The FINOS AI Governance Framework, mapped to the NIST Generative AI Profile

• Alabama Child Protection Act of 2024, AI-Generated Child Sexual Abuse Material, Alabama
• AI-generated and indistinguishable depictions included in child-exploitation definitions (HB 2678), Arizona
• Unlawful disclosure extended to AI-generated 'realistic pictorial representation' intimate images (SB 1462), Arizona
• Act 159 of 2025 (HB 1071), AI-Generated Replicas Amendment to Publicity Rights Act, Arkansas
• Act 827 of 2025 (HB 1529), Unlawful Creation or Distribution of Deepfake Visual Material, Arkansas
• Act 977 of 2025 (HB 1877), AI-Generated Child Sexual Abuse Material Amendments, Arkansas
• Using a Carriage Service to Transmit Sexual Material Without Consent (Deepfake Offences), Australia
• StGB Section 207a(4)(4), Computer-Generated and Altered Child Sexual Abuse Material, Austria
• Sexual Offences Act, child pornography offence, Bahamas
• Cyber Security Act, 2026, AI-generated sexual content and CSAM ban, Bangladesh

and 135 more, every one in the free file.

• Alabama Child Protection Act of 2024, AI-Generated Child Sexual Abuse Material, Alabama
• AI-generated and indistinguishable depictions included in child-exploitation definitions (HB 2678), Arizona
• Unlawful disclosure extended to AI-generated 'realistic pictorial representation' intimate images (SB 1462), Arizona
• Act 159 of 2025 (HB 1071), AI-Generated Replicas Amendment to Publicity Rights Act, Arkansas
• Act 827 of 2025 (HB 1529), Unlawful Creation or Distribution of Deepfake Visual Material, Arkansas
• Act 977 of 2025 (HB 1877), AI-Generated Child Sexual Abuse Material Amendments, Arkansas
• Using a Carriage Service to Transmit Sexual Material Without Consent (Deepfake Offences), Australia
• StGB Section 207a(4)(4), Computer-Generated and Altered Child Sexual Abuse Material, Austria
• Sexual Offences Act, child pornography offence, Bahamas
• Cyber Security Act, 2026, AI-generated sexual content and CSAM ban, Bangladesh

and 133 more, every one in the free file.

• SB 63 (2026), Artificial Intelligence in Health Insurance Prior Authorization, Alabama
• Attorney, Court Filing and Arbitrator Generative AI Duties (SB 574), California from 1 Jan 2027, in 2 months
• Clinical Decision Support Systems Bias Mitigation Act (SB 503), California from 1 Jan 2027, in 2 months
• Employment Automated Decision Systems Act (SB 947), California from 1 Jul 2027, in 8 months
• Health Care Services Artificial Intelligence Act (AB 1979), California from 1 Jan 2027, in 2 months
• Transparency in Frontier Artificial Intelligence Act (SB 53), California
• CSA Staff Notice 31-342, guidance for portfolio managers regarding online advice, Canada
• OSFI Guideline E-23, Enterprise-Wide Model Risk Management for Deposit-Taking Institutions (2017), Canada
• OSFI Guideline E-23, Model Risk Management (2027), Canada from 1 May 2027, in 6 months
• Amended Regulation 10-1-1 (2025), Governance and Risk Management Framework for Insurers' Use of External Consumer Data and Information Sources, Algorithms, and Predictive Models, Colorado

and 69 more, every one in the free file.

• Council of Europe Framework Convention on Artificial Intelligence, signed by Andorra, Andorra proposed
• Council of Europe Framework Convention on Artificial Intelligence, signed by Armenia, Armenia proposed
• Council of Europe Framework Convention on Artificial Intelligence, signed by Canada, Canada proposed
• Ley de Fomento a la Inteligencia Artificial y Tecnologías, marco institucional, registro y evaluación de riesgos, El Salvador
• AI Act, Article 14 (human oversight), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 26(10) (post-remote biometric identification authorisation), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 26(9) (using Article 13 information for a data protection impact assessment), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 27 (fundamental rights impact assessment), European Union from 2 Dec 2027, in 13 months
• Act XLVII of 1997 on Health Data, Section 35/A(4) to (8), Conditions for AI Development on Electronic Health Service Space Data, Hungary
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy

and 7 more, every one in the free file.

