> ## Content Index
> Fetch the complete content index at: https://aiadoption.org/llms.txt
> Use this file to discover other available public pages before exploring further.

# AI Laws in Force Worldwide
- URL: https://aiadoption.org/record/ai-laws-in-force-worldwide/
- Published: 2026-10-25T10:53:28.000Z
- Updated: 2026-10-26T23:22:52.000Z
- Description: 79 binding AI laws and rules are in force across 34 jurisdictions, each dated and linked to its official text, with start dates to come.
- Author: Manu
- Tags: News, AI Regulation, #record, #record-thread, #record-hub-regulation

[The AI Record](https://aiadoption.org/record/) › [Threads](https://aiadoption.org/record/#threads) › AI Laws in Force Worldwide

[**The AI Record**](https://aiadoption.org/record/)ThreadLatest law 11 Aug 2026Checked 25 Oct 2026

# AI Laws in Force Worldwide

How many binding AI laws and rules are in force around the world, where, and what takes effect next? Every binding AI law in our AI by Country registers, dated and linked to its official text.

**79**binding AI laws and rules in force

**34**jurisdictions

**4**coming up

[Download the data (CSV)](https://charts.aiadoption.org/record/ai-laws-in-force-worldwide.csv?ref=aiadoption.org)Copy citation

Filed in [AI Regulation & Policy](https://aiadoption.org/ai-regulation-statistics/) › [AI Laws by Country](https://aiadoption.org/ai-regulation-statistics/#ai-laws-by-country)

## Coming up

Dates already fixed in law or in an order, soonest first. Each is counted from that day.

1. 1 Dec 2026  
ChileLey 21.719 que regula la protección y el tratamiento de los datos personales y crea la Agencia de Protección de Datos PersonalesGDPR-style rewrite of Ley 19.628: right not to be subject to solely automated decisions including profiling, new Agencia de Protección de Datos Personales, fines. Published 13 Dec 2024; applies from 1 Dec 2026 unless Boletín 18623-07 (filed 1 Sept 2026) moves the date to 1 Dec 2027\. The Agency's council had not been appointed by the 1 June 2026 deadline.VerifiedLaw[Official document →](https://www.bcn.cl/leychile/navegar?idNorma=1209272&ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261025235307/https://www.bcn.cl/leychile/navegar?idNorma=1209272)
2. 10 Dec 2026  
AustraliaPrivacy and Other Legislation Amendment Act 2024 (automated decision-making transparency, APPs 1.7-1.9)From 10 December 2026, privacy policies must disclose the personal information used and kinds of decisions made by programs that make or substantially contribute to decisions significantly affecting individuals; OAIC guidance issued 30 September 2026.VerifiedLaw[Official document →](https://www.oaic.gov.au/engage-with-us/consultations/consultation-on-guidance-for-transparency-in-automated-decision-making?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261006141332/https://www.oaic.gov.au/engage-with-us/consultations/consultation-on-guidance-for-transparency-in-automated-decision-making)
3. 1 Jan 2027  
United StatesColorado SB 26-189 (automated decision-making technology law replacing the Colorado AI Act)Narrower ADMT regime: consumer notice and disclosure duties for ADMT used in consequential decisions across seven domains; drops duty of care, risk programmes and annual impact assessments; voids indemnity clauses for a party's own discriminatory ADMT acts. Attorney General enforces.VerifiedLaw[Official document →](https://coag.gov/ai/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261007200456/https://coag.gov/ai/)
4. 1 Jan 2027  
United StatesNew York Responsible AI Safety and Education (RAISE) Act (S6953B/A6453B, with 2026 chapter amendment)Large frontier developers must publish safety and security protocols and report safety incidents within 72 hours; chapter amendment signed 27 March 2026 aligns the law with California SB 53 and gives NYDFS rulemaking and enforcement powers.VerifiedLaw[Official document →](https://www.governor.ny.gov/news/governor-hochul-signs-nation-leading-legislation-require-ai-frameworks-ai-frontier-models?ref=aiadoption.org)

## On one timeline

One line per region. Filled dots are counted; open dots are claimed, lifted or not yet in effect. Hover or tap a dot.

Ahead

Americas22 counted · 3 other

[](#e-ar-ley-25326)[](#e-ca-dadm)[](#e-br-lgpd-art20)[](#e-mx-ley-olimpia)[](#e-ca-qc-law25-adm)[](#e-br-tse-res-23732-2024)[](#e-us-ut-aipa)[](#e-ar-res-710-2024)[](#e-us-eo-14179)[](#e-mx-lfpdppp-2025)[](#e-br-lei-15123-2025)[](#e-us-take-it-down-act)[](#e-us-eo-14365)[](#e-us-ca-ab2013)[](#e-us-ca-ccpa-admt)[](#e-us-ca-sb53)[](#e-us-il-hb3773)[](#e-us-tx-hb149-traiga)[](#e-us-doj-ai-litigation-task-force)[](#e-br-tse-res-23755-2026)[](#e-us-eo-14409-frontier-security)[](#e-us-ca-sb942-ab853)[](#e-cl-ley-21719)[](#e-us-co-sb26-189)[](#e-us-ny-raise-act)

Middle East & Africa10 counted · 0 other

[](#e-tr-kvkk-art11)[](#e-ke-data-protection-act-2019)[](#e-za-popia-s71)[](#e-eg-pdpl-151-2020)[](#e-ae-pdpl-2021)[](#e-ng-ndpa-2023)[](#e-sa-pdpl)[](#e-il-ppl-amendment-13)[](#e-ng-gaid-2025)[](#e-ae-difc-regulation-10)

Europe19 counted · 0 other

[](#e-eu-gdpr-art22)[](#e-ie-coco-law)[](#e-eu-dsa)[](#e-ch-fadp)[](#e-gb-intimate-image-offences)[](#e-fr-loi-sren)[](#e-de-eu-ai-act)[](#e-dk-eu-ai-act)[](#e-eu-ai-act)[](#e-fi-eu-ai-act)[](#e-eu-product-liability-directive-2024)[](#e-dk-law-467-2025)[](#e-it-law-132-2025)[](#e-fi-act-1377-2025)[](#e-gb-duaa-2025-adm)[](#e-eu-digital-omnibus-ai)[](#e-de-ki-mig)[](#e-ie-regulation-of-ai-bill)[](#e-pl-ai-systems-act)

Asia-Pacific28 counted · 1 other

[](#e-cn-pipl-art24)[](#e-cn-algorithm-recommendation)[](#e-cn-deep-synthesis)[](#e-tw-election-deepfake)[](#e-cn-genai-interim-measures)[](#e-kr-election-deepfake-ban)[](#e-kr-pipa-automated-decisions)[](#e-au-deepfake-sexual-material-act-2024)[](#e-kr-sexual-deepfake-amendment)[](#e-id-pdp-law)[](#e-cn-ai-content-labelling)[](#e-jp-ai-promotion-act)[](#e-nz-biometric-processing-code-2025)[](#e-in-dpdp-act)[](#e-in-dpdp-rules)[](#e-au-social-media-minimum-age)[](#e-cn-cybersecurity-law-2025-amendment)[](#e-my-online-safety-act)[](#e-vn-digital-technology-industry-law)[](#e-vn-pdp-law)[](#e-tw-ai-basic-act)[](#e-kr-ai-basic-act)[](#e-kr-ai-basic-act-decree)[](#e-in-it-rules-synthetic-content)[](#e-vn-ai-law)[](#e-nz-privacy-amendment-act-2025)[](#e-sg-online-safety-raa)[](#e-cn-anthropomorphic-ai)[](#e-au-privacy-amendment-2024-adm)

201620172018201920202021202220232024202520262027

## Every law

Newest first. Each verified entry counts once; claimed entries are shown and labelled but not counted.

