{ "dataset": "AI & Digital Governance Policy Tracker", "slug": "ai-digital-governance-policy-tracker", "publisher": "International Research Institute", "licence": "CC BY 4.0", "licenceUrl": "https://creativecommons.org/licenses/by/4.0/", "doi": "10.62371/iri.data.2026.004", "landingPage": "https://internationalresearchinstitute.org/data/ai-digital-governance-policy-tracker", "unitOfObservation": "jurisdiction-measure", "temporalCoverage": "2018–2026, rolling", "spatialCoverage": "71 jurisdictions, concentrated in the OECD and G20 and extended to selected emerging digital economies", "lastUpdated": "2026-06-20", "variablesInFullDataset": 24, "recordCount": 60, "note": "Open sample extract of the AI & Digital Governance Policy Tracker, released under CC BY 4.0 for reuse with attribution. Values are illustrative of the published series; the maintained dataset carries 24 variables. See the landing page for the full methodology and codebook.", "fields": [ { "name": "measure_id", "description": "Stable identifier for the measure", "type": "string" }, { "name": "jurisdiction", "description": "Adopting jurisdiction", "type": "string" }, { "name": "iso3", "description": "ISO 3166-1 alpha-3 code of the jurisdiction", "type": "string" }, { "name": "domain", "description": "Governance domain", "type": "string" }, { "name": "measure_title", "description": "Short descriptive title of the measure", "type": "string" }, { "name": "instrument_type", "description": "Legal instrument type", "type": "string" }, { "name": "scope", "description": "Scope of application", "type": "string" }, { "name": "status", "description": "Adoption status", "type": "string" }, { "name": "year_adopted", "description": "Year the measure was adopted", "type": "integer" }, { "name": "reviewed_by_second_analyst", "description": "Classification confirmed by a second analyst (yes/no)", "type": "string" } ], "records": [ { "measure_id": "AIDG-001", "jurisdiction": "Bangladesh", "iso3": "BGD", "domain": "Data protection", "measure_title": "Bangladesh cross-border transfer regime", "instrument_type": "Voluntary code", "scope": "Public sector", "status": "In force", "year_adopted": 2024, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-002", "jurisdiction": "Costa Rica", "iso3": "CRI", "domain": "Data protection", "measure_title": "Costa Rica children's data code", "instrument_type": "Voluntary code", "scope": "Large platforms", "status": "In force", "year_adopted": 2019, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-003", "jurisdiction": "Brazil", "iso3": "BRA", "domain": "Data protection", "measure_title": "Brazil data-breach notification rules", "instrument_type": "Regulation", "scope": "Economy-wide", "status": "In force", "year_adopted": 2019, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-004", "jurisdiction": "Portugal", "iso3": "PRT", "domain": "Data protection", "measure_title": "Portugal data-breach notification rules", "instrument_type": "Voluntary code", "scope": "Large platforms", "status": "Proposed", "year_adopted": 2018, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-005", "jurisdiction": "Tanzania", "iso3": "TZA", "domain": "Platform regulation", "measure_title": "Tanzania content-moderation transparency measure", "instrument_type": "Binding law", "scope": "Large platforms", "status": "Proposed", "year_adopted": 2024, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-006", "jurisdiction": "Morocco", "iso3": "MAR", "domain": "Platform regulation", "measure_title": "Morocco online-safety duties", "instrument_type": "Regulation", "scope": "Economy-wide", "status": "Enacted, not yet in force", "year_adopted": 2024, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-007", "jurisdiction": "Mexico", "iso3": "MEX", "domain": "Data protection", "measure_title": "Mexico cross-border transfer regime", "instrument_type": "Voluntary code", "scope": "Public sector", "status": "Enacted, not yet in force", "year_adopted": 2025, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-008", "jurisdiction": "Peru", "iso3": "PER", "domain": "Platform regulation", "measure_title": "Peru online-safety duties", "instrument_type": "Regulation", "scope": "High-risk applications", "status": "Enacted, not yet in force", "year_adopted": 2023, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-009", "jurisdiction": "Georgia", "iso3": "GEO", "domain": "Artificial intelligence", "measure_title": "Georgia foundation-model oversight measure", "instrument_type": "Binding law", "scope": "Public sector", "status": "Proposed", "year_adopted": 2019, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-010", "jurisdiction": "Jordan", "iso3": "JOR", "domain": "Data protection", "measure_title": "Jordan personal-data protection act", "instrument_type": "Binding law", "scope": "Economy-wide", "status": "Enacted, not yet in force", "year_adopted": 2023, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-011", "jurisdiction": "Uganda", "iso3": "UGA", "domain": "Data protection", "measure_title": "Uganda data-breach notification rules", "instrument_type": "Binding