• SB 63 (2026), Artificial Intelligence in Health Insurance Prior Authorization, Alabama
• Amended Regulation 10-1-1 (2025), Governance and Risk Management Framework for Insurers' Use of External Consumer Data and Information Sources, Algorithms, and Predictive Models, Colorado
• HB 26-1139 (2026), Use of Artificial Intelligence in Health Care, Colorado from 1 Jan 2027, in 2 months
• AI Act, Article 26(10) (post-remote biometric identification authorisation), European Union from 2 Dec 2027, in 13 months
• AI Act, Articles 60 and 61 (testing in real world conditions outside AI regulatory sandboxes, with informed consent), European Union
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union
• Gesetz zur Marktüberwachung und Innovationsförderung von künstlicher Intelligenz (KI-MIG), AI Market Surveillance and Innovation Promotion Act, Germany
• Government Decree 344/2025 Implementing the Hungarian AI Act: Designated Authorities, Notified-Body Reports and Fine Ceilings, Hungary
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy
• Central Bank of Jordan Artificial Intelligence Framework for the Banking Sector, Version 1.0, Jordan

and 3 more, every one in the free file.

• AI Act, Article 16 (obligations of providers of high-risk AI systems), European Union from 2 Dec 2027, in 13 months
• Commission Guidelines on the scope of the obligations for providers of general-purpose AI models under the AI Act, European Union
• Financial Services (Robotic and Artificial Intelligence Enabled Advisory Services) Rules 2021, Mauritius
• Digital Transformation Act 2025, ICT service permit for AI and AI-related data services, Vanuatu

• SB 63 (2026), Artificial Intelligence in Health Insurance Prior Authorization, Alabama
• Clinical Decision Support Systems Bias Mitigation Act (SB 503), California from 1 Jan 2027, in 2 months
• Employment Automated Decision Systems Act (SB 947), California from 1 Jul 2027, in 8 months
• Health Care Services Artificial Intelligence Act (AB 1979), California from 1 Jan 2027, in 2 months
• Transparency in Frontier Artificial Intelligence Act (SB 53), California
• CSA Staff Notice 31-342, guidance for portfolio managers regarding online advice, Canada
• OSFI Guideline E-23, Enterprise-Wide Model Risk Management for Deposit-Taking Institutions (2017), Canada
• OSFI Guideline E-23, Model Risk Management (2027), Canada from 1 May 2027, in 6 months
• Loi n° 24.001 portant protection des données à caractère personnel, collecte de données publiquement accessibles et transfert transfrontalier, Central African Republic
• Amended Regulation 10-1-1 (2025), Governance and Risk Management Framework for Insurers' Use of External Consumer Data and Information Sources, Algorithms, and Predictive Models, Colorado

and 70 more, every one in the free file.

• SB 63 (2026), Artificial Intelligence in Health Insurance Prior Authorization, Alabama
• Amended Regulation 10-1-1 (2025), Governance and Risk Management Framework for Insurers' Use of External Consumer Data and Information Sources, Algorithms, and Predictive Models, Colorado
• HB 26-1139 (2026), Use of Artificial Intelligence in Health Care, Colorado from 1 Jan 2027, in 2 months
• AI Act, Article 26(10) (post-remote biometric identification authorisation), European Union from 2 Dec 2027, in 13 months
• AI Act, Articles 60 and 61 (testing in real world conditions outside AI regulatory sandboxes, with informed consent), European Union
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union
• Gesetz zur Marktüberwachung und Innovationsförderung von künstlicher Intelligenz (KI-MIG), AI Market Surveillance and Innovation Promotion Act, Germany
• Government Decree 344/2025 Implementing the Hungarian AI Act: Designated Authorities, Notified-Body Reports and Fine Ceilings, Hungary
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy
• Central Bank of Jordan Artificial Intelligence Framework for the Banking Sector, Version 1.0, Jordan

and 3 more, every one in the free file.

• CCPA Automated Decisionmaking Technology Regulations, California
• Loi n° 24.001 portant protection des données à caractère personnel, collecte de données publiquement accessibles et transfert transfrontalier, Central African Republic
• Consumer Credit Act, Articles 24 and 30, Personalised Offers and Creditworthiness Assessment by Automated Processing, Croatia from 20 Nov 2026, in 4 weeks
• AI Act, Article 14 (human oversight), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 26(10) (post-remote biometric identification authorisation), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 86 (right to explanation of individual decision-making), European Union from 2 Dec 2027, in 13 months
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy
• Decreto Legislativo 160/2026, After-the-Fact Facial Recognition Integrated in Video Surveillance (Art. 10), Italy
• Decreto Legislativo 160/2026, Police Biometric AI: Dataset Labelling and Real-Time Remote Identification (Artt. 7-9, 13), Italy
• Use of artificial intelligence in therapy or psychotherapy services, Maine

and 1 more, every one in the free file.

