Skip to main content

Analysis

Regulatory Analysis

Compare enforcement penalties, track upcoming compliance deadlines, and understand what makes safety regulation effective.

351

Regulations

242

In Effect

313

With Penalties

7

Key Principles

Penalty Comparison

Compare penalties across jurisdictions. Regulations differ in how they're enforced: fixed fines, revenue-based fines, criminal liability, and private rights of action.

210

With Penalty Data

62

Criminal Liability

49

Private Right of Action

28

Revenue-Based Fines

Showing 351 regulations

RegulationMax FineRevenue %Per ViolationFlags

Indonesia UU PDP

Indonesia

IDR 6.0B2% —
Criminal

India DPDP Act

India

INR 2.5B——
—

Uganda DPPA

Uganda

UGX 2.0B——
Criminal

UK OSA

United Kingdom

£18M10% (or higher)—
Criminal

AU Social Media Age Ban

Australia

A$109M——
Criminal

Poland AI Systems Act

Poland

€35M7% (or higher)—
Criminal

Ireland AI Act 2026

Ireland

€35M7% (or higher)—
Criminal

UK AI Chatbot OSA Extension

United Kingdom

£18M10% (or higher)—
License

NZ Online Safety Bill

New Zealand

NZD 40M10% (or higher)—
—

Ofcom Children's Codes

United Kingdom

£18M10% (or higher)—
—

AU Digital Duty of Care Bill

Australia

A$109M——
—

Italy D.Lgs. 179/2026

Italy

€35M7% (or higher)—
—

Finland AI Act

Finland

€35M7% (or higher)—
—

Hungary AI Act

Hungary

€35M7% (or higher)—
—

Denmark AI Act

Denmark

€35M7% (or higher)—
—

EU AI Act

European Union

€35M7% (or higher)—
—

Austria AI Service Center

Austria

€35M7% (or higher)—
—

Norway AI Act

Norway

€35M7% (or higher)—
—

Brunei PDPO

Brunei

BND 1M10% (or higher)—
—

Senegal Law 2008-12

Senegal

XOF 100M——
—

Philippines OSAEC Act

Philippines

PHP 5M——
Criminal License

Korea AI Act

South Korea

KRW 30M——
Criminal

MD HB 952

Maryland

$25K—$25K
Criminal PRA

Brazil AI Bill

Brazil

BRL 50M2% (or higher)—
—

Uzbekistan AI Law

Uzbekistan

——$2K
Criminal

Israel Privacy Amendment 13

Israel

—5% ILS 100K
PRA

CA AB 1979

California

——$250K
Criminal PRA

TN AI Training Felony Act

Tennessee

——$150K
Criminal PRA

IT Garante AI

Italy

€20M4% (or higher)—
—

GDPR

European Union

€20M4% (or higher)—
PRA

UK Children's Code

United Kingdom

£18M4% (or higher)—
—

UK DPA 2018

United Kingdom

£18M4% (or higher)—
PRA

South Africa POPIA

South Africa

ZAR 10M——
Criminal

DSA

European Union

—6% —
—

EU Kids Act (Proposed)

European Union

—6% —
—

Kenya DPA

Kenya

KES 5M——
Criminal

Kenya AI Bill

Kenya

KES 5M——
Criminal

Jamaica DPA

Jamaica

JMD 5M——
Criminal

Thailand PDPA

Thailand

THB 5M——
Criminal

Egypt PDPL

Egypt

EGP 3M——
Criminal

Mauritius DPA

Mauritius

MUR 2M——
Criminal

DE Digital Violence Bill (GgdG)

