LexLint.ioBeta

Know the law your code answers to.

Law / Frameworks / MIT mitigations Draft / Transparency & Accountability Controls

MIT mitigations 4.6User Rights & Recourse

Frameworks and procedures that enable users to identify and understand AI system interactions, report issues, request explanations, and seek recourse or remediation when affected by AI systems.MIT AI Risk Mitigation Taxonomy, preliminary taxonomy, July 2025, 4.6

We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .

The kinds of duty that reach it: content labelling, data subject rights, design code, disclosure.

108
laws
66
jurisdictions
2
with court rulings behind them
24
not yet in force
1
blocked by a court
14
proposed, not law

Related controls in other frameworks the same duties, in at least two laws we track, reach both

A law in force is unmarked; the rest wear their state: not yet in force blocked by a court proposed

  • Alabama
  • Andorra
  • Arizona
  • Armenia
  • Belize
  • Brazil
  • California
  • Canada
  • China
  • Colorado
  • Connecticut
  • Croatia
  • Delaware
  • European Union
  • Florida
  • France
  • Gabon
  • Georgia
  • Greece
  • Idaho
  • Illinois
  • Indiana
  • Iowa
  • Jamaica
  • Japan
  • Jordan
  • Kazakhstan
  • Kentucky
  • Kyrgyzstan
  • Latvia
  • Louisiana
  • Massachusetts
  • Mauritius
  • Michigan
  • Moldova
  • Nebraska
  • Nevada
  • New Hampshire
  • New Jersey
  • New Mexico
  • New York
  • North Dakota
  • Ohio
  • Oregon
  • Pennsylvania
  • Peru
  • Portugal
  • Puerto Rico
  • Russia
  • Slovenia
  • South Dakota
  • South Korea
  • Sweden
  • Texas
  • Turkey
  • United Arab Emirates
  • United Kingdom
  • United States
  • Utah
  • Vatican City
  • Vermont
  • Vietnam
  • Washington
  • Wisconsin

AI transparency

67 laws, 49 jurisdictions
JurisdictionLawHow it reaches this control
Alabama Distribution of Materially Deceptive Media to Influence an Upcoming Election

Through its content labelling, disclosure duties. What it requires
Arizona Digital impersonation of a candidate or other person (civil action)

Through its disclosure duty. What it requires
Belize Practice Direction No. 18 of 2025, ethical use of generative AI in court proceedings

Through its disclosure duty. What it requires
Brazil TSE Resolution, AI-Generated Content Disclosure Duty

Through its content labelling duty. What it requires
California AB 2839, election materially deceptive deepfake disclaimer law blocked by a court

Through its content labelling duty. What it requires
California AB 730, as extended by AB 972, election deepfake disclosure law

Through its content labelling duty. What it requires
California California AI Transparency Act (SB 942, as amended by AB 853, SB 1000 and AB 2713)

Through its content labelling, disclosure duties. What it requires
California Companion Chatbot Safety and Accountability Act (SB 243)

Through its disclosure duty. What it requires
California Synthetic Performer Advertising Disclosure Act (SB 1050) from , in 7 weeks

Through its content labelling, disclosure duties. What it requires
China Measures for Labeling AI-Generated Synthetic Content

Through its content labelling duty. What it requires
Show the other 57 laws
Colorado HB 24-1147, Candidate Election Deepfake Disclosures

Through its content labelling duty. What it requires
Colorado HB 26-1263 (2026), Conversational AI Service Operator Requirements

Through its content labelling, design code duties. What it requires
Connecticut Generative AI Content Provenance Duty for Large Providers

Through its content labelling duty. What it requires
Croatia Act Implementing the European Media Freedom Act, Article 23, Labelling of AI-Generated Content

Through its content labelling duty. What it requires
Delaware House Bill 306 (pending), Computer Communication Act proposed

Through its disclosure duty. What it requires
European Union AI Act, Article 50 (transparency obligations for AI systems and synthetic content)

Through its content labelling, disclosure duties. What it requires
European Union Digital Services Act, Article 35(1)(k) (systemic risk mitigation, synthetic media marking)

Through its content labelling duty. What it requires
European Union European Commission Guidelines on the implementation of the transparency obligations for certain AI systems under Article 50 of the AI Act from a date not yet set

Through its content labelling, disclosure duties. What it requires
Florida AI Use in Political Advertising Disclosure Requirement (HB 919, 2024)

