AI regulation by country

Voluntary AI Ethics Framework with a proposed mandatory guardrails regime for high-risk AI.

Bill 2338/2023 advances a risk-based AI framework; LGPD already applies to personal data.

Canada's Artificial Intelligence and Data Act (AIDA) is part of Bill C-27, moving through Parliament.

Targeted AI rules including generative AI, deep synthesis, and algorithmic recommendations.

EU AI Act applies; CNIL is a leading European AI oversight authority.

EU AI Act applies; Germany also has strong national data protection enforcement.

Digital Personal Data Protection Act in force; AI-specific regulation is developing.

EU AI Act applies; Ireland is the EU lead regulator for many global tech firms.

Sectoral AI guidance with a policy emphasizing responsible innovation.

EU AI Act applies; the Garante has been notably active on generative AI.

A soft-law approach with comprehensive AI guidelines from METI and government.

Federal data protection law applies; AI-specific bills are under discussion.

EU AI Act applies; Dutch Autoriteit Persoonsgegevens focuses heavily on algorithmic oversight.

Model AI Governance Framework and AI Verify — globally recognized tooling for trustworthy AI.

POPIA in force; national AI policy framework under development.

The AI Basic Act (framework legislation) advances alongside strong data protection rules.

EU AI Act applies; Spain was first to set up a dedicated national AI agency (AESIA).

National AI Strategy 2031 with sector rules and a dedicated AI minister.

A pro-innovation, principles-based approach using existing regulators rather than a single AI law.

Sectoral federal rules, state laws (Colorado, California, etc.), and NIST guidance — no single national AI law yet.