Every bill we’re tracking
Filter, sort, and search the full legislative record.
This bill governs how student data can be shared with the Summer EBT program, establishing rules around collection and use of student information for nutrition assistance eligibility. The legislation addresses data privacy and child safety by creating oversight requirements for student data sharing between educational institutions and government benefit programs.
Risk-based regulation prohibiting unacceptable AI uses, requiring conformity assessments for high-risk systems, and transparency obligations for general-purpose AI models.
Commission guidance explains how providers and deployers should disclose AI interactions, mark synthetic content in machine-readable form, and label deepfakes and certain public-interest or emotion-recognition uses before Article 50 obligations apply on 2 August 2026.
The governor's action plan sets guardrails intended to keep data-center infrastructure costs off residential ratepayers, protect grid reliability and water resources, expand clean energy, and secure jobs and community benefits. It calls on lawmakers to codify the protections; six major technology companies separately signed a voluntary pledge supporting the framework.
Pennsylvania would require the labor and economic-development departments to study and report on artificial intelligence's effects on the workforce. The bill is an information-gathering measure intended to guide later workforce policy rather than impose immediate restrictions on employers or AI systems.
The FARM AI Act would expand access to artificial intelligence through Department of Agriculture programs, supporting agricultural research and modernization. It promotes public-sector AI adoption and research without creating new restrictions on AI systems.
Executive Order 62 pauses pending and new discretionary state environmental permits for data centers of 50 MW or more while regulators complete a statewide environmental review, for up to one year. It also directs work on ratepayer protections, grid investment, water safeguards, and a community investment framework; completed applications and local permits are not covered by the pause.
The FAIR Data Act would amend federal utility law to prohibit certain electric utilities from recovering data-center-related costs from other customers. It is a ratepayer-protection and cost-allocation measure aimed at making large computing loads pay for the infrastructure they require.
This bill gives Pennsylvania municipalities the option to temporarily pause accepting or reviewing new permit applications for large data centers. It allows local governments to hit the brakes on data center development while they figure out appropriate zoning rules.
This bill regulates how utility companies can share customer data with municipalities for emergency planning purposes, establishing disclosure rules and likely privacy protections. It addresses data governance in a critical infrastructure context without directly restricting AI or data-center operations.
This Pennsylvania bill updates the state's computer data center equipment incentive program, modifying rules around tax refunds and exemptions for data center equipment purchases. It adjusts eligibility requirements and administrative procedures to make it easier for data centers to qualify for sales and use tax benefits.
Pennsylvania restricts tax credits for data center equipment and establishes new gubernatorial certification standards for responsible infrastructure development. The bill adds environmental and local accountability requirements to data center incentive programs previously available without such oversight.
This California bill restricts how insurance companies can collect and use consumer driving data, such as data gathered from vehicle telematics or apps. It aims to protect drivers' personal data from being used in ways they haven't consented to.
This bill requires electric utilities in New Jersey to create special rate rules for large data centers so that ordinary customers don't end up paying higher electricity bills because of the data centers' heavy power use. It places regulatory obligations on utilities to financially separate data center costs from those of regular residential and commercial customers.
This bill would create a California commission dedicated to developing safety standards for artificial intelligence systems. The commission would establish rules and oversight requirements that AI developers and deployers would need to follow.
This California bill regulates how employers can use workplace surveillance tools to monitor employees. It sets rules and restrictions on automated monitoring technologies used in employment settings.
This bill requires data centers in California to report on their energy use, water consumption, and environmental impact. It aims to give the state better visibility into how much resources data centers consume as the industry rapidly expands.
This California bill requires data centers to report their water usage and directs water agencies to account for data center water demand in their planning. It aims to address the significant water consumption of data centers as part of broader water resource management.
This bill updates Delaware law to regulate large energy-consuming facilities, likely including data centers, by imposing new requirements around their connection to and impact on the electric grid. It could require environmental or utility review before such facilities can begin large-scale energy consumption.
This bill amends Delaware criminal law to establish court order requirements and procedural safeguards for reverse location searches and reverse keyword searches conducted by law enforcement. It addresses transparency and judicial oversight of these surveillance techniques used in criminal investigations.
Michigan SB1047 requires utilities to establish a separate rate class for large-load customers, potentially allowing data centers and other industrial users preferential electricity pricing. This creates a regulatory framework that could incentivize data-center development by offering cost advantages through customized utility rates.
Delaware enacts a moratorium on new data center development, preventing construction of data centers during the moratorium period. The measure gives the state time to conduct environmental and infrastructure review before allowing future data center projects.
This bill amends Delaware's existing pilot program for using artificial intelligence and extended reality technologies in schools. It appears to refine or update the program's rules without imposing outright bans or restrictions.
Michigan requires data centers to submit acoustic engineering reports before receiving building permits, establishing noise standards as a condition for construction approval. This represents a regulatory requirement that gives local authorities control over data center siting through mandatory environmental review.
This bill prohibits public employees and officials from signing nondisclosure agreements related to data center construction projects, requiring greater transparency in government dealings with data center developers. The measure aims to ensure the public and local communities have access to information about data center siting decisions and impacts.
This bill requires certain data centers to enter into community benefit agreements, giving local communities a voice in negotiating terms and offsetting impacts from large data center development. It creates a new regulatory framework to ensure data centers provide community benefits in exchange for siting approval.
This bill sets rules for how companies that collect and sell personal data must handle sensitive information about people. It places significant restrictions on data brokers and collectors in New Jersey, requiring them to follow new standards for gathering and sharing that data.
This bill sets rules for how businesses that collect and sell personal data must handle sensitive information about consumers. It places significant restrictions on data brokers and collectors, requiring them to follow specific guidelines about what data they can gather and share.
This bill requires data center owners and operators in New Jersey to report their water and energy usage to the Board of Public Utilities twice a year. It creates mandatory transparency and oversight around how much power and water data centers consume.
This bill requires data center owners and operators in New Jersey to report their water and energy usage to the Board of Public Utilities twice a year. It creates a mandatory reporting obligation aimed at tracking the environmental and infrastructure footprint of data centers in the state.
New Jersey would require electric utilities to create separate rate structures for large industrial customers (like data centers) to prevent those heavy users from causing rate increases for residential and small business customers. This represents regulatory action to manage the cost impacts of major power consumers on the broader customer base.
This bill requires online service providers to implement age-appropriate design standards and privacy protections for minors, including restrictions on data collection and algorithmic recommendations targeting children. The law imposes mandatory safety measures on platforms serving users under 18 to mitigate harms from tracking, manipulation, and addictive design practices.
Pennsylvania would pause new data center proposals under its municipalities planning code, giving localities time to develop appropriate zoning and siting standards. This prevents data center construction until communities can establish their own regulatory frameworks.
This bill requires the Director of the Office of Science and Technology Policy to establish a federal prize competition program to advance artificial intelligence development. The program would use incentive-based competitions to spur AI innovation and research aligned with national priorities.
This bill amends Pennsylvania's professional licensing law to add definitions and provisions related to artificial intelligence use in licensed professions. The legislation appears to establish a framework for how AI can be deployed in state-regulated occupations, though the specific requirements and enforcement mechanisms are not detailed in the title alone.
This bill regulates companies that collect and sell personal data, placing rules on how sensitive information can be gathered and shared. It aims to protect consumers by limiting what data brokers can do with people's private information.
This Pennsylvania bill replaces the existing Computer Data Center Equipment Incentive Program with new general provisions governing data centers. It likely restructures or updates tax incentives and rules related to data center development in the state.
Pennsylvania legislation that repeals the prior Computer Data Center Equipment Incentive Program and replaces it with new tax provisions for data centers, including a prohibition on taxing gross receipts from electric energy sales to data centers. The bill provides tax credits and exemptions designed to attract and support data center development in the state.
This bill directs the National Institute of Standards and Technology to create best practices for how data centers measure and report their energy use. It also calls for a study on improving energy demand forecasting to better understand and plan for the growing electricity needs of data centers.
This bill updates federal AI law to support building diverse, cross-disciplinary teams focused on developing AI systems that are safe and trustworthy. It aims to grow the workforce needed to responsibly advance AI technology.
This bill directs NIST to establish a voluntary program for reporting AI flaws and improving detection and monitoring of those defects. It promotes AI safety and transparency through a non-mandatory reporting framework rather than hard restrictions.
This bill directs the National Science Foundation to fund education programs and professional development initiatives focused on artificial intelligence. It aims to expand AI literacy and workforce training across the country.
This bill establishes a new center on artificial intelligence within the National AI Initiative to advance US research, development, and evaluation of AI systems. The legislation aims to support continued American leadership in AI innovation through coordinated federal research efforts.
This bill establishes a new article in California's Public Utilities Code to create rate structures specifically for data centers. The measure directs regulatory review of how data center energy consumption is priced within the state's utility system.
This bill adds consumer protections against 'surveillance-based pricing discrimination,' which is when companies use personal data collected about individuals to charge them different prices. It restricts businesses from using personal surveillance data to set individualized prices without consumer consent or disclosure.
This Pennsylvania bill creates a 'Responsible Infrastructure Development' certification program for data centers and adds new standards and duties that data centers must meet to qualify for state tax incentives. It also establishes rules that could block certain data centers from receiving tax benefits if they fail to meet certification requirements.
This bill would halt all new data center construction in the US until Congress passes laws protecting the public from AI risks. It is essentially a freeze on new AI infrastructure until broader AI safety legislation is in place.
This bill requires the Small Business Administration to report on how it uses artificial intelligence and machine learning in its operations. It is an exploratory measure focused on transparency and accountability, without imposing restrictions or bans.
This bill examines how AI systems and chatbots affect older adults and directs study or oversight of those effects. It appears to be exploratory legislation focused on understanding AI risks to seniors rather than imposing immediate restrictions.
This Delaware bill amends state law governing how and where data centers can be built, likely adding new siting rules, zoning requirements, or oversight processes. It touches county, municipal, and state-level authority over data center development.
This bill prohibits employers from using electronic monitoring or automated decision-making tools in hiring, scheduling, and performance evaluation unless specific exceptions apply. It establishes guardrails on workplace AI and surveillance technology to protect employee privacy and fairness.
This bill bans companies from selling personal data belonging to children. It aims to protect minors' privacy by preventing their information from being bought and sold without consent.
This bill establishes safety requirements for social media platforms and AI systems, with focus on protecting children and ensuring algorithmic accountability. It imposes mandatory safeguards and transparency measures for AI-driven content moderation and recommendation systems.
This bill amends Delaware's Load Forecast Accountability Act to strengthen oversight of electricity demand projections. The changes likely enhance utilities' responsibility for accurately forecasting power needs, which is relevant to planning for large energy consumers like data centers.
This bill restricts the use of artificial intelligence in Medicaid and commercial insurance decision-making, likely requiring transparency and oversight of algorithmic insurance determinations. It aims to prevent biased or opaque AI systems from denying or limiting patient coverage.
This bill regulates how insurance companies use modeling and data organizations to make decisions, likely requiring oversight or transparency in how data-driven models are applied. It aims to ensure accountability in insurance processes that rely on automated or algorithmic tools.
This Rhode Island bill creates rules governing how artificial intelligence can be used in mental health care treatments. It establishes oversight requirements and regulations to ensure AI tools used in behavioral health settings meet certain standards.
This Rhode Island bill creates rules governing how artificial intelligence can be used in mental health care treatments. It establishes oversight requirements to ensure AI tools used in mental health settings meet regulatory standards before being applied to patients.
This bill requires AI companion apps to include safety features that detect and respond to users expressing suicidal thoughts, intentions to harm others, or financial harm, and mandates that users be notified that the AI does not have real human emotions. It imposes significant safety and disclosure obligations on companies offering AI companion technology.
This bill requires AI companion apps to include safety features that detect and respond to users expressing suicidal thoughts, potential harm to themselves or others, or financial harm. It also mandates that these apps clearly disclose to users that the AI does not have real human emotions.
Healthcare providers must inform patients when artificial intelligence is used to record or memorialize their medical visits. This establishes a transparency requirement for AI use in clinical settings.
Healthcare providers must notify patients when AI is used to record or document their medical visits. This requirement ensures patients know about AI involvement in their care and creates transparency around how their health information is processed.
This bill requires Arizona state agencies to establish rules governing how they use artificial intelligence in their operations. It sets oversight and accountability standards for government AI use to ensure transparency and safety.
This bill requires Arizona public schools to offer or make available a course on artificial intelligence to students. The legislation aims to increase AI literacy and awareness among K-12 students.
New Jersey establishes comprehensive statewide rules for siting and approving large data centers, requiring review of energy sourcing, water consumption, and environmental impacts. The framework gives the state and local authorities oversight to manage data center development and protect natural resources.
This bill requires warehouse employers in Rhode Island to give workers a written description of any work quotas and the consequences for not meeting them at the time of hiring. It aims to increase transparency around automated or algorithmically-driven productivity standards used in warehouse settings.
This bill requires warehouse employers to give workers a written explanation of any performance quotas and the consequences for not meeting them at the time of hiring. It aims to protect warehouse workers from being penalized by opaque productivity tracking systems without prior notice.
Illinois requires data center operators seeking tax exemptions to negotiate community benefit agreements with host communities, including annual payments of at least 10% of foregone property taxes, with half directed to homestead property tax relief. This adds regulatory conditions to existing data center incentive programs.
This bill updates Delaware's personal data privacy law to strengthen protections for consumers over how their data is collected and used. It places new requirements or restrictions on businesses that handle personal data.
This bill creates a new criminal offense for impersonating someone under false pretenses, including through AI-generated or synthetic means, and gives victims the right to sue for damages. It targets deceptive identity fraud that can be carried out using deepfakes or voice clones.
Arizona public schools and universities must adopt policies governing the use of artificial intelligence in educational settings, including requirements for transparency and oversight of AI systems used in instruction and student services.
This bill would protect local governments' power to control where data centers can be built in their communities, preventing federal override of local zoning decisions. It also requires data center developers to enter into community benefit agreements before receiving any federal tax incentives.
This Ohio bill creates a Data Center Study Commission to examine the impacts of data centers on the state, while also enacting new provisions related to water use, energy, siting, and tax incentives for data centers. It appears to be a broad regulatory and review package addressing multiple aspects of data center development.
Ohio's Right to Compute Act limits additional regulation of computational systems while requiring risk management policies specifically for AI controlling critical infrastructure. The bill takes a deregulatory approach to computational systems generally while establishing baseline safety requirements for high-risk AI applications.
This bill directs the EPA to study the environmental effects of AI data centers and their energy use, and creates a reporting system so companies must disclose those environmental impacts. It also establishes an expert group through NIST to examine these issues but does not impose any bans or restrictions.
This Louisiana bill makes it illegal to create or share AI-generated images of real people without their consent. It establishes criminal penalties for those who use artificial intelligence to produce unauthorized or harmful depictions of individuals.
This bill bans the use of AI to generate child sexual abuse material. Violations are subject to criminal prohibition under Louisiana law.
This bill regulates the use of artificial intelligence in political campaigns, likely addressing synthetic media and deepfakes in electoral contexts. The legislation aims to establish rules around AI-generated content used for political purposes.
This bill requires health insurance companies to be transparent and accountable when they use AI to make decisions about coverage and claims. It aims to ensure patients and regulators can understand and challenge AI-driven insurance decisions.
This bill directs the EPA to study the environmental effects of AI data centers and their energy infrastructure, and establishes a reporting system for those impacts. It also creates an industry consortium through NIST to examine these environmental concerns, but stops short of imposing any restrictions or mandates.
This bill sets rules for how the Department of Defense develops and uses AI and autonomous weapon systems, requiring review and verification processes before deployment. It establishes a formal policy to responsibly maximize the use of AI and autonomy in defense applications.
This bill aims to protect utility customers from bearing the costs of large energy consumers, such as data centers, connecting to the electrical grid. It likely places restrictions or requirements on how utilities recover costs associated with serving high-demand customers like AI data centers.
This bill requires news media outlets to disclose when content is created or significantly altered using generative AI, establishing transparency requirements for AI-generated news material. The law aims to inform the public about which news stories are produced with AI assistance.
This bill requires news media outlets to disclose when content is created or significantly altered using generative AI, establishing transparency rules to help readers identify AI-generated journalism. The law aims to combat misinformation and maintain journalistic integrity by making AI involvement in news production visible to the public.
Rhode Island proposes a comprehensive framework regulating how employers use artificial intelligence in workplace decisions and practices. The law would establish standards to balance employer interests with employee protections against algorithmic bias and unfair treatment.
This bill exempts certain equipment purchased by internet and communications service providers from sales tax, but explicitly prohibits data centers from claiming or using these tax exemptions and refunds. It creates a targeted restriction that treats data centers differently from other service providers for tax purposes.
This bill directs the Department of Defense to run a pilot program testing commercial space-based data centers and cloud computing services for national security and military missions. It is an exploratory initiative to evaluate whether orbital data center technology can meet government needs, without imposing mandates or restrictions.
This bill requires the Department of Defense to study how artificial intelligence affects military personnel's combat effectiveness, skill retention, and operational readiness. The assessment will help determine best practices for integrating AI into military operations while maintaining soldier capabilities.
Michigan SB 1018 creates a moratorium prohibiting approvals and operation of new data centers in the state. The bill is tied to SB 1019, suggesting comprehensive data-center restrictions paired with additional regulatory measures.
New Jersey establishes a comprehensive statewide framework governing where large data centers can be built, requiring reviews of their energy sourcing, water consumption, and environmental impacts. The law creates enforceable rules around siting and land use approval to manage the resource demands and local effects of data center development.
New Jersey requires the Department of Environmental Protection to study how large-scale data centers affect water resources both immediately and over time. This exploratory measure seeks to understand the environmental impact of data center water consumption without imposing restrictions.
This bill pauses all new data center permits in New York for one year while establishing new rules for energy efficiency, utility billing, community benefits, and construction labor standards. It aims to slow data center growth until stronger oversight and community protections are in place.
This bill pauses all new data center construction permits in New York for one year while establishing new rules for energy efficiency, utility rates, community benefits, and worker protections for data centers. It aims to slow rapid data center growth while setting long-term standards for how these facilities operate and impact local communities.
This New York bill would require companies that build generative AI systems to publicly disclose information about the data used to train those systems on their websites. Developers would need to provide at least a high-level summary of the datasets used, increasing transparency around how AI models are built.
This New York bill would require companies that build generative AI models to publicly disclose information about the data used to train those models on their websites. Developers would need to provide a high-level summary of their training datasets, increasing transparency around how AI systems are built.
New York requires large employers to annually report on their use of AI in hiring decisions and its employment impact, with the state labor department aggregating findings and imposing penalties for non-compliance. This establishes mandatory disclosure and oversight of algorithmic hiring practices.
New York would require businesses to annually report on their use of AI in hiring decisions and the impact on employment, with the state labor department publishing aggregate findings and penalties for non-compliance. This creates mandatory disclosure and oversight of algorithmic hiring practices.
Pennsylvania would impose a statewide moratorium on hyperscale data center development and permitting. The moratorium prevents new hyperscale data center projects from being approved or constructed across the state.
This Pennsylvania bill repeals the existing tax incentive program for computer data center equipment, eliminating a benefit that had encouraged data center investment in the state. Tax revenue previously associated with data center equipment sales would be redirected to a new restricted account in the Motor License Fund.
This bill places restrictions on how artificial intelligence can be used in psychotherapy services in Colorado. It aims to protect patients by limiting or regulating AI's role in mental health care settings.
This bill asks Louisiana's Legislative Youth Advisory Council to study and discuss how artificial intelligence might affect young people in the state. It is an exploratory request without binding regulatory requirements.
This Ohio bill would end the practice of granting new sales tax exemptions to data centers, removing a common financial incentive used to attract these facilities. It targets the tax break program specifically, meaning future data centers would no longer qualify for this type of public subsidy.
European Commission proposal to accelerate energy-efficient data-center development, expand cloud and AI computing capacity, and create a framework for trusted EU cloud services and strategic digital sovereignty.
This bill directs Colorado to examine and establish guidelines for how artificial intelligence is used in healthcare settings. It focuses on transparency and oversight of AI systems that affect patient care and medical decisions.
This bill prohibits the use of intimate personal data and algorithmic inferences to determine wages, prices, or other financial terms affecting individuals. It restricts employers and businesses from using surveillance data and AI systems to set compensation or consumer prices based on personal information.
This bill directs Connecticut's economic development agency to create a plan for an AI small business support program. It is aimed at helping small businesses access and benefit from artificial intelligence tools and resources.
This bill sets up rules for how information can be shared within Louisiana's LA FIRST system, which appears to be a state data integration and research initiative. It focuses on data sharing protocols rather than imposing restrictions or incentives.
Healthcare providers must obtain explicit patient consent before recording any medical visit. This protects patient privacy in healthcare settings where AI and automated systems may increasingly be used to document or analyze patient interactions.
This bill requires New York data centers to annually report their energy consumption and bans them from receiving financial incentives tied to fossil fuel energy contracts with utilities. It aims to push data centers toward cleaner energy sources by removing economic benefits for fossil fuel use.
This bill would create a comprehensive data privacy law in Illinois giving consumers rights to access, correct, delete, and opt out of the sale of their personal data held by large businesses. It also includes protections against automated profiling decisions and would be enforced by the Attorney General.
This Illinois bill requires companies that handle personal health data to clearly disclose their privacy practices, get consent before collecting or selling health information, and give individuals the right to delete their data or withdraw consent. It also bans discriminatory practices against people who refuse to share their health data and prohibits geofencing around health facilities.
This bill would require data centers in New York to report their annual energy consumption and prohibit them from receiving incentives tied to fossil fuel power agreements with utilities. It aims to reduce the environmental impact of data centers by pushing them away from fossil fuel energy sources.
This bill sets rules for companies that operate conversational AI services, likely requiring disclosures, safety measures, and data protections. It places significant regulatory obligations on AI chatbot and virtual assistant providers operating in Colorado.
This Louisiana law bans the creation or use of AI-generated fake images or videos (deepfakes) targeting K-12 students. It establishes enforceable protections specifically for minors in schools against synthetic media abuse.
This bill requires political campaigns to disclose when artificial intelligence is used to create or assist in telephone communications. Voters must be informed when AI-generated content is used in campaign calls.
This Vermont bill sets environmental and sustainability requirements for data centers, likely covering energy efficiency, water use, and grid impact standards. It aims to ensure that new data center development meets sustainability benchmarks before or during deployment.
This bill sets rules for how artificial intelligence can be used when providing mental health services in Vermont. It likely includes requirements around transparency, oversight, and safety to protect patients receiving AI-assisted mental health care.
This Louisiana bill sets rules for health insurance companies that use AI or automated systems to make decisions, such as approving or denying coverage. It aims to ensure these systems are used responsibly and transparently when affecting patients' health coverage.
This Connecticut bill creates a sweeping AI regulatory framework, including a new AI Policy Office, workforce training programs, disclosure requirements for AI providers, and rules restricting discriminatory use of automated employment decisions. It also requires synthetic digital content to be detectable and establishes safe harbor programs for companies that comply with AI standards.
This Connecticut bill strengthens consumer privacy protections by regulating data brokers, restricting the use of facial recognition technology, prohibiting the sale of precise location data, and requiring businesses to disclose when they use algorithms to set personalized prices. It also expands worker rights by removing exemptions that previously allowed employers to use automated systems for employment decisions without the same privacy rules that apply to other data uses.
Ohio law would require AI-generated images to include watermarks and impose criminal prohibitions on simulated child sexual abuse material and identity fraud using AI replicas of real people. The bill targets both the creation and distribution of these synthetic media forms.
Ohio SB328 establishes an Education and Workforce Return on Investment Initiative requiring middle school career exploration coursework and student career/academic planning, with potential implications for how AI tools might be integrated into career guidance and workforce development systems. The bill creates a framework for tracking educational outcomes tied to workforce preparation but does not directly regulate or restrict AI use in schools.
This bill allows Pennsylvania municipalities to impose optional moratoriums on filing or consideration of new applications for high-impact data centers. The measure gives local governments discretionary power to temporarily pause data center development in their jurisdictions.
This Pennsylvania bill repeals the existing tax incentive program for computer data center equipment, removing special tax breaks that data centers currently receive on equipment purchases. The tax revenue previously exempted would instead be redirected to a restricted account in the Motor License Fund.
This bill expands Pennsylvania's tax incentive programs for computer data center equipment, making it easier for data center operators to qualify for sales and use tax refunds and exemptions. The changes aim to attract data center investment to the state through reduced tax burdens on equipment purchases.
Tennessee requires its advisory commission on intergovernmental relations to study potential regulation of artificial intelligence systems and generative AI chatbots. This exploratory work does not impose immediate restrictions but establishes a foundation for future policy development.
