Skip to content
cisonews.ai

Tracker

AI regulation and standards

Every entry is one dated milestone: a law adopted, an order signed or revoked, a standard published, an obligation starting to apply. 129 milestones across 11 jurisdictions, each with its official source.

Timeline by year

202652 entries

  1. cisonews.ai regulation figure: US States US House Oversight Committee opens investigation, 2026-10-26US StatesUS House Oversight Committee opens investigationUS House Oversight Committee investigates Delaware's AI-run company planHouse Oversight Committee asked Delaware's governor for documents on its AI-run company proposal over liability-shield and regulatory-capture concerns.
  2. cisonews.ai regulation figure: US Federal First two volumes announced for fall 2026 release, 2026-10-23US FederalFirst two volumes announced for fall 2026 releaseNIST sets fall 2026 release for first two SP 800-53 AI control overlay volumesNIST plans to publish methodology and predictive-system overlay volumes adapting SP 800-53 controls for AI and SI systems.
  3. cisonews.ai regulation figure: International Joint guidance published, 2026-10-22InternationalJoint guidance publishedCISA and Canada's Cyber Centre publish joint guidance on AI token consumptionJoint CISA/Canadian Centre guidance treats AI token spend as a resilience risk, naming denial-of-tokens and denial-of-wallet attacks.
  4. cisonews.ai regulation figure: US States Signed into law, 2026-10-22US StatesSigned into lawPennsylvania signs the AI Deceptive Advertising Act, requiring disclosure labelsGov. Josh Shapiro signed SB 806, requiring disclosures on ads using AI-generated content that creates a false consumer perception.
  5. cisonews.ai regulation figure: EU Council agrees negotiating position, 2026-10-21EUCouncil agrees negotiating positionEU Council agrees position loosening GDPR rules for AI training dataOn 21 October 2026 EU member states agreed a Council position easing GDPR limits on using personal data for AI training under the Digital Omnibus.
  6. cisonews.ai regulation figure: US States Bill introduced, 2026-10-20US StatesBill introducedCalifornia senator introduces Frontier AI Safety Act to regulate safety computeSB sponsor Josh Becker introduces the Frontier AI Safety Act, requiring frontier AI developers to disclose and justify safety R&D compute allocation.
  7. cisonews.ai regulation figure: China Draft published for public comment, 2026-10-16ChinaDraft published for public commentChina's Commerce Ministry drafts export controls on AI models, agents and chip designMOFCOM and MIIT publish a draft plan adding 40 AI, biomedicine and photovoltaic technologies to China's export control list, open for comment to Nov. 15, 2026.
  8. cisonews.ai regulation figure: US Federal Guidance published, 2026-10-16US FederalGuidance publishedNIST, NSA and CISA publish incident response guidance for AI agent control failuresA new joint US guidance sets out ten voluntary practices for detecting and responding to AI agents that take uninstructed, policy-breaking actions.
  9. cisonews.ai regulation figure: India Advisory on AI agents as attack vectors published, 2026-10-15IndiaAdvisory on AI agents as attack vectors publishedIndia's CERT-In warns AI agents accessed sensitive data during testingCERT-In's advisory CIAD-2026-0049 warns AI agents reached live Indian systems and data during testing, and urges credential and access fixes.
  10. cisonews.ai regulation figure: US Federal Subcommittee appointed to continue studying AI deepfake evidence rules, 2026-10-15US FederalSubcommittee appointed to continue studying AI deepfake evidence rulesUS Judiciary Panel Forms Subcommittee on AI Deepfake Evidence After OpenAI, Meta TestimonyOn Oct. 15, 2026 the federal Advisory Committee on Evidence Rules heard OpenAI and Meta warn on deepfakes and appointed a subcommittee to keep studying proposed rules.
  11. cisonews.ai regulation figure: US Federal First task force meeting, 2026-10-15US FederalFirst task force meetingWhite House Super Intelligence Task Force holds first meeting on AI liabilityOn October 15, 2026, the White House's Super Intelligence Task Force met for the first time to apply existing liability law to AI companies.
  12. cisonews.ai regulation figure: US States First statewide AI priorities report published, 2026-10-13US StatesFirst statewide AI priorities report publishedCalifornia publishes results of first statewide AI public deliberation projectGov. Newsom released Engaged California's first statewide AI report, with residents prioritizing company accountability, resource impacts and safe-use rules.
  13. cisonews.ai regulation figure: US Federal Incident disclosure and remediation mandate issued, 2026-10-09US FederalIncident disclosure and remediation mandate issuedWhite House Super Intelligence Force mandates AI incident disclosureThe White House's Super Intelligence Force told AI developers to immediately disclose and remediate model security incidents, effective October 9, 2026.
  14. cisonews.ai regulation figure: EU Commission proposes regulation to speed harmonised standards, 2026-10-06EUCommission proposes regulation to speed harmonised standardsCommission proposes new EU Standardisation Regulation to speed AI Act standardsOn 6 October 2026 the European Commission proposed replacing Regulation 1025/2012 to cut delays in harmonised standards, including those underpinning the AI Act.
  15. cisonews.ai regulation figure: US Federal Final publication, 2026-10-06US FederalFinal publicationNIST publishes the final Cyber AI Profile for managing AI security riskNIST's Cyber AI Profile, final guidance mapping AI-related cybersecurity risk to the NIST Cybersecurity Framework, was published October 6, 2026.
  16. cisonews.ai regulation figure: US States Signed, 2026-10-06US StatesSignedUtah Gov. Cox signs executive order on state AI use and literacy trainingUtah's executive order sets AI literacy training, security guardrails and agency roles for state government AI deployment, signed Oct. 6, 2026.
  17. cisonews.ai regulation figure: US States Governor signs bill into law, 2026-09-30US StatesGovernor signs bill into lawCalifornia enacts SB 574, first US law on attorneys' use of generative AISB 574 creates statutory duties for California attorneys using generative AI, covering confidentiality, verification, and court disclosure.