Through its content labelling, disclosure duties. What it requires
France Law 2023-451, Article 5, Labelling of Retouched and AI-Generated Images by Commercial Influencers

Through its content labelling duty. What it requires
Gabon Ordonnance n°0011/PR/2026, marquage des contenus générés par intelligence artificielle

Through its content labelling duty. What it requires
Greece Law 5321/2026, National AI Act Implementation Law

Through its content labelling duty. What it requires
Idaho Conversational AI Safety Act from , in 8 months

Through its content labelling, design code duties. What it requires
Idaho FAIR Elections Act, disclosure duty for synthetic media in electioneering communications

Through its content labelling duty. What it requires
Idaho Generative Artificial Intelligence in Education Act, vendor disclosure duty

Through its disclosure duty. What it requires
Illinois Artificial Intelligence Video Interview Act

Through its disclosure duty. What it requires
Indiana Use of Digitally Altered Media in Elections (House Enrolled Act 1133, 2024)

Through its content labelling, disclosure duties. What it requires
Iowa Conversational AI Services Act (Senate File 2417) from , in 8 months

Through its content labelling, design code duties. What it requires
Jamaica Practice Direction No. 1 of 2025, Use of Generative Artificial Intelligence in Court Proceedings

Through its disclosure duty. What it requires
Japan Public Offices Election Act, AI-Generated Content Labelling Duty (2026 Amendment) from , in 4 months

Through its content labelling, disclosure duties. What it requires
Kazakhstan Law on Artificial Intelligence, transparency and disclosure duties

Through its content labelling, disclosure duties. What it requires
Kentucky Synthetic Media Disclosure in Electioneering Communications

Through its content labelling, disclosure duties. What it requires
Kyrgyzstan Digital Code, Chapter 23: AI interaction and deepfake disclosure duties

Through its content labelling, disclosure duties. What it requires
Latvia Pre-Election Campaigning Law, Articles 3.1 and 31.1, Indicating AI-Generated Campaign Content and the Ban on Further Distribution

Through its content labelling duty. What it requires
Louisiana Act 250 (HB 178), attorney duty to verify and disclose AI-generated evidence

Through its disclosure duty. What it requires
Louisiana Act 559 (HB 639), AI-generated voice telephone campaign communication disclosure

Through its content labelling duty. What it requires
Louisiana Act 806 (HB 459), AI-manipulated electioneering communication disclosure

Through its content labelling duty. What it requires
Massachusetts An Act enhancing disclosure requirements for synthetic media in political advertising (H.5094) proposed

Through its content labelling, disclosure duties. What it requires
Michigan AI-Generated Political Advertisement and Robocall Disclosure (Public Act 263 of 2023)

Through its content labelling, disclosure duties. What it requires
Michigan Distribution of Materially Deceptive Election Media (Public Act 265 of 2023)

Through its content labelling duty. What it requires
Nebraska Conversational Artificial Intelligence Safety Act (LB 525, §§ 12-18) from , in 8 months

Through its content labelling, disclosure duties. What it requires
Nevada AB 73 (2025), AI-manipulated media disclosure in paid political communications

Through its content labelling, disclosure duties. What it requires
New Hampshire Synthetic Media and Deceptive and Fraudulent Deepfakes in Elections

Through its disclosure duty. What it requires
New Mexico HB 182 (2024), AI-generated and manipulated media disclosure and disclaimer requirements in campaign advertising

Through its content labelling, disclosure duties. What it requires
New York Disclosure of materially deceptive AI-generated media in political communications

Through its content labelling, disclosure duties. What it requires
New York Synthetic Performer Advertising Disclosure Law

Through its content labelling, disclosure duties. What it requires
New York City Chatbot Data Privacy, Security, and Transparency proposed

Through its disclosure duty. What it requires
North Dakota House Bill 1167 (2025), AI-generated political content disclosure

Through its content labelling, disclosure duties. What it requires
Ohio S.B. 163, AI-Generated Content Watermark and Provenance Mandate proposed

Through its content labelling, disclosure duties. What it requires
Oregon AI Companion Chatbot Safety Act (SB 1546) from , in 7 weeks

Through its content labelling, design code, disclosure duties. What it requires
Oregon Campaign communication disclosure of synthetic media (SB 1571)