Tennessee requires its advisory commission on intergovernmental relations to study how the state should regulate artificial intelligence systems and generative AI chatbots. This is an exploratory effort to inform future regulatory policy rather than imposing immediate restrictions.
Tennessee requires its research commission to study artificial intelligence and report findings to state leadership by January 2027. This exploratory mandate establishes a fact-finding process without imposing immediate restrictions or requirements.
Tennessee requires a comprehensive study of artificial intelligence across multiple state code sections, with findings and recommendations due to state leadership by January 2027. The study will inform future AI policy and governance frameworks for the state.
Tennessee requires the state education department to provide free professional development training on classroom AI use for middle and high school teachers, with completion mandated by August 2028 or within two years of licensure. The bill supports educator competency in AI tools rather than restricting their use.
Tennessee requires the state education department to offer free professional development courses on classroom AI use for middle and high school teachers, with mandatory completion by August 2028 or within two years of licensure. The bill promotes educator readiness for AI integration in schools.
This bill creates a statewide AI partnership within the University of Maryland system to coordinate AI initiatives among government, academia, and industry. It also establishes an AI fellowship program and an incubation lab to help state agencies adopt and develop artificial intelligence tools.
Maryland requires the Department of Education to develop guidance, guidelines, and best practices for AI use in K-12 schools and establish a collaborative to support local systems in evaluating and implementing AI tools responsibly. The bill mandates professional development and creates an online platform to help educators, parents, and students understand AI risks and applications in education.
Pennsylvania HB2534 establishes comprehensive transparency and accountability requirements for providers of generative AI systems and large online platforms, including disclosure duties and compliance standards backed by penalties. The bill aims to ensure AI systems are developed and deployed responsibly with meaningful oversight mechanisms.
This bill requires the Secretary of Energy to report to Congress on how much electricity and water data centers are consuming. It is a transparency and information-gathering measure, not an enforcement or restriction on data center operations.
This Illinois bill requires AI tool providers to embed provenance labels in any AI-generated images, video, or audio so that people can identify AI-created content. It also mandates that online platforms and device makers support these labels, with civil penalties for non-compliance.
This Illinois bill would give residents the right to access, correct, and delete their personal data held by large businesses and data brokers, and requires data brokers to register with the state and offer consumers a way to delete their information. The Attorney General would enforce the law and can impose civil penalties on violators.
This bill creates a comprehensive consumer data privacy law in Illinois, giving residents the right to access, correct, and understand how their personal data is used by businesses that collect large amounts of it. Companies that process data on 100,000 or more Illinois consumers, or that earn significant revenue from selling personal data, would be required to protect that data and notify consumers of breaches.
This Illinois bill requires companies handling personal health data to clearly disclose their privacy practices, get explicit consent before collecting or selling health information, and give individuals the right to delete their data or withdraw consent. It also bans discriminatory treatment of people who refuse to share their health data and prohibits geofencing around health facilities to track individuals.
Illinois creates a comprehensive consumer data privacy law granting residents rights to access, correct, and delete their personal data, and to opt out of targeted advertising and data sales. The law applies to large companies processing data of at least 100,000 Illinois consumers and is enforced by the state Attorney General.
Illinois establishes consumer rights to access, correct, and delete personal data, opt out of targeted advertising and data sales, and obtain profiling information from businesses processing data on 100,000+ Illinois residents. The Attorney General enforces these rights and administers a Consumer Privacy Fund.
Illinois prohibits insurers and employers from using genetic testing and neurotechnology data in underwriting and employment decisions, with limited exceptions, and establishes strict privacy, consent, and security requirements for entities collecting such data. The law takes effect January 1, 2027.
Illinois requires companies that collect children's data to conduct and maintain data protection impact assessments and follow child-centered privacy practices. The law empowers the state Attorney General to enforce these requirements and creates a dedicated enforcement fund.
Illinois establishes comprehensive rules for automated license plate recognition systems, including data retention limits, prohibited uses, transparency requirements, and a private right of action for violations. The law regulates law enforcement and other entities' use of this surveillance technology with privacy protections and reporting obligations.
Illinois requires new and existing data centers to disclose their water stewardship strategies as a condition of qualifying for state incentives and mandates annual reporting on these strategies. This establishes environmental accountability measures for data center operations that use significant water resources.
This bill blocks data centers from receiving cheap state power allocations and tightens rules on tax subsidies, requiring companies to repay financial aid if they don't maintain promised job levels within five years. It also mandates state environmental agency oversight for large energy-consuming projects and any development near Native American tribal lands.
The FARM AI Act expands USDA programs to increase agricultural sector access to artificial intelligence tools and research. The bill promotes AI adoption in farming through federal department support and educational initiatives.
This bill addresses how New Hampshire state agencies use information technology and artificial intelligence systems. It likely establishes guidelines, oversight, or reporting requirements for government AI use.
This bill bans data centers from receiving state economic development power subsidies and caps other financial incentives, requiring repayment if job levels aren't sustained. It also mandates strict environmental review led by the state conservation department for large energy users and for projects near Native American tribal territories.
This Pennsylvania bill establishes a comprehensive regulatory framework for commercial data centers, requiring them to use clean firm energy, meet disclosure and backup generation standards, and comply with curtailment rules overseen by the Public Utility Commission. It also creates special accounts to direct energy-related funding toward low-income home energy assistance and state energy independence.
This bill would create a pilot program allowing Michigan state departments and agencies to test and use artificial intelligence tools. It establishes a framework for the state government to explore AI adoption in a controlled way.
This bill establishes protections for people's neurological data and mental privacy, and sets rules for how AI can be used in health and human services. It places significant restrictions on the collection and use of brain and cognitive data, and requires oversight of AI systems making health-related decisions.
This bill prohibits commercial websites and online services from selling sensitive personal data. It creates enforceable restrictions on how personal information can be monetized online.
This bill requires very large data centers in New York to offset their high electricity consumption by paying into programs that help households switch to electric appliances and heating. It places a financial obligation on data centers tied directly to their grid demand.
This Tennessee law prohibits cities and electric utilities from covering the costs of electrical infrastructure needed to connect data centers to the grid, meaning data centers must pay for those upgrades themselves. It shifts financial responsibility away from ratepayers and local governments toward the data center operators.
Tennessee prohibits municipalities and electric utilities from absorbing the costs of electrical infrastructure needed to serve data centers, shifting infrastructure costs to the data center operators themselves. This removes a potential barrier to data center development by clarifying cost responsibility.
This Alaska bill addresses rules around data center operations and how utility services are provided to them. It likely sets out requirements or frameworks for how data centers connect to and are billed for electricity and other utility services.
This bill removes the sales and use tax exemption that data centers in Minnesota currently enjoy, making it more expensive to build and operate data centers in the state. It also repeals a related provision that would have reduced special education funding.
This Missouri bill establishes new rules governing where and how data centers can be built in the state. It likely introduces siting requirements, zoning standards, or review processes that data center developers must follow before construction.
This bill sets rules for how warehouse distribution centers can use automated systems to set work quotas and monitor employee performance. It likely requires employers to disclose how these systems work and gives workers protections against unfair automated productivity standards.
This Missouri bill establishes environmental accountability requirements for AI data centers, likely including reporting or standards related to energy use, water consumption, and carbon emissions. It aims to hold data center operators responsible for their environmental impact on local communities and the power grid.
This bill requires data centers to reduce their use of potable water and increase reliance on recycled or reclaimed water sources, integrating water management practices into New York's environmental framework. It establishes a stewardship fund to support sustainable water practices and watershed protection at data center facilities.
This bill requires all federal agencies to adopt and implement NIST's AI Risk Management Framework when deploying artificial intelligence systems. It establishes a government-wide standard for identifying, assessing, and mitigating AI risks in federal operations.
This bill strengthens California's data broker rules by requiring brokers to provide an accessible way for consumers to delete their personal information. It updates existing privacy law to make it easier for people to exercise their data deletion rights.
This bill prohibits using images of children to train AI systems that generate child sexual abuse material. The law takes effect August 1, 2026.
This bill addresses how New Hampshire municipalities can regulate where data centers are built through local zoning rules. It gives local governments a role in controlling data center placement within their communities.
This bill addresses the use of AI systems to perform tasks that normally require a professional license, such as legal, medical, or financial services. It likely establishes rules or restrictions to ensure AI-provided services meet professional standards and protect consumers.
This bill bans government agencies and private companies from selling sensitive personal data to data brokers or other private entities for profit. Sales are only allowed for specific permitted purposes, creating a broad restriction on the commercial trade of personal information.
This Oklahoma bill requires the development of guidance on how artificial intelligence and emerging technologies should be used in schools. It establishes a framework for responsible AI use in educational settings without imposing strict bans or penalties.
This bill amends Pennsylvania's municipal planning code to establish zoning rules, approval procedures, and minimum standards for commercial data centers, including protections for agricultural land. It gives local municipalities authority to regulate data center siting through comprehensive planning and zoning requirements.
This Pennsylvania bill requires commercial data centers to publicly disclose their energy use, water use, and noise pollution levels, with oversight from state environmental and legal agencies. Data centers that fail to comply face civil penalties.
This bill creates statutory provisions governing how state and local government agencies can use electronic devices, likely including restrictions on AI-powered tools or surveillance capabilities in public sector operations. The measure appears exploratory in establishing oversight frameworks rather than implementing hard prohibitions.
Hawaii is requesting a study to examine how large data centers would affect the state's electricity grid, utility costs, natural resources, and climate commitments. The working group will assess potential impacts before any regulatory decisions are made.
This bill halts the issuance of new permits for data centers in New York and requires regulators to take action to prevent data centers from driving up electricity and gas rates for residents and businesses. It also ensures these rules apply to the Long Island Power Authority.
This bill would pause all new data center construction permits in New York while requiring utility regulators to take steps to protect residents and businesses from higher electricity and gas bills caused by data centers. It also extends these rules to cover the Long Island Power Authority.
The bill requires AI chatbots to verify user age and make specific disclosures to protect minors. This establishes mandatory safety guardrails for conversational AI systems.
This bill establishes accountability measures for large data centers that place heavy demands on the electrical grid in Colorado. It likely requires data centers to report energy usage, demonstrate grid impact planning, and meet transparency or efficiency standards.
This Oklahoma bill creates ratepayer protections aimed at preventing regular utility customers from bearing the cost burden of energy use by large data centers. It establishes rules through the Corporation Commission to ensure data centers pay their fair share of grid and energy costs.
This bill would require the federal government to develop a strategy for protecting data centers from cyberattacks and external security threats. It also aims to protect nearby communities from the risks associated with data center operations.
This bill gives local governments control over zoning and land-use decisions for large data centers, restricts their ability to obtain water permits under certain conditions, and requires an independent study on the impacts of large-scale data center construction and operation. It also sets minimum utility service requirements for data centers connecting to the power grid.
This bill requires social media platforms to provide users with accessible account deletion mechanisms and permanently erase associated personal data, while prohibiting deceptive practices that obstruct deletion. The Attorney General is empowered to enforce compliance through civil actions and penalties starting July 2027.
This Colorado bill sets rules for how data centers can be built and powered, requiring them to support clean energy and grid modernization while protecting consumers and the environment. It creates a formal framework balancing data center growth with utility infrastructure needs and environmental safeguards.
This bill offers property, tangible, and sales tax breaks to attract data centers to Rhode Island. It is designed to encourage companies to build or locate data center facilities in the state by reducing their tax burden.
This bill regulates how Colorado law enforcement agencies can use surveillance technologies, with the goal of protecting citizens' rights. It likely imposes requirements around transparency, oversight, and limitations on how surveillance tools can be deployed by police.
This bill regulates how automated license plate reader systems collect, use, and retain data in Connecticut. It focuses on government accountability and sets rules around law enforcement's use of this surveillance technology.
This bill creates a task force to study how artificial intelligence is affecting skilled trades workers. It also directs the Commissioner of Public Health to look into expanding certified nursing assistant training programs.
This bill updates definitions and modifies exemptions that apply to data centers, likely related to tax or regulatory treatment. It appears to maintain or adjust favorable provisions for the data center industry in Minnesota.
This South Carolina bill creates a comprehensive regulatory framework for data centers, requiring siting permits, environmental and infrastructure impact assessments, water and energy efficiency standards, and noise/vibration mitigation measures before a data center can be built or operate. It also establishes a new Data Center Development Office and an industry advisory committee to oversee permitting and compliance.
South Carolina proposes restrictions on chatbot activities and creates civil remedies for violations, requiring chatbots to disclose their nature and limiting their use in certain contexts. The law aims to protect consumers from deceptive AI interactions and unauthorized data collection by automated systems.
South Carolina requires health insurers using AI for prior authorization decisions to consider specific circumstances, disclose their use of AI to enrollees, and face penalties for violations. This establishes mandatory oversight and transparency requirements for automated insurance decisions affecting patient care.
This Georgia bill prohibits health insurance companies from using artificial intelligence alone to make coverage decisions about healthcare services. Human review must be part of any such decision, ensuring AI cannot solely determine whether a patient's care is covered.
This bill establishes rules to protect healthcare data in Louisiana, setting requirements for how health information can be collected, stored, and used. It aims to give patients stronger privacy protections over their sensitive medical information.
Minnesota establishes a moratorium on new data center construction while requiring the Public Utility Commission to study grid capacity impacts and submit findings. This pauses data center development pending completion of an infrastructure assessment.
This bill requires health insurance carriers to maintain detailed records of utilization review decisions and mandates specific documentation requirements when artificial intelligence is used in those decisions. The legislation aims to increase transparency and accountability in how AI systems influence insurance coverage determinations.
This bill establishes a task force to study the use of AI in North Carolina's education system and develop standards for its implementation. The task force will explore opportunities and risks associated with AI in schools without imposing immediate restrictions.
This bill addresses healthcare cost reduction and patient protection, likely including provisions related to how healthcare providers use algorithms and AI in medical decisions and patient data handling. Without the full text, the specific AI governance mechanisms cannot be fully assessed.
This bill modifies existing rules around data centers in North Carolina, likely adjusting requirements or incentives related to their construction and operation. It appears to support data center development by updating the regulatory framework governing these facilities.
North Carolina's omnibus AI protections bill establishes comprehensive regulatory requirements for artificial intelligence systems, including transparency and accountability measures. The legislation addresses algorithmic decision-making, safety standards, and protections for consumers and children.
This bill addresses the use of artificial intelligence in environmental permitting processes in North Carolina. It establishes requirements for transparency and oversight of AI systems used to make or inform environmental permitting decisions.
Iowa establishes mandatory requirements and guidelines for conversational AI services with civil penalties for non-compliance, effective July 2027. The law creates enforceable standards for how AI chatbots and similar systems must operate and disclose their capabilities.
This bill adds data center water use regulations to Pennsylvania's state water planning framework, requiring covered data centers to comply with water resource rules. It establishes new oversight and likely reporting or permitting requirements for how data centers consume water.
This Arkansas resolution authorizes a bill that would change the rules for cryptocurrency mining businesses and adjust how much power local governments have to regulate them. It touches on zoning and community impact issues similar to data center siting policy.
This bill authorizes the introduction of legislation to change the rules governing cryptocurrency mining businesses and adjust how much authority local governments have over them. It deals with siting and operational requirements for digital asset mining operations, which are similar to data centers in their infrastructure and community impact.
This Arkansas Senate Resolution authorizes the introduction of a bill to amend the state's existing Data Centers Act of 2023 and the Uniform Money Services Act. It is a procedural step to allow changes to data center policy, but does not itself impose new rules or restrictions.
This bill authorizes the introduction of legislation to update Arkansas's existing Data Centers Act of 2023 and the Uniform Money Services Act. It is a procedural step to allow amendments to data center and financial services rules rather than enacting direct policy changes itself.
This resolution authorizes introduction of legislation to regulate how blockchain networks and digital asset mining operations impact water usage and electrical grid stability. It signals intent to create enforceable rules around resource consumption by these energy-intensive activities.
This resolution authorizes a future bill requiring digital asset mining operations (crypto/blockchain) to notify authorities before purchasing land or beginning construction. It establishes a notification requirement that enables local oversight of mining facility siting decisions.
This bill would require digital asset mining businesses (which consume significant energy for cryptocurrency operations) to notify authorities before purchasing, leasing, or constructing facilities, giving communities advance warning and potential review authority over such projects.
Florida law prohibits government entities from contracting with AI providers unless they meet specified requirements, and mandates parental consent for minors using chatbot platforms along with periodic user notifications. The bill restricts government AI procurement and establishes safeguards for minor users of AI systems.
Maine establishes a Data Center Coordination Council and imposes a temporary limitation on the development of certain data centers in the state. This creates a coordinated review process while restricting new data center construction during a specified period.
This Maine bill would regulate or ban children's access to AI chatbots that mimic human conversation and AI social companions. It aims to protect minors from potentially harmful interactions with human-like AI systems.
This bill creates the Michigan Kids Code Act, which establishes rules to protect children's privacy and safety online. It places restrictions on how internet services can collect data from and expose minors to potentially harmful content or algorithms.
Missouri HB2035 establishes rules governing artificially generated material, likely including requirements for disclosure and restrictions on non-consensual synthetic media. The bill creates enforceable standards for identifying and managing deepfakes and other AI-generated content.
This bill establishes safety and responsibility requirements for artificial intelligence systems used in North Carolina schools. It mandates transparency and oversight mechanisms to protect students and ensure appropriate use of AI technology in educational settings.
Oklahoma requires AI operators to disclose certain information and implement safeguards for minor users, with the state Attorney General empowered to enforce violations through civil penalties. The bill establishes baseline AI transparency and child protection standards for AI systems.
This bill establishes requirements and procedures for local governments to impose moratoriums on large-scale data centers and cryptocurrency mining facilities. It creates a new legal framework governing when and how municipalities can restrict or ban these operations.
This bill would repeal the existing tax exemption currently available to data centers in Minnesota. By removing this financial incentive, it makes building and operating data centers in the state more expensive.
This bill appears to establish protections for utility ratepayers and energy resources in North Carolina, likely addressing how large energy consumers like data centers affect electricity costs and grid stability. It would impose requirements or restrictions to ensure that regular customers are not burdened by the energy demands of large industrial users.
This North Carolina bill is a broad energy package aimed at keeping electricity costs affordable for residents and businesses. It likely addresses utility rates, grid management, and energy supply policies that would affect data centers and other large power consumers.
This federal bill aims to strengthen U.S. leadership in artificial intelligence by making various improvements to how AI is developed, overseen, and managed. It focuses on governance and safety measures to keep America competitive in the AI space.
This bill requires the federal government to report on how it uses artificial intelligence to access raw intelligence data collected under foreign surveillance law. It is a transparency and accountability measure focused on government AI practices in classified intelligence work.
Hawaii requests its State Energy Office to create a working group that studies how large data centers would affect the state's electricity grid, utility costs, natural resources, and climate targets. The bill does not impose restrictions but seeks to understand the potential impacts before policy decisions are made.
Missouri creates criminal and civil penalties for non-consensual disclosure of intimate digital images, including deepfakes and AI-generated intimate content. This protects individuals from harassment and privacy violations involving manipulated or fabricated intimate depictions.
This bill would require AI-generated audio and visual content to include disclosures identifying it as AI-made, and directs NIST to create technical standards for detecting and labeling generative AI content. It aims to protect consumers from being misled by AI-created media.
This bill requires companies planning to build AI-focused data centers to publicly disclose key information about their projects before construction begins. The goal is to ensure communities and regulators have transparency about the environmental and infrastructure impacts of these facilities ahead of time.
This bill prohibits releasing residential addresses of public school employees under freedom of information requests and creates a task force to study how mass automated requests—potentially generated by artificial intelligence—affect public records systems. The AI element is limited to studying the problem of AI-generated bulk requests rather than regulating AI itself.
This bill amends Delaware medical licensing law to address the use of nonhuman entities (including AI) in medical practice, establishing requirements around titles, credentials, and oversight of AI-assisted or AI-delivered medical services. The legislation aims to ensure transparency and regulatory control over how artificial intelligence is deployed in healthcare settings.
This bill restricts criminal justice agencies' access to personal data and likely requires transparency in how law enforcement obtains and uses resident information. It advances privacy protections against government surveillance and data sharing without clear consent.
This bill creates a new framework allowing Michigan municipalities to establish zoning overlay districts specifically for data centers, streamlining local land-use rules to facilitate data center development. The measure gives local governments clearer authority to designate and regulate data center siting through overlay zoning mechanisms.
This Pennsylvania bill updates the state's Computer Data Center Equipment Incentive Program, refining the rules around how data centers can apply for tax incentives, qualify for certification, and maintain compliance. It sets additional eligibility requirements and adjusts oversight procedures like notification and revocation of certification.
This bill helps Pennsylvania municipalities develop local ordinances related to data centers, providing guidance and assistance for local governments. It aims to support communities in establishing rules for data center development within their jurisdictions.
This bill requires data centers in Pennsylvania to submit annual reports on how much energy and water they use, with penalties for non-compliance. It increases transparency around data center resource consumption but does not impose caps or bans on usage.
Louisiana creates a new act focused on protecting the state's infrastructure from AI-related risks, effective January 1, 2027. The bill establishes a framework to assess and manage potential threats that artificial intelligence systems could pose to critical infrastructure.
Oklahoma establishes the AI Education Innovation Act to promote artificial intelligence education in schools, creating a revolving fund and advisory council to support AI curriculum development and implementation. The bill aims to expand AI literacy and workforce preparation for students.
This bill establishes safety requirements and restrictions for AI companion technologies that interact with minors, including civil penalties for violations. It aims to protect children from potential harms associated with AI-driven companion applications.
This resolution urges Alabama's governor and state agencies to recognize the potential value of spent nuclear fuel and pursue state actions to develop it. While not directly about data centers, it promotes nuclear energy development, which could support clean energy infrastructure for large electricity consumers like data centers.
This bill sets rules for how employers in Connecticut can use automated systems and AI when making decisions about workers, such as hiring, firing, or promotions. It requires transparency and establishes protections to ensure employees are treated fairly when AI is involved in workplace decisions.
This bill requires Alabama's Public Service Commission to review electricity contracts between utilities and large data centers before they take effect. The oversight is intended to ensure that deals with high-energy data centers don't unfairly shift costs or strain the grid for other customers.
This bill extends and modifies tax breaks for data processing centers in Alabama, limiting how long exemptions last while also pushing back the sunset date for the overall incentive program. It is designed to continue attracting data center investment to the state with some guardrails on the tax benefits.
This bill updates the industry classification codes (NAICS) used in Alabama's tax abatement and incentive programs to reflect current terminology. It ensures businesses, potentially including data centers and tech companies, can still qualify for tax breaks under updated industry definitions.
This bill sets rules for how health insurance companies can use AI when deciding whether to approve or deny coverage for patients. It aims to ensure AI-driven coverage decisions are fair, transparent, and subject to human oversight.
Illinois creates a comprehensive regulatory framework for automated license plate recognition systems used by law enforcement, establishing authorized uses, data retention limits, privacy protections, and penalties for misuse. The law includes a private right of action allowing individuals to sue for violations and requires transparency in how these systems collect and retain data.
This Nebraska bill requires data centers to submit annual electricity usage reports to the state Power Review Board and gives public power suppliers new authority to regulate data centers and cryptocurrency mining operations. It establishes mandatory oversight of the grid impact from large power consumers like data centers and crypto miners.
This bill would establish consumer protection rules for artificial intelligence systems used in Nebraska, likely requiring transparency and accountability from AI developers and deployers. It aims to protect residents from potential harms caused by AI-driven decisions affecting their lives.
This bill establishes legal protections for Nebraskans over their biometric data, such as fingerprints, facial scans, and other unique physical identifiers. It sets rules for how businesses can collect, store, and use this sensitive information, giving individuals rights over their own biometric data.
This Nebraska bill creates new rules for large electricity users like data centers and cryptocurrency mining operations, covering how they connect to the power grid, energy storage regulations, and related taxation. It also addresses eminent domain for energy storage projects and makes changes to how data centers and crypto miners are regulated and taxed.
This bill would create privacy protections for agricultural data and establish safety rules for conversational AI systems like chatbots. It sets requirements for how AI conversation tools must operate and how farming-related data can be collected and used.
This bill would establish safety requirements for conversational AI systems, such as chatbots, operating in Nebraska. It likely sets rules around disclosure, transparency, and protections—particularly for vulnerable users like children—when interacting with AI-powered conversation tools.
This Nebraska bill would establish rules requiring organizations to manage and be transparent about the risks posed by artificial intelligence systems. It also creates a fund related to AI oversight and adjusts what government records can be kept from the public.