Germany

€500K——
Criminal PRA

Japan Revenge Porn Act

Japan

JPY 500K——
Criminal

NZ HDCA

New Zealand

NZD 50K——
Criminal

Ghana DPA

Ghana

GHS 25K——
Criminal

PA Digital Forgery Act

Pennsylvania

$15K——
Criminal

Kuwait Cybercrime Law

Kuwait

KWD 10K——
Criminal

MS Election Deepfakes Act

Mississippi

$10K——
Criminal PRA

SC AI CSAM & Intimate Images Law

South Carolina

$5K——
Criminal PRA

CA SB 1276

California

$2K——
Criminal

SD Deepfakes Act

South Dakota

$2K——
Criminal PRA

Zambia DPA

Zambia

———
Criminal

Botswana DPA

Botswana

———
Criminal

Algeria Law 18-07

Algeria

———
Criminal

Tanzania PDPA

Tanzania

———
Criminal

Morocco Law 09-08

Morocco

———
Criminal

Cameroon Cybersecurity Law

Cameroon

———
Criminal

Tunisia Organic Law 2004-63

Tunisia

———
Criminal

Quebec Law 25

Quebec

C$10M2% (or higher)C$1K
PRA

Vietnam AI Law

Vietnam

—5% —
—

China FR Security Measures

China

———
Criminal

South Korea Deepfake Law

South Korea

———
Criminal

AU Deepfake Sexual Material Act

Australia

———
Criminal

Fiji OSA

Fiji

———
Criminal

Papua New Guinea Cybercrime Code

Papua New Guinea

———
Criminal

Italy D.Lgs. 160/2026

Italy

———
Criminal PRA

Italy AI Act

Italy

———
Criminal

IE AI Companion (Children) Bill

Ireland

———
Criminal

Palestine Cybercrime Law

Palestine

———
Criminal

UK OSA CSEA Reporting Regs 2026

United Kingdom

———
Criminal

DUA Act 2025

United Kingdom

———
Criminal

TAKE IT DOWN Act

United States

———
Criminal PRA

TX TRAIGA

Texas

——$200K +/day
License

TX Deepfake Intimate Images Law

Texas

———
Criminal PRA

KS AI Sexual Materials Law

Kansas

———
Criminal

NV AB 406

Nevada

——$15K
License

NH Deepfakes Act

New Hampshire

———
Criminal PRA

RI Intimate Deepfakes Act

Rhode Island

———
Criminal PRA

AL Deepfake Election Law

Alabama

———
Criminal PRA

HI Deepfakes Act

Hawaii

———
Criminal PRA

FL AI Political Ad Law

Florida

———
Criminal

FL AI-Generated CSAM Law

Florida

———
Criminal

IA AI Deepfake Pornography Laws

Iowa

———
Criminal

ID AI CSAM Act

Idaho

———
Criminal

TN ELVIS Act

Tennessee

———
Criminal PRA

MI Criminal AI Act

Michigan

———
Criminal

NH HB 143

New Hampshire

———
Criminal PRA

WA SB 5105

Washington

———
Criminal

AU OSA Phase 2 Codes

Australia

A$50M——
—

EU GPAI Code

European Union

€15M3% (or higher)—
—

EU CRA

European Union

€15M2.5% (or higher)—
—

China CSL Amendments

China

CNY 10M——
License

UAE Media Law

United Arab Emirates

AED 2M——
License

CN Minors Internet Use Provisions (draft)

