AI Regulation Hub
The EU AI Act, the Council of Europe AI Convention, and the national laws and sectoral regimes built around them. 110 entries so far. Each guide covers the regulator, the in-force date, the live obligations, and what counts as material risk.
Hover a country. Click to open its entry.
Loading mapโฆ
Coverage
Updated as laws and guidance evolve. We group by how a regime regulates AI โ a single horizontal Act, sectoral and existing-law tools, soft-law instruments, or drafts under preparation โ so you can see the shape of the rules before the detail.
Horizontal AI laws that apply across sectors โ the EU AI Act and the national frameworks built around it.
Austria is regulated by the EU AI Act (Regulation (EU) 2024/1689). The national AI policy is built on Artificial Intelligence Mission Austria 2030 (AIM AT 2030), and Austria has created an AI Service Desk at RTR as a contact point supporting implementation of the European AI Act.
Belgium is regulated by the EU AI Act. The National Convergence Plan for the Development of Artificial Intelligence, approved by the Council of Ministers on 28 October 2022, sets nine policy objectives, and a steering committee jointly run by FPS BOSA and FPS Economy supports federal implementation.
Bulgaria is regulated by the EU AI Act and has a national AI policy framework through the Concept for the Development of Artificial Intelligence in Bulgaria until 2030 โ building reliable AI infrastructure, research capacity, knowledge and skills, innovation, public awareness, trust and a regulatory framework for reliable AI.
California regulates AI through targeted statutes โ the California AI Transparency Act (SB 942), which obligates large generative AI providers to offer detection tools and provenance disclosures, and the Transparency in Frontier Artificial Intelligence Act (SB 53), which governs large frontier developers with safety frameworks, incident reporting and whistleblower protections.
Colorado regulates automated decision-making technology (ADMT) used to materially influence consequential decisions. The revised framework became law in May 2026, with developer documentation duties starting 1 January 2027, deployer consumer notices, adverse-outcome explanations and consumer rights of correction and human review. Enforced by the Colorado Attorney General under the Colorado Consumer Protection Act.
Croatia is regulated by the EU AI Act. Its national framework is developing through the forthcoming National AI Development Plan until 2032 (drafted by 150+ experts, public consultation, expected adoption in 2026) and the Digital Croatia Strategy until 2032.
Cyprus is regulated by the EU AI Act and adopted its National Strategy for Artificial Intelligence on 27 January 2020 โ prepared by the Department of Electronic Communications with an expert AI team, based on the EU Coordinated Plan on AI and informed by stakeholder consultations.
Czechia is regulated by the EU AI Act and adopted the National Artificial Intelligence Strategy 2030 in July 2024. The strategy supports economic competitiveness, state efficiency and societal resilience across seven interlinked areas, evaluated through an annual action plan. Binding requirements remain EU AI Act + GDPR + sectoral law.
Denmark is regulated by the EU AI Act and pursues a strong policy focus on responsible and human-centred AI. The National Strategy for Artificial Intelligence aims for Denmark to be a front-runner in responsible AI development, emphasising ethics, citizens' rights, security, transparency and data ethics.
El Salvador has adopted a Law for the Promotion of Artificial Intelligence and Technologies โ a promotion-led framework rather than an EU-style risk regime โ and created the National Artificial Intelligence Agency (ANIA) as the responsible authority for AI, robotics and related technologies.
Estonia is regulated by the EU AI Act and is a leading example of public-sector AI practice. The Kratt Strategy and Bรผrokratt virtual-assistant ecosystem make AI an essential part of the digital state. By 2021 Estonia had around 80 AI use cases in the public sector. Binding compliance comes from the EU AI Act, GDPR and sectoral law.
The EU AI Act (Regulation (EU) 2024/1689) is a horizontal, risk-based framework that bans unacceptable-risk AI, heavily regulates high-risk AI, and applies transparency and governance duties to lower-risk systems. It is being rolled out in stages between 2024 and 2027.
