AI Compliance Regulations Directory
Every AI regulation that may apply to your business — from the EU AI Act to US state laws to global data protection rules. Select any regulation to see exactly what your business must do.
Find which laws apply to my businessMost Important Regulations
These affect the most businesses globally. Check these first.
EU Artificial Intelligence Act
View requirements US-COColorado Artificial Intelligence Act (SB 24-205)
View requirements EUEU GDPR Article 22 — Automated Decision-Making & AI Profiling
View requirements US-NY-NYCNew York City Local Law 144 — Automated Employment Decision Tools
View requirements US-CACalifornia Privacy Rights Act (CPRA) — AI Provisions
View requirements US-ILIllinois Artificial Intelligence Video Interview Act
View requirements UKUK AI Governance Framework
View requirements EUEU Digital Services Act (DSA) — AI Transparency Obligations
View requirementsAll 157 Regulations by Region
EU(25)
EU Artificial Intelligence Act
The EU AI Act classifies AI systems by risk level and imposes obligations on providers and users. High-risk AI systems r…
EU Digital Services Act (DSA) — AI Transparency Obligations
The EU Digital Services Act (Regulation 2022/2065) has been in force for all online platforms since February 17, 2024. F…
EU GDPR Article 22 — Automated Decision-Making & AI Profiling
GDPR Article 22 (in force since May 25, 2018) gives EU and EEA residents the right not to be subject to decisions based …
EU Digital Operational Resilience Act (DORA)
EU DORA (Regulation 2022/2554, in application January 17, 2025) applies to 20 categories of EU-regulated financial entit…
EU AI Act — General-Purpose AI (GPAI) Model Obligations (Art. 50-55)
As of August 2, 2025, the EU AI Act's obligations for General-Purpose AI (GPAI) model providers and deployers are in ful…
EU Cyber Resilience Act (CRA) — Software & AI Products
The EU Cyber Resilience Act (CRA, Regulation 2024/2847, entered into force December 10, 2024) requires manufacturers and…
EU AI Act — Prohibited Practices (Article 5)
EU AI Act Article 5 bans eight categories of AI outright — no grace period, no exceptions. These prohibitions became enf…
EU AI Act — High-Risk Medical Device AI (Article 6 / MDR / IVDR)
EU AI Act Article 6(1) classifies AI systems embedded in EU-regulated medical devices as high-risk. Any AI-powered medic…
EU Product Liability Directive 2024 — AI Systems (Directive 2024/2853)
Directive (EU) 2024/2853 explicitly classifies AI systems as "products" under EU product liability law, replacing the 19…
Italy — AI Enforcement under GDPR (Garante)
The Italian data protection authority (Garante) is among the most aggressive AI enforcement bodies in the EU. Garante te…
Spain — AI Framework under GDPR (AEPD)
Spain's AEPD has published comprehensive AI-GDPR guidance including a 10-step AI adequacy methodology, algorithmic bias …
Netherlands — AI Governance under GDPR (Autoriteit Persoonsgegevens)
The Dutch DPA (AP) fined Uber for automated decision-making violations in 2023 and is a leading EU enforcement authority…
Poland — AI Framework under GDPR (UODO)
Poland's UODO has issued GDPR-AI guidance requiring DPIAs for AI profiling systems and human review for automated decisi…
Ireland — GDPR AI Enforcement (Data Protection Commission)
Ireland's DPC is the lead GDPR supervisor for most major US tech companies in the EU. DPC issued a €1.2B fine against Me…
Sweden — AI Guidance under GDPR (IMY)
Sweden's IMY published detailed generative AI and GDPR guidance in 2023. IMY fined Spotify €5M in 2023. IMY requires a d…
Luxembourg — GDPR + EU AI Act + Digital Luxembourg Strategy 2025
Luxembourg is a major EU financial and tech hub (Amazon EU HQ, Skype, PayPal, Spotify European headquarters). The CNPD (…
Slovakia — GDPR + EU AI Act + Slovak AI Strategy 2030
Slovakia's data protection authority is the Úrad na ochranu osobných údajov Slovenskej republiky (UOOU). Slovakia has ad…
