Global AI Law and Policy Tracker

By IAPP Research and Insights

C ountries worldwide are designing and
implementing AI governance legislation and
policies commensurate to the velocity and variety of
As individual jurisdictions press ahead with their
own frameworks and approaches, they have also
doubled down on multilateral efforts to coordinate
proliferating AI-powered technologies. Efforts include and cohere different approaches. The Organisation
the development of comprehensive legislation, for Economic Co-operation and Development's AI
focused legislation for specific use cases, national AI principles have been reaffirmed in many different
strategies or policies, and voluntary guidelines and contexts, including by digital and technology
standards. There is no standard approach toward ministers of the G7 countries during the 2023
bringing AI under state regulation, however, common Hiroshima Summit. UNESCO, the International
patterns toward reaching the goal of AI regulation can Organization for Standardization, the African Union
be observed. Given the transformative nature of AI and the Council of Europe are all working on or have
technology, the challenge for jurisdictions is to find a published multilateral AI governance frameworks.
balance between innovation and regulation of risks. The U.K. government organized the first AI Safety
Therefore, governance of AI often, if not always, begins Summit in 2023 for government and industry
with a jurisdiction rolling out a national strategy or stakeholders to agree upon, evaluate and monitor
ethics policy instead of legislating from the get-go. the most significant risks from AI.

This pattern is evident throughout this tracker. The Tracking, unpacking and governing the complex
tracker identifies legislative or policy developments field of global AI governance law and policy has
or both in a subset of jurisdictions. Such initiatives are quickly become a top-tier strategic issue for
either already being deliberated at the country level organizations. The IAPP AI Governance Center will
or are in the process of commencing deliberations continue to provide AI governance professionals
in countries across six continents, speaking to the with the content, resources, networking, training
global importance of AI. However, given the rapid and certification needed to respond to the field's
and widespread policymaking in this space, the complex risks. The IAPP AI Global Law and Policy
tracker does not include all AI initiatives within every Tracker has been updated with valuable input
jurisdiction across every continent. This tracker also from the global community of AI governance
offers brief commentary on the broader AI context professionals, and we continue to welcome
and related developments and identifies laws or feedback and insights from this community.
policies in parallel professions like privacy.

Last updated October 2024.

Find the most up-to-date version on our website.
 Global AI Law and Policy Tracker

This map shows which

jurisdictions are in focus
and covered by this tracker.
It does not represent the
extent to which jurisdictions
around the world are active
on AI governance legislation.

Jurisdictions in focus

Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

*Click on the country names above to navigate to their locations in the tracker.

Global AI Law and Policy Tracker • IAPP • iapp.org 3

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

Argentina has made policy initiatives on AI. → National Big Data → National Cybersecurity • Argentina is a party to the Organisation for
ARGENTINA

It has developed a draft of a National AI Plan to Observatory Strategy [IN FORCE] Economic Co-operation and Development's AI
help facilitate the use and development of AI in principles. See the OECD's Policy Observatory.
→ Ministry of Science, → Personal Data Protection
the country.
Technology and Act [DRAFT UPDATE TO • Argentina adopted UNESCO's Recommendation
Productive Innovation ORIGINAL LAW] on the Ethics of AI.
Under Resolution 2/2023, Argentina released
recommendations for trustworthy and reliable → National Committee for → Law 27,699 for the Protection • See Argentina's Digital Agenda 2030.
AI directed to the public sector. Ethics in Science and of Individuals with respect
• See Argentina's Fintech Innovation Hub.
Technology to Automatic Processing of
In August 2024, Argentina's congress started Personal Data [IN FORCE] • Argentina's data protection authority, the
→ Undersecretariat
debating legislation to regulate the use of AI. It is Agency of Access to Public Information,
of Information and → Central Bank Communication
expected to be modeled after the EU AI Act, which published Resolution No. 161/23, which
Communication A 7724 [IN FORCE]
uses a risk-based approach to define obligations created the Transparency and Protection
Technologies
for providers and deployers of AI-based systems. → Provision 18/2015 Guide to of Personal Data Program in the use of AI.
→ Agency of Access to Good Privacy Practices for
• The president's chief of staff also issued
Public Information Application Development
Administrative Decision No. 750/2023, creating
[IN FORCE]
→ National Securities the Interministerial Roundtable on AI.
Commission

Global AI Law and Policy Tracker • IAPP • iapp.org 4

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

The Australian government highlighted the → Department of Industry, → Patents Act [IN FORCE] • Australia is a party to the OECD's AI principles.
AUSTRALIA

application of existing regulatory frameworks for Science and Resources See the OECD's Policy Observatory.
→ Copyright Act [IN FORCE]
AI. In 2021, the government released an AI Action → Commonwealth Scientific • Australia participated in the 2023 U.K. AI
Plan, which set out a plan to build AI capability → Privacy Act [IN FORCE]
and Industrial Research Summit, which led to the Bletchley Declaration.
and accelerate the development and adoption of → Data Availability and
Organisation
trusted, secure and responsible AI technologies • Australia adopted UNESCO's Recommendation
Transparency Act [IN FORCE]
in Australia. → Office of the eSafety on the Ethics of AI.
Commissioner → Consumer Data Right
• See Australia's 2025 Digital Transformation
In August 2024, the Australian Department of [IN FORCE]
→ Office of the Australian Strategy.
Industry, Science and Resources released the → Competition and
Information Commissioner
Voluntary AI Safety Standard. This standard • The government announced it will set up an
Consumer Act [IN FORCE]
builds on the 2023 discussion paper "Safe and → Competition and advisory body of industry and academic experts
Consumer Commission → Compliance and Enforcement to help it devise a legislative framework around
Responsible AI in Australia" to support and
Policy for the Consumer "high risk" AI applications.
promote consistency among best practices when → National AI Centre's
Data Right
developing AI. While not mandatory, the standard Responsible AI Network • The Human Technology Institute at the
consists of 10 guardrails, including testing, Australia was one of the first University of Technology Sydney recently
→ National Science and
transparency and accountability requirements. countries in the world to adopt AI released The State of AI Governance in Australia.
Technology Council
ethics principles, which include a • See the National Science and Technology
In September 2024, Australia's Digital
robust ethics framework: Council's Rapid Response Information Report
Transformation Agency released its policy for
the responsible use of AI in government. In • AI Ethics Framework on generative AI.
this document, the government recognizes the • 8 AI Ethics Principles • In March 2020, the government released the
potential benefits of AI and notes the public AI Standards Roadmap: Making Australia's
expects the government to use the technology Voice Heard. This separate roadmap was
safely and responsibly. According to the policy, developed by Standards Australia and
government agencies must adopt several commissioned by the Australian Department
governance measures, such as naming an of Industry, Science, Energy and Resources.
accountable official. The roadmap's primary goal is to "ensure
Australia can effectively influence AI standards
development globally."

