Governome

AI Regulations by Jurisdiction

Where each major AI law actually stands right now — enacted, proposed, or stalled — tracked jurisdiction by jurisdiction and kept current in place.

"AI regulation" isn't one law you can read once and be done with. It's a different statute in every jurisdiction, moving at a different pace, using different definitions of the same underlying idea — and the gap between what a law says on paper and what's actually being enforced is often the most important detail in the whole analysis.

This hub is organized by jurisdiction because that's how the obligations actually attach: a system that's high-risk under the EU AI Act may sit entirely outside a comparable U.S. state law's scope, and a company operating in three of our four target markets is really managing three or four independent compliance programs that happen to overlap in places.

Every regulation page here carries a status — proposed, enacted, in force, amended, or repealed — and a last-reviewed date that's tied to an actual review, not a decorative timestamp. When a tracked law changes, we update the page in place rather than burying the change in a separate news post you'd have to go find.

Jurisdictions

Recently updated

Australian government policy officials discussing AI guardrail consultation
Photo: Karson via Unsplash

regulations australia

Australia AI Regulation

Australia has consulted extensively on mandatory AI guardrails modeled conceptually on risk-tiered approaches elsewhere, but hasn't enacted comprehensive AI legislation as of this writing.
Governome Editorial Team · 2 min read
Government policy officials reviewing Canada's stalled federal AI bill
Photo: Jiamin Huang via Unsplash

regulations canada

Canada AI Regulation

Canada's proposed Artificial Intelligence and Data Act did not survive the federal legislative process. Here's what actually governs AI in Canada right now.
Governome Editorial Team · 2 min read
UK sector regulators discussing cross-sectoral AI principles
Photo: Connor Gan via Unsplash

regulations uk

UK AI Regulation

The UK's pro-innovation approach empowers existing regulators like the FCA and ICO to apply shared AI principles within their own sectors, rather than passing a single comprehensive AI law.
Governome Editorial Team · 2 min read
Compliance counsel reviewing California automated decision-making rules
Photo: Sherwin Ker via Unsplash

regulations us california

California AI Regulations

California regulates AI through several parallel tracks rather than one comprehensive law: CPPA rulemaking on automated decision-making technology, generative AI disclosure statutes, and employment law amendments.
Governome Editorial Team · 2 min read
Legal team reviewing duty-of-care obligations under Colorado's AI Act
Photo: Junior Verhelst via Unsplash

regulations us colorado

Colorado AI Act (SB 205)

Colorado's SB 205 imposes duties of reasonable care on both developers and deployers of high-risk AI systems, with impact assessment and consumer notice requirements tied to consequential decisions.
Governome Editorial Team · 2 min read
US federal agency officials discussing AI enforcement policy
Photo: Nicholas Chester-Adams via Unsplash

regulations us

US Federal AI Regulation: What Actually Exists Today

There's no single federal AI law in the US. Here's what federal agencies have actually said about AI, and why existing law already covers more AI use cases than most companies assume.
Governome Editorial Team · 2 min read
European Union policy officials in discussion at a government building
Photo: Karson via Unsplash

regulations eu

The EU AI Act

The EU AI Act classifies AI systems into risk tiers and phases its obligations in on a multi-year schedule. Here's what's actually in force today, what's still phasing in, and how the risk tiers work.
Governome Editorial Team · 3 min read

Frequently asked questions

Is there a single global AI law companies need to comply with?
No. There's no global AI statute — every jurisdiction covered here has written (or is writing) its own law, with its own definitions, thresholds, and enforcement mechanism. The closest thing to international alignment is voluntary frameworks like the OECD AI Principles, which shape national laws but don't themselves create legal obligations.
Which AI regulations are already in effect, not just proposed?
The EU AI Act is the furthest along, with prohibitions and literacy obligations already applicable and high-risk provisions phasing in on a set schedule. Several U.S. states, including Colorado, have enacted AI-specific statutes with their own effective dates. Track the status badge on each jurisdiction page here rather than assuming — "passed" and "in force" are not the same thing, and the gap between them is often a year or more.
Do I need to comply with the EU AI Act if my company isn't based in the EU?
Often yes. Like the GDPR before it, the EU AI Act applies extraterritorially: if your AI system's output is used within the EU, you can fall within scope regardless of where your company is incorporated. This is one of the most commonly missed points in early compliance planning — see our EU AI Act coverage for the specific triggers.
What's the difference between a regulation and a framework?
A regulation is a binding law with a government enforcement mechanism behind it — the EU AI Act, a state statute. A framework, like the NIST AI RMF, is voluntary guidance with no legal force on its own, though regulators and courts increasingly point to frameworks as evidence of what "reasonable" AI risk management looks like. See our frameworks hub for that side of the picture.

Related topics