• AI Act, Article 16 (obligations of providers of high-risk AI systems), European Union from 2 Dec 2027, in 13 months
• Commission Guidelines on the scope of the obligations for providers of general-purpose AI models under the AI Act, European Union
• Financial Services (Robotic and Artificial Intelligence Enabled Advisory Services) Rules 2021, Mauritius
• Digital Transformation Act 2025, ICT service permit for AI and AI-related data services, Vanuatu

• Consumer Credit Act, Articles 24 and 30, Personalised Offers and Creditworthiness Assessment by Automated Processing, Croatia from 20 Nov 2026, in 4 weeks
• Practice Direction No. 1 of 2025, Use of Generative Artificial Intelligence in Court Proceedings, Jamaica
• Central Bank of Jordan Artificial Intelligence Framework for the Banking Sector, Version 1.0, Jordan

• Loi n° 24.001 portant protection des données à caractère personnel, collecte de données publiquement accessibles et transfert transfrontalier, Central African Republic
• Use of artificial intelligence in therapy or psychotherapy services, Maine

• Ordonnance n° 03-05, exception de citation, Algeria
• Copyright and Neighboring Rights Law, Press and Current-Events Reproduction Exception, Andorra
• Copyright Act 1998, compilation and database protection, Bahamas
• Copyright Act 1998, fair dealing for reporting current events and criticism, Bahamas
• Code de droit économique, article XI.190, 20°, exception de fouille de textes et de données, Belgium
• Copyright and Designs Act 2004, fair dealing for criticism, review and reporting current events, Bermuda
• Law on Copyright and Related Rights, Content Limitations (No Text-and-Data-Mining Exception), Bosnia and Herzegovina
• Copyright and Neighbouring Rights Act (ZAPSP), Arts. 26e, 26zh and 26k, Text-and-Data-Mining Exception for Crawling and Training, Bulgaria
• Copyright and Neighbouring Rights Act (ZAPSP), Arts. 90d and 90zh, Press Publisher Right, Bulgaria
• Loi n°048-2019/AN du 12 novembre 2019 portant protection de la propriété littéraire et artistique, database and news exceptions, Burkina Faso

and 41 more, every one in the free file.

• Ordonnance n° 03-05, exception de citation, Algeria
• Code de droit économique, article XI.190, 20°, exception de fouille de textes et de données, Belgium
• Law on Copyright and Related Rights, Content Limitations (No Text-and-Data-Mining Exception), Bosnia and Herzegovina
• Copyright and Neighbouring Rights Act (ZAPSP), Arts. 26e, 26zh and 26k, Text-and-Data-Mining Exception for Crawling and Training, Bulgaria
• Copyright (Cayman Islands) Order 2015, text and data analysis exception, Cayman Islands
• Copyright Act 2013, economic rights, computer program copying, and technological protection measures, Cook Islands
• Autorský zákon Sections 39c-39d, Text and Data Mining Exception for Automated Analysis, Czech Republic
• AI Act, Article 25 (responsibilities along the AI value chain), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 53 (obligations for providers of general-purpose AI models), European Union
• Commission Guidelines on the scope of the obligations for providers of general-purpose AI models under the AI Act, European Union

and 15 more, every one in the free file.

• Ordonnance n° 03-05, exception de citation, Algeria
• Copyright Act 2013, economic rights, computer program copying, and technological protection measures, Cook Islands
• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union
• Loi n°1/87, exception de courte citation et revue de presse, Gabon
• Loi n°1/87, protection des recueils et compilations, Gabon
• Schutz technischer Massnahmen und Durchsetzung von Schrankenbestimmungen (Protection of Technological Measures), Germany
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy
• Decreto-Lei n.º 02/2017, exclusão das notícias do dia, revista de imprensa e citação, Sao Tome and Principe
• Decreto-Lei n.º 02/2017, protecção de compilações e exclusão das notícias do dia, Sao Tome and Principe

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy

• Commission Guidelines on the scope of the obligations for providers of general-purpose AI models under the AI Act, European Union
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy

• Penal Code, Part Twelve, Chapter One (Cyber Crimes and Punishment), Afghanistan
• Alabama Digital Crime Act, Computer Tampering, Alabama
• Criminal mischief in the fourth degree, unauthorized computer access, Alaska
• Criminal use of a computer, Alaska
• Theft of services, unauthorized use of a computer system, Alaska
• Copyright Law, Sui Generis Database Producers Rights, Albania
• Criminal Code, Unauthorized Computer Access, Albania
• Code pénal, atteintes aux systèmes de traitement automatisé de données, Algeria
• Ordonnance n° 03-05, exception de citation, Algeria
• Ordonnance n° 03-05, protection des bases de données, Algeria

and 135 more, every one in the free file.

