NIST AI 600-1 GAI-RISK-10Intellectual Property

Eased production or replication of alleged copyrighted, trademarked, or licensed content without authorization (possibly in situations which do not fall under fair use); eased exposure of trade secrets; or plagiarism or illegal replication.NIST Generative AI Profile, July 2024 (NIST AI 600-1), GAI-RISK-10

We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of 14 Nov 2026.

The kinds of duty that reach it: TDM, attribution, licensing.

61: laws
46: jurisdictions
3: with court rulings behind them
3: not yet in force

Related controls in other frameworks the same duties, in at least two laws we track, reach both

NIST AI RMFMAP 4.1 Approaches for mapping AI technology and legal risks of its components –..., 57 laws
NIST AI RMFGOVERN 1.1 Legal and regulatory requirements involving AI are understood, managed, and..., 4 laws
NIST AI 200-22.3 Apply & Measure, 4 laws
NIST AI 200-24.3 Composing a TEVV Toolbox, 4 laws
OWASP LLM Top 10LLM03:2026 Excessive Agency, 11 laws
OWASP Agentic Top 10ASI03 Identity and Privilege Abuse, 7 laws
OWASP Agentic Top 10ASI09 Human-Agent Trust Exploitation, 4 laws
MIT mitigations3.2 Data Governance, 57 laws
MIT mitigations4.1 System Documentation, 23 laws
MIT mitigations2.1 Model & Infrastructure Security, 7 laws
5 more in the MIT mitigations
FINOS AIGFAIR-PREV-007 Legal and Contractual Frameworks for AI Systems, 57 laws
FINOS AIGFAIR-DET-013 Providing Citations and Source Traceability for AI-Generated Information, 38 laws
FINOS AIGFAIR-PREV-018 Agent Authority Least Privilege Framework, 7 laws
7 more in the FINOS AIGF
ETSI EN 304 2235.2.4-2.1 Minimum record for training data: its source, such as a page URL, and when..., 20 laws
ETSI EN 304 2235.1.2-6 Access the AI system gets to other systems and data sources is minimal and..., 7 laws
ETSI EN 304 2235.1.4-1 Capability for human oversight designed in and maintained., 4 laws
3 more in the ETSI EN 304 223

A law in force is unmarked; the rest wear their state: not yet in force

Copyright and text and data mining (TDM)

22 laws, 22 jurisdictions

Jurisdiction	Law	How it reaches this control
Azerbaijan	Copyright and Related Rights Law, database exclusion and enforcement remedies	Through its TDM duty. What it requires
Belgium	Code de droit économique, article XI.190, 20°, exception de fouille de textes et de données	Through its TDM duty. What it requires
Bosnia and Herzegovina	Law on Copyright and Related Rights, Content Limitations (No Text-and-Data-Mining Exception)	Through its TDM duty. What it requires
Bulgaria	Copyright and Neighbouring Rights Act (ZAPSP), Arts. 26e, 26zh and 26k, Text-and-Data-Mining Exception for Crawling and Training	Through its TDM duty. What it requires
Cayman Islands	Copyright (Cayman Islands) Order 2015, text and data analysis exception	Through its TDM duty. What it requires
Cook Islands	Copyright Act 2013, economic rights, computer program copying, and technological protection measures	Through its TDM duty. What it requires
Czech Republic	Autorský zákon Sections 39c-39d, Text and Data Mining Exception for Automated Analysis	Through its TDM duty. What it requires
European Union	DSM Directive, Article 4 (text-and-data-mining exception and rights reservation)	Through its TDM duty. What it requires
Fiji	Copyright Act 1999, Fair Dealing and Criminal Liability for Infringement from a date not yet set	Through its TDM duty. What it requires
Georgia	Copyright and Related Rights, no text-and-data-mining exception	Through its TDM duty. What it requires

