NIST AI 600-1 GAI-RISK-10Intellectual Property

Eased production or replication of alleged copyrighted, trademarked, or licensed content without authorization (possibly in situations which do not fall under fair use); eased exposure of trade secrets; or plagiarism or illegal replication.NIST Generative AI Profile, July 2024 (NIST AI 600-1), GAI-RISK-10

We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Corpus as of 29 Sep 2026.

The kinds of duty that reach it: TDM, attribution, licensing.

31: laws
27: places
0: with court rulings behind them
2: not yet in force

The same ground elsewhere linked through the kinds of duty both controls are mapped from

NIST AI RMFGOVERN 6.1 Policies and procedures are in place that address AI risks associated with third-party...
NIST AI RMFMAP 4.1 Approaches for mapping AI technology and legal risks of its components – including the...
MIT mitigations3.2 Data Governance
MIT mitigations4.1 System Documentation
NIST Privacy FrameworkGV.PO-P5 Legal, regulatory, and contractual requirements regarding privacy are understood and managed.
NIST CSF 2.0GV.OC-03 Legal, regulatory, and contractual requirements regarding cybersecurity - including...

A law in force is unmarked; the rest wear their state: not yet in force

Copyright and text and data mining (TDM)

20 laws, 20 places

Place	Law	How it reaches this control
Belgium	Code de droit économique, article XI.190, 20°, exception de fouille de textes et de données	Through its TDM duty. What it requires
Bosnia and Herzegovina	Law on Copyright and Related Rights, Content Limitations (No Text-and-Data-Mining Exception)	Through its TDM duty. What it requires
Bulgaria	Copyright and Neighbouring Rights Act (ZAPSP), Arts. 26e, 26zh and 26k, Text-and-Data-Mining Exception for Crawling and Training	Through its TDM duty. What it requires
Cayman Islands	Copyright (Cayman Islands) Order 2015, text and data analysis exception	Through its TDM duty. What it requires
Cook Islands	Copyright Act 2013, economic rights, computer program copying, and technological protection measures	Through its TDM duty. What it requires
Czech Republic	Autorský zákon Sections 39c-39d, Text and Data Mining Exception for Automated Analysis	Through its TDM duty. What it requires
Dominica	Copyright Act 2003, temporary reproduction and quotation exceptions	Through its attribution duty. What it requires
European Union	DSM Directive, Article 4 (text-and-data-mining exception and rights reservation)	Through its TDM duty. What it requires
Fiji	Copyright Act 1999, Fair Dealing and Criminal Liability for Infringement from a date not yet set	Through its TDM duty. What it requires
Georgia	Copyright and Related Rights, no text-and-data-mining exception	Through its TDM duty. What it requires

Show the other 10 laws

Honduras	Ley del Derecho de Autor, sin excepción de minería de textos y datos, protección de compilaciones	Through its TDM duty. What it requires
Italy	Legge sul Diritto d'Autore Artt. 70-ter and 70-quater, Text-and-Data-Mining Exceptions	Through its TDM duty. What it requires
Latvia	Autortiesību likums Article 21.1, Text and Data Mining Exception (Scraping and AI Training)	Through its TDM duty. What it requires
Maldives	Copyright and Related Rights Act, quotation and informational-purpose exceptions	Through its attribution duty. What it requires
Papua New Guinea	Copyright and Neighbouring Rights Act 2000, Exceptions to Copyright and Enforcement	Through its attribution duty. What it requires
Paraguay	Ley N° 1328/1998, arts. 8, 40 y 41, límites y excepciones al derecho de autor	Through its TDM duty. What it requires
Poland	Ustawa o prawie autorskim i prawach pokrewnych, Text-and-Data-Mining Exceptions	Through its TDM duty. What it requires
Romania	Legea nr. 8/1996 privind dreptul de autor și drepturile conexe, art. 36^1-36^2, Text and Data Mining Exceptions, inserted by Legea nr. 69/2022	Through its TDM duty. What it requires
Uruguay	Ley N° 9.739 arts. 44-45, illicit-reproduction rule and free-use exceptions for quotation and news	Through its attribution duty. What it requires
Vatican City	Copyright and related rights by reference to Italian law (Legge N. CXCVII)	Through its attribution duty. What it requires

Database right

8 laws, 8 places

Place	Law	How it reaches this control
Bahamas	Copyright Act 1998, compilation and database protection	Through its attribution duty. What it requires
Burkina Faso	Loi n°048-2019/AN du 12 novembre 2019 portant protection de la propriété littéraire et artistique, database and news exceptions	Through its attribution duty. What it requires
Burundi	Law No. 1/021 of December 30, 2005 on the Protection of Copyright and Related Rights, database and facts exclusions	Through its attribution duty. What it requires
Cayman Islands	Copyright (Cayman Islands) Order 2015, database and compilation copyright	Through its attribution duty. What it requires
Dominica	Copyright Act 2003, database and compilation protection	Through its attribution duty. What it requires
Gabon	Loi n°1/87, protection des recueils et compilations	Through its attribution duty. What it requires
Nicaragua	Ley No. 312, protection of compilations and databases	Through its attribution duty. What it requires
Sao Tome and Principe	Decreto-Lei n.º 02/2017, protecção de compilações e exclusão das notícias do dia	Through its attribution duty. What it requires

AI governance

2 laws, 2 places

Place	Law	How it reaches this control
European Union	AI Act, Article 26(8) (public-authority deployer registration) from 2 Dec 2027, in 14 months	Through its licensing duty. What it requires
Vanuatu	Digital Transformation Act 2025, ICT service permit for AI and AI-related data services	Through its licensing duty. What it requires

AI training data

1 law, 1 place

Place	Law	How it reaches this control
European Union	AI Act, Article 53 (obligations for providers of general-purpose AI models)	Through its TDM duty. What it requires

Full text of the NIST Generative AI Profile, public domain (a US government work). Every control of the framework.