— Edition 1.247 52 verified trackers
ES EN
Politics · Technology · Digital regulation  ·  where data speaks before headlines
Snapshot data
AML/OFAC enforcement against banks and fintech — 418 penalties documented 418 AML/OFAC penalties documented across 177 countries and 379 regula… Corporate bankruptcy and insolvency (Chapter 11) — 4 major corporate bankrup… Corporate bankruptcies hit decade highs: over 717 in the year per S&P… High-impact litigation risk index — 4 high-impact litigations… The risk index (0-100) aggregates five objective factors —procedural … Merger control: multi-jurisdiction competition … — 9 decisions and jurisdict… Merger control diverges by jurisdiction in 2026: the Trump administra… PEPs and sanctions networks · Ibero-American graph — 40 PEP/company nodes with … Ibero-American PEP→company→sanction graph (core: Mapa del Poder, 424 … Sovereign debt distress and restructurings — 5 distress/restructuring … The IMF's 6th Global Sovereign Debt Roundtable report (April 15, 2026… Forced labor in supply chains: entity lists — 4 forced-labor exposure i… Upstream exposure intelligence densifies: the UFLPA Entity List reach… EU AI Act — designation of national authorities — 3/10/14 / 27 Member States Tracker's first event: 3 states with both authorities / 10 partial / … AI Act · Notified bodies for conformity assessment — 1 body with AI-specific a… Ecosystem 'not ready' as of Mar-2026 (standards unpublished, insuffic… Scandal → conviction gap — — milestones logged +1 mirror case: Uribe — 7 years to convict, 8 weeks to reverse, open-… Technology ↔ regulation gap — 26 regulatory milestones +1: Peru closes the generative-AI gap in ~3 years (DS 115-2025-PCM), … CNMC Spain · the Digital Services Coordinator g… — 6 documented milestones The gap becomes chronic: Congress struck down the CNMC's legal empowe… Corporate data breaches: from incident to response — 11 breaches documented +1: Canvas/Instructure, the largest known education breach (≈275M rec… Migration friction in corporate and event mobility — 3 incidents and policies … The 2026 World Cup works as a live stress test: 39 countries under fu… Power and corruption in the courts in Ibero-Ame… — 29 documented cases Jun-2026 review: Uribe updated — first-instance conviction overturned… Crypto · Licenses and authorizations by jurisdi… — 40+ CASPs with full MiCA au… July 1, 2026 cliff: the transitional regime expires (ESMA, Apr 17) wi… Data breaches · Class-action settlements — 5 settlements and mass ca… 271 million dollars across four settlements approved or with deadline… Digital regulatory risk index by country — 16 countries profiled Jun-2026 review: Brazil updated on two layers (EU adequacy Jan 26, 20… Digital services taxes (DST) by country — 3 tax-map milestones docu… About half of European OECD countries have a DST announced, proposed … Global election risk 2026: democracy and digita… — 32 elections profiled 32 electoral processes of 2026 profiled by political regime and digit… ESG · Greenwashing enforcement — 3 enforcement milestones … The legal floor arrives Sep 27, 2026 (ECGT across the 27; transpositi… EU · Digital & sustainability regulatory deadli… — 6 calendar milestones doc… Next critical deadlines: Jun 23, 2026 closes the high-risk classifica… Export controls · Entity List and advanced chips — 6 regime milestones docum… The 2026 shift: licensing for H200/MI325X and equivalents to China mo… GDPR · International transfers and adequacy dec… — 6 framework milestones do… The EU-US DPF remains in force after surviving its first judicial cha… LATAM · AI bills in legislative process — 150+ bills identified 150+ count re-verified; milestones: Peru only country with a regulate… LATAM · Judicial and regulatory sanctions on pl… — $5,2M USD · fine on X Corp. i… Paradigm shift: the STF declared Art. 19 of the Marco Civil partially… Digital political ad spending 2026 — 6 country-platform observ… AdImpact's revised projection (Jun 11): $11.6bn for the 2026 cycle — … Shadow fleet · Sanctioned vessels and enablers — 632 vessels designated by t… +46 vessels in the 20th package (Reg. 2026/506/509/511) to 632; Art. … Whistleblower awards · SEC, CFTC and equivalent… — 3 program milestones docu… The SEC awarded over $60M to 48 whistleblowers in fiscal year 2025 (2… AI Act · Sanctions regime and its actual enforc… — 0 documented AI Act fines… 0 AI Act penalties issued to date: enforcement of high-risk obligatio… Beneficial ownership transparency (UBO / CTA / … — 4 transparency milestones 4 beneficial-ownership transparency milestones documented; the EU req… Crypto industry: collapses, sanctions and convi… — 13 documented cases 13 cases of collapses, sanctions and convictions in the crypto sector… AI harms in court — litigation, rulings and set… — 103 documented cases 103 AI-related harm and rights lawsuits documented; 2026 milestones: … DMA · designated gatekeepers and real compliance — 9 documented DMA acts 9 DMA compliance actions documented against gatekeepers; 2026 develop… Documented electoral disinformation 2026 — 7 documented campaigns 7 electoral disinformation campaigns or patterns documented with open… GDPR · which national authority really sanctions — 11 authorities profiled 11 GDPR enforcement country profiles and milestones documented; 2026 … LATAM · Internet shutdowns and platform blocks — 8 documented events · 202… 8 internet shutdown and blocking episodes documented in Latin America… Operational resilience & cyber (DORA / NIS2 / SEC) — 4 regulatory milestones 4 operational-resilience milestones documented; 2026 is the first rea… Digital fines actually imposed — 61 sanctions recorded 61 high-value penalties across 18 jurisdictions and 6 continents; cov… Commercial spyware: documented cases worldwide — 23 documented cases 23 spyware and surveillance cases documented across the Ibero-America… Trade compliance & forced labor (UFLPA) — 4 actions documented 4 trade-compliance actions on forced labor documented; under UFLPA ar… US · the state AI regulation patchwork — 10 laws and milestones 10 state AI laws or milestones documented in the U.S.; 2026 developme… Electoral digital integrity 2026 — 13 elections profiled 13 elections profiled by digital integrity; 5 with transparent politi… Climate: the gap between pledge and action — 12 countries assessed 12 countries assessed by the Climate Action Tracker: 10 with insuffic… Content moderation: appeals and reversals — 19 documented decisions 19 appealed and reviewed moderation decisions, with their policy, ori… Public AI spending — global government contracts — 50 documented contracts 50 public AI contracts across 15 jurisdictions on 5 continents (45 wi… Campaign promises → fulfillment — 29 term evaluations 29 terms evaluated across 25 countries on five continents EU · Consolidated DSA enforcement decisions — €120M first DSA fine · X · 5 … 5 Member States referred to CJEU for insufficient DSC implementation LATAM · Digital spending in 2026 electoral camp… — $14.794M COP · highest declared … Only 8 of 13 campaigns had reported in Cuentas Claras by mid-May Ibero-America · documented public contracts wit… — 3 contracts verified with… DC registry kickoff · ongoing monthly manual sweep RSF · Press freedom in Latin America — 144 Peru's rank (the