Law / Frameworks / NIST AI RMF / Measure
NIST AI RMF, MeasureMEASURE 2.8
Risks associated with transparency and accountability – as identified in the MAP function – are examined and documented.NIST AI Risk Management Framework, version 1.0, January 2023 (NIST AI 100-1), MEASURE 2.8
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
- 146
- laws
- 80
- jurisdictions
- 2
- with court rulings behind them
- 26
- not yet in force
- 1
- blocked by a court
- 22
- proposed, not law
Related controls in other frameworks the same duties, in at least two laws we track, reach both
- NIST AI 600-1GAI-RISK-07 Human-AI Configuration, 101 laws
- NIST AI 600-1GAI-RISK-08 Information Integrity, 101 laws
- NIST AI 600-1GAI-RISK-11 Obscene, Degrading, and/or Abusive Content, 5 laws
- 2 more in the NIST AI 600-1
- OWASP Agentic Top 10ASI09 Human-Agent Trust Exploitation, 56 laws
- MIT mitigations4.6 User Rights & Recourse, 101 laws
- MIT mitigations4.1 System Documentation, 79 laws
- MIT mitigations4.2 Risk Disclosure, 79 laws
- 3 more in the MIT mitigations
- NIST Privacy FrameworkCM.AW-P1 Mechanisms (e.g., notices, internal or public reports) for communicating..., 8 laws
- FINOS AIGFAIR-DET-021 Agent Decision Audit and Explainability, 81 laws
- FINOS AIGFAIR-PREV-005 System Acceptance Testing, 2 laws
- FINOS AIGFAIR-PREV-006 Data Quality & Classification/Sensitivity, 2 laws
- ETSI EN 304 2235.1.3-2 Threats developers cannot resolve are passed to operators and on to end-users., 79 laws
- ETSI EN 304 2235.3.1-1 Users told where and how their data is used, accessed and stored, with..., 79 laws
- ETSI EN 304 2235.3.1-2.1 That guidance covers proper use, limits and likely failure modes., 79 laws
A law in force is unmarked; the rest wear their state: not yet in force blocked by a court proposed
AI transparency
92 laws, 60 jurisdictions| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
| Distribution of Materially Deceptive Media to Influence an Upcoming Election |
If you distribute AI-generated or AI-manipulated media that falsely depicts a candidate, and do so within 90 days of an election intending to harm that candidate's reputation or prospects or to change how electors vote, carry a clear and conspicuous disclaimer that the media has been manipulated by technical means and depicts speech or conduct that did not occur. The disclaimer has format-specific requirements: it must appear throughout a video, be read at the start and end of an audio-only piece, and be clearly visible on a still image, each in the language used in the media. |
|
| Digital impersonation of a candidate or other person (civil action) |
If you publish synthetic media depicting a real, identifiable person that was generated or manipulated using deep generative AI methods to convincingly replace or simulate that person's likeness or voice, reasonably convey to your audience that it is a digital impersonation, or that its authenticity is disputed, unless a reasonable person would already find that obvious. |
|
| Practice Direction No. 18 of 2025, ethical use of generative AI in court proceedings |
Disclose when AI-generated content is used in a court submission, and independently verify any AI-generated legal research before relying on it. |
|
| TSE Resolution, AI-Generated Content Disclosure Duty |
Place that disclosure at the start of an audio piece, or as a watermark label with audio description on a static image, or in both forms for a video or combined audio-video piece. |
|
| AB 2839, election materially deceptive deepfake disclaimer law blocked by a court |
It required a conspicuous manipulation disclaimer for satire or parody content to qualify for that exemption |
|
| AB 730, as extended by AB 972, election deepfake disclosure law |
Disclose that the media has been manipulated when you distribute materially deceptive audio or visual election media depicting a candidate within 60 days of an election |
|
| Bolstering Online Transparency Act (SB 1001) |
Clearly and conspicuously disclose that the user is interacting with a bot, which is the statute's safe harbor The prohibition reaches using a bot to mislead a Californian about its artificial identity in order to incentivize a commercial transaction or influence a vote |
|
| California AI Transparency Act (SB 942, as amended by AB 853, SB 1000 and AB 2713) |
Make available, at no cost to the user, a disclosure verification tool that lets a user assess whether image, video, or audio content was created or altered, other than by a minor modification, by your generative AI system and that outputs any system provenance data detected in the content To the extent it is technically feasible, embed in image, video, and audio content your system creates or alters a latent disclosure carrying your name, the system's name and version, the time and date, a unique identifier, and whether the system created or altered the content, and make it permanent or extraordinarily difficult to remove +1 more |
|
| Companion Chatbot Safety and Accountability Act (SB 243) |
If a reasonable person interacting with your companion chatbot could be misled into believing they are talking to a human, issue a clear and conspicuous notification that the chatbot is artificially generated and not human For a user you know is a minor, disclose that they are interacting with artificial intelligence, and provide a clear and conspicuous break reminder by default at least every three hours during continuing interactions (Section 22602(c)(1) and (2), deleted by SB 1119 effective ) +1 more |
|
| Synthetic Performer Advertising Disclosure Act (SB 1050) from , in 7 weeks |
Include a clear and conspicuous disclosure in any advertisement you create and cause to be published that prominently includes a synthetic performer, a digital figure, voice, or representation made in whole or in part with generative AI that gives the realistic impression of a human performer who is not an identifiable natural person Use disclosure wording substantially similar to "this performance features a synthetic performer" or "no human performer is depicted" |
Show the other 82 laws
| Bill C-34, Safe Social Media Act (synthetic content labelling and chatbot transparency) proposed |
Would require the operator of a regulated social media service, to the extent that it is reasonable for the operator to do so, to implement adequate measures to label, as synthetic content, any synthetic content accessible on the service that meets the criteria set by regulation. Would require a regulated AI chatbot service to implement measures adequate to mitigate the risk of the chatbot posing as a human being or otherwise being deceptive about being an artificial intelligence system. |
|
| Interim Measures for the Administration of Anthropomorphic Interactive Services of Artificial Intelligence, Article 18 |
Remind users they are interacting with an AI service rather than a person, at first use and again at re-login, if your product simulates a human personality and converses in an emotional style Re-notify prominently, by a method such as a pop-up, when the system detects signs of over-reliance or addiction +1 more |
|
| Interim Measures for the Management of Generative AI Services, Article 12 |
Label generated images, video, and comparable output if you offer generative AI services to the public in China Follow the Deep Synthesis Provisions' Articles 16 and 17 for how to label, rather than a separate standard of your own |
|
| Measures for Labeling AI-Generated Synthetic Content |
Add a user-perceptible label to AI-generated text, image, audio, video, and virtual-scene content Embed a machine-readable identifier in file metadata carrying the generation attributes and your provider name or code +2 more |
|
| Provisions on the Administration of Deep Synthesis Internet Information Services, Articles 16 and 17 |
Label content your service generates or edits, by a technical measure that does not interfere with normal use Apply a prominent public-facing label where the service simulates dialogue or writing, synthesizes or alters voice, generates or swaps faces, or builds immersive simulated scenes |
|
| HB 24-1147, Candidate Election Deepfake Disclosures |
Carry a clear and conspicuous disclosure that the communication has been edited and falsely appears authentic, when you distribute, publish, broadcast, or display a communication about a candidate that includes a deepfake |
|
