Law / United States / Wisconsin

Wisconsin

United States law applies in Wisconsin Wisconsin is a state of the United States, whose 32 researched instruments are listed on the United States page, not here. The law of Wisconsin, described on this page below, applies here too.

5 of 6 named instruments researched to a stage, across three of the six areas of law we track: 4 in force and 1 enacted but not yet in force. As of 16 September 2026.

  1. AI law 3
  2. Privacy law 1
  3. Scraping law 1
  4. Cybersecurity law none researched
  5. Age gating law none researched
  6. News aggregation law none researched

in forceenacted but not yet in forceproposedrepealed, withdrawn or blocked

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

AI law3 instruments, 3 in force

Research summary (302 words)

Wisconsin has enacted three AI-specific instruments binding a private actor. 2023 Wisconsin Act 123 (effective 23 March 2024) requires a clear on-screen or spoken disclosure on political audio and video communications containing synthetic media substantially produced by generative artificial intelligence, enforced by a forfeiture of up to $1,000 per intentional violation.

2023 Wisconsin Act 224 (effective 29 March 2024) created Wis. Stat. § 948.125, a felony ban on possessing, receiving, distributing, producing, or accessing obscene material containing a depiction of a purported child engaging in sexually explicit conduct, reaching a wholly computer-generated or AI-generated image with no real child involved.

2025 Wisconsin Act 34 (effective 4 October 2025) added a "synthetic intimate representation" definition and a matching felony ban, inside Wisconsin's existing intimate-image statute, on posting, publishing, distributing, or exhibiting a realistic AI-generated or technologically-generated intimate depiction of an identifiable person with intent to coerce, harass, or intimidate them; the same act created a related, non-synthetic-specific reproduction offense in the same section.

Separately, the Wisconsin Office of the Commissioner of Insurance issued a bulletin on March 18, 2025 adopting the NAIC's AI principles and setting governance expectations for insurers' use of AI systems in underwriting, pricing, and claims decisions, grounded in Wisconsin's existing unfair-trade-practices and insurance-administration statutes rather than creating a new statutory duty of its own.

A companion-chatbot bill for children, 2025 Senate Bill 939 (companion Assembly Bill 965), which would have banned making a companion chatbot available to a child without safety measures against encouraging self-harm or sexual content, failed to pass in the 2025-2026 session and binds nobody. Wisconsin's general deceptive trade practices statute, Wis. Stat. § 100.18, was checked and is not AI-specific; it is not catalogued as a separate instrument here.

No general-purpose AI-risk-management statute, and no election-deepfake disclosure statute beyond the political-advertising provision above, was located.

AI prohibited practices

2023 Wisconsin Act 224, Possession of Virtual Child Pornography

Wis. Stat. § 948.125official act text, 2023 Wisconsin Act 224, Wisconsin Legislature (docs.legis.wisconsin.gov)

In force since 29 March 2024. Binds public and private bodies.

What this law does

Whoever receives, distributes, produces, or possesses, or accesses in any way with the intent to view, obscene material that contains a depiction of a purported child engaging in sexually explicit conduct is guilty of a felony, if the person knows or reasonably should know that the material contains such a depiction.

"Depiction of a purported child" is defined as a visual representation that appears to depict an actual child but may or may not depict an actual child, and "obscene material" is defined to include a digital or computer-generated image or picture satisfying the standard Miller obscenity test (appeals to the prurient interest, is patently offensive under contemporary community standards, and lacks serious literary, artistic, political, educational, or scientific value).

Because the depiction need not show a real child, this reaches wholly computer-generated or AI-generated child sexual abuse material with no actual child involved. Created by 2023 Wisconsin Act 224 (2023 Senate Bill 314), enacted March 27, 2024 and published March 28, 2024; because the act does not itself prescribe an effective date, it took effect the day after its publication, March 29, 2024, under the state's general rule for acts enacted without an emergency clause.

What it requires

2025 Wisconsin Act 34, Synthetic Intimate Representation Ban

Wis. Stat. § 942.09(1)(e), (2)(am)4., (2)(dr)official statute text, Wisconsin Legislature (docs.legis.wisconsin.gov)

In force 12 months, effective 4 October 2025. Binds public and private bodies.

What this law does

A "synthetic intimate representation" is defined as a representation generated using technological means that uses an identifiable person's face, likeness, or other distinguishing characteristic to depict an intimate representation of that person, regardless of whether the representation includes components that are artificial, legally generated, or generally accessible, and that is so realistic that a reasonable person would believe it depicts conduct of the identifiable person; the definition is technology-neutral and reaches an AI-generated or partly AI-generated sexual deepfake.

