Pro-Human AI Legislation

Germany's top labor court ruled that works councils (employee representative bodies) must be consulted before employers can deploy AI systems that affect working conditions. The ruling means German workers have a legal right to weigh in on AI adoption in their workplace — a model other EU countries are watching.

China's Measures for the Administration of Generative Artificial Intelligence Services took effect August 15, 2023, requiring providers of generative AI services to label AI-generated content, conduct security assessments before launch, prevent AI from generating content that undermines state power but also protecting …

Illinois HB 3773 (2023) expanded BIPA to clarify that AI systems that generate biometric identifiers (such as AI voice cloning or AI face reconstruction from non-biometric data) are covered by the same consent and data protection requirements as direct biometric data collection. The clarification responded to attempts …

Colorado's HB23-1229 expanded the Colorado Privacy Act to add specific protections against AI-based profiling for consequential decisions in housing, credit, education, employment, and healthcare. Controllers must conduct and document risk assessments before using profiling AI, provide opt-out rights, and enable consum…

New York SB S7780A (proposed 2023) would create a digital replica right giving performers and public figures control over AI-generated replicas of their voice and likeness. The bill would prohibit the production, distribution, or transmission of any AI-generated digital replica of a living or deceased person without wr…

Nevada AB 101 (2023) strengthened Nevada's right of publicity statute to cover AI-generated digital replicas of voice and likeness, making it a civil violation to use AI to generate a commercial replica of any person without written consent. The law specifically addresses AI music and entertainment deepfakes and applie…

New York State Senate Bill S5641A (proposed) would require employers to notify current and prospective employees when automated employment decision tools are used and provide an explanation of the decision criteria. The bill also creates a private right of action for workers harmed by non-compliant AI systems, going be…

Texas HB 4337 (2023) amended the Texas Penal Code to make it a criminal offense to create or distribute a deepfake sexual video of a person without their consent, with enhanced penalties when the victim is a minor or when the material is distributed with intent to harass. This was among the first criminal statutes in t…

Texas SB 2224 (2023) established the Texas Responsible AI Governance Act framework, directing state agencies to conduct risk assessments before deploying AI systems in government functions that directly affect Texans, including benefits determination, parole decisions, and child welfare. State agencies must document AI…

Texas HB 4 (2023) — the Texas Data Privacy and Security Act — includes provisions restricting AI-driven consumer profiling, requiring opt-out rights for targeted advertising based on AI analysis of personal data, and prohibiting discrimination in AI systems based on race, sex, religion, and other protected characterist…

Texas SB 2488 (SCOPE Act, 2023) requires social media platforms to implement age-verification systems and restrict algorithmic content curation for users under 18. Platforms must disclose how recommendation algorithms work when requested by parents, and must provide tools for parents to view and disable AI-driven conte…

The UK Online Safety Act 2023, which received Royal Assent in October 2023, requires platforms to proactively identify and remove AI-generated illegal content including deepfake pornography, CSAM, and AI-generated terrorist content. Ofcom, the UK's communications regulator, gained powers to fine companies up to 10% of …

Proposed federal legislation requiring that AI-generated content — images, videos, audio, and text — be clearly labeled as such. The bill has bipartisan support but as of 2025 has not been passed into law.

The No Robot Bosses Act (proposed 2023, S. 1525) would prohibit employers from using automated decision systems to make consequential employment decisions without human oversight and review. The bill requires that a human decision-maker review any AI recommendation before it is used to hire, fire, promote, or disciplin…

COPPA 2.0 (Children and Teens' Online Privacy Protection Act, proposed 2023) would expand the original 1998 COPPA law to protect teenagers up to age 16, and add new requirements specifically addressing AI-driven profiling of minors. The bill prohibits targeted advertising to children and teens, bans data brokers from s…

Multiple Texas school districts banned AI writing tools including ChatGPT from classrooms, citing academic integrity concerns. Some districts went further and blocked AI tools on school networks entirely while developing AI policies.

Washington's My Health MY Data Act (SB 1155, 2023) expands privacy protections to health data collected and processed by AI systems outside of HIPAA's scope. The law requires consent before AI systems can collect, share, or sell health-related behavioral data, location data used to infer health conditions, and biometri…

The HUMAN Act (Highlighted Under Machine Act, proposed 2023) would require AI-generated audio and audiovisual works distributed online or broadcast to be labeled with a disclosure that the content was created or significantly altered by AI. The bill was introduced by Representative Yvette Clarke in response to the spre…

Italy's data protection authority (Garante) ordered ChatGPT to suspend operations in Italy on March 30, 2023, citing violations of GDPR relating to lack of legal basis for mass data collection, no age verification to protect minors, and inadequate disclosure to users whose data was used for AI training. OpenAI restored…

Arizona HB 2191 placed restrictions on new data center water usage permits in Maricopa County, requiring data centers consuming more than 1 million gallons of water per day to receive approval from the state Department of Water Resources. The law responded to growing concerns about AI data centers straining the water s…

NYC Local Law 144 requires employers using AI in hiring decisions to conduct annual bias audits by independent parties, and to publicly post a summary of the audit results. Employers must also notify candidates when automated employment decision tools are being used.

The EU Digital Services Act (DSA, Regulation 2022/2065) prohibits large platforms from using algorithmic recommendation systems to serve targeted advertising to minors and bans profiling of children for any commercial purpose. Platforms must conduct algorithmic risk assessments for harms to minors and provide child-saf…

California's Age-Appropriate Design Code Act (AB 2273, signed 2022) requires online services likely to be accessed by children under 18 to default to high-privacy settings, prohibit AI systems from profiling children without explicit consent, and conduct data protection impact assessments. Algorithmic amplification of …

New York State enacted amendments to the law governing automated employment decisions (the nation's only state law on automated employment decisions at the time) requiring any company using AI tools to screen resumes or rank candidates for jobs in New York to obtain an annual bias audit from an independent auditor and …

New York City Local Law 49 of 2021 bans the NYPD and other city agencies from using predictive policing software and requires all surveillance technology acquisitions to go through a public review process. The law was driven by evidence that predictive policing algorithms — which use AI to forecast crime locations and …

New York City Local Law 144 of 2021 requires employers and employment agencies using automated employment decision tools (AEDTs) to conduct independent bias audits before deploying them for hiring or promotion. Results of the bias audit must be made publicly available, and candidates must be notified that an AEDT is be…

Colorado SB21-169 restricts insurers from using external consumer data and algorithms in ways that create unfair discrimination. The law requires insurers to demonstrate that AI and algorithmic tools used for underwriting, pricing, and claims do not unfairly discriminate against protected classes. Regulators gained aut…

Portland, Oregon enacted two ordinances in 2020 banning facial recognition technology — one for city agencies and another, uniquely, for private businesses operating in public-facing spaces within the city. The private-sector ban was the first of its kind in the US and prohibits retailers, hotels, restaurants, and othe…

Maryland HB 1202 prohibits employers from using facial recognition technology during job interviews without applicant consent. Employers who use facial recognition in pre-employment interviews must first obtain written consent from the applicant, making Maryland one of the first states to restrict AI facial recognition…

The Illinois Artificial Intelligence Video Interview Act (Public Act 101-0260) requires employers to notify applicants when AI is used to analyze video interviews and to explain how the AI evaluates candidates. Employers must obtain consent before using AI analysis and must delete video recordings upon request within 3…