Skip to main content

Analysis

Regulatory Analysis

Compare enforcement penalties, track upcoming compliance deadlines, and understand what makes safety regulation effective.

347

Regulations

240

In Effect

309

With Penalties

7

Key Principles

Penalty Comparison

Compare penalties across jurisdictions. Regulations differ in how they're enforced: fixed fines, revenue-based fines, criminal liability, and private rights of action.

206

With Penalty Data

60

Criminal Liability

48

Private Right of Action

26

Revenue-Based Fines

Showing 347 regulations

RegulationMax FineRevenue %Per ViolationFlags

Indonesia UU PDP

Indonesia

IDR 6.0B2% —
Criminal

India DPDP Act

India

INR 2.5B——
—

Uganda DPPA

Uganda

UGX 2.0B——
Criminal

UK OSA

United Kingdom

£18M10% (or higher)—
Criminal

AU Social Media Age Ban

Australia

A$109M——
Criminal

Ireland AI Act 2026

Ireland

€35M7% (or higher)—
Criminal

UK AI Chatbot OSA Extension

United Kingdom

£18M10% (or higher)—
License

NZ Online Safety Bill

New Zealand

NZD 40M10% (or higher)—
—

Ofcom Children's Codes

United Kingdom

£18M10% (or higher)—
—

AU Digital Duty of Care (exposure draft)

Australia

A$109M——
—

Finland AI Act

Finland

€35M7% (or higher)—
—

Hungary AI Act

Hungary

€35M7% (or higher)—
—

Denmark AI Act

Denmark

€35M7% (or higher)—
—

EU AI Act

European Union

€35M7% (or higher)—
—

Austria AI Service Center

Austria

€35M7% (or higher)—
—

Norway AI Act

Norway

€35M7% (or higher)—
—

Brunei PDPO

Brunei

BND 1M10% (or higher)—
—

Senegal Law 2008-12

Senegal

XOF 100M——
—

Philippines OSAEC Act

Philippines

PHP 5M——
Criminal License

Korea AI Act

South Korea

KRW 30M——
Criminal

MD HB 952

Maryland

$25K—$25K
Criminal PRA

Brazil AI Bill

Brazil

BRL 50M2% (or higher)—
—

Uzbekistan AI Law

Uzbekistan

——$2K
Criminal

Israel Privacy Amendment 13

Israel

—5% ILS 100K
PRA

CA AB 1979

California

——$250K
Criminal PRA

TN AI Training Felony Act

Tennessee

——$150K
Criminal PRA

IT Garante AI

Italy

€20M4% (or higher)—
—

GDPR

European Union

€20M4% (or higher)—
PRA

UK Children's Code

United Kingdom

£18M4% (or higher)—
—

UK DPA 2018

United Kingdom

£18M4% (or higher)—
PRA

South Africa POPIA

South Africa

ZAR 10M——
Criminal

DSA

European Union

—6% —
—

EU Kids Act (Proposed)

