AI Regulations Tracker

Criminal prohibition on creating, possessing, or distributing AI-generated imagery indistinguishable from real minors...

Criminal penalties for distributing synthetic intimate content without consent, including AI-generated deepfakes. Eff...

First-of-its-kind AI content ownership law. Establishes default rules: prompt/data providers own resulting content if...

Regulations are effective January 1, 2026. ADMT consumer opt-out and access rights compliance is required by April 1,...

Requires developers of frontier AI models trained above the statutory compute threshold (10^26 FLOPs) to publish safe...

Expands child pornography laws to include content digitally altered or generated by AI. Criminal prohibition.

Requires provenance and detection measures for certain generative AI content. As amended by AB 853 (signed October 13...

Applies to AI chatbots capable of meeting a user's social needs. Requirements include AI disclosure, break reminders...

Expands civil remedies for non-consensual deepfake pornography. Broadens definitions, adds liability for deepfake por...

Prohibits use of common pricing algorithms as part of anticompetitive agreements. Covers any methodology including so...

Requires developers of generative AI systems or services available to Californians to publish high-level documentatio...

AB 3030 (2024) requires healthcare providers to disclose generative AI use to patients and in records. AB 489 (2025)...

Restricts commercial uses of realistic AI-generated replicas of deceased performers' voices or likenesses in audiovis...

Criminalizes creation and distribution of realistic deepfake intimate images without consent, if the creator or distr...

Requires healthcare providers to disclose when generative AI is used in patient interactions and to document that use...

Prohibits defendants in civil actions from asserting that AI acted autonomously as a defense for harm caused through...

Requires social media platforms to provide a mechanism for users to report sexually explicit digital identity theft i...

Makes contract terms unenforceable when they allow digital replicas of a performer without the performer giving speci...

Requires AI disclosure in insurance sector contexts. Sector-specific regulation for insurers using AI in underwriting...

Requires robocalls to disclose when the recording uses a voice generated or significantly altered by generative AI.

Requires disclaimers on AI-generated political advertisements created by political committees. Unlike AB 2839 (struck...

Requires California state agencies to disclose use of generative AI in communications with individuals about governme...

Standardizes the legal definition of artificial intelligence across all California law. Defines AI as an engineered o...

Requires developers and deployers of high-risk AI systems to use reasonable care to protect consumers from algorithmi...

Colorado profiling rules define three tiers: Solely Automated Processing, Human Reviewed Automated Processing, and Hu...

Major CTDPA overhaul signed June 25, 2025. Removes solely from automated decision scope: after July 1, 2026, covered...

Connecticut consumers may opt out of profiling in furtherance of solely automated decisions that produce legal or sim...

First-in-nation state government AI procurement law. Requires state agencies to inventory AI systems, conduct impact...

Grants Delaware consumers the right to opt out of profiling for decisions with legal or significant effects. Opt-out...

Requires informed written consent before collecting biometric data including facial geometry, fingerprints, and voice...

Clarifies that Illinois child pornography laws encompass AI-generated images of minors in sexual acts. AI-generated C...

Makes discriminatory use of AI in employment a civil rights violation under the IHRA. Prohibits AI that has the effec...

Prohibits unauthorized AI-generated digital replicas of individual voices, images, and likenesses. Holds liable anyon...

Restricts AI use in mental health therapy contexts under Illinois WOPRA and related professional standards. Targets A...

Extends nonconsensual intimate image protections to AI-generated deepfakes. Provides civil remedies including statuto...

Requires employers using AI to analyze video interviews to notify candidates, explain how AI is used, and obtain cons...

Protects individual digital voice and likeness in contracts. Contract provisions for digital replica use are unenforc...

Grants Indiana consumers the right to opt out of profiling for decisions with legal or significant effects. Applies t...

Requires disclosure when AI-generated synthetic media is used in political campaign communications in Indiana.

Treats AI-generated depictions of child exploitation equivalently to real CSAM under Iowa criminal code.

Criminal penalties for distributing nonconsensual synthetic intimate content including AI-generated deepfakes.

Grants Kentucky consumers the right to opt out of profiling for decisions producing legal or significant effects. Vir...

Statute effective October 1, 2025, but enforcement does not begin until April 1, 2026. The law does not apply to proc...

Requires AI tools used in healthcare coverage decisions to base determinations on individual patient data, not group...

Expands Maryland's revenge porn statute to cover AI-generated and computer-generated sexual imagery. Strengthens civi...

Prohibits creating facial templates of job applicants during interviews without signed consent. The waiver must inclu...

Requires Maryland state agencies to inventory AI systems, conduct impact assessments, and follow DoIT policies for AI...

Minnesota is the first state privacy law to require controllers to create and maintain a data inventory. The right to...

Criminalizes election deepfakes within 90 days before elections (no disclosure exception, one of the strictest in the...

Grants Montana consumers the right to opt out of profiling for decisions with legal or significant effects. 2025 amen...