Global AI Law and Policy Tracker • IAPP • iapp.org 5

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

Bangladesh is looking to advance it's AI policies → Information and → Digital Security Act • Bangladesh adopted UNESCO's
BANGLADESH

and has published a National AI Strategy for Communication [IN FORCE] Recommendation on the Ethics of AI.
2019-2024. The strategy includes: Technology Division → Constitution of the People's • See Digital Bangladesh.
• Creating strategy and development roadmaps. Republic of Bangladesh
[IN FORCE]
• Overcoming challenges with the use of AI.
→ Right to Information Act
• Leveraging AI for social and economic growth,
[IN FORCE]
and more.
→ Copyright Act [IN FORCE]
→ Telecommunications Act
[IN FORCE]

Global AI Law and Policy Tracker • IAPP • iapp.org 6

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

Brazil published an AI Strategy, as well as a → Ministry of Science, → General Data Protection • Brazil is a party to the OECD's AI principles. See
BRAZIL

summary. The strategy proposes to finance Technology and Innovation Act [IN FORCE] the OECD's Policy Observatory and article on
research projects that apply ethical solutions, Brazil's path to responsible AI.
→ ANPD → Civil Rights Framework for the
establish technical requirements that advance
Internet [IN FORCE] • Brazil participated in the 2023 U.K. AI Summit,
ethical applications, develop techniques to
which led to the Bletchley Declaration.
mitigate algorithmic bias, create parameters → Consumer Protection Code
around human intervention where automated [IN FORCE] • Brazil adopted UNESCO's Recommendation on
decisions may create high-risk situations, and the Ethics of AI.
implement codes of conduct to encourage • See Brazil's Digital Transformation Strategy.
traceability and safeguard legal rights. Brazil also
• The ANPD entered into a technical cooperation
strives to encourage data sharing per its data
agreement with the Development Bank of Latin
protection law, the LGPD, create an AI observatory
America "to develop an experimental regulatory
for measuring impact and disseminate open-
tool" for AI-related innovation.
source codes for identifying discriminatory trends.
• Brazil committed to investing USD4 billion
Brazil introduced a comprehensive AI bill, which in domestic AI capabilities through its AI
emphasizes human rights and creates a civil investment plan.
liability regime for AI developers, to its Senate.
The proposed AI bill would:
• Prohibit certain "excessive risk" systems.
• Establish a regulatory body to enforce the law.
• Create civil liability for AI providers.
• Require reporting obligations for significant
security incidents.
• Guarantee various individual rights, such as
explanation, nondiscrimination, rectification of
identified biases and due process mechanisms.

In July 2023, the country's DPA, the Autoridade

Nacional de Proteção de Dados, published a
Preliminary Analysis of Bill No. 2338/2023, which
provides for the use of AI in Brazil. Further, the
ANPD has now published its final opinion on
Bill 2338/2023.

Global AI Law and Policy Tracker • IAPP • iapp.org 7

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

Canada's anticipated AI and Data Act, part of → Ministry of Innovation, → Personal Information • Canada is a party to the OECD's AI principles.
CANADA

Bill C-27, is intended to protect Canadians from Science and Economic Protection and Electronic See the OECD's Policy Observatory.
high-risk systems, ensure the development of Development Documents Act [IN FORCE]
• Canada also participated in the 2023 U.K. AI
responsible AI, and position Canadian firms and
→ Canadian Institute for → Privacy Act [IN FORCE] Summit, which led to the Bletchley Declaration.
values for adoption in global AI development.
Advanced Research
The AIDA would: → Consumer Product Safety Act • As part of the G7, Canada endorsed the 11
→ Office of the Privacy [IN FORCE] Hiroshima Process International Guiding
• Ensure high-impact AI systems meet existing
Commissioner of Canada Principles for Advanced AI systems.
safety and human rights expectations. → Food and Drugs Act [IN FORCE]
→ House of Commons' • Canada also adopted UNESCO's
• Prohibit reckless and malicious uses of AI. → Motor Vehicle Safety Act
Standing Committee on Recommendation on the Ethics of AI.
[IN FORCE]
• Empower the Minister of Innovation, Science Industry, Science and
• According to its AI Strategy, by 2030 Canada
and Industry to enforce the act. Technology → Bank Act [IN FORCE]
plans to achieve an AI ecosystem founded on
Advisory Council on AI → Human Rights Act [IN FORCE] scientific excellence, exceptional training and
Canada published a code of practice for generative →

AI development and use in anticipation of, and to → Criminal Code [IN FORCE] talent pools, public-private collaboration, and
assure compliance with, the AI and Data Act. commitment to AI technologies which produce
→ Quebec's Law 25: An Act
positive social, economic and environmental
to modernize legislative
The country also issued a Directive on Automated change for people and the planet. In achieving
provisions as regards the
Decision-Making, which imposes several these goals, Canada has established three AI
protection of personal
requirements on the federal government's institutes: Amii in Edmonton, Mila in Montreal,
information [IN FORCE]
use of automated decision-making systems. and the Vector Institute in Toronto.
• The House of Commons' Standing Committee
on Industry, Science and Technology issued a
report for various AI recommendations in 2019.
• There is currently a proposed amendment
to the Ontario Working for Workers Act for
AI in hiring. This would be the country's first
legislation requiring businesses to disclose
whether they use AI in their hiring processes.
• As part of its 2024 budget, Canada proposed
CAD2.4 billion in funding for domestic AI
development.

Global AI Law and Policy Tracker • IAPP • iapp.org 8

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

In October 2021, Chile published it's first National → Ministry of Science, → Digital Economy Partnership • Chile is a party to the OECD's AI principles.
CHILE

Policy and Action Plan on AI on AI. The country's Technology, Knowledge Agreement [IN FORCE] See the OECD's Policy Observatory.
previous Minister of Science, Technology, and Innovation → Political Constitution of the • Chile participated in the 2023 U.K. AI Summit,
Knowledge and Innovation Andrés Couve → Future Challenges, Science, Republic of Chile [IN FORCE] which led to the Bletchley Declaration.
explained the policy is built on the following:
Technology and Innovation → Law No. 19,628 on the • Chile also adopted UNESCO's Recommendation
• Development of enabling factors. Committee
Protection of Private Life on the Ethics of AI.
• Use and development of AI technology. → National Research and [IN FORCE]
• See Chile's 2035 Digital Transformation Strategy.
Development Agency
• Aspects of ethics and safety. → Law No. 20,285 on the
• In 2023, Chile hosted the first Latin American
→ National Center for AI Transparency of Public
and Caribbean Ministerial and High Level
In May 2024, Chile introduced a draft AI Research Functions and Access to
Summit on the Ethics of AI, with support from
legislation that promotes AI while ensuring Information on Public
→ Chilean Transparency UNESCO and CAF.
human rights. The risk-based legislation also Administration [IN FORCE]
Council
promotes self-regulation. • The Inter-American Development Bank
→ Law 21,180 on Digital
→ National Consumers supported the Chilean government's project to
Transformation of the
Agency develop new transport technology applications,
State [IN FORCE]
specifically focusing on big data and
→ Industrial Property Law No. autonomous vehicles.
19,039 [IN FORCE]
→ Law No. 17,336 on Intellectual
Property [IN FORCE]
→ Fintech Law [IN FORCE]
→ Personal Data Protection Bill
No. 11,144-07 [DRAFT]