region… AR -11 · PE -14 · SV -8 · EC -31 · USA -7 AML/OFAC enforcement against banks and fintech — 418 penalties documented 418 AML/OFAC penalties documented across 177 countries and 379 regula… Corporate bankruptcy and insolvency (Chapter 11) — 4 major corporate bankrup… Corporate bankruptcies hit decade highs: over 717 in the year per S&P… High-impact litigation risk index — 4 high-impact litigations… The risk index (0-100) aggregates five objective factors —procedural … Merger control: multi-jurisdiction competition … — 9 decisions and jurisdict… Merger control diverges by jurisdiction in 2026: the Trump administra… PEPs and sanctions networks · Ibero-American graph — 40 PEP/company nodes with … Ibero-American PEP→company→sanction graph (core: Mapa del Poder, 424 … Sovereign debt distress and restructurings — 5 distress/restructuring … The IMF's 6th Global Sovereign Debt Roundtable report (April 15, 2026… Forced labor in supply chains: entity lists — 4 forced-labor exposure i… Upstream exposure intelligence densifies: the UFLPA Entity List reach… EU AI Act — designation of national authorities — 3/10/14 / 27 Member States Tracker's first event: 3 states with both authorities / 10 partial / … AI Act · Notified bodies for conformity assessment — 1 body with AI-specific a… Ecosystem 'not ready' as of Mar-2026 (standards unpublished, insuffic… Scandal → conviction gap — — milestones logged +1 mirror case: Uribe — 7 years to convict, 8 weeks to reverse, open-… Technology ↔ regulation gap — 26 regulatory milestones +1: Peru closes the generative-AI gap in ~3 years (DS 115-2025-PCM), … CNMC Spain · the Digital Services Coordinator g… — 6 documented milestones The gap becomes chronic: Congress struck down the CNMC's legal empowe… Corporate data breaches: from incident to response — 11 breaches documented +1: Canvas/Instructure, the largest known education breach (≈275M rec… Migration friction in corporate and event mobility — 3 incidents and policies … The 2026 World Cup works as a live stress test: 39 countries under fu… Power and corruption in the courts in Ibero-Ame… — 29 documented cases Jun-2026 review: Uribe updated — first-instance conviction overturned… Crypto · Licenses and authorizations by jurisdi… — 40+ CASPs with full MiCA au… July 1, 2026 cliff: the transitional regime expires (ESMA, Apr 17) wi… Data breaches · Class-action settlements — 5 settlements and mass ca… 271 million dollars across four settlements approved or with deadline… Digital regulatory risk index by country — 16 countries profiled Jun-2026 review: Brazil updated on two layers (EU adequacy Jan 26, 20… Digital services taxes (DST) by country — 3 tax-map milestones docu… About half of European OECD countries have a DST announced, proposed … Global election risk 2026: democracy and digita… — 32 elections profiled 32 electoral processes of 2026 profiled by political regime and digit… ESG · Greenwashing enforcement — 3 enforcement milestones … The legal floor arrives Sep 27, 2026 (ECGT across the 27; transpositi… EU · Digital & sustainability regulatory deadli… — 6 calendar milestones doc… Next critical deadlines: Jun 23, 2026 closes the high-risk classifica… Export controls · Entity List and advanced chips — 6 regime milestones docum… The 2026 shift: licensing for H200/MI325X and equivalents to China mo… GDPR · International transfers and adequacy dec… — 6 framework milestones do… The EU-US DPF remains in force after surviving its first judicial cha… LATAM · AI bills in legislative process — 150+ bills identified 150+ count re-verified; milestones: Peru only country with a regulate… LATAM · Judicial and regulatory