Italy
·
National strategy
Adopted
Strategia Italiana per l'Intelligenza Artificiale 2024-2026
The 2024–2026 strategy, drafted by an expert committee for the Department for Digital Transformation and published in July 2024, organises action around research, public administration, enterprises and training, with a foundation-model and compute agenda, an AI foundation to coordinate delivery and a monitoring framework.
Adopted 22 Jul 2024
Source-linked · checked 11 Sep 2026
Official source
Kazakhstan
·
Act / statute
Adopted
Binding
Law of the Republic of Kazakhstan "On Artificial Intelligence" (signed November 2025)
The law defines AI systems and their classification by level of autonomy and risk, sets principles (legality, fairness, transparency, safety, human control), assigns duties to owners and operators of AI systems including risk management, labelling of AI-generated content and protection of personal data, prohibits certain manipulative and social-scoring uses, provides for a national AI platform and state support measures, and allocates state regulation to the authorised body.
Adopted 17 Nov 2025
Source-linked · checked 11 Sep 2026
Official source
Italy
·
Act / statute
In force
Binding
Legge 23 settembre 2025, n. 132 – Disposizioni e deleghe al Governo in materia di intelligenza artificiale
Italy's framework AI law, published in the Official Gazette on 25 September 2025 and in force from 10 October 2025. It states principles (human-centric, transparent, safe AI; protection of fundamental rights), sets sector rules for healthcare (AI as support, not replacement, for clinical decisions), employment (information to workers, an AI-at-work observatory), intellectual professions (client disclosure), justice (judge decides; AI only for organisational support) and public administration, requires parental consent for children under 14, designates AgID and ACN as national authorities, delegates the government to align national law with the EU AI Act, and creates a criminal offence for unlawful dissemination of AI-generated or manipulated content with aggravating circumstances for other crimes committed with AI.
In force 10 Oct 2025
Source-linked · checked 11 Sep 2026
Official source
Hiroshima Process International Code of Conduct for Organizations Developing Advanced AI Systems (G7, 30 October 2023)
Eleven voluntary actions for organisations developing the most advanced AI systems, including foundation and generative models: risk identification and mitigation across the lifecycle, post-deployment vulnerability and incident monitoring, public transparency reports, responsible information sharing, security controls, content authentication such as watermarking, research on societal risks, priority to global challenges, technical standards, and data-input and personal-data safeguards. It sits alongside the Hiroshima Process guiding principles and, from 2025, an OECD-run voluntary reporting framework.
Adopted 30 Oct 2023
Source-linked · checked 11 Sep 2026
Official source
The Bletchley Declaration by countries attending the AI Safety Summit, 1–2 November 2023
Signed by countries including the United States, China, the EU, India, Japan and Brazil, the declaration recognises the opportunities of AI and the risks of frontier models, commits signatories to cooperate on identifying AI safety risks and building risk-based policies, and launched the summit series continued in Seoul (2024) and Paris (2025) and the network of AI safety institutes.
Adopted 1 Nov 2023
Source-linked · checked 11 Sep 2026
Official source
Ireland
·
National strategy
Adopted
AI – Here for Good: National Artificial Intelligence Strategy for Ireland (2021, refreshed 2024)
Ireland's national AI strategy, first published in July 2021 and refreshed in November 2024 to reflect the EU AI Act and generative AI, is organised around building public trust, leveraging AI for economic and societal benefit, and enablers such as data, infrastructure, skills and governance. The refresh sets out Ireland's AI Act implementation model, public-sector AI guidelines and an AI advisory council.
Adopted 8 Jul 2021
Source-linked · checked 11 Sep 2026
Official source
India
·
Guidance
Guidance
India AI Governance Guidelines (MeitY, 2025)
The India AI Governance Guidelines set out a principle-based, pro-innovation approach to governing AI in India. They articulate guiding principles (such as trust, people-first design, fairness, accountability, safety and transparency), propose an institutional framework including an AI governance group and an AI Safety Institute role, favour applying existing laws over a new AI statute, and recommend voluntary commitments, techno-legal measures, risk-based oversight and incident reporting for AI systems.
Adopted 5 Nov 2025
Source-linked
Official source
India
·
Act / statute
Partially applicable
Binding
Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025
The DPDP Act is India's cross-sector personal-data law. It applies to digital personal data processed in India and to processing outside India connected with offering goods or services to people in India. It requires a lawful basis (consent or specified legitimate uses), notice, purpose limitation, data accuracy, security safeguards, breach notification to the Data Protection Board and affected individuals, and grants rights of access, correction, erasure and grievance redress. Significant Data Fiduciaries face extra duties such as impact assessments and audits. The Act does not mention AI specifically, but it governs the personal data used to train and operate AI systems.
Adopted 11 Aug 2023
Source-linked
Official source
Hong Kong SAR
·
Guidance
Guidance
Artificial Intelligence: Model Personal Data Protection Framework
Published 11 June 2024, the framework gives organisations that procure, implement and use AI systems involving personal data recommendations in four areas: AI strategy and governance (an AI governance committee, procurement due diligence), risk assessment and human oversight (a risk-based approach with levels of human involvement), customisation and implementation of AI models (data preparation, testing, security), and communication and engagement with stakeholders (transparency, explainability, opt-out, feedback). It builds on the 2021 Guidance on the Ethical Development and Use of AI.