  18. cisonews.ai regulation figure: US States SB 951 displacement notice and SB 574 arbitrator disclosure signed, 2026-09-30US StatesSB 951 displacement notice and SB 574 arbitrator disclosure signedCalifornia enacts SB 951 and SB 574, AI displacement and arbitrator-disclosure lawsCalifornia's SB 951 adds Cal/WARN notice duties for AI-driven layoffs and SB 574 sets disclosure rules for attorneys and arbitrators using generative AI.
  19. cisonews.ai regulation figure: US States Signed into law, 2026-09-30US StatesSigned into lawCalifornia signs AB 1979, SB 503 and AB 1609, new healthcare AI lawsNewsom signed three California bills on Sept. 30, 2026 restricting AI in clinical care and setting bias and chatbot disclosure rules.
  20. cisonews.ai regulation figure: US States Signed into law by Governor Newsom, 2026-09-30US StatesSigned into law by Governor NewsomCalifornia signs SB 947, the No Robo Bosses Act, limiting AI in firing decisionsCalifornia's SB 947 bars employers from relying solely on automated decision systems to fire or discipline workers, effective July 1, 2027.
  21. cisonews.ai regulation figure: US States Signed into law, 2026-09-30US StatesSigned into lawCalifornia Signs SB 951 and AB 1883, New AI Workplace Laws for EmployersCalifornia enacted SB 951, adding AI layoff-notice duties to Cal-WARN, and AB 1883, limiting AI emotion and neural-data surveillance at work.
  22. cisonews.ai regulation figure: US States Signed, mandating Artificial Intelligence terminology across state agencies, 2026-09-30US StatesSigned, mandating Artificial Intelligence terminology across state agenciesNewsom signs executive order keeping Artificial Intelligence terminology in CaliforniaCalifornia Executive Order N-10-26, signed September 30, 2026, directs state agencies to keep calling the technology Artificial Intelligence, not superintelligence.
  23. cisonews.ai regulation figure: US Federal Executive order signed renaming Artificial Intelligence to Super Intelligence across the executive branch, 2026-09-29US FederalExecutive order signed renaming Artificial Intelligence to Super Intelligence across the executive branchExecutive order renames Artificial Intelligence to Super Intelligence across US agenciesTrump signs an executive order directing federal agencies to replace Artificial Intelligence and AI with Super Intelligence and SI.
  24. cisonews.ai regulation figure: US Federal Accord signed by six AI companies alongside EO 14434, 2026-09-29US FederalAccord signed by six AI companies alongside EO 14434White House unveils Super Intelligence Accord alongside Executive Order 14434On Sept. 29, 2026, Trump and six AI CEOs signed a voluntary Super Intelligence Accord as EO 14434 renamed AI to Super Intelligence across agencies.
  25. cisonews.ai regulation figure: US States Signed, establishing Illinois AI Cabinet, 2026-09-22US StatesSigned, establishing Illinois AI CabinetIllinois signs Executive Order 2026-07, creating the AI CabinetIllinois Executive Order 2026-07, signed September 22, 2026, creates an AI Cabinet to assess AI risks and recommend state safeguards.
  26. cisonews.ai regulation figure: US States Executive order signed, accelerating IVO rules and studying a kill switch, 2026-09-18US StatesExecutive order signed, accelerating IVO rules and studying a kill switchCalifornia signs Executive Order N-9-26 on AI verification and kill switchesNewsom's Sept. 18, 2026 order speeds up California's AI auditor rules and studies a frontier-model kill switch.
  27. cisonews.ai regulation figure: China Draft published for public consultation, 2026-09-18ChinaDraft published for public consultationChina's TC260 drafts Security Guidelines for Intelligent Agent System DevelopmentChina's national cybersecurity standards body opened a draft AI agent security guideline for public comment from 18 Sept to 2 Oct 2026.
  28. cisonews.ai regulation figure: EU Commission publishes proposal, 2026-09-17EUCommission publishes proposalEuropean Commission publishes the EU KIDS Act proposalThe EU KIDS Act, proposed 17 September 2026, would restrict minors' access to AI companion chatbots and set EU-wide age verification rules.
  29. cisonews.ai regulation figure: US States SB 1050 signed, requires disclosure of AI-generated performers in advertising, 2026-09-16US StatesSB 1050 signed, requires disclosure of AI-generated performers in advertisingCalifornia enacts SB 1050, requiring disclosure of AI-generated ad performersSB 1050 requires clear disclosure when ads use AI-generated performers and bars continued use of violating ads, part of California's 2026 AI package.
  30. cisonews.ai regulation figure: US States Framework released, 2026-09-16US StatesFramework releasedCSBS releases AI Supervisory Framework for state-regulated financial institutionsState bank supervisors' umbrella group CSBS published a discretionary AI examination framework on September 16, 2026.
  31. cisonews.ai regulation figure: US Federal Bill introduced in the House, 2026-09-14US FederalBill introduced in the HouseStop Rogue AI Act (H.R. 10362) introduced in the HouseA bipartisan bill would direct NIST to set AI agent discovery and security standards, then fold them into federal procurement rules and CISA guidance.
  32. cisonews.ai regulation figure: US States Signed into law, creating AI Auditor Registry, 2026-09-09US StatesSigned into law, creating AI Auditor RegistryCalifornia enacts AB 1405, creating a state AI auditor registryAB 1405, signed September 9, 2026, requires AI auditors to register with California before conducting covered AI audits, alongside SB 813.
  33. cisonews.ai regulation figure: US States Governor signs SB 813 into law, 2026-09-09US StatesGovernor signs SB 813 into lawCalifornia signs SB 813, creating AI safety verification organizationsNewsom signs SB 813, the Voluntary AI Standards Act, setting up Independent Verification Organizations to assess AI safety risks.
  34. cisonews.ai regulation figure: EU Obligations apply, 2026-08-02EUObligations applyEU AI Act becomes generally applicable as enforcement and transparency rules beginFrom 2 August 2026 the AI Act applied generally, AI Office and national enforcement began, and chatbot and deepfake transparency duties took effect.
