Search and filter source-backed AI laws, regulations, standards, guidance and consultations. Each record shows its status, key dates, verification state and official source.
Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law (CETS No. 225)
The first international treaty on AI. Parties must adopt or maintain measures so that activities within the lifecycle of AI systems are consistent with human rights, democracy and the rule of law, covering public authorities and actors on their behalf and, by choice of approach, private actors. It sets principles (human dignity and autonomy, transparency and oversight, accountability, equality and non-discrimination, privacy, reliability, safe innovation), requires remedies, procedural safeguards and risk and impact assessment, allows moratoria or bans for incompatible uses, and creates a Conference of the Parties for follow-up. National-security activities and defence are excluded.
Adopted 17 May 2024Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Goiás Complementary Law No. 205 of 19 May 2025: State Policy for the Promotion of Innovation in Artificial Intelligence
Lei Complementar nº 205, de 19 de maio de 2025 (Política Estadual de Fomento à Inovação em Inteligência Artificial)
Promotes AI innovation, prefers open-source and open models in public AI projects, and gives people rights over automated decisions, including information, contestation and human review on appeal. It creates an AI ethics and innovation advisory body, a permanent state AI sandbox and an annual AI prize.
Adopted 19 May 2025Pending review (a factual check against the official source, not a legal review)Official source
Illinois's frontier-AI safety and transparency law, built on the model of California SB 53: large frontier developers must publish a frontier AI framework and update it every year, publish a transparency report when they deploy a new or substantially modified frontier model, report critical safety incidents to the Illinois Emergency Management Agency and Office of Homeland Security, and protect whistleblowing employees. Unlike the California and New York laws, it also requires annual independent third-party audits, with a published summary.
Adopted 6 Jul 2026Pending review (a factual check against the official source, not a legal review)Official source
Illinois Wellness and Oversight for Psychological Resources Act (HB 1806, Public Act 104-0054)
No one may provide therapy or psychotherapy in Illinois, including through AI, unless it is delivered by a licensed professional. AI may be used only for administrative and supplementary support, with notice to and consent from the client. The Department of Financial and Professional Regulation enforces it.
In force 1 Aug 2025Pending review (a factual check against the official source, not a legal review)Official source
Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025
The DPDP Act is India's cross-sector personal-data law. It applies to digital personal data processed in India and to processing outside India connected with offering goods or services to people in India. It requires a lawful basis (consent or specified legitimate uses), notice, purpose limitation, data accuracy, security safeguards, breach notification to the Data Protection Board and affected individuals, and grants rights of access, correction, erasure and grievance redress. Significant Data Fiduciaries face extra duties such as impact assessments and audits. The Act does not mention AI specifically, but it governs the personal data used to train and operate AI systems.
Adopted 11 Aug 2023Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Ley para el Fomento de la Inteligencia Artificial y Tecnologías Emergentes (Decreto Legislativo, febrero de 2025)
Approved by the Legislative Assembly in February 2025, the law promotes AI development and investment, creates the National Agency for Artificial Intelligence (ANIA) as regulator, defines rights and principles (human oversight, transparency, non-discrimination, data protection), sets registration and sandbox mechanisms and limits liability of developers who act in good faith under the law, alongside data-processing rules for AI training.
Adopted 25 Feb 2025Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Legge 23 settembre 2025, n. 132 – Disposizioni e deleghe al Governo in materia di intelligenza artificiale
Italy's framework AI law, published in the Official Gazette on 25 September 2025 and in force from 10 October 2025. It states principles (human-centric, transparent, safe AI; protection of fundamental rights), sets sector rules for healthcare (AI as support, not replacement, for clinical decisions), employment (information to workers, an AI-at-work observatory), intellectual professions (client disclosure), justice (judge decides; AI only for organisational support) and public administration, requires parental consent for children under 14, designates AgID and ACN as national authorities, delegates the government to align national law with the EU AI Act, and creates a criminal offence for unlawful dissemination of AI-generated or manipulated content with aggravating circumstances for other crimes committed with AI.
In force 10 Oct 2025Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Law of the Republic of Kazakhstan "On Artificial Intelligence" (signed November 2025)
The law defines AI systems and their classification by level of autonomy and risk, sets principles (legality, fairness, transparency, safety, human control), assigns duties to owners and operators of AI systems including risk management, labelling of AI-generated content and protection of personal data, prohibits certain manipulative and social-scoring uses, provides for a national AI platform and state support measures, and allocates state regulation to the authorised body.
Adopted 17 Nov 2025Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
The Individual Privacy Act 2075 gives effect to the constitutional right to privacy in Nepal. It regulates the collection, storage, processing, use and disclosure of personal information by public bodies and private entities, requires consent for collection and use of personal data subject to exceptions, restricts sensitive data, and provides remedies and penalties. It is the main binding law affecting AI systems that process personal data in Nepal. The Individual Privacy Regulation 2077 (2020) provides implementing rules.
In force 18 Sep 2018Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
New York AI companion safeguards (General Business Law Article 47, sections 1700-1701)
Operators of AI companions must have a protocol to detect and respond to suicidal ideation and self-harm, and must tell users they are talking to AI at the start of a session and at least every three hours.
In force 5 Nov 2025Pending review (a factual check against the official source, not a legal review)Official source
New York Responsible AI Safety and Education (RAISE) Act (S.6953-B / A.6453-B, signed December 2025)
The RAISE Act requires large developers of frontier AI models (defined by training compute and revenue thresholds) to publish and follow a safety and security protocol, report critical safety incidents to the state within a set period, not deploy models that create unreasonable risk of critical harm, and submit to Attorney General enforcement with civil penalties; the chapter amendments create a state oversight office and align definitions with California's Transparency in Frontier AI Act.
