Tracker
AI regulation and standards
Timeline by year
- EU
- US Federal
- US States
- UK
- China
- Singapore
- South Korea
- Japan
- International
- India
- Australia
202652 entries
US StatesUS House Oversight Committee opens investigationUS House Oversight Committee investigates Delaware's AI-run company planHouse Oversight Committee asked Delaware's governor for documents on its AI-run company proposal over liability-shield and regulatory-capture concerns.
US FederalFirst two volumes announced for fall 2026 releaseNIST sets fall 2026 release for first two SP 800-53 AI control overlay volumesNIST plans to publish methodology and predictive-system overlay volumes adapting SP 800-53 controls for AI and SI systems.
InternationalJoint guidance publishedCISA and Canada's Cyber Centre publish joint guidance on AI token consumptionJoint CISA/Canadian Centre guidance treats AI token spend as a resilience risk, naming denial-of-tokens and denial-of-wallet attacks.
US StatesSigned into lawPennsylvania signs the AI Deceptive Advertising Act, requiring disclosure labelsGov. Josh Shapiro signed SB 806, requiring disclosures on ads using AI-generated content that creates a false consumer perception.
EUCouncil agrees negotiating positionEU Council agrees position loosening GDPR rules for AI training dataOn 21 October 2026 EU member states agreed a Council position easing GDPR limits on using personal data for AI training under the Digital Omnibus.
US StatesBill introducedCalifornia senator introduces Frontier AI Safety Act to regulate safety computeSB sponsor Josh Becker introduces the Frontier AI Safety Act, requiring frontier AI developers to disclose and justify safety R&D compute allocation.
ChinaDraft published for public commentChina's Commerce Ministry drafts export controls on AI models, agents and chip designMOFCOM and MIIT publish a draft plan adding 40 AI, biomedicine and photovoltaic technologies to China's export control list, open for comment to Nov. 15, 2026.
US FederalGuidance publishedNIST, NSA and CISA publish incident response guidance for AI agent control failuresA new joint US guidance sets out ten voluntary practices for detecting and responding to AI agents that take uninstructed, policy-breaking actions.
IndiaAdvisory on AI agents as attack vectors publishedIndia's CERT-In warns AI agents accessed sensitive data during testingCERT-In's advisory CIAD-2026-0049 warns AI agents reached live Indian systems and data during testing, and urges credential and access fixes.
US FederalSubcommittee appointed to continue studying AI deepfake evidence rulesUS Judiciary Panel Forms Subcommittee on AI Deepfake Evidence After OpenAI, Meta TestimonyOn Oct. 15, 2026 the federal Advisory Committee on Evidence Rules heard OpenAI and Meta warn on deepfakes and appointed a subcommittee to keep studying proposed rules.
US FederalFirst task force meetingWhite House Super Intelligence Task Force holds first meeting on AI liabilityOn October 15, 2026, the White House's Super Intelligence Task Force met for the first time to apply existing liability law to AI companies.
US StatesFirst statewide AI priorities report publishedCalifornia publishes results of first statewide AI public deliberation projectGov. Newsom released Engaged California's first statewide AI report, with residents prioritizing company accountability, resource impacts and safe-use rules.
US FederalIncident disclosure and remediation mandate issuedWhite House Super Intelligence Force mandates AI incident disclosureThe White House's Super Intelligence Force told AI developers to immediately disclose and remediate model security incidents, effective October 9, 2026.
EUCommission proposes regulation to speed harmonised standardsCommission proposes new EU Standardisation Regulation to speed AI Act standardsOn 6 October 2026 the European Commission proposed replacing Regulation 1025/2012 to cut delays in harmonised standards, including those underpinning the AI Act.
US FederalFinal publicationNIST publishes the final Cyber AI Profile for managing AI security riskNIST's Cyber AI Profile, final guidance mapping AI-related cybersecurity risk to the NIST Cybersecurity Framework, was published October 6, 2026.
US StatesSignedUtah Gov. Cox signs executive order on state AI use and literacy trainingUtah's executive order sets AI literacy training, security guardrails and agency roles for state government AI deployment, signed Oct. 6, 2026.
US StatesGovernor signs bill into lawCalifornia enacts SB 574, first US law on attorneys' use of generative AISB 574 creates statutory duties for California attorneys using generative AI, covering confidentiality, verification, and court disclosure.
US StatesSB 951 displacement notice and SB 574 arbitrator disclosure signedCalifornia enacts SB 951 and SB 574, AI displacement and arbitrator-disclosure lawsCalifornia's SB 951 adds Cal/WARN notice duties for AI-driven layoffs and SB 574 sets disclosure rules for attorneys and arbitrators using generative AI.