Global AI Law and Policy Tracker • IAPP • iapp.org 9

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

China has been proactive in adopting legislation → Cyberspace Administration → Cybersecurity Law [IN FORCE] • China is a party to the G20 AI Principles, which
CHINA

around the use of AI, with several national laws of China are drawn from the OECD's AI principles.
→ Data Security Law [IN FORCE]
currently in place. Recently, a draft of the Artificial See the OECD's Policy Observatory.
→ Ministry of Industry and
Intelligence Law of the People's Republic of China → Personal Information
Information Technology • China participated in the 2023 U.K. AI Summit,
was proposed by scholars. This law would set Protection Law [IN FORCE]
which led to the Bletchley Declaration.
forth requirements specifically for developers and → Ministry of Public Security → Shenzhen Special Economic
deployers of AI for AI generally and for high-risk • China also adopted UNESCO's
→ State Administration for Zone AI Industry Promotion
or "critical" AI-based systems. Currently, the laws Recommendation on the Ethics of AI.
Market Regulation Regulation [IN FORCE]
governing AI in China are specific to AI use cases. • See China's AI development plan.
These include:
→ National Development and
Reform Commission • See the Ministry of Science and Technology's
• Algorithmic Recommendation Management 2021 AI governance document on ethical norms
Provisions [IN FORCE] for AI use.
• Interim Measures for the Management of • China led a successful UN resolution on AI.
Generative AI Services [IN FORCE]
• In July 2024, China released the Shanghai
• Deep Synthesis Management Provisions Declaration on Global AI Governance, which
[IN FORCE] calls for global cooperation in developing AI
• AI guidelines and summary of regulations "while ensuring safety, reliability, controllability
[IN FORCE] and fairness in the process, and encourage
leveraging AI technologies to empower the
• Scientific and Technological Ethics Regulation
development of human society."
[IN FORCE]
• In September 2024, China released the AI Safety
• Next Generation AI Development Plan
Governance Framework as part of its Global AI
[IN FORCE]
Governance Initiative. This framework lays out
China's objectives for international cooperation
on AI governance as well as its view on the risks
AI poses to safety.

Global AI Law and Policy Tracker • IAPP • iapp.org 10

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

Colombia has various policies addressing AI → Administrative Department → Personal Data Protection Law • Colombia is a party to the OECD's AI principles.
COLOMBIA

governance, including the following: of the Presidency of the [IN FORCE] See the OECD's Policy Observatory.
Republic
• AI Expert Mission. → Habeas Data Law, Law 1266 • Colombia also adopted UNESCO's
→ CAF amended by Law 2157 of 2021 Recommendation on the Ethics of AI.
• AI National Strategy Policy.
[IN FORCE]
→ Ministry of Information • Colombia published an Ethical Framework
• AI in the Public Sector.
and Communication → Decree 338 [IN FORCE] that reiterates best practices, suggestions
Technologies and recommendations on how best to
integrate ethical principles with the use of
→ Ministry of National
AI in projects primarily for the benefit of the
Education
public sector entities.
→ Administrative Department
• An AI Task Force was created in partnership
of Science, Technology and
with the CAF to bolster AI progress.
Innovation
→ National Planning
Department
→ Superintendence of
Industry and Commerce
→ AI Task Force

Egypt's National AI Strategy focuses on four pillars: → National Council for AI → Law No. 151 of 2020 on • Egypt is a party to the OECD's AI principles.
EGYPT

the Protection of Personal See the OECD's Policy Observatory.

• AI for government. → Ministry of
Data [IN FORCE]
Communications and • Egypt also adopted UNESCO's Recommendation
• AI for development.
Information Technology → Law No. 175 of 2018 Regarding on the Ethics of AI.
• Capacity building. Anti-Cyber and Information
• Egypt chaired several meetings for the Arab AI
• International activities. Technology Crimes [IN FORCE]
Working Group, which allows representatives
→ Telecommunication Regulation from Arab countries to discuss AI strategies.
The country's other initiatives include an AI
Law, Law No. 10 of 2003 See the group's chair election, second meeting
roadmap and Charter for Responsible AI.
[IN FORCE] and third meeting.
→ Law No. 82 of 2002 on the • See the Applied Innovation Center.
Protection of Intellectual
• The Senate Education Committee stressed the
Property Rights [IN FORCE]
urgency of issuing a document to evaluate the
ethics and control of AI in Egypt.

Global AI Law and Policy Tracker • IAPP • iapp.org 11

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

On 1 Aug. 2024, the EU AI Act entered into force. → EU AI Office → General Data Protection • The EU is a party to the OECD's AI principles.
EU

Various dates for compliance will apply in the Regulation [IN FORCE] See the OECD's Policy Observatory.
→ EU AI Board
coming years, with the first applications of the act
→ European Data → Digital Services Act [IN FORCE] • The EU participated in the 2023 U.K. AI
in early 2025 and the last at the end of 2030.
Protection Board Summit, which led to the Bletchley Declaration.
→ Digital Markets Act [IN FORCE]
In brief, the act: • As a nonenumerated member of the G7,
→ Special Committee on AI → AI Liability Directive [DRAFT]
• Creates harmonized rules for placing AI on the in a Digital Age the EU endorsed the 11 Hiroshima Process
→ EU Cyber Resilience Act International Guiding Principles for Advanced
EU market. → EDPB's ChatGPT Task Force [IN FORCE] AI systems.
• Applies to the EU and any third-country → Member state AI → Ethics guidelines for
providers and deployers that place AI systems • The EU also adopted UNESCO's
authorities, for example: trustworthy AI [IN FORCE]
on the EU market. Recommendation on the Ethics of AI.
- Spain's AI supervision → New Product Liability
• Centers around a risk-based approach. • See the EU's approach and timeline for AI
agency, the Agencia Directive [DRAFT] development.
• Prohibits use of certain AI systems and provides Española de
specific requirements for high-risk systems. Supervisión de la • Member states and the European Commission
Inteligencia Artificial worked to create a Coordinated Plan on AI
• Creates harmonized transparency rules for
in 2018. This plan includes a table showcasing
certain AI systems. → Member state DPAs,
how 23 of 27 EU countries, as well as Norway
for example:
The IAPP and its partners have worked diligently and Switzerland, have progressed with their
- France's Commission national strategies. The coordinated plan,
to analyze the EU AI Act and its implications for
nationale de updated in 2021, builds on the original
organizations. For more insight, check out the IAPP
l'informatique et 2018 plan.
series on the top 10 operations impacts of the EU
des libertés
AI Act and the EU AI Act: 101 chart. • In January 2024, the European Commission
- Germany's Federal decided to establish an EU AI Office, to "ensure
Commissioner for the development and coordination of AI
Data Protection and policy at European level, as well as supervise
Freedom of Information the implementation and enforcement of the
- Italy's Garante forthcoming AI Act."