Finland is regulated by the EU AI Act. National legislation on the powers of authorities supervising the AI Act entered into force on 1 January 2026. Market-surveillance authorities monitor product safety and AI Act compliance, while fundamental-rights authorities supervise impact on citizens' rights. EU AI Act fines apply.
France applies the EU AI Act directly. National AI-specific rules sit in French criminal law (mandatory disclosure for AI-generated montages, criminal liability for non-consensual sexual deepfakes) and in CNIL guidance for AI that processes personal data.
Germany applies the EU AI Act directly. A national implementation bill is in preparation to designate competent authorities, give the Bundesnetzagentur an AI-sandbox role, and set procedures for cooperation, supervision and fines.
Hungary is regulated by the EU AI Act and has a renewed national AI strategy for 2025โ2030 (published September 2025) updating Hungary's earlier AI strategy to reflect implementation experience, rapid AI development and the need for ongoing renewal.
Ireland is regulated by the EU AI Act. The national Digital and AI Strategy โ Digital Ireland โ sets 20 high-level objectives and 90 deliverables and includes a planned AI Office of Ireland as central coordinating authority, an AI Advisory Unit, AI Fellowship, sandbox and sectoral strategies for enterprise AI.
Italy regulates AI through the EU AI Act plus a national framework, Law No. 132 of 23 September 2025. The national law is human-centred, adds sector rules for healthcare, employment, intellectual professions and justice, and amends criminal law for AI-generated content offences.
Japan regulates AI through a policy-oriented statutory framework and official business guidance rather than an EU-style high-risk AI Act. The Act on Promotion of Research and Development and Utilization of AI-related Technologies (2025) sets national principles; the AI Guidelines for Business set practical governance expectations.
Kazakhstan has adopted the dedicated Law "On Artificial Intelligence", becoming the first Central Asian jurisdiction with a specific AI statute. It mandates AI output labelling, lists prohibited functional capabilities, and is accompanied by amendments to the Code of Administrative Offences.
Latvia is regulated by the EU AI Act and has created a national AI institutional framework through the Artificial Intelligence Centre, with planned operations from 31 March 2025 and an Artificial Intelligence Development Law enabling regulatory sandboxes for AI testing.
Lithuania is regulated by the EU AI Act and has drawn up National AI Strategic Guidelines for 2026โ2035. The guidelines aim to move Lithuania from isolated AI initiatives to a coordinated nationwide AI ecosystem, with the Innovation Agency preparing the action plan.
Luxembourg is regulated by the EU AI Act and has a national AI strategy under the broader initiative Accelerating Digital Sovereignty 2030. The strategy is human-centred and linked to digital sovereignty, supported by the national AI Factory and the MeluXina-AI supercomputer.
Malta is regulated by the EU AI Act. The Malta Digital Innovation Authority (MDIA) is the lead market-surveillance authority, single point of contact, sole national competent authority for the AI regulatory sandbox and notifying authority. Legal Notice 227 of 2025 also empowers the IDPC for AI in law enforcement.
The Netherlands applies the EU AI Act directly. Its national framework focuses on public-sector algorithm transparency (the Government Algorithm Register), GDPR-based AI supervision by the Dutch DPA, and preparation for EU AI Act enforcement.
Norway is not an EU Member State but the EU AI Act is expected to shape Norwegian AI regulation through the EEA framework. The Norwegian Communications Authority (Nkom) has been designated as the national coordinating supervisory authority for AI. The national AI strategy emphasises ethical, trustworthy AI, and the Data Protection Authority operates a regulatory privacy sandbox.
Peru has a national AI framework: Law No. 31814 and its 2025 implementing regulation (Supreme Decree No. 115-2025-PCM). It classifies AI uses by risk into non-permitted, high-risk and acceptable AI, with concrete duties for public and private operators.
Poland is regulated by the EU AI Act and is preparing national implementation legislation. The Council of Ministers accepted a draft Act on AI systems on 31 March 2026, creating the future Commission for the Development and Security of AI (KRiBSI) as the national supervisory authority responsible for sanctions, sandboxes and complaints.