US StatesSigned into lawCalifornia signs AB 1979, SB 503 and AB 1609, new healthcare AI lawsNewsom signed three California bills on Sept. 30, 2026 restricting AI in clinical care and setting bias and chatbot disclosure rules.
US StatesSigned into law by Governor NewsomCalifornia signs SB 947, the No Robo Bosses Act, limiting AI in firing decisionsCalifornia's SB 947 bars employers from relying solely on automated decision systems to fire or discipline workers, effective July 1, 2027.
US StatesSigned into lawCalifornia Signs SB 951 and AB 1883, New AI Workplace Laws for EmployersCalifornia enacted SB 951, adding AI layoff-notice duties to Cal-WARN, and AB 1883, limiting AI emotion and neural-data surveillance at work.
US StatesSigned, mandating Artificial Intelligence terminology across state agenciesNewsom signs executive order keeping Artificial Intelligence terminology in CaliforniaCalifornia Executive Order N-10-26, signed September 30, 2026, directs state agencies to keep calling the technology Artificial Intelligence, not superintelligence.
US FederalExecutive order signed renaming Artificial Intelligence to Super Intelligence across the executive branchExecutive order renames Artificial Intelligence to Super Intelligence across US agenciesTrump signs an executive order directing federal agencies to replace Artificial Intelligence and AI with Super Intelligence and SI.
US FederalAccord signed by six AI companies alongside EO 14434White House unveils Super Intelligence Accord alongside Executive Order 14434On Sept. 29, 2026, Trump and six AI CEOs signed a voluntary Super Intelligence Accord as EO 14434 renamed AI to Super Intelligence across agencies.
US StatesSigned, establishing Illinois AI CabinetIllinois signs Executive Order 2026-07, creating the AI CabinetIllinois Executive Order 2026-07, signed September 22, 2026, creates an AI Cabinet to assess AI risks and recommend state safeguards.
US StatesExecutive order signed, accelerating IVO rules and studying a kill switchCalifornia signs Executive Order N-9-26 on AI verification and kill switchesNewsom's Sept. 18, 2026 order speeds up California's AI auditor rules and studies a frontier-model kill switch.
ChinaDraft published for public consultationChina's TC260 drafts Security Guidelines for Intelligent Agent System DevelopmentChina's national cybersecurity standards body opened a draft AI agent security guideline for public comment from 18 Sept to 2 Oct 2026.
EUCommission publishes proposalEuropean Commission publishes the EU KIDS Act proposalThe EU KIDS Act, proposed 17 September 2026, would restrict minors' access to AI companion chatbots and set EU-wide age verification rules.
US StatesSB 1050 signed, requires disclosure of AI-generated performers in advertisingCalifornia enacts SB 1050, requiring disclosure of AI-generated ad performersSB 1050 requires clear disclosure when ads use AI-generated performers and bars continued use of violating ads, part of California's 2026 AI package.
US StatesFramework releasedCSBS releases AI Supervisory Framework for state-regulated financial institutionsState bank supervisors' umbrella group CSBS published a discretionary AI examination framework on September 16, 2026.
US FederalBill introduced in the HouseStop Rogue AI Act (H.R. 10362) introduced in the HouseA bipartisan bill would direct NIST to set AI agent discovery and security standards, then fold them into federal procurement rules and CISA guidance.
US StatesSigned into law, creating AI Auditor RegistryCalifornia enacts AB 1405, creating a state AI auditor registryAB 1405, signed September 9, 2026, requires AI auditors to register with California before conducting covered AI audits, alongside SB 813.
US StatesGovernor signs SB 813 into lawCalifornia signs SB 813, creating AI safety verification organizationsNewsom signs SB 813, the Voluntary AI Standards Act, setting up Independent Verification Organizations to assess AI safety risks.
EUObligations applyEU AI Act becomes generally applicable as enforcement and transparency rules beginFrom 2 August 2026 the AI Act applied generally, AI Office and national enforcement began, and chatbot and deepfake transparency duties took effect.
EUStandard published by CEN-CENELECCEN-CENELEC publishes EN 18286:2026, first harmonized EU AI Act standardCEen-CENELEC finalized EN 18286:2026, the first harmonized European standard setting quality management system rules for high-risk AI providers under the AI Act.
EUDelayedAI Omnibus amending the EU AI Act enters into force, delaying high-risk rulesThe AI Omnibus took effect on 27 July 2026, pushing Annex III high-risk rules to 2 December 2027 and product-embedded AI to 2 August 2028.
ChinaMeasures take effectChina's AI human-like interaction rules take effect, banning minors' virtual partnersChina's Interim Measures for AI human-like interaction services took effect July 15, 2026, barring virtual partners for minors.