Estonia — GDPR + EU AI Act + Estonian AI Strategy (e-Governance Leader)
Estonia is the world's most digitally advanced country — 99% of government services are online, and the X-Road data exch…
Latvia — GDPR + EU AI Act + Latvian AI Strategy 2021-2027
Latvia's Datu valsts inspekcija (DVI) supervises GDPR and AI data processing. Latvia's AI Development Guidelines 2021-20…
Lithuania — GDPR + EU AI Act + Lithuanian AI Strategy
Lithuania's Valstybinė duomenų apsaugos inspekcija (VDAI) supervises GDPR compliance. Lithuania adopted its AI Strategy …
Bulgaria — GDPR + EU AI Act + National Digital Transformation Programme
Bulgaria's Commission for Personal Data Protection (CPDP / Комисия за защита на личните данни) supervises data protectio…
Croatia — GDPR + EU AI Act + Croatian AI Strategy 2021
Croatia's Agencija za zaštitu osobnih podataka (AZOP) supervises GDPR. Croatia adopted its National AI Development Strat…
Slovenia — GDPR + EU AI Act + Slovenian Digital Strategy + AI Sandbox
Slovenia's Informacijski pooblaščenec (Information Commissioner, IP) supervises both data protection and freedom of info…
Cyprus — GDPR + EU AI Act + Cyprus Digitalization Strategy + CPDBP
Cyprus's Commissioner for Personal Data Protection (CPDBP) supervises GDPR compliance. Cyprus has positioned itself as a…
Malta — GDPR + EU AI Act + Malta AI Strategy 2019 (World's First National AI Strategy)
Malta made history in 2019 by becoming the first country in the world to publish a National AI Strategy. The Malta Infor…
US-CA(4)
California Privacy Rights Act (CPRA) — AI Provisions
The CPRA expanded CCPA to cover automated decision-making technology (ADMT). Businesses using AI in significant decision…
California AB 2013 — Generative AI Training Data Transparency Act
California AB 2013 requires any person or company that designs, codes, produces, or substantially modifies a generative …
California SB 942 — AI Transparency Act (AI-Generated Content)
California SB 942 (California AI Transparency Act, effective August 2, 2026) requires "covered providers" — generative A…
California SB 243 — AI Companion Chatbot Safety Act
California SB 243 (signed October 13, 2025, effective January 1, 2026) regulates operators of AI companion chatbots — AI…
US-IL(3)
Illinois Artificial Intelligence Video Interview Act
Requires employers using AI to analyze job interview videos to notify applicants, obtain consent, explain AI use, and li…
Illinois Artificial Intelligence Video Interview Act (AIVIA) + 2024 Expansion
Illinois AIVIA (effective January 1, 2020, expanded 2024) requires employers to notify applicants before using AI to ana…
Illinois Biometric Information Privacy Act (BIPA)
Illinois BIPA (740 ILCS 14, effective 2008, amended 2024) is the nation's strongest biometric privacy law and directly a…
US-NY(3)
New York AI Companion Models Law (A3008)
New York Governor Kathy Hochul signed Assembly Bill A3008 on May 9, 2025, creating the Artificial Intelligence Companion…
New York RAISE Act (A 6453 — Frontier AI Safety)
New York's Responsible AI Safety and Education (RAISE) Act was signed by Governor Hochul on March 27, 2026 and takes eff…
New York State — AI Awareness (Non-RAISE Act Businesses)
New York State has the RAISE Act (frontier AI developers only, effective Jan 1, 2027) and NYC Local Law 144 (AI hiring b…
Middle East(8)
Qatar Personal Data Protection Law (PDPL)
Qatar Law No. 13 of 2016 (PDPL), enforced by the National Cyber Security Agency (NCSA), governs personal data processing…
Bahrain Personal Data Protection Law (PDPL)
Bahrain Decree No. 30 of 2018 (PDPL), enforced by the Personal Data Protection Authority (PDPA), applies to any entity p…
Kuwait Law No. 20 of 2014 — Personal Data Protection + National AI Strategy 2023
Kuwait Law No. 20 of 2014 on the Protection of Personal Data regulates automated processing of personal data for all org…
UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection + UAE AI Strategy 2031
The UAE Personal Data Protection Law (PDPL/PDPA) is enforced by the UAE Data Office. It covers processing of personal da…
Qatar Personal Data Privacy Protection Law (Law No. 13 of 2016) + NDS 2030
Qatar's Personal Data Privacy Protection Law (PDPPL) governs collection, processing, and transfer of personal data in Qa…
Bahrain Personal Data Protection Law (PDPL, Law No. 30 of 2018)
Bahrain's PDPL (Law No. 30 of 2018) is the first comprehensive data protection law in the GCC, predating Saudi Arabia's …
Israel Privacy Protection Law (PPL 5741-1981) + 2023 Reform + INCD AI
Israel's Privacy Protection Law (PPL, 5741-1981) is administered by the Privacy Protection Authority (PPA, formerly ILIT…
Saudi Arabia Personal Data Protection Law (PDPL) + Vision 2030 AI Programme
Saudi Arabia's PDPL enforced by SDAIA (Saudi Data and AI Authority) is one of the Gulf's most comprehensive data protect…
Asia Pacific(5)
Pakistan Personal Data Protection Bill (PDPB 2023) + PECA 2016
Pakistan's Personal Data Protection Bill (PDPB 2023) is pending final Senate passage as of 2024 but is being enforced th…
Singapore Personal Data Protection Act (PDPA 2012) + AI Governance Framework 2.0
Singapore's PDPA (2012, amended 2021) is one of ASEAN's most mature data protection laws, enforced by the Personal Data …
Philippines Data Privacy Act (DPA, Republic Act 10173) + NPC AI Advisory
The Philippines Data Privacy Act (DPA 2012, RA 10173) is enforced by the National Privacy Commission (NPC). The DPA appl…
India Digital Personal Data Protection Act 2023 (DPDPA)
India's Digital Personal Data Protection Act 2023 (DPDPA) is the most significant Indian data law since IT Act 2000. Enf…
South Korea Personal Information Protection Act (PIPA) + AI Basic Act 2024
South Korea's PIPA (Personal Information Protection Act) is one of Asia's most comprehensive privacy laws, significantly…
Latin America(3)
Colombia — AI Framework under Habeas Data (SIC)
Colombia's SIC (Superintendencia de Industria y Comercio) Circular 002 of 2023 addresses AI automated decision-making an…
Peru Personal Data Protection Law No. 29733
Peru's PDPL (No. 29733, updated 2021) and National AI Strategy (DS 009-2021-PCM) apply to organizations processing Peruv…
Mexico Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) + AI Governance
The LFPDPPP is Mexico's primary data protection law enforced by INAI (National Institute for Transparency, Access to Inf…
Africa(2)
Morocco Law 09-08 on Personal Data Protection + National AI Strategy 2030
Morocco's Law 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data (2009) and its imple…
Nigeria Data Protection Regulation (NDPR 2019) + Nigeria Data Protection Act 2023
Nigeria has Africa's most comprehensive data protection framework. The Nigeria Data Protection Regulation (NDPR 2019) wa…
Middle East / Africa(1)
NZ(2)
New Zealand — Privacy Act 2020 + Algorithm Charter (Monitoring for Mandatory AI Law)
New Zealand has no standalone mandatory AI law as of April 2026, but two overlapping frameworks apply. (1) Privacy Act 2…
New Zealand — Privacy Act 2020 + Algorithm Charter + OPC AI Guidance
New Zealand's Privacy Act 2020 regulates AI systems that process personal information of New Zealand residents. The Priv…
US-FL(2)
Florida — No Specific AI Law (Federal Laws Apply)
Florida has no comprehensive AI regulation as of April 2026. Florida SB 692 / HB 1459 (2024, AI labeling + impact assess…
Florida HB 1459 — Government Technology Modernization Act (AI Provisions)
Florida HB 1459 (Government Technology Modernization Act), signed by Governor DeSantis in June 2024, effective July 1, 2…
US-GA(2)
Georgia SB 540 — AI Chatbot Disclosure & Child Safety (AWAITING GOVERNOR SIGNATURE)
Georgia SB 540 passed the Georgia Legislature with broad bipartisan support (March 27, 2026 final vote) and is awaiting …
