Utah (United States)
·
Act / statute
In force
Binding
Utah Artificial Intelligence Policy Act (SB 149, 2024, as amended by SB 226 and SB 332 in 2025)
Effective 1 May 2024, the Act requires a person using generative AI to interact with a consumer in a consumer transaction to disclose clearly that the consumer is interacting with AI when asked (as amended in 2025, when the interaction is high-risk or on request), and requires providers of regulated occupations (for example health and legal services) to disclose generative-AI use proactively. It states that using AI is no defence to consumer-protection violations, created the Office of Artificial Intelligence Policy and an AI learning laboratory allowing regulatory mitigation agreements, and originally sunset in 2025, extended to 2027.
Applies from 1 May 2024
Source-linked · checked 11 Sep 2026
Official source
Illinois (United States)
·
Act / statute
In force
Binding
Illinois Artificial Intelligence Video Interview Act (820 ILCS 42)
In force since 1 January 2020, the Act requires employers that use AI to analyse video interviews of applicants for Illinois-based positions to notify applicants, explain how the AI works and what characteristics it evaluates, obtain consent, limit sharing of videos, and delete videos on request within 30 days; a 2022 amendment requires employers relying solely on AI to decide who gets an in-person interview to report demographic data annually.
In force 1 Jan 2020
Source-linked · checked 11 Sep 2026
Official source
Spain
·
Bill
Proposed
Binding
Anteproyecto de Ley para el buen uso y la gobernanza de la inteligencia artificial
The draft implements the EU AI Act in Spain: it allocates supervision among AESIA, the data-protection authority, the electoral board, the financial and audiovisual regulators, sets the national penalty scale (up to EUR 35 million or 7% of turnover for prohibited practices), treats failure to label AI-generated content as a serious infringement and provides for the national sandbox to continue.
Source-linked · checked 11 Sep 2026
Official source
Kazakhstan
·
Act / statute
Adopted
Binding
Law of the Republic of Kazakhstan "On Artificial Intelligence" (signed November 2025)
The law defines AI systems and their classification by level of autonomy and risk, sets principles (legality, fairness, transparency, safety, human control), assigns duties to owners and operators of AI systems including risk management, labelling of AI-generated content and protection of personal data, prohibits certain manipulative and social-scoring uses, provides for a national AI platform and state support measures, and allocates state regulation to the authorised body.
Adopted 17 Nov 2025
Source-linked · checked 11 Sep 2026
Official source
Germany
·
Bill
Proposed
Binding
Entwurf eines Gesetzes zur Durchführung der KI-Verordnung (KI-Marktüberwachungs- und Innovationsförderungsgesetz, KI-MIG)
The draft implementation act designates the Bundesnetzagentur as the central market-surveillance authority and single point of contact under the EU AI Act, keeps sector regulators (financial supervision, data protection for law-enforcement uses) competent in their fields, sets the national penalty framework within the Regulation's ranges and creates a national AI regulatory sandbox and an AI service desk for companies.
Source-linked · checked 11 Sep 2026
Official source
European Union
·
Regulation
Partially applicable
Binding
Regulation (EU) 2024/1689 — Artificial Intelligence Act
The EU AI Act is a binding regulation that sets rules for developing, placing on the market and using AI systems in the European Union. It bans a small set of practices considered unacceptable, imposes detailed requirements on "high-risk" AI systems used in areas such as employment, education, credit, essential services, law enforcement and safety-critical products, requires transparency for chatbots and synthetic content, and creates separate duties for providers of general-purpose AI models. Obligations apply in phases between 2025 and 2027.
Applies from 2 Aug 2026
Source-linked
Official source
Quebec (Canada)
·
Act / statute
In force
Binding
Quebec Law 25 (S.Q. 2021, c. 25): provisions on decisions based exclusively on automated processing and biometric systems
Section 12.1 of the private-sector privacy act (as amended by Law 25, in force 22 September 2023) requires any enterprise that uses personal information to render a decision based exclusively on automated processing to inform the person no later than when the decision is made, and, on request, to tell them what personal information was used, the reasons and principal factors and parameters, and their right to have the information corrected, and to give them an opportunity to submit observations to a person who can review the decision. Biometric identification databases must be declared to the Commission d'accès à l'information 60 days before use, and privacy impact assessments are mandatory for projects involving personal information. Penalties reach CAD 25 million or 4% of worldwide turnover.
Applies from 22 Sep 2023
Source-linked · checked 11 Sep 2026
Official source
Ontario (Canada)
·
Act / statute
In force
Binding
Working for Workers Four Act, 2024 (Bill 149): disclosure of artificial intelligence use in publicly advertised job postings
Amends the Employment Standards Act, 2000 to require employers with 25 or more employees to disclose in every publicly advertised job posting whether artificial intelligence is used to screen, assess or select applicants, alongside new rules on salary ranges and Canadian-experience requirements. The AI disclosure requirement is in force from 1 January 2026.
Applies from 1 Jan 2026
Source-linked · checked 11 Sep 2026
Official source