| HB 26-1263 (2026), Conversational AI Service Operator Requirements |
Starting , if you know an account holder or user is a minor, institute technically feasible measures preventing the service from producing explicit sexual content or intimate digital depictions involving a minor, or from engaging in or encouraging explicit sexual conduct with a minor, and reasonable measures preventing it from claiming to be human or sentient, simulating a romantic companionship, or role-playing an adult-minor romantic relationship |
|
| SB 26-189 (2026), Automated Decision-Making Technology Act from , in 7 weeks |
Give clear and conspicuous notice before using covered automated decision-making technology that materially influences a consequential decision |
|
| AI Companion Chatbot Disclosure and Minor Safety Duties from , in 7 weeks |
If your AI companion would cause a reasonable user to believe they are speaking with a human, give a clear and conspicuous notice that the user is communicating with an artificial intelligence companion. |
|
| Generative AI Content Provenance Duty for Large Providers |
If your generative AI system has more than one million users a month and is publicly accessible to consumers, embed provenance data, to the extent commercially and technically reasonable, in audio, image, or video content the system creates or materially alters. Use commercially and technically reasonable methods, such as the Coalition for Content Provenance and Authenticity standard, to make that provenance data difficult to remove or tamper with. |
|
| Act Implementing the European Media Freedom Act, Article 23, Labelling of AI-Generated Content |
If you are a media service provider, a provider of an electronic publication or a video-sharing platform, label content you publish that has been generated in any way by artificial intelligence (Article 23). |
|
| House Bill 306 (pending), Computer Communication Act proposed |
Before completing a commercial transaction with a consumer who interacts with computer technology, notify the consumer if a reasonable person in their position would otherwise believe they were dealing with an actual human being. |
|
| Ley de Fomento a la Inteligencia Artificial y Tecnologías, decisiones de la IA o impulsadas por IA |
When you use AI commercially, or to determine a person's access to rights or services in El Salvador, tell them whether the decision was made directly by the AI or was AI-driven, with a comprehensible and transparent explanation of the process. |
|
| Resolución ANIA 0001/2025, derecho a notificación ante decisiones automatizadas |
If you use an AI system to make a decision about a person in El Salvador without meaningful human review, and it negatively affects their health, financial services, employment, education, government benefits, housing or transportation, notify them. In that notification, confirm that AI was involved, explain the role it played, and give the person a way to challenge the decision. |
|
| AI Act, Article 50 (transparency obligations for AI systems and synthetic content) |
If you are a provider of an AI system intended to interact directly with natural persons, design and develop it so that the people it interacts with are informed that they are interacting with an AI system, unless that is obvious to a reasonably well-informed, observant and circumspect person, taking into account the circumstances and the context of use (Article 50(1)). This does not apply to an AI system authorized by law to detect, prevent, investigate or prosecute criminal offenses, subject to appropriate safeguards for the rights and freedoms of third parties, unless the system is available for the public to report a criminal offense. If you are a provider of an AI system, including a general-purpose AI system, that generates synthetic audio, image, video or text content, ensure that its outputs are marked in a machine-readable format and detectable as artificially generated or manipulated, using technical solutions that are effective, interoperable, robust and reliable as far as technically feasible, taking into account the specificities and limitations of various types of content, the costs of implementation and the generally acknowledged state of the art (Article 50(2)). This marking duty is the provider's; a deployer's disclosure duties are in Article 50(3) and (4). It does not apply to the extent the system performs an assistive function for standard editing or does not substantially alter the input data the deployer provided or its semantics, or where authorized by law to detect, prevent, investigate or prosecute criminal offenses. +5 more |
|
| Digital Services Act, Article 35(1)(k) (systemic risk mitigation, synthetic media marking) |
Where it applies, ensure generated or manipulated content that would falsely appear authentic is distinguishable by prominent markings when presented on the platform |
|
| European Commission Guidelines on the implementation of the transparency obligations for certain AI systems under Article 50 of the AI Act from a date not yet set |
If you are a provider of an AI agent that is capable of interacting with natural persons, design and develop it so that it discloses both its artificial nature and the person on whose behalf it acts (paragraph 31). Where you cannot reliably determine in advance whether the agent will interact directly with a natural person, the guidelines say the agent should be designed at the architecture level, and instructed, to disclose itself as such in every situation where it is reasonably likely to interact with a natural person (paragraph 31). If your product or service blends AI-generated responses with human-curated content, disclose the specific outputs in the interaction that are AI-generated, unless those outputs have been properly reviewed and sent by humans as the main interlocutors with the natural persons; the guidelines say the mere possibility for humans to intervene or review the outputs should not be used to circumvent the disclosure requirement (paragraph 30). +11 more |
|
| AI Use in Political Advertising Disclosure Requirement (HB 919, 2024) |
Include a prominent disclaimer stating that generative AI was used, in a political advertisement, electioneering communication, or other advertisement of a political nature that depicts a real person performing an action that did not occur, where the content was created to injure a candidate or deceive regarding a ballot issue. Format the disclaimer for the medium: at least 12-point bold font in print, covering at least 4 percent of the vertical picture height in video or graphics, viewable without user action for online text or graphics, and at least 3 seconds long and clearly audible in audio. |
|
| Law 2023-451, Article 5, Labelling of Retouched and AI-Generated Images by Commercial Influencers |
If you are a commercial influencer within Article 1, label content that includes images produced by an artificial intelligence process meant to depict a face or a silhouette with the words “Images virtuelles” (Article 5(I), point 2). Make the labels clear, legible and understandable on any medium you use (Article 5(I)). |
|
| Ordonnance n°0011/PR/2026, marquage des contenus générés par intelligence artificielle |
Within twelve months of this ordinance's publication, deploy tools that automatically detect AI-generated or substantially AI-modified content published or shared on your service. Affix a visible, clear, and permanent label on content identified as generated or substantially modified by an AI system, accessible to the user without any further action on their part. |
|
| AI Companion Chatbot Safety Act (SB 540) from , in 8 months |
If you operate an AI companion chatbot, a system using artificial intelligence or emotional-recognition techniques to simulate a sustained human-like relationship by retaining information across sessions, asking unprompted emotion-based questions, and sustaining a personal dialogue, disclose clearly and conspicuously that the user is interacting with an AI companion chatbot at the start of each session and at least every three hours, or every hour if the operator knows or should know the user is a minor. |
|
| Digitale Medien-Staatsvertrag Teil 2 (Discussion Draft), Rules for Providers of AI Information Systems (Proposed Sections 77a to 77g of the Medienstaatsvertrag) proposed |
Keep easily perceivable, directly accessible and permanently available information on how your AI information system works, in understandable language. For news and political information content, state how likely the statements in newly generated content are to be accurate. |
|
| Medienstaatsvertrag (MStV) Section 18(3), Labelling of Automatically Created Content in Social Networks |
If you operate an automated account in a social network whose profile looks like one provided for natural persons, label each piece of content or message that a computer programme creates automatically as created and sent automatically using a programme that controls the account (Medienstaatsvertrag, section 18(3)). Place the notice legibly before or beside the content or message; it counts as automatic creation also where the programme sends a prepared content or a pre-programmed message (section 18(3)). +1 more |
|
| Law 5321/2026, National AI Act Implementation Law |
Do not remove or interfere with the machine-readable marking your AI system embeds in synthetic audio, image, video, or text output under EU AI Act Article 50(2). Do not remove or interfere with a deployer's disclosure that content is a deepfake or has been artificially generated or manipulated, under EU AI Act Article 50(4). |
|
| Artificial Intelligence Disclosure and Safety Act (2026 Haw. Sess. Laws Act 248, S.B. 3001 CD1) |
Issue a clear and conspicuous notification that an AI companion is artificial intelligence and not human, whenever a reasonable person interacting with it could otherwise be led to believe it is human. For a user you know or have reasonable certainty is a minor, disclose that the user is interacting with AI, either as a persistent visible disclaimer, or at the start of each session and at least once per hour of continuous interaction with a reminder to take a break. |
|
| Conversational AI Safety Act from , in 8 months |
If you operate a conversational AI service (an application, web interface, or program accessible to the public that primarily simulates human conversation through text, visual, or aural communication) and a reasonable person could be misled into believing they are interacting with a human, clearly and conspicuously disclose that the service is artificial intelligence. For a minor account holder, disclose the AI's non-human status either as a persistent visible disclaimer or at the start of each session and at least every three hours; do not use unpredictable reward mechanics to increase engagement; take reasonable measures against sexually explicit content directed at the minor and against statements suggesting the AI is sentient, human, romantically or sexually interested, or emotionally dependent; and offer account and privacy management tools to minors and to the parents or guardians of those under thirteen. |
|
| FAIR Elections Act, disclosure duty for synthetic media in electioneering communications |
If you create or develop synthetic media (audio or video generated or manipulated using generative adversarial network techniques or similar digital technology) that deceptively depicts a candidate's action or speech in an electioneering communication, disclose that the media has been manipulated; a stated on-screen disclosure for video, or a spoken disclosure at defined intervals for audio, is an affirmative defense to liability under this section. |
|
| Generative Artificial Intelligence in Education Act, vendor disclosure duty |
This law is in effect since . If your generative AI, machine learning, or predictive analytics product is procured by an Idaho public school district or public charter school, disclose to the procuring school or district that the product uses machine learning, predictive analytics, or generative AI, and provide assurances regarding data protection, algorithmic transparency, and responsible use. |
|
| Artificial Intelligence Video Interview Act |
Before asking an applicant to submit a video interview, notify them that artificial intelligence may be used to analyze it and consider their fitness for the position. Explain, before the interview, how the artificial intelligence works and what general types of characteristics it uses to evaluate applicants, and obtain the applicant's consent. |
|
| Synthetically Generated Information Labelling Duty for Intermediaries |
If you operate a computer resource that may enable the creation, generation, modification, alteration, publication, transmission, sharing or dissemination of synthetically generated information, prominently label such information, in the visual display or by a prefixed audio disclosure, so a viewer can immediately identify it as synthetically generated. Embed synthetically generated information with permanent metadata or another technical provenance mechanism, including a unique identifier, to the extent technically feasible, and do not enable removal, suppression or modification of that label or metadata. |
|
| Use of Digitally Altered Media in Elections (House Enrolled Act 1133, 2024) |
Include a disclaimer stating that elements of the media have been digitally altered or artificially generated, on any paid campaign communication that includes fabricated media of a candidate conveying a materially inaccurate depiction Display a printed disclaimer continuously for the duration of a video communication, and read an audio disclaimer at the start, the end, and every two minutes for a communication longer than two minutes |
|
| Conversational AI Services Act (Senate File 2417) from , in 8 months |
Disclose clearly and conspicuously to a minor account holder that they are interacting with artificial intelligence, using a persistent visible disclaimer or a disclaimer at the start of each interaction and at least once every three hours of continuous use. Disclose to any user that the service is artificial intelligence whenever a reasonable person interacting with it could otherwise believe they are talking to a human. |
|
| Practice Direction No. 1 of 2025, Use of Generative Artificial Intelligence in Court Proceedings |
Declare, in the prescribed form, whenever any part of a document submitted to a Jamaican court was prepared with the assistance of generative AI, and have that content thoroughly reviewed, verified, and approved before submission. |
|
| Public Offices Election Act, AI-Generated Content Labelling Duty (2026 Amendment) from , in 4 months |
An app that distributes, over the internet, a document or picture used for election campaigning, or used during the official campaign period to campaign against a candidate's election, that carries an image or video AI-related technology created or altered, must display that fact correctly on the screen of the device receiving it, unless the alteration is minor by common social understanding or the content carries no risk of being mistaken for an actual recording. |
|
| Digital Code, algorithmic decision-making rights |
Tell a person, on request, that a fully automated algorithmic system, an AI system included, was used to make a decision affecting them. |
|
| Law on Artificial Intelligence, transparency and disclosure duties |
Give users full information about an AI system's operational characteristics and limitations, and inform a user subject to an AI-assisted decision of the automated processing, its consequences, and how to object. Inform users that goods, works or services are produced or provided using an AI system. +1 more |
|
| Synthetic Media Disclosure in Electioneering Communications |
If a communication you sponsor about a candidate for elective office alters that candidate's appearance, action, or speech through synthetic media, include a disclosure that is clear and conspicuous and placed in or alongside the content so a user is likely to notice it. |
|
| Artificial Intelligence Bill, 2026, transparency, disclosure and synthetic-media labelling proposed |
Disclose to users and affected persons the nature, purpose and limitations of your system, the extent to which decisions or outputs are automated, and your bias-mitigation measures. |
|
| Digital Code, Chapter 23: AI interaction and deepfake disclosure duties |
An app that lets a natural person interact with an AI system must tell that person they are dealing with an AI system, unless the interaction is obviously with one. An app that uses an AI system to recognize a person's emotions or to classify a person by biometric characteristics must inform that person the system is being applied to them. +1 more |
|