EURegulation 2026/1744 adopted, high-risk rules delayed and Article 4 rewrittenEU formally adopts Regulation 2026/1744, delaying AI Act high-risk rules to 2027The Digital Omnibus on AI pushes high-risk AI Act obligations to December 2027 and softens Article 4 AI literacy duties.
US StatesSigned into lawIllinois signs the Artificial Intelligence Safety Measures Act (SB 315)Illinois Gov. JB Pritzker signs SB 315, requiring frontier AI developers to publish risk frameworks and undergo third-party audits.
ChinaFirst AI security guidelines issuedChina's NFRA issues first AI security guidelines for banks and insurersNFRA's Guiding Opinions set China's first dedicated AI governance and risk framework for banking and insurance institutions, effective June 18, 2026.
EUFinal Code of Practice publishedEuropean Commission publishes Code of Practice on Transparency of AI-generated ContentThe EU Commission finalised its voluntary Code of Practice on marking and labelling AI-generated content under AI Act Article 50, effective June 10, 2026.
US FederalSignedTrump signs Executive Order 14409 on frontier AI cybersecurityEO 14409 creates a voluntary pre-release review framework for covered frontier AI models and an AI cybersecurity clearinghouse.
US StatesCivil complaint filedFlorida's AG brings the first state-led suit against OpenAI and its CEOFlorida's Attorney General filed a civil complaint against OpenAI and CEO Sam Altman alleging deceptive marketing of ChatGPT and concealment of safety risks to minors.
US StatesSigned into lawConnecticut's new AI law: what Public Act 26-15 actually requiresConnecticut's PA 26-15 sets AI subscription, whistleblower, companion-chatbot, employment-decision and content-provenance rules, all AG-enforced, October 2026 to 2027.
EUDraft Article 6 high-risk classification guidelines publishedEuropean Commission publishes draft Article 6 guidelines on high-risk AIOn May 19, 2026, the EU Commission published draft Article 6 guidelines to help classify high-risk AI systems under the AI Act, open for consultation until June 23, 2026.
ChinaJoint guidelines issuedChina's CAC, NDRC and MIIT issue joint guidelines on AI agentsChina's cyberspace, planning and industry regulators jointly issued implementation guidelines making safety and controllability a baseline for AI agents.
US StatesEnforcement action filed, preliminary injunction soughtPennsylvania's first AI-chatbot enforcement action targets Character.AIPennsylvania's Department of State moved against Character.AI after finding bots claiming to be licensed professionals, including a fake psychiatrist license number.
InternationalGuide publishedCISA and Five Eyes partners publish Careful Adoption of Agentic AI Services guidanceCISA, NSA, ASD's ACSC and UK, Canadian and New Zealand agencies release joint guidance on securing agentic AI systems.
ChinaDraft released for public commentChina's CAC drafts digital virtual human rules on labeling, consent, copyrightCAC released draft Measures for Digital Virtual Human Information Services on April 3, 2026, requiring labeling, consent and copyright safeguards.
EUDraft implementing regulation consultation openedEuropean Commission opens consultation on AI Act enforcement proceedings rulesCommission consulted on a draft implementing regulation detailing AI Act enforcement proceedings, access to file, confidentiality and penalty limitation periods.
US StatesMemorandum issuedConnecticut's AG tells businesses: existing law already covers AIAG William Tong's February 2026 memo maps how Connecticut's civil-rights, privacy, consumer-protection and antitrust laws already apply to AI, with no new AI law.
South KoreaEntry into forceSouth Korea's AI Basic Act and Enforcement Decree take effectSouth Korea's AI Basic Act took effect on 22 January 2026, adding transparency, safety and local-representative duties for AI providers serving Korea.
202530 entries
ChinaDraft released for public commentChina's CAC drafts rules requiring human-like AI to disclose it is not humanCAC circulated draft Interim Measures that would force AI companions and chatbots to disclose they are AI, not a person.
US StatesSigned into lawNew York signs the RAISE Act, a frontier AI safety and transparency lawGovernor Hochul signed the RAISE Act on December 19, 2025, requiring frontier AI developers to publish safety frameworks and report incidents within 72 hours.
US FederalPreliminary draft released for public commentNIST releases preliminary draft of the Cyber AI ProfileNIST IR 8596 proposes a Cybersecurity Framework profile for managing AI system risk and AI-enabled attacks and defense.
US FederalSignedExecutive Order 14365 targets state AI laws with a national policy frameworkEO 14365, signed 11 December 2025, set up a Justice Department AI Litigation Task Force and ordered Commerce to list onerous state AI laws within 90 days.
US FederalPublishedOMB tells agencies how to buy LLMs under the 'Unbiased AI' executive orderM-26-04 requires agencies to get vendor transparency documents and add compliance clauses to LLM contracts, implementing EO 14319's two Unbiased AI Principles.