• Penal Code, Part Twelve, Chapter One (Cyber Crimes and Punishment), Afghanistan
• Alabama Digital Crime Act, Computer Tampering, Alabama
• Criminal mischief in the fourth degree, unauthorized computer access, Alaska
• Criminal use of a computer, Alaska
• Theft of services, unauthorized use of a computer system, Alaska
• Copyright Law, Sui Generis Database Producers Rights, Albania
• Criminal Code, Unauthorized Computer Access, Albania
• Code pénal, atteintes aux systèmes de traitement automatisé de données, Algeria
• Ordonnance n° 03-05, exception de citation, Algeria
• Ordonnance n° 03-05, protection des bases de données, Algeria

and 135 more, every one in the free file.

• Ordonnance n° 03-05, exception de citation, Algeria
• Copyright Act 2013, economic rights, computer program copying, and technological protection measures, Cook Islands
• Loi n°1/87, exception de courte citation et revue de presse, Gabon
• Loi n°1/87, protection des recueils et compilations, Gabon
• Schutz technischer Massnahmen und Durchsetzung von Schrankenbestimmungen (Protection of Technological Measures), Germany
• Decreto-Lei n.º 02/2017, exclusão das notícias do dia, revista de imprensa e citação, Sao Tome and Principe
• Decreto-Lei n.º 02/2017, protecção de compilações e exclusão das notícias do dia, Sao Tome and Principe

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy

• Penal Code, Part Twelve, Chapter One (Cyber Crimes and Punishment), Afghanistan
• Alabama Digital Crime Act, Computer Tampering, Alabama
• Criminal mischief in the fourth degree, unauthorized computer access, Alaska
• Criminal use of a computer, Alaska
• Theft of services, unauthorized use of a computer system, Alaska
• Copyright Law, Sui Generis Database Producers Rights, Albania
• Criminal Code, Unauthorized Computer Access, Albania
• Code pénal, atteintes aux systèmes de traitement automatisé de données, Algeria
• Ordonnance n° 03-05, exception de citation, Algeria
• Ordonnance n° 03-05, protection des bases de données, Algeria

and 135 more, every one in the free file.

• Penal Code, Part Twelve, Chapter One (Cyber Crimes and Punishment), Afghanistan
• Alabama Digital Crime Act, Computer Tampering, Alabama
• Criminal mischief in the fourth degree, unauthorized computer access, Alaska
• Criminal use of a computer, Alaska
• Theft of services, unauthorized use of a computer system, Alaska
• Copyright Law, Sui Generis Database Producers Rights, Albania
• Criminal Code, Unauthorized Computer Access, Albania
• Code pénal, atteintes aux systèmes de traitement automatisé de données, Algeria
• Ordonnance n° 03-05, exception de citation, Algeria
• Ordonnance n° 03-05, protection des bases de données, Algeria

and 135 more, every one in the free file.

• Ordonnance n° 03-05, exception de citation, Algeria
• Copyright Act 2013, economic rights, computer program copying, and technological protection measures, Cook Islands
• Loi n°1/87, exception de courte citation et revue de presse, Gabon
• Loi n°1/87, protection des recueils et compilations, Gabon
• Schutz technischer Massnahmen und Durchsetzung von Schrankenbestimmungen (Protection of Technological Measures), Germany
• Decreto-Lei n.º 02/2017, exclusão das notícias do dia, revista de imprensa e citação, Sao Tome and Principe
• Decreto-Lei n.º 02/2017, protecção de compilações e exclusão das notícias do dia, Sao Tome and Principe

• SB 63 (2026), Artificial Intelligence in Health Insurance Prior Authorization, Alabama
• Clinical Decision Support Systems Bias Mitigation Act (SB 503), California from 1 Jan 2027, in 2 months
• Employment Automated Decision Systems Act (SB 947), California from 1 Jul 2027, in 8 months
• Health Care Services Artificial Intelligence Act (AB 1979), California from 1 Jan 2027, in 2 months
• Transparency in Frontier Artificial Intelligence Act (SB 53), California
• CSA Staff Notice 31-342, guidance for portfolio managers regarding online advice, Canada
• OSFI Guideline E-23, Enterprise-Wide Model Risk Management for Deposit-Taking Institutions (2017), Canada
• OSFI Guideline E-23, Model Risk Management (2027), Canada from 1 May 2027, in 6 months
• Amended Regulation 10-1-1 (2025), Governance and Risk Management Framework for Insurers' Use of External Consumer Data and Information Sources, Algorithms, and Predictive Models, Colorado
• HB 26-1139 (2026), Use of Artificial Intelligence in Health Care, Colorado from 1 Jan 2027, in 2 months

and 68 more, every one in the free file.

• SB 63 (2026), Artificial Intelligence in Health Insurance Prior Authorization, Alabama
• Amended Regulation 10-1-1 (2025), Governance and Risk Management Framework for Insurers' Use of External Consumer Data and Information Sources, Algorithms, and Predictive Models, Colorado
• HB 26-1139 (2026), Use of Artificial Intelligence in Health Care, Colorado from 1 Jan 2027, in 2 months
• AI Act, Article 26(10) (post-remote biometric identification authorisation), European Union from 2 Dec 2027, in 13 months
• AI Act, Articles 60 and 61 (testing in real world conditions outside AI regulatory sandboxes, with informed consent), European Union
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union
• Gesetz zur Marktüberwachung und Innovationsförderung von künstlicher Intelligenz (KI-MIG), AI Market Surveillance and Innovation Promotion Act, Germany
• Government Decree 344/2025 Implementing the Hungarian AI Act: Designated Authorities, Notified-Body Reports and Fine Ceilings, Hungary
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy
• Central Bank of Jordan Artificial Intelligence Framework for the Banking Sector, Version 1.0, Jordan

and 3 more, every one in the free file.

• AI Act, Article 14 (human oversight), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 26(10) (post-remote biometric identification authorisation), European Union from 2 Dec 2027, in 13 months
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy
• Decreto Legislativo 160/2026, After-the-Fact Facial Recognition Integrated in Video Surveillance (Art. 10), Italy
• Decreto Legislativo 160/2026, Police Biometric AI: Dataset Labelling and Real-Time Remote Identification (Artt. 7-9, 13), Italy
• Use of artificial intelligence in therapy or psychotherapy services, Maine

• AI Act, Article 16 (obligations of providers of high-risk AI systems), European Union from 2 Dec 2027, in 13 months
• Commission Guidelines on the scope of the obligations for providers of general-purpose AI models under the AI Act, European Union
• Financial Services (Robotic and Artificial Intelligence Enabled Advisory Services) Rules 2021, Mauritius
• Digital Transformation Act 2025, ICT service permit for AI and AI-related data services, Vanuatu

• Practice Direction No. 1 of 2025, Use of Generative Artificial Intelligence in Court Proceedings, Jamaica
• Central Bank of Jordan Artificial Intelligence Framework for the Banking Sector, Version 1.0, Jordan

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy
• Law on Artificial Intelligence, incident management and reporting obligation, Vietnam

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy
• Law on Artificial Intelligence, incident management and reporting obligation, Vietnam

• SB 63 (2026), Artificial Intelligence in Health Insurance Prior Authorization, Alabama
• Clinical Decision Support Systems Bias Mitigation Act (SB 503), California from 1 Jan 2027, in 2 months
• Employment Automated Decision Systems Act (SB 947), California from 1 Jul 2027, in 8 months
• Employment Technological Displacement Notice (SB 951), California from 1 Jan 2027, in 2 months
• Health Care Services Artificial Intelligence Act (AB 1979), California from 1 Jan 2027, in 2 months
• Transparency in Frontier Artificial Intelligence Act (SB 53), California
• CSA Staff Notice 31-342, guidance for portfolio managers regarding online advice, Canada
• OSFI Guideline E-23, Enterprise-Wide Model Risk Management for Deposit-Taking Institutions (2017), Canada
• OSFI Guideline E-23, Model Risk Management (2027), Canada from 1 May 2027, in 6 months
• Amended Regulation 10-1-1 (2025), Governance and Risk Management Framework for Insurers' Use of External Consumer Data and Information Sources, Algorithms, and Predictive Models, Colorado

and 71 more, every one in the free file.