China

CNY 1M——
License

Nigeria NDPA

Nigeria

NGN 10M2% (or higher)—
—

SG MAS AI Governance

Singapore

———
License

DIFC AI Regulation

UAE - Dubai International Financial Centre

———
License

Qatar QCB AI Guidelines

Qatar

———
License

CA AB 1405

California

———
License

CA SB 813

California

———
License

CA AB 489

California

TBD——
License

MA AI Healthcare Act

Massachusetts

———
License

PA AI Mental Health Therapy Act

Pennsylvania

———
License

MN AI Disclosure Act

Minnesota

$5M—$1K
PRA

CA AB 1394 / AB 1946

California

$4M—$250K +/day
PRA

CA AB 2

California

$1M—$5K
PRA

HI SB 3001

Hawaii

$1M—$1K
—

MA S.3164

Massachusetts

$1M—$5K +/day
—

ID Conversational AI Safety

Idaho

$500K—$1K
—

NE LB 525

Nebraska

$500K—$1K
—

NJ A5272

New Jersey

$500K—$1K
—

TX Healthcare AI Law

Texas

$250K—$5K
—

CA AB 1709

California

$50K—$50K
—

NJ AI Mental Health Provider Ban

New Jersey

$20K—$10K
—

CA AB 2246

California

$15K—$15K
—

CA SB 1119

California

$15K—$15K
PRA

CA Digital Age Assurance Act

California

$8K—$8K
—

COPPA

United States

——$53K
—

DEFIANCE Act

United States

——$150K
PRA

IL HB 5511

Illinois

——$50K
—

NJ Kids Code

New Jersey

——$5K
PRA

CA SB 947

California

——$500
—

NY SAFE Act

New York State

——$5K
—

CA SB 867

California

——$1K
PRA

IL SB 315

Illinois

——$3M
—

CT SB 5 / PA 26-15

Connecticut

——$5K
—

CA SB 942

California

——$5K
—

HI Deepfake Civil Remedy Act

Hawaii

——$25K
PRA

CT SB 1295

Connecticut

——$5K
—

TN AI Mental Health Prohibition

Tennessee

——$5K
—

CA CPPA ADMT

California

——$8K
—

CA SB243

California

——$1K
PRA

NE AADC

Nebraska

——$50K
—

NY S 8420-A

New York State

——$5K
—

ME LD 1727

Maine

——$10K
PRA

IL WOPR Act

Illinois

——$10K
—

Utah AI Mental Health Act

Utah

——$3K
—

MD AADC

Maryland

——$8K
—

TX TDPSA + SCOPE

Texas

——$8K
—

NYC LL 144

New York City

——$2K
PRA

CA AADC

California

——$8K
—

LA Healthcare AI Act

Louisiana

——$10K
—

ME LD 2082

Maine

——$10K
—

NC AI Chatbot Licensing

North Carolina

——$50K
—

NY Kids Chatbot Safety Act

New York

——$25K
—

PA SAFECHAT Act

Pennsylvania

——$10K
—

VA AI Chatbots & Minors

Virginia

——$50K
PRA

Malaysia OSA

Malaysia

MYR 10M——
—

Sri Lanka PDPA

Sri Lanka

LKR 10M——
—

SDAIA AI Framework

Saudi Arabia

SAR 5M——
—

Saudi Arabia PDPL

Saudi Arabia

SAR 3M——
—

NY RAISE Act

New York State

$3M——
—

SG Online Safety Code

Singapore

SGD 1M—SGD 100K/day
—

CA SB 53

California

$1M——
—

Switzerland FADP

Switzerland

CHF 250K——
—

CN Anthropomorphic AI Measures

China

CNY 200K——
—

Germany KI-MIG

Germany

€50K——
—

Oman PDPL

Oman

OMR 50K——
—

Bahrain PDPL

Bahrain

BHD 50K——
—

WI Act 123 AI Deepfake Disclosure

Wisconsin

$1K——
—

Seychelles DPA

Seychelles

———
—

Rwanda AI Policy

Rwanda

———
—

Angola Law 22/11

Angola

———
—

Côte d'Ivoire Law 2013-450

Côte d'Ivoire

———
—

MX Safe Digital Environments Decree

Mexico

———
—

Brazil ECA Digital

Brazil

TBD——
—

Peru AI Regulations

Peru

TBD——
—

CARICOM CCSCAP 2025

CARICOM Member States

Varies——
—

El Salvador AI Law

El Salvador

TBD——
—

Chile Cybersecurity Law

Chile

———
—

Ontario Bill 194

Ontario

TBD——
—

Argentina AI Strategy

Argentina

———
—

Colombia SIC AI Circular

Colombia

———
—

Puerto Rico Cybersecurity Act

Puerto Rico

———
—

Peru AI Law

Peru

———
—

Ecuador LOPDP

Ecuador

———
—

Belize DPA

Belize

———
—

Panama Law 81

Panama

———
—

Barbados DPA

Barbados

———
—

Paraguay Law 6534

Paraguay

———
—

Dominican Republic Law 172-13

Dominican Republic

———
PRA

Nicaragua Law 787

Nicaragua

———
—

CARICOM HIPCAR

CARICOM Member States

Varies——
—

Trinidad & Tobago DPA

Trinidad and Tobago

———
—

Costa Rica Law 8968

Costa Rica

———
—

Uruguay Law 18.331

Uruguay

———
PRA

Bahamas DPA

Bahamas

———
—

Honduras Decree 170-2006

Honduras

———
—

Puerto Rico Act 111-2005

Puerto Rico

———
—

AIDA

Canada

———
—

CA Bill C-34 (Safe Social Media Act)