**What counts**

A law or rule counts when it is binding, specific to AI or expressly covering automated decisions (such as a data-protection law's article on decisions made by machines), verified in our AI by Country register against its official text, and has a start date: laws, regulations and executive orders, from the day they take effect. Strategies, guidelines, standards and bills are not counted, and laws since revoked are left out. Future start dates are shown as coming up and are counted from that day.

1. 11 Aug 2026  
PolandUstawa z dnia 3 lipca 2026 r. o systemach sztucznej inteligencji (Dz.U. 2026 poz. 1003)Implements the AI Act: creates KRiBSI to supervise the market, inspect (remotely by default), order withdrawal of non-compliant systems and impose administrative fines; regulatory sandboxes; excludes national defence; 127 articles. Cabinet 31 Mar 2026; Sejm passed 11 Jun 2026 (print 2443); Sejm accepted 24 of 25 Senate amendments 3 Jul 2026; published 27 Jul 2026\. Some provisions from 28 Jul 2026, most chapters from 28 Oct 2026.VerifiedLaw[Official document →](https://eli.gov.pl/eli/DU/2026/1003?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261015071139/https://eli.gov.pl/eli/DU/2026/1003)
2. 2 Aug 2026  
United StatesCalifornia AI Transparency Act (SB 942, amended by AB 853)GenAI providers with >1m monthly California users must offer a free detection tool and embed latent provenance disclosures (optional visible labels) from 2 Aug 2026; AB 853 adds large-platform and GenAI hosting duties from 1 Jan 2027 and capture-device duties from 1 Jan 2028.VerifiedLaw[Official document →](https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill%5Fid=202320240SB942&ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261005023915/https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill%5Fid=202320240SB942)
3. 31 Jul 2026  
IrelandRegulation of Artificial Intelligence Act 2026Gives domestic effect to the AI Act without adding obligations: establishes the AI Office of Ireland (CEO Paul Byrne; board first met 8 Sep 2026) as coordinator and single point of contact, designates sector regulators, sets investigation and sanction procedures, sandboxes and real-world testing. General Scheme Feb 2026; Bill published 17 Jun 2026 (10 Parts, 139 sections) and passed unamended under an accelerated process; signed 21 Jul 2026.VerifiedLaw[Official document →](https://www.gov.ie/en/department-of-enterprise-tourism-and-employment/press-releases/ai-office-of-ireland-established-under-the-ai-regulation-bill-2026-paul-byrne-appointed-as-ceo/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261010233504/https://www.gov.ie/en/department-of-enterprise-tourism-and-employment/press-releases/ai-office-of-ireland-established-under-the-ai-regulation-bill-2026-paul-byrne-appointed-as-ceo/)
4. 29 Jul 2026  
GermanyGesetz zur Marktüberwachung und Innovationsförderung von künstlicher Intelligenz (KI-Marktüberwachungsgesetz, KI-MIG)Implements the AI Act: Bundesnetzagentur as default market-surveillance authority and single point of contact with a coordination and competence centre; BaFin for financial firms; sector regulators for harmonised products; KI-Service Desk and sandbox support. Bundestag 11 Jun 2026, Bundesrat 10 Jul 2026, promulgated 28 Jul 2026.VerifiedLaw[Official document →](https://www.gesetze-im-internet.de/ki-mig/BJNR0DF0B0026.html?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261003021627/https://www.gesetze-im-internet.de/ki-mig/BJNR0DF0B0026.html)
5. 27 Jul 2026  
European UnionRegulation (EU) 2026/1744 of 8 July 2026 amending Regulations (EU) 2024/1689, (EU) 2018/1139 and (EU) 2023/1230 (Digital Omnibus on AI)Proposed 19 Nov 2025 (2025/0359(COD)); political deal April 2026\. Delays Annex III high-risk obligations to 2 Dec 2027 and Annex I (product-embedded) to 2 Aug 2028; watermarking grace for systems already on the market to 2 Dec 2026; adds Art. 5 ban on AI 'nudifier' systems and CSAM generation from 2 Dec 2026; reported 2 Aug 2030 date for certain public-authority high-risk systems.VerifiedRegulation[Official document →](https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261024104351/https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng)
6. 15 Jul 2026  
ChinaInterim Measures for the Administration of Anthropomorphic AI Interaction Services (CAC/NDRC/MIIT/MPS/SAMR Order No. 21)AI companion services: no virtual partner/relative services to minors, guardian consent under 14, AI-disclosure and 2-hour usage reminders, security assessment at 1m registered or 100k monthly active users, algorithm filing.VerifiedRegulation[Official document →](https://www.cac.gov.cn/2026-04/10/c%5F1777558395078289.htm?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261015112416/https://www.cac.gov.cn/2026-04/10/c%5F1777558395078289.htm)
7. 29 Jun 2026  
SingaporeOnline Safety (Relief and Accountability) Act 2025Creates a Commissioner of Online Safety and Online Safety Commission that can order takedowns or account restrictions, plus statutory torts against posters, administrators and platforms; first phase covers 5 of 13 harms (intimate image abuse, image-based child abuse, doxxing, online harassment, online stalking).VerifiedLaw[Official document →](https://www.mlaw.gov.sg/online-safety-commission-and-online-safety-relief-and-accountability-act-2025-to-start-on-29-june-2026/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260618150459/https://www.mlaw.gov.sg/online-safety-commission-and-online-safety-relief-and-accountability-act-2025-to-start-on-29-june-2026/)
8. 2 Jun 2026  
United StatesExecutive Order 14409, Promoting Advanced Artificial Intelligence Innovation and SecurityAI cyber-defence priorities for federal systems, an industry AI cybersecurity clearinghouse, a voluntary arrangement for government access to covered frontier models up to 30 days before release, and DOJ priority on AI-enabled cybercrime. No licensing or pre-clearance.VerifiedExecutive order[Official document →](https://www.whitehouse.gov/presidential-actions/2026/06/promoting-advanced-artificial-intelligence-innovation-and-security/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261017140957/https://www.whitehouse.gov/presidential-actions/2026/06/promoting-advanced-artificial-intelligence-innovation-and-security/)
9. 1 May 2026  
New ZealandPrivacy Amendment Act 2025 (new IPP 3A on indirect collection)Adds IPP 3A: agencies collecting personal information from someone other than the individual must take reasonable steps to tell the individual of the collection, its purpose, recipients and their access and correction rights; Part 2 technical amendments in force 24 Sept 2025; not retrospective.VerifiedLaw[Official document →](https://www.justice.govt.nz/justice-sector-policy/key-initiatives/enhancing-the-privacy-act?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260722140056/https://www.justice.govt.nz/justice-sector-policy/key-initiatives/enhancing-the-privacy-act/)
