Explore
Coverage: what is encoded and what is not
Enacted AI laws within TwinEthos's scope (a duty a guard in application code or the repository can address), and whether each is encoded yet. Out-of-scope laws are left out on purpose.
Informational data, not legal advice. Summaries and rules have not been reviewed by a lawyer: always verify official law text for decisions. A suggested guard is intended to address each rule; adding it is not a statement of compliance to that law.
The list comes from public AI-law trackers and official sources, de-duplicated to instruments and classified by TwinEthos; classifications are engineering judgments, not legal conclusions. “Encoded in part” means only some provisions are encoded, or a later amendment is not yet. Laws whose scope is borderline are not listed until decided. How each encoded source is captured and re-checked is on its law page, in the trust panel.
US states and cities
66 in-scope enacted laws: 38 encoded (11 in full), 28 not yet.
| Jurisdiction | Instrument | Effective | TwinEthos | Where |
|---|---|---|---|---|
| Alabama (US-AL) | AI in health-plan coverage determinations (SB63, 2026) | 2026-10-01 | Not yet encoded | official text |
| Arkansas (US-AR) | Publicity rights: AI reproduction of photograph, voice or likeness (HB1071, 2025) | Not yet encoded | official text | |
| California (US-CA) | AI may not imply health-care licensure (AB489, 2025) | 2026-01-01 | Encoded in part | California AB 489 (AI implying health-care licensure) |
| California (US-CA) | CCPA: personal information in AI systems (AB 1008, 2024) (AB1008, 2024) | 2025-01-01 | Not yet encoded | official text |
| California (US-CA) | California AI Transparency Act (B&P 22757.1 et seq.) as amended by AB 853 and SB 1000 (SB942, AB853, SB1000, 2025) | 2026-08-02 | Encoded in part | California SB 942, California AB 853 |
| California (US-CA) | Companion chatbots (B&P 22601 et seq.) (SB243, 2025) | 2026-01-01 | Encoded in part | California SB 243 |
| California (US-CA) | Companion chatbots: children's safety (SB1119, 2026) | 2027-01-01 | Encoded in part | California SB 1119 (Bus. & Prof. Code 21810-21818, companion chatbots and children) |
| California (US-CA) | Digital replicas of deceased personalities (Civ. Code 3344.1) (AB1836, 2024) | 2025-01-01 | Encoded in part | California AB 1836 (digital replica) |
| California (US-CA) | GenAI training data transparency (Civ. Code 3111) (AB2013, 2024) | 2026-01-01 | Encoded in part | California AB 2013 |
| California (US-CA) | Health care: GenAI patient communications (AB3030, 2024) | 2025-01-01 | Encoded in part | California AB 3030 (Health-care GenAI patient communications) |
| California (US-CA) | Physicians Make Decisions Act: AI in utilization review (SB 1120, 2024) (SB1120, 2024) | 2025-01-01 | Not yet encoded | official text |
| California (US-CA) | Transparency in Frontier AI Act (SB53, 2025) | 2026-01-01 | Encoded in part | California SB 53 (Transparency in Frontier AI Act) |
| Colorado (US-CO) | AI in health-insurance utilization review (HB1139, 2026) | 2027-01-01 | Not yet encoded | official text |
| Colorado (US-CO) | Colorado AI Act, repealed and re-enacted as the ADMT Act (SB26-189) (SB24-205, SB25B-004, SB189, 2026) | 2026-06-30 | Encoded in part | Colorado ADMT Act (SB26-189) |
| Colorado (US-CO) | Conversational AI service operator requirements (HB1263, 2026) | 2027-01-01 | Encoded | Colorado HB 26-1263 (C.R.S. 6-1-1708, conversational AI services) |
| Colorado (US-CO) | Psychotherapy AI restrictions (HB1195, 2026) | 2026-08-12 | Not yet encoded | official text |
| Connecticut (US-CT) | CART Act (SB 5, PA 26-15) (SB5, 2026) | Encoded in part | Connecticut CART Act (PA 26-15) | |