Portugal applies the EU AI Act and adds Labour Code rules requiring employers to inform workers and worker representatives about algorithms and AI affecting access to employment, working conditions, profiling or control of professional activity.
Romania is regulated by the EU AI Act and has adopted the National Strategy in the Field of Artificial Intelligence 2024โ2027 โ an official national strategy supporting AI adoption in Romania's economy and society and connected with research, innovation, digitalisation and safe AI development.
Slovakia is regulated by the EU AI Act, supervised through MIRRI's AI Act page (referring to Regulation (EU) 2024/1689 and listing Article 77 fundamental-rights bodies). The Digital Transformation Action Plan of Slovakia 2023โ2026 supports the EU Digital Decade target of 75% enterprise adoption of cloud, AI or big data.
Slovenia is regulated by the EU AI Act and has adopted the National Strategy for Artificial Intelligence until 2030 (NsUI 2030) in March 2026 โ a comprehensive strategic framework for the development, introduction and responsible use of AI in the economy, public sector and broader society.
South Korea has adopted a comprehensive national AI law โ the Framework Act on the Development of Artificial Intelligence and the Creation of a Foundation for Trust โ effective from 22 January 2026. It distinguishes ordinary AI from generative AI and high-impact AI, and creates duties for AI providers and business users.
Spain applies the EU AI Act through dedicated national infrastructure: AESIA, the Spanish AI supervisory agency, and an AI regulatory sandbox under Royal Decree 817/2023. Spain has published practical compliance guidance based on sandbox work.
Sweden is regulated by the EU AI Act and adopted its first comprehensive national AI Strategy in February 2026. The Government aims to be among the world's top ten AI nations through more effective agencies, clearer business rules and stronger research conditions. Binding compliance comes from the EU AI Act, GDPR and sectoral law.
Taiwan has adopted an Artificial Intelligence Basic Act creating a legal foundation for AI policy, government use, industrial innovation and responsible AI development. It sets principles and institutional direction rather than an EU-style high-risk compliance code with a single fine table.
Texas regulates AI through the Texas Responsible Artificial Intelligence Governance Act (HB 149), effective 1 January 2026. It imposes disclosure duties for consumer-facing and healthcare AI, prohibits certain AI uses, creates an AI regulatory sandbox and establishes the Texas AI Council. Enforcement is led by the Texas Attorney General with civil penalties up to USD 200,000 per uncurable violation.
Utah regulates AI through the Artificial Intelligence Policy Act (SB 149), in force from 1 May 2024. It covers generative AI disclosure, consumer-protection liability, stricter disclosure for regulated occupations, the Office of Artificial Intelligence Policy and an AI Learning Laboratory Program. Administrative fines up to USD 2,500 per violation; up to USD 5,000 per order violation.
Uzbekistan has adopted Law No. ะะ า-1115 of 21 January 2026, introducing a statutory AI definition, general AI safety standards, limits on fully automated legal decision-making and a specific administrative offence for unlawful AI-based personal-data processing. Supported by the AI Strategy to 2030.
Vietnam has adopted a dedicated Law on Artificial Intelligence (Law No. 134/2025/QH15), issued 10 December 2025 and effective 1 March 2026. It uses a risk-based approach with high-, medium- and lower-risk categories, transparency duties (including deepfake labelling), supervision, and corrective measures.
Jurisdictions regulating AI through existing law: data protection, employment, financial services, healthcare and consumer rules, with regulator-led guidance.
Argentina has no comprehensive AI Act. Its framework is built on Recommendations for Reliable AI (Disposition 2/2023), data-protection guidance, transparency initiatives for automated decision systems, and existing laws.
Australia has no comprehensive AI Act. Its framework combines a Voluntary AI Safety Standard, a mandatory public-sector AI policy, existing privacy / consumer / discrimination laws, and ongoing consultation on mandatory guardrails for high-risk AI.
Canada has no enacted comprehensive federal AI Act. AIDA (in Bill C-27) did not complete the legislative process. Canada relies on voluntary governance instruments โ notably the Voluntary Code of Conduct for advanced generative AI โ plus public-sector AI policy and existing laws.