This bill adopts the Saving Human Connection Act framework in Nebraska, likely establishing guidelines or study mechanisms around AI use in human interactions and communication. The bill appears exploratory rather than imposing hard restrictions.
This bill modifies Nebraska's health information technology infrastructure, including prior authorization processes and a designated health information exchange overseen by the Health Information Technology Board. While it touches on healthcare technology systems that may incorporate AI, it is primarily administrative and procedural rather than substantively regulating AI use in healthcare.
This bill updates Delaware labor law to add protections for warehouse workers, likely addressing automated work quotas or algorithmic management systems. It aims to regulate how technology-driven performance tracking affects workers in warehouse and distribution settings.
This Minnesota bill makes it easier for data centers to operate by adjusting water use rules, exempting their electricity sales from solar energy calculations, and allowing backup power generation. These changes reduce regulatory burdens on data centers and give them more flexibility around energy and water requirements.
Oklahoma establishes a Gas, Artificial Intelligence, and Space Research Hub and National Laboratory to promote economic development and research in these strategic sectors. The bill directs the Oklahoma Department of Commerce to oversee the initiative.
This Michigan bill would create a new law requiring large-scale data centers to take financial responsibility for their full life cycle, likely including decommissioning and site cleanup costs. It places significant obligations on data center operators to account for long-term impacts, which could restrict or complicate data center development in the state.
This Michigan bill ties existing sales tax exemptions for enterprise data centers to compliance with a new labor standards act governing data center construction. It ensures that data centers only receive tax breaks if they meet specific construction labor requirements.
This bill ties existing use tax exemptions for enterprise data centers to compliance with a new labor standards law for data center construction. It effectively conditions tax benefits on meeting construction labor requirements, linking economic incentives to workforce protections.
This Michigan bill modifies the requirements that enterprise data centers must meet to qualify for tax exemptions under state law. It likely adjusts eligibility criteria or thresholds to make it easier for data centers to access financial benefits.
This Michigan bill modifies the tax exemption rules for enterprise data centers under the state's use tax law, likely adjusting eligibility requirements or benefits. It is aimed at supporting data center development through tax policy.
Michigan would require enterprise data center construction projects to prioritize hiring local union labor. This establishes mandatory workforce requirements for data center development in the state.
Rhode Island proposes comprehensive regulations for AI use in employment, establishing a statutory framework that addresses algorithmic fairness and transparency in hiring, performance monitoring, and other workplace decisions. The bill aims to balance employer and employee interests in AI deployment.
This bill would require data centers, web search companies, and nuclear power facilities to make financial contributions to Iowa public universities in order to keep their existing sales and use tax exemptions. It ties continued tax benefits to education funding commitments.
This bill creates a statewide health data system in Kentucky that collects, shares, and manages health information across the state, governed by a board and a consortium of public health colleges. It sets rules for how health data is submitted, shared, and protected, with enforcement powers for noncompliance.
This Maine bill would remove data centers from existing business equipment tax exemptions and a state business incentive program, effectively ending preferential financial treatment for data centers. It also directs the state's economic development agency to study what financial incentives, if any, should apply to data centers in the future.
This bill allows Maryland's student and workforce data system to share data with third-party data centers for multistate reporting, subject to written agreements and compliance requirements. It raises data privacy considerations by permitting sensitive student data to flow to external organizations, with oversight through legislative reporting requirements.
This bill allows Maryland's student and workforce data system to share data with third-party data centers for multistate reporting, subject to compliance requirements and a written agreement. It raises privacy considerations by expanding access to sensitive student and workforce data beyond the state system.
This bill creates a new law in Michigan to protect the privacy of consumers' reproductive health data. It establishes rules restricting how companies can collect, use, and share personal information related to reproductive health.
This bill immediately halts all state and local government acceptance of data-center permits and applications until the legislature creates a comprehensive oversight and approval process. It effectively imposes a moratorium on new data-center development in South Carolina until formal regulatory procedures are established.
Maryland requires the Department of Education to develop guidance on artificial intelligence use in schools and mandates that local school systems designate AI coordinators to implement best practices. The law establishes frameworks for educator professional development and parent/student education about AI risks and responsible use.
This Minnesota bill modifies existing rules and requirements that govern how data centers are built and operated in the state. The changes could affect where data centers can be located, how they interact with local communities, and the economic conditions surrounding their development.
This bill prohibits companies from selling or offering to sell precise geolocation data about consumers under Virginia's consumer protection framework. It restricts a specific high-sensitivity data practice that could be used for tracking and surveillance purposes.
Virginia directs its Department of Energy to lead a work group effort to accelerate the beneficial reuse of waste heat from data centers, with findings and legislative recommendations due by September 2026. The bill supports energy efficiency and emissions reduction without imposing restrictions on data center operations.
This bill restricts Virginia state and local agencies from sharing personal information with the federal government except when required by law, court order, or explicit consent, and prohibits the sale of personal data with civil penalties for knowing violations. The measure aims to protect resident privacy by limiting government data dissemination practices.
This bill requires social work license applicants to submit fingerprints and personal identifying information for criminal background checks, with strict limits on how the resulting criminal history data can be shared among government agencies and prohibitions on sharing with private entities. The bill also directs the Department of State Police to review concerns about criminal history record dissemination practices.
Hawaii is requesting a study to understand how large data centers affect the state's electricity grid, utility costs, natural resources, and climate commitments. The working group will examine potential impacts before the state decides on future data-center policy.
This bill requires utilities to create separate waiting lists and special electricity rate categories specifically for data centers, aiming to prevent data centers from driving up electricity costs for other customers. It places new regulatory requirements on how data centers connect to and pay for power from the grid.
This Alabama bill extends and modifies tax abatement (exemption) programs for data processing centers, allowing them to avoid certain taxes on purchases for a limited period. It is designed to attract and support data center investment in the state.
Hawaii requests its State Energy Office to convene a working group to study how large data centers affect the state's electric grid, utility costs, natural resources, and climate commitments. The study will examine the infrastructure and environmental impacts before any policy decisions are made.
This resolution requests a study of industrial water use from Caddo Lake, which could inform policy on data-center cooling and other industrial water consumption in Louisiana. The study would provide baseline information for future regulatory decisions about water resource management.
This Minnesota bill sets new rules for data centers around water use permits and environmental review requirements. It also exempts data centers from having to contribute to an energy conservation fund, while adding oversight on large water appropriation projects.
Minnesota requires public hearings and mandatory disclosures before approving any data center development project. This gives local communities formal input and transparency into data center proposals that would otherwise proceed without public review.
Minnesota would regulate the use of artificial intelligence in psychotherapy services and establish civil penalties for violations. The bill restricts AI deployment in mental health care to ensure appropriate oversight and accountability.
This Missouri bill lets people sue if someone publishes AI-generated or AI-modified content without disclosing that AI was used to create or alter it. It creates a legal remedy for individuals harmed by undisclosed AI-generated content.
This bill regulates who can use automated license plate reader systems in South Carolina and sets rules for how law enforcement can use the data collected. It also allows the state Department of Transportation to permit certain government cameras on non-interstate highways.
This resolution urges Alabama's Governor and state agencies to recognize spent nuclear fuel as a valuable energy resource and pursue its development. While not directly about data centers, advanced nuclear energy could support future grid capacity for energy-intensive infrastructure.
Alabama expresses support for the Department of Energy's Nuclear Lifecycle Innovation program, which develops advanced nuclear technologies that could provide reliable clean energy sources for data centers and other infrastructure.
This bill establishes rules for how artificial intelligence can be used when providing mental health services in Maine. It puts guardrails around AI-driven mental health tools to protect patients and ensure appropriate oversight.
This bill requires Rhode Island's Department of Administration to catalog all state agencies using AI and creates a permanent 13-member commission to oversee and make policy recommendations about AI use in state government. It focuses on accountability and monitoring rather than imposing bans or restrictions.
This bill requires that AI-generated videos or photographs posted on public platforms must include a disclosure marking indicating they were created by artificial intelligence. The requirement aims to help the public identify synthetic media and reduce potential deception.
Virginia prohibits air permits for new data centers after July 1, 2026 unless their engine-generator sets meet strict Tier 4 emission limits. This regulation tightens environmental standards for data center backup power systems.
This bill directs Virginia's Joint Commission on Technology and Science to study whether a framework for independent organizations that verify AI models' safety and compliance with best practices is feasible. The commission must report its findings and recommendations to the legislature by November 2026.
Announced 7 April 2026 with Invest Ontario, Microsoft's expansion of its Azure Canada Central region includes two new York Region data centres as part of its $19 billion Canadian commitment. Projects will create ~1,000 construction and 250 permanent jobs, tied to a Community-First approach emphasising workforce training and digital sovereignty.
The RAISE Act establishes safety standards and mandatory disclosure requirements for artificial intelligence systems. The bill advances toward enforceable AI governance with transparency and safety obligations for developers and deployers.
This bill establishes provisions for artificial intelligence use in mental health contexts. The measure appears to set frameworks or guidelines for how AI systems can be deployed in mental health treatment and services.
This bill reorganizes responsibilities related to Oklahoma's State Data Center, transferring certain duties to the Legislative Service Bureau. It deals with government IT infrastructure management rather than AI or commercial data center policy.
This bill would require large data centers in Rhode Island to pay for the electrical infrastructure upgrades needed to support their power demands, rather than passing those costs to other ratepayers. It places a financial responsibility on data centers for grid improvements tied to their high electricity consumption.
This Tennessee bill creates a formal impact review process that data centers must go through before being built or expanded, evaluating effects on local infrastructure, utilities, and communities. It adds oversight requirements across multiple areas of state law governing municipalities, utilities, and environmental concerns.
This bill allows large energy consumers like data centers to generate their own electricity on-site, potentially through renewable sources, reducing reliance on the grid and giving them more control over their energy costs. The measure aims to facilitate private power generation for industrial and commercial facilities.
This bill requires companies that operate AI companion apps to clearly disclose to users that they are interacting with software, not a real person, and to have safety protocols in place to detect and prevent content that could encourage suicidal or self-harm thoughts. It also includes special protections for minors and requires annual public reporting on crisis referrals.
This Oregon bill creates a fast-track permitting program for economic development projects while specifically restricting data centers from using the state's enterprise zone tax incentive program. It also adjusts job-creation tax credits and requires state agencies to catalog available permits.
Oregon restricts law enforcement's use of automated license plate recognition (ALPR) systems to specific authorized purposes and limits data retention to 30 days unless needed for active investigations. The bill also allows private citizens to sue ALPR vendors for misuse or improper disclosure of collected data.
Virginia authorizes universities to access Department of Motor Vehicles data for surveys and marketing, requiring subject consent and limiting use to institution-related purposes. The bill imposes a $10,000 implementation fee per participating institution and takes effect January 1, 2027.
This bill authorizes Virginia colleges and universities to access Department of Motor Vehicles data for marketing and surveys, subject to consent requirements and a $10,000 implementation fee. The measure creates a new data-sharing pathway with safeguards but allows institutional use of sensitive driver information.
This Wisconsin bill imposes new fees on large energy customers like data centers, creates a special utility rate class for very large customers, establishes renewable energy tariff requirements, sets building standards for data centers, regulates their water usage, and requires prevailing wage pay rates on large-scale data center construction projects. It places significant new regulatory and financial obligations on data center operators in the state.
This Wisconsin bill establishes new fees for large energy customers, creates a special utility rate class for very large customers like data centers, requires renewable energy options, sets building standards for data centers, regulates their water usage, and mandates prevailing wage rates on large data center construction projects. It imposes a broad set of regulatory requirements on data centers covering energy, water, and labor standards.
This Connecticut bill establishes a framework for the responsible development and use of artificial intelligence, implementing the Governor's recommendations for AI oversight. It likely includes rules around transparency, safety, and accountability for AI systems used in the state.
This bill updates Idaho's tax exemptions for data center equipment and related capital investments, making it easier and cheaper to build and operate data centers in the state. It is a pro-industry measure designed to attract data center development through tax relief.
This bill sets limits on how much water data centers in Idaho can use for cooling purposes. It restricts the consumptive use of water by data centers, aiming to conserve water resources in the state.
This bill would regulate how artificial intelligence and software tools can be used to make healthcare decisions in Massachusetts. It likely establishes oversight requirements and transparency rules to ensure AI-driven medical decisions are safe and accountable.
This bill requires age verification systems for AI-powered companion chatbots to prevent minors from accessing them. It puts enforceable restrictions on who can use these AI companionship services.
This bill establishes oversight requirements to ensure therapy and psychotherapy services are delivered only by qualified, licensed, or certified professionals, which would restrict the use of unlicensed AI-based therapy tools or chatbots. The measure aims to protect consumers from unqualified mental health service providers.
Kentucky prohibits residents and entities from engaging in transactions with foreign enterprises that would result in foreign control of critical infrastructure, technology, or assets essential to the state's economic security, with the Kentucky Intelligence Fusion Center required to review and investigate such transactions. The state can block deals deemed to compromise Kentucky's economic or national security.
This Louisiana bill requires data centers to obtain permits and report their water usage to state authorities. It establishes oversight of how much water data centers consume, which can be substantial due to cooling systems.
This bill bans Louisiana government agencies from signing contracts with companies owned or controlled by foreign adversaries to provide AI technology. It is designed to protect state systems from potential foreign influence or security risks through AI tools.
Oklahoma HB3545 establishes prohibited and permitted uses of artificial intelligence by state agencies, with oversight responsibilities assigned to the Office of Management and Enterprise Services. The bill creates regulatory guardrails for government deployment of AI systems to ensure transparency and limit high-risk applications in public-sector decision-making.
This South Carolina bill sets new rules for commercial data centers, including requirements to report water usage, file decommissioning plans, and meet specific electric service terms. It also limits certain sales tax exemptions for data centers and adds public comment requirements for major energy infrastructure projects.
This bill would eliminate an existing tax exemption that data centers currently use when replacing equipment, making it more expensive to operate and upgrade data center facilities in Washington. Removing this tax break could discourage data center investment and expansion in the state.
Under Articles 16 and 24 of Italy's AI Law, the government must issue one or more legislative decrees by October 10, 2026, defining a comprehensive 'organic framework' for data, algorithms, and AI training methodologies including rights, civil remedies, and sanctions, as well as specifying enforcement and market-surveillance powers for ACN and AgID. These decrees will also introduce new criminal offenses related to AI misuse and update civil procedure rules for AI-related disputes, but must remain strictly within the boundaries of the EU AI Act.
A long-anticipated comprehensive overhaul of the Information Technology Act, 2000, the Digital India Act remains in pre-legislative consultation as of April 2026, with no draft tabled in Parliament. It is expected to introduce risk-based platform classifications, enhanced intermediary obligations, algorithmic transparency requirements, and specific provisions for AI-generated content and deepfakes, but MeitY has signaled it will leverage existing frameworks rather than rush a standalone AI law.
This resolution creates a Georgia Senate committee to study how artificial intelligence affects the state. The committee will examine AI's impacts and likely produce recommendations, but does not enact any restrictions or regulations on its own.
This Georgia bill requires performers to give consent before their likeness can be used to create a digital replica powered by AI. It establishes legal protections and allows performers to sue if their likeness is used without permission.
Georgia criminalizes the unauthorized use of generative AI to create images of individuals without their consent, including synthetic intimate imagery. The law establishes penalties for 'virtual peeping' and related offenses involving non-consensual AI-generated content.
This bill establishes safety requirements for conversational AI systems, likely including disclosure and transparency rules for chatbots and virtual assistants. It aims to protect users, potentially including minors, from harms associated with AI-driven conversations.
This Kentucky bill requires data centers to obtain electric service only through specially regulated contracts that protect other customers from bearing costs of new infrastructure built to serve data centers. It mandates impact studies, sets contract minimums, and requires data centers seeking tax exemptions to certify compliance with these new utility rules.
This Pennsylvania bill requires commercial data centers to meet clean energy standards, file contracts with state regulators, and follow rules on backup generation and grid management. It also creates special accounts to help low-income households with energy costs and funds energy independence efforts, with penalties for non-compliance.
This bill imposes a statewide moratorium on government approval of new data center permits, applications, and incentive packages until January 1, 2028. The moratorium applies to all state, county, municipal, and political subdivision entities.
Pursuant to the CRU's LEU decision, EirGrid and ESB Networks published their dedicated engagement and connection process for data-centre applicants by 31 March 2026, standardising how projects demonstrate dispatchable generation, storage, and SEM participation ahead of grid offers.
Adopted by the Council of Ministers on 31 March 2026, the draft creates the Commission for the Development and Safety of Artificial Intelligence (KRiBSI) as Poland's single national market-surveillance authority under the EU AI Act — a uniquely centralised model. KRiBSI's collegiate structure embeds competition, financial, broadcasting and telecoms regulators, and introduces binding individual opinions for upfront legal certainty.
KRiBSI is designed as a collegiate body including representatives of UOKiK (competition), KNF (financial supervision), KRRiT (broadcasting) and UKE (telecoms) — an explicit compromise to give Poland's single horizontal AI authority sectoral depth. The draft grants KRiBSI enforcement tools beyond the AI Act, including binding individual opinions, guidance and best-practice issuance.
This joint resolution supports Alaska's state energy development initiatives. The bill promotes energy development that could benefit data-center operations and broader economic growth in the state.
This bill grants consumers property rights over their biological samples and genetic test results from direct-to-consumer genetic testing companies, and imposes duties and limitations on how these companies handle genetic data. It establishes consumer control and restrictions on the use of genetic information by testing providers.
This bill establishes a set of consumer rights related to artificial intelligence, giving people protections around how AI systems can affect them. It likely includes requirements for transparency, fairness, and accountability when businesses use AI to make decisions about consumers.
Nebraska is conducting an interim study to examine existing AI legislation at state and federal levels and assess what regulatory action the state should take to address AI-related public safety risks. This exploratory effort will inform future policy decisions without imposing immediate restrictions.
This bill aims to shield South Dakota residents from higher utility bills and energy shortages driven by data center demand, while clarifying which authorities can regulate data centers. It establishes protective measures and oversight to limit the burden data centers place on the electrical grid and utility customers.
This bill would let South Dakota's Public Utilities Commission charge data centers the actual costs they impose on the electric grid, rather than standard utility rates. This targets data centers specifically, potentially making their energy costs higher to reflect their large power demands.
Tennessee requires political ads that use deepfakes to show a clear disclaimer, making violations a misdemeanor and allowing candidates to sue for damages. The law targets AI-generated content that falsely depicts candidates saying or doing things they never actually said or did.
Tennessee requires political advertisements containing deepfakes that falsely depict candidates to include a clear disclaimer, with violations punishable as a Class C misdemeanor and candidates able to seek damages. The law aims to prevent misleading synthetic media in political campaigns.
This bill creates statutory protections for pregnant individuals' personal health information, requiring authorization before disclosure and establishing penalties for data breaches involving pregnancy-related data. It aims to safeguard sensitive reproductive health information from unauthorized access and use.
Requires security assessments, content labeling, and licensed providers for public-facing generative AI services.
Establishes a UK AI Authority with cross-sectoral coordination duties and a statutory duty to consult on high-risk model evaluations.
This Georgia bill bans the distribution of computer-generated obscene material depicting children and adds enhanced criminal sentences for anyone who uses artificial intelligence to commit certain crimes. It updates the state's obscenity laws to specifically address AI-generated content targeting minors.
This Illinois bill bans the distribution of digitally manipulated or AI-generated media that falsely depicts a candidate within 90 days of an election, when done with intent to deceive voters or harm a candidate's reputation. Violators face penalties, with exceptions for satire and news reporting.
This bill makes it illegal to distribute AI-generated or digitally manipulated media that falsely depicts a candidate within 90 days of an election if the intent is to damage their reputation or deceive voters. Violations carry penalties, with exceptions for clearly labeled satire or other protected uses.
This bill would require businesses that collect or use personal data to limit that collection to what is necessary, implement data protection policies, and give individuals rights over their own data. It includes special protections for children and minors and establishes enforcement mechanisms for violations.
This Illinois bill creates a comprehensive consumer data privacy law giving residents the right to opt out of targeted advertising, data sales, and automated profiling that affects their lives. It establishes rules for businesses handling personal data and imposes civil penalties for violations, taking effect in 2027.
Illinois requires large data centers starting in 2027 to generate or purchase and retire renewable energy certificates equal to specified percentages of their in-state electricity consumption, with hourly matching requirements. The state will monitor covered facilities and enforce compliance through mandatory renewable energy retirement.
Illinois establishes procurement standards and strict operational rules for automatic license plate readers (ALPRs) used by law enforcement, requiring approval through state procurement, limiting use to criminal investigations and specific public safety scenarios, and mandating data purging within 21 days and comprehensive auditing and reporting. The bill advances regulation of biometric surveillance technology while allowing continued law enforcement deployment under defined constraints.
Requires PUE ≤ 1.2 for new data centers, 50% waste-heat reuse, and 100% renewable energy by 2027.
Provides tax incentives for data centers sited in regions with surplus renewable generation and grid capacity headroom.
This bill would halt all new data center construction nationwide until Congress passes laws protecting the public from AI-related risks. It is a direct moratorium tying physical infrastructure development to broader AI safety legislation.
This bill would require data center operators to report their energy and water usage to federal agencies (EPA, Department of Energy, Department of Agriculture) and state governments. It creates mandatory transparency around how much electricity and water large data centers consume, without outright banning or restricting operations.
This bill strengthens penalties for creating and sharing explicit synthetic media (deepfakes), treating such content as a criminal offense. It addresses both video voyeurism and non-consensual intimate imagery created using AI or digital manipulation techniques.
Idaho legislation establishing provisions for artificial intelligence use in medical services. The bill addresses regulatory framework and oversight for AI-driven healthcare applications.
Maryland prohibits AI developers from making false health claims or providing behavioral health care services without proper warnings, and requires consumer-facing AI products to include notices about their limitations. Violations are treated as unfair or deceptive trade practices under state consumer protection law.
Missouri proposes regulations governing artificially generated online content created with AI, including synthetic media like deepfakes. The bill establishes requirements for disclosure and control of AI-generated content.
This bill would end Ohio's practice of giving new data centers a sales tax exemption, meaning future data center projects would no longer receive this financial break. It targets the tax incentive specifically, making it more expensive to build new data centers in the state.
This bill would require data centers in Ohio to get approval from the state's Public Utility Commission before connecting to the electrical grid. It adds a regulatory review process to ensure large data center power demands don't negatively impact the grid or other utility customers.
This bill establishes rules governing how much water data centers can withdraw and consume in Ohio, adding oversight requirements to manage their impact on water resources. It amends existing water law to specifically address data center water use and sets up penalties for violations.
This bill requires data centers in Ohio to report their water usage on a monthly and annual basis to state authorities. It also prevents data centers from using nondisclosure agreements to hide water consumption information from local governments.
This bill creates rules to protect people's historical location data from excessive police access and surveillance. It limits how law enforcement can obtain and use location tracking information collected over time.
This bill modifies Utah's state-endorsed digital identity program, imposing requirements on how digital identities are created, verified, and managed. The amendments likely include governance and oversight provisions for identity verification systems that may involve AI or algorithmic decision-making.
Framework establishing high-impact AI categories, regulatory sandbox provisions, and a national AI safety institute.
Poland's national implementing law for the EU AI Act, establishing the Commission for AI Development and Security (KRiBSI) as the country's sole AI market surveillance authority housed within the Ministry of Digital Affairs. The law provides for regulatory sandboxes, binding individual compliance opinions for businesses, public lists of penalized AI systems, and a civic advisory council on AI.
This bill restricts the ability of lawsuits to slow down or block environmental permitting for data centers and their supporting infrastructure. It effectively fast-tracks the approval process by limiting legal challenges during environmental review.
Iowa proposes a licensure requirement for AI-augmented and autonomous service providers with associated penalties for non-compliance. This establishes a regulatory framework to govern AI systems used in commercial services.
This bill requires large data centers in Tennessee to register with the state and mandates that their fuel, electricity, and water suppliers report usage and rates to state authorities. The collected information would be compiled and published, creating a public transparency record of data center resource consumption.
This bill addresses workforce development programs in Utah, likely focusing on job training and employment opportunities. Without more specific details pointing to AI or data-center content, it appears to be a general workforce development measure.
Requires users to be informed when content is developed or modified by artificial intelligence. This disclosure requirement aims to increase transparency and help people identify AI-generated or AI-altered content.
This bill would remove existing tax breaks that Connecticut currently offers to data centers. Eliminating these incentives could discourage new data center construction and investment in the state.
This bill creates a licensing system for organizations that independently verify AI systems, sets up an advisory council to guide AI oversight, and requires regular reports on AI activity in Minnesota. It establishes a formal regulatory framework to ensure AI systems are reviewed and certified by authorized third parties.
