2026年全球人工智能监管态势报告 AI Regulation in 2026

Holistienl

EBOOK

AIRegulationin2026

Asnapshot

JANUARY2026

ExecutiveSummary

•2025wasamixedyearforAIregulation:althoughthefocusonHRtech,inancialservices,insurance,andgenerativeAIthatwasseenin2024continuedinto2025,theUSandEUhavebothmadeattemptstosoftenorevenwithdrawAIregulation.

interviewlawsbeforeatransitiontobiasaudits.Keythemesarenon-discriminationandtransparency,includingnotiication.HRtechisalsoafectedbyrisk-basedlaws.

•FinancialServicesarealreadyheavilyregulated,soAIininancialservicesisoften•HRTechhaslongbeentargetedbypolicymakers,withtheinitialfocusonvideo

addressedthroughtestingenvironments.

•Insuranceisalsoheavilyregulated,sotheapplicabilityofexistinglawsandregulationstoinsurancehasbeenemphasized,althoughAI-speciiclaws,suchasColorado’sSB169,havebeenintroduced.AIininsuranceisalsocoveredbyrisk-basedlaws,typicallybeinggroupedwithessentialprivateservicesandessentialpublicservices.

•DynamicpricinghascomeunderscrutinyintheUSinparticular.LawstargetAIusedinvarioustypesofdynamicpricing,includingrentandticketprices.

•GenerativeAIisapriorityofgovernmentsaroundtheworld,withlawstargeting

deepfakesandtheuseofgenerativeAIinthejudiciaryinparticular.AIcompanionsarealsotargeted,withrequirementsrelatingtotransparencyanddisclosure.

•Risk-basedframeworkstargetmultipleAIusecases,eitherjustseekingtogovernthosethatarehigh-risk/usedtomakeconsequentialdecisionsorcreatingrisktierswithdiferingobligationsbasedonthelevelofrisk.TheEUAIActrepresentsthemostcomprehensiverisk-basedframeworkandhasinspiredseveralothersaroundtheworld.

•Internationalcooperationisbecomingincreasinglyimportantasgovernmentsaroundtheworldalltakeadiferentapproach.InternationalbodiessuchasUNESCOandtheUNhaveledseveralinternationalefortsoverthepastfewyears.TheCouncilofEuropeandtheAssociationofSoutheastAsianNationshavealsointroducedregionalinitiatives.

•TheAIregulatoryecosystemisever-changing.Thebestwaytoensurecomplianceistotakeaproactiveapproach,beginningwithinventoryingyoursystemsandensuringsafeguardsareinplacethroughouttheAIlifecycle.

EBOOKAIRegulationin2026I

EBOOKAIRegulationin2026II

AboutthisReport

Forthepastthreeyears,wehavepublishedareportonthestateofAIregulationsaswehavemovedintothenewyear(2023report

here

,2024report

here

,and2025report

here

).Thesereportshavebeensomeofourmostpopularresources,andsomething

wehavecontinuedthisyear.

However,whileinpreviousyearswehavecovereddevelopmentsbycountry,thisyearwe’reshakingthingsupandcoveringdevelopmentsbysector.Thismeansyoucaneasilyindthemostrelevantlawstoyoubasedonyourusecase,althoughwealsorecommendlookingatthesectiononrisk-basedlawsasyourusecasemayalsobetargetedhere.ThisapproachalsoallowsustocovermoreUSlaws,ofwhichtherearemany(over270inprogressattheFederalleveland376atthestatelevelatthetimeofwriting).Bytakingthisapproach,we’vealsoaddedmorecontentoninternationalinitiativesthatmayafectyouevenifyouarebasedinacountrywithlessregulatoryactivity.

Stillwantacountry-by-countryview?Intheigurebelow,we’vehighlightedthecountriesleadingthechargeintermsofvolumeofsigniicantAIregulatoryactivity.