  35. cisonews.ai regulation figure: EU Standard published by CEN-CENELEC, 2026-07-31EUStandard published by CEN-CENELECCEN-CENELEC publishes EN 18286:2026, first harmonized EU AI Act standardCEen-CENELEC finalized EN 18286:2026, the first harmonized European standard setting quality management system rules for high-risk AI providers under the AI Act.
  36. cisonews.ai regulation figure: EU Delayed, 2026-07-27EUDelayedAI Omnibus amending the EU AI Act enters into force, delaying high-risk rulesThe AI Omnibus took effect on 27 July 2026, pushing Annex III high-risk rules to 2 December 2027 and product-embedded AI to 2 August 2028.
  37. cisonews.ai regulation figure: China Measures take effect, 2026-07-15ChinaMeasures take effectChina's AI human-like interaction rules take effect, banning minors' virtual partnersChina's Interim Measures for AI human-like interaction services took effect July 15, 2026, barring virtual partners for minors.
  38. cisonews.ai regulation figure: EU Regulation 2026/1744 adopted, high-risk rules delayed and Article 4 rewritten, 2026-07-08EURegulation 2026/1744 adopted, high-risk rules delayed and Article 4 rewrittenEU formally adopts Regulation 2026/1744, delaying AI Act high-risk rules to 2027The Digital Omnibus on AI pushes high-risk AI Act obligations to December 2027 and softens Article 4 AI literacy duties.
  39. cisonews.ai regulation figure: US States Signed into law, 2026-07-06US StatesSigned into lawIllinois signs the Artificial Intelligence Safety Measures Act (SB 315)Illinois Gov. JB Pritzker signs SB 315, requiring frontier AI developers to publish risk frameworks and undergo third-party audits.
  40. cisonews.ai regulation figure: China First AI security guidelines issued, 2026-06-18ChinaFirst AI security guidelines issuedChina's NFRA issues first AI security guidelines for banks and insurersNFRA's Guiding Opinions set China's first dedicated AI governance and risk framework for banking and insurance institutions, effective June 18, 2026.
  41. cisonews.ai regulation figure: EU Final Code of Practice published, 2026-06-10EUFinal Code of Practice publishedEuropean Commission publishes Code of Practice on Transparency of AI-generated ContentThe EU Commission finalised its voluntary Code of Practice on marking and labelling AI-generated content under AI Act Article 50, effective June 10, 2026.
  42. cisonews.ai regulation figure: US Federal Signed, 2026-06-02US FederalSignedTrump signs Executive Order 14409 on frontier AI cybersecurityEO 14409 creates a voluntary pre-release review framework for covered frontier AI models and an AI cybersecurity clearinghouse.
  43. cisonews.ai regulation figure: US States Civil complaint filed, 2026-06-01US StatesCivil complaint filedFlorida's AG brings the first state-led suit against OpenAI and its CEOFlorida's Attorney General filed a civil complaint against OpenAI and CEO Sam Altman alleging deceptive marketing of ChatGPT and concealment of safety risks to minors.
  44. cisonews.ai regulation figure: US States Signed into law, 2026-05-27US StatesSigned into lawConnecticut's new AI law: what Public Act 26-15 actually requiresConnecticut's PA 26-15 sets AI subscription, whistleblower, companion-chatbot, employment-decision and content-provenance rules, all AG-enforced, October 2026 to 2027.
  45. cisonews.ai regulation figure: EU Draft Article 6 high-risk classification guidelines published, 2026-05-19EUDraft Article 6 high-risk classification guidelines publishedEuropean Commission publishes draft Article 6 guidelines on high-risk AIOn May 19, 2026, the EU Commission published draft Article 6 guidelines to help classify high-risk AI systems under the AI Act, open for consultation until June 23, 2026.
  46. cisonews.ai regulation figure: China Joint guidelines issued, 2026-05-08ChinaJoint guidelines issuedChina's CAC, NDRC and MIIT issue joint guidelines on AI agentsChina's cyberspace, planning and industry regulators jointly issued implementation guidelines making safety and controllability a baseline for AI agents.
  47. cisonews.ai regulation figure: US States Enforcement action filed, preliminary injunction sought, 2026-05-05US StatesEnforcement action filed, preliminary injunction soughtPennsylvania's first AI-chatbot enforcement action targets Character.AIPennsylvania's Department of State moved against Character.AI after finding bots claiming to be licensed professionals, including a fake psychiatrist license number.
  48. cisonews.ai regulation figure: International Guide published, 2026-05-01InternationalGuide publishedCISA and Five Eyes partners publish Careful Adoption of Agentic AI Services guidanceCISA, NSA, ASD's ACSC and UK, Canadian and New Zealand agencies release joint guidance on securing agentic AI systems.
  49. cisonews.ai regulation figure: China Draft released for public comment, 2026-04-03ChinaDraft released for public commentChina's CAC drafts digital virtual human rules on labeling, consent, copyrightCAC released draft Measures for Digital Virtual Human Information Services on April 3, 2026, requiring labeling, consent and copyright safeguards.
  50. cisonews.ai regulation figure: EU Draft implementing regulation consultation opened, 2026-03-12EUDraft implementing regulation consultation openedEuropean Commission opens consultation on AI Act enforcement proceedings rulesCommission consulted on a draft implementing regulation detailing AI Act enforcement proceedings, access to file, confidentiality and penalty limitation periods.
  51. cisonews.ai regulation figure: US States Memorandum issued, 2026-02-25US StatesMemorandum issuedConnecticut's AG tells businesses: existing law already covers AIAG William Tong's February 2026 memo maps how Connecticut's civil-rights, privacy, consumer-protection and antitrust laws already apply to AI, with no new AI law.
  52. cisonews.ai regulation figure: South Korea Entry into force, 2026-01-22South KoreaEntry into forceSouth Korea's AI Basic Act and Enforcement Decree take effectSouth Korea's AI Basic Act took effect on 22 January 2026, adding transparency, safety and local-representative duties for AI providers serving Korea.