China has no single horizontal AI Act. Instead it stacks binding rules on specific AI use cases โ public-facing generative AI, algorithmic recommendation, deep synthesis, and AI-generated content labelling โ issued mainly by the Cyberspace Administration of China.
Colombia has no horizontal AI Act. Its framework combines CONPES 4144 (National AI Policy, 2025), data protection, sector-specific regulation and targeted AI-related criminal-law treatment (Law 2502/2025).
Egypt has no single horizontal AI Act. Its framework combines the National AI Strategy, the Egyptian Charter for Responsible AI (2023), National Guidelines for Trustworthy and Responsible AI, and an AI governance framework โ alongside data protection, cybersecurity and sectoral rules.
Georgia has no comprehensive AI Act. Financial-sector AI is regulated by the National Bank of Georgia, which has approved a regulation on Data-Driven Statistical, AI and Machine Learning Model Risk Management and launched a pilot AI Sandbox in its Regulatory Laboratory.
Greece applies the EU AI Act alongside Law 4961/2022 on emerging ICT, which adds national rules for public-sector AI (algorithmic impact assessments, registers), workplace AI transparency, and private-sector AI registers for medium and large companies.
Hong Kong has no horizontal AI Act. AI governance rests on data protection (PCPD), official privacy guidance, sectoral rules and voluntary AI governance frameworks โ notably the PCPD's Artificial Intelligence: Model Personal Data Protection Framework.
Illinois regulates AI primarily in employment. The Illinois Human Rights Act makes it a civil-rights violation for employers to use AI in employment decisions where the AI has the effect of subjecting employees to discrimination on the basis of protected classes; ZIP codes may not be used as a proxy. Employers must also notify employees of AI use.
India has no horizontal AI Act. Its framework combines AI Governance Guidelines under the IndiaAI Mission with the Information Technology Rules (notably the 2026 amendments on synthetic content), the Digital Personal Data Protection Act, intermediary obligations and sectoral regulation.
Indonesia has no comprehensive AI Act. AI governance combines official ethics guidance (Circular Letter No. 9 of 2023), electronic-system rules, personal-data protection and sectoral regulation.
Israel has no horizontal AI Act. Its policy of responsible innovation favours a sector-specific and incremental approach, with soft regulatory tools (guidance, sandboxes, regulator coordination) and existing laws. Israel has also signed the Council of Europe AI Convention.
Kenya has no comprehensive AI Act. Its framework rests on the National AI Strategy 2025โ2030, the Data Protection Act and sectoral rules. The strategy sets direction; binding compliance comes mainly from existing law.
Malaysia has no horizontal AI Act. Its framework rests on the National Guidelines on AI Governance and Ethics, the new National AI Office (NAIO), data-protection law and sectoral regulation.
New York City regulates AI in employment through Local Law 144 of 2021, covering Automated Employment Decision Tools (AEDTs). Employers and employment agencies may not use an AEDT unless it has been subject to a bias audit within one year of use, the audit is published and required notices are given. Enforcement began on 5 July 2023.
New Zealand has no comprehensive AI Act. AI is regulated through existing law โ especially the Privacy Act 2020 โ plus the public-sector Algorithm Charter, consumer, employment, human-rights and sectoral law.
Nigeria has no horizontal AI Act. Its framework rests on the National AI Strategy, the Nigeria Data Protection Act (with the 2025 General Application and Implementation Directive), digital-economy policy and sectoral regulation.
The Philippines has no comprehensive AI Act. AI is regulated mainly through the Data Privacy Act and NPC guidance โ notably Advisory No. 2024-04 on the Application of the Data Privacy Act to AI Systems Processing Personal Data โ plus sectoral regulation.
Qatar has no comprehensive AI Act. Its framework combines the National AI Strategy under Qatar National Vision 2030, Principles and Guidelines for Ethical Use of AI, AI guidance for developers, government AI governance, data-protection and cybersecurity rules.