| Pre-Election Campaigning Law, Articles 3.1 and 31.1, Indicating AI-Generated Campaign Content and the Ban on Further Distribution |
If you run paid pre-election campaigning, or produce campaign material, during the campaign period, state clearly and unambiguously when you use an AI-generated likeness of a person or an event that does not correspond to reality in an image, audio or video (Article 3.1). |
|
| Act 250 (HB 178), attorney duty to verify and disclose AI-generated evidence |
If you knew or should have known through reasonable diligence that evidence is false or artificially manipulated, disclose that fact before offering it; offering it without disclosure is a violation of Article 371. |
|
| Act 559 (HB 639), AI-generated voice telephone campaign communication disclosure |
Before placing a telephone call or automated call in a political campaign that was created using artificial intelligence and uses the voice of a public figure, an elected official, or a limited public figure, give a clear and understandable disclosure at the start of the call that it was created using artificial intelligence. |
|
| Act 806 (HB 459), AI-manipulated electioneering communication disclosure |
Before distributing an electioneering communication that portrays a candidate or an elected official subject to recall and that was created, altered, or digitally manipulated using artificial intelligence in a way that would falsely appear to be an authentic record of that person's actual speech or conduct, give a clear and understandable disclosure that artificial intelligence was used. |
|
| Maine Chatbot Disclosure Act |
Clearly and conspicuously notify a consumer that they are not engaging with a human being if you use an AI chatbot, or any other technology simulating human conversation, to engage with them in trade or commerce in a way that could mislead a reasonable consumer into believing otherwise. |
|
| An Act enhancing disclosure requirements for synthetic media in political advertising (H.5094) proposed |
Disclose at the beginning and end of any AI-generated synthetic media audio or video communication intended to influence a vote on a candidate or ballot question that it contains AI-generated material. |
|
| AI-Generated Political Advertisement and Robocall Disclosure (Public Act 263 of 2023) |
If a qualified political advertisement you create, originally publish, or originally distribute is generated in whole or substantially by artificial intelligence, include a clear and conspicuous disclosure that says so, sized and timed to the medium under MCL 169.259(1). If a prerecorded campaign telephone message you send is generated in whole or substantially by artificial intelligence, include the disclaimer required by MCL 169.247. |
|
| Distribution of Materially Deceptive Election Media (Public Act 265 of 2023) |
If the media was made by editing an existing image, audio, or video, include a citation to the original unedited source. |
|
| Conversational Artificial Intelligence Safety Act (LB 525, §§ 12-18) from , in 8 months |
Clearly and conspicuously disclose to a minor account holder that they are interacting with artificial intelligence, either as a persistent visible disclaimer or at the start of every session and at least every three hours during a continuous interaction. Where a reasonable person interacting with the service could be misled into believing they are talking to a human, clearly and conspicuously disclose that it is artificial intelligence. |
|
| AB 73 (2025), AI-manipulated media disclosure in paid political communications |
Disclose, clearly and conspicuously, that an image, video, or audio recording has been manipulated whenever a paid communication supporting or opposing a candidate or party, or soliciting campaign contributions, includes synthetic media. For video, keep the disclosure visible for the entire duration; for audio, read it clearly at the start, at the end, and at least every two minutes if the audio runs longer than two minutes. |
|
| Synthetic Media and Deceptive and Fraudulent Deepfakes in Elections |
Use the exact disclosure wording the statute prescribes, sized or paced so an average viewer or listener will notice it. |
|
| HB 182 (2024), AI-generated and manipulated media disclosure and disclaimer requirements in campaign advertising |
Include a disclaimer stating the content has been manipulated or generated by artificial intelligence on a campaign advertisement containing materially deceptive media (an image, video or audio depicting an identifiable individual doing or saying something they did not do or say, published without that person's consent, and produced in whole or in part using artificial intelligence). Display the disclaimer legibly for the duration of a video, or speak it clearly at the beginning and end of an audio message and at intervals of no more than two minutes if the audio runs longer, or both for mixed media. |
|
| AI Content Provenance and Stop Deepfakes Act proposed |
Embed machine-readable provenance data in synthetic content you create or modify with a generative AI system, identifying it as synthetic. If you operate a social media platform, do not delete, disassociate from, or degrade the provenance data attached to content a user uploads. |
|
| Artificial Intelligence Companion Models safeguards |
Give users a clear and conspicuous notification, at the start of an AI companion interaction and at least every three hours of continued use, that they are not communicating with a human. |
|
| Disclosure of materially deceptive AI-generated media in political communications |
Disclose, in the format this section specifies, when you distribute or publish a political communication produced by or including materially deceptive AI-generated or AI-altered media and you have actual knowledge that it is materially deceptive. |
|
| Synthetic Performer Advertising Disclosure Law |
Conspicuously disclose, in an advertisement you produce or create for a sale or a service, that a synthetic performer appears in it, where you have actual knowledge that it does. |
|
| New York City | Chatbot Data Privacy, Security, and Transparency proposed |
It would require a chatbot provider to notify each user, before the chatbot generates any output, every hour afterward and each time the user asks whether it is a real person, that the user is interacting with a chatbot rather than a human, in a form accessible to users with disabilities, in the language the user is using and in a font no smaller than the largest other text on the interface. |
| New York City | Requiring Certain Disclosures and Prohibiting Deceptive Representations in the Promotion of Artificial Intelligence Models proposed |
It would require any commercial message in the city that promotes an artificial intelligence model, directly or indirectly, to disclose whether a third-party validator validated the model under the proposed subchapter 27 of chapter 5, in the form the commissioner's rules would set. |
| House Bill 1167 (2025), AI-generated political content disclosure |
State the disclaimer "THIS CONTENT GENERATED BY ARTIFICIAL INTELLIGENCE" prominently on any political communication or advertisement that uses AI-created images, graphics, video, audio, or text to visually or audibly impersonate a human. |
|
| S.B. 163, AI-Generated Content Watermark and Provenance Mandate proposed |
If you create, code, or otherwise produce a generative AI system publicly accessible to Ohio consumers for personal use, program it to place a distinctive watermark on any image or video it generates, informing the user the content is AI-generated, and to embed provenance data in content it creates. Do not knowingly and with intent to deceive a third party remove a required watermark, or knowingly distribute content fully generated by a generative AI system with false information about its authenticity. |
|
| AI Companion Chatbot Safety Act (SB 1546) from , in 7 weeks |
Give users a clear and conspicuous notice that they are interacting with artificially generated output, if a reasonable person could otherwise believe they were talking to a natural person. Where you know or have reason to believe a user is a minor, prevent the companion from claiming to be sentient or human, simulating emotional dependence or romantic interest, role-playing a romantic relationship with a minor, or producing sexually explicit content or suggestions, and add periodic reminders that the output is artificially generated. |