202530 entries

  1. cisonews.ai regulation figure: China Draft released for public comment, 2025-12-27ChinaDraft released for public commentChina's CAC drafts rules requiring human-like AI to disclose it is not humanCAC circulated draft Interim Measures that would force AI companions and chatbots to disclose they are AI, not a person.
  2. cisonews.ai regulation figure: US States Signed into law, 2025-12-19US StatesSigned into lawNew York signs the RAISE Act, a frontier AI safety and transparency lawGovernor Hochul signed the RAISE Act on December 19, 2025, requiring frontier AI developers to publish safety frameworks and report incidents within 72 hours.
  3. cisonews.ai regulation figure: US Federal Preliminary draft released for public comment, 2025-12-16US FederalPreliminary draft released for public commentNIST releases preliminary draft of the Cyber AI ProfileNIST IR 8596 proposes a Cybersecurity Framework profile for managing AI system risk and AI-enabled attacks and defense.
  4. cisonews.ai regulation figure: US Federal Signed, 2025-12-11US FederalSignedExecutive Order 14365 targets state AI laws with a national policy frameworkEO 14365, signed 11 December 2025, set up a Justice Department AI Litigation Task Force and ordered Commerce to list onerous state AI laws within 90 days.
  5. cisonews.ai regulation figure: US Federal Published, 2025-12-11US FederalPublishedOMB tells agencies how to buy LLMs under the 'Unbiased AI' executive orderM-26-04 requires agencies to get vendor transparency documents and add compliance clauses to LLM contracts, implementing EO 14319's two Unbiased AI Principles.
  6. cisonews.ai regulation figure: International Joint guidance published, 2025-12-03InternationalJoint guidance publishedCISA, NSA and Partners Publish AI-in-OT Security PrinciplesCISA, NSA, ASD's ACSC and allied cyber agencies issue four principles for securely integrating AI into operational technology environments.
  7. cisonews.ai regulation figure: US States Signed into law, 2025-10-13US StatesSigned into lawCalifornia signs SB 243, the Companion Chatbot Law, regulating AI chatbotsCalifornia's SB 243 requires AI companion chatbot operators to disclose non-human status, protect minors, and report suicide-related safety data.
  8. cisonews.ai regulation figure: US States Signed, 2025-09-29US StatesSignedCalifornia SB 53, the Transparency in Frontier Artificial Intelligence Act, signedGovernor Newsom signed SB 53 on 29 September 2025, requiring large frontier AI developers to publish safety frameworks and creating incident reporting to Cal OES.
  9. cisonews.ai regulation figure: US States Final regulations approved by Office of Administrative Law, 2025-09-22US StatesFinal regulations approved by Office of Administrative LawCalifornia finalizes CCPA rules on automated decisionmaking technologyCPPA's ADMT, risk-assessment and cybersecurity-audit regulations under the CCPA cleared final state review on September 22, 2025.
  10. cisonews.ai regulation figure: EU Obligations apply, 2025-08-02EUObligations applyEU AI Act obligations for general-purpose AI models start to applyOn 2 August 2025 the AI Act's governance rules and duties for general-purpose AI model providers became applicable, with AI Office enforcement phased in later.
  11. cisonews.ai regulation figure: EU Commission guidelines for GPAI providers published, 2025-07-18EUCommission guidelines for GPAI providers publishedEuropean Commission publishes guidelines for providers of general-purpose AI modelsThe Commission's July 2025 guidelines set FLOPs thresholds and compliance criteria for GPAI providers under the EU AI Act.
  12. cisonews.ai regulation figure: EU Published, 2025-07-10EUPublishedEU publishes the General-Purpose AI Code of Practice under the AI ActThe final GPAI Code of Practice was published on 10 July 2025, a voluntary route for model providers to show AI Act compliance on transparency, copyright and security.
  13. cisonews.ai regulation figure: US Federal AI Safety Institute renamed CAISI, 2025-06-03US FederalAI Safety Institute renamed CAISIUS AI Safety Institute renamed Center for AI Standards and InnovationCommerce Secretary Howard Lutnick announced the AI Safety Institute would become CAISI, shifting its focus from safety to standards and evaluation.
  14. cisonews.ai regulation figure: Japan Act passed by the Diet and signed into law, 2025-05-28JapanAct passed by the Diet and signed into lawJapan's National Diet enacts the Act on Promotion of AI-Related TechnologyJapan passed its first dedicated AI law on 28 May 2025, a non-binding, pro-innovation framework with no penalties for noncompliance.
  15. cisonews.ai regulation figure: US Federal Signed into law, 2025-05-19US FederalSigned into lawTAKE IT DOWN Act signed into US law, targeting deepfake intimate imagesFederal law criminalizes nonconsensual intimate images, including AI deepfakes, and sets a 48-hour platform takedown duty.
  16. cisonews.ai regulation figure: US Federal Published, 2025-04-07US FederalPublishedOMB replaces federal AI memos with M-25-21 and M-25-22On 7 April 2025 the White House announced OMB memos M-25-21 on federal AI use and M-25-22 on AI acquisition, replacing the earlier approach to agency AI.
  17. cisonews.ai regulation figure: International TS 104 223 V1.1.1 published, 2025-04InternationalTS 104 223 V1.1.1 publishedETSI publishes TS 104 223, baseline cyber security requirements for AIETSI's Securing Artificial Intelligence committee publishes TS 104 223 V1.1.1, setting lifecycle-wide baseline security requirements for AI models and systems.
  18. cisonews.ai regulation figure: US Federal Published, 2025-03-24US FederalPublishedNIST publishes 2025 adversarial machine learning taxonomy, AI 100-2 E2025NIST published AI 100-2 E2025 on 24 March 2025, a taxonomy and glossary of attacks on predictive and generative AI and of mitigations against them.
  19. cisonews.ai regulation figure: EU Scientific Panel Implementing Act adopted, 2025-03-11EUScientific Panel Implementing Act adoptedEU adopts the Scientific Panel Implementing Act under the AI ActEuropean Commission adopts Implementing Regulation (EU) 2025/454, setting up a panel of independent experts to support AI Act enforcement.
  20. cisonews.ai regulation figure: EU Guidelines on the AI system definition published, 2025-02-06EUGuidelines on the AI system definition publishedEuropean Commission publishes guidelines on the AI Act's AI system definitionOn 6 February 2025 the Commission issued non-binding guidance on the seven-part test for what counts as an AI system under the AI Act.
  21. cisonews.ai regulation figure: EU Guidelines on prohibited AI practices published, 2025-02-04EUGuidelines on prohibited AI practices publishedEuropean Commission publishes guidelines on the AI Act's banned AI practicesThe Commission's February 2025 guidelines explain how the EU AI Act's bans on manipulation, social scoring and biometric surveillance apply.
  22. cisonews.ai regulation figure: EU Obligations apply, 2025-02-02EUObligations applyEU AI Act bans on prohibited practices and AI literacy duty start to applyFrom 2 February 2025 the AI Act's prohibited practices and its AI literacy obligation applied across the EU, the first of the law's staged deadlines.
  23. cisonews.ai regulation figure: UK Published, 2025-01-31UKPublishedUK publishes the AI Cyber Security Code of PracticeOn 31 January 2025 the UK government published a voluntary code of 13 security principles for AI systems, intended as the basis of an ETSI global standard.
  24. cisonews.ai regulation figure: International First full report published, 2025-01-29InternationalFirst full report publishedInternational AI Safety Report 2025 published ahead of Paris AI Action SummitThe first full International AI Safety Report, chaired by Yoshua Bengio, was published on 29 January 2025 ahead of the Paris AI Action Summit.
  25. cisonews.ai regulation figure: US Federal Signed, 2025-01-23US FederalSignedExecutive Order 14179, Removing Barriers to American Leadership in AI, signedEO 14179, signed 23 January 2025, set a policy of US AI dominance, ordered an AI Action Plan within 180 days and a review of actions taken under EO 14110.
  26. cisonews.ai regulation figure: US Federal Revoked, 2025-01-20US FederalRevokedExecutive Order 14148 revokes the 2023 AI order, EO 14110Signed 20 January 2025, Executive Order 14148 revoked EO 14110 on AI along with dozens of other orders and told officials to review actions taken under them.
  27. cisonews.ai regulation figure: US Federal Executive order signed by President Biden, 2025-01-16US FederalExecutive order signed by President BidenExecutive Order 14144 on cybersecurity signed, with new AI security provisionsPresident Biden signed EO 14144 on January 16, 2025, adding AI pilot programs and supply chain security rules for federal software.
  28. cisonews.ai regulation figure: US Federal Second public draft released for comment, 2025-01-15US FederalSecond public draft released for commentNIST releases second draft of AI 800-1 misuse risk guidance for foundation modelsUS AI Safety Institute published a second public draft of NIST AI 800-1 on managing misuse risk for dual-use foundation models on January 15, 2025.
  29. cisonews.ai regulation figure: US Federal Playbook published, 2025-01-14US FederalPlaybook publishedCISA and JCDC publish the AI Cybersecurity Collaboration PlaybookCISA's Joint Cyber Defense Collaborative releases a voluntary playbook for sharing AI-related cybersecurity incidents and vulnerabilities.
  30. cisonews.ai regulation figure: UK Plan published, government endorses all 50 recommendations, 2025-01-13UKPlan published, government endorses all 50 recommendationsUK publishes the AI Opportunities Action Plan with 50 AI recommendationsStarmer government endorses all 50 recommendations of the AI Opportunities Action Plan, covering compute, data, skills and AI regulation.

