https://wheresthe.ai/New and changed AI rules, filings and approvals. https://wheresthe.ai/rule/us-ca-sb947-no-robo-bosses-2026/https://wheresthe.ai/rule/us-ca-sb947-no-robo-bosses-2026/#2026-09-30AdoptedWed, 30 Sep 2026 00:00:00 GMTBars California employers from relying solely on automated decision systems for discipline or termination decisions, requires human review and corroboration, and requires notice to affected workers including a description of the data used. Protects workers from retaliation for asserting these rights. https://wheresthe.ai/rule/us-eo-14434-super-intelligence-terminology-2026/https://wheresthe.ai/rule/us-eo-14434-super-intelligence-terminology-2026/#2026-09-29Adopted and in effectTue, 29 Sep 2026 00:00:00 GMTRequires executive-branch agencies, to the extent permitted by law, to use 'Super Intelligence' and 'SI' instead of 'Artificial Intelligence' and 'AI' in correspondence, websites, reports and policy documents, defining SI by reference to the existing statutory definition of AI (15 U.S.C. 9401(3)). It asks OSTP to propose legislation within 60 days on whether a statutory 'Super Intelligence' definition should supersede 'artificial intelligence'. https://wheresthe.ai/registry/china/https://wheresthe.ai/registry/china/#2026-09-23Registry updateWed, 23 Sep 2026 00:00:00 GMTChina's CAC filed 3 on-device phone AI services https://wheresthe.ai/registry/china/https://wheresthe.ai/registry/china/#2026-09-14Registry updateMon, 14 Sep 2026 00:00:00 GMTChina's CAC published 124 new generative-AI filings (1,112 in total) https://wheresthe.ai/rule/us-ca-sb1119-adams-law-companion-chatbots-children-2026/https://wheresthe.ai/rule/us-ca-sb1119-adams-law-companion-chatbots-children-2026/#2026-09-10AdoptedThu, 10 Sep 2026 00:00:00 GMTRequires companion-chatbot operators, from 1 Jul 2027, to perform and document a comprehensive child-safety risk assessment before releasing a new or substantially modified chatbot, and to provide child-account protections and parental controls. Operators must also obtain independent child-safety audits (first by 1 Jan 2029 or before first public release, then every two years); the Attorney General can request audit reports for cause. https://wheresthe.ai/rule/us-ca-sb813-ab1405-ai-verification-auditors-2026/https://wheresthe.ai/rule/us-ca-sb813-ab1405-ai-verification-auditors-2026/#2026-09-09AdoptedWed, 09 Sep 2026 00:00:00 GMTSB 813 creates a state framework to certify independent verification organizations that assess AI systems and models for safety and risk; AB 1405 has the Government Operations Agency set up a registry of AI auditors with independence and transparency standards and bars unregistered persons from conducting covered AI audits. https://wheresthe.ai/rule/kr-ai-data-based-administration-act-2026/https://wheresthe.ai/rule/kr-ai-data-based-administration-act-2026/#2026-08-28Took effectFri, 28 Aug 2026 00:00:00 GMTAmends and renames the Data-Based Administration Act to create a legal basis for AI use across Korean public bodies: defines AI-based administration, creates AI and data administration officers, a shared AI platform for public institutions, and duties on agencies to train staff, ensure training-data quality and keep inventories of AI services. https://wheresthe.ai/rule/us-ca-ai-transparency-act-sb942/https://wheresthe.ai/rule/us-ca-ai-transparency-act-sb942/#2026-08-02Took effectSun, 02 Aug 2026 00:00:00 GMTRequires generative AI providers whose systems are publicly accessible in California to offer a free disclosure-verification tool and embed latent provenance disclosures (provider, system and version, creation date, unique identifier, and whether AI created or altered the content) in AI-generated or altered image, video and audio. AB 853 delayed operation to 2 Aug 2026 and extended duties to large online platforms (2027) and capture-device makers (2028); SB 1000 (urgency statute, effective 30 Sep 2026) removed the 1-million-user threshold and the manifest-label