Skip to main content

Analysis

Regulatory Analysis

Compare enforcement penalties, track upcoming compliance deadlines, and understand what makes safety regulation effective.

209

Regulations

167

In Effect

160

With Penalties

7

Key Principles

Penalty Comparison

Compare enforcement penalties across jurisdictions. Regulations with revenue-based fines, criminal liability, or private right of action pose the highest compliance risk.

102

With Penalty Data

29

Criminal Liability

19

Private Right of Action

20

Revenue-Based Fines

Showing 209 regulations

RegulationMax FineRevenue %Per ViolationFlags

Indonesia UU PDP

Indonesia

$6.0B2%
Criminal

India DPDP Act

India

$2.5B

Uganda DPPA

Uganda

$2.0B
Criminal

UK OSA

United Kingdom

£18M10% (or higher)
Criminal

Ofcom Children's Codes

United Kingdom

£18M10% (or higher)

Finland AI Act

Finland

€35M7% (or higher)

Hungary AI Act

Hungary

€35M7% (or higher)

Denmark AI Act

Denmark

€35M7% (or higher)

EU AI Act

European Union

€35M7% (or higher)

Austria AI Service Center

Austria

€35M7% (or higher)

Norway AI Act

Norway

€35M7% (or higher)

Brunei PDPO

Brunei

$1M10% (or higher)

Senegal Law 2008-12

Senegal

$100M

Korea AI Act

South Korea

$30M
Criminal

Brazil AI Bill

Brazil

$50M2% (or higher)

Israel Privacy Amendment 13

Israel

5% $100K
PRA

GDPR

European Union

€20M4% (or higher)
PRA

IT Garante AI

Italy

€20M4% (or higher)

UK Children's Code

United Kingdom

£18M4% (or higher)

UK DPA 2018

United Kingdom

£18M4% (or higher)
PRA

South Africa POPIA

South Africa

$10M
Criminal

DSA

European Union

6%

Kenya DPA

Kenya

$5M
Criminal

Jamaica DPA

Jamaica

$5M
Criminal

Thailand PDPA

Thailand

$5M
Criminal

Egypt PDPL

Egypt

$3M
Criminal

Mauritius DPA

Mauritius

$2M
Criminal

Japan Revenge Porn Act

Japan

$500K
Criminal

NZ HDCA

New Zealand

$50K
Criminal

Ghana DPA

Ghana

$25K
Criminal

Kuwait Cybercrime Law

Kuwait

$10K
Criminal

Zambia DPA

Zambia

Criminal

Botswana DPA

Botswana

Criminal

Algeria Law 18-07

Algeria

Criminal

Tanzania PDPA

Tanzania

Criminal

Morocco Law 09-08

Morocco

Criminal

Cameroon Cybersecurity Law

Cameroon

Criminal

Tunisia Organic Law 2004-63

Tunisia

Criminal

Quebec Law 25

Quebec

$10M2% (or higher)$1K
PRA

Vietnam AI Law

Vietnam

5%

China FR Security Measures

China

Criminal

South Korea Deepfake Law

South Korea

Criminal

AU Deepfake Sexual Material Act

Australia

Criminal

Fiji OSA

Fiji

Criminal

Papua New Guinea Cybercrime Code

Papua New Guinea

Criminal

Palestine Cybercrime Law

Palestine

Criminal

TAKE IT DOWN Act

United States

Criminal PRA

TX TRAIGA

Texas

$200K +/day
License

NV AB 406

Nevada

$15K
License

TN ELVIS Act

Tennessee

Criminal PRA

AU Social Media Age Ban

Australia

A$50M

UAE Media Law

United Arab Emirates

$2M
License

Nigeria NDPA

Nigeria

$10M2% (or higher)

