Online safety regulation tracker
| SevereBuild or respond: change the product, or stand up a response. | 7High | 16Critical | ||
|---|---|---|---|---|
| MajorDocument or brief: publish, file, or brief your team. | 2Moderate | 1High | 7High | |
| ModerateAssess: check what you already have. | 3Low | 7Moderate | 8Moderate | |
| MinorWatch: nothing to do yet. | 2Low | 3Low | 3Low | |
| Severity ↑ Likelihood → | UnlikelyDoesn't apply to you | PossibleNot final yet, or applies to other services | LikelyApplies to you from a set date | CertainApplies to you now |
LowModerateHighCritical
Browse Risk Radar feed
59 shown
Connecticut requires provenance data on AI content now, and chatbot safeguards from 2027
Future of Privacy ForumUSEffective date1 Oct 2026BuildCritical if you run generative AI and user-to-user with users in the US, at any size.
CriticalSevere and certain79 days. Companion chatbot duties applyThe EU AI Act's transparency obligations become applicable
CooleyEUEffective date2 Aug 2026BuildCritical if you run generative AI with users in the EU, at any size.
CriticalSevere and certain49 days. Marking deadline for generative systems already on the marketThe EU bans AI systems that generate non-consensual intimate images or CSAM from 2 Dec 2026
Addleshaw GoddardEUDeadline24 Jul 2026BuildCritical if you run generative AI and adult content with users in the EU, at any size.
CriticalSevere and certain49 days. Ban on nudifier and CSAM-generating AI systems appliesSupplying a nudification tool is now a crime in the UK
legislation.gov.ukUKEffective date29 Jun 2026BuildCritical if you run generative AI, hosting and infrastructure and app store and other consumer services with users in the UK, at any size.
CriticalSevere and certainIn forceThe Federal Trade Commission begins enforcing the TAKE IT DOWN Act
Federal Trade CommissionUSEffective date19 May 2026BuildCritical if you run user-to-user, marketplace and messaging and other consumer services with users in the US, at any size.
CriticalSevere and certainIn forceUtah's App Store Accountability Act takes effect
Frankfurt KurnitUSEffective dateMay 2026BuildCritical if you run app store, user-to-user and marketplace and other consumer services with users in the US, at any size.
CriticalSevere and certainIn forceThe Commission recommends an EU-wide framework for age verification
CovingtonEUGuidance29 Apr 2026BuildCritical if you run user-to-user, marketplace and search and other consumer services with users in the EU, at any size.
CriticalSevere and certain78 days. Member States urged to have age verification availableWashington's companion chatbot law takes effect in January 2027, with a private right to sue
Hunton Andrews KurthUSDeadline24 Mar 2026BuildCritical if you run generative AI with users in the US, at any size.
CriticalSevere and certain79 days. HB 2225 takes effectAustralia opens compliance investigations into five platforms over the under-16 rules
eSafety CommissionerAustraliaEnforcementMar 2026BuildCritical if you run user-to-user with users in Australia, at any size.
CriticalSevere and certainIn forceOfcom fines 4chan 520,000 pounds across three separate duties
OfcomUKEnforcement19 Mar 2026BuildCritical if you run user-to-user with users in the UK, at any size.
CriticalSevere and certainIn forceAustralian AI companions must check age before sexual, violent or self-harm content
eSafety CommissionerAustraliaEffective date9 Mar 2026BuildCritical if you run generative AI, user-to-user and messaging and other consumer services with users in Australia, at any size.
CriticalSevere and certainIn forceThe Commission issues findings against four adult content platforms over safeguards for minors
CovingtonEUEnforcementMar 2026BuildCritical if you run adult content with users in the EU, if a regulator has designated it.
CriticalSevere and certainIn forceOfcom fines two adult platforms over age assurance, with a daily penalty attached
InforrmUKEnforcementFeb 2026BuildCritical if you run adult content with users in the UK, at any size.
CriticalSevere and certainIn forceThe Texas App Store Accountability Act takes effect
Morrison FoersterUSEffective date1 Jan 2026BuildCritical if you run app store, user-to-user and marketplace and other consumer services with users in the US, at any size.
CriticalSevere and certainIn forceOregon's AI companion law takes effect in January 2027, and users can sue for $1,000 per violation
Oregon State LegislatureUSDeadlineMar 2026BuildCritical if you run generative AI with users in the US, at any size.
CriticalSevere and certain79 days. SB 1546 takes effectRhode Island requires AI companions to remind users every three hours and report self-harm referrals
Rhode Island General AssemblyUSDeadlineJun 2026BuildCritical if you run generative AI with users in the US, at any size.
CriticalSevere and certain79 days. Act takes effect; first report to the Attorney General due 1 Jul 2027Registration closes for fee-liable providers on the Online Safety Fees portal
OfcomUKDeadline30 Sep 2026DocumentHigh if you run user-to-user and search with users in the UK, at any size.