option. https://wheresthe.ai/rule/eu-code-of-practice-transparency-ai-generated-content-2026/https://wheresthe.ai/rule/eu-code-of-practice-transparency-ai-generated-content-2026/#2026-08-02Took effectSun, 02 Aug 2026 00:00:00 GMTVoluntary code supporting AI Act Article 50(2), (4) and (5): providers of generative AI systems commit to machine-readable marking and detectability of AI outputs; deployers commit to labelling deepfakes and AI-generated text published on matters of public interest, using an EU icon set. The Commission and AI Board confirmed it as an adequate tool to demonstrate compliance; about 190 organisations had signed by end July 2026. https://wheresthe.ai/rule/eu-guidelines-article-50-transparency-2026/https://wheresthe.ai/rule/eu-guidelines-article-50-transparency-2026/#2026-08-02Took effectSun, 02 Aug 2026 00:00:00 GMTExplains the scope of Article 50 duties: telling people they are interacting with an AI system, marking synthetic audio/image/video/text, disclosing emotion-recognition and biometric categorisation, and labelling deepfakes and AI-generated public-interest text. Addressed to providers and deployers and to enforcing authorities. https://wheresthe.ai/rule/de-ki-mig-2026/https://wheresthe.ai/rule/de-ki-mig-2026/#2026-07-29Took effectWed, 29 Jul 2026 00:00:00 GMTImplements the EU AI Act in Germany: makes the Bundesnetzagentur the central market surveillance authority with a coordination and competence centre, keeps sectoral regulators (e.g., BaFin for AI used in regulated financial services) competent in their fields, sets national fine provisions and requires the Bundesnetzagentur to run at least one AI regulatory sandbox. Applies to providers and deployers subject to the AI Act in Germany. https://wheresthe.ai/rule/eu-digital-omnibus-ai-2026-1744/https://wheresthe.ai/rule/eu-digital-omnibus-ai-2026-1744/#2026-07-27Took effectMon, 27 Jul 2026 00:00:00 GMTAmends the AI Act: postpones high-risk obligations to 2 Dec 2027 (Annex III stand-alone systems) and 2 Aug 2028 (Annex I product-embedded systems), adds bans on AI that generates non-consensual sexual images of identifiable people or child sexual abuse material from 2 Dec 2026, and gives pre-Aug-2026 generative systems until 2 Dec 2026 to watermark outputs. It also softens the AI-literacy duty to 'take measures to support' literacy, allows processing of special-category data for bias detection, simplifies registration, extends SME relief to small mid-caps and moves national sandbox deadline to 2 Aug 2027. https://wheresthe.ai/rule/in-delhi-hc-ani-v-openai-2026/https://wheresthe.ai/rule/in-delhi-hc-ani-v-openai-2026/#2026-07-24Adopted and in effectFri, 24 Jul 2026 00:00:00 GMTThe Delhi High Court refused ANI's application for an interim injunction against OpenAI, holding prima facie that storing ANI's articles to train the LLMs behind ChatGPT falls within the fair-dealing exception in Section 52(1)(a) of the Copyright Act and that ChatGPT's RAG-based outputs were not substantially similar to ANI's works. The findings are expressly prima facie; the substantive questions go to trial. https://wheresthe.ai/rule/de-ki-mig-2026/https://wheresthe.ai/rule/de-ki-mig-2026/#2026-07-22AdoptedWed, 22 Jul 2026 00:00:00 GMTImplements the EU AI Act in Germany: makes the Bundesnetzagentur the central market surveillance authority with a coordination and competence centre, keeps sectoral regulators (e.g., BaFin for AI used in regulated financial services) competent in their fields, sets national fine provisions and requires the Bundesnetzagentur to run at least one AI regulatory sandbox. Applies to providers and deployers subject to the AI Act in Germany. https://wheresthe.ai/rule/eu-guidelines-article-50-transparency-2026/https://wheresthe.ai/rule/eu-guidelines-article-50-transparency-2026/#2026-07-20AdoptedMon, 20 Jul 2026 00:00:00 GMTExplains the scope of Article 50 duties: telling people they are interacting with an AI system, marking synthetic audio/image/video/text, disclosing emotion-recognition and biometric categorisation, and labelling deepfakes and AI-generated public-interest text. Addressed to providers and deployers and to enforcing authorities. https://wheresthe.ai/rule/ca-bill-c16-protecting-victims-act-deepfakes-2026/https://wheresthe.ai/rule/ca-bill-c16-protecting-victims-act-deepfakes-2026/#2026-07-18Took effectSat, 18 Jul 2026 00:00:00 GMTExpands the Criminal Code offence of non-consensual distribution of intimate images to cover sexual deepfakes, criminalises threatening to distribute such images, and raises the maximum penalty. Applies to individuals. https://wheresthe.ai/rule/cn-cac-anthropomorphic-ai-interim-measures-2026/https://wheresthe.ai/rule/cn-cac-anthropomorphic-ai-interim-measures-2026/#2026-07-15Took effectWed, 15 Jul 2026 00:00:00 GMTCovers AI services offered to the public in China that simulate human personality, thinking and communication style for sustained emotional interaction (AI companions, virtual partners). Bars 'virtual relative' or 'virtual partner' services for minors and requires a minors' mode and guardian consent for under-14s, reminders after every 2 hours of continuous use, easy exit, protections for elderly users, algorithm filing, and a security assessment when launching or when reaching 1 million registered or 100,000 monthly active users. https://wheresthe.ai/registry/china/https://wheresthe.ai/registry/china/#2026-07-15Registry updateWed, 15 Jul 2026 00:00:00 GMTChina's CAC filed 7 on-device phone AI services https://wheresthe.ai/rule/jp-ai-basic-plan-2026/https://wheresthe.ai/rule/jp-ai-basic-plan-2026/#2026-07-14Adopted and in effectTue, 14 Jul 2026 00:00:00 GMTStatutory national plan under Article 18 of the AI Promotion Act (Act No. 53 of 2025) setting government AI policy measures. The Cabinet adopted the second plan ('Japan AI Transformation') on 14 Jul 2026, replacing the first plan adopted on 23 Dec 2025. https://wheresthe.ai/registry/china/https://wheresthe.ai/registry/china/#2026-07-10Registry updateFri, 10 Jul 2026 00:00:00 GMTChina's CAC published 120 new generative-AI filings (988 in total) https://wheresthe.ai/rule/eu-digital-omnibus-ai-2026-1744/https://wheresthe.ai/rule/eu-digital-omnibus-ai-2026-1744/#2026-07-08AdoptedWed, 08 Jul 2026 00:00:00 GMTAmends the AI Act: postpones high-risk obligations to 2 Dec 2027 (Annex III stand-alone systems) and 2 Aug 2028 (Annex I product-embedded systems), adds bans on AI that generates non-consensual sexual images of identifiable people or child sexual abuse material from 2 Dec 2026, and gives pre-Aug-2026 generative systems until 2 Dec 2026 to watermark outputs. It also softens the AI-literacy duty to 'take measures to support' literacy, allows processing of special-category data for bias detection, simplifies registration, extends SME relief to small mid-caps and moves national sandbox deadline to 2 Aug 2027. https://wheresthe.ai/rule/tw-moda-ai-risk-classification-framework-2026/https://wheresthe.ai/rule/tw-moda-ai-risk-classification-framework-2026/#2026-07-07Adopted and in effectTue, 07 Jul 2026 00:00:00 GMTFramework issued under Article 16 of the AI Basic Act for sector regulators to build risk-based AI rules, using a four-step process (inventory AI use scenarios, identify, assess and respond to risks) and a taxonomy of 3 risk categories and 20 sub-categories. https://wheresthe.ai/rule/us-ftc-ai-accuracy-policy-statement-2026/https://wheresthe.ai/rule/us-ftc-ai-accuracy-policy-statement-2026/#2026-07-07Opened for consultationTue, 07 Jul 2026 00:00:00 GMTProposed FTC policy statement on how Section 5's ban on deceptive practices applies to companies marketing AI systems, focusing on undisclosed steering or distortion of AI outputs. It takes the position that complying with a state law does not excuse undisclosed distortion of outputs and that state laws requiring such conduct may be preempted. https://wheresthe.ai/rule/us-il-sb315-ai-safety-measures-act-2026/https://wheresthe.ai/rule/us-il-sb315-ai-safety-measures-act-2026/#2026-07-06AdoptedMon, 06 Jul 2026 00:00:00 GMTRequires large frontier developers (over $500M revenue; models trained above 10^26 operations) to publish and annually update a frontier