European Union

—6% —
—

Kenya DPA

Kenya

KES 5M——
Criminal

Kenya AI Bill

Kenya

KES 5M——
Criminal

Jamaica DPA

Jamaica

JMD 5M——
Criminal

Thailand PDPA

Thailand

THB 5M——
Criminal

Egypt PDPL

Egypt

EGP 3M——
Criminal

Mauritius DPA

Mauritius

MUR 2M——
Criminal

Japan Revenge Porn Act

Japan

JPY 500K——
Criminal

NZ HDCA

New Zealand

NZD 50K——
Criminal

Ghana DPA

Ghana

GHS 25K——
Criminal

PA Digital Forgery Act

Pennsylvania

$15K——
Criminal

Kuwait Cybercrime Law

Kuwait

KWD 10K——
Criminal

MS Election Deepfakes Act

Mississippi

$10K——
Criminal PRA

SC AI CSAM & Intimate Images Law

South Carolina

$5K——
Criminal PRA

CA SB 1276

California

$2K——
Criminal

SD Deepfakes Act

South Dakota

$2K——
Criminal PRA

Zambia DPA

Zambia

———
Criminal

Botswana DPA

Botswana

———
Criminal

Algeria Law 18-07

Algeria

———
Criminal

Tanzania PDPA

Tanzania

———
Criminal

Morocco Law 09-08

Morocco

———
Criminal

Cameroon Cybersecurity Law

Cameroon

———
Criminal

Tunisia Organic Law 2004-63

Tunisia

———
Criminal

Quebec Law 25

Quebec

C$10M2% (or higher)C$1K
PRA

Vietnam AI Law

Vietnam

—5% —
—

China FR Security Measures

China

———
Criminal

South Korea Deepfake Law

South Korea

———
Criminal

AU Deepfake Sexual Material Act

Australia

———
Criminal

Fiji OSA

Fiji

———
Criminal

Papua New Guinea Cybercrime Code

Papua New Guinea

———
Criminal

Italy D.Lgs. 160/2026

Italy

———
Criminal PRA

Italy AI Act

Italy

———
Criminal

IE AI Companion (Children) Bill

Ireland

———
Criminal

Palestine Cybercrime Law

Palestine

———
Criminal

UK OSA CSEA Reporting Regs 2026

United Kingdom

———
Criminal

DUA Act 2025

United Kingdom

———
Criminal

TAKE IT DOWN Act

United States

———
Criminal PRA

TX TRAIGA

Texas

——$200K +/day
License

TX Deepfake Intimate Images Law

Texas

———
Criminal PRA

NV AB 406

Nevada

——$15K
License

KS AI Sexual Materials Law

Kansas

———
Criminal

RI Intimate Deepfakes Act

Rhode Island

———
Criminal PRA

NH Deepfakes Act

New Hampshire

———
Criminal PRA

AL Deepfake Election Law

Alabama

———
Criminal PRA

HI Deepfakes Act

Hawaii

———
Criminal PRA

IA AI Deepfake Pornography Laws

Iowa

———
Criminal

FL AI-Generated CSAM Law

Florida

———
Criminal

FL AI Political Ad Law

Florida

———
Criminal

TN ELVIS Act

Tennessee

———
Criminal PRA

ID AI CSAM Act

Idaho

———
Criminal

NH HB 143

New Hampshire

———
Criminal PRA

WA SB 5105

Washington

———
Criminal

MI Criminal AI Act

Michigan

———
Criminal

AU OSA Phase 2 Codes

Australia

A$50M——
—

EU GPAI Code

European Union

€15M3% (or higher)—
—

EU CRA

European Union

€15M2.5% (or higher)—
—

China CSL Amendments

China

CNY 10M——
License

UAE Media Law

United Arab Emirates

AED 2M——
License

CN Minors Internet Use Provisions (draft)

