Global AI Law and Policy Tracker By IAPP Research and Insights Countries worldwide are designing and implementing AI governance legislation and policies commensurate to the velocity and variety of proliferating AI-powered technologies. Efforts include the development of comprehensive legislation, focused legislation for specific use cases, national AI strategies or policies, and voluntary guidelines and standards. There is no standard approach toward bringing AI under state regulation, however, common patterns toward reaching the goal of AI regulation can be observed. Given the transformative nature of AI technology, the challenge for jurisdictions is to find a balance between innovation and regulation of risks. Therefore, governance of AI often, if not always, begins with a jurisdiction rolling out a national strategy or ethics policy instead of legislating from the get-go. This pattern is evident throughout this tracker. The tracker identifies legislative or policy developments or both in a subset of jurisdictions. Such initiatives are either already being deliberated at the country level or are in the process of commencing deliberations in countries across six continents, speaking to the global importance of AI. However, given the rapid and widespread policymaking in this space, the tracker does not include all AI initiatives within every jurisdiction across every continent. This tracker also offers brief commentary on the broader AI context and related developments and identifies laws or policies in parallel professions like privacy. As individual jurisdictions press ahead with their own frameworks and approaches, they have also doubled down on multilateral efforts to coordinate and cohere different approaches. The Organisation for Economic Co-operation and Development's AI principles have been reaffirmed in many different contexts, including by digital and technology ministers of the G7 countries during the 2023 Hiroshima Summit. UNESCO, the International Organization for Standardization, the African Union and the Council of Europe are all working on multilateral AI governance frameworks. The U.K. government organized the first AI Safety Summit in 2023 for government and industry stakeholders to agree upon, evaluate and monitor the most significant risks from AI. Tracking, unpacking and governing the complex field of global AI governance law and policy has quickly become a top-tier strategic issue for organizations. The IAPP AI Governance Center will continue to provide AI governance professionals with the content, resources, networking, training and certification needed to respond to the field's complex risks. The IAPP AI Global Law and Policy Tracker has been updated with valuable input from the global community of AI governance professionals, and we continue to welcome feedback and insights from this community. Last updated January 2024. Find the most up-to-date version on our website. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 3 Global AI Law and Policy Tracker Jurisdictions in focus Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. *Click on the country names above to navigate to its location in the tracker. This map shows which jurisdictions are in focus and covered by this tracker. It does not represent the extent to which jurisdictions around the world are active on AI governance legislation. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 4 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context ARGENTINA Argentina has made policy initiatives on AI. It has developed a draft of a National AI Plan to help facilitate the use and development of AI in the country. Under Resolution 2/2023, Argentina released recommendations for trustworthy and reliable AI directed to the public sector. → National Big Data Observatory → Ministry of Science, Technology and Productive Innovation → National Committee for Ethics in Science and Technology → Undersecretariat of Information and Communication Technologies → Agency of Access to Public Information → National Securities Commission → National Cybersecurity Strategy [IN FORCE] → Personal Data Act [DRAFT] → Law 27,699 for the Protection of Individuals with respect to Automatic Processing of Personal Data [IN FORCE] → Central Bank Communication A 7724 [IN FORCE] → Provision 18/2015 Guide to Good Privacy Practices for Application Development  [IN FORCE] • Argentina is a party to the Organisation for Economic Co-operation and Development's AI principles. See the OECD's Policy Observatory. • Argentina adopted UNESCO's Recommendation on the Ethics of AI. • See Argentina's Digital Agenda 2030. • See Argentina's Fintech Innovation Hub. • Argentina's data protection authority, the Agency of Access to Public Information, published Resolution No. 161/23, which created the Transparency and Protection of Personal Data Program in the use of AI. • The president's chief of staff also issued Administrative Decision No. 750/2023, creating the Interministerial Roundtable on AI. • Argentina is testing the IBM AI Platform, using an aquaculture project to evaluate AI technology and formally incorporate this platform into the Ministry of Science, Technology and Productive Innovation. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 5 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context AUSTRALIA The Australian government highlighted the application of existing regulatory frameworks for AI. In 2021, the government released an AI Action Plan, which set out a plan to build AI capability and accelerate the development and adoption of trusted, secure and responsible AI technologies in Australia. In June 2023, the government released a discussion paper on safe and responsible AI. This paper was a call for consultation on whether Australia has the right governance arrangements in place to support the safe and responsible use and development of AI. In January 2024, the government communicated its interim response on safe and responsible AI. → Department of Industry, Science and Resources → Commonwealth Scientific and Industrial Research Organisation → Office of the eSafety Commissioner → Office of the Australian Information Commissioner → Competition and Consumer Commission → National AI Centre's Responsible AI Network → National Science and Technology Council → Patents Act [IN FORCE] → Copyright Act [IN FORCE] → Privacy Act [IN FORCE] → Data Availability and Transparency Act [IN FORCE] → Consumer Data Right  [IN FORCE] → Competition and Consumer Act [IN FORCE] → Compliance and Enforcement Policy for the Consumer Data Right Australia was one of the first countries in the world to adopt AI ethics principles, which include a robust ethics framework: • AI Ethics Framework • 8 AI Ethics Principles • Australia is a party to the OECD's AI principles. See the OECD's Policy Observatory. • Australia participated in the 2023 U.K. AI Summit, which led to the Bletchley Declaration. • Australia adopted UNESCO's Recommendation on the Ethics of AI. • See Australia's 2025 Digital Transformation Strategy. • The government announced it will set up an advisory body of industry and academic experts to help it devise a legislative framework around "high risk" AI applications. • The Human Technology Institute at the University of Technology Sydney recently released The State of AI Governance in Australia. • See the National Science and Technology Council's Rapid Response Information Report on generative AI. • In March 2020, the government released the AI Standards Roadmap: Making Australia's Voice Heard. This separate roadmap was developed by Standards Australia and commissioned by the Australian Department of Industry, Science, Energy and Resources. The roadmap's primary goal is to "ensure Australia can effectively influence AI standards development globally." Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 6 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context BANGLADESH Bangladesh is looking to advance it's AI policies and has published a National AI Strategy for 2019-2024. The strategy includes: • Creating strategy and development roadmaps. • Overcoming challenges with the use of AI. • Leveraging AI for social and economic growth, and more. → Information and Communication Technology Division → Digital Security Act  [IN FORCE] → Data Protection Act [DRAFT] → Telecommunication Regulatory Commission Regulation for Digital, Social Media and OTT Platforms  [DRAFT] → Constitution of the People's Republic of Bangladesh  [IN FORCE] → Right to Information Act  [IN FORCE] → Copyright Act [IN FORCE] → Telecommunications Act  [IN FORCE] • Bangladesh adopted UNESCO's Recommendation on the Ethics of AI. • See Digital Bangladesh. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 7 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context BRAZIL Brazil published an AI Strategy, as well as a summary. The strategy proposes to finance research projects that apply ethical solutions, establish technical requirements that advance ethical applications, develop techniques to mitigate algorithmic bias, create parameters around human intervention where automated decisions may create high-risk situations, and implement codes of conduct to encourage traceability and safeguard legal rights. Brazil also strives to encourage data sharing per its data protection law, the LGPD, create an AI observatory for measuring impact and disseminate opensource codes for identifying discriminatory trends. Brazil has a proposed comprehensive AI Bill, which emphasizes human rights and creates a civil liability regime for AI developers. The proposed AI Bill would: • Prohibit certain "excessive risk" systems. • Establish a regulatory body to enforce the law. • Create civil liability for AI providers. • Require reporting obligations for significant security incidents. • Guarantee various individual rights, such as explanation, nondiscrimination, rectification of identified biases and due process mechanisms. In July 2023, the country's DPA, the Autoridade Nacional de Proteção de Dados, published a Preliminary Analysis of Bill No. 2338/2023, which provides for the use of AI in Brazil. Further, the ANPD has now published its final opinion on Bill 2338/2023. → Ministry of Science, Technology and Innovation → ANPD → General Data Protection Act  [IN FORCE] → Civil Rights Framework for the Internet [IN FORCE] → Consumer Protection Code  [IN FORCE] • Brazil is a party to the OECD's AI principles. See the OECD's Policy Observatory and article on Brazil's path to responsible AI. • Brazil participated in the 2023 U.K. AI Summit, which led to the Bletchley Declaration. • Brazil adopted UNESCO's Recommendation on the Ethics of AI. • See Brazil's Digital Transformation Strategy. • The ANPD entered into a technical cooperation agreement with the Development Bank of Latin America "to develop an experimental regulatory tool" for AI-related innovation. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 8 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context CANADA Canada's anticipated AI and Data Act, part of Bill C-27, is intended to protect Canadians from high-risk systems, ensure the development of responsible AI, and position Canadian firms and values for adoption in global AI development. The AIDA would: • Ensure high-impact AI systems meet existing safety and human rights expectations. • Prohibit reckless and malicious uses of AI. • Empower the Minister of Innovation, Science and Industry to enforce the act. Canada published a code of practice for generative AI development and use in anticipation of, and to assure compliance with, the AI and Data Act. The country also issued a Directive on Automated Decision-Making, which imposes several requirements on the federal government's use of automated decision-making systems. → Ministry of Innovation, Science and Economic Development → Canadian Institute for Advanced Research → Office of the Privacy Commissioner of Canada → House of Commons' Standing Committee on Industry, Science and Technology → Advisory Council on AI → Personal Information Protection and Electronic Documents Act [IN FORCE] → Privacy Act [IN FORCE] → Consumer Product Safety Act  [IN FORCE] → Food and Drugs Act [IN FORCE] → Motor Vehicle Safety Act  [IN FORCE] → Bank Act [IN FORCE] → Human Rights Act [IN FORCE] → Criminal Code [IN FORCE] → Quebec's Law 25: An Act to modernize legislative provisions as regards the protection of personal information [IN FORCE] • Canada is a party to the OECD's AI principles. See the OECD's Policy Observatory. • Canada also participated in the 2023 U.K. AI Summit, which led to the Bletchley Declaration. • As part of the G7, Canada endorsed the 11 Hiroshima Process International Guiding Principles for Advanced AI systems. • Canada also adopted UNESCO's Recommendation on the Ethics of AI. • According to its AI Strategy, by 2030 Canada plans to achieve an AI ecosystem founded on scientific excellence, exceptional training and talent pools, public-private collaboration, and commitment to AI technologies which produce positive social, economic and environmental change for people and the planet. In achieving these goals, Canada has established three AI institutes: Amii in Edmonton, Mila in Montreal, and the Vector Institute in Toronto. • The House of Commons' Standing Committee on Industry, Science and Technology issued a report for various AI recommendations in 2019. • There is currently a proposed amendment to the Ontario Working for Workers Act for AI in hiring. This would be the country's first legislation requiring businesses to disclose whether they use AI in their hiring processes. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 9 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context CHILE In October 2021, Chile published it's first National Policy and Action Plan on AI on AI. The country's previous Minister of Science, Technology, Knowledge and Innovation Andrés Couve explained the policy is built on the following: • Development of enabling factors. • Use and development of AI technology. • Aspects of ethics and safety. Chilean Parliament is discussing a bill on incorporating legal and ethical issues for the creation, distribution, commercialization and use of AI. → Ministry of Science, Technology, Knowledge and Innovation → Future Challenges, Science, Technology and Innovation Committee → National Research and Development Agency → National Center for AI Research → Chilean Transparency Council → National Consumers Agency → Digital Economy Partnership Agreement [IN FORCE] → Political Constitution of the Republic of Chile [IN FORCE] → Law No. 19,628 on the Protection of Private Life  [IN FORCE] → Law No. 20,285 on the Transparency of Public Functions and Access to Information on Public Administration [IN FORCE] → Law 21,180 on Digital Transformation of the State  [IN FORCE] → Industrial Property Law No. 19,039 [IN FORCE] → Law No. 17,336 on Intellectual Property [IN FORCE] → Fintech Law [IN FORCE] → Personal Data Protection Bill No. 11,144-07 [DRAFT] • Chile is a party to the OECD's AI principles. See the OECD's Policy Observatory. • Chile participated in the 2023 U.K. AI Summit, which led to the Bletchley Declaration. • Chile also adopted UNESCO's Recommendation on the Ethics of AI. • See Chile's 2035 Digital Transformation Strategy. • In 2023, Chile hosted the first Latin American and Caribbean Ministerial and High Level Summit on the Ethics of AI, with support from UNESCO and CAF. •  The Inter-American Development Bank supported the Chilean government's project to develop new transport technology applications, specifically focusing on big data and autonomous vehicles. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 10 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context CHINA China was one of the first countries to implement AI regulations. Chinese lawmakers are in the process of drafting comprehensive AI regulation. Various regulations and policies apply to specific AI uses. These include: • Algorithmic Recommendation Management Provisions [IN FORCE] • Interim Measures for the Management of Generative AI Services [IN FORCE] • Deep Synthesis Management Provisions  [IN FORCE] • AI guidelines and summary of regulations  [IN FORCE] • Scientific and Technological Ethics Regulation  [IN FORCE] • Next Generation AI Development Plan  [IN FORCE] → Cyberspace Administration of China → Ministry of Industry and Information Technology → Ministry of Public Security → State Administration for Market Regulation → National Development and Reform Commission → Cybersecurity Law [IN FORCE] → Data Security Law [IN FORCE] → Personal Information Protection Law [IN FORCE] → Shenzhen Special Economic Zone AI Industry Promotion Regulation [IN FORCE] • China is a party to the OECD's AI principles. See the OECD's Policy Observatory. • China participated in the 2023 U.K. AI Summit, which led to the Bletchley Declaration. • China also adopted UNESCO's Recommendation on the Ethics of AI. • See China's AI development plan. • See the Ministry of Science and Technology's 2021 AI governance document on ethical norms for AI use. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 11 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context COLOMBIA Colombia has various policies addressing AI governance, including the following: • AI Expert Mission. • AI National Strategy Policy. • AI in the Public Sector. → Administrative Department of the Presidency of the Republic → CAF → Ministry of Information and Communication Technologies → Ministry of National Education → Administrative Department of Science, Technology and Innovation → National Planning Department → Superintendence of Industry and Commerce → AI Task Force → Personal Data Protection Law  [IN FORCE] → Habeas Data Law, Law 1266 amended by Law 2157 of 2021  [IN FORCE] → Decree 338 [IN FORCE] • Colombia is a party to the OECD's AI principles. See the OECD's Policy Observatory. • Colombia also adopted UNESCO's Recommendation on the Ethics of AI. • Colombia published an Ethical Framework that reiterates best practices, suggestions and recommendations on how best to integrate ethical principles with the use of AI in projects primarily for the benefit of the public sector entities. • An AI Task Force was created in partnership with the CAF to bolster AI progress. EGYPT Egypt's National AI Strategy focuses on four pillars: • AI for government. • AI for development. • Capacity building. • International activities. The country's other initiatives include an AI roadmap and Charter for Responsible AI. → National Council for AI → Ministry of Communications and Information Technology → Law No. 151 of 2020 on the Protection of Personal Data [IN FORCE] → Law No. 175 of 2018 Regarding Anti-Cyber and Information Technology Crimes [IN FORCE] → Telecommunication Regulation Law, Law No. 10 of 2003  [IN FORCE] → Law No. 82 of 2002 on the Protection of Intellectual Property Rights [IN FORCE] • Egypt is a party to the OECD's AI principles. See the OECD's Policy Observatory. • Egypt also adopted UNESCO's Recommendation on the Ethics of AI. • Egypt chaired several meetings for the Arab AI Working Group, which allows representatives from Arab countries to discuss AI strategies. See the group's chair election, second meeting and third meeting. • See the Applied Innovation Center. • The Senate Education Committee stressed the urgency of issuing a document to evaluate the ethics and control of AI in Egypt. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 12 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context EU In December 2023, the EU AI Act completed the political trilogue stage, with agreement reached on the respective positions of the European Commission, Council and Parliament. In brief, the act: • Creates harmonized rules for placing AI on the EU market. • Applies to the EU and any third-country providers and deployers that place AI systems on the EU market. • Centers around a risk-based approach. • Prohibits use of certain AI systems and provides specific requirements for high-risk systems. • Creates harmonized transparency rules for certain AI systems. Further, in 2018, the Commission published communication from the European Parliament, Council, Economic and Social Committee, and the Committee of the Regions on the approach of AI in Europe. → Proposed future EU AI Board → European Data Protection Board → Special Committee on AI in a Digital Age → EDPB's ChatGPT Task Force → Member state AI authorities, for example: - Spain's AI supervision agency, the Agencia Española de Supervisión de la Inteligencia Artificial → Member state DPAs, for example: - France's Commission nationale de l'informatique et des libertés - Germany's Federal Commissioner for Data Protection and Freedom of Information - Italy's Garante - Spain's Agencia Española de Protección de Datos - Belgium's DPA → General Data Protection Regulation [IN FORCE] → Digital Services Act [IN FORCE] → Digital Markets Act [IN FORCE] → AI Liability Directive [DRAFT] → EU Cyber Resilience Act  [DRAFT] → Ethics guidelines for trustworthy AI [IN FORCE] → New Product Liability Directive [DRAFT] • The EU is a party to the OECD's AI principles. See the OECD's Policy Observatory. • The EU participated in the 2023 U.K. AI Summit, which led to the Bletchley Declaration. • As a nonenumerated member of the G7, the EU endorsed the 11 Hiroshima Process International Guiding Principles for Advanced AI systems. • The EU also adopted UNESCO's Recommendation on the Ethics of AI. • See the EU's approach and timeline for AI development. • Member states and the European Commission worked to create a Coordinated Plan on AI in 2018. This plan includes a table showcasing how 23 of 27 EU countries, as well as Norway and Switzerland, have progressed with their national strategies. The coordinated plan, updated in 2021, builds on the original 2018 plan. • In January 2024, the European Commission decided to establish an EU AI Office, to "ensure the development and coordination of AI policy at European level, as well as supervise the implementation and enforcement of the forthcoming AI Act." ↓ Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 13 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context EU,continued - Poland's Urząd Ochrony Danych Osobowych - Austria's DPA - Hungary's National Authority for Data Protection and Freedom of Information • Some EU member states have national AI strategies, many of which emphasize research, training and labor preparedness, as well as multistakeholder and international collaboration. For example, France's national AI strategy lays out three main objectives: - Improve the AI education and training ecosystem. - Establish an open data policy for implementing AI applications and pooling assets. - Develop an ethical framework for fair and transparent use of AI. INDIA A proposed Digital India Act would replace the IT Act of 2000 and regulate high-risk AI systems. The Indian government has advocated for a robust, citizen-centric and inclusive "AI for all" environment. A task force has been established to make recommendations on ethical, legal and societal issues related to AI, and to establish an AI regulatory authority. According to its National Strategy for AI, India hopes to become what it calls an "AI garage" for emerging and developing economies, where scalable solutions can be easily implemented and designed for global deployment. → NITI Aayog → Ministry of Electronics and Information Technology → Ministry of Commerce and Industry → AI Task Force → Information Technology Act  [IN FORCE] → The Information Technology Rules [IN FORCE] → Competition Act [IN FORCE] → Motor Vehicles Act [IN FORCE] → Digital Personal Data Protection Act [IN FORCE] → Copyright Act [IN FORCE] → National e-Governance Plan  [IN FORCE] • India is a party to the OECD's AI principles. See the OECD's Policy Observatory. • India participated in the 2023 U.K. AI Summit, which led to the Bletchley Declaration. • India also adopted UNESCO's Recommendation on the Ethics of AI. • NITI Aayog, the government's public policy think tank, launched the AI Research, Analytics and knowledge Assimilation platform to elaborate on AI requirements in India. • See India AI, an umbrella program of the Ministry of Electronics and Information Technology. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 14 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context INDONESIA In 2020, Indonesia released the National Strategy on AI as part of the AI Towards Indonesia's Vision 2045. The following five national priorities were outlines as where AI is anticipated to have the biggest impact: • Health services. • Bureaucratic reform. • Education and research. • Food security. • Mobility and smart cities. Further, Indonesia released a Circular on AI Ethics. While not binding, it provides a reference point for formulating and establishing internal company policies for Indonesia's AI industry. Since issuing the circular, the Ministry of Communication and Informatics committed to preparing specific regulations regarding AI use and development. → Ministry of Communication and Informatics → Agency for the Assessment and Application of Technology → Ministry of Research, Technology and Higher Education → National Cyber and Crypto Agency → Law No. 27 of 2022 on Personal Data Protection  [IN FORCE] → Electronic Information Law  [IN FORCE, AMENDMENT TO LAW IN DRAFT] → Article 40 of Law No. 36 of 1999 regarding Telecommunications  [IN FORCE] → Law No. 14 of 2008 on Public Information Transparency  [IN FORCE] → Copyright Act [IN FORCE] • Indonesia is a party to the OECD's AI principles. See the OECD's Policy Observatory. • Indonesia participated in the 2023 U.K. AI Summit, which led to the Bletchley Declaration. • Indonesia also adopted UNESCO's Recommendation on the Ethics of AI. • See Indonesia's roadmap for industry, Making Indonesia 4.0. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 15 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context ISRAEL Based on a draft policy for regulation and ethics in AI, Israel wants to form a uniform risk-management tool, establish a governmental knowledge and coordination center, and maintain involvement in international regulation and standardization. In general, voluntary standardization, sector-based self-regulation and modular experimentation tools, e.g., sandboxes, will be favored over a lateral framework. The following resources are available for policy guidance: • Israeli AI Regulation and Policy White Paper: A First Glance. • Harnessing Innovation: Israeli Perspectives on AI Ethics and Governance. • Policy on AI Regulation and Ethics. → Ministry of Innovation, Science and Technology → Ministry of Justice → Privacy Protection Authority → Israel National Cyber Directorate → Basic Law: Human Dignity and Liberty [IN FORCE] → Privacy Protection Law  [IN FORCE] → Data Security Regulation  [IN FORCE] → Credit Data Law [IN FORCE] → Copyright Act [IN FORCE] • Israel is a party to the OECD's AI principles. See the OECD's Policy Observatory. • Israel participated in the 2023 U.K. AI Summit, which led to the Bletchley Declaration. • Israel's Ministry of Justice issued an opinion that machine learning will fall under the fair-use provision in the country's Copyright Act. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 16 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context JAPAN In 2022, Japan released a National AI Strategy. Japan promotes the notion of "agile governance," whereby the government provides nonbinding guidance and defers to the private sector's voluntary efforts to self-regulate. The following white papers have been issued for policy guidance: • AI Governance in Japan Ver. 1.1. • Governance Guidelines for Implementation of AI Principles. • AI Utilization Guidelines, an initiative for implementing the OECD AI Principles. In 2023, the AI Strategy Council released draft AI Operator Guidelines, which clarify how operators should develop, provide and use AI. → Ministry of Economy, Trade and Industry → Council for Science, Technology and Innovation → Personal Information Protection Commission → Fair Trade Commission → Improving Transparency and Fairness of Digital Platforms Act [IN FORCE] → Financial Instruments and Exchange Act [IN FORCE] → Protection of Personal Information Act [IN FORCE] → Antimonopoly Act [IN FORCE] → Product Liability Act [IN FORCE] → Copyright Law [IN FORCE] • Japan is a party to the OECD's AI principles. See the OECD's Policy Observatory. • Japan participated in the 2023 U.K. AI Summit, which led to the Bletchley Declaration. • As part of the G7, Japan endorsed the 11 Hiroshima Process International Guiding Principles for Advanced AI systems. • Japan also adopted UNESCO's Recommendation on the Ethics of AI. • The Social Principles of Human-Centric AI, drafted by the Council for Social Principles of Human-Centric AI, describe AI's role in Japan's "Society 5.0" and advocates that AI should be human-centric; promote education/ literacy; protect privacy; ensure security; maintain fair competition; ensure fairness, accountability and transparency; and promote collaborative innovation. • Minister of Education, Culture, Sports, Science and Technology Keiko Nagaoka declared the country's copyright laws cannot be enforced on materials used in AI training datasets. • Japan's Ministry of Economy, Trade and Industry introduced the Contract Guidelines for AI and Data Use to assist parties involved in AI business transactions. • See the Draft AI Research and Development Guidelines for International Discussions. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 17 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context MAURITIUS Mauritius published an AI Strategy. The strategy goes in depth on the benefits and challenges of AI, specifically how AI impacts the country's various industries, and sets out a clear vision for development of AI. Other initiatives from the Mauritius government include: • AI Society. • AI for Agriculture project. → Ministry of Technology, Communication and Innovation → Ministry of Finance and Economic Development → AI Council → Research and Innovation Council → Data Protection Office → Financial Services (Robotic and AI Enabled Advisory Services) Rules [IN FORCE] → Data Protection Act [IN FORCE] → National Cyber Security Strategy [IN FORCE] → Cybersecurity and Cybercrime Act [IN FORCE] → Industrial Property Act  [IN FORCE] → Copyright Act [IN FORCE] → Protection against Unfair Practices (Industrial Property Rights) Act [IN FORCE] • Mauritius is a party to the OECD's AI principles. See the OECD's Policy Observatory. • Mauritius also adopted UNESCO's Recommendation on the Ethics of AI. • See the Digital Mauritius 2030 strategic plan. • In 2019, the Minister of Technology, Communication and Innovation officially opened the workshop, Leading Innovation in Business and Government Services through AI, which is organized by the Mauritius Research and Innovation Council. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 18 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context NEWZEALAND Many New Zealand government agencies are signatories to the Algorithm Charter, which sets out a series of ethical commitments around the development and use of algorithms. The charter provides a risk matrix to assess the likelihood and impact of algorithmic applications. The New Zealand government generally prioritizes trustworthy and human-centric AI development. Although there is no comprehensive AI regulation in New Zealand, the current Privacy Act 2020 applies to the use of AI systems in the country. The Office of the Privacy Commissioner issued guidance on compliance with privacy law when using generative AI tools, as well as a summary. Further, the Office of the Privacy Commissioner published the Privacy Commissioner's expectations around generative AI in June 2023. The Law, Society and Ethics Working Group published a set of guiding Trustworthy AI in Aotearoa principles designed to provide direction for AI stakeholders. → Ministry of Business, Innovation and Employment → Statistics New Zealand → Office of the Privacy Commissioner → Department of Internal Affairs → Privacy Act [IN FORCE] → Bill of Rights Act [IN FORCE] → Treaty of Waitangi [IN FORCE] → Human Rights Act [IN FORCE] → Māori Data Sovereignty Principles → Māori Data Governance Model • New Zealand is a party to the OECD's AI principles. See the OECD's Policy Observatory. • New Zealand also adopted UNESCO's Recommendation on the Ethics of AI. • The New Zealand government released AI cornerstones, which will inform an eventual national AI strategy. • See the AI Forum of New Zealand. • "An example of governance for AI in health services from Aotearoa New Zealand" published on nature.com has been recognised for its approach in the health sector, particularly in terms of prioritising the voice of Māori.   • The Office of the Privacy Commissioner is currently conducting consultation on a Biometrics Privacy Code of Practice under the Privacy Act to regulate the use of biometric technologies. If enacted, that code of practice will have the force of law under the Privacy Act.  • The Department of Internal Affairs published initial advice on Generative AI in the public service. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 19 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context PERU Peru enacted several AI initiatives, including Law 31814 to promote the use of AI "in favor of the economic and social development of the country." The law includes the following principles: • Risk-based security standards. • Multi-stakeholder approach. • Internet governance. • Digital society. • AI privacy. Peru also developed a National AI Strategy that aids in the promotion, development and adoption of AI in the country. The first draft includes a roadmap, goals, definitions and external context examples to further develop the strategy. → Secretariat of Government and Digital Transformation → Presidency of the Council of Ministers → National Directorate of Intelligence → Superintendence of Banking, Insurance and Pension Fund Administration → Ministry of Justice and Human Rights → National Authority for the Protection of Personal Data → National Authority for Transparency, Access to Public Information and Protection of Personal Data → Supreme Decree No. 157- 2021-PCM [IN FORCE] → Supreme Decree No. 003- 2013-JUS [IN FORCE] → Personal Data Protection Law No. 29733 [IN FORCE] → Law of Transparency and Access to Public Information [IN FORCE] → Finance Regulation for Information Security and Cybersecurity [IN FORCE] → Cyber Defense Law No. 30999  [IN FORCE] → Law 30096 on Computer Crime [IN FORCE] → Financial sector Cybersecurity Framework [IN FORCE] → Copyright Law, Legislative Decree 822 [IN FORCE] • Peru is a party to the OECD's AI principles. See the OECD's Policy Observatory. • Peru also adopted UNESCO's Recommendation on the Ethics of AI. • See the National Digital Transformation Policy for 2030. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 20 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context SAUDIARABIA Saudi Arabia has a National Strategy on Data and AI, which provides a welcoming, flexible and stable regulatory framework, including incentive schemes, to attract AI companies, investors and talents. According to the strategy, Saudi Arabia aspires to be one of the leading economies utilizing and exporting data and AI after 2030. It is ready to leverage its "young and vibrant population" and "unique centralized ecosystem." The country hopes to attract outside investment by hosting global AI events and applying its influence as a tech hub within the Middle East. → Saudi Data and AI Authority → National Data Management Office → Ministry of Communications and Information Technology → Personal Data Protection Law  [IN FORCE] → Data Management and Personal Data Protection Standards [IN FORCE] → Children and Incompetents' Data Protection Policy  [IN FORCE] → Data Classification Policy  [IN FORCE] → General Rules for the Transfer of Personal Data outside the Geographical Borders of the Kingdom [IN FORCE] → Data Sharing Policy [IN FORCE] → Freedom of Information Policy  [IN FORCE] → Open Data Policy [IN FORCE] • Saudi Arabia is a party to the OECD's AI principles. See the OECD's Policy Observatory. • Saudi Arabia also adopted UNESCO's Recommendation on the Ethics of AI. • The government of Saudi Arabia in collaboration with the Saudi Data and AI Authority signed a memorandum of understanding to create an AI center dedicated to the energy segment. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 21 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context SINGAPORE Singapore developed voluntary governance frameworks and initiatives for ethical AI deployment, data management and sectoral implementation, including: • Model AI Governance Framework. • National AI Programmes in Government and Finance. • Veritas Initiative, an implementation framework for AI governance in the financial sector. • AI Verify Foundation, a governance testing toolkit. • IPOS International, part of the Intellectual Property Office of Singapore that realizes customized IP solutions. • Proposed Advisory Guidelines on Use of Personal Data in AI Recommendation and Decision Systems. • Principles to Promote Fairness, Ethics, Accountability and Transparency in the Use of AI and Data Analytics in Singapore's Financial Sector. • Implementation and Self-Assessment Guide for Organizations, a companion to the Model AI Governance Framework. Singapore is also seeking international feedback on a new governance framework for generative AI. → Smart Nation Digital Government Group → AI Ethics and Governance Steering Committee → Personal Data Protection Commission → Monetary Authority of Singapore → Infocomm Media Development Authority → Advisory Council on the Ethical Use of AI and Data → Personal Data Protection Act  [IN FORCE] → Computer Misuse Act  [IN FORCE] → Copyright Act [IN FORCE] → Patents Act [IN FORCE] → Competition Act [IN FORCE] → Cybersecurity Act [IN FORCE] → Protection from Online Falsehoods and Manipulation Act [IN FORCE] → Road Traffic Act [IN FORCE] → The Digital Economy Partnership Agreement  [IN FORCE] • Singapore is a party to the OECD's AI principles. See the OECD's Policy Observatory. • Singapore participated in the 2023 U.K. AI Summit, which led to the Bletchley Declaration. • Singapore also adopted UNESCO's Recommendation on the Ethics of AI. • Based on Singapore's National AI Strategy, the city-state aims to be a global hub for AI, thereby generating economic gains and improving lives. A key tenet in Singapore's AI policy is that its citizens understand AI tech and its workforce attains the necessary competencies to participate in an AI economy. • The Singapore VerifyAI initiative, known as the "crosswalk" was unveiled at the inaugural USSingapore Dialogue on Critical and Emerging Technologies. The crosswalk links IMDA's AI Verify with the U.S. National Institute of Standards and Technology's AI Risk Management Framework. • See the Primer to the Model AI Governance Framework. • See the Trusted Data Sharing Framework. • See the Guide to Job Redesign in the Age of AI. • Complementing the Model Framework and ISAGO are two volumes of a Compendium of Use Cases that show "how local and international organisations across different sectors and sizes implemented or aligned their AI governance practices with all sections of the Model Framework." - Volume 1. - Volume 2. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 22 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context SOUTHKOREA South Korea has a comprehensive AI Act in the works to ensure accessibility to AI technology for all developers without government approval, but this requires reliability measures. South Korea is also setting new standards on copyrights of AIgenerated content. South Korea has numerous policy initiatives regarding AI and technology under its National Strategy for AI, including the AI Research and Development Strategy, the Data Industry Activation Strategy, and the System Semiconductor Strategy. The nation intends to leverage its high education level, widespread acceptance of new technology and preeminent IT infrastructure to implement these initiatives. Additionally, in August 2023, the Personal Information Protection Commission published guidance for the safe use of personal information in the age of AI. → Ministry of Science and ICT → Personal Information Protection Commission → Communications Commission → Internet and Security Agency → Financial Services Commission → Fair Trade Commission → National Information Society Agency → Korea AI Association → Personal Information Protection Act [IN FORCE] → Monopoly Regulation and Fair Trade Act [IN FORCE] → Copyright Act [IN FORCE] → Protection and Use of Location Information Act [IN FORCE] → Consumer Protection in Electronic Commerce Act  [IN FORCE] → Promotion and Communications Network Utilization and Information Protection Act [IN FORCE] → Credit Information Use and Protection Act [IN FORCE] → Product Liability Act [IN FORCE] • South Korea adopted UNESCO's Recommendation on the Ethics of AI. • The Digital New Deal was created by the South Korean government to promote both educational and industrial efforts on AI opportunities. • See the AI Open Innovation Hub. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 23 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context TAIWAN Taiwan has embraced a holistic approach to developing an AI environment. The government is currently drafting an act that would govern AI, specifically "the legal definition of AI, privacy protections, data governance, risk controls and ethical principles related to AI." The following resources have been issued for policy guidance: • National Science and Technology Council's policy discussing AI Innovation. • AI Taiwan Action Plan. • AI Taiwan Action Plan 2.0. • 2022 AI-Readiness Assessment Report. → Fair Trade Commission → NSTC, previously the Ministry of Science and Technology → Ministry of Health and Welfare → Executive Yuan of Taiwan → Ministry of Digital Affairs → Industrial Technology Research Institute → Taiwan AI Center of Excellence → Personal Data Protection Act  [IN FORCE] → Fair Trade Act [IN FORCE] → Cybersecurity Management Act [IN FORCE] → Company Act [IN FORCE] → Child and Youth Sexual Exploitation Prevention Act  [IN FORCE] → Copyright Act [IN FORCE] → Patent Act [IN FORCE] → Freedom of Government Information Law [IN FORCE] → Financial Technology Development and Innovative Experimentation Act [IN FORCE] → FinTech Regulatory Sandbox Guidance → MoST AI Technology Research and Development Guidelines → Guidelines on the use of Generative AI [DRAFT] • See the Digital Nation and Innovative Economic Development Program. • See the 5+2 Industrial Innovation Plan. • See Smart Taiwan 2030. • See Taiwan AI Labs. • See the country's Forward-looking Infrastructure Development Program. • See the Unmanned Vehicle Technology Innovation Sandbox. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 24 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context UNITEDARABEMIRATES In 2017, the UAE became the first country to establish an AI ministry. The nation's Council for AI and Blockchain will oversee policies that promote an AI-friendly ecosystem, advance AI research and accelerate collaboration between public and private sectors. The UAE is poised to become a hub for AI research, collaboration, innovation and education per its National Strategy for AI. The following resources have been issued for policy guidance: • National Program for AI. • AI Ethics Principles and Guidelines. • Generative AI guide. • AI coding license. • AI System Ethics Self-Assessment Tool. • AI Adoption Guideline in Government Services. • The Dubai International Financial Centre's Regulation 10 on Processing Personal Data Through Autonomous and Semi-Autonomous Systems [IN FORCE]. → Minister of AI, Digital Economy and Remote Work Applications Office → AI and Blockchain Council → Data Office → Council for Digital Wellbeing → Regulations Lab → Abu Dhabi Global Market's Office of Data Protection → DIFC → Personal Data Protection Law  [IN FORCE] → Central Bank Rulebook  [IN FORCE] → Federal Decree Law on Combating Rumours and Cybercrimes [IN FORCE] → Penal Code [IN FORCE] → Federal Law concerning the Regulation of Competition  [IN FORCE] → Federal Law on Consumer Protection [IN FORCE] → Federal Decree Law on Copyrights and Neighbouring Rights [IN FORCE] → Health Data Law [IN FORCE] → Federal Law on the Regulation and Protection of Industrial Property Rights [IN FORCE] → ADGM's Data Protection Regulations 2021 [IN FORCE] → Federal Law on the Civil Transactions Law of the United Arab Emirates State [IN FORCE] → Minister of AI, Digital Economy and Remote Work Applications Office's AI Ethics Principles and Guidelines • The UAE is a party to the OECD's AI principles. See the OECD's Policy Observatory. • The UAE participated in the 2023 U.K. AI Summit, which led to the Bletchley Declaration. • The UAE also adopted UNESCO's Recommendation on the Ethics of AI. • Abu Dhabi hosts a growing startup community, advanced machine-learning facilities and educational institutions, like Mohamed bin Zayed University which teamed up with IBM to open the AI Center of Excellence, in addition to a new supercomputing resource for complex algorithms and large datasets. With this infrastructure in place, the UAE hopes to deploy AI in priority sectors such as energy and transportation. • The National Program for AI published a Deepfake Guide in 2021. • The UAE AI and Robotics Award for Good aims to "encourage research and applications of innovative solutions in (AI) and robotics to meet existing challenges in the categories of health, education and social services." • See the country's Guidelines for Financial Institutions adopting Enabling Technologies. • See the AI Hardware Infrastructure Report. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 25 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context U.K. The U.K. government proposed a context-based, proportionate approach to regulation and will rely on existing sectoral laws to impose guardrails on AI systems. The following resources are available for policy guidance: • A pro-innovation approach to AI regulation. • Algorithmic Transparency Recording Standard Hub. • AI Standards Hub, a new U.K. initiative dedicated to the evolving and international field of standardization for AI technologies. • Guide to using AI in the public sector by the U.K. government. • The Government Digital Service and the Office for AI's guide on understanding AI ethics and safety. • The Centre for Data Ethics and Innovation's AI Governance research report. • Guidance on the AI auditing framework from the Information Commissioner's Office. • ICO and Alan Turing Institute's Explaining decisions made with AI. → Office for AI → Information Commissioner's Office → Digital Regulation Cooperation Forum → Financial Conduct Authority → AI Council → Department for Science, Innovation and Technology → Equality Act [IN FORCE] → U.K. General Data Protection Regulations and Data Protection Act [IN FORCE] → Consumer Protection Act [IN FORCE] → Financial Services and Markets Act [IN FORCE] → Consumer Rights Act  [IN FORCE] → National Security and Investment Act [IN FORCE] → Copyright, Designs and Patents Act [IN FORCE] → Advanced Research and Invention Agency Act  [IN FORCE] → National Cyber Security Centre's Assessing intelligent tools for cyber security [IN FORCE] → AI (Regulation) Bill [DRAFT] • The U.K. is a party to the OECD's AI principles. See the OECD's Policy Observatory. • In 2023, the country hosted the AI Summit, which led to the Bletchley Declaration. • The U.K. also adopted UNESCO's Recommendation on the Ethics of AI. • As part of the G7, the U.K. endorsed the 11 Hiroshima Process International Guiding Principles for Advanced AI systems. • Specific action items include launching a national AI research and insights program, developing a diverse AI workforce, enabling better data availability, creating a national strategy for AI in health and social care, applying AI systems to climate change mitigation, piloting an AI standards hub to coordinate with global AI standardization, and developing a cross-government standard for algorithmic transparency. • The Centre for Data Ethics and Innovation published a Roadmap to an Effective AI Assurance Ecosystem, which is also part of the National AI Strategy. Further, the CDEI created an AI Assurance Guide as a companion to the roadmap. • See the U.K. AI Safety Institute. Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 26 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context U.S.(FEDERAL) The U.S. has released numerous frameworks and guidelines. Congress has passed legislation to preserve U.S. leadership in AI research and development, as well as control government use of AI. In May 2023, the Biden-Harris administration updated the National AI Research and Development Strategic Plan, emphasizing a principled and coordinated approach to international collaboration in AI research. The Office of Science and Technology Policy issued a request for information to obtain public input on AI's impact. The National Telecommunications and Information Administration sought feedback on what policies can create trust in AI systems through an AI Accountability Policy Request for Comment. Specific AI governance law and policy includes: • Executive orders: - Maintaining American Leadership in AI - Promoting the Use of Trustworthy AI in the Federal Government - The Safe, Secure, and Trustworthy Development and Use of AI • Acts and bills: - AI Training Act [IN FORCE] - National AI Initiative Act (Division E, Sec. 5001) [IN FORCE] - AI in Government Act (Division U, Sec. 101) [IN FORCE] - Algorithmic Accountability Act [DRAFT] - National AI Commission Act [DRAFT] → Office of Science and Technology Policy → National AI Initiative Office → Federal Trade Commission → Consumer Financial Protection Bureau → Department of Justice → Equal Employment Opportunity Commission → FTC Act, Section 5 [IN FORCE] → Fair Credit Reporting Act  [IN FORCE] → Equal Credit Opportunity Act  [IN FORCE] → Title VII of the Civil Rights Act  [IN FORCE] → Americans with Disabilities Act  [IN FORCE] → Age Discrimination in Employment Act [IN FORCE] → Fair Housing Act [IN FORCE] → Genetic Information and Nondiscrimination Act  [IN FORCE] → American Data Privacy and Protection Act [DRAFT] → Health Equity and Accountability Act [DRAFT] • The US is a party to the OECD's AI principles. See the OECD's Policy Observatory. • The U.S. participated in the 2023 U.K. AI Summit, which led to the Bletchley Declaration. • The U.S. also adopted UNESCO's Recommendation on the Ethics of AI. • As part of the G7, the U.S. endorsed the 11 Hiroshima Process International Guiding Principles for Advanced AI systems. • In general, the U.S. approach to AI governance has been slow and incremental, seeking to preserve civil and human rights for Americans throughout AI deployment, as well as mobilize international collaboration which upholds democratic values and mutual advancement. • See the U.S. AI Safety Institute. • U.S. Senate Committee on the Judiciary's Subcommittee on Privacy, Technology and the Law held a hearing on the legislation of AI. • U.S. senators met for the first time with top technology industry executives in a closed-door session about AI regulation called the AI Insight Forum. Majority Leader Schumer made Floor Remarks on the first forum. • The Singapore VerifyAI initiative known as "crosswalk" was unveiled at the inaugural U.S.-Singapore Dialogue on Critical and Emerging Technologies. The crosswalk links IMDA's AI Verify with the U.S. NIST's AI Risk Management Framework. ↓ Global AI Law and Policy Tracker  •  International Association of Privacy Professionals  •  iapp.org 27 Navigate to:  Argentina  ∙  Australia  ∙  Bangladesh  ∙  Brazil  ∙  Canada  ∙  Chile  ∙  China  ∙  Colombia  ∙  Egypt  ∙  EU  ∙  India  ∙  Indonesia  ∙  Israel Japan  ∙  Mauritius  ∙  New Zealand  ∙  Peru  ∙  Saudi Arabia  ∙  Singapore  ∙  South Korea  ∙  Taiwan  ∙  United Arab Emirates  ∙  U.K.  ∙  U.S. Specific AI governance law or policy Relevant authorities Other relevant laws and policies Wider AI context U.S.(FEDERAL),continued - Digital Platform Commission Act [DRAFT] - Global Technology Leadership Act [DRAFT] - Transparent Automated Governance Act [DRAFT] • Nonbinding frameworks: - Blueprint for an AI Bill of Rights - National Institute of Standards and Technology AI Risk Management Framework - Guidance for Regulation of AI Applications • Government initiatives: - Voluntary Commitments from Leading AI Companies to Manage the Risks Posed by AI - TTC Joint Roadmap on Evaluation and Measurement Tools for Trustworthy AI and Risk Management - Congressional AI effort of Sen. Charles E. Schumer, D-N.Y. - National Security Commission on AI - Bipartisan legislative framework for AI announced by U.S. Senators Richard Blumenthal, D-Conn., and Josh Hawley, R-Mo. Contact Gabrielle Schwartz AI Governance Research Lead, IAPP gschwartz@iapp.org Uzma Chaudry AI Governance Center Fellow, IAPP uchaudhry@iapp.org Joe Jones Research and Insights Director, IAPP jjones@iapp.org For further inquiries, please reach out to research@iapp.org. Follow the IAPP on social media D  C  Q  E Updated February 2024. The IAPP disclaims all warranties, expressed or implied, with respect to the contents of this material, including any warranties of accuracy, merchantability or fitness for a particular purpose. Nothing herein should be construed as legal advice. © 2024 International Association of Privacy Professionals. All rights reserved.