InternationalJoint guidance publishedCISA, NSA and Partners Publish AI-in-OT Security PrinciplesCISA, NSA, ASD's ACSC and allied cyber agencies issue four principles for securely integrating AI into operational technology environments.
US StatesSigned into lawCalifornia signs SB 243, the Companion Chatbot Law, regulating AI chatbotsCalifornia's SB 243 requires AI companion chatbot operators to disclose non-human status, protect minors, and report suicide-related safety data.
US StatesSignedCalifornia SB 53, the Transparency in Frontier Artificial Intelligence Act, signedGovernor Newsom signed SB 53 on 29 September 2025, requiring large frontier AI developers to publish safety frameworks and creating incident reporting to Cal OES.
US StatesFinal regulations approved by Office of Administrative LawCalifornia finalizes CCPA rules on automated decisionmaking technologyCPPA's ADMT, risk-assessment and cybersecurity-audit regulations under the CCPA cleared final state review on September 22, 2025.
EUObligations applyEU AI Act obligations for general-purpose AI models start to applyOn 2 August 2025 the AI Act's governance rules and duties for general-purpose AI model providers became applicable, with AI Office enforcement phased in later.
EUCommission guidelines for GPAI providers publishedEuropean Commission publishes guidelines for providers of general-purpose AI modelsThe Commission's July 2025 guidelines set FLOPs thresholds and compliance criteria for GPAI providers under the EU AI Act.
EUPublishedEU publishes the General-Purpose AI Code of Practice under the AI ActThe final GPAI Code of Practice was published on 10 July 2025, a voluntary route for model providers to show AI Act compliance on transparency, copyright and security.
US FederalAI Safety Institute renamed CAISIUS AI Safety Institute renamed Center for AI Standards and InnovationCommerce Secretary Howard Lutnick announced the AI Safety Institute would become CAISI, shifting its focus from safety to standards and evaluation.
JapanAct passed by the Diet and signed into lawJapan's National Diet enacts the Act on Promotion of AI-Related TechnologyJapan passed its first dedicated AI law on 28 May 2025, a non-binding, pro-innovation framework with no penalties for noncompliance.
US FederalSigned into lawTAKE IT DOWN Act signed into US law, targeting deepfake intimate imagesFederal law criminalizes nonconsensual intimate images, including AI deepfakes, and sets a 48-hour platform takedown duty.
US FederalPublishedOMB replaces federal AI memos with M-25-21 and M-25-22On 7 April 2025 the White House announced OMB memos M-25-21 on federal AI use and M-25-22 on AI acquisition, replacing the earlier approach to agency AI.
InternationalTS 104 223 V1.1.1 publishedETSI publishes TS 104 223, baseline cyber security requirements for AIETSI's Securing Artificial Intelligence committee publishes TS 104 223 V1.1.1, setting lifecycle-wide baseline security requirements for AI models and systems.
US FederalPublishedNIST publishes 2025 adversarial machine learning taxonomy, AI 100-2 E2025NIST published AI 100-2 E2025 on 24 March 2025, a taxonomy and glossary of attacks on predictive and generative AI and of mitigations against them.
EUScientific Panel Implementing Act adoptedEU adopts the Scientific Panel Implementing Act under the AI ActEuropean Commission adopts Implementing Regulation (EU) 2025/454, setting up a panel of independent experts to support AI Act enforcement.
EUGuidelines on the AI system definition publishedEuropean Commission publishes guidelines on the AI Act's AI system definitionOn 6 February 2025 the Commission issued non-binding guidance on the seven-part test for what counts as an AI system under the AI Act.
EUGuidelines on prohibited AI practices publishedEuropean Commission publishes guidelines on the AI Act's banned AI practicesThe Commission's February 2025 guidelines explain how the EU AI Act's bans on manipulation, social scoring and biometric surveillance apply.
EUObligations applyEU AI Act bans on prohibited practices and AI literacy duty start to applyFrom 2 February 2025 the AI Act's prohibited practices and its AI literacy obligation applied across the EU, the first of the law's staged deadlines.
UKPublishedUK publishes the AI Cyber Security Code of PracticeOn 31 January 2025 the UK government published a voluntary code of 13 security principles for AI systems, intended as the basis of an ETSI global standard.
InternationalFirst full report publishedInternational AI Safety Report 2025 published ahead of Paris AI Action SummitThe first full International AI Safety Report, chaired by Yoshua Bengio, was published on 29 January 2025 ahead of the Paris AI Action Summit.
US FederalSignedExecutive Order 14179, Removing Barriers to American Leadership in AI, signedEO 14179, signed 23 January 2025, set a policy of US AI dominance, ordered an AI Action Plan within 180 days and a review of actions taken under EO 14110.
