Policy Monitor
349 AI policies across 63 jurisdictions: laws, regulations, guidelines, standards and strategies. Each page links to the official text and lists every change we have recorded. Sign in to follow a policy and see its changes on your account page.
- Policies
- 349
- Jurisdictions
- 63
- In force
- 321
Top policies
- European UnionRegulationActiveArtificial Intelligence ActThis EU regulation establishes uniform rules for the development, marketing and use of artificial intelligence systems in the union. It applies to AI systems that may impact...155 sectionsChanged 17 October 2026
- European UnionRegulationActiveGeneral Data Protection Regulation (GDPR)The GDPR is a regulation that unifies data privacy rules across European Union member states. It establishes principles for lawful processing of personal data, grants rights to...125 sectionsChanged 10 October 2026
- IndiaLawActiveDigital Personal Data Protection Act, 2023This law regulates the processing of digital personal data in India, establishing rights for individuals to protect their personal information and establishing rules for lawful...9 sectionsChanged 10 October 2026
- United StatesStrategyActiveAmerica's AI Action PlanA comprehensive national strategy outlining the U.S. government's approach to achieving global dominance in artificial intelligence development and deployment. The plan focuses on...34 sectionsChanged 10 October 2026
- United StatesLawActiveConsumer Protections for Artificial IntelligenceThis Colorado law establishes requirements for developers and deployers of high-risk artificial intelligence systems to protect consumers from algorithmic discrimination....Changed 10 October 2026
- United StatesFrameworkActiveAI Risk Management Framework (AI RMF 1.0)NIST developed this voluntary framework to help manage risks associated with artificial intelligence systems and improve their trustworthiness across design, development, use, and...20 sectionsChanged 10 October 2026
- ISO/IECStandardActiveISO/IEC 42001:2023 Artificial Intelligence Management SystemThis international standard sets out requirements and guidance for organizations to establish and maintain a management system for artificial intelligence. It applies to any...2 sectionsChanged 10 October 2026
- South KoreaLawActiveFramework Act on the Development of Artificial Intelligence and the Creation of a Foundation for TrustThis law establishes the foundational framework for developing artificial intelligence technology and industry while building public trust. It applies to AI systems used within...51 sectionsChanged 10 October 2026
- ChinaRegulationActiveInterim Measures for Generative AI Services ManagementThis regulation establishes rules for services that use generative AI to create text, images, audio, and video content for the public in China. It applies to providers and users...29 sectionsChanged 10 October 2026
- United KingdomFrameworkActiveAI regulation: a pro-innovation approachThis white paper presents the UK government's strategy for implementing a balanced, adaptive framework to regulate artificial intelligence. It prioritises innovation and...3 sectionsChanged 10 October 2026
- Council of EuropeLawActiveCouncil of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of LawThis international treaty sets binding principles and requirements for member states to implement regarding AI systems throughout their lifecycle. It applies to government...44 sectionsChanged 19 October 2026
- OECDGuidelineActiveOECD Recommendation on Artificial IntelligenceThe OECD's first intergovernmental standard on AI, adopted in May 2019 and updated in May 2024, sets principles and recommendations to guide the development of innovative and...Changed 10 October 2026
Data protection laws
Search data protection- European UnionRegulationActiveGeneral Data Protection Regulation (GDPR)The GDPR is a regulation that unifies data privacy rules across European Union member states. It establishes principles for lawful processing of personal data, grants rights to...125 sectionsChanged 10 October 2026
- IndiaLawActiveDigital Personal Data Protection Act, 2023This law regulates the processing of digital personal data in India, establishing rights for individuals to protect their personal information and establishing rules for lawful...9 sectionsChanged 10 October 2026
- IndiaRegulationActiveDigital Personal Data Protection Rules, 2025These regulations operationalize the Digital Personal Data Protection Act, 2023 by establishing practical rules for protecting personal data in India's digital environment. They...4 sectionsChanged 10 October 2026
- United StatesLawActiveCalifornia Consumer Privacy Act (as amended)This consumer privacy law grants California residents rights over their personal information held by businesses, including the ability to request disclosure, deletion, and...14 sectionsChanged 10 October 2026
- United StatesRegulationActiveCCPA Updates, Cybersecurity Audits, Risk Assessments, Automated Decisionmaking Technology, and Insurance RegulationsThe California Privacy Protection Agency adopted binding rules that update existing CCPA regulations, establish mandatory risk assessments and annual cybersecurity audits for...Changed 10 October 2026
- United KingdomLawActiveData (Use and Access) Act 2025This UK law restructures how both personal and non-personal data are handled, seeking to promote secure and beneficial data sharing. It creates conditions for digital verification...Changed 13 October 2026
AI-specific laws
All laws and regulations- European UnionRegulationActiveArtificial Intelligence ActThis EU regulation establishes uniform rules for the development, marketing and use of artificial intelligence systems in the union. It applies to AI systems that may impact...155 sectionsChanged 17 October 2026
