id,jurisdiction,level,region,main_law,status,approach,key_dates,deadlines_2026_2027,max_penalty,max_penalty_usd,pct_turnover,enforcer,source_url,source_url_2,verified_on,note
EU,European Union,Supranational,Europe,"EU AI Act (Reg. 2024/1689), as amended by the Digital Omnibus on AI (Reg. 2026/1744)",in force,risk-based,In force 1 Aug 2024; prohibitions + AI literacy 2 Feb 2025; GPAI 2 Aug 2025; general application 2 Aug 2026; Omnibus in force 27 Jul 2026,2 Dec 2026: nudification/CSAM ban + AI-content marking for systems placed before 2 Aug 2026; 2 Aug 2027: national sandboxes; 2 Dec 2027: Annex III high-risk; 2 Aug 2028: Annex I high-risk,EUR 35M or 7% of global turnover (prohibited practices); EUR 15M/3% other obligations,38500000,7,European AI Office (GPAI) + national market-surveillance authorities,https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai,https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-99,2026-10-27,Omnibus delayed Annex III by 16 months and Annex I by 12 months; added a ban on nudification/CSAM generators.
IT,Italy,National (EU member),Europe,Law No. 132/2025 on AI (national layer on top of the EU AI Act),in force,principles + sector rules (plus EU risk-based),Published 25 Sep 2025; in force 10 Oct 2025,EU AI Act dates apply; implementing decrees under government delegations,Criminal: 1-5 years prison for harmful AI deepfakes (Art. 612-quater c.p.); AI-aided market manipulation 2-7 years + fine up to EUR 6M,6600000,0,AgID and ACN (national AI authorities); Bank of Italy/CONSOB/IVASS for finance,https://www.gazzettaufficiale.it/eli/id/2025/09/25/25G00143/sg,,2026-10-27,Scored on the national layer only; Italian businesses are also subject to the EU AI Act.
UK,United Kingdom,National,Europe,No AI-specific law; non-statutory principles applied by existing regulators (2023 white paper approach),voluntary,principles/voluntary (sector regulators),Binding frontier-AI rules promised 2024; no AI bill in 13 May 2026 King's Speech,None AI-specific,"None AI-specific (sector law e.g. UK GDPR, Online Safety Act applies)",0,0,"Existing regulators (ICO, Ofcom, FCA, CMA)",https://commonslibrary.parliament.uk/research-briefings/cbp-10003,,2026-10-27,"Commons Library 14 Oct 2026: ""The UK does not have any AI-specific regulation or legislation""."
US,United States (federal),Federal,North America,"No federal AI statute; EO 14365 on state-law preemption (Dec 2025), EO 14409 voluntary frontier-model framework (Jun 2026)",voluntary,state-led (federal deregulation + preemption push),"EO 14365: DOJ AI Litigation Task Force; Commerce review of ""onerous"" state laws (due Mar 2026, unpublished as of mid-Oct 2026 per GMU tracker)",None binding on private sector,None AI-specific,0,0,None AI-specific (FTC/sector agencies under general law),https://www.whitehouse.gov/presidential-actions/2025/12/eliminating-state-law-obstruction-of-national-artificial-intelligence-policy/,https://www.whitehouse.gov/presidential-actions/2026/06/promoting-advanced-artificial-intelligence-innovation-and-security/,2026-10-27,No federal preemption enacted as of Oct 2026; EO 14409 expressly rules out mandatory licensing/preclearance.
US-CA,California,US state,North America,"SB 53 Transparency in Frontier AI Act (scored); plus sectoral laws (e.g. companion chatbots, AI Transparency Act) not scored",in force,frontier-model,Signed 29 Sep 2025; effective 1 Jan 2026,1 Jan 2027: first OES and AG anonymised annual reports; CalCompute framework report,USD 1M per violation (AG civil action),1000000,0,California Attorney General; Office of Emergency Services (incident intake),https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202520260SB53,,2026-10-27,Thresholds: >10^26 FLOP; large developer >USD 500M revenue; incidents to OES within 15 days (24h if imminent).