10. 1 Mar 2026  
VietnamLaw on Artificial Intelligence (No. 134/2025/QH15)35 articles: three-tier risk classification, duties for high-risk AI with a list issued by the Prime Minister, prohibited practices, transparency and labelling of AI-generated content, a National AI Development Fund.VerifiedLaw[Official document →](https://vanban.chinhphu.vn/?pageid=27160&docid=216334&classid=1&typegroupid=3&ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260902172623/https://vanban.chinhphu.vn/%3Fclassid%3D1%26docid%3D216334%26pageid%3D27160%26typegroupid%3D3)
11. Mar 2026  
BrazilTSE Resolution 23.755/2026 (amends Resolution 23.610/2019 on electoral propaganda, AI rules for the 2026 elections)Labelling of synthetic content and an AI-declaration field for boosted ads; no new synthetic content altering candidates' image or voice from 72 hours before to 24 hours after the vote; AI systems may not recommend candidates, parties or votes; platforms jointly liable if they do not promptly remove unlabelled or prohibited content; judges may reverse the burden of proof.VerifiedRegulationApplies from Mar 2026[Official document →](https://www.tse.jus.br/legislacao/compilada/res/2026/resolucao-no-23-755-de-2-de-marco-de-2026?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260914183545/https://www.tse.jus.br/legislacao/compilada/res/2026/resolucao-no-23-755-de-2-de-marco-de-2026)
12. 20 Feb 2026  
IndiaIT (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026 (G.S.R. 120(E)) on synthetically generated informationDefines synthetically generated audio-visual information; requires visible labels and provenance metadata, user declarations verified by significant social media intermediaries, 3-hour removal of unlawful content on official orders and 2-hour removal for non-consensual intimate imagery.VerifiedRegulation[Official document →](https://www.pib.gov.in/PressReleasePage.aspx?PRID=2295500®=1&lang=1&ref=aiadoption.org)
13. 5 Feb 2026  
United KingdomData (Use and Access) Act 2025, section 80: automated decision-making (UK GDPR Articles 22A-22D)Replaces the general ban on solely automated significant decisions with a safeguards regime (information, representations, human intervention, right to contest); stricter for special category data.VerifiedLaw[Official document →](https://legislation.gov.uk/uksi/2026/82?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260806005852/https://www.legislation.gov.uk/uksi/2026/82)
14. 22 Jan 2026  
South KoreaEnforcement Decree of the AI Basic ActSets thresholds and procedures: high-impact AI criteria, labelling methods, a 10^26 FLOP training-compute threshold for safety duties, and domestic-representative triggers (KRW 1tn total revenue, KRW 10bn AI-service revenue or 1m average daily users).VerifiedRegulation[Official document →](https://www.msit.go.kr/eng/bbs/view.do?bbsSeqNo=42&mId=4&mPid=2&nttSeqNo=1214&sCode=eng&ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260821131607/https://www.msit.go.kr/eng/bbs/view.do?nttSeqNo=1214&sCode=eng&bbsSeqNo=42&mId=4&mPid=2)
15. 22 Jan 2026  
South KoreaFramework Act on the Development of Artificial Intelligence and Establishment of Trust (AI Basic Act), Act No. 20676High-impact AI duties (risk management, explanation, human oversight), notice and labelling for generative AI and deepfakes, safety duties above a compute threshold, domestic representative for large foreign providers.VerifiedLaw[Official document →](https://www.mofa.go.kr/upload/cntnts/www/%EC%9D%B8%EA%B3%B5%EC%A7%80%EB%8A%A5%20%EB%B0%9C%EC%A0%84%EA%B3%BC%20%EC%8B%A0%EB%A2%B0%20%EA%B8%B0%EB%B0%98%20%EC%A1%B0%EC%84%B1%20%EB%93%B1%EC%97%90%20%EA%B4%80%ED%95%9C%20%EA%B8%B0%EB%B3%B8%EB%B2%95%5F%EC%98%81%EB%AC%B8.pdf?ref=aiadoption.org)
16. 14 Jan 2026  
TaiwanArtificial Intelligence Basic Act20 articles: seven governing principles, an Executive Yuan national AI strategy committee, a risk-classification framework to be set by the Ministry of Digital Affairs, and a duty on agencies to amend conflicting rules within two years; no direct penalties.VerifiedLaw[Official document →](https://law.moj.gov.tw/LawClass/LawAll.aspx?pcode=H0160093&ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260814133245/https://law.moj.gov.tw/LawClass/LawAll.aspx?pcode=H0160093)
17. 9 Jan 2026  
United StatesDOJ Artificial Intelligence Litigation Task Force (Attorney General memorandum)Implements EO 14365\. First action: DOJ moved to intervene on 24 April 2026 in xAI v. Weiser (D. Colo., 1:26-cv-01515) against the Colorado AI Act; no standalone DOJ suit against another state confirmed.VerifiedExecutive order[Official document →](https://www.justice.gov/ag/media/1422986/dl?inline=&ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260924051238/https://www.justice.gov/ag/media/1422986/dl?inline=)
18. 1 Jan 2026  
VietnamLaw on Personal Data Protection (No. 91/2025/QH15)Comprehensive personal data protection law replacing Decree 13/2023; covers AI processing of personal data.VerifiedLaw[Official document →](https://vanban.chinhphu.vn/?pageid=27160&docid=214590&classid=1&typegroupid=3&ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260712181615/https://vanban.chinhphu.vn/?pageid=27160&docid=214590&classid=1&typegroupid=3)
19. 1 Jan 2026  
VietnamLaw on Digital Technology Industry (No. 71/2025/QH15), AI chapterAI definition, principles for AI development and use, transparency duties, risk-based management and labelling of AI-generated products; incentive articles (11, 28, 29) applied from 1 Jul 2025.VerifiedLaw[Official document →](https://vanban.chinhphu.vn/?pageid=27160&docid=214609&classid=1&typegroupid=3&ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260308171348/https://vanban.chinhphu.vn/?pageid=27160&docid=214609&classid=1&typegroupid=3)
20. 1 Jan 2026  
United StatesTexas HB 149, Texas Responsible Artificial Intelligence Governance Act (TRAIGA)Bans AI built to intentionally discriminate, incite self-harm or crime, or produce illegal deepfakes; limits government social scoring and biometric ID; government disclosure duties; 36-month regulatory sandbox; AI Council; AG has exclusive enforcement with cure period.VerifiedLaw[Official document →](https://capitol.texas.gov/billlookup/BillSummary.aspx?Bill=HB149&LegSess=89R&ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260511192742/https://capitol.texas.gov/BillLookup/BillSummary.aspx?LegSess=89R&Bill=HB149)
21. 1 Jan 2026  
United StatesIllinois HB 3773 (Public Act 103-0804), amending the Illinois Human Rights Act on AI in employmentCivil-rights violation for employers to use AI that has a discriminatory effect in hiring, promotion, discipline or discharge, or to use zip codes as a proxy; employers must notify workers of AI use; IDHR rulemaking on notice.VerifiedLaw[Official document →](https://www.ilga.gov/legislation/PublicActs/View/103-0804?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260825062858/https://ilga.gov/legislation/PublicActs/View/103-0804)
22. 1 Jan 2026  