• SB 63 (2026), Artificial Intelligence in Health Insurance Prior Authorization, Alabama
• Loi n° 09-04 relative à la prévention et à la lutte contre les infractions liées aux technologies de l'information et de la communication, Algeria
• Companion Chatbot Safety and Accountability Act (SB 243), California
• Employment Technological Displacement Notice (SB 951), California from 1 Jan 2027, in 2 months
• Transparency in Frontier Artificial Intelligence Act (SB 53), California
• Amended Regulation 10-1-1 (2025), Governance and Risk Management Framework for Insurers' Use of External Consumer Data and Information Sources, Algorithms, and Predictive Models, Colorado
• HB 26-1139 (2026), Use of Artificial Intelligence in Health Care, Colorado from 1 Jan 2027, in 2 months
• HB 26-1263 (2026), Conversational AI Service Operator Requirements, Colorado
• AI Act, Article 20 (corrective actions and duty of information), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 26(1) to (5) (deployer use, human oversight, input data and monitoring), European Union from 2 Dec 2027, in 13 months

and 18 more, every one in the free file.

• Employment Technological Displacement Notice (SB 951), California from 1 Jan 2027, in 2 months
• Transparency in Frontier Artificial Intelligence Act (SB 53), California
• Artificial Intelligence Safety Measures Act, Illinois from 1 Jan 2027, in 2 months
• Artificial Intelligence Video Interview Act, Illinois
• Practice Direction No. 1 of 2025, Use of Generative Artificial Intelligence in Court Proceedings, Jamaica
• Central Bank of Jordan Artificial Intelligence Framework for the Banking Sector, Version 1.0, Jordan
• AI Companion Chatbot Safety Act (SB 1546), Oregon from 1 Jan 2027, in 2 months

• AI Act, Article 14 (human oversight), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 26(10) (post-remote biometric identification authorisation), European Union from 2 Dec 2027, in 13 months
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy
• Decreto Legislativo 160/2026, After-the-Fact Facial Recognition Integrated in Video Surveillance (Art. 10), Italy
• Decreto Legislativo 160/2026, Police Biometric AI: Dataset Labelling and Real-Time Remote Identification (Artt. 7-9, 13), Italy
• Use of artificial intelligence in therapy or psychotherapy services, Maine
• Law on Artificial Intelligence, incident management and reporting obligation, Vietnam

• AI Act, Article 16 (obligations of providers of high-risk AI systems), European Union from 2 Dec 2027, in 13 months
• Commission Guidelines on the scope of the obligations for providers of general-purpose AI models under the AI Act, European Union
• Financial Services (Robotic and Artificial Intelligence Enabled Advisory Services) Rules 2021, Mauritius
• Digital Transformation Act 2025, ICT service permit for AI and AI-related data services, Vanuatu

• Use of artificial intelligence in therapy or psychotherapy services, Maine
• AI Companion Chatbot Safety Act (SB 1546), Oregon from 1 Jan 2027, in 2 months

• SB 63 (2026), Artificial Intelligence in Health Insurance Prior Authorization, Alabama
• Clinical Decision Support Systems Bias Mitigation Act (SB 503), California from 1 Jan 2027, in 2 months
• Employment Automated Decision Systems Act (SB 947), California from 1 Jul 2027, in 8 months
• Health Care Services Artificial Intelligence Act (AB 1979), California from 1 Jan 2027, in 2 months
• Transparency in Frontier Artificial Intelligence Act (SB 53), California
• CSA Staff Notice 31-342, guidance for portfolio managers regarding online advice, Canada
• OSFI Guideline E-23, Enterprise-Wide Model Risk Management for Deposit-Taking Institutions (2017), Canada
• OSFI Guideline E-23, Model Risk Management (2027), Canada from 1 May 2027, in 6 months
• Amended Regulation 10-1-1 (2025), Governance and Risk Management Framework for Insurers' Use of External Consumer Data and Information Sources, Algorithms, and Predictive Models, Colorado
• HB 26-1139 (2026), Use of Artificial Intelligence in Health Care, Colorado from 1 Jan 2027, in 2 months

and 68 more, every one in the free file.