Posting, publishing, distributing, or exhibiting a synthetic intimate representation of an identifiable person with intent to coerce, harass, or intimidate that person is a Class I felony, except that it is a Class H felony if the depicted person had not attained the age of 18 at the time of the violation.

The same act separately created a reproduction offense at subsection (3m)(a)3, making it a Class A misdemeanor (Class I felony if the depicted person was a minor) to make a reproduction of a private representation knowing the depicted person did not consent to the reproduction; that provision is not limited to synthetic or AI-generated content on its own terms.

Created by 2025 Wisconsin Act 34 (2025 Senate Bill 33), enacted October 2, 2025 and published October 3, 2025; the act does not carry a distinct effective-date clause of its own, so it took effect the day after publication, October 4, 2025, under the state's general rule for acts of the legislature enacted without an emergency clause.

What it requires

AI transparency

2023 Wisconsin Act 123, AI-Generated Content Disclosure in Political Communications

Wis. Stat. § 11.1303(2m)official statute text, Wisconsin Legislature (docs.legis.wisconsin.gov)

In force since 23 March 2024. Binds public and private bodies.

What this law does

Every audio communication containing express advocacy, issue advocacy, or support of or opposition to a referendum that contains synthetic media, meaning audio or video content substantially produced in whole or in part by generative artificial intelligence, must include the words "Contains content generated by AI" both at the beginning and at the end of the communication.

Every covered video communication must include, throughout the duration of each portion containing synthetic media, a readable, legible, and readily accessible on-screen disclosure reading "This video content generated by AI," "This audio content generated by AI," or "This content generated by AI," depending on which kind of synthetic media is present.

Compliance does not exempt a person from other civil or criminal liability, including under Wisconsin's separate false political-communication statute, and the provision expressly preserves the immunities of an interactive computer service provider under 47 U.S.C. 230. A broadcaster or other host or carrier of a covered communication is not liable for a violation unless it is itself the committee responsible for the communication.

Created by 2023 Wisconsin Act 123 (2023 Assembly Bill 664), enacted March 21, 2024 and published March 22, 2024; because the act does not itself prescribe an effective date, it took effect the day after its publication, March 23, 2024, under the state's general rule for acts enacted without an emergency clause.

What it requires

Privacy law1 instrument, 1 enacted but not yet in force

Research summary (248 words)

Wisconsin has never enacted a comprehensive controller or processor personal-data statute.

Its most advanced attempt, 2023 Assembly Bill 466 (the Wisconsin Data Privacy Act), passed the Assembly on 14 November 2023 but failed to concur in the Senate on 15 April 2024 and died with the close of the 2023-2024 biennium; its 2025-2026 successors, Senate Bill 166 and Assembly Bill 172, failed even more decisively, both auto-failed under Senate Joint Resolution 1 on 23 March 2026 without ever receiving a floor vote in either chamber, and are not marquee bills recorded here.

Wisconsin's only enacted personal-data statute of general application is its breach-notification statute, Wis. Stat. sec. 134.98, which folds both a DNA profile and unique biometric data, including a fingerprint, voiceprint, or retina or iris image, directly into its definition of personal information, on exactly the same footing as a Social Security number, with no exclusion anywhere in the section for an identifier derived from a photograph, video, or audio recording.

That is the opposite shape from AB 466's dead, never-enacted biometric data definition, which would have excluded a recording-derived identifier unconditionally, the same shape Indiana's, Florida's, Pennsylvania's proposed, and West Virginia's dead bills share.

Wisconsin's breach statute creates no private right of action; unusually, that finding rests not on a foreclosure clause in the statute's own text but on the statute's own official annotation, which cites a decided federal case, Fox v. Iowa Health System, 399 F. Supp. 3d 780 (2019), directly on the codified page.

Breach notification

Notice of unauthorized acquisition of personal information

Wis. Stat. sec. 134.98official Wisconsin statute text, Wis. Stat. sec. 134.98, current through 2025 Wis. Act 247, Wisconsin State Legislature website

Commencement not set. Binds public and private bodies.

What this law does

An entity whose principal place of business is in Wisconsin, or that maintains or licenses personal information in Wisconsin, that knows personal information in its possession has been acquired by an unauthorized person must make reasonable efforts to notify each affected individual within a reasonable time, not to exceed 45 days after learning of the acquisition.

Personal information includes an individual's name combined with, among other elements, a Social Security number, a DNA profile, or unique biometric data such as a fingerprint, voiceprint, or retina or iris image, each on the same footing as the others, with no exclusion anywhere in the section for an identifier derived from a photograph, video, or audio recording. If a single incident requires notifying 1,000 or more individuals, the entity must also notify consumer reporting agencies.