Show the other 12 laws

Germany	Schutz technischer Massnahmen und Durchsetzung von Schrankenbestimmungen (Protection of Technological Measures)	Through its TDM duty. What it requires
Honduras	Ley del Derecho de Autor, sin excepción de minería de textos y datos, protección de compilaciones	Through its TDM duty. What it requires
Italy	Legge sul Diritto d'Autore Artt. 70-ter and 70-quater, Text-and-Data-Mining Exceptions	Through its TDM duty. What it requires
Latvia	Autortiesību likums Article 21.1, Text and Data Mining Exception (Scraping and AI Training)	Through its TDM duty. What it requires
Maldives	Copyright and Related Rights Act, quotation and informational-purpose exceptions	Through its attribution duty. What it requires
Papua New Guinea	Copyright and Neighbouring Rights Act 2000, Exceptions to Copyright and Enforcement	Through its attribution duty. What it requires
Paraguay	Ley N° 1328/1998, arts. 8, 40 y 41, límites y excepciones al derecho de autor	Through its TDM duty. What it requires
Poland	Ustawa o prawie autorskim i prawach pokrewnych, Text-and-Data-Mining Exceptions	Through its TDM duty. What it requires
Romania	Legea nr. 8/1996 privind dreptul de autor și drepturile conexe, art. 36^1-36^2, Text and Data Mining Exceptions, inserted by Legea nr. 69/2022	Through its TDM duty. What it requires
United States	Digital Millennium Copyright Act, integrity of copyright management information	Through its attribution duty. What it requires
Uruguay	Ley N° 9.739 arts. 44-45, illicit-reproduction rule and free-use exceptions for quotation and news	Through its attribution duty. What it requires
Vatican City	Copyright and related rights by reference to Italian law (Legge N. CXCVII)	Through its attribution duty. What it requires

Snippet reproduction

19 laws, 19 jurisdictions

Jurisdiction	Law	How it reaches this control
Algeria	Ordonnance n° 03-05, exception de citation	Through its attribution duty. What it requires
Andorra	Copyright and Neighboring Rights Law, Press and Current-Events Reproduction Exception	Through its attribution duty. What it requires
Bahamas	Copyright Act 1998, fair dealing for reporting current events and criticism	Through its attribution duty. What it requires
Belarus	Law on Copyright and Related Rights, Free Use of Press Articles and Quotation	Through its attribution duty. What it requires
Bermuda	Copyright and Designs Act 2004, fair dealing for criticism, review and reporting current events	Through its attribution duty. What it requires
Comoros	Law on Literary and Artistic Property, quotation and press-review exception	Through its attribution duty. What it requires
Cook Islands	Copyright Act 2013, quoting and current-events reporting exceptions	Through its attribution duty. What it requires
Cuba	Ley 154/2022, De los Derechos del Autor y del Artista Intérprete, article 86, uses allowed without authorization or payment	Through its attribution duty. What it requires
Honduras	Ley del Derecho de Autor, reproducción de artículos de actualidad	Through its attribution duty. What it requires
Libya	Law No. 9 of 1968, quotation and newspaper-reproduction exceptions	Through its attribution duty. What it requires

Show the other 9 laws

Maldives	Copyright and Related Rights Act, quotation and current-events reproduction exceptions	Through its attribution duty. What it requires
Nauru	Copyright Act 2019, news and current-events exceptions to copyright	Through its attribution duty. What it requires
Nicaragua	Ley No. 312, quotation and press-reproduction limitations	Through its attribution duty. What it requires
Puerto Rico	Ley de Derechos Morales de Autor de Puerto Rico, news and criticism exception	Through its attribution duty. What it requires
Sao Tome and Principe	Decreto-Lei n.º 02/2017, exclusão das notícias do dia, revista de imprensa e citação	Through its attribution duty. What it requires
Seychelles	Copyright Act, news reproduction and press-article exceptions	Through its attribution duty. What it requires
State of Palestine	Copyright Act, 1911 (Extension to Palestine) Order, 1924, Fair Dealing Exception	Through its attribution duty. What it requires
Tonga	Copyright Act 2002, Reproduction of Newspaper Articles and Quotation Exceptions	Through its attribution duty. What it requires
Tunisia	Copyright Act, Facts Exclusion and Quotation and Press-Review Exception	Through its attribution duty. What it requires

