{ "lastVerified": "2026-07-19", "notice": "Informational source register only; not legal advice. Legal force, applicability, effective dates, and obligations depend on the facts, jurisdiction, sector, and current official text.", "sources": [ { "id": "eu-ai-act", "title": "Regulation (EU) 2024/1689 (Artificial Intelligence Act)", "issuer": "European Union", "category": "binding-law", "status": "In force with phased application through 2 August 2027", "scope": "Applies by role, system classification, use case, market connection, and the regulation's territorial rules.", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj", "officialSource": true, "siteLabels": ["EU AI Act"] }, { "id": "gdpr", "title": "Regulation (EU) 2016/679 (General Data Protection Regulation)", "issuer": "European Union", "category": "binding-law", "status": "In force", "scope": "Applies to processing of personal data within its material and territorial scope; Article 22 concerns certain solely automated decisions.", "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "officialSource": true, "siteLabels": ["GDPR"] }, { "id": "uk-gdpr", "title": "UK GDPR guidance and resources", "issuer": "Information Commissioner's Office", "category": "binding-law", "status": "UK data-protection law in force; official guidance reflects the Data (Use and Access) Act 2025", "scope": "Applies to personal-data processing within UK data-protection law; requirements depend on role, purpose, data, and context.", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/", "officialSource": true, "siteLabels": ["UK GDPR"] }, { "id": "ftc-act-section-5", "title": "Federal Trade Commission Act, Section 5", "issuer": "Federal Trade Commission", "category": "binding-law", "status": "In force", "scope": "Prohibits unfair or deceptive acts or practices in or affecting commerce within the FTC's jurisdiction.", "url": "https://www.ftc.gov/legal-library/browse/statutes/federal-trade-commission-act", "officialSource": true }, { "id": "ccpa", "title": "California Consumer Privacy Act, as amended by the CPRA", "issuer": "California Department of Justice", "category": "binding-law", "status": "In force", "scope": "Applies to covered businesses and California consumers; duties depend on statutory thresholds, data, purpose, and role.", "url": "https://oag.ca.gov/privacy/ccpa", "officialSource": true, "siteLabels": ["CCPA, as amended by CPRA", "CCPA / CPRA"] }, { "id": "colorado-ai-act", "title": "Colorado Senate Bill 26-189 (Automated Decision-Making Technology)", "issuer": "Colorado General Assembly", "category": "binding-law", "status": "Became law 14 May 2026; core developer and deployer duties begin 1 January 2027", "scope": "Addresses developers and deployers of covered automated decision-making technology that materially influences consequential decisions, subject to statutory definitions and exemptions.", "url": "https://leg.colorado.gov/bills/sb26-189", "officialSource": true, "siteLabels": ["Colorado SB 26-189", "Colorado ADMT Act"] }, { "id": "nyc-local-law-144", "title": "New York City Automated Employment Decision Tools law", "issuer": "New York City Department of Consumer and Worker Protection", "category": "binding-law", "status": "Enforced since 5 July 2023", "scope": "Applies to covered automated employment decision tools used for specified New York City employment decisions.", "url": "https://www.nyc.gov/site/dca/about/automated-employment-decision-tools.page", "officialSource": true, "siteLabels": ["NYC Local Law 144", "NYC LL 144"] }, { "id": "texas-traiga", "title": "Texas Responsible Artificial Intelligence Governance Act", "issuer": "Texas Legislature", "category": "binding-law", "status": "Effective 1 January 2026", "scope": "Applies to covered developers and deployers under Texas law, with role-specific duties, prohibitions, and exceptions.", "url": "https://capitol.texas.gov/billlookup/BillSummary.aspx?Bill=HB149&LegSess=89R", "officialSource": true }, { "id": "illinois-ai-employment", "title": "Illinois Human Rights Act amendments concerning artificial intelligence", "issuer": "Illinois