|
| Campaign communication disclosure of synthetic media (SB 1571) |
Include a disclosure stating that the recording has been manipulated, when a campaign communication includes synthetic media that depicts a candidate's appearance, speech or conduct in a realistic but false way. |
|
| S.B. 1090, SAFECHAT Act proposed |
Issue a clear and conspicuous notification that an AI companion is artificially generated and not human, whenever a reasonable person interacting with it could otherwise be misled into believing it is human. |
|
| S.B. 806, Artificial Intelligence Deceptive Advertising Act from , in 5 weeks |
Do not knowingly, recklessly or willfully create and disseminate, or cause to be created and disseminated, an advertisement that uses AI-generated or significantly AI-modified content in a manner that creates a false consumer perception about the nature, origin or authenticity of the goods or services advertised, without a clear and conspicuous disclosure. Make the disclosure state that the advertisement contains content that was modified or generated using artificial intelligence, display it in the first instance whenever the content is presented, present it in the same medium as the content, and, to the extent technically feasible, make it permanent or extraordinarily difficult to remove. |
|
| AI disclosure in political advertising and electoral communications |
Include a clear, visible disclosure whenever a political advertisement or electoral communication is created or modified, in whole or in part, using AI, including generative AI producing text, image, audio, or video. For a radio or other audiovisual electoral communication, make the AI disclosure as a spoken statement, not only in writing. |
|
| Use of Artificial Intelligence by Healthcare Providers Notification Act |
If you are a healthcare provider or facility that uses AI to document an in-person or telehealth visit, notify the patient that AI was used for that purpose. |
|
| Federal Law No. 243-FZ, Article 9, AI-Generated Content Notice from , in 4 months |
If you apply a large foundation AI model to create audio or visual informational material, give the recipient the ability to place a notice that AI technology was used; the exact format is left to agreement with the party providing the model, so it is not a mandatory watermark. If you own a Russian-language personal-page platform reaching more than 500,000 Russia-based daily users, give your users the ability to place that same AI-use notice on content they distribute that was created with a large foundation AI model. |
|
| Media Act (ZMed-1), Articles 66 and 67, Labelling of AI-Generated Media Content and Publisher Responsibility |
If you publish a medium, make any programme content created partly or wholly with generative AI systems clearly recognisable and set apart from your other programme content (Article 66(1)). Label that content with clear and systematic labels at its start and at its end (Article 66(2)). +2 more |
|
| AI Framework Act, Article 31 (transparency obligations for AI outputs) |
Notify users when content they see was produced by generative AI |
|
| Ley 10/2025 Final Provisions 1 and 3, Disclosure of Automated Personalisation of Offers and Prices to Consumers |
In contracts concluded at a distance or away from the business premises, give the consumer clear and comprehensible information on the price when it has been personalised on the basis of automated decision-making (Real Decreto Legislativo 1/2007, article 20.1.c). |
|
| TRAIGA (H.B. 149, 2025), consumer AI-interaction disclosure duty |
If you are a governmental agency making an AI system available to interact with consumers, disclose before or at the time of interaction that the consumer is interacting with an AI system, even if that would already be obvious to a reasonable consumer. The disclosure must be clear and conspicuous, written in plain language, and may not use a dark pattern; a hyperlink to a separate page satisfies it. +1 more |
|
| Commercial Advertising Regulation, AI Disclosure Duty |
Where an advertisement directed at consumers in Turkey uses artificial intelligence or other software in a way that significantly affects a consumer's economic behaviour, or presents an AI-generated digital character that a consumer could mistake for a real human being, disclose that fact clearly, understandably, and in a manner distinguishable from the rest of the advertisement. |
|
| AI Labeling Act of 2026 proposed |
As introduced it would require a visible disclosure on AI-generated image, video, and audio content It would also require a machine-readable provenance record naming the system used and the time the content was created |
|
| FCC AI Political Ad Disclosure Rulemaking, Docket 24-211 proposed |
As proposed it would require on-air and written disclosure of AI-generated content in radio and television political advertising, for entities that already have public-file obligations |
|
| Digital Content Provenance Standards Act (HB 276, 2026 General Session), Utah Code Title 13 Chapter 72c from , in 7 weeks |
Detect whether compliant system provenance data is embedded in content you distribute, give users a way to see and download it, and do not knowingly strip it where technically feasible, if you operate a large online platform with over 2,000,000 unique monthly users Include a latent disclosure in image, video, or audio content your generative AI system creates or substantially modifies, if your system has over 1,000,000 monthly visitors or users and is publicly accessible in the state +1 more |
|
| HB 452 (2025), mental health chatbot disclosure |
Have the chatbot clearly and conspicuously disclose that it is artificial intelligence and not human, if it simulates the kind of confidential conversation a licensed mental health therapist would have Disclose before the user can access the chatbot's features +2 more |
|
| SB 226 (2025), required disclosures for generative AI in consumer transactions |
Disclose that the individual is interacting with generative AI when they ask clearly and unambiguously, if you use generative AI to interact with someone in a consumer transaction Disclose proactively and prominently, verbally or in writing as applicable, if you work in a state-regulated occupation and the interaction is high risk |
|
| Vermont Synthetic Media in Elections Act |
The disclosure must read: 'This media has been manipulated or generated by digital technology and depicts speech or conduct that did not occur,' shown for a video's full duration or read at intervals of not more than two minutes for audio. |
|
| Law on Artificial Intelligence, transparency obligation |
Design an AI system that interacts directly with users so that users can recognise they are interacting with an AI system, unless the law provides otherwise. Mark AI-generated audio, image, and video content in a machine-readable format under the Government's regulations. +2 more |
|
| AI companion chatbot disclosure and safety act from , in 7 weeks |
If you operate an AI companion chatbot, disclose clearly and conspicuously that it is artificial and not human at the start of an interaction, at least every three hours during continued interaction, and at the start of every new session. If you know the user is a minor, disclose proactively, take reasonable measures to prevent the chatbot from generating sexually explicit content or suggestive dialogue with them, and do not use manipulative engagement techniques designed to prolong an emotional attachment. |
|
| AI content provenance and disclosure act from , in 3 months |
If your generative AI system has over 1,000,000 monthly Washington visitors or users, offer users the option to add a manifest disclosure identifying AI-generated image, video, or audio content as such, that is clear, conspicuous, and difficult to remove. Separately, embed a latent, system-readable disclosure in the AI-generated image, video, or audio content itself, conveying your name, the generating system and version, and the content's creation date, and make it detectable by a free, public AI-detection tool you provide. |
|
| Synthetic media in electioneering communications |
If your synthetic media alters a candidate's appearance, action, or speech in an electioneering communication, include a conspicuous disclosure stating the media has been manipulated, in the form and duration this statute specifies for visual and audio media, or the sponsor is exposed to injunctive relief and a damages action. |