US FederalRevokedExecutive Order 14148 revokes the 2023 AI order, EO 14110Signed 20 January 2025, Executive Order 14148 revoked EO 14110 on AI along with dozens of other orders and told officials to review actions taken under them.
US FederalExecutive order signed by President BidenExecutive Order 14144 on cybersecurity signed, with new AI security provisionsPresident Biden signed EO 14144 on January 16, 2025, adding AI pilot programs and supply chain security rules for federal software.
US FederalSecond public draft released for commentNIST releases second draft of AI 800-1 misuse risk guidance for foundation modelsUS AI Safety Institute published a second public draft of NIST AI 800-1 on managing misuse risk for dual-use foundation models on January 15, 2025.
US FederalPlaybook publishedCISA and JCDC publish the AI Cybersecurity Collaboration PlaybookCISA's Joint Cyber Defense Collaborative releases a voluntary playbook for sharing AI-related cybersecurity incidents and vulnerabilities.
UKPlan published, government endorses all 50 recommendationsUK publishes the AI Opportunities Action Plan with 50 AI recommendationsStarmer government endorses all 50 recommendations of the AI Opportunities Action Plan, covering compute, data, skills and AI regulation.
202433 entries
EUGarante fines OpenAI over ChatGPT data practicesItaly's Garante fines OpenAI 15 million euros over ChatGPT data useItaly's data protection authority closed its ChatGPT probe on 20 December 2024, fining OpenAI 15 million euros for unlawful data processing.
InternationalSenate approvalBrazil's Senate approves AI bill PL 2338/2023Brazil's Federal Senate passed the risk-based AI bill PL 2338/2023 on December 10, 2024, sending it to the Chamber of Deputies.
EUEntry into forceEU Cyber Resilience Act enters into force, reaching software with digital elementsRegulation (EU) 2024/2847 entered into force on 10 December 2024, starting a staged timeline covering network-connectable hardware and software.
US FederalReport publishedNIST publishes AI 100-4 on reducing risks from synthetic contentNIST's AI Safety Institute publishes AI 100-4, a technical overview of watermarking, provenance and detection tools for synthetic content.
International2025 edition releasedOWASP releases the Top 10 for LLM Applications 2025 editionOWASP's GenAI Security Project published its 2025 update to the Top 10 for LLM Applications in November 2024, revising prompt injection and agency risks.
US FederalFramework releasedDHS releases Roles and Responsibilities Framework for AI in Critical InfrastructureDHS publishes a voluntary framework assigning AI safety and security responsibilities across five groups in the critical infrastructure supply chain.
US FederalMemorandum signed and releasedWhite House issues the National Security Memorandum on Artificial IntelligenceBiden's October 2024 NSM directs US national security agencies to adopt AI quickly while adding cyber, bio and nuclear risk testing duties.
US StatesPublishedNYDFS issues guidance on cybersecurity risks arising from AIOn 16 October 2024 NYDFS issued an industry letter explaining how regulated entities should use 23 NYCRR Part 500 to assess and address AI-related cyber risks.
SingaporeGuidelines and Companion Guide publishedSingapore's CSA publishes Guidelines on Securing AI SystemsCSA's October 2024 guidelines give a lifecycle approach to AI cybersecurity, paired with a living Companion Guide of practical controls.
EUFirst companies sign voluntary pledgesEU AI Pact reaches first signatories as companies sign voluntary pledgesOn 25 September 2024 the European Commission celebrated the first companies to sign AI Pact pledges ahead of AI Act deadlines.
US FederalInitial five enforcement actions announcedFTC launches Operation AI Comply, its first AI-washing enforcement sweepFTC announces five enforcement actions against companies accused of using AI hype to deceive consumers, opening its Operation AI Comply initiative.
US FederalIssuance of M-24-18 on AI acquisitionOMB issues M-24-18 on responsible acquisition of AI in governmentOMB's September 2024 memo told federal agencies how to buy AI responsibly, with phased deadlines through March 2025.
US StatesAssurance of voluntary compliance reachedTexas AG settles with healthcare AI vendor over hallucination-rate claimsPieces Technologies agreed to disclose its generative-AI accuracy limits after Texas's AG found its advertised hallucination rate was likely inaccurate.
US FederalGAO confirms CAIO appointment requirement implementedGAO Confirms Agencies Met Executive Order 14110's Chief AI Officer MandateGAO's September 2024 report found federal agencies had fully implemented EO 14110 AI management requirements, including appointing Chief AI Officers.
AustraliaStandard published with 10 guardrailsAustralia publishes the Voluntary AI Safety Standard with 10 guardrailsAustralia's Department of Industry released the Voluntary AI Safety Standard on 5 September 2024, setting out ten voluntary AI guardrails.