Database right

7 laws, 7 jurisdictions

Jurisdiction	Law	How it reaches this control
Bahamas	Copyright Act 1998, compilation and database protection	Through its attribution duty. What it requires
Burkina Faso	Loi n°048-2019/AN du 12 novembre 2019 portant protection de la propriété littéraire et artistique, database and news exceptions	Through its attribution duty. What it requires
Burundi	Law No. 1/021 of December 30, 2005 on the Protection of Copyright and Related Rights, database and facts exclusions	Through its attribution duty. What it requires
Cayman Islands	Copyright (Cayman Islands) Order 2015, database and compilation copyright	Through its attribution duty. What it requires
Gabon	Loi n°1/87, protection des recueils et compilations	Through its attribution duty. What it requires
Nicaragua	Ley No. 312, protection of compilations and databases	Through its attribution duty. What it requires
Sao Tome and Principe	Decreto-Lei n.º 02/2017, protecção de compilações e exclusão das notícias do dia	Through its attribution duty. What it requires

Press publishers' right

6 laws, 6 jurisdictions

Jurisdiction	Law	How it reaches this control
Bulgaria	Copyright and Neighbouring Rights Act (ZAPSP), Arts. 90d and 90zh, Press Publisher Right	Through its attribution duty. What it requires
European Union	Directive (EU) 2019/790 on copyright and related rights in the Digital Single Market (DSM Directive), Articles 15 and 4	Through its TDM, attribution duties. What it requires
Germany	Presseverleger-Leistungsschutzrecht (Press Publisher Neighbouring Right)	Through its attribution duty. What it requires
Greece	Law 2121/1993 Article 51B, Press Publisher Neighbouring Right	Through its attribution duty. What it requires
Italy	Legge sul Diritto d'Autore Art. 43-bis, Press Publisher Neighbouring Right	Through its attribution duty. What it requires
Malta	Copyright and Related Rights in the Digital Single Market Regulations (S.L. 415.08), Regulation 15, Press Publishers' Right	Through its attribution duty. What it requires

AI governance

3 laws, 2 jurisdictions

Jurisdiction	Law	How it reaches this control
European Union	AI Act, Article 26(8) (public-authority deployer registration) from 2 Dec 2027, in 13 months	Through its licensing duty. What it requires
European Union	Commission Guidelines on the scope of the obligations for providers of general-purpose AI models under the AI Act	Through its TDM duty. What it requires
Vanuatu	Digital Transformation Act 2025, ICT service permit for AI and AI-related data services	Through its licensing duty. What it requires

AI risk obligations

1 law, 1 jurisdiction

Jurisdiction	Law	How it reaches this control
European Union	AI Act, Article 16 (obligations of providers of high-risk AI systems) from 2 Dec 2027, in 13 months	Through its licensing duty. What it requires

AI sector rules

1 law, 1 jurisdiction

Jurisdiction	Law	How it reaches this control
Mauritius	Financial Services (Robotic and Artificial Intelligence Enabled Advisory Services) Rules 2021	Through its licensing duty. What it requires

AI training data

1 law, 1 jurisdiction

Jurisdiction	Law	How it reaches this control
European Union	AI Act, Article 53 (obligations for providers of general-purpose AI models)	Through its TDM duty. What it requires

Copyright: the exclusive rights

1 law, 1 jurisdiction

Jurisdiction	Law	How it reaches this control
Japan	Copyright Act, Right of Reproduction, Right to Transmit to the Public, Right to Demand an Injunction and penalties	Through its attribution duty. What it requires

Full text of the NIST Generative AI Profile, public domain (a US government work). Every control of the framework.