- South KoreaLawActiveFramework Act on the Development of Artificial Intelligence and the Creation of a Foundation for TrustThis law establishes the foundational framework for developing artificial intelligence technology and industry while building public trust. It applies to AI systems used within...51 sectionsChanged 10 October 2026
- JapanLawActiveAct on Promotion of Research and Development, and Utilisation of AI-related TechnologyThis law promotes innovation in AI technology while managing associated risks. It was partially enacted on June 4, 2025, and fully entered into force on September 1, 2025,...2 sectionsChanged 10 October 2026
- ChinaRegulationActiveInterim Measures for Generative AI Services ManagementThis regulation establishes rules for services that use generative AI to create text, images, audio, and video content for the public in China. It applies to providers and users...29 sectionsChanged 10 October 2026
- ChinaRegulationActiveMeasures for Labeling AI-Generated Synthetic ContentThis regulation requires internet service providers to label content created or synthesized by artificial intelligence with both visible and hidden identifiers. Service providers...14 sectionsChanged 10 October 2026
- ChinaRegulationActiveProvisions on the Administration of Deep Synthesis Internet Information ServicesThis regulation establishes management requirements for internet services using deep synthesis technology, such as deepfakes and synthetic media generation. It applies to all...30 sectionsChanged 10 October 2026
US state and city laws
All United States policies- United StatesLawActiveConsumer Protections for Artificial IntelligenceThis Colorado law establishes requirements for developers and deployers of high-risk artificial intelligence systems to protect consumers from algorithmic discrimination....Changed 10 October 2026
- United StatesLawActiveAutomated Decision-Making TechnologyThis law regulates the development and deployment of automated decision-making systems in consequential decisions affecting employment, housing, finance, insurance, healthcare,...Changed 10 October 2026
- United StatesLawActiveSB 53: Transparency in Frontier Artificial Intelligence ActThis law establishes requirements for companies developing frontier artificial intelligence models to increase transparency, safety, and accountability. It requires large frontier...3 sectionsChanged 18 October 2026
- United StatesLawActiveCalifornia Consumer Privacy Act (as amended)This consumer privacy law grants California residents rights over their personal information held by businesses, including the ability to request disclosure, deletion, and...14 sectionsChanged 10 October 2026
- United StatesRegulationActiveCCPA Updates, Cybersecurity Audits, Risk Assessments, Automated Decisionmaking Technology, and Insurance RegulationsThe California Privacy Protection Agency adopted binding rules that update existing CCPA regulations, establish mandatory risk assessments and annual cybersecurity audits for...Changed 10 October 2026
- United StatesLawActiveSenate Bill 243: Chatbot Safeguards for Minors and Vulnerable UsersThis law establishes safeguards for companion chatbot operators to protect minors and vulnerable users from harmful interactions. It requires operators to prevent exposure to...3 sectionsChanged 10 October 2026
Standards and frameworks
All guidelines and standards- United StatesFrameworkActiveAI Risk Management Framework (AI RMF 1.0)NIST developed this voluntary framework to help manage risks associated with artificial intelligence systems and improve their trustworthiness across design, development, use, and...20 sectionsChanged 10 October 2026
- United StatesFrameworkActiveArtificial Intelligence Risk Management Framework: Generative Artificial Intelligence ProfileThis document provides practical guidance for organizations managing risks specific to generative AI systems, based on the earlier AI Risk Management Framework released in 2023....5 sectionsChanged 10 October 2026
- ISO/IECStandardActiveISO/IEC 42001:2023 Artificial Intelligence Management SystemThis international standard sets out requirements and guidance for organizations to establish and maintain a management system for artificial intelligence. It applies to any...2 sectionsChanged 10 October 2026
- ISO/IECStandardActiveISO/IEC 42005:2025 AI System Impact AssessmentThis standard offers guidance to organisations for assessing how AI systems may influence individuals, communities and broader society. It promotes responsible development and...Changed 10 October 2026
- ISO/IECStandardActiveISO/IEC 42006:2025 - Artificial Intelligence - Requirements for AIMS Audit and Certification BodiesThis international standard specifies competence and operational requirements for organizations that perform independent audits and issue certifications of AI management systems...Changed 10 October 2026
- ISO/IECStandardActiveISO/IEC 27701 Privacy Information Management SystemsThis is an international technical standard that specifies requirements for organizations to establish and maintain a Privacy Information Management System for handling personally...Changed 10 October 2026
All policies
- United Arab EmiratesGuidelineActiveUAE Charter for the Development and Use of Artificial IntelligenceThis charter sets out principles for developing and deploying artificial intelligence to support the UAE's strategic AI objectives. It applies to AI development and use across the...2 sectionsChanged 19 October 2026
- Council of EuropeLawActiveCouncil of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of LawThis international treaty sets binding principles and requirements for member states to implement regarding AI systems throughout their lifecycle. It applies to government...44 sectionsChanged 19 October 2026
- European UnionRegulationActiveDirective on Combating Violence against Women and Domestic ViolenceThis EU Directive establishes a comprehensive legal framework for Member States to address gender-based violence and harm occurring within intimate relationships through criminal...58 sectionsChanged 19 October 2026