Through its content labelling, disclosure duties. What it requires
Pennsylvania S.B. 1090, SAFECHAT Act proposed

Through its disclosure duty. What it requires
Pennsylvania S.B. 806, Artificial Intelligence Deceptive Advertising Act from , in 5 weeks

Through its content labelling, disclosure duties. What it requires
Puerto Rico AI disclosure in political advertising and electoral communications

Through its content labelling, disclosure duties. What it requires
Russia Federal Law No. 243-FZ, Article 9, AI-Generated Content Notice from , in 4 months

Through its content labelling duty. What it requires
Slovenia Media Act (ZMed-1), Articles 66 and 67, Labelling of AI-Generated Media Content and Publisher Responsibility

Through its content labelling, disclosure duties. What it requires
Texas TRAIGA (H.B. 149, 2025), consumer AI-interaction disclosure duty

Through its disclosure duty. What it requires
Turkey Commercial Advertising Regulation, AI Disclosure Duty

Through its content labelling, disclosure duties. What it requires
United States AI Labeling Act of 2026 proposed

Through its content labelling, disclosure duties. What it requires
United States FCC AI Political Ad Disclosure Rulemaking, Docket 24-211 proposed

Through its content labelling, disclosure duties. What it requires
Utah Digital Content Provenance Standards Act (HB 276, 2026 General Session), Utah Code Title 13 Chapter 72c from , in 7 weeks

Through its content labelling, disclosure duties. What it requires
Vermont Vermont Synthetic Media in Elections Act

Through its disclosure duty. What it requires
Vietnam Law on Artificial Intelligence, transparency obligation

Through its content labelling, disclosure duties. What it requires
Washington AI companion chatbot disclosure and safety act from , in 7 weeks

Through its content labelling, disclosure duties. What it requires
Washington AI content provenance and disclosure act from , in 3 months

Through its content labelling, disclosure duties. What it requires
Washington Synthetic media in electioneering communications

Through its content labelling, disclosure duties. What it requires
Wisconsin 2023 Wisconsin Act 123, AI-Generated Content Disclosure in Political Communications

Through its content labelling duty. What it requires

AI sector rules

19 laws, 14 jurisdictions
JurisdictionLawHow it reaches this control
Alabama SB 63 (2026), Artificial Intelligence in Health Insurance Prior Authorization

Through its disclosure duty. What it requires
California Attorney, Court Filing and Arbitrator Generative AI Duties (SB 574) from , in 7 weeks

Through its disclosure duty. What it requires
California Employment Automated Decision Systems Act (SB 947) from , in 8 months

Through its disclosure duty. What it requires
California Employment Technological Displacement Notice (SB 951) from , in 7 weeks

Through its disclosure duty. What it requires
California Healthcare AI Patient-Communication Disclosure Act (AB 3030)

Through its disclosure duty. What it requires
Colorado HB 26-1195 (2026), Psychotherapy Artificial Intelligence Restrictions

Through its disclosure duty. What it requires
Croatia Consumer Credit Act, Articles 24 and 30, Personalised Offers and Creditworthiness Assessment by Automated Processing from , in 6 days

Through its data subject rights, disclosure duties. What it requires
Croatia Labour Act, Articles 221.g to 221.i, Algorithmic Management of Work Through Digital Labour Platforms

Through its disclosure duty. What it requires
Illinois Illinois Human Rights Act, use of artificial intelligence in employment decisions

Through its disclosure duty. What it requires
Jordan Central Bank of Jordan Artificial Intelligence Framework for the Banking Sector, Version 1.0

Through its disclosure duty. What it requires
Show the other 9 laws
Mauritius Financial Services (Robotic and Artificial Intelligence Enabled Advisory Services) Rules 2021

Through its disclosure duty. What it requires
Mauritius FSC Fintech Series Guidance Notes 4, responsible use of artificial intelligence in financial services

Through its disclosure duty. What it requires
Michigan Michigan DIFS Bulletin 2026-03-BT/CF/CU, Use of Artificial Intelligence Systems by Financial Service Providers

Through its disclosure duty. What it requires
Ontario Employment Standards Act, 2000, use of artificial intelligence in job postings

Through its disclosure duty. What it requires
South Dakota Election Deepfake Disclosure Law (SB 164, 2025)

Through its disclosure duty. What it requires
Sweden Consumer Credit Act (2026:1011), Chapter 2 Section 7 and Chapter 3 Section 15, Personalised Offers and Credit Assessment by Automated Processing from , in 6 days

Through its data subject rights, disclosure duties. What it requires
Texas S.B. 1188 (2025), AI diagnostic disclosure duty in electronic health records

Through its disclosure duty. What it requires
United Arab Emirates Guidance Note on the Consumer Protection and Responsible Adoption and Use of Artificial Intelligence and Machine Learning by Licensed Financial Institutions in the U.A.E.