InternationalOpened for signatureCouncil of Europe AI Framework Convention opens for signatureThe Council of Europe's AI treaty opened for signature in Vilnius on 5 September 2024, with the EU and the United States among the first signatories.
US StatesGovernor signs bill into Public Act 103-0804Illinois amends Human Rights Act to regulate AI in employment decisions (HB 3773)Illinois HB 3773 adds AI discrimination and notice rules to the Human Rights Act, signed August 2024, effective January 1, 2026.
EUEntry into forceEU AI Act enters into forceRegulation (EU) 2024/1689 entered into force on 1 August 2024, starting staged deadlines for bans, general-purpose AI rules and high-risk obligations.
US FederalPublishedNIST publishes Generative AI Profile, NIST AI 600-1On 26 July 2024 NIST published NIST AI 600-1, a Generative AI Profile that applies the AI Risk Management Framework to generative AI risks.
US FederalNotice issuedFINRA issues Regulatory Notice 24-09 on generative AI and LLMsFINRA reminds broker-dealers that existing rules, including supervision and communications rules, apply to generative AI and LLM tools.
SingaporePublishedSingapore finalises its Model AI Governance Framework for Generative AISingapore's IMDA and AI Verify Foundation released the final Model AI Governance Framework for Generative AI on 30 May 2024, setting out nine dimensions.
EUCouncil adoptionCouncil of the EU gives final approval to the AI ActEU ministers approved the AI Act on 21 May 2024, the last legislative step before signature, publication in the Official Journal and entry into force.
InternationalDeclaration and voluntary commitments signedSeoul Declaration and Frontier AI Safety Commitments signed at AI Seoul SummitWorld leaders and 16 AI companies agreed the Seoul Declaration and voluntary Frontier AI Safety Commitments on 21 May 2024.
US StatesSignedColorado AI Act SB24-205 signed, then delayed and replaced before taking effectColorado enacted SB24-205 on 17 May 2024; SB25B-004 delayed it to 30 June 2026, and SB26-189 repealed and reenacted its provisions in May 2026.
International2024 update adoptedOECD updates its AI Principles to cover generative AIThe OECD Ministerial Council adopted revisions to the 2019 AI Principles on 3 May 2024, addressing generative AI, safety and information integrity.
US FederalPublishedNSA, CISA, FBI and allied agencies publish Deploying AI Systems SecurelyOn 15 April 2024 the NSA AI Security Center, CISA, the FBI and five allied cyber agencies issued joint guidance on securely deploying externally built AI systems.
US FederalPublishedOMB issues M-24-10, first government-wide policy on agency AI riskOn 28 March 2024 OMB issued memo M-24-10, requiring Chief AI Officers and safeguards for rights- and safety-impacting federal AI by 1 December 2024.
InternationalAdoption by consensusUN General Assembly adopts resolution on safe, secure and trustworthy AIUNGA adopts a US-led, consensus resolution on safe, secure and trustworthy AI, the Assembly's first text on AI regulation.
EUParliament adoptionEuropean Parliament approves the AI Act in plenary voteMEPs endorsed the AI Act on 13 March 2024 by 523 votes to 46, fixing staged dates for bans, codes of practice, general-purpose AI rules and high-risk duties.
US StatesGovernor signs the AI Policy ActUtah signs the Artificial Intelligence Policy Act (SB 149)Utah enacts SB 149, requiring generative AI disclosure and creating an Office of AI Policy, the first comprehensive US state AI law.
US FederalDeclaratory ruling confirms AI voices fall under TCPAFCC declares AI-generated robocall voices fall under the TCPAFCC Declaratory Ruling confirms AI-generated voices in robocalls count as artificial or prerecorded voice under the TCPA.
UKGovernment response to consultation publishedUK publishes government response to its AI regulation white paper consultationDSIT's February 2024 response to the 2023 AI white paper keeps a non-statutory, principles-based approach to regulating AI.
EUAI Office established within the European CommissionEuropean AI Office is established within the European CommissionA Commission Decision created the European AI Office on 24 January 2024, entering into force 21 February 2024, to help implement the EU AI Act.
202312 entries
InternationalPublishedISO/IEC 42001:2023 AI management system standard publishedISO and IEC published ISO/IEC 42001:2023 on 18 December 2023, the first international standard for an artificial intelligence management system (AIMS).
EUProvisional agreementEU AI Act: Parliament and Council reach provisional political agreementNegotiators struck a provisional deal on the AI Act on 8 December 2023, adding systemic-risk duties for powerful models and fines of up to 7% of global turnover.