|
| 2023 Wisconsin Act 123, AI-Generated Content Disclosure in Political Communications |
Include the words "Contains content generated by AI" at both the beginning and the end of any audio political communication (express advocacy, issue advocacy, or a referendum communication) that contains synthetic media substantially produced by generative artificial intelligence. For a covered video communication, display, throughout the duration of any portion containing synthetic media, a readable, legible, and readily accessible disclosure reading "This video content generated by AI," "This audio content generated by AI," or "This content generated by AI," as applicable. |
AI sector rules
25 laws, 20 jurisdictions| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
| SB 63 (2026), Artificial Intelligence in Health Insurance Prior Authorization |
Make prominent written disclosure of your use of artificial intelligence in utilization review in your policies and procedures, review its outcomes periodically for accuracy, and keep patient data used in that review within its stated purpose under HIPAA. |
|
| Verbraucherkreditgesetz 2026 (VKrG 2026), Personalized Offers and Automated Creditworthiness Assessment (Sections 13 and 17(5)) from , in 6 days |
If you are a lender or a credit intermediary and make a consumer an offer that was personalized on the basis of automated processing of personal data, tell the consumer so clearly and comprehensibly (section 13). Inform the consumer of these rights (section 17(5), last sentence). |
|
| Attorney, Court Filing and Arbitrator Generative AI Duties (SB 574) from , in 7 weeks |
Disclose the use of generative AI to the court for all documents you submit to the court, and consider whether to disclose its use if it is used to create content provided to the public If you are an arbitrator, do not delegate any part of your decisionmaking process to any generative AI tool, and do not rely on information generated by generative AI outside the record without making appropriate disclosures to the parties beforehand and, as far as practical, allowing them to comment on its use |
|
| Employment Automated Decision Systems Act (SB 947) from , in 8 months |
When you primarily used an automated decision system to make a disciplinary or termination decision, give the affected employee a plain-language, stand-alone written postuse notice at the time you tell them of the decision On request, give an employee a meaningful, objective description of their own data used by the system when you primarily used it to make a disciplinary or termination decision |
|
| Healthcare AI Patient-Communication Disclosure Act (AB 3030) |
If you are a health facility, clinic, physician's office, or office of a group practice using generative AI to produce written or verbal patient communications about clinical information, include a disclaimer that the communication was generated by generative artificial intelligence Place that disclaimer at the start of a written letter or email, displayed throughout an ongoing chat, video, or telehealth interaction, or spoken at the start and end of an audio interaction, depending on the communication's format |
|
| HB 26-1195 (2026), Psychotherapy Artificial Intelligence Restrictions |
At initial client contact, inform clients of the prohibitions on the use of AI systems in the practice of psychotherapy |
|
| Automated Employment-Related Decision Technology Act from , in 11 months |
If you deploy the technology to interact with an employee or applicant, ensure they are told they are interacting with it, unless that would be obvious to a reasonable person. Before an employment-related decision is made using the technology, give the employee or applicant written notice naming the technology, its purpose, the categories and sources of personal data it analyzes, and your contact information. +1 more |
|
| Consumer Credit Act, Articles 24 and 30, Personalised Offers and Creditworthiness Assessment by Automated Processing from , in 6 days |
If you offer a consumer a personalised offer based on automated processing of personal data, tell the consumer so clearly and comprehensibly, in addition to your duties under Regulation (EU) 2016/679 (Article 24). If you are a creditor and your creditworthiness assessment involves automated processing of personal data, tell the consumer so in writing, and tell the consumer of the right to a human assessment (Article 30(1)). |
|
| Labour Act, Articles 221.g to 221.i, Algorithmic Management of Work Through Digital Labour Platforms |
Before work begins, let the worker learn how tasks will be assigned, how the worker will be monitored and how the work will be evaluated, and make the related data available to the worker on request (Article 221.g(2) and (5)). |
|
| Betriebsverfassungsgesetz (BetrVG) Sections 80(3), 90(1) No. 3 and 95(2a), Works Council Rights on the Use of Artificial Intelligence |
If you are a private-sector employer with a works council, inform the works council in good time, with the necessary documents, about the planned use of artificial intelligence in work procedures and work flows (Betriebsverfassungsgesetz, section 90(1), point 3). |
Show the other 15 laws
| Illinois Human Rights Act, use of artificial intelligence in employment decisions |
Notify an employee or applicant whenever you use artificial intelligence for the employment purposes described above; the Illinois Department of Human Rights sets the timing, circumstances, and means for that notice by rule. |
|
| Decreto Legislativo 179/2026 Art. 41, Employer Decisions Assisted by AI Systems (Final Decisions Reserved to a Person) |
Before the processing starts, give the worker the information required by Article 1-bis of Decreto Legislativo 152/1997. |
|
| Legge 132/2025, Sector Human-Oversight and Disclosure Duties (Artt. 4, 11, 13) |
If you are an employer or client deploying AI in the workplace, inform workers of the AI's use as required by Article 1-bis of Decreto Legislativo 152/1997, and keep the AI's use in employment safe, reliable, transparent, non-discriminatory, and respectful of workers' dignity and personal data (art. 11). If you provide services within a regulated intellectual profession using AI systems, use them only for instrumental and support tasks that leave your own intellectual work predominant, and clearly tell the client which AI systems you used (art. 13). |
|
| Central Bank of Jordan Artificial Intelligence Framework for the Banking Sector, Version 1.0 |
The CBJ expects AI systems with material impact on customers, such as credit scoring or anti-fraud measures, to produce explainable outputs, and expects you to notify customers clearly and prominently, at the point of interaction, that they are interacting with AI-driven systems (section 2.2). |
|
| Financial Services (Robotic and Artificial Intelligence Enabled Advisory Services) Rules 2021 |
Give clients clear, fair and non-misleading information about your services, products, suitability method and risks, and disclose in writing any actual or potential conflict of interest (clause 11(1) and (2)). Enter into a service-level agreement with each client before providing any services, stating any exclusivity agreements and the conditions or triggers that can discontinue the service and allow human judgment to be used or to replace it; display the Commission's notice that it does not vouch for the correctness of information on your robotic or artificial intelligence interface and that clients are not protected by statutory compensation arrangements in Mauritius, in the agreement, on your website and on your platform; and obtain each client's written confirmation, before providing services, that the client understands the scope, nature, risks and limitations of the advisory services (clause 11(3) to (6)). |
|
| FSC Fintech Series Guidance Notes 4, responsible use of artificial intelligence in financial services |
The Commission advises you to give customers clear and understandable information on how algorithms are used for decision-making, a clear channel to seek information and raise concerns, and an effective grievance redress mechanism for complaints about AI-driven decisions. |
|
| Michigan DIFS Bulletin 2026-03-BT/CF/CU, Use of Artificial Intelligence Systems by Financial Service Providers |