| Connecticut (US-CT) | Connecticut Data Privacy Act (2022) as amended by SB 1295 (PA 25-113) (SB00006, SB1295, 2022) | Encoded in part | US State Privacy Laws — Profiling Opt-Out (Virginia-model) | |
| Georgia (US-GA) | AI companion chatbots (O.C.G.A. 39-5-6) (SB540, 2026) | 2027-07-01 | Encoded | Georgia SB 540 (O.C.G.A. 39-5-6, AI companion chatbots) |
| Georgia (US-GA) | Private review agents: coverage decisions not solely by AI (SB444, 2026) | 2027-01-01 | Not yet encoded | official text |
| Hawaii (US-HI) | AI disclosure and safety for chatbots (SB 3001, 2026) (SB3001, 2026) | 2026-07-14 | Encoded | Hawaii Act 248 (SB 3001, AI companions) |
| Hawaii (US-HI) | Realistic AI imitations of identifiable people (HB 2137, 2026) (HB2137, 2026) | 2026-07-14 | Not yet encoded | official text |
| Idaho (US-ID) | Conversational AI Safety Act (S1297, 2026) | 2027-07-01 | Encoded | Idaho Conversational AI Safety Act (S 1297) |
| Illinois (US-IL) | AI Safety Measures Act (frontier developers) (SB315, 2026) | 2027-01-01 | Encoded in part | Illinois AI Safety Measures Act (SB 315) |
| Illinois (US-IL) | AI Video Interview Act (820 ILCS 42), incl. 2021 demographic reporting (HB2557, HB0053, 2021) | 2020-01-01 | Encoded | Illinois AI Video Interview Act |
| Illinois (US-IL) | Human Rights Act: AI in employment decisions (HB3773, 2024) | 2026-01-01 | Encoded in part | Illinois HB 3773 (IHRA AI amendment) |
| Illinois (US-IL) | Insurance: adverse determinations by clinical peers when automated (HB2472, 2024) | 2025-01-01 | Not yet encoded | official text |
| Illinois (US-IL) | Wellness and Oversight for Psychological Resources Act (HB1806, 2025) | 2025-08-01 | Encoded | Illinois WOPR Act (HB 1806, AI in therapy) |
| Indiana (US-IN) | Indiana Consumer Data Protection Act (IC 24-15) (SB0005, 2023) | 2026-01-01 | Encoded in part | US State Privacy Laws — Profiling Opt-Out (Virginia-model) |
| Iowa (US-IA) | Conversational AI services (SF2417, 2026) | 2027-07-01 | Encoded | Iowa SF 2417 (Iowa Code ch. 554J, conversational AI) |
| Iowa (US-IA) | Health carriers: utilization review and AI (HF2635, 2026) | 2026-07-01 | Not yet encoded | official text |
| Kentucky (US-KY) | Kentucky Consumer Data Protection Act (HB15, 2024) | 2026-01-01 | Encoded in part | US State Privacy Laws — Profiling Opt-Out (Virginia-model) |
| Maine (US-ME) | AI in certain mental health services (LD2082, 2026) | 2026-07-29 | Not yet encoded | official text |
| Maine (US-ME) | Transparency in consumer transactions involving AI (LD 1727) (LD1727, HP1154, 2025) | 2025-09-24 | Encoded | Maine LD 1727 (10 M.R.S. 1500-DD) |
| Maryland (US-MD) | AI and algorithms in health-insurance utilization review (HB820, 2025) | 2025-10-01 | Not yet encoded | official text |
| Maryland (US-MD) | Facial recognition in job interviews: consent (HB1202, 2020) | 2020-10-01 | Encoded in part | Maryland Facial Recognition in Hiring (HB 1202) |
| Minnesota (US-MN) | Minnesota Consumer Data Privacy Act (HF 4757, 2024) (HF4757, 2024) | Encoded in part | US State Privacy Laws — Profiling Opt-Out (Virginia-model) | |
| Montana (US-MT) | Property right in names, voices and likenesses (HB513, 2025) | 2026-01-01 | Not yet encoded | official text |
| Nebraska (US-NE) | Conversational AI Safety Act (LB 525) (LB525, 2026) | Encoded in part | Nebraska Conversational AI Safety Act | |
| Nebraska (US-NE) | Ensuring Transparency in Prior Authorization Act (LB77, 2025) | 2026-01-01 | Not yet encoded | official text |
| Nevada (US-NV) | AI in emergency management and utilities (AB325, 2025) | 2025-10-01 | Not yet encoded | official text |
| Nevada (US-NV) | AI in mental and behavioral health care and schools (AB406, 2025) | 2025-07-01 | Not yet encoded | official text |