- Spain's Agencia • Along with the U.S., the U.K., Israel, and the EU
Española de Protección have has signed onto the Council of Europe's
de Datos Framework Convention on AI and human
rights, democracy, and the rule of law.
↓ - Belgium's DPA

Global AI Law and Policy Tracker • IAPP • iapp.org 12

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

- Poland's Urząd Ochrony • Some EU member states have national

EU, continued

Danych Osobowych AI strategies, many of which emphasize

- Austria's DPA research, training and labor preparedness,
as well as multistakeholder and international
- Hungary's National collaboration. For example, France's national AI
Authority for Data strategy lays out three main objectives:
Protection and
- Improve the AI education and training
Freedom of Information
ecosystem.
- Establish an open data policy for implementing
AI applications and pooling assets.
- Develop an ethical framework for fair and
transparent use of AI.

A proposed Digital India Act would replace the → NITI Aayog → Information Technology Act • India is a party to the G20 AI Principles, which
INDIA

IT Act of 2000 and regulate high-risk AI systems. [IN FORCE] are drawn from the OECD's AI principles.
→ Ministry of Electronics and
The Indian government has advocated for a See the OECD's Policy Observatory.
Information Technology → The Information Technology
robust, citizen-centric and inclusive "AI for all"
Rules [IN FORCE] • India participated in the 2023 U.K. AI Summit,
environment. A task force has been established → Ministry of Commerce and
which led to the Bletchley Declaration.
to make recommendations on ethical, legal and Industry → Competition Act [IN FORCE]
societal issues related to AI, and to establish an • India also adopted UNESCO's Recommendation
→ AI Task Force → Motor Vehicles Act [IN FORCE]
AI regulatory authority. on the Ethics of AI.
→ Digital Personal Data
• NITI Aayog, the government's public policy think
According to its National Strategy for AI, India Protection Act [IN FORCE]
tank, launched the AI Research, Analytics and
hopes to become what it calls an "AI garage" Copyright Act [IN FORCE]
→ knowledge Assimilation platform to elaborate
for emerging and developing economies, where
→ National e-Governance Plan on AI requirements in India.
scalable solutions can be easily implemented and
designed for global deployment. [IN FORCE] • See India AI, an umbrella program of the Ministry
of Electronics and Information Technology.

Global AI Law and Policy Tracker • IAPP • iapp.org 13

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

In 2020, Indonesia released the National Strategy → Ministry of Communication → Law No. 27 of 2022 on • Indonesia is a party to the G20 AI Principles,
INDONESIA

on AI as part of the AI Towards Indonesia's Vision and Informatics Personal Data Protection which are drawn from the OECD's AI principles.
2045. The following five national priorities were [IN FORCE] See the OECD's Policy Observatory.
→ Agency for the
outlines as where AI is anticipated to have the • Indonesia participated in the 2023 U.K. AI
Assessment and → Electronic Information Law
biggest impact: Summit, which led to the Bletchley Declaration.
Application of Technology [IN FORCE]
• Health services. • Indonesia also adopted UNESCO's
→ Ministry of Research, → Article 40 of Law No.
• Bureaucratic reform. Technology and Higher 36 of 1999 regarding Recommendation on the Ethics of AI.
Education Telecommunications • See Indonesia's roadmap for industry, Making
• Education and research.
[IN FORCE] Indonesia 4.0.
→ National Cyber and
• Food security.
Crypto Agency → Law No. 14 of 2008 on Public
• Mobility and smart cities. Information Transparency
[IN FORCE]
Further, Indonesia released a Circular on AI Ethics.
While not binding, it provides a reference point → Copyright Act [IN FORCE]
for formulating and establishing internal company
policies for Indonesia's AI industry. Since issuing
the circular, the Ministry of Communication and
Informatics committed to preparing specific
regulations regarding AI use and development.

Global AI Law and Policy Tracker • IAPP • iapp.org 14

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

Based on a policy for regulation and ethics in AI, → Ministry of Innovation, → Basic Law: Human Dignity • Israel is a party to the OECD's AI principles.
ISRAEL

Israel wants to form a uniform risk-management Science and Technology and Liberty [IN FORCE] See the OECD's Policy Observatory.
tool, establish a governmental knowledge and
→ Ministry of Justice → Privacy Protection Law • Israel participated in the 2023 U.K. AI Summit,
coordination center, and maintain involvement in
[IN FORCE] which led to the Bletchley Declaration.
international regulation and standardization. In → Privacy Protection
general, voluntary standardization, sector-based Authority → Data Security Regulation • Israel's Ministry of Justice issued an opinion
self-regulation and modular experimentation [IN FORCE] that machine learning will fall under the fair-use
→ Israel National Cyber
tools, e.g., sandboxes, will be favored over a lateral provision in the country's Copyright Act.
Directorate → Credit Data Law [IN FORCE]
framework. The following resources are available • Along with the U.S., the U.K., Israel, and the EU
for policy guidance:
→ Copyright Act [IN FORCE]
have has signed onto the Council of Europe's
• Israeli AI Regulation and Policy White Paper: A Framework Convention on AI and human
First Glance. rights, democracy, and the rule of law.
• Harnessing Innovation: Israeli Perspectives on
AI Ethics and Governance.
• Policy on AI Regulation and Ethics.