US-CO,Colorado,US state,North America,SB 26-189 Automated Decision-Making Technology Act (repealed and replaced SB 24-205),passed,sector/use-specific (consequential decisions),"SB 24-205 signed May 2024, delayed, then repealed; SB 26-189 signed 14 May 2026","1 Jan 2027: developer documentation, consumer notices, adverse-outcome explanations, human review; AG rules due",Deceptive trade practice under Colorado Consumer Protection Act (60-day cure until 2030); per-violation amount not verified,20000,0,Colorado Attorney General,https://leg.colorado.gov/bills/sb26-189,,2026-10-27,Original EU-style law never took effect; federal court stayed enforcement Apr 2026 (secondary).
US-TX,Texas,US state,North America,HB 149 Texas Responsible AI Governance Act (TRAIGA),in force,sector/use-specific (prohibited intents),Signed 22 Jun 2025; effective 1 Jan 2026,In force; 36-month sandbox,USD 80k-200k per uncurable violation; USD 2k-40k per day continuing,200000,0,Texas Attorney General (exclusive),https://capitol.texas.gov/BillLookup/History.aspx?LegSess=89R&Bill=HB149,https://capitol.texas.gov/tlodocs/89R/billtext/html/HB00149F.htm,2026-10-27,Cure period; NIST AI RMF compliance is a defence.
US-NY,New York,US state,North America,"RAISE Act (GBS Art. 44-B), as chapter-amended",passed,frontier-model,Signed 19 Dec 2025; chapter amendment Mar 2026,Nov 2026: registration with DIGIT (DFS) begins; 1 Jan 2027: compliance + first disclosure statements,USD 1M first violation; USD 3M subsequent,3000000,0,NY Attorney General; DIGIT office within DFS (oversight),https://www.nysenate.gov/legislation/laws/GBS/1427,https://www.dfs.ny.gov/reports_and_publications/press_releases/pr20260921,2026-10-27,72-hour incident reporting; quarterly catastrophic-risk assessments.
US-IL,Illinois,US state,North America,SB 315 Artificial Intelligence Safety Measures Act (Public Act 104-0538),passed,frontier-model,Signed 6 Jul 2026; effective 1 Jan 2027,1 Jan 2027: disclosure statement + fee; 1 Jan 2028: frontier framework + annual independent audit,"USD 1M first violation; USD 3M subsequent; USD 1,000/day for not filing",3000000,0,"Illinois Attorney General; IEMA-OHS (filings, incidents)",https://www.ilga.gov/documents/legislation/PublicActs/104/104-0538.htm,,2026-10-27,Only US frontier law with mandatory third-party audits.
US-CT,Connecticut,US state,North America,"Public Act 26-15 (Sub. SB 5, ""An Act Concerning Online Safety""): employment ADMT, AI companions, frontier whistleblowers",in force,sector/use-specific,"Signed May 2026; sections effective 1 Jul 2026, 1 Oct 2026",1 Jan 2027: AI companion rules; 1 Jul 2027: sandbox plan; 1 Oct 2027: employee notice (per GMU tracker),"CUTPA enforcement by AG; USD 1,000 per violation (frontier whistleblower sections)",5000,0,Connecticut Attorney General,https://www.cga.ct.gov/2026/act/pa/pdf/2026PA-00015-R00SB-00005-PA.pdf,,2026-10-27,Most provisions effective 1 Oct 2026.
US-UT,Utah,US state,North America,"Artificial Intelligence Policy Act (SB 149, 2024; amended SB 226/SB 332, 2025)",in force,sector/use-specific (GenAI disclosure),Effective 1 May 2024; amendments effective 7 May 2025,1 Jul 2027: Act sunsets unless renewed,"USD 2,500 per violation (administrative fine)",2500,0,Utah Division of Consumer Protection,https://le.utah.gov/Session/2025/bills/enrolled/SB0226.pdf,https://le.utah.gov/~2024/bills/sbillenr/SB0149.pdf,2026-10-27,Disclosure when asked; up-front disclosure for regulated occupations in high-risk interactions.
CA,Canada,National,North America,No AI statute (AIDA died Jan 2025); Bill C-36 Protecting Privacy and Consumer Data Act and Bill C-34 Safe Social Media Act proposed,proposed,principles + privacy-law ADM rules (proposed),AI for All strategy 4 Jun 2026; C-34 tabled 10 Jun 2026; C-36 tabled 15 Jun 2026,None until bills pass,"Proposed: up to C$10M/3% (penalties), C$25M/5% (fines)",0,0,Proposed Digital Safety and Data Protection Commission,https://www.canada.ca/en/innovation-science-economic-development/news/2026/06/government-of-canada-tables-new-legislation-to-protect-childrens-data-strengthen-privacy-and-build-trust-in-the-digital-economy.html,,2026-10-27,Penalties counted as 0 in the index because the bill is not law.
