Other Sections

Other relevant resources

Regulation and Policy

Austria

• Artificial Intelligence Mission Austria 2030 - Shaping the Future of Artificial Intelligence in Austria. The Austrian ministry for Innovation and Technology published their vision for AI until 2030.

Brazil

• Brazilian AI Regulation (PL 2338/2023) - A proposed bill in Brazil aiming to establish a comprehensive framework for the development and use of artificial intelligence, emphasizing transparency, accountability, and alignment with international standards.

Canada

• Artificial Intelligence and Data Act (AIDA) - An Act to enact the Consumer Privacy Protection Act, the Personal Information and Data Protection Tribunal Act and the Artificial Intelligence and Data Act and to make consequential and related amendments to other Acts

China

• Beijing AI Principles - initiative for the research, development, use, governance and long-term planning of AI, calling for its healthy development to support the construction of a human community with a shared future, and the realization of beneficial AI for humankind and nature.
• China Internet Security Law - China's law which enacted to increase cybersecurity and national security, safeguard cyberspace sovereignty and public interest, protect the legitimate rights and interests of citizens, legal persons and other organisations, and promote healthy economic and social development (and was argued by the Chinese ministry for industry and information that this law justified the means of pursuing the "Going Out" strategy China has persisted on ever since 1999). KPMG's summary of the Cybersecurity Law. Center for strategic & international studies overview of China's new Data Privacy law
• China's Administrative Provisions on Information Services on Microblogs - China's provisions which require microblogging sites (social media sites) to obtain relevant credentials by law, verify users' real identities, establish mechanisms for dispelling and refuting rumors, etc. Summary of rules by the US Law Library of Congress.
• China's Interim Measures for the Management of Generative Artificial Intelligence Services - The first administrative regulation on the management of Generative AI services, which came into effect on August 15, 2023.
• China's Personal Information Security Specification (Translation) - The Chinese Government's first major digital privacy rules which took effect in May 2018, which lays out granular guidelines for consent and how personal data should be collected, used and shared. Center for strategic & international studies overview of the specification
• Decision on strengthening the protection of online information - The Standing Committee of the National People's Congress (NPC) of the People's Republic of China adopted the decision on strengthening the protection of online information - this is an act that contains 12 clauses applicable to entities both in the public and private sectors in respect to the collection and processing of electronic personal information on the internet.
• Personal Data Protection Act - The personal data protection act of the Republic of China, which is enacted to regulate the collection, processing and use of personal data as so to prevent harm on personality rights, and to facilitate the proper use of personal data.

Dubai

• Smart Dubai Artificial Intelligence Principles and Ethics - Ethical AI Toolkit - created to provide practical help across a city ecosystem. It supports industry, academia and individuals in understanding how AI systems can be used responsibly. It consists of principles and guidelines, and a self-assessment tool for developers to assess their platforms.

European Union

• Annex III Deep Classifier - AI-powered classifier mapping product features to EU AI Act Annex III high-risk categories (items 1-8) plus Article 50 transparency obligations, with Article 26(6) deployer audit-trail considerations.
• Ethics Guidelines for Trustworthy AI - European Commission document prepared by the High-Level Expert Group on Artificial Intelligence (AI HLEG).
• EU AI Act - The EU Artificial Intelligence (AI) Act is a legal framework that regulates AI in the European Union; this was the first regulation implemented on AI (overview).
• EU AI Act + ISO 42001 + NIST AI RMF Crosswalk - Deterministic mapping between EU AI Act Articles, ISO/IEC 42001:2023 Clauses, NIST AI RMF Functions, Colorado SB 24-205, and GDPR Article 22 — triple-framework alignment for compliance teams.
• EU AI Act Governance Assessment Example (DE) - Internal governance and assessment document template in German — community-suggested resource per #33.
• EU AI Act Penalty Calculator - Penalty estimator covering EU AI Act fines under Article 99 (operator obligations) and Article 101 (general-purpose AI (GPAI) provider sanctions), with tiers depending on type of infringement and annual worldwide turnover.
• eucomplyhub - Open methodology and interactive tooling covering EU AI Act audit workflows (Annex III classification, GPAI Article 53, Article 50 transparency) and ISO/IEC 42001:2023 crosswalk.
• GDPR.EU Guide - A project co-funded by the Horizon 2020 Framework programme of the EU which provides a resource for organisations and individuals researching GDPR, including a library of straightforward and up-to-date information to help organisations achieve GDPR compliance (Legal Text).
• General Data Protection Regulation GDPR - Legal text for the EU GDPR regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC
• SetAIComply - EU AI Act compliance workspace for European SMEs, covering applicability, Annex III risk classification, Annex IV technical documentation and DPIAs, localised in all 24 EU languages; includes a public risk-tier checker of 15 questions across Article 5 prohibited practices, Annex III high-risk uses and Article 50 transparency triggers, evaluated client-side with no signup.

India

• IT Amendment Rules, 2026 - These are updated rules that amend the IT Rules, 2021 to further strengthen due diligence framework for intermediaries, particularly in relation to synthetically generated information (SGI) and associated online harms. Frequently asked questions here.
• The Digital Personal Data Protection (DPDP) Act - India's DPDP Act aims to provide for the processing of digital personal data in a manner that recognises both the right of individuals to protect their personal data and the need to process such personal data for lawful purposes and for matters connected therewith or incidental thereto. The DPDP Act was passed in the Parliam