Global AI Law and Policy Tracker • IAPP • iapp.org 15

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

In 2022, Japan released a National AI Strategy. → Ministry of Economy, → Improving Transparency • Japan is a party to the OECD's AI principles.
JAPAN

Japan promotes the notion of "agile governance," Trade and Industry and Fairness of Digital See the OECD's Policy Observatory.
whereby the government provides nonbinding Platforms Act [IN FORCE]
→ Council for Science, • Japan participated in the 2023 U.K. AI Summit,
guidance and defers to the private sector's
Technology and Innovation → Financial Instruments and which led to the Bletchley Declaration.
voluntary efforts to self-regulate.
Exchange Act [IN FORCE]
→ Personal Information • As part of the G7, Japan endorsed the 11
The following white papers have been issued for Protection Commission → Protection of Personal Hiroshima Process International Guiding
policy guidance: Information Act [IN FORCE] Principles for Advanced AI systems.
→ Fair Trade Commission
• AI Governance in Japan Ver. 1.1. → Antimonopoly Act [IN FORCE] • Japan also adopted UNESCO's Recommendation
on the Ethics of AI.
• Governance Guidelines for Implementation of → Product Liability Act [IN FORCE]
AI Principles. • The Social Principles of Human-Centric AI,
→ Copyright Law [IN FORCE]
drafted by the Council for Social Principles
• AI Utilization Guidelines, an initiative for
of Human-Centric AI, describe AI's role in
implementing the OECD AI Principles.
Japan's "Society 5.0" and advocates that AI
In 2023, the AI Strategy Council released draft AI should be human-centric; promote education/
Operator Guidelines, which clarify how operators literacy; protect privacy; ensure security;
should develop, provide and use AI. maintain fair competition; ensure fairness,
accountability and transparency; and promote
In May 2024, Japan introduced draft legislation collaborative innovation.
that would require various disclosures by
• Minister of Education, Culture, Sports, Science
developers and safeguard human rights.
and Technology Keiko Nagaoka declared the
country's copyright laws cannot be enforced on
materials used in AI training datasets.
• Japan's Ministry of Economy, Trade and
Industry introduced the Contract Guidelines for
AI and Data Use to assist parties involved in AI
business transactions.
• See the Draft AI Research and Development
Guidelines for International Discussions.

Global AI Law and Policy Tracker • IAPP • iapp.org 16

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

Mauritius published an AI Strategy. The strategy → Ministry of Technology, → Financial Services (Robotic and • Mauritius also adopted UNESCO's
MAURITIUS

goes in depth on the benefits and challenges Communication and AI Enabled Advisory Services) Recommendation on the Ethics of AI.
of AI, specifically how AI impacts the country's Innovation Rules [IN FORCE] • See the Digital Mauritius 2030 strategic plan.
various industries, and sets out a clear vision
→ Ministry of Finance and → Data Protection Act [IN FORCE] • In 2019, the Minister of Technology,
for development of AI.
Economic Development Communication and Innovation officially
→ National Cyber Security
Other initiatives from the Mauritius → AI Council Strategy [IN FORCE] opened the workshop, Leading Innovation in
government include: Business and Government Services through AI,
→ Research and Innovation → Cybersecurity and Cybercrime
which is organized by the Mauritius Research
• AI Society. Council Act [IN FORCE]
and Innovation Council.
• AI for Agriculture project. → Data Protection Office → Industrial Property Act
[IN FORCE]
→ Copyright Act [IN FORCE]
→ Protection against Unfair
Practices (Industrial Property
Rights) Act [IN FORCE]

Global AI Law and Policy Tracker • IAPP • iapp.org 17

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

Many New Zealand government agencies are → Ministry of Business, → Privacy Act [IN FORCE] • New Zealand is a party to the OECD's AI
NEW ZEALAND

signatories to the Algorithm Charter, which sets Innovation and principles. See the OECD's Policy Observatory.
→ Bill of Rights Act [IN FORCE]
out a series of ethical commitments around the Employment
• New Zealand also adopted UNESCO's
development and use of algorithms. The charter → Treaty of Waitangi [IN FORCE]
→ Statistics New Zealand Recommendation on the Ethics of AI.
provides a risk matrix to assess the likelihood → Human Rights Act [IN FORCE]
and impact of algorithmic applications. The → Office of the Privacy • The New Zealand government released AI
Commissioner → Māori Data Sovereignty cornerstones, which will inform an eventual
New Zealand government generally prioritizes
Principles national AI strategy.
trustworthy and human-centric AI development. → Department of
Internal Affairs → Māori Data Governance Model • See the AI Forum of New Zealand.
Although there is no comprehensive AI regulation
in New Zealand, the current Privacy Act 2020 • "An example of governance for AI in health
applies to the use of AI systems in the country. services from Aotearoa New Zealand" published
The Office of the Privacy Commissioner issued on nature.com has been recognised for its
guidance on compliance with privacy law when approach in the health sector, particularly in
using generative AI tools, as well as a summary. terms of prioritising the voice of Māori.  
Further, the Office of the Privacy Commissioner • The Office of the Privacy Commissioner
published the Privacy Commissioner's expectations is currently conducting consultation on a
around generative AI in June 2023. Biometrics Privacy Code of Practice under the
Privacy Act to regulate the use of biometric
In July 2024, New Zealand's Ministry of Business,
technologies. If enacted, that code of practice
Innovation and Employment released a cabinet
will have the force of law under the Privacy Act.
paper that outlines its approach to AI regulation. In
it, the ministry noted, "we need to state our support • The Department of Internal Affairs published
for increased uptake of AI in New Zealand and be initial advice on Generative AI in the
clear that we will take a light-touch, proportionate public service.
and risk-based approach to AI regulation."

The Law, Society and Ethics Working Group

published a set of guiding Trustworthy AI in
Aotearoa principles designed to provide direction
for AI stakeholders.

Global AI Law and Policy Tracker • IAPP • iapp.org 18

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

In April 2024, Nigeria hosted a workshop to → Federal Ministry of → Nigeria Data Protection • Nigeria adopted UNESCO's Recommendation
NIGERIA

devise a national AI strategy, where Minister of Communication, Regulation on the Ethics of AI.
Communications, Innovation and Digital Economy Innovation and Digital → Nigeria Data Protection Act • Nigeria participated in the 2023 U.K. AI Summit,
Bosun Tijani stated to the country's goal is to Economy
which led to the Bletchley Declaration.
become a key player in global regulation and → National Information
development of AI. • In 2020, the Nigerian Communications
Technology Development
Commission released a research paper on the
Agency
In August 2024, the country released its draft ethical and societal impacts of AI.
national AI strategy, which recognizes the benefits → Nigerian Communications
and risks of widespread adoption of AI. Nigeria Commission
plans to address the ethical issues of using AI while
embracing it as a driver of socioeconomic growth.

