms prior to high school except for AI used for diagnostic purposes or explicit instruction interventions for students with…", "sum": "Prohibits the use of most AI systems in K-12 classrooms below high school, with narrow exceptions for diagnostic tools and explicit instruction interventions for students with disabilities. The bill directly regulates AI deployment in educational settings.", "stage": "introduced", "cats": [ "education", "minors" ], "secs": [], "date": "2026-04-30", "url": "https://www.nysenate.gov/legislation/bills/2025/S10133" }, { "id": "m:US-IL:HB5760", "jur": "US-IL", "level": "state", "num": "HB5760", "title": "AI WORK TRANSITION COMMISSION", "sum": "Creates a state commission to assess the actual and projected impact of generative and frontier AI systems on Illinois industries, occupations, regions, and workers, and to recommend updates to workforce development, education, apprenticeship, unemployment insurance, and income-support programs…", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-05-05", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=5760&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-NC:H1177", "jur": "US-NC", "level": "state", "num": "H1177", "title": "Consumer Protection AI Bill of Rights", "sum": "NC H1177 establishes a Consumer Protection AI Bill of Rights, likely establishing baseline protections for consumers interacting with or affected by AI systems—potentially covering automated decision-making, transparency requirements, and fairness safeguards in consumer-facing AI applications.", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination", "disclosures" ], "secs": [ "consumer" ], "date": "2026-05-04", "url": "https://www.ncleg.gov/BillLookUp/2025/H1177" }, { "id": "m:US-IL:HB5761", "jur": "US-IL", "level": "state", "num": "HB5761", "title": "$DCEO-AI WORKFORCE TRANSITION", "sum": "This bill appropriates $150,000 to fund the Commission on Artificial Intelligence and Workforce Transition, which is tasked with conducting assessments related to AI's impact on workers and the labor market. The commission was established under the Commission on Artificial Intelligence and…", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-05-05", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=5761&GAID=18&DocTypeID=HB&SessionID=114&GA=104" }, { "id": "m:US-NY:A11175", "jur": "US-NY", "level": "state", "num": "A11175", "title": "Requires state-level public employers that intend to begin any procurement process or plan to acquire or deploy any new application or technology that utilizes an artificial intelligence…", "sum": "NY A11175 requires state-level public employers to notify certified employee representatives at least 12 months before beginning any procurement, acquisition, or deployment of AI models or systems. This establishes a transparency and advance-notice requirement for government AI procurement.", "stage": "introduced", "cats": [ "gov-use", "hiring" ], "secs": [ "hr" ], "date": "2026-05-01", "url": "https://www.nysenate.gov/legislation/bills/2025/A11175" }, { "id": "m:US-CO:SB189", "jur": "US-CO", "level": "state", "num": "SB189", "title": "Automated Decision-Making Technology", "sum": "CO SB189 regulates the use of automated decision-making technology in consequential decisions by requiring impact assessments, bias audits, and transparency disclosures. The bill establishes accountability standards for deployers of automated systems that affect consumers' rights or access to…", "stage": "passed", "cats": [ "anti-discrimination", "disclosures" ], "secs": [], "date": "2026-05-14", "url": "https://leg.colorado.gov/bills/SB26-189" }, { "id": "m:US-NJ:A4945", "jur": "US-NJ", "level": "state", "num": "A4945", "title": "Requires BPU to conduct study on environmental, infrastructural, and financial impacts of data center development in State.", "sum": "NJ A4945 directs the Board of Public Utilities to conduct a comprehensive study of the environmental, infrastructural, and financial impacts of data center development in New Jersey.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-07", "url": "https://www.njleg.state.nj.us/bill-search/2026/A4945" }, { "id": "m:US-NJ:A4981", "jur": "US-NJ", "level": "state", "num": "A4981", "title": "Regulates use of artificial intelligence-based systems for electronic monitoring regarding employment and public services.", "sum": "NJ A4981 regulates the use of AI-based electronic monitoring systems in employment and public-service contexts. The bill appears designed to restrict or govern automated surveillance and decision-making in these sectors, likely requiring transparency and limiting discriminatory use.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination", "disclosures" ], "secs": [ "hr" ], "date": "2026-05-07", "url": "https://www.njleg.state.nj.us/bill-search/2026/A4981" }, { "id": "m:US-LA:HR249", "jur": "US-LA", "level": "state", "num": "HR249", "title": "Requests the State Board of Elementary and Secondary Education to incorporate artificial intelligence into content standards", "sum": "LA HR249 requests the State Board of Elementary and Secondary Education to incorporate artificial intelligence into K–12 content standards. This is a curriculum and literacy initiative aimed at ensuring students learn about AI as part of their foundational education.", "stage": "passed", "cats": [ "education" ], "secs": [], "date": "2026-05-28", "url": "https://www.legis.la.gov/legis/BillInfo.aspx?s=26rs&b=HR249&sbi=y" }, { "id": "m:US-PA:HB2496", "jur": "US-PA", "level": "state", "num": "HB2496", "title": "In general provisions, providing for pause on data center proposals.", "sum": "PA HB2496 amends the Pennsylvania Municipalities Planning Code to impose a pause on data center proposals, likely addressing siting, permitting, or development of new data center infrastructure in the state.", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-30", "url": "https://www.palegis.us/legislation/bills/2025/hb2496" }, { "id": "m:US-MN:HF5125", "jur": "US-MN", "level": "state", "num": "HF5125", "title": "Data centers sales and use tax exemption repealed, and contingent reduction in special education aid appropriations repealed.", "sum": "Repeals the sales and use tax exemption for data centers in Minnesota, and repeals a contingent reduction in special education aid appropriations that was tied to that exemption.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-17", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/5125/" }, { "id": "m:US-DE:HB404", "jur": "US-DE", "level": "state", "num": "HB404", "title": "An Act To Amend Title 14 Of The Delaware Code Relating To The Artificial Intelligence And Extended Reality In Schools Pilot Program.", "sum": "This bill amends Delaware law to establish or modify a pilot program governing the use of artificial intelligence and extended reality (XR) technologies in schools. It creates a framework for deploying AI and XR systems in K–12 education settings while addressing student safety and welfare.", "stage": "engrossed", "cats": [ "education", "minors" ], "secs": [], "date": "2026-06-30", "url": "https://legis.delaware.gov/BillDetail?LegislationId=143513" }, { "id": "m:US-NY:S10241", "jur": "US-NY", "level": "state", "num": "S10241", "title": "Relates to the use of artificial intelligence by insurers and clinical peer reviewers for utilization review; establishes additional notice requirements for adverse determinations.", "sum": "NY S10241 regulates the use of artificial intelligence by insurers and clinical peer reviewers in utilization review decisions and requires enhanced notice requirements when adverse determinations are made based on AI analysis.", "stage": "introduced", "cats": [ "healthcare", "anti-discrimination", "disclosures" ], "secs": [ "finserv", "health" ], "date": "2026-05-08", "url": "https://www.nysenate.gov/legislation/bills/2025/S10241" }, { "id": "m:US-NJ:A5090", "jur": "US-NJ", "level": "state", "num": "A5090", "title": "\"GAI Accountability Act;\" imposes civil penalties on generative artificial intelligence platforms engaging in harmful activity, including exploitation of children.", "sum": "The GAI Accountability Act imposes civil penalties on generative AI platforms that engage in harmful activity, with explicit focus on exploitation of children. The bill targets platform-level accountability for generative AI systems.", "stage": "introduced", "cats": [ "minors", "consumer-financial", "frontier" ], "secs": [ "consumer" ], "date": "2026-05-14", "url": "https://www.njleg.state.nj.us/bill-search/2026/A5090" }, { "id": "m:US-NY:A11320", "jur": "US-NY", "level": "state", "num": "A11320", "title": "Prohibits the department of corrections and community supervision from using artificial intelligence in evaluating the risk and needs principles used to measure rehabilitation of a person,…", "sum": "This bill prohibits the New York Department of Corrections and Community Supervision from using artificial intelligence to evaluate rehabilitation risk, make parole-release decisions, determine supervision levels, or develop transitional accountability plans. It is a direct restriction on…", "stage": "introduced", "cats": [ "gov-use", "anti-discrimination" ], "secs": [], "date": "2026-05-11", "url": "https://www.nysenate.gov/legislation/bills/2025/A11320" }, { "id": "m:US-NJ:A5089", "jur": "US-NJ", "level": "state", "num": "A5089", "title": "\"AI Image Disclosure Act\"; concerns disclosure of certain AI-generated content.", "sum": "The AI Image Disclosure Act requires disclosure when images or visual content are AI-generated. It establishes transparency obligations for creators and distributors of synthetic visual media.", "stage": "introduced", "cats": [ "disclosures", "deepfakes" ], "secs": [ "media" ], "date": "2026-05-14", "url": "https://www.njleg.state.nj.us/bill-search/2026/A5089" }, { "id": "m:US-NJ:A5088", "jur": "US-NJ", "level": "state", "num": "A5088", "title": "\"AI Likeness Protection Act\"; concerns distributing realistic representation of individual's image, likeness, or voice created using generative artificial intelligence.", "sum": "The AI Likeness Protection Act prohibits the distribution of realistic representations of an individual's image, likeness, or voice created using generative AI without consent. The bill addresses unauthorized synthetic media and deepfake creation of identifiable persons.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-05-14", "url": "https://www.njleg.state.nj.us/bill-search/2026/A5088" }, { "id": "m:US-NY:S10290", "jur": "US-NY", "level": "state", "num": "S10290", "title": "Restricts the use by an employer or an employment agency of electronic monitoring or an automated employment decision tool to screen a candidate or employee for an employment decision…", "sum": "NY S10290 restricts employers and employment agencies from using automated employment decision tools or electronic monitoring to screen candidates or employees unless the tool has undergone an impact assessment within the past year. The bill requires employers to notify candidates of such tool use…", "stage": "introduced", "cats": [ "hiring", "anti-discrimination", "disclosures" ], "secs": [ "hr" ], "date": "2026-05-11", "url": "https://www.nysenate.gov/legislation/bills/2025/S10290" }, { "id": "m:US-NJ:S4279", "jur": "US-NJ", "level": "state", "num": "S4279", "title": "Provides disparate impact based on automated decision system as cause of action for certain consumers.", "sum": "NJ S4279 creates a private right of action for consumers who experience disparate impact from automated decision systems, allowing them to sue for harm caused by algorithmic discrimination in consequential decisions.", "stage": "introduced", "cats": [ "anti-discrimination", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-05-14", "url": "https://www.njleg.state.nj.us/bill-search/2026/S4279" }, { "id": "m:US-PA:HB2516", "jur": "US-PA", "level": "state", "num": "HB2516", "title": "In general provisions, further providing for definitions; in comprehensive plan, providing for comprehensive plan element for commercial data centers; and, in zoning, providing for zoning,…", "sum": "PA HB2516 amends the Pennsylvania Municipalities Planning Code to establish zoning, approval procedures, and minimum standards for commercial data centers, including protections for agricultural land. The bill requires municipalities to address data-center siting and regulation in comprehensive…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-13", "url": "https://www.palegis.us/legislation/bills/2025/hb2516" }, { "id": "m:US-IL:SB4203", "jur": "US-IL", "level": "state", "num": "SB4203", "title": "DCEO-DATA CENTERS", "sum": "IL SB4203 amends Illinois data center incentive law to require qualified data center operators to execute community benefit agreements with host communities, including annual minimum payments of at least 10% of foregone property tax, with at least 50% directed to residential property tax relief.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-17", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=4203&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-NY:S10349", "jur": "US-NY", "level": "state", "num": "S10349", "title": "Prohibits the department of corrections and community supervision from using artificial intelligence in evaluating the risk and needs principles used to measure rehabilitation of a person,…", "sum": "This bill prohibits the New York Department of Corrections and Community Supervision from using artificial intelligence to evaluate inmate rehabilitation, make parole-release decisions, determine supervision levels, or develop transitional accountability plans. It is a direct restriction on…", "stage": "introduced", "cats": [ "gov-use", "anti-discrimination" ], "secs": [], "date": "2026-05-14", "url": "https://www.nysenate.gov/legislation/bills/2025/S10349" }, { "id": "m:US-MI:HB5982", "jur": "US-MI", "level": "state", "num": "HB5982", "title": "Public utilities: other; contracts to service data centers; require to be treated as a contested case. Amends 1939 PA 3 (MCL 460.1 - 460.11) by adding sec. 6bb.", "sum": "This bill amends Michigan's public utilities law to require that contracts between utilities and data centers be treated as contested cases under regulatory review. The change gives the Michigan Public Service Commission formal adjudicatory authority over utility-data-center service agreements.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-19", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-5982" }, { "id": "m:US-NJ:S4304", "jur": "US-NJ", "level": "state", "num": "S4304", "title": "Prohibits agreements intended to conceal certain information concerning development of data centers under MLUL.", "sum": "This bill prohibits agreements designed to conceal information about data-center development under New Jersey's Municipal Land Use Law (MLUL). It aims to ensure transparency and public oversight of data-center siting and permitting.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-18", "url": "https://www.njleg.state.nj.us/bill-search/2026/S4304" }, { "id": "m:US-NY:S10373", "jur": "US-NY", "level": "state", "num": "S10373", "title": "Requires third party verification of compliance with transparency and safety requirements for developers of artificial intelligence models; requires publication of such compliance reports.", "sum": "Requires third-party independent verification that AI model developers comply with transparency and safety requirements, and mandates public disclosure of compliance reports. This establishes an external audit and accountability mechanism for AI developers' adherence to safety and transparency…", "stage": "introduced", "cats": [ "governance", "frontier", "disclosures" ], "secs": [], "date": "2026-05-15", "url": "https://www.nysenate.gov/legislation/bills/2025/S10373" }, { "id": "m:US-NY:S10425", "jur": "US-NY", "level": "state", "num": "S10425", "title": "Requires policing agencies to conduct an inventory of, and develop a publicly-available policy for, any artificial intelligence used to aid criminal investigations.", "sum": "Requires law enforcement agencies to inventory all AI systems used in criminal investigations and publish policies governing their use. Establishes transparency and accountability mechanisms for police deployment of AI.", "stage": "introduced", "cats": [ "gov-use", "public-safety", "disclosures" ], "secs": [], "date": "2026-05-15", "url": "https://www.nysenate.gov/legislation/bills/2025/S10425" }, { "id": "m:US-NY:S10456", "jur": "US-NY", "level": "state", "num": "S10456", "title": "Requires an office within the department of financial services to establish minimum standards for large frontier developers' frontier AI frameworks to prevent unreasonable levels of…", "sum": "NY S10456 directs the Department of Financial Services to establish minimum standards and frameworks for large frontier AI developers to prevent catastrophic risk. The bill creates a regulatory office tasked with setting safety and risk-management requirements for frontier AI model developers.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [ "finserv" ], "date": "2026-05-15", "url": "https://www.nysenate.gov/legislation/bills/2025/S10456" }, { "id": "m:US-MN:SF5303", "jur": "US-MN", "level": "state", "num": "SF5303", "title": "Human oversight requirement in the creation of official verbatim court records", "sum": "Requires human oversight in the creation of official verbatim court records, likely addressing AI or automated speech-to-text systems used in judicial proceedings. The bill establishes a mandate that human review must be part of the process for generating official court transcripts.", "stage": "introduced", "cats": [ "gov-use", "disclosures" ], "secs": [], "date": "2026-05-16", "url": "https://www.revisor.mn.gov/bills/94/2026/0/SF/5303/" }, { "id": "m:US-MN:HF5155", "jur": "US-MN", "level": "state", "num": "HF5155", "title": "Human oversight in the creation of official verbatim court records required.", "sum": "Requires human oversight in the creation of official verbatim court records, likely addressing the use of automated speech-to-text or AI transcription systems in judicial proceedings. The bill mandates human review and certification of court records to ensure accuracy and accountability.", "stage": "introduced", "cats": [ "gov-use", "disclosures" ], "secs": [], "date": "2026-05-16", "url": "https://www.revisor.mn.gov/bills/94/2026/0/HF/5155/" }, { "id": "m:US-IL:SB4206", "jur": "US-IL", "level": "state", "num": "SB4206", "title": "LOC GOVT-DATA CENTER", "sum": "IL SB4206 grants counties and municipalities authority to regulate the siting, construction standards, and density of data centers within their jurisdictions and surrounding areas through local ordinance, including provisions for notice and public hearings.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-18", "url": "https://www.ilga.gov/Legislation/BillStatus?DocNum=4206&GAID=18&DocTypeID=SB&SessionID=114&GA=104" }, { "id": "m:US-NY:S10546", "jur": "US-NY", "level": "state", "num": "S10546", "title": "Requires hyperscale data centers to offset their electricity demand by funding household electrification measures.", "sum": "NY S10546 requires hyperscale data centers to offset their electricity demand by funding household electrification measures. The bill targets the energy footprint of large-scale compute infrastructure—a key policy lever for AI deployment capacity.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-20", "url": "https://www.nysenate.gov/legislation/bills/2025/S10546" }, { "id": "m:US-PA:SB1323", "jur": "US-PA", "level": "state", "num": "SB1323", "title": "Providing for the regulation of commercial data centers; imposing duties on the Pennsylvania Public Utility Commission, the Department of Human Services and the Pennsylvania Energy…", "sum": "PA SB1323 establishes comprehensive regulation of commercial data centers in Pennsylvania, requiring clean firm energy standards, expedited interconnection, backup generation and curtailment protocols, and contract review by the Public Utility Commission. The bill also creates funding mechanisms…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-20", "url": "https://www.palegis.us/legislation/bills/2025/sb1323" }, { "id": "m:US-PA:SB1332", "jur": "US-PA", "level": "state", "num": "SB1332", "title": "Providing for notice of use of artificial intelligence or generative artificial intelligence in political advertisements.", "sum": "PA SB1332 requires that political advertisements disclose when artificial intelligence or generative AI has been used in their creation or production. The bill establishes a notice requirement tied to AI use in campaign messaging.", "stage": "introduced", "cats": [ "elections", "disclosures" ], "secs": [ "media" ], "date": "2026-05-21", "url": "https://www.palegis.us/legislation/bills/2025/sb1332" }, { "id": "m:US-NJ:S4345", "jur": "US-NJ", "level": "state", "num": "S4345", "title": "Requires social media platforms to cooperate with nonprofit organization initiatives to remove nonconsensual intimate images or videos.", "sum": "The bill requires social media platforms to cooperate with nonprofit organizations in efforts to identify and remove nonconsensual intimate images and videos (NCII), including synthetic or deepfaked intimate media. It establishes platform accountability for facilitating removal of such content.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "consumer", "media" ], "date": "2026-05-28", "url": "https://www.njleg.state.nj.us/bill-search/2026/S4345" }, { "id": "m:US-PA:HB2534", "jur": "US-PA", "level": "state", "num": "HB2534", "title": "Providing for artificial intelligence transparency, for duties of covered providers of generative artificial intelligence systems and for large online platforms and generative artificial…", "sum": "PA HB2534 establishes transparency requirements and duties for providers of generative AI systems and large online platforms hosting such systems, including disclosure and operational obligations. The bill imposes penalties for non-compliance by covered generative AI system providers.", "stage": "introduced", "cats": [ "disclosures", "frontier", "consumer-financial" ], "secs": [ "consumer", "media" ], "date": "2026-05-26", "url": "https://www.palegis.us/legislation/bills/2025/hb2534" }, { "id": "m:US-PA:HB2539", "jur": "US-PA", "level": "state", "num": "HB2539", "title": "In Computer Data Center Equipment Incentive Program, further providing for application for certification, for eligibility requirements relating to Sales and Use Tax Refund Program and for…", "sum": "PA HB2539 amends Pennsylvania's tax code to modify the Computer Data Center Equipment Incentive Program, adjusting eligibility requirements and certification procedures for sales and use tax refunds and exemptions available to data center operators.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-27", "url": "https://www.palegis.us/legislation/bills/2025/hb2539" }, { "id": "m:US-PA:HB2533", "jur": "US-PA", "level": "state", "num": "HB2533", "title": "In zoning, providing for optional moratorium on filing or consideration of new applications for high impact data centers.", "sum": "This bill amends Pennsylvania's Municipalities Planning Code to allow local jurisdictions to impose optional moratoriums on new applications for high-impact data centers. It grants municipalities discretionary authority to pause or delay permitting of large data-center facilities.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-27", "url": "https://www.palegis.us/legislation/bills/2025/hb2533" }, { "id": "m:US-PA:HB2532", "jur": "US-PA", "level": "state", "num": "HB2532", "title": "Repealing provisions relating to computer data center equipment incentive program; in general provisions, providing for transfer of tax from certain sale of computer data equipment; and…", "sum": "PA HB2532 repeals Pennsylvania's computer data center equipment incentive program and redirects related tax revenue to the Motor License Fund. The bill modifies tax treatment of computer data center equipment sales, removing prior tax-incentive provisions.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-27", "url": "https://www.palegis.us/legislation/bills/2025/hb2532" }, { "id": "m:US-NY:S10574", "jur": "US-NY", "level": "state", "num": "S10574", "title": "Requires the division of criminal justice services to promulgate a written protocol for the regulation of the use of artificial intelligence and facial recognition technology in criminal…", "sum": "This bill requires New York's Division of Criminal Justice Services to develop and publish a written protocol governing the use of artificial intelligence and facial recognition technology in criminal investigations. It establishes regulatory guardrails for law-enforcement deployment of these…", "stage": "introduced", "cats": [ "governance", "gov-use", "public-safety" ], "secs": [], "date": "2026-05-26", "url": "https://www.nysenate.gov/legislation/bills/2025/S10574" }, { "id": "m:US-OH:HB957", "jur": "US-OH", "level": "state", "num": "HB957", "title": "Prohibit new data center sales tax exemptions from being granted", "sum": "OH HB957 prohibits the state from granting new sales tax exemptions for data centers. This is fiscal/tax policy targeting data-center development and infrastructure incentives.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-03", "url": "https://www.legislature.ohio.gov/legislation/136/hb957" }, { "id": "m:US-NJ:S4390", "jur": "US-NJ", "level": "state", "num": "S4390", "title": "\"End Data Center Tax Credits Act\"; reduces tax credits available for Next New Jersey Program.", "sum": "NJ S4390 reduces or eliminates tax credits available under the Next New Jersey Program for data-center operators. The bill directly targets tax incentives for data-center siting and development.", "stage": "enrolled", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-30", "url": "https://www.njleg.state.nj.us/bill-search/2026/S4390" }, { "id": "m:US-NJ:A5165", "jur": "US-NJ", "level": "state", "num": "A5165", "title": "\"End Data Center Tax Credits Act\"; reduces tax credits available for Next New Jersey Program.", "sum": "This bill reduces or eliminates tax credits available to data centers under New Jersey's Next New Jersey Program. It directly targets tax incentive policy for data-center infrastructure.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-30", "url": "https://www.njleg.state.nj.us/bill-search/2026/A5165" }, { "id": "m:US-NJ:A5184", "jur": "US-NJ", "level": "state", "num": "A5184", "title": "Requires boards of education to adopt policy on use of artificial intelligence; requires DOE to establish model policy.", "sum": "NJ A5184 requires local school boards to adopt policies governing the use of artificial intelligence in schools, and directs the New Jersey Department of Education to develop a model policy for boards to reference. The bill addresses AI governance and use standards within K–12 education systems.", "stage": "introduced", "cats": [ "gov-use", "education" ], "secs": [], "date": "2026-06-01", "url": "https://www.njleg.state.nj.us/bill-search/2026/A5184" }, { "id": "m:US-NJ:S4400", "jur": "US-NJ", "level": "state", "num": "S4400", "title": "Requires DEP to conduct study of short and long term effects of water use by large-scale data centers.", "sum": "NJ S4400 directs the Department of Environmental Protection to study the short- and long-term effects of water consumption by large-scale data centers. The bill addresses environmental impacts of data-center infrastructure, a core component of AI model training and deployment.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-04", "url": "https://www.njleg.state.nj.us/bill-search/2026/S4400" }, { "id": "m:US-NJ:S4401", "jur": "US-NJ", "level": "state", "num": "S4401", "title": "Requires BPU to conduct study on environmental, infrastructural, and financial impacts of data center development in State.", "sum": "NJ S4401 directs the Board of Public Utilities (BPU) to study the environmental, infrastructural, and financial impacts of data center development in New Jersey. The bill targets the planning and regulation of large-load compute infrastructure.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-04", "url": "https://www.njleg.state.nj.us/bill-search/2026/S4401" }, { "id": "m:US-NJ:S4402", "jur": "US-NJ", "level": "state", "num": "S4402", "title": "\"Responsible Data Center Development and Resource Protection Act\"; establishes Statewide framework concerning siting, land use approval, energy sourcing, water use, and environmental…", "sum": "NJ S4402 establishes a statewide regulatory framework for large-load data center development, addressing siting approval, land use, energy sourcing, water consumption, and environmental impacts. The bill directly targets the physical infrastructure supporting AI and compute-intensive workloads.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-04", "url": "https://www.njleg.state.nj.us/bill-search/2026/S4402" }, { "id": "m:US-NY:S10642", "jur": "US-NY", "level": "state", "num": "S10642", "title": "Places a one year moratorium on the issuance of data center permits; requires utilities to establish an independent classification of service for large data centers; sets energy efficiency…", "sum": "NY S10642 imposes a one-year moratorium on new data center permits and requires utilities to create a dedicated service classification for large data centers, while setting energy efficiency standards, community benefits, and labor requirements for data center construction.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-04", "url": "https://www.nysenate.gov/legislation/bills/2025/S10642" }, { "id": "m:US-NY:A11560", "jur": "US-NY", "level": "state", "num": "A11560", "title": "Places a one year moratorium on the issuance of data center permits; requires utilities to establish an independent classification of service for large data centers; sets energy efficiency…", "sum": "NY A11560 imposes a one-year moratorium on new data center permits in New York, requires utilities to create a separate service classification for large data centers, mandates energy-efficiency standards, and establishes labor and community-benefit requirements for data center construction.", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-04", "url": "https://www.nysenate.gov/legislation/bills/2025/A11560" }, { "id": "m:US-PA:SB1345", "jur": "US-PA", "level": "state", "num": "SB1345", "title": "In zoning, providing for optional temporary moratorium on acceptance or consideration of new applications for high impact data centers.", "sum": "PA SB1345 amends the Pennsylvania Municipalities Planning Code to permit local jurisdictions to impose optional temporary moratoriums on new applications for high-impact data centers. The bill directly addresses data-center siting and zoning authority.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-12", "url": "https://www.palegis.us/legislation/bills/2025/sb1345" }, { "id": "m:US-MI:SB1020", "jur": "US-MI", "level": "state", "num": "SB1020", "title": "Public utilities: public service commission; moratorium on approvals by the Michigan public service commission of any new enterprise data centers; provide for. Amends 1939 PA 3 (MCL 460.1 -…", "sum": "MI SB1020 imposes a moratorium on Michigan Public Service Commission approvals of new enterprise data centers. The bill amends the 1939 Public Utilities Act to add restrictions on data-center siting and utility interconnection.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-04", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-SB-1020" }, { "id": "m:US-PA:SB1344", "jur": "US-PA", "level": "state", "num": "SB1344", "title": "Repealing provisions relating to computer data center equipment incentive program; in general provisions, providing for transfer of tax from certain sale of computer data equipment; and…", "sum": "PA SB1344 modifies Pennsylvania's tax treatment of computer data center equipment by repealing an existing incentive program and redirecting sales-tax revenue from certain data center equipment sales to the Motor License Fund.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-04", "url": "https://www.palegis.us/legislation/bills/2025/sb1344" }, { "id": "m:US-MI:SB1018", "jur": "US-MI", "level": "state", "num": "SB1018", "title": "Businesses: other; moratorium on certain approvals for and operation of any new data centers; provide for. Creates new act. TIE BAR WITH: SB 1019'26", "sum": "MI SB1018 creates a moratorium on approvals and operation of new data centers in Michigan. The bill is tied to SB 1019'26, suggesting complementary provisions on data-center regulation.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-04", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-SB-1018" }, { "id": "m:US-PA:SB1349", "jur": "US-PA", "level": "state", "num": "SB1349", "title": "Providing for transparency in use of generative artificial intelligence; requiring disclosure of synthetic content; providing for establishment of content verification tools; imposing…", "sum": "PA SB1349 requires transparency and disclosure of generative AI use and synthetic content, establishes content verification tools, and empowers the PA Attorney General's Bureau of Consumer Protection to enforce penalties for violations.", "stage": "introduced", "cats": [ "disclosures", "consumer-financial", "deepfakes" ], "secs": [ "media" ], "date": "2026-06-04", "url": "https://www.palegis.us/legislation/bills/2025/sb1349" }, { "id": "m:US-NJ:A5224", "jur": "US-NJ", "level": "state", "num": "A5224", "title": "Requires data center developers to disclose certain information to public and elected officials before preliminary site plan consideration under MLUL.", "sum": "Requires data center developers to disclose certain information to the public and elected officials before preliminary site plan approval under New Jersey's Municipal Land Use Law. This bill targets the siting, environmental, and infrastructure impacts of data centers.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-08", "url": "https://www.njleg.state.nj.us/bill-search/2026/A5224" }, { "id": "m:US-DE:HB453", "jur": "US-DE", "level": "state", "num": "HB453", "title": "An Act To Amend Title 6 Of The Delaware Code Relating To Consumer Protection And Surveillance Based Pricing Discrimination.", "sum": "Delaware HB453 amends consumer protection law to prohibit surveillance-based pricing discrimination—the practice of using collected personal data to charge different prices to different consumers for the same goods or services. The bill treats algorithmic pricing that exploits personal data…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-06-25", "url": "https://legis.delaware.gov/BillDetail?LegislationId=143615" }, { "id": "m:US-PA:SB1368", "jur": "US-PA", "level": "state", "num": "SB1368", "title": "Prohibiting nudification applications from being offered on online application marketplaces; and prescribing penalties.", "sum": "PA SB1368 prohibits the distribution and sale of nudification applications (non-consensual intimate-image synthesis tools) on online application marketplaces. The bill imposes penalties on platforms and developers offering such software.", "stage": "introduced", "cats": [ "deepfakes", "minors" ], "secs": [ "media", "consumer" ], "date": "2026-06-24", "url": "https://www.palegis.us/legislation/bills/2025/sb1368" }, { "id": "m:US-NY:A11599", "jur": "US-NY", "level": "state", "num": "A11599", "title": "Enacts the \"fair cart act\"; establishes safeguards against deceptive algorithmic pricing practices; outlines permitted pricing practices and safe harbors; requires consumer pricing…", "sum": "NY A11599 establishes safeguards against deceptive algorithmic pricing practices in e-commerce, requiring transparency in how automated systems set prices and outlining permitted pricing behaviors and safe harbors. The bill includes compliance guidance, enforcement mechanisms, and consumer…", "stage": "introduced", "cats": [ "consumer-financial", "anti-discrimination" ], "secs": [ "consumer" ], "date": "2026-06-05", "url": "https://www.nysenate.gov/legislation/bills/2025/A11599" }, { "id": "m:US-NJ:S4446", "jur": "US-NJ", "level": "state", "num": "S4446", "title": "Requires certain artificial intelligence developers to make certain disclosures to Attorney General.", "sum": "This bill requires certain AI developers to make disclosures to the New Jersey Attorney General, establishing a reporting obligation tied to AI system development and oversight. The specific disclosure requirements and developer thresholds are not detailed in the title alone, but the bill creates a…", "stage": "introduced", "cats": [ "governance", "disclosures" ], "secs": [], "date": "2026-06-11", "url": "https://www.njleg.state.nj.us/bill-search/2026/S4446" }, { "id": "m:US-PA:HR563", "jur": "US-PA", "level": "state", "num": "HR563", "title": "Directing the Joint State Government Commission to conduct a study and issue a report on the impact driverless vehicles have on safety and the workforce.", "sum": "PA HR563 directs the Joint State Government Commission to study and report on the impact of autonomous vehicles on public safety and workforce employment. The resolution seeks to assess both safety implications and labor-market disruption from driverless technology.", "stage": "introduced", "cats": [ "governance", "public-safety", "hiring" ], "secs": [], "date": "2026-06-10", "url": "https://www.palegis.us/legislation/bills/2025/hr563" }, { "id": "m:US-NJ:S4458", "jur": "US-NJ", "level": "state", "num": "S4458", "title": "Establishes five-year \"New Jersey Artificial Intelligence Workforce Transition Act.\"", "sum": "Establishes a five-year workforce transition program in New Jersey to address AI-driven job displacement and retraining needs. The bill likely creates state-level initiatives, funding, or task forces to support workers affected by AI automation and develop AI literacy/training pathways.", "stage": "introduced", "cats": [ "governance", "hiring", "education" ], "secs": [ "hr" ], "date": "2026-06-15", "url": "https://www.njleg.state.nj.us/bill-search/2026/S4458" }, { "id": "m:US-NJ:A5275", "jur": "US-NJ", "level": "state", "num": "A5275", "title": "Requires certain artificial intelligence developers to make certain disclosures to Attorney General.", "sum": "Requires certain AI developers to make disclosures to the New Jersey Attorney General. The bill establishes a regulatory reporting obligation for AI developers, likely tied to safety, capability, or compliance matters.", "stage": "introduced", "cats": [ "governance", "disclosures" ], "secs": [], "date": "2026-06-15", "url": "https://www.njleg.state.nj.us/bill-search/2026/A5275" }, { "id": "m:US-NJ:A5272", "jur": "US-NJ", "level": "state", "num": "A5272", "title": "Establishes safety requirements for artificial intelligence companion operators.", "sum": "NJ A5272 establishes safety requirements specifically for artificial intelligence companion operators—likely addressing chatbots and interactive AI systems designed to engage users. The bill targets protections around these AI companion products, suggesting focus on user safety, disclosure, and…", "stage": "introduced", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-06-15", "url": "https://www.njleg.state.nj.us/bill-search/2026/A5272" }, { "id": "m:US-NJ:S4469", "jur": "US-NJ", "level": "state", "num": "S4469", "title": "Requires boards of education to adopt policy on use of artificial intelligence; requires DOE to establish model policy.", "sum": "Requires New Jersey school boards to adopt policies governing the use of artificial intelligence in schools, and directs the Department of Education to establish a model policy for boards to reference. This addresses AI governance and safeguards in K-12 educational settings.", "stage": "introduced", "cats": [ "gov-use", "education" ], "secs": [ "consumer" ], "date": "2026-06-15", "url": "https://www.njleg.state.nj.us/bill-search/2026/S4469" }, { "id": "m:US-PA:HB2637", "jur": "US-PA", "level": "state", "num": "HB2637", "title": "Providing for a temporary prohibition on artificial intelligence chatbots in children's toys; and imposing penalties.", "sum": "PA HB2637 imposes a temporary prohibition on AI chatbots integrated into children's toys and establishes penalties for violations. The bill directly restricts a specific AI application in products marketed to minors.", "stage": "introduced", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-06-15", "url": "https://www.palegis.us/legislation/bills/2025/hb2637" }, { "id": "m:US-NJ:S4474", "jur": "US-NJ", "level": "state", "num": "S4474", "title": "Establishes safety requirements for artificial intelligence companion operators.", "sum": "NJ S4474 establishes safety requirements specifically for artificial intelligence companion operators—chatbots or conversational AI systems designed to interact with users. The bill treats AI companions as a regulated category requiring defined operational safeguards.", "stage": "introduced", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-06-18", "url": "https://www.njleg.state.nj.us/bill-search/2026/S4474" }, { "id": "m:US-NJ:A5294", "jur": "US-NJ", "level": "state", "num": "A5294", "title": "\"Responsible Data Center Development and Resource Protection Act\"; establishes Statewide framework concerning siting, land use approval, energy sourcing, water use, and environmental…", "sum": "NJ A5294 establishes a statewide regulatory framework for large-load data center development, addressing siting, land-use approval, energy sourcing, water use, and environmental impacts. The bill directly targets the infrastructure required to support AI model training and deployment at scale.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-18", "url": "https://www.njleg.state.nj.us/bill-search/2026/A5294" }, { "id": "m:US-PA:HB2650", "jur": "US-PA", "level": "state", "num": "HB2650", "title": "In tax credit and tax benefit administration, further providing for definitions; in computer data center equipment incentive program, providing for certification prohibition; providing for…", "sum": "PA HB2650 amends tax code to regulate computer data center equipment incentives and establishes Governor's Responsible Infrastructure Development certification standards and duties for data center projects.", "stage": "engrossed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-25", "url": "https://www.palegis.us/legislation/bills/2025/hb2650" }, { "id": "m:US-MI:SB1047", "jur": "US-MI", "level": "state", "num": "SB1047", "title": "Public utilities: rates; separate rate class for large-load customers; require. Amends 1939 PA 3 (MCL 460.1 - 460.11) by adding sec. 10ii.", "sum": "Creates a separate rate class for large-load utility customers under Michigan's public utilities law, enabling differentiated electricity pricing for high-consumption users such as data centers and AI compute facilities.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-01", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-SB-1047" }, { "id": "m:US-MI:SB1050", "jur": "US-MI", "level": "state", "num": "SB1050", "title": "Businesses: other; community benefit agreements; require certain data centers to be subject to. Creates new act.", "sum": "MI SB1050 requires certain data centers to be subject to community benefit agreements. This likely addresses siting, local impact, and accountability obligations for large data-center operators, which is a tracked vertical under AI infrastructure policy.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-01", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-SB-1050" }, { "id": "m:US-NJ:A5316", "jur": "US-NJ", "level": "state", "num": "A5316", "title": "Establishes five-year \"New Jersey Artificial Intelligence Workforce Transition Act.\"", "sum": "Establishes a five-year workforce transition program to address job displacement and skills gaps caused by AI adoption. The bill likely includes training, reskilling, and support services for workers affected by automation.", "stage": "introduced", "cats": [ "governance", "hiring", "education" ], "secs": [ "hr" ], "date": "2026-06-23", "url": "https://www.njleg.state.nj.us/bill-search/2026/A5316" }, { "id": "m:US-GA:HR43", "jur": "US-GA", "level": "state", "num": "HR43", "title": "Artificial intelligence deepfakes; growing danger to election integrity, public trust, and the people of Georgia; recognize", "sum": "A resolution recognizing the threat that AI-generated deepfakes pose to election integrity, public trust, and Georgia citizens. The bill calls for awareness and acknowledgment of this emerging risk but does not establish substantive regulatory or enforcement mechanisms.", "stage": "passed", "cats": [ "deepfakes", "elections" ], "secs": [ "media" ], "date": "2026-06-22", "url": "https://www.legis.ga.gov/legislation/74903" }, { "id": "m:US-MI:SB1077", "jur": "US-MI", "level": "state", "num": "SB1077", "title": "Labor: fair employment practices; use of electronic monitoring or automated decisions tools by an employer; prohibit except for certain purposes. Creates new act.", "sum": "MI SB1077 restricts employers' use of electronic monitoring and automated decision-making tools in hiring and employment, permitting such tools only for specified purposes. The bill creates a new fair employment practices framework governing when and how algorithmic employment decisions can be…", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-06-24", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-SB-1077" }, { "id": "m:US-PA:HB2666", "jur": "US-PA", "level": "state", "num": "HB2666", "title": "Providing for limitations on the use of user data in the creation of artificial intelligence simulations and for private right of action; and imposing penalties.", "sum": "PA HB2666 restricts the use of user data in creating AI simulations and establishes a private right of action with penalties for violations. The bill creates consumer remedies for unauthorized use of personal data in AI model training or synthetic media generation.", "stage": "introduced", "cats": [ "privacy", "disclosures", "consumer-financial" ], "secs": [ "media" ], "date": "2026-06-24", "url": "https://www.palegis.us/legislation/bills/2025/hb2666" }, { "id": "m:US-PA:HB2669", "jur": "US-PA", "level": "state", "num": "HB2669", "title": "Providing for employer disclosure when employee layoffs occur due to an employer's use of artificial intelligence or other technological change; and imposing civil penalties.", "sum": "PA HB2669 requires employers to disclose to affected employees when layoffs result from the employer's use of artificial intelligence or other technological change, and imposes civil penalties for non-compliance.", "stage": "introduced", "cats": [ "hiring", "disclosures" ], "secs": [ "hr" ], "date": "2026-06-24", "url": "https://www.palegis.us/legislation/bills/2025/hb2669" }, { "id": "m:US-MI:HB6137", "jur": "US-MI", "level": "state", "num": "HB6137", "title": "Businesses: other; community benefit agreements; require certain data centers to be subject to. Creates new act. TIE BAR WITH: HB 6135'26, HB 6136'26, HB 6140'26, HB 6141'26, HB 6138'26, HB…", "sum": "MI HB6137 requires certain data centers to be subject to community benefit agreements. The bill creates a new legal framework governing the terms under which large-load data-center facilities must negotiate benefits with local communities.