Rwanda has no AI Act equivalent to the EU AI Act. Its framework is built around the National AI Policy, digital-transformation strategy, data-protection law and sector-specific rules.
Saudi Arabia has no comprehensive horizontal AI Act. SDAIA's official AI Ethics Principles, an AI ethics self-assessment service, AI service provider accreditation, regulatory sandboxes and generative AI guidance for government underpin a governance-first approach.
Singapore has no comprehensive AI Act. Its governance-based approach centres on the Model AI Governance Framework, a generative AI counterpart, a framework for agentic AI, AI testing tools, the PDPA and sectoral rules โ supporting responsible deployment without a broad licensing regime.
South Africa has no enacted AI Act. The draft AI Policy was withdrawn in 2026 with a credible replacement promised. Current AI compliance rests on existing law โ especially POPIA โ plus consumer, employment, equality, financial, healthcare and sectoral regulation.
Switzerland has no horizontal AI Act. Existing law applies โ especially the Federal Act on Data Protection. Switzerland intends to ratify and implement the Council of Europe AI Convention via targeted sectoral amendments and non-binding measures.
Thailand has no horizontal AI Act. AI governance rests on the National AI Strategy 2022โ2027, official AI Governance Guidelines, an ETDA generative AI guideline for organisations, and the Personal Data Protection Act.
Tรผrkiye has no horizontal AI Act. AI is regulated through existing personal-data, consumer, employment, cybersecurity, criminal and sectoral laws, supported by KVKK guidance โ notably the November 2025 Guide on Generative AI and the Protection of Personal Data.
The UAE has no horizontal AI Act. Its framework combines the National Strategy for Artificial Intelligence 2031, official AI ethics resources, Digital Dubai guidance, data-protection rules, cybersecurity and sector-specific regulation.
The UK has no horizontal AI Act. It uses a regulator-led, sector-based framework built on five cross-sector principles (safety, transparency, fairness, accountability, contestability), enforced through existing data-protection, financial, healthcare, consumer, online-safety, competition and equality regulators.
The US has no comprehensive federal AI Act. Rules are split across federal policy (NIST AI RMF), sectoral federal law, state AI statutes (Colorado, California SB 53), local AI laws (NYC AEDT), agency enforcement and voluntary standards.
Uruguay has no horizontal AI Act. Its framework rests on the National AI Strategy 2024โ2030, digital-government AI policy, data protection and sectoral regulation.
Treaties, declarations and guidance that bind the future shape of AI law without one direct fine table for companies today.
ASEAN has no binding regional AI Act. The ASEAN Guide on AI Governance and Ethics (and a generative AI counterpart) provides voluntary regional guidance for organisations designing, developing and deploying AI in commercial and non-military contexts across Southeast Asia.
The African Union endorsed a Continental Artificial Intelligence Strategy in 2024. It is an Africa-wide policy framework for AI development, governance and responsible use โ an important regional reference for future national AI laws across AU Member States.
Azerbaijan has no comprehensive AI Act. Its framework is built on the Artificial Intelligence Strategy 2025โ2028 (approved March 2025) and national AI standardisation work through the Technical Committee on Standardisation for ICT.
Bahrain has no comprehensive AI Act. It launched a National AI Policy and adopted the GCC AI Ethics Manual in 2025, supported by AI procurement guidance for the government sector and aligned with the country's broader digital-government framework.
Benin has no comprehensive AI Act. Its framework is the National Artificial Intelligence and Big Data Strategy 2023โ2027 (SNIAM), adopted by the Ministerial Council on 18 January 2023, focused on AI solutions in education, healthcare, agriculture, living conditions, tourism and other national development areas.
Brunei has no comprehensive AI Act. Its framework is developing through the Guide on AI Governance and Ethics (April 2025), a forthcoming National AI Strategy, the Personal Data Protection Order 2025 (expected to fully come into force on 1 January 2026) and sectoral law.