sanctions on pl… — $5,2M USD · fine on X Corp. i… Paradigm shift: the STF declared Art. 19 of the Marco Civil partially… Digital political ad spending 2026 — 6 country-platform observ… AdImpact's revised projection (Jun 11): $11.6bn for the 2026 cycle — … Shadow fleet · Sanctioned vessels and enablers — 632 vessels designated by t… +46 vessels in the 20th package (Reg. 2026/506/509/511) to 632; Art. … Whistleblower awards · SEC, CFTC and equivalent… — 3 program milestones docu… The SEC awarded over $60M to 48 whistleblowers in fiscal year 2025 (2… AI Act · Sanctions regime and its actual enforc… — 0 documented AI Act fines… 0 AI Act penalties issued to date: enforcement of high-risk obligatio… Beneficial ownership transparency (UBO / CTA / … — 4 transparency milestones 4 beneficial-ownership transparency milestones documented; the EU req… Crypto industry: collapses, sanctions and convi… — 13 documented cases 13 cases of collapses, sanctions and convictions in the crypto sector… AI harms in court — litigation, rulings and set… — 103 documented cases 103 AI-related harm and rights lawsuits documented; 2026 milestones: … DMA · designated gatekeepers and real compliance — 9 documented DMA acts 9 DMA compliance actions documented against gatekeepers; 2026 develop… Documented electoral disinformation 2026 — 7 documented campaigns 7 electoral disinformation campaigns or patterns documented with open… GDPR · which national authority really sanctions — 11 authorities profiled 11 GDPR enforcement country profiles and milestones documented; 2026 … LATAM · Internet shutdowns and platform blocks — 8 documented events · 202… 8 internet shutdown and blocking episodes documented in Latin America… Operational resilience & cyber (DORA / NIS2 / SEC) — 4 regulatory milestones 4 operational-resilience milestones documented; 2026 is the first rea… Digital fines actually imposed — 61 sanctions recorded 61 high-value penalties across 18 jurisdictions and 6 continents; cov… Commercial spyware: documented cases worldwide — 23 documented cases 23 spyware and surveillance cases documented across the Ibero-America… Trade compliance & forced labor (UFLPA) — 4 actions documented 4 trade-compliance actions on forced labor documented; under UFLPA ar… US · the state AI regulation patchwork — 10 laws and milestones 10 state AI laws or milestones documented in the U.S.; 2026 developme… Electoral digital integrity 2026 — 13 elections profiled 13 elections profiled by digital integrity; 5 with transparent politi… Climate: the gap between pledge and action — 12 countries assessed 12 countries assessed by the Climate Action Tracker: 10 with insuffic… Content moderation: appeals and reversals — 19 documented decisions 19 appealed and reviewed moderation decisions, with their policy, ori… Public AI spending — global government contracts — 50 documented contracts 50 public AI contracts across 15 jurisdictions on 5 continents (45 wi… Campaign promises → fulfillment — 29 term evaluations 29 terms evaluated across 25 countries on five continents EU · Consolidated DSA enforcement decisions — €120M first DSA fine · X · 5 … 5 Member States referred to CJEU for insufficient DSC implementation LATAM · Digital spending in 2026 electoral camp… — $14.794M COP · highest declared … Only 8 of 13 campaigns had reported in Cuentas Claras by mid-May Ibero-America · documented public contracts wit… — 3 contracts verified with… DC registry kickoff · ongoing monthly manual sweep RSF · Press freedom in Latin America — 144 Peru's rank (the region… AR -11 · PE -14 · SV -8 · EC -31 · USA -7
/ trackers / us-state-ai-laws
US · AI regulation