Peru has drafted legislation around the use of → Secretariat of Government → Supreme Decree No. 157- • Peru is a party to the OECD's AI principles.
PERU

AI, including law 3814, which would promote the and Digital Transformation 2021-PCM [IN FORCE] See the OECD's Policy Observatory.
use of AI "in favor of the economic and social
→ Presidency of the Council → Supreme Decree No. 003- • Peru also adopted UNESCO's Recommendation
development of the country." The law includes
of Ministers 2013-JUS [IN FORCE] on the Ethics of AI.
the following principles:
→ National Directorate of → Personal Data Protection Law • See the National Digital Transformation Policy
• Risk-based security standards.
Intelligence No. 29733 [IN FORCE] for 2030.
• Multi-stakeholder approach.
→ Superintendence of → Law of Transparency and
• Internet governance. Banking, Insurance Access to Public Information
and Pension Fund [IN FORCE]
• Digital society.
Administration → Finance Regulation for
• AI privacy.
→ Ministry of Justice and Information Security and
Peru also developed a National AI Strategy that Human Rights Cybersecurity [IN FORCE]
aids in the promotion, development and adoption → Cyber Defense Law No. 30999
→ National Authority for the
of AI in the country. The first draft includes a [IN FORCE]
Protection of Personal Data
roadmap, goals, definitions and external context
National Authority for → Law 30096 on Computer Crime
examples to further develop the strategy. →

Transparency, Access [IN FORCE]

to Public Information and → Financial sector Cybersecurity
Protection of Personal Data Framework [IN FORCE]
→ Copyright Law, Legislative
Decree 822 [IN FORCE]

Global AI Law and Policy Tracker • IAPP • iapp.org 19

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

Saudi Arabia has a National Strategy on Data → Saudi Data and AI → Personal Data Protection Law • Saudi Arabia is a party to the G20 AI Principles,
SAUDI ARABIA

and AI, which provides a welcoming, flexible and Authority [IN FORCE] which are drawn from the OECD's AI principles.
stable regulatory framework, including incentive See the OECD's Policy Observatory.
→ National Data → Data Management and
schemes, to attract AI companies, investors and • Saudi Arabia also adopted UNESCO's
Management Office Personal Data Protection
talents. According to the strategy, Saudi Arabia Recommendation on the Ethics of AI.
Standards [IN FORCE]
aspires to be one of the leading economies → Ministry of
Communications and → Children and Incompetents' • The government of Saudi Arabia in collaboration
utilizing and exporting data and AI after 2030.
Information Technology Data Protection Policy with the Saudi Data and AI Authority signed a
It is ready to leverage its "young and vibrant
[IN FORCE] memorandum of understanding to create an
population" and "unique centralized ecosystem."
AI center dedicated to the energy segment.
The country hopes to attract outside investment → Data Classification Policy
by hosting global AI events and applying its [IN FORCE]
influence as a tech hub within the Middle East.
→ General Rules for the Transfer
of Personal Data outside the
Geographical Borders of the
Kingdom [IN FORCE]
→ Data Sharing Policy [IN FORCE]
→ Freedom of Information Policy
[IN FORCE]
→ Open Data Policy [IN FORCE]

Global AI Law and Policy Tracker • IAPP • iapp.org 20

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

Singapore, through its Personal Data Protection → AI Verify Foundation → Personal Data Protection Act • Singapore is a party to the OECD's AI principles.
SINGAPORE

Commission and AI Verify Foundation, developed [IN FORCE] See the OECD's Policy Observatory.
→ Smart Nation Digital
voluntary governance frameworks and initiatives
Government Group → Computer Misuse Act • Singapore participated in the 2023 U.K. AI
for ethical AI deployment, data management and
→ AI Ethics and Governance [IN FORCE] Summit, which led to the Bletchley Declaration.
sectoral implementation, including:
Steering Committee → Copyright Act [IN FORCE] • Singapore also adopted UNESCO's
• Model AI Governance Framework for
→ Personal Data Protection Recommendation on the Ethics of AI.
Generative AI → Patents Act [IN FORCE]
Commission • Based on Singapore's National AI Strategy, the
• Model AI Governance Framework. → Competition Act [IN FORCE]
→ Monetary Authority of city-state aims to be a global hub for AI, thereby
• National AI Programmes in Government → Cybersecurity Act [IN FORCE] generating economic gains and improving
Singapore
and Finance. → Protection from Online lives. A key tenet in Singapore's AI policy is
→ Infocomm Media
• Veritas Initiative, an implementation framework Falsehoods and Manipulation that its citizens understand AI tech and its
Development Authority
for AI governance in the financial sector. Act [IN FORCE] workforce attains the necessary competencies
→ Advisory Council on the to participate in an AI economy.
• AI Verify, a governance testing toolkit. → Road Traffic Act [IN FORCE]
Ethical Use of AI and Data
• The Singapore VerifyAI initiative, known as the
• IPOS International, part of the Intellectual → The Digital Economy
"crosswalk" was unveiled at the inaugural US-
Property Office of Singapore that realizes Partnership Agreement
Singapore Dialogue on Critical and Emerging
customized IP solutions. [IN FORCE]
Technologies. The crosswalk links IMDA's AI Verify
• Proposed Advisory Guidelines on Use of with the U.S. National Institute of Standards and
Personal Data in AI Recommendation and Technology's AI Risk Management Framework.
Decision Systems.
• See the Primer to the Model AI Governance
• Principles to Promote Fairness, Ethics, Framework.
Accountability and Transparency in the Use of AI
• See the Trusted Data Sharing Framework.
and Data Analytics in Singapore's Financial Sector.
• See the Guide to Job Redesign in the Age of AI.
• Implementation and Self-Assessment Guide for
Organizations, a companion to the Model AI • Complementing the Model Framework and
Governance Framework. ISAGO are two volumes of a Compendium
of Use Cases that show "how local and
international organisations across different
sectors and sizes implemented or aligned their
AI governance practices with all sections of the
Model Framework."
- Volume 1.
- Volume 2.

Global AI Law and Policy Tracker • IAPP • iapp.org 21

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

South Korea has a comprehensive AI Act in the → Ministry of Science and ICT → Personal Information • South Korea adopted UNESCO's
SOUTH KOREA

works to ensure accessibility to AI technology for Protection Act [IN FORCE] Recommendation on the Ethics of AI.
→ Personal Information
all developers without government approval, but
Protection Commission → Monopoly Regulation and Fair • The Digital New Deal was created by the
this requires reliability measures. South Korea is
Trade Act [IN FORCE] South Korean government to promote both
also setting new standards on copyrights of AI- → Communications
educational and industrial efforts on AI
generated content. Commission → Copyright Act [IN FORCE]
opportunities.
→ Internet and Security → Protection and Use of Location
South Korea has numerous policy initiatives • See the AI Open Innovation Hub.
Agency Information Act [IN FORCE]
regarding AI and technology under its
National Strategy for AI, including the AI → Financial Services → Consumer Protection in
Research and Development Strategy, the Data Commission Electronic Commerce Act
Industry Activation Strategy, and the System [IN FORCE]
→ Fair Trade Commission
Semiconductor Strategy. The nation intends to → Promotion and
→ National Information
leverage its high education level, widespread Communications Network
Society Agency
acceptance of new technology and preeminent IT Utilization and Information
infrastructure to implement these initiatives. → Korea AI Association Protection Act [IN FORCE]

Additionally, in August 2023, the Personal → Credit Information Use and

Information Protection Commission published Protection Act [IN FORCE]
guidance for the safe use of personal information → Product Liability Act [IN FORCE]
in the age of AI.