• SB 63 (2026), Artificial Intelligence in Health Insurance Prior Authorization, Alabama
• Amended Regulation 10-1-1 (2025), Governance and Risk Management Framework for Insurers' Use of External Consumer Data and Information Sources, Algorithms, and Predictive Models, Colorado
• HB 26-1139 (2026), Use of Artificial Intelligence in Health Care, Colorado from 1 Jan 2027, in 2 months
• AI Act, Article 26(10) (post-remote biometric identification authorisation), European Union from 2 Dec 2027, in 13 months
• AI Act, Articles 60 and 61 (testing in real world conditions outside AI regulatory sandboxes, with informed consent), European Union
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union
• Gesetz zur Marktüberwachung und Innovationsförderung von künstlicher Intelligenz (KI-MIG), AI Market Surveillance and Innovation Promotion Act, Germany
• Government Decree 344/2025 Implementing the Hungarian AI Act: Designated Authorities, Notified-Body Reports and Fine Ceilings, Hungary
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy
• Central Bank of Jordan Artificial Intelligence Framework for the Banking Sector, Version 1.0, Jordan

and 3 more, every one in the free file.

• AI Act, Article 14 (human oversight), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 26(10) (post-remote biometric identification authorisation), European Union from 2 Dec 2027, in 13 months
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy
• Decreto Legislativo 160/2026, After-the-Fact Facial Recognition Integrated in Video Surveillance (Art. 10), Italy
• Decreto Legislativo 160/2026, Police Biometric AI: Dataset Labelling and Real-Time Remote Identification (Artt. 7-9, 13), Italy
• Use of artificial intelligence in therapy or psychotherapy services, Maine

• AI Act, Article 16 (obligations of providers of high-risk AI systems), European Union from 2 Dec 2027, in 13 months
• Commission Guidelines on the scope of the obligations for providers of general-purpose AI models under the AI Act, European Union
• Financial Services (Robotic and Artificial Intelligence Enabled Advisory Services) Rules 2021, Mauritius
• Digital Transformation Act 2025, ICT service permit for AI and AI-related data services, Vanuatu

• Practice Direction No. 1 of 2025, Use of Generative Artificial Intelligence in Court Proceedings, Jamaica
• Central Bank of Jordan Artificial Intelligence Framework for the Banking Sector, Version 1.0, Jordan

• Ordonnance n° 03-05, exception de citation, Algeria
• Copyright and Neighboring Rights Law, Press and Current-Events Reproduction Exception, Andorra
• Copyright Act 1998, compilation and database protection, Bahamas
• Copyright Act 1998, fair dealing for reporting current events and criticism, Bahamas
• Copyright and Designs Act 2004, fair dealing for criticism, review and reporting current events, Bermuda
• Copyright and Neighbouring Rights Act (ZAPSP), Arts. 90d and 90zh, Press Publisher Right, Bulgaria
• Loi n°048-2019/AN du 12 novembre 2019 portant protection de la propriété littéraire et artistique, database and news exceptions, Burkina Faso
• Law No. 1/021 of December 30, 2005 on the Protection of Copyright and Related Rights, database and facts exclusions, Burundi
• Copyright (Cayman Islands) Order 2015, database and compilation copyright, Cayman Islands
• Law on Literary and Artistic Property, quotation and press-review exception, Comoros

and 23 more, every one in the free file.

• Ordonnance n° 03-05, exception de citation, Algeria
• Loi n°1/87, exception de courte citation et revue de presse, Gabon
• Loi n°1/87, protection des recueils et compilations, Gabon
• Decreto-Lei n.º 02/2017, exclusão das notícias do dia, revista de imprensa e citação, Sao Tome and Principe
• Decreto-Lei n.º 02/2017, protecção de compilações e exclusão das notícias do dia, Sao Tome and Principe

• Ordonnance n° 03-05, exception de citation, Algeria
• Loi n°1/87, exception de courte citation et revue de presse, Gabon
• Loi n°1/87, protection des recueils et compilations, Gabon
• Decreto-Lei n.º 02/2017, exclusão das notícias do dia, revista de imprensa e citação, Sao Tome and Principe
• Decreto-Lei n.º 02/2017, protecção de compilações e exclusão das notícias do dia, Sao Tome and Principe

• Distribution of Materially Deceptive Media to Influence an Upcoming Election, Alabama
• SB 63 (2026), Artificial Intelligence in Health Insurance Prior Authorization, Alabama
• Council of Europe Framework Convention on Artificial Intelligence, signed by Andorra, Andorra proposed
• Council of Europe Framework Convention on Artificial Intelligence, signed by Armenia, Armenia proposed
• Practice Direction No. 18 of 2025, ethical use of generative AI in court proceedings, Belize
• Attorney, Court Filing and Arbitrator Generative AI Duties (SB 574), California from 1 Jan 2027, in 2 months
• California AI Transparency Act (SB 942, as amended by AB 853, SB 1000 and AB 2713), California
• CCPA Automated Decisionmaking Technology Regulations, California
• Clinical Decision Support Systems Bias Mitigation Act (SB 503), California from 1 Jan 2027, in 2 months
• Companion Chatbot Safety and Accountability Act (SB 243), California

and 123 more, every one in the free file.