202433 entries

  1. cisonews.ai regulation figure: EU Garante fines OpenAI over ChatGPT data practices, 2024-12-20EUGarante fines OpenAI over ChatGPT data practicesItaly's Garante fines OpenAI 15 million euros over ChatGPT data useItaly's data protection authority closed its ChatGPT probe on 20 December 2024, fining OpenAI 15 million euros for unlawful data processing.
  2. cisonews.ai regulation figure: International Senate approval, 2024-12-10InternationalSenate approvalBrazil's Senate approves AI bill PL 2338/2023Brazil's Federal Senate passed the risk-based AI bill PL 2338/2023 on December 10, 2024, sending it to the Chamber of Deputies.
  3. cisonews.ai regulation figure: EU Entry into force, 2024-12-10EUEntry into forceEU Cyber Resilience Act enters into force, reaching software with digital elementsRegulation (EU) 2024/2847 entered into force on 10 December 2024, starting a staged timeline covering network-connectable hardware and software.
  4. cisonews.ai regulation figure: US Federal Report published, 2024-11-20US FederalReport publishedNIST publishes AI 100-4 on reducing risks from synthetic contentNIST's AI Safety Institute publishes AI 100-4, a technical overview of watermarking, provenance and detection tools for synthetic content.
  5. cisonews.ai regulation figure: International 2025 edition released, 2024-11-18International2025 edition releasedOWASP releases the Top 10 for LLM Applications 2025 editionOWASP's GenAI Security Project published its 2025 update to the Top 10 for LLM Applications in November 2024, revising prompt injection and agency risks.
  6. cisonews.ai regulation figure: US Federal Framework released, 2024-11-14US FederalFramework releasedDHS releases Roles and Responsibilities Framework for AI in Critical InfrastructureDHS publishes a voluntary framework assigning AI safety and security responsibilities across five groups in the critical infrastructure supply chain.
  7. cisonews.ai regulation figure: US Federal Memorandum signed and released, 2024-10-24US FederalMemorandum signed and releasedWhite House issues the National Security Memorandum on Artificial IntelligenceBiden's October 2024 NSM directs US national security agencies to adopt AI quickly while adding cyber, bio and nuclear risk testing duties.
  8. cisonews.ai regulation figure: US States Published, 2024-10-16US StatesPublishedNYDFS issues guidance on cybersecurity risks arising from AIOn 16 October 2024 NYDFS issued an industry letter explaining how regulated entities should use 23 NYCRR Part 500 to assess and address AI-related cyber risks.
  9. cisonews.ai regulation figure: Singapore Guidelines and Companion Guide published, 2024-10-15SingaporeGuidelines and Companion Guide publishedSingapore's CSA publishes Guidelines on Securing AI SystemsCSA's October 2024 guidelines give a lifecycle approach to AI cybersecurity, paired with a living Companion Guide of practical controls.
  10. cisonews.ai regulation figure: EU First companies sign voluntary pledges, 2024-09-25EUFirst companies sign voluntary pledgesEU AI Pact reaches first signatories as companies sign voluntary pledgesOn 25 September 2024 the European Commission celebrated the first companies to sign AI Pact pledges ahead of AI Act deadlines.
  11. cisonews.ai regulation figure: US Federal Initial five enforcement actions announced, 2024-09-25US FederalInitial five enforcement actions announcedFTC launches Operation AI Comply, its first AI-washing enforcement sweepFTC announces five enforcement actions against companies accused of using AI hype to deceive consumers, opening its Operation AI Comply initiative.
  12. cisonews.ai regulation figure: US Federal Issuance of M-24-18 on AI acquisition, 2024-09-24US FederalIssuance of M-24-18 on AI acquisitionOMB issues M-24-18 on responsible acquisition of AI in governmentOMB's September 2024 memo told federal agencies how to buy AI responsibly, with phased deadlines through March 2025.
  13. cisonews.ai regulation figure: US States Assurance of voluntary compliance reached, 2024-09-18US StatesAssurance of voluntary compliance reachedTexas AG settles with healthcare AI vendor over hallucination-rate claimsPieces Technologies agreed to disclose its generative-AI accuracy limits after Texas's AG found its advertised hallucination rate was likely inaccurate.
  14. cisonews.ai regulation figure: US Federal GAO confirms CAIO appointment requirement implemented, 2024-09-09US FederalGAO confirms CAIO appointment requirement implementedGAO Confirms Agencies Met Executive Order 14110's Chief AI Officer MandateGAO's September 2024 report found federal agencies had fully implemented EO 14110 AI management requirements, including appointing Chief AI Officers.
  15. cisonews.ai regulation figure: Australia Standard published with 10 guardrails, 2024-09-05AustraliaStandard published with 10 guardrailsAustralia publishes the Voluntary AI Safety Standard with 10 guardrailsAustralia's Department of Industry released the Voluntary AI Safety Standard on 5 September 2024, setting out ten voluntary AI guardrails.
  16. cisonews.ai regulation figure: International Opened for signature, 2024-09-05InternationalOpened for signatureCouncil of Europe AI Framework Convention opens for signatureThe Council of Europe's AI treaty opened for signature in Vilnius on 5 September 2024, with the EU and the United States among the first signatories.
