Search and filter source-backed AI laws, regulations, standards, guidance and consultations. Each record shows its status, key dates, verification state and official source.
Νόμος 4961/2022: Αναδυόμενες τεχνολογίες πληροφορικής και επικοινωνιών, ενίσχυση της ψηφιακής διακυβέρνησης και άλλες διατάξεις
Law 4961/2022, published in July 2022, contains a chapter on artificial intelligence: public-sector bodies must carry out an algorithmic impact assessment and publish information before deploying AI systems that affect people, keep a register of AI systems, and ensure the Hellenic Data Protection Authority's oversight; medium and large private companies must inform workers about AI systems used in employment decisions and maintain an ethical-use policy. It also regulates IoT, 3D printing, blockchain and unmanned aircraft.
In force 27 Jul 2022Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Ley para el Fomento de la Inteligencia Artificial y Tecnologías Emergentes (Decreto Legislativo, febrero de 2025)
Approved by the Legislative Assembly in February 2025, the law promotes AI development and investment, creates the National Agency for Artificial Intelligence (ANIA) as regulator, defines rights and principles (human oversight, transparency, non-discrimination, data protection), sets registration and sandbox mechanisms and limits liability of developers who act in good faith under the law, alongside data-processing rules for AI training.
Adopted 25 Feb 2025Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Legge 23 settembre 2025, n. 132 – Disposizioni e deleghe al Governo in materia di intelligenza artificiale
Italy's framework AI law, published in the Official Gazette on 25 September 2025 and in force from 10 October 2025. It states principles (human-centric, transparent, safe AI; protection of fundamental rights), sets sector rules for healthcare (AI as support, not replacement, for clinical decisions), employment (information to workers, an AI-at-work observatory), intellectual professions (client disclosure), justice (judge decides; AI only for organisational support) and public administration, requires parental consent for children under 14, designates AgID and ACN as national authorities, delegates the government to align national law with the EU AI Act, and creates a criminal offence for unlawful dissemination of AI-generated or manipulated content with aggravating circumstances for other crimes committed with AI.
In force 10 Oct 2025Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Law of the Republic of Kazakhstan "On Artificial Intelligence" (signed November 2025)
The law defines AI systems and their classification by level of autonomy and risk, sets principles (legality, fairness, transparency, safety, human control), assigns duties to owners and operators of AI systems including risk management, labelling of AI-generated content and protection of personal data, prohibits certain manipulative and social-scoring uses, provides for a national AI platform and state support measures, and allocates state regulation to the authorised body.
Adopted 17 Nov 2025Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Montana Right to Compute Act (SB 212, 69th Legislature, 2025)
Recognises a right to own and use computational resources and limits government restrictions on them; critical infrastructure facilities controlled by an AI system must have a risk management policy.
Pending review (a factual check against the official source, not a legal review)Official source
The Individual Privacy Act 2075 gives effect to the constitutional right to privacy in Nepal. It regulates the collection, storage, processing, use and disclosure of personal information by public bodies and private entities, requires consent for collection and use of personal data subject to exceptions, restricts sensitive data, and provides remedies and penalties. It is the main binding law affecting AI systems that process personal data in Nepal. The Individual Privacy Regulation 2077 (2020) provides implementing rules.
In force 18 Sep 2018Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
New York AI companion safeguards (General Business Law Article 47, sections 1700-1701)
Operators of AI companions must have a protocol to detect and respond to suicidal ideation and self-harm, and must tell users they are talking to AI at the start of a session and at least every three hours.
In force 5 Nov 2025Pending review (a factual check against the official source, not a legal review)Official source
Work Health and Safety Amendment (Digital Work Systems) Act 2026 (NSW) (Act No 5 of 2026)
Makes it a primary duty of a person conducting a business or undertaking to ensure that workers' health and safety is not put at risk by "digital work systems" (an algorithm, AI, automation or online platform), and lets WHS entry-permit holders ask to inspect those systems.
Adopted 18 Feb 2026Pending review (a factual check against the official source, not a legal review)Official source
New York City Local Law 144 of 2021 on Automated Employment Decision Tools (AEDT) and DCWP implementing rules
Employers and employment agencies may not use an automated employment decision tool to screen candidates or employees for hiring or promotion in New York City unless the tool has had an independent bias audit within the past year, a summary of the audit results is published, and candidates receive at least ten business days' notice of the tool's use, the job qualifications assessed, and how to request an alternative process or accommodation. The bias audit calculates selection and scoring impact ratios by sex, race/ethnicity and intersectional categories. Enforcement began 5 July 2023.
Applies from 5 Jul 2023Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Working for Workers Four Act, 2024 (Bill 149): disclosure of artificial intelligence use in publicly advertised job postings
Amends the Employment Standards Act, 2000 to require employers with 25 or more employees to disclose in every publicly advertised job posting whether artificial intelligence is used to screen, assess or select applicants, alongside new rules on salary ranges and Canadian-experience requirements. The AI disclosure requirement is in force from 1 January 2026.
Applies from 1 Jan 2026Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Quebec Law 25 (S.Q. 2021, c. 25): provisions on decisions based exclusively on automated processing and biometric systems
Section 12.1 of the private-sector privacy act (as amended by Law 25, in force 22 September 2023) requires any enterprise that uses personal information to render a decision based exclusively on automated processing to inform the person no later than when the decision is made, and, on request, to tell them what personal information was used, the reasons and principal factors and parameters, and their right to have the information corrected, and to give them an opportunity to submit observations to a person who can review the decision. Biometric identification databases must be declared to the Commission d'accès à l'information 60 days before use, and privacy impact assessments are mandatory for projects involving personal information. Penalties reach CAD 25 million or 4% of worldwide turnover.