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-30", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-6137" }, { "id": "m:US-MI:HB6140", "jur": "US-MI", "level": "state", "num": "HB6140", "title": "Public employees and officers: other; nondisclosure agreements related to the construction of data centers; prohibit. Creates new act. TIE BAR WITH: HB 6135'26, HB 6141'26, HB 6137'26, HB…", "sum": "This bill prohibits public employees and officers from signing nondisclosure agreements related to the construction of data centers. It creates a new statutory framework to ensure transparency and public accountability in data-center development projects.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-30", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-6140" }, { "id": "m:US-MI:HB6138", "jur": "US-MI", "level": "state", "num": "HB6138", "title": "Businesses: other; data center water usage requirements; provide for. Creates new act. TIE BAR WITH: HB 6135'26, HB 6140'26, HB 6141'26, HB 6137'26, HB 6142'26, HB 6139'26", "sum": "MI HB6138 establishes new requirements governing water usage by data centers operating in Michigan. The bill is part of a coordinated package (tied to HB 6135, 6137, 6139, 6140, 6141, 6142) addressing data-center operational standards and infrastructure policy.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-30", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-6138" }, { "id": "m:US-MI:HB6135", "jur": "US-MI", "level": "state", "num": "HB6135", "title": "Public utilities: rates; large load commercial rates for data centers; establish. Amends 1939 PA 3 (MCL 460.1 - 460.11) by adding sec. 10ii. TIE BAR WITH: HB 6140'26, HB 6141'26, HB…", "sum": "MI HB6135 establishes a new large-load commercial rate class for data centers under Michigan's public utility framework, allowing utilities to offer specialized electricity pricing for facilities with high power demands. The bill is tied to related legislation (HB 6140–6142) that likely address…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-30", "url": "https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-6135" }, { "id": "m:US-PA:HB2678", "jur": "US-PA", "level": "state", "num": "HB2678", "title": "In powers and duties, further providing for definitions and providing for artificial intelligence.", "sum": "PA HB2678 amends Pennsylvania's professional-licensing statute (Title 63) to add definitions and regulatory provisions for artificial intelligence, likely establishing how AI is treated under state licensing frameworks for regulated professions.", "stage": "introduced", "cats": [ "governance", "disclosures" ], "secs": [], "date": "2026-06-29", "url": "https://www.palegis.us/legislation/bills/2025/hb2678" }, { "id": "m:US-PA:SB1384", "jur": "US-PA", "level": "state", "num": "SB1384", "title": "In tax credit and tax benefit administration, further providing for definitions; in computer data center equipment incentive program, providing for certification prohibition; providing for…", "sum": "PA SB1384 amends Pennsylvania's Tax Reform Code to establish new certification standards and prohibitions in the computer data center equipment incentive program, including a new 'Governor's Responsible Infrastructure Development' certification requirement and associated duties for tax credit…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-10", "url": "https://www.palegis.us/legislation/bills/2025/sb1384" }, { "id": "m:US-PA:HB2705", "jur": "US-PA", "level": "state", "num": "HB2705", "title": "Providing for a report on artificial intelligence in the workforce; and imposing duties on the Department of Labor and Industry and Department of Community and Economic Development.", "sum": "PA HB2705 requires the Department of Labor and Industry and Department of Community and Economic Development to produce a report on artificial intelligence's impact on the workforce. The bill imposes duties on these state agencies to study and document AI's effects on employment.", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-07-16", "url": "https://www.palegis.us/legislation/bills/2025/hb2705" }, { "id": "m:US-PA:SB1408", "jur": "US-PA", "level": "state", "num": "SB1408", "title": "Prohibiting certain nondisclosure agreements between public agencies and data centers.", "sum": "PA SB1408 prohibits public agencies from entering into nondisclosure agreements with data centers that would prevent disclosure of information related to public contracts or operations. The bill aims to increase transparency and public accountability in government data-center procurement and…", "stage": "introduced", "cats": [ "gov-use", "data-centers" ], "secs": [ "infra" ], "date": "2026-07-20", "url": "https://www.palegis.us/legislation/bills/2025/sb1408" }, { "id": "m:US-OH:HB983", "jur": "US-OH", "level": "state", "num": "HB983", "title": "Enact the Data Center Accountability and Citizen Protection Act", "sum": "OH HB983 establishes comprehensive accountability and regulatory requirements for data centers in Ohio, including siting, energy/utility impacts, grid management, and operational standards. The bill directly falls within AI vertical scope as data-center infrastructure policy is tracked regardless…", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-28", "url": "https://www.legislature.ohio.gov/legislation/136/hb983" }, { "id": "m:UK:4170", "jur": "UK", "level": "national", "num": "4170", "title": "Automated Online Software (Access and Transparency) Bill", "sum": "The Bill would require operators of specified automated online software to register and comply with duties concerning the software’s functions, including its access to online material published by others. It also provides for related measures governing transparency and accountability.", "stage": "advancing", "cats": [ "governance", "disclosures" ], "secs": [ "consumer" ], "date": "2026-10-16", "url": "https://bills.parliament.uk/bills/4170", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 759/2023", "jur": "BR", "level": "national", "num": "PL 759/2023", "title": "PL 759/2023: Regulates Artificial Intelligence Systems and Provides Other Measures", "sum": "The bill establishes a legal framework for the development and use of artificial intelligence systems in Brazil, including principles, rights, responsibilities, and governance requirements. It also addresses transparency and safeguards against harmful or discriminatory uses of AI.", "stage": "advancing", "cats": [ "governance", "disclosures", "anti-discrimination" ], "secs": [], "date": "2026-08-11", "url": "https://www.camara.leg.br/propostas-legislativas/2349685", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 303/2024", "jur": "BR", "level": "national", "num": "PL 303/2024", "title": "PL 303/2024: Bill on Ownership of Inventions Autonomously Generated by Artificial Intelligence", "sum": "The bill would amend Article 6 of Brazil’s Industrial Property Law to establish rules on ownership of inventions generated autonomously by artificial intelligence systems. It addresses the treatment of AI-generated inventions under Brazil’s patent framework.", "stage": "advancing", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-08-11", "url": "https://www.camara.leg.br/propostas-legislativas/2418048", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 19/2026", "jur": "BR", "level": "national", "num": "PL 19/2026", "title": "PL 19/2026: Establishes conditions, duties, and restrictions on the use of smart glasses with artificial intelligence features", "sum": "The bill establishes rules, duties, and restrictions for using AI-enabled smart glasses and amends Brazil’s Traffic Code and Penal Code. It addresses the legal and safety implications of deploying these devices in public and traffic-related contexts.", "stage": "advancing", "cats": [ "governance", "public-safety", "privacy" ], "secs": [ "consumer" ], "date": "2026-08-11", "url": "https://www.camara.leg.br/propostas-legislativas/2600015", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1074/2026", "jur": "BR", "level": "national", "num": "PL 1074/2026", "title": "Incentives for Developing Brazilian Artificial Intelligence Systems", "sum": "Establishes incentives for the development of Brazilian artificial intelligence systems and amends laws governing tax incentives and funding for technological innovation. The bill would support domestic AI research, development, and commercialization.", "stage": "advancing", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-08-11", "url": "https://www.camara.leg.br/propostas-legislativas/2607741", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 323/2026", "jur": "BR", "level": "national", "num": "PL 323/2026", "title": "PL 323/2026: Bill creating the National Fund for Innovation, Development, Widespread Adoption, and Universalization in Digital Education and Artificial Intelligence (FinEducaDigital)", "sum": "The bill creates the FinEducaDigital fund to support innovation, development, widespread adoption, and universal access in digital education and artificial intelligence. The available description does not specify the fund’s sources, governance, or eligible programs.", "stage": "advancing", "cats": [ "governance", "education" ], "secs": [], "date": "2026-08-07", "url": "https://www.camara.leg.br/propostas-legislativas/2601059", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB10044", "jur": "US", "level": "national", "num": "HB10044", "title": "HB10044: AI Tax and Work Protection Act", "sum": "The bill would tax covered foundation-model transactions based on token value or AI-service consideration, with rates linked to unemployment. It would fund a Work Protection Administration, job creation, grants, training, and worker-support programs.", "stage": "introduced", "cats": [ "frontier", "hiring", "governance" ], "secs": [], "date": "2026-08-06", "url": "https://www.congress.gov/bill/119th-congress/house-bill/10044/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB5171", "jur": "US", "level": "national", "num": "SB5171", "title": "SB 5171: Children's Artificial Intelligence Toy Safety Act of 2026", "sum": "The bill would require a study of artificial-intelligence-enabled toys and development of a joint action plan addressing their marketing and sale. It focuses on assessing safety and establishing coordinated policy recommendations for AI toys.", "stage": "advancing", "cats": [ "minors", "governance" ], "secs": [ "consumer" ], "date": "2026-08-05", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/5171/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4407", "jur": "US", "level": "national", "num": "SB4407", "title": "SB4407 CHATBOT Act (Children’s Health, Advancement, Trust, Boundaries, and Oversight in Technology Act)", "sum": "The bill would require artificial-intelligence chatbot providers to create family accounts for children and obtain verifiable parental consent before teens use AI chatbots. It establishes age-related access and oversight requirements for AI chatbot services.", "stage": "advancing", "cats": [ "minors", "governance" ], "secs": [ "consumer" ], "date": "2026-08-05", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4407/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4199", "jur": "US", "level": "national", "num": "SB4199", "title": "SB4199 Youth AI Privacy Act", "sum": "The bill would require entities that make artificial intelligence chatbots available to minors to implement specified safe-design features. It addresses the privacy and safety of minors using AI chatbot services.", "stage": "advancing", "cats": [ "minors", "privacy" ], "secs": [ "consumer" ], "date": "2026-08-05", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4199/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4900/2026", "jur": "BR", "level": "national", "num": "PL 4900/2026", "title": "PL 4900/2026: Digital Violence Against Women", "sum": "The proposal would address digital violence against women, including abuse involving generative AI, hate and misogynistic content, platform responsibility, moderation, and removal processes.", "stage": "introduced", "cats": [ "deepfakes", "disclosures", "anti-discrimination", "public-safety" ], "secs": [ "media", "consumer" ], "date": "2026-08-05", "url": "https://www.camara.leg.br/propostas-legislativas/2642052", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB5225", "jur": "US", "level": "national", "num": "SB5225", "title": "SB5225: K-12 AI Literacy and Readiness Act of 2026", "sum": "The bill would allow federal education funds to support student instruction on safe, effective, and responsible AI use and professional development for teachers, librarians, instructional staff, and administrators.", "stage": "introduced", "cats": [ "education", "minors", "gov-use" ], "secs": [], "date": "2026-08-04", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/5225/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:S.2004", "jur": "IT", "level": "national", "num": "S.2004", "title": "S.2004: Provisions on urban planning and the siting of high-density computing infrastructure (data centers and hyperscale data centers)", "sum": "The bill establishes provisions governing urban planning and the siting of high-density computing infrastructure, including data centers and hyperscale data centers. It is a standard legislative initiative introduced by Senator Elena Sironi.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-08-04", "url": "http://dati.senato.it/ddl/60385", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:C.2927", "jur": "IT", "level": "national", "num": "C.2927", "title": "Bill C.2927: Provisions to Protect Personal Identity Against the Dissemination of Images and Audio or Video Content Produced or Modified Using Computer Programs, Digital Applications, or Artificial Intelligence Systems", "sum": "The bill would protect personal identity from the dissemination of images, audio, or video generated or altered using software, digital applications, or AI systems. It addresses synthetic media and manipulated content that may impersonate or affect an individual.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-08-04", "url": "http://dati.senato.it/ddl/60137", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4881/2026", "jur": "BR", "level": "national", "num": "PL 4881/2026", "title": "Algorithmic Integrity and Consumer Protection in Artificial Intelligence", "sum": "This bill establishes governance, security, transparency, responsibility, compliance, and consumer-protection duties for the use of artificial intelligence systems in consumer relationships. It creates an Algorithmic Integrity Legal Regime for Consumer Relations and amends Brazil's Consumer Protection Code.", "stage": "introduced", "cats": [ "governance", "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-08-04", "url": "https://www.camara.leg.br/propostas-legislativas/2641936", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 182/2025", "jur": "BR", "level": "national", "num": "PL 182/2025", "title": "Bill 182/2025", "sum": "Amends Brazil's National Policy for Missing Persons to incorporate security-camera technology and facial recognition, among other measures, into efforts to locate missing people.", "stage": "advancing", "cats": [ "public-safety" ], "secs": [], "date": "2026-08-04", "url": "https://www.camara.leg.br/propostas-legislativas/2482618", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HR1471", "jur": "US", "level": "national", "num": "HR1471", "title": "HR 1471: Sense of the House on Transparency and Local Autonomy for AI Data Centers", "sum": "This resolution expresses the House's support for transparency and local autonomy for communities affected by the construction or operation of artificial intelligence data centers. It has been referred to the relevant committees for consideration.", "stage": "introduced", "cats": [ "data-centers", "governance" ], "secs": [ "infra" ], "date": "2026-08-03", "url": "https://www.congress.gov/bill/119th-congress/house-resolution/1471/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB10042", "jur": "US", "level": "national", "num": "HB10042", "title": "HB 10042: Understanding Artificial Intelligence in the Classroom Act", "sum": "Directs the Director of the National Science Foundation to conduct workshops on integrating artificial intelligence into classrooms. The bill also includes related purposes concerning classroom AI integration.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-08-03", "url": "https://www.congress.gov/bill/119th-congress/house-bill/10042/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB10041", "jur": "US", "level": "national", "num": "HB10041", "title": "HB10041: Study on Data Center Locations Near Critical Infrastructure", "sum": "Directs the Secretary of Commerce to study the impacts of locating data centers within or near military installations, rail hubs, airports, air cargo facilities, air traffic control facilities, and industrial zones. The measure addresses data-center siting and related infrastructure considerations.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-08-03", "url": "https://www.congress.gov/bill/119th-congress/house-bill/10041/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 2873/2026", "jur": "BR", "level": "national", "num": "PL 2873/2026", "title": "PL 2873/2026: Establishes the National Policy for Digital Inclusion and Artificial Intelligence for Family Farming: AGROFAMÍLIA 5.0", "sum": "The bill creates a national policy to promote digital inclusion and the use of artificial intelligence in family farming. It likely addresses access to digital technologies and AI-enabled tools for family farmers.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-08-03", "url": "https://www.camara.leg.br/propostas-legislativas/2630042", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 2850/2026", "jur": "BR", "level": "national", "num": "PL 2850/2026", "title": "National Technological Career Transition Policy", "sum": "Establishes the National Technological Professional Transition Policy (PNTPT) to prepare, protect, and retrain workers in response to the effects of automation, artificial intelligence, and new technologies on the labor market.", "stage": "advancing", "cats": [ "hiring" ], "secs": [ "hr" ], "date": "2026-08-03", "url": "https://www.camara.leg.br/propostas-legislativas/2629940", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 2019/2026", "jur": "BR", "level": "national", "num": "PL 2019/2026", "title": "PL 2019/2026: National Policy for Labor Transition, Human Oversight, and Limits on Automated Replacement in the Labor Market", "sum": "Establishes a national policy for labor transition and minimum protections against automation-driven job displacement, including requirements for human oversight and limits on automated substitution in the labor market. It also sets related parameters for managing the effects of automation on workers.", "stage": "advancing", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-08-03", "url": "https://www.camara.leg.br/propostas-legislativas/2618844", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9985", "jur": "US", "level": "national", "num": "HB9985", "title": "HB9985: AI Ads Act", "sum": "The bill would amend federal campaign-finance law to clarify that fraudulent misrepresentation of campaign authority and fraudulent solicitation of funds include the use of content generated wholly or partly by artificial intelligence.", "stage": "introduced", "cats": [ "elections", "deepfakes" ], "secs": [ "media" ], "date": "2026-07-30", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9985/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB10004", "jur": "US", "level": "national", "num": "HB10004", "title": "HB10004: Defending Our Energy and Water Act", "sum": "The bill would amend federal law to establish water-resource protection requirements for data centers, including those associated with national defense or federal facilities. It was referred to the relevant congressional committees for consideration.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-30", "url": "https://www.congress.gov/bill/119th-congress/house-bill/10004/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 6686", "jur": "MX", "level": "national", "num": "Expediente 6686", "title": "Expediente 6686: Initiative proposing a decree to amend Article 73 of the Political Constitution of the United Mexican States (on artificial intelligence)", "sum": "The initiative would amend Article 73 to establish or clarify Congress's constitutional authority to legislate on artificial intelligence. It was presented by Deputy Eduardo Gaona Domínguez of the Citizens' Movement and referred to the Committee on Constitutional Points.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-07-30", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/jul/20260730.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 6648", "jur": "MX", "level": "national", "num": "Expediente 6648", "title": "File 6648: Initiative proposing a decree to amend Article 6 of the Political Constitution of the United Mexican States (on artificial intelligence)", "sum": "The initiative proposes amending Article 6 of Mexico’s Constitution to address artificial intelligence. It was introduced by Deputy Arturo Roberto Hernández Tapia of Morena and referred to the Constitutional Points Commission; the available description does not specify the substantive amendments.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-07-30", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/jul/20260730.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 6570", "jur": "MX", "level": "national", "num": "Expediente 6570", "title": "Bill proposing a decree to amend Article 73 of the Political Constitution of the United Mexican States (on artificial intelligence): Expediente 6570", "sum": "The initiative would amend Article 73 of Mexico’s Constitution concerning artificial intelligence, potentially establishing or clarifying Congress’s authority to legislate on AI. It was introduced by Deputy Annia Sarahí Gómez Cárdenas and PAN parliamentary group members and referred to the Constitutional Points Commission.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-07-30", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/jul/20260730.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 2885/2026", "jur": "BR", "level": "national", "num": "PL 2885/2026", "title": "PL 2885/2026: Establishes the National Policy for Digital Inclusion, Technological Innovation, and Artificial Intelligence for Family Farming (AGROFAMÍLIA 5.0)", "sum": "The bill establishes a national policy to promote digital inclusion, technological innovation, and artificial intelligence in family farming. It appears focused on expanding access to digital tools and AI-enabled technologies in the family-farming sector.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-07-29", "url": "https://www.camara.leg.br/propostas-legislativas/2630094", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB5154", "jur": "US", "level": "national", "num": "SB5154", "title": "SB 5154: A bill to establish protections for minors who use companion artificial intelligence chatbots, and for other purposes", "sum": "The bill would establish protections for minors using companion AI chatbots, addressing risks associated with these systems and their interactions with children. It has been referred to the Senate Committee on Commerce, Science, and Transportation for consideration.", "stage": "introduced", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-07-28", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/5154/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB5135", "jur": "US", "level": "national", "num": "SB5135", "title": "SB 5135: AI Ads Act", "sum": "The bill would amend the Federal Election Campaign Act to clarify that fraudulent misrepresentation of campaign authority and fraudulent solicitation of funds include misrepresentations made using content generated wholly or partly by artificial intelligence. It targets deceptive generative-AI content in campaign communications and fundraising.", "stage": "introduced", "cats": [ "elections", "deepfakes" ], "secs": [ "media" ], "date": "2026-07-27", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/5135/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9965", "jur": "US", "level": "national", "num": "HB9965", "title": "HB 9965: AI Threat Output and Monitoring Incident Containment Act", "sum": "The bill directs the National Nuclear Security Administration, through the Secretary of Energy, to establish an Advanced Artificial Intelligence Nuclear Evaluation Program. The program would evaluate and monitor advanced AI outputs in connection with nuclear-security threats and incident containment.", "stage": "introduced", "cats": [ "frontier", "gov-use", "governance" ], "secs": [], "date": "2026-07-27", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9965/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:EU:Ares(2026)6387101", "jur": "EU", "level": "national", "num": "Ares(2026)6387101", "title": "AI Strategy for Cultural and Creative Sectors", "sum": "The European Commission has opened a call for evidence to inform a strategy on the use of artificial intelligence in Europe’s cultural and creative sectors. The strategy is intended to support innovation, cultural sovereignty, and the broader European cultural sector.", "stage": "introduced", "cats": [ "governance" ], "secs": [ "media" ], "date": "2026-07-27", "url": "https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/18592", "instrument_type": "call_for_evidence", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB5130", "jur": "US", "level": "national", "num": "SB5130", "title": "SB5130: Human Dignity and Emerging Technologies Act", "sum": "Establishes a United States Commission on Human Dignity to examine and address the societal and ethical implications of emerging technologies, including artificial intelligence. The commission would develop recommendations for federal policy and oversight.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-07-23", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/5130/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB5117", "jur": "US", "level": "national", "num": "SB5117", "title": "SB5117: Senior Chatbot Protection Act of 2026", "sum": "The bill would establish consumer transparency and protection requirements for artificial intelligence chatbots, with a focus on protecting seniors. Specific obligations are not detailed in the provided description.", "stage": "advancing", "cats": [ "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-07-23", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/5117/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB5105", "jur": "US", "level": "national", "num": "SB5105", "title": "SB5105: Collaboration on Adversarial Threats and Security Risks Act", "sum": "The bill would clarify that antitrust laws permit the sharing of risks associated with artificial intelligence frontier models. It aims to facilitate collaboration on adversarial threats and security risks without triggering antitrust liability.", "stage": "advancing", "cats": [ "frontier", "governance" ], "secs": [], "date": "2026-07-23", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/5105/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9939", "jur": "US", "level": "national", "num": "HB9939", "title": "HB9939: No AI Data Centers on Federal Lands Act", "sum": "This bill would prohibit artificial-intelligence data centers from being located on federal land. It has been referred to the House Committee on Natural Resources for consideration.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-23", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9939/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9925", "jur": "US", "level": "national", "num": "HB9925", "title": "HB9925: FRONTIER Act: Frontier Risk Oversight, National Transparency, Independent Evaluation, and Reporting Act", "sum": "The bill would establish federal oversight of the development and deployment of frontier artificial intelligence in interstate and foreign commerce. Its title indicates requirements concerning transparency, independent evaluation, and reporting of frontier AI risks.", "stage": "introduced", "cats": [ "frontier", "governance", "disclosures" ], "secs": [], "date": "2026-07-23", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9925/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9922", "jur": "US", "level": "national", "num": "HB9922", "title": "HB9922: AI Transparency in Elections Act of 2026", "sum": "The bill would amend federal campaign-finance law to require political advertisements containing substantially AI-generated images, audio, or video to disclose within the advertisement that generative AI was used. It addresses transparency for synthetic media in election advertising.", "stage": "introduced", "cats": [ "elections", "disclosures", "deepfakes" ], "secs": [ "media" ], "date": "2026-07-23", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9922/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9917", "jur": "US", "level": "national", "num": "HB9917", "title": "HB9917: AI Kill Switch Act", "sum": "The bill would amend the Homeland Security Act of 2002 to require certain entities to maintain a technical capability to shut down specified technologies, apparently including covered artificial-intelligence systems. It establishes a potential operational control requirement for disabling such systems.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-07-23", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9917/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9915", "jur": "US", "level": "national", "num": "HB9915", "title": "HB 9915: Stealth Bot Prohibition Act", "sum": "The bill would prohibit the use of “stealth bots,” automated systems that operate or interact while concealing their bot identity. The available description does not specify the covered platforms, conduct, or enforcement mechanisms.", "stage": "introduced", "cats": [ "disclosures", "governance" ], "secs": [ "consumer" ], "date": "2026-07-23", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9915/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9914", "jur": "US", "level": "national", "num": "HB9914", "title": "HB9914: Collaboration on Adversarial Threats and Security Risks Act", "sum": "The bill would clarify that antitrust laws permit companies to share information about risks and security threats associated with artificial intelligence frontier models. It is intended to facilitate collaboration on identifying and mitigating advanced-model risks.", "stage": "introduced", "cats": [ "frontier", "governance" ], "secs": [], "date": "2026-07-23", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9914/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9907", "jur": "US", "level": "national", "num": "HB9907", "title": "HB9907: LEARN AI Act", "sum": "The bill would authorize the Department of Labor to promote the importance of artificial intelligence in safeguarding apprentices’ welfare and job security. It focuses on AI’s implications for apprenticeship and workforce development.", "stage": "introduced", "cats": [ "hiring", "education" ], "secs": [ "hr" ], "date": "2026-07-23", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9907/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9862", "jur": "US", "level": "national", "num": "HB9862", "title": "HB 9862: Responsible Artificial Intelligence for Veterans Act of 2026", "sum": "The bill would direct the Secretary of Veterans Affairs to seek an agreement with a federally funded research and development center to independently evaluate artificial intelligence systems used by the Veterans Health Administration. It concerns oversight and assessment of AI deployed in a government healthcare system.", "stage": "introduced", "cats": [ "healthcare", "gov-use", "governance" ], "secs": [ "health" ], "date": "2026-07-22", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9862/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9825", "jur": "US", "level": "national", "num": "HB9825", "title": "HB9825: Data Center Water and Energy Transparency Act of 2026", "sum": "The bill would require data center operators to report their energy and water consumption to states or specified federal agencies, including the Environmental Protection Agency and the Departments of Energy and Agriculture. It addresses data-center resource use and transparency.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-22", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9825/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9643", "jur": "US", "level": "national", "num": "HB9643", "title": "HB9643: Comment Integrity and Management Act", "sum": "The bill would amend the E-Government Act to improve the integrity and management of mass-submitted and computer-generated comments during federal regulatory reviews. It targets automated comment generation and related manipulation of public participation processes.", "stage": "advancing", "cats": [ "governance", "disclosures" ], "secs": [], "date": "2026-07-22", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9643/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB5061", "jur": "US", "level": "national", "num": "SB5061", "title": "SB 5061: Secure Artificial Intelligence Development Act of 2026", "sum": "The bill would improve the tracking and processing of security and safety incidents and risks associated with artificial intelligence. It establishes a legislative framework focused on AI safety and incident reporting.", "stage": "advancing", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-07-21", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/5061/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB5057", "jur": "US", "level": "national", "num": "SB5057", "title": "SB5057: Safeguarding Against Fabricated Exploitation Through Artificial Intelligence Act of 2026", "sum": "The bill would prohibit the use of certain artificial intelligence models across the Federal Government. It also addresses related matters concerning federal agency use of AI.", "stage": "advancing", "cats": [ "gov-use" ], "secs": [ "media" ], "date": "2026-07-21", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/5057/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB5055", "jur": "US", "level": "national", "num": "SB5055", "title": "SB5055: National Workforce Transition Fund Act of 2026", "sum": "The bill would establish a National Workforce Transition Board and fund training and education programs for workers affected by the adoption of artificial intelligence and emerging technologies.", "stage": "introduced", "cats": [ "hiring", "education", "governance" ], "secs": [ "hr" ], "date": "2026-07-21", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/5055/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB5054", "jur": "US", "level": "national", "num": "SB5054", "title": "SB5054: Data Center Tax Accountability and Disclosure Act of 2026", "sum": "The bill would deny bonus depreciation to data centers serving artificial intelligence operations and require data center operators to report information about electricity and water consumption. It addresses tax treatment and resource-use disclosure for data centers.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-21", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/5054/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB5051", "jur": "US", "level": "national", "num": "SB5051", "title": "SB5051: AI AGENT Act of 2026 (Artificial Intelligence Access, Gatekeeper Exchange, and Nondiscriminatory Transfer Act of 2026)", "sum": "The bill would promote competition in online services by addressing gatekeeper conduct, reducing consumer switching costs, and requiring nondiscriminatory access or transfer mechanisms relevant to artificial-intelligence agents. It was referred to the Senate Commerce, Science, and Transportation Committee.", "stage": "introduced", "cats": [ "governance" ], "secs": [ "consumer" ], "date": "2026-07-21", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/5051/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB5050", "jur": "US", "level": "national", "num": "SB5050", "title": "SB5050: Expanding AI Voices through Capacity Building Act", "sum": "The bill would support an interdisciplinary research community focused on advancing artificial intelligence and AI-powered innovation through partnerships and capacity building at specified higher-education and other institutions.", "stage": "advancing", "cats": [ "education" ], "secs": [], "date": "2026-07-21", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/5050/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB5047", "jur": "US", "level": "national", "num": "SB5047", "title": "SB5047: Artificial Intelligence Physical Systems Coordination Act of 2026", "sum": "The bill would require the Director of the National Institute of Standards and Technology to establish a working group to coordinate stakeholders on compound risks associated with artificial intelligence physical systems. It would create a federal coordination and policy-development mechanism rather than impose direct operational requirements on AI developers.", "stage": "advancing", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-07-21", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/5047/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9340", "jur": "US", "level": "national", "num": "HB9340", "title": "HB9340: Ratepayer Protection Act", "sum": "The bill would amend the Public Utility Regulatory Policies Act to establish a federal standard requiring large-load customers to recover the full incremental costs of utility upgrades needed to serve them. It targets utility infrastructure costs associated with major electricity users, including data centers and other high-load facilities.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-21", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9340/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9339", "jur": "US", "level": "national", "num": "HB9339", "title": "HB9339: Affordable Innovation for the Grid Act", "sum": "The bill requires the Secretary of Energy to assess how artificial intelligence and high-performance computing can enhance the bulk-power system. It addresses government evaluation of AI-enabled technologies for electricity-grid operations.", "stage": "advancing", "cats": [ "gov-use" ], "secs": [ "infra" ], "date": "2026-07-21", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9339/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9326", "jur": "US", "level": "national", "num": "HB9326", "title": "HB 9326: USA Act (Utilize Standards for All Act)", "sum": "The bill directs the National Institute of Standards and Technology and the Department of State to promote United States participation in developing technical standards and specifications for artificial intelligence and other critical and emerging technologies.", "stage": "advancing", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-07-21", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9326/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8747", "jur": "US", "level": "national", "num": "HB8747", "title": "HB8747: K–12 AI Literacy and Readiness Act of 2026", "sum": "The bill would amend the Elementary and Secondary Education Act to allow certain curriculum expenses related to K–12 artificial intelligence literacy and readiness as permissible uses of federal education funds. It was ordered reported with amendments.", "stage": "advancing", "cats": [ "education" ], "secs": [], "date": "2026-07-21", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8747/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB6529", "jur": "US", "level": "national", "num": "HB6529", "title": "HB 6529: Protecting Families from AI Data Center Energy Costs Act", "sum": "The bill would require the Federal Energy Regulatory Commission to hold a technical conference on protecting residential ratepayers from increased electricity costs associated with large loads, including data centers. It addresses the energy and grid-cost impacts of data-center infrastructure.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-21", "url": "https://www.congress.gov/bill/119th-congress/house-bill/6529/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9777", "jur": "US", "level": "national", "num": "HB9777", "title": "HB9777: Protecting Ratepayers Act", "sum": "Requires new and existing data centers to use off-grid power and water supplies. It is aimed at limiting the impact of data-center operations on utility ratepayers and public water systems.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-20", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9777/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:JP:第221回閣法54号", "jur": "JP", "level": "national", "num": "第221回閣法54号", "title": "Bill No. 54 of the 221st Diet: Bill to Partially Amend the Act on the Protection of Personal Information and Other Acts", "sum": "The bill amends Japan’s personal-information protection framework, including rules governing the use, provision, and protection of personal data relevant to data-intensive technologies such as AI. It also revises related institutional and enforcement provisions.", "stage": "passed", "cats": [ "privacy", "governance" ], "secs": [], "date": "2026-07-17", "url": "https://www.sangiin.go.jp/japanese/joho1/kousei/gian/221/meisai/m221080221054.htm", "instrument_type": "law", "binding_status": "binding", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:JP:第221回閣法53号", "jur": "JP", "level": "national", "num": "第221回閣法53号", "title": "Diet Bill No. 53 of the 221st Session: Bill to Partially Amend the Act on Promotion of Administration Using Information and Communications Technology and the Act on Promotion of Information Processing", "sum": "The bill updates Japan’s legal framework for ICT-enabled public administration and information-processing policy, including measures supporting the government’s promotion and use of artificial-intelligence-related technologies. It also expands the institutional basis for public-sector digital and AI capabilities.", "stage": "passed", "cats": [ "gov-use", "governance" ], "secs": [], "date": "2026-07-17", "url": "https://www.sangiin.go.jp/japanese/joho1/kousei/gian/221/meisai/m221080221053.htm", "instrument_type": "law", "binding_status": "binding", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4701/2026", "jur": "BR", "level": "national", "num": "PL 4701/2026", "title": "PL 4701/2026: Bill Ensuring Citizens’ Right to Human Review and a Minimum Explanation of Administrative Decisions Made by Automated Systems or Standardized Protocols", "sum": "The bill would give citizens the right to human review and a minimum explanation for administrative decisions made by automated systems or standardized protocols. It directly addresses automated decision-making in public administration.", "stage": "introduced", "cats": [ "governance", "gov-use", "anti-discrimination" ], "secs": [], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2641396", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4695/2026", "jur": "BR", "level": "national", "num": "PL 4695/2026", "title": "Criminalizing Nonconsensual Synthetic Sexual Content", "sum": "Prohibits the creation, solicitation, dissemination, and facilitation of non-consensual synthetic sexual content depicting an identifiable person. It establishes criminal offenses and aggravating factors, and imposes prevention, removal, administrative-sanction, and emergency-response duties on application and digital-service providers.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2641390", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4692/2026", "jur": "BR", "level": "national", "num": "PL 4692/2026", "title": "Citizen Rights in Automated Government Decisions", "sum": "The bill establishes citizens’ safeguards for the use of automated systems by Brazil’s public administration, including the right to challenge data used in automated decisions and a ban on permanent automatic administrative blocks without human review.", "stage": "introduced", "cats": [ "governance", "gov-use", "anti-discrimination" ], "secs": [], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2641387", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4548/2026", "jur": "BR", "level": "national", "num": "PL 4548/2026", "title": "PL 4548/2026: National Policy on Algorithmic Transparency in Essential Services for Older Persons", "sum": "The bill establishes a national policy governing the use of automated systems and algorithms in essential services for older persons, including rights to transparency, human oversight, and protection against technological discrimination. It also creates supervision and accountability mechanisms for such systems.", "stage": "introduced", "cats": [ "governance", "anti-discrimination", "disclosures" ], "secs": [], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2641236", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4508/2026", "jur": "BR", "level": "national", "num": "PL 4508/2026", "title": "PL 4508/2026: Establishes the National Policy on Intelligent Technologies for Diabetes Mellitus Treatment", "sum": "The bill would establish a national policy within Brazil’s Unified Health System (SUS) to integrate continuous monitoring, telehealth assistance, predictive intelligence, and automated glucose-control technologies into diabetes treatment. It also sets related implementation guidelines.", "stage": "introduced", "cats": [ "healthcare" ], "secs": [ "health" ], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2641196", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4479/2026", "jur": "BR", "level": "national", "num": "PL 4479/2026", "title": "PL 4479/2026: National Policy for Protecting Brazilian Technological Autonomy", "sum": "The bill establishes a national policy for technological autonomy, including strategic artificial intelligence, protection of critical digital infrastructure, computational resilience, sovereignty over critical data, and cloud computing of national interest. It sets broad guidelines for national technological sovereignty and related safeguards.", "stage": "introduced", "cats": [ "governance", "frontier", "privacy" ], "secs": [ "infra" ], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2641166", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4401/2026", "jur": "BR", "level": "national", "num": "PL 4401/2026", "title": "PL 4401/2026: Establishes the National Policy for Strategic Data Centers and Other Provisions", "sum": "The bill establishes a national policy for strategic data centers in Brazil and provides related measures. The available description does not specify the policy's requirements, incentives, or infrastructure standards.