Artificial Intelligence Policy Tracker

AI policy change log

Dated, source-backed updates: what changed, the practical impact, the status after the change and the official source. Urgent and high-impact items are separated from routine updates.

Filter changes
Reset

Weekly digest

Dated, source-linked AI policy changes and upcoming application dates, once a week. No marketing.

Double opt-in; one-click unsubscribe in every email. Choose jurisdictions

All changes (341)

Download as CSV

Template v2 released: NIST AI RMF ↔ EU AI Act ↔ ISO/IEC 42001 Crosswalk

Dataset 7c0835db52c1 → 3335c39da4b7. Sheet "Crosswalk": 108 → 98 rows (-10). Sheet "Coverage": 17 → 16 rows (-1). Record citations: 108 → 98.

Practical impact: Organisations using the v2 file should download the new version; the README page in each file states which dataset it was built from.

NIST AI RMF ↔ EU AI Act ↔ ISO/IEC 42001 Crosswalk v2 Verified (reviewed by templates:build; a factual check against the official source, not a legal review)

Template v2 released: ISO/IEC 42001 Gap Assessment and Statement of Applicability

Dataset 914895c3103e → 3335c39da4b7.

Practical impact: Organisations using the v2 file should download the new version; the README page in each file states which dataset it was built from.

ISO/IEC 42001 Gap Assessment and Statement of Applicability v2 Verified (reviewed by templates:build; a factual check against the official source, not a legal review)

Template v2 released: AI Agent Registry and Permission Matrix

Dataset 914895c3103e → 3335c39da4b7. Sheet "Oversight duties": 34 → 35 rows (+1). Document: 53 → 52 blocks. Record citations: 42 → 43.

Practical impact: Organisations using the v2 file should download the new version; the README page in each file states which dataset it was built from.

AI Agent Registry and Permission Matrix v2 Verified (reviewed by templates:build; a factual check against the official source, not a legal review)

Template v2 released: AI Incident Response Playbook and Log

Dataset 914895c3103e → 3335c39da4b7. Sheet "Incident duties": 9 → 7 rows (-2). Document: 69 → 57 blocks. Record citations: 256 → 252.

Practical impact: Organisations using the v2 file should download the new version; the README page in each file states which dataset it was built from.

AI Incident Response Playbook and Log v2 Verified (reviewed by templates:build; a factual check against the official source, not a legal review)

Template v2 released: Human Oversight Procedure

Dataset 914895c3103e → 3335c39da4b7. Sheet "Oversight duties": 8 → 9 rows (+1). Document: 60 → 65 blocks. Record citations: 16 → 18.

Practical impact: Organisations using the v2 file should download the new version; the README page in each file states which dataset it was built from.

Human Oversight Procedure v2 Verified (reviewed by templates:build; a factual check against the official source, not a legal review)

Template v2 released: AI Impact Assessment

Dataset 914895c3103e → 3335c39da4b7. Sheet "Duties by jurisdiction": 7 → 6 rows (-1). Document: 54 → 48 blocks. Record citations: 14 → 12.

Practical impact: Organisations using the v2 file should download the new version; the README page in each file states which dataset it was built from.

AI Impact Assessment v2 Verified (reviewed by templates:build; a factual check against the official source, not a legal review)

Template v2 released: Fundamental Rights Impact Assessment (FRIA)

Dataset 914895c3103e → 3335c39da4b7. Sheet "Impact-assessment duties": 7 → 6 rows (-1). Record citations: 8 → 7.

Practical impact: Organisations using the v2 file should download the new version; the README page in each file states which dataset it was built from.

Fundamental Rights Impact Assessment (FRIA) v2 Verified (reviewed by templates:build; a factual check against the official source, not a legal review)

Template v2 released: EU AI Act Role and Risk Classifier

Dataset 7c0835db52c1 → 3335c39da4b7. Sheet "Dates": 7 → 9 rows (+2). Record citations: 51 → 53.

Practical impact: Organisations using the v2 file should download the new version; the README page in each file states which dataset it was built from.