Global AI Law and Policy Tracker • IAPP • iapp.org 22

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

Taiwan has embraced a holistic approach to → Fair Trade Commission → Personal Data Protection Act • See the Digital Nation and Innovative Economic
TAIWAN

developing an AI environment. The government [IN FORCE] Development Program.

→ NSTC, previously the
released a draft of its AI Basic Act, which prioritizes
Ministry of Science → Fair Trade Act [IN FORCE] • See the 5+2 Industrial Innovation Plan.
innovation and technological advancement.
and Technology
The act largely follows a risk-based approach → Cybersecurity Management • See Smart Taiwan 2030.
to regulating AI, while also emphasizing data → Ministry of Health Act [IN FORCE]
• See Taiwan AI Labs.
protection, consumer rights and transparency and Welfare → Company Act [IN FORCE]
requirements. The following resources have been • See the country's Forward-looking
→ Executive Yuan of Taiwan
issued for policy guidance:
→ Child and Youth Sexual Infrastructure Development Program.
→ Ministry of Digital Affairs Exploitation Prevention Act
• National Science and Technology Council's • See the Unmanned Vehicle Technology
[IN FORCE]
policy discussing AI Innovation.
→ Industrial Technology Innovation Sandbox.
Research Institute → Copyright Act [IN FORCE]
• AI Taiwan Action Plan.
→ Taiwan AI Center → Patent Act [IN FORCE]
• AI Taiwan Action Plan 2.0. of Excellence → Freedom of Government
• 2022 AI-Readiness Assessment Report. Information Law [IN FORCE]
→ Financial Technology
Development and Innovative
Experimentation Act [IN FORCE]
→ FinTech Regulatory
Sandbox Guidance
→ MoST AI Technology Research
and Development Guidelines
→ Guidelines on the use of
Generative AI [DRAFT]

Global AI Law and Policy Tracker • IAPP • iapp.org 23

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

In 2017, the UAE became the first country to → Minister of AI, Digital → Personal Data Protection Law • The UAE participated in the 2023 U.K. AI
UNITED ARAB EMIRATES

establish an AI ministry. The nation's Council Economy and Remote [IN FORCE] Summit, which led to the Bletchley Declaration.
for AI and Blockchain will oversee policies that Work Applications Office • The UAE also adopted UNESCO's
→ Central Bank Rulebook
promote an AI-friendly ecosystem, advance AI Recommendation on the Ethics of AI.
→ AI and Blockchain Council [IN FORCE]
research and accelerate collaboration between
→ Data Office → Federal Decree Law on • Abu Dhabi hosts a growing startup community,
public and private sectors. The UAE is poised
Combating Rumours and advanced machine-learning facilities and
to become a hub for AI research, collaboration, → Council for Digital
Cybercrimes [IN FORCE] educational institutions, like Mohamed bin
innovation and education per its National Wellbeing
Zayed University which teamed up with IBM to
Strategy for AI. The following resources have → Penal Code [IN FORCE]
→ Regulations Lab open the AI Center of Excellence, in addition
been issued for policy guidance:
→ Federal Law concerning the to a new supercomputing resource for
→ Abu Dhabi Global Market's
• National Program for AI. Regulation of Competition complex algorithms and large datasets. With
Office of Data Protection
• AI Ethics Principles and Guidelines. [IN FORCE] this infrastructure in place, the UAE hopes to
→ DIFC deploy AI in priority sectors such as energy
• Generative AI guide. → Federal Law on Consumer
Protection [IN FORCE] and transportation.
• AI coding license.
→ Federal Decree Law on • The National Program for AI published a
• AI System Ethics Self-Assessment Tool. Deepfake Guide in 2021.
Copyrights and Neighbouring
• AI Adoption Guideline in Government Services. Rights [IN FORCE] • The UAE AI and Robotics Award for Good aims
• The Dubai International Financial Centre's → Health Data Law [IN FORCE] to "encourage research and applications of
Regulation 10 on Processing Personal Data innovative solutions in (AI) and robotics to meet
→ Federal Law on the Regulation existing challenges in the categories of health,
Through Autonomous and Semi-Autonomous
and Protection of Industrial education and social services."
Systems [IN FORCE].
Property Rights [IN FORCE]
• See the country's Guidelines for Financial
→ ADGM's Data Protection Institutions adopting Enabling Technologies.
Regulations 2021 [IN FORCE]
• See the AI Hardware Infrastructure Report.
→ Federal Law on the Civil
Transactions Law of the United
Arab Emirates State [IN FORCE]
→ Minister of AI, Digital
Economy and Remote Work
Applications Office's AI Ethics
Principles and Guidelines

Global AI Law and Policy Tracker • IAPP • iapp.org 24

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

The U.K. government proposed a context-based, → Office for AI → Equality Act [IN FORCE] • The U.K. is a party to the OECD's AI principles.
U.K.

proportionate approach to regulation and will See the OECD's Policy Observatory.
→ Information → U.K. General Data Protection
rely on existing sectoral laws to impose guardrails
Commissioner's Office Regulations and Data • In 2023, the country hosted the AI Summit,
on AI systems. In July 2024, during the King's
Protection Act [IN FORCE] which led to the Bletchley Declaration.
speech, the government affirmed its intention → Digital Regulation
to regulate AI, although no firm legislation had Cooperation Forum → Consumer Protection Act • The U.K. also adopted UNESCO's
been introduced under the new administration. [IN FORCE] Recommendation on the Ethics of AI.
→ Financial Conduct
Currently, the U.K. relies on existing sectoral laws Authority → Financial Services and Markets • As part of the G7, the U.K. endorsed the 11
to impose guardrails on AI system. The following Act [IN FORCE] Hiroshima Process International Guiding
resources are available for policy guidance:
→ AI Council
Principles for Advanced AI systems.
→ Consumer Rights Act
• A pro-innovation approach to AI regulation.
→ Department for
[IN FORCE] • Specific action items include launching a
Science, Innovation
• Algorithmic Transparency Recording national AI research and insights program,
and Technology → National Security and
Standard Hub. developing a diverse AI workforce, enabling
Investment Act [IN FORCE]
better data availability, creating a national
• AI Standards Hub, a new U.K. initiative → Copyright, Designs and strategy for AI in health and social care,
dedicated to the evolving and international Patents Act [IN FORCE] applying AI systems to climate change
field of standardization for AI technologies.
→ Advanced Research and mitigation, piloting an AI standards hub to
• Guide to using AI in the public sector by the Invention Agency Act coordinate with global AI standardization, and
U.K. government. [IN FORCE] developing a cross-government standard for
• The Government Digital Service and the Office for algorithmic transparency.
→ National Cyber Security
AI's guide on understanding AI ethics and safety. Centre's Assessing intelligent • The Centre for Data Ethics and Innovation
• The Centre for Data Ethics and Innovation's tools for cyber security published a Roadmap to an Effective AI
AI Governance research report. [IN FORCE] Assurance Ecosystem, which is also part of the
National AI Strategy. Further, the CDEI created
• Guidance on the AI auditing framework from
an AI Assurance Guide as a companion to
the Information Commissioner's Office.
the roadmap.
• ICO and Alan Turing Institute's Explaining
• See the U.K. AI Safety Institute.
decisions made with AI.
• Along with the U.S., the U.K., Israel, and the EU
have has signed onto the Council of Europe's
Framework Convention on AI and human
rights, democracy, and the rule of law.

