Artificial Intelligence Policy Tracker

AI policy explorer

Search and filter source-backed AI laws, regulations, standards, guidance and consultations. Each record shows its status, key dates, verification state and official source.

Results

134 of 244 instruments match · page 2 of 7

Kazakhstan Act / statute Adopted Binding

Law on Artificial Intelligence (2025)

Law of the Republic of Kazakhstan "On Artificial Intelligence" (signed November 2025)

The law defines AI systems and their classification by level of autonomy and risk, sets principles (legality, fairness, transparency, safety, human control), assigns duties to owners and operators of AI systems including risk management, labelling of AI-generated content and protection of personal data, prohibits certain manipulative and social-scoring uses, provides for a national AI platform and state support measures, and allocates state regulation to the authorised body.

Adopted 17 Nov 2025 Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review) Official source
Nepal Act / statute In force Binding

Nepal Privacy Act 2075

Individual Privacy Act, 2075 (2018) — Nepal

The Individual Privacy Act 2075 gives effect to the constitutional right to privacy in Nepal. It regulates the collection, storage, processing, use and disclosure of personal information by public bodies and private entities, requires consent for collection and use of personal data subject to exceptions, restricts sensitive data, and provides remedies and penalties. It is the main binding law affecting AI systems that process personal data in Nepal. The Individual Privacy Regulation 2077 (2020) provides implementing rules.

In force 18 Sep 2018 Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review) Official source
New York (United States) Act / statute Adopted Binding

New York RAISE Act (frontier model safety)

New York Responsible AI Safety and Education (RAISE) Act (S.6953-B / A.6453-B, signed December 2025)

The RAISE Act requires large developers of frontier AI models (defined by training compute and revenue thresholds) to publish and follow a safety and security protocol, report critical safety incidents to the state within a set period, not deploy models that create unreasonable risk of critical harm, and submit to Attorney General enforcement with civil penalties; the chapter amendments create a state oversight office and align definitions with California's Transparency in Frontier AI Act.

Applies from 1 Jan 2027 Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review) Official source
Quebec (Canada) Act / statute In force Binding

Quebec Law 25 (automated decisions and biometrics)

Quebec Law 25 (S.Q. 2021, c. 25): provisions on decisions based exclusively on automated processing and biometric systems

Section 12.1 of the private-sector privacy act (as amended by Law 25, in force 22 September 2023) requires any enterprise that uses personal information to render a decision based exclusively on automated processing to inform the person no later than when the decision is made, and, on request, to tell them what personal information was used, the reasons and principal factors and parameters, and their right to have the information corrected, and to give them an opportunity to submit observations to a person who can review the decision. Biometric identification databases must be declared to the Commission d'accès à l'information 60 days before use, and privacy impact assessments are mandatory for projects involving personal information. Penalties reach CAD 25 million or 4% of worldwide turnover.

Applies from 22 Sep 2023 Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review) Official source
Spain Regulation In force Binding

Royal Decree 729/2023 (AESIA statute)

Real Decreto 729/2023, de 22 de agosto, por el que se aprueba el Estatuto de la Agencia Española de Supervisión de Inteligencia Artificial

Creates and organises AESIA, the Spanish AI Supervision Agency, as a public body attached to the Ministry for Digital Transformation. AESIA supervises and inspects AI systems, promotes sandboxes and standards, and acts as national authority for the EU AI Act. The decree sets its governance, functions and funding.

In force 3 Sep 2023 Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review) Official source
Spain Regulation In force Binding

Royal Decree 817/2023 (AI regulatory sandbox)

Real Decreto 817/2023, de 8 de noviembre, que establece un entorno controlado de pruebas para el ensayo del cumplimiento de la propuesta de Reglamento de IA

Establishes Spain's controlled testing environment (sandbox) for providers of high-risk AI systems to test compliance with the then-proposed EU AI Act requirements: risk management, data governance, documentation, transparency, human oversight, accuracy and robustness. Participation is voluntary; participants receive guidance and produce documentation that feeds into national implementation.