United StatesCalifornia SB 53, Transparency in Frontier Artificial Intelligence Act (Chapter 138, Statutes of 2025)Frontier developers (>10^26 FLOP) must publish transparency reports; large developers (>$500m revenue) must publish safety frameworks; critical safety incidents to Cal OES within 15 days (24h if imminent harm); whistleblower protection; CalCompute.VerifiedLaw[Official document →](https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill%5Fid=202520260SB53&ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261004042039/https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill%5Fid=202520260SB53)
23. 1 Jan 2026  
United StatesCCPA regulations on automated decisionmaking technology, risk assessments and cybersecurity audits (CPPA)ADMT that replaces or substantially replaces human decisions in significant decisions: pre-use notice, opt-out and access rights from 1 Jan 2027; risk assessments due by 31 Dec 2027; cybersecurity audits phased 2028-2030.VerifiedRegulation[Official document →](https://cppa.ca.gov/regulations/pdf/ccpa%5Fupdates%5Fcyber%5Frisk%5Fadmt%5Fappr%5Ftext.pdf?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261013202742/https://cppa.ca.gov/regulations/pdf/ccpa%5Fupdates%5Fcyber%5Frisk%5Fadmt%5Fappr%5Ftext.pdf)
24. 1 Jan 2026  
United StatesCalifornia AB 2013, Generative AI Training Data Transparency (Chapter 817, Statutes of 2024)Developers of generative AI released since 2022 must post a high-level summary of training datasets (sources, copyright, personal data, licensing). xAI's preliminary injunction bid denied 4 March 2026; appeal pending at the Ninth Circuit.VerifiedLaw[Official document →](https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill%5Fid=202320240AB2013&ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260829000344/https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill%5Fid=202320240AB2013)
25. 1 Jan 2026  
MalaysiaOnline Safety Act 2025 \[Act 866\]Applies to licensed application, content and network service providers; risk-based safety measures, child safeguards and user reporting tools; social media and messaging services with 8m+ users deemed licensed from 1 Jan 2026.VerifiedLaw[Official document →](https://lom.agc.gov.my/ilims/upload/portal/akta/outputaktap/2867049%5FBI/Act%20866-Online%20Safety%20Act%202025.pdf?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260925145525/https://lom.agc.gov.my/ilims/upload/portal/akta/outputaktap/2867049%5FBI/Act%20866-Online%20Safety%20Act%202025.pdf)
26. 1 Jan 2026  
FinlandAct on the Supervision of Certain Artificial Intelligence Systems (1377/2025), from government bill HE 46/2025Designates market surveillance authorities for prohibited and high-risk AI (decentralised model, about 15 regulators); Traficom as single point of contact; investigation, binding orders and administrative fines.VerifiedLaw[Official document →](https://www.finlex.fi/api/media/statute/898466/mainPdf/main.pdf?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260307080848/https://www.finlex.fi/api/media/statute/898466/mainPdf/main.pdf)
27. 1 Jan 2026  
ChinaDecision of the NPCSC on Amending the Cybersecurity Law (Presidential Order No. 61), adding Article 20 on AIFirst AI provision in national statute: state support for AI research, data and compute infrastructure, ethics rules, AI risk monitoring and safety supervision; also higher penalties and wider extraterritorial reach.VerifiedLaw[Official document →](http://www.npc.gov.cn/npc/c2/c30834/202510/t20251028%5F449048.html?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260418105149/http://www.npc.gov.cn/npc/c2/c30834/202510/t20251028%5F449048.html)
28. 1 Jan 2026  
United Arab EmiratesDIFC Data Protection Regulations, Regulation 10 (personal data processed through autonomous and semi-autonomous systems)DIFC free zone only: deployers (as controllers) and operators (as processors) of autonomous and semi-autonomous systems must give notice, follow design principles and limit purposes; high-risk processing requires a pre-deployment assessment, certification (valid up to three years) and an Autonomous Systems Officer. A June 2026 consultation proposes amendments and a new Regulation 11 on accreditation.VerifiedRegulation[Official document →](https://www.difc.com/business/registrars-and-commissioners/commissioner-of-data-protection/regulation-10?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260505060914/https://www.difc.com/business/registrars-and-commissioners/commissioner-of-data-protection/regulation-10)
29. 11 Dec 2025  
United StatesExecutive Order 14365, Ensuring a National Policy Framework for Artificial IntelligenceCreates a DOJ AI Litigation Task Force to challenge state AI laws; Commerce to list 'onerous' state laws within 90 days; conditions BEAD non-deployment funds; FCC disclosure-standard proceeding; FTC preemption policy statement; legislative recommendation for a preemptive federal framework (child safety, data-centre and state procurement laws carved out).VerifiedExecutive order[Official document →](https://www.federalregister.gov/documents/2025/12/16/2025-23092/ensuring-a-national-policy-framework-for-artificial-intelligence?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261020112233/https://www.federalregister.gov/documents/2025/12/16/2025-23092/ensuring-a-national-policy-framework-for-artificial-intelligence)
30. 10 Dec 2025  
AustraliaOnline Safety Amendment (Social Media Minimum Age) Act 2024 (No. 127, 2024)Age-restricted social media platforms must take reasonable steps to stop under-16s holding accounts; age-assurance data cannot be reused without consent; enforced by eSafety.VerifiedLaw[Official document →](https://www.legislation.gov.au/C2024A00127/asmade/2024-12-10/text/original/pdf?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261025153308/https://www.legislation.gov.au/C2024A00127/asmade/2024-12-10/text/original/pdf)
31. 13 Nov 2025  
IndiaDigital Personal Data Protection Rules 2025 (G.S.R. 846(E))Phased commencement: Data Protection Board rules (Rules 1, 2, 17-21) on notification; consent managers (Rule 4) after 12 months; most obligations after 18 months (May 2027).VerifiedRegulation[Official document →](https://static.pib.gov.in/WriteReadData/specificdocs/documents/2025/nov/doc20251117695301.pdf?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260925055810/https://static.pib.gov.in/WriteReadData/specificdocs/documents/2025/nov/doc20251117695301.pdf)
32. 13 Nov 2025  
IndiaDigital Personal Data Protection Act 2023Consent-based processing, data principal rights, duties on significant data fiduciaries; applies to personal data used in AI.VerifiedLaw[Official document →](https://static.pib.gov.in/WriteReadData/specificdocs/documents/2025/nov/doc20251117695301.pdf?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260925055810/https://static.pib.gov.in/WriteReadData/specificdocs/documents/2025/nov/doc20251117695301.pdf)
33. 3 Nov 2025  
New ZealandBiometric Processing Privacy Code 2025Binding rules for automated biometric verification, identification and categorisation (e.g. facial recognition): proportionality assessment, notification and limits on inferring sensitive traits. Applies to existing processing from 3 Aug 2026; Amendment No 1 (rule 3A etc.) applies from 1 May 2026 for newer processing.VerifiedRegulation[Official document →](https://www.privacy.org.nz/privacy-principles/codes-of-practice/biometric-processing-privacy-code?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260827203423/https://www.privacy.org.nz/privacy-principles/codes-of-practice/biometric-processing-privacy-code/)
34. 10 Oct 2025  
ItalyLegge 23 settembre 2025, n. 132 - Disposizioni e deleghe al Governo in materia di intelligenza artificialeFirst national AI framework law in the EU: principles for AI in health, work, justice and public administration; parental consent under 14; AgID/ACN governance; new deepfake offence (art. 612-quater c.p.); 12-month delegation for implementing decrees (deadline 10 Oct 2026).VerifiedLaw[Official document →](https://www.certifico.com/news/pacchetto-attuativo-legge-132-2025-sullintelligenza-artificiale?ref=aiadoption.org)
35. 19 Sep 2025  
NigeriaNDPA General Application and Implementation Directive (GAID) 2025Requires DPIAs before automated decision-making/profiling, biometrics and surveillance, ongoing monitoring of emerging-technology tools; replaces NDPR 2019.VerifiedRegulation[Official document →](https://ndpc.gov.ng/wp-content/uploads/2025/07/NDP-ACT-GAID-2025-MARCH-20TH.pdf?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261006155749/https://ndpc.gov.ng/wp-content/uploads/2025/07/NDP-ACT-GAID-2025-MARCH-20TH.pdf)
36. 1 Sep 2025  
JapanAct on Promotion of Research, Development and Utilization of Artificial Intelligence-Related Technologies (Act No. 53 of 2025)Framework law: basic principles, duties of state and businesses to cooperate, AI Strategy Headquarters chaired by the Prime Minister, AI Basic Plan, government research and guidance on misuse; promulgated and partly in force 4 Jun 2025.VerifiedLaw[Official document →](https://www8.cao.go.jp/cstp/ai/ai%5Fact/ai%5Fact.html?ref=aiadoption.org)
37. 1 Sep 2025  
ChinaMeasures for Labelling AI-Generated and Synthetic ContentExplicit labels on AI text, audio, images, video and virtual scenes plus implicit metadata labels; platforms must check metadata and flag content; app stores must check labelling; ban on removing or forging labels.VerifiedRegulation[Official document →](https://www.cac.gov.cn/2025-03/14/c%5F1743654685899683.htm?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261013093315/https://www.cac.gov.cn/2025-03/14/c%5F1743654685899683.htm)
38. 14 Aug 2025  
IsraelProtection of Privacy Law, Amendment 13Broadens personal data (online identifiers, location), 'especially sensitive' data category, privacy officer duties, higher administrative fines and stronger enforcement powers for the Privacy Protection Authority.VerifiedLaw[Official document →](https://barlaw.co.il/?p=61891&ref=aiadoption.org)
39. 2 Aug 2025  
DenmarkAct on Supplementary Provisions to the Regulation on Artificial Intelligence (Law No. 467 of 14 May 2025)Designates competent authorities for prohibited practices (Art. 5); makes breaches of the prohibitions punishable by fine; information and inspection powers; publication of decisions; appeals only to courts.VerifiedLaw[Official document →](https://www.lovguiden.dk/loven/lov-om-supplerende-bestemmelser-til-forordningen-om-kunstig-intelligens/2?ref=aiadoption.org)
40. 19 May 2025  
United StatesTAKE IT DOWN Act (S.146, Public Law 119-12)Federal crime to knowingly publish non-consensual intimate images, including AI 'digital forgeries'; covered platforms must remove reported images within 48 hours (platform duty applied from 19 May 2026, FTC enforcing).VerifiedLaw[Official document →](https://www.congress.gov/bill/119th-congress/senate-bill/146?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261014021902/https://www.congress.gov/bill/119th-congress/senate-bill/146)
41. 25 Apr 2025  
BrazilLei 15.123/2025 (aggravated penalty for psychological violence against women using AI)Penal Code amendment increasing the penalty for psychological violence against women when committed with AI or technology that alters the victim's image or voice.VerifiedLaw[Official document →](https://planalto.gov.br/ccivil%5F03/%5FAto2023-2026/2025/Lei/L15123.htm?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261014213956/https://www.planalto.gov.br/ccivil%5F03/%5Fato2023-2026/2025/lei/l15123.htm)
42. 21 Mar 2025  
MexicoLey Federal de Protección de Datos Personales en Posesión de los Particulares (2025)New private-sector data-protection law (DOF 20 March 2025) replacing the 2010 law; oversight moved from the dissolved INAI to the Secretaría Anticorrupción y Buen Gobierno; ARCO rights apply to automated processing. A 22 Sept 2026 initiative would require notice when personal data are processed by AI systems.VerifiedLaw[Official document →](https://www.diputados.gob.mx/LeyesBiblio/pdf/LFPDPPP.pdf?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261011004139/http://www.diputados.gob.mx/LeyesBiblio/pdf/LFPDPPP.pdf)
43. 23 Jan 2025  
United StatesExecutive Order 14179, Removing Barriers to American Leadership in Artificial IntelligenceSets policy of sustaining US AI dominance, orders review and rescission of actions taken under EO 14110, and required an AI Action Plan within 180 days.VerifiedExecutive order[Official document →](https://www.federalregister.gov/documents/2025/01/31/2025-02172/removing-barriers-to-american-leadership-in-artificial-intelligence?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261015165911/https://www.federalregister.gov/documents/2025/01/31/2025-02172/removing-barriers-to-american-leadership-in-artificial-intelligence)
44. 8 Dec 2024  
European UnionDirective (EU) 2024/2853 on liability for defective products (revised Product Liability Directive)Repeals Directive 85/374/EEC and brings software, including AI systems, within strict no-fault product liability (non-commercial open-source software excluded); manufacturers stay liable for defects from updates or machine learning they control; damage includes destroyed or corrupted non-professional data; presumptions of defect and causation ease the burden of proof. Published in the OJ 18 Nov 2024; member states must transpose by 9 Dec 2026 and it applies to products placed on the market after that date. The separate AI Liability Directive proposal was withdrawn.VerifiedLaw[Official document →](https://eur-lex.europa.eu/eli/dir/2024/2853/oj/eng?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261006135758/https://eur-lex.europa.eu/eli/dir/2024/2853/oj/eng)
45. 17 Oct 2024  
IndonesiaLaw No. 27 of 2022 on Personal Data ProtectionData subject rights incl. objection to decisions based solely on automated processing.VerifiedLaw[Official document →](https://peraturan.bpk.go.id/Details/229798/uu-no-27-tahun-2022?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261017023637/https://peraturan.bpk.go.id/Details/229798/uu-no-27-tahun-2022)