Global AI Law and Policy Tracker • IAPP • iapp.org 25

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

The U.S. has been active in providing guidance to → Office of Science and → FTC Act, Section 5 [IN FORCE] • The U.S. is a party to the OECD's AI principles.
U.S. (FEDERAL)

government organizations and private businesses Technology Policy See the OECD's Policy Observatory.
→ Fair Credit Reporting Act
while introducing legislation to target specific issues,
→ National AI Initiative Office [IN FORCE] • The U.S. participated in the 2023 U.K. AI
such as deepfakes or discrimination. In October
Summit, which led to the Bletchley Declaration.
2023, President Joe Biden signed the Executive → Federal Trade Commission → Equal Credit Opportunity Act
Order on the Safe, Secure, and Trustworthy [IN FORCE] • The U.S. also adopted UNESCO's
→ Consumer Financial
Development and Use of Artificial Intelligence, Recommendation on the Ethics of AI.
Protection Bureau → Title VII of the Civil Rights Act
which put forth guidelines for AI use in federal [IN FORCE] • As part of the G7, the U.S. endorsed the 11
agencies, including accountability and transparency
→ Department of Justice
Hiroshima Process International Guiding
requirements. This has mirrored efforts in Congress
→ Americans with Disabilities Act
→ Equal Employment Principles for Advanced AI systems.
to promote and control the use of AI domestically. [IN FORCE]
Opportunity Commission
• In general, the U.S. approach to AI governance
→ Age Discrimination in
The U.S. has been active in many of the multilateral
→ National Institute of has been slow and incremental, seeking to
Employment Act [IN FORCE]
agreements on AI as well, for example by signing Standards and Technology preserve civil and human rights for Americans
onto the Council of Europe's Framework Convention
→ Fair Housing Act [IN FORCE] throughout AI deployment, as well as mobilize
and promoting rulemaking at the U.N. At the state → Genetic Information and international collaboration which upholds
level, several bills have been passed, such as the Nondiscrimination Act democratic values and mutual advancement.
Colorado AI Act, and several bills that regulate AI in [IN FORCE] • See the U.S. AI Safety Institute.
specific sectors, such as House Bill 3733 in Illinois.
→ American Privacy Rights Act • U.S. Senate Committee on the Judiciary's
While not an exhaustive list, the following federal
[DRAFT] Subcommittee on Privacy, Technology and the
laws and policies could place a compliance or
Health Equity and Law held a hearing on the legislation of AI.
regulatory burden on private businesses: →

Accountability Act [DRAFT] • The Bipartisan Senate Working Group on AI, led
• Executive orders:
by Sen. Chuck Schumer, D-N.Y., has released a
- Maintaining American Leadership in AI roadmap for AI policy. This document highlights
- Promoting the Use of Trustworthy AI in the the need to ensure enforcement of existing rules,
Federal Government tackle current threats not covered by legislation,
such as the use of deepfakes in elections, prepare
- The Safe, Secure, and Trustworthy
for long-term threats of AI use, and create a
Development and Use of AI
federal privacy legal framework.
• Acts and bills:
• The Singapore VerifyAI initiative known as
- AI Training Act [IN FORCE] "crosswalk" was unveiled at the inaugural
- National AI Initiative Act (Division E, Sec. 5001) U.S.-Singapore Dialogue on Critical and
Emerging Technologies. The crosswalk links
[IN FORCE]
IMDA's AI Verify with the U.S. NIST's AI Risk
↓ Management Framework.

Global AI Law and Policy Tracker • IAPP • iapp.org 26

 Navigate to: Argentina ∙ Australia ∙ Bangladesh ∙ Brazil ∙ Canada ∙ Chile ∙ China ∙ Colombia ∙ Egypt ∙ EU ∙ India ∙ Indonesia ∙ Israel
Japan ∙ Mauritius ∙ New Zealand ∙ Nigeria ∙ Peru ∙ Saudi Arabia ∙ Singapore ∙ South Korea ∙ Taiwan ∙ United Arab Emirates ∙ U.K. ∙ U.S.

Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context

- AI in Government Act (Division U, Sec. 101) • Along with the U.S., the U.K., Israel and the EU
U.S. (FEDERAL), continued

[IN FORCE] have has signed onto the Council of Europe's

- AI CONSENT Act [DRAFT] Framework Convention on AI and human
rights, democracy and the rule of law.
- AI Transparency in Elections Act [DRAFT]
- Algorithmic Accountability Act [DRAFT]
- Content Origin Protection and Integrity from
Edited and Deepfaked Media Act [DRAFT]
- Digital Platform Commission Act [DRAFT]
- NO FAKES Act of 2024 [DRAFT]
- Protect Elections from Deceptive AI Act [DRAFT]
- Protecting Consumers from Deceptive AI Act
[DRAFT]
• Nonbinding frameworks:
- Blueprint for an AI Bill of Rights
- National Institute of Standards and
Technology AI Risk Management Framework
- Guidance for Regulation of AI Applications

• Government initiatives:
- Voluntary Commitments from Leading AI
Companies to Manage the Risks Posed by AI
- TTC Joint Roadmap on Evaluation and
Measurement Tools for Trustworthy AI and
Risk Management
- Congressional AI effort of Sen. Charles E.
Schumer, D-N.Y.
- National Security Commission on AI
- Bipartisan legislative framework for AI
announced by U.S. Sens. Richard Blumenthal,
D-Conn., and Josh Hawley, R-Mo.

Global AI Law and Policy Tracker • IAPP • iapp.org 27

Contact

Richard Sentinella, PhD

AI Governance Research Fellow, IAPP
[email protected]

Joe Jones
Research and Insights Director, IAPP
[email protected]

For further inquiries, please reach out to [email protected].

Follow the IAPP on social media

C Q E +

Updated October 2024.

The IAPP disclaims all warranties, expressed or implied, with respect to the contents of this
material, including any warranties of accuracy, merchantability or fitness for a particular
purpose. Nothing herein should be construed as legal advice.

© 2024 IAPP. All rights reserved.