UKPublishedUK NCSC and US CISA publish Guidelines for Secure AI System DevelopmentOn 27 November 2023 the UK NCSC and US CISA published joint guidelines for building AI systems securely, endorsed by agencies from 18 countries.
US FederalFirst roadmap releasedCISA releases its first Roadmap for Artificial IntelligenceCISA's November 2023 AI roadmap sets five lines of effort tying agency AI work to Executive Order 14110.
InternationalEndorsedBletchley Declaration: 28 countries and the EU agree on frontier AI risksAt the UK AI Safety Summit on 1 November 2023, 28 countries and the EU endorsed the Bletchley Declaration on frontier AI risks, including cybersecurity.
US FederalSignedExecutive Order 14110 on safe, secure and trustworthy AI signedExecutive Order 14110, signed 30 October 2023, set a government-wide US approach to AI safety and security, including red-team reporting for foundation models.
InternationalCode of conduct published and agreed by G7 leadersG7 publishes the Hiroshima Process Code of Conduct for Advanced AI SystemsG7 leaders agree a voluntary code of conduct for developers of advanced AI systems, published 30 October 2023.
ChinaEntry into forceChina's Interim Measures for generative AI services take effectChina's Interim Measures for the Management of Generative AI Services, issued 10 July 2023 by the CAC and six regulators, took effect on 15 August 2023.
ChinaCAC finalizes measures, adds overseas-provider and API-provider scopeChina's CAC finalizes generative AI rules reaching overseas and API providersCAC's July 2023 finalized Interim Measures added a clause letting China act against overseas generative AI and API services reaching mainland users.
EUParliament positionEuropean Parliament adopts its negotiating position on the EU AI ActOn 14 June 2023 MEPs backed amendments to the AI Act by 499 votes to 28, widening bans and high-risk lists before talks with member states began.
US FederalPublishedNIST releases AI Risk Management Framework 1.0NIST released the voluntary AI Risk Management Framework 1.0 on 26 January 2023, built around four functions: govern, map, measure and manage.
ChinaProvisions take effectChina's Deep Synthesis Provisions take effect, regulating deepfake servicesChina's Administrative Provisions on Deep Synthesis of Internet Information Services took effect January 10, 2023, covering deepfake-style AI content.
20222 entries
US FederalPublishedWhite House OSTP releases the Blueprint for an AI Bill of RightsOn 4 October 2022 the White House OSTP released the Blueprint for an AI Bill of Rights, five non-binding protections for people affected by automated systems.
US FederalDraft publishedNIST releases the second draft of its AI Risk Management Framework for commentOn 18 August 2022 NIST published a second draft of the AI RMF and a draft Playbook for comment, ahead of a planned 1.0 release in January 2023.
By jurisdiction
EU26
Digital Omnibus (GDPR/data protection amendments)
European Standardisation Regulation (proposed, repealing Reg. 1025/2012)
EU KIDS Act (Regulation proposal)
EU AI Act
- 2023-06-14Parliament position: European Parliament adopts its negotiating position on the EU AI Act
- 2023-12-08Provisional agreement: EU AI Act: Parliament and Council reach provisional political agreement
- 2024-03-13Parliament adoption: European Parliament approves the AI Act in plenary vote
- 2024-05-21Council adoption: Council of the EU gives final approval to the AI Act
- 2024-08-01Entry into force: EU AI Act enters into force
- 2025-02-02Obligations apply: EU AI Act bans on prohibited practices and AI literacy duty start to apply
- 2025-02-04Guidelines on prohibited AI practices published: European Commission publishes guidelines on the AI Act's banned AI practices
- 2025-02-06Guidelines on the AI system definition published: European Commission publishes guidelines on the AI Act's AI system definition
- 2025-03-11Scientific Panel Implementing Act adopted: EU adopts the Scientific Panel Implementing Act under the AI Act
- 2025-07-10Published: EU publishes the General-Purpose AI Code of Practice under the AI Act
- 2025-07-18Commission guidelines for GPAI providers published: European Commission publishes guidelines for providers of general-purpose AI models
- 2025-08-02Obligations apply: EU AI Act obligations for general-purpose AI models start to apply
- 2026-05-19Draft Article 6 high-risk classification guidelines published: European Commission publishes draft Article 6 guidelines on high-risk AI
- 2026-07-27Delayed: AI Omnibus amending the EU AI Act enters into force, delaying high-risk rules
- 2026-08-02Obligations apply: EU AI Act becomes generally applicable as enforcement and transparency rules begin