| New Hampshire (US-NH) | Chatbots and child endangerment (HB 143, 2025) (HB143, 2025) | 2026-01-01 | Not yet encoded | official text |
| New York (US-NY) | FY26 budget (TED): Gen. Bus. Law Art. 47 AI companions (S03008, 2025) | 2025-11-05 | Encoded | New York Gen. Bus. Law Art. 47 (AI companion models) |
| New York (US-NY) | NYC Local Law 144 (automated employment decision tools) (LOCALLAW144, 2000) | 2023-07-05 | Encoded in part | NYC Local Law 144 |
| New York (US-NY) | RAISE Act (Gen. Bus. Law Art. 44-B) as re-enacted (S06953, S8828, 2026) | 2027-01-01 | Encoded in part | New York RAISE Act (Gen. Bus. Law Art. 44-B) |
| New York (US-NY) | Right of publicity: deceased performers' digital replicas (S08391, 2025) | 2025-12-11 | Not yet encoded | official text |
| Oklahoma (US-OK) | Oklahoma consumer data privacy law (SB546, 2026) | 2027-01-01 | Not yet encoded | official text |
| Oregon (US-OR) | AI companions (SB1546, 2026) | 2027-01-01 | Encoded in part | Oregon SB 1546 (AI companions) |
| Oregon (US-OR) | Nonhuman entities may not use the title nurse (HB2748, 2025) | 2026-01-01 | Not yet encoded | official text |
| Rhode Island (US-RI) | AI by Healthcare Providers Notification Act (HB7538, SB2570, 2026) | 2026-06-22 | Not yet encoded | official text |
| Rhode Island (US-RI) | AI companion models (SB2195, HB7350, 2026) | 2027-01-01 | Encoded | Rhode Island ch. 6-64 (S 2195 / H 7350, AI companions) |
| Rhode Island (US-RI) | Oversight of AI in behavioral healthcare (SB2197, HB7349, 2026) | 2026-06-22 | Not yet encoded | official text |
| Tennessee (US-TN) | AI may not claim to be a qualified mental health professional (Tenn. Code 33-1-205) (HB1470, SB1580, 2026) | 2026-07-01 | Encoded in part | Tennessee SB 1580 (mental-health AI) |
| Tennessee (US-TN) | ELVIS Act (HB 2091, 2024) (HB2091, 2024) | Encoded in part | Tennessee ELVIS Act | |
| Texas (US-TX) | Artificial sexual material harmful to minors (tool operators) (HB581, 2025) | 2025-09-01 | Not yet encoded | official text |
| Texas (US-TX) | Automated systems in health benefit claims (SB815, 2025) | 2025-09-01 | Not yet encoded | official text |
| Texas (US-TX) | EHR requirements and AI (Health & Safety Code ch. 183) (SB1188, 2025) | 2025-09-01 | Encoded | Texas SB 1188 (EHR and AI, Health & Safety Code ch. 183) |
| Texas (US-TX) | Texas Responsible AI Governance Act (HB149, 2025) | 2026-01-01 | Encoded in part | Texas TRAIGA, Texas Bus. & Com. Code 503.001 (biometric identifiers) |
| Utah (US-UT) | Digital Content Provenance Standards Act and Digital Voyeurism Prevention Act (HB276, 2026) | 2027-01-01 | Not yet encoded | official text |
| Utah (US-UT) | Mental health chatbots (Utah Code 13-72a) (HB452, 2025) | 2025-05-07 | Encoded in part | Utah HB 452 (mental health chatbots, Utah Code 13-72a) |
| Utah (US-UT) | Unauthorized AI impersonation (Abuse of Personal Identity Act) (SB271, 2025) | 2025-05-07 | Not yet encoded | official text |
| Utah (US-UT) | Utah AI Policy Act (Utah Code 13-77) as amended (SB149, SB226, SB332, 2025) | 2024-05-01 | Encoded in part | Utah AI Policy Act (Ch. 77) |
| Vermont (US-VT) | AI in mental health services (H816, 2026) | 2026-06-17 | Not yet encoded | official text |
| Washington (US-WA) | AI companion chatbots (HB 2225, 2026) (HB2225, 2026) | Encoded in part | Washington HB 2225 (AI companion chatbots) | |
| Washington (US-WA) | AI-generated content provenance (HB 1170, 2026) (HB1170, 2026) | 2027-02-01 | Not yet encoded | official text |
International, national and US federal
48 in-scope enacted laws: 11 encoded (0 in full), 37 not yet. Also 19 standard or guidance documents in the standards lane.