This bill modifies existing rules and exemptions that apply specifically to data centers in Minnesota, likely adjusting tax breaks or regulatory requirements. It appears designed to make the state more attractive for data center investment and development.
This bill establishes a licensing framework for independent organizations that verify and audit artificial intelligence systems. The measure creates regulatory oversight requirements for third-party AI verification entities.
Minnesota establishes mandatory safety and disclosure requirements for artificial intelligence systems, with civil remedies available to those harmed by non-compliance. The bill advances toward creating enforceable AI accountability standards for developers and deployers.
This bill sets rules for how law enforcement can access and use historical location data, placing limits on police surveillance of people's movements. It aims to protect individuals from excessive tracking by requiring legal safeguards before location records can be obtained or used.
This bill requires data centers in Utah to report on their water usage, increasing transparency around how much water these facilities consume. It aims to give the public and regulators better visibility into the water demands of large data center operations.
This bill improves transparency and accountability in the prior authorization process used by health insurers to approve or deny medical treatments. It likely addresses how automated or AI-driven systems make these coverage decisions, requiring greater openness about how those decisions are reached.
This bill places a moratorium on data centers in Wisconsin, temporarily halting new construction or establishment of data center facilities. It creates a legal pause on data center development while the state presumably evaluates related concerns.
This bill places a moratorium on data centers in Wisconsin, temporarily halting their construction or establishment. It represents a direct prohibition on new data center development in the state.
This Wisconsin bill establishes the legal status of artificial intelligence systems, clarifying how AI fits into existing law. It creates a new statute defining the rights, responsibilities, and legal standing of AI, which could impose significant regulatory requirements on AI developers and users.
This bill establishes the legal status of artificial intelligence under Wisconsin law, defining how AI systems are recognized and treated legally. It likely sets boundaries on AI's rights, liabilities, or legal personhood to clarify accountability in AI-related matters.
This Wisconsin bill creates new rules and penalties around synthetic digital representations — AI-generated likenesses of real people. It establishes legal protections against the unauthorized creation or use of someone's digital replica and makes violations a punishable offense.
This Wisconsin bill creates new rules and penalties around synthetic digital representations, such as AI-generated images or audio that realistically depict real people without their consent. It amends existing privacy and crime laws to address the harms caused by these so-called deepfakes.
This bill bans Wisconsin state agencies and local governments from using facial recognition technology or any data it produces. It is an outright prohibition on government use of this surveillance tool.
This Wisconsin bill establishes new requirements for data centers, likely covering energy use, water consumption, and grid impact reporting or standards. It creates new statutory sections to regulate how data centers operate within the state's utility and environmental framework.
This Wisconsin bill creates new rules that data centers must follow, likely covering energy use, water consumption, and environmental reporting requirements. It places regulatory obligations on data centers operating in the state through utility and environmental statutes.
This bill bans the use of nondisclosure agreements that hide information about data centers from the public. It aims to ensure communities have access to details about data center projects that may affect them.
Wisconsin prohibits nondisclosure agreements that would conceal public information about data center projects from local communities. The law aims to increase transparency in data center siting and development discussions.
This bill allows data centers to access tax incremental financing districts in Wisconsin, providing tax incentives to attract and support qualified data center development and operations.
This bill allows qualified data centers to be included in tax incremental financing districts, which provide tax breaks and local development funds. It aims to incentivize data-center construction and investment in Wisconsin.
This bill modifies Wisconsin's sales and use tax exemption for qualified data centers, adjusting the conditions and scope of tax breaks available to data center operators. The changes are designed to make the tax incentive more accessible or attractive to encourage data center investment in the state.
This bill modifies Wisconsin's sales and use tax exemption for qualified data centers, adjusting the conditions and scope of the tax break to encourage data center investment and development in the state.
Wisconsin prohibits AI systems designed to simulate humanlike relationships with children, establishing penalties for violations. The law targets AI chatbots and similar systems that could manipulate or exploit minors through parasocial interactions.
Wisconsin prohibits AI systems designed to simulate romantic or intimate humanlike relationships with children, establishing penalties for violations. The law targets AI applications that could manipulate minors through simulated emotional connections.
Wisconsin proposes rules governing the use of AI and machine-assisted translation in court proceedings and criminal trials, including requirements around how these technologies are deployed and documented. The bill creates statutory frameworks for telephone and audiovisual interpretation alongside AI translation tools in judicial settings.
Wisconsin would establish new rules governing the use of AI-powered machine translation and remote interpretation services in court proceedings and criminal trials. The bill creates statutory requirements for when and how these technologies can be used in the judicial system.
This bill creates new statutory protections for pregnant individuals' personal health information, requiring authorization before disclosure and establishing penalties for data breaches involving such sensitive data. It strengthens privacy safeguards around reproductive health information.
Released on 23 March 2026 as part of the National AI Plan, these federal expectations set out five core requirements for new or expanded hyperscale and large-scale AI compute developments: alignment with national interest, support for the clean energy transition, responsible water use, investment in local jobs, and strengthening Australian innovation capacity. While not amending existing law, data centre proposals that do not align with the expectations will be deprioritised in Commonwealth regulatory assessments, giving the framework significant practical weight.
Mandates water consumption disclosure for data centers exceeding 5 MW under expanded environmental reporting authority.
Voluntary risk management framework for AI developers and deployers, aligned with international interoperability principles.
This federal bill aims to protect American households from the strain that large data centers place on the electric grid. It likely includes measures to address grid stability, energy costs, and related impacts caused by growing data center energy demand.
This resolution creates a Georgia House study committee to examine responsible use of artificial intelligence. The committee will study the issue and make recommendations, but does not impose any regulations or restrictions on its own.
This federal bill would create standards, evaluation tools, and metrics for artificial intelligence while supporting AI research and development. It aims to promote innovation and ensure businesses of all sizes can compete in the AI industry.
This bill creates new rules governing how generative AI tools can be used in Idaho's public schools. It sets standards and requirements that schools must follow when incorporating AI into education.
This bill addresses ownership rights for AI-generated outputs and trained AI models, establishing legal frameworks for who owns the results of AI systems and the models themselves. It appears to be exploratory legislation clarifying intellectual property and data rights in AI contexts without imposing strict prohibitions.
This bill addresses legal ownership rights for AI-generated outputs and trained AI models, establishing a framework for determining who owns intellectual property created by or through artificial intelligence systems. The legislation appears exploratory in nature, establishing rules around AI ownership without imposing broad restrictions or bans.
Maryland prohibits behavioral health care providers from using AI to directly deliver mental health care to patients, while allowing AI use only for administrative tasks with specific informed consent requirements. The law establishes a ban on AI-delivered behavioral health services to protect patient safety and privacy.
This Missouri bill establishes new rules and requirements governing how artificial intelligence systems are developed and used in the state. It likely includes transparency, accountability, or risk management obligations for AI developers or deployers.
Utah HB0450 amends existing data privacy law to clarify or expand consumer protections related to personal data collection and use. The bill advances Utah's data privacy framework through legislative modification without establishing a new comprehensive regime.
This bill requires Georgia state agencies to report their use of artificial intelligence to the Georgia Technology Authority each year. The Authority would also develop policies to guide how state agencies use AI.
Minnesota requires public hearings and mandated disclosures before approving new data center development projects. This increases local oversight and transparency in the data center siting process.
This bill prohibits the use of artificial intelligence in health insurance utilization review processes, which determine whether medical treatments are medically necessary and should be covered. The measure aims to ensure human oversight of healthcare decisions rather than relying on automated AI systems.
This bill requires disclosure to individuals when they are communicating with artificial intelligence systems. It establishes a transparency requirement aimed at ensuring people know when they are interacting with AI rather than humans.
This Tennessee bill establishes a formal review process for data center development, requiring impact assessments before construction can proceed. It covers a broad range of concerns including effects on local infrastructure, utilities, and communities.
This bill requires large data centers in Tennessee to register with the state and mandates that their fuel, electricity, and water suppliers report usage and rates to the government. The state would then compile and publish this information, creating a public transparency record of data center resource consumption.
Tennessee's Bring Your Own Generation Act allows data centers and large facilities to generate their own power on-site, reducing grid dependency and potentially enabling renewable energy adoption at data center locations.
This bill amends rules around technology use in Utah classrooms, likely setting restrictions or guidelines on how digital tools are used with students. It appears to address concerns about student safety and appropriate technology use in educational settings.
This bill requires the Alabama Public Service Commission to review electricity contracts between utilities and large power customers, such as data centers. It adds regulatory oversight to ensure these large-load agreements don't negatively affect other ratepayers or grid stability.
This bill requires Idaho to use artificial intelligence to review the state's administrative rules every year. It aims to make the rule-review process more efficient by automating analysis of existing regulations.
This bill modifies the existing sales and use tax exemption for data centers in Minnesota, likely adjusting eligibility requirements or benefits. It is designed to make Minnesota more attractive for data center investment by reducing tax burdens on qualifying facilities.
This bill amends Utah's privacy and cybersecurity laws, likely strengthening protections for personal data and imposing new requirements on how organizations collect, store, or use consumer information. It may include provisions affecting how AI systems handle or process personal data.
This bill makes changes to rules governing critical infrastructure, which may include data centers and related facilities in Utah. The amendments likely address siting, oversight, or operational standards for infrastructure deemed essential to the state.
This bill requires data center owners and operators in New Jersey to regularly report their water and energy usage to the Board of Public Utilities. It creates mandatory transparency and oversight around how much power and water data centers consume.
New Jersey requires the Department of Environmental Protection to study how large-scale data centers use and impact water resources, both immediately and over time. This is an exploratory mandate to understand environmental effects before setting policy.
The AI Implementation Act designating Dutch supervisors and sanction competencies under the EU AI Act is expected to be laid before the House of Representatives in Q4 2026. It operationalises the coordinating role of the AP and RDI and sectoral regulators under a single national framework.
This bill requires data centers in Florida to disclose detailed information about their operations (such as energy and water use) to the state environmental agency, which must then make that information public. It also blocks data centers from using tax credits or other protections to keep that disclosed information confidential.
This bill allows Florida insurance companies and HMOs to use AI to help process claims, but bans AI from being the sole decision-maker when denying or reducing a claim. A qualified human professional must make any final decision to deny or reduce a payment.
This Florida bill reforms eyewitness identification procedures, including placing limits on when police can use facial recognition technology during lineups and show-ups. It also sets new documentation, recording, and procedural requirements to improve the reliability of identifications used in criminal cases.
This bill updates Florida's eyewitness identification procedures, including rules for when facial recognition technology can be used to identify suspects. It restricts police from conducting a lineup after using facial recognition unless specific conditions are satisfied, adding oversight to how AI-assisted identification feeds into criminal investigations.
This bill reorganizes Florida's state technology management by moving IT oversight functions into a new division called DIGIT within the Governor's office. The new division would be responsible for setting technology standards, strategy, and governance across state agencies.
This bill allows companies planning to build data centers in Florida to keep their location plans and intentions secret from public records requests. It creates a confidentiality exemption to encourage businesses to choose Florida for new data center projects without fear of competitors learning their plans.
This bill restricts Florida government agencies from contracting with AI vendors unless specific requirements are met, and requires parental consent before minors can use companion chatbot platforms. It also mandates that chatbot operators periodically remind users they are interacting with a bot.
Florida would prohibit government contracts with AI vendors that don't meet transparency and safety standards, require parental consent for minors to use AI chatbots, and ban commercial use of AI-generated versions of people's faces or voices without permission. The law creates private lawsuits and penalties for violations.
Florida exempts from public disclosure certain Department of Legal Affairs investigations into companion chatbot violations and bot-related consumer protection violations, keeping investigation details confidential even after cases close. The law restricts transparency around how the state enforces AI chatbot regulations.
This bill establishes a study group to examine the use of artificial intelligence in Florida's higher education system and requires the group to submit findings and recommendations to state leadership. It is exploratory in nature without imposing new regulations or restrictions on AI use in colleges and universities.
Florida establishes a task force to study how artificial intelligence is used in public colleges and universities. The task force will examine AI's role in education and make recommendations for policy.
Florida prohibits the use of artificial intelligence in psychology, clinical social work, marriage and family therapy, and mental health counseling services, with limited exceptions. The bill defines what constitutes AI and aims to protect patients by requiring human practitioners in these mental health professions.
Florida prohibits the use of artificial intelligence in psychology, clinical social work, marriage and family therapy, and mental health counseling services. The bill treats AI-assisted mental health practice as incompatible with licensed professional standards in these fields.
This bill prohibits hiring managers from engaging in employment practices that discriminate based on protected characteristics and revises state personnel rules to enforce equal opportunity employment standards. While not AI-specific, it restricts algorithmic or discretionary hiring practices that could perpetuate discrimination in employment decisions.
This bill requires the Public Service Commission to oversee and enhance transparency in electric load forecasting submitted to PJM, the regional grid operator. While not data-center-specific, it addresses grid capacity planning that affects large energy consumers like data centers.
Ofgem consultation on new connection queue rules for sub-50 MW data center loads following grid congestion in West London.
Florida designates the Tampa Bay area as a CyberBay innovation region to advance cybersecurity and artificial intelligence development through coordinated public-private partnerships. The measure supports economic growth and digital infrastructure leadership in the state.
This Iowa bill requires data centers to report on their water and energy usage and sets up tariff rules related to those resources. It imposes new transparency and cost obligations on data center operators regarding their consumption of water and electricity.
This bill makes it easier for data centers in Minnesota by exempting their electricity purchases from sales tax and adjusting how their energy use is counted toward utilities' solar energy requirements. It also modifies the rules for how water usage requests from data centers are evaluated before approval.
This bill establishes provisions governing the use of artificial intelligence in mental health treatment and services. It appears to create a framework for oversight and transparency in how AI systems are deployed in mental health contexts.
Missouri HB2318 creates provisions governing the use of artificial intelligence in mental health services. The bill establishes rules and oversight for AI applications in mental health treatment and decision-making.
This bill establishes or modifies patient privacy protections in New Hampshire. Without the full text, the specific scope and enforcement mechanisms cannot be determined, but the bill addresses healthcare data privacy rights.
This bill creates new rules for large energy-consuming facilities, such as data centers, addressing how they connect to the power grid and their impact on energy rates and the environment. It likely imposes review requirements and conditions on these facilities before they can operate or expand.
This bill establishes a grant program to fund artificial intelligence research and development initiatives in Washington State. The program aims to support AI innovation and workforce development through direct financial support.
This Florida bill regulates large data centers by requiring transparency contracts, giving local governments control over land-use planning, mandating water efficiency studies, and prohibiting data centers from obtaining new freshwater permits while requiring them to use reclaimed water instead. It also directs the Public Service Commission to set minimum energy tariff requirements for large power customers like data centers.
Maryland establishes a School Mapping Data Program within the Department of State Police to oversee and provide technical assistance for creating school mapping data to support emergency response. The bill transfers program administration and funding authority to State Police while maintaining focus on school safety infrastructure.
This bill would require online platforms and apps to follow special design rules that protect children's privacy and safety when minors are likely users. It places restrictions on how companies can collect data from and design products aimed at children.
This bill would ban all new data center construction in New Hampshire while creating a committee to study the environmental effects of data centers. It combines an outright prohibition with a formal review of impacts like energy use, water consumption, and emissions.
This bill requires digital application platforms to obtain parental consent and implement age verification for minors using their services. It establishes enforceable rules around how platforms handle children's data and access.
This bill requires large data centers in Tennessee to register with the state public utilities commission and mandates that electric and water utilities report usage data and rates for those facilities. The commission would then compile and publish this information, creating a public record of how much energy and water data centers consume and what they pay.
Vermont prohibits the creation and distribution of synthetic media (deepfakes) depicting candidates or election-related content without clear disclosure, with specific protections against non-consensual intimate imagery. The law establishes penalties for violations and aims to preserve election integrity and protect individuals from deceptive manipulated content.
Mandates grid impact assessments and curtailment agreements for data centers exceeding 200 MW.
This government proposal moves data centers from the lower electricity tax Category II (0.05 cents/kWh) to the general Category I (2.24 cents/kWh), effective July 1, 2026, raising operating costs roughly 40-fold and generating ~€47 million annually in new revenue. To offset the impact, the government is developing a replacement incentive scheme targeting 'value-added' data centers, expected to enter force in autumn 2026, though its final form remains undecided.
This resolution establishes a study commission to examine the impacts of artificial intelligence on children's internet safety and educational environments. The commission will explore policy recommendations related to protecting minors from AI-related harms online.
This bill requires Florida's cybersecurity center to develop an experiential learning program in cybersecurity and report on its outcomes, contingent on legislative funding. It establishes educational initiatives without imposing restrictions on AI or data-center development.
Georgia proposes to repeal the sales and use tax exemption for data center equipment, eliminating a longstanding economic incentive for data center construction and operation in the state. Existing exemption certificates would remain valid, but new data center projects would lose this tax benefit.
This bill would ban new large data centers from being built or operated in any Kansas county that has experienced a drought emergency in the past three years. It is designed to protect water resources in drought-prone areas from the high water demands of large data center facilities.
This Kentucky bill requires data centers to complete a water feasibility study before opening and submit annual reports on their water usage to state regulators. It creates new oversight requirements aimed at understanding and managing the water demands of data center operations.
This bill requires large data centers in Rhode Island to pay for the electrical infrastructure upgrades needed to support their high power demands, rather than passing those costs to other ratepayers. It places a direct financial burden on data center operators for grid improvements their facilities require.
This bill creates property, tangible, and sales tax exemptions to attract data centers to Rhode Island. It offers financial incentives to encourage companies to build or locate qualified data centers in the state.
This bill requires social media companies to provide consumers with copies of their personal data in standardized formats and establish data interoperability interfaces to allow users to transfer information between platforms. It imposes civil penalties for non-compliance and aims to enhance consumer control over personal data and reduce platform lock-in effects.
This Tennessee bill bans the distribution of AI-generated fake depictions of candidates or political parties within 90 days of an election if the content is deceptively fraudulent. Violators face civil penalties, with some exceptions allowed.
Establishes works council co-determination rights over AI systems used in hiring, performance review, and dismissal decisions.
The Government of Aragón approved the Plan of General Interest ('PIGA') for Microsoft's three-campus data-centre complex spanning La Muela, Villamayor de Gállego and Zaragoza — 283.79 ha total, with first-phase construction of €582 million starting in 2026. The approval mirrors similar 2026 DIGA grants to Azora/Tillion and Blackstone's 8-DC programme (Q2 2026).
Indian entities are navigating the phased rollout of the Digital Personal Data Protection Act rules issued in 2025, with full applicability by 13 May 2027. Phase 1 obligations in 2026 cover breach notification, children's data, consent architecture and Significant Data Fiduciary designations — directly impacting AI training data pipelines.
This bill establishes a statewide education program focused on artificial intelligence to prepare students and educators. The program aims to promote AI literacy and workforce development across Arizona's schools.
Louisiana HB295 prohibits the development of AI systems with certain capabilities designed to interact with minors. The bill aims to protect children from potentially harmful or manipulative AI applications.
Louisiana HB230 requires disclosure when content is generated or significantly altered by artificial intelligence. The bill establishes transparency obligations for AI-created material, likely aiming to combat misinformation and deepfakes.
Louisiana HB157 creates a legal right for individuals to sue over misuse of artificial intelligence, establishing accountability mechanisms for harmful AI applications. This establishes enforceable standards around AI deployment without specifying particular restrictions or bans.
Louisiana HB197 addresses the use of artificial intelligence by healthcare providers, establishing a framework for how AI can be deployed in medical settings. The bill appears to focus on governance and oversight of AI applications in healthcare without imposing outright bans or strong restrictions.
This bill makes it unlawful to use artificial intelligence to make telephone calls, targeting AI-generated voice clones and synthetic audio used in communications. The legislation aims to prevent fraudulent or deceptive AI-generated calls.
Minnesota establishes a moratorium on new data center construction and requires the Public Utility Commission to study impacts on the grid and energy system. The moratorium prevents new data center development while the state evaluates whether existing infrastructure can handle the demand.
This Virginia bill would require social media platforms and AI model operators to build open interfaces that let users transfer their social connections and AI-related data to other services. It expands existing consumer data protection law to mandate interoperability, giving users more control over how their information is shared across platforms.
National plan directing eastern data center workloads to renewable-rich western provinces, with mandatory PUE caps in eastern hubs.
This Wyoming bill creates new crimes for using AI or synthetic media to generate sexual content involving children, promote self-harm, or suppress political speech. It establishes that using AI to commit a crime is not a valid legal defense, sets penalties, and provides some immunity for AI developers.
Georgia would classify generative AI systems as consumer products subject to product liability lawsuits when they cause injury to minors, establishing legal responsibility for manufacturers and sellers of AI systems. The bill creates rebuttable presumptions to ease plaintiffs' burden of proof in these liability cases.
This bill requires large electricity users, including data centers, to register with Maryland's Public Service Commission before connecting to the power grid and sets up a demand response program that can curtail their power use during grid stress. Data centers must meet certain conditions to qualify for existing tax exemptions under the new rules.
Oregon is establishing a state commission on artificial intelligence to monitor how AI is used across the state and report on long-term policy implications. The state will also hire an official to develop a strategic vision for privacy, data protection, and AI.
Oregon requires health insurers to notify healthcare providers when they use AI to downcode insurance claims and to provide an appeals process for automated downcoding decisions. This adds transparency and recourse requirements around automated healthcare reimbursement decisions.
Oregon requires local government bodies to report information security and ransomware incidents to the state within 48 hours and mandates creation of a secure reporting system and annual reporting on incidents. The bill establishes data collection and oversight mechanisms for public sector cybersecurity without imposing operational restrictions.
Oregon creates tax breaks and streamlined permitting for advanced manufacturing and semiconductor research, including zoning changes to allow high-tech industrial sites in rural areas. The legislation aims to accelerate permit processing and attract technology manufacturing investment to the state.
This bill updates cybersecurity requirements for Utah schools to better protect student data and school systems from digital threats. It establishes stronger security standards and protocols that schools must follow to safeguard sensitive information.
Utah establishes a regulatory sandbox that allows educational technology companies to test innovative products in schools with streamlined approval processes and regulatory relief. This program aims to foster EdTech innovation while maintaining student safety and data protections.
This bill modifies non-disclosure requirements for data center projects, likely increasing transparency around data center agreements and terms. The amendments appear designed to limit confidentiality barriers that can obscure public interest details about data center deals.
This bill amends Utah's data center regulations, likely modifying siting rules, zoning procedures, or development incentives for data center construction. The exact policy direction cannot be determined from the title and description alone, but amendments typically aim to streamline approval or expand development opportunities.
This bill directs the Department of Energy to study how data centers affect communities of color and low-income neighborhoods. It is an investigative measure with no direct regulations or restrictions on data center construction or operations.
This bill updates Alabama's tax abatement and incentive programs to use the latest industry classification codes, which can affect how data centers and tech facilities qualify for tax breaks. It is primarily a technical update ensuring existing incentive programs use current terminology.
This bill updates Idaho's tax exemptions for data center equipment and related capital investments, making it easier or more beneficial for data centers to operate in the state. It is a pro-industry measure aimed at attracting or retaining data center investment through tax relief.
This bill aims to reduce greenhouse gas emissions produced by artificial intelligence systems and data centers in Massachusetts. It would likely impose reporting requirements or efficiency standards on AI operations to address their environmental footprint.
New York would establish a Chief AI Officer position responsible for developing statewide AI policies and coordinating AI use across all state departments and agencies. This creates a governance framework to oversee and standardize how government entities deploy artificial intelligence tools.
Establishes a national framework for sovereign cloud certification and data center siting near low-carbon power sources.
This bill regulates the use of license plate readers by law enforcement, imposing privacy protections and restrictions on how data collected by these AI-driven surveillance systems can be stored, shared, and used. It establishes violations and penalties for misuse of license plate reader data.
This Indiana bill regulates health insurance claims processes, including a prohibition on using automated systems to submit health claims without human review by a provider. It also sets rules around payment assistance disclosure, downcoding, and overpayment recoupment timelines.
This Kansas bill restricts eligibility for a sales tax exemption to data centers built on land that was already zoned for industrial or manufacturing use (or unzoned) as of July 1, 2025. This effectively limits where data centers can be built to receive the tax break, steering them away from residential or commercial zones.
This bill sets rules requiring that artificial intelligence used in Idaho state government purchasing decisions be unbiased. It establishes standards to ensure AI tools don't discriminate when the state is buying goods or services.
This bill establishes a moratorium on approvals and operation of new data centers in Michigan. The measure creates a new legal framework to pause data center development, potentially giving the state time to study impacts before allowing future projects.