SG MAS AI Governance

Singapore

License

DIFC AI Regulation

UAE - Dubai International Financial Centre

License

Qatar QCB AI Guidelines

Qatar

License

CA AB 489

California

TBD
License

COPPA

United States

$53K

DEFIANCE Act

United States

$150K
PRA

CA SB 942

California

$5K

CT SB 1295

Connecticut

$5K

CA SB243

California

$1K
PRA

NE AADC

Nebraska

$50K

CA CPPA ADMT

California

$8K

NY S 8420-A

New York State

$5K

ME LD 1727

Maine

$10K
PRA

IL WOPR Act

Illinois

$10K

MD AADC

Maryland

$8K

TX TDPSA + SCOPE

Texas

$8K

NYC LL 144

New York City

$2K
PRA

Sri Lanka PDPA

Sri Lanka

$10M

SDAIA AI Framework

Saudi Arabia

$5M

Saudi Arabia PDPL

Saudi Arabia

$3M

NY RAISE Act

New York State

$3M

CA SB 53

California

$1M

Switzerland FADP

Switzerland

$250K

Oman PDPL

Oman

$50K

Bahrain PDPL

Bahrain

$50K

Seychelles DPA

Seychelles

Rwanda AI Policy

Rwanda

Angola Law 22/11

Angola

Côte d'Ivoire Law 2013-450

Côte d'Ivoire

Peru AI Regulations

Peru

TBD

CARICOM CCSCAP 2025

CARICOM Member States

Varies

El Salvador AI Law

El Salvador

Chile Cybersecurity Law

Chile

Ontario Bill 194

Ontario

TBD

Argentina AI Strategy

Argentina

Colombia SIC AI Circular

Colombia

Puerto Rico Cybersecurity Act

Puerto Rico

Peru AI Law

Peru

Ecuador LOPDP

Ecuador

Belize DPA

Belize

Panama Law 81

Panama

Barbados DPA

Barbados

Paraguay Law 6534

Paraguay

Dominican Republic Law 172-13

Dominican Republic

PRA

Nicaragua Law 787

Nicaragua

Trinidad & Tobago DPA

Trinidad and Tobago

CARICOM HIPCAR

CARICOM Member States

Varies

Costa Rica Law 8968

Costa Rica

Uruguay Law 18.331

Uruguay

PRA

Bahamas DPA

Bahamas

Honduras Decree 170-2006

Honduras

Puerto Rico Act 111-2005

Puerto Rico

C-63

Canada

AIDA

Canada

Mexico AI Law

Mexico

Chile AI Bill

Chile

Kazakhstan AI Law

Kazakhstan

Malaysia OSA

Malaysia

NZ Biometric Code

New Zealand

China GenAI Labeling Rules

China

Japan AI Act

Japan

Nepal AI Policy

Nepal

Pakistan AI Policy

Pakistan

Myanmar Cybersecurity Law

Myanmar

Indonesia PP 17/2025

Indonesia

FZ No. 169

Russia

TBD

Blogger Registration Law

Russia

AU Privacy Amendment 2024

Australia

Russia AI Strategy 2024

Russia

HK AI Framework

Hong Kong

SG GenAI Gov

Singapore

ASEAN AI Guide

ASEAN

China GenAI Rules

China

China Deepfake Rules

China

Pacific Islands Forum Cyber Framework

Pacific Islands Forum (18 member states)

Varies

Mongolia PDPL

Mongolia

China Algorithm Rules

China

AU Online Safety Act

Australia

A$825K/day

CBPR System

Multi-jurisdiction (APAC + Americas)

Varies

SG Model AI Gov

Singapore

Uzbekistan AI Law

Uzbekistan

Taiwan AI Act

Taiwan

Philippines OSAEC Act

Philippines

Cambodia Draft PDPL

Cambodia

SG Online Safety Code

Singapore

Maldives Draft PDPB

Maldives

Taiwan PDPA Amendment 2025

Taiwan

Bangladesh Draft DPA

Bangladesh

India Synthetic Media Rules

India

AU AI Guardrails

Australia

EU PLD

European Union

PRA

Digital Austria 2.0

Austria

Estonia Kratt Plan

Estonia

Netherlands Algorithmic Framework

Netherlands

Spain AESIA

Spain

TBD

Ireland OSMR

Ireland

Serbia AI Ethics Guidelines

Serbia

TCO Regulation

European Union

Portugal Digital Rights Charter

Portugal

Malta Ethical AI Framework

Malta

Serbia PDP Law

Serbia

DE JuSchG §24a (KidD)

Germany

FR SREN

France

EU CSAR (Proposed)

European Union

TBD

EU CSAM Interim

European Union

Estonia Admin Procedure Act

Estonia

Ukraine Draft PDP Law

Ukraine

AVMSD

European Union

Poland Draft AI Act

Poland

UNICEF AI for Children

International

CoE AI Convention

International

AU AI Strategy

African Union

UN AI Resolution

United Nations

ISO 42001

International

ISO 23894

International

UNESCO AI Ethics

International

WHO AI Health Ethics

International

OECD AI Principles

International

G7 Hiroshima Process

International (G7)

UAE Child Digital Safety Law

United Arab Emirates

TBD

Jordan PDPL

Jordan

Egypt AI Strategy 2025

Egypt

Kuwait Decision 26/2024

Kuwait

Syria Data Protection Law

Syria

Syria Cybercrime Law

Syria

Lebanon Law 81/2018

Lebanon

PRA

Turkey AI Law

Turkey

DUA Act 2025

United Kingdom

UK AI Approach

United Kingdom

Trump AI Preemption EO

United States

FTC Companion AI Study

United States

State AG AI Warning

United States

NIST AI RMF

United States

Biden AI EO

United States

GUARD Act

United States

CHAT Act

United States

TBD

COPPA 2.0

United States

TBD

FTC AI Actions

United States

KOSA

United States

TBD

SAFE BOTs Act

United States

VT AADC

Vermont

TBD
PRA

Colorado AI Act

Colorado

TBD

CA AB 2013

California

NY GBL Art. 47

New York State

$15K/day

AR HB 1958

Arkansas

AR HB 1071

Arkansas

PRA

AR HB 1876

Arkansas

Utah AI Mental Health Act

Utah

NY S 7676-B

New York State

PRA

UT AI Policy Act

Utah

IL AIVIA

Illinois

PRA

NY SAFE Act

New York State

TBD

CA AI Child Safety Ballot

California

TBD
PRA

CA SB 1047

California

WA AI Companion Act

Washington State

TBD

CA AADC

California

Understanding Penalties

Max Fine: Maximum fixed monetary penalty
Revenue %: Penalty as percentage of annual revenue (often "whichever is higher")
Per Violation: Amount per individual violation (class action risk)
Criminal: Executives can face criminal charges
PRA: Private Right of Action - individuals can sue directly
License: Operating license can be revoked

This analysis is for educational purposes only and does not constitute legal advice.

Penalty data is extracted from regulatory text and may not reflect all enforcement scenarios. Always consult the primary source and qualified counsel for compliance decisions.

Building for compliance?

NOPE helps platforms demonstrate "reasonable efforts" with documented, evidence-informed crisis detection.