The jurisdictions
61 tracked · 95 shaded on the mapEvery jurisdiction we track, with its strongest in-force instrument, flagship law, the number of obligations on the register and the next dated deadline. Each links to a full, primary-sourced page.
| Jurisdiction | Status | Flagship law | Obligations | Next deadline |
|---|---|---|---|---|
| United Arab Emirates | Binding | DIFC Data Protection Regulation 10 | 1 | — |
| Angola | Binding | Lei 22/11 art. 29.º | 1 | — |
| Argentina | Guidance | Ley 25.326 Art. 20 (automated profiling) + Disposición 2/2023 | 1 | — |
| Australia | None | Privacy & Other Legislation Amendment Act 2024 (Cth) | 1 | 10 Dec 2026 |
| Burkina Faso | Binding | Loi n° 001-2021/AN art. 15 | 1 | — |
| Burundi | Binding | Loi 1/03 arts. 19-20 | 1 | — |
| Benin | Binding | Code du numérique art. 401 | 1 | — |
| Brazil | Proposed | AI Act bill (PL 2338/2023) | 4 | 17 Sep 2026 |
| Canada | Guidance | Voluntary Code + Quebec Law 25 | 2 | — |
| Democratic Republic of the Congo | Binding | Code du numérique art. 209 | 1 | — |
| Central African Republic | Binding | Loi 24.001 art. 30 | 1 | — |
| Republic of the Congo | Binding | Loi n° 29-2019 art. 13 | 1 | — |
| Switzerland | Binding | revFADP art. 21 | 1 | — |
| Côte d'Ivoire | Binding | Loi n° 2013-450 art. 25 | 1 | — |
| Chile | Binding | Código del Trabajo Cap. X (Ley 21.431) + Ley 21.719 (from 1 Dec 2026) | 2 | 1 Dec 2026 |
| Cameroon | Binding | Loi n° 2024/017 art. 44 | 1 | — |
| China | Binding | CAC GenAI, deep-synthesis & labelling rules | 7 | — |
| Cabo Verde | Binding | Lei 133/V/2001 art. 23.º | 1 | — |
| Germany | None | KI-MIG (BGBl. 2026 I Nr. 223) | 1 | — |
| Algeria | Binding | Loi n° 18-07 art. 11 | 1 | — |
| European Union | Comprehensive | EU AI Act (Reg. 2024/1689) | 12 | 2 Dec 2026 |
| Gabon | Binding | Loi n° 025/2023 art. 77 | 1 | — |
| Ghana | Binding | Data Protection Act s. 41 (Act 843) | 1 | — |
| Guinea | Binding | Loi n° L/2016/037/AN art. 27 | 1 | — |
| Equatorial Guinea | Binding | Ley 1/2016 art. 13(b) | 1 | — |
| Indonesia | Binding | UU 27/2022 (PDP Law) Arts. 10 & 34 | 1 | — |
| India | Binding | IT Rules — synthetic-content (deepfake) labelling | 1 | — |
| Japan | Comprehensive | AI Promotion Act (2025) | 3 | 1 Mar 2027 |
| Kenya | Binding | Data Protection Act s. 35 (No. 24 of 2019) | 1 | — |
| Kyrgyzstan | Binding | Digital Code Chapter 23 (arts. 191-197) | 3 | — |
| South Korea | Comprehensive | AI Basic Act (Framework Act on AI) | 3 | — |
| Kazakhstan | Binding | Law No. 230-VIII on Artificial Intelligence + Personal Data Law art. 19-1 | 4 | — |
| Morocco | Binding | Loi 09-08 art. 11 | 1 | — |
| Madagascar | Binding | Loi n° 2014-038 art. 3 | 1 | — |
| Mali | Binding | Loi n° 2013-015 art. 2 | 1 | — |
| Mauritania | Binding | Loi n° 2017-020 art. 19 | 1 | — |
| Mauritius | Binding | Data Protection Act 2017 s. 38 | 1 | — |
| Mexico | Binding | LFT/LFDA AI reform (performers) | 2 | — |
| Mozambique | Binding | Malabo Convention art. 14(5) | 1 | — |
| Namibia | Binding | Malabo Convention art. 14(5) | 1 | — |
| Niger | Binding | Loi n° 2022-59 art. 52 | 1 | — |
| Nigeria | Binding | NDPA s. 37 (Act No. 37 of 2023) | 1 | — |
| Peru | Comprehensive | AI Law 31814 + Reglamento | 1 | — |
| Philippines | Binding | Data Privacy Act of 2012 IRR Secs. 34 & 48 (RA 10173) | 1 | — |
| Russia | Binding | Federal Law 243-FZ (large foundational AI models) + 152-FZ art. 16 | 4 | 1 Mar 2027 |
| Rwanda | Binding | Law No. 058/2021 art. 21 | 1 | — |
| Saudi Arabia | Binding | Royal Decree No. M/169 — Copyright Law (AI Training Exemption Art.26) | 1 | — |
| Singapore | Binding | MAS AI Risk Management Guidelines (proposed) — agentic AI in scope | 2 | — |
| Senegal | Binding | Loi n° 2008-12 art. 48 | 1 | — |
| São Tomé e Príncipe | Binding | Lei 3/2016 art. 13.º | 1 | — |
| Togo | Binding | Loi n° 2019-014 art. 27 | 1 | — |
| Thailand | Binding | Royal Decree on Digital Platform Service Businesses B.E. 2565 Sec. 17 | 1 | — |
| Türkiye | Binding | KVKK art. 11(g) | 1 | — |
| Tanzania | Binding | Personal Data Protection Act s. 36 (Act No. 11 of 2022) | 1 | — |
| Uganda | Binding | Data Protection and Privacy Act s. 27 (Act 9 of 2019) | 1 | — |
| United Kingdom | Guidance | Pro-innovation framework (sector regulators) | 6 | — |
| United States | Binding | Federal + state AI laws (TAKE IT DOWN Act; CA, CO, TX, IL, NY) | 57 | 1 Oct 2026 |
| Uzbekistan | Binding | Law on Informatization art. 7¹ (Law ЎРҚ-1115) + Personal Data Law art. 24 | 3 | — |
| Vietnam | Comprehensive | Law on AI (Law 134/2025/QH15) | 3 | — |
| South Africa | Binding | POPIA s. 71 (Act 4 of 2013) | 1 | — |
| Zambia | Binding | Data Protection Act 2021 s. 62 | 1 | — |
Not legal advice. Status reflects the strongest in-force AI instrument per jurisdiction as of the last verification; see each page for sources.