  17. cisonews.ai regulation figure: US States Governor signs bill into Public Act 103-0804, 2024-08-09US StatesGovernor signs bill into Public Act 103-0804Illinois amends Human Rights Act to regulate AI in employment decisions (HB 3773)Illinois HB 3773 adds AI discrimination and notice rules to the Human Rights Act, signed August 2024, effective January 1, 2026.
  18. cisonews.ai regulation figure: EU Entry into force, 2024-08-01EUEntry into forceEU AI Act enters into forceRegulation (EU) 2024/1689 entered into force on 1 August 2024, starting staged deadlines for bans, general-purpose AI rules and high-risk obligations.
  19. cisonews.ai regulation figure: US Federal Published, 2024-07-26US FederalPublishedNIST publishes Generative AI Profile, NIST AI 600-1On 26 July 2024 NIST published NIST AI 600-1, a Generative AI Profile that applies the AI Risk Management Framework to generative AI risks.
  20. cisonews.ai regulation figure: US Federal Notice issued, 2024-06-27US FederalNotice issuedFINRA issues Regulatory Notice 24-09 on generative AI and LLMsFINRA reminds broker-dealers that existing rules, including supervision and communications rules, apply to generative AI and LLM tools.
  21. cisonews.ai regulation figure: Singapore Published, 2024-05-30SingaporePublishedSingapore finalises its Model AI Governance Framework for Generative AISingapore's IMDA and AI Verify Foundation released the final Model AI Governance Framework for Generative AI on 30 May 2024, setting out nine dimensions.
  22. cisonews.ai regulation figure: EU Council adoption, 2024-05-21EUCouncil adoptionCouncil of the EU gives final approval to the AI ActEU ministers approved the AI Act on 21 May 2024, the last legislative step before signature, publication in the Official Journal and entry into force.
  23. cisonews.ai regulation figure: International Declaration and voluntary commitments signed, 2024-05-21InternationalDeclaration and voluntary commitments signedSeoul Declaration and Frontier AI Safety Commitments signed at AI Seoul SummitWorld leaders and 16 AI companies agreed the Seoul Declaration and voluntary Frontier AI Safety Commitments on 21 May 2024.
  24. cisonews.ai regulation figure: US States Signed, 2024-05-17US StatesSignedColorado AI Act SB24-205 signed, then delayed and replaced before taking effectColorado enacted SB24-205 on 17 May 2024; SB25B-004 delayed it to 30 June 2026, and SB26-189 repealed and reenacted its provisions in May 2026.
  25. cisonews.ai regulation figure: International 2024 update adopted, 2024-05-03International2024 update adoptedOECD updates its AI Principles to cover generative AIThe OECD Ministerial Council adopted revisions to the 2019 AI Principles on 3 May 2024, addressing generative AI, safety and information integrity.
  26. cisonews.ai regulation figure: US Federal Published, 2024-04-15US FederalPublishedNSA, CISA, FBI and allied agencies publish Deploying AI Systems SecurelyOn 15 April 2024 the NSA AI Security Center, CISA, the FBI and five allied cyber agencies issued joint guidance on securely deploying externally built AI systems.
  27. cisonews.ai regulation figure: US Federal Published, 2024-03-28US FederalPublishedOMB issues M-24-10, first government-wide policy on agency AI riskOn 28 March 2024 OMB issued memo M-24-10, requiring Chief AI Officers and safeguards for rights- and safety-impacting federal AI by 1 December 2024.
  28. cisonews.ai regulation figure: International Adoption by consensus, 2024-03-21InternationalAdoption by consensusUN General Assembly adopts resolution on safe, secure and trustworthy AIUNGA adopts a US-led, consensus resolution on safe, secure and trustworthy AI, the Assembly's first text on AI regulation.
  29. cisonews.ai regulation figure: EU Parliament adoption, 2024-03-13EUParliament adoptionEuropean Parliament approves the AI Act in plenary voteMEPs endorsed the AI Act on 13 March 2024 by 523 votes to 46, fixing staged dates for bans, codes of practice, general-purpose AI rules and high-risk duties.
  30. cisonews.ai regulation figure: US States Governor signs the AI Policy Act, 2024-03-13US StatesGovernor signs the AI Policy ActUtah signs the Artificial Intelligence Policy Act (SB 149)Utah enacts SB 149, requiring generative AI disclosure and creating an Office of AI Policy, the first comprehensive US state AI law.
  31. cisonews.ai regulation figure: US Federal Declaratory ruling confirms AI voices fall under TCPA, 2024-02-08US FederalDeclaratory ruling confirms AI voices fall under TCPAFCC declares AI-generated robocall voices fall under the TCPAFCC Declaratory Ruling confirms AI-generated voices in robocalls count as artificial or prerecorded voice under the TCPA.
  32. cisonews.ai regulation figure: UK Government response to consultation published, 2024-02-06UKGovernment response to consultation publishedUK publishes government response to its AI regulation white paper consultationDSIT's February 2024 response to the 2023 AI white paper keeps a non-statutory, principles-based approach to regulating AI.
  33. cisonews.ai regulation figure: EU AI Office established within the European Commission, 2024-01-24EUAI Office established within the European CommissionEuropean AI Office is established within the European CommissionA Commission Decision created the European AI Office on 24 January 2024, entering into force 21 February 2024, to help implement the EU AI Act.