In force 10 Nov 2023 Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review) Official source
Shanghai (China) Regulation In force Binding

Shanghai AI regulations (2022)

Regulations of Shanghai Municipality on Promoting the Development of the Artificial Intelligence Sector

上海市促进人工智能产业发展条例

Promotes the AI industry and names the economy and informatization department as lead regulator; sets up a strategy advisory committee and an AI ethics expert committee; bans certain uses such as discrimination and algorithmic price discrimination; applies list-based compliance review to high-risk AI products and disclosure with after-the-fact control to lower-risk ones; and allows sandbox supervision.

In force 1 Oct 2022 Pending review (a factual check against the official source, not a legal review) Official source
Shenzhen (China) Regulation In force Binding

Shenzhen AI industry regulations (2022)

Shenzhen Special Economic Zone Regulations on Promoting the Artificial Intelligence Industry

深圳经济特区人工智能产业促进条例

Defines AI and the AI industry, sets up statistical monitoring and a municipal AI ethics committee, and allows trial access for low-risk AI products and services where no national or local standard exists yet.

In force 1 Nov 2022 Pending review (a factual check against the official source, not a legal review) Official source
Texas (United States) Act / statute In force Binding

Texas Responsible AI Governance Act (TRAIGA)

Texas Responsible Artificial Intelligence Governance Act (HB 149, 89th Legislature)

Signed on 22 June 2025 and effective 1 January 2026, TRAIGA bans developing or deploying AI systems intended to manipulate people into self-harm or crime, government social scoring, biometric identification by government from public data without consent, intentional unlawful discrimination against protected classes, and production of child sexual abuse material or unlawful sexual deepfakes. State agencies and health-care providers must disclose AI interactions. It creates a 36-month regulatory sandbox administered by the Department of Information Resources, a Texas Artificial Intelligence Council, and gives the Attorney General exclusive enforcement with civil penalties after a 60-day cure period; disparate impact alone does not prove intent to discriminate.

Applies from 1 Jan 2026 Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review) Official source
United Arab Emirates Act / statute In force Binding

UAE PDPL

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)

The UAE Personal Data Protection Law is the federal data-protection law applying outside the DIFC and ADGM free zones. It sets principles for lawful processing, consent and its exceptions, data-subject rights (including the right to object to automated decision-making without human intervention), controller and processor duties, security and breach notification to the UAE Data Office, cross-border transfer rules, and data protection impact assessments for high-risk processing including new technologies.

In force 2 Jan 2022 Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review) Official source
Iceland National strategy Adopted

AI action plan 2024–2026

Aðgerðaáætlun um gervigreind 2024–2026 (Action plan on artificial intelligence)

The 2024–2026 action plan implements Iceland's AI policy with measures on AI in public services, the Icelandic language in AI systems, skills and research, ethics and security, and preparation for the EU AI Act.

Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review) Official source
Sweden National strategy Adopted

AI Commission roadmap for Sweden (SOU 2024:94)

Färdplan för Sverige – AI-kommissionens slutbetänkande (SOU 2024:94)

The government-appointed AI Commission's final report sets out a roadmap for Sweden with around 75 proposals: a national AI task force and data factory, compute and skills investment, AI in public administration and health care, access to data for research and innovation, and measures to make the most of the EU AI Act. It estimates costs and proposes a funding envelope over several years.

Adopted 26 Nov 2024 Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review) Official source
Serbia National strategy Adopted

AI Development Strategy 2025–2030

Стратегија развоја вештачке интелигенције у Републици Србији за период 2025–2030

Adopted in 2025, the second national AI strategy sets goals to 2030 on research and talent, AI in the economy and public administration, data and compute infrastructure, trustworthy AI and alignment with the EU AI Act and the Council of Europe convention, and the preparation of an AI law.