China

CNY 1M——
License

Nigeria NDPA

Nigeria

NGN 10M2% (or higher)—
—

SG MAS AI Governance

Singapore

———
License

DIFC AI Regulation

UAE - Dubai International Financial Centre

———
License

Qatar QCB AI Guidelines

Qatar

———
License

CA AB 1405

California

———
License

CA SB 813

California

———
License

CA AB 489

California

TBD——
License

PA AI Mental Health Therapy Act

Pennsylvania

———
License

MA AI Healthcare Act

Massachusetts

———
License

MN AI Disclosure Act

Minnesota

$5M—$1K
PRA

CA AB 1394 / AB 1946

California

$4M—$250K +/day
PRA

CA AB 2

California

$1M—$5K
PRA

HI SB 3001

Hawaii

$1M—$1K
—

MA S.3164

Massachusetts

$1M—$5K +/day
—

NE LB 525

Nebraska

$500K—$1K
—

ID Conversational AI Safety

Idaho

$500K—$1K
—

NJ A5272

New Jersey

$500K—$1K
—

TX Healthcare AI Law

Texas

$250K—$5K
—

CA AB 1709

California

$50K—$50K
—

NJ AI Mental Health Provider Ban

New Jersey

$20K—$10K
—

CA SB 1119

California

$15K—$15K
PRA

CA AB 2246

California

$15K—$15K
—

CA Digital Age Assurance Act

California

$8K—$8K
—

COPPA

United States

——$53K
—

DEFIANCE Act

United States

——$150K
PRA

IL HB 5511

Illinois

——$50K
—

NJ Kids Code

New Jersey

——$5K
PRA

CA SB 947

California

——$500
—

NY SAFE Act

New York State

——$5K
—

IL SB 315

Illinois

——$3M
—

CA SB 867

California

——$1K
PRA

CT SB 5 / PA 26-15

Connecticut

——$5K
—

CA SB 942

California

——$5K
—

HI Deepfake Civil Remedy Act

Hawaii

——$25K
PRA

TN AI Mental Health Prohibition

Tennessee

——$5K
—

CT SB 1295

Connecticut

——$5K
—

CA CPPA ADMT

California

——$8K
—

CA SB243

California

——$1K
PRA

NE AADC

Nebraska

——$50K
—

NY S 8420-A

New York State

——$5K
—

ME LD 1727

Maine

——$10K
PRA

IL WOPR Act

Illinois

——$10K
—

Utah AI Mental Health Act

Utah

——$3K
—

MD AADC

Maryland

——$8K
—

TX TDPSA + SCOPE

Texas

——$8K
—

NYC LL 144

New York City

——$2K
PRA

PA SAFECHAT Act

Pennsylvania

——$10K
—

ME LD 2082

Maine

——$10K
—

NY Kids Chatbot Safety Act

New York

——$25K
—

LA Healthcare AI Act

Louisiana

——$10K
—

CA AADC

California

——$8K
—

VA AI Chatbots & Minors

Virginia

——$50K
PRA

NC AI Chatbot Licensing

North Carolina

——$50K
—

Malaysia OSA

Malaysia

MYR 10M——
—

Sri Lanka PDPA

Sri Lanka

LKR 10M——
—

SDAIA AI Framework

Saudi Arabia

SAR 5M——
—

Saudi Arabia PDPL

Saudi Arabia

SAR 3M——
—

NY RAISE Act

New York State

$3M——
—

SG Online Safety Code

Singapore

SGD 1M—SGD 100K/day
—

CA SB 53

California

$1M——
—

Switzerland FADP

Switzerland

CHF 250K——
—

CN Anthropomorphic AI Measures

China

CNY 200K——
—

Germany KI-MIG

Germany

€50K——
—

Oman PDPL

Oman

OMR 50K——
—

Bahrain PDPL

Bahrain

BHD 50K——
—

WI Act 123 AI Deepfake Disclosure

Wisconsin

$1K——
—

Seychelles DPA

Seychelles

———
—

Rwanda AI Policy

Rwanda

———
—

Angola Law 22/11

Angola

———
—

Côte d'Ivoire Law 2013-450

Côte d'Ivoire

———
—

Brazil ECA Digital

Brazil

TBD——
—

Peru AI Regulations

Peru

TBD——
—

CARICOM CCSCAP 2025

CARICOM Member States

Varies——
—

El Salvador AI Law

El Salvador

TBD——
—

Chile Cybersecurity Law

Chile

———
—

Ontario Bill 194

Ontario

TBD——
—

Argentina AI Strategy

Argentina

———
—

Colombia SIC AI Circular

Colombia

———
—

Puerto Rico Cybersecurity Act

Puerto Rico

———
—

Peru AI Law

Peru

———
—

Ecuador LOPDP

Ecuador

———
—

Belize DPA

Belize

———
—

Panama Law 81

Panama

———
—

Barbados DPA

Barbados

———
—

Paraguay Law 6534

Paraguay

———
—

Dominican Republic Law 172-13

Dominican Republic

———
PRA

Nicaragua Law 787

Nicaragua

———
—

Trinidad & Tobago DPA

Trinidad and Tobago

———
—

CARICOM HIPCAR

CARICOM Member States

Varies——
—

Costa Rica Law 8968

Costa Rica

———
—

Uruguay Law 18.331

Uruguay

———
PRA

Bahamas DPA

Bahamas

———
—

Honduras Decree 170-2006

Honduras

———
—

Puerto Rico Act 111-2005

Puerto Rico

———
—

Mexico AI Law

Mexico

———
—

C-63

Canada

———
—

AIDA

Canada

———
—

Chile AI Bill

Chile

———
—

CA Bill C-34 (Safe Social Media Act)

