Regulations
Laws, proposals and standards, with sources and dates
24 instruments, each with an official source, status, key dates and structured provisions used by the assessment engine. Dataset verified 2026-10-14. We distinguish legal requirements, proposed legislation, voluntary standards and guidance, and we do not treat following a standard as certification.
EU AI Act (as amended 2026)
Risk tiers, provider and deployer duties, transparency, GPAI, and the Omnibus timeline through 2028.
Canada
PIPEDA, Quebec Law 25, Alberta and BC PIPA, Ontario job-posting disclosure, OPC guidance, the voluntary code, Bill C-36 and the AIDA history.
United States
FTC Section 5, Title VII, Illinois, New York City, California ADMT regulations, Utah, Texas and Colorado.
Colorado AI law
From SB 24-205 to SB 26-189: what changed and what applies from 1 January 2027.
NIST AI RMF
Govern, Map, Measure, Manage and the Generative AI Profile.
ISO/IEC 42001
The AI management system standard and what certification does and does not mean.
Canada
| Instrument | Jurisdiction | Type | Status | Provisions | Verified | Source |
|---|---|---|---|---|---|---|
| Personal Information Protection and Electronic Documents Act (S.C. 2000, c. 5) | Canada | Law | In force | 6 | 2026-10-14 | official ↗ |
| Principles for responsible, trustworthy and privacy-protective generative AI technologies | Canada | Guidance | Published | 2 | 2026-10-14 | official ↗ |
| Bill C-27, Digital Charter Implementation Act, 2022 (incl. proposed Consumer Privacy Protection Act and Artificial Intelligence and Data Act) | Canada | Proposed legislation | Died on the order paper (not law) | 1 | 2026-10-14 | official ↗ |
| Bill C-36, An Act to enact the Protecting Privacy and Consumer Data Act and to amend the Personal Information Protection and Electronic Documents Act and other Acts | Canada | Proposed legislation | Proposed (not law) | 1 | 2026-10-14 | official ↗ |
| Voluntary Code of Conduct on the Responsible Development and Management of Advanced Generative AI Systems | Canada | Voluntary standard | Published | 2 | 2026-10-14 | official ↗ |
| Act respecting the protection of personal information in the private sector (CQLR c. P-39.1), as amended by the Act to modernize legislative provisions as regards the protection of personal information (2021, c. 25, 'Law 25') | Quebec | Law | In force | 5 | 2026-10-14 | official ↗ |
| Personal Information Protection Act (SA 2003, c. P-6.5) | Alberta | Law | In force | 2 | 2026-10-14 | official ↗ |
| Personal Information Protection Act (SBC 2003, c. 63) | British Columbia | Law | In force | 2 | 2026-10-14 | official ↗ |
| Employment Standards Act, 2000 — Part III.1 Job Postings (AI disclosure) | Ontario | Law | In force | 2 | 2026-10-14 | official ↗ |
European Union
| Instrument | Jurisdiction | Type | Status | Provisions | Verified | Source |
|---|---|---|---|---|---|---|
| Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act), as amended by Regulation (EU) 2026/1744 (Digital Omnibus on AI) | European Union | Law | Partially applicable | 19 | 2026-10-14 | official ↗ |
| Regulation (EU) 2016/679 (General Data Protection Regulation) - AI-relevant provisions | European Union | Law | In force | 3 | 2026-10-14 | official ↗ |
United States
| Instrument | Jurisdiction | Type | Status | Provisions | Verified | Source |
|---|---|---|---|---|---|---|
| Senate Bill 26-189, Automated Decision-Making Technology (repealing and reenacting the consumer-protection provisions of SB 24-205, 'Colorado AI Act') | Colorado | Law | Enacted, not yet applicable | 4 | 2026-10-14 | official ↗ |
| Federal Trade Commission Act Section 5 (15 U.S.C. 45) as applied to AI claims and conduct | United States | Law | In force | 2 | 2026-10-14 | official ↗ |
| Title VII of the Civil Rights Act of 1964 (42 U.S.C. 2000e et seq.) as applied to AI in employment selection; status of EEOC AI technical assistance | United States | Law | In force | 1 | 2026-10-14 | official ↗ |
| Public Act 103-0804 (HB 3773) amending the Illinois Human Rights Act regarding artificial intelligence in employment | Illinois | Law | In force | 2 | 2026-10-14 | official ↗ |
| New York City Local Law 144 of 2021 - Automated Employment Decision Tools (NYC Admin. Code 20-870 et seq.) | New York City | Law | In force | 2 | 2026-10-14 | official ↗ |
| CCPA Regulations on Automated Decisionmaking Technology, Risk Assessments and Cybersecurity Audits (Cal. Code Regs. tit. 11, div. 6, incl. Articles 9-11) | California | Regulation | Partially applicable | 3 | 2026-10-14 | official ↗ |
| Utah Artificial Intelligence Policy Act (S.B. 149, 2024) as amended by S.B. 226 and S.B. 332 (2025) | Utah | Law | In force | 2 | 2026-10-14 | official ↗ |
| Texas Responsible Artificial Intelligence Governance Act (H.B. 149, 89th Legislature; Business & Commerce Code Subtitle D, Chapters 551-554) | Texas | Law | In force | 3 | 2026-10-14 | official ↗ |
| Artificial Intelligence Risk Management Framework (AI RMF 1.0), NIST AI 100-1 | United States | Voluntary standard | Published | 2 | 2026-10-14 | official ↗ |
| Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile (NIST AI 600-1) | United States | Voluntary standard | Published | 1 | 2026-10-14 | official ↗ |
International standards
| Instrument | Jurisdiction | Type | Status | Provisions | Verified | Source |
|---|---|---|---|---|---|---|
| ISO/IEC 42001:2023 Information technology - Artificial intelligence - Management system | International | Voluntary standard | Published | 1 | 2026-10-14 | official ↗ |
| ISO/IEC 23894:2023 Information technology - Artificial intelligence - Guidance on risk management | International | Voluntary standard | Published | 1 | 2026-10-14 | official ↗ |
| Recommendation of the Council on Artificial Intelligence (OECD/LEGAL/0449) - OECD AI Principles | International | Principles | Published | 1 | 2026-10-14 | official ↗ |