Canada

TBD——
—

C-63

Canada

———
—

Chile AI Bill

Chile

———
—

Mexico AI Law

Mexico

———
—

KR AI Ethics Principles

South Korea

———
—

Singapore OSRA

Singapore

TBD——
PRA

China Minor Platform Identification Measures

China

———
—

China Minor Content Classification Measures

China

———
—

India Synthetic Media Rules

India

———
—

SG Agentic AI Framework

Singapore

———
—

Kazakhstan AI Law

Kazakhstan

———
—

Taiwan AI Act

Taiwan

———
—

AU National AI Plan

Australia

———
—

India AI Governance Guidelines

India

———
—

NZ Biometric Code

New Zealand

———
—

China GenAI Labeling Rules

China

———
—

Japan AI Act

Japan

———
—

Nepal AI Policy

Nepal

———
—

Pakistan AI Policy

Pakistan

———
—

Myanmar Cybersecurity Law

Myanmar

———
—

Indonesia PP 17/2025

Indonesia

TBD——
—

FZ No. 169

Russia

TBD——
—

Blogger Registration Law

Russia

———
—

AU Privacy Amendment 2024

Australia

———
—

Russia AI Strategy 2024

Russia

———
—

HK AI Framework

Hong Kong

———
—

SG GenAI Gov

Singapore

———
—

ASEAN AI Guide

ASEAN

———
—

China GenAI Rules

China

———
—

China Deepfake Rules

China

———
—

Pacific Islands Forum Cyber Framework

Pacific Islands Forum (18 member states)

Varies——
—

Mongolia PDPL

Mongolia

———
—

China Algorithm Rules

China

———
—

AU Online Safety Act

Australia

——A$825K/day
—

CBPR System

Multi-jurisdiction (APAC + Americas)

Varies——
—

SG Model AI Gov

Singapore

———
—

AU AI Guardrails

Australia

———
—

Bangladesh Draft DPA

Bangladesh

———
—

China AI Companion Rules

China

TBD——
—

Cambodia Draft PDPL

Cambodia

———
—

Maldives Draft PDPB

Maldives

———
—

Taiwan PDPA Amendment 2025

Taiwan

TBD——
—

EU PLD

European Union

———
PRA

EU AI Content Transparency Code

European Union

———
—

EU Digital Omnibus (AI)

European Union

———
—

EU DSA Minors Guidelines

European Union

———
—

Digital Austria 2.0

Austria

———
—

FR SREN

France

———
—

DE JuSchG §24a (KidD)

Germany

———
—

Estonia Kratt Plan

Estonia

———
—

Netherlands Algorithmic Framework

Netherlands

TBD——
—

Spain AESIA

Spain

TBD——
—

Estonia Admin Procedure Act

Estonia

———
—

Ireland OSMR

Ireland

———
—

Serbia AI Ethics Guidelines

Serbia

———
—

TCO Regulation

European Union

———
—

EU CSAM Interim

European Union

Varies——
—

Portugal Digital Rights Charter

Portugal

———
—

Malta Ethical AI Framework

Malta

———
—

Serbia PDP Law

Serbia

———
—

AVMSD

European Union

Varies——
—

EU CSAR (Proposed)

European Union

TBD——
—

Norway AI-in-Schools Recommendations

Norway

———
—

Ukraine Draft PDP Law

Ukraine

———
—

OECD AI Due Diligence

International

———
—

UN/ITU AI & Child Rights Statement

International

———
—

UNICEF AI for Children

International

———
—

CoE AI Convention

International

———
—

AU AI Strategy

African Union

———
—

UN AI Resolution

United Nations

———
—

ISO 42001

International

———
—

G7 Hiroshima Process

International (G7)

———
—

ISO 23894

International

———
—

UNESCO AI Ethics

International

———
—

WHO AI Health Ethics

International

———
—

OECD AI Principles

International

———
—

TR Social Network Child Services and Age Verification Regulation

Turkey

———
—

UAE Federal AI Office Framework

United Arab Emirates

TBD——
—

UAE Child Digital Safety Law

United Arab Emirates

TBD——
—

Jordan PDPL

Jordan

———
—

Egypt AI Strategy 2025

Egypt

———
—

Kuwait Decision 26/2024

Kuwait

———
—

Syria Data Protection Law

Syria

———
—

Syria Cybercrime Law

Syria

———
—

Lebanon Law 81/2018

Lebanon

———
PRA

Turkey AI Law

Turkey

———
—

UK OSA Minimum Standards of Accuracy

United Kingdom

———
—

UK AI/ADM Code Regs (SI 2026/425)

