Search and filter source-backed AI laws, regulations, standards, guidance and consultations. Each record shows its status, key dates, verification state and official source.
Ley para el Fomento de la Inteligencia Artificial y Tecnologías Emergentes (Decreto Legislativo, febrero de 2025)
Approved by the Legislative Assembly in February 2025, the law promotes AI development and investment, creates the National Agency for Artificial Intelligence (ANIA) as regulator, defines rights and principles (human oversight, transparency, non-discrimination, data protection), sets registration and sandbox mechanisms and limits liability of developers who act in good faith under the law, alongside data-processing rules for AI training.
Adopted 25 Feb 2025Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Legge 23 settembre 2025, n. 132 – Disposizioni e deleghe al Governo in materia di intelligenza artificiale
Italy's framework AI law, published in the Official Gazette on 25 September 2025 and in force from 10 October 2025. It states principles (human-centric, transparent, safe AI; protection of fundamental rights), sets sector rules for healthcare (AI as support, not replacement, for clinical decisions), employment (information to workers, an AI-at-work observatory), intellectual professions (client disclosure), justice (judge decides; AI only for organisational support) and public administration, requires parental consent for children under 14, designates AgID and ACN as national authorities, delegates the government to align national law with the EU AI Act, and creates a criminal offence for unlawful dissemination of AI-generated or manipulated content with aggravating circumstances for other crimes committed with AI.
In force 10 Oct 2025Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Law of the Republic of Kazakhstan "On Artificial Intelligence" (signed November 2025)
The law defines AI systems and their classification by level of autonomy and risk, sets principles (legality, fairness, transparency, safety, human control), assigns duties to owners and operators of AI systems including risk management, labelling of AI-generated content and protection of personal data, prohibits certain manipulative and social-scoring uses, provides for a national AI platform and state support measures, and allocates state regulation to the authorised body.
Adopted 17 Nov 2025Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
The Department of Information Technology sets AI policies for state government; state units must inventory their AI systems and carry out impact assessments, and public higher-education institutions must adopt AI policies.
Adopted 9 May 2024Pending review (a factual check against the official source, not a legal review)Official source
Montana Right to Compute Act (SB 212, 69th Legislature, 2025)
Recognises a right to own and use computational resources and limits government restrictions on them; critical infrastructure facilities controlled by an AI system must have a risk management policy.
Pending review (a factual check against the official source, not a legal review)Official source
The Individual Privacy Act 2075 gives effect to the constitutional right to privacy in Nepal. It regulates the collection, storage, processing, use and disclosure of personal information by public bodies and private entities, requires consent for collection and use of personal data subject to exceptions, restricts sensitive data, and provides remedies and penalties. It is the main binding law affecting AI systems that process personal data in Nepal. The Individual Privacy Regulation 2077 (2020) provides implementing rules.
In force 18 Sep 2018Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
A risk-triage self-assessment across the AI lifecycle that replaced the NSW AI Assurance Framework. High- or critical-risk systems go to the AI Review Committee; using the assessment platform is mandatory for agencies under Circular DCS-2026-02.
Applies from 30 Sep 2026Pending review (a factual check against the official source, not a legal review)Official source
NSW AI Operational Policy and Circular DCS-2026-02: Use of Artificial Intelligence by NSW Government Agencies
Replaces the NSW AI Ethics Policy and adopts Australia's AI Ethics Principles. Agencies must use the NSW AI Assessment Framework and give NSW GovAI a signed annual attestation by 31 October each year, the first due by 31 October 2027.
Adopted 30 Jul 2026Pending review (a factual check against the official source, not a legal review)Official source
OMB Memorandum M-25-21: Accelerating Federal Use of AI through Innovation, Governance, and Public Trust
M-25-21 directs US federal agencies on how to govern and use AI. It requires agencies to designate Chief AI Officers, maintain AI governance boards, publish AI use-case inventories, and apply minimum risk-management practices to "high-impact" AI, including pre-deployment testing, AI impact assessments, ongoing monitoring, human oversight and training, and remedies for affected individuals. It replaced the 2024 memoranda with a greater emphasis on adoption and innovation while retaining core risk practices.
In force 3 Apr 2025Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Strengthening Cyber Security and Building Trust in the Public Sector Act, 2024 (Bill 194), Schedule 1: Enhancing Digital Security and Trust Act, 2024
The Act allows the Ontario government to make regulations governing the use of AI systems by public-sector entities (ministries, agencies, hospitals, school boards, municipalities as prescribed): requirements to disclose AI use, to develop and implement accountability frameworks, to take steps to manage risks, to have human oversight, and prohibitions on prescribed uses. It also addresses cyber security and children's digital information.
Adopted 25 Nov 2024Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Paraná Law No. 22,324 of 2 April 2025: AI guidelines for the state public administration (PDIA/PR)
Lei nº 22.324, de 2 de abril de 2025 (Plano de Diretrizes de Inteligência Artificial na Administração Pública Estadual)
Requires AI used by the state executive to be ethical, transparent, explainable and auditable, with a regulatory sandbox and staff training; it also renamed the innovation department the Secretariat of Innovation and Artificial Intelligence. Decree 9854 of 7 May 2025 regulates the state AI council.