General Assembly", "category": "binding-law", "status": "Effective 1 January 2026", "scope": "Addresses use of artificial intelligence in covered employment decisions and employer notice obligations.", "url": "https://www.ilga.gov/legislation/PublicActs/View/103-0804", "officialSource": true }, { "id": "pipeda", "title": "Personal Information Protection and Electronic Documents Act", "issuer": "Department of Justice Canada", "category": "binding-law", "status": "Current federal statute; official consolidation current to 26 May 2026", "scope": "Applies to personal information in commercial activities within its statutory scope, subject to provincial substantially-similar-law rules and exceptions.", "url": "https://laws-lois.justice.gc.ca/eng/acts/p-8.6/", "officialSource": true, "siteLabels": ["Canada PIPEDA"] }, { "id": "singapore-model-ai-governance", "title": "Model AI Governance Framework for Agentic AI, Version 1.5", "issuer": "Infocomm Media Development Authority of Singapore", "category": "voluntary-guidance", "status": "Version 1.5 published 20 May 2026; updated 5 June 2026", "scope": "Voluntary governance guidance for organizations deploying agentic AI; not a substitute for applicable Singapore law.", "url": "https://www.imda.gov.sg/-/media/imda/files/about/emerging-tech-and-research/artificial-intelligence/mgf-for-agentic-ai.pdf", "officialSource": true, "siteLabels": ["Singapore Model AI Governance Framework", "Singapore Agentic AI Framework"] }, { "id": "korea-ai-basic-act", "title": "Framework Act on the Development of Artificial Intelligence and the Creation of a Foundation for Trust", "issuer": "Ministry of Government Legislation", "category": "binding-law", "status": "Effective 22 January 2026", "scope": "Applies under the Act's definitions, territorial provisions, high-impact AI rules, transparency duties, and exceptions.", "url": "https://www.law.go.kr/LSW/lsInfoP.do?chrClsCd=010203&lsiSeq=268543&urlMode=engLsInfoR&viewCls=engLsInfoR", "officialSource": true, "siteLabels": ["Korea AI Basic Act"] }, { "id": "japan-ai-guidelines", "title": "AI Guidelines for Business, Version 1.2", "issuer": "Japan Ministry of Economy, Trade and Industry", "category": "voluntary-guidance", "status": "Version 1.2 published 31 March 2026", "scope": "Non-binding guidance for AI business actors; applicable law and sector rules remain controlling.", "url": "https://www.meti.go.jp/shingikai/mono_info_service/ai_shakai_jisso/pdf/20260331_12.pdf", "officialSource": true, "siteLabels": ["Japan AI Guidelines for Business v1.2"] }, { "id": "australia-ai-guidance", "title": "Guidance for AI Adoption", "issuer": "Australian Department of Industry, Science and Resources", "category": "voluntary-guidance", "status": "Version 1.0 published October 2025", "scope": "Voluntary responsible-adoption guidance; it does not itself create new legal obligations.", "url": "https://www.industry.gov.au/sites/default/files/2025-10/guidance-for-ai-adoption-foundations.pdf", "officialSource": true, "siteLabels": ["Australia Guidance for AI Adoption"] }, { "id": "brazil-lgpd", "title": "Lei Geral de Protecao de Dados Pessoais (LGPD)", "issuer": "Brazilian National Data Protection Authority", "category": "binding-law", "status": "In force", "scope": "Applies to covered personal-data processing under its material and territorial provisions, subject to statutory exceptions.", "url": "https://www.gov.br/anpd/pt-br/centrais-de-conteudo/outros-documentos-e-publicacoes-institucionais/lgpd-en-lei-no-13-709-capa.pdf/@@display-file/file", "officialSource": true, "siteLabels": ["Brazil LGPD"] }, { "id": "china-generative-ai-measures", "title": "Interim Measures for the Management of Generative Artificial Intelligence Services", "issuer": "Cyberspace Administration of China", "category": "binding-rule", "status": "Effective 15 August 2023", "scope": "Applies to covered generative-AI services provided to the public in mainland China, subject to the Measures' scope and exceptions.", "url": "https://www.cac.gov.cn/2023-07/13/c_1690898327029107.htm", "officialSource": true }, { "id": "china-algorithm-rules", "title": "Provisions on the Administration of Algorithmic Recommendations in Internet Information Services", "issuer": "Cyberspace Administration of China", "category": "binding-rule", "status": "Effective 1 March 2022", "scope": "Applies to covered algorithmic-recommendation internet information services within the rule's scope.", "url": "https://www.cac.gov.cn/2022-01/04/c_1642894606364259.htm", "officialSource": true }, { "id": "nist-ai-rmf", "title": "Artificial Intelligence Risk Management Framework 1.0", "issuer": "U.S. National Institute of Standards and Technology", "category": "voluntary-framework", "status": "Voluntary framework; NIST has announced a revision process", "scope": "Risk-management resource for voluntary use; not a law and not proof of compliance with any law.", "url": "https://www.nist.gov/itl/ai-risk-management-framework", "officialSource": true, "siteLabels": ["NIST AI RMF"] }, { "id": "nist-csf", "title": "Cybersecurity Framework 2.0", "issuer": "U.S. National Institute of Standards and Technology", "category": "voluntary-framework", "status": "Current voluntary cybersecurity framework", "scope": "General cybersecurity risk-management guidance; not an AI-specific law and not a certification.", "url": "https://www.nist.gov/cyberframework", "officialSource": true }, { "id": "iso-iec-42001", "title": "ISO/IEC 42001:2023 Artificial intelligence management system", "issuer": "International Organization for Standardization", "category": "international-standard", "status": "International standard published December 2023", "scope": "Management-system standard; use or certification does not by itself establish compliance with applicable law.", "url": "https://www.iso.org/standard/42001", "officialSource": true, "siteLabels": ["ISO/IEC 42001"] }, { "id": "eu-dsa", "title": "Regulation (EU) 2022/2065 (Digital Services Act)", "issuer": "European Union", "category": "binding-law", "status": "In force and generally applicable since 17 February 2024", "scope": "Applies to covered intermediary services and imposes differentiated duties by service type, size, role, and risk.", "url": "https://eur-lex.europa.eu/eli/reg/2022/2065/oj", "officialSource": true }, { "id": "eu-nis2", "title": "Directive (EU) 2022/2555 (NIS2 Directive)", "issuer": "European Union", "category": "binding-law", "status": "Directive implemented through national law", "scope": "Applies to covered essential and important entities in specified sectors, as transposed in relevant member states.", "url": "https://eur-lex.europa.eu/eli/dir/2022/2555/oj", "officialSource": true }, { "id": "eu-dora", "title": "Regulation (EU) 2022/2554 (Digital Operational Resilience Act)", "issuer": "European Union", "category": "binding-law", "status": "Applicable since 17 January 2025", "scope": "Applies to specified financial entities and certain ICT third-party risk arrangements under the regulation's definitions.", "url": "https://eur-lex.europa.eu/eli/reg/2022/2554/oj", "officialSource": true }, { "id": "uk-ai-principles", "title": "Implementing the UK's AI regulatory principles: initial guidance for regulators", "issuer": "UK Department for Science, Innovation and Technology", "category": "voluntary-guidance", "status": "Voluntary initial guidance published 6 February 2024", "scope": "Cross-sector principles for regulators; the guidance is voluntary and does not replace applicable law or regulator-specific rules.", "url": "https://www.gov.uk/government/publications/implementing-the-uks-ai-regulatory-principles-initial-guidance-for-regulators/implementing-the-uks-ai-regulatory-principles-initial-guidance-for-regulators", "officialSource": true }, { "id": "mit-ai-risk-repository", "title": "MIT AI Risk Repository", "issuer": "MIT AI Risk Initiative", "category": "research-taxonomy", "status": "Research repository", "scope": "Research taxonomy and evidence resource; not law, regulation, a compliance standard, or a certification.", "url": "https://airisk.mit.edu/", "officialSource": true, "siteLabels": ["MIT AI Risk Repo"] } ] }