law", "scope": "High-risk applications", "status": "Enacted, not yet in force", "year_adopted": 2020, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-012", "jurisdiction": "Australia", "iso3": "AUS", "domain": "Data protection", "measure_title": "Australia children's data code", "instrument_type": "Voluntary code", "scope": "Large platforms", "status": "In force", "year_adopted": 2018, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-013", "jurisdiction": "Ethiopia", "iso3": "ETH", "domain": "Data protection", "measure_title": "Ethiopia cross-border transfer regime", "instrument_type": "Binding law", "scope": "Large platforms", "status": "In force", "year_adopted": 2022, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-014", "jurisdiction": "Ghana", "iso3": "GHA", "domain": "Artificial intelligence", "measure_title": "Ghana public-sector use guidelines", "instrument_type": "Binding law", "scope": "Public sector", "status": "Enacted, not yet in force", "year_adopted": 2022, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-015", "jurisdiction": "India", "iso3": "IND", "domain": "Platform regulation", "measure_title": "India algorithmic-recommender obligations", "instrument_type": "Voluntary code", "scope": "High-risk applications", "status": "Enacted, not yet in force", "year_adopted": 2025, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-016", "jurisdiction": "United Arab Emirates", "iso3": "ARE", "domain": "Data protection", "measure_title": "United Arab Emirates children's data code", "instrument_type": "Voluntary code", "scope": "Large platforms", "status": "Proposed", "year_adopted": 2020, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-017", "jurisdiction": "China", "iso3": "CHN", "domain": "Platform regulation", "measure_title": "China digital-market competition rules", "instrument_type": "Regulation", "scope": "Public sector", "status": "Proposed", "year_adopted": 2020, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-018", "jurisdiction": "Spain", "iso3": "ESP", "domain": "Data protection", "measure_title": "Spain personal-data protection act", "instrument_type": "Regulation", "scope": "Public sector", "status": "Proposed", "year_adopted": 2026, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-019", "jurisdiction": "United States", "iso3": "USA", "domain": "Artificial intelligence", "measure_title": "United States risk-classification and conformity rules", "instrument_type": "Voluntary code", "scope": "Economy-wide", "status": "Proposed", "year_adopted": 2024, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-020", "jurisdiction": "Colombia", "iso3": "COL", "domain": "Platform regulation", "measure_title": "Colombia online-safety duties", "instrument_type": "Binding law", "scope": "Economy-wide", "status": "Proposed", "year_adopted": 2020, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-021", "jurisdiction": "Romania", "iso3": "ROU", "domain": "Data protection", "measure_title": "Romania personal-data protection act", "instrument_type": "Voluntary code", "scope": "Large platforms", "status": "Enacted, not yet in force", "year_adopted": 2019, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-022", "jurisdiction": "Germany", "iso3": "DEU", "domain": "Data protection", "measure_title": "Germany cross-border transfer regime", "instrument_type": "Regulation", "scope": "Large platforms", "status": "In force", "year_adopted": 2024, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-023", "jurisdiction": "Malaysia", "iso3": "MYS", "domain": "Artificial intelligence", "measure_title": "Malaysia accountability and transparency framework", "instrument_type": "Binding law", "scope": "Economy-wide", "status": "In force", "year_adopted": 2020, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-024", "jurisdiction": "Vietnam", "iso3": "VNM", "domain": "Artificial intelligence", "measure_title": "Vietnam risk-classification and conformity rules", "instrument_type": "Binding law", "scope": "Economy-wide", "status": "Proposed", "year_adopted": 2021, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-025", "jurisdiction": "Canada", "iso3": "CAN", "domain": "Data protection", "measure_title": "Canada children's data code", "instrument_type": "Binding law", "scope": "High-risk applications", "status": "Proposed", "year_adopted": 2021, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-026", "jurisdiction": "United Kingdom", "iso3": "GBR", "domain": "Artificial intelligence", "measure_title": "United Kingdom foundation-model oversight measure", "instrument_type": "Voluntary code", "scope": "High-risk applications", "status": "Enacted, not yet in force", "year_adopted": 2018, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-027", "jurisdiction": "Indonesia", "iso3": "IDN", "domain": "Artificial intelligence", "measure_title": "Indonesia risk-classification and conformity rules", "instrument_type": "Regulation", "scope": "High-risk applications", "status": "Proposed", "year_adopted": 2023, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-028", "jurisdiction": "France", "iso3": "FRA", "domain": "Platform