| Jurisdiction | Instrument | Effective | TwinEthos | Where |
|---|---|---|---|---|
| AE | Federal Decree-Law No. 45 of 2021 on Personal Data Protection, Art. 18 | Not yet encoded | official text | |
| AE-DIFC | DIFC Data Protection Regulations, Regulation 10 (autonomous and semi-autonomous systems) | Not yet encoded | official text | |
| Australia (AU) | Online Safety (Designated Internet Services - Class 1A and Class 1B Material) Industry Standard 2024 | Not yet encoded | official text | |
| Australia (AU) | Online Safety industry codes for age-restricted material (Class 1C and Class 2), incl. Schedule 6 Designated Internet Services and Schedule 5 Relevant Electronic Services | Not yet encoded | official text | |
| Australia (AU) | Privacy and Other Legislation Amendment Act 2024, Sch. 1 Pt 15: APP 1.7-1.9 (automated decisions in privacy policies) | Not yet encoded | official text | |
| Brazil (BR) | General Data Protection Law (LGPD, Law 13.709/2018), Art. 20 | Not yet encoded | official text | |
| CA-ON | Ontario Employment Standards Act, 2000, s. 8.4 (added by the Working for Workers Four Act, 2024) and O. Reg. 476/24: AI disclosure in job postings | Not yet encoded | official text | |
| CH | Federal Act on Data Protection (FADP, SR 235.1), Art. 21 (automated individual decisions) | Not yet encoded | official text | |
| CL | Law 21.719 (personal data protection), new Art. 8 bis of Law 19.628 (automated individual decisions) | Not yet encoded | official text | |
| China (CN) | GB 45438-2025 Cybersecurity technology: Labeling method for content generated by artificial intelligence (mandatory national standard) | Not yet encoded | official text | |
| China (CN) | Interim Measures for the Administration of AI Anthropomorphic (Personified) Interactive Services (CAC Order No. 21) | Not yet encoded | official text | |
| China (CN) | Interim Measures for the Management of Generative AI Services (CAC Order No. 15) | Encoded in part | China GenAI Interim Measures | |
| China (CN) | Measures for Labeling AI-Generated Synthetic Content (2025) | Encoded in part | China AI Content Labeling Measures | |
| China (CN) | Personal Information Protection Law, Art. 24 (automated decision-making) | Not yet encoded | official text | |
| China (CN) | Provisions on the Administration of Algorithmic Recommendation in Internet Information Services (CAC Order No. 9) | Encoded in part | China Algorithm Recommendation Provisions | |
| China (CN) | Provisions on the Administration of Deep Synthesis Internet Information Services (CAC Order No. 12) | Encoded in part | China Deep Synthesis Provisions | |
| EC | Organic Personal Data Protection Law (LOPDP), Arts. 20-21 | Not yet encoded | official text | |
| EC | SPDP Resolution SPDP-SPD-2026-0009-R: general rule on personal data protection in AI systems (amended by 2026-0037-R) | Not yet encoded | official text | |
| European Union (EU) | AI Act, Regulation (EU) 2024/1689, as amended by Regulation (EU) 2026/1744 (Digital Omnibus on AI) | Encoded in part | EU AI Act | |
| European Union (EU) | Assessment List for Trustworthy AI (ALTAI, 2020) | Encoded (standard or guidance lane) | EU ALTAI | |
| European Union (EU) | Consumer Credit Directive (EU) 2023/2225, Art. 18(8)-(9) (automated creditworthiness assessment) | Not yet encoded | official text | |
