From Proposal to Passage: Enacted U.S. AI Laws, 2023–2025
Over the past three years, lawmakers across the United States have increasingly enacted AI-related laws that shape the development and deployment of AI systems. Between 2023 and 2025, the Future of Privacy Forum tracked 27 pieces of enacted AI-related legislation across 14 states, along with one federal law (the TAKE IT DOWN Act) that carry […]
Enacted AI Legislation Chart
E N AC TE D AI LE G IS LA TIO N O ve rv ie w C hatb ots : C A SB -2 43 (2 0 25 ) , M E LD -1 7 2 7 (2 0 25 ), N H HB-1 4 3 (2 0 25 ), N Y S-3 0 […]
Red Lines under the EU AI Act: Understanding ‘Prohibited AI Practices’ and their Interplay with the GDPR, DSA
Blog 1/ Red Lines under the EU AI Act Series The EU AI Act prohibits certain AI practices in the European Union (hereinafter also “the Union”or “the EU”), at the top of the pyramid of its layered approach: harmful manipulation and deception, social scoring, individual risk assessment, untargeted scraping of facial images, emotion recognition, biometric […]
FPF Member Training: Navigating AI Compliance in the U.S. Legal Landscape
Join us for the next complimentary FPF member training on Navigating AI Compliance in the U.S. Legal Landscape, taking place March 16 from 12:00pm – 1:00pm ET. As AI technologies become embedded across industries, organizations face a complex and evolving compliance environment. AI systems are subject to a patchwork of legal frameworks—from state privacy laws and sector-specific regulations […]
Paradigm Shift in the Palmetto State: A New Approach to Online Protection-by-Design
South Carolina Governor McMaster signed HB 3431, an Age-Appropriate Design Code (AADC) -style law, on February 5, adding to the growing list of new, bipartisan state frameworks fortifying online protections for minors. Although HB 3431 is dubbed an AADC, its divergence from past models and unique blend of requirements that draw upon a variety of other […]
Paradigm Shift in the Palmetto State: A New Approach to Online Protection-by-Design
SSouth Carolina Governor McMaster signed HB 3431, an Age-Appropriate Design Code (AADC) -style law, on February 5, adding to the growing list of new, bipartisan state frameworks fortifying online protections for minors. Although HB 3431 is dubbed an AADC, its divergence from past models and unique blend of requirements that draw upon a variety of […]
FPF Retrospective: U.S. Privacy Enforcement in 2025
The U.S. privacy law landscape continues to mature as new laws go into effect, cure periods expire, and regulators interpret the law through enforcement actions and guidance. State attorneys general and the Federal Trade Commission act as the country’s de facto privacy regulators, regularly bringing enforcement actions under legal authorities both old and new. For […]
From Chatbot to Checkout: Who Pays When Transactional Agents Play?
Disclaimer: Please note that nothing below should be construed as legal advice. If 2025 was the year of agentic systems, 2026 may be the year these technologies reshape e-commerce. Agentic AI systems are defined by the ability to complete more complex, multi-step tasks, and exhibit greater autonomy over how to achieve user goals. As these […]
FPF Retrospective: U.S. Privacy Enforcement in 2025
The U.S. privacy law landscape continues to mature as new laws go into effect, cure periods expire, and regulators interpret the law through enforcement actions and guidance. State attorneys general and the Federal Trade Commission act as the country’s de facto privacy regulators, regularly bringing enforcement actions under legal authorities both old and new. For […]
Privacy Enforcement Retrospective_2026.02.06
RETR O SP EC TIV E U S PO LIC Y U .S . Priv a cy Enfo rc e m en t in 2 0 25 U .S . Le g is la tio n & Reg ula tio n F eb ru ary 20 26 A uth o re d By: Jo rd […]