Your AIS Program should include processes and procedures to provide notice to impacted consumers that AI Systems are in use, and access to appropriate levels of information based on the phase of the business cycle in which the AI Systems are being used (guideline 1.9). |
|
| Ontario | Employment Standards Act, 2000, use of artificial intelligence in job postings |
If you are an employer that has 25 or more employees on the day you post a publicly advertised job posting, and you use artificial intelligence to screen, assess or select applicants for the position, include a statement in the posting disclosing that you use artificial intelligence for that purpose. |
| Oversight of Artificial Intelligence Technology in Mental Health Care Act |
Where an AI companion or emotional-support tool assists with a recorded or transcribed therapy session, tell the patient (or their representative) in writing what the tool is for and obtain their consent before using it. |
|
| Election Deepfake Disclosure Law (SB 164, 2025) |
If disseminating such content, superimpose (for an image or video) or speak at the beginning and end (for audio) a disclosure reading that the item has been manipulated or generated by artificial intelligence, sized or spoken to be easily seen or heard by an average viewer or listener. |
|
| Real Decreto 723/2026 Article 3(2)(k), Written Notice to Workers of Algorithmic and Automated Decision-Making Systems |
Inform each worker in writing, before the employment relationship begins, that algorithmic or automated decision-making systems exist (Real Decreto 723/2026, Article 3(2)(k) and Article 7(1)). For a worker already employed on who asks for it, provide the information within thirty working days of receiving the request, unless the worker already holds it. |
|
| Consumer Credit Act (2026:1011), Chapter 2 Section 7 and Chapter 3 Section 15, Personalised Offers and Credit Assessment by Automated Processing from , in 6 days |
If you offer a consumer a personalised offer of credit that rests entirely on automated processing of personal data, tell the consumer so clearly and comprehensibly (Chapter 2, section 7). Inform the consumer of those possibilities in connection with the credit assessment (Chapter 3, section 15, second paragraph). |
|
| S.B. 1188 (2025), AI diagnostic disclosure duty in electronic health records |
Disclose your use of AI for diagnostic purposes to the patient. |
|
| Guidance Note on the Consumer Protection and Responsible Adoption and Use of Artificial Intelligence and Machine Learning by Licensed Financial Institutions in the U.A.E. |
Be transparent with customers and relevant stakeholders about your use of AI, particularly in respect of high-impact decisions and when a customer is communicating or interacting with an AI application, be clear how AI systems operate and make decisions, make disclosures in plain language in both Arabic and English, and consider offering customers opt-out rights with respect to AI, particularly for high-impact decisions (Sections 4(a) to 4(c)). Do not use AI to target consumers with unsuitable products or to engage in pressure-selling or misleading marketing, and make sure promotional materials and chatbots comply with disclosure requirements in line with the Consumer Protection Regulation (Section 7(d)). |
|
| Health Insurance Preauthorization AI Disclosure (SB 319, 2026 General Session) from , in 7 weeks |
Disclose to the Insurance Department, to each network health care provider, and to each enrollee whether you use artificial intelligence in reviewing a preauthorization request, if you are a health insurer Post that disclosure and your preauthorization statistics on your website |
AI risk obligations
13 laws, 12 jurisdictions| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
| CCPA Automated Decisionmaking Technology Regulations |
If you use automated decisionmaking technology (ADMT) to make a significant decision about a consumer (granting or denying financial or lending services, housing, education enrollment or opportunities, employment or independent-contracting opportunities or compensation, or healthcare services), give the consumer a Pre-use Notice describing that use and the consumer's rights to opt out of and access information about it |
|
| AI Act, Article 26(11) (informing individuals subject to an Annex III decision) from , in 13 months |
If you are the deployer of a high-risk AI system listed in Annex III that makes, or assists in making, a decision about a natural person, inform that person that they are subject to the use of the high-risk AI system. |
|
| AI Act, Article 26(7) (informing workers before workplace use) from , in 13 months |
If you are an employer deploying a high-risk AI system at the workplace, inform workers' representatives and the affected workers that they will be subject to its use, before putting the system into service or using it. |
|
| Council of Europe Framework Convention on AI, Georgia's signature proposed |
Document information about an AI system and its usage, make it available to affected persons so they can challenge a decision made through or substantially based on the system, and provide an effective way to complain to a competent authority. |
|
| Downcoding of Health Benefits Claims, automated and AI decision-making (House Enrolled Act 1271, 2026) |
Disclose, in an easily accessible and readable manner, whenever artificial intelligence is used to make an adverse determination on a prior authorization request or to downcode a claim |
|
| Artificial Intelligence Bill, 2026, high-risk system obligations proposed |
Obtain explicit consent from a person, or their legal representative, before generating or manipulating their image, voice or likeness, and label the output as AI-generated. |
|
| Digital Code, Chapter 23: AI system design and risk-management obligations |
Where such a system's output feeds a decision that could affect a person's rights, the user must publish or otherwise supply plain-language information about the system and, on request from an affected person, explain free of charge how that person's result was reached. |
|
| Ensuring Transparency in Prior Authorization Act, artificial-intelligence utilization review restriction |
Disclose to the Department of Insurance, to each health care provider in your network, to each enrollee, and on your public website whether artificial intelligence-based algorithms are used or will be used in the utilization review process. |
|
| AI-based electronic monitoring and automated employment decision systems in employment and public services (S4075 / A4981) proposed |
Give your employees and any union representing them written notice 60 days in advance that you intend to implement an automated employment decision system or electronic monitoring tool. |
|
| New York Artificial Intelligence Act proposed |
Inform the affected individual, at the immediate onset of the engagement, that a high-risk AI system will be used to make or assist in making a consequential decision (Section 108(1)). Inform the affected individual and any covered agent within 10 days that a high-risk AI system has been used to make a consequential decision, and provide and explain a process to appeal it (Section 108(2)(a)). |
Show the other 3 laws
| New York City | Automated Employment Decision Tools Bias Audit and Notice Law |
Before screening a candidate or employee in New York City with an automated employment decision tool, a product must be the subject of a bias audit performed within the prior year, publish a summary of that audit, and notify each affected candidate or employee at least ten business days beforehand of the tool's use and the job qualifications and characteristics it assesses. |
| Norwegian Artificial Intelligence Act (KI-loven) proposed |
Disclose to a user that they are interacting with a chatbot and label AI-generated synthetic content, mirroring the EU AI Act's transparency duties. |
|
| Reglamento de la Ley 31814, high-risk AI system duties |
Before a high-risk AI system interacts with a user, tell them, clearly and simply, its purpose or use, its main functions, and the kind of decisions it can make. |
AI governance
9 laws, 9 jurisdictions| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
| Council of Europe Framework Convention on Artificial Intelligence, signed by Andorra proposed |