EU AI Act Role and Risk Classifier v2 Verified (reviewed by templates:build; a factual check against the official source, not a legal review)

Template v2 released: AI Risk Register (MIT AI Risk Repository taxonomy)

Dataset 914895c3103e → 3335c39da4b7. Sheet "Risk duties": 13 → 10 rows (-3). Record citations: 39 → 36.

Practical impact: Organisations using the v2 file should download the new version; the README page in each file states which dataset it was built from.

AI Risk Register (MIT AI Risk Repository taxonomy) v2 Verified (reviewed by templates:build; a factual check against the official source, not a legal review)

Template v2 released: AI System Inventory

Dataset 914895c3103e → 3335c39da4b7. Sheet "Duties by role": 112 → 107 rows (-5). Document: 77 → 75 blocks. Record citations: 166 → 161.

Practical impact: Organisations using the v2 file should download the new version; the README page in each file states which dataset it was built from.

AI System Inventory v2 Verified (reviewed by templates:build; a factual check against the official source, not a legal review)
California (United States) Routine

California executive order directs work on AI oversight, including a frontier-model kill switch

The Governor issued an executive order asking a working group to recommend, within about two months, measures to strengthen California's AI safety and security laws, including whether developers of frontier models should maintain a shutdown capability and whether independent third parties should prepare safety plans. It creates no new obligations itself. Recorded from secondary reporting; confirm the order's number and text on the Governor's site.

Practical impact: No obligations yet; frontier-model developers should watch for the working group's recommendations.

Governor Newsom issues executive order to accelerate independent oversight and advance the creation of an AI kill switch Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)
California (United States) High Adopted

California SB 1050 requires disclosure of AI synthetic performers in advertising

SB 1050 makes it unlawful to create or publish an advertisement that prominently includes a synthetic performer (a human-like digital voice, figure or representation created at least partly with generative AI and not depicting an identifiable person) without a clear and conspicuous disclosure. It takes effect on 1 January 2027. Recorded from secondary reporting; confirm against the chaptered text.

Practical impact: Advertisers and agencies should add a clear disclosure to any California advertisement that features an AI-generated performer from 1 January 2027.

SB-1050 False advertising: synthetic performers Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)
California (United States) High Adopted

California signs SB 1119 on companion chatbots and children's safety

SB 1119 was chaptered (Chapter 190, Statutes of 2026). Operators must carry out a child-focused risk assessment before releasing a new or substantially modified companion chatbot from 1 July 2027, and commission child-safety audits by 1 January 2029. Recorded from search extracts of the legislature's pages.

Practical impact: Companion chatbot operators should plan a documented child-safety risk assessment before mid-2027 releases.

California chatbot child-safety law (SB 1119) California Legislative Information: SB 1119 (2025-2026) status Pending review (a factual check against the official source, not a legal review)
California (United States) High Adopted

California signs child-safety laws covering companion chatbots and social media

The Governor signed a package of child-safety bills that, among other things, require risk assessments before new companion-chatbot rollouts, add penalties for harm to children and restrict toys that include a companion chatbot. According to the announcement and secondary reporting, most provisions take effect on 1 January 2027 and the companion-chatbot safeguards on 1 July 2027. Recorded from secondary reporting; confirm each bill against its enrolled text.

Practical impact: Providers of companion chatbots available to minors in California should plan risk assessments and safeguards for the 2027 dates.

Governor Newsom signs the strongest child safety chatbot and social media laws in the nation Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)
California (United States) High Adopted

California enacts an AI audit framework with SB 813 and AB 1405

The Governor signed SB 813, under which the Government Operations Agency sets criteria by 1 January 2028 for designating qualified AI auditors as independent verification organisations, and AB 1405, which creates an online AI Auditor Registry by 1 January 2029, after which a covered AI audit may be offered only by a registered auditor meeting independence and integrity standards. Recorded from secondary reporting; confirm against the enrolled bills.

Practical impact: Organisations that commission AI audits for California compliance should plan to use auditors that register under AB 1405 once the registry opens.