This Mississippi bill requires political ads that use AI-generated content to clearly disclose that fact to the public. Campaigns or individuals who fail to include the required disclosure face civil penalties, and the Attorney General can sue on behalf of affected parties.
This bill protects government agencies and businesses from lawsuits related to cybersecurity breaches if they have adopted recognized cybersecurity standards. It creates a legal presumption that entities following established cybersecurity frameworks are not liable when a security incident occurs.
This bill prohibits Oklahoma municipalities from entering into nondisclosure agreements that hide information from the public, with some exceptions. It promotes transparency in local government dealings, which can affect data center and economic development negotiations.
This bill requires health insurers in Rhode Island to be transparent and accountable when using AI systems to make decisions about coverage and claims. It aims to ensure patients and regulators can understand and challenge AI-driven insurance decisions.
This bill requires large data centers in Tennessee to register with the state utilities commission and mandates that electric and water utilities report the usage and rates associated with serving those data centers. The commission must then compile and publicly publish that information, increasing transparency around data center resource consumption.
This bill ties Virginia's existing sales tax exemption for data centers to new clean energy requirements, including phasing out carbon-emitting power sources and mandating a certain percentage of energy from clean resources by 2029. Data centers that don't meet these environmental and energy efficiency standards would lose access to the tax break.
Submitted to the Riksdag in March 2026, this proposition proposes authorizing Swedish police to deploy AI-driven real-time biometric identification in public spaces for serious crimes such as human trafficking and murder, making Sweden one of the first EU member states to explicitly legislate live biometric surveillance by law enforcement. The bill, referred to the Committee on Justice, is designed to operationalize the narrow EU AI Act exceptions for law enforcement while including legal safeguards for personal privacy.
Expected to lead to the launch of Singapore's Online Safety Commission in 2026, the Bill expands government powers to regulate AI-generated content on social media and messaging platforms, including new victim-relief mechanisms and accountability duties on platforms for synthetic harms.
This Kentucky bill requires data centers built on agricultural land to file a decommissioning plan and post a financial bond before operating, ensuring cleanup costs are covered if the facility closes. It also requires data centers receiving state tax incentives to work with local governments to regularly improve their energy and water efficiency practices.
This Kentucky bill prevents government agencies from signing secrecy agreements that hide information about data center projects beyond what state law already permits, and ensures the public can access details about data center impacts on utilities and local areas. It also protects local officials' right to publicly discuss data center effects and community proceedings.
From 2 August 2026, high-risk AI systems used in hiring, credit, law enforcement and critical infrastructure must comply with the EU AI Act's documentation, transparency, risk-management and human-oversight requirements. The Autoriteit Persoonsgegevens and RDI act as Dutch coordinating supervisors, with AFM and DNB covering financial services.
Mandatory reporting and efficiency standards for data centers above 500 kW, including PUE disclosure and waste-heat reuse requirements.
Indonesia's Presidential Regulation on AI Ethics — reported ~90% complete and awaiting President Prabowo's signature as of Q1 2026 — formalises the Stranas KA 2020–2045 as binding, introduces AI-content labelling, risk-tier safeguards and priority-sector obligations (health, education, food, mobility, public administration). Detailed enforcement will follow through sectoral regulations.
Companion Presidential Regulation elevating Indonesia's AI Roadmap (2020–2045) into binding national policy, setting priority sectors, workforce targets and sovereign-infrastructure ambitions. After publication, ministries must draft their own sectoral AI guidelines within an implementation window.
The Commission d'accès à l'information signalled in early 2026 that routine compliance audits under Law 25 §70 would increase, especially around AI-driven automated decision-making (§12.1, §14) and cross-border transfers outside Quebec (§17). Penalties reach C$10 million or 2% of worldwide turnover, with repeat offences up to C$25 million.
Announced February 27, 2026, the Québec government committed $36 million CAD to Mila – Quebec Artificial Intelligence Institute to strengthen its university excellence network, accelerate AI adoption in business, and attract global AI talent to the province. This investment reflects the provincial government's strategy to position Québec as an ethical and responsible AI leader globally, complementing Mila's concurrent $100M USD venture fund with Inovia Capital.
This bill requires Alabama state agencies to use artificial intelligence tools to review their own rules and regulations every three months. The goal is to use AI to help identify outdated or unnecessary regulations on a regular basis.
This Michigan bill would prohibit employers from using electronic monitoring or automated decision-making tools in the workplace except for specific allowed purposes. It creates new workplace protections against algorithmic surveillance and automated employment decisions.
This bill modifies Minnesota's existing data center provisions, though specific amendments are not detailed in the provided description. Without access to the full bill text, the exact regulatory impact cannot be determined.
This bill creates the Rhode Island Clean Air Preservation Act, establishing a framework for air quality protection that may apply to data-center operations and their emissions impacts. The legislation appears to focus on environmental review and emissions standards without specifying data-center restrictions.
This South Carolina bill would create a new law protecting consumers from discrimination caused by high-risk AI systems. It places obligations on businesses using AI to prevent biased or unfair outcomes that could harm consumers.
This bill promotes student access to information about media literacy and civic education in Washington schools. It focuses on helping students better understand and evaluate media, which can include digital and AI-generated content.
This bill requires Alabama state agencies to use artificial intelligence tools to review their own rules and regulations every three months. The goal is to use AI to help identify outdated or problematic regulations on a regular basis.
This bill prevents electric utilities from spreading the costs of serving large commercial data centers across all ratepayers, requiring those costs to be charged specifically to the data centers themselves. It aims to protect regular customers from higher electricity bills caused by the heavy power demands of data center operations.
This bill limits how New Hampshire state agencies can collect and share data about people with autism. It places restrictions on what autism-related information the government can gather and disclose.
This Ohio bill would ban public financial support for new data centers and place limits on their construction within the state. It represents a broad effort to restrict data center growth through both funding prohibitions and construction limitations.
This Ohio bill establishes minimum legal requirements that data centers must follow when handling customer data in the state. It creates a new chapter of law setting standards and obligations for how data center customers' information is managed and protected.
This bill establishes regulations for automated license plate readers used by law enforcement, requiring safeguards around data collection, retention, and access to protect privacy while allowing use of the technology.
This bill would use property tax revenue collected from data centers to fund a statewide homestead exemption, effectively reducing residential property taxes for homeowners. It ties homeowner tax relief directly to the tax burden placed on data centers operating in Georgia.
Iowa requires AI chatbot providers to implement safeguards protecting users' mental health and establish age-appropriate restrictions, with civil penalties for non-compliance. The law aims to prevent harm from AI systems that could affect vulnerable users, particularly minors.
This bill establishes requirements for chatbot deployers and includes specific protections for interactions with minors. It imposes operational and disclosure obligations on entities deploying chatbots.
This Kentucky bill restricts how licensed therapists and psychotherapists can use AI, prohibiting AI from assisting in sessions that are recorded and banning advertisements for therapy services not conducted by a licensed professional. It sets strict limits on AI involvement in mental health care and requires all patient records to remain confidential.
South Carolina would establish limitations and safeguards for AI use in public schools, including requirements for parental notice and consent, human and teacher oversight, and protections for student data. The bill defines key terms and provides enforcement mechanisms to ensure compliance.
This bill modifies South Dakota's reinvestment payment program to adjust tax incentives and purchasing rules for approved projects, likely including data-center developments. The changes appear designed to make the incentive program more attractive or flexible for qualifying projects.
This resolution expresses support for sustainable development practices in Alaska, likely promoting renewable energy and environmental stewardship that could benefit data-center operations seeking green energy alignment.
This bill establishes new rules in Idaho law governing how biometric identifiers — such as fingerprints, face scans, or iris scans — can be collected and used. It creates legal protections around the capture and use of this sensitive personal data.
This Iowa bill requires data centers to report on their water and energy usage and sets tariff requirements related to those resources. It aims to increase accountability for the significant resource demands that large data centers place on local infrastructure.
This bill adjusts the investment thresholds that data center businesses must meet to qualify for sales tax exemptions and refunds in Iowa. It is designed to encourage data center development by clarifying or modifying the financial requirements tied to these tax benefits.
This bill adjusts the investment thresholds that data center businesses must meet to qualify for sales tax exemptions and refunds in Iowa. It is designed to encourage data center investment by setting conditions for accessing existing tax benefits.
This bill addresses ownership rights and intellectual property questions around AI-generated outputs and trained AI models. The legislation appears exploratory in establishing legal frameworks for who owns AI-created content and trained systems.
This Kentucky bill sets rules for companies offering AI-powered mental health chatbots, requiring them to clearly disclose that users are interacting with AI, protect users' personal health information, and avoid misleading advertising. The Attorney General would have authority to enforce these requirements.
This bill requires health insurance carriers to provide human review of claim denials made by AI systems and to report data on AI-related grievances. It establishes accountability mechanisms for algorithmic decision-making in health insurance coverage determinations.
This bill bans Wyoming government agencies from using AI to assign 'social scores' to people or to identify individuals through biometric data and image collection. It places hard prohibitions on these government AI uses, with limited exceptions.
This bill requires Wyoming's state engineer to study consumptive water use and report findings. While not exclusively about data centers, it could capture water consumption from data center cooling operations.
Adopted by the Council of Ministers on 20 February 2026, Law Decree 21/2026 recognises data centres as strategic infrastructure and consolidates all permits (environmental, construction, grid-connection of any voltage) into a single authorisation under the Italian Environmental Code with a hard 10-month timeline (extendable by up to 3 months). Must be converted into law by 21 April 2026.
This bill prohibits companies from using nondisclosure agreements to hide the terms of data-center-related agreements, requiring transparency in public negotiations. The measure aims to increase public accountability in economic development deals involving data centers.
Article 16 of Italy's AI Law 132/2025 mandates one or more implementing decrees by October 2026 to define the organic framework for data, algorithms and AI-training methods — including rights, remedies and sanctions. Article 24 delegates government power to designate enforcement authorities (ACN as market-surveillance, AgID as notifying) and harmonise sectoral law with the EU AI Act.
Articles 11–12 of Law 132/2025, reinforced through early-2026 guidance, require employers using AI for workforce decisions to inform workers and trade unions, with fines up to €1,500 per employee plus monthly increases and additional penalties for failure to consult. The rules frontload compliance before EU AI Act high-risk employment-system deadlines in August 2026.
Notified on February 10, 2026 and effective February 20, 2026, these rules bring AI-generated 'synthetically generated information' (SGI) — including deepfakes, cloned audio, and fabricated documents — under formal intermediary due diligence obligations. Platforms must deploy automated detection tools, label all SGI with provenance metadata, and act within three hours of a government takedown order or face loss of safe-harbor protections under Section 79 of the IT Act.
Notified 10 February 2026 and in force from 20 February 2026, the IT Rules Amendment requires intermediaries to label Synthetically Generated Information (SGI), take down AI deepfakes within 3 hours (2 hours for non-consensual intimate imagery), and impose enhanced duties on Significant Social Media Intermediaries. Platforms lose safe-harbour immunity for failure to comply.
Hydro-Québec filed a new electricity-rate structure for data centres at the Régie de l'énergie setting ~13¢/kWh — roughly double current large-power tariffs — for facilities consuming more than 5 MW per year. The tariff is expected to take effect in the second half of 2026 and applies to all new data-centre customers, alongside continued ministerial authorisation under Bill 69.
This Georgia bill would require new data centers to operate as 'hybrid power data centers,' meaning they must use a combination of power sources, and would create a certification process through the Public Service Commission to enforce this requirement. The goal appears to be reducing the strain that large data centers place on the electrical grid by mandating diverse or partially renewable energy use.
Georgia creates a Property Tax Fairness Fund by directing tax collections from high-technology data centers into a dedicated fund, effectively establishing tax incentives and favorable treatment for data center operations. The bill repeals certain insurance premium tax credits while creating new mechanisms to support data center development.
Georgia requires state agencies to notify employees when artificial intelligence is used in personnel decisions and to issue disclaimers about AI use. This establishes transparency and accountability mechanisms for government use of AI in employment matters.
Maryland requires school board members to complete annual AI training programs covering technology fundamentals, educational best practices, and emerging guidance. The State Department of Education must develop or approve these programs, which can be delivered in person, online, or hybrid formats.
This bill establishes a 'Digital Choice Act' in New Hampshire, likely giving consumers rights over their personal data held by digital platforms. It would impose rules on how companies collect, use, and share user data online.
This bill addresses energy infrastructure planning, economic development incentives, and workforce training programs specifically for large-scale data centers in New Hampshire. It appears designed to support and attract data center investment by ensuring grid capacity and a trained workforce are available.
This bill establishes a framework for regulating artificial intelligence technologies in New Hampshire. It creates oversight mechanisms and requirements for transparency and safety in AI system deployment.
This bill would impose civil penalties on political campaign ads that use deepfakes to misrepresent candidates. It targets AI-generated or manipulated media used to deceive voters during elections.
This bill establishes regulatory requirements for the development, deployment, and use of high-risk AI systems in Washington State. It aims to ensure transparency, safety standards, and accountability measures for AI applications that pose significant risks to consumers and the public.
This bill requires electric utilities in Georgia to shield residential and retail customers from bearing the costs of building and running data centers. It mandates specific contract terms to ensure that data center operators — not everyday customers — pay for the grid infrastructure and energy demands they create.
Maryland requires AI toys to meet child safety standards, include prominent labeling, and prohibits manufacturers from using children's data for targeted marketing. The law imposes substantive restrictions on how AI toy makers collect, use, and disclose personal information from young users.
This bill establishes rules requiring data centers in South Carolina to operate responsibly and sustainably, ensuring they don't place undue costs or burdens on taxpayers or public resources. It likely includes environmental and energy use standards aimed at holding data centers accountable for their infrastructure impact.
This bill places a moratorium on new data center construction in South Dakota to limit the strain that large data centers put on the electrical grid and local energy costs. It aims to protect existing residents and businesses from bearing the financial and infrastructure risks associated with heavy data center electricity consumption.
This bill would temporarily halt all new construction or expansion of very large data centers in South Dakota for one year. The moratorium gives the state time to evaluate the impacts of hyperscale data centers before allowing further development.
This South Dakota bill aims to shield residents from higher utility bills and potential energy shortages caused by large data centers by clarifying the state's power to regulate them. It also updates rules around how data centers buy goods and services.
This bill updates the rules around how South Dakota government entities can purchase goods and services for data center operations. It appears to streamline or adjust procurement processes related to data centers, likely making it easier or more flexible to acquire data center resources.
This bill places limits on the nuisances that data centers can create, such as noise and other disturbances affecting nearby residents. It aims to regulate how data centers operate to reduce their negative impact on surrounding communities.
This bill updates utility regulations for large-use customers, which may affect data center energy arrangements and grid management. The provision likely addresses how utilities handle high-consumption industrial customers like data centers.
This bill requires health insurance companies in South Dakota to follow specific rules when using AI systems to make decisions about whether patients receive medical care. It aims to ensure AI-driven coverage determinations are fair, transparent, and properly overseen.
South Dakota requires businesses to notify consumers when they are interacting with chatbots or AI systems designed to simulate humans, preventing deceptive practices. The bill mandates clear disclosure to protect consumers from being misled about whether they are talking to a real person or an AI system.
Virginia requires data center operators to meet strict energy efficiency standards and renewable energy procurement targets to qualify for sales tax exemptions on equipment purchases. The bill ties tax benefits to measurable environmental performance, including power usage effectiveness limits and 90% carbon-free electricity by 2028.
Indiana prohibits certain foreign individuals and entities from acquiring real property in the state and requires contractors providing technological products or services to affirm they are not acting as agents of foreign adversaries. The bill also imposes restrictions on foreign student enrollment in qualifying programs at state educational institutions.
This Iowa bill would require high schools to include computer science and artificial intelligence in their curricula and graduation requirements. It also addresses how teachers are trained and prepared to teach these subjects.
Iowa modifies workforce development and education board duties to address cyber and artificial intelligence education. The bill establishes exploratory responsibilities without prescribing specific restrictions or mandates.
This bill modifies state education and workforce development agencies' duties to address cyber and artificial intelligence training and policy. It requires these agencies to develop frameworks and coordination around AI education and workforce preparation.
This bill establishes rules for managing data center development in West Virginia counties where the ground is dominated by karst geology — a type of limestone terrain with underground water systems, caves, and sinkholes. It appears to impose special oversight or restrictions on data centers built in these environmentally sensitive areas to protect water resources.
This bill restores local government authority over data-center siting decisions, preventing state-level preemption and allowing communities to maintain control over where data centers can be built. The measure shifts decision-making power back to counties and municipalities rather than state-level authorities.
This bill allows Maryland counties and Baltimore City to create a special lower property tax rate for equipment owned by qualifying data centers. It gives local governments flexibility to offer tax incentives to attract data center investment starting in the 2027 tax year.
From 2 August 2026, Polish public-sector deployers and entities providing essential private services using high-risk AI must complete a Fundamental Rights Impact Assessment prior to deployment under Article 27 of the EU AI Act. KRiBSI will supervise the obligation once operational.
MeitY's AI Governance Guidelines — finalised in early 2026 — formalise India's preferred approach of regulating AI through existing frameworks (DPDP Act, IT Act, IP law) rather than a standalone AI law. They align with the RBI AI-in-FS framework, CCI AI market study and DPIIT copyright-AI report to form a coherent cross-sector playbook.
This bill requires data centers in Maryland to meet sound, vibration, and backup power standards set by the state Department of the Environment, and bans construction of data centers on certain agricultural land. Applicants must also submit reports to local authorities under specified conditions.
This bill requires large data center owners to file detailed disclosure reports with state and local agencies, and mandates that larger local jurisdictions create official data center plans by 2027. It increases oversight and transparency around where and how data centers are built and operated in Maryland.
Maryland requires health insurers to have licensed healthcare professionals audit and evaluate AI tools used to make utilization review decisions, and to use those findings to revise how the tools perform. This ensures human oversight of automated insurance denial decisions that affect patient care.
This bill establishes requirements and accountability procedures for how software, including AI-powered tools, can be used by students in West Virginia public schools. It aims to protect student data and ensure transparency in educational software implementation.
This Wyoming bill bans government agencies from using biometric data (like facial recognition), geolocation data, and automatic license plate readers to identify people or vehicles. It also prohibits government entities from contracting with third-party vendors for these technologies and gives citizens the right to sue if the rules are violated.
This bill bans the use of another person's personal identifying features — such as their likeness, voice, or image — without their permission. It aims to protect individuals from unauthorized use of their identity, including in AI-generated or synthetic media contexts.
Maryland requires data centers to comply with large load customer rate schedule requirements and delays the submission deadline for electric company rate schedules from September 2026 to January 2027. This adds regulatory oversight of data center electricity pricing and grid management.
This bill would require disclosure when artificial intelligence is used, likely in consumer-facing or automated decision-making contexts. It aims to ensure people know when AI is involved in processes that affect them.
This bill sets rules about how warehouse workers can be evaluated and held to performance quotas, likely targeting automated or algorithm-driven productivity tracking systems. It aims to protect warehouse employees from unfair or unsafe work standards set by automated management tools.
This bill creates a directory of hyperscale data centers in Oklahoma, requiring them to register with the Corporation Commission and share information with electrical utilities and water providers. It is primarily a tracking and transparency measure to help utilities plan for the large energy and water demands of these facilities.
This bill sets rules on how AI chatbots can be used by minors, likely requiring age verification or parental consent. It aims to protect children from potential harms associated with interacting with AI-powered chat systems.
The Autoriteit Persoonsgegevens confirmed the Netherlands' EU AI Act regulatory sandbox will become operational by 2 August 2026, providing supervised test environments for high-risk and GPAI systems with legal-certainty benefits for SMEs and public-sector developers.
This bill requires data centers to meet certain conditions to ensure that residential electricity customers are not forced to pay higher rates due to data center energy demands. It prioritizes protecting everyday ratepayers from bearing the cost burden of large-scale data center power consumption.
This bill establishes oversight of artificial intelligence businesses and grants the Arizona Attorney General authority to investigate AI-related matters. It creates a framework for monitoring and regulating AI development and deployment in the state.
This Kentucky bill gives consumers rights over their personal data held by social media companies and AI systems, and requires those companies to allow users to move their data to other platforms. The Attorney General would have the authority to enforce these rules and impose civil penalties on companies that don't comply.
Virginia limits a tax exemption for data-center computer equipment to pre-operation purchases and energy-efficiency upgrades, effectively narrowing but preserving tax incentives for data-center development and modernization. The bill encourages investment in more efficient equipment through preferential tax treatment of refresh cycles that improve energy efficiency.
Adopted by the Swedish Government in February 2026, the first comprehensive national AI Strategy aligns Sweden with EU AI Act implementation while prioritising competitiveness, public-sector adoption, and workforce re-skilling. The Swedish Post- and Telecoms Authority (PTS) is proposed as the coordinating market-surveillance authority.
This Arizona bill establishes rules for how businesses that collect and use personal data must handle consumer information, giving people rights over their data. It sets requirements for companies (controllers) on how they collect, process, and protect personal data.
This Arizona bill sets requirements for how businesses must handle the personal data they collect from consumers. It establishes rules around data collection, use, and likely consumer rights such as access or deletion of their information.
This bill updates Idaho's tax exemptions for data center equipment and certain capital investments, making it easier and cheaper to build and equip data centers in the state. It is a pro-industry measure designed to attract data center investment through tax relief.
This Kentucky bill requires large data centers using more than 100 megawatts of electricity to get Public Service Commission approval before receiving power, ensuring the data center—not other ratepayers—covers the full cost of any new grid infrastructure needed to serve it. Existing large data center customers are grandfathered in and exempt from the new rules.
This bill creates a Kentucky Health Command within the state's technology office to develop and oversee an AI-assisted virtual health platform for rural healthcare providers. The platform can provide health information and services but is prohibited from practicing medicine or diagnosing and treating conditions.
This bill would require data centers in South Carolina to obtain a state certificate before operating, with reviews covering energy efficiency, water use, environmental impact, and infrastructure adequacy. It also establishes ongoing reporting requirements and gives the Public Service Commission authority over how utilities handle costs related to data centers.
Australia's first substantive overhaul of the Privacy Act 1988 since 2012, introducing a statutory tort for serious invasions of privacy (effective June 2025), mandatory disclosure of substantially automated decision-making in privacy policies (effective December 2026), a Children's Online Privacy Code, enhanced OAIC enforcement powers, and new anti-doxxing criminal offences. A second, more comprehensive tranche of reforms — covering expanded definitions of personal information, a fair-and-reasonable test, and removal of the small-business exemption — is under active government consultation as of early 2026.
This bill relates to the Arizona Commerce Authority's process for certifying businesses for tax incentives. It likely streamlines or modifies how companies, potentially including data centers or tech firms, qualify for state tax breaks.
This Kansas bill would make it illegal to train AI systems to encourage suicide or violence, provide emotional support, form emotional bonds with users, impersonate healthcare professionals, simulate being human, or promote social isolation. It broadly restricts a wide range of AI behaviors related to mental health, companionship, and human simulation.
Kansas establishes a task force to study artificial intelligence and emerging technologies and provide recommendations to the legislature. This is exploratory work without immediate regulatory restrictions.
Virginia prohibits data brokers from acquiring or misusing personal information for stalking, fraud, or discrimination, and requires them to implement security programs and register annually starting in 2027. Violations are treated as consumer protection violations subject to civil penalties.
Illinois requires data brokers to register annually with the Attorney General and pay fees, with registration details made public. The state must also establish a centralized deletion mechanism by 2028 allowing consumers to request removal of their personal information from all registered data brokers in a single request.
This Kansas bill expands child sexual exploitation laws to cover AI-generated or digitally altered images that depict minors, even when no real child was directly used. It also prohibits sharing synthetic media that realistically depicts an identifiable person without their consent.
This South Carolina law requires social media and online platforms to protect children's personal data, limiting what information can be collected from minors and giving parents control over their children's accounts. Platforms must follow strict data practices and file annual reports, with enforcement measures for violations.
This Washington state bill establishes consumer protection rules for AI systems, requiring transparency and safeguards for how AI is used in products and services. It aims to protect residents from harmful or deceptive AI practices by setting standards companies must follow.
This bill offers a sales and use tax exemption for building and equipping new data centers in a specific large county in eastern Washington that borders another state. It is designed to attract data center investment to that region by reducing construction costs.
This bill addresses energy cost structures for large data centers in Arizona. The legislation appears designed to manage or incentivize data center operations through energy pricing mechanisms.
This bill establishes additional protections for warehouse workers, likely addressing working conditions and potentially automated monitoring or quota systems. It aims to regulate how employers can use technology and algorithms to set work pace and performance expectations for warehouse employees.