Requires deployers of critical infrastructure facilities controlled by AI to develop a risk management policy based o...

Nebraska requires consumer opt-out rights and risk assessments for qualifying profiling and automated decisions with...

Grants New Hampshire consumers the right to opt out of profiling for decisions with legal or significant effects.

Uniquely covers nonprofits with no revenue threshold. Universal opt-out mechanism (UOOM) requirement effective July 1...

Establishes civil and criminal penalties for creating and distributing deepfakes, including AI-manipulated images and...

Requires developers of frontier AI models operating in New York to implement safety protocols, conduct impact assessm...

Requires AI companion operators to disclose AI nature, provide reminders every 3 hours of use, and implement protocol...

Requires businesses to disclose when personalized pricing is set by an algorithm using personal data so consumers kno...

Amends the Right of Publicity law to protect digital replicas of deceased performers. Provides civil remedies for una...

Establishes protections for individuals regarding the use of digital replicas in professional contracts. Requires spe...

Requires conspicuous disclosure in advertisements when AI-generated synthetic performers are used. A synthetic perfor...

Requires employers using automated employment decision tools in NYC to conduct annual independent bias audits and not...

Grants Oregon consumers the right to opt out of profiling for decisions with legal or significant effects. Opt-out li...

Criminal penalties for creating or distributing AI-generated nonconsensual intimate imagery in Oregon. Expands intima...

Requires disclosure statement on political communications containing synthetic media in Oregon elections.

Rhode Island's privacy framework includes consumer rights tied to profiling and automated decisions, including opt-ou...

First enacted US legislation specifically designed to protect musicians from unauthorized AI voice synthesis. Covers...

Grants Tennessee consumers the right to opt out of profiling for decisions with legal or significant effects. First s...

Amends the Texas Capture or Use of Biometric Identifier Act (CUBI) and related Business and Commerce Code provisions...

Criminalizes creating and distributing nonconsensual intimate deepfakes. Creates civil liability for victims. Platfor...

Intent-based liability only: prohibits intentional AI discrimination, behavioral manipulation, and CSAM generation, w...

Texas comprehensive privacy law with profiling provisions. Requires data protection assessments for profiling that pr...

Requires healthcare providers using AI-enabled clinical support features in electronic health record workflows to dis...

Requires Texas state agencies and local governments to inventory AI systems, adopt an AI code of ethics aligned with...

Regulates AI-powered mental health chatbots. Requires clear disclosure that the service is not a human clinician, lim...

SB 332 extended the act's sunset from May 7, 2025 to July 1, 2027. SB 226 NARROWED disclosure requirements (not added...

SB 226 narrowed UAIPA disclosure: general consumer contexts require disclosure only on a clear and unambiguous reques...

Expands Utah's abuse of personal identity law to cover AI-generated deepfakes and digital replicas used for commercia...

Utah's comprehensive privacy law. It is the least restrictive state privacy law regarding profiling and ADM among com...

Grants Virginia consumers the right to opt out of profiling in furtherance of decisions that produce legal or signifi...

Virginia's nonconsensual pornography statute criminalizes dissemination of intimate images created by any means whats...

Enacted as Chapter 157, Laws of 2026; Governor signed March 23, 2026; effective June 11, 2026. AI tools may be used t...

Broad health data privacy law covering health data collected outside HIPAA, including data from health-related AI too...

First-in-nation law requiring AI chatbot operators to disclose AI nature at regular intervals (every 3 hours for adul...

AI content provenance and watermarking requirements for providers with 1 million or more monthly Washington users. Re...

Criminalizes creation and distribution of AI-generated intimate images without consent. Provides civil remedies for v...

Requires clear and conspicuous disclosure when AI-generated or AI-manipulated media is used in political advertising...

Extends Washington's existing forgery and identity theft statutes to cover AI-generated digital likenesses used for f...

NON-BINDING TECHNICAL ASSISTANCE applying existing Title VII law to AI use cases. Not voted on or approved by the ful...

COMPOSITE ENFORCEMENT POSTURE, not a single regulation. The FTC applies existing laws (FTC Act Section 5, COPPA, ECOA...

Requires covered online platforms to remove reported nonconsensual intimate imagery, including AI-generated deepfakes...

Coordinates federal civil litigation strategy on AI-related matters across the Department of Justice. Executive order...

FDA requires pre-market review (510(k), De Novo, PMA) for AI/ML-based software that meets the definition of a medical...

Fair Housing Act disparate impact standard applies to AI-driven tenant screening, lending algorithms, and property va...

NIST AI RMF is a voluntary framework used as a practical benchmark by regulators and lawmakers. NIST released AI RMF...

SEC enforces existing fiduciary duties and disclosure requirements as applied to AI. Pursuing AI washing enforcement...

Established federal policy priorities for AI safety, security, and rights protections across agencies. Directed agenc...

Non-binding principles for AI in the workplace covering transparency, human oversight, informed consent, data protect...