Canada

TBD——
—

KR AI Ethics Principles

South Korea

———
—

Singapore OSRA

Singapore

TBD——
PRA

China Minor Platform Identification Measures

China

———
—

China Minor Content Classification Measures

China

———
—

India Synthetic Media Rules

India

———
—

SG Agentic AI Framework

Singapore

———
—

Kazakhstan AI Law

Kazakhstan

———
—

Taiwan AI Act

Taiwan

———
—

AU National AI Plan

Australia

———
—

India AI Governance Guidelines

India

———
—

NZ Biometric Code

New Zealand

———
—

Japan AI Act

Japan

———
—

China GenAI Labeling Rules

China

———
—

Nepal AI Policy

Nepal

———
—

Pakistan AI Policy

Pakistan

———
—

Myanmar Cybersecurity Law

Myanmar

———
—

Indonesia PP 17/2025

Indonesia

TBD——
—

FZ No. 169

Russia

TBD——
—

Blogger Registration Law

Russia

———
—

AU Privacy Amendment 2024

Australia

———
—

Russia AI Strategy 2024

Russia

———
—

HK AI Framework

Hong Kong

———
—

SG GenAI Gov

Singapore

———
—

ASEAN AI Guide

ASEAN

———
—

China GenAI Rules

China

———
—

China Deepfake Rules

China

———
—

Pacific Islands Forum Cyber Framework

Pacific Islands Forum (18 member states)

Varies——
—

Mongolia PDPL

Mongolia

———
—

China Algorithm Rules

China

———
—

AU Online Safety Act

Australia

——A$825K/day
—

CBPR System

Multi-jurisdiction (APAC + Americas)

Varies——
—

SG Model AI Gov

Singapore

———
—

AU AI Guardrails

Australia

———
—

Taiwan PDPA Amendment 2025

Taiwan

TBD——
—

Maldives Draft PDPB

Maldives

———
—

China AI Companion Rules

China

TBD——
—

Bangladesh Draft DPA

Bangladesh

———
—

Cambodia Draft PDPL

Cambodia

———
—

EU PLD

European Union

———
PRA

EU AI Content Transparency Code

European Union

———
—

EU Digital Omnibus (AI)

European Union

———
—

EU DSA Minors Guidelines

European Union

———
—

Digital Austria 2.0

Austria

———
—

FR SREN

France

———
—

DE JuSchG §24a (KidD)

Germany

———
—

Netherlands Algorithmic Framework

Netherlands

TBD——
—

Estonia Kratt Plan

Estonia

———
—

Spain AESIA

Spain

TBD——
—

Estonia Admin Procedure Act

Estonia

———
—

Ireland OSMR

Ireland

———
—

Serbia AI Ethics Guidelines

Serbia

———
—

TCO Regulation

European Union

———
—

EU CSAM Interim

European Union

Varies——
—

Portugal Digital Rights Charter

Portugal

———
—

Malta Ethical AI Framework

Malta

———
—

Serbia PDP Law

Serbia

———
—

AVMSD

European Union

Varies——
—

Ukraine Draft PDP Law

Ukraine

———
—

Poland Draft AI Act

Poland

———
—

EU CSAR (Proposed)

European Union

TBD——
—

Norway AI-in-Schools Recommendations

Norway

———
—

OECD AI Due Diligence

International

———
—

UN/ITU AI & Child Rights Statement

International

———
—

UNICEF AI for Children

International

———
—

CoE AI Convention

International

———
—

AU AI Strategy

African Union

———
—

UN AI Resolution

United Nations

———
—

ISO 42001

International

———
—

G7 Hiroshima Process

International (G7)

———
—

ISO 23894

International

———
—

UNESCO AI Ethics

International

———
—

WHO AI Health Ethics

International

———
—

OECD AI Principles

International

———
—

UAE Federal AI Office Framework

United Arab Emirates

TBD——
—

UAE Child Digital Safety Law

United Arab Emirates

TBD——
—

Jordan PDPL

Jordan

———
—

Egypt AI Strategy 2025

Egypt

———
—

Kuwait Decision 26/2024

Kuwait

———
—

Syria Data Protection Law

Syria

———
—

Syria Cybercrime Law

Syria

———
—

Lebanon Law 81/2018

Lebanon

———
PRA

Turkey AI Law

Turkey

———
—

UK OSA Minimum Standards of Accuracy

United Kingdom

———
—

UK AI/ADM Code Regs (SI 2026/425)