BR,Brazil,National,Latin America,PL 2338/2023 AI Framework bill,proposed,risk-based (proposed),Senate passed 10 Dec 2024; in Chamber since 17 Mar 2025,"Chamber vote expected after Oct 2026 elections (rapporteur, secondary)",Not law,0,0,Proposed national AI system (SIA),https://www.camara.leg.br/proposicoesWeb/fichadetramitacao?idProposicao=2487262,,2026-10-27,"Chamber status: ""Aguardando Parecer do Relator na Comissão Especial""."
CN,China,National,Asia-Pacific,Interim Measures for Generative AI Services (2023); AI content labelling measures (2025); amended Cybersecurity Law with AI article (2026),in force,sector/use-specific (technology-specific rules),GenAI measures 15 Aug 2023; labelling 1 Sep 2025; CSL amendment 1 Jan 2026,In force,"Up to RMB 10M (CSL, especially serious consequences); individuals up to RMB 1M",1400000,0,"Cyberspace Administration of China (with MIIT, public security, broadcasting)",https://www.cac.gov.cn/2025-10/29/c_1763461514768457.htm,https://www.cac.gov.cn/2025-03/14/c_1743654684782215.htm,2026-10-27,Algorithm filing / security assessment regime referenced in labelling measures.
JP,Japan,National,Asia-Pacific,AI Promotion Act (Act No. 53 of 2025) + AI Basic Plan,in force,promotion law (no penalties),"Partly in force 4 Jun 2025; fully 1 Sep 2025; AI Basic Plan Dec 2025, revised 14 Jul 2026",None binding,None (businesses must cooperate with government measures),0,0,AI Strategy Headquarters (Cabinet Office),https://www8.cao.go.jp/cstp/ai/ai_act/ai_act.html,https://www8.cao.go.jp/cstp/ai/ai_plan/ai_plan.html,2026-10-27,
KR,South Korea,National,Asia-Pacific,AI Basic Act (Framework Act on AI Development and Establishment of Trust) + Enforcement Decree,in force,risk-based (high-impact AI),Enacted 21 Jan 2025; in force 22 Jan 2026,Fines and fact-finding deferred for at least one year (earliest end ~22 Jan 2027),KRW 30M administrative fine,21000,0,Ministry of Science and ICT (MSIT),https://www.msit.go.kr/eng/bbs/view.do?sCode=eng&mId=4&mPid=2&bbsSeqNo=42&nttSeqNo=1214,https://www.law.go.kr/LSW/lsSideInfoP.do?docCls=jo&joBrNo=00&joNo=0043&lsiSeq=282791&urlMode=lsScJoRltInfoR,2026-10-27,Foreign operators above thresholds must appoint a domestic representative.
TW,Taiwan,National,Asia-Pacific,Artificial Intelligence Basic Act,in force,promotion law (framework),Passed 23 Dec 2025; promulgated and in force 14 Jan 2026,Jan 2028: regulators to adapt laws and issue risk-based rules (2-year mandate),None in Act,0,0,National Science and Technology Council (competent authority); MODA (risk framework),https://law.nstc.gov.tw/EngLawContent.aspx?id=10099&lan=E,,2026-10-27,
VN,Vietnam,National,Asia-Pacific,Law on Artificial Intelligence No. 134/2025/QH15 + Decree 142/2026,in force,risk-based,Passed 10 Dec 2025; in force 1 Mar 2026,"1 Mar 2027: legacy AI systems comply; 1 Sep 2027: legacy systems in health, education, finance",Set by government decree (no cap in the Law),0,0,Ministry of Science and Technology (focal agency),https://mst.gov.vn/ai-la-cong-cu-ho-tro-quyet-dinh-cuoi-cung-van-la-con-nguoi-19726030111172663.htm,https://static3.luatvietnam.vn/uploaded/vietlawfile/2026/1/law_134_2025_qh15_090126160152.pdf,2026-10-27,Three risk tiers; no prior licensing; classification notified via AI single-window portal.