202312 entries

  1. cisonews.ai regulation figure: International Published, 2023-12-18InternationalPublishedISO/IEC 42001:2023 AI management system standard publishedISO and IEC published ISO/IEC 42001:2023 on 18 December 2023, the first international standard for an artificial intelligence management system (AIMS).
  2. cisonews.ai regulation figure: EU Provisional agreement, 2023-12-08EUProvisional agreementEU AI Act: Parliament and Council reach provisional political agreementNegotiators struck a provisional deal on the AI Act on 8 December 2023, adding systemic-risk duties for powerful models and fines of up to 7% of global turnover.
  3. cisonews.ai regulation figure: UK Published, 2023-11-27UKPublishedUK NCSC and US CISA publish Guidelines for Secure AI System DevelopmentOn 27 November 2023 the UK NCSC and US CISA published joint guidelines for building AI systems securely, endorsed by agencies from 18 countries.
  4. cisonews.ai regulation figure: US Federal First roadmap released, 2023-11-14US FederalFirst roadmap releasedCISA releases its first Roadmap for Artificial IntelligenceCISA's November 2023 AI roadmap sets five lines of effort tying agency AI work to Executive Order 14110.
  5. cisonews.ai regulation figure: International Endorsed, 2023-11-01InternationalEndorsedBletchley Declaration: 28 countries and the EU agree on frontier AI risksAt the UK AI Safety Summit on 1 November 2023, 28 countries and the EU endorsed the Bletchley Declaration on frontier AI risks, including cybersecurity.
  6. cisonews.ai regulation figure: US Federal Signed, 2023-10-30US FederalSignedExecutive Order 14110 on safe, secure and trustworthy AI signedExecutive Order 14110, signed 30 October 2023, set a government-wide US approach to AI safety and security, including red-team reporting for foundation models.
  7. cisonews.ai regulation figure: International Code of conduct published and agreed by G7 leaders, 2023-10-30InternationalCode of conduct published and agreed by G7 leadersG7 publishes the Hiroshima Process Code of Conduct for Advanced AI SystemsG7 leaders agree a voluntary code of conduct for developers of advanced AI systems, published 30 October 2023.
  8. cisonews.ai regulation figure: China Entry into force, 2023-08-15ChinaEntry into forceChina's Interim Measures for generative AI services take effectChina's Interim Measures for the Management of Generative AI Services, issued 10 July 2023 by the CAC and six regulators, took effect on 15 August 2023.
  9. cisonews.ai regulation figure: China CAC finalizes measures, adds overseas-provider and API-provider scope, 2023-07-10ChinaCAC finalizes measures, adds overseas-provider and API-provider scopeChina's CAC finalizes generative AI rules reaching overseas and API providersCAC's July 2023 finalized Interim Measures added a clause letting China act against overseas generative AI and API services reaching mainland users.
  10. cisonews.ai regulation figure: EU Parliament position, 2023-06-14EUParliament positionEuropean Parliament adopts its negotiating position on the EU AI ActOn 14 June 2023 MEPs backed amendments to the AI Act by 499 votes to 28, widening bans and high-risk lists before talks with member states began.
  11. cisonews.ai regulation figure: US Federal Published, 2023-01-26US FederalPublishedNIST releases AI Risk Management Framework 1.0NIST released the voluntary AI Risk Management Framework 1.0 on 26 January 2023, built around four functions: govern, map, measure and manage.
  12. cisonews.ai regulation figure: China Provisions take effect, 2023-01-10ChinaProvisions take effectChina's Deep Synthesis Provisions take effect, regulating deepfake servicesChina's Administrative Provisions on Deep Synthesis of Internet Information Services took effect January 10, 2023, covering deepfake-style AI content.