US · the state AI regulation patchwork

Tracking of artificial-intelligence laws state by state in the United States and of the tension between state and federal regulation. In the absence of a comprehensive federal law, states have created a patchwork —Colorado, California, Texas, Utah, Illinois— that companies must map jurisdiction by jurisdiction. But that patchwork is under pressure: in December 2025 a federal executive order sought to preempt 'excessive' state laws, and in April 2026 a federal court paused Colorado's law weeks before it took effect. The tracker measures the gap between the state law passed and the law actually applicable. Each record documents a rule or milestone with its status and source.

Snapshot · June 8, 2026
10
laws and milestones
↑ 10 state AI laws or milestones documented in the U.S.; 2026 development: Colorado repealed and replaced its pioneering law with SB 189 (lighter regime, effective Jan 2027) and a new wave of states (CT, WA, OR, MD, VT and more) legislates in a patchwork with liability extending to vendors

Evolution

Data analysis

Statistical readings derived from the attributes of each recorded case. All figures come from the documented events; amounts are computed only over cases with a sum expressed in the indicated currency, without converting between currencies.

Application status

The outcome of each rule: in force, passed not in force, judicially paused, delayed or under review. The most differential field.

State / jurisdiction

The jurisdiction of each rule or milestone: specific states or federal level.

Regulatory focus

The focus of each rule: high-risk/discrimination, transparency, employment, or federal preemption.

Reading the data

The United States has no federal artificial-intelligence law, so fifty states legislate on their own and create a patchwork that companies must map one by one. But that patchwork is under fire: a federal executive order seeks to preempt it and a court has just frozen the most comprehensive law, Colorado's. This tracker measures the gap between legislating and being able to enforce.

NP
Natacha Prieto W. · Correspondent — United States · Washington, D.C.
May 26, 2026 · 6 min read

While the European Union applies a single AI Act to its twenty-seven members, the United States does the opposite: it has no comprehensive federal law, and in its absence each state regulates its own way. The result is a patchwork of laws with different approaches and dates that any company operating across several states must map jurisdiction by jurisdiction. This tracker orders that patchwork and, above all, measures something the law count hides: which are actually in force and which are not.

Because in 2026 the distinction is critical. California (frontier-AI transparency), Texas (responsible governance) and Illinois (employment discrimination) have laws in force since 1 January. But the most ambitious of all —the Colorado AI Act, the first comprehensive state law on high-risk AI— has had a troubled history: its effective date was delayed from February to June, and in April a federal court froze it weeks before the new date. Passing a law and being able to enforce it are, here too, two different things.

Of the eight laws and milestones tracked, five are in force, but two —including Colorado's flagship law— are judicially paused. The difference between 'state X regulates AI' and 'that law can be enforced today' is exactly the information a multi-state compliance team needs, and which the headline hides.

The new variable: federal preemption

What makes the US case particularly unstable in 2026 is not just the fragmentation, but a new tension between two levels of government pulling in opposite directions. In December 2025, the White House signed an executive order proposing a uniform federal framework and seeking to preempt state laws deemed 'excessive' —citing by name, as an example, precisely Colorado's—. A few months later, a federal court froze that same law. The wind's direction is clear: federal deregulatory pressure against ambitious state legislation.

For a company, this creates the worst possible combination: obligations that exist on paper but whose real applicability depends on litigation and on a political tug-of-war between Washington and the state capitals. The tracker takes no side in that fight; it documents its milestones with their status and source, so that whoever must comply knows, at each moment, which rule is alive, which is frozen and which hangs by a judicial thread. That traceability is the asset.

Methodology note

Each record documents a state AI law or a federal-state tension milestone, with its application status (in force, passed not in force, judicially paused, delayed, under review) and its source (legal analyses by Baker Botts, King & Spalding, Cooley; legislative tracking). A distinction is drawn between a passed law and an applicable law. Sanction amounts are legal maximums. Legislative or judicial outcomes are not predicted. Coverage prioritizes comprehensive laws and preemption milestones for their multi-state compliance impact.

This tracker is informational infrastructure, not legal advice. Each rule's status updates as litigation and legislative processes advance.

Documented events (10)

May 1, 2024 US confirmed

Utah AI Policy Act (SB 149): requires disclosure when interacting with AI

Utah's law requires disclosure when a consumer interacts with an AI system, applicable across all industries. It is an early, light-touch transparency model, predating the comprehensive 2026 laws.

January 1, 2026 US confirmed

Texas RAIGA (TRAIGA): responsible AI governance act, in force since January 2026

Texas's Responsible Artificial Intelligence Governance Act took effect on 1 January 2026. It is one of the most prominent state AI laws, with a focus on responsible use and the prohibition of certain uses, in a state with a light-touch regulatory tradition.

December 11, 2025 US confirmed

Federal executive order seeks to preempt 'excessive' state AI laws

On 11 December 2025, President Trump signed the executive order 'Ensuring a National Policy Framework for Artificial Intelligence', proposing a uniform federal framework that preempts state laws deemed inconsistent. It cites the Colorado AI Act by name as an example of 'excessive State regulation'. It marks the start of the federal-state tension.