| European Union (EU) | GDPR, Regulation (EU) 2016/679: Art. 22 (core) and Arts. 5(1)(c), 9, 13, 17, 25 as applied to AI data flows (AI-adjacent) | Encoded in part | EU GDPR Art. 22 (ADM), EU GDPR (articles applied to AI data flows) | |
| European Union (EU) | General-Purpose AI Code of Practice (2025) | Encoded (standard or guidance lane) | EU GPAI Code of Practice | |
| European Union (EU) | Platform Work Directive (EU) 2024/2831, Arts. 7-11 (algorithmic management) | Not yet encoded | official text | |
| ID | Personal Data Protection Law No. 27/2022, Art. 10 | Not yet encoded | official text | |
| IT | Law 23 September 2025, No. 132: provisions and delegations to the Government on artificial intelligence | Not yet encoded | official text | |
| India (IN) | Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026 (G.S.R. 120(E)): synthetically generated information | Not yet encoded | official text | |
| International (INTL) | Ethics and governance of AI for health: guidance on large multi-modal models (2024) | Encoded (standard or guidance lane) | WHO AI-for-Health (LMM) Guidance | |
| International (INTL) | Framework Convention on AI (CETS No. 225) | Encoded (standard or guidance lane) | CoE AI Framework Convention (CETS 225) | |
| International (INTL) | IEEE 7001-2021 | Encoded (standard or guidance lane) | IEEE 7001-2021 (transparency) | |
| International (INTL) | IEEE 7003-2024 | Encoded (standard or guidance lane) | IEEE 7003-2024 | |
| International (INTL) | ISO/IEC 23894:2023 | Encoded (standard or guidance lane) | ISO/IEC 23894:2023 (AI risk mgmt) | |
| International (INTL) | ISO/IEC 42001:2023 | Encoded (standard or guidance lane) | ISO/IEC 42001:2023 (AIMS) | |
| International (INTL) | OECD Recommendation on AI (2019, revised 2024) | Encoded (standard or guidance lane) | OECD AI Principles | |
| International (INTL) | OWASP Top 10 for LLM Applications (2025) | Encoded (standard or guidance lane) | OWASP LLM Top 10 (2026) | |
| International (INTL) | Recommendation on the Ethics of AI (2021) | Encoded (standard or guidance lane) | UNESCO AI Ethics Recommendation | |
| Japan (JP) | AI Guidelines for Business (MIC and METI) | Encoded (standard or guidance lane) | Japan AI Guidelines for Business | |
| KE | Data Protection Act, 2019, s. 35 (automated individual decision making) | Not yet encoded | official text | |
| KG | Digital Code of the Kyrgyz Republic No. 178, AI articles 193-197 | Not yet encoded | official text | |
| KZ | Digital Code of the Republic of Kazakhstan No. 255-VIII, Art. 43 (algorithmic systems) | Not yet encoded | official text | |
| KZ | Law of the Republic of Kazakhstan No. 230-VIII On Artificial Intelligence | Not yet encoded | official text | |
| MX | Decree amending the Federal Copyright Law and Federal Labour Law (performers): AI use of voice and image (DOF 2026-05-14) | Not yet encoded | official text | |
| NG | NCC Internet Code of Practice 2026, s. 5.4 (AI in network management and customer engagement) | Not yet encoded | official text | |
| NG | Nigeria Data Protection Act 2023, s. 37 (automated decision-making) | Not yet encoded (enactment unconfirmed) | ||
| PE | Law No. 31814 promoting the use of AI and its Regulation (Supreme Decree No. 115-2025-PCM) | Not yet encoded | official text | |
| Quebec (CA-QC) | Quebec Law 25: s. 12.1 of the private-sector privacy act (decisions based exclusively on automated processing) | Encoded in part | Quebec Law 25 (ADM, s.12.1) | |