Applies from 22 Sep 2023Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Real Decreto 729/2023, de 22 de agosto, por el que se aprueba el Estatuto de la Agencia Española de Supervisión de Inteligencia Artificial
Creates and organises AESIA, the Spanish AI Supervision Agency, as a public body attached to the Ministry for Digital Transformation. AESIA supervises and inspects AI systems, promotes sandboxes and standards, and acts as national authority for the EU AI Act. The decree sets its governance, functions and funding.
In force 3 Sep 2023Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Real Decreto 817/2023, de 8 de noviembre, que establece un entorno controlado de pruebas para el ensayo del cumplimiento de la propuesta de Reglamento de IA
Establishes Spain's controlled testing environment (sandbox) for providers of high-risk AI systems to test compliance with the then-proposed EU AI Act requirements: risk management, data governance, documentation, transparency, human oversight, accuracy and robustness. Participation is voluntary; participants receive guidance and produce documentation that feeds into national implementation.
In force 10 Nov 2023Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Regulations of Shanghai Municipality on Promoting the Development of the Artificial Intelligence Sector
上海市促进人工智能产业发展条例
Promotes the AI industry and names the economy and informatization department as lead regulator; sets up a strategy advisory committee and an AI ethics expert committee; bans certain uses such as discrimination and algorithmic price discrimination; applies list-based compliance review to high-risk AI products and disclosure with after-the-fact control to lower-risk ones; and allows sandbox supervision.
In force 1 Oct 2022Pending review (a factual check against the official source, not a legal review)Official source
Ensuring Likeness, Voice, and Image Security (ELVIS) Act of 2024 (Tennessee Public Chapter 588)
Signed 21 March 2024 and effective 1 July 2024, the ELVIS Act updates Tennessee's Personal Rights Protection Act to add voice to the protected attributes of name, photograph and likeness, prohibits publishing or making available an individual's voice or likeness without authorisation, and creates liability for distributing or making available an algorithm, software or tool whose primary purpose is producing an individual's voice or likeness without authorisation. It provides civil actions for individuals and licensees and criminal penalties.
In force 1 Jul 2024Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Signed on 22 June 2025 and effective 1 January 2026, TRAIGA bans developing or deploying AI systems intended to manipulate people into self-harm or crime, government social scoring, biometric identification by government from public data without consent, intentional unlawful discrimination against protected classes, and production of child sexual abuse material or unlawful sexual deepfakes. State agencies and health-care providers must disclose AI interactions. It creates a 36-month regulatory sandbox administered by the Department of Information Resources, a Texas Artificial Intelligence Council, and gives the Attorney General exclusive enforcement with civil penalties after a 60-day cure period; disparate impact alone does not prove intent to discriminate.
Applies from 1 Jan 2026Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)
The UAE Personal Data Protection Law is the federal data-protection law applying outside the DIFC and ADGM free zones. It sets principles for lawful processing, consent and its exceptions, data-subject rights (including the right to object to automated decision-making without human intervention), controller and processor duties, security and breach notification to the UAE Data Office, cross-border transfer rules, and data protection impact assessments for high-risk processing including new technologies.
In force 2 Jan 2022Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Utah Artificial Intelligence Policy Act (SB 149, 2024, as amended by SB 226 and SB 332 in 2025)
Effective 1 May 2024, the Act requires a person using generative AI to interact with a consumer in a consumer transaction to disclose clearly that the consumer is interacting with AI when asked (as amended in 2025, when the interaction is high-risk or on request), and requires providers of regulated occupations (for example health and legal services) to disclose generative-AI use proactively. It states that using AI is no defence to consumer-protection violations, created the Office of Artificial Intelligence Policy and an AI learning laboratory allowing regulatory mitigation agreements, and originally sunset in 2025, extended to 2027.
Applies from 1 May 2024Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Mental health chatbots must disclose that they are AI; suppliers may not sell or share users' health information or input, or use it to target advertising. A written policy filed with the Division of Professional Licensing gives a supplier an affirmative defence.
In force 7 May 2025Pending review (a factual check against the official source, not a legal review)Official source
Washington ESHB 2225: AI companion chatbots (Chapter 168, Laws of 2026)
Operators must disclose that a companion chatbot is AI, repeat the notice hourly for known minors, limit sexual content and manipulative engagement tactics for minors, and keep and publish a self-harm protocol with crisis referrals. A violation is a violation of the Consumer Protection Act.
Applies from 1 Jan 2027Pending review (a factual check against the official source, not a legal review)Official source
Anything a government or standards body has actually issued: acts, regulations, executive orders, rules, national strategies, frameworks, guidance, codes of practice, voluntary standards and open consultations. Each record states which of those it is, whether it binds anyone, and links the official source it was read from.
Are these records legally verified?
A record is marked verified only after a named reviewer has opened its official source and confirmed each field. Anything that has not been through that carries "pending review" on the record itself, and the data-health document reports the current totals. Nothing here is legal advice.
How current is the information?
Every record carries the date its source document was published and the date it was last checked. A record not re-checked within the freshness window set by the verification policy is flagged as stale rather than quietly presented as current.
Can I reuse this data?
Yes. The records are published under CC BY 4.0 with attribution, and are available as CSV, newline-delimited JSON and a read-only REST API that needs no key. Cite the record URL, the date accessed and the official source alongside it.