January 1, 2026 US confirmed

The US still has no comprehensive federal AI law: agency governance and voluntary guidance

The United States has no comprehensive federal AI law. Federal governance relies on agency enforcement of existing laws (FTC under Section 5), executive orders and voluntary standards like the NIST AI RMF. Congress continues to debate broader legislation. That absence is what has pushed states to legislate.

May 10, 2026 US reported

US · New wave of state AI laws and vendor liability in 2026

In the early months of 2026, Connecticut, Washington, Oregon, Idaho, Nebraska, Maryland, Vermont, Georgia and Illinois advanced or enacted significant AI laws, according to industry compilations that put at around 2,000 the AI-related bills introduced across the 50 states. The fragmented environment —diverging 'high-risk system' definitions, different disclosure requirements and inconsistent enforcement mechanisms— complicates multi-state compliance. Several lawsuits, including a certified class action against Workday's AI resume screener, established that both vendors and employers can face liability for discriminatory AI outcomes.

January 1, 2026 US confirmed

Illinois HB 3773: bans discriminatory AI use by employers

Illinois's law (Public Act 103-0804) amends the state Human Rights Act to prohibit employers from using AI that discriminates against protected classes. It is part of the wave of state laws focused on employment and algorithmic hiring.

May 14, 2026 US confirmed

US · Colorado repeals and replaces its AI law weeks before it took effect (SB 189)

Governor Jared Polis signed SB 189, 'Automated Decision-Making Technology,' on May 14, 2026, repealing and replacing the Colorado AI Act (SB 24-205) mere weeks before its June 30, 2026 effective date. The new law adopts a lighter-touch regime that eliminates certain obligations for developers and deployers of AI systems; as a result, the 2024 Colorado AI Act will not take effect. The new rule applies from January 1, 2027 and retains broad applicability in consequential decisions, albeit with more streamlined compliance obligations.

April 27, 2026 US confirmed

A federal court pauses enforcement of the Colorado AI Act

On 27 April 2026, a federal court paused enforcement of the Colorado AI Act weeks before its expected effective date (30 June 2026), preventing the state from initiating enforcement actions while the litigation is pending. It is neither a repeal nor a permanent delay, but a freeze that leaves companies in legal uncertainty.

May 17, 2024 US confirmed

Colorado AI Act (SB 24-205): the most comprehensive state law, paused by a federal court

The first comprehensive US state law targeting 'high-risk' AI systems: it requires developers and deployers to use reasonable care to prevent algorithmic discrimination, conduct impact assessments and give consumer notices. Fines of up to $20,000 per violation, no private right of action. Its effective date was delayed from Feb to June 2026, and on 27 April 2026 a federal court paused its enforcement. It is the only state law cited by name in the December 2025 federal executive order.

January 1, 2026 US confirmed

California TFAIA: frontier-AI transparency, in force since January 2026

California's Transparency in Frontier Artificial Intelligence Act took effect on 1 January 2026, alongside several transparency and employment laws. California has led AI regulation with a disclosure-based approach, complemented by the AI Transparency Act (SB 942) on labeling AI-generated content.

Methodology

Type
event-log
Construction
DC editorial construction
Cadence
event-driven

Each record documents a state AI law or a milestone in the federal-state tension, with its application status (in force, passed not in force, judicially paused, delayed, under review) and its source. The decisive field is the status: a passed law is not an applicable law, and this tracker separates the two. The sanction amounts are each rule's legal maximums. Legislative or judicial outcomes are not predicted. Coverage prioritizes comprehensive laws and federal preemption milestones for their impact on multi-state compliance.

Sources consulted

  1. Baker Botts — US AI Law Update (ene 2026) ↗ academic
  2. King & Spalding / Cooley — análisis de leyes estatales de IA ↗ academic
  3. NCSL / AI Laws by State — seguimiento legislativo ↗ press