Georgia SB 540 — AI Chatbot Disclosure Act (Pending Signature)
Georgia SB 540 passed with bipartisan support and awaits Governor Kemp signature (deadline May 12, 2026). Requires comme…
US-ID(2)
Idaho Conversational AI Safety Act (S 1297)
Idaho S 1297, the Conversational AI Safety Act, was signed by Governor Brad Little on March 31, 2026, with immediate eff…
Idaho S 1227 — Generative AI in Education Framework Act
Idaho S 1227 was signed by Governor Little on March 27, 2026, and takes effect July 1, 2026. The law requires Idaho's St…
US-LA(2)
Louisiana — No Specific AI Law (Federal Laws Apply)
Louisiana has no comprehensive private-sector AI regulation as of April 2026. Louisiana HB 608 (2023) applies only to go…
Louisiana HB 697 — AI Disclosure for Government Services
Louisiana Act No. 378 (signed July 2024, effective August 1, 2025) requires Louisiana state agencies and their contracto…
US-MN(2)
Minnesota — No Specific AI Law (Federal Laws Apply)
Minnesota has no comprehensive AI regulation as of April 2026. Minnesota SF 1886 / HF 2690 (2024, AI transparency and co…
Minnesota AI Disclosure Laws — Election Content + Employment AI
Minnesota has passed targeted AI disclosure laws in 2023-2024. (1) SF 3240 / HF 4352 (2024, effective August 1, 2024): r…
US-NE(2)
Nebraska — LB 525 Conversational AI Safety Act (AWAITING GOVERNOR SIGNATURE — expected by Apr 17)
Nebraska LB 525 (Conversational AI Safety Act + Agricultural Data Privacy Act) passed the unicameral legislature on Apri…
Nebraska LB 525 — Consumer AI Protection Act
Nebraska LB 525 passed the unicameral legislature in April 2026, expected to be signed by Governor Pillen before April 1…
US-TN(2)
Tennessee ELVIS Act — Ensuring Likeness Voice and Image Security
Tennessee's ELVIS Act (SB 2659, effective July 1, 2024) was the first US law specifically protecting individuals' voices…
Tennessee Health Care AI Accountability Act (SB 1580)
Tennessee SB 1580, signed by Governor Bill Lee on April 1, 2026, prohibits AI systems from advertising or representing t…
US-TX(2)
Texas Responsible AI Governance Act (TRAIGA / HB 149)
Texas HB 149 (TRAIGA), signed June 22, 2025, prohibits specific harmful AI practices and imposes disclosure obligations …
Texas SB 441 — AI Nonconsensual Intimate Visual Materials
Texas SB 441 (signed June 20, 2025, effective September 1, 2025) makes it a criminal offense and creates civil liability…
US-UT(4)
Utah Artificial Intelligence Policy Act (SB 149 + HB 452)
Utah was the first US state to pass AI-focused consumer protection legislation. The AI Policy Act (SB 149, effective May…
Utah SB 319 — Health Insurance AI Disclosure in Prior Authorization
Utah SB 319 was signed by the Governor on March 19, 2026. The law amends Utah's health insurance preauthorization statut…
Utah HB 276 — Digital Voyeurism Prevention & AI Content Provenance
Utah HB 276 was signed by Governor Cox on March 24, 2026, and takes effect approximately May 23, 2026 (60 days post-sign…
Utah SB 256 — Defamation and Identity Protection Amendments (AI Content)
Utah SB 256, signed ~March 2026 and effective ~May 2026, expressly extends Utah defamation law to cover AI-generated and…
US-WA(3)
Washington State AI Companion Chatbot Regulation (HB 2225)
Washington HB 2225, signed by Governor Ferguson on March 24, 2026, regulates AI companion chatbots — AI systems with nat…
Washington AI-Generated Content Disclosure Act (HB 1170)
Washington HB 1170, signed by Governor Bob Ferguson in March 2026, requires large technology companies to provide AI-gen…
Washington SB 5395 — AI in Health Insurance Prior Authorization
Washington SB 5395 (signed by Governor Ferguson, effective June 11, 2026) prohibits health insurance carriers and Washin…
Don't read every regulation manually
Answer 15 questions about your business and ComplianceIQ tells you exactly which of these 157 regulations apply — and what you need to do.
Start free compliance scan