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2641088", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4400/2026", "jur": "BR", "level": "national", "num": "PL 4400/2026", "title": "PL 4400/2026: National Data Governance Policy for Artificial Intelligence", "sum": "The bill establishes a National Data Governance Policy for Artificial Intelligence and provides related measures. Its detailed provisions are not specified in the available description.", "stage": "introduced", "cats": [ "governance", "privacy" ], "secs": [], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2641087", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4398/2026", "jur": "BR", "level": "national", "num": "PL 4398/2026", "title": "PL 4398/2026: Strategic Computational Capacity National Policy", "sum": "Establishes Brazil’s National Policy for Strategic Computational Capacity and sets guidelines to strengthen national computational sovereignty. The bill addresses strategic computing infrastructure and related national policy measures.", "stage": "introduced", "cats": [ "governance", "data-centers" ], "secs": [ "infra" ], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2641085", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4393/2026", "jur": "BR", "level": "national", "num": "PL 4393/2026", "title": "PL 4393/2026: National Policy for Transparency of Automated Financial Decisions", "sum": "The bill establishes a National Policy for Transparency of Automated Financial Decisions and sets guidelines for the use of automated systems within Brazil’s National Financial System. It would address transparency obligations for financial decisions made or supported by automated systems.", "stage": "introduced", "cats": [ "governance", "consumer-financial", "disclosures" ], "secs": [ "finserv" ], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2641080", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4392/2026", "jur": "BR", "level": "national", "num": "PL 4392/2026", "title": "Consumer Protection in Automated Financial Decisions", "sum": "Establishes a National Consumer Protection Policy for Automated Financial Decisions and sets guidelines for the responsible use of automated systems in the provision of financial services.", "stage": "introduced", "cats": [ "governance", "consumer-financial" ], "secs": [ "finserv", "consumer" ], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2641079", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4391/2026", "jur": "BR", "level": "national", "num": "PL 4391/2026", "title": "Bill No. 4391/2026", "sum": "Establishes a National Algorithmic Governance Policy for Brazil’s National Financial System and sets guidelines for the responsible use of algorithmic systems in high-impact financial activities.", "stage": "introduced", "cats": [ "governance", "consumer-financial" ], "secs": [ "finserv" ], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2641078", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4389/2026", "jur": "BR", "level": "national", "num": "PL 4389/2026", "title": "PL 4389/2026: Legal Framework for the Rights of Financial Intelligence Users and Responsible Financial Innovation", "sum": "The bill establishes a legal framework for users' rights concerning financial intelligence and responsible financial innovation, including principles governing the use of intelligent systems in Brazil's National Financial System. It would regulate AI-related practices in the financial sector.", "stage": "introduced", "cats": [ "governance", "consumer-financial" ], "secs": [ "finserv" ], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2641073", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4388/2026", "jur": "BR", "level": "national", "num": "PL 4388/2026", "title": "PL 4388/2026: National Policy for Algorithmic Transparency and Governance in Public Services and High-Impact Automated Decisions", "sum": "The bill establishes a national policy for algorithmic transparency and governance in public services and high-impact automated decisions. It also provides for related measures governing the use and oversight of such systems.", "stage": "introduced", "cats": [ "governance", "gov-use", "anti-discrimination" ], "secs": [], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2641072", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4386/2026", "jur": "BR", "level": "national", "num": "PL 4386/2026", "title": "PL 4386/2026: National Policy for Artificial Intelligence Centers", "sum": "The bill establishes a National Policy for Artificial Intelligence Centers and creates the Northern Network of Artificial Intelligence Centers. It sets guidelines for AI research, innovation, talent development, and applications, prioritizing Brazil's North and the Legal Amazon.", "stage": "introduced", "cats": [ "governance" ], "secs": [ "infra" ], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2641070", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4363/2026", "jur": "BR", "level": "national", "num": "PL 4363/2026", "title": "PL 4363/2026: National Sovereign Cloud Computing Policy for the Northern Region", "sum": "The bill establishes a national policy for sovereign cloud computing in Brazil’s Northern Region and provides incentives for installing data-storage, processing, and security infrastructure there. It also aims to strengthen digital sovereignty, strategic connectivity, and regional technological development.", "stage": "introduced", "cats": [ "governance", "data-centers" ], "secs": [ "infra" ], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2641047", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4302/2026", "jur": "BR", "level": "national", "num": "PL 4302/2026", "title": "PL 4302/2026: National Law on Transparency, Algorithmic Governance, Prevention of Discrimination, and Protection of Rights in Automated Decision-Making Systems", "sum": "The bill establishes national rules for transparency and governance of automated decision-making systems, aimed at preventing discrimination and protecting individual rights. It also amends Brazil’s General Data Protection Law (Law No. 13,709/2018).", "stage": "introduced", "cats": [ "governance", "anti-discrimination", "privacy" ], "secs": [], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2640985", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4298/2026", "jur": "BR", "level": "national", "num": "PL 4298/2026", "title": "PL 4298/2026: Bill on Protecting Image Rights and Biometric Data Against the Use of Artificial Intelligence Systems", "sum": "The bill would protect natural persons’ image rights and biometric data in connection with the use of artificial intelligence systems and amend Brazil’s General Data Protection Law (Law No. 13,709/2018).", "stage": "introduced", "cats": [ "privacy", "deepfakes" ], "secs": [ "media" ], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2640981", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4274/2026", "jur": "BR", "level": "national", "num": "PL 4274/2026", "title": "Court Protection Against Malicious Artificial Intelligence Instructions", "sum": "Amends Brazil's Code of Civil Procedure to classify the insertion of hidden commands, malicious instructions, or mechanisms for manipulating artificial intelligence in court documents as an act offending the dignity of the courts. The measure targets adversarial or deceptive use of AI-related instructions in judicial proceedings.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2640954", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4272/2026", "jur": "BR", "level": "national", "num": "PL 4272/2026", "title": "Fraudulent Manipulation of Artificial Intelligence in Justice Administration", "sum": "The bill amends Brazil’s Penal Code to establish the crime of fraudulently manipulating artificial-intelligence and automated-processing systems used in the administration of justice. It would criminalize interference with AI-enabled or automated judicial-administration systems.", "stage": "introduced", "cats": [ "governance", "public-safety" ], "secs": [], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2640952", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4177/2026", "jur": "BR", "level": "national", "num": "PL 4177/2026", "title": "Enhanced Penalties for AI-Enabled Defamation Crimes", "sum": "Amends Brazil’s Penal Code to increase penalties for crimes against honor committed using artificial intelligence or hyper-realistic digital manipulation technologies. The measure targets AI-enabled defamatory or otherwise reputation-damaging content.", "stage": "introduced", "cats": [ "deepfakes", "public-safety" ], "secs": [ "media" ], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2640857", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4022/2026", "jur": "BR", "level": "national", "num": "PL 4022/2026", "title": "Artificial Intelligence and Remote Sensing for Environmental Monitoring", "sum": "This bill would amend Brazil’s Forest Code to establish guidelines for using artificial intelligence and remote sensing in environmental monitoring. It also provides for related measures concerning the implementation and oversight of that monitoring.", "stage": "introduced", "cats": [ "governance", "gov-use", "public-safety" ], "secs": [], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2640697", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3982/2026", "jur": "BR", "level": "national", "num": "PL 3982/2026", "title": "Copyright Compensation for Artificial Intelligence Training", "sum": "Amends Brazil's Copyright Law to regulate the commercial exploitation of intellectual works used to train artificial intelligence systems, establish a right to proportional remuneration, and strengthen moral attribution rights. The bill would create copyright-related obligations for AI training and model developers using protected works.", "stage": "introduced", "cats": [ "privacy", "frontier" ], "secs": [ "media" ], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2640657", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3905/2026", "jur": "BR", "level": "national", "num": "PL 3905/2026", "title": "Protection Against Nonconsensual Synthetic Sexual Content Involving Minors", "sum": "Amends Brazil's Penal Code, Child and Adolescent Statute, and Law No. 14.811/2024 to criminalize the creation and dissemination of non-consensual synthetic sexual content, establish priority procedures for its removal, and provide support measures for child and adolescent victims.", "stage": "introduced", "cats": [ "deepfakes", "minors" ], "secs": [ "media", "consumer" ], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2640580", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3877/2026", "jur": "BR", "level": "national", "num": "PL 3877/2026", "title": "PL 3877/2026: Bill on Transparency, Auditability, and Non-Discrimination of Automated Systems in Employment Relations", "sum": "The bill would establish transparency, auditability, and non-discrimination requirements for automated systems used in employment relationships. It would also amend Brazil’s Consolidation of Labor Laws to protect workers’ mental and physical health from digital risks.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination", "disclosures" ], "secs": [ "hr" ], "date": "2026-07-17", "url": "https://www.camara.leg.br/propostas-legislativas/2640552", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB5028", "jur": "US", "level": "national", "num": "SB5028", "title": "SB5028 Ratepayer Protection Act", "sum": "The bill would amend the Public Utility Regulatory Policies Act of 1978 to establish a federal standard requiring large-load customers to recover the full incremental costs of utility upgrades needed to serve them.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-16", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/5028/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9757", "jur": "US", "level": "national", "num": "HB9757", "title": "HB9757: Conversational AI Services Act", "sum": "The bill would establish requirements and guidelines for conversational artificial intelligence services. The available description does not specify the particular obligations, but the bill directly regulates conversational AI services.", "stage": "introduced", "cats": [ "governance", "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-07-16", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9757/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9734", "jur": "US", "level": "national", "num": "HB9734", "title": "HB9734: Protecting Patients from Automated Denials Act", "sum": "The bill would amend the Social Security Act to establish requirements governing Medicare Advantage organizations’ use of artificial intelligence in prior-authorization denials. It targets automated decisions that can restrict or deny patients’ coverage for care.", "stage": "introduced", "cats": [ "healthcare", "consumer-financial" ], "secs": [ "health" ], "date": "2026-07-16", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9734/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9729", "jur": "US", "level": "national", "num": "HB9729", "title": "HB9729: Human Authority over Autonomous Weapons Act of 2026", "sum": "The bill would require the Secretary of Defense to ensure that autonomous weapons systems and artificial-intelligence-enabled systems used by the Armed Forces remain subject to appropriate levels of human command responsibility. It would amend Title 10 of the United States Code.", "stage": "advancing", "cats": [ "gov-use", "governance" ], "secs": [], "date": "2026-07-16", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9729/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 490/2026", "jur": "BR", "level": "national", "num": "PL 490/2026", "title": "Bill 490/2026: Authorizes the Federal Government to Adopt Measures to Promote the Supply of Clean and Competitive Energy for Data Centers in the North and Northeast Regions, Establishes the “Regional Green Data Center” Seal, and Provides Other Measures", "sum": "The bill authorizes federal incentives and other instruments to support clean, competitively priced energy supplies for data centers located in Brazil’s North and Northeast regions. It also creates a “Regional Green Data Center” certification seal.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-16", "url": "https://www.camara.leg.br/propostas-legislativas/2602594", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9715", "jur": "US", "level": "national", "num": "HB9715", "title": "HB9715: Intelligent Arbitration Act of 2026", "sum": "The bill would permit the use of artificial intelligence in arbitration proceedings and address related matters. The available description does not specify particular safeguards, disclosure requirements, or liability rules.", "stage": "introduced", "cats": [ "governance", "consumer-financial" ], "secs": [], "date": "2026-07-15", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9715/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 6322", "jur": "MX", "level": "national", "num": "Expediente 6322", "title": "Expediente 6322: Initiative proposing a decree to amend Article 73 of the Political Constitution of the United Mexican States (on the regulation of artificial intelligence)", "sum": "The initiative would amend Article 73 of Mexico’s Constitution concerning federal authority to regulate artificial intelligence. It was introduced by Deputy Óscar Iván Brito Zapata of Morena and referred to the Committee on Constitutional Points.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-07-15", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/jul/20260715.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CN:令第21号", "jur": "CN", "level": "national", "num": "令第21号", "title": "Order No. 21: Interim Measures for the Management of Artificial Intelligence Anthropomorphic Interactive Services", "sum": "This in-force Chinese administrative measure establishes rules for the development and provision of AI services that simulate human-like interaction. It aims to standardize applications, protect national security and the public interest, and safeguard the rights of individuals, organizations, and minors under existing cybersecurity, data-security, personal-information, and minors’ online-protection laws.", "stage": "passed", "cats": [ "governance", "minors", "privacy" ], "secs": [ "consumer" ], "date": "2026-07-15", "url": "https://www.cac.gov.cn/2026-04/10/c_1777558395078289.htm", "instrument_type": "final_measure", "binding_status": "binding", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4621/2025", "jur": "BR", "level": "national", "num": "PL 4621/2025", "title": "Sovereign and Artificial Intelligence Funds Financed by Equatorial Margin Revenues", "sum": "Allocates a share of public revenues from oil and natural-gas exploration in Brazil’s Equatorial Margin to environmental protection, health, education, and technology investments. It also creates the Brazilian Sovereign Fund for the Future and the National Fund for the Development of Brazilian Artificial Intelligence.", "stage": "advancing", "cats": [ "governance", "frontier" ], "secs": [ "health", "infra" ], "date": "2026-07-15", "url": "https://www.camara.leg.br/propostas-legislativas/2561378", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3743/2026", "jur": "BR", "level": "national", "num": "PL 3743/2026", "title": "PL 3743/2026: Legal Framework for Algorithmic Transparency in Tax Administration", "sum": "The bill establishes governance rules for using artificial intelligence and automated decision-making systems in tax enforcement, including human oversight, transparency, auditing, accountability, and taxpayer rights.", "stage": "introduced", "cats": [ "governance", "gov-use", "disclosures" ], "secs": [], "date": "2026-07-15", "url": "https://www.camara.leg.br/propostas-legislativas/2639860", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4958", "jur": "US", "level": "national", "num": "SB4958", "title": "SB4958: Safeguard Kids Act", "sum": "The bill would amend the Elementary and Secondary Education Act to enable schools to teach elementary and secondary students about the dangers, limitations, and responsible use of artificial intelligence technologies.", "stage": "introduced", "cats": [ "education", "minors" ], "secs": [ "consumer" ], "date": "2026-07-14", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4958/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9686", "jur": "US", "level": "national", "num": "HB9686", "title": "HB 9686: FARM AI Act of 2026 (Fostering Agricultural Research and Modernization through Artificial Intelligence Act of 2026)", "sum": "The bill would expand access to artificial intelligence through programs administered by the U.S. Department of Agriculture, supporting the use of AI in agricultural research and modernization. It was introduced and referred to the House Committee on Agriculture.", "stage": "introduced", "cats": [ "gov-use", "governance" ], "secs": [], "date": "2026-07-14", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9686/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Opinion of the United Committees on Education, Science, Technology, Innovation, and Artificial Intelligence", "sum": "A legislative committee opinion concerning initiatives considered by Mexico’s united committees on education, science, technology, innovation, and artificial intelligence. The available record does not provide sufficient detail to identify the specific policy or legal changes proposed.", "stage": "introduced", "cats": [ "governance", "education" ], "secs": [ "media" ], "date": "2026-07-14", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/jul/20260714.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3695/2026", "jur": "BR", "level": "national", "num": "PL 3695/2026", "title": "PL 3695/2026: Bill to criminalize fraudulent manipulation of an artificial intelligence system", "sum": "The bill would amend Brazil’s Penal Code to establish a criminal offense for the fraudulent manipulation of an artificial intelligence system and provide related measures. The available description does not specify the proposed offense’s elements or penalties.", "stage": "introduced", "cats": [ "governance", "public-safety" ], "secs": [], "date": "2026-07-14", "url": "https://www.camara.leg.br/propostas-legislativas/2639491", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9655", "jur": "US", "level": "national", "num": "HB9655", "title": "HB9655 FAIR Data Act (Fair Allocation of Infrastructure Responsibility for Data Act)", "sum": "The bill would amend the Public Utility Regulatory Policies Act of 1978 to prohibit certain electric utilities from recovering data-center-related costs from other customers. It addresses the allocation of electricity infrastructure costs associated with data centers.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-13", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9655/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:336643", "jur": "DE", "level": "national", "num": "336643", "title": "Act to Accelerate Implementation of the Energy Efficiency Directive", "sum": "The bill implements the revised EU Energy Efficiency Directive and changes national energy-efficiency requirements. It specifically regulates data centers, including efficiency standards and cost-benefit analyses for using unavoidable waste heat.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-10", "url": "https://dip.bundestag.de/vorgang/vorgang/336643", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:331110", "jur": "DE", "level": "national", "num": "331110", "title": "Act Implementing Regulation (EU) 2024/1689 on Artificial Intelligence (AI Regulation Implementation Act)", "sum": "The enacted law establishes Germany’s framework for implementing the EU AI Act, including competent authorities, market surveillance and notification responsibilities for high-risk AI systems, a Federal Network Agency coordination and competence center, an AI regulatory sandbox, complaint procedures, fines, and related amendments to sectoral laws. It designates the Federal Network Agency as the central contact point and assigns it responsibilities for market oversight and innovation support.", "stage": "passed", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-07-10", "url": "https://dip.bundestag.de/vorgang/vorgang/331110", "instrument_type": "bill", "binding_status": "binding", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9632", "jur": "US", "level": "national", "num": "HB9632", "title": "HB9632: Accelerating Innovation (AI) for Kids with Cancer Act", "sum": "The bill would coordinate federal efforts to use advanced technologies, including artificial intelligence, to improve the diagnosis, treatment, cure, and prevention of pediatric cancer. It focuses on applying AI and related technologies to pediatric oncology research and care.", "stage": "introduced", "cats": [ "healthcare", "gov-use" ], "secs": [ "health" ], "date": "2026-07-09", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9632/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9629", "jur": "US", "level": "national", "num": "HB9629", "title": "HB9629: Protecting Communities from Data Center Impacts Act of 2026", "sum": "The bill would require assessments of the environmental and public health effects of data centers. It is intended to inform consideration of data-center impacts and related policy decisions.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-07-09", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9629/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9619", "jur": "US", "level": "national", "num": "HB9619", "title": "HB9619: To Require Artificial Intelligence Chatbot Providers to Provide Data Privacy and Security, and for Other Purposes", "sum": "The bill would impose data privacy and security requirements on providers of artificial intelligence chatbots. The available description does not specify the particular safeguards, covered data, or compliance obligations.", "stage": "introduced", "cats": [ "privacy", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-07-09", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9619/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3615/2026", "jur": "BR", "level": "national", "num": "PL 3615/2026", "title": "Artificial Intelligence in Digital Education", "sum": "The bill would amend Brazil’s National Education Guidelines and Framework Law to explicitly include artificial intelligence in the focus of digital education for primary and secondary schooling. It proposes adding AI as a specified subject area in the digital-education curriculum framework.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-07-09", "url": "https://www.camara.leg.br/propostas-legislativas/2638506", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:EU:Regulation (EU) 2026/1744", "jur": "EU", "level": "national", "num": "Regulation (EU) 2026/1744", "title": "Regulation (EU) 2026/1744: Digital Omnibus on AI", "sum": "This adopted EU regulation amends the AI Act and related sectoral regulations to simplify the implementation of harmonised artificial-intelligence rules. It concerns the practical application of the EU's overarching AI regulatory framework.", "stage": "passed", "cats": [ "governance" ], "secs": [], "date": "2026-07-08", "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32026R1744", "instrument_type": "adopted_act", "binding_status": "binding", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:336994", "jur": "DE", "level": "national", "num": "336994", "title": "No to Biometric Mass Recognition Systems", "sum": "A parliamentary motion opposing the deployment of biometric mass-recognition systems, such as large-scale facial-recognition surveillance. It seeks policy or legislative action to prevent or restrict such systems.", "stage": "advancing", "cats": [ "public-safety", "privacy" ], "secs": [], "date": "2026-07-08", "url": "https://dip.bundestag.de/vorgang/vorgang/336994", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:334557", "jur": "DE", "level": "national", "num": "334557", "title": "Act Amending the Code of Criminal Procedure – Digital Investigative Measures", "sum": "The bill would authorize automated matching of biometric data from criminal proceedings against publicly accessible information on the internet, as well as cross-case data analysis using automated data-processing applications. It would add new sections 98d and 98e to the Code of Criminal Procedure and amend section 101, including a regulatory authorization.", "stage": "advancing", "cats": [ "public-safety", "privacy" ], "secs": [], "date": "2026-07-08", "url": "https://dip.bundestag.de/vorgang/vorgang/334557", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CN:人社部发〔2026〕40号", "jur": "CN", "level": "national", "num": "人社部发〔2026〕40号", "title": "Implementation Opinions on Accelerating the Development of “Artificial Intelligence + Human Resources and Social Security” Applications (Ministry of Human Resources and Social Security Document No. 40 of 2026)", "sum": "This administrative policy document sets out measures to accelerate the application of artificial intelligence in human-resources and social-security services. It is jointly issued by the Ministry of Human Resources and Social Security, the National Development and Reform Commission, the Ministry of Industry and Information Technology, and the National Data Administration.", "stage": "advancing", "cats": [ "gov-use", "hiring" ], "secs": [ "hr" ], "date": "2026-07-08", "url": "https://www.gov.cn/zhengce/zhengceku/202607/content_7074732.htm", "instrument_type": "final_measure", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4348/2025", "jur": "BR", "level": "national", "num": "PL 4348/2025", "title": "Bill 4348/2025", "sum": "Amends Law No. 13,819 of April 26, 2019, to require preventive alerts from chatbots and artificial intelligence systems during interactions involving mental health, self-harm, or suicide. The alerts are intended to provide warnings and promote preventive assistance in high-risk interactions.", "stage": "advancing", "cats": [ "healthcare", "disclosures" ], "secs": [ "health", "consumer" ], "date": "2026-07-08", "url": "https://www.camara.leg.br/propostas-legislativas/2555351", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4089/2024", "jur": "BR", "level": "national", "num": "PL 4089/2024", "title": "Bill 4089/2024", "sum": "The bill protects consumer rights in the use of products and services that employ artificial intelligence. It establishes guidelines for transparency, fairness, and respect for users’ privacy.", "stage": "advancing", "cats": [ "consumer-financial", "disclosures", "privacy" ], "secs": [ "consumer" ], "date": "2026-07-08", "url": "https://www.camara.leg.br/propostas-legislativas/2464691", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3560/2026", "jur": "BR", "level": "national", "num": "PL 3560/2026", "title": "PL 3560/2026: Bill Establishing Mandatory Algorithmic Transparency Audits in the Federal Public Administration", "sum": "The bill would require transparency audits for automated systems used by Brazil’s federal public administration to make administrative decisions affecting citizens’ rights. It establishes requirements for transparency, auditability, and explainability.", "stage": "introduced", "cats": [ "governance", "gov-use", "anti-discrimination" ], "secs": [], "date": "2026-07-08", "url": "https://www.camara.leg.br/propostas-legislativas/2638224", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 2426/2026", "jur": "BR", "level": "national", "num": "PL 2426/2026", "title": "Enhanced Penalties for AI-Assisted Fraud", "sum": "Amends Article 171 of the Penal Code to establish an increased penalty for fraud committed using artificial intelligence. The bill has been attached for joint consideration to PL 93/2024.", "stage": "advancing", "cats": [ "consumer-financial" ], "secs": [], "date": "2026-07-08", "url": "https://www.camara.leg.br/propostas-legislativas/2625204", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1465/2024", "jur": "BR", "level": "national", "num": "PL 1465/2024", "title": "Bill 1465/2024", "sum": "Establishes principles, guarantees, rights, and duties governing the development, implementation, and use of artificial intelligence in Brazil. It seeks to promote the safe, ethical, and responsible use of AI.", "stage": "advancing", "cats": [ "governance", "anti-discrimination", "privacy" ], "secs": [], "date": "2026-07-08", "url": "https://www.camara.leg.br/propostas-legislativas/2430325", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9566", "jur": "US", "level": "national", "num": "HB9566", "title": "HB9566: Pilot Program for Artificial Intelligence Anomaly Detection at Arizona Land Ports of Entry", "sum": "The bill would establish a U.S. Customs and Border Protection pilot program at land ports of entry along the Arizona border to assess the use of artificial intelligence and anomaly-detection algorithms. It also addresses related implementation requirements.", "stage": "introduced", "cats": [ "gov-use", "public-safety" ], "secs": [], "date": "2026-07-07", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9566/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:EU:COM(2026) 577", "jur": "EU", "level": "national", "num": "COM(2026) 577", "title": "COM(2026) 577: Action Plan on Cybersecurity and Artificial Intelligence", "sum": "The European Commission’s action plan sets out policy and supporting measures to strengthen the cybersecurity of artificial intelligence systems and to use AI to improve cybersecurity capabilities. It serves as a roadmap for future EU initiatives and coordination in these areas.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-07-07", "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:52026DC0577", "instrument_type": "plan_item", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 6586/2025", "jur": "BR", "level": "national", "num": "PL 6586/2025", "title": "PL 6586/2025: Bill on Transparency and Explanations for Automated Decision Systems in Consumer Relations", "sum": "The bill would require transparency, explanations, and access to information about automated decision-making systems used in consumer relationships. It also provides for related measures governing disclosures about such systems.", "stage": "advancing", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-07-07", "url": "https://www.camara.leg.br/propostas-legislativas/2598626", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:EU:COM(2026) 502", "jur": "EU", "level": "national", "num": "COM(2026) 502", "title": "COM(2026) 502: Cloud and AI Development Act", "sum": "The European Commission proposes an act to expand Europe’s cloud and AI infrastructure capacity by supporting research and innovation, greening compute infrastructure and data centers, facilitating private investment, and tripling EU data-processing capacity within five to seven years.", "stage": "advancing", "cats": [ "data-centers", "frontier" ], "secs": [ "infra" ], "date": "2026-07-03", "url": "https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/14628", "instrument_type": "proposal", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 2435/2026", "jur": "BR", "level": "national", "num": "PL 2435/2026", "title": "PL 2435/2026: Establishes the National System for Preventing and Addressing Digital Violence Against Women and Girls", "sum": "The bill would establish a national system to combat digital violence against women and girls and amend the Criminal Code and Code of Criminal Procedure to define and regulate evidence involving non-consensual intimate content generated by artificial intelligence or digital manipulation.", "stage": "advancing", "cats": [ "deepfakes", "privacy", "public-safety" ], "secs": [ "consumer" ], "date": "2026-07-03", "url": "https://www.camara.leg.br/propostas-legislativas/2625435", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9578", "jur": "US", "level": "national", "num": "HB9578", "title": "HB9578: Spot the Fakes Act", "sum": "Requires AI-generated content to be labeled as AI-generated through metadata embedded in the output or other technological means. The bill also authorizes related measures for implementing the labeling requirement.", "stage": "introduced", "cats": [ "disclosures" ], "secs": [ "media" ], "date": "2026-07-02", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9578/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:336850", "jur": "DE", "level": "national", "num": "336850", "title": "Make Europe an AI Hub – Strengthen Our Economy, Enable Innovation, Secure Digital Sovereignty", "sum": "The parliamentary motion proposes policy measures to establish Europe as a leading location for artificial intelligence, promote economic strength and innovation, and reinforce digital sovereignty. Specific legislative measures are not detailed in the provided record.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-07-02", "url": "https://dip.bundestag.de/vorgang/vorgang/336850", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 2543/2026", "jur": "BR", "level": "national", "num": "PL 2543/2026", "title": "Combating Malicious Prompt Injection in Judicial and Administrative AI Systems", "sum": "The bill establishes measures to prevent, identify, prohibit, and punish prompt-injection attacks and other malicious manipulation of artificial intelligence systems used in judicial or administrative proceedings. It also adds Article 347-A to Brazil’s Penal Code to criminalize the conduct.", "stage": "advancing", "cats": [ "governance", "public-safety" ], "secs": [], "date": "2026-07-02", "url": "https://www.camara.leg.br/propostas-legislativas/2626607", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 177/2024", "jur": "BR", "level": "national", "num": "PL 177/2024", "title": "PL 177/2024: Campaign to Raise Awareness and Prevent Cybercrimes Against Children and Adolescents Committed Through Misuse of Artificial Intelligence", "sum": "The bill establishes a public awareness and prevention campaign addressing cybercrimes against children and adolescents involving the misuse of artificial intelligence. It focuses on education and prevention of AI-enabled online harms to minors.", "stage": "advancing", "cats": [ "minors", "public-safety" ], "secs": [ "consumer" ], "date": "2026-07-02", "url": "https://www.camara.leg.br/propostas-legislativas/2417362", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1254/2026", "jur": "BR", "level": "national", "num": "PL 1254/2026", "title": "Regulating Artificial Intelligence Technologies in Healthcare", "sum": "Amends Brazil’s Organic Health Law to regulate the application of artificial intelligence technologies in healthcare and prohibit tools that realistically simulate the actions of healthcare professionals.", "stage": "advancing", "cats": [ "healthcare" ], "secs": [ "health" ], "date": "2026-07-02", "url": "https://www.camara.leg.br/propostas-legislativas/2610302", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:AE:National AI Security Policy", "jur": "AE", "level": "national", "num": "National AI Security Policy", "title": "UAE National AI Security Policy", "sum": "The policy sets minimum security expectations for AI adoption, covering governance, inventories, secure development, model and data protection, human oversight, resilience, monitoring, incident response, and adversarial attacks.", "stage": "passed", "cats": [ "governance", "privacy", "frontier" ], "secs": [], "date": "2026-07-02", "url": "https://u.ae/en/about-the-uae/strategies-initiatives-and-awards/policies/cyber-activities/The-National-Cyber-Security-Policy-for-Artificial-Intelligence", "instrument_type": "policy", "binding_status": "policy", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9501", "jur": "US", "level": "national", "num": "HB9501", "title": "HB9501: AI Tax Integrity Act of 2026", "sum": "The bill would require the Comptroller General to report to Congress on how artificial intelligence could help the Internal Revenue Service detect tax fraud. It focuses on evaluating potential government use of AI in tax enforcement rather than authorizing a specific AI system.", "stage": "advancing", "cats": [ "gov-use", "governance" ], "secs": [], "date": "2026-07-01", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9501/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:336849", "jur": "DE", "level": "national", "num": "336849", "title": "Secure Germany’s Borders Effectively: Introduce AI Border Protection Now (336849)", "sum": "A parliamentary motion calling for the introduction of artificial intelligence systems for more effective protection of Germany’s borders. The available information does not specify the particular AI technologies or legal measures proposed.", "stage": "introduced", "cats": [ "gov-use", "public-safety" ], "secs": [], "date": "2026-07-01", "url": "https://dip.bundestag.de/vorgang/vorgang/336849", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PLP 193/2026", "jur": "BR", "level": "national", "num": "PLP 193/2026", "title": "Expanding Brazil’s Startup Framework to Digital and Emerging Economies", "sum": "Amends Complementary Law No. 182 of June 1, 2021, to expand Brazil’s legal framework for startups and innovative entrepreneurship to cover the digital economy, artificial intelligence, the bioeconomy, and innovative public procurement.", "stage": "introduced", "cats": [ "governance", "gov-use" ], "secs": [], "date": "2026-07-01", "url": "https://www.camara.leg.br/propostas-legislativas/2636431", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 7135/2025", "jur": "BR", "level": "national", "num": "PL 7135/2025", "title": "Requiring Social and Digital Inclusion for Artificial Intelligence Tax Incentives", "sum": "Amends Brazil’s Information Technology Law to establish mandatory social and digital inclusion criteria related to artificial intelligence as a condition for receiving tax incentives. The proposal links AI-related inclusion commitments to eligibility for fiscal benefits.", "stage": "unknown", "cats": [ "governance" ], "secs": [], "date": "2026-07-01", "url": "https://www.camara.leg.br/propostas-legislativas/2599744", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 6706/2025", "jur": "BR", "level": "national", "num": "PL 6706/2025", "title": "PL 6706/2025: Amends the General Data Protection Law to establish preventive algorithmic audits", "sum": "The bill would amend Brazil’s LGPD to require preventive algorithmic audits of artificial-intelligence systems that affect decisions with high social impact. It focuses on assessing and addressing risks before such systems are deployed or used.", "stage": "dead", "cats": [ "anti-discrimination", "privacy" ], "secs": [], "date": "2026-07-01", "url": "https://www.camara.leg.br/propostas-legislativas/2599299", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 5695/2023", "jur": "BR", "level": "national", "num": "PL 5695/2023", "title": "PL 5695/2023: Criminalizing AI Alteration of Photos, Videos, and Audio to Commit Violence Against Women", "sum": "The bill would establish criminal penalties for altering photos, videos, or audio using artificial intelligence in order to perpetrate violence against women. It targets AI-generated or manipulated synthetic media used as an instrument of gender-based violence.", "stage": "advancing", "cats": [ "deepfakes", "public-safety" ], "secs": [ "media" ], "date": "2026-07-01", "url": "https://www.camara.leg.br/propostas-legislativas/2406516", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 477/2024", "jur": "BR", "level": "national", "num": "PL 477/2024", "title": "Criminalizing AI Manipulation of Images, Videos, and Audio to Abuse Women", "sum": "Criminalizes the alteration of photographs, videos, or audio using artificial intelligence systems when used to perpetrate violence against women. The bill proposes amendments to Brazil’s Penal Code.", "stage": "advancing", "cats": [ "deepfakes", "public-safety" ], "secs": [ "media" ], "date": "2026-07-01", "url": "https://www.camara.leg.br/propostas-legislativas/2418795", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4356/2025", "jur": "BR", "level": "national", "num": "PL 4356/2025", "title": "Bill 4356/2025", "sum": "Establishes general national guidelines for using artificial-intelligence-based technologies within Brazil’s Unified Public Security System (SUSP) to prevent and repress criminal offenses, protect people and property, and preserve public order while respecting fundamental rights and guarantees.", "stage": "advancing", "cats": [ "governance", "gov-use", "public-safety" ], "secs": [], "date": "2026-07-01", "url": "https://www.camara.leg.br/propostas-legislativas/2555654", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3394/2026", "jur": "BR", "level": "national", "num": "PL 3394/2026", "title": "Transparency and Accountability Requirements for AI in Legal Practice", "sum": "The bill establishes transparency, verification, evidence-retention, incident-reporting, and accountability requirements for the use of artificial intelligence in legal practice. It requires disclosure in court filings of AI use and the provider's identity, retention of prompts and outputs, graduated sanctions, data-protection and professional-secrecy safeguards, and a public training program developed with the Brazilian Bar Association.", "stage": "introduced", "cats": [ "governance", "disclosures", "privacy" ], "secs": [], "date": "2026-07-01", "url": "https://www.camara.leg.br/propostas-legislativas/2636065", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3392/2026", "jur": "BR", "level": "national", "num": "PL 3392/2026", "title": "PL 3392/2026: Minimum Security, Governance, Traceability, and Accountability Standards for Artificial Intelligence in Electronic Judicial Proceedings", "sum": "The bill establishes minimum security and governance requirements for AI used in electronic court proceedings, including input sanitization, document pre-filtering, traceability logs, staged prompting, qualified human oversight, risk assessments, periodic audits, and protections against data poisoning. It requires suspected prompt-injection incidents to be reported to the court, the National Council of Justice, and competent authorities, and provides for administrative, civil, and applicable criminal sanctions.", "stage": "introduced", "cats": [ "governance", "gov-use", "privacy" ], "secs": [], "date": "2026-07-01", "url": "https://www.camara.leg.br/propostas-legislativas/2636062", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3382/2026", "jur": "BR", "level": "national", "num": "PL 3382/2026", "title": "PL 3382/2026: Regulation of Automation, Algorithms, and Artificial Intelligence in Federal Regulatory Enforcement", "sum": "The bill regulates the use of automation, algorithms, and AI by federal agencies and regulatory bodies in inspections and the issuance of violation notices. It prohibits enforcement actions based solely on automated decisions, requires qualified human review, transparency, auditability, advance notice, model oversight, and annual quality reporting.", "stage": "introduced", "cats": [ "governance", "gov-use", "disclosures" ], "secs": [], "date": "2026-07-01", "url": "https://www.camara.leg.br/propostas-legislativas/2636044", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:EU:Ares(2025)10848343", "jur": "EU", "level": "national", "num": "Ares(2025)10848343", "title": "Rating Scheme for Data Centres in Europe", "sum": "This draft delegated regulation would establish a common European Union scheme for rating the sustainability and energy efficiency of data centres under the Energy Efficiency Directive. It would also simplify data-centre reporting requirements introduced by Delegated Regulation (EU) 2024/1364.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-30", "url": "https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/16035", "instrument_type": "delegated_act", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3367/2026", "jur": "BR", "level": "national", "num": "PL 3367/2026", "title": "PL 3367/2026: Bill to Criminalize Extortion Through Synthetic Identity Simulation", "sum": "The bill amends Brazil’s Penal Code to establish extortion through the simulated synthetic identity of a person as a criminal offense and provides related measures.", "stage": "introduced", "cats": [ "deepfakes", "public-safety" ], "secs": [ "media" ], "date": "2026-06-30", "url": "https://www.camara.leg.br/propostas-legislativas/2635743", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 2721/2024", "jur": "BR", "level": "national", "num": "PL 2721/2024", "title": "Recognizing Only Individuals as Authors of AI-Assisted Works", "sum": "Amends Article 11 of Brazil’s Copyright Law to expressly provide that only a natural person may be an author, regardless of the degree of autonomy of the artificial intelligence system used to create the work.", "stage": "advancing", "cats": [ "governance" ], "secs": [ "media" ], "date": "2026-06-30", "url": "https://www.camara.leg.br/propostas-legislativas/2445849", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9506", "jur": "US", "level": "national", "num": "HB9506", "title": "HB9506: Artificial Intelligence Prize Competition Program", "sum": "The bill would amend the National Artificial Intelligence Initiative Act of 2020 to require the Director of the Office of Science and Technology Policy to establish an artificial intelligence-related prize competition program.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-06-29", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9506/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:C.2992", "jur": "IT", "level": "national", "num": "C.2992", "title": "C.2992: Provisions establishing interdisciplinary educational pathways in lower- and upper-secondary schools to promote knowledge and responsible use of artificial intelligence systems", "sum": "The bill would establish interdisciplinary educational programs in Italian lower- and upper-secondary schools focused on understanding and using artificial intelligence systems responsibly. It was introduced by Deputy Patty L’Abbate as an ordinary bill.