Governor Newsom signs first-in-the-nation AI safeguards to protect Californians Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)
United States Routine Proposed

House members introduce the AI Tax and Work Protection Act (H.R. 10044), an excise tax on AI tokens

H.R. 10044 would tax large AI companies on the value of the tokens their models process or on AI-service revenue, whichever is higher, with a rate that rises automatically as unemployment climbs, and would create a Work Protection Administration in the Department of Labor to fund jobs. Introduced by Representatives Sara Jacobs, Greg Casar and Valerie Foushee. Recorded from secondary reporting; confirm on Congress.gov.

Practical impact: No obligations; a proposal to watch in the economic-transition tracker.

H.R. 10044, AI Tax and Work Protection Act Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)
European Union High Partially applicable

EU AI Act general application begins; Article 50 transparency duties now apply

The general application date in Article 113 arrived. Chatbot disclosure, synthetic-content marking and deepfake labelling under Article 50 now apply; the high-risk obligations do not, having been deferred by Regulation (EU) 2026/1744. Recorded from secondary reporting; confirm against the Official Journal text.

Practical impact: Label AI interactions and synthetic content now; high-risk conformity work runs to the deferred dates.

EU AI Act Regulation (EU) 2024/1689, Article 113 as amended Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)
European Union Urgent at the time Partially applicable

EU Digital Omnibus on AI enters into force, moving high-risk AI Act duties to December 2027 and August 2028

Regulation (EU) 2026/1744, published in the Official Journal on 24 July 2026, entered into force on 27 July 2026. It amends Article 113 of the AI Act so that the Chapter III high-risk obligations apply from 2 December 2027 for stand-alone Annex III systems and from 2 August 2028 for AI embedded in Annex I products, adds two Article 5 prohibitions applying from 2 December 2026, and leaves the 2 August 2026 general application and Article 50 transparency dates in place. Recorded from concordant secondary reporting; confirm against the Official Journal text.

Practical impact: Re-plan high-risk conformity work to the December 2027 and August 2028 dates; transparency duties under Article 50 still applied from 2 August 2026.

EU AI Act Regulation (EU) 2026/1744 (Digital Omnibus on AI) Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)
Malaysia Routine

Ministry of Digital begins engagement and public consultation on the AI Governance Bill

Milestone recorded for Artificial Intelligence (Malaysia): Ministry of Digital begins engagement and public consultation on the AI Governance Bill. Recorded from the official source listed.

Artificial Intelligence Ministry of Digital begins engagement and public consultation on the AI Governance Bill Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)
Illinois (United States) High at the time Adopted

Illinois enacts the AI Safety Measures Act (SB 315) on frontier-model safety and transparency

SB 315 became Public Act 104-0538. Large frontier developers must publish a frontier AI framework and transparency reports, report critical safety incidents to the state, protect whistleblowers and, from 2028, commission annual independent third-party audits. Recorded from search extracts of the ILGA bill status page.

Practical impact: Large frontier developers should map their California SB 53 framework to Illinois's audit requirement.

Illinois AI Safety Measures Act (SB 315) Illinois General Assembly: bill status of SB 315 (104th General Assembly) Pending review (a factual check against the official source, not a legal review)
United States Routine Proposed

Senator Sanders introduces the American A.I. Sovereign Wealth Fund Act (S. 4825)

S. 4825 would levy a one-time tax, payable in equity, on AI companies with more than USD 200 million in annual sales, placing the shares in a public fund managed by an independent commission and paying dividends to residents. Introduced and referred; no committee action recorded. Recorded from secondary reporting and the sponsor's press release; confirm on Congress.gov.

Practical impact: No obligations; a proposal to watch in the economic-transition tracker.

S. 4825, American A.I. Sovereign Wealth Fund Act Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)

Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.

Frequently asked questions

What counts as a change?

A dated development in the life of an instrument: adoption, entry into force, an amendment, a withdrawal, a gazette notice, the opening or closing of a consultation, or guidance being issued under it. Each entry says what changed and what it means in practice, and links the official source.

How far back does the change log go?

To 2017, which is where the earliest recorded national AI strategies sit. Entries are grouped by year, and the whole log is available as an RSS feed and through the API.

Will I be told when something changes?

Follow a jurisdiction or an instrument and you will be alerted when a change is recorded against it. There is also a digest you can subscribe to. Both are free.