This Illinois bill regulates how law enforcement agencies can use facial recognition technology, prohibiting its use for real-time surveillance, monitoring constitutionally protected activities, or targeting people based on race, religion, or political beliefs. It also requires compliance audits, statewide policy training standards, and reporting on the accuracy and reliability of facial recognition systems used by police.
This bill allows data centers built on agricultural land to proceed as permitted uses and requires data center operators receiving tax exemptions to share at least 1% of the tax savings with local governments. It also expands energy production zone rules to include large-scale battery storage systems and adds safety notice requirements for those projects.
This bill allows police to use facial recognition technology when investigating certain crimes, specifically when the image comes from a camera mounted on the outside of a home by its owner or tenant. It expands law enforcement's ability to use facial recognition in investigations under these specific circumstances.
This bill allows law enforcement to use facial recognition technology in criminal investigations when the image being analyzed was taken inside a home or private dwelling. It expands the permitted use of facial recognition into more sensitive private spaces, raising significant privacy concerns.
Maryland establishes legal liability for AI developers and deployers for defective design, inadequate warnings, and breach of warranty, allowing consumers and the state to sue for harms caused by dangerous or defective AI systems. The law creates enforceable product liability standards specific to artificial intelligence, treating AI systems similarly to other consumer products under tort law.
This bill establishes rules around artificial intelligence chatbots, likely requiring disclosures or setting standards for how they operate and interact with users. It aims to create accountability and transparency for AI-powered conversational tools.
This bill establishes provisions relating to artificial intelligence governance in Missouri. Without access to the specific bill text, it appears to create a framework for AI oversight, though the exact scope and enforcement mechanisms require detailed review.
This bill sets rules for how websites and data brokers can collect, use, and share personal information about New Hampshire residents. It creates protections giving people more control over their personal data held by these companies.
This bill bans the distribution of AI-generated fake media depicting candidates or political parties within 90 days of an election if the creator knows or should know it is deceptively fraudulent. Violators face civil penalties, with limited exceptions allowed.
Virginia removes sales tax exemptions for data center equipment when banks are tenants, and makes bank equipment in data centers subject to franchise tax starting July 2026. This effectively reduces tax incentives for data centers that host financial institutions.
West Virginia requires the State Board of Education to develop model policies governing artificial intelligence and technology use in public school classrooms, including definitions, county-level implementation guidance, and an AI sandbox course for student learning. The bill addresses AI standards and provides support for students with technology-related learning difficulties.
The Monetary Authority of Singapore is finalising binding Guidelines on AI Risk Management for financial institutions, expected in early 2026. The guidance will set a regional benchmark for central-bank oversight of AI — covering model governance, explainability, third-party risk and monitoring.
A binding Presidential Regulation on AI under development by Komdigi, intended to formalize Indonesia's National AI Roadmap and ethics guidelines into law; the draft covered AI safety, ethical use, sector-specific applications, and a Sovereign AI Fund framework. As of early 2026, the regulation had been submitted to the State Secretariat for harmonization but had not yet been enacted.
Georgia establishes a dedicated Artificial Intelligence Commission to study and provide guidance on AI policy, assigned to the Georgia Technology Authority with annual reporting requirements. The commission will develop recommendations on AI governance, transparency, and safety through membership from various state agencies and stakeholders.
This bill addresses who legally owns the content created by AI systems and the AI models themselves after they have been trained. It establishes rules around intellectual property rights for AI-generated outputs and trained AI systems.
This bill requires that medical necessity determinations be made by licensed physicians or healthcare professionals rather than AI systems, and mandates transparency when AI is used in medical decisions. It establishes human oversight as a legal requirement for critical healthcare decisions.
This bill allows Maryland counties and Baltimore City to create a special lower property tax category specifically for data center equipment, giving local governments the flexibility to offer tax breaks to attract data centers. The tax incentives would apply starting in the 2027 tax year.
Michigan HR0240 urges a temporary halt to state tax incentives for data center construction and calls for a comprehensive review of fiscal, environmental, utility, and local governance impacts. The resolution directs House committees to study these issues before resuming incentive programs.
This Ohio bill creates a licensing system for independent organizations that verify whether AI systems meet risk mitigation standards. It establishes a formal oversight structure requiring third-party verification of AI safety practices.
This Pennsylvania bill creates a new state office and a regulatory sandbox program to streamline permitting and oversight for AI, data centers, and emerging technologies. It also establishes a special permit pathway for large data centers that generate their own power, signaling a pro-development, deregulatory approach.
This bill would exempt data center equipment and services from South Dakota sales and use taxes. The tax break is designed to attract data center businesses and investment to the state.
This bill establishes a taskforce to examine how artificial intelligence systems affect South Dakota. The group would study AI's impacts and implications for the state without imposing any restrictions or regulations.
This bill expands Vermont's child sexual abuse material laws to explicitly criminalize computer-generated or synthetic child sexual abuse imagery. It closes a legal gap by treating AI-generated child abuse material with the same prohibitions as real recordings.
Virginia's Consumer Data Protection Act restricts online services from collecting data from minors without verified parental consent and requires controllers to exercise reasonable care in handling minors' data, including limitations on algorithmic targeting and advertising. The law expands parental rights to access and control their children's data, with enforcement beginning in 2027.
This bill requires companies to obtain verifiable parental consent before collecting personal data from children under 18. It establishes stricter data protection rules for minors with defined consent and disclosure requirements.
This bill establishes regulatory requirements for large energy-consuming facilities, including data centers, to ensure they do not strain electrical grids and comply with environmental standards. The measure mandates review and approval processes before such facilities can operate in Washington state.
Published in February 2026, this General Scheme gives full domestic effect to EU Regulation 2024/1689 (the EU AI Act) by establishing the legislative and institutional architecture for national supervision and enforcement. It proposes creating a new statutory independent body — the AI Office of Ireland (Oifig Intleachta Shaorga na hÉireann) — under the Department of Enterprise, Tourism and Employment, to serve as the central coordinating authority, operate a regulatory sandbox, and act as Ireland's Single Point of Contact with the European Commission, with the Office required to be operational by 2 August 2026.
This bill creates a legal framework allowing private energy campuses to generate and supply electricity directly to businesses located on their property, bypassing traditional utility arrangements. It is designed to support large energy consumers like data centers or industrial facilities that want to manage their own power supply.
This bill establishes rules governing how law enforcement agencies in Michigan can use license plate reader systems to track and record vehicle information. It sets guidelines intended to regulate the collection, storage, and use of that data by police.
This bill would create a comprehensive consumer privacy law in Mississippi, giving residents the right to access, correct, delete, or opt out of the sale of their personal data held by large businesses. Companies doing business in Mississippi with over $25 million in revenue would be required to provide privacy notices, respond to consumer requests, and conduct data protection assessments.
This Mississippi bill requires app stores to verify users' ages and get parental consent before minors can download apps or make purchases. It prohibits app stores and developers from entering contracts with minors without verified parental approval and creates legal remedies for parents if violations occur.
This bill requires Mississippi law enforcement agencies to obtain a warrant before using cell site simulator devices (Stingrays) to collect information from communications devices, with a narrow exception for emergency situations involving imminent danger to life or bodily injury. The measure adds privacy protections and judicial oversight to a surveillance tool that can indiscriminately collect data from multiple devices.
This bill requires the Mississippi Department of Human Services and Division of Medicaid to use automated eligibility determination services at least quarterly and conduct monthly assessments of continued eligibility using federal data sources. It also mandates verification of eligible alien status through the SAVE service and stricter eligibility redetermination schedules.
This bill establishes a community solar program in Mississippi that allows residents and businesses to participate in shared solar projects and receive credits on their electricity bills. It requires utilities to interconnect community solar facilities to the grid and creates standards for how these projects operate.
This bill creates rules requiring data centers in Oklahoma to properly decommission (shut down and clean up) their facilities when they close, overseen by the Oklahoma Corporation Commission. Data center operators would need to provide financial assurance—like a bond or insurance—to ensure they can cover the costs of proper decommissioning.
Oklahoma prohibits foreign principals from renting, leasing, or holding a controlling interest in data centers operating in the state. This is a blanket restriction on foreign ownership and operational control of data center infrastructure.
Oklahoma SB2085 establishes rights protections related to artificial intelligence and imposes prohibitions and mandatory requirements on entities deploying AI systems. The bill addresses transparency, safety, and privacy concerns in AI deployment without creating a blanket moratorium.
This bill requires licensed mental health professionals and health care providers to obtain informed consent before using artificial intelligence in patient care and prohibits certain AI uses in healthcare settings. The measure establishes guardrails around how AI can be deployed in clinical and therapeutic contexts.
This bill addresses legal defenses available in civil lawsuits when someone is harmed by an artificial intelligence system. It likely sets rules for when AI developers or deployers can or cannot escape liability for damages caused by their systems.
This bill sets limits on how artificial intelligence can be used to deliver mental health care in West Virginia, allowing AI only for administrative tasks rather than direct patient care. It establishes rules to ensure mental health treatment remains in the hands of human providers rather than AI systems.
This bill establishes requirements for employers using workplace surveillance tools, including AI-based monitoring systems, to disclose their use and functionality to employees. It creates regulations around automated employment decisions and worker monitoring practices.
This bill would temporarily ban the construction of new data centers in Georgia while a newly created commission studies their impacts on utilities, the environment, and local communities. It combines an active moratorium with a formal review process before any new data center development could proceed.
This bill requires Pennsylvania's Department of Labor and Industry and Department of Community and Economic Development to produce a report on how artificial intelligence is affecting the workforce. It is an information-gathering measure with no direct restrictions or incentives.
This bill bans or limits the use of AI in providing therapy and psychotherapy services in South Dakota, with penalties for violations. It aims to protect patients by ensuring mental health care is delivered by human professionals rather than AI systems.
Virginia requires localities to conduct public hearings and site assessments before approving large data center projects, with the Department of Environmental Quality establishing standards for noise, light, water use, air emissions, and proximity impacts. The state can issue civil penalties and revoke approvals for ongoing violations of these standards.
This West Virginia bill requires companies to inform consumers about how their genetic and biometric data is collected, used, and shared, while prohibiting the sale or transfer of that data to foreign adversaries. It also establishes storage requirements and gives consumers the right to sue for violations.
This bill prohibits data centers from being used for unconstitutional surveillance activities. It establishes transparency requirements to prevent misuse of citizen data collected through data center operations.
Launched 30 January 2026, BC Hydro's competitive allocation process reserves 300 MW for AI projects and 100 MW for conventional data centres over a two-year window, with successful applicants notified by September 2026. Projects are scored on price plus economic, community, data-sovereignty and environmental benefits, operationalising the Energy Statutes Amendment Act.
Published April 25, 2025 by the Ministry of Economic Affairs and Employment, this proposal establishes national regulatory test environments (sandboxes) allowing organizations to develop and test AI systems under supervisory oversight, fulfilling Finland's EU AI Act obligation to operate at least one sandbox by August 2, 2026. Rules on AI sandboxes are expected to enter into force by February 1, 2026, and may be established in cooperation with other EU member states.
The rules establishing Finland's national AI regulatory sandbox entered into force on 1 February 2026, with full operational readiness required by 2 August 2026 under the EU AI Act. The sandbox allows AI developers — particularly SMEs — to test high-risk and innovative systems under supervisory guidance with legal-certainty benefits.
Announced 25 November 2025 with AUD 29.9 million in funding, the AI Safety Institute launched in early 2026 to monitor, evaluate and coordinate regulatory responses to frontier AI risks. It works directly with privacy, consumer, competition, online-safety and sector regulators and partners with international AI Safety Institutes, acting as Australia's central hub for AI safety science rather than a dedicated AI law.
This bill would eliminate the existing tax exemption that data centers currently receive when replacing their equipment, making it more expensive to upgrade or maintain data center infrastructure in Washington. Removing this tax break could discourage data center investment and expansion in the state.
This bill establishes regulations governing how AI systems can use data for training, likely requiring transparency about data sources and limiting use of certain personal information. The measure aims to protect individuals' privacy rights while AI models are being developed and deployed.
Implemented by BC Hydro under Bill 31 authority, this framework launched a formal competitive call for demand on January 30, 2026, requiring AI and data center projects of 10 MW or larger to apply and be evaluated on economic benefits, job creation, data sovereignty, and environmental criteria. Successful applicants are expected to be notified in September 2026, with a total target of 400 MW over two years (300 MW for AI, 100 MW for conventional data centers).
This bill requires Iowa to disclose details about tax incentives granted to data center and web search businesses, increasing transparency and public accountability over previously confidential corporate subsidy deals.
Iowa requires chatbot deployers to follow specific protocols, limit data collection, and obtain parental consent before minors interact with AI companions or therapeutic chatbots, with civil and punitive penalties for violations. The bill establishes enforceable restrictions on how AI systems can engage with children and handle their personal information.
This bill creates new rules governing how automobile dealers collect and handle customer data. It sets requirements around data collection practices at car dealerships to protect consumer information.
This Vermont bill establishes rules and oversight for the use of artificial intelligence, likely including requirements around transparency, safety, and accountability. It aims to regulate how AI systems are developed and deployed to protect residents from potential harms.
Vermont proposes comprehensive regulation of generative AI systems, requiring transparency measures and safety standards for developers and deployers. The bill advances toward establishing enforceable rules around how generative AI systems are developed and used.
This bill requires data centers in West Virginia to be built at least 500 feet away from homes, schools, and houses of worship. It is a direct siting restriction aimed at protecting nearby residents and communities from the potential negative effects of data center operations.
This bill gives counties and municipalities in West Virginia the authority to regulate and oversee certified microgrid districts and high-impact data center projects in their areas. It shifts control away from the state level and back to local governments, giving communities more say over where and how data centers are built.
Arizona HB2920 imposes requirements on software applications to protect minors, likely including algorithmic transparency and data privacy safeguards. The bill establishes rules for how applications handle minors' data and algorithmic recommendations.
Arizona SB1417 establishes requirements for autonomous vehicle safety and data handling, likely including transparency standards and data collection oversight for self-driving vehicles on public roads.
Georgia HB1012 prohibits the construction or development of new data centers for a specified period, giving local governments authority to restrict data center siting. The bill includes limited exceptions and aims to provide communities with temporary control over data center development.
Georgia law that creates criminal penalties for using artificial intelligence to create obscene materials and deepfakes, with enhanced sentencing for offenders who deploy AI in these crimes. The bill specifically targets AI-generated synthetic media used in illegal activities.
This Iowa bill requires high schools to include computer science and AI in their curricula and graduation requirements, and updates teacher preparation programs and college admissions standards accordingly. It aims to expand AI and computer science education opportunities for students statewide.
This bill would require data centers in Kansas to use closed-loop cooling systems, which recirculate water rather than continuously drawing fresh water. The goal is to reduce the amount of water data centers consume during their operations.
This bill removes existing sales tax exemptions and property tax breaks that data centers currently receive in Maryland. By eliminating these incentives, the state would treat data center equipment and property like other taxable businesses.
This bill establishes legal responsibility rules for companies that build or use AI systems, holding them accountable when their AI causes harm. It creates a framework for who can be sued and under what circumstances when an AI system injures or damages someone.
This bill establishes regulatory requirements for companion chatbots, likely addressing safety, data protection, and potential harms from AI systems designed to simulate emotional relationships. The legislation imposes mandatory safeguards to protect users, particularly minors, from risks associated with AI companion technology.
Virginia's Consumer Data Protection Act prohibits companies from using device hardware state, software presence, or precise location data to generate different prices for consumers in online transactions. The bill creates enforceable restrictions on algorithmic pricing discrimination based on personal device and location information.
This bill would ban West Virginia state and local governments from providing any financial subsidies to data centers. It eliminates incentives like tax breaks or grants that governments might otherwise offer to attract data center businesses.
This bill directs 80% of property tax revenues from large data centers to the counties where they are located, increasing local fiscal benefits from data center development. The measure uses tax distribution policy to incentivize and support data center siting.
This bill regulates how Iowa state agencies use AI systems, particularly for employment decisions and other government functions. It imposes requirements on state agencies to ensure transparency and accountability when deploying artificial intelligence tools in administrative and hiring contexts.
This Maine bill would ban health insurance companies from using artificial intelligence to deny claims, requiring human decision-making in coverage denials. It aims to protect patients from automated rejections of their health insurance claims.
This bill establishes safety requirements for chatbots, likely including disclosure rules and protections to prevent harm—especially to children. It would require companies operating chatbots to follow specific standards around transparency and user safety.
This bill regulates how health insurance companies can use artificial intelligence when making decisions about patient coverage. It likely requires transparency and human oversight to ensure AI tools don't unfairly deny or limit health care benefits.
West Virginia offers tax incentives including B&O tax exemptions, sales tax breaks, and salvage value treatment to attract data centers to the state, with a focus on using locally generated coal power. The bill aims to stimulate economic development and job creation through preferential treatment of qualifying data center projects.
This bill would update the Small Business Act to help small businesses better understand and critically assess AI tools they might use. It focuses on providing guidance and resources rather than imposing restrictions or bans.
This bill requires small business development centers to help small businesses understand and use artificial intelligence tools. It aims to make AI more accessible to small business owners by providing guidance and support through existing federal small business assistance programs.
This bill prohibits the use of artificial intelligence to create synthetic media depicting elections, ballot issues, and public officials, with criminal penalties for violations. It aims to prevent deepfakes and AI-generated content from interfering with electoral integrity.
Iowa requires community colleges, school districts, and state universities to adopt policies governing how students and employees can use artificial intelligence. The bill establishes mandatory institutional oversight of AI use in educational settings.
This bill establishes consumer protection requirements for artificial intelligence systems, likely including transparency, safety, and data handling obligations. It represents substantive regulatory requirements advancing consumer safeguards in AI deployment.
This bill requires large data centers in West Virginia to report their water usage to state environmental regulators and allows those regulators to limit or ban data center water withdrawals if they harm water resources. It also requires the state to analyze how high-impact data centers affect public waterways.
This bill redirects tax revenue from high-impact data centers to fund public employee insurance, schools, and counties while expanding electric grid stabilization assistance to all utility types. The measure maintains favorable tax treatment for data centers while reallocating existing incentive revenues to public infrastructure and services.
The bill establishes an administrative subpoena process that allows copyright owners to discover whether their works were used to train AI models. This creates a transparency and accountability mechanism for AI training data sourcing.
This bill requires chatbots to verify users' ages and follow safety protocols, with special rules for AI-based therapy chatbots. It also gives people the right to sue if these requirements are violated.
This bill makes it an unfair or deceptive trade practice for businesses to fail to clearly notify consumers when they are interacting with an AI chatbot rather than a human. It grants consumers a private right of action to sue for violations.
This bill establishes rules for cost responsibility agreements specifically related to data centers, likely requiring data centers to bear the costs of grid upgrades or infrastructure needed to support their large power demands. It aims to ensure that ratepayers are not unfairly burdened by the electricity infrastructure costs associated with new data center developments.
This bill sets a deadline for applications related to computer data center programs in Arizona, likely concerning tax incentives or approvals. It appears to streamline or formalize the process for data centers seeking state benefits.
This California bill requires data centers to report on and manage their water usage, addressing concerns about how much water these facilities consume. It adds new rules to both business regulations and the state water code to track and potentially limit data center water consumption.
This bill bans Hawaii law enforcement agencies and officers from using biometric surveillance technology unless specific legal conditions are satisfied. It places strict limits on how police can use tools like facial recognition to monitor or identify people.
This Indiana bill bans the use of AI systems to impersonate or replace licensed mental health professionals, while also setting rules around insurance reimbursement and network adequacy for mental health services. The AI-specific provision creates a hard prohibition on using AI as a stand-in for human therapists or counselors.
This bill establishes rules and oversight for how New Mexico state government agencies can use artificial intelligence tools. It sets standards for transparency, accountability, and risk management when AI is used in public sector decision-making.
This bill establishes accountability requirements for artificial intelligence systems used in New Mexico, likely including risk assessments, transparency obligations, and oversight mechanisms. It aims to ensure AI tools are used responsibly and that people are protected from harmful or biased automated decisions.
Finalised in May 2024 by IMDA and the AI Verify Foundation, this framework extends Singapore's original 2019 Model AI Governance Framework to address generative AI risks—including hallucination, bias, intellectual property, and systemic risk—across nine governance dimensions. In January 2026 IMDA further extended the suite with a world-first Model AI Governance Framework for Agentic AI, covering autonomous AI systems capable of independent reasoning and action.
Unveiled by IMDA on 22 January 2026 at the World Economic Forum, this world-first framework covers agentic AI systems capable of autonomous reasoning, planning and action. It guides deployers on technical and non-technical mitigations, with humans ultimately accountable — complementing the 2024 Generative AI framework.
This bill requires the Secretary of Commerce to produce an annual report assessing China's advanced AI capabilities. It is a fact-finding measure focused on understanding a foreign competitor's AI development, with no direct restrictions or incentives.
This bill sets rules for how chatbots must handle users' personal data, requiring transparency and placing restrictions on data collection or use. Businesses operating chatbots in Arizona would need to meet specific requirements to protect user privacy.
This bill regulates warehouse employee quotas and collective bargaining rights, which affects automated warehouse operations and algorithmic management systems used to set productivity targets. The measure constrains employer use of algorithmic productivity standards in warehouse settings.
This bill establishes transparency requirements for artificial intelligence systems used in New Mexico, requiring disclosures about how AI makes decisions. It aims to ensure people know when AI is being used and can understand the basis for AI-driven outcomes that affect them.
This bill prohibits the distribution of non-consensual intimate images, including AI-generated deepfake images. It creates legal consequences for sharing such content without the subject's permission.
This bill protects West Virginia's groundwater and aquifer supplies by restricting data center cooling operations that could deplete these water resources. The legislation aims to prevent large-scale water extraction by data centers through enforceable protections.
Alabama establishes a new crime for distributing materially deceptive media (deepfakes) and authorizes courts to issue permanent injunctions against violators. The law creates enforceable penalties and remedies for synthetic media that misrepresents people or events.
Vermont proposes establishing a regulatory framework to treat cloud computing data centers as public utilities, creating oversight mechanisms for their siting, operations, and public service obligations. The bill aims to balance economic development with community control and infrastructure planning.
This bill places a statewide ban on new data center construction, preventing both private builders and government bodies from proceeding with new projects. The moratorium would automatically end if Maryland passes separate legislation specifically addressing data centers built alongside natural gas, nuclear, or small modular reactor power facilities.
This bill requires online platforms to implement strict age verification systems before allowing access to pornographic content, in order to prevent minors from viewing it. Platforms that fail to comply face serious penalties.
This bill restores local government authority to regulate micro-grid districts and certified high-impact data centers, reversing state preemption and giving counties and municipalities zoning and oversight control. The measure empowers communities to have a say in siting and operation of large data center facilities within their jurisdictions.
In January 2026 Ontario's Information and Privacy Commissioner and Human Rights Commission jointly released six principles for responsible public-sector AI use, covering transparency, accountability, non-discrimination, privacy, explainability and human oversight. The principles guide implementation of Ontario's Enhancing Digital Security and Trust Act.
This bill would require utilities to create separate waiting lists and special electricity rate categories specifically for data centers, so that their massive power demands don't drive up costs for ordinary households and businesses. It aims to protect everyday consumers from shouldering the grid costs caused by rapid data center growth.
This bill would remove certain sales and use tax exemptions, which likely includes exemptions currently benefiting data centers in Washington State. Eliminating these tax breaks would increase operating costs for data center operators in the state.
This pending national implementation law will formally designate the Dutch supervisory authorities for the EU AI Act, including the Autoriteit Persoonsgegevens (AP) and the Rijksinspectie Digitale Infrastructuur (RDI) as lead market surveillance bodies, alongside sector-specific authorities ACM, AFM, and DNB. As of early 2026 the Minister of Economic Affairs indicated the bill is expected to be laid before the Tweede Kamer in Q4 2026, meaning the Netherlands will miss the August 2025 EU designation deadline; in the interim, a regulatory sandbox proposal was published in March 2025.
Taiwan's 2026 draft budget includes over NT$30 billion (US$950 million) for the '10 major AI projects' industrial plan, with total potential multi-year investment over NT$100 billion (US$3.2 billion). The programme operationalises the AI Basic Act's compute-infrastructure mandate alongside TSMC-anchored semiconductor support.
Enacted June 2025 and operationalised through 2026, Bill 69 requires the Minister of Economy, Innovation and Energy to authorise any new electricity load of 5 MW or more — directly capturing AI data centres. Combined with Hydro-Québec's proposed doubled tariff, it effectively halts speculative data-centre build-out unless projects deliver clear economic benefit.