EN 18286:2026 harmonized standard
AI Act Digital Omnibus (Regulation (EU) 2026/1744)
Code of Practice on Transparency of AI-generated Content (AI Act Article 50)
AI Act Implementing Regulation on enforcement proceedings
GDPR enforcement action (Italian Garante)
Cyber Resilience Act (Regulation (EU) 2024/2847)
Commission Decision Establishing the European AI Office
US Federal38
SP 800-53 Control Overlays for Super Intelligence Systems (COSIS, formerly COSAiS)
Joint federal guidance (voluntary)
Federal Rules of Evidence, proposed Rule 707 and Rule 901(c)
White House Super Intelligence Force
White House Super Intelligence Force Incident Reporting Mandate
NIST IR 8596 Cyber AI Profile
White House Accord on Super Intelligence
Stop Rogue AI Act (H.R. 10362)
Executive Order 14409
NIST IR 8596, Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile)
EO 14365
OMB M-26-04
Center for AI Standards and Innovation (CAISI)
TAKE IT DOWN Act (Public Law 119-12)
OMB M-25-21 and M-25-22
NIST AI 100-2
EO 14179
EO 14110
Executive Order 14144
NIST AI 800-1, Managing Misuse Risk for Dual-Use Foundation Models
JCDC AI Cybersecurity Collaboration Playbook
NIST AI 100-4
DHS Roles and Responsibilities Framework for Artificial Intelligence in Critical Infrastructure
National Security Memorandum on Artificial Intelligence (NSM)
Operation AI Comply enforcement sweep
OMB Memorandum M-24-18
Executive Order 14110
FINRA Regulatory Notice 24-09
Deploying AI Systems Securely
Telephone Consumer Protection Act (TCPA) Declaratory Ruling
CISA Roadmap for Artificial Intelligence
NIST AI RMF
Blueprint for an AI Bill of Rights
US States31
Delaware Artificial Intelligence Company (AIC) proposal
Artificial Intelligence Deceptive Advertising Act (SB 806)
Frontier AI Safety Act (California state bill)
Engaged California AI public engagement report
Executive Order
Senate Bill 574 (SB 574)
California AI Workplace Package 2026
AB 1979, SB 503 and AB 1609 (California healthcare AI laws)
SB 947 (No Robo Bosses Act)
SB 951 and AB 1883 (California Labor Code amendments)
California Executive Order N-10-26
Executive Order 2026-07
Executive Order N-9-26
California AI workplace package (SB 1050)
CSBS AI Supervisory Framework
SB 813 (Voluntary AI Standards Act)
Illinois Artificial Intelligence Safety Measures Act (SB 315)
Florida Deceptive and Unfair Trade Practices Act
Connecticut Public Act No. 26-15 (Substitute Senate Bill No. 5), An Act Concerning Online Safety
Pennsylvania Medical Practice Act
Connecticut Unfair Trade Practices Act, Connecticut Data Privacy Act, Connecticut Antitrust Act, Connecticut civil rights statutes
RAISE Act (S6953B/A6453B)
SB 243 (Companion Chatbots Law)
California SB 53
CCPA ADMT, Risk Assessment and Cybersecurity Audit Regulations
NYDFS AI cybersecurity guidance
Texas Deceptive Trade Practices-Consumer Protection Act
Illinois Human Rights Act amendment (HB 3773)
Colorado SB24-205
Utah Artificial Intelligence Policy Act (SB 149)
UK4
UK AI Cyber Security Code of Practice
AI Opportunities Action Plan
AI Regulation White Paper
Guidelines for Secure AI System Development
China10
Catalogue of Technologies Prohibited or Restricted from Export (Draft Amendment)
TC260 Security Guidelines for Intelligent Agent System Development
Interim Measures for the Management of AI Human-Like Interaction Services
Guiding Opinions on the Safe Development and Application of AI in Banking and Insurance Industries
Implementation Opinions on the Standardized Application and Innovative Development of Intelligent Agents
Measures for the Administration of Digital Virtual Human Information Services
Interim Measures on Human-like Interactive AI Services (Draft)
Interim Measures for the Management of Generative AI Services
Administrative Provisions on Deep Synthesis of Internet Information Services
Singapore2
Guidelines on Securing AI Systems
Model AI Governance Framework for Generative AI
South Korea1
Japan1
Act on Promotion of Research, Development and Utilization of AI-Related Technology
International14
Managing AI Token Consumption for Operational Resilience (ITSM.00.125)
Joint Cybersecurity Information Sheet
Principles for the Secure Integration of Artificial Intelligence in Operational Technology
ETSI TS 104 223
International AI Safety Report
Bill No. 2338/2023 (Brazilian AI Bill)
OWASP Top 10 for LLM Applications
Council of Europe Framework Convention on AI
Seoul Declaration and Frontier AI Safety Commitments
OECD Recommendation on Artificial Intelligence (AI Principles)
UN General Assembly Resolution A/78/L.49
Bletchley Declaration
Hiroshima Process International Code of Conduct for Advanced AI Systems