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-06-29", "url": "http://dati.senato.it/ddl/60252", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:AU:r7512", "jur": "AU", "level": "national", "num": "r7512", "title": "Online Safety Amendment (Strengthening Enforcement for the Social Media Minimum Age) Bill 2026", "sum": "Amends the Online Safety Act 2021 to strengthen enforcement of the social media minimum-age framework. It expands the eSafety Commissioner’s information-gathering powers and increases civil penalties for non-compliance.", "stage": "advancing", "cats": [ "minors" ], "secs": [ "consumer" ], "date": "2026-06-29", "url": "https://www.aph.gov.au/Parliamentary_Business/Bills_Legislation/Bills_Search_Results/Result?bId=r7512", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:TR:2/3744", "jur": "TR", "level": "national", "num": "2/3744", "title": "Bill No. 2/3744: Proposal to Establish an Artificial Intelligence, Automation and Social Transformation Adaptation Fund", "sum": "The bill proposes creating a fund to support adaptation to artificial intelligence, automation, and related social transformation. It was referred to parliamentary committees covering health, family, labor and social affairs, and industry, trade, energy, natural resources, information, and technology.", "stage": "advancing", "cats": [ "governance" ], "secs": [ "hr" ], "date": "2026-06-26", "url": "https://www.tbmm.gov.tr/Gundem/GelenKagitDetay/c664cd96-b3c0-4993-9cea-019f0276e350", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9477", "jur": "US", "level": "national", "num": "HB9477", "title": "HB9477: AI Incident Reporting Act", "sum": "The bill would require certain artificial intelligence model developers to submit incident reports to the Secretary of Commerce. It establishes a reporting framework for significant incidents involving covered AI models.", "stage": "introduced", "cats": [ "frontier", "governance" ], "secs": [], "date": "2026-06-25", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9477/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9381", "jur": "US", "level": "national", "num": "HB9381", "title": "HB9381: AWARE Act AI Workforce Assessment and Research Enhancement Act", "sum": "Directs the Bureau of Labor Statistics to assess and report on the use of artificial intelligence in the workplace. The report would support analysis of AI’s effects on employment and workforce trends.", "stage": "advancing", "cats": [ "hiring" ], "secs": [ "hr" ], "date": "2026-06-25", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9381/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9372", "jur": "US", "level": "national", "num": "HB9372", "title": "HB9372: Data Infrastructure Energy Measurement and Standards Act", "sum": "The bill directs the National Institute of Standards and Technology to develop best practices for measuring data-center energy use and to study data availability for improving energy-demand forecasting. It addresses data-center infrastructure and electricity demand measurement.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-25", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9372/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9363", "jur": "US", "level": "national", "num": "HB9363", "title": "HB9363: AI Security and Innovation Act", "sum": "The bill would amend the National Artificial Intelligence Initiative Act of 2020 to establish a center focused on artificial intelligence research, development, and evaluation, with the goal of maintaining U.S. leadership. It addresses AI security and innovation at the national level.", "stage": "advancing", "cats": [ "frontier", "governance" ], "secs": [], "date": "2026-06-25", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9363/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9341", "jur": "US", "level": "national", "num": "HB9341", "title": "HB9341: AI-Ready Federal Data Guidelines Act", "sum": "The bill would require the National Institute of Standards and Technology to develop guidelines helping federal agencies prepare open government data assets for use in training artificial intelligence models. It addresses federal data management and AI-readiness practices.", "stage": "advancing", "cats": [ "gov-use", "governance" ], "secs": [], "date": "2026-06-25", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9341/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9334", "jur": "US", "level": "national", "num": "HB9334", "title": "HB9334: Workforce for AI Trust Act", "sum": "Amends the National Artificial Intelligence Initiative Act of 2020 to support multidisciplinary teams focused on developing and training safe and trustworthy artificial intelligence systems. The bill is intended to expand the workforce and research capacity needed for trustworthy AI.", "stage": "advancing", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-06-25", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9334/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9333", "jur": "US", "level": "national", "num": "HB9333", "title": "HB9333: AI Flaw Reporting and Security Enhancement Act", "sum": "Directs the Director of the National Institute of Standards and Technology to establish a voluntary program for reporting flaws in artificial intelligence systems and to accelerate their detection and monitoring.", "stage": "advancing", "cats": [ "frontier", "governance" ], "secs": [], "date": "2026-06-25", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9333/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8893", "jur": "US", "level": "national", "num": "HB8893", "title": "HB 8893: Protecting Consumers from Deceptive Artificial Intelligence Act", "sum": "The bill would direct the National Institute of Standards and Technology to establish task forces supporting technical standards and guidelines for identifying content created by generative artificial intelligence. It is intended to inform measures addressing deceptive AI-generated content.", "stage": "advancing", "cats": [ "governance", "disclosures" ], "secs": [ "media" ], "date": "2026-06-25", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8893/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB6461", "jur": "US", "level": "national", "num": "HB6461", "title": "HB6461: READ AI Models Act: Resources for Evaluating and Documenting AI Models", "sum": "The bill directs the National Institute of Standards and Technology to develop best practices and technical guidance for evaluating and documenting artificial intelligence models.", "stage": "advancing", "cats": [ "governance", "disclosures" ], "secs": [], "date": "2026-06-25", "url": "https://www.congress.gov/bill/119th-congress/house-bill/6461/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB5584", "jur": "US", "level": "national", "num": "HB5584", "title": "HB5584: LIFT AI Act (Literacy in Future Technologies Artificial Intelligence Act)", "sum": "The bill would strengthen artificial-intelligence literacy education for students in kindergarten through grade 12. It proposes related educational efforts and policies for K–12 schools.", "stage": "advancing", "cats": [ "education" ], "secs": [], "date": "2026-06-25", "url": "https://www.congress.gov/bill/119th-congress/house-bill/5584/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB5351", "jur": "US", "level": "national", "num": "HB5351", "title": "HB5351: NSF AI Education Act of 2025", "sum": "The bill directs the National Science Foundation to support education, workforce development, and professional training relating to artificial intelligence. It aims to expand AI learning and skills-development programs.", "stage": "advancing", "cats": [ "education" ], "secs": [], "date": "2026-06-25", "url": "https://www.congress.gov/bill/119th-congress/house-bill/5351/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB2385", "jur": "US", "level": "national", "num": "HB2385", "title": "HB 2385: CREATE AI Act of 2025", "sum": "Establishes the National Artificial Intelligence Research Resource to provide Americans with access to AI research infrastructure, data, models, and related resources. The bill also addresses the administration and support of national AI research capabilities.", "stage": "advancing", "cats": [ "governance", "gov-use" ], "secs": [ "infra" ], "date": "2026-06-25", "url": "https://www.congress.gov/bill/119th-congress/house-bill/2385/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 2080/2025", "jur": "BR", "level": "national", "num": "PL 2080/2025", "title": "National Energy Efficiency and Sustainability Policy for Data Centers", "sum": "Establishes a National Policy for Energy Efficiency and Socioenvironmental Sustainability in Data Centers, including implementation guidelines, targets, and policy instruments. It also provides related measures for the data-center sector.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-25", "url": "https://www.camara.leg.br/propostas-legislativas/2503790", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 2067/2026", "jur": "BR", "level": "national", "num": "PL 2067/2026", "title": "PL 2067/2026: Bill establishing the National Technological Transition Fund, creating a Contribution on Automation and Artificial Intelligence, and protecting workers displaced by automation and AI", "sum": "The bill would establish the National Technological Transition Fund and create a contribution on automation and artificial intelligence. It would also provide protections and transition mechanisms for workers displaced by these technologies.", "stage": "advancing", "cats": [ "hiring" ], "secs": [ "hr" ], "date": "2026-06-25", "url": "https://www.camara.leg.br/propostas-legislativas/2619913", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4916", "jur": "US", "level": "national", "num": "SB4916", "title": "SB4916: Aging with Artificial Intelligence Act of 2026", "sum": "The bill addresses the effects of artificial intelligence-enabled systems, including AI chatbots, on older adults. Its specific regulatory or programmatic requirements are not provided in the available description.", "stage": "introduced", "cats": [ "governance" ], "secs": [ "consumer" ], "date": "2026-06-24", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4916/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4915", "jur": "US", "level": "national", "num": "SB4915", "title": "SB4915: AI Labeling Act of 2026", "sum": "The bill would require disclosures for covered content generated by artificial intelligence systems. It establishes transparency obligations for AI-generated content and related requirements.", "stage": "introduced", "cats": [ "disclosures" ], "secs": [ "media" ], "date": "2026-06-24", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4915/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4591", "jur": "US", "level": "national", "num": "SB4591", "title": "SB4591: NO FAKES Act of 2026 (Nurture Originals, Foster Art, and Keep Entertainment Safe Act)", "sum": "The bill would protect individuals’ intellectual property rights in their voice and visual likeness, including against unauthorized digital replicas and synthetic media. It would establish related rights and remedies for misuse of a person’s identity.", "stage": "advancing", "cats": [ "deepfakes" ], "secs": [ "media" ], "date": "2026-06-24", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4591/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9442", "jur": "US", "level": "national", "num": "HB9442", "title": "HB9442: Artificial Intelligence Data Center Moratorium Act", "sum": "The bill would impose a moratorium on constructing new data centers until Congress enacts legislation addressing risks posed by artificial intelligence. It has been referred to the relevant House committees for consideration.", "stage": "introduced", "cats": [ "data-centers", "governance" ], "secs": [ "infra" ], "date": "2026-06-24", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9442/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9439", "jur": "US", "level": "national", "num": "HB9439", "title": "HB9439: Voluntary Consumer AI Disclosure Pilot Act", "sum": "The bill would direct the National Institute of Standards and Technology to establish a pilot program and develop voluntary standards for private-sector disclosure of artificial intelligence use to consumers. It focuses on transparency rather than mandatory disclosure requirements.", "stage": "introduced", "cats": [ "disclosures", "governance" ], "secs": [ "consumer" ], "date": "2026-06-24", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9439/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9427", "jur": "US", "level": "national", "num": "HB9427", "title": "HB9427: Artificial Intelligence Workforce Impact Study Act of 2026", "sum": "The bill directs the Comptroller General of the United States to study how artificial intelligence affects the U.S. workforce. The study would assess workforce impacts, making employment and labor-market effects a substantive focus.", "stage": "introduced", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-06-24", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9427/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9419", "jur": "US", "level": "national", "num": "HB9419", "title": "HB9419: Power and Water for Families Act of 2026", "sum": "The bill would support responsible development of data centers and related infrastructure while protecting existing ratepayers from bearing incremental costs caused by large-load facilities. It would also encourage investment in water reuse.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-24", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9419/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8881", "jur": "US", "level": "national", "num": "HB8881", "title": "SBA Artificial Intelligence Utilization Act of 2026 (HB 8881)", "sum": "The bill would amend the Small Business Act to require the Small Business Administration Administrator to report on the agency's use of artificial intelligence and machine learning. It establishes reporting and oversight requirements for AI use within the federal agency.", "stage": "advancing", "cats": [ "gov-use", "governance" ], "secs": [], "date": "2026-06-24", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8881/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB4801", "jur": "US", "level": "national", "num": "HB4801", "title": "HB4801: Unleashing AI Innovation in Financial Services Act", "sum": "The bill would establish AI Innovation Labs allowing certain financial-services participants to experiment with artificial intelligence without expectation of enforcement actions. It creates a regulatory-sandbox-style framework for AI innovation in financial services.", "stage": "advancing", "cats": [ "governance", "consumer-financial" ], "secs": [ "finserv" ], "date": "2026-06-24", "url": "https://www.congress.gov/bill/119th-congress/house-bill/4801/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB2152", "jur": "US", "level": "national", "num": "HB2152", "title": "HB 2152: AI PLAN Act (Artificial Intelligence Practices, Logistics, Actions, and Necessities Act)", "sum": "Requires a strategy to address economic and national-security risks from using artificial intelligence to commit financial crimes, including fraud and the dissemination of misinformation.", "stage": "advancing", "cats": [ "governance", "consumer-financial" ], "secs": [ "finserv" ], "date": "2026-06-24", "url": "https://www.congress.gov/bill/119th-congress/house-bill/2152/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4855", "jur": "US", "level": "national", "num": "SB4855", "title": "SB4855: SAFE KIDS Act (Safeguarding AI Features to Ensure Kids' Informed Digital Safety Act)", "sum": "The bill would require providers of certain artificial intelligence systems to adopt child-safety-by-design measures, parental controls, and independent audits. It would also prohibit child-targeted advertising and the sale or sharing of children's personal information.", "stage": "introduced", "cats": [ "minors", "privacy", "governance" ], "secs": [ "consumer" ], "date": "2026-06-23", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4855/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:S.1821", "jur": "IT", "level": "national", "num": "S.1821", "title": "S.1821: Delegation to the Government for the Organization, Establishment, Development, and Strengthening of Data Centers", "sum": "The bill delegates authority to the Government to organize, establish, develop, and expand data-processing centers. It addresses national data-center and computing infrastructure policy.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-23", "url": "http://dati.senato.it/ddl/59943", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:S.1259", "jur": "IT", "level": "national", "num": "S.1259", "title": "S.1259: Delegation to the Government on the Organization, Expansion, and Technological Development of Data Centers", "sum": "The bill would delegate authority to the Italian Government to establish measures concerning the organization, expansion, and technological development of data-processing centers. It is currently under examination in committee.", "stage": "advancing", "cats": [ "governance", "data-centers" ], "secs": [ "infra" ], "date": "2026-06-23", "url": "http://dati.senato.it/ddl/58570", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 7550", "jur": "MX", "level": "national", "num": "Expediente 7550", "title": "Expediente 7550: Initiative proposing a decree to enact the General Law on Artificial Intelligence", "sum": "The initiative would establish a comprehensive General Law on Artificial Intelligence in Mexico. It was introduced by Deputy Laura Cristina Márquez Alcalá and other PAN lawmakers and assigned to the Science, Technology and Innovation Committee, with an opinion from the Budget and Public Accounts Committee.", "stage": "advancing", "cats": [ "governance", "frontier", "anti-discrimination" ], "secs": [], "date": "2026-06-22", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/jun/20260622.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 7543", "jur": "MX", "level": "national", "num": "Expediente 7543", "title": "Expediente 7543: Bill to amend various provisions of the Federal Criminal Code concerning sexual violence generated with artificial intelligence", "sum": "The bill would amend Mexico’s Federal Criminal Code to address sexual violence involving AI-generated content, including synthetic or manipulated sexual material. It was introduced by Deputy María Isabel Rodríguez Heredia and PAN parliamentary group members and referred to the Justice Commission.", "stage": "advancing", "cats": [ "deepfakes", "public-safety" ], "secs": [ "media" ], "date": "2026-06-22", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/jun/20260622.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 7232", "jur": "MX", "level": "national", "num": "Expediente 7232", "title": "Expediente 7232: Initiative proposing a decree to amend and add provisions to Articles 199 Octies, 199 Nonies, and 199 Decies of the Federal Criminal Code (on protecting sexual privacy against the use of artificial intelligence)", "sum": "The initiative would amend Mexico's Federal Criminal Code to strengthen protection of sexual privacy against AI-enabled abuses, such as the creation or dissemination of synthetic sexual images or other intimate content. It was introduced by Deputy Margarita Corro Mendoza of Morena and referred to the Justice Commission.", "stage": "advancing", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-06-22", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/jun/20260622.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 7201", "jur": "MX", "level": "national", "num": "Expediente 7201", "title": "Expediente 7201: Initiative proposing a decree to rename Title Nine and add Chapter III and Article 211 Bis 8 to the Federal Criminal Code (regarding the improper use of artificial intelligence and other analogous technologies)", "sum": "The initiative would amend the Federal Criminal Code to create or modify criminal-law provisions addressing the improper use of artificial intelligence and similar technologies. It was introduced by Deputy Daniel Murguía Lardizábal of Morena and referred to the Justice Commission.", "stage": "advancing", "cats": [ "governance", "public-safety" ], "secs": [ "media" ], "date": "2026-06-22", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/jun/20260622.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:330263", "jur": "DE", "level": "national", "num": "330263", "title": "Proposal for a Regulation of the European Parliament and of the Council amending Regulations (EU) 2024/1689 and (EU) 2018/1139 to simplify implementation of harmonized rules for artificial intelligence (Digital Omnibus Regulation on AI): COM(2025) 836 final; Council Doc. 15708/25", "sum": "This legislative proposal would amend the EU Artificial Intelligence Act and the aviation-safety framework to simplify and streamline the implementation of harmonized AI requirements. It is part of the EU’s Digital Omnibus package.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-06-22", "url": "https://dip.bundestag.de/vorgang/vorgang/330263", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4833", "jur": "US", "level": "national", "num": "SB4833", "title": "SB4833: No Robot Bosses Act", "sum": "The bill would prohibit employers from using certain automated decision systems in employment-related decisions. It targets automated management and decision-making practices in the workplace.", "stage": "introduced", "cats": [ "hiring", "anti-discrimination" ], "secs": [ "hr" ], "date": "2026-06-18", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4833/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4825", "jur": "US", "level": "national", "num": "SB4825", "title": "SB 4825: American A.I. Sovereign Wealth Fund Act", "sum": "The bill would amend the Internal Revenue Code to impose an excise tax on systemically important artificial intelligence activity. It would use the resulting tax framework to support a sovereign wealth fund related to AI, subject to details in the bill.", "stage": "introduced", "cats": [ "governance", "consumer-financial" ], "secs": [], "date": "2026-06-18", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4825/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9352", "jur": "US", "level": "national", "num": "HB9352", "title": "HB9352: AI-Related Job Impacts Clarity Act", "sum": "The bill would require reports examining the impacts of artificial intelligence on employment and jobs. It has been referred to the House Committee on Education and Workforce.", "stage": "introduced", "cats": [ "hiring", "governance" ], "secs": [ "hr" ], "date": "2026-06-18", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9352/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8671", "jur": "US", "level": "national", "num": "HB8671", "title": "HB8671: Bank Fraud Technology Advancement Act of 2026", "sum": "The bill would require federal banking agencies to study how advanced technologies can improve fraud detection and prevention, with particular attention to community financial institutions. The study would assess technology adoption and related policy considerations in banking.", "stage": "advancing", "cats": [ "consumer-financial", "governance" ], "secs": [ "finserv" ], "date": "2026-06-18", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8671/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CN:商建发2026年第89号", "jur": "CN", "level": "national", "num": "商建发2026年第89号", "title": "Implementation Opinions of the Ministry of Commerce and Seven Other Departments on Accelerating the Development of “Artificial Intelligence + Consumption” (Shang Jian Fa 2026 No. 89)", "sum": "The eight departments set out measures to promote the integration of artificial intelligence into consumption, including retail, services, and consumer-facing business models. The document provides national policy guidance for expanding AI-enabled consumption and improving related supporting systems.", "stage": "advancing", "cats": [ "gov-use" ], "secs": [ "consumer" ], "date": "2026-06-18", "url": "https://www.gov.cn/zhengce/zhengceku/202606/content_7072672.htm", "instrument_type": "final_measure", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 974/2026", "jur": "BR", "level": "national", "num": "PL 974/2026", "title": "PL 974/2026: Establishes Governance Criteria for Artificial Intelligence Agents", "sum": "The bill establishes governance criteria for artificial intelligence agents and amends Brazil’s Internet Civil Rights Framework and General Data Protection Law. It addresses the governance and data-protection implications of AI-agent systems.", "stage": "advancing", "cats": [ "governance", "privacy" ], "secs": [], "date": "2026-06-18", "url": "https://www.camara.leg.br/propostas-legislativas/2607218", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 904/2026", "jur": "BR", "level": "national", "num": "PL 904/2026", "title": "PL 904/2026: Establishes rules on liability, transparency, and auditability for high-impact artificial intelligence systems", "sum": "The bill establishes rules governing liability, transparency, and auditability for high-impact artificial intelligence systems, along with related measures. The available description does not provide further details on its specific obligations or enforcement mechanisms.", "stage": "advancing", "cats": [ "governance", "frontier", "disclosures" ], "secs": [], "date": "2026-06-18", "url": "https://www.camara.leg.br/propostas-legislativas/2606324", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:AR:2912-D-2026", "jur": "AR", "level": "national", "num": "2912-D-2026", "title": "National Framework for Artificial Intelligence, Algorithmic Transparency, and Personal Data Protection in the Public Sector (Bill 2912-D-2026)", "sum": "The bill would establish a national framework governing artificial intelligence, algorithmic transparency, and personal data protection in Argentina’s public sector. The available record does not provide further details on its specific obligations or enforcement mechanisms.", "stage": "introduced", "cats": [ "governance", "gov-use", "disclosures" ], "secs": [], "date": "2026-06-18", "url": "https://www.hcdn.gob.ar/proyectos/proyecto.jsp?exp=2912-D-2026", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4806", "jur": "US", "level": "national", "num": "SB4806", "title": "SB 4806: POWER Up Act: Promoting Oversight of Wholesale Energy Reliability Act", "sum": "The bill would clarify that interconnecting large-load facilities directly to interstate electric transmission facilities falls under the jurisdiction of the Federal Energy Regulatory Commission. It addresses federal oversight of large electricity users, including data centers and other compute-intensive facilities.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-17", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4806/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "The Rapid Development of Digital Technologies and Artificial Intelligence Tools Has Created New Risks to the Protection of Children and Adolescents", "sum": "This Mexican legislative initiative addresses risks posed by digital technologies and AI to children’s and adolescents’ privacy, identity, and emotional integrity. It invokes international bodies’ attention to these emerging risks, though the available description does not specify the proposed legal measures.", "stage": "introduced", "cats": [ "minors", "privacy" ], "secs": [ "media" ], "date": "2026-06-17", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/jun/20260617.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "UNICEF found that one student in every classroom in at least 11 countries reported being affected by hyperrealistic AI-generated sexually explicit images, including nudity", "sum": "A legislative initiative addresses the reported impact of hyperrealistic, sexually explicit images generated by artificial intelligence on students, including minors. The available information does not specify the proposed legal measures.", "stage": "introduced", "cats": [ "minors", "deepfakes" ], "secs": [ "media" ], "date": "2026-06-17", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/jun/20260617.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "AI-Generated Content Affecting the Privacy and Rights of Children and Adolescents", "sum": "The initiative would classify the creation, alteration, manipulation, dissemination, or storage of AI-generated images, audio, video, or other digital content as a violation of the privacy and rights of children and adolescents when it enables their identification or harms their dignity or physical or emotional integrity.", "stage": "introduced", "cats": [ "minors", "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-06-17", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/jun/20260617.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 897/2024", "jur": "BR", "level": "national", "num": "PL 897/2024", "title": "PL 897/2024: Digital Media Authentication Created or Modified by Artificial Intelligence", "sum": "The bill establishes rules for authenticating digital media created or modified by artificial intelligence. It is being considered jointly with PL 759/2023.", "stage": "advancing", "cats": [ "disclosures", "deepfakes" ], "secs": [ "media" ], "date": "2026-06-17", "url": "https://www.camara.leg.br/propostas-legislativas/2422387", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 842/2024", "jur": "BR", "level": "national", "num": "PL 842/2024", "title": "Requiring Labels for AI-Generated Audiovisual Content Online", "sum": "Amends Brazil's Internet Civil Framework to require internet applications that use artificial intelligence to generate audiovisual content to label the content produced. The bill is attached to PL 759/2023 for joint consideration.", "stage": "advancing", "cats": [ "disclosures", "deepfakes" ], "secs": [ "media", "consumer" ], "date": "2026-06-17", "url": "https://www.camara.leg.br/propostas-legislativas/2421855", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 6036/2025", "jur": "BR", "level": "national", "num": "PL 6036/2025", "title": "Mandatory Identification and Transparency of AI-Generated Content", "sum": "Establishes general rules requiring the identification of content produced wholly or partly by artificial intelligence, creates a National Synthetic Content Seal, and imposes transparency, automatic-detection, and user-declaration duties. It also establishes liabilities and penalties, protects consumers and the democratic process, and amends Brazil’s Internet Civil Framework and General Data Protection Law.", "stage": "advancing", "cats": [ "governance", "disclosures", "deepfakes" ], "secs": [ "media" ], "date": "2026-06-17", "url": "https://www.camara.leg.br/propostas-legislativas/2589443", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 5938/2023", "jur": "BR", "level": "national", "num": "PL 5938/2023", "title": "Bill 5938/2023", "sum": "Amends Brazil’s Internet Civil Framework Law to require social-network providers to adopt measures to identify and label content created using artificial intelligence.", "stage": "advancing", "cats": [ "governance", "disclosures" ], "secs": [ "media", "consumer" ], "date": "2026-06-17", "url": "https://www.camara.leg.br/propostas-legislativas/2411874", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 5433/2025", "jur": "BR", "level": "national", "num": "PL 5433/2025", "title": "National Guidelines for Safe and Responsible Artificial Intelligence in Healthcare", "sum": "Establishes national guidelines for the use of artificial intelligence systems in healthcare, addressing patient safety, quality of care, transparency, accountability, and protection of personal data. The bill is being processed jointly with PL 3782/2025.", "stage": "advancing", "cats": [ "healthcare", "privacy" ], "secs": [ "health" ], "date": "2026-06-17", "url": "https://www.camara.leg.br/propostas-legislativas/2577251", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 526/2025", "jur": "BR", "level": "national", "num": "PL 526/2025", "title": "PL 526/2025: Provides for the regulation of the use of artificial intelligence in Brazil and other measures", "sum": "The bill proposes a general regulatory framework for the use of artificial intelligence in Brazil. It is being considered jointly with PL 759/2023.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-06-17", "url": "https://www.camara.leg.br/propostas-legislativas/2484379", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4358/2025", "jur": "BR", "level": "national", "num": "PL 4358/2025", "title": "Establishing Brazil’s Ethical and Responsible Artificial Intelligence Governance Framework", "sum": "Establishes principles, objectives, guidelines, rights, duties, risk-management and transparency instruments, and mechanisms for promoting, supervising, and governing the ethical and responsible development and use of artificial intelligence systems in Brazil. The bill provides a broad national framework for AI governance rather than regulating a single sector.", "stage": "advancing", "cats": [ "governance", "disclosures", "frontier" ], "secs": [], "date": "2026-06-17", "url": "https://www.camara.leg.br/propostas-legislativas/2555663", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3782/2025", "jur": "BR", "level": "national", "num": "PL 3782/2025", "title": "Banning AI Replacement of Professionals in Direct Interpersonal Services", "sum": "Prohibits replacing human professionals with artificial intelligence systems in activities requiring a direct interpersonal relationship and establishes related measures.", "stage": "advancing", "cats": [ "hiring" ], "secs": [ "hr" ], "date": "2026-06-17", "url": "https://www.camara.leg.br/propostas-legislativas/2541085", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 2983/2025", "jur": "BR", "level": "national", "num": "PL 2983/2025", "title": "Identifying AI-Generated Audiovisual Content and Protecting Digital Consumers", "sum": "The bill would require audiovisual content generated by artificial intelligence to be identified and establish measures to protect digital consumers. It addresses transparency for AI-generated media and related consumer safeguards.", "stage": "advancing", "cats": [ "disclosures", "deepfakes", "consumer-financial" ], "secs": [ "media", "consumer" ], "date": "2026-06-17", "url": "https://www.camara.leg.br/propostas-legislativas/2527110", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 2338/2023", "jur": "BR", "level": "national", "num": "PL 2338/2023", "title": "Bill No. 2338/2023", "sum": "Establishes a legal framework for the development, promotion, and ethical and responsible use of artificial intelligence, centered on human dignity and rights. The bill addresses AI governance, risk management, transparency, accountability, and protections against discriminatory impacts.", "stage": "advancing", "cats": [ "governance", "anti-discrimination", "disclosures" ], "secs": [], "date": "2026-06-17", "url": "https://www.camara.leg.br/propostas-legislativas/2487262", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1153/2023", "jur": "BR", "level": "national", "num": "PL 1153/2023", "title": "Establishing General Rules for Ethical Artificial Intelligence Research and Use", "sum": "Establishes general rules for the research, development, and application of artificial intelligence, including its conscious and ethical use by the federal, state, Federal District, and municipal governments. The bill is being considered jointly with PL 759/2023.", "stage": "advancing", "cats": [ "governance", "gov-use" ], "secs": [], "date": "2026-06-17", "url": "https://www.camara.leg.br/propostas-legislativas/2351386", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4025/2023", "jur": "BR", "level": "national", "num": "PL 4025/2023", "title": "Regulates Image Rights and Copyright Arising from Artificial Intelligence Use", "sum": "The bill amends Brazil’s Civil Code and Copyright Law to regulate the use of a living or deceased person’s likeness through artificial intelligence and address copyright arising from AI use. It would establish rules for personality rights and intellectual property in AI-generated or AI-assisted content.", "stage": "advancing", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-06-16", "url": "https://www.camara.leg.br/propostas-legislativas/2380982", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 240/2026", "jur": "BR", "level": "national", "num": "PL 240/2026", "title": "Bill No. 240/2026", "sum": "Amends Law No. 11,326 of July 24, 2006, to establish a computerized system incorporating artificial intelligence for use in family farming. The system's specific functions are not detailed in the description.", "stage": "advancing", "cats": [ "gov-use" ], "secs": [], "date": "2026-06-16", "url": "https://www.camara.leg.br/propostas-legislativas/2600713", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 2002/2026", "jur": "BR", "level": "national", "num": "PL 2002/2026", "title": "PL 2002/2026: General Rules on Digital Identity, Responsible Identification, Legitimate Secrecy, Information Security, Pseudonymity, Synthetic Content, and Accountability in the Digital Environment", "sum": "The bill establishes general rules for digital identity and responsible identification, confidentiality, information security, pseudonymity, synthetic content, and accountability in online environments. Its inclusion of synthetic content indicates a substantive framework for addressing AI-generated or manipulated media.", "stage": "advancing", "cats": [ "deepfakes", "disclosures", "privacy" ], "secs": [], "date": "2026-06-16", "url": "https://www.camara.leg.br/propostas-legislativas/2618698", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9323", "jur": "US", "level": "national", "num": "HB9323", "title": "HB9323: Department of Advanced Technology and Artificial Intelligence Act", "sum": "Establishes a Department of Advanced Technology and Artificial Intelligence and sets out its responsibilities through implementing legislation. The bill concerns the institutional governance and administration of advanced technology and AI at the federal level.", "stage": "introduced", "cats": [ "governance", "gov-use" ], "secs": [], "date": "2026-06-15", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9323/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:336211", "jur": "DE", "level": "national", "num": "336211", "title": "European Parliament resolution of 20 May 2026 on the opportunities and challenges of a comprehensive strategy for artificial intelligence in EU trade (2025/2112(INI)), EP P10_TA(2026)0183", "sum": "This European Parliament resolution sets out policy recommendations on developing a comprehensive EU strategy for artificial intelligence in trade, addressing opportunities, challenges, competitiveness, and regulatory considerations. It is an own-initiative policy resolution rather than an enacted law.", "stage": "passed", "cats": [ "governance" ], "secs": [], "date": "2026-06-12", "url": "https://dip.bundestag.de/vorgang/vorgang/336211", "instrument_type": "bill", "binding_status": "binding", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:335837", "jur": "DE", "level": "national", "num": "335837", "title": "Bringing Germany into the AI Future: For a National Leap to the Digital Forefront", "sum": "A parliamentary motion calling for national policies to strengthen Germany’s position in artificial intelligence and digital technology. The available information does not specify the individual measures proposed.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-06-12", "url": "https://dip.bundestag.de/vorgang/vorgang/335837", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:332782", "jur": "DE", "level": "national", "num": "332782", "title": "Secure Technological Sovereignty Through German Expertise – Launch State Coordination for a European AI Cooperation Project Modeled on Airbus", "sum": "The motion calls for state coordination to establish a European AI cooperation project modeled on Airbus, drawing on German technological expertise to strengthen European technological sovereignty. It is a policy proposal rather than a detailed AI regulatory framework.", "stage": "advancing", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-06-12", "url": "https://dip.bundestag.de/vorgang/vorgang/332782", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4774", "jur": "US", "level": "national", "num": "SB4774", "title": "SB4774: Fraudulent Artificial Intelligence Regulations (FAIR) Elections Act of 2026", "sum": "The bill would prohibit distributing false AI-generated election media and amend federal voter-registration law to prohibit removing voters from rolls based on unverified voter-challenge databases.", "stage": "advancing", "cats": [ "elections", "deepfakes" ], "secs": [ "media" ], "date": "2026-06-11", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4774/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4770", "jur": "US", "level": "national", "num": "SB4770", "title": "SB4770: Web of Biological Data Act of 2026", "sum": "The bill would require the Secretary of Energy to establish a centralized resource providing access to biological data to support research using advanced computational methods, including artificial intelligence.", "stage": "advancing", "cats": [ "gov-use" ], "secs": [ "health" ], "date": "2026-06-11", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4770/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4762", "jur": "US", "level": "national", "num": "SB4762", "title": "SB 4762: Generative Artificial Intelligence Terrorism Risk Assessment Act", "sum": "The bill would require the Secretary of Homeland Security to conduct annual assessments of threats to the United States arising from the use of generative artificial intelligence for terrorism. It would establish an ongoing federal assessment and reporting obligation focused on terrorism risks associated with generative AI.", "stage": "advancing", "cats": [ "frontier", "public-safety", "governance" ], "secs": [], "date": "2026-06-11", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4762/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9307", "jur": "US", "level": "national", "num": "HB9307", "title": "HB9307: Web of Biological Data Act of 2026", "sum": "Requires the Secretary of Energy to establish a centralized resource providing access to biological data to support biological research using advanced computational methods, including artificial intelligence.", "stage": "introduced", "cats": [ "gov-use" ], "secs": [ "health" ], "date": "2026-06-11", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9307/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9285", "jur": "US", "level": "national", "num": "HB9285", "title": "HB 9285: Heat Emergency Assessment and Tracking Using AI Act", "sum": "Directs the Secretary of Health and Human Services to establish and operate an AI-based heat-illness surveillance and response program. The program would use artificial intelligence to assess and track heat-related health risks and support emergency responses.", "stage": "introduced", "cats": [ "healthcare", "gov-use" ], "secs": [ "health" ], "date": "2026-06-11", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9285/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9279", "jur": "US", "level": "national", "num": "HB9279", "title": "HB9279: Preventing AI Censorship Act", "sum": "The bill would create a private right of action against federal employees who violate First Amendment rights in connection with the use or development of artificial intelligence. It addresses alleged government censorship involving AI systems.", "stage": "introduced", "cats": [ "gov-use", "governance" ], "secs": [], "date": "2026-06-11", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9279/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9262", "jur": "US", "level": "national", "num": "HB9262", "title": "HB 9262: Local Control Protection Act", "sum": "The bill would protect local governments’ authority to make zoning decisions concerning data-center development and require community benefit agreements as a condition for receiving federal tax incentives.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-06-11", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9262/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:332632", "jur": "DE", "level": "national", "num": "332632", "title": "For Public Spaces Without Automated Biometric Recognition Systems", "sum": "The legislative motion called for prohibiting or otherwise preventing the use of automated biometric recognition systems in public spaces. It was rejected.", "stage": "dead", "cats": [ "public-safety", "privacy" ], "secs": [], "date": "2026-06-11", "url": "https://dip.bundestag.de/vorgang/vorgang/332632", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:332631", "jur": "DE", "level": "national", "num": "332631", "title": "Take the Societal Risks of AI Applications Seriously", "sum": "This legislative motion calls for government action to address and mitigate the societal risks associated with artificial intelligence applications. The motion was rejected.", "stage": "dead", "cats": [ "governance" ], "secs": [], "date": "2026-06-11", "url": "https://dip.bundestag.de/vorgang/vorgang/332631", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:327215", "jur": "DE", "level": "national", "num": "327215", "title": "Enable Trustworthy Artificial Intelligence: Accelerate Implementation of the European AI Regulation in Germany, Promote Innovation and Strengthen Digital Sovereignty", "sum": "This legislative motion proposed measures to accelerate Germany’s implementation of the European Union AI Regulation while promoting innovation and strengthening digital sovereignty. It was rejected.", "stage": "dead", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-06-11", "url": "https://dip.bundestag.de/vorgang/vorgang/327215", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3060/2026", "jur": "BR", "level": "national", "num": "PL 3060/2026", "title": "Bill 3060/2026: Amendments to the National Artificial Intelligence Governance Framework", "sum": "The bill establishes additional rules for Brazil’s national AI governance framework, including duties for administrators of private legal entities, differentiated treatment for micro, small, and medium-sized enterprises, jurisdictional sovereignty over technical records, stronger safeguards against algorithmic discrimination, and coordination with regulated professions.", "stage": "introduced", "cats": [ "governance", "anti-discrimination" ], "secs": [], "date": "2026-06-11", "url": "https://www.camara.leg.br/propostas-legislativas/2631787", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4743", "jur": "US", "level": "national", "num": "SB4743", "title": "SB4743: AI Bubble Transparency Act", "sum": "The bill would require the Office of Financial Research to collect data on the financing of artificial intelligence development, provide that information to Congress, and recommend measures to financial regulators and Congress to mitigate financial-stability risks.", "stage": "advancing", "cats": [ "consumer-financial", "governance" ], "secs": [ "finserv" ], "date": "2026-06-10", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4743/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4742", "jur": "US", "level": "national", "num": "SB4742", "title": "SB4742: AI DATA Act (Artificial Intelligence Data Authorization and Transparency Act)", "sum": "The bill authorizes labor-market data collection and improves federal measurement of how artificial intelligence affects the workforce. It focuses on building data and reporting capacity rather than regulating particular AI systems.", "stage": "advancing", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-06-10", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4742/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:FR:DLR5L17N53359", "jur": "FR", "level": "national", "num": "DLR5L17N53359", "title": "DLR5L17N53359: Bill establishing a presumption that AI providers use cultural content", "sum": "The bill would establish a legal presumption that providers of artificial intelligence systems use cultural content, likely affecting proof, transparency, and related rights or remuneration claims. It targets the relationship between AI providers and creators or holders of cultural works.", "stage": "advancing", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "media" ], "date": "2026-06-10", "url": "https://www.assemblee-nationale.fr/dyn/17/dossiers/DLR5L17N53359", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CN:工信部通信〔2026〕121号", "jur": "CN", "level": "national", "num": "工信部通信〔2026〕121号", "title": "Ministry of Industry and Information Technology Notice on Issuing the Implementation Opinions on Innovative Development of “Artificial Intelligence + Information and Communications” (2026–2028) (MIIT Communications〔2026〕No. 121)", "sum": "The notice issues a 2026–2028 implementation plan to promote the integration of artificial intelligence with the information and communications sector. It sets out development and policy priorities for advancing AI-enabled innovation across the industry.", "stage": "advancing", "cats": [ "gov-use" ], "secs": [ "infra" ], "date": "2026-06-10", "url": "https://www.gov.cn/zhengce/zhengceku/202606/content_7071755.htm", "instrument_type": "final_measure", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4849/2024", "jur": "BR", "level": "national", "num": "PL 4849/2024", "title": "Establishes Foundations, Principles, and Guidelines for Artificial Intelligence in Brazil", "sum": "Establishes the foundations, principles, guidelines, and framework for the application of artificial intelligence in Brazil. The bill is attached for joint consideration to PL 1465/2024.