AI framework, issue transparency reports before deployment, protect unreleased model weights, report critical safety incidents within 72 hours (24 hours for imminent threats) and file annual disclosures with the Illinois Emergency Management Agency. It is the first US law to require annual independent third-party audits of frontier developers. https://wheresthe.ai/rule/intl-un-global-dialogue-ai-governance/https://wheresthe.ai/rule/intl-un-global-dialogue-ai-governance/#2026-07-06Took effectMon, 06 Jul 2026 00:00:00 GMTAnnual intergovernmental and multi-stakeholder dialogue on AI governance, alternating between Geneva and New York, that receives the Scientific Panel's report. The first session was held 6-7 Jul 2026 in Geneva alongside the AI for Good Summit; the 2027 session is set for New York alongside the STI Forum. https://wheresthe.ai/rule/sg-online-safety-relief-accountability-act-2025/https://wheresthe.ai/rule/sg-online-safety-relief-accountability-act-2025/#2026-06-29Took effectMon, 29 Jun 2026 00:00:00 GMTCreates a Commissioner of Online Safety and Online Safety Commission that can order platforms and users to act on 13 categories of online harm, and new statutory torts for victims. The first phase (from 29 Jun 2026) focuses on five harms including intimate image abuse and image-based child abuse, which cover AI-generated (deepfake) imagery. https://wheresthe.ai/rule/in-rbi-model-risk-management-guidance-draft-2026/https://wheresthe.ai/rule/in-rbi-model-risk-management-guidance-draft-2026/#2026-06-24Opened for consultationWed, 24 Jun 2026 00:00:00 GMTDraft RBI guidance covering governance of all models, including AI/ML and generative AI, used by commercial and co-operative banks, NBFCs, all-India financial institutions, ARCs and credit information companies. It builds on the 2024 draft on credit-model risk and the FREE-AI report, addressing explainability, bias, drift, hallucination, human oversight and customer disclosure of AI use. https://wheresthe.ai/rule/jp-ai-basic-plan-2026/https://wheresthe.ai/rule/jp-ai-basic-plan-2026/#2026-06-19ProposedFri, 19 Jun 2026 00:00:00 GMTStatutory national plan under Article 18 of the AI Promotion Act (Act No. 53 of 2025) setting government AI policy measures. The Cabinet adopted the second plan ('Japan AI Transformation') on 14 Jul 2026, replacing the first plan adopted on 23 Dec 2025. https://wheresthe.ai/rule/ca-bill-c16-protecting-victims-act-deepfakes-2026/https://wheresthe.ai/rule/ca-bill-c16-protecting-victims-act-deepfakes-2026/#2026-06-18AdoptedThu, 18 Jun 2026 00:00:00 GMTExpands the Criminal Code offence of non-consensual distribution of intimate images to cover sexual deepfakes, criminalises threatening to distribute such images, and raises the maximum penalty. Applies to individuals. https://wheresthe.ai/rule/ca-bill-c36-protecting-privacy-consumer-data-2026/https://wheresthe.ai/rule/ca-bill-c36-protecting-privacy-consumer-data-2026/#2026-06-15ProposedMon, 15 Jun 2026 00:00:00 GMTGovernment bill to replace federal private-sector privacy law, including a requirement that organisations be transparent about using automated decision systems for significant decisions about individuals, stronger protection for children's data, and limits on surveillance pricing. It applies to private-sector organisations handling personal information. https://wheresthe.ai/rule/eu-code-of-practice-transparency-ai-generated-content-2026/https://wheresthe.ai/rule/eu-code-of-practice-transparency-ai-generated-content-2026/#2026-06-10AdoptedWed, 10 Jun 2026 00:00:00 GMTVoluntary code supporting AI Act Article 50(2), (4) and (5): providers of generative AI systems commit to machine-readable marking and detectability of AI outputs; deployers commit to labelling deepfakes and AI-generated text published on matters of public interest, using an EU icon set. The Commission and AI Board confirmed it as an adequate tool to demonstrate compliance; about 190 organisations had signed by end July 2026. https://wheresthe.ai/rule/us-great-american-ai-act-draft-2026/https://wheresthe.ai/rule/us-great-american-ai-act-draft-2026/#2026-06-04ProposedThu, 