— Edition 1.247 33 verified trackers
ES EN
Politics · Technology · Digital regulation  ·  where data speaks before headlines
Snapshot data
AML/OFAC enforcement against banks and fintech — 455 penalties documented 455 AML/OFAC penalties documented across 177 countries and 401 regula… CNMC Spain · the Digital Services Coordinator g… — 6 documented milestones 6 milestones in Spain's DSA Coordinator rollout; as of May 2026 still… Corporate data breaches: from incident to response — 7 breaches documented 7 corporate data breaches documented by notification conduct and outc… Digital regulatory risk index by country — 16 countries profiled 16 countries profiled by digital regulatory risk (coverage expanded w… DMA · designated gatekeepers and real compliance — 8 documented DMA acts 8 acts in the DMA gatekeeper regime: 7 designated, first final fines … Global election risk 2026: democracy and digita… — 22 elections profiled 22 2026 elections profiled by political regime (EIU) and digital envi… Electoral digital integrity 2026 — 13 elections profiled 13 elections profiled by digital integrity; 5 with transparent politi… Documented electoral disinformation 2026 — 5 documented campaigns 5 electoral disinformation campaigns or patterns documented with open… GDPR · which national authority really sanctions — 9 authorities profiled 9 national authorities profiled; ~€7.1bn in GDPR fines since 2018, bu… Digital political ad spending 2026 — 5 country-platform observ… 5 observations of digital political ad spending in 2026 elections, me… US · the state AI regulation patchwork — 8 laws and milestones 8 laws and milestones in the US AI patchwork; with no comprehensive f… Climate: the gap between pledge and action — 12 countries assessed 12 countries assessed by the Climate Action Tracker: 10 with insuffic… Power and corruption in the courts in Ibero-Ame… — 29 documented cases 29 senior officials prosecuted for corruption across 19 countries, wi… Crypto industry: collapses, sanctions and convi… — 10 documented cases 10 crypto-sector collapse, sanction and conviction cases across 4 cou… Content moderation: appeals and reversals — 19 documented decisions 19 appealed and reviewed moderation decisions, with their policy, ori… AI harms in court — litigation, rulings and set… — 100 documented cases 100 litigated AI-harm cases across 25 jurisdictions on 5 continents, … Public AI spending — global government contracts — 50 documented contracts 50 public AI contracts across 15 jurisdictions on 5 continents (45 wi… Scandal → conviction gap — — milestones logged Series starting — Odebrecht/Lava Jato as base case Technology ↔ regulation gap — 25 regulatory milestones 25 milestones across 11 jurisdictions; gaps from 0 to 22 years; Chile… Campaign promises → fulfillment — 29 term evaluations 29 terms evaluated across 25 countries on five continents Digital fines actually imposed — 60 sanctions recorded 60 high-value sanctions across 17 jurisdictions and 6 continents; cov… EU AI Act — designation of national authorities — 3 / 27 Member States Art. 70 deadline expired 2 Aug 2025 — process still open AI Act · Notified bodies for conformity assessment — 1 body with AI-specific a… Designation process opened 2 Aug 2025 · high-risk deadline Aug 2026 AI Act · Sanctions regime and its actual enforc… — 0 documented AI Act fines… Only 3 of 27 MS with both authorities designated by early 2026 EU · Consolidated DSA enforcement decisions — €120M first DSA fine · X · 5 … 5 Member States referred to CJEU for insufficient DSC implementation LATAM · Digital spending in 2026 electoral camp… — $14.794M COP · highest declared … Only 8 of 13 campaigns had reported in Cuentas Claras by mid-May Ibero-America · documented public contracts wit… — 3 contracts verified with… DC registry kickoff · ongoing monthly manual sweep LATAM · Internet shutdowns and platform blocks — 7 documented events · 202… Venezuela concentrates the region's most severe blocks LATAM · Judicial and regulatory sanctions on pl… — $5,2M USD · fine on X Corp. i… X complied with the orders and was reinstated after 39 days of suspen… Commercial spyware: documented cases worldwide — 22 documented cases 22 verified commercial-spyware cases across 12 countries on four cont… RSF · Press freedom in Latin America — 144 worst regional rank (Pe… AR -11 · PE -14 · SV -8 · EC -31 · USA -7 LATAM · AI bills in legislative process — 150+ bills identified Niubox January 2026 — only 