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-06-10", "url": "https://www.camara.leg.br/propostas-legislativas/2479396", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1797/2024", "jur": "BR", "level": "national", "num": "PL 1797/2024", "title": "Bill 1797/2024", "sum": "Establishes general rules for the responsible development, implementation, and use of artificial intelligence systems, aiming to protect human rights and ensure safe and reliable systems that benefit people. The bill is being considered jointly with Bill 1465/2024.", "stage": "advancing", "cats": [ "governance", "anti-discrimination", "frontier" ], "secs": [], "date": "2026-06-10", "url": "https://www.camara.leg.br/propostas-legislativas/2433206", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4727", "jur": "US", "level": "national", "num": "SB4727", "title": "SB4727: Artificial Intelligence Environmental Impacts Act of 2026", "sum": "The bill would require the Environmental Protection Agency to study the environmental impacts of artificial-intelligence data centers and related energy infrastructure, while the National Institute of Standards and Technology would convene a research consortium on those impacts. It would also direct the EPA to establish a reporting system for AI-related environmental impacts.", "stage": "advancing", "cats": [ "data-centers", "governance" ], "secs": [ "infra" ], "date": "2026-06-09", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4727/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 349/2024", "jur": "BR", "level": "national", "num": "PL 349/2024", "title": "Creates Campaign Against AI-Assisted Digital Crimes Targeting Vulnerable Groups", "sum": "Establishes a campaign to prevent and combat digital crimes against children, adolescents, and persons with disabilities committed with the support of artificial-intelligence tools. The bill is attached to PL 177/2024 for joint consideration.", "stage": "advancing", "cats": [ "minors", "public-safety" ], "secs": [ "consumer" ], "date": "2026-06-09", "url": "https://www.camara.leg.br/propostas-legislativas/2418314", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3379/2023", "jur": "BR", "level": "national", "num": "PL 3379/2023", "title": "Adds Artificial Intelligence Education to Secondary School Curriculum", "sum": "Amends Brazil’s National Education Guidelines and Bases Law to provide for the inclusion of artificial intelligence instruction in upper secondary education. The bill establishes AI education as part of the secondary-school curriculum.", "stage": "advancing", "cats": [ "education" ], "secs": [], "date": "2026-06-09", "url": "https://www.camara.leg.br/propostas-legislativas/2372533", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3236/2024", "jur": "BR", "level": "national", "num": "PL 3236/2024", "title": "PL 3236/2024: Bill on Athletes’ Intellectual Property Rights", "sum": "The bill protects athletes’ intellectual property rights by regulating the registration and commercial exploitation of sports movements, personal brands, and athletes’ likenesses, including the use of artificial intelligence in sports. It establishes rules for commercial image use and related rights.", "stage": "advancing", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-06-09", "url": "https://www.camara.leg.br/propostas-legislativas/2454171", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1837/2026", "jur": "BR", "level": "national", "num": "PL 1837/2026", "title": "Adds Artificial Intelligence and Cybersecurity Courses to Secondary Education", "sum": "Amends Brazil’s National Education Guidelines and Framework Law to add specific artificial intelligence and cybersecurity subjects to the upper-secondary school curriculum.", "stage": "advancing", "cats": [ "education" ], "secs": [], "date": "2026-06-09", "url": "https://www.camara.leg.br/propostas-legislativas/2616119", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:AR:2744-D-2026", "jur": "AR", "level": "national", "num": "2744-D-2026", "title": "Bill 2744-D-2026: National Penal Code: Amendment of Article 128 on the Use of Artificial Intelligence Techniques to Disseminate Sexually Explicit Images", "sum": "The bill would amend Article 128 of Argentina’s Penal Code to address the use of artificial intelligence techniques to disseminate sexually explicit images, including material involving minors covered by that provision. It targets AI-enabled creation or distribution of abusive sexual imagery through criminal-law amendments.", "stage": "introduced", "cats": [ "deepfakes", "minors" ], "secs": [ "consumer", "media" ], "date": "2026-06-09", "url": "https://www.hcdn.gob.ar/proyectos/proyecto.jsp?exp=2744-D-2026", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4707", "jur": "US", "level": "national", "num": "SB4707", "title": "SB4707: Responsible Artificial Intelligence Defense Act of 2026", "sum": "The bill would establish Department of Defense policy for maximizing autonomy and artificial intelligence systems. It would also require Department review and verification of autonomous weapon systems and other artificial intelligence capabilities.", "stage": "advancing", "cats": [ "gov-use", "governance" ], "secs": [], "date": "2026-06-08", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4707/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4697", "jur": "US", "level": "national", "num": "SB4697", "title": "SB4697: HALO Act of 2026: Human Authority in Lethal Operations Act of 2026", "sum": "The bill establishes design and safety requirements for autonomous and semi-autonomous weapon systems, including systems used in lethal operations. It addresses human authority and oversight in the operation of such systems.", "stage": "advancing", "cats": [ "gov-use", "public-safety" ], "secs": [], "date": "2026-06-08", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4697/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9183", "jur": "US", "level": "national", "num": "HB9183", "title": "HB 9183: Artificial Intelligence Environmental Impacts Act of 2026", "sum": "The bill would require the Environmental Protection Agency to study the environmental impacts of artificial-intelligence data centers and related energy infrastructure. It would also direct the National Institute of Standards and Technology to convene an expert consortium and require the EPA to establish a system for reporting AI-related environmental impacts.", "stage": "introduced", "cats": [ "data-centers", "governance" ], "secs": [ "infra" ], "date": "2026-06-08", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9183/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4683", "jur": "US", "level": "national", "num": "SB4683", "title": "SB4683: WARP Act of 2026 (Warfighter Artificial Intelligence Readiness and Preparedness Act of 2026)", "sum": "The bill would require the Secretary of Defense to assess how integrating artificial intelligence affects warfighter effectiveness, skill retention, and operational readiness. It would establish a defense-specific evaluation of AI adoption and its effects on military personnel and operations.", "stage": "advancing", "cats": [ "gov-use", "governance" ], "secs": [], "date": "2026-06-04", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4683/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4682", "jur": "US", "level": "national", "num": "SB4682", "title": "SB4682: Ultimate Human Responsibility in Defense Systems Act of 2026", "sum": "The bill would require meaningful human judgment in decisions to use force by autonomous weapon systems operated by the Department of Defense. It also establishes related requirements for the use of such systems.", "stage": "introduced", "cats": [ "gov-use", "public-safety", "governance" ], "secs": [], "date": "2026-06-04", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4682/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:AE:DFSA AI Risk Expectations 2026", "jur": "AE", "level": "national", "num": "DFSA AI Risk Expectations 2026", "title": "DFSA AI Risk Management Expectations", "sum": "The DFSA has set out supervisory expectations for how authorized financial firms in the DIFC identify, govern, test, monitor, and control AI risks.", "stage": "passed", "cats": [ "consumer-financial", "governance", "privacy" ], "secs": [ "finserv" ], "date": "2026-06-04", "url": "https://www.dfsa.ae/your-resources/publications-reports/seo-letters-1", "instrument_type": "supervisory letter", "binding_status": "supervisory expectation", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9125", "jur": "US", "level": "national", "num": "HB9125", "title": "HB9125: Sectoral AI Governance Act of 2026", "sum": "The bill would authorize federal agency heads to issue rules governing algorithmic decision-making systems that are likely to materially contribute to violations of federal laws within their enforcement jurisdiction. It establishes a sector-specific regulatory framework for AI-related automated decision-making.", "stage": "introduced", "cats": [ "governance", "anti-discrimination" ], "secs": [], "date": "2026-06-03", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9125/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:EU:COM(2026) 501", "jur": "EU", "level": "national", "num": "COM(2026) 501", "title": "COM(2026) 501: Roadmap for Artificial Intelligence and Digitalisation for Energy (RAID-E)", "sum": "This European Commission roadmap sets out how artificial intelligence and other digital technologies can be used to support the energy sector. It outlines policy and implementation priorities for digitalising energy systems.", "stage": "introduced", "cats": [ "governance" ], "secs": [ "infra" ], "date": "2026-06-03", "url": "https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/14742", "instrument_type": "plan_item", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 5005/2025", "jur": "BR", "level": "national", "num": "PL 5005/2025", "title": "Bill No. PL 5005/2025", "sum": "Amends Brazil's Copyright Law to protect a person's image, voice, and other personal characteristics from realistic digital imitations generated by artificial intelligence or similar technology. It also strengthens the rights of performing artists.", "stage": "advancing", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-06-03", "url": "https://www.camara.leg.br/propostas-legislativas/2568007", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3656/2024", "jur": "BR", "level": "national", "num": "PL 3656/2024", "title": "Bill 3656/2024", "sum": "Amends Brazil’s Copyright Law to establish rules governing copyright in works generated wholly or predominantly autonomously by artificial intelligence systems. The bill is attached to Bill 2721/2024 for joint consideration.", "stage": "advancing", "cats": [ "governance" ], "secs": [ "media" ], "date": "2026-06-03", "url": "https://www.camara.leg.br/propostas-legislativas/2458893", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1530/2026", "jur": "BR", "level": "national", "num": "PL 1530/2026", "title": "Regulates Synthetic Media Use in Public Acts, Political Communications, and Elections", "sum": "Establishes rules for using synthetically generated voice, image, and video in public events, political communications, and election campaigns. It requires explicit labeling of artificially generated content, documented prior consent from depicted individuals or their heirs, public disclosure of authorship and funding, and imposes administrative and electoral sanctions for violations.", "stage": "advancing", "cats": [ "deepfakes", "disclosures", "elections" ], "secs": [ "media" ], "date": "2026-06-03", "url": "https://www.camara.leg.br/propostas-legislativas/2612847", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1460/2026", "jur": "BR", "level": "national", "num": "PL 1460/2026", "title": "PL 1460/2026: Bill on Protecting Personal Identity Against the Unauthorized Creation and Dissemination of Digital Replicas", "sum": "The bill would protect personal identity against the unauthorized creation and distribution of digital replicas, including synthetic representations of individuals. It is being considered jointly with PL 5005/2025.", "stage": "advancing", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-06-03", "url": "https://www.camara.leg.br/propostas-legislativas/2612588", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4656", "jur": "US", "level": "national", "num": "SB4656", "title": "SB4656: Secure and Accountable Military AI Act of 2026", "sum": "The bill would establish requirements for the secure and accountable use of artificial intelligence by the Department of Defense. The available description does not provide further details on the specific controls, oversight, or procurement requirements.", "stage": "advancing", "cats": [ "gov-use", "governance" ], "secs": [], "date": "2026-06-02", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4656/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9112", "jur": "US", "level": "national", "num": "HB9112", "title": "HB9112 CREATOR Act (Creative Rights Ensuring Artists’ Technique and Originality are Reserved Act)", "sum": "The bill would give visual artists an exclusive right to authorize the commercial exploitation or public distribution in interstate commerce of stylistic impersonations of their work. It would establish a federal right addressing unauthorized imitation of an artist’s distinctive style, including potential AI-generated uses.", "stage": "introduced", "cats": [ "deepfakes" ], "secs": [ "media" ], "date": "2026-06-02", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9112/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:AR:2516-D-2026", "jur": "AR", "level": "national", "num": "2516-D-2026", "title": "National Education: Law 26,206: Amendments on Incorporating Artificial Intelligence Content into the Curriculum (Bill 2516-D-2026)", "sum": "The bill would amend Argentina’s National Education Law 26,206 to incorporate artificial intelligence content into the national curriculum. It was introduced by Deputy Sebastián Noblega and published for parliamentary processing.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-06-01", "url": "https://www.hcdn.gob.ar/proyectos/proyecto.jsp?exp=2516-D-2026", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 6731", "jur": "MX", "level": "national", "num": "Expediente 6731", "title": "Expediente 6731: Initiative amending Article 38 Bis of the Organic Law of the Federal Public Administration regarding the integration of artificial intelligence into the education system and scientific production", "sum": "The initiative adds and revises provisions governing the Federal Public Administration to incorporate artificial intelligence into Mexico’s education system and scientific production. It assigns or clarifies related responsibilities under Article 38 Bis.", "stage": "advancing", "cats": [ "governance", "gov-use", "education" ], "secs": [], "date": "2026-05-28", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260528.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1130/2026", "jur": "BR", "level": "national", "num": "PL 1130/2026", "title": "Limits Artificial Intelligence Use in Sexual and Child Abuse Criminal Proceedings", "sum": "Amends Brazil’s Code of Criminal Procedure to strengthen requirements for reasoning in judicial decisions and limit the use of automated systems or artificial intelligence in proceedings involving sexual-dignity offenses or crimes against children or adolescents.", "stage": "advancing", "cats": [ "governance", "gov-use", "public-safety" ], "secs": [], "date": "2026-05-28", "url": "https://www.camara.leg.br/propostas-legislativas/2608537", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:333718", "jur": "DE", "level": "national", "num": "333718", "title": "Enable Small Modular Reactors – Promote Data Centers and Secure Electricity Supply", "sum": "The legislative motion proposes enabling the use of small modular nuclear reactors to strengthen electricity supply and support the expansion of data centers. It links data-center growth with additional reliable power-generation capacity.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-27", "url": "https://dip.bundestag.de/vorgang/vorgang/333718", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1528/2026", "jur": "BR", "level": "national", "num": "PL 1528/2026", "title": "Bill 1528/2026", "sum": "Establishes transparency, identification, and accountability requirements for content generated or manipulated by artificial intelligence systems, including technical and visual marking, provenance records, enhanced labeling for deepfakes and multimodal content, and cooperation with authorities investigating harm. It also assigns a federal technical authority to define interoperability standards, forensic protocols, and an implementation timetable, while providing safeguards for personal-data protection and freedom of expression.", "stage": "advancing", "cats": [ "governance", "disclosures", "deepfakes" ], "secs": [ "media" ], "date": "2026-05-27", "url": "https://www.camara.leg.br/propostas-legislativas/2612845", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1523/2026", "jur": "BR", "level": "national", "num": "PL 1523/2026", "title": "Establishes Accountability, Transparency, and Equity Requirements for Artificial Intelligence Systems", "sum": "Establishes principles, duties, and accountability, transparency, and fairness requirements for artificial intelligence systems, including risk classification, public ex ante assessments of algorithmic-discrimination impacts, subgroup metrics, human review, contestation mechanisms, independent audits, and public registration of high-risk models. It also restricts discriminatory uses of protected characteristics and provides for administrative sanctions.", "stage": "advancing", "cats": [ "governance", "anti-discrimination", "disclosures" ], "secs": [], "date": "2026-05-27", "url": "https://www.camara.leg.br/propostas-legislativas/2612814", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1443/2026", "jur": "BR", "level": "national", "num": "PL 1443/2026", "title": "Prevents and Penalizes Nonconsensual Synthetic Content Created by Generative Artificial Intelligence", "sum": "Establishes prevention and accountability measures for the use of generative AI systems to create non-consensual synthetic content. The bill also provides for related measures concerning such content.", "stage": "advancing", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-05-27", "url": "https://www.camara.leg.br/propostas-legislativas/2612417", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 2462/2025", "jur": "BR", "level": "national", "num": "PL 2462/2025", "title": "Bans Artificial Intelligence Dubbing of Commercially Distributed Audiovisual Works", "sum": "The bill prohibits using artificial intelligence tools to dub audiovisual works commercially shown in cinemas, broadcast and subscription television, video-on-demand services, and other internet audiovisual distribution platforms.", "stage": "advancing", "cats": [ "deepfakes" ], "secs": [ "media" ], "date": "2026-05-26", "url": "https://www.camara.leg.br/propostas-legislativas/2515281", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1529/2026", "jur": "BR", "level": "national", "num": "PL 1529/2026", "title": "Regulates Electoral Deepfakes and Synthetic Content Transparency on Digital Platforms", "sum": "Establishes transparency, identification, and liability rules for synthetic content, including deepfakes and AI-generated material, circulated online during election periods. It requires machine-readable metadata, cryptographic provenance watermarks, platform preservation and propagation of metadata, audit logs, challenge mechanisms, and a temporary 72-hour-before to 24-hour-after voting restriction on creating or distributing synthetic content featuring candidates.", "stage": "dead", "cats": [ "deepfakes", "elections", "disclosures" ], "secs": [ "media" ], "date": "2026-05-26", "url": "https://www.camara.leg.br/propostas-legislativas/2612846", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:AR:2396-D-2026", "jur": "AR", "level": "national", "num": "2396-D-2026", "title": "Bill 2396-D-2026: Expressing concern over announcements related to the implementation of AI systems called “digital twins,” and other related matters", "sum": "This declaration expresses concern about announcements regarding the implementation of AI systems known as “digital twins.” It does not establish binding requirements or create a regulatory program.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-05-26", "url": "https://www.hcdn.gob.ar/proyectos/proyecto.jsp?exp=2396-D-2026", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 6326/2025", "jur": "BR", "level": "national", "num": "PL 6326/2025", "title": "PL 6326/2025: Synthetic Content Labeling and Transparency in Artificial Intelligence Act", "sum": "Requires identification of content generated, manipulated, or altered by artificial intelligence systems to protect information, democracy, consumers, and fundamental rights in the digital environment. It also amends Brazil's Internet Civil Rights Framework (Law No. 12,965/2014).", "stage": "advancing", "cats": [ "disclosures", "deepfakes", "consumer-financial" ], "secs": [ "media" ], "date": "2026-05-25", "url": "https://www.camara.leg.br/propostas-legislativas/2595639", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3967/2025", "jur": "BR", "level": "national", "num": "PL 3967/2025", "title": "Requires Identification of Artificial Intelligence-Generated Content Online", "sum": "Amends Brazil's Internet Civil Framework (Law No. 12,965 of April 23, 2014) to require identification of content generated by artificial intelligence.", "stage": "advancing", "cats": [ "disclosures" ], "secs": [ "media" ], "date": "2026-05-25", "url": "https://www.camara.leg.br/propostas-legislativas/2543191", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB9019", "jur": "US", "level": "national", "num": "HB9019", "title": "HB9019: POWER Act (Public Oversight of Water and Energy Reporting Act)", "sum": "Directs the Secretary of Energy to report to Congress on electricity and water consumption by certain data centers. The bill would create federal visibility into the resource demands of large data-center facilities.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-22", "url": "https://www.congress.gov/bill/119th-congress/house-bill/9019/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4633", "jur": "US", "level": "national", "num": "SB4633", "title": "SB4633: Unmanned and Autonomous Systems Strategy Act of 2026", "sum": "The bill would require a national strategy for deploying, integrating, exporting, and scaling unmanned and autonomous systems in the Indo-Pacific and Western Hemisphere. It focuses on homeland defense, counter-narcotics and counter-trafficking operations, and cooperation with allies and partners.", "stage": "advancing", "cats": [ "gov-use", "public-safety" ], "secs": [], "date": "2026-05-21", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4633/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4627", "jur": "US", "level": "national", "num": "SB4627", "title": "SB 4627: FARM AI Act of 2026 (Fostering Agricultural Research and Modernization through Artificial Intelligence Act of 2026)", "sum": "The bill would expand access to artificial intelligence through programs of the U.S. Department of Agriculture and related agricultural research and modernization activities. It is focused on federal government support and deployment of AI in the agriculture sector.", "stage": "introduced", "cats": [ "gov-use", "governance", "education" ], "secs": [], "date": "2026-05-21", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4627/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3936/2024", "jur": "BR", "level": "national", "num": "PL 3936/2024", "title": "PL 3936/2024: Amends Law No. 9,279 of May 14, 1996, concerning patents for inventions or utility models developed with the assistance of artificial intelligence systems", "sum": "The bill would amend Brazil’s Industrial Property Law to establish rules for obtaining patents on inventions or utility models developed with the assistance of artificial intelligence systems. It addresses the patentability framework for AI-assisted innovation.", "stage": "advancing", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-05-21", "url": "https://www.camara.leg.br/propostas-legislativas/2462314", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8915", "jur": "US", "level": "national", "num": "HB8915", "title": "HB8915: NO FAKES Act of 2026 (Nurture Originals, Foster Art, and Keep Entertainment Safe Act of 2026)", "sum": "The bill would protect individuals' intellectual property rights in their voices and visual likenesses, including against unauthorized digital replicas and synthetic media.", "stage": "introduced", "cats": [ "deepfakes" ], "secs": [ "media" ], "date": "2026-05-20", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8915/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:EU:COM(2026) 234", "jur": "EU", "level": "national", "num": "COM(2026) 234", "title": "COM(2026) 234: Report on the Need to Review the Lists of Prohibited AI Practices and High-Risk AI Systems", "sum": "The European Commission reports to the European Parliament and the Council, pursuant to Article 112(1) of the EU AI Act, on whether the lists of prohibited AI practices and high-risk AI systems in Annex III should be reviewed. The report does not itself amend those lists.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-05-20", "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:52026DC0234", "instrument_type": "plan_item", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 7134/2025", "jur": "BR", "level": "national", "num": "PL 7134/2025", "title": "PL 7134/2025: Bill to Establish the Principle of Algorithmic Non-Discrimination", "sum": "The bill amends Brazil’s Internet Civil Framework to add algorithmic non-discrimination as a fundamental principle governing internet use in Brazil. It is being considered for attachment to a broader bill addressing related proposals.", "stage": "advancing", "cats": [ "governance", "anti-discrimination" ], "secs": [], "date": "2026-05-20", "url": "https://www.camara.leg.br/propostas-legislativas/2599743", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 6707/2025", "jur": "BR", "level": "national", "num": "PL 6707/2025", "title": "Establishes Civil Liability for Autonomous Artificial Intelligence Systems", "sum": "Amends Brazil’s Consumer Defense Code to establish civil liability for harm caused by the autonomous behavior of artificial intelligence systems. The bill would address consumer protection and liability arising from AI system actions.", "stage": "advancing", "cats": [ "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-05-20", "url": "https://www.camara.leg.br/propostas-legislativas/2599300", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1542/2026", "jur": "BR", "level": "national", "num": "PL 1542/2026", "title": "Bill 1542/2026", "sum": "Establishes a Brazilian liability framework for autonomous systems, governing civil, administrative, and regulatory responsibility for harms caused by systems based on artificial intelligence and automated decision-making. The bill is the subject of a request to be attached to related bills and Bill 2338/2023.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-05-20", "url": "https://www.camara.leg.br/propostas-legislativas/2612896", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Initiative on the Use of Artificial Intelligence in Identification Processes", "sum": "The initiative proposes recognizing emerging technologies, particularly artificial intelligence, as tools to support identification processes while subjecting their use to a clear legal framework grounded in human rights. It emphasizes human oversight, proportionality, and non-discrimination in AI deployment.", "stage": "introduced", "cats": [ "governance", "anti-discrimination", "public-safety" ], "secs": [ "media" ], "date": "2026-05-19", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260519.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Article 91 Bis: Use of Technology Tools for Support", "sum": "The proposal would authorize Mexico’s National Search System to use image-analysis technologies, including artificial intelligence, exclusively to locate and identify missing persons, subject to specified conditions.", "stage": "introduced", "cats": [ "governance", "public-safety" ], "secs": [ "media" ], "date": "2026-05-19", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260519.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Proposal to amend Article 73, Section XVII of the Political Constitution of the United Mexican States, concerning artificial intelligence, cybersecurity, and ethical use of information technologies", "sum": "This constitutional amendment proposal would modify federal legislative authority under Article 73, Section XVII to address artificial intelligence, cybersecurity, and the ethical use of information technologies. It was submitted by Deputy Rosa Guadalupe Ortega Tiburcio of Morena during the Permanent Commission session on May 13, 2026.", "stage": "introduced", "cats": [ "governance", "privacy" ], "secs": [ "media" ], "date": "2026-05-19", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260519.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Initiative to Amend Article 73, Section XVII, of the Mexican Constitution on Artificial Intelligence, Cybersecurity, and Ethical Use of Information Technologies", "sum": "The initiative proposes a constitutional amendment concerning federal legislative authority over artificial intelligence, cybersecurity, and the ethical use of information technologies. It would establish or clarify the constitutional basis for future regulation in these areas.", "stage": "introduced", "cats": [ "governance" ], "secs": [ "media" ], "date": "2026-05-19", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260519.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Artificial Intelligence as a Transformative Information and Communications Technology", "sum": "A Mexican legislative initiative discussing artificial intelligence, its capabilities, and its role as a disruptive technology. The available text does not specify the proposed legal or policy measures.", "stage": "introduced", "cats": [ "governance" ], "secs": [ "media" ], "date": "2026-05-19", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260519.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Artificial Intelligence (AI), which has become one of the most disruptive and transformative technologies of the 21st century (No. 3)", "sum": "This appears to be a legislative initiative concerning artificial intelligence, but the available record provides only a general description and does not specify the proposed legal measures.", "stage": "introduced", "cats": [ "governance" ], "secs": [ "media" ], "date": "2026-05-19", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260519.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Artificial Intelligence in Public and Economic Sectors", "sum": "The initiative describes the growing use of artificial intelligence in healthcare, education, public safety, finance, mobility, government administration, and scientific development. The available text does not specify the proposed legal obligations or policy measures.", "stage": "introduced", "cats": [ "governance" ], "secs": [ "media" ], "date": "2026-05-19", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260519.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Risks of Irresponsible Artificial Intelligence Use", "sum": "The initiative addresses the societal risks of artificial intelligence, including discrimination, misinformation, personal-data violations, privacy infringements, and impacts on fundamental rights. It argues for clear rules governing the ethical and safe use of AI.", "stage": "introduced", "cats": [ "governance", "anti-discrimination", "privacy" ], "secs": [ "media" ], "date": "2026-05-19", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260519.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Initiative to Establish a Responsible Artificial Intelligence Regulatory Framework", "sum": "The initiative calls for a regulatory framework for artificial intelligence based on principles of human dignity, equality, privacy, transparency, and ethical development, drawing on recommendations from the United Nations and UNESCO.", "stage": "introduced", "cats": [ "governance", "anti-discrimination", "privacy" ], "secs": [ "media" ], "date": "2026-05-19", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260519.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Artificial intelligence cannot be governed solely by commercial or economic criteria", "sum": "The initiative calls for states to participate actively in developing rules and oversight mechanisms for artificial intelligence. It seeks to prevent algorithmic discrimination, digital manipulation, improper surveillance, and violations of human rights.", "stage": "introduced", "cats": [ "governance", "anti-discrimination", "privacy" ], "secs": [ "media" ], "date": "2026-05-19", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260519.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Mexico Maintains Interest in Promoting Regulation and Equitable Conditions for Cybersecurity and Artificial Intelligence (AI), Which It Hopes the United States and Canada Will Adopt During the Review of the United States-Mexico-Canada Agreement (USMCA)", "sum": "The legislative initiative promotes coordinated regulation and equitable conditions for cybersecurity and artificial intelligence among Mexico, the United States, and Canada in connection with the USMCA review. The available record does not specify detailed regulatory requirements.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [ "media" ], "date": "2026-05-19", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260519.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Second. Congress Must Enact General Artificial Intelligence and Cybersecurity Legislation", "sum": "The proposal directs Mexico’s Congress to enact general legislation on artificial intelligence and cybersecurity within 180 calendar days after the decree takes effect. It establishes a legislative mandate but does not specify substantive regulatory requirements.", "stage": "introduced", "cats": [ "governance" ], "secs": [ "media" ], "date": "2026-05-19", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260519.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Third. Once general legislation on artificial intelligence and cybersecurity is enacted, the federative entities shall harmonize their legislation within the period established by that legislation.", "sum": "This proposed transitional provision would require Mexico’s states and other federative entities to align their laws after general federal legislation on artificial intelligence and cybersecurity is enacted. It establishes a future legislative-harmonization obligation rather than regulating specific AI systems directly.", "stage": "introduced", "cats": [ "governance" ], "secs": [ "media" ], "date": "2026-05-19", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260519.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3604/2024", "jur": "BR", "level": "national", "num": "PL 3604/2024", "title": "Funds Artificial Intelligence Technologies for Preventing and Containing Wildfires", "sum": "Amends Law No. 12,114 of December 9, 2009, which created Brazil’s National Climate Change Fund, to allow funding for information technology and artificial intelligence aimed at preventing and containing fires in natural environments.", "stage": "advancing", "cats": [ "public-safety" ], "secs": [], "date": "2026-05-19", "url": "https://www.camara.leg.br/propostas-legislativas/2458566", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 2463/2026", "jur": "BR", "level": "national", "num": "PL 2463/2026", "title": "Regulates Predictive Health Data Processing by Artificial Intelligence Systems", "sum": "Amends Brazil’s General Data Protection Law (LGPD) to regulate the processing of predictive health data by artificial intelligence systems and similar technologies.", "stage": "introduced", "cats": [ "healthcare", "privacy" ], "secs": [ "health" ], "date": "2026-05-19", "url": "https://www.camara.leg.br/propostas-legislativas/2625703", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4559", "jur": "US", "level": "national", "num": "SB4559", "title": "SB4559: Energy Cost Fairness and Reliability Act of 2026", "sum": "The bill would amend the Federal Power Act and require the Federal Energy Regulatory Commission to issue a final rule governing the interconnection of large-load facilities with the transmission system. It addresses energy-cost allocation and grid reliability for large electricity consumers, including data centers.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-05-18", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4559/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Artificial Intelligence (AI)", "sum": "The item presents artificial intelligence as an advanced area of scientific development and highlights its applications in medicine, engineering, the economy, and scientific research. No specific legislative measures or operative provisions are provided in the available text.", "stage": "introduced", "cats": [ "governance" ], "secs": [ "media" ], "date": "2026-05-15", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260515.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Likewise, AI promotes the democratization of knowledge by facilitating access to advanced analytical tools and expanding global collaboration among scientific communities", "sum": "The initiative characterizes artificial intelligence as a tool that complements rather than replaces human work, supporting scientific progress, social welfare, sustainable development, and broader access to knowledge. The available record does not provide enough detail to identify specific regulatory provisions.", "stage": "introduced", "cats": [ "governance" ], "secs": [ "media" ], "date": "2026-05-15", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260515.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Not All Progress Is Risk-Free: The Misuse of Artificial Intelligence Has Enabled the Mass Production of False Content", "sum": "A Mexican legislative initiative addresses the use of AI to create highly realistic fake audio, images, and videos, including deepfakes. It highlights risks to public perception, democratic debate, public opinion, and trust in digital information, but the available description does not specify the proposed operative measures.", "stage": "introduced", "cats": [ "deepfakes", "elections", "disclosures" ], "secs": [ "media" ], "date": "2026-05-15", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260515.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "For purposes of this initiative, artificial intelligence is understood as any system, computational model, or algorithm-including neural networks and machine-learning techniques-capable of performing tasks involving reasoning, learning, perception, or information generation, imitating or replacing human cognitive functions", "sum": "The legislative initiative proposes a broad definition of artificial intelligence covering computational systems, models, and algorithms that perform cognitive-like functions. The available text does not specify additional substantive obligations or regulatory mechanisms.", "stage": "introduced", "cats": [ "governance" ], "secs": [ "media" ], "date": "2026-05-15", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260515.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "As previously mentioned, the misuse of artificial intelligence may implicate various fundamental rights, particularly when used to manipulate information, invade privacy, or affect people’s dignity", "sum": "This legislative initiative addresses the potential human-rights harms arising from misuse of artificial intelligence, including information manipulation, privacy violations, and attacks on personal dignity. The available text does not specify the proposed legal mechanisms.", "stage": "introduced", "cats": [ "privacy", "deepfakes" ], "secs": [ "media" ], "date": "2026-05-15", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260515.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Internationally, Democracies Have Begun Regulating Artificial Intelligence, Particularly Regarding Personal Data Protection and Digital Identity", "sum": "The legislative initiative addresses the need to regulate artificial intelligence, with particular emphasis on personal-data protection and digital identity. The available text does not specify the proposed legal mechanisms.", "stage": "introduced", "cats": [ "governance", "privacy" ], "secs": [ "media" ], "date": "2026-05-15", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260515.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Proposal Recognizing Rights to Image, Voice, and Digital Identity in the Age of AI", "sum": "The proposal would recognize a person's image, voice, and digital identity as extensions of legal personality, giving individuals control over their use, reproduction, and dissemination in digital environments. It is particularly directed at AI systems capable of creating highly realistic replicas.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-05-15", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260515.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Denmark at the Forefront of Protecting Personality Rights in the Digital Era", "sum": "The legislative initiative highlights Denmark’s adaptation of personality-rights protections to challenges posed by artificial intelligence and digital technologies, with an emphasis on safeguarding human dignity. The available text does not specify the bill’s operative provisions.", "stage": "introduced", "cats": [ "privacy", "deepfakes" ], "secs": [ "media" ], "date": "2026-05-15", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260515.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Initiative on the Ethical Use of Artificial Intelligence (UNESCO Recommendations)", "sum": "The legislative initiative presents UNESCO’s Recommendation on the Ethics of Artificial Intelligence as a framework for the development and use of AI. It emphasizes human rights, dignity, inclusion, equity, non-discrimination, transparency, explainability, and accountability.", "stage": "introduced", "cats": [ "governance", "anti-discrimination", "disclosures" ], "secs": [ "media" ], "date": "2026-05-15", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260515.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "UNESCO Emphasizes Human-Centered Artificial Intelligence and Safeguards for Automated Decisions", "sum": "The initiative endorses a human-centered approach to AI, urging that automated decisions not completely replace human judgment in sensitive fields such as justice, healthcare, and public safety. It also supports privacy and personal-data protection and regulatory frameworks addressing mass surveillance and misuse of information.", "stage": "introduced", "cats": [ "governance", "privacy", "anti-discrimination" ], "secs": [ "media" ], "date": "2026-05-15", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260515.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "These precedents demonstrate a global trend toward regulating artificial intelligence with a focus on fundamental rights without inhibiting technological innovation", "sum": "This appears to be a Mexican legislative initiative concerning a rights-based framework for regulating artificial intelligence while preserving innovation. The available record does not provide enough detail to identify specific obligations or regulated sectors.", "stage": "introduced", "cats": [ "governance", "anti-discrimination" ], "secs": [ "media" ], "date": "2026-05-15", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260515.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Proposal to Regulate Synthetic Digital Manipulation and Protect Biometric Identity", "sum": "The initiative proposes creating a specific legal framework for synthetic digital manipulation, including protections for biometric identity elements such as voice, face, and facial features against reproduction or alteration using advanced technologies. It responds to perceived gaps in existing criminal laws on fraud, threats, privacy, and unauthorized access to computer systems.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-05-15", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260515.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Legislative Initiative on Protecting Identity and Personal Data from Synthetic Digital Manipulation", "sum": "The initiative seeks to update Mexico’s legal framework to address synthetic digital manipulation, including highly realistic reproduction or alteration of a person’s image, voice, and other biometric attributes. It focuses on strengthening identity and personal-data protection in digital environments.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-05-15", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260515.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "In short, the proposal addresses the need to provide the State with effective legal tools to prevent, punish, and remedy harm arising from the misuse of artificial intelligence", "sum": "The legislative initiative seeks to establish legal mechanisms to prevent, sanction, and repair harms caused by improper uses of artificial intelligence, with particular emphasis on protecting personal identity, privacy, and dignity.", "stage": "introduced", "cats": [ "privacy", "deepfakes" ], "secs": [ "media" ], "date": "2026-05-15", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260515.