Adopted 11 Jun 2024
Source-linked · checked 11 Sep 2026
Official source
Holy See (Vatican)
·
Framework
Voluntary standard
Rome Call for AI Ethics (Pontifical Academy for Life, 28 February 2020)
A declaration of six principles for the ethical development of AI (transparency, inclusion, responsibility, impartiality, reliability, security and privacy), first signed in February 2020 by the Pontifical Academy for Life, Microsoft, IBM, FAO and the Italian government, and since joined by other religious leaders, universities and companies. It calls for "algor-ethics" and human-centred design and is used as a reference in faith-based and corporate AI ethics commitments.
Adopted 28 Feb 2020
Source-linked · checked 11 Sep 2026
Official source
Hong Kong SAR
·
Guidance
Guidance
Hong Kong Generative Artificial Intelligence Technical and Application Guideline
Published in April 2025, the guideline covers the technical characteristics and risks of generative AI, governance principles (safety, transparency, accountability, data protection, fairness) and practical application guidance for developers, service providers and users across the AI lifecycle, and is intended as a reference for industry and government.
Adopted 15 Apr 2025
Source-linked · checked 11 Sep 2026
Official source
France
·
Guidance
Guidance
CNIL recommendations on the development of AI systems and the GDPR (AI how-to sheets)
A series of practical guidance sheets, first published in 2024 and extended since, explaining how organisations can develop and train AI systems in compliance with the GDPR: defining a purpose, choosing a legal basis (including legitimate interest for web-scraped training data), data minimisation, retention, data-protection impact assessments, informing people and honouring their rights, and security of training datasets and models.
Adopted 8 Apr 2024
Source-linked · checked 11 Sep 2026
Official source
France
·
National strategy
Adopted
Stratégie nationale pour l'intelligence artificielle (National AI Strategy, phases 1–3, 2018–2025)
Launched in March 2018 following the Villani report, the national AI strategy funds research institutes (3IA then AI clusters), talent, compute and business adoption. The second phase (2021) focused on training and diffusion into the economy; the third phase (2024–2025) emphasises sovereign generative-AI models, compute and public-sector use, and framed France's hosting of the AI Action Summit in February 2025.
Adopted 29 Mar 2018
Source-linked · checked 11 Sep 2026
Official source
Germany
·
Bill
Proposed
Binding
Entwurf eines Gesetzes zur Durchführung der KI-Verordnung (KI-Marktüberwachungs- und Innovationsförderungsgesetz, KI-MIG)
The draft implementation act designates the Bundesnetzagentur as the central market-surveillance authority and single point of contact under the EU AI Act, keeps sector regulators (financial supervision, data protection for law-enforcement uses) competent in their fields, sets the national penalty framework within the Regulation's ranges and creates a national AI regulatory sandbox and an AI service desk for companies.
Source-linked · checked 11 Sep 2026
Official source
El Salvador
·
Act / statute
In force
Binding
Ley para el Fomento de la Inteligencia Artificial y Tecnologías Emergentes (Decreto Legislativo, febrero de 2025)
Approved by the Legislative Assembly in February 2025, the law promotes AI development and investment, creates the National Agency for Artificial Intelligence (ANIA) as regulator, defines rights and principles (human oversight, transparency, non-discrimination, data protection), sets registration and sandbox mechanisms and limits liability of developers who act in good faith under the law, alongside data-processing rules for AI training.
Adopted 25 Feb 2025
Source-linked · checked 11 Sep 2026
Official source
European Union
·
Regulation
Partially applicable
Binding
Regulation (EU) 2024/1689 — Artificial Intelligence Act
The EU AI Act is a binding regulation that sets rules for developing, placing on the market and using AI systems in the European Union. It bans a small set of practices considered unacceptable, imposes detailed requirements on "high-risk" AI systems used in areas such as employment, education, credit, essential services, law enforcement and safety-critical products, requires transparency for chatbots and synthetic content, and creates separate duties for providers of general-purpose AI models. Obligations apply in phases between 2025 and 2027.
Applies from 2 Aug 2026
Source-linked
Official source
Australia
·
Standard
Voluntary standard
Voluntary AI Safety Standard (Australia)
The Voluntary AI Safety Standard gives Australian organisations ten guardrails for developing and deploying AI safely and responsibly: accountability and governance, risk management, data governance and protection, testing and monitoring, human control and intervention, user transparency, contestability, supply-chain transparency, record keeping, and stakeholder engagement. The guardrails were designed to align with the mandatory guardrails proposed for high-risk settings so that early adopters would be prepared if those became law.
Adopted 5 Sep 2024
Source-linked
Official source
Expanded ASEAN Guide on AI Governance and Ethics – Generative AI
Endorsed in January 2025, the expanded guide addresses risks specific to generative AI (hallucination, deepfakes and misinformation, intellectual property, privacy, security, bias, embedded values) and proposes governance dimensions covering accountability, data, development and deployment, incident reporting, testing and assurance, security, content provenance, safety research and public-interest use, with policy recommendations for member states.
Adopted 17 Jan 2025
Source-linked · checked 11 Sep 2026
Official source
Australia
·
Consultation
Under consultation
Proposals paper: introducing mandatory guardrails for AI in high-risk settings (Australia)
The proposals paper sought views on ten mandatory guardrails for developers and deployers of AI in high-risk settings, a principles-based definition of high-risk AI (with general-purpose AI treated as high-risk), and three regulatory options: adapting existing laws, framework legislation, or a new cross-economy AI Act. The guardrails mirror the Voluntary AI Safety Standard, covering accountability, risk management, data governance, testing, human control, transparency, contestability, supply-chain transparency, records, and conformity assessment.