4 Iberoamerican countries with law in force AML/OFAC enforcement against banks and fintech — 455 penalties documented 455 AML/OFAC penalties documented across 177 countries and 401 regula… CNMC Spain · the Digital Services Coordinator g… — 6 documented milestones 6 milestones in Spain's DSA Coordinator rollout; as of May 2026 still… Corporate data breaches: from incident to response — 7 breaches documented 7 corporate data breaches documented by notification conduct and outc… Digital regulatory risk index by country — 16 countries profiled 16 countries profiled by digital regulatory risk (coverage expanded w… DMA · designated gatekeepers and real compliance — 8 documented DMA acts 8 acts in the DMA gatekeeper regime: 7 designated, first final fines … Global election risk 2026: democracy and digita… — 22 elections profiled 22 2026 elections profiled by political regime (EIU) and digital envi… Electoral digital integrity 2026 — 13 elections profiled 13 elections profiled by digital integrity; 5 with transparent politi… Documented electoral disinformation 2026 — 5 documented campaigns 5 electoral disinformation campaigns or patterns documented with open… GDPR · which national authority really sanctions — 9 authorities profiled 9 national authorities profiled; ~€7.1bn in GDPR fines since 2018, bu… Digital political ad spending 2026 — 5 country-platform observ… 5 observations of digital political ad spending in 2026 elections, me… US · the state AI regulation patchwork — 8 laws and milestones 8 laws and milestones in the US AI patchwork; with no comprehensive f… Climate: the gap between pledge and action — 12 countries assessed 12 countries assessed by the Climate Action Tracker: 10 with insuffic… Power and corruption in the courts in Ibero-Ame… — 29 documented cases 29 senior officials prosecuted for corruption across 19 countries, wi… Crypto industry: collapses, sanctions and convi… — 10 documented cases 10 crypto-sector collapse, sanction and conviction cases across 4 cou… Content moderation: appeals and reversals — 19 documented decisions 19 appealed and reviewed moderation decisions, with their policy, ori… AI harms in court — litigation, rulings and set… — 100 documented cases 100 litigated AI-harm cases across 25 jurisdictions on 5 continents, … Public AI spending — global government contracts — 50 documented contracts 50 public AI contracts across 15 jurisdictions on 5 continents (45 wi… Scandal → conviction gap — — milestones logged Series starting — Odebrecht/Lava Jato as base case Technology ↔ regulation gap — 25 regulatory milestones 25 milestones across 11 jurisdictions; gaps from 0 to 22 years; Chile… Campaign promises → fulfillment — 29 term evaluations 29 terms evaluated across 25 countries on five continents Digital fines actually imposed — 60 sanctions recorded 60 high-value sanctions across 17 jurisdictions and 6 continents; cov… EU AI Act — designation of national authorities — 3 / 27 Member States Art. 70 deadline expired 2 Aug 2025 — process still open AI Act · Notified bodies for conformity assessment — 1 body with AI-specific a… Designation process opened 2 Aug 2025 · high-risk deadline Aug 2026 AI Act · Sanctions regime and its actual enforc… — 0 documented AI Act fines… Only 3 of 27 MS with both authorities designated by early 2026 EU · Consolidated DSA enforcement decisions — €120M first DSA fine · X · 5 … 5 Member States referred to CJEU for insufficient DSC implementation LATAM · Digital spending in 2026 electoral camp… — $14.794M COP · highest declared … Only 8 of 13 campaigns had reported in Cuentas Claras by mid-May Ibero-America · documented public contracts wit… — 3 contracts verified with… DC registry kickoff · ongoing monthly manual sweep LATAM · Internet shutdowns and platform blocks — 7 documented events · 202… Venezuela concentrates the region's most severe blocks LATAM · Judicial and regulatory sanctions on pl… — $5,2M USD · fine on X Corp. i… X complied with the orders and was reinstated after 39 days of suspen… Commercial spyware: documented cases worldwide — 22 documented cases 22 verified commercial-spyware cases across 12 countries on four cont… RSF · Press freedom in Latin America — 144 worst regional rank (Pe… AR -11 · PE -14 · SV -8 · EC -31 · USA -7 LATAM · AI bills in legislative process — 150+ bills identified Niubox January 2026 — only 4 Iberoamerican countries with law in force
/ trackers / us-state-ai-laws
US · AI regulation