UnitedKingdom

•SeriesofAIwhite

papersandguidance

•Somelawsintroduced

SouthKorea

•Risk-based

approach(noprohibitions)

•Enforcedfrom

Russia

•Legislation

EuropeanUnion

•Risk-basedapproachwithprohibitions

•Gradualapplication

onsandboxesandliability

22January2026

China

UnitedStates

•Over250laws

goingthrough

Congressand

over350throughStateLegislatures

•Almost300AI

•Multiplelawson

onlineplatforms,

startedasof2

February2025

generativeAI,andindustrypromotion

•Union-levellawsalso

lawsenacted

Singapore

•ExtensiveAIguidance

•Leadingthewaywithinternationalcooperation

Brazil-AIBill

No.2338/2023

•Risk-basedapproachwithprohibitions

•Passedbutpendingapproval

Chile-BillNo.16821-19

•Risk-basedapproachwithprohibitions

•High-risksystemsnotspeciied

•Inprogress

ThiseBookisintendedtoserveasasnapshotoftheregulatoryactivityaswemoveinto

2026,ensuringyouhavethekeyactivityaroundtheworldonyourradar.Throughout2026,wewillcontinuetobringyouupdatesonour

blog

.Inthemeantime,leveragethiseBooktosetyouupforsuccessonyourAIgovernancejourneythroughout2026.

EBOOKAIRegulationin2026III

Risk-basedLaws16

Contents

RegulationofHRTech1

Videointerviewlaws

1

Biasauditlaws

2

Updatestoexistingframeworks

2

Impactassessmentlaws

3

Workerdisplacementandwagelaws

3

RegulationofFinancialServices5

RegulationofAIinInsurance7

Ohio’sHB579

8

Pennsylvania’sHB1925

8

Texas’sSB815

8

RegulationofDynamicPriceSetting9

GenerativeAILaws10

Frontiermodellaws

10

TransparencyandDisclosureLaws

1

1

DeepfakeLaws

1

3

GenerativeAIuseintheJudicialService

1

5

EUAIAct

1

8

Italy’sAILawundertheEUAIAct

1

9

Korea’sAIlaw

20

KazakhstanAIlaw

21

Vietnam’sAILaw

21

Taiwan’sBillonAI

2

2

Brazil’sAIlaw

23

Chile’sAIlaw

23

Colorado’sSB205

24

California’sSB420

25

HawaiiSB59

26

Illinois’PreventingAlgorithmicDiscriminationAct

27

InternationalAIInitiatives28

UNMechanismstoPromoteMultilateralAIGovernance

28

UNESCOGuidanceonGenerativeAIinEducation

29

ASEANExpandedGuideonAIGovernanceandEthics

29

CouncilofEuropeFrameworkConventiononAI

30

2025wasamixedyear:Whattoexpectin202631

Navigatingtheuncertainty

32

PrioritizeproactivegovernancewithHolisticAI34

EBOOKAIRegulationin20261

RegulationofHRTech

TheuseofAIandalgorithmsinemploymentdecisionshaslongbeenakeyareaofinteresttopolicymakers,withsomeoftheearliestlawspassedintheAIecosystemtargetingHRtechtools.Aswehavean

entirewhitepaper

dedicatedtoHRtechlaws,inthiseBook,we’llgiveawhistlestoptour.

WithpolicymakerskeentoregulateHRtechtools,thereisalotofnoise.However,lawstargetingHRtechcanbegroupedintoivekeytypes:videointerviewlaws,biasauditlaws,updatestoexistinglegalframeworks,impactassessmentlaws,andworkerdisplacementlaws.Foreachofthesecategories,wehighlightsomeofthekeylaws

thathavebeenproposedorthatarealreadyinefectthatyoushouldhaveonyourradarin2026ifyoudeveloporuseHRtechtools.

•Videointerviewlaws-SomeoftheirstlawsspeciicallytargetingtheuseofautomatedHRtoolsfocusedonobtainingconsentforvideointerviewingtoolspoweredbyAI.

IllinoisArtiicialIntelligenceVideoInterviewAct

–RequiresnotiicationforAI-drivenvideointerviewsandcandidateconsent,aswellasreportingofthedemographicdataforcandidateshiredandnothired.Efective1January2020.

Maryland’sFacialRecognitionServicesProhibition

-Preventsemployersfromusingfacialrecognitionservicesduringvideointerviewsunlessapplicantssignawaiverconsentingtoitsuse.Efective1October2020.