46. Oct 2024  
South KoreaAct on Special Cases Concerning the Punishment of Sexual Crimes amendment (sexual deepfakes)Criminalises possessing, buying, storing or viewing sexually explicit deepfakes; raises the maximum sentence for creating them to seven years.VerifiedLawApplies from Oct 2024[Official document →](https://law.go.kr/LSW//lsSideInfoP.do?lsiSeq=277347&joNo=0014&joBrNo=02&docCls=jo&urlMode=lsScJoRltInfoR&ref=aiadoption.org)
47. 3 Sep 2024  
AustraliaCriminal Code Amendment (Deepfake Sexual Material) Act 2024 (No. 78, 2024)Offence of transmitting sexual material depicting a real adult without consent, whether real or created/altered with technology; aggravated offences for creators.VerifiedLaw[Official document →](https://www.legislation.gov.au/C2024A00078?ref=aiadoption.org)
48. 1 Aug 2024  
FinlandEU AI Act (Regulation (EU) 2024/1689)Directly applicable: prohibitions and AI literacy from Feb 2025, GPAI duties from Aug 2025; Annex III high-risk duties moved to 2 Dec 2027 by the Digital Omnibus.VerifiedRegulation[Official document →](https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261016174553/https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng)
49. 1 Aug 2024  
European UnionRegulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (AI Act)Risk tiers. Prohibitions and AI literacy apply from 2 Feb 2025; GPAI obligations, governance and penalty rules from 2 Aug 2025; Art. 50 transparency and Commission GPAI enforcement powers from 2 Aug 2026; high-risk dates as amended by Regulation 2026/1744 (Annex III 2 Dec 2027, Annex I 2 Aug 2028).VerifiedRegulation[Official document →](https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261016174553/https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng)
50. 1 Aug 2024  
DenmarkEU AI Act (Regulation (EU) 2024/1689)Directly applicable: prohibitions and AI literacy from Feb 2025, GPAI duties from Aug 2025; Annex III high-risk duties moved to 2 Dec 2027 by the Digital Omnibus.VerifiedRegulation[Official document →](https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261016174553/https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng)
51. 1 Aug 2024  
GermanyEU AI Act (Regulation (EU) 2024/1689) as amended by Regulation (EU) 2026/1744Directly applicable; Bundesnetzagentur states prohibitions and Art. 50 transparency are enforced now, Annex III high-risk from 2 Dec 2027, Annex I from 2 Aug 2028.VerifiedRegulation[Official document →](https://www.bundesnetzagentur.de/DE/Fachthemen/Digitales/KI/14%5FMarktueberwachung/artikel.html?ref=aiadoption.org)
52. 29 Jul 2024  
ArgentinaResolución 710/2024, Ministerio de Seguridad (Unidad de Inteligencia Artificial Aplicada a la Seguridad)Creates the Unidad de Inteligencia Artificial Aplicada a la Seguridad within the cybercrime directorate, using AI to patrol open social networks, websites and the dark web and to analyse camera images with facial recognition; must comply with Ley 25.326; an opposition bill (4125-D-2024) seeks its annulment.VerifiedRegulation[Official document →](https://www.boletinoficial.gob.ar/detalleAviso/primera/311381/202407290?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261010045354/https://www.boletinoficial.gob.ar/detalleAviso/primera/311381/202407290)
53. 23 May 2024  
FranceLoi n° 2024-449 du 21 mai 2024 visant à sécuriser et à réguler l'espace numérique (SREN)Rewrote Code pénal art. 226-8 to cover publishing algorithmically generated images or voice of a person without consent where the artificial nature is not obvious or stated, and created art. 226-8-1 on sexual deepfakes, punishable even if labelled; higher penalties when spread online. Also age-verification powers for Arcom, cloud-switching rules and DSA enforcement powers.VerifiedLaw[Official document →](https://legifrance.gouv.fr/dossierlegislatif/JORFDOLE000047533100/?detailId=&detailType=EXPOSE%5FMOTIFS&ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20250210235137/https://www.legifrance.gouv.fr/dossierlegislatif/JORFDOLE000047533100/?detailId=&detailType=EXPOSE%5FMOTIFS)
54. 1 May 2024  
United StatesUtah Artificial Intelligence Policy Act (SB 149 of 2024, amended by SB 226 and SB 332 of 2025)GenAI disclosure when a consumer asks, and proactive disclosure in high-risk interactions by regulated occupations; Office of AI Policy and regulatory learning lab; repeal date extended to 1 July 2027\. 2026 frontier transparency bill HB 286 stalled.VerifiedLaw[Official document →](https://le.utah.gov/Session/2025/bills/enrolled/SB0332.pdf?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260618090249/https://le.utah.gov/Session/2025/bills/enrolled/SB0332.pdf)
55. 15 Mar 2024  
South KoreaPersonal Information Protection Act, Article 37-2 (rights on automated decisions)Data subjects may refuse, or ask for an explanation or review of, fully automated decisions that significantly affect their rights; controllers must disclose criteria and procedures. Refusal is limited where the decision was disclosed in advance via consent, contract or law.VerifiedLaw[Official document →](https://www.law.go.kr/LSW/eng/engLsInfoR.do?lsiSeq=270351&ref=aiadoption.org)
56. Mar 2024  
BrazilTSE Resolution 23.732/2024 (AI and deepfakes in electoral propaganda)Amended TSE Resolution 23.610/2019: bans deepfakes to harm or favour candidates, requires labelling of AI-generated campaign content (art. 9-B), regulates chatbots and platform duties; later amended for the 2026 election by Resolution 23.755/2026.VerifiedRegulationApplies from Mar 2024[Official document →](https://www.tse.jus.br/legislacao/compilada/res/2024/resolucao-no-23-732-de-27-de-fevereiro-de-2024?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261005135450/https://www.tse.jus.br/legislacao/compilada/res/2024/resolucao-no-23-732-de-27-de-fevereiro-de-2024)
57. 31 Jan 2024  
United KingdomIntimate image offences: sharing (Online Safety Act 2023 s.188, SOA 2003 ss.66B-66D) and creating or requesting purported intimate images (Data (Use and Access) Act 2025 s.138, SOA 2003 ss.66E-66H)Sharing an intimate image, including a deepfake, without consent is an offence from 31 Jan 2024; creating or requesting a sexually explicit deepfake of an adult without consent is an offence from 6 Feb 2026.VerifiedLaw[Official document →](https://www.legislation.gov.uk/uksi/2026/31/made?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260813162853/https://www.legislation.gov.uk/uksi/2026/31/made)
58. 29 Jan 2024  
South KoreaPublic Official Election Act, Article 82-8 (deepfake campaign material)Bans realistic AI-generated campaign videos, images and audio in the 90 days before election day; outside that window such material must be labelled as AI-generated.VerifiedLaw[Official document →](https://www.nec.go.kr/site/eng/ex/bbs/View.do?cbIdx=1270&bcIdx=226657&ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261013160413/https://www.nec.go.kr/site/eng/ex/bbs/View.do?cbIdx=1270&bcIdx=226657)