Adopted 2 Apr 2025Pending review (a factual check against the official source, not a legal review)Official source
Quebec Law 25 (S.Q. 2021, c. 25): provisions on decisions based exclusively on automated processing and biometric systems
Section 12.1 of the private-sector privacy act (as amended by Law 25, in force 22 September 2023) requires any enterprise that uses personal information to render a decision based exclusively on automated processing to inform the person no later than when the decision is made, and, on request, to tell them what personal information was used, the reasons and principal factors and parameters, and their right to have the information corrected, and to give them an opportunity to submit observations to a person who can review the decision. Biometric identification databases must be declared to the Commission d'accès à l'information 60 days before use, and privacy impact assessments are mandatory for projects involving personal information. Penalties reach CAD 25 million or 4% of worldwide turnover.
Applies from 22 Sep 2023Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Queensland Government Artificial Intelligence Governance Policy (QGEA)
Queensland departments must carry out a Foundational AI Risk Assessment (FAIRA, or FAIRA Lite for low-risk work, or an agreed equivalent) and set up AI governance with regard to ISO/IEC 38507.
Pending review (a factual check against the official source, not a legal review)Official source
Real Decreto 729/2023, de 22 de agosto, por el que se aprueba el Estatuto de la Agencia Española de Supervisión de Inteligencia Artificial
Creates and organises AESIA, the Spanish AI Supervision Agency, as a public body attached to the Ministry for Digital Transformation. AESIA supervises and inspects AI systems, promotes sandboxes and standards, and acts as national authority for the EU AI Act. The decree sets its governance, functions and funding.
In force 3 Sep 2023Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Schleswig-Holstein IT Deployment Act (ITEG): Act on the use of data-driven information technologies in public administration
Gesetz über die Möglichkeit des Einsatzes von datengetriebenen Informationstechnologien bei öffentlich-rechtlicher Verwaltungstätigkeit (IT-Einsatz-Gesetz – ITEG)
Allows public administration to use AI and other data-driven IT as a general rule, with listed exclusions (for example, it may not be used to issue administrative acts involving discretion), and gives people a specific remedy, the "AI complaint" (KI-Rüge).
Adopted 16 Mar 2022Pending review (a factual check against the official source, not a legal review)Official source
Regulations of Shanghai Municipality on Promoting the Development of the Artificial Intelligence Sector
上海市促进人工智能产业发展条例
Promotes the AI industry and names the economy and informatization department as lead regulator; sets up a strategy advisory committee and an AI ethics expert committee; bans certain uses such as discrimination and algorithmic price discrimination; applies list-based compliance review to high-risk AI products and disclosure with after-the-fact control to lower-risk ones; and allows sandbox supervision.
In force 1 Oct 2022Pending review (a factual check against the official source, not a legal review)Official source
Shenzhen Special Economic Zone Regulations on Promoting the Artificial Intelligence Industry
深圳经济特区人工智能产业促进条例
Defines AI and the AI industry, sets up statistical monitoring and a municipal AI ethics committee, and allows trial access for low-risk AI products and services where no national or local standard exists yet.
In force 1 Nov 2022Pending review (a factual check against the official source, not a legal review)Official source
South Australian Government Artificial Intelligence Ethics Policy (v1.0)
A mandatory policy requiring SA government agencies to align their AI systems with the Australian Government's AI Ethics Principles; a separate policy on responsible use and disclosure is being developed.
Adopted 10 Oct 2025Pending review (a factual check against the official source, not a legal review)Official source
Signed on 22 June 2025 and effective 1 January 2026, TRAIGA bans developing or deploying AI systems intended to manipulate people into self-harm or crime, government social scoring, biometric identification by government from public data without consent, intentional unlawful discrimination against protected classes, and production of child sexual abuse material or unlawful sexual deepfakes. State agencies and health-care providers must disclose AI interactions. It creates a 36-month regulatory sandbox administered by the Department of Information Resources, a Texas Artificial Intelligence Council, and gives the Attorney General exclusive enforcement with civil penalties after a 60-day cure period; disparate impact alone does not prove intent to discriminate.
Applies from 1 Jan 2026Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review)Official source
Anything a government or standards body has actually issued: acts, regulations, executive orders, rules, national strategies, frameworks, guidance, codes of practice, voluntary standards and open consultations. Each record states which of those it is, whether it binds anyone, and links the official source it was read from.
Are these records legally verified?
A record is marked verified only after a named reviewer has opened its official source and confirmed each field. Anything that has not been through that carries "pending review" on the record itself, and the data-health document reports the current totals. Nothing here is legal advice.
How current is the information?
Every record carries the date its source document was published and the date it was last checked. A record not re-checked within the freshness window set by the verification policy is flagged as stale rather than quietly presented as current.
Can I reuse this data?
Yes. The records are published under CC BY 4.0 with attribution, and are available as CSV, newline-delimited JSON and a read-only REST API that needs no key. Cite the record URL, the date accessed and the official source alongside it.