EBOOKAIRegulationin20262

•

automatedemploymentdecisiontools.

NewYorkCityLocalLaw144

–Requiresemployersandemployment

agenciesusingAEDTsforhiringandpromotiondecisionstoconduct

Biasauditlaws–Theselawsexplicitlyrequireannual,independentbiasauditsof

independent,impartialbiasauditsannuallyusingthemetricsspeciied

bytheDepartmentofConsumerandWorkerProtections.Alsorequiresasummaryoftheresultsofthebiasaudittobepublishedandnotiicationtobegiventocandidatesandemployees10workingdaysbeforetheuseoftheAEDT.Enforcedfrom5July2023.

NewJerseyA3854

–RequiresvendorsofAEDTsusedforhiringorpromotiondecisionstocompleteannualimpartialbiasaudits.Asummaryofresultsshouldalsobepublished,andemployersoremploymentagenciesmustissuenotiicationoftheuseofthetoolwithin30days.Inprogress.

NewYorkA03914/S04394–RequiresemployersandemploymentagenciesusingAEDTsforhiringdecisionstoconductannualimpartialdisparateimpactanalysisandpublishasummaryoftheresults.Inprogress.

NewJerseyA3855/S2964–RequiresemployersandemploymentagenciesusingAEDTsforhiringorpromotiontoconductannualimpartialbiasaudits,publishasummaryoftheresults,andissuenotiicationsatleast10workingdaysbeforeuse.Inprogress.

PhiladelphiaHB594

–RequiresemployersandemploymentagenciesusingAEDTsforhiringorpromotiontoconductannualindependent,impartialbiasaudits,publishasummaryoftheresults,andissueanotiicationatleast10workingdaysbeforethetoolisused.Inprogress.

•Updatestoexistingframeworks–WhileexistinglawsandregulationsapplytoAI,somelegalframeworkshavebeenupdatedtospeciicallyextendequalopportunityprovisionstoautomatedtools.

IllinoisHB3773

–UpdatestheIllinoisHumanRightsActtomakeitacivilrightsviolationtouseAIinawaythatresultsindiscriminatoryoutcomesbasedonprotectedattributesandtousezipcodesasaproxyforprotectedattributes.EmployersmustalsoissuenotiicationsfortheuseofAI-driventools.Efective1January2026.

EBOOKAIRegulationin20263

California’smodiiedemploymentregulations

–Employmentregulationsprotectingagainstdiscriminationareupdatedtoexplicitlyextendthemtoautomated-decisionsystems.Interestingly,biasauditsmayprovideadefenseagainstclaimsofunlawfuldiscrimination.Efective1October2025.

•

Impactassessmentlaws–TheselawsrequireimpactassessmentsofHRtech

tools,withsomealsoimposingrestrictionsonelectronicmonitoringtoprotectworkerprivacy.

assessmentsofautomatedtoolsusedforavarietyofemployment

NewYorkA3779/S185–Requiresannualimpartial,third-partyimpact

decisions.Speciically,disparateimpactmustbeassessed,andthe

resultsmustbesubmittedtoapublicregistryanddistributedto

employees.Employersmustalsoprovidenotiicationsfortheuseof

automatedtoolsandarepreventedfromsolelyrelyingonautomated

toolswhenmakingdecisions.Inprogress.

VermontH.262

–Requireswrittenimpactassessmentsofautomatedemploymentdecisiontoolsthatmustfocusonrisksandvalidityandbeupdatedanytimethesystemissigniicantlychanged.Employeesarealsorequiredtomeetcertainconditionstouseelectronicmonitoringintheworkplace.Bothtechnologiesareprohibitedfromleveragingfacial,gait,voice,oremotionrecognitiontechnology.Inprogress.

independentimpactassessmentsofelectronicmonitoringtoolsaswellasAEDTs.Impactassessmentsmustbesubmittedtoapublicregistry,andAEDTsmustbesuspendediftheimpactassessmentindsthattheyresultindisparateimpact.Inprogress.

MassachusettsS35

–Limitselectronicmonitoringandrequiresyearly

WashingtonHB1672

–LimitselectronicmonitoringandrequiresawrittenimpactassessmentofAEDTsthatmustbeupdatedfollowinganysystemchanges.Inprogress.