HighMajor and certainDue now. Registration deadlineCalifornia's Adam's Law adds age checks, child defaults and outside audits for companion chatbots
Office of the Governor of CaliforniaUSDeadline10 Sep 2026BuildHigh if you run generative AI with users in the US, at any size.
HighSevere and likelyCore child safety duties and pre-release risk assessments applyA self-harm livestream stayed up about fifteen minutes after a review error
Tech TimesGlobalIncident12 Aug 2026BriefHigh if you run livestreaming and user-to-user anywhere, at any size.
HighMajor and certainIn forceThe EU AI Office can now fine general-purpose AI model providers and pull models from the market
European CommissionEUEnforcement2 Aug 2026DocumentHigh if you run generative AI with users in the EU, at any size.
HighMajor and likelyModels on the market before 2 Aug 2025 must complyHawaii's AI companion law is in force, with hourly break reminders for minors
Hawaii State LegislatureUSEffective date14 Jul 2026BuildHigh if you run generative AI with users in the US, at any size.
HighSevere and likelyFirst annual report to the Department of Health dueOfcom publishes the register of categorised services and consults on their additional duties
OfcomUKConsultation10 Jul 2026DocumentHigh if you run user-to-user and search with users in the UK, if a regulator has designated it.
HighMajor and certainDue now. Consultation closes at 5pmOfcom adds crisis response measures to the illegal content codes
OfcomUKGuidance2026DocumentHigh if you run user-to-user, livestreaming and messaging and other consumer services with users in the UK, at any size.
HighMajor and certainIn forceGeorgia requires hourly AI reminders for minors on companion chatbots from July 2027
Georgia General AssemblyUSDeadline15 May 2026BuildHigh if you run generative AI with users in the US, at any size.
HighSevere and likelySB 540 takes effectIowa sets AI disclosure, minor safety and self-harm rules for public chatbots from July 2027
Iowa LegislatureUSDeadline2 May 2026BuildHigh if you run generative AI with users in the US, at any size.
HighSevere and likelySF 2417 duties applyNebraska's Conversational AI Safety Act puts minor safeguards on public chatbots from July 2027
Nebraska LegislatureUSDeadline14 Apr 2026BuildHigh if you run generative AI with users in the US, at any size.
HighSevere and likelyAct becomes operativeIdaho's Conversational AI Safety Act applies to public chatbots from July 2027
Idaho LegislatureUSDeadline31 Mar 2026BuildHigh if you run generative AI with users in the US, at any size.
HighSevere and likelyS 1297 takes effectCalifornia requires frontier AI developers to publish safety frameworks and report incidents
Future of Privacy ForumUSEffective date1 Jan 2026DocumentHigh if you run generative AI with users in the US, at any size.
HighMajor and certainIn forceCalifornia requires companion chatbots to disclose they are AI and run self-harm protocols
SkaddenUSEffective date1 Jan 2026BuildHigh if you run generative AI with users in the US, at any size.
HighSevere and likelyFirst annual report to the Office of Suicide Prevention dueOfcom sets out when AI chatbots fall under the Online Safety Act, and is investigating two
RPCUKGuidance18 Dec 2025DocumentHigh if you run generative AI, user-to-user and search and other consumer services with users in the UK, at any size.
HighMajor and certainIn forceThe Commission fines X 120 million euro under the Digital Services Act
TechPolicy.PressEUEnforcementDec 2025DocumentHigh if you run user-to-user with users in the EU, if a regulator has designated it.
HighMajor and certainIn forceDuties on disclosure to bereaved parents expected once the guidance is final
WigginUKGuidanceExpected late 2026DocumentModerate if you run user-to-user with users in the UK, if a regulator has designated it.
ModerateMajor and possibleNo date setThe Commission designates ChatGPT a very large online search engine under the DSA
European CommissionEUEffective date31 Aug 2026AssessModerate if you run generative AI and search with users in the EU, if a regulator has designated it.
ModerateModerate and certainIn forceGIFCT activates a perpetrator content incident after a violent extremist event in Germany
GIFCTEUIncident8 Jul 2026RespondModerate if you run user-to-user, livestreaming and messaging and other consumer services with users in the EU, at any size.
ModerateModerate and likelyOver 90 days agoGoogle terminates coordinated influence campaigns aimed at Colombia's presidential election
Google Threat Analysis GroupGlobalOperationQ2 2026AssessModerate if you run user-to-user, livestreaming and search anywhere, at any size.
ModerateModerate and likelyOver 90 days agoGIFCT activates a perpetrator content incident after a violent extremist event in Montreal
GIFCTCanadaIncident23 Jun 2026RespondModerate if you run user-to-user, livestreaming and messaging and other consumer services with users in Canada, at any size.
ModerateModerate and likelyOver 90 days agoThe Commission fines Temu 200 million euro, the largest Digital Services Act penalty so far
Loyens & LoeffEUEnforcement28 May 2026AssessModerate if you run marketplace with users in the EU, if a regulator has designated it.
ModerateModerate and certainIn forceGIFCT activates a perpetrator content incident after a violent extremist event in San Diego
GIFCTUSIncident19 May 2026RespondModerate if you run user-to-user, livestreaming and messaging and other consumer services with users in the US, at any size.
ModerateModerate and likelyOver 90 days agoOfcom fines a US-based forum 950,000 pounds under the illegal content duties
OfcomUKEnforcement13 May 2026AssessModerate if you run user-to-user with users in the UK, at any size.
ModerateModerate and certainIn forceThe Massachusetts high court holds Section 230 does not bar design claims over Instagram
EPICUSRuling10 Apr 2026BriefModerate if you run user-to-user, livestreaming and gaming with users in the US, at any size.
ModerateModerate and likelyOver 90 days agoThe EU temporary derogation for voluntary detection of child sexual abuse material lapses
European ParliamentEUEffective date3 Apr 2026AssessModerate if you run messaging and hosting and infrastructure with users in the EU, at any size.
ModerateModerate and certainIn forceGIFCT activates a perpetrator content incident after a violent extremist event in Italy
GIFCTEUIncident27 Mar 2026RespondModerate if you run user-to-user, livestreaming and messaging and other consumer services with users in the EU, at any size.
ModerateModerate and likelyOver 90 days agoThe Commission opens a formal Digital Services Act investigation into Snapchat
Loyens & LoeffEUEnforcement26 Mar 2026AssessModerate if you run user-to-user and messaging with users in the EU, if a regulator has designated it.
ModerateModerate and certainIn forceA California jury finds social media companies liable for negligent design of features that harm teens
BeneschUSRuling24 Mar 2026BriefModerate if you run user-to-user, livestreaming and gaming with users in the US, at any size.
ModerateModerate and likelyOver 90 days agoThe Commission investigates X over Grok's sexualized deepfakes under the DSA
European CommissionEUEnforcement26 Jan 2026AssessModerate if you run user-to-user and generative AI with users in the EU, if a regulator has designated it.
ModerateModerate and certainIn forceForty-two national elections in 2026, and influence operations assessed against all of them
NATO Strategic Communications Centre of ExcellenceGlobalStandingThrough 2026BriefModerate if you run user-to-user, livestreaming and search and other consumer services anywhere, at any size.
ModerateMajor and possibleNo date setTexas bans AI built to incite self-harm or produce child sexual abuse material
Baker BottsUSEffective date1 Jan 2026AssessModerate if you run generative AI with users in the US, at any size.
ModerateModerate and certainIn forceThe Commission publishes its final Code of Practice on marking and labeling AI-generated content
Jones DayEUGuidanceJun 2026AssessModerate if you run generative AI and user-to-user with users in the EU, at any size.
ModerateModerate and certain49 days. Marking deadline for systems already on the marketOfcom's statutory report on app stores
PwCUKDeadlineJan 2027WatchLow if you run app store with users in the UK, at any size.
LowMinor and likelyReport dueThe Online Information Advisory Committee publishes its first report
DentonsUKDeadlineNov 2026WatchLow if you run user-to-user and search with users in the UK, at any size.
LowMinor and certain47 days. First report dueOfcom's statutory report on content harmful to children
WigginUKDeadlineOct 2026WatchLow if you run user-to-user and search with users in the UK, at any size.
LowMinor and certain17 days. Report dueThe AI Omnibus moves the high-risk obligations to December 2027
Norton Rose FulbrightEUGuidanceAug 2026WatchLow if you run generative AI with users in the EU, at any size.
LowMinor and likelyHigh-risk obligations applyCanada's online safety bill would put duties on AI chatbot services alongside social media
Canadian HeritageCanadaProposal10 Jun 2026WatchLow if you run generative AI and user-to-user with users in Canada, at any size.
LowMinor and possibleNo date setThe EU child sexual abuse regulation is still in negotiation
eucrimEUProposalIn negotiationWatchLow if you run messaging and hosting and infrastructure with users in the EU, at any size.
LowMinor and possibleNo date setThe deepfake harms that arrived were not the ones detectors were built for
Published researchGlobalResearch2026AssessLow if you run user-to-user, marketplace and messaging and other consumer services anywhere, at any size.
LowModerate and possibleNo date setUK ministers can now extend Online Safety Act duties to any AI service
legislation.gov.ukUKProposal29 Apr 2026WatchLow if you run generative AI with users in the UK, at any size.
LowMinor and certain78 days. Government progress report to Parliament dueNew York's RAISE Act requires frontier AI incident reports within 72 hours from 2027
MultiStateUSDeadline27 Mar 2026AssessLow if you run generative AI with users in the US, at any size.
LowModerate and possibleNo date setThe federal push to override state AI laws hasn't displaced the state chatbot rules
Baker BottsUSStanding11 Dec 2025WatchLow if you run generative AI with users in the US, at any size.
LowMinor and likelyOver 90 days agoThe FTC's study of AI companion chatbots and children is still open, with no findings yet
Federal Trade CommissionUSOperation11 Sep 2025AssessLow if you run generative AI, user-to-user and messaging with users in the US, at any size.
LowModerate and possibleNo date set
Not legal advice. Read the source.