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Synthetic Digital Manipulation and the Rights of Public Figures", "sum": "The initiative addresses the regulation of digitally synthetic manipulation, including its impact on personality rights and public figures. It seeks to balance protection against harmful synthetic media with freedom of expression, democratic debate, and information flow.", "stage": "introduced", "cats": [ "deepfakes" ], "secs": [ "media" ], "date": "2026-05-15", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260515.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:", "jur": "MX", "level": "national", "num": "", "title": "Article 211 Ter: Criminal Penalties for Nonconsensual Synthetic Impersonation", "sum": "Proposed Article 211 Ter would impose four to eight years’ imprisonment and a fine of 500 to 1,500 UMAs on anyone who uses artificial intelligence, machine learning, or other synthetic digital-manipulation technology to generate, alter, modify, or disseminate realistic images, audio, or video impersonating a real person without consent, when done for specified purposes.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-05-15", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260515.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:C.2936", "jur": "IT", "level": "national", "num": "C.2936", "title": "Bill C.2936: Introduction of an Occupational Impact Assessment for Artificial Intelligence Systems Affecting the Organization and Performance of Work, and Provisions to Protect Human Labor and Employment", "sum": "The bill would introduce occupational impact assessments for AI systems that affect how work is organized and performed. It also establishes measures to protect human labor and employment from adverse effects of AI deployment.", "stage": "introduced", "cats": [ "hiring" ], "secs": [ "hr" ], "date": "2026-05-15", "url": "http://dati.senato.it/ddl/60151", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:C.2847", "jur": "IT", "level": "national", "num": "C.2847", "title": "C.2847: Provisions on the Use of Artificial Intelligence and Distributed Ledgers in Social Services and Interventions", "sum": "The bill establishes provisions governing the use of artificial intelligence and distributed-ledger technologies in the delivery of social services and interventions. The available record does not provide further details on specific requirements or safeguards.", "stage": "introduced", "cats": [ "governance", "gov-use" ], "secs": [], "date": "2026-05-15", "url": "http://dati.senato.it/ddl/60005", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1421/2026", "jur": "BR", "level": "national", "num": "PL 1421/2026", "title": "Algorithmic Transparency, Governance, and Protection Against Digital Manipulation", "sum": "Amends Brazil’s Internet Civil Framework to establish algorithmic transparency and governance requirements, prohibit compulsive digital practices and abusive behavioral manipulation, and curb profit-driven amplification of illegal content and opaque distortion of public debate.", "stage": "advancing", "cats": [ "governance", "disclosures" ], "secs": [ "consumer" ], "date": "2026-05-15", "url": "https://www.camara.leg.br/propostas-legislativas/2612311", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1309/2026", "jur": "BR", "level": "national", "num": "PL 1309/2026", "title": "Transparency and Limits for Algorithmic Pricing of Essential Goods", "sum": "Establishes transparency requirements for the use of automated systems to set or change prices and limits algorithmic pricing of essential goods in consumer transactions. It also amends Brazil’s Consumer Protection Code.", "stage": "advancing", "cats": [ "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-05-15", "url": "https://www.camara.leg.br/propostas-legislativas/2611053", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8819", "jur": "US", "level": "national", "num": "HB8819", "title": "HB8819: Federal Artificial Intelligence Risk Management Act of 2026", "sum": "The bill would require federal agencies to use the Artificial Intelligence Risk Management Framework developed by the National Institute of Standards and Technology when using artificial intelligence. It establishes a government-wide risk-management requirement for federal AI deployment.", "stage": "advancing", "cats": [ "gov-use", "governance" ], "secs": [], "date": "2026-05-14", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8819/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 897/2025", "jur": "BR", "level": "national", "num": "PL 897/2025", "title": "PL 897/2025: Artificial Intelligence Research Incentive Act Funded by Betting and Lottery Resources", "sum": "The bill creates incentives for artificial intelligence research financed with revenue from betting and lottery games. It is awaiting placement on the legislative agenda after the amendment period for the substitute text closed without amendments.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-05-14", "url": "https://www.camara.leg.br/propostas-legislativas/2486481", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 6336/2025", "jur": "BR", "level": "national", "num": "PL 6336/2025", "title": "Consumer Protection Against Deepfakes, Synthetic Content, and AI-Enabled Fraud", "sum": "Protects consumers from synthetic content and deepfakes used in commercial communications, advertising, and fraud. It establishes transparency and security duties for suppliers and digital platforms, creates criminal offenses, and prioritizes prosecution of crimes committed using artificial intelligence.", "stage": "advancing", "cats": [ "deepfakes", "disclosures", "consumer-financial" ], "secs": [ "consumer", "media" ], "date": "2026-05-14", "url": "https://www.camara.leg.br/propostas-legislativas/2595747", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 6264", "jur": "MX", "level": "national", "num": "Expediente 6264", "title": "Bill proposing amendments to the Federal Copyright Law and Federal Labor Law concerning protection of performers in light of the use of artificial intelligence systems (Expediente 6264)", "sum": "The initiative would amend Mexican copyright and labor law to protect performing artists and other interpreters or executors whose performances may be used with artificial intelligence systems. It likely addresses consent and related rights concerning AI-generated or digitally reproduced performances.", "stage": "advancing", "cats": [ "deepfakes", "privacy" ], "secs": [ "media", "hr" ], "date": "2026-05-13", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260513.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:FR:DLR5L17N54339", "jur": "FR", "level": "national", "num": "DLR5L17N54339", "title": "DLR5L17N54339: Bill proposal to generalize algorithmic video surveillance", "sum": "The proposal would expand the use of algorithmic video surveillance systems, likely enabling automated analysis of video feeds for public-safety purposes. It is a legislative bill currently under consideration by the relevant committee.", "stage": "advancing", "cats": [ "gov-use", "public-safety" ], "secs": [], "date": "2026-05-12", "url": "https://www.assemblee-nationale.fr/dyn/17/dossiers/DLR5L17N54339", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB3062", "jur": "US", "level": "national", "num": "SB3062", "title": "SB 3062: GUARD Act Guidelines for User Age-Verification and Responsible Dialogue Act of 2026", "sum": "Requires artificial intelligence chatbots to implement user age-verification measures and provide specified disclosures, including responsible-dialogue safeguards. The bill targets chatbot interactions involving potentially underage users.", "stage": "advancing", "cats": [ "minors", "disclosures" ], "secs": [ "consumer" ], "date": "2026-05-11", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/3062/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 5057", "jur": "MX", "level": "national", "num": "Expediente 5057", "title": "Expediente 5057: Initiative proposing a decree to add Section XXXIII to Article 73 of the Political Constitution of the United Mexican States (on artificial intelligence)", "sum": "The initiative proposes a constitutional amendment concerning artificial intelligence, apparently adding federal legislative authority under Article 73. It was presented by Deputy Rafaela Vianey García Romero of Morena and referred to the Constitutional Points Committee.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-05-11", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/may/20260511.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CN:国务院2026年度立法工作计划", "jur": "CN", "level": "national", "num": "国务院2026年度立法工作计划", "title": "State Council 2026 Legislative Work Plan (Comprehensive Artificial Intelligence Legislation Arrangements)", "sum": "The State Council’s 2026 legislative work plan includes accelerating comprehensive legislation to promote the healthy development of artificial intelligence. It identifies future AI legislation as a national legislative priority rather than enacting specific operative requirements at this stage.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-05-11", "url": "https://www.gov.cn/zhengce/zhengceku/202605/content_7068346.htm", "instrument_type": "plan_item", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8711", "jur": "US", "level": "national", "num": "HB8711", "title": "HB8711: Data Infrastructure Risk Reduction Act", "sum": "Requires a strategy to defend data centers against external breaches and to protect communities surrounding data centers. The bill addresses data-center security and community impacts, making data-center infrastructure a substantive subject.", "stage": "introduced", "cats": [ "data-centers", "governance" ], "secs": [ "infra" ], "date": "2026-05-08", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8711/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CN:国能发科技〔2026〕34号", "jur": "CN", "level": "national", "num": "国能发科技〔2026〕34号", "title": "Notice Issuing the Action Plan for Promoting Two-Way Empowerment Between Artificial Intelligence and Energy (Guo Neng Fa Ke Ji〔2026〕No. 34)", "sum": "The National Development and Reform Commission, National Energy Administration, Ministry of Industry and Information Technology, and National Data Administration issue an action plan to promote the reciprocal integration of artificial intelligence and the energy sector. It addresses the use of AI in energy and the development of energy capabilities and infrastructure to support AI.", "stage": "advancing", "cats": [ "governance", "data-centers" ], "secs": [ "infra" ], "date": "2026-05-08", "url": "https://www.gov.cn/zhengce/zhengceku/202605/content_7068153.htm", "instrument_type": "final_measure", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CN:c_1779979789523320", "jur": "CN", "level": "national", "num": "c_1779979789523320", "title": "Implementation Opinions on the Standardized Application and Innovative Development of Intelligent Agents", "sum": "A Chinese administrative policy document establishing guidance for the standardized application, governance, and innovative development of intelligent-agent systems. It is intended to support responsible deployment while promoting development of agent technologies.", "stage": "advancing", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-05-08", "url": "https://www.cac.gov.cn/2026-05/08/c_1779979789523320.htm", "instrument_type": "final_measure", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 6663/2025", "jur": "BR", "level": "national", "num": "PL 6663/2025", "title": "PL 6663/2025: Transparent Artificial Intelligence Company Seal", "sum": "Creates a certification seal for organizations that adopt clear, ethical, and auditable practices in their use of algorithms. The bill establishes transparency as a basis for recognizing responsible organizational use of AI.", "stage": "advancing", "cats": [ "governance", "disclosures" ], "secs": [], "date": "2026-05-08", "url": "https://www.camara.leg.br/propostas-legislativas/2599040", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3088/2024", "jur": "BR", "level": "national", "num": "PL 3088/2024", "title": "Worker Protections Against Artificial Intelligence in the Workplace", "sum": "Amends Brazil’s Consolidation of Labor Laws (CLT) to protect workers from the use of artificial intelligence. The bill addresses workplace impacts and protections associated with AI systems.", "stage": "advancing", "cats": [ "hiring" ], "secs": [ "hr" ], "date": "2026-05-08", "url": "https://www.camara.leg.br/propostas-legislativas/2451411", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 2129/2025", "jur": "BR", "level": "national", "num": "PL 2129/2025", "title": "Artificial Intelligence Education in Basic Education Curricula", "sum": "Requires the inclusion of content related to artificial intelligence in the basic education curriculum. The bill would establish AI education as part of the country’s foundational schooling requirements.", "stage": "advancing", "cats": [ "education" ], "secs": [], "date": "2026-05-08", "url": "https://www.camara.leg.br/propostas-legislativas/2504671", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4522/2025", "jur": "BR", "level": "national", "num": "PL 4522/2025", "title": "Bill 4522/2025", "sum": "Establishes guidelines and criteria for complying with Federal Council of Psychology protocols when using conversational generative artificial intelligence systems. The bill addresses the use of these systems in psychological and mental-health contexts.", "stage": "advancing", "cats": [ "healthcare" ], "secs": [ "health" ], "date": "2026-05-07", "url": "https://www.camara.leg.br/propostas-legislativas/2559965", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 450/2026", "jur": "BR", "level": "national", "num": "PL 450/2026", "title": "Transparency and Labeling of Algorithmically Generated Political Content During Elections", "sum": "Establishes transparency obligations, record-retention requirements, and labeling of political content generated or amplified by algorithms during the electoral period. It also provides for related measures concerning algorithmically generated or amplified political communications.", "stage": "advancing", "cats": [ "elections", "disclosures" ], "secs": [ "media" ], "date": "2026-05-07", "url": "https://www.camara.leg.br/propostas-legislativas/2602201", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4416/2025", "jur": "BR", "level": "national", "num": "PL 4416/2025", "title": "Mandatory AI Safeguards for Suicide and Self-Harm Prevention", "sum": "Amends Law No. 13,819 of April 26, 2019, which established Brazil’s National Policy for the Prevention of Self-Harm and Suicide, to require safeguards in artificial-intelligence systems. The bill is attached to PL 4348/2025 for joint consideration.", "stage": "advancing", "cats": [ "governance", "healthcare" ], "secs": [ "health" ], "date": "2026-05-07", "url": "https://www.camara.leg.br/propostas-legislativas/2556998", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 2506/2024", "jur": "BR", "level": "national", "num": "PL 2506/2024", "title": "Enhanced Penalties for AI-Assisted Sexual Exploitation of Minors", "sum": "Amends Brazil’s Penal Code to increase penalties for facilitating child or adolescent prostitution or other forms of sexual exploitation of a child, adolescent, or vulnerable person when the offense is committed using artificial intelligence.", "stage": "advancing", "cats": [ "minors", "public-safety" ], "secs": [ "consumer" ], "date": "2026-05-07", "url": "https://www.camara.leg.br/propostas-legislativas/2442452", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 212/2026", "jur": "BR", "level": "national", "num": "PL 212/2026", "title": "Criminalization of AI-Generated and Manipulated Deepfake Content", "sum": "The bill criminalizes the production and dissemination of audiovisual, audio, or visual content generated or manipulated by artificial intelligence, including deepfakes. It also provides for related measures.", "stage": "advancing", "cats": [ "deepfakes", "public-safety" ], "secs": [ "media" ], "date": "2026-05-07", "url": "https://www.camara.leg.br/propostas-legislativas/2600618", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:C.2813", "jur": "IT", "level": "national", "num": "C.2813", "title": "Bill C.2813: Provisions on Minors’ Use of Interactive Services That Simulate Human Conversations Through Generative Artificial Intelligence Systems", "sum": "The bill addresses minors’ use of interactive services that simulate human conversations using generative AI systems. Its specific regulatory requirements are not detailed in the available description.", "stage": "introduced", "cats": [ "minors" ], "secs": [ "consumer" ], "date": "2026-05-06", "url": "http://dati.senato.it/ddl/59936", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CA:C-277", "jur": "CA", "level": "national", "num": "C-277", "title": "C-277: An Act to provide for the regulation of the online use of deepfakes and for related transparency measures", "sum": "The bill would regulate the online use of deepfakes and establish related transparency measures. It addresses synthetic media as a substantive subject of federal legislation.", "stage": "introduced", "cats": [ "deepfakes", "disclosures", "governance" ], "secs": [ "media" ], "date": "2026-05-06", "url": "https://www.parl.ca/legisinfo/en/bill/45-1/c-277", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 898/2025", "jur": "BR", "level": "national", "num": "PL 898/2025", "title": "PL 898/2025: Artificial Intelligence Research and Development Incentive Law", "sum": "Establishes a legal framework to promote and incentivize artificial intelligence research and development in Brazil. The bill also provides for related measures to support AI innovation.", "stage": "advancing", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-05-06", "url": "https://www.camara.leg.br/propostas-legislativas/2486482", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3003/2025", "jur": "BR", "level": "national", "num": "PL 3003/2025", "title": "PL 3003/2025: Bill prohibiting the replacement of teachers by artificial intelligence systems in basic and higher education", "sum": "The bill would prohibit replacing teachers with artificial intelligence systems in basic education and higher education. It addresses the use of AI in teaching roles across both school and university settings.", "stage": "advancing", "cats": [ "education" ], "secs": [], "date": "2026-05-06", "url": "https://www.camara.leg.br/propostas-legislativas/2527320", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1501/2026", "jur": "BR", "level": "national", "num": "PL 1501/2026", "title": "Election-Period Transparency and Risk Mitigation Requirements for Major AI Providers", "sum": "Establishes transparency, auditing, and information-risk mitigation obligations for providers of AI systems with significant operations in Brazil during electoral periods. It requires Information Impact Reports and labeling of AI-generated electoral content, prohibits persuasive microtargeting during electoral windows, requires cooperation with electoral and data-protection authorities, and creates proportional administrative sanctions.", "stage": "advancing", "cats": [ "governance", "elections", "disclosures" ], "secs": [ "media" ], "date": "2026-05-06", "url": "https://www.camara.leg.br/propostas-legislativas/2612787", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1476/2026", "jur": "BR", "level": "national", "num": "PL 1476/2026", "title": "Bill 1476/2026", "sum": "Requires a Regulatory and Economic Impact Assessment for federal bills and regulatory acts concerning artificial intelligence systems. The assessment would cover costs and benefits, proportionality, alternatives, public consultation, methodological transparency, independent review, phased implementation, regulatory sandboxes, sunset clauses, and ex post evaluation, with related responsibilities and administrative sanctions.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-05-06", "url": "https://www.camara.leg.br/propostas-legislativas/2612704", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:C.2691", "jur": "IT", "level": "national", "num": "C.2691", "title": "Bill C.2691: Incentives for Small and Medium-Sized Enterprises Investing in and Training for the Use of Artificial Intelligence Systems", "sum": "The bill would provide incentives for small and medium-sized enterprises making investments and undertaking training related to the use of artificial intelligence systems. The specific form and eligibility requirements of the incentives are not provided in the available description.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-05-05", "url": "http://dati.senato.it/ddl/59704", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:ID:RPerpres Peta Jalan AI 2026-2029", "jur": "ID", "level": "national", "num": "RPerpres Peta Jalan AI 2026-2029", "title": "Indonesia Draft National AI Roadmap 2026-2029", "sum": "The draft sets strategic priorities for Indonesia's AI ecosystem, including governance, skills, infrastructure, innovation, public services, and responsible adoption.", "stage": "advancing", "cats": [ "governance", "gov-use", "education" ], "secs": [], "date": "2026-05-05", "url": "https://jdih.komdigi.go.id/berita/view/116", "instrument_type": "draft presidential regulation", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:ID:RPerpres Etika AI", "jur": "ID", "level": "national", "num": "RPerpres Etika AI", "title": "Indonesia Draft Presidential Regulation on AI Ethics", "sum": "The draft is intended to provide a national legal foundation for ethical and accountable AI governance. Cross-ministry work was finalized in May 2026 before submission to the President.", "stage": "advancing", "cats": [ "governance", "disclosures", "anti-discrimination", "privacy" ], "secs": [], "date": "2026-05-05", "url": "https://jdih.komdigi.go.id/berita/view/116", "instrument_type": "draft presidential regulation", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8664", "jur": "US", "level": "national", "num": "HB8664", "title": "HB 8664: SBA AI Adoption Reporting Act of 2026", "sum": "The bill would require the Small Business Administration Administrator to implement a recommendation concerning artificial intelligence adoption, including related reporting. The available description does not specify the recommendation or reporting requirements.", "stage": "introduced", "cats": [ "gov-use", "governance" ], "secs": [], "date": "2026-05-04", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8664/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1559/2024", "jur": "BR", "level": "national", "num": "PL 1559/2024", "title": "PL 1559/2024: Bill to Prohibit Using Artificial Intelligence as a Benchmark or Metric in Developing Educational Materials or Assessing School Performance", "sum": "The bill would amend Brazil’s National Education Guidelines and Bases Law to prohibit public education systems from using AI as a reference or metric for developing pedagogical materials or evaluating school performance. It also provides for related measures.", "stage": "advancing", "cats": [ "gov-use", "education" ], "secs": [], "date": "2026-05-04", "url": "https://www.camara.leg.br/propostas-legislativas/2430998", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4476", "jur": "US", "level": "national", "num": "SB4476", "title": "SB4476: Workforce Transparency Act of 2026", "sum": "The bill would establish a voluntary disclosure framework for AI developers and users to report workforce-related data and require the Secretary of Labor to report on that information. It focuses on improving transparency about AI's effects on the workforce.", "stage": "advancing", "cats": [ "disclosures", "governance" ], "secs": [ "hr" ], "date": "2026-04-30", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4476/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4456", "jur": "US", "level": "national", "num": "SB4456", "title": "SB4456: AI OVERWATCH Act (Artificial Intelligence Oversight of Verified Exports and Restrictions on Weaponizable Advanced Technology to Covered High-Risk Actors Act)", "sum": "The bill would require export, reexport, or in-country transfer licenses for specified integrated circuits and other advanced technologies when involving covered high-risk actors. It is aimed at restricting access to potentially weaponizable AI-related computing technology.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [ "infra" ], "date": "2026-04-30", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4456/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8623", "jur": "US", "level": "national", "num": "HB8623", "title": "HB8623: GUARD Act Guidelines for User Age-Verification and Responsible Dialogue Act of 2026", "sum": "The bill would require artificial intelligence chatbots to implement age-verification measures and provide specified disclosures. It is intended to promote responsible chatbot interactions, particularly for younger users.", "stage": "introduced", "cats": [ "minors", "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-04-30", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8623/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1893/2025", "jur": "BR", "level": "national", "num": "PL 1893/2025", "title": "PL 1893/2025: Bill establishing the National Program for Prevention and Combating Digital Fraud", "sum": "Establishes a national program to prevent and combat digital fraud using algorithms and artificial intelligence, and sets out related measures. The bill would promote the use of automated tools in efforts to detect and address digital scams.", "stage": "advancing", "cats": [ "gov-use", "consumer-financial", "public-safety" ], "secs": [], "date": "2026-04-30", "url": "https://www.camara.leg.br/propostas-legislativas/2500774", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4441", "jur": "US", "level": "national", "num": "SB4441", "title": "SB4441: CREATE AI Act (Creating Resources for Every American to Experiment with Artificial Intelligence Act)", "sum": "Establishes the National Artificial Intelligence Research Resource to provide researchers with access to computing resources, datasets, and other infrastructure for artificial intelligence research and experimentation.", "stage": "advancing", "cats": [ "governance", "gov-use", "frontier" ], "secs": [ "infra" ], "date": "2026-04-29", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4441/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4414", "jur": "US", "level": "national", "num": "SB4414", "title": "SB 4414: LIFT AI Act (Literacy in Future Technologies Artificial Intelligence Act)", "sum": "The bill would strengthen artificial intelligence literacy education for elementary and secondary school students. It proposes related educational efforts but does not establish a comprehensive framework for regulating AI systems.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-04-28", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4414/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:MPV 1318/2025", "jur": "BR", "level": "national", "num": "MPV 1318/2025", "title": "Provisional Measure 1318/2025", "sum": "Establishes the Special Taxation Regime for Data Center Services (REDATA) by amending Law No. 11,196/2005, and also amends Law No. 15,211/2025. The measure addresses tax treatment for data center services and related digital infrastructure.", "stage": "dead", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-28", "url": "https://www.camara.leg.br/propostas-legislativas/2562174", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4402", "jur": "US", "level": "national", "num": "SB4402", "title": "SB4402: A bill to require a report on the use of artificial intelligence with respect to access to unminimized information collected pursuant to the Foreign Intelligence Surveillance Act of 1978", "sum": "The bill would require a report on how artificial intelligence is used to access unminimized information collected under the Foreign Intelligence Surveillance Act of 1978. It addresses government use of AI in handling sensitive surveillance data.", "stage": "advancing", "cats": [ "gov-use", "privacy" ], "secs": [], "date": "2026-04-27", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4402/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8526", "jur": "US", "level": "national", "num": "HB8526", "title": "HB8526: Mammography Quality Standards for the Use of Artificial Intelligence Systems", "sum": "This bill would amend the Public Health Service Act to update quality standards for mammography facilities that use artificial intelligence systems. It is specifically focused on incorporating AI into mammography facility quality and safety requirements.", "stage": "introduced", "cats": [ "healthcare" ], "secs": [ "health" ], "date": "2026-04-27", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8526/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8516", "jur": "US", "level": "national", "num": "HB8516", "title": "H.R. 8516: American Leadership in AI Act", "sum": "This bill proposes federal measures to strengthen U.S. leadership in artificial intelligence. Its referral to multiple committees indicates provisions spanning science and technology, energy, agriculture, oversight, education, judiciary, and taxation.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-04-27", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8516/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8488", "jur": "US", "level": "national", "num": "HB8488", "title": "HB 8488: AI Data Center Site Selection Transparency Act of 2026", "sum": "The bill would require developers of AI-focused data centers to disclose specified information before developing those facilities. It addresses transparency in the siting and development of AI-focused data centers.", "stage": "introduced", "cats": [ "data-centers", "disclosures" ], "secs": [ "infra" ], "date": "2026-04-23", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8488/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8486", "jur": "US", "level": "national", "num": "HB8486", "title": "HB8486: Data Driven Suicide Prevention and Outreach Act of 2026", "sum": "The bill directs the Secretary of Veterans Affairs to award grants for developing predictive models that assess risk factors associated with suicide among veterans. It establishes a federal program supporting AI-enabled suicide-prevention research and outreach.", "stage": "introduced", "cats": [ "healthcare", "gov-use" ], "secs": [ "health" ], "date": "2026-04-23", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8486/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8479", "jur": "US", "level": "national", "num": "HB8479", "title": "HB 8479: Protecting Consumers from Deceptive Artificial Intelligence Act", "sum": "The bill would require the National Institute of Standards and Technology to establish task forces on technical standards for identifying generative-AI-created content. It would also require audio and visual content created or substantially modified by generative AI to disclose its AI origin.", "stage": "introduced", "cats": [ "disclosures", "governance" ], "secs": [ "media" ], "date": "2026-04-23", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8479/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 6472/2025", "jur": "BR", "level": "national", "num": "PL 6472/2025", "title": "Bill 6472/2025", "sum": "Establishes consumer protections against abusive automated communications, including repetitive calls, contacts outside permitted hours, false representations, misuse of synthetic voice (deepvoice), spoofing, and other forms of digital harassment. It requires transparency, consent, effective opt-out mechanisms, data-governance safeguards compatible with Brazil's General Data Protection Law, and provides administrative and civil sanctions and direct compensation for violations.", "stage": "advancing", "cats": [ "deepfakes", "consumer-financial", "disclosures" ], "secs": [ "consumer" ], "date": "2026-04-23", "url": "https://www.camara.leg.br/propostas-legislativas/2597384", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8283", "jur": "US", "level": "national", "num": "HB8283", "title": "HB8283: Deterring American AI Model Theft Act of 2026", "sum": "The bill would protect closed-source, U.S.-owned AI models from foreign adversaries seeking to extract their key technical features, citing national-security concerns. Its specific operative mechanisms are not provided in the description.", "stage": "advancing", "cats": [ "frontier", "governance" ], "secs": [], "date": "2026-04-22", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8283/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB6996", "jur": "US", "level": "national", "num": "HB6996", "title": "HB6996: Full AI Stack Export Promotion Act", "sum": "The bill would facilitate the global export of U.S. artificial intelligence systems, computing hardware, and technical standards. It addresses international promotion of the full AI technology stack.", "stage": "advancing", "cats": [ "governance", "frontier" ], "secs": [ "infra" ], "date": "2026-04-22", "url": "https://www.congress.gov/bill/119th-congress/house-bill/6996/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8382", "jur": "US", "level": "national", "num": "HB8382", "title": "HB8382: To Prohibit the Manufacture and Conveyance of Certain Products for Children That Incorporate an Artificial Intelligence Chatbot, and for Other Purposes", "sum": "The bill would prohibit the manufacture and transportation of certain children’s products that incorporate an artificial intelligence chatbot. It was introduced in the House and has not yet advanced through the legislative process.", "stage": "introduced", "cats": [ "minors" ], "secs": [ "consumer" ], "date": "2026-04-21", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8382/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:EU:Decision (EU) 2026/1080", "jur": "EU", "level": "national", "num": "Decision (EU) 2026/1080", "title": "Council Decision (EU) 2026/1080 on the EU’s Conclusion of the Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law", "sum": "The decision approves the conclusion, on behalf of the European Union, of the Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law. The convention establishes international principles and obligations for ensuring that AI activities are consistent with human rights, democratic governance, and the rule of law.", "stage": "passed", "cats": [ "governance" ], "secs": [], "date": "2026-04-21", "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32026D1080", "instrument_type": "adopted_act", "binding_status": "binding", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:326675", "jur": "DE", "level": "national", "num": "326675", "title": "Bundesrat Resolution: Put EU AI Regulation to the Test!", "sum": "The resolution addresses the importance of artificial intelligence for competitiveness and calls for reducing administrative burdens, overlapping regulation, and excessive data-protection requirements under EU AI rules. It advocates differentiated treatment of law-enforcement authorities and businesses, greater flexibility, and improved legal and planning certainty.", "stage": "passed", "cats": [ "governance" ], "secs": [], "date": "2026-04-21", "url": "https://dip.bundestag.de/vorgang/vorgang/326675", "instrument_type": "bill", "binding_status": "binding", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:333924", "jur": "DE", "level": "national", "num": "333924", "title": "European Parliament resolution of 10 March 2026 on copyright and generative artificial intelligence: opportunities and challenges (2025/2058(INI)), EP P10_TA(2026)0066", "sum": "The resolution sets out the European Parliament's policy position on copyright issues arising from generative AI, including the use of copyrighted works for training, transparency, licensing, and protections for creators. It calls for policy and regulatory action to balance AI innovation with copyright enforcement and creator remuneration.", "stage": "passed", "cats": [ "governance", "disclosures", "privacy" ], "secs": [ "media" ], "date": "2026-04-20", "url": "https://dip.bundestag.de/vorgang/vorgang/333924", "instrument_type": "bill", "binding_status": "binding", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 5342/2023", "jur": "BR", "level": "national", "num": "PL 5342/2023", "title": "Criminalization of Nonconsensual AI-Generated Sexual Images", "sum": "Criminalizes the creation, dissemination, and sale of unauthorized nude or sexually explicit images generated using software and artificial intelligence, known as “fake pornography.” It also makes prosecution of crimes against sexual dignity unconditional on a victim's complaint and establishes sentencing enhancements.", "stage": "advancing", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-04-17", "url": "https://www.camara.leg.br/propostas-legislativas/2401172", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8323", "jur": "US", "level": "national", "num": "HB8323", "title": "HB8323: SOUL Act of 2026 (Sovereign Ownership of Unique Likeness Act of 2026)", "sum": "The bill would amend U.S. copyright law to establish ownership rights in an individual's unique likeness and protect against unauthorized digital replicas and related abuses. It would address synthetic representations of a person's identity, including potentially AI-generated likenesses.", "stage": "introduced", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-04-16", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8323/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IN:constitution-of-ai-governance-and-economic-group-aigeg-reg", "jur": "IN", "level": "national", "num": "constitution-of-ai-governance-and-economic-group-aigeg-reg", "title": "Constitution of AI Governance and Economic Group (AIGEG)", "sum": "A MeitY order establishes the AI Governance and Economic Group (AIGEG), a government body focused on AI governance and economic policy. The item is listed on MeitY’s Orders and Notices page.", "stage": "passed", "cats": [ "governance" ], "secs": [], "date": "2026-04-16", "url": "https://www.meity.gov.in/static/uploads/2026/04/43a4ec455c26b0f061cc7cca98770a45.pdf", "instrument_type": "final_measure", "binding_status": "binding", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB3269", "jur": "US", "level": "national", "num": "SB3269", "title": "SB3269: Liquid Cooling for Artificial Intelligence Act of 2025", "sum": "Directs the Comptroller General of the United States to conduct a technology assessment of liquid-cooling systems for artificial-intelligence compute clusters and high-performance-computing facilities. The assessment is intended to inform policy regarding infrastructure supporting intensive AI computation.", "stage": "advancing", "cats": [ "data-centers", "frontier" ], "secs": [ "infra" ], "date": "2026-04-15", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/3269/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:AR:1319-D-2026", "jur": "AR", "level": "national", "num": "1319-D-2026", "title": "Bill 1319-D-2026: Regulation of Digital Editing Tools and Artificial Intelligence for the Manipulation and Creation of Images or Voice Cloning", "sum": "The bill proposes to regulate the use of digital editing tools and artificial intelligence to manipulate or create images and clone voices. Specific obligations and enforcement mechanisms are not detailed in the available description.", "stage": "introduced", "cats": [ "deepfakes", "disclosures" ], "secs": [ "media" ], "date": "2026-04-13", "url": "https://www.hcdn.gob.ar/proyectos/proyecto.jsp?exp=1319-D-2026", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:EU:Ares(2026)560463", "jur": "EU", "level": "national", "num": "Ares(2026)560463", "title": "Implementing Regulation Articles 92 and 101 AI Act", "sum": "The proposed European Commission Implementing Regulation lays down implementing rules under Articles 92 and 101 of the EU AI Act. It is currently a draft open for public feedback.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-04-10", "url": "https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/16472", "instrument_type": "implementing_act", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CN:教科信〔2026〕1号", "jur": "CN", "level": "national", "num": "教科信〔2026〕1号", "title": "Notice of the Ministry of Education and Four Other Ministries on Issuing the Action Plan for “AI + Education” (教科信〔2026〕1号)", "sum": "The five ministries jointly issue an action plan to advance the integration and application of artificial intelligence across education. It establishes national implementation priorities and calls for coordinated action by relevant departments and educational institutions.", "stage": "advancing", "cats": [ "governance", "education" ], "secs": [], "date": "2026-04-10", "url": "https://www.gov.cn/zhengce/zhengceku/202604/content_7065138.htm", "instrument_type": "final_measure", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8241", "jur": "US", "level": "national", "num": "HB8241", "title": "HB8241: Power for the People Act of 2026", "sum": "The bill would establish data-center load queues and data-center-specific electricity rate classes to mitigate the impact of data centers on other electricity consumers.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-09", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8241/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8229", "jur": "US", "level": "national", "num": "HB8229", "title": "HB8229: Lower Grocery Prices Act", "sum": "The bill would prohibit certain uses of algorithmic decision systems to set individualized prices for food, groceries, and agricultural commodities. It also includes related provisions addressing such pricing practices.", "stage": "introduced", "cats": [ "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-04-09", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8229/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 4401", "jur": "MX", "level": "national", "num": "Expediente 4401", "title": "Initiative proposing a decree to amend Article 73 of the Political Constitution of the United Mexican States (on artificial intelligence): Expediente 4401", "sum": "The initiative proposes a constitutional amendment concerning artificial intelligence, potentially establishing or clarifying Congress's authority to legislate on AI. It was presented by Deputy Ivonne Aracelly Ortega Pacheco of Movimiento Ciudadano and referred to the Constitutional Points Commission.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-04-08", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/abr/20260408.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:S.1857", "jur": "IT", "level": "national", "num": "S.1857", "title": "S.1857: Conversion into law, with amendments, of Decree-Law No. 21 of 20 February 2026 on energy costs, industrial decarbonization, grid saturation, and data-center integration", "sum": "The bill converts into law, with amendments, an urgent decree addressing electricity and gas costs, business competitiveness, industrial decarbonization, the resolution of virtual saturation in electricity networks, and the integration of data centers into the electricity system. It therefore establishes energy and grid-related measures affecting data-center infrastructure.", "stage": "passed", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-08", "url": "http://dati.senato.it/ddl/60022", "instrument_type": "bill", "binding_status": "binding", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 7174/2025", "jur": "BR", "level": "national", "num": "PL 7174/2025", "title": "PL 7174/2025: National Algorithmic Ethics Seal for Digital Educational Products", "sum": "Establishes a National Algorithmic Ethics Seal for digital educational products used by public education institutions and provides related measures. The proposal would create an ethics-oriented certification framework for algorithmic systems in educational technology.", "stage": "advancing", "cats": [ "gov-use", "education" ], "secs": [], "date": "2026-04-08", "url": "https://www.camara.leg.br/propostas-legislativas/2599783", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 6621/2025", "jur": "BR", "level": "national", "num": "PL 6621/2025", "title": "PL 6621/2025: Bill Establishing the National Public Intelligence System", "sum": "The bill would establish the National Public Intelligence System (SNIP) to support the ethical and integrated use of artificial intelligence technologies in the formulation, implementation, and evaluation of public policies. It also provides related measures for organizing and governing public-sector AI use.", "stage": "advancing", "cats": [ "governance", "gov-use" ], "secs": [], "date": "2026-04-07", "url": "https://www.camara.leg.br/propostas-legislativas/2598988", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 6479/2025", "jur": "BR", "level": "national", "num": "PL 6479/2025", "title": "Digital Identity Protection and Synthetic Identity Rights", "sum": "The bill protects personal digital identity against artificial intelligence technologies and synthetic representations, establishes personality rights, regulates the commercial use of bodily and expressive attributes, and sets duties for digital platforms.", "stage": "advancing", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-04-07", "url": "https://www.camara.leg.br/propostas-legislativas/2597476", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 305/2026", "jur": "BR", "level": "national", "num": "PL 305/2026", "title": "PL 305/2026: Regional Data Center Development Program (PRODATA BRASIL)", "sum": "Establishes the PRODATA BRASIL program to attract domestic and foreign investment in regional data centers, promote productive development, and expand digital infrastructure in Brazil's North and Northeast regions.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-04-07", "url": "https://www.camara.leg.br/propostas-legislativas/2601006", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 762/2026", "jur": "BR", "level": "national", "num": "PL 762/2026", "title": "PL 762/2026: Establishes a Regulatory Framework for Artificial Intelligence Systems in High-Consequence Sectors", "sum": "The bill establishes a regulatory framework for artificial intelligence systems used in high-consequence sectors and provides related measures. Its detailed obligations are not specified in the available description.", "stage": "advancing", "cats": [ "governance", "anti-discrimination" ], "secs": [], "date": "2026-04-06", "url": "https://www.camara.leg.br/propostas-legislativas/2604767", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 728/2026", "jur": "BR", "level": "national", "num": "PL 728/2026", "title": "PL 728/2026: National Policy for Technological Governance, Algorithmic Transparency and Digital Equity", "sum": "Establishes a national policy for technological governance, algorithmic transparency and digital equity in public administration, along with related provisions. The proposal is being processed jointly with PL 4358/2025.", "stage": "advancing", "cats": [ "governance", "gov-use", "disclosures" ], "secs": [], "date": "2026-04-06", "url": "https://www.camara.leg.br/propostas-legislativas/2604315", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 7132/2025", "jur": "BR", "level": "national", "num": "PL 7132/2025", "title": "Mandatory Bias Audits for High-Risk Artificial Intelligence Systems", "sum": "Amends Brazil’s Internet Civil Framework (Law No. 12,965 of April 23, 2014) to require bias audits for high-risk artificial-intelligence systems. The bill has been formally attached for joint consideration to PL 2338/2023.", "stage": "advancing", "cats": [ "governance", "anti-discrimination" ], "secs": [], "date": "2026-04-06", "url": "https://www.camara.leg.br/propostas-legislativas/2599741", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 704/2026", "jur": "BR", "level": "national", "num": "PL 704/2026", "title": "PL 704/2026: Establishing Structural Priorities for Artificial Intelligence in Brazil", "sum": "The bill establishes guiding priorities for the development, implementation, and use of artificial intelligence in Brazil, placing anti-corruption efforts and reducing social inequalities at the core of AI policy. It is being processed jointly with PL 2338/2023.", "stage": "advancing", "cats": [ "governance", "anti-discrimination" ], "secs": [], "date": "2026-04-06", "url": "https://www.camara.leg.br/propostas-legislativas/2604146", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 6708/2025", "jur": "BR", "level": "national", "num": "PL 6708/2025", "title": "Artificial Intelligence Literacy and Algorithmic Ethics in Education", "sum": "Amends Brazil's National Education Guidelines and Framework Law to make artificial intelligence, digital literacy, and algorithmic ethics mandatory cross-curricular subjects. The bill is being considered jointly with PL 3009/2025.", "stage": "advancing", "cats": [ "governance", "education" ], "secs": [], "date": "2026-04-06", "url": "https://www.camara.leg.br/propostas-legislativas/2599301", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 6270/2025", "jur": "BR", "level": "national", "num": "PL 6270/2025", "title": "Human Writing, Critical Thinking, and Ethical Artificial Intelligence Use", "sum": "The bill seeks to promote human writing, critical thinking, and the ethical use of artificial intelligence in Brazil. It establishes guidelines for education, research, and technological regulation.", "stage": "advancing", "cats": [ "governance", "education" ], "secs": [], "date": "2026-04-06", "url": "https://www.camara.leg.br/propostas-legislativas/2594540", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 6237/2025", "jur": "BR", "level": "national", "num": "PL 6237/2025", "title": "National Artificial Intelligence Development, Regulation, and Governance System", "sum": "Establishes the National System for the Development, Regulation, and Governance of Artificial Intelligence in Brazil. The bill proposes a national institutional and regulatory framework for AI development and oversight.", "stage": "advancing", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-04-06", "url": "https://www.camara.leg.br/propostas-legislativas/2594000", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 6172/2025", "jur": "BR", "level": "national", "num": "PL 6172/2025", "title": "Author Protection and Synthetic Content Standards for Artificial Intelligence Creations", "sum": "Establishes protections for authors of artistic, scientific, and literary works created using artificial intelligence systems, and sets criteria for producing and disseminating synthetic content.", "stage": "advancing", "cats": [ "disclosures" ], "secs": [ "media" ], "date": "2026-04-06", "url": "https://www.camara.leg.br/propostas-legislativas/2592508", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 6102/2025", "jur": "BR", "level": "national", "num": "PL 6102/2025", "title": "Mandatory Identification of Artificial Intelligence-Generated or Altered Audiovisual Content", "sum": "Requires images, videos, and audiovisual content produced or altered by artificial-intelligence systems to include a watermark or other unmistakable indication of their synthetic or AI-altered origin. It also establishes related requirements and measures.", "stage": "advancing", "cats": [ "disclosures", "deepfakes" ], "secs": [ "media" ], "date": "2026-04-06", "url": "https://www.camara.leg.br/propostas-legislativas/2591093", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 5324/2025", "jur": "BR", "level": "national", "num": "PL 5324/2025", "title": "Mandatory Identification of Artificial Intelligence-Generated Content Online", "sum": "Amends Brazil’s Civil Rights Framework for the Internet (Law No. 12,965 of April 23, 2014) to require identification of content generated by artificial intelligence. The bill has been attached for joint consideration to PL 3967/2025.", "stage": "advancing", "cats": [ "disclosures" ], "secs": [ "media" ], "date": "2026-04-06", "url": "https://www.camara.leg.br/propostas-legislativas/2574067", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3009/2025", "jur": "BR", "level": "national", "num": "PL 3009/2025", "title": "Artificial Intelligence Education as a Curriculum Component", "sum": "Amends Brazil's Education Guidelines and Bases Law (Law No. 9,394/1996) to establish artificial intelligence education as a curricular subject. The proposal would incorporate AI instruction into the formal school curriculum.", "stage": "advancing", "cats": [ "education" ], "secs": [], "date": "2026-04-06", "url": "https://www.camara.leg.br/propostas-legislativas/2527346", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1969/2025", "jur": "BR", "level": "national", "num": "PL 1969/2025", "title": "Copyright Rules for Artificial Intelligence-Generated Intellectual Works", "sum": "The bill would amend Brazil's Copyright Law to regulate ownership, authorship, registration, protection, and civil liability for intellectual works generated by artificial intelligence systems. It addresses the legal status and responsibility associated with AI-generated works.", "stage": "advancing", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "media" ], "date": "2026-04-06", "url": "https://www.camara.leg.br/propostas-legislativas/2502877", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CN:工信部联科〔2026〕75号", "jur": "CN", "level": "national", "num": "工信部联科〔2026〕75号", "title": "Ministry of Industry and Information Technology and Nine Other Departments Notice Issuing the Measures for the Review and Services of Artificial Intelligence Science and Technology Ethics (Trial) (MIIT Joint Science and Technology [2026] No. 75)", "sum": "The notice issues trial measures establishing procedures and services for reviewing the scientific and technological ethics of artificial intelligence. It covers ethics review responsibilities and implementation by relevant government departments and organizations.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-04-03", "url": "https://www.gov.cn/zhengce/zhengceku/202604/content_7064646.htm", "instrument_type": "final_measure", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CN:国药监综〔2026〕6号", "jur": "CN", "level": "national", "num": "国药监综〔2026〕6号", "title": "NMPA Opinions on Implementing “Artificial Intelligence + Drug Regulation” (NMPA General Office [2026] No. 6)", "sum": "This implementation opinion sets out how China’s National Medical Products Administration will apply artificial intelligence to drug-regulatory work, building on its smart drug-regulation action plan. It is directed to provincial and local drug-regulatory authorities, NMPA departments, and affiliated units.", "stage": "advancing", "cats": [ "gov-use", "healthcare" ], "secs": [ "health" ], "date": "2026-04-03", "url": "https://www.gov.cn/zhengce/zhengceku/202604/content_7064591.htm", "instrument_type": "final_measure", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CN:c_1776952992709096", "jur": "CN", "level": "national", "num": "c_1776952992709096", "title": "Cyberspace Administration of China Notice on Soliciting Public Comments on the Measures for the Administration of Digital Virtual Human Information Services (Draft for Comment)", "sum": "The Cyberspace Administration of China has issued a draft administrative measure to regulate digital virtual human information services and their applications, based on China’s cybersecurity, data security, personal information protection, and internet information service laws. It is open for public comment.", "stage": "introduced", "cats": [ "governance", "disclosures", "privacy" ], "secs": [ "media" ], "date": "2026-04-03", "url": "https://www.cac.gov.cn/2026-04/03/c_1776952992709096.htm", "instrument_type": "draft_for_comment", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4400/2024", "jur": "BR", "level": "national", "num": "PL 4400/2024", "title": "Related Rights for Realistic Algorithm-Generated Performer Voice and Image Content", "sum": "Amends Brazil’s Copyright Law to regulate related rights in highly realistic algorithm-generated multimedia content that simulates the participation of an identifiable performer through their voice or image. The bill specifically addresses synthetic audiovisual works and recordings using digitally generated likenesses.", "stage": "advancing", "cats": [ "deepfakes" ], "secs": [ "media" ], "date": "2026-04-01", "url": "https://www.camara.leg.br/propostas-legislativas/2469586", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:AU:s1491", "jur": "AU", "level": "national", "num": "s1491", "title": "s1491 Online Safety Amendment (Fix Our Feeds) Bill 2026", "sum": "The bill would amend the Online Safety Act 2021 to require social media services to let users opt out of algorithmically recommended content and to impose reporting, risk-assessment, and risk-mitigation obligations on online service providers.", "stage": "introduced", "cats": [ "governance" ], "secs": [ "consumer" ], "date": "2026-04-01", "url": "https://www.aph.gov.au/Parliamentary_Business/Bills_Legislation/Bills_Search_Results/Result?bId=s1491", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 5800/2025", "jur": "BR", "level": "national", "num": "PL 5800/2025", "title": "PL 5800/2025: National Mandatory Preventive Screening Act with Artificial Intelligence", "sum": "The bill would require Brazil’s Unified Health System (SUS) to integrate automated analysis of laboratory and medical-imaging tests into the e-SUS system to support early detection of cancer, diabetes, and cardiovascular diseases. It also establishes related measures for implementing AI-assisted preventive screening.", "stage": "advancing", "cats": [ "gov-use", "healthcare" ], "secs": [ "health" ], "date": "2026-03-27", "url": "https://www.camara.leg.br/propostas-legislativas/2583896", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 2688/2025", "jur": "BR", "level": "national", "num": "PL 2688/2025", "title": "PL 2688/2025: Artificial Intelligence Development and Use Regulatory Framework Act", "sum": "Establishes Brazil’s regulatory framework for the development and use of artificial intelligence, including rights and duties, governing principles, transparency requirements, and civil and criminal liability rules. The bill also provides for governance mechanisms and other related measures.", "stage": "advancing", "cats": [ "governance", "disclosures", "consumer-financial" ], "secs": [], "date": "2026-03-27", "url": "https://www.camara.leg.br/propostas-legislativas/2520003", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4251", "jur": "US", "level": "national", "num": "SB4251", "title": "SB4251: Mined in America Act of 2026", "sum": "The bill would establish a voluntary Commerce Department certification program and use federal authorities to promote replacing mining hardware linked to foreign adversaries with domestically or allied-manufactured compute infrastructure.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-26", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4251/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4216", "jur": "US", "level": "national", "num": "SB4216", "title": "SB4216: GUARDRAILS Act: Guaranteeing and Upholding Americans' Right to Decide Responsible AI Laws and Standards Act", "sum": "This bill would repeal the executive order establishing a national policy framework for artificial intelligence. It would remove that federal framework rather than create new AI regulatory requirements.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-03-26", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4216/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8094", "jur": "US", "level": "national", "num": "HB8094", "title": "HB8094: AI Foundation Model Transparency Act of 2026", "sum": "The bill would direct the Federal Trade Commission to establish public disclosure requirements concerning the training data and algorithms used in artificial intelligence foundation models. It would create a transparency framework focused on foundation-model developers and their development practices.", "stage": "introduced", "cats": [ "frontier", "disclosures", "governance" ], "secs": [], "date": "2026-03-26", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8094/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7058", "jur": "US", "level": "national", "num": "HB7058", "title": "HB7058: Foreign Adversary AI Risk Assessment and Diplomacy Act", "sum": "The bill would require the Secretary of State to assess risks to the United States from foreign adversaries using generative AI for malicious activities. It also addresses related diplomatic and policy responses.", "stage": "advancing", "cats": [ "governance", "frontier" ], "secs": [ "media" ], "date": "2026-03-26", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7058/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 5383", "jur": "MX", "level": "national", "num": "Expediente 5383", "title": "Expediente 5383: Initiative proposing reforms and additions to the General Law on the Rights of Children and Adolescents concerning a life free from cyber-digital violence and artificial intelligence", "sum": "The initiative would amend Mexico’s General Law on the Rights of Children and Adolescents to address cyber-digital violence and risks associated with artificial intelligence, strengthening protections for children and adolescents in digital environments.", "stage": "advancing", "cats": [ "minors" ], "secs": [ "consumer" ], "date": "2026-03-26", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/mar/20260326.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 4282", "jur": "MX", "level": "national", "num": "Expediente 4282", "title": "Expediente 4282: Initiative proposing a decree to amend Article 73 of the Political Constitution of the United Mexican States (on artificial intelligence)", "sum": "The constitutional initiative would amend Article 73 to establish or clarify federal legislative authority over artificial intelligence. It was introduced by PAN deputies Martha Amalia Moya Bastón and Federico Döring Casar and referred to the Committee on Constitutional Points.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-03-26", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/mar/20260326.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:FR:DLR5L17N51569", "jur": "FR", "level": "national", "num": "DLR5L17N51569", "title": "Bill to regulate the siting of data centers in France", "sum": "This bill proposes rules governing the establishment and siting of data centers across France. It addresses data-center deployment as a matter of national territorial and infrastructure policy.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-26", "url": "https://www.assemblee-nationale.fr/dyn/17/dossiers/DLR5L17N51569", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:AR:0834-D-2026", "jur": "AR", "level": "national", "num": "0834-D-2026", "title": "Bill 0834-D-2026: Civil Liability for Damage Caused by Artificial Intelligence Systems: Regulatory Framework", "sum": "The bill proposes a legal framework establishing civil liability for harm caused by artificial intelligence systems. Specific liability standards and procedures are not provided in the available description.", "stage": "introduced", "cats": [ "governance", "consumer-financial" ], "secs": [], "date": "2026-03-26", "url": "https://www.hcdn.gob.ar/proyectos/proyecto.jsp?exp=0834-D-2026", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SCR30", "jur": "US", "level": "national", "num": "SCR30", "title": "SCR 30: Sense of Congress Supporting the Ratepayer Protection Pledge", "sum": "This concurrent resolution expresses Congress's support for the Ratepayer Protection Pledge and calls for protecting electricity affordability and reliability as artificial intelligence and data-center infrastructure expands. It is a nonbinding statement of national policy rather than an operative regulatory measure.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-25", "url": "https://www.congress.gov/bill/119th-congress/senate-concurrent-resolution/30/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4214", "jur": "US", "level": "national", "num": "SB4214", "title": "SB4214: Artificial Intelligence Data Center Moratorium Act", "sum": "Imposes a moratorium on construction of new data centers until legislation is enacted to protect the public from the dangers of artificial intelligence. The bill links data-center development directly to future AI safeguards.", "stage": "introduced", "cats": [ "data-centers", "governance" ], "secs": [ "infra" ], "date": "2026-03-25", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4214/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4213", "jur": "US", "level": "national", "num": "SB4213", "title": "SB 4213: Data Center Water and Energy Transparency Act of 2026", "sum": "The bill would require data center operators to report their energy and water consumption to states or specified federal agencies, including the Environmental Protection Agency and the Departments of Energy and Agriculture. It addresses data-center resource use and transparency.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-25", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4213/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PLP 23/2026", "jur": "BR", "level": "national", "num": "PLP 23/2026", "title": "PLP 23/2026: Supplementary Law Proposal 23/2026", "sum": "Establishes a Contribution for Intervention in the Economic Domain on data-center services (CIDE–DataCenter), increases CSLL, PIS/Pasep, and Cofins rates applicable to the sector, repeals federal tax benefits, and bars new incentives for the installation, expansion, or operation of data centers.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-25", "url": "https://www.camara.leg.br/propostas-legislativas/2602249", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 83/2026", "jur": "BR", "level": "national", "num": "PL 83/2026", "title": "Bill 83/2026", "sum": "The bill requires the identification of content generated or manipulated by artificial intelligence, establishes strict liability for digital platforms, and criminalizes conduct involving the dissemination of deepfakes.", "stage": "advancing", "cats": [ "deepfakes", "disclosures" ], "secs": [ "media", "consumer" ], "date": "2026-03-25", "url": "https://www.camara.leg.br/propostas-legislativas/2600154", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 7137/2025", "jur": "BR", "level": "national", "num": "PL 7137/2025", "title": "Digital Literacy and Artificial Intelligence Citizenship in Education", "sum": "Amends Brazil's National Education Guidelines and Framework Law to include digital literacy and digital citizenship, with an emphasis on artificial intelligence, as cross-cutting subjects in basic and higher education in the public-school system.", "stage": "advancing", "cats": [ "education" ], "secs": [], "date": "2026-03-25", "url": "https://www.camara.leg.br/propostas-legislativas/2599746", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 453/2026", "jur": "BR", "level": "national", "num": "PL 453/2026", "title": "Mandatory Labels for Artificial Intelligence-Generated Digital Content", "sum": "Requires a visible label, watermark, or notice on videos, images, audio, and other digital content produced wholly or partly by artificial intelligence and distributed in Brazil, including through social networks, digital platforms, and messaging applications. The measure aims to prevent disinformation and protect individuals’ honor, image, and privacy while curbing harmful uses of the technology.", "stage": "advancing", "cats": [ "disclosures", "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-03-25", "url": "https://www.camara.leg.br/propostas-legislativas/2602287", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8053", "jur": "US", "level": "national", "num": "HB8053", "title": "HB 8053: DPA Emerging Technology Act of 2026", "sum": "The bill would amend the Defense Production Act of 1950 to change the requirements of the Defense Production Act Committee and create a Subcommittee on Emerging Technology. The measure would establish a federal framework for coordinating policy on strategically important emerging technologies, potentially including artificial intelligence.", "stage": "introduced", "cats": [ "governance", "frontier", "gov-use" ], "secs": [], "date": "2026-03-24", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8053/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8037", "jur": "US", "level": "national", "num": "HB8037", "title": "HB8037: Protect American AI Act of 2026", "sum": "The bill would limit the effect of litigation on the environmental review process for data centers and associated infrastructure. Despite its title, its substantive focus is data-center development and permitting.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-24", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8037/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 5792/2025", "jur": "BR", "level": "national", "num": "PL 5792/2025", "title": "PL 5792/2025: National Law on Transparency Observatories in Public Procurement Using Artificial Intelligence", "sum": "The bill would establish transparency observatories to conduct continuous, automated audits of bid notices, contracts, and procurement processes across Brazil's direct and indirect public administration using AI. It also provides related rules for monitoring public procurement.", "stage": "advancing", "cats": [ "gov-use" ], "secs": [], "date": "2026-03-24", "url": "https://www.camara.leg.br/propostas-legislativas/2583785", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:326002", "jur": "DE", "level": "national", "num": "326002", "title": "Bundesrat Resolution: The EU Artificial Intelligence Act (Regulation (EU) 2024/1689) Should Generally Be Implemented at EU or Federal Level", "sum": "The resolution calls for market-surveillance responsibilities for AI components contained in products and medical devices to be centralized at the European Union or federal level. It addresses the allocation of supervisory authority under the EU AI Act.", "stage": "passed", "cats": [ "governance" ], "secs": [], "date": "2026-03-23", "url": "https://dip.bundestag.de/vorgang/vorgang/326002", "instrument_type": "bill", "binding_status": "binding", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 491/2026", "jur": "BR", "level": "national", "num": "PL 491/2026", "title": "Digital Infrastructure Expansion and Data Center Connectivity in Northern and Northeastern Brazil", "sum": "Establishes guidelines for expanding digital infrastructure and high-capacity connectivity, prioritizing Brazil's North and Northeast regions. It sets minimum technical conditions for deploying and operating data centers and aims to strengthen national digital sovereignty and integration.", "stage": "advancing", "cats": [ "governance", "data-centers" ], "secs": [ "infra" ], "date": "2026-03-23", "url": "https://www.camara.leg.br/propostas-legislativas/2602595", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 486/2026", "jur": "BR", "level": "national", "num": "PL 486/2026", "title": "Bill 486/2026", "sum": "The bill seeks to attract productive foreign investment in strategic digital infrastructure, recognizes data centers as strategic productive investments, establishes legal guarantees for long-term investments, and prioritizes administrative processing for projects in Brazil's North and Northeast regions.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-23", "url": "https://www.camara.leg.br/propostas-legislativas/2602590", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 414/2026", "jur": "BR", "level": "national", "num": "PL 414/2026", "title": "Environmental and Socioeconomic Rules for Large Data Centers", "sum": "Establishes general rules for the installation, operation, expansion, and decommissioning of large-scale data centers in Brazil, including requirements concerning water and energy use, environmental protection, mandatory compensation, monitoring, and socioeconomic safeguards.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-23", "url": "https://www.camara.leg.br/propostas-legislativas/2601746", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8033", "jur": "US", "level": "national", "num": "HB8033", "title": "HB8033: No Harm Data Centers Act", "sum": "The bill would protect American families from the impacts of data centers on the electric grid, addressing data-center-related grid and energy concerns. It has been referred to the House Committee on Energy and Commerce.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-20", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8033/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB8031", "jur": "US", "level": "national", "num": "HB8031", "title": "HB 8031: GUARDRAILS Act (Guaranteeing and Upholding Americans’ Right to Decide Responsible AI Laws and Standards Act)", "sum": "Repeals the executive order titled “Ensuring a National Policy Framework for Artificial Intelligence.” The bill would remove that federal executive framework and thereby affect the division of authority over AI regulation and standards.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-03-20", "url": "https://www.congress.gov/bill/119th-congress/house-bill/8031/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:330846", "jur": "DE", "level": "national", "num": "330846", "title": "European Parliament Resolution of 17 December 2025 with Recommendations to the Commission on Shaping the Future of Work through Digitalisation, Artificial Intelligence and Algorithmic Management in the Workplace (2025/2080(INL)), EP P10_TA(2025)0337", "sum": "This European Parliament resolution makes recommendations to the European Commission on regulating the effects of digitalisation, artificial intelligence, and algorithmic management on working life. It addresses the governance and use of workplace AI, including protections for workers affected by automated management and employment technologies.", "stage": "passed", "cats": [ "governance", "hiring" ], "secs": [ "hr" ], "date": "2026-03-20", "url": "https://dip.bundestag.de/vorgang/vorgang/330846", "instrument_type": "bill", "binding_status": "binding", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4154", "jur": "US", "level": "national", "num": "SB4154", "title": "SB 4154: Research and Oversight of AI in Courts Act of 2026", "sum": "The bill would establish a task force to examine legal and ethical issues arising from the use of AI speech-to-text and automatic speech-recognition technologies in the United States judicial system.", "stage": "introduced", "cats": [ "governance", "gov-use" ], "secs": [], "date": "2026-03-19", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4154/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB3952", "jur": "US", "level": "national", "num": "SB3952", "title": "SB3952: Future of Artificial Intelligence Innovation Act of 2026", "sum": "The bill would establish standards, metrics, and evaluation tools for artificial intelligence and support AI research, development, and capacity-building activities. It also aims to promote innovation and competition across the AI industry.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-03-19", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/3952/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB1269", "jur": "US", "level": "national", "num": "SB1269", "title": "SB1269: Promoting United States Leadership in Standards Act of 2025", "sum": "Directs the National Institute of Standards and Technology and the Department of State to promote U.S. participation in developing technical standards and specifications for artificial intelligence and other critical and emerging technologies.", "stage": "advancing", "cats": [ "governance", "gov-use" ], "secs": [], "date": "2026-03-19", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/1269/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HR1007", "jur": "US", "level": "national", "num": "HR1007", "title": "H.R. 1007: Expressing the Sense of the House of Representatives Regarding the Use of Artificial Intelligence in the Financial Services and Housing Industries", "sum": "This resolution states the House of Representatives' position on the use of artificial intelligence in the financial services and housing industries. It is a nonbinding policy measure rather than an operative regulatory law.", "stage": "advancing", "cats": [ "consumer-financial", "governance" ], "secs": [ "finserv" ], "date": "2026-03-19", "url": "https://www.congress.gov/bill/119th-congress/house-resolution/1007/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7997", "jur": "US", "level": "national", "num": "HB7997", "title": "HB7997: Research and Oversight of AI in Courts Act of 2026", "sum": "The bill would establish a task force to study and address legal and ethical issues arising from the use of AI speech-to-text and automatic speech-recognition technologies in the United States judicial system.", "stage": "introduced", "cats": [ "gov-use", "governance" ], "secs": [], "date": "2026-03-19", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7997/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 493/2026", "jur": "BR", "level": "national", "num": "PL 493/2026", "title": "Legal and Environmental Framework for Data Centers in the Amazon", "sum": "Establishes legal, environmental, and land-tenure guidelines for the development and operation of data centers in Brazil’s Legal Amazon, with particular attention to Roraima. It creates a phased environmental-review procedure, sets objective criteria and decision deadlines, and prioritizes previously anthropized areas, industrial districts, and development zones while preserving environmental protections and territorial rights.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-03-19", "url": "https://www.camara.leg.br/propostas-legislativas/2602597", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1685/2025", "jur": "BR", "level": "national", "num": "PL 1685/2025", "title": "Copyright Rules for Artificial Intelligence-Generated Intellectual Works", "sum": "Amends Brazil's Copyright Law to regulate ownership, authorship, registration, protection, and civil liability for intellectual works generated by artificial intelligence systems. It addresses the legal status and accountability associated with AI-generated creative works.", "stage": "advancing", "cats": [ "governance" ], "secs": [ "media" ], "date": "2026-03-19", "url": "https://www.camara.leg.br/propostas-legislativas/2497660", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7985", "jur": "US", "level": "national", "num": "HB7985", "title": "HB7985: CHATBOT Act (Curbing Harmful AI Tools by Offering Transparency Act)", "sum": "The bill would regulate harmful AI chatbot tools by requiring transparency and prohibiting the marketing, advertising, or provision of professional services without the appropriate licenses. It appears aimed at preventing AI systems from offering or representing unlicensed professional services.", "stage": "advancing", "cats": [ "disclosures", "governance" ], "secs": [ "consumer" ], "date": "2026-03-18", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7985/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 750/2026", "jur": "BR", "level": "national", "num": "PL 750/2026", "title": "PL 750/2026: National Monitoring Program for Offenders Using Artificial Intelligence", "sum": "Establishes the National Program for Monitoring Aggressors Using Artificial Intelligence (PNM-IA) within the Antes Que Aconteça Program. It would use digital and AI technologies to prevent domestic violence, improve enforcement of emergency protective measures, protect victims, and support preventive and law-enforcement actions by public-security agencies, prosecutors, and the judiciary.", "stage": "advancing", "cats": [ "gov-use", "public-safety" ], "secs": [], "date": "2026-03-18", "url": "https://www.camara.leg.br/propostas-legislativas/2609003", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 6712/2025", "jur": "BR", "level": "national", "num": "PL 6712/2025", "title": "Requires Advance Identification of Automated and Artificial Intelligence-Generated Phone Calls", "sum": "Requires prior identification of automated telephone calls and calls made using artificial intelligence systems, and establishes related measures. The bill addresses transparency for recipients of AI-generated or automated phone calls.", "stage": "advancing", "cats": [ "disclosures", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-03-18", "url": "https://www.camara.leg.br/propostas-legislativas/2599305", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 6248/2025", "jur": "BR", "level": "national", "num": "PL 6248/2025", "title": "Regulates Ethical Artificial Intelligence Use in Police Intelligence Analysis", "sum": "Establishes principles, technical definitions, ethical limits, and human-supervision requirements for using artificial-intelligence systems in police intelligence analysis. It also authorizes AI-assisted analysis of lawfully intercepted communications.", "stage": "advancing", "cats": [ "governance", "gov-use", "public-safety" ], "secs": [], "date": "2026-03-18", "url": "https://www.camara.leg.br/propostas-legislativas/2594273", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 489/2026", "jur": "BR", "level": "national", "num": "PL 489/2026", "title": "Digital Sovereignty and Data Center Resilience in the Amazon", "sum": "Establishes guidelines to strengthen national digital sovereignty and resilience, with a strategic focus on the Legal Amazon and the state of Roraima. It creates incentives for deploying and operating data centers to store Brazilian public data and provide national digital redundancy.", "stage": "advancing", "cats": [ "governance", "data-centers" ], "secs": [ "infra" ], "date": "2026-03-18", "url": "https://www.camara.leg.br/propostas-legislativas/2602593", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 428/2026", "jur": "BR", "level": "national", "num": "PL 428/2026", "title": "Electronic Fraud Using Artificial Intelligence-Generated Images, Videos, or Audio", "sum": "Amends Article 171(2-A) of Brazil's Penal Code to classify fraud committed using artificial-intelligence-generated images, videos, or audio as electronic fraud. The bill is being consolidated with PL 3800/2023.", "stage": "advancing", "cats": [ "deepfakes", "consumer-financial" ], "secs": [], "date": "2026-03-18", "url": "https://www.camara.leg.br/propostas-legislativas/2601941", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3800/2023", "jur": "BR", "level": "national", "num": "PL 3800/2023", "title": "Increases Penalties for Electronic Fraud Using Artificial Intelligence", "sum": "Amends Article 171 of Brazil's Penal Code to increase the penalty for electronic fraud when the offense is committed using artificial intelligence.", "stage": "advancing", "cats": [ "consumer-financial", "public-safety" ], "secs": [], "date": "2026-03-18", "url": "https://www.camara.leg.br/propostas-legislativas/2376427", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 3392/2024", "jur": "BR", "level": "national", "num": "PL 3392/2024", "title": "Protects Artists’ and Voice Actors’ Voices in Artificial Intelligence Replication", "sum": "Establishes guidelines for the ethical use of artificial intelligence to replicate artists’ and voice actors’ voices in digital advertisements and other audiovisual productions. It requires explicit consent and fair compensation, recognizes voice as a legally protected aspect of image rights, and creates oversight and redress mechanisms.", "stage": "advancing", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-03-18", "url": "https://www.camara.leg.br/propostas-legislativas/2456204", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:AR:0664-D-2026", "jur": "AR", "level": "national", "num": "0664-D-2026", "title": "Bill 0664-D-2026: Legal Framework for the Development, Research, and Use of Artificial Intelligence in the National Territory; Creation of the National Registry of Artificial Intelligence Systems", "sum": "The bill proposes a national legal framework governing the development, research, and use of artificial intelligence in Argentina. It would create a National Registry of Artificial Intelligence Systems.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-03-18", "url": "https://www.hcdn.gob.ar/proyectos/proyecto.jsp?exp=0664-D-2026", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4113", "jur": "US", "level": "national", "num": "SB4113", "title": "SB4113: AI Guardrails Act of 2026", "sum": "The bill would establish limitations on the Department of Defense’s use of artificial intelligence. It has been introduced and referred to the Senate Armed Services Committee for consideration.", "stage": "introduced", "cats": [ "gov-use", "governance" ], "secs": [], "date": "2026-03-17", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4113/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7968", "jur": "US", "level": "national", "num": "HB7968", "title": "HB7968: Small AI Innovators Empowerment Act", "sum": "The bill would authorize the Department of Commerce to study challenges faced by small artificial intelligence businesses in the United States and report on potential support needs. It also includes related purposes.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-03-17", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7968/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 4589/2024", "jur": "BR", "level": "national", "num": "PL 4589/2024", "title": "PL 4589/2024: Bill establishing the Artificial Intelligence Automated Assistance System", "sum": "The bill would establish an Artificial Intelligence Automated Assistance System (AAIA) integrated with social registries to optimize data analysis and provide immediate support to families in vulnerable situations. It concerns government deployment of AI in the administration of social assistance.", "stage": "advancing", "cats": [ "gov-use" ], "secs": [], "date": "2026-03-17", "url": "https://www.camara.leg.br/propostas-legislativas/2473135", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1310/2025", "jur": "BR", "level": "national", "num": "PL 1310/2025", "title": "Bill 1310/2025", "sum": "Amends Law No. 13,756/2018 on the National Public Security Fund and related matters to condition receipt of fund resources on implementing artificial-intelligence technologies in the ombudsman and internal-affairs offices of public-security bodies.", "stage": "advancing", "cats": [ "gov-use", "public-safety" ], "secs": [], "date": "2026-03-17", "url": "https://www.camara.leg.br/propostas-legislativas/2490966", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4098", "jur": "US", "level": "national", "num": "SB4098", "title": "SB4098: Artificial Intelligence-Ready Data Act", "sum": "Establishes standards and guidelines for making open government data assets suitable for use in artificial intelligence systems. The bill addresses the preparation and management of public-sector data for AI applications.", "stage": "advancing", "cats": [ "gov-use", "governance" ], "secs": [], "date": "2026-03-16", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4098/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:S.1839", "jur": "IT", "level": "national", "num": "S.1839", "title": "S.1839: Provisions on the Use of Artificial Intelligence and Distributed Ledgers in Social Services and Interventions", "sum": "The bill establishes provisions governing the use of artificial intelligence and distributed-ledger technologies in the delivery of social services and interventions. It was introduced on the initiative of Italy’s National Council for Economy and Labour (CNEL).", "stage": "introduced", "cats": [ "governance", "gov-use" ], "secs": [], "date": "2026-03-16", "url": "http://dati.senato.it/ddl/59990", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:EU:COM(2025) 837", "jur": "EU", "level": "national", "num": "COM(2025) 837", "title": "COM(2025) 837: Digital package: digital omnibus", "sum": "The European Commission’s digital omnibus proposes a first set of simplification measures affecting data legislation, including cookies and other tracking technologies, cybersecurity incident reporting, and related digital rules. It forms part of the Commission’s broader agenda to reduce compliance burdens for businesses, including obligations relevant to AI regulation.", "stage": "advancing", "cats": [ "governance", "privacy" ], "secs": [], "date": "2026-03-16", "url": "https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/14855", "instrument_type": "proposal", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:AR:0519-D-2026", "jur": "AR", "level": "national", "num": "0519-D-2026", "title": "Bill 0519-D-2026: Promotion of Artificial Intelligence Applied to Production, Competitiveness, and Public Services-Regulatory Framework", "sum": "The bill establishes a framework to promote and regulate the application of artificial intelligence in production, competitiveness, and public services. The available information does not specify its particular obligations or implementation mechanisms.", "stage": "introduced", "cats": [ "governance", "gov-use" ], "secs": [], "date": "2026-03-16", "url": "https://www.hcdn.gob.ar/proyectos/proyecto.jsp?exp=0519-D-2026", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB4069", "jur": "US", "level": "national", "num": "SB4069", "title": "SB4069: AI-Ready Bio-Data Standards Act", "sum": "Directs the Director of the National Institute of Standards and Technology to establish definitions, standards, resources, and frameworks for preparing biological datasets for use in artificial intelligence models. The bill focuses on standardization and infrastructure for AI-ready biomedical data.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [ "health" ], "date": "2026-03-12", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/4069/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7907", "jur": "US", "level": "national", "num": "HB7907", "title": "HB7907: AI-Ready Bio-Data Standards Act", "sum": "Directs the Director of the National Institute of Standards and Technology to facilitate definitions, standards, resources, and frameworks for making certain biological datasets suitable for use in artificial intelligence models.", "stage": "introduced", "cats": [ "governance", "gov-use" ], "secs": [ "health" ], "date": "2026-03-12", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7907/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:C.2842", "jur": "IT", "level": "national", "num": "C.2842", "title": "Bill C.2842: Provisions on setting the corporate income tax rate for companies whose activities are predominantly managed through artificial intelligence systems and allocating the proceeds to social-assistance and income-support benefits for workers made unemployed by the introduction of such systems", "sum": "The bill would establish a corporate income tax rate for companies whose operations are predominantly managed through AI systems. Tax proceeds would fund social-assistance and income-support measures for workers who lose their jobs because of the introduction of those systems.", "stage": "introduced", "cats": [ "hiring" ], "secs": [ "hr" ], "date": "2026-03-12", "url": "http://dati.senato.it/ddl/59985", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:ID:Kepmen Komdigi 117/2026", "jur": "ID", "level": "national", "num": "Kepmen Komdigi 117/2026", "title": "Indonesia AI Use Guidelines in Education", "sum": "The decision provides an official framework for responsible AI use in education and addresses governance, ethical use, safety, and capability building.", "stage": "passed", "cats": [ "education", "governance", "privacy", "minors" ], "secs": [], "date": "2026-03-12", "url": "https://jdih.komdigi.go.id/produk_hukum/view/id/1015/t/keputusan%2Bmenteri%2Bkomunikasi%2Bdan%2Bdigital%2Bnomor%2B117%2Btahun%2B2026", "instrument_type": "ministerial decision", "binding_status": "guidance", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CN:content_7062509", "jur": "CN", "level": "national", "num": "content_7062509", "title": "Ministry of Justice: This Year Will Accelerate Legislative Research and Advancement in Artificial Intelligence, Low-Altitude Economy, and Other Fields", "sum": "China's Ministry of Justice announced that it will accelerate research and legislative efforts concerning artificial intelligence and the low-altitude economy. The item is a legislative-plan initiative rather than a specific enacted law or detailed draft measure.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-03-12", "url": "https://www.gov.cn/zhengce/202603/content_7062509.htm", "instrument_type": "plan_item", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:C.2212", "jur": "IT", "level": "national", "num": "C.2212", "title": "C.2212: Amendments to Law No. 212 of April 4, 1956, and other provisions to prevent the alteration or manipulation of electoral and referendum campaigns through the dissemination of deceptive content produced using artificial intelligence systems", "sum": "The bill proposed measures to prevent the use and dissemination of deceptive AI-generated content to alter or manipulate electoral and referendum campaigns. It would have amended Italian electoral law and introduced related safeguards.", "stage": "dead", "cats": [ "elections", "deepfakes" ], "secs": [ "media" ], "date": "2026-03-11", "url": "http://dati.senato.it/ddl/58825", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PLP 49/2026", "jur": "BR", "level": "national", "num": "PLP 49/2026", "title": "Grants Tax Credits for Brazilian Artificial Intelligence System Development", "sum": "The bill amends Brazil's Supplementary Law No. 123/2006 to allow microenterprises and small businesses under the Simples Nacional tax regime to claim tax credits for expenditures on developing Brazilian artificial intelligence systems.