United Kingdom

———
—

UK AI Approach

United Kingdom

———
—

KCSIE

United Kingdom

———
—

Children's Digital Wellbeing

United Kingdom

TBD——
—

EO 14409

United States

———
—

White House AI Legislative Framework

United States

———
—

Trump AI Preemption EO

United States

———
—

FTC Companion AI Study

United States

———
—

State AG AI Warning

United States

———
—

NIST AI RMF

United States

———
—

FTC AI Actions

United States

———
—

AI LEAD Act

United States

———
PRA

CHAT Act

United States

TBD——
—

CHATBOT Act (S.4407)

United States

———
—

COPPA 2.0

United States

TBD——
—

Biden AI EO

United States

———
—

Youth AI Privacy Act

United States

———
—

FTC AI Accuracy Policy Statement

United States

———
—

GUARD Act

United States

———
—

KIDS Act

United States

———
—

KOSA

United States

TBD——
—

NO FAKES Act

United States

———
PRA

SAFE BOTs Act

United States

———
—

GA AI Chatbot Child Safety

Georgia

———
—

IA SF 2417

Iowa

TBD——
—

CA SB 503

California

———
—

Colorado AI Act

Colorado

TBD——
—

CO AI Healthcare Act

Colorado

———
—

CO HB 1263

Colorado

TBD——
—

OR SB 1546

Oregon

———
PRA

RI AI Companion Safety Act

Rhode Island

——$15K/day
PRA

VT AADC

Vermont

TBD——
PRA

WA AI Companion Act

Washington State

TBD——
—

MD HB 895

Maryland

———
—

CO AI Psychotherapy Restrictions

Colorado

———
—

RI AI Mental Health Care Oversight Act

Rhode Island

———
—

RI Healthcare AI Notification Act

Rhode Island

———
—

CA AB 2013

California

———
—

CA SB 524

California

———
—

IL AI Employment Law

Illinois

———
PRA

ND Healthcare AI Act

North Dakota

———
—

NY GBL Art. 47

New York State

——$15K/day
—

TX Social Media Deepfake Takedown

Texas

TBD——
—

TX AI Catfishing Law

Texas

———
PRA

AR HB 1071

Arkansas

———
PRA

AR HB 1876

Arkansas

———
—

AR HB 1958

Arkansas

———
—

KY AI Governance Act

Kentucky

———
—

NY S 7676-B

New York State

———
PRA

OH K-12 AI Mandate

Ohio

———
—

DE AI Commission

Delaware

———
—

NH State AI Act

New Hampshire

———
—

AZ Political Deepfake Law

Arizona

———
—

UT AI Policy Act

Utah

———
—

TN University AI Policy Law

Tennessee

———
—

IL AIVIA

Illinois

———
—

AZ AI Disclosures for Minors

Arizona

———
—

CA AI Child Safety Ballot

California

TBD——
PRA

CA SB 1047

California

———
—

CA SB 300

California

TBD——
—

CA SB 903

California

———
—

FL Companion Chatbot Act

Florida

TBD——
—

FL Companion AI Age Verification

Florida

TBD——
—

FL AI Bill of Rights

Florida

TBD——
PRA

HI AI Chatbot Safety

Hawaii

———
—

KY AI Therapy Restrictions

Kentucky

———
—

ME LD 2162

Maine

———
PRA

MI AI Safety Transparency Act

Michigan

TBD——
—

MI LEAD for Kids Act

Michigan

———
—

MO AI Mental Health Prohibition

Missouri

———
—

NM HB 174

New Mexico

———
—

PA HB 2006

Pennsylvania

——$100K/day
—

VT AI Healthcare & Neurological Rights Act

Vermont

———
—

VT AI Mental Health Services Act

Vermont

———
—

Understanding Penalties

Max Fine: Maximum fixed monetary penalty
Revenue %: Penalty as percentage of annual revenue (often "whichever is higher")
Per Violation: Amount per individual violation
Criminal: Executives can face criminal charges
PRA: Private Right of Action — enforceable by individuals as well as regulators
License: Operating license can be revoked

This analysis is for educational purposes only and does not constitute legal advice.

Penalty data is extracted from regulatory text and may not reflect all enforcement scenarios. Always consult the primary source and qualified counsel for compliance decisions.

Why we publish this

We maintain this tracker as a free public reference, so any platform, including ones that never pay us, can understand these obligations. If you are building crisis-detection or referral protocols, our documentation explains what NOPE's tools do and don't cover.