Costa Rica has no comprehensive AI Act, but adopted the National AI Strategy 2024โ2027 (October 2024), the first AI public policy in Central America. It includes a normative framework for AI, 5G deployment, a National Centre of Excellence in AI and a regulatory sandbox model.
The Council of Europe Framework Convention on AI and Human Rights, Democracy and the Rule of Law is the first legally binding international AI treaty. It binds signatory states (not companies directly) to ensure that AI lifecycle activities respect human rights, democracy and the rule of law.
The Dominican Republic has no comprehensive AI Act, but launched the National AI Strategy (ENIA) in October 2023 โ the first in Central America and the Caribbean โ supported by Decree No. 498-23 which governs public-sector AI implementation.
Ecuador has no comprehensive AI Act. The Ministry of Telecommunications and the Information Society launched the Strategy for the Promotion of Ethical and Responsible Development and Use of AI on 10 March 2026, built on three axes: AI governance, capacity and technology, and AI adoption.
Ethiopia has no comprehensive AI Act. Its framework develops through national AI policy work, the Ministry of Innovation and Technology, the Ethiopian Artificial Intelligence Institute, digital-transformation strategy, data governance and sector-specific regulation.
Iran does not have a single AI Act. Its framework is based on the National AI Document (2024) approved by the Supreme Council of the Cultural Revolution, the Government Document on the Development and Application of AI (1404 / 2025) approved by the Council of Ministers, and an AI coordination body.
Iraq does not have a comprehensive AI Act. Its framework is developing through Prime Minister-level coordination via the Supreme Committee for Artificial Intelligence (first met 21 August 2024) and the National Strategy for AI and Big Data Integration in Iraq.
Jordan has no comprehensive AI Act. Its framework is based on the Jordanian AI Policy 2020, the Jordan AI Strategy 2023โ2027 (68 projects across priority sectors) and the National AI Code of Ethics, alongside sectoral AI projects and existing laws.
Kuwait has no comprehensive AI Act. Its framework is built through digital-transformation policy aligned with Kuwait Vision 2035, CITRA-led AI governance, the Central Agency for Information Technology's AI Innovation Center and participation in the Digital Cooperation Organization.
Lebanon does not have a single AI Act. Its framework is developing through the Ministry of Technology and Artificial Intelligence (MITAI), the Digital Transformation Strategy 2020โ2030 and a target of an AI-first government by 2030 with 80% of services digitised.
Mauritius has adopted the "AI for Mauritius" national strategy supported by FAIR Guidelines (Fair, Accountable, Inclusive and Responsible AI), and a Generative AI Policy for public officers issued by the Data Protection Office. Guidelines are expected to evolve into AI regulations.
Morocco has no horizontal AI Act. Its framework is policy-led: Morocco Digital 2030, national AI policy work and the First National AI Conference (Rabat, July 2025) aim to position Morocco as a regional African hub for sovereign, ethical and inclusive AI.
The OECD AI Principles are the first intergovernmental standard on AI, first adopted in 2019 and updated in 2024. They promote trustworthy AI and responsible stewardship through values-based principles and policy recommendations โ widely referenced by national AI frameworks.
Oman has no comprehensive AI Act. Its framework is based on a National AI Policy 2025 (comprehensive strategic framework for responsible, safe and effective AI adoption) and the National Programme for AI and Advanced Digital Technologies.
Pakistan has no comprehensive AI Act. Its framework is the National Artificial Intelligence Policy 2025, which sets out pillars for innovation, secure AI, infrastructure and international partnerships, connected with the draft Personal Data Protection Act, Cloud First and Digital Nation Pakistan Act.
Paraguay has no comprehensive AI Act. Its framework develops through AI readiness work led by CONACYT, digital-transformation initiatives and infrastructure projects โ including a Sovereign AI Compute Center project with Taiwan under a 50/50 cooperation structure, intended to position Paraguay as a regional AI hub.
Serbia has no comprehensive AI Act, but has adopted the Strategy for the Development of AI 2025โ2030 (10 January 2025) and Ethical Guidelines for Robust and Accountable AI, supported by the Council for Artificial Intelligence which prepares laws and recommendations.
