AI Law Hub: Legislation, Decisions and Compliance Tools

Reading paths

Where to start

Six routes through pages already on the site, each in a suggested order. The labels show the level: beginner, intermediate or advanced.

Getting started with AI law

For readers new to the subject.

Beginner Global AI Law Index
The main AI laws, bills and international texts on one page, each linked to its official text.
Beginner The EU AI Act in brief
The risk tiers and the timeline, updated for Regulation (EU) 2026/1744.
Beginner Which risk tier are you in?
A short way to place a product in the right tier.
Beginner AI decisions database
Short summaries of court and authority decisions on AI, each with its source; filter by country or topic.
Beginner Who owns an AI-generated image?
Authorship and copyright in AI output.
Intermediate Is ChatGPT confidential?
What happens to what you type into a chatbot: privilege, evidence and Turkish law.

The EU AI Act step by step

For companies that sell into the EU or whose AI output is used there.

Beginner The EU AI Act in brief
Start here: what the Act covers and when each part applies.
Beginner Which risk tier are you in?
Sort your system: prohibited, high-risk, transparency or minimal risk.
Beginner Role and obligations finder (on this page)
Pick your role and the type of system to see the articles and dates that apply.
Intermediate The high-risk deadline has moved
What the Digital Omnibus postponed and what it left unchanged, updated for Regulation (EU) 2026/1744.
Intermediate High-risk classification form
A blank form for the Article 6 and Annex III test.
Intermediate Article 50 transparency kit
Chatbot notices, marking of AI content and deepfake labels, with templates.
Advanced EN 18286 and ISO 42001
The first harmonised standard under the Act and how it relates to ISO 42001.

Türkiye: KVKK, AI policy and proposals for an AI law

For anyone handling personal data or AI projects in Türkiye.

Beginner KVKK and AI: data governance checklist
How Turkish data protection law already applies to AI.
Beginner AI Action Plan 2026–2030 (Circular 2026/9)
The state's AI policy for the next five years. It is addressed to public bodies and puts no direct obligation on companies.
Intermediate The Public AI Directorate-General
Which body now leads public-sector AI, and what is still only planned.
Intermediate Training data under KVKK and the GDPR
Lawful basis, purpose and transfers to settle before building a dataset.
Intermediate Transfers abroad under KVKK Article 9
The rules in force since 1 June 2024, as a decision map.
Intermediate KVKK on e-mail monitoring and AI tools
A 2026 Board principle decision and what it means for AI tools at work.
Advanced A model text for a Turkish AI law (100 articles)
The author's own proposal, not a bill before parliament; it builds on a four-part series.

Compliance for companies

For legal, compliance and product teams.

Beginner Corