Global AI Regulatory Applicability Matrix
Using this in a product? Commercial use is allowed under CC BY 4.0, with attribution. Ask about an SLA-backed feed or a white-label licence.
On this page 7 sections
In brief
The Global AI Regulatory Applicability Matrix is a free XLSX crosswalk for EU AI Act and Colorado ADMT law (SB 26-189). Every binding AI instrument on record, by jurisdiction, with status, application date, who it binds and the use cases it covers, as a matrix to mark which apply to you.
- Format
- XLSX · Crosswalk
- Version
- v6, built 12 Nov 2026
- Duties cited
- 19 from 10 instruments
- Rows from the records
- 108
- Frameworks
- EU AI Act, Colorado ADMT law (SB 26-189)
- Written for
- Provider / developer, Deployer / user organisation, Public authority / government body
- Price and licence
- Free · CC BY 4.0
What's inside
- Matrix sheet: jurisdiction, instrument, status, applies from, binding, actors, use cases, applies-to-us dropdown, owner
- Deadlines sheet: every dated milestone on those instruments
- Record links throughout
Preview
The sheets and sections of version v6, as built. Columns marked ▾ have a dropdown; ƒ is a formula.
Sheet: Matrix
| Jurisdiction | Instrument | Type | Status | Applies from | Who it binds | Use cases | Sectors | Duties recorded | Applies to us ▾ | Owner | Notes | Official source | Record |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Alberta (Canada) | Alberta government AI usage policy | Policy | In force | Public authority / government body, Individual user / affected person | AI in public services | Public services and government | 0 | https://manuals.alberta.ca/media/i5mjqsgw/artificial-intelligence-usage-policy.pdf | https://aipolicytracker.org/policies/ca-alberta-government-ai-usage-policy | ||||
| Argentina | Decisión Administrativa 899/2024 | Regulation | In force | 0 | https://www.boletinoficial.gob.ar/detalleAviso/primera/314465/20240924 | https://aipolicytracker.org/policies/argentina-decision-administrativa-899-2024 | |||||||
| Argentina | Disposición 2/2023 | Regulation | In force | 0 | https://www.argentina.gob.ar/normativa/nacional/disposici%C3%B3n-2-2023-384656/texto | https://aipolicytracker.org/policies/argentina-disposicion-2-2023 | |||||||
| British Columbia (Canada) | British Columbia public service generative AI policy | Policy | In force | Public authority / government body, Individual user / affected person | AI in public services | Public services and government | 0 | https://digital.gov.bc.ca/ai/gen-ai-policy/ | https://aipolicytracker.org/policies/ca-british-columbia-generative-ai-policy | ||||
| Buenos Aires Province (Argentina) | Buenos Aires Province AI framework decree | Executive order | In force | Public authority / government body | AI in public services | Public services and government | 0 | https://normas.gba.gob.ar/documentos/B11QWLI4.html | https://aipolicytracker.org/policies/ar-buenos-aires-province-decree-742-2026-ai | ||||
| Calabria (Italy) | Calabria AI law (Regional Law 4/2026) | Act / statute | Adopted | Public authority / government body, Provider / developer | AI in public services, AI in healthcare | Public services and government, Healthcare and life sciences | 0 | https://www.consiglioregionale.calabria.it/bdf/api/BDF?numero=4&anno=2026 | https://aipolicytracker.org/policies/it-calabria-regional-law-4-2026-ai |
Sheet: Deadlines
| Date | Milestone | Instrument | Jurisdiction | Source reference | Status | Confidence | Note | Record |
|---|---|---|---|---|---|---|---|---|
| 2022-01-02 | Law in force | UAE PDPL | United Arab Emirates | passed | high | Entry into force. | https://aipolicytracker.org/policies/uae-personal-data-protection-law | |
| 2023-08-11 | Presidential assent | India DPDP Act | India | passed | high | Act No. 22 of 2023. | https://aipolicytracker.org/policies/india-dpdp-act | |
| 2024-08-01 | Entry into force | EU AI Act | European Union | Article 113 | passed | high | Twentieth day after publication in the Official Journal. | https://aipolicytracker.org/policies/eu-ai-act |
| 2024-09-05 | Opened for signature | Framework Convention on AI (CETS 225) | Council of Europe | passed | high | Signing conference in Vilnius, Lithuania. | https://aipolicytracker.org/policies/council-of-europe-framework-convention-on-ai | |
| 2025-02-02 | Prohibited practices and AI literacy apply (Chapters I and II) | EU AI Act | European Union | Article 113(a) | passed | high | Article 5 bans and Article 4 literacy duties apply. | https://aipolicytracker.org/policies/eu-ai-act |
| 2025-07-22 | AI Action Plan due (180 days) | EO 14179 | United States | Section 4 | passed | medium | Deadline for the Action Plan required by Section 4; the plan was published 23 July 2025. | https://aipolicytracker.org/policies/us-executive-order-14179 |
How to use it
- 1Request the files. Enter your name, company and work email in the form on this page. The XLSX download links arrive by email and work for 7 days.