• Distribution of Materially Deceptive Media to Influence an Upcoming Election, Alabama
• SB 63 (2026), Artificial Intelligence in Health Insurance Prior Authorization, Alabama
• Council of Europe Framework Convention on Artificial Intelligence, signed by Andorra, Andorra proposed
• Council of Europe Framework Convention on Artificial Intelligence, signed by Armenia, Armenia proposed
• Practice Direction No. 18 of 2025, ethical use of generative AI in court proceedings, Belize
• Attorney, Court Filing and Arbitrator Generative AI Duties (SB 574), California from 1 Jan 2027, in 2 months
• California AI Transparency Act (SB 942, as amended by AB 853, SB 1000 and AB 2713), California
• CCPA Automated Decisionmaking Technology Regulations, California
• Clinical Decision Support Systems Bias Mitigation Act (SB 503), California from 1 Jan 2027, in 2 months
• Companion Chatbot Safety and Accountability Act (SB 243), California

and 60 more, every one in the free file.

• SB 63 (2026), Artificial Intelligence in Health Insurance Prior Authorization, Alabama
• Loi n° 09-04 relative à la prévention et à la lutte contre les infractions liées aux technologies de l'information et de la communication, Algeria
• Companion Chatbot Safety and Accountability Act (SB 243), California
• Employment Technological Displacement Notice (SB 951), California from 1 Jan 2027, in 2 months
• Transparency in Frontier Artificial Intelligence Act (SB 53), California
• Amended Regulation 10-1-1 (2025), Governance and Risk Management Framework for Insurers' Use of External Consumer Data and Information Sources, Algorithms, and Predictive Models, Colorado
• HB 26-1139 (2026), Use of Artificial Intelligence in Health Care, Colorado from 1 Jan 2027, in 2 months
• HB 26-1263 (2026), Conversational AI Service Operator Requirements, Colorado
• AI Act, Article 20 (corrective actions and duty of information), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 26(1) to (5) (deployer use, human oversight, input data and monitoring), European Union from 2 Dec 2027, in 13 months

and 17 more, every one in the free file.

• CCPA Automated Decisionmaking Technology Regulations, California
• Consumer Credit Act, Articles 24 and 30, Personalised Offers and Creditworthiness Assessment by Automated Processing, Croatia from 20 Nov 2026, in 4 weeks
• AI Act, Article 14 (human oversight), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 26(10) (post-remote biometric identification authorisation), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 86 (right to explanation of individual decision-making), European Union from 2 Dec 2027, in 13 months
• Artificial Intelligence Video Interview Act, Illinois
• Codice Penale Art. 437-bis, Omitted Safety Measures in High-Risk AI Systems and Unlawful Alteration of Them, Italy
• Decreto Legislativo 160/2026, After-the-Fact Facial Recognition Integrated in Video Surveillance (Art. 10), Italy
• Decreto Legislativo 160/2026, Police Biometric AI: Dataset Labelling and Real-Time Remote Identification (Artt. 7-9, 13), Italy
• Use of artificial intelligence in therapy or psychotherapy services, Maine

and 1 more, every one in the free file.

• Attorney, Court Filing and Arbitrator Generative AI Duties (SB 574), California from 1 Jan 2027, in 2 months
• Artificial Intelligence Video Interview Act, Illinois
• Use of artificial intelligence in therapy or psychotherapy services, Maine
• AI Companion Chatbot Safety Act (SB 1546), Oregon from 1 Jan 2027, in 2 months

• AI Act, Article 16 (obligations of providers of high-risk AI systems), European Union from 2 Dec 2027, in 13 months
• Commission Guidelines on the scope of the obligations for providers of general-purpose AI models under the AI Act, European Union
• Financial Services (Robotic and Artificial Intelligence Enabled Advisory Services) Rules 2021, Mauritius
• Digital Transformation Act 2025, ICT service permit for AI and AI-related data services, Vanuatu