•Workerdisplacementandwagelaws–Theselawsseektoprotectworkersfrom

preventabledisplacementfromtheuseofAIbyimposinginancialdeterrents.

NewYorkWorkforceStabilizationAct

–Requiresemployerstoconductbi-annualimpactassessmentsoftheirAIdeploymentsthat,amongotherthings,recordworkerdisplacement.2%surchargeswouldalsobeimposedoncompaniesthatterminateorreducethehoursof15ormoreemployeesduetoAI.Inprogress.

EBOOKAIRegulationin20264

NewYorkRobotTaxAct

–Employersthatmeetcertainthresholdswillbeliableforadditionaltaxbasedonanemployee’swagewhereworkershavebeendisplacedbytechnology,includingAI.Inprogress.

IllinoisSurveillance-BasedPriceandWageDiscriminationAct

–preventssurveillancedatafrombeingusedtoinformindividualizedpricingandwages.Inprogress.

Georgia’sSB164

–Preventssurveillancedatafrombeingusedtoinformindividualizedpricingandwages.Inprogress.

EBOOKAIRegulationin20265

RegulationofFinancialServices

FinancialServicesisalegacysectorwhenitcomestousingAIandalgorithms.Likeothersectors,existinglawsandregulationsapplywhetherornotAIisused.Withinancialservicesalreadybeinghighlyregulated,AI-speciiclawsoftenfocusonthetestingofsystems.

Forexample,theFinancialConductAuthority,theUK‘sinancialservicesregulator,haslaunched

AILiveTesting

.TheprojectprovidescompanieswithsupportfromitstechnicalandregulatoryteamstodeployAIsystemsininancialmarketsintheUK,withtheaimofsupportingtheevaluationoftheimpactofAIonUKinancialmarkets.Areportontheproject’soutcomesisexpectedtowardstheendof2026.

Withasimilarapproach,theUShasintroducedlegislationproposingregulatorysandboxesforinancialservicesinordertopromoteAIinnovation.Speciically,thebill(S2528/

HR4801

)seekstoestablishAIInnovationLabswithineachinancialregulatorforregulatedproviderstoexperimentwithAIwithouttheriskofenforcementaction.

BoththeUSandUKtestingenvironmentsaresubjecttoapplications,withtheirstCohortoftheAILiveTestingenvironmenthavingkickedofinOctober2025.

Takingadiferentapproach,Singapore’sMonetaryAuthoritypublishedaconsultationpaperinNovember2025onitsProposedGuidelinesonAIRiskManagementforFinancialInstitutions.Theguidelines,whichfollowonfromtheMonetaryAuthority’sSeptember2025

circularondeepfakes

,callforinancialinstitutionstocreateaninventoryoftheirAIsystems,assessrisk,andincorporateAIgovernanceandriskmanagementintotheirpractices.TheyalsocallforcontrolsthatcoverthewholeoftheAIlifecycle,includingtransparency,fairness,datamanagement,humanoversight,andevaluation,andseniormanagementshouldfosterariskculture.

EBOOKAIRegulationin20266

Finally,theEuropeanParliamentadopteda

resolution

ontheimpactofAIontheinancialsectoron25November2025.ItnotesthatwhileAIhassigniicantpotentialtobringbeneitstoinancialservicesthatshouldbepassedontoconsumers,italsobringsrisks,withLLMsbringingnovelrisks.Assuch,itcallsforefectivemitigationthatrespectsexistingapplicableinancialregulations.Inadditiontostepstopromote

AI-relatedinnovation,italsocallsfortheEuropeanCommissiontoprovideenablingguidanceontheapplicationofexistinginancialserviceslegislationtoAIandcontinuousmonitoringofitsapplicability.

EBOOKAIRegulationin20267

RegulationofAIinInsurance

Insuranceisanotherlegacysectorthathasbeenusingalgorithmstomakedeterminationsfordecadesand,likeinancialservices,isheavilyregulated.Indeed,theNationalAssociationofInsuranceCommissionersintheUnitedStatesissuedabulletinforredistributionbystate-levelregulatorsremindinginsuranceprovidersthatexistingregulationsstillapplywhenAIisusedininsuranceandcallingforthemtoimplementAISProgramstomitigatetherisksofAI.