US · the state AI regulation patchwork

Tracking of artificial-intelligence laws state by state in the United States and of the tension between state and federal regulation. In the absence of a comprehensive federal law, states have created a patchwork —Colorado, California, Texas, Utah, Illinois— that companies must map jurisdiction by jurisdiction. But that patchwork is under pressure: in December 2025 a federal executive order sought to preempt 'excessive' state laws, and in April 2026 a federal court paused Colorado's law weeks before it took effect. The tracker measures the gap between the state law passed and the law actually applicable. Each record documents a rule or milestone with its status and source.

Snapshot · May 26, 2026
8
laws and milestones
↑ 8 laws and milestones in the US AI patchwork; with no comprehensive federal law, states legislate but federal preemption and litigation slow their application

Evolution

Data analysis

Statistical readings derived from the attributes of each recorded case. All figures come from the documented events; amounts are computed only over cases with a sum expressed in the indicated currency, without converting between currencies.

Application status

The outcome of each rule: in force, passed not in force, judicially paused, delayed or under review. The most differential field.

State / jurisdiction

The jurisdiction of each rule or milestone: specific states or federal level.

Regulatory focus

The focus of each rule: high-risk/discrimination, transparency, employment, or federal preemption.

Reading the data

The United States has no federal artificial-intelligence law, so fifty states legislate on their own and create a patchwork that companies must map one by one. But that patchwork is under fire: a federal executive order seeks to preempt it and a court has just frozen the most comprehensive law, Colorado's. This tracker measures the gap between legislating and being able to enforce.

NP
Natacha Prieto W. · Correspondent — United States · Washington, D.C.
May 26, 2026 · 6 min read

While the European Union applies a single AI Act to its twenty-seven members, the United States does the opposite: it has no comprehensive federal law, and in its absence each state regulates its own way. The result is a patchwork of laws with different approaches and dates that any company operating across several states must map jurisdiction by jurisdiction. This tracker orders that patchwork and, above all, measures something the law count hides: which are actually in force and which are not.

Because in 2026 the distinction is critical. California (frontier-AI transparency), Texas (responsible governance) and Illinois (employment discrimination) have laws in force since 1 January. But the most ambitious of all —the Colorado AI Act, the first comprehensive state law on high-risk AI— has had a troubled history: its effective date was delayed from February to June, and in April a federal court froze it weeks before the new date. Passing a law and being able to enforce it are, here too, two different things.

Of the eight laws and milestones tracked, five are in force, but two —including Colorado's flagship law— are judicially paused. The difference between 'state X regulates AI' and 'that law can be enforced today' is exactly the information a multi-state compliance team needs, and which the headline hides.

The new variable: federal preemption

What makes the US case particularly unstable in 2026 is not just the fragmentation, but a new tension between two levels of government pulling in opposite directions. In December 2025, the White House signed an executive order proposing a uniform federal framework and seeking to preempt state laws deemed 'excessive' —citing by name, as an example, precisely Colorado's—. A few months later, a federal court froze that same law. The wind's direction is clear: federal deregulatory pressure against ambitious state legislation.

For a company, this creates the worst possible combination: obligations that exist on paper but whose real applicability depends on litigation and on a political tug-of-war between Washington and the state capitals. The tracker takes no side in that fight; it documents its milestones with their status and source, so that whoever must comply knows, at each moment, which rule is alive, which is frozen and which hangs by a judicial thread. That traceability is the asset.