59. 22 Sep 2023  
CanadaQuebec Law 25 (Act to modernize legislative provisions as regards the protection of personal information), automated-decision provisionsSection 12.1 of Quebec's private-sector privacy Act (added by Law 25, in force 22 September 2023): organisations must tell individuals when a decision is based exclusively on automated processing, explain factors on request and allow review by a person.VerifiedLaw[Official document →](https://www.publicationsduquebec.gouv.qc.ca/fileadmin/Fichiers%5Fclient/lois%5Fet%5Freglements/LoisAnnuelles/en/2021/2021C25A.PDF?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261009145122/https://www.publicationsduquebec.gouv.qc.ca/fileadmin/Fichiers%5Fclient/lois%5Fet%5Freglements/LoisAnnuelles/en/2021/2021C25A.PDF)
60. 14 Sep 2023  
Saudi ArabiaPersonal Data Protection Law (Royal Decree M/19 of 1443H, amended by M/148 of 1444H)Consent, purpose limitation, transfer limits and data-subject rights for AI training and deployment; enforcement began 14 September 2024 after a one-year grace period.VerifiedLaw[Official document →](https://laws.boe.gov.sa/boelaws/laws/lawdetails/b7cfae89-828e-4994-b167-adaa00e37188/1?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260228111643/https://laws.boe.gov.sa/BoeLaws/Laws/LawDetails/b7cfae89-828e-4994-b167-adaa00e37188/1)
61. 1 Sep 2023  
SwitzerlandRevised Federal Act on Data Protection (FADP, SR 235.1)Applies to AI processing of personal data. Art. 21: controllers must inform data subjects of decisions based exclusively on automated processing with legal or considerably adverse effects, let them state their view and request review by a natural person (exceptions for contracts and explicit consent); federal bodies must label such decisions.VerifiedLaw[Official document →](https://www.fedlex.admin.ch/eli/cc/2022/491/en?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261004205745/https://www.fedlex.admin.ch/eli/cc/2022/491/en)
62. 15 Aug 2023  
ChinaInterim Measures for the Management of Generative AI ServicesCovers public-facing generative AI in China: lawful training data and IP, content controls, labelling of images/video, user data protection, security assessment and algorithm filing for services with public-opinion attributes.VerifiedRegulation[Official document →](https://www.cac.gov.cn/2023-07/13/c%5F1690898327029107.htm?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261024013743/https://www.cac.gov.cn/2023-07/13/c%5F1690898327029107.htm)
63. 12 Jun 2023  
NigeriaNigeria Data Protection Act, 2023Lawful-basis, DPIA and data-subject rights, including a right not to be subject to decisions based solely on automated processing with legal or similar effects (s.37).VerifiedLaw[Official document →](https://ndpc.gov.ng/wp-content/uploads/2024/03/Nigeria%5FData%5FProtection%5FAct%5F2023.pdf?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260325071732/https://ndpc.gov.ng/wp-content/uploads/2024/03/Nigeria%5FData%5FProtection%5FAct%5F2023.pdf)
64. Jun 2023  
TaiwanCivil Servants Election and Recall Act, Article 51-3 (and parallel amendment to the Presidential and Vice Presidential Election and Recall Act) on deepfakesCandidates may ask police to examine suspected deepfake audio or video of themselves; once confirmed, broadcasters and platforms must stop or remove it within two days and keep records for six months.VerifiedLawApplies from Jun 2023[Official document →](https://law.moj.gov.tw/LawClass/LawSingle.aspx?pcode=d0020010&flno=51-3&ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260319234646/https://law.moj.gov.tw/LawClass/LawSingle.aspx?pcode=D0020010&flno=51-3)
65. 10 Jan 2023  
ChinaProvisions on the Administration of Deep Synthesis of Internet Information Services (CAC/MIIT/MPS Order No. 12)Real-name verification, review of inputs and outputs, labelling of synthetic content, separate consent for face/voice editing, algorithm filing for deep synthesis services.VerifiedRegulation[Official document →](https://www.mps.gov.cn/n6557558/c8797736/content.html?ref=aiadoption.org)
66. 16 Nov 2022  
European UnionRegulation (EU) 2022/2065 (Digital Services Act)Fully applicable since 17 Feb 2024; very large online platforms and search engines (over 45m EU users) must assess and mitigate systemic risks; the Commission's March 2024 election guidelines ask those whose services can create or spread generative-AI content to label it, deepfakes included; recommender-system transparency.VerifiedRegulation[Official document →](https://eur-lex.europa.eu/eli/reg/2022/2065/oj/eng?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261015060009/https://eur-lex.europa.eu/eli/reg/2022/2065/oj/eng)
67. 1 Mar 2022  
ChinaProvisions on the Management of Algorithmic Recommendation in Internet Information Services (CAC/MIIT/MPS/SAMR Order No. 9)Algorithm filing within 10 working days for services with public-opinion or social-mobilisation attributes, security assessment, opt-out of personalised recommendation, bans on manipulating rankings and unfair price discrimination.VerifiedRegulation[Official document →](https://www.cac.gov.cn/2022-01/04/c%5F1642894606364259.htm?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261017164004/https://www.cac.gov.cn/2022-01/04/c%5F1642894606364259.htm)
68. 2 Jan 2022  
United Arab EmiratesFederal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL)Federal data-protection law (outside DIFC/ADGM free zones and sectoral health/credit regimes), published in Official Gazette No. 712 on 26 Sept 2021, including a right to object to decisions based solely on automated processing; UAE Data Office (Decree-Law 44/2021) is the regulator. Issuance of the executive regulations could not be confirmed from a primary source.VerifiedLaw[Official document →](https://uaelegislation.gov.ae/en/legislations/1972/download?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260907034008/https://www.uaelegislation.gov.ae/en/legislations/1972/download)
69. 1 Nov 2021  
ChinaPersonal Information Protection Law (2021), Article 24 on automated decision-makingAutomated decision-making must be transparent and fair with no unreasonable differential treatment on prices or terms; personalised push and marketing must offer a non-personalised option or easy opt-out; individuals may demand an explanation of, and refuse, solely automated decisions with a major effect on their rights. Art. 55 requires a prior impact assessment.VerifiedLaw[Official document →](http://www.npc.gov.cn/c2/c30834/202108/t20210820%5F313088.html?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20251106233010/http://www.npc.gov.cn/c2/c30834/202108/t20210820%5F313088.html)
70. 2 Jun 2021  