Applies from 1 Jan 2027Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
New York City Local Law 144 of 2021 on Automated Employment Decision Tools (AEDT) and DCWP implementing rules
Employers and employment agencies may not use an automated employment decision tool to screen candidates or employees for hiring or promotion in New York City unless the tool has had an independent bias audit within the past year, a summary of the audit results is published, and candidates receive at least ten business days' notice of the tool's use, the job qualifications assessed, and how to request an alternative process or accommodation. The bias audit calculates selection and scoring impact ratios by sex, race/ethnicity and intersectional categories. Enforcement began 5 July 2023.
Applies from 5 Jul 2023Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
OMB Memorandum M-25-21: Accelerating Federal Use of AI through Innovation, Governance, and Public Trust
M-25-21 directs US federal agencies on how to govern and use AI. It requires agencies to designate Chief AI Officers, maintain AI governance boards, publish AI use-case inventories, and apply minimum risk-management practices to "high-impact" AI, including pre-deployment testing, AI impact assessments, ongoing monitoring, human oversight and training, and remedies for affected individuals. It replaced the 2024 memoranda with a greater emphasis on adoption and innovation while retaining core risk practices.
In force 3 Apr 2025Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Real Decreto 729/2023, de 22 de agosto, por el que se aprueba el Estatuto de la Agencia Española de Supervisión de Inteligencia Artificial
Creates and organises AESIA, the Spanish AI Supervision Agency, as a public body attached to the Ministry for Digital Transformation. AESIA supervises and inspects AI systems, promotes sandboxes and standards, and acts as national authority for the EU AI Act. The decree sets its governance, functions and funding.
In force 3 Sep 2023Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Real Decreto 817/2023, de 8 de noviembre, que establece un entorno controlado de pruebas para el ensayo del cumplimiento de la propuesta de Reglamento de IA
Establishes Spain's controlled testing environment (sandbox) for providers of high-risk AI systems to test compliance with the then-proposed EU AI Act requirements: risk management, data governance, documentation, transparency, human oversight, accuracy and robustness. Participation is voluntary; participants receive guidance and produce documentation that feeds into national implementation.
In force 10 Nov 2023Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Regulations of Shanghai Municipality on Promoting the Development of the Artificial Intelligence Sector
上海市促进人工智能产业发展条例
Promotes the AI industry and names the economy and informatization department as lead regulator; sets up a strategy advisory committee and an AI ethics expert committee; bans certain uses such as discrimination and algorithmic price discrimination; applies list-based compliance review to high-risk AI products and disclosure with after-the-fact control to lower-risk ones; and allows sandbox supervision.
In force 1 Oct 2022Pending review (a factual check against the official source, not a legal review)Official source
Shenzhen Special Economic Zone Regulations on Promoting the Artificial Intelligence Industry
深圳经济特区人工智能产业促进条例
Defines AI and the AI industry, sets up statistical monitoring and a municipal AI ethics committee, and allows trial access for low-risk AI products and services where no national or local standard exists yet.
In force 1 Nov 2022Pending review (a factual check against the official source, not a legal review)Official source
Ensuring Likeness, Voice, and Image Security (ELVIS) Act of 2024 (Tennessee Public Chapter 588)
Signed 21 March 2024 and effective 1 July 2024, the ELVIS Act updates Tennessee's Personal Rights Protection Act to add voice to the protected attributes of name, photograph and likeness, prohibits publishing or making available an individual's voice or likeness without authorisation, and creates liability for distributing or making available an algorithm, software or tool whose primary purpose is producing an individual's voice or likeness without authorisation. It provides civil actions for individuals and licensees and criminal penalties.
In force 1 Jul 2024Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Signed on 22 June 2025 and effective 1 January 2026, TRAIGA bans developing or deploying AI systems intended to manipulate people into self-harm or crime, government social scoring, biometric identification by government from public data without consent, intentional unlawful discrimination against protected classes, and production of child sexual abuse material or unlawful sexual deepfakes. State agencies and health-care providers must disclose AI interactions. It creates a 36-month regulatory sandbox administered by the Department of Information Resources, a Texas Artificial Intelligence Council, and gives the Attorney General exclusive enforcement with civil penalties after a 60-day cure period; disparate impact alone does not prove intent to discriminate.
Applies from 1 Jan 2026Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)
The UAE Personal Data Protection Law is the federal data-protection law applying outside the DIFC and ADGM free zones. It sets principles for lawful processing, consent and its exceptions, data-subject rights (including the right to object to automated decision-making without human intervention), controller and processor duties, security and breach notification to the UAE Data Office, cross-border transfer rules, and data protection impact assessments for high-risk processing including new technologies.
In force 2 Jan 2022Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Anything a government or standards body has actually issued: acts, regulations, executive orders, rules, national strategies, frameworks, guidance, codes of practice, voluntary standards and open consultations. Each record states which of those it is, whether it binds anyone, and links the official source it was read from.
Are these records legally verified?
A record is marked verified only after a named reviewer has opened its official source and confirmed each field. Anything that has not been through that carries "pending review" on the record itself, and the data-health document reports the current totals. Nothing here is legal advice.
How current is the information?
Every record carries the date its source document was published and the date it was last checked. A record not re-checked within the freshness window set by the verification policy is flagged as stale rather than quietly presented as current.
Can I reuse this data?
Yes. The records are published under CC BY 4.0 with attribution, and are available as CSV, newline-delimited JSON and a read-only REST API that needs no key. Cite the record URL, the date accessed and the official source alongside it.