On 15 January 2026 the Government of Canada opened a call for proposals to build sovereign, large-scale AI data centres above 100 MW, with MOU-based support packages that BC operators can access alongside provincial competitive process. The federal program complements BC's ESAA by prioritising sovereign Canadian compute.
Illinois requires data centers to compensate nearby property owners (within 1,000 feet) for measurable harm including reduced property values, business losses, and operational impacts like noise and vibration. Property owners can sue for damages and attorney's fees if a data center causes documented harm.
This bill sets new rules for data centers in South Carolina, requiring them to report water usage to environmental authorities and comply with specific electric service conditions, while also restricting previously available sales tax exemptions to data centers that registered their intent by May 30, 2025. It also adds public comment requirements and landowner notice rules for energy infrastructure projects that may involve eminent domain.
This bill establishes regulatory requirements for high-risk AI systems in Washington, including development standards, deployment oversight, and use restrictions to protect public safety and rights. It imposes mandatory transparency and accountability measures on companies developing and deploying potentially harmful AI technologies.
This bill authorizes West Virginia's environmental agency to install and monitor air quality near pollution-emitting facilities using fenceline monitors and allows community groups to submit air quality data for regulatory follow-up. While not data-center-specific, air monitoring could apply to large energy-intensive facilities.
Enacted December 23, 2025 and promulgated January 14, 2026, this 20-clause principles-based law designates the National Science and Technology Council as the central AI authority and mandates the Ministry of Digital Affairs to develop a risk-classification framework aligned with international standards. It enshrines seven core principles — sustainability, human autonomy, privacy and data governance, cybersecurity, transparency, fairness, and accountability — and requires public-sector AI risk assessments and labor-displacement safeguards, while imposing no direct obligations on the private sector.
This bill requires that content created by artificial intelligence be clearly labeled as such. It establishes enforcement mechanisms to ensure compliance with the disclosure requirement.
This Iowa bill requires data centers to use water-efficient cooling technologies and encourages the use of recycled or non-drinking water sources instead of fresh water. Data centers that fail to comply would face civil penalties.
This bill creates a state-run apprenticeship program to train workers in artificial intelligence and offers tax credits to employers who participate. It aims to build an AI-skilled workforce in New Jersey through structured on-the-job training opportunities.
This bill requires New Jersey's Attorney General to study how law enforcement agencies use facial recognition technology and publish a report with policy recommendations. It does not impose any bans or restrictions, but rather calls for research to inform future statewide policy.
This bill creates rules to protect the privacy of consumer health data held by health care providers and other entities in New Jersey. It sets requirements for how health data can be collected, used, and shared, giving patients more control over their personal health information.
This bill sets rules for how health care providers and other entities must protect consumers' personal health data. It establishes requirements around the collection, use, and sharing of consumer health information to safeguard patient privacy.
This bill requires data center owners and operators in New Jersey to submit reports on their water and energy usage to the Board of Public Utilities. It creates mandatory disclosure obligations aimed at tracking the resource consumption of data centers in the state.
This bill requires companies handling personal data to de-identify it and makes it illegal to re-identify de-identified data. It strengthens privacy protections by preventing companies from reconstructing personal information from supposedly anonymized datasets.
New Jersey would establish a longitudinal data system tracking individual students' information from preschool through workforce entry. The system raises data privacy and security concerns given the sensitive nature of student records and the extended timeframe of data collection.
This bill imposes a tax on companies that collect consumer data under certain circumstances, with revenues directed to fund suicide prevention and mental health crisis services. The tax represents a regulatory mechanism to control data collection practices while generating public health funding.
This bill expands New Jersey's definition of personal data to protect information about reproductive health care services and prohibits authorities from collecting reproductive health prescription drug data through the state's Prescription Monitoring Program. The legislation restricts data collection and use in a sensitive health category.
This bill requires vehicle manufacturers to disclose any data recording devices installed in motor vehicles and establishes limits on who can access the recorded data. It addresses privacy protections for vehicle occupants against unauthorized data collection and access.
This bill exempts certain categories of personal information and specific entities from data breach notification and disclosure requirements under New Jersey privacy law. The exemptions reduce compliance burdens for covered entities by narrowing which data incidents trigger mandatory notification obligations.
This bill exempts specific types of personal information and certain entities from data breach notification and disclosure requirements. The exemption reduces regulatory compliance burdens for affected parties.
Directs state agencies and the New Jersey Big Data Alliance to develop a strategic plan for advanced cyberinfrastructure. This is exploratory work to assess infrastructure needs without imposing specific restrictions or requirements.
This bill requires large commercial data centers in South Carolina that use at least 3 million gallons of water per month to report their water usage annually to the state's Department of Environmental Services. Facilities that fail to comply with the reporting requirement would face penalties.
This bill prohibits South Carolina state and local agencies from using AI and automated systems to track vehicles, and restricts surveillance data storage to secure local servers rather than third-party cloud services. It includes judicial oversight requirements, data retention limits, and mandatory annual reporting on surveillance practices.
This bill requires risk management policies for critical infrastructure controlled by AI systems and establishes rules for when private computational resources may be restricted. It represents a regulatory framework addressing AI oversight in critical sectors.
This bill requires large data centers in Tennessee to register with the state public utilities commission and mandates that electric and water utilities report usage and rates for those facilities. The commission must then compile and publish this information, creating a public record of how much energy and water data centers consume and what they pay.
Approved by Cabinet on 13 January 2026 and jointly published by the Ministers for Enterprise and Climate, this 17-action government strategy sets a plan-led framework for siting very large energy users — including data centres, semiconductors, and pharma — near indigenous renewable energy sources, particularly offshore wind on Ireland's west coast. It identifies 'green energy park' locations for co-location of hyperscale facilities with renewables, aiming to redirect investment away from congested Dublin-area grid nodes toward unconstrained regional sites and signals intent to legislate for private wire connections in 2026.
Spain's Ministry for the Ecological Transition is finalizing a 2025–2030 grid development plan that will allocate an additional 3.8 GW of capacity specifically for data centers, addressing the severe grid congestion that has become a bottleneck for Madrid and Aragón hyperscale expansion. The plan is expected to introduce new transmission-node auction rules, though critics warn that Madrid's data center pipeline already exceeds guaranteed grid capacity by more than four times.
This Nebraska bill establishes rules governing the collection, use, and storage of biometric data such as fingerprints, facial scans, and iris patterns. It gives individuals rights over their biometric information and places obligations on companies and organizations that collect it.
This bill requires data centers to report on their impact on air quality, water quality, and electricity consumption. It focuses on gathering information rather than imposing restrictions or bans.
This bill requires data centers in Indiana to obtain a state permit specifically for their water consumption before they can operate. The Department of Natural Resources would review and approve or deny these permits, creating a new regulatory layer for data center water use.
Massachusetts is establishing a legislative commission to investigate how AI and data centers are affecting electricity demand and grid load in the state. The study will inform future policy decisions on managing energy consumption from these growing industries.
This bill allows New York's siting authority to issue permits for battery energy storage systems used by data centers, regardless of their size or whether they are paired with renewable energy. It also requires data centers to submit plans showing how they will reduce carbon emissions.
This bill creates an AI literacy grant program in New York to help people develop skills and understanding of artificial intelligence as part of a broader digital equity initiative. It provides competitive funding to support AI education across communities.
This bill would prohibit businesses from using AI algorithms to discriminate against people based on protected characteristics like race, gender, or religion. It establishes consumer protections against discriminatory AI decision-making in New York.
This bill would prohibit businesses from using AI algorithms to discriminate against people based on protected characteristics like race, gender, or religion. It establishes consumer protections against biased AI decision-making in New York.
This bill would create a Chief Artificial Intelligence Officer position in New York State to develop statewide AI policies and coordinate how government agencies use AI tools. The role is focused on governance and oversight rather than imposing restrictions or providing incentives.
This bill establishes rules for when courts can accept evidence that was created or processed using AI, requiring procedures to verify reliability and transparency. It advances guardrails around AI use in the criminal justice system by setting standards for admissibility rather than banning AI evidence outright.
This law requires AI developers to publicly disclose what journalistic content they used to train their systems and gives news organizations the right to sue for damages if their work was used without permission. It aims to protect journalism by increasing transparency around AI training data and creating legal recourse for publishers.
This bill establishes safeguards and transparency requirements for AI tools used by health insurers to review and approve medical claims and coverage decisions. It aims to ensure algorithmic accountability in automated insurance determinations that affect patient care access.
This bill establishes requirements and safeguards for AI tools and algorithms used by health insurers to make utilization review decisions. It aims to ensure transparency and safety in how insurers deploy automated decision-making for coverage determinations.
New York requires AI developers to publicly disclose what video, audio, text, and data from news publications were used to train their generative AI systems, and allows news organizations to sue for damages if developers fail to comply. This creates transparency and enforcement mechanisms around AI training data sourcing from journalistic content.
This bill establishes a working group within the New York Department of Education to develop guidance and model policies for safe and effective AI use in schools. The group will create recommendations to ensure AI benefits students and educators while preventing harm.
This act implements Phase 1 of Finland's national obligations under the EU AI Act, designating Traficom as the central contact point and establishing a multi-member National Sanctions Board with powers to impose administrative fines up to EU AI Act maximums. It entered into force on January 1, 2026 following presidential approval, with Phase 2 provisions on regulatory sandboxes and a high-risk AI systems register expected by August 2, 2026.
This bill requires Indiana data centers to regularly report their electricity usage to state regulators and creates a working group to forecast future energy demand from data centers. It also requires local governments to collect projected power and water usage data and conduct site assessments before issuing construction permits.
This bill would temporarily ban the construction of new AI data centers in Vermont while the state studies their impacts. The moratorium gives lawmakers time to assess how these facilities affect energy use, water, and the environment before allowing new ones to be built.
This Indiana bill restricts social media companies from allowing children under 14 to create accounts without verified parental consent, and requires platforms to give parents control tools and limit certain features for minor users. Companies that violate these rules can be sued by the child or their parents.
Indiana requires its utility regulator to study how data centers and large industrial customers affect electricity costs and rates for all consumers. The study findings must be reported by 2026.
Indiana requires data center incentive agreements to mandate that project bids go only to labor unions or employers with project labor agreements. This regulation conditions state economic development support on union participation and labor standards compliance.
Effective January 2026, Taiwan Power Company implemented tiered electricity tariffs that reward data centers achieving a Power Usage Effectiveness (PUE) below 1.3 and impose surcharges above 20% on inefficient operators, while discouraging large-scale northern campuses due to transformer shortages and urging operators to relocate to central and southern Taiwan. The utility is simultaneously drafting broader guidelines on grid stability safeguards as AI data center electricity demand is projected to grow 50% or more, and a 2025 moratorium on new connections over 5 MW north of Taoyuan is extending commissioning schedules by 6–12 months.
Received Royal Assent March 21, 2024, with AI-disclosure provisions taking effect January 1, 2026. Ontario employers with 25 or more employees must now disclose in all publicly advertised job postings whether artificial intelligence is used to screen, assess, or select applicants.
Effective 1 January 2026, Ontario employers with 25+ employees must disclose in publicly advertised job postings if they use AI to screen, assess or select applicants. The provision builds on the Working for Workers Four Act and aligns with the province's January 2026 joint IPC/OHRC principles for responsible AI use.
This bill would establish consumer protections for people interacting with AI systems, likely requiring disclosures and setting rules for how AI can be used in consumer-facing contexts. It aims to ensure people know when they are dealing with AI and have certain rights in those interactions.
This bill would establish accountability and transparency requirements for artificial intelligence systems in Massachusetts. It targets algorithmic transparency and AI safety oversight within the state.
On 23 December 2025 Taiwan's Legislative Yuan passed the AI Basic Act, establishing a national risk-based governance framework. Clause 13 mandates government development of hyperscaler data centres and cloud platforms to make Taiwan a top-three Asian compute hub, supported by budgets, subsidies, investment and tax incentives for AI R&D and infrastructure.
This bill establishes a national AI framework to maintain US leadership in artificial intelligence and creates a temporary moratorium preempting state laws that restrict AI models and systems in interstate commerce. It requires the federal government to develop an actionable plan aligned to AI policy objectives.
Published by the Commission for Regulation of Utilities in December 2025, this binding decision replaces the 2021 moratorium framework and requires new data centres above 10 MVA to provide on-site or proximate dispatchable generation matching their full grid import capacity, participate in the Single Electricity Market, and source 80% of annual electricity from additional Irish renewables within a six-year glide path. System Operators EirGrid and ESB Networks must assess each application against location constraints and publish a standardised connection process by 31 March 2026.
Enacted December 11, 2025, this law amends the Electricity Act and Ontario Energy Board Act to embed economic growth as a formal regulatory objective and grants the Minister of Energy and Mines new authority to approve and prioritize large data centre grid connections based on economic, strategic, and community benefit criteria. It ends the prior first-come, first-served connection regime for high-demand facilities and restricts foreign participation in Ontario's energy sector.
Launched December 2024 as a joint venture between Indosat Ooredoo Hutchison, Lintasarta and BDx Data Centers, Indonesia's first sovereign AI data centre — powered by NVIDIA accelerated computing — is now the de-facto reference facility for the government's sovereign-compute strategy referenced in the 2026 Perpres package.
This bill creates a new AI research and development institute at the University of Hawaii to promote and advance AI initiatives across the state. It is designed to support Hawaii's AI ecosystem through education, research, and statewide coordination.
This bill makes it a crime in Hawaii to create or share sexually explicit deepfakes — realistic fake images or videos generated by AI. It targets non-consensual synthetic sexual content to protect individuals from this form of digital abuse.
This Indiana bill makes broad changes to utility regulation, including repealing a recently passed sales tax exemption for data centers and capping residential electricity rate increases at 3% per month. It also adjusts rules around municipal ownership of electric utilities.
This bill would create a new national center within the Institute for Education Sciences focused on advanced research and development in education. It aims to support the discovery and study of new educational approaches, potentially including technology and AI-based learning tools.
Launched by IMDA on 30 May 2024, this policy roadmap charts Singapore's sustainable data center growth by targeting PUE ≤ 1.3 at 100% IT load for all facilities within ten years and unlocking at least 300 MW of new capacity tied to green energy use. It also refreshed the BCA-IMDA Green Mark for Data Centres certification (October 2024) and introduced the Singapore Standard on Energy Efficiency of Data Centre IT Equipment (SS 715:2025).
Launched on 1 December 2025 by EDB and IMDA, DC-CFA2 allocates at least 200 MW of new data center capacity to operators demonstrating world-class sustainability—requiring a PUE of 1.25 at full IT load and at least 50% of power from approved green energy sources such as biomethane, low-carbon hydrogen, or on-site solar. The application window closed 31 March 2026, following the first DC-CFA pilot that awarded 80 MW to Equinix, Microsoft, GDS, and AirTrunk-ByteDance in 2023.
This bill directs the Department of Homeland Security to conduct annual assessments of how terrorist organizations might use generative AI to threaten the United States. It establishes a review and monitoring framework without imposing direct restrictions on AI development or deployment.
This Nevada bill establishes a Security Operations Center within the Governor's Technology Office to strengthen state cybersecurity, including workforce development through a Cybersecurity Talent Pipeline Program. It also exempts certain government cybersecurity meetings from open meeting requirements and creates dedicated funding for these efforts.
The Energy Statutes Amendment Act bans new cryptocurrency-mining grid connections and imposes energy-use caps on new data centres in British Columbia, redirecting scarce clean electricity toward economic activity with broader social benefits. BC Hydro may refuse connections where projects fail the economic/community/environmental test.
This bill directs the National Security Agency to create guidance for securing AI-related technologies. It focuses on developing security standards and recommendations rather than imposing direct restrictions or mandates.
A private member's bill introduced November 2025 by NDP MPP Rob Cerjanec that would require the provincial government to design and maintain a comprehensive AI talent and innovation strategy with the goal of making Ontario a global AI leader within ten years. It would establish an AI Advisory Committee to publish annual progress reports and recommend legislative changes.
Passed in November 2025, this law replaced BC's first-come, first-served electricity connection policy with a competitive selection process for AI, data centers, and hydrogen-for-export sectors, capping their combined access at 400 MW of new power every two years. It also permanently bans new BC Hydro grid connections for cryptocurrency mining and enables First Nations co-ownership of the North Coast Transmission Line.
Finalized by MeitY on November 13, 2025, these rules operationalize the Digital Personal Data Protection Act, 2023, establishing consent-centric data fiduciary obligations, breach notification requirements, and the Data Protection Board of India as an enforcement authority. AI systems processing personal data face phased compliance obligations — including data minimization, impact assessments for Significant Data Fiduciaries, and explicit consent requirements — rolling out fully by May 2027.
Passed by the Legislative Yuan on October 17, 2025 and promulgated on November 11, 2025 (effective date to be set by the Executive Yuan in 2026), this amendment establishes the Personal Data Protection Commission as an independent supervisory authority and aligns Taiwan's regime with GDPR standards, including mandatory breach notification to both data subjects and regulators, and a new Data Protection Officer requirement for government agencies. The amendment directly intersects with AI data-pipeline obligations under the AI Basic Act.
This Pennsylvania bill sets rules for how artificial intelligence can be used in mental health therapy services. It establishes enforcement mechanisms to ensure AI-based therapy tools are used appropriately and safely.
This bill puts into law the recommendations from a special commission studying facial recognition technology, establishing rules and limits on how it can be used. It aims to regulate government and law enforcement use of facial recognition to protect civil liberties and privacy.
This bill directs implementation of recommendations from a special commission studying facial recognition technology, likely to establish oversight, transparency, and safeguards for law enforcement use of facial recognition. The specific restrictions or requirements would depend on the commission's final recommendations.
This federal bill directs NOAA to expand its use of artificial intelligence to improve weather forecasting and better predict extreme weather events and wildfires. It aims to modernize government climate and weather systems through AI-driven tools.
Released on 21 October 2025, this non-binding framework replaced the Voluntary AI Safety Standard, condensing ten guardrails into six responsible AI practices covering governance, impact assessment, risk management, transparency, testing and monitoring, and human oversight — and is aligned with Australia's eight AI Ethics Principles. It signals a pivot away from imminent mandatory AI legislation toward a multi-regulator, standards-led model, with the government concurrently reviewing whether existing laws adequately address AI risks before committing to a standalone AI Act.
This bill would put into law the recommendations made by a special commission studying facial recognition technology in Massachusetts. It aims to establish rules and oversight around how facial recognition can be used, likely by law enforcement and government agencies.
This bill proposes rules around how artificial intelligence and software tools can be used when making healthcare decisions. It aims to ensure these tools are used responsibly and transparently in medical settings.
This bill aims to promote economic development in Massachusetts through support for emerging AI models while addressing safety concerns. It positions the state to foster AI innovation and industry growth alongside responsible AI development practices.
This bill bans 'surveillance pricing,' which is the practice of using personal data collected about individuals to set different prices for the same product or service. Businesses that use algorithms or AI to personalize prices based on tracked consumer behavior would face penalties under this law.
This Alaska bill addresses several public school issues including restricting wireless devices (like smartphones) in classrooms. It also touches on school funding, class sizes, and charter schools.
This bill updates California's existing law against deepfake pornography, which prohibits the creation and distribution of realistic fake explicit images of real people without their consent. It strengthens protections for victims by amending the civil code to allow people to sue those who create or share such content.
This bill amends California's AI transparency requirements in the Business and Professions Code to strengthen disclosure and oversight of AI systems used in high-risk contexts. It establishes new transparency obligations and potential restrictions on AI deployment in sensitive applications.
This bill requires electrical corporations to report on data center electricity demand and grid impacts, establishing a baseline for monitoring how data centers affect California's power system. The reporting requirement supports regulatory oversight without imposing operational restrictions on data centers.
Italy's first comprehensive national AI law, in force from October 10, 2025, establishes governance structures assigning AgID (notifying authority) and ACN (market surveillance) as national competent authorities, with sector-specific rules for healthcare, employment, justice, and minors. It mandates the government to issue implementing decrees by October 2026 defining sanctioning powers, an organic framework for AI training data, and alignment with the EU AI Act, while committing €1 billion to support AI startups and SMEs.
This bill updates California's data broker laws, tightening rules around how data brokers collect and delete personal information. It strengthens consumer rights by making it easier for people to have their data removed from broker databases.
This bill requires state and local agencies to collect and report demographic data in a standardized format. The bill supports transparency in government data practices that may inform or be used by AI systems.
Published in October 2025, this Government Official Report proposes a new national Swedish AI law and ordinance designating the Post and Telecom Authority (PTS) as the primary market surveillance authority, with 11 sectoral co-authorities, enforceable administrative fines, and at least one regulatory sandbox to be established by August 2, 2026. It bridges EU AI Act mandates with Swedish administrative procedures on secrecy, documentation, and enforcement powers.
This bill amends California's data breach notification law to strengthen consumer protections when personal information is compromised. It updates requirements for how and when companies must notify affected individuals of security breaches.
Indonesia's comprehensive data protection law, modeled in part on the GDPR, which became fully enforceable on October 17, 2024 after a two-year transition period. It covers all personal data processing within and outside Indonesia that has legal effect on Indonesian citizens, with administrative fines up to 2% of annual revenue and criminal penalties up to six years imprisonment for violations; however, implementing regulations and the dedicated PDP Agency remain under development as of April 2026.
This bill would require the Department of Energy to create a program specifically for evaluating the risks of advanced AI systems. It focuses on assessment and oversight rather than imposing direct restrictions on AI development or use.
This Pennsylvania bill creates a formal permitting process that data centers must go through before being built, with the state's environmental agency overseeing approvals. It adds regulatory hurdles to data center construction by requiring environmental review and compliance before siting can proceed.
This bill requires data centers to meet power usage effectiveness (PUE) standards and addresses how data centers' energy costs are allocated among utility ratepayers. It aims to prevent data center energy consumption from shifting costs onto other electricity customers.
This bill directs the National Institute of Standards and Technology (NIST) to create voluntary guidelines for evaluating and verifying that AI systems are trustworthy and reliable. The guidelines would help organizations assess AI systems both internally and through outside review, but compliance would not be mandatory.
This bill requires health insurers to implement standardized APIs for prior authorization requests and establishes rules around step therapy protocols. While not explicitly AI-focused, it imposes operational requirements on automated insurance decision systems that determine patient care access.
This bill aims to prevent the sexual exploitation of women and minors, likely including provisions targeting AI-generated or synthetic sexual content. It establishes prohibitions to protect vulnerable individuals from exploitation through digital or other means.
The bill establishes an administrative subpoena process that allows copyright owners to investigate whether their works were used to train AI models without permission. This creates a new enforcement mechanism for copyright protection in AI training while advancing transparency about training data sources.
This bill sets rules for how law enforcement agencies can use facial recognition technology, establishing oversight and restrictions on its use. It aims to prevent misuse and protect civil liberties while still allowing law enforcement some access to the technology.
This resolution directs Delaware's AI Commission to partner with the Secretary of State to design a 'regulatory sandbox' — a controlled environment where companies can test cutting-edge AI technologies without facing full regulatory requirements. It is an exploratory step to understand and shape how advanced, autonomous AI systems might be safely developed and used.
This bill requires NIST to develop a framework for detecting and removing child sexual abuse material from datasets used to train AI systems. It establishes mandatory practices to prevent exploitation material from being used in AI development and creates reporting requirements for such discoveries.
This bill directs Maine's Arts Commission to study how federal and other states' laws are protecting artists from having their work used without permission by AI companies. The commission would also monitor how AI is being used in educational settings.
Enacted and in force from July 1, 2025, this law requires owners or operators of data centers with an installed IT power demand of at least 500 kW to publicly report annual energy performance data to the EU-wide database, implementing the EU Energy Efficiency Directive (EED). Facilities used for security-sensitive or defense purposes under the Protective Security Act are exempt.
This regulation formalizes the mandate and expected outcomes for BC's Minister of State for AI and New Technologies for the 2025/26 fiscal year, operating alongside the province's existing Policy on the Use of Generative AI and Digital Code of Practice for public servants. The policy permits BC Public Service employees to use generative AI tools responsibly under defined guidelines, including use of Microsoft Copilot Chat for confidential information, while prohibiting inputs into publicly available tools like ChatGPT.
This resolution requests the Delaware Department of Education to review and make recommendations about how kindergarten readiness data is collected and used. The bill does not specifically address AI systems or algorithms but initiates an exploratory review of educational data practices.
This bill updates the rules for how data brokers must register and disclose information about themselves and their practices online. It requires data brokers to provide clearer notices about how they collect and use personal data.
This bill would regulate companies that collect and sell personal data about people, known as data brokers. It establishes rules and oversight requirements for how these businesses can operate in Texas.