IN,India,National,Asia-Pacific,IT (Intermediary Guidelines) Amendment Rules 2026 on synthetically generated information; India AI Governance Guidelines (principles),in force,content-labelling + principles,Notified 10 Feb 2026; in force 20 Feb 2026; Governance Guidelines Feb 2026,In force; further labelling amendments consulted Apr-May 2026,Loss of intermediary safe harbour (IT Act s.79); no AI-specific fine,0,0,Ministry of Electronics and IT (MeitY),https://www.pib.gov.in/PressReleasePage.aspx?PRID=2245053&lang=1&reg=1,https://www.meity.gov.in/static/uploads/2025/10/065b6deb585441b5ccdf8be42502a49c.pdf,2026-10-27,
SG,Singapore,National,Asia-Pacific,"Model AI Governance Framework (2020) and Model AI Governance Framework for Agentic AI (Jan 2026, v1.5 May 2026); AI Verify",voluntary,principles/voluntary,Agentic AI framework launched 22 Jan 2026; updated 20 May 2026,None binding,None AI-specific,0,0,"IMDA / PDPC guidance; sector regulators (MAS, HSA)",https://www.imda.gov.sg/resources/press-releases-factsheets-and-speeches/press-releases/2026/new-model-ai-governance-framework-for-agentic-ai,,2026-10-27,
AU,Australia,National,Asia-Pacific,National AI Plan (Dec 2025): existing laws + AI Safety Institute; voluntary Guidance for AI Adoption,voluntary,principles/voluntary,Mandatory-guardrails proposal dropped 2 Dec 2025; AI Safety Institute 2026,"Frontier-AI legislation planned for 2027 (secondary); Privacy Act ADM transparency 10 Dec 2026 (secondary, unverified)",None AI-specific,0,0,Existing regulators; AI Safety Institute (advisory),https://www.industry.gov.au/publications/national-ai-plan,,2026-10-27,
AE,United Arab Emirates,National,Middle East,UAE Charter for the Development and Use of AI (policy); no federal AI statute,voluntary,principles/voluntary,Charter issued 10 Jun 2024; AI and Data Authority approved 14 Jun 2026,None binding,None AI-specific (PDPL applies),0,0,None AI-specific (UAE Data Office for PDPL),https://uaelegislation.gov.ae/en/policy/details/the-uae-charter-for-the-development-and-use-of-artificial-intelligence,https://uaecabinet.ae/en/news/mohammed-bin-rashid-approves-establishing-artificial-intelligence-and-data-authority,2026-10-27,
SA,Saudi Arabia,National,Middle East,"SDAIA AI Ethics Principles, GenAI guidelines, national AI risk management framework (Jul 2026); no AI statute",voluntary,principles/voluntary,Risk framework 14 Jul 2026; 2026 designated Year of AI,None binding (draft Global AI Hub Law not enacted),None AI-specific (PDPL applies),0,0,Saudi Data and AI Authority (SDAIA),https://www.spa.gov.sa/en/N2633781,https://www.spa.gov.sa/en/N2688337,2026-10-27,
KZ,Kazakhstan,National,Central Asia,"Law ""On Artificial Intelligence"" No. 230-VIII",in force,risk-based,Signed 17 Nov 2025; in force 18 Jan 2026,In force (amended Jun 2026),Admin fines up to 200 MRP (~KZT 865k) for repeat labelling breaches by large firms (secondary source),1700,0,Ministry of AI and Digital Development,https://www.gov.kz/org/zhetysu-digital/press/news/details/1143335?lang=ru,https://adilet.zan.kz/rus/docs/Z2500000230,2026-10-27,Prohibited practices; machine-readable labelling of synthetic content.
PE,Peru,National,Latin America,Law 31814 + Regulation DS 115-2025-PCM,in force,risk-based,Law Jul 2023; Regulation published 9 Sep 2025; in force after 90 business days (Jan 2026),"~Sep 2026: national public entities; ~Sep 2027: regional governments, EsSalud, public universities; ~Sep 2028: local governments",None AI-specific,0,0,Presidency of the Council of Ministers (Digital Government Secretariat),https://www.gob.pe/institucion/pcm/normas-legales/7133522-115-2025-pcm,https://busquedas.elperuano.pe/dispositivo/NL/2436426-1,2026-10-27,High-risk impact assessments; obligations for public and private entities.