Somestateshavetakenitastepfurther,however,andhaveintroducedlawsspeciicallyregulatingtheuseofAIininsurancepractices.Coloradopavedthewaywithitslaw

ProtectingConsumersfromUnfairDiscriminationinInsurancePractices,which

becameefectivein2023.Withthelawregulatingarangeofinsurancepracticesandtypeslikehealth,life,andprivatepassengerautoinsurance,workisunderwaytocreatespeciicrulesforeachlineofinsuranceandinsurancepractice.

Regulations

onGovernanceandRiskManagementFrameworkRequirementsforLifeInsurers’,PrivatePassengerAutomobileInsurers,andHealthBeneitPlanInsurers’UseofExternalConsumerDataandInformationSources,Algorithms,andPredictiveModelshavebeenadoptedandcameintoefecton15October2025.Regulationsonothertypesofinsuranceandinsurancepracticesare

stillemerging

.

AlsoseekingtoregulateavarietyofinsurancepracticesisFlorida’s

S0202

.IntroducedinOctober2025,itseekstorequirethatallinsuranceclaimdenialsbemadebyqualiiedhumanprofessionalsratherthanAIandthattheidentityoftheprofessionalresponsibleforthedecisionisdisclosed.

EBOOKAIRegulationin20268

Otherinsurancelawsspeciicallytargethealthinsurance.Forexample:

OhioHB579wouldrequirehealthinsurerstoiledetailedannualreportswiththestateinsurancesuperintendentontheirAIuseandprohibitthem

frommakingmedicalcaredecisionssolelyusingAI.Inprogress.

toauditandinspectagents’useofautomateddecisionsystemsforreview.

PennsylvaniaHB1925

wouldrequiredisclosurearoundtheuseofAIby

insurers,aswellashospitalsorclinicians,andanattestationofhowbias

anddiscriminationhavebeenminimized.WhenAIisused,itmustbe

followedbyanindividualizedassessment.Inprogress.

TexasSB815

,efective1September2025,amendstheinsurancecodetoprohibitautomateddecisionsystemsfrombeingusedtomakeahealthcare-relatedadversedeterminationandallowsthecommissioner

EBOOKAIRegulationin20269

RegulationofDynamicPriceSetting

Anotherkeyusecasebeingparallelscanbedrawnwitht

InNewYork,

S7882

cameintousingpricingalgorithmstosfromtwoormoreresidentialorlicensingofanysoftware,itdoesallofthefollowing:

andenddatesfromtwoormorediferentlandlordsorpropertymanagers.

•Analyzingorprocessingthedatafromthepointaboveinacomputersystem,software,orprocesstoanalyzeit,includingusingittotrainanalgorithm.

•Providingrecommendationstoalandlordorpropertymanageraboutrentalprices,leaserenewalterms,idealoccupancy,orotherleaseconditions.

•Collectingdataonpast

targetedbypolicymakersisheuseofAItosetindividuali

efecton15December202

etrentprices,speciicallyta

propertyownersormanage

service,oralgorithmicdevice

orcurrentrentalprices,avail

dynamicpricesetting,wherezedwages.

5.Itprohibitslandlordsfromrgetingthemergingofdatars.Thelawprohibitstheuse thatperformsthisserviceif

ableunits,orleasestart

ThisactmakesNewYorktheirststatetodirectlytackledynamicpricingwithregardtohousing,andcomesontheheelsofits

AlgorithmicPricingDisclosureAct

,whichmoregenerallyappliestobusinessesinthestate.

Similarly,Californiahaspassed

AB325

,whichamendsitsantitruststatutetoban“commonpricingalgorithms”.Theseusecompetitordatatoinfluencepricingorcommercialterms(includingemployeecompensation).

Severalotherstatesaretakingactionagainstdynamicpricing,includingMassachusetts(

S2515

prohibitingsurveillancepricingingrocerystores),Vermont(

H371

targetingretailers),andIllinois(

HB3838

targetingticketsellersandresellers).Withthesebillsstillinprogress,2026mayseetheriseofmorelegislationfocusedondynamicpricing.