MexicoLey Olimpia (federal decree amending the Ley General de Acceso de las Mujeres a una Vida Libre de Violencia and the Federal Penal Code)Recognises digital violence (Ley General, Chapter IV Ter, arts. 20 Quáter-20 Sexies) and creates the federal offence of violating sexual intimacy (Federal Penal Code arts. 199 Octies-199 Decies: sharing, recording or producing intimate images, video or audio without consent; the same penalties apply where the content attributed to a person does not actually depict them); authorities can order platforms to remove content; states had 180 days to align their laws.VerifiedLaw[Official document →](https://www.dof.gob.mx/nota%5Fdetalle.php?codigo=5619905&fecha=01%2F06%2F2021&ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260902003226/https://dof.gob.mx/nota%5Fdetalle.php?codigo=5619905&fecha=01%2F06%2F2021)
71. 10 Feb 2021  
IrelandHarassment, Harmful Communications and Related Offences Act 2020 (Coco's Law)Criminalises distributing or threatening to distribute intimate images with intent to cause harm (s.2) and recording or distributing them without consent (s.3), plus threatening or grossly offensive communications (s.4); the explanatory memo to Bill 13 of 2026 states the Act does not extend to computer-generated fake images of identifiable people.VerifiedLaw[Official document →](https://www.irishstatutebook.ie/eli/2020/act/32/enacted/en/print?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260116012335/https://www.irishstatutebook.ie/eli/2020/act/32/enacted/en/print)
72. 14 Oct 2020  
EgyptPersonal Data Protection Law No. 151 of 2020 and its Executive Regulations (Decree No. 816 of 2025)Consent, licensing of controllers and processors, record-keeping, breach notification, cross-border transfer authorisation by the Personal Data Protection Centre, and data-subject rights that apply to AI data processing; executive regulations issued 1 Nov 2025 and in force from the day after publication, with about a one-year compliance window.VerifiedLaw[Official document →](https://pdpc.gov.eg/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260810093708/https://pdpc.gov.eg/)
73. 18 Sep 2020  
BrazilLei Geral de Proteção de Dados (Lei 13.709/2018), Article 20 on automated decisionsRight to request review of decisions taken solely on automated processing that affect the data subject's interests, including profiling; controller must give information on criteria and procedures (subject to trade secrecy) and ANPD may audit for discrimination. Lei 13.853/2019 removed the original requirement that review be by a natural person.VerifiedLaw[Official document →](https://www.planalto.gov.br/ccivil%5F03/%5Fato2015-2018/2018/lei/l13709compilado.htm?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261016114939/https://www.planalto.gov.br/ccivil%5F03/%5Fato2015-2018/2018/lei/l13709compilado.htm)
74. 1 Jul 2020  
South AfricaProtection of Personal Information Act 4 of 2013 (POPIA), section 71 (automated decision-making)Bars decisions with legal or similar effects based solely on automated profiling unless an exception applies (contract, law or code), with a right to make representations.VerifiedLaw[Official document →](https://inforegulator.org.za/knowledge-base/category/popia/chapter-8-rights-of-data-subjects-regarding-direct-marketing-by-means-of-unsolicited-electronic-communications-directories-and-automated-decision-making/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260610120657/https://inforegulator.org.za/knowledge-base/category/popia/chapter-8-rights-of-data-subjects-regarding-direct-marketing-by-means-of-unsolicited-electronic-communications-directories-and-automated-decision-making/)
75. 25 Nov 2019  
KenyaData Protection Act, 2019 (s.35 automated decision-making) and Data Protection (General) Regulations 2021 (reg. 22)Right not to be subject to decisions based solely on automated processing with significant effects; DPIAs required for high-risk processing (s.31).VerifiedLaw[Official document →](https://www.odpc.go.ke/wp-content/uploads/2024/03/THE-DATA-PROTECTION-GENERAL-REGULATIONS-2021-1.pdf?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261002092842/https://www.odpc.go.ke/wp-content/uploads/2024/03/THE-DATA-PROTECTION-GENERAL-REGULATIONS-2021-1.pdf)
76. 1 Apr 2019  
CanadaTreasury Board Directive on Automated Decision-MakingBinds federal institutions using automated decision systems for administrative decisions: Algorithmic Impact Assessment, notice before and explanation after decisions, recourse, human intervention and public reporting; compliance from 1 April 2020\. A fourth review consulted to January 2025; publication of a revised version was not confirmed.VerifiedRegulation[Official document →](https://www.tbs-sct.canada.ca/pol/doc-eng.aspx?id=32592&ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261007204853/https://www.tbs-sct.canada.ca/pol/doc-eng.aspx?id=32592)
77. 25 May 2018  
European UnionRegulation (EU) 2016/679 (GDPR), Article 22 on automated individual decision-makingRight not to be subject to a decision based solely on automated processing with legal or similarly significant effects, save for contractual necessity, legal authorisation or explicit consent, with safeguards including human intervention and the right to express a view and contest the decision; the CJEU SCHUFA judgment (C-634/21, 7 Dec 2023) held that a credit score a lender relies on heavily is itself such a decision.VerifiedRegulation[Official document →](https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261021062324/https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng)
78. 7 Apr 2016  
TurkeyPersonal Data Protection Law No. 6698 (KVKK), Article 11(1)(g): right to object to results produced by automated analysisData subjects may object to a result against them that arises from analysis of their personal data exclusively by automated systems; requests go to the controller in writing (reply within 30 days), then to the KVK Board by complaint. An objection right, not a general ban on automated decisions; Law 7499 (2024) amended other provisions.VerifiedLaw[Official document →](https://mevzuat.gov.tr/MevzuatMetin/1.5.6698.pdf?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261003114446/https://www.mevzuat.gov.tr/MevzuatMetin/1.5.6698.pdf)
79. 2 Nov 2000  
ArgentinaLey 25.326 de Protección de los Datos PersonalesGeneral data-protection (habeas data) law, published 2 Nov 2000 and regulated by Decree 1558/2001; applies to AI processing of personal data; AAIP is the authority; reform bills pending.VerifiedLaw[Official document →](https://www.argentina.gob.ar/normativa/nacional/ley-25326-64790/texto?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261005055952/https://www.argentina.gob.ar/normativa/nacional/ley-25326-64790/texto)

**How this thread is kept**

Every entry links to the official document itself: the order, law, filing or statement, with an archived copy where one exists. Steps known only from news reports are left out, so our count can be lower than press tallies. New entries are added when we find their official text. [How the Record works](https://aiadoption.org/editorial-standards/#the-ai-record) · [Report an error or a missing law](https://aiadoption.org/corrections/)