Through its disclosure duty. What it requires
Utah Health Insurance Preauthorization AI Disclosure (SB 319, 2026 General Session) from , in 7 weeks

Through its disclosure duty. What it requires

AI risk obligations

12 laws, 8 jurisdictions
JurisdictionLawHow it reaches this control
California CCPA Automated Decisionmaking Technology Regulations

Through its data subject rights, disclosure duties. What it requires
California Clinical Decision Support Systems Bias Mitigation Act (SB 503) from , in 7 weeks

Through its disclosure duty. What it requires
European Union AI Act, Article 13 (transparency and provision of information to deployers) from , in 13 months

Through its disclosure duty. What it requires
European Union AI Act, Article 26(11) (informing individuals subject to an Annex III decision) from , in 13 months

Through its disclosure duty. What it requires
European Union AI Act, Article 26(7) (informing workers before workplace use) from , in 13 months

Through its disclosure duty. What it requires
European Union AI Act, Article 86 (right to explanation of individual decision-making) from , in 13 months

Through its data subject rights duty. What it requires
Georgia Council of Europe Framework Convention on AI, Georgia's signature proposed

Through its disclosure duty. What it requires
Indiana Downcoding of Health Benefits Claims, automated and AI decision-making (House Enrolled Act 1271, 2026)

Through its disclosure duty. What it requires
Nebraska Ensuring Transparency in Prior Authorization Act, artificial-intelligence utilization review restriction

Through its disclosure duty. What it requires
New Jersey AI-based electronic monitoring and automated employment decision systems in employment and public services (S4075 / A4981) proposed

Through its disclosure duty. What it requires
Show the other 2 laws
Peru Reglamento de la Ley 31814, high-risk AI system duties

Through its disclosure duty. What it requires
South Korea AI Framework Act, Article 34 (business-operator duties for high-impact AI)

Through its disclosure duty. What it requires

AI governance

9 laws, 9 jurisdictions
JurisdictionLawHow it reaches this control
Andorra Council of Europe Framework Convention on Artificial Intelligence, signed by Andorra proposed

Through its disclosure duty. What it requires
Armenia Council of Europe Framework Convention on Artificial Intelligence, signed by Armenia proposed

Through its disclosure duty. What it requires
Canada Council of Europe Framework Convention on Artificial Intelligence, signed by Canada proposed

Through its disclosure duty. What it requires
Illinois Artificial Intelligence Safety Measures Act from , in 7 weeks

Through its disclosure duty. What it requires
Latvia Law on Digital Operational Resilience of the Financial Market and the Use of Artificial Intelligence, Articles 7, 8(5)-(7), 10(3)-(4) and 11(2)

Through its disclosure duty. What it requires
Moldova Council of Europe Framework Convention on Artificial Intelligence, signed by Moldova proposed

Through its disclosure duty. What it requires
Portugal Portuguese Charter of Human Rights in the Digital Era, Article 9, Use of Artificial Intelligence and Robots

Through its disclosure duty. What it requires
United Kingdom Council of Europe Framework Convention on Artificial Intelligence, signed by the United Kingdom proposed

Through its disclosure duty. What it requires
Vatican City Guidelines on Artificial Intelligence of Vatican City State (Decree No. DCCII)

Through its content labelling duty. What it requires

AI prohibited practices

1 law, 1 jurisdiction
JurisdictionLawHow it reaches this control
Florida Promotion of an Altered Sexual Depiction; Brooke's Law platform takedown duty

Through its data subject rights duty. What it requires

Full text of the MIT AI Risk Mitigation Taxonomy, CC BY 4.0. MIT AI Risk Initiative (MIT FutureTech), AI Risk Mitigation Taxonomy. Data from the MIT AI Risk Initiative is licensed under CC BY 4.0. Cite as: Mapping AI Risk Mitigations: Evidence Scan & Draft Mitigation Taxonomy Every control of the framework.