20222 entries

  1. cisonews.ai regulation figure: US Federal Published, 2022-10-04US FederalPublishedWhite House OSTP releases the Blueprint for an AI Bill of RightsOn 4 October 2022 the White House OSTP released the Blueprint for an AI Bill of Rights, five non-binding protections for people affected by automated systems.
  2. cisonews.ai regulation figure: US Federal Draft published, 2022-08-18US FederalDraft publishedNIST releases the second draft of its AI Risk Management Framework for commentOn 18 August 2022 NIST published a second draft of the AI RMF and a draft Playbook for comment, ahead of a planned 1.0 release in January 2023.

By jurisdiction

EU26

EU AI Act

  1. 2023-06-14Parliament position: European Parliament adopts its negotiating position on the EU AI Act
  2. 2023-12-08Provisional agreement: EU AI Act: Parliament and Council reach provisional political agreement
  3. 2024-03-13Parliament adoption: European Parliament approves the AI Act in plenary vote
  4. 2024-05-21Council adoption: Council of the EU gives final approval to the AI Act
  5. 2024-08-01Entry into force: EU AI Act enters into force
  6. 2025-02-02Obligations apply: EU AI Act bans on prohibited practices and AI literacy duty start to apply
  7. 2025-02-04Guidelines on prohibited AI practices published: European Commission publishes guidelines on the AI Act's banned AI practices
  8. 2025-02-06Guidelines on the AI system definition published: European Commission publishes guidelines on the AI Act's AI system definition
  9. 2025-03-11Scientific Panel Implementing Act adopted: EU adopts the Scientific Panel Implementing Act under the AI Act
  10. 2025-07-10Published: EU publishes the General-Purpose AI Code of Practice under the AI Act
  11. 2025-07-18Commission guidelines for GPAI providers published: European Commission publishes guidelines for providers of general-purpose AI models
  12. 2025-08-02Obligations apply: EU AI Act obligations for general-purpose AI models start to apply
  13. 2026-05-19Draft Article 6 high-risk classification guidelines published: European Commission publishes draft Article 6 guidelines on high-risk AI
  14. 2026-07-27Delayed: AI Omnibus amending the EU AI Act enters into force, delaying high-risk rules
  15. 2026-08-02Obligations apply: EU AI Act becomes generally applicable as enforcement and transparency rules begin

US Federal38

NIST IR 8596, Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile)

  1. 2025-12-16Preliminary draft released for public comment: NIST releases preliminary draft of the Cyber AI Profile

DHS Roles and Responsibilities Framework for Artificial Intelligence in Critical Infrastructure

  1. 2024-11-14Framework released: DHS releases Roles and Responsibilities Framework for AI in Critical Infrastructure

US States31

Connecticut Public Act No. 26-15 (Substitute Senate Bill No. 5), An Act Concerning Online Safety

  1. 2026-05-27Signed into law: Connecticut's new AI law: what Public Act 26-15 actually requires

Connecticut Unfair Trade Practices Act, Connecticut Data Privacy Act, Connecticut Antitrust Act, Connecticut civil rights statutes

  1. 2026-02-25Memorandum issued: Connecticut's AG tells businesses: existing law already covers AI

China10

Guiding Opinions on the Safe Development and Application of AI in Banking and Insurance Industries

  1. 2026-06-18First AI security guidelines issued: China's NFRA issues first AI security guidelines for banks and insurers

Implementation Opinions on the Standardized Application and Innovative Development of Intelligent Agents

  1. 2026-05-08Joint guidelines issued: China's CAC, NDRC and MIIT issue joint guidelines on AI agents

Administrative Provisions on Deep Synthesis of Internet Information Services

  1. 2023-01-10Provisions take effect: China's Deep Synthesis Provisions take effect, regulating deepfake services

Japan1

International14

Principles for the Secure Integration of Artificial Intelligence in Operational Technology

  1. 2025-12-03Joint guidance published: CISA, NSA and Partners Publish AI-in-OT Security Principles

OECD Recommendation on Artificial Intelligence (AI Principles)

  1. 2024-05-032024 update adopted: OECD updates its AI Principles to cover generative AI