EBOOKAIRegulationin202610

GenerativeAILaws

ThepastfewyearshavealsoseenalargevolumeoflawstargetinggenerativeAI.In2024,akeyfocuswasontacklingtheuseofdeepfakesthatcouldinterferewithelections.In2025,deepfakelawswerestillintroduced,buttherewasalsosigniicantactivitysurroundingmentalhealth,aswellastheuseofgenerativeAIinthejudiciary.

Frontiermodellaws

OneofthemostcomprehensivegenerativeAIlawsisCalifornia’s

SB53

.Signedintolawon29September2025,theTransparencyinFrontierArtiicialIntelligenceActaimstotacklepotentiallycatastrophicrisksfromthemostadvancedAIsystems.SB53followsfromthevetoed

SB1047

in2024,whichcalledforstrictermeasuresforfrontiermodelsandtheirdevelopers.

SB53afectsfrontierdevelopersandlargefrontierdevelopers,andprovidesforanarrowerapproachwhere:

•Developersmustpublishtransparencyreportswhenlaunchingorsubstantiallymodifyingafrontiermodel.LargefrontierdevelopersmustfurtherdisclosecatastrophicriskassessmentsandcreateandpublishfrontierAIframeworksdetailinghowtheyassess,manage,andmitigatecatastrophicrisks.

•DevelopersmustproactivelydeclaretheirintenttocomplywithfederallawsorregulationsadoptedbytheCaliforniaOfficeofEmergencyServicesandreportanycriticalsafetyincidents.

•Coveredemployees–thosewhooverseecriticalsafetyincidents–areprotectedfromretaliationforwhistleblowing.Largefrontierdevelopersmustalsocreateinternal,anonymouswhistleblowingchannels.

EBOOKAIRegulationin202611

Non-complianceissubjecttocivilpenaltiesbytheAttorneyGeneralofupto$1millionperviolation,andasuccessfulwhistleblowerplaintifmayalsobeawardedattorney’sfees.

commitmentstoupdatetheinFrontierAIActbeforeitco

Underthecurrentversion,latheirmodels:

•Implementawrittensa

•Retainoriginalcopies

retainingthedocuments

RAISEActtofurtheralignitwmesintoefecton1January

rgedevelopersmustdothe

etyandsecurityprotocol.

oftheseprotocolsandmai

foriveyearsafterthemodel

ithCalifornia’sTransparency2027.

followingbeforedeploying

ntainversioncontrols,

islastdeployed.

SimilartoCalifornia’sFrontierAIlaw,NewYork’sResponsibleAIsafetyandeducation

(RAISE)Act

,signedbyGovernorHochulon19December,imposestransparencyrequirementsandaimstoreducerisk.Beforesigning,GovernorHochulsecured

f

•Publisha(redacted)copyoftheseprotocolsandsubmitittotheAttorneyGeneralandtheDivisionofHomelandSecurityandEmergencyServices.

•Recordandretaininformationonthespeciictestsusedtoassessthemodelunderthesafetyandsecurityprotocolsandtheirresults.

•Implementsafeguardstopreventunforeseeablecriticalharm.

AnysafetyincidentsfollowingthedeploymentofthemodelmustbereportedtotheAttorneyGeneralandtheDivisionofHomelandSecurityandEmergencyServiceswithin72hours.

Non-compliancewiththeRAISEActcanresultincivilpenaltiesofupto$10millionfortheirstviolationandupto$30millionforthesecond.

TransparencyandDisclosureLaws

SeverallawshavebeenintroducedmandatingthatchatbotoperatorsmustdisclosetousersthattheyareinteractingwithAIandnotahuman.Somestatesrequiredisclosuresatthestartofasessionandatregularintervals,whileothersrequireregulardisclosuresonlywhenusersareknowntobeminors.

Forexample,Maine’s

LD1727

cameintoefecton25September2025.ItprohibitscompaniesfromleadingcustomerstobelievethattheyareinteractingwithhumansiftheyareengagingwithAIchatbots.Thisappliestobothtextualandauralcommunications,andbusinessesmustdisclosetousersthattheyareengagingwithanAIchatbotratherthanahumanrepresentative.

EBOOKAIRegulationin2026