| SV | Law for the Promotion of Artificial Intelligence and Technologies (Legislative Decree 234), Art. 18 | Not yet encoded | official text | |
| Singapore (SG) | IMDA Model AI Governance Framework for Agentic AI | Encoded (standard or guidance lane) | IMDA Agentic AI MGF | |
| Singapore (SG) | MAS FEAT Principles (2018) | Encoded (standard or guidance lane) | MAS FEAT Principles | |
| South Korea (KR) | Framework Act on the Development of AI and Establishment of Trust (AI Basic Act) | Encoded in part | South Korea AI Basic Act | |
| South Korea (KR) | Personal Information Protection Act, Art. 37-2 (rights over fully automated decisions) | Not yet encoded | official text | |
| TR | Personal Data Protection Law No. 6698 (KVKK), Art. 11(1)(g) | Not yet encoded | official text | |
| UZ | Law ZRU-1115 amending certain acts to regulate relations arising from the use of AI (new Art. 7-1 of the Law on Informatization) | Not yet encoded | official text | |
| United Kingdom (GB) | ICO guidance on AI and data protection and on automated decision-making | Not yet encoded | ||
| United Kingdom (GB) | UK GDPR Arts. 22A-22D (automated decision-making), inserted by the Data (Use and Access) Act 2025, s. 80 | Encoded in part | UK GDPR Arts. 22A-22D (ADM) | |
| United States (federal) (US) | FCC Declaratory Ruling FCC 24-17: AI-generated voices are 'artificial' voices under the TCPA (47 U.S.C. 227; 47 CFR 64.1200) | Not yet encoded | official text | |
| United States (federal) (US) | FINRA Regulatory Notice 24-09 and 2026 oversight report (GenAI) | Encoded (standard or guidance lane) | FINRA GenAI/Agentic Guidance | |
| United States (federal) (US) | FTC Trade Regulation Rule on Impersonation of Government and Businesses (16 CFR Part 461) | Encoded in part | FTC Impersonation Rule (16 CFR Part 461) | |
| United States (federal) (US) | HHS Section 1557 rule, 45 CFR 92.210: nondiscrimination in the use of patient care decision support tools | Not yet encoded | official text | |
| United States (federal) (US) | HIPAA Privacy Rule (45 CFR Parts 160, 164 Subpart E): AI-vendor slice | Encoded in part | HIPAA Privacy Rule (45 CFR 160, 164 Subpart E) | |
| United States (federal) (US) | NAIC Model Bulletin on AI systems used by insurers (2023) | Encoded (standard or guidance lane) | NAIC AI Model Bulletin | |
| United States (federal) (US) | NIST AI 100-2e2025 adversarial machine learning taxonomy | Encoded (standard or guidance lane) | NIST AML Taxonomy (AI 100-2e2025) — Agentic | |
| United States (federal) (US) | NIST AI 600-1 Generative AI Profile | Encoded (standard or guidance lane) | NIST GenAI Profile (AI 600-1) | |
| United States (federal) (US) | NIST AI RMF 1.0 (AI 100-1) | Encoded (standard or guidance lane) | NIST AI RMF 1.0 | |
| United States (federal) (US) | ONC HTI-1 decision support interventions criterion, 45 CFR 170.315(b)(11) | Not yet encoded | official text | |
| VN | Law on Artificial Intelligence No. 134/2025/QH15, with Decree 142/2026/ND-CP and Prime Minister's Decision 33/2026/QD-TTg (high-risk list) | Not yet encoded | official text | |
| ZA | Protection of Personal Information Act 4 of 2013, s. 71 | Not yet encoded | official text |
Informational data, not legal advice. Summaries are TwinEthos's own words and rules have not been reviewed by a lawyer: check the official text before relying on any of it. A guard addresses an item; adding it is not a statement that your code meets any law.