United Kingdom

———
—

UK AI Approach

United Kingdom

———
—

KCSIE

United Kingdom

———
—

Children's Digital Wellbeing

United Kingdom

TBD——
—

EO 14409

United States

———
—

White House AI Legislative Framework

United States

———
—

Trump AI Preemption EO

United States

———
—

FTC Companion AI Study

United States

———
—

State AG AI Warning

United States

———
—

NIST AI RMF

United States

———
—

FTC AI Actions

United States

———
—

KOSA

United States

TBD——
—

CHAT Act

United States

TBD——
—

Biden AI EO

United States

———
—

AI LEAD Act

United States

———
PRA

NO FAKES Act

United States

———
PRA

COPPA 2.0

United States

TBD——
—

KIDS Act

United States

———
—

SAFE BOTs Act

United States

———
—

FTC AI Accuracy Policy Statement

United States

———
—

CHATBOT Act (S.4407)

United States

———
—

Youth AI Privacy Act

United States

———
—

GUARD Act

United States

———
—

IA SF 2417

Iowa

TBD——
—

GA AI Chatbot Child Safety

Georgia

———
—

CA SB 503

California

———
—

OR SB 1546

Oregon

———
PRA

VT AADC

Vermont

TBD——
PRA

CO HB 1263

Colorado

TBD——
—

Colorado AI Act

Colorado

TBD——
—

CO AI Healthcare Act

Colorado

———
—

WA AI Companion Act

Washington State

TBD——
—

RI AI Companion Safety Act

Rhode Island

——$15K/day
PRA

MD HB 895

Maryland

———
—

CO AI Psychotherapy Restrictions

Colorado

———
—

RI Healthcare AI Notification Act

Rhode Island

———
—

RI AI Mental Health Care Oversight Act

Rhode Island

———
—

ND Healthcare AI Act

North Dakota

———
—

CA AB 2013

California

———
—

IL AI Employment Law

Illinois

———
PRA

CA SB 524

California

———
—

NY GBL Art. 47

New York State

——$15K/day
—

TX AI Catfishing Law

Texas

———
PRA

TX Social Media Deepfake Takedown

Texas

TBD——
—

AR HB 1876

Arkansas

———
—

AR HB 1071

Arkansas

———
PRA

AR HB 1958

Arkansas

———
—

KY AI Governance Act

Kentucky

———
—

OH K-12 AI Mandate

Ohio

———
—

NY S 7676-B

New York State

———
PRA

DE AI Commission

Delaware

———
—

NH State AI Act

New Hampshire

———
—

AZ Political Deepfake Law

Arizona

———
—

UT AI Policy Act

Utah

———
—

TN University AI Policy Law

Tennessee

———
—

IL AIVIA

Illinois

———
—

PA HB 2006

Pennsylvania

——$100K/day
—

CA SB 1047

California

———
—

CA AI Child Safety Ballot

California

TBD——
PRA

ME LD 2162

Maine

———
PRA

NM HB 174

New Mexico

———
—

VT AI Mental Health Services Act

Vermont

———
—

MI AI Safety Transparency Act

Michigan

TBD——
—

FL Companion Chatbot Act

Florida

TBD——
—

KY AI Therapy Restrictions

Kentucky

———
—

AZ AI Disclosures for Minors

Arizona

———
—

VT AI Healthcare & Neurological Rights Act

Vermont

———
—

MO AI Mental Health Prohibition

Missouri

———
—

HI AI Chatbot Safety

Hawaii

———
—

CA SB 300

California

TBD——
—

FL Companion AI Age Verification

Florida

TBD——
—

CA SB 903

California

———
—

MI LEAD for Kids Act

Michigan

———
—

FL AI Bill of Rights

Florida

TBD——
PRA

Understanding Penalties

Max Fine: Maximum fixed monetary penalty
Revenue %: Penalty as percentage of annual revenue (often "whichever is higher")
Per Violation: Amount per individual violation
Criminal: Executives can face criminal charges
PRA: Private Right of Action — enforceable by individuals as well as regulators
License: Operating license can be revoked

This analysis is for educational purposes only and does not constitute legal advice.

Penalty data is extracted from regulatory text and may not reflect all enforcement scenarios. Always consult the primary source and qualified counsel for compliance decisions.

Why we publish this

We maintain this tracker as a free public reference, so any platform, including ones that never pay us, can understand these obligations. If you are building crisis-detection or referral protocols, our documentation explains what NOPE's tools do and don't cover.