Methodology note

Each record documents a state AI law or a federal-state tension milestone, with its application status (in force, passed not in force, judicially paused, delayed, under review) and its source (legal analyses by Baker Botts, King & Spalding, Cooley; legislative tracking). A distinction is drawn between a passed law and an applicable law. Sanction amounts are legal maximums. Legislative or judicial outcomes are not predicted. Coverage prioritizes comprehensive laws and preemption milestones for their multi-state compliance impact.

This tracker is informational infrastructure, not legal advice. Each rule's status updates as litigation and legislative processes advance.

Documented events (8)

May 1, 2024 US confirmed

Utah AI Policy Act (SB 149): requires disclosure when interacting with AI

Utah's law requires disclosure when a consumer interacts with an AI system, applicable across all industries. It is an early, light-touch transparency model, predating the comprehensive 2026 laws.

January 1, 2026 US confirmed

Texas RAIGA (TRAIGA): responsible AI governance act, in force since January 2026

Texas's Responsible Artificial Intelligence Governance Act took effect on 1 January 2026. It is one of the most prominent state AI laws, with a focus on responsible use and the prohibition of certain uses, in a state with a light-touch regulatory tradition.

December 11, 2025 US confirmed

Federal executive order seeks to preempt 'excessive' state AI laws

On 11 December 2025, President Trump signed the executive order 'Ensuring a National Policy Framework for Artificial Intelligence', proposing a uniform federal framework that preempts state laws deemed inconsistent. It cites the Colorado AI Act by name as an example of 'excessive State regulation'. It marks the start of the federal-state tension.

January 1, 2026 US confirmed

The US still has no comprehensive federal AI law: agency governance and voluntary guidance

The United States has no comprehensive federal AI law. Federal governance relies on agency enforcement of existing laws (FTC under Section 5), executive orders and voluntary standards like the NIST AI RMF. Congress continues to debate broader legislation. That absence is what has pushed states to legislate.

January 1, 2026 US confirmed

Illinois HB 3773: bans discriminatory AI use by employers

Illinois's law (Public Act 103-0804) amends the state Human Rights Act to prohibit employers from using AI that discriminates against protected classes. It is part of the wave of state laws focused on employment and algorithmic hiring.

April 27, 2026 US confirmed

A federal court pauses enforcement of the Colorado AI Act

On 27 April 2026, a federal court paused enforcement of the Colorado AI Act weeks before its expected effective date (30 June 2026), preventing the state from initiating enforcement actions while the litigation is pending. It is neither a repeal nor a permanent delay, but a freeze that leaves companies in legal uncertainty.

May 17, 2024 US confirmed

Colorado AI Act (SB 24-205): the most comprehensive state law, paused by a federal court

The first comprehensive US state law targeting 'high-risk' AI systems: it requires developers and deployers to use reasonable care to prevent algorithmic discrimination, conduct impact assessments and give consumer notices. Fines of up to $20,000 per violation, no private right of action. Its effective date was delayed from Feb to June 2026, and on 27 April 2026 a federal court paused its enforcement. It is the only state law cited by name in the December 2025 federal executive order.

January 1, 2026 US confirmed

California TFAIA: frontier-AI transparency, in force since January 2026

California's Transparency in Frontier Artificial Intelligence Act took effect on 1 January 2026, alongside several transparency and employment laws. California has led AI regulation with a disclosure-based approach, complemented by the AI Transparency Act (SB 942) on labeling AI-generated content.

Methodology

Type
event-log
Construction
DC editorial construction
Cadence
event-driven

Each record documents a state AI law or a milestone in the federal-state tension, with its application status (in force, passed not in force, judicially paused, delayed, under review) and its source. The decisive field is the status: a passed law is not an applicable law, and this tracker separates the two. The sanction amounts are each rule's legal maximums. Legislative or judicial outcomes are not predicted. Coverage prioritizes comprehensive laws and federal preemption milestones for their impact on multi-state compliance.

Sources consulted

  1. Baker Botts — US AI Law Update (ene 2026) ↗ academic
  2. King & Spalding / Cooley — análisis de leyes estatales de IA ↗ academic
  3. NCSL / AI Laws by State — seguimiento legislativo ↗ press