Adopted 1 Mar 2025 Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review) Official source
Uzbekistan National strategy Adopted

AI development strategy to 2030 (2024)

Strategy for the development of artificial intelligence technologies until 2030 (Presidential Resolution, October 2024)

The 2024 resolution approves a strategy to 2030 to raise the AI services market, deploy AI in public administration and priority sectors, build data centres and datasets, train specialists and adopt ethical principles and standards for AI.

Adopted 14 Oct 2024 Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review) Official source
Tajikistan National strategy Adopted

AI Development Strategy to 2040

Strategy for the Development of Artificial Intelligence in the Republic of Tajikistan for the period up to 2040

Approved by government decree in 2021, the strategy sets long-term goals for AI research, education, infrastructure and use in the economy and public administration to 2040.

Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review) Official source
Wales (United Kingdom) National strategy Adopted

AI plan for Wales

AI Cymru: Shaping a Smarter, Fairer, More Prosperous Wales (AI plan for Wales)

A plan built on four pillars (economic growth, educating Wales, equitable delivery, excellence and trust) with a Welsh Government Office for AI and a Strategic AI Advisory Group. It proposes no legislation.

Pending review (a factual check against the official source, not a legal review) Official source
Portugal National strategy Adopted

AI Portugal 2030

AI Portugal 2030: Portuguese National Initiative on Digital Skills – Artificial Intelligence strategy

Published in 2019 under the INCoDe.2030 initiative, AI Portugal 2030 sets objectives for research, skills, public administration, industry adoption and international positioning, with priority application areas such as natural language, mobility, energy and health, and a commitment to ethical and trustworthy AI.

Adopted 1 Jun 2019 Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review) Official source
Israel Policy Adopted

AI regulation and ethics policy (2023)

Israel's Policy on Artificial Intelligence Regulation and Ethics

Adopted in December 2023 after public consultation, the policy sets Israel's approach: sector-specific regulation by existing regulators, a risk-based approach, preference for soft tools (standards, self-regulation, sandboxes) over binding rules at this stage, alignment with OECD principles, and common ethical principles (growth and sustainable development, human-centricity, equality, transparency, safety, accountability, privacy). It establishes an AI policy coordination centre and an expert advisory forum.

Adopted 17 Dec 2023 Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review) Official source
Hungary National strategy Adopted

AI Strategy 2020–2030

Magyarország Mesterséges Intelligencia Stratégiája 2020–2030

Adopted in September 2020, the strategy sets goals to 2030 on data economy, AI research and education, public-sector and industrial adoption, and transformative programmes such as an AI-driven public administration and language technology, coordinated with the AI Coalition of companies, universities and public bodies.

Adopted 8 Sep 2020 Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review) Official source
Azerbaijan National strategy Adopted

AI Strategy 2025–2028

Artificial Intelligence Strategy of the Republic of Azerbaijan for 2025–2028 (presidential decree, March 2025)

Approved by presidential decree in March 2025, the strategy sets goals for AI in public administration, the economy and education, data and computing infrastructure, talent, ethical and safe AI, and a coordinating institutional structure, with an action plan to 2028.

Adopted 19 Mar 2025 Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review) Official source

Frequently asked questions

What counts as an AI policy instrument here?

Anything a government or standards body has actually issued: acts, regulations, executive orders, rules, national strategies, frameworks, guidance, codes of practice, voluntary standards and open consultations. Each record states which of those it is, whether it binds anyone, and links the official source it was read from.

Are these records legally verified?

A record is marked verified only after a named reviewer has opened its official source and confirmed each field. Anything that has not been through that carries "pending review" on the record itself, and the data-health document reports the current totals. Nothing here is legal advice.

How current is the information?

Every record carries the date its source document was published and the date it was last checked. A record not re-checked within the freshness window set by the verification policy is flagged as stale rather than quietly presented as current.

Can I reuse this data?

Yes. The records are published under CC BY 4.0 with attribution, and are available as CSV, newline-delimited JSON and a read-only REST API that needs no key. Cite the record URL, the date accessed and the official source alongside it.