Gramm-Leach-Bliley Act (GLBA)-compliant and Health Insurance Portability and Accountability Act (HIPAA)-covered entities are exempt outright. The statute's own official annotation states directly that the section does not create a private right of action, citing Fox v. Iowa Health System, 399 F. Supp. 3d 780 (2019).

No separate civil-penalty or forfeiture amount specific to a section 134.98 violation appears within the section itself; Wis. Stat. sec. 134.99 addresses only accomplice or conspirator liability for a chapter violation carrying a forfeiture, without stating the amount or who may bring the action, and the underlying enforcement mechanism is not traced further here into Wisconsin's general consumer-protection authority under chs. 93 or 100.

What it requires

Scraping law1 instrument, 1 in force

Research summary (195 words)

Wisconsin diverges from the federal baseline only in the computer_misuse family, and modestly.

Its computer crimes statute, Wis. Stat. § 943.70, requires access to be willful, knowing, and without authorization, so ordinary automated retrieval of a public page that performs none of the statute's listed acts (modifying, destroying, accessing, taking possession of, or copying data or programs, or disclosing restricted access codes) does not fit its elements merely because the access is unauthenticated; no Wisconsin case has applied the statute to a scraping or automated-collection fact pattern specifically.

Wisconsin has no comprehensive consumer privacy statute reaching scraped personal data: the Wisconsin Data Privacy Act (2023 AB 466) died without passing, and the state's only privacy-topic instrument is a data breach notification statute already catalogued under the privacy topic, so the personal_data family adds nothing here beyond the federal position.

Wisconsin's general deceptive trade practices statute, Wis. Stat. § 100.18, contains no provision reaching scraping, automated collection, or robots.txt. Terms-of-service enforceability, copyright and text-and-data-mining exceptions, database rights, unfair competition doctrine as applied to scraping, and robots.txt's legal weight are governed in Wisconsin exclusively by federal law and general common-law contract doctrine, and are not restated here.

Computer misuse

Wisconsin computer crimes statute

Wis. Stat. § 943.70official statute text, Wisconsin Legislature (docs.legis.wisconsin.gov)

In force. Binds public and private bodies.

What this law does

Subsection (2) makes it a crime for any person, willfully, knowingly, and without authorization, to modify, destroy, access, take possession of, or copy data, computer programs, or supporting documentation, or to disclose restricted access codes or other restricted access information to unauthorized persons; a separate paragraph, (2)(am), criminalizes intentionally causing an interruption in service by submitting a message or messages that exceed a computer, program, system, or network's processing capacity.

Subsection (3) parallels this for the underlying computer, computer equipment, or supplies themselves.

"Access" is defined broadly in subsection (1)(ag) to mean to instruct, communicate with, interact with, intercept, store data in, retrieve data from, or otherwise use the resources of a computer, which reaches ordinary automated retrieval; but because a violation additionally requires acting willfully, knowingly, and without authorization, ordinary access to a public, unauthenticated page that performs none of the statute's listed acts does not fit its elements.

No Wisconsin case has applied this statute to a scraping or automated-collection fact pattern specifically.

The Wisconsin Supreme Court has construed subsection (2)(a)6's phrase "access codes or other restricted access information" narrowly: it refers to the codes, passwords, or other information that permits access to a system or to programs or data within it, not to the system, program, or data accessed, and the statute was not meant to criminalize disclosure of information obtained with authorization in the first instance (Burbank Grease Services, LLC v. Sokolowski, 2006 WI 103, 294 Wis. 2d 274, 717 N.W.2d 781).

A Wisconsin appellate decision has separately held that the statute is constitutional and that federal copyright law does not preempt a prosecution under it for destroying data entered into a computer program (State v. Corcoran, 186 Wis. 2d 616, 522 N.W.2d 226 (Ct. App. 1994)).

The section was created by 1981 Wisconsin Act 293 and has been amended several times since, most recently by 2015 Wisconsin Act 300, which amended the definition of "property" at subsection (1)(h) to include digital property as defined elsewhere in the statutes; the 1981 enacting act's own text, as read, does not carry the commencement-date notation that Wisconsin's modern act pages include, so a specific day of first commencement is not confirmed here even though the statute has plainly been in continuous force for decades.

What it requires

This page covers the instruments LexLint has researched to a stage. Instruments named in the corpus but not yet researched are counted in the head and are not listed here. Every entry carries its own primary source on its note page. This is a research index, not legal advice.