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-03-10", "url": "https://www.camara.leg.br/propostas-legislativas/2607743", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 1614/2025", "jur": "BR", "level": "national", "num": "PL 1614/2025", "title": "Adds Artificial Intelligence, Cybersecurity, and Data Protection to Teacher Training", "sum": "Amends Law No. 14,533 of January 11, 2023, to include artificial intelligence, online safety, and personal data protection in continuing education for education professionals.", "stage": "advancing", "cats": [ "education" ], "secs": [], "date": "2026-03-10", "url": "https://www.camara.leg.br/propostas-legislativas/2496418", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7858", "jur": "US", "level": "national", "num": "HB7858", "title": "HB7858: Data Center Community Impact Act", "sum": "The bill requires the Secretary of Energy to study how data centers affect communities of color and low-income communities. It addresses the distributional and environmental impacts of data-center development rather than regulating AI systems directly.", "stage": "introduced", "cats": [ "data-centers", "anti-discrimination" ], "secs": [ "infra" ], "date": "2026-03-05", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7858/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7826", "jur": "US", "level": "national", "num": "HB7826", "title": "HBCU AI Research Leadership Act (HB7826)", "sum": "The bill would amend the National Artificial Intelligence Initiative Act of 2020 to reserve or specially allocate certain federal financial-assistance awards for historically Black colleges and universities participating in national artificial intelligence research institutes. It would expand HBCU participation in federally supported AI research and workforce development.", "stage": "introduced", "cats": [ "education", "governance" ], "secs": [], "date": "2026-03-05", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7826/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:AR:0253-D-2026", "jur": "AR", "level": "national", "num": "0253-D-2026", "title": "Bill 0253-D-2026: National Sovereign Artificial Intelligence Regime. Amendment to the National Penal Code", "sum": "The bill proposes a national framework for sovereign artificial intelligence and amendments to Argentina’s National Penal Code related to AI. The available description does not provide details on the specific regulatory obligations or offenses.", "stage": "introduced", "cats": [ "governance", "frontier" ], "secs": [], "date": "2026-03-05", "url": "https://www.hcdn.gob.ar/proyectos/proyecto.jsp?exp=0253-D-2026", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB3982", "jur": "US", "level": "national", "num": "SB3982", "title": "SB3982: AI Fraud Accountability Act of 2026", "sum": "The bill would establish protections against fraud involving digital impersonation, including AI-enabled or synthetic impersonation, and provide related accountability measures.", "stage": "introduced", "cats": [ "deepfakes", "consumer-financial" ], "secs": [ "media" ], "date": "2026-03-04", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/3982/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7786", "jur": "US", "level": "national", "num": "HB7786", "title": "HB7786: AI Fraud Accountability Act", "sum": "The bill would establish protections against fraud involving digital impersonation, potentially including AI-generated or synthetic impersonation. It was referred to multiple House committees for consideration of provisions within their jurisdictions.", "stage": "advancing", "cats": [ "deepfakes", "consumer-financial" ], "secs": [ "media" ], "date": "2026-03-04", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7786/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7783", "jur": "US", "level": "national", "num": "HB7783", "title": "HB7783: AI-Ready Networks Act", "sum": "Directs the Assistant Secretary of Commerce for Communications and Information to publish a report on integrating artificial intelligence into the United States' commercial telecommunications infrastructure.", "stage": "introduced", "cats": [ "governance" ], "secs": [ "infra" ], "date": "2026-03-04", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7783/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:329483", "jur": "DE", "level": "national", "num": "329483", "title": "Act to Modernize Product Liability Law", "sum": "The bill modernizes Germany’s product-liability framework, including rules applicable to software and AI-enabled products, and updates liability, evidence, and compensation provisions. It is intended to align German law with the EU’s revised product-liability regime.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-03-04", "url": "https://dip.bundestag.de/vorgang/vorgang/329483", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB3957", "jur": "US", "level": "national", "num": "SB3957", "title": "NSF AI Education Act of 2026 (SB 3957)", "sum": "The bill would support National Science Foundation programs for education and professional development relating to artificial intelligence. It focuses on expanding AI learning and workforce training.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-03-02", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/3957/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:UK:4085", "jur": "UK", "level": "national", "num": "4085", "title": "Autonomous Maritime Vessels (Regulation) Bill", "sum": "The Bill would establish a regulatory framework for autonomous surface and submersible maritime vessels, including related connected provisions. It addresses the operation and oversight of vessels capable of navigating without direct human control.", "stage": "advancing", "cats": [ "governance", "public-safety" ], "secs": [], "date": "2026-03-02", "url": "https://bills.parliament.uk/bills/4085", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:AR:0004-D-2026", "jur": "AR", "level": "national", "num": "0004-D-2026", "title": "Bill 0004-D-2026: Minimum Standards for Promoting the Development of Artificial Intelligence (AI) in Argentina", "sum": "Establishes a national legal framework setting minimum standards to promote the development of artificial intelligence in Argentina. The available description does not provide further substantive details on its regulatory or institutional provisions.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-03-02", "url": "https://www.hcdn.gob.ar/proyectos/proyecto.jsp?exp=0004-D-2026", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7696", "jur": "US", "level": "national", "num": "HB7696", "title": "HB 7696: AI Cyber Grid Protection Resilient Development Act of 2026", "sum": "The bill would establish a grant program for national laboratories and higher-education institutions to develop secure AI-enabled cyber-physical testbeds simulating cyberattacks against the electric grid. It also addresses grid-scale cybersecurity research and resilience.", "stage": "introduced", "cats": [ "gov-use", "public-safety", "governance" ], "secs": [ "infra" ], "date": "2026-02-26", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7696/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IN:eGazette 269993", "jur": "IN", "level": "national", "num": "eGazette 269993", "title": "Gazette Notification dated 10.02.2026: IT Rules 2021 Amendments: Synthetically Generated Information (SGI)", "sum": "This MeitY notification amends India's Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, to regulate synthetically generated information, including intermediary obligations concerning synthetic or AI-generated content. The notified amendments are in force, with a corrigendum subsequently issued.", "stage": "passed", "cats": [ "disclosures", "deepfakes", "governance" ], "secs": [ "media" ], "date": "2026-02-26", "url": "https://www.meity.gov.in/static/uploads/2026/02/f55fe52418b03f58b0669f6a8bc03b6d.pdf", "instrument_type": "final_measure", "binding_status": "binding", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7697", "jur": "US", "level": "national", "num": "HB7697", "title": "HB7697: International AI Energy Grid Modernization Strategy Act", "sum": "The bill would establish an international strategy for artificial intelligence research and development aimed at modernizing outdated electrical grids. It addresses AI-enabled energy and grid infrastructure policy at the federal level.", "stage": "introduced", "cats": [ "data-centers", "governance" ], "secs": [ "infra" ], "date": "2026-02-25", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7697/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:BR:PL 278/2026", "jur": "BR", "level": "national", "num": "PL 278/2026", "title": "Establishes Special Tax Regime for Data Center Services", "sum": "Amends Law No. 11,196/2005 to establish the Special Taxation Regime for Data Center Services (REDATA), and also amends Law No. 15,211/2025. The measure would create a dedicated tax framework for data-center services.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-25", "url": "https://www.camara.leg.br/propostas-legislativas/2600838", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB3679", "jur": "US", "level": "national", "num": "HB3679", "title": "HB3679: Small Business Artificial Intelligence Advancement Act", "sum": "The bill would require the Director of the National Institute of Standards and Technology to develop resources to help small businesses use artificial intelligence. It is intended to provide practical guidance and support for small-business AI adoption.", "stage": "advancing", "cats": [ "gov-use", "education" ], "secs": [], "date": "2026-02-24", "url": "https://www.congress.gov/bill/119th-congress/house-bill/3679/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:C.2194", "jur": "IT", "level": "national", "num": "C.2194", "title": "Bill C.2194: Delegation to the Government for the Organization, Construction, Development, and Expansion of Data Processing Centers", "sum": "The bill would delegate authority to the Government to organize, build, develop, and expand data processing centers. It addresses data-center infrastructure as a substantive policy subject.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-24", "url": "http://dati.senato.it/ddl/58794", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:C.2152", "jur": "IT", "level": "national", "num": "C.2152", "title": "C.2152: Delegation to the Government for the Organization, Establishment, Development and Enhancement of Data Processing Centers", "sum": "The bill would delegate authority to the Government to organize, establish, develop, and strengthen data processing centers. It concerns data-center infrastructure policy, although the available description does not specify particular energy, siting, tax, or accountability measures.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-24", "url": "http://dati.senato.it/ddl/58717", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:C.2091", "jur": "IT", "level": "national", "num": "C.2091", "title": "C.2091: Delegation to the Government on the Organization, Construction, Development, and Strengthening of Data Centers", "sum": "The bill would delegate authority to the Government to establish a framework for organizing, building, developing, and expanding data-processing centers. It concerns data-center infrastructure policy, potentially including their planning and implementation.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-24", "url": "http://dati.senato.it/ddl/58600", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:C.2083", "jur": "IT", "level": "national", "num": "C.2083", "title": "C.2083: Delegation to the Government for the organization, construction, development, and enhancement of data processing centers", "sum": "The bill delegates authority to the Government to establish a framework for organizing, building, developing, and strengthening data centers. It concerns data-center infrastructure policy, potentially including their planning and deployment at national level.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-24", "url": "http://dati.senato.it/ddl/58592", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 4969", "jur": "MX", "level": "national", "num": "Expediente 4969", "title": "Expediente 4969: Initiative proposing a decree adding Article 199 Octies to the Federal Criminal Code (regarding the creation of intimate content through artificial intelligence)", "sum": "The initiative would amend Mexico’s Federal Criminal Code to address the creation of intimate content using artificial intelligence. It was introduced by Deputy Liliana Aguilar Gil of the Labor Party (PT) and referred to the Justice Committee.", "stage": "advancing", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-02-23", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/feb/20260223.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 4901", "jur": "MX", "level": "national", "num": "Expediente 4901", "title": "Expediente 4901: Initiative proposing a decree to amend Article 1 and add section XXI to Article 2 of the Federal Law on Protection of Personal Data Held by Private Parties (concerning personal-data protection in artificial intelligence systems)", "sum": "The initiative would amend Mexico’s private-sector personal-data protection law to address the protection of personal data in artificial intelligence systems. It was introduced by Deputy Claudia Rivera Vivanco of Morena and assigned to the Governance and Population Committee.", "stage": "advancing", "cats": [ "governance", "privacy" ], "secs": [], "date": "2026-02-23", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/feb/20260223.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 4693", "jur": "MX", "level": "national", "num": "Expediente 4693", "title": "Expediente 4693: Initiative proposing a decree to amend and add provisions to the General Law on Humanities, Sciences, Technologies and Innovation, the General Education Law, and the General Law on the Protection of Personal Data Held by Obligated Entities, to require artificial intelligence as a school subject and promote inclusive, quality education", "sum": "The initiative would amend Mexico's laws to incorporate artificial intelligence as a mandatory school subject and address inclusive, quality education. It also proposes related changes to the public-sector personal-data protection framework.", "stage": "advancing", "cats": [ "education", "privacy" ], "secs": [], "date": "2026-02-23", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/feb/20260223.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CN:发改法规〔2026〕195号", "jur": "CN", "level": "national", "num": "发改法规〔2026〕195号", "title": "Implementation Opinions of the National Development and Reform Commission and Other Departments on Accelerating the Promotion and Application of Artificial Intelligence in the Tendering and Bidding Sector (发改法规〔2026〕195号)", "sum": "This administrative policy document promotes and guides the accelerated application of artificial intelligence in tendering and bidding activities. It is jointly issued by the National Development and Reform Commission and other relevant departments for implementation by local authorities and sector regulators.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-02-18", "url": "https://www.gov.cn/zhengce/zhengceku/202602/content_7058164.htm", "instrument_type": "final_measure", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7576", "jur": "US", "level": "national", "num": "HB7576", "title": "HB7576: AI Workforce Training Act", "sum": "The bill would amend the Internal Revenue Code to create a tax credit for workforce training in artificial intelligence. It is intended to encourage employers or other eligible parties to invest in AI-related skills development.", "stage": "introduced", "cats": [ "hiring", "education" ], "secs": [ "hr" ], "date": "2026-02-13", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7576/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7539", "jur": "US", "level": "national", "num": "HB7539", "title": "HB7539: SAFE Act Safety and Accountability in Freight Enforcement Act", "sum": "Directs the Federal Motor Carrier Safety Administration to study chameleon carriers and develop and test an advanced automated tool to help enforcement personnel identify fraudulent carrier applications during Department of Transportation registration. The bill focuses on government deployment of automated detection in freight-safety enforcement.", "stage": "introduced", "cats": [ "gov-use", "public-safety" ], "secs": [], "date": "2026-02-13", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7539/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB3888", "jur": "US", "level": "national", "num": "SB3888", "title": "SB3888: Small Business Artificial Intelligence Training Act of 2026", "sum": "The bill would require the Secretary of Commerce to develop artificial intelligence training resources and toolkits for small businesses in the United States. It establishes a federal small-business AI education and support initiative.", "stage": "introduced", "cats": [ "education", "governance" ], "secs": [], "date": "2026-02-12", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/3888/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB3852", "jur": "US", "level": "national", "num": "SB3852", "title": "SB3852: GRID Act (Guaranteeing Rate Insulation from Data Centers Act)", "sum": "The bill would impose requirements on data centers to prioritize residential ratepayers, likely addressing how data-center electricity demand and associated costs affect utility rates. It has been introduced in the U.S. Senate and referred to the Committee on Energy and Natural Resources.", "stage": "advancing", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-02-11", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/3852/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB3813", "jur": "US", "level": "national", "num": "SB3813", "title": "SB 3813: CLEAR Act Copyright Labeling and Ethical AI Reporting Act", "sum": "The bill would require notice to the Register of Copyrights identifying copyrighted works used to build generative artificial intelligence models. It also addresses copyright labeling and ethical reporting requirements for generative AI development.", "stage": "introduced", "cats": [ "disclosures", "frontier" ], "secs": [ "media" ], "date": "2026-02-10", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/3813/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 4597", "jur": "MX", "level": "national", "num": "Expediente 4597", "title": "Expediente 4597: Initiative to amend Article 202 of the Federal Criminal Code concerning the use of artificial intelligence to generate child pornography", "sum": "The initiative would amend Article 202 of Mexico’s Federal Criminal Code to address the use of artificial intelligence in generating child pornography. It was introduced by Deputy Fuensanta Guadalupe Guerrero Esquivel of the PRI and referred to the Justice Committee.", "stage": "advancing", "cats": [ "minors", "deepfakes" ], "secs": [ "media", "consumer" ], "date": "2026-02-10", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/feb/20260210.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:S.1644", "jur": "IT", "level": "national", "num": "S.1644", "title": "S.1644: Provisions for Protecting Personal Identity in the Use of Artificial Intelligence", "sum": "The bill establishes protections for personal identity in connection with the use of artificial intelligence technologies. Its specific regulatory mechanisms are not indicated in the available description.", "stage": "advancing", "cats": [ "privacy", "deepfakes" ], "secs": [], "date": "2026-02-10", "url": "http://dati.senato.it/ddl/59522", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB3809", "jur": "US", "level": "national", "num": "SB3809", "title": "SB3809: Artificial Intelligence Grand Challenges Act of 2026", "sum": "The bill would authorize the National Science Foundation Director to identify major artificial-intelligence research and development challenges and award competitive prizes for addressing them. It establishes a federal mechanism to support AI innovation rather than imposing direct regulatory requirements on AI developers or deployers.", "stage": "introduced", "cats": [ "frontier", "governance" ], "secs": [], "date": "2026-02-09", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/3809/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7434", "jur": "US", "level": "national", "num": "HB7434", "title": "HB7434: Artificial Intelligence Grand Challenges Act of 2026", "sum": "The bill would authorize the National Science Foundation director to identify major artificial intelligence research and development challenges and award competitive prizes for addressing them. It establishes a federal mechanism to support and incentivize AI research and innovation.", "stage": "introduced", "cats": [ "frontier", "governance" ], "secs": [], "date": "2026-02-09", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7434/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:C.2792", "jur": "IT", "level": "national", "num": "C.2792", "title": "C.2792: Establishment of a tax on journalistic works produced using artificial intelligence systems and allocation of the proceeds to fund social-security and welfare benefits for members of the national journalists’ register", "sum": "The bill would create a tax on journalistic works produced through artificial intelligence systems and dedicate the revenue to pension and welfare benefits for registered journalists. It was introduced as an ordinary legislative initiative by Deputy Marianna Ricciardi.", "stage": "introduced", "cats": [ "governance" ], "secs": [ "media" ], "date": "2026-02-09", "url": "http://dati.senato.it/ddl/59889", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IN:XIII/2026", "jur": "IN", "level": "national", "num": "XIII/2026", "title": "The Artificial Intelligence (Human Health and Medical Education) Regulation Bill, 2026 (XIII/2026)", "sum": "A private member's bill proposing regulation of artificial intelligence in human health and medical education. It was introduced in the Rajya Sabha and is pending.", "stage": "introduced", "cats": [ "healthcare", "education" ], "secs": [ "health" ], "date": "2026-02-06", "url": "https://sansad.in/getFile/BillsTexts/RSBillTexts/Asintroduced/25212202645709PM.pdf?source=legislation", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SR598", "jur": "US", "level": "national", "num": "SR598", "title": "SR598: Resolution condemning and calling for reversal of the decision to allow export of advanced artificial intelligence chips to the United Arab Emirates", "sum": "The resolution condemns President Trump's decision to permit exports of advanced AI chips to the United Arab Emirates and calls for the decision to be reversed, citing national-security and potential conflicts-of-interest concerns. It is a policy resolution rather than a binding export-control statute.", "stage": "advancing", "cats": [ "data-centers", "frontier", "governance" ], "secs": [ "infra" ], "date": "2026-02-05", "url": "https://www.congress.gov/bill/119th-congress/senate-resolution/598/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 3423", "jur": "MX", "level": "national", "num": "Expediente 3423", "title": "Expediente 3423: Initiative proposing a decree to amend Article 73, Section XVII, of the Political Constitution of the United Mexican States, empowering Congress to legislate on artificial intelligence and related technologies used to create similar cognitive systems", "sum": "The constitutional amendment would expressly authorize Mexico’s federal Congress to enact laws concerning artificial intelligence and related technologies capable of creating systems with similar cognitive functions. The initiative was presented by Deputy Daniel Murguía Lardizábal of Morena and referred to the Constitutional Points Commission.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-02-03", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/feb/20260203.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7294", "jur": "US", "level": "national", "num": "HB7294", "title": "HB7294: AI for Secure Networks Act", "sum": "Directs a study of the impacts of artificial intelligence technology on the security of telecommunications networks and related issues. The bill has been referred to the House Committee on Energy and Commerce.", "stage": "introduced", "cats": [ "governance", "public-safety" ], "secs": [ "infra" ], "date": "2026-01-30", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7294/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB5784", "jur": "US", "level": "national", "num": "HB5784", "title": "HB5784: Artificial Intelligence Wisdom for Innovative Small Enterprises Act (AI–WISE Act)", "sum": "The bill would amend the Small Business Act to help small businesses critically evaluate artificial intelligence tools. It likely establishes support, guidance, or educational resources for small enterprises assessing AI products, though the provided description does not specify the detailed mechanisms.", "stage": "advancing", "cats": [ "consumer-financial", "education" ], "secs": [], "date": "2026-01-26", "url": "https://www.congress.gov/bill/119th-congress/house-bill/5784/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB5764", "jur": "US", "level": "national", "num": "HB5764", "title": "HB 5764 – AI for Main Street Act", "sum": "The bill would amend the Small Business Act to require small business development centers to help small businesses use artificial intelligence. It focuses on providing AI-related assistance and support to small business concerns.", "stage": "advancing", "cats": [ "education", "gov-use" ], "secs": [], "date": "2026-01-26", "url": "https://www.congress.gov/bill/119th-congress/house-bill/5764/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7226", "jur": "US", "level": "national", "num": "HB7226", "title": "HB7226: Leveraging Artificial Intelligence to Streamline the Code of Federal Regulations Act of 2026", "sum": "The bill would require federal agencies to use artificial intelligence to review agency regulations. It establishes a government-use framework for applying AI to the Code of Federal Regulations and related regulatory processes.", "stage": "introduced", "cats": [ "gov-use", "governance" ], "secs": [], "date": "2026-01-22", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7226/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7218", "jur": "US", "level": "national", "num": "HB7218", "title": "HB7218 CHAT Act (Children Harmed by AI Technology Act)", "sum": "The bill would require artificial intelligence chatbots to implement age-verification measures and establish protections for minor users.", "stage": "introduced", "cats": [ "minors", "consumer-financial" ], "secs": [ "consumer" ], "date": "2026-01-22", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7218/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7209", "jur": "US", "level": "national", "num": "HB7209", "title": "HB7209: TRAIN Act (Transparency and Responsibility for Artificial Intelligence Networks Act)", "sum": "The bill would create an administrative subpoena process enabling copyright owners to determine whether their copyrighted works were used to train artificial intelligence models. It would increase transparency around training data and facilitate enforcement of copyright claims against AI developers.", "stage": "introduced", "cats": [ "governance", "frontier", "privacy" ], "secs": [ "media" ], "date": "2026-01-22", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7209/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB6875", "jur": "US", "level": "national", "num": "HB6875", "title": "HB 6875: AI OVERWATCH Act", "sum": "The bill would require the Under Secretary of Commerce for Industry and Security to impose export, reexport, or in-country transfer licensing requirements on certain integrated circuits intended for potentially weaponizable advanced technology and high-risk actors.", "stage": "advancing", "cats": [ "frontier", "governance" ], "secs": [ "infra" ], "date": "2026-01-21", "url": "https://www.congress.gov/bill/119th-congress/house-bill/6875/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB6275", "jur": "US", "level": "national", "num": "HB6275", "title": "HB6275: China AI Power Report Act", "sum": "Requires the U.S. Secretary of Commerce to submit annual reports on the advanced artificial intelligence capabilities of the People's Republic of China. The bill supports government assessment and monitoring of frontier AI developments by a foreign competitor.", "stage": "advancing", "cats": [ "frontier", "governance" ], "secs": [], "date": "2026-01-21", "url": "https://www.congress.gov/bill/119th-congress/house-bill/6275/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7158", "jur": "US", "level": "national", "num": "HB7158", "title": "HB 7158: Expanding AI Voices through Capacity Building Act", "sum": "The bill would support interdisciplinary AI research and innovation through partnerships and capacity-building programs at institutions of higher education and other institutions. It specifically aims to expand AI participation among populations historically underrepresented in STEM.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-01-20", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7158/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7151", "jur": "US", "level": "national", "num": "HB7151", "title": "HB7151: Artificial Intelligence Public Awareness and Education Campaign Act", "sum": "The bill would require the Secretary of Commerce to conduct a public awareness and education campaign explaining the benefits, risks, and prevalence of artificial intelligence in Americans’ daily lives.", "stage": "introduced", "cats": [ "education", "governance" ], "secs": [], "date": "2026-01-20", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7151/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:DE:330292", "jur": "DE", "level": "national", "num": "330292", "title": "European Parliament resolution of 25 November 2025 on the impact of artificial intelligence on the financial sector (2025/2056(INI)) EP P10_TA(2025)0286", "sum": "This European Parliament resolution assesses the effects of artificial intelligence on financial services and sets out policy recommendations concerning opportunities, risks, consumer protection, supervision, and the responsible deployment of AI in finance. It is an own-initiative policy resolution rather than an enacted statute.", "stage": "passed", "cats": [ "governance", "consumer-financial" ], "secs": [ "finserv" ], "date": "2026-01-16", "url": "https://dip.bundestag.de/vorgang/vorgang/330292", "instrument_type": "bill", "binding_status": "binding", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB3682", "jur": "US", "level": "national", "num": "SB3682", "title": "SB3682: Power for the People Act of 2026", "sum": "The bill would create data-center load queues and data-center-specific electricity rate classes to limit the impact of large data-center loads on other electricity customers.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-15", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/3682/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB3680", "jur": "US", "level": "national", "num": "SB3680", "title": "SB 3680: Eliminating Bias in Algorithmic Systems Act of 2026", "sum": "The bill would require government agencies that use, fund, or oversee algorithmic systems to establish civil-rights offices focused on algorithmic bias, discrimination, and related harms. It creates an oversight framework for addressing algorithmic-system impacts within the government.", "stage": "introduced", "cats": [ "anti-discrimination", "governance", "gov-use" ], "secs": [], "date": "2026-01-15", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/3680/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7110", "jur": "US", "level": "national", "num": "HB7110", "title": "HB7110: Eliminating Bias in Algorithmic Systems Act of 2026", "sum": "The bill would require government agencies that use, fund, or oversee algorithmic systems to establish civil-rights offices focused on algorithmic bias, discrimination, and related harms. It would create an institutional oversight framework for algorithmic systems in government-related contexts.", "stage": "introduced", "cats": [ "anti-discrimination", "governance", "gov-use" ], "secs": [], "date": "2026-01-15", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7110/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 4143", "jur": "MX", "level": "national", "num": "Expediente 4143", "title": "Expediente 4143: Initiative to amend and supplement Article 119 Octies of the Federal Penal Code concerning parental controls and the prevention and punishment of violations of sexual privacy through artificial-intelligence programs or platforms", "sum": "The initiative would amend Mexico’s Federal Penal Code to address violations of sexual privacy committed through artificial-intelligence programs or platforms, including measures related to parental control. It was introduced by Deputy Carlos Alberto Puente Salas and co-sponsored by members of several parliamentary groups.", "stage": "advancing", "cats": [ "deepfakes", "minors", "privacy" ], "secs": [ "media", "consumer" ], "date": "2026-01-15", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/ene/20260115.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:MX:Expediente 4122", "jur": "MX", "level": "national", "num": "Expediente 4122", "title": "Expediente 4122: Initiative proposing a decree to add provisions to the General Health Law concerning artificial intelligence applied to healthcare", "sum": "The initiative proposes amendments to Mexico’s General Health Law to establish provisions governing the use of artificial intelligence in healthcare. It was introduced by Deputy Éctor Jaime Ramírez Barba and other PAN parliamentary-group members and referred to the Health Commission.", "stage": "advancing", "cats": [ "healthcare" ], "secs": [ "health" ], "date": "2026-01-15", "url": "https://gaceta.diputados.gob.mx/Gaceta/66/2026/ene/20260115.html", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7066", "jur": "US", "level": "national", "num": "HB7066", "title": "HB7066: SHIELD Act: Stopping Hikes in Electricity from Large Load Demands Act", "sum": "The bill would amend the Public Utility Regulatory Policies Act of 1978 to establish standards for treating large-load facilities as a class of electric consumers and considering their impact on electricity rates and utility systems.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-14", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7066/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB7064", "jur": "US", "level": "national", "num": "HB7064", "title": "HB7064: AI in Health Care Efficiency and Study Act", "sum": "Requires the Secretary of Health and Human Services to study how artificial intelligence can improve administrative and clerical work in health care while preserving patient-data privacy and security. The study would develop strategies for applying AI in the health-care industry.", "stage": "introduced", "cats": [ "healthcare", "privacy" ], "secs": [ "health" ], "date": "2026-01-14", "url": "https://www.congress.gov/bill/119th-congress/house-bill/7064/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:IT:S.1747", "jur": "IT", "level": "national", "num": "S.1747", "title": "Bill S.1747: Provisions on Education for the Conscious and Responsible Use of Artificial Intelligence in Lower and Upper Secondary Schools", "sum": "The bill establishes provisions for educating students in lower and upper secondary schools about the conscious and responsible use of artificial intelligence.", "stage": "introduced", "cats": [ "education" ], "secs": [], "date": "2026-01-14", "url": "http://dati.senato.it/ddl/59786", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:EU:Ares(2025)10569703", "jur": "EU", "level": "national", "num": "Ares(2025)10569703", "title": "Implementing Regulation on AI Regulatory Sandboxes", "sum": "This planned European Commission implementing regulation would establish rules for setting up and operating AI regulatory sandboxes under the EU AI Act. It would govern how competent authorities supervise the development, training, validation, and testing of innovative AI systems in controlled environments.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2026-01-14", "url": "https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/15952", "instrument_type": "implementing_act", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB1837", "jur": "US", "level": "national", "num": "SB1837", "title": "SB1837: DEFIANCE Act of 2025 (Disrupt Explicit Forged Images and Non-Consensual Edits Act of 2025)", "sum": "The bill expands legal remedies for individuals harmed by the creation or distribution of non-consensual intimate digital forgeries and other digitally altered intimate images. It addresses synthetic and manipulated media depicting identifiable individuals without their consent.", "stage": "advancing", "cats": [ "deepfakes", "privacy" ], "secs": [ "media" ], "date": "2026-01-13", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/1837/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB6984", "jur": "US", "level": "national", "num": "HB6984", "title": "HB6984: Data Center Transparency Act", "sum": "The bill would require reporting on data centers’ effects on air quality, water quality, and electricity consumption. It addresses data-center environmental and energy impacts rather than regulating AI systems directly.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-08", "url": "https://www.congress.gov/bill/119th-congress/house-bill/6984/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:HB6983", "jur": "US", "level": "national", "num": "HB6983", "title": "HB6983: PRICE Act (Preventing Rate Inflation in Consumer Energy Act)", "sum": "The bill would require data centers to generate electricity, addressing the energy demands and rate impacts associated with data-center operations.", "stage": "introduced", "cats": [ "data-centers" ], "secs": [ "infra" ], "date": "2026-01-08", "url": "https://www.congress.gov/bill/119th-congress/house-bill/6983/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:US:SB3586", "jur": "US", "level": "national", "num": "SB3586", "title": "SB 3586: AI for Mainstreet Act", "sum": "This bill would amend the Small Business Act to require Small Business Development Centers to help small businesses use artificial intelligence. It would establish AI assistance as part of federally supported small-business development services.", "stage": "introduced", "cats": [ "education", "gov-use" ], "secs": [], "date": "2026-01-07", "url": "https://www.congress.gov/bill/119th-congress/senate-bill/3586/all-info", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CN:工信部联科〔2025〕279号", "jur": "CN", "level": "national", "num": "工信部联科〔2025〕279号", "title": "Notice of Eight Ministries on Issuing the Implementation Opinions for the Special Action on “Artificial Intelligence + Manufacturing” (MIIT Joint Science and Technology Notice No. 279 of 2025)", "sum": "The eight ministries issue an implementation plan to promote the integration of artificial intelligence into manufacturing, including intelligent industrial applications, technological innovation, data and infrastructure support, and sectoral coordination. It establishes policy priorities and implementation measures for advancing AI-enabled manufacturing nationwide.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-01-07", "url": "https://www.gov.cn/zhengce/zhengceku/202601/content_7054201.htm", "instrument_type": "final_measure", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CN:工信厅信管〔2025〕76号", "jur": "CN", "level": "national", "num": "工信厅信管〔2025〕76号", "title": "MIIT General Office Notice on Issuing the Action Plan for Empowering Industrial Internet through Integration with Artificial Intelligence (工信厅信管〔2025〕76号)", "sum": "The Ministry of Industry and Information Technology issues an action plan to promote the integrated application of artificial intelligence and industrial internet technologies. It establishes policy priorities and implementation measures for AI-enabled industrial development and digital transformation.", "stage": "advancing", "cats": [ "governance" ], "secs": [], "date": "2026-01-07", "url": "https://www.gov.cn/zhengce/zhengceku/202601/content_7054192.htm", "instrument_type": "final_measure", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CO:Guía Ética de IA 2025", "jur": "CO", "level": "national", "num": "Guía Ética de IA 2025", "title": "Colombia Public-Sector Ethical AI Guide", "sum": "The guide supports transparent, rights-respecting, accountable AI use by public bodies and provides a practical implementation reference under CONPES 4144.", "stage": "passed", "cats": [ "gov-use", "governance", "disclosures", "anti-discrimination" ], "secs": [], "date": "2025-12-31", "url": "https://www.dnp.gov.co/Prensa_/Noticias/Paginas/gobierno-impulsa-guia-etica-de-inteligencia-artificial.aspx", "instrument_type": "guidance", "binding_status": "guidance", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:AU:s1471", "jur": "AU", "level": "national", "num": "s1471", "title": "Online Safety and Other Legislation Amendment (My Face, My Rights) Bill 2025 (S1471)", "sum": "The bill would create complaints and enforcement mechanisms under the Online Safety Act 2021 for the non-consensual sharing of digitally altered or artificially generated audio-visual material depicting a person’s face or voice. It would also amend the Privacy Act 1988 to create a cause of action for wrongful use or disclosure of such deepfake material.", "stage": "advancing", "cats": [ "deepfakes", "privacy" ], "secs": [ "consumer", "media" ], "date": "2025-11-24", "url": "https://www.aph.gov.au/Parliamentary_Business/Bills_Legislation/Bills_Search_Results/Result?bId=s1471", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:AU:s1461", "jur": "AU", "level": "national", "num": "s1461", "title": "Electoral Legislation Amendment (Electoral Communications) Bill 2025 (No. 2) (Australia)", "sum": "The bill would prohibit materially inaccurate or misleading electoral and referendum communications, including digitally modified material such as deepfakes, and require disclosures when content is created or modified using digital technology or artificial intelligence. It would also establish an Electoral Communications Panel and remove the three-day electoral advertising blackout.", "stage": "advancing", "cats": [ "elections", "deepfakes", "disclosures" ], "secs": [ "media" ], "date": "2025-07-30", "url": "https://www.aph.gov.au/Parliamentary_Business/Bills_Legislation/Bills_Search_Results/Result?bId=s1461", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CO:PL 043/2025 Senado", "jur": "CO", "level": "national", "num": "PL 043/2025 Senado", "title": "Colombia AI Regulation Bill 043/2025", "sum": "The bill proposes an economy-wide framework for ethical, responsible, competitive, and innovative AI development. It covers risk classification, transparency, human oversight, accountability, personal data, and public governance.", "stage": "introduced", "cats": [ "governance", "disclosures", "privacy", "anti-discrimination" ], "secs": [], "date": "2025-07-28", "url": "https://leyes.senado.gov.co/proyectos%20/index.php/proyectos-ley/cuatrenio-2022-2026/2025-2026/article/43-por-medio-de-la-cual-se-regula-la-inteligencia-artificial-en-colombia-para-garantizar-su-desarrollo-etico-responsable-competitivo-e-innovador-y-se-dictan-otras-disposiciones?position=136&total=174", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:AU:r7347", "jur": "AU", "level": "national", "num": "r7347", "title": "Criminal Code Amendment (Using Technology to Generate Child Abuse Material) Bill 2025", "sum": "Amends Australia’s Criminal Code Act 1995 to create offenses for using a carriage service to generate child abuse material, including material produced with generative AI or other technology. The bill targets technology-enabled creation and distribution of child abuse material.", "stage": "introduced", "cats": [ "minors", "public-safety" ], "secs": [ "consumer", "media" ], "date": "2025-07-28", "url": "https://www.aph.gov.au/Parliamentary_Business/Bills_Legislation/Bills_Search_Results/Result?bId=r7347", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:UK:3942", "jur": "UK", "level": "national", "num": "3942", "title": "Artificial Intelligence (Regulation) Bill [HL]", "sum": "A bill proposing a general statutory framework for regulating artificial intelligence in the United Kingdom, along with related provisions. The supplied description does not specify the bill’s detailed obligations or covered AI systems.", "stage": "introduced", "cats": [ "governance" ], "secs": [], "date": "2025-03-04", "url": "https://bills.parliament.uk/bills/3942", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CO:CONPES 4144", "jur": "CO", "level": "national", "num": "CONPES 4144", "title": "Colombia National AI Policy, CONPES 4144", "sum": "The policy establishes Colombia's national AI roadmap through 2030, with more than 100 actions across governance, skills, infrastructure, research, public services, and responsible adoption.", "stage": "passed", "cats": [ "governance", "gov-use", "education" ], "secs": [], "date": "2025-02-14", "url": "https://colaboracion.dnp.gov.co/CDT/Conpes/Econ%C3%B3micos/4144.pdf", "instrument_type": "policy", "binding_status": "policy", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:UK:3760", "jur": "UK", "level": "national", "num": "3760", "title": "Public Authority Algorithmic and Automated Decision-Making Systems Bill [HL]", "sum": "The Bill would regulate public-sector use of algorithmic and automated decision-making systems, requiring public authorities to conduct impact assessments and meet transparency standards.", "stage": "advancing", "cats": [ "governance", "gov-use", "disclosures" ], "secs": [], "date": "2025-02-07", "url": "https://bills.parliament.uk/bills/3760", "instrument_type": "bill", "binding_status": "proposed", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:AE:UAE AI Charter 2024", "jur": "AE", "level": "national", "num": "UAE AI Charter 2024", "title": "UAE Charter for AI Development and Use", "sum": "The charter establishes national principles for safe, fair, transparent, privacy-respecting, human-centered, and accountable AI development and deployment.", "stage": "passed", "cats": [ "governance", "disclosures", "privacy", "anti-discrimination" ], "secs": [], "date": "2024-07-01", "url": "https://ai.gov.ae/wp-content/uploads/2024/07/UAEAI-Methaq-EN2-3.pdf", "instrument_type": "charter", "binding_status": "policy", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:ID:SE Kominfo 9/2023", "jur": "ID", "level": "national", "num": "SE Kominfo 9/2023", "title": "Indonesia AI Ethics Circular 9/2023", "sum": "The circular directs AI programming businesses and public and private electronic system operators to build internal AI and data ethics policies around safety, transparency, accountability, personal data, accessibility, sustainability, and human values.", "stage": "passed", "cats": [ "governance", "disclosures", "privacy", "anti-discrimination" ], "secs": [], "date": "2023-12-19", "url": "https://jdih.komdigi.go.id/produk_hukum/view/id/883/t/surat%2Bedaran%2Bmenteri%2Bkomunikasi%2Bdan%2Binformatika%2Bnomor%2B9%2Btahun%2B2023", "instrument_type": "circular", "binding_status": "guidance", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] }, { "id": "m:CN:c_1768735112911946", "jur": "CN", "level": "national", "num": "c_1768735112911946", "title": "Cybersecurity Law of the People’s Republic of China (2025 Amendment: Improving Artificial Intelligence Governance Provisions)", "sum": "The amendment adds provisions promoting the secure development of artificial intelligence and updates legal responsibilities related to cybersecurity. It was adopted by the Standing Committee of the 14th National People’s Congress on October 28, 2025, and took effect on January 1, 2026.", "stage": "passed", "cats": [ "governance" ], "secs": [], "date": "2017-06-01", "url": "https://www.cac.gov.cn/2025-12/29/c_1768735112911946.htm", "instrument_type": "law", "binding_status": "binding", "source_checked_at": "2026-08-11", "last_verified_at": "2026-08-11", "effective_dates": [] } ], "global_release": { "version": "2026-08-11.1", "as_of": "2026-08-11", "measure_count": 514, "jurisdiction_count": 20 }, "state_release": { "version": "2026-08-11.1", "release_url": "/data/state-radar-release-2026-08-11.json" } }