Each Party must seek to ensure, as appropriate for the context, that persons interacting with an AI system are notified that they are interacting with such a system rather than with a human, and must adopt or maintain measures for accessible and effective remedies, as far as its international obligations require and its domestic legal system allows, including measures to ensure that information about an AI system is sufficient for affected persons to contest a decision made or substantially informed by its use. |
|
| Council of Europe Framework Convention on Artificial Intelligence, signed by Armenia proposed |
Each Party must seek to ensure, as appropriate for the context, that persons interacting with an AI system are notified that they are interacting with such a system rather than with a human, and must adopt or maintain measures for accessible and effective remedies, as far as its international obligations require and its domestic legal system allows, including measures to ensure that information about an AI system is sufficient for affected persons to contest a decision made or substantially informed by its use. |
|
| Council of Europe Framework Convention on Artificial Intelligence, signed by Canada proposed |
Each Party must seek to ensure, as appropriate for the context, that persons interacting with an AI system are notified that they are interacting with such a system rather than with a human, and must adopt or maintain measures for accessible and effective remedies, as far as its international obligations require and its domestic legal system allows, including measures to ensure that information about an AI system is sufficient for affected persons to contest a decision made or substantially informed by its use. |
|
| Law on Digital Operational Resilience of the Financial Market and the Use of Artificial Intelligence, Articles 7, 8(5)-(7), 10(3)-(4) and 11(2) |
Meet the transparency duties of providers and deployers in Article 50 of the Regulation (Article 11(2), point 10). |
|
| Council of Europe Framework Convention on Artificial Intelligence, signed by Moldova proposed |
Each Party must seek to ensure, as appropriate for the context, that persons interacting with an AI system are notified that they are interacting with such a system rather than with a human, and must adopt or maintain measures for accessible and effective remedies, as far as its international obligations require and its domestic legal system allows, including measures to ensure that information about an AI system is sufficient for affected persons to contest a decision made or substantially informed by its use. |
|
| Portuguese Charter of Human Rights in the Digital Era, Article 9, Use of Artificial Intelligence and Robots |
Communicate to the persons concerned a decision with significant impact on them that you take through algorithms, and keep it open to appeal and audit as the law provides (Article 9(2)). |
|
| Artificial Intelligence Basic Act (人工智慧基本法) |
An AI product or system that a central competent authority for the relevant industry, in consultation with the Ministry of Digital Affairs, identifies as a high-risk application must come with advisory notices or warnings (Article 5). |
|
| Council of Europe Framework Convention on Artificial Intelligence, signed by the United Kingdom proposed |
Each Party must seek to ensure, as appropriate for the context, that persons interacting with an AI system are notified that they are interacting with such a system rather than with a human, and must adopt or maintain measures for accessible and effective remedies, as far as its international obligations require and its domestic legal system allows, including measures to ensure that information about an AI system is sufficient for affected persons to contest a decision made or substantially informed by its use. |
|
| Guidelines on Artificial Intelligence of Vatican City State (Decree No. DCCII) |
Label AI-generated text, music, photographic, audiovisual, radio, or figurative-art content that a Vatican City State institution disseminates with the acronym 'IA'. |
Personal data
2 laws, 2 jurisdictions| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
| Connecticut Data Privacy Act (CTDPA), publicly available information exemption |
If you meet the CTDPA's applicability thresholds (since , the personal data of at least 35,000 consumers, any processing of consumers' sensitive data, or offering personal data for sale), personal data you collect that is not publicly available in the Act's own sense still triggers the Act's business obligations, including when it feeds AI training, and your privacy notice must state whether you collect, use or sell personal data to train large language models. |
|
| New York City Biometric Identifier Information Law |
If you are a commercial establishment in New York City collecting, retaining, converting, storing, or sharing biometric identifier information, including from scraped or captured photos processed into a face-geometry scan, post clear and conspicuous signage disclosing that practice. |
AI prohibited practices
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
| HB 895 / Ch. 154 (2026), Surveillance Pricing and Algorithmic Price Disclosure (Protection from Predatory Pricing Act) |
If you are any other merchant and you set the price of a consumer good or service using dynamic pricing or personal data, and you then advertise, label, or otherwise communicate that price, include a clear and conspicuous disclosure stating: "This price was set by an algorithm or by using your personal data." |
AI training data
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
| CMA Publisher Conduct Requirement on Google's general search services from , in 3 weeks |
Publish clear, comprehensible and user-friendly information on how search content is used for the training and grounding of generative AI services and features, and on the effect and scope of the controls. |
Crawl signals
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
| New Jersey Bot Disclosure Act |
If you deploy an automated account to communicate or interact with a person in New Jersey to sell or advertise merchandise or real estate, or to solicit election support, disclose at the outset, clearly and conspicuously, that the communication is being conducted by or through a bot. |
Data subject rights
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
| Platform Work Directive, Transparency, Human Oversight and Human Review of Automated Systems (Articles 9 to 11) from , in 3 weeks |
If you are a digital labour platform, inform persons performing platform work, platform workers' representatives and, upon request, national competent authorities of the use of automated monitoring systems or automated decision-making systems (Article 9(1)). Include in that information, for an automated monitoring system, the fact that it is in use or is in the process of being introduced, the categories of data and action monitored, supervised or evaluated, including evaluation by the recipient of the service, the aim of the monitoring and how the system carries it out, and the recipients or categories of recipient of the personal data processed and any transmission or transfer of it, including within a group of undertakings (Article 9(1), point (a)). +1 more |
Sensitive categories
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
| Political Advertising Regulation, Targeting and Ad-Delivery Techniques (Articles 18 and 19) |
Provide, together with the indication that the advertisement is political, the additional information that lets the individual understand the logic involved and the main parameters of the techniques used, including whether an artificial intelligence system has been used to target or deliver the advertisement and any additional analytical techniques, with the elements listed in Article 19(1)(c), points (i) to (vi): the specific groups of recipients targeted and the parameters used to determine them, the categories of personal data used, the targeting goals, mechanisms and logic including the inclusion and exclusion parameters and the reasons for choosing them, meaningful information on the use of artificial intelligence systems, the period of dissemination and the number of individuals reached, and a link to or clear indication of where the policy can be retrieved (Article 19(1)(c)). |
Full text of the NIST AI Risk Management Framework, public domain (a US government work). Every control of the framework.