This bill establishes an integrated data system to collect and share information about young children across early childhood programs in Texas. It focuses on coordinating data to improve early childhood services, not specifically on AI regulation.
This bill regulates how pharmacy benefit managers handle and protect patient data, imposing requirements on data security and use. While not directly about AI, it addresses data privacy protections that apply to systems using patient health information.
This bill establishes security requirements and protections for genetic information held by entities in Texas, creating civil penalties and private lawsuits for breaches. It addresses data privacy by restricting how genetic data can be collected, used, and safeguarded.
This bill would shield AI developers from civil lawsuits related to their AI systems, effectively protecting companies from being sued by people harmed by AI. It creates a legal safe harbor for AI developers, making it easier for them to build and deploy AI without fear of liability.
This bill would create a new Michigan law giving consumers rights over their personal data, including how it is collected, used, and shared by businesses. It establishes privacy protections and likely includes rules around automated decision-making and data processing.
This North Dakota bill regulates how students in pre-K through 12th grade can use personal electronic devices such as smartphones in schools. It amends existing rules to set limits or conditions on when and how these devices may be used during the school day.
North Dakota establishes a research technology park grant program with funding to support innovation infrastructure and research facilities. The program aims to promote economic development and job creation in technology sectors.
North Dakota establishes an advanced technology review committee, grant program, and dedicated fund to support development and deployment of advanced technologies including AI. The bill creates a framework to incentivize and finance advanced technology initiatives across the state.
This bill requires businesses to disclose when consumers are interacting with artificial intelligence during transactions. It aims to ensure people know when AI, rather than a human, is handling their purchase or service experience.
This Nevada bill requires businesses applying for transferable tax credits or tax abatements to agree to a community benefits agreement as a condition of approval. It adds accountability requirements to economic development incentives, which often apply to data centers seeking tax breaks in Nevada.
This bill aims to prevent artificial intelligence from improperly influencing or making official state government decisions. It establishes safeguards to ensure that state determinations remain free from unethical, unsafe, or illegal AI interference.
Enacted June 7, 2025, this law requires any new electricity load of 5 MW or more — including data centers — to obtain ministerial authorization from the Minister of Economy, Innovation and Energy, with approval conditioned on technical feasibility, economic benefit, and environmental impact. It effectively gates all large-scale data center power connections through direct government discretion, continuing and codifying restrictions that began with Bill 2 in 2023.
This Nevada bill prohibits certain AI uses in public schools, restricts how AI systems can be marketed and programmed for mental and behavioral health care, and bars AI from representing itself as a qualified mental health provider. It imposes civil penalties for violations and requires the state Department of Education to create an AI use policy.
This Maine bill prohibits landlords from using artificial intelligence algorithms to set rental prices. The law restricts an automated decision-making tool commonly used in the housing market to prevent discriminatory or opaque rent-setting practices.
This Nevada bill establishes a Security Operations Center within the state's Chief Information Officer office to oversee government cybersecurity, and creates a Cybersecurity Talent Pipeline Program to develop skilled workers. It also requires annual reporting on the center's effectiveness and allows school districts to use state cybersecurity services.
This bill requires that campaign communications containing synthetic media include a clear disclosure to voters. It is designed to prevent deceptive use of deepfakes and manipulated media in political advertising and campaign materials.
This Illinois bill sets rules for how electric and gas utilities must store and share customer energy usage data, including how long records must be kept and how customers or authorized parties can request them. It establishes data retention timelines and access procedures but does not directly regulate AI systems or data centers.
This Illinois bill requires utilities to store customer energy usage data for up to 15 years and allow customers to share that data with third parties they designate. It sets rules for how utilities must securely deliver this data and limits utility liability when shared data is misused by others.
Illinois offers tax credits to state data procurement contracts that store data within the state, with higher credits for storage in designated qualified areas. The incentive aims to encourage in-state data infrastructure investment and localized data residency.
Poland's national grid operator (PSE) released a ten-year transmission plan that explicitly reserves approximately 1,200 MW of grid capacity for data center development by 2034 and commits to expanding renewable connection capacity to remove grid bottlenecks. The plan acknowledges that Warsaw's grid is already congested, encouraging data center investment in secondary cities such as Kraków, Wrocław, and Poznań.
This bill requires that emergency management plans at the state and local level ensure humans—not AI—make final decisions about emergency response and resource allocation. It also prohibits utilities from relying solely on AI to decide whether to cut or shut down services during a disaster.
This bill adds criminal liability provisions to Pennsylvania law for people or organizations that deploy artificial intelligence systems that cause harm. It establishes legal accountability rules specifically for AI deployment under the state's crimes and offenses code.
This bill prohibits the creation or distribution of AI-generated depictions that sexually exploit or otherwise harm minors. It establishes protections specifically targeting artificial intelligence tools used to produce harmful content involving children.
This bill regulates app store platforms' control over software distribution and curation practices. It addresses transparency and fairness in how platforms present and prioritize applications.
This bill revises how a specific class of property (Class 17, which typically covers data centers and related infrastructure in Montana) is taxed. It likely adjusts tax rates or assessment methods to make data center development more financially attractive in the state.
This bill requires online media manufacturers to disclose when they use AI to create or modify media content. The disclosure requirement aims to increase transparency and help consumers identify AI-generated or AI-altered content.
Montana proposes a study of the state's criminal justice data warehouse to examine its operations and potential improvements. This is exploratory work without immediate regulatory changes or restrictions.
This resolution calls for a formal study of data centers in Montana, examining their impacts and potential policy responses. It does not impose any restrictions or incentives but initiates an exploratory review process.
This bill would cap the amount of electricity that can be supplied to data centers on commercial or industrial sites in Maine. It is designed to limit the strain that large data center operations can place on the electrical grid.
This Michigan bill sets requirements for operating a health data utility, which manages the exchange of health information between providers and other entities. It establishes rules around how health data is shared and managed, which has implications for data privacy and oversight of health information systems.
This bill requires that human beings, not automated systems or AI, make final decisions about medical insurance payment approvals and denials. It ensures patients have access to human review rather than having their care determined solely by algorithms.
This bill updates rules for how health insurance companies can use artificial intelligence in their decision-making processes. It aims to add oversight and restrictions to ensure AI is used fairly and transparently in health insurance coverage decisions.
Montana establishes a development act to encourage and streamline data center construction and operations in the state. The legislation likely includes tax incentives, permitting simplifications, or other measures to attract data center investment.
This bill revises Montana's ratemaking laws for digital asset mining and data centers, likely adjusting how utilities charge these facilities for electricity. The changes appear designed to create more favorable or predictable rate structures for these operations.
This bill revises how data center property is taxed in Montana, likely reducing the tax burden on data centers classified under 'class 17' property. It is designed to make Montana more attractive for data center investment and development.
This resolution establishes a task force to study artificial intelligence and advise the Alaska Legislature on AI-related issues. It is exploratory in nature, with no hard restrictions or mandates imposed.
This bill makes it a crime to disclose or distribute sexually explicit AI-generated images or deepfakes, particularly those depicting real people without consent. The law aims to protect individuals from non-consensual intimate imagery created through artificial intelligence.
This bill would require social media platforms to include provenance data — information about where content came from and how it was created — when content is shared. This is aimed at helping users identify AI-generated or manipulated media by tracking the origin of digital content.
Maine establishes a study to examine how artificial intelligence, cellular phones, and social media affect public education. The resolve directs analysis of impacts on students and schools to inform future policy.
This bill updates Montana's election laws to require disclosure when artificial intelligence is used to create or alter content in political campaigns. Candidates and campaigns would need to inform voters when AI-generated material is used in election-related communications.
This bill establishes workforce leadership initiatives in Vermont but does not substantively address AI regulation or automated employment decisions. It appears to focus on general workforce development rather than AI-specific workplace concerns.
This bill repeals existing tax exemptions for data centers and sustainable aviation fuel facilities in Minnesota, redirecting that tax revenue to increase the renter's credit. The repeal removes a previous incentive structure that had favored data-center development.
This bill places limits on how Montana state government agencies can use artificial intelligence systems. It aims to restrict or control the adoption of AI tools in public sector operations.
This bill establishes a framework for reforming how artificial intelligence is regulated in North Carolina. It likely creates guidelines, standards, or oversight processes to ensure AI is developed and used responsibly.
This bill requires government agencies to obtain a warrant before accessing location information that they have purchased from data brokers or location tracking services. It restricts how law enforcement and other state entities can use commercially obtained location data.
This bill revises Montana's environmental policy act framework, which could affect how data centers undergo environmental review and local approval processes. The changes may modify the scope and rigor of environmental assessments for large infrastructure projects including data centers.
This bill requires online services to protect children's personal data, limit how much data can be collected from minors, and give parents tools to monitor and report harms. It also mandates public reporting on how these platforms handle minors' data and usage.
This bill directs North Dakota's legislature to study how large energy users—like data centers and AI facilities—affect the state's electrical grid. It establishes a formal review process but does not impose any restrictions or requirements on those energy consumers.
This bill creates rules limiting students' use of personal electronic devices, such as smartphones, during school instructional time. It aims to reduce distractions and improve the learning environment in North Dakota schools.
Texas HB3285 requires smart device operators to disclose what personal data they collect from users and how they use it. This establishes mandatory transparency requirements for connected device manufacturers and data handlers.
This bill updates North Dakota's harassment and stalking laws to explicitly cover the use of robots or automated devices to harass or stalk someone. It creates criminal penalties for using robotic technology to intimidate or surveil victims.
North Dakota prohibits the possession of computer-generated sexual images, including synthetic child sexual abuse material, with criminal penalties. The bill amends existing laws to expand restrictions on digitally created explicit imagery.
This bill would eliminate the existing sales and use tax exemption that data centers in Minnesota currently enjoy. Removing this tax break would make it more expensive to build and operate data centers in the state, potentially discouraging new investment.
This bill calls for a study of artificial intelligence during the legislative interim period. It is an exploratory measure to examine AI issues without imposing any restrictions or regulations.
In April 2025, the Municipality of Amsterdam formally decided to allow no new data centers or expansions within city limits until at least 2030, citing scarce grid capacity and land constraints. The decision follows an earlier December 2023 round of municipal restrictions and compounds the national hyperscale ban, effectively freezing most large-scale digital infrastructure growth in Amsterdam's core market.
This bill establishes a 'Right to Compute Act' and mandates that AI systems controlling critical infrastructure (such as power grids or water systems) be shut down under certain conditions. It places enforceable restrictions on AI use in high-stakes infrastructure settings to protect public safety.
This bill regulates app store platforms' practices for distributing software applications on mobile devices, likely addressing algorithmic curation, data handling, and transparency requirements. It may affect how AI-driven recommendation systems and data collection operate in mobile app marketplaces.
This bill aims to protect North Carolina utility customers from bearing the costs of large energy consumers, such as data centers, on their electricity bills. It would place restrictions or requirements on how utilities can pass infrastructure costs onto regular ratepayers.
This bill establishes AI and technology hubs within the University of North Carolina system to advance research, innovation, and workforce development in artificial intelligence and related fields. The initiative provides support and resources to build regional AI capabilities and create economic opportunities.
This bill requires disclosure when artificial intelligence is used to create political content, such as ads or campaign materials. Candidates or political campaigns would need to clearly label AI-generated content so voters know it was made with AI tools.
This Nevada bill updates the rules for businesses seeking partial tax breaks, giving the state Office of Economic Development more flexibility to approve or deny applications based on the state's best interests. It also expands eligibility for property tax abatements to businesses that recycle materials or produce fuels from recycled materials.
This bill expands criminal prohibitions related to child sexual abuse material and likely addresses synthetic or digitally created child pornography. It imposes penalties for the creation and distribution of such material.
Nevada requires health insurers using artificial intelligence in prior authorization decisions to meet specific regulatory requirements and mandates reporting on prior authorization practices. The bill establishes investigation and penalty mechanisms to enforce compliance with AI use restrictions in insurance decisions.
Nevada requires medical facilities and healthcare providers using generative AI to create patient communications to include specific disclosures about AI involvement. The bill establishes transparency requirements for AI-generated healthcare messages.
Nevada law prohibits AI use in voting equipment and ballot processing, and bans deceptive synthetic media (deepfakes) of candidates from being distributed, with required disclosures for AI-generated campaign materials. Violations carry penalties.
Nevada requires the Superintendent of Public Instruction to establish a committee to study and develop recommendations on the use of artificial intelligence in K-12 education. The bill also creates new reporting and tracking requirements for student attendance and performance metrics.
Illinois requires companies processing children's data to follow child-protective design standards and conduct data protection impact assessments. The law establishes enforcement mechanisms and penalties for violations.
This bill offers sales tax exemptions to companies that invest at least $250 million in building or upgrading data centers in Kansas and create new jobs in the state. It is designed to attract large data center operators to Kansas through significant financial incentives.
This bill bans the use of DeepSeek and other AI platforms controlled by foreign adversary nations on Kansas state-owned devices and networks. It also prohibits the use of genetic sequencers or related software produced by foreign adversaries on state systems.
This bill directs the National Oceanic and Atmospheric Administration to use artificial intelligence to improve forecasting, adaptation, and response to extreme weather and wildfires. It authorizes government deployment of AI technology to enhance disaster preparedness and public safety.
This bill creates a state technology research center and review committee, along with a grant program and fund to provide compute credits to support advanced technology development in North Dakota. It is designed to promote AI and tech innovation through government-backed financial support and institutional infrastructure.
This bill eliminates sales and use tax exemptions and imposes a gross receipts tax on various services, which could affect data center operational costs and energy services. The tax changes would increase expenses for data center operators in Minnesota.
This bill provides temporary sales and use tax exemptions for equipment and property used in data centers and large data center projects in Texas. It is designed to attract data center investment by reducing the tax burden on qualifying purchases.
Texas HB5588 exempts data centers and their energy infrastructure from local property taxes to incentivize data center development and investment in the state.
This bill requires health insurers to implement standardized APIs for prior authorization processes in compliance with federal guidelines, improving transparency and reducing delays in insurance approval decisions. The measure addresses how algorithmic systems manage healthcare access by mandating interoperable technical standards.
Georgia creates a Senate study committee to examine how social media and artificial intelligence affect children and to evaluate platform privacy protections. The committee will conduct research and recommendations on these issues without establishing new regulations.
Georgia creates a Senate study committee to examine artificial intelligence and digital currency issues. The committee will conduct exploratory work without imposing immediate restrictions or regulatory requirements.
This bill addresses how large increases in electricity demand — such as from data centers — are managed on the power grid in North Carolina. It aims to ensure that the costs of accommodating major new electricity users are distributed fairly among ratepayers rather than being subsidized by existing customers.
This bill establishes a learning agenda focused on artificial intelligence in North Carolina schools. It likely directs a study or planning effort to guide how AI is taught or used in educational settings.
This bill establishes a dedicated trust fund in North Carolina to support and invest in artificial intelligence innovation. It aims to promote AI development and economic growth within the state.
This bill establishes licensing requirements and safety/privacy standards for AI chatbots operating in North Carolina. It creates enforceable regulations to govern chatbot transparency, data handling, and operational safety.
This Ohio bill updates existing laws on unauthorized use of a person's identity and adds new prohibitions against creating or distributing deepfake recordings without consent. It creates legal protections for individuals whose likeness or voice is used in AI-generated media without permission.
This Texas bill would exempt data centers and their energy-related equipment from property taxes. It is designed to encourage data center investment and growth in the state by reducing their tax burden.
This bill requires law enforcement to obtain a warrant before using facial recognition technology to identify or track individuals. It sets legal safeguards around how and when police can use this powerful surveillance tool.
This bill establishes an integrated data system to collect and share information about young children across early childhood programs in Texas. It focuses on improving coordination and outcomes for early childhood services by linking data from various agencies.
Illinois requires data brokers to register annually with the state Attorney General and establishes a centralized deletion mechanism allowing consumers to request removal of their personal information from all registered data brokers. The law includes civil penalties for non-compliance and creates a public registry of data broker operations.
Minnesota requires a study of the environmental impacts of artificial intelligence and directs the state to report findings. The bill appropriates funds to support this research.
Tennessee requires public schools and charter schools to teach students age-appropriate skills for accessing, using, and critically evaluating AI tools as part of regular curriculum. The state education department must provide guidance and optional professional development for teachers to implement this instruction.
This bill requires Tennessee public schools to teach students how to use and critically evaluate AI tools as part of their regular curriculum. It also directs the state education department to provide guidance and professional development training for teachers on AI education.
This bill establishes a grant program to fund AI-powered weapons detection systems in Tennessee schools that don't currently have them. The three-year pilot aims to enhance school safety through technology deployment.
This bill regulates how automatic license plate reader systems can be used, likely setting rules on data collection, storage, and access by law enforcement. It addresses privacy concerns related to tracking vehicles through automated surveillance technology.
This bill prohibits the use of AI to create deceptive advertisements in North Carolina. It targets misleading AI-generated content used in advertising, banning such practices to protect consumers from manipulation.
This bill regulates utilization review organizations and prior authorization processes in healthcare, which often rely on algorithmic decision-making to determine coverage eligibility. The legislation imposes requirements on medical billing and independent review procedures that constrain automated decision-making in health insurance coverage determinations.
Approved in first reading by Spain's Council of Ministers on March 11, 2025, this draft bill transposes the EU AI Act into national law, establishing prohibited AI practices, obligations for high-risk systems, mandatory labeling of AI-generated content to combat deepfakes, and a domestic sanctions regime. It designates AESIA as the lead market surveillance authority while distributing enforcement responsibilities across sectoral regulators including the Spanish Data Protection Agency and Bank of Spain.
Georgia would prohibit use of AI or automated decision tools in housing decisions without human oversight and require disclosure when such tools are used. The law would also ban certain defenses in housing discrimination cases involving AI, with enforcement and fines administered by the Attorney General.
This Iowa bill regulates the use of AI to create election-related content, such as deepfakes or synthetic media that could mislead voters. It also establishes protections for people interacting with AI systems and sets penalties for violations.
This bill changes the sales and use tax exemption that data centers in Minnesota can receive, likely adjusting the eligibility requirements or benefits available to qualifying facilities. It is generally supportive of data center development by modifying tax breaks that reduce operating costs for these facilities.
Iowa HF406 restricts certain uses of artificial intelligence and establishes a civil cause of action, creating legal accountability for prohibited AI applications. The bill advances regulatory control over AI deployment without a complete ban.
This bill modifies property tax exemptions that may apply to certain facilities, potentially including data centers or technology infrastructure. The exemption provisions could reduce operational costs for qualifying facilities.
This bill would regulate both social media platforms and AI systems in Vermont, likely establishing rules around transparency, safety, and user protections. It appears to impose significant compliance requirements on companies operating these platforms and AI tools.
This bill focuses on how data is collected and managed within Vermont's criminal justice system. It likely establishes requirements or studies around tracking criminal justice data, which could include oversight of how that data is used in decision-making processes.
This bill would establish oversight rules and safety standards for companies that build or use AI systems deemed inherently dangerous. It places significant regulatory requirements on AI developers and deployers operating in Vermont.
Tennessee would establish a three-year grant program to help school districts purchase AI weapons detection systems for schools that lack them. The program aims to enhance school safety through artificial intelligence technology.
Georgia requires private entities using automated decision systems to implement safeguards against discrimination in consequential decisions like hiring and lending. The bill establishes regulatory oversight by the state Attorney General while protecting trade secrets of AI developers.
Tennessee requires health insurance companies to meet specific standards when using AI and algorithms to decide whether to approve medical treatments and services. The law imposes transparency and oversight requirements on automated utilization review and management systems.
Minnesota would fund a study to examine the environmental impacts of artificial intelligence development and deployment on the state. This exploratory legislation seeks to understand AI's effects on energy use, water consumption, and other environmental concerns before taking regulatory action.
This bill requires smart device operators to disclose what personal data they collect from users and how they use it. The transparency requirement creates a regulatory obligation for device manufacturers and software providers handling consumer information.
This bill would create a federal Wildfire Intelligence Center to improve coordination and information-sharing for wildfire response. It focuses on using data and intelligence tools to better predict and manage wildfires across agencies.
Georgia prohibits state government agencies from using or installing AI systems developed or deployed by companies associated with the People's Republic of China on state equipment. The bill aims to protect government operations from potential foreign technology risks.
Oklahoma creates an AI Council, establishes a regulatory sandbox program for AI system testing, and launches a workforce development initiative to prepare workers for AI-related jobs. The framework emphasizes responsible AI deployment without imposing hard restrictions.
This bill modifies the existing tax exemption for certain data centers in Minnesota, likely adjusting eligibility requirements or benefits. It is designed to support or attract data center investment by providing favorable tax treatment.
This bill prohibits U.S. persons and companies from helping advance artificial intelligence capabilities in China, aiming to prevent technology transfer and maintain U.S. strategic advantage in AI development. The legislation imposes criminal penalties for violations of this restriction.
Georgia requires all state governmental entities to develop and maintain AI usage plans and establishes a new Georgia Board for Artificial Intelligence to provide guidance and oversight. The law creates mandatory transparency and accountability mechanisms for government AI systems.
This Alaska bill requires disclosure when AI-generated deepfakes are used in election-related content and sets rules for how state agencies can use AI and share personal data. It covers multiple AI-related areas including transparency in government AI use and protections around individual data transfers between agencies.
This bill creates legal liability for defamation when synthetic media (AI-generated content) is used to harm someone's reputation, and restricts its use in political campaign communications. It sets rules to protect people from being falsely portrayed by AI-generated images, audio, or video during elections.
This North Dakota bill gives the state Public Service Commission authority to regulate where data centers can be built, including compatibility with surrounding land uses. It adds penalties for non-compliance, meaning data center developers would need to go through a formal state siting review process.
Georgia requires warehouse employers to disclose quotas and workplace surveillance systems to employees, limit collection of work-speed data, and prohibit unlawful retaliation for non-compliance. The bill creates enforcement mechanisms and private remedies for workers affected by algorithmic management practices.
South Carolina would restrict how companies collect, retain, and sell personal data of children, requiring privacy-by-default protections, data impact assessments, and transparent privacy policies. The bill creates enforcement mechanisms including civil and criminal liability for violations.
This bill establishes South Carolina's Age-Appropriate Design Code, requiring companies to implement privacy protections and design practices that safeguard children's data and limit manipulative algorithms targeting minors. It creates enforcement mechanisms and obligations for covered digital services to prioritize children's safety and data protection.
Funded under Italy's National Recovery and Resilience Plan (PNRR), the Polo Strategico Nazionale awarded €520 million in contracts in 2024 to migrate ministerial workloads to certified sovereign clouds, requiring data to remain on domestic Italian soil in Tier 4 facilities. The Italian AI Law reinforces this by requiring public administrations using e-procurement to prefer AI suppliers that guarantee strategic data localization in Italian data centers, with a PNRR mandate to shift 75% of public workloads to certified domestic clouds by 2026.
In November 2024, the Polish government announced a 1 billion złoty (approximately $240 million) national investment plan targeting AI development to boost economic competitiveness and the defence sector, updated in 2024 as part of the revised AI Development Policy in Poland. The programme funds AI R&D through the National Centre for Research and Development (NCBR) and supports GovTech Polska initiatives deploying AI in public administration.
Fully in effect since September 2024, Law 25 imposes GDPR-style obligations on all organizations processing personal data of Québec residents, including mandatory Privacy Impact Assessments for AI systems, explicit disclosure when decisions are made exclusively through automated processing (Section 12.1), and penalties up to $25 million CAD or 4% of worldwide turnover. The Commission d'accès à l'information (CAI) is ramping up enforcement audits in 2026, making it Canada's strictest provincial AI privacy framework.
Approved on August 22, 2023 and operational since June 2024, this royal decree established AESIA as Europe's first dedicated national AI supervisory authority, headquartered in A Coruña. AESIA manages Spain's national AI regulatory sandbox, monitors the market for prohibited AI systems, and will assume full inspection and sanctioning powers once the national AI law enters into force.
Effective 1 January 2024, this amendment to the BKL formally banned new hyperscale data centers (>10 hectares and >70 MW) across most of the Netherlands, restricting new large-scale builds to designated municipalities such as Eemshaven (Het Hogeland) and Agriport A7 (Hollands Kroon). It codified the 2022 interim moratorium into permanent spatial planning law and does not apply to projects already permitted before its entry into force.
A non-binding ministerial circular issued in December 2023 that establishes an ethical code of conduct for all public and private electronic system operators engaging in AI-based activities in Indonesia, covering principles such as inclusivity, data protection, IP rights, and safety. It serves as the interim regulatory framework for AI pending the enactment of a binding Presidential Regulation on AI, which was still being finalized as of early 2026.