- European UnionRegulationInactiveDirective on adapting non-contractual civil liability rules to artificial intelligenceA proposed directive to adapt civil liability rules so that victims harmed by artificial intelligence systems can obtain compensation more easily. It addresses challenges that...9 sectionsChanged 19 October 2026
- European UnionRegulationActiveMedical Device RegulationThis regulation establishes requirements for medical devices placed on the EU market, excluding in vitro diagnostic devices. It applies to manufacturers, notified bodies and...153 sectionsChanged 19 October 2026
- European UnionRegulationActiveDirective on Copyright and Related Rights in the Digital Single MarketThis directive modernizes copyright protection for the digital environment by introducing mandatory exceptions for text and data mining in research and cultural heritage contexts,...41 sectionsChanged 19 October 2026
- European UnionRegulationActiveDirective on privacy and electronic communications (Directive 2002/58/EC)This directive establishes rules for protecting personal data and privacy in the electronic communications sector, covering subscribers and users of publicly available electronic...21 sectionsChanged 19 October 2026
- European UnionRegulationActiveLaw Enforcement DirectiveThis regulation establishes data protection rules for law enforcement and criminal justice authorities across the European Union. It sets standards for how police, judicial and...78 sectionsChanged 19 October 2026
- European UnionRegulationActiveRegulation on the Transparency and Targeting of Political AdvertisingThis EU regulation establishes harmonised rules requiring sponsors and service providers of political advertisements to disclose their identity, funding sources and use of...35 sectionsChanged 19 October 2026
- European UnionRegulationActiveRegulation on machineryThis regulation harmonizes health and safety requirements for machinery across EU member states and replaces an earlier directive. It applies to machinery and related products...75 sectionsChanged 19 October 2026
- United StatesLawActiveVirginia Consumer Data Protection ActThis law establishes requirements for businesses handling residents' personal information. It applies to companies with significant data collection activities or revenue from data...Changed 19 October 2026
- European UnionRegulationActiveDirective (EU) 2024/2831 on Improving Working Conditions in Platform WorkThis directive sets minimum safeguards and rights for individuals working through digital labour platforms across the European Union. It addresses challenges including...38 sectionsChanged 19 October 2026
- European UnionRegulationActiveNIS 2 DirectiveThis directive establishes uniform cybersecurity requirements across the EU to strengthen protection of critical infrastructure and digital services against cyber threats. It...58 sectionsChanged 19 October 2026
- European UnionRegulationActiveCyber Resilience ActThis regulation establishes mandatory security standards that manufacturers must implement when placing digital products on the European market. The framework requires...87 sectionsChanged 19 October 2026
- European UnionRegulationActiveDigital Markets ActThis regulation establishes rules to ensure fair and contestable digital markets, particularly those involving gatekeepers that provide core platform services. It applies to large...60 sectionsChanged 19 October 2026
- European UnionRegulationActiveProduct Liability DirectiveThis regulation establishes liability rules for defective products across the EU, replacing an earlier 1985 directive. It applies to all movable products including software and AI...28 sectionsChanged 19 October 2026
- European UnionRegulationActiveData ActThis EU regulation establishes uniform rules enabling users of connected devices and services to access data generated through their use and share it with third parties. It...61 sectionsChanged 19 October 2026
- NorwayFrameworkActivePortfolio analysis for Enabling technologiesA portfolio analysis document published by the Research Council of Norway covering the enabling technologies research area. The analysis was published in October 2020 and provides...Changed 19 October 2026
- UzbekistanGovernance bodyActiveResearch Institute for the Development of Digital Technologies and Artificial IntelligenceAn institute focused on digital technology and artificial intelligence development was created in Tashkent under the Ministry for Information Technologies and Communications. It...Changed 19 October 2026
- GreeceGovernance bodyActiveSpecial Secretariat of Foresight to the Presidency of GovernmentThe Special Secretariat of Foresight operates as a governance body under the Greek Presidency to conduct strategic analysis and research on future trends and developments across...Changed 19 October 2026
- GreeceStrategyInactiveA Blueprint for Greece's AI TransformationA national strategy developed by Greece's High-Level Advisory Committee on Artificial Intelligence to guide the country's AI development while managing associated risks. The...57 sectionsChanged 19 October 2026
- BrazilLawActiveBill No. 2338 of 2023 on Artificial IntelligenceThis bill establishes a legal framework for artificial intelligence use in Brazil. Authored by Senator Rodrigo Pacheco, the legislation addresses civil responsibility, individual...Changed 19 October 2026
- European UnionRegulationActiveDigital Omnibus on AIThis regulation amends three existing EU rules to streamline how artificial intelligence systems are governed by addressing implementation challenges and reducing compliance...7 sectionsChanged 19 October 2026
- United StatesLawActiveSB 53: Transparency in Frontier Artificial Intelligence ActThis law establishes requirements for companies developing frontier artificial intelligence models to increase transparency, safety, and accountability. It requires large frontier...3 sectionsChanged 18 October 2026