Tunisia does not have a comprehensive AI Act. Its framework is based on digital transformation policy, a Tunisia AI Roadmap (listed by the OECD AI Policy Navigator, starting 2021) and policy initiatives on public-sector AI use cases, open data, public procurement for innovation and IP treatment for AI.
UNESCO's Recommendation on the Ethics of AI was adopted in 2021 and is described as the first global standard on AI ethics. It applies to UNESCO Member States and focuses on human rights, dignity, fairness, transparency, human oversight, accountability, privacy, non-discrimination and social responsibility.
Frameworks under preparation. Tracked so teams can plan before binding rules land.
Algeria does not have a comprehensive AI Act. Its framework is developing through a draft National AI Strategy (three pillars: data, infrastructure, skills) reviewed by the Government on 25 May 2026, sitting within the National Strategy for Digital Transformation 2025โ2030.
Bangladesh has no comprehensive AI Act. The main AI-specific instrument is the National AI Policy Bangladesh 2026โ2030, published by the ICT Division as Draft V1.1 on 14 January 2026 โ a policy-development instrument, not binding AI law.
Brazil has no fully enacted horizontal AI law. PL 2338/2023 has advanced through the Senate but still needs Chamber approval. Current AI compliance is based on existing laws โ notably the LGPD for personal data.
Chile has no enacted comprehensive AI Act. A bill to regulate AI systems (Boletรญn 16821-19, introduced 2024) is proceeding through Congress. The national AI policy gives strategic direction; current compliance rests on existing law.
Norway, Iceland and Liechtenstein participate in the EEA. The EU AI Act has been marked as EEA-relevant and is under EFTA scrutiny, with a draft Joint Committee Decision pending. Until incorporation, AI compliance rests on existing national laws and sectoral guidance โ and on the active Norwegian Datatilsynet sandbox.
Ghana has no comprehensive AI Act. Its framework is being developed through the National AI Strategy, an Emerging Technologies Bill, the Data Protection Act 2012 and institutions including the Data Protection Commission, NITA and the Cyber Security Authority.
Jamaica has no comprehensive AI Act. Its framework is under development through a National AI Task Force, AI policy recommendations, a UNESCO AI Readiness Assessment (launched April 2026) and proposed AI-specific legislation creating a National AI Oversight and Implementation Council.
Mexico has no enacted comprehensive AI Act. The Senate has been working on initiatives to regulate and promote AI; existing personal-data, consumer, sectoral and criminal law govern current compliance.
Palestine does not have a comprehensive AI Act. The Palestinian National Team for AI has approved a final AI Strategy and recommended adoption by the Council of Ministers, alongside an AI policy and open-data policy. AI is also addressed through Digital Agenda 2030.
Senegal has no comprehensive AI Act. Its framework is under development โ a consultation workshop on the National AI Strategy was held on 11 May 2026, and AI is included in the wider New Deal Technologique under the AI & Digital Factory programme.
Sri Lanka has no comprehensive AI Act. Its draft National AI Strategy, opened for public consultation by the Ministry of Digital Economy, sets seven guiding principles and three practical areas: foundational enablers, AI uptake, and safe and trustworthy AI.
Syria does not have a comprehensive AI Act. Its framework is at an early development stage, anchored by the Ministry of Communications and Information Technology, which hosted the first regional AI conference in Damascus in 2025 under the theme of AI strategies for the economy of the future.
Ukraine has no horizontal AI law. Its bottom-up approach (per the 2024 White Paper) starts with voluntary commitments, codes of conduct, sandbox preparation and sectoral guidance, with a future Ukrainian AI law analogous to the EU AI Act planned in stages between 2023 and 2026.
Yemen does not have a comprehensive AI Act or a national AI strategy. AI-related activity is limited and mainly appears through public-sector training, administrative digitalisation and international development initiatives โ for example, the Yemen Customs Authority's AI training course (Aden, April 2026).
Book a 30-minute consultation. We'll map your AI or licensing path and tell you exactly what's required, in plain language.