- 2Read the README page. It states the version (v6), the dataset it was built from and the licence, so anyone reviewing your copy knows which records it reflects.
- 3Check the duties against your situation. The "Matrix" and "Deadlines" sheets list the recorded duties with their source references. Mark which apply to you and follow each link to the official text.
- 4Keep the evidence and watch for new versions. Link each completed row to the evidence that supports it. When the law on record changes, this template gets a new version and a changelog on this page.
Duties this template covers (19)
Each is cited in the file with its source reference and a link back to the record.
- Establish accountability processes and a risk-management process (guardrails 1 and 2)
- Frontier developers must protect employees who report catastrophic-risk concerns
- Use high-risk AI as instructed, monitor it and inform affected people
- Providers must meet the full set of provider duties for high-risk AI
- Providers must supply conformity evidence and log access to authorities on request
- Non-EU providers must appoint an EU authorised representative for high-risk AI
- Deployers, distributors and importers must assume provider duties when they rebrand or substantially modify high-risk AI
- Law-enforcement deployers must obtain authorisation for post-remote biometric identification and report annually
- Providers of GPAI models must notify the Commission within two weeks of meeting the systemic-risk threshold
- Non-EU providers of GPAI models must appoint an EU authorised representative
- Adopt the guiding principles and risk-based governance (voluntary)
- Government bodies to promote ethical, responsible and inclusive AI (policy commitment)
Legal basis
Version history
| Version | Built | Dataset | What changed |
|---|---|---|---|
| v6 | bdc9006d9119 | Dataset ef1018b7a6a2 → bdc9006d9119. | |
| v5 | ef1018b7a6a2 | Dataset 4559f86f527b → ef1018b7a6a2. Sheet "Deadlines": 23 → 28 rows (+5). Record citations: 103 → 108. | |
| v4 | 4559f86f527b | Dataset 1e8ea28a8a93 → 4559f86f527b. Sheet "Matrix": 42 → 80 rows (+38). Record citations: 65 → 103. | |
| v3 | 1e8ea28a8a93 | Dataset 3335c39da4b7 → 1e8ea28a8a93. | |
| v2 | 3335c39da4b7 | Dataset 914895c3103e → 3335c39da4b7. Sheet "Deadlines": 22 → 23 rows (+1). Record citations: 64 → 65. | |
| v1 | 914895c3103e | First version, built from dataset 914895c3103e. |
Only the latest version is served. A rebuild that changes the content adds a version; a rebuild that does not is skipped.
Frequently asked questions
What is in the Global AI Regulatory Applicability Matrix?
Matrix sheet: jurisdiction, instrument, status, applies from, binding, actors, use cases, applies-to-us dropdown, owner. Deadlines sheet: every dated milestone on those instruments. Record links throughout.
Which duties does it cite?
19 recorded duties from Australian Voluntary AI Safety Standard, California SB 53, EU AI Act and India AI Governance Guidelines, including Guardrails 1 and 2, Labor Code Section 1107 (as added by SB 53), Article 26, Article 16, Article 21 and Article 22. Each row links to the record, and the record to the official source.
Who is it for?
The duties it cites fall on provider / developer, deployer / user organisation and public authority / government body. Whoever owns AI governance for those roles usually completes it, with the system owner supplying the facts.
Is it free?
Yes. Request the XLSX with your work email on this page; the download links arrive by email, valid for 7 days. No account and no charge. Licensed CC BY 4.0. You may use, adapt and share this template, including commercially, with attribution to aipolicytracker.org.
How will I know when it changes?
Version v6 was built on 12 November 2026. The library is rebuilt daily; when a change to the records reaches this template it gets the next version, a changelog below and an entry in the templates feed.
Is there a self-assessment that goes with it?
Yes: the Asia-Pacific AI Regulation Assessment (23 questions, about 6 minutes). It is free and runs on Certifyi, a related product. A score is a self-check, not an audit; this template is where the work it points to gets written down.
Does completing it make us compliant?
No. It is an informational resource, not legal advice; it helps produce the evidence a regulator, customer or auditor asks for. Whether a duty applies to you is a judgement the template cannot make.
Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.