04 Jun 2026 00:00:00 GMTBipartisan discussion draft that would require large frontier AI developers to publish safety frameworks and transparency reports, report critical safety incidents to NIST's Center for AI Standards and Innovation, and undergo periodic independent audits. It would preempt state laws that specifically regulate AI model development for three years, while leaving state laws on AI use and deployment in place. https://wheresthe.ai/rule/ca-ai-for-all-national-ai-strategy-2026/https://wheresthe.ai/rule/ca-ai-for-all-national-ai-strategy-2026/#2026-06-04Adopted and in effectThu, 04 Jun 2026 00:00:00 GMTSix-pillar national strategy that replaces the lapsed AIDA approach with commitments to modernise privacy law, introduce online safety laws, give legal tools against deepfakes, work on watermarking of AI content, create a Canada Trusted AI Certification programme and fund the Canadian AI Safety Institute (CAD 50 million). It is policy, not law. https://wheresthe.ai/rule/us-eo-14409-advanced-ai-innovation-security-2026/https://wheresthe.ai/rule/us-eo-14409-advanced-ai-innovation-security-2026/#2026-06-02Adopted and in effectTue, 02 Jun 2026 00:00:00 GMTDirects NSA, CISA, Treasury and NIST to build a classified benchmark for the cyber capabilities of AI models and a threshold for designating 'covered frontier models', plus a voluntary framework under which developers give the government up to 30 days' pre-release access to such models. It also orders CISA directives on AI-enabled cyber defence, a Treasury-led AI vulnerability clearinghouse, and DOJ prioritisation of prosecutions for AI-enabled hacking. https://wheresthe.ai/rule/es-ai-governance-organic-law-bill-2026/https://wheresthe.ai/rule/es-ai-governance-organic-law-bill-2026/#2026-05-26ProposedTue, 26 May 2026 00:00:00 GMTGovernment bill adapting Spanish law to the EU AI Act: designates market surveillance authorities (mainly AESIA, plus the AEPD and the General Council of the Judiciary by area), sets the sanctions regime, creates an inventory of AI systems used in state administrative procedures and governs AI sandboxes. Failing to disclose deepfakes ('ultrasuplantaciones') or AI interaction is classed as a serious infringement. https://wheresthe.ai/rule/eu-guidelines-high-risk-classification-draft-2026/https://wheresthe.ai/rule/eu-guidelines-high-risk-classification-draft-2026/#2026-05-19Opened for consultationTue, 19 May 2026 00:00:00 GMTDraft guidance with practical examples of AI systems that are and are not high-risk under Article 6(1) (safety components of Annex I products) and Article 6(2) (Annex III use cases such as employment, credit scoring, education, biometrics). Published for targeted stakeholder feedback. https://wheresthe.ai/rule/us-co-sb26-189-admt-2026/https://wheresthe.ai/rule/us-co-sb26-189-admt-2026/#2026-05-14AdoptedThu, 14 May 2026 00:00:00 GMTRequires developers of automated decision-making technology that materially influences consequential decisions (education, employment, housing, lending, insurance, health care, government services) to give deployers technical documentation, and deployers to notify consumers at the point of use and explain the tool's role within 30 days of an adverse decision. Consumers can access and correct data and request meaningful human review; both parties keep records for 3 years. https://wheresthe.ai/rule/gb-regulating-for-growth-bill-2026/https://wheresthe.ai/rule/gb-regulating-for-growth-bill-2026/#2026-05-13ProposedWed, 13 May 2026 00:00:00 GMTAnnounced bill to create cross-economy regulatory sandbox powers allowing controlled live-market trials in which existing legal requirements can be modified or suspended for technologies including AI, building on the planned 'AI Growth Lab'. It would apply to firms admitted to sandboxes. https://wheresthe.ai/registry/china/https://wheresthe.ai/registry/china/#2026-05-13Registry updateWed, 13 May 2026 00:00:00 GMTChina's CAC published 72 new generative-AI filings (868 in total)