🌎

AI governance in the Americas.

The US state AI law patchwork is accelerating, Brazil has the LGPD and a proposed AI Marco Regulatório, Canada's AIDA (Bill C-27) died on the order paper in 2025, and every country with EU customers faces the EU AI Act. Full English and Portuguese coverage now.

🇺🇸 US state AI laws 🇧🇷 Conteúdo em Português EU AI Act — applies to you too

🇺🇸

English

United States

FTCEEOCCFPB

Read guide

The US has no federal AI law but a rapidly growing patchwork of state legislation and federal agency enforcement. Colorado, Connecticut, Illinois, Texas and New York City all have active AI requirements. The trend is clear — more states and eventual federal legislation.

Colorado AI Act — bias risk assessment for high-risk AIConnecticut AI Act — consumer rights and impact assessmentsNYC Local Law 144 — annual bias audits for hiring AIIllinois BIPA — biometric data in AIFTC AI enforcement — unfair or deceptive AI practicesCFPB — AI in credit and consumer financial services

🇧🇷

Português

Brazil

ANPDBCBCVM

Full content

33 artigos em Português Brasileiro. O ANPD tornou-se agência reguladora independente em 2026, com poderes de execução reforçados. A IA é tema prioritário de supervisão 2026–2027. A Lei Geral de Proteção de Dados (LGPD) aplica-se plenamente a sistemas de IA.

Lei Geral de Proteção de Dados (LGPD)Marco regulatório de inteligência artificial (AI Bill)BCB — IA em serviços financeirosANPD orientações sobre IA e dados pessoaisProteção do consumidor e IAEU AI Act para empresas brasileiras com clientes europeus

🇨🇦

English / Français

Canada

ISEDOPCOSFI

Coming soon

Canada's federal AI legislation (AIDA) is part of Bill C-27, which has faced delays but signals a mandatory AI governance framework for high-impact systems. Quebec's Law 25 is already the strongest privacy legislation in North America. Canada-specific content in development.

AIDA (Bill C-27) died January 2025 — no federal AI law in CanadaPIPEDA (federal) + Quebec Law 25 (strongest provincial law)OSFI AI guidance for financial institutionsEU AI Act for Canadian companies with EU customersQuebec Law 25 — strongest provincial privacy lawFederal public sector AI use guidelines

🌎

Español / Português

Latin America

AAIP (Argentina)INAI (Mexico)SIC (Colombia)

Coming soon

Latin American countries are developing AI governance frameworks at different speeds. Argentina and Mexico have the most developed data protection regimes with AI implications. The EU AI Act affects any LatAm company with European customers. Spanish-language content in development.

Argentina — personal data protection and AIMexico — INAI guidance on automated decision-makingColombia — AI strategy and data protectionChile — Data Protection BillEU AI Act extraterritorial reach for LatAm exporters

The US state AI law patchwork — what you need to know now

Unlike the EU's unified AI Act, US AI regulation is emerging through individual state legislation. This creates a compliance challenge: organisations operating across multiple US states may face different requirements in each. The practical approach for most organisations is to build AI governance programs that meet the most stringent applicable state requirements and apply them broadly.

Colorado

In force

Colorado AI Act

Bias risk assessments for high-risk AI in employment, housing, credit, insurance, education

New York City

Enforced

Local Law 144

Annual bias audits for automated employment decision tools; candidate notification required

Connecticut

In force

Connecticut AI Act

Impact assessments, consumer rights against algorithmic discrimination