regulation", "measure_title": "France online-safety duties", "instrument_type": "Regulation", "scope": "Large platforms", "status": "Enacted, not yet in force", "year_adopted": 2019, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-029", "jurisdiction": "Turkey", "iso3": "TUR", "domain": "Artificial intelligence", "measure_title": "Turkey risk-classification and conformity rules", "instrument_type": "Voluntary code", "scope": "Large platforms", "status": "In force", "year_adopted": 2025, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-030", "jurisdiction": "Sweden", "iso3": "SWE", "domain": "Platform regulation", "measure_title": "Sweden content-moderation transparency measure", "instrument_type": "Voluntary code", "scope": "Public sector", "status": "Proposed", "year_adopted": 2020, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-031", "jurisdiction": "Greece", "iso3": "GRC", "domain": "Platform regulation", "measure_title": "Greece digital-market competition rules", "instrument_type": "Binding law", "scope": "High-risk applications", "status": "Enacted, not yet in force", "year_adopted": 2019, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-032", "jurisdiction": "Egypt", "iso3": "EGY", "domain": "Platform regulation", "measure_title": "Egypt online-safety duties", "instrument_type": "Regulation", "scope": "Large platforms", "status": "Enacted, not yet in force", "year_adopted": 2025, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-033", "jurisdiction": "Italy", "iso3": "ITA", "domain": "Platform regulation", "measure_title": "Italy algorithmic-recommender obligations", "instrument_type": "Voluntary code", "scope": "Large platforms", "status": "Enacted, not yet in force", "year_adopted": 2025, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-034", "jurisdiction": "Chile", "iso3": "CHL", "domain": "Data protection", "measure_title": "Chile personal-data protection act", "instrument_type": "Regulation", "scope": "Large platforms", "status": "Enacted, not yet in force", "year_adopted": 2023, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-035", "jurisdiction": "South Africa", "iso3": "ZAF", "domain": "Data protection", "measure_title": "South Africa data-breach notification rules", "instrument_type": "Binding law", "scope": "High-risk applications", "status": "In force", "year_adopted": 2019, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-036", "jurisdiction": "Senegal", "iso3": "SEN", "domain": "Platform regulation", "measure_title": "Senegal digital-market competition rules", "instrument_type": "Regulation", "scope": "Public sector", "status": "Enacted, not yet in force", "year_adopted": 2021, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-037", "jurisdiction": "South Korea", "iso3": "KOR", "domain": "Platform regulation", "measure_title": "South Korea online-safety duties", "instrument_type": "Voluntary code", "scope": "Large platforms", "status": "Enacted, not yet in force", "year_adopted": 2020, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-038", "jurisdiction": "Nigeria", "iso3": "NGA", "domain": "Artificial intelligence", "measure_title": "Nigeria foundation-model oversight measure", "instrument_type": "Binding law", "scope": "Public sector", "status": "Proposed", "year_adopted": 2019, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-039", "jurisdiction": "Kenya", "iso3": "KEN", "domain": "Artificial intelligence", "measure_title": "Kenya public-sector use guidelines", "instrument_type": "Binding law", "scope": "Economy-wide", "status": "In force", "year_adopted": 2022, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-040", "jurisdiction": "Thailand", "iso3": "THA", "domain": "Platform regulation", "measure_title": "Thailand digital-market competition rules", "instrument_type": "Binding law", "scope": "High-risk applications", "status": "Enacted, not yet in force", "year_adopted": 2023, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-041", "jurisdiction": "Ukraine", "iso3": "UKR", "domain": "Platform regulation", "measure_title": "Ukraine algorithmic-recommender obligations", "instrument_type": "Voluntary code", "scope": "Public sector", "status": "Enacted, not yet in force", "year_adopted": 2026, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-042", "jurisdiction": "Poland", "iso3": "POL", "domain": "Platform regulation", "measure_title": "Poland content-moderation transparency measure", "instrument_type": "Voluntary code", "scope": "Large platforms", "status": "Proposed", "year_adopted": 2024, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-043", "jurisdiction": "Pakistan", "iso3": "PAK", "domain": "Platform regulation", "measure_title": "Pakistan algorithmic-recommender obligations", "instrument_type": "Regulation", "scope": "Large platforms", "status": "Enacted, not yet in force", "year_adopted": 2020, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-044", "jurisdiction": "Argentina", "iso3": "ARG", "domain": "Data protection", "measure_title": "Argentina personal-data protection act", "instrument_type": "Regulation", "scope": "Public sector", "status": "Enacted, not yet in force", "year_adopted": 2024, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-045", "jurisdiction": "Serbia", "iso3": "SRB", "domain": "Artificial intelligence", "measure_title": "Serbia accountability and transparency framework", "instrument_type": "Binding law", "scope": "Large platforms", "status": "In force", "year_adopted": 2024, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-046", "jurisdiction": "Philippines", "iso3": "PHL", "domain": "Data protection", "measure_title": "Philippines cross-border transfer regime", "instrument_type": "Binding law", "scope": "Public sector", "status": "Enacted, not yet in force", "year_adopted": 2023, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-047", "jurisdiction": "Netherlands", "iso3": "NLD", "domain": "Artificial intelligence", "measure_title": "Netherlands foundation-model oversight measure", "instrument_type": "Binding law", "scope": "Economy-wide", "status": "Enacted, not yet in force", "year_adopted": 2018, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-048", "jurisdiction": "Japan", "iso3": "JPN", "domain": "Platform regulation", "measure_title": "Japan algorithmic-recommender obligations", "instrument_type": "Binding law", "scope": "Economy-wide", "status": "In force", "year_adopted": 2023, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-049", "jurisdiction": "Fiji", "iso3": "FJI", "domain": "Data protection", "measure_title": "Fiji cross-border transfer regime", "instrument_type": "Regulation", "scope": "Large platforms", "status": "In force", "year_adopted": 2026, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-050", "jurisdiction": "New Zealand", "iso3": "NZL", "domain": "Platform regulation", "measure_title": "New Zealand online-safety duties", "instrument_type": "Binding law", "scope": "Economy-wide", "status": "Enacted, not yet in force", "year_adopted": 2026, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-051", "jurisdiction": "Rwanda", "iso3": "RWA", "domain": "Platform regulation", "measure_title": "Rwanda digital-market competition rules", "instrument_type": "Voluntary code", "scope": "High-risk applications", "status": "Proposed", "year_adopted": 2026, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-052", "jurisdiction": "Saudi Arabia", "iso3": "SAU", "domain": "Platform regulation", "measure_title": "Saudi Arabia content-moderation transparency measure", "instrument_type": "Regulation", "scope": "Large platforms", "status": "Proposed", "year_adopted": 2026, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-053", "jurisdiction": "Sri Lanka", "iso3": "LKA", "domain": "Platform regulation", "measure_title": "Sri Lanka digital-market competition rules", "instrument_type": "Binding law", "scope": "High-risk applications", "status": "In force", "year_adopted": 2020, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-054", "jurisdiction": "Kazakhstan", "iso3": "KAZ", "domain": "Artificial intelligence", "measure_title": "Kazakhstan risk-classification and conformity rules", "instrument_type": "Voluntary code", "scope": "Large platforms", "status": "In force", "year_adopted": 2026, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-055", "jurisdiction": "Bangladesh", "iso3": "BGD", "domain": "Platform regulation", "measure_title": "Bangladesh digital-market competition rules", "instrument_type": "Voluntary code", "scope": "Economy-wide", "status": "Enacted, not yet in force", "year_adopted": 2024, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-056", "jurisdiction": "Costa Rica", "iso3": "CRI", "domain": "Artificial intelligence", "measure_title": "Costa Rica accountability and transparency framework", "instrument_type": "Voluntary code", "scope": "Public sector", "status": "Proposed", "year_adopted": 2021, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-057", "jurisdiction": "Brazil", "iso3": "BRA", "domain": "Data protection", "measure_title": "Brazil data-breach notification rules", "instrument_type": "Binding law", "scope": "Economy-wide", "status": "Enacted, not yet in force", "year_adopted": 2023, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-058", "jurisdiction": "Portugal", "iso3": "PRT", "domain": "Data protection", "measure_title": "Portugal data-breach notification rules", "instrument_type": "Voluntary code", "scope": "Public sector", "status": "Proposed", "year_adopted": 2020, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-059", "jurisdiction": "Tanzania", "iso3": "TZA", "domain": "Data protection", "measure_title": "Tanzania data-breach notification rules", "instrument_type": "Regulation", "scope": "High-risk applications", "status": "In force", "year_adopted": 2020, "reviewed_by_second_analyst": "yes" }, { "measure_id": "AIDG-060", "jurisdiction": "Morocco", "iso3": "MAR", "domain": "Artificial intelligence", "measure_title": "Morocco risk-classification and conformity rules", "instrument_type": "Binding law", "scope": "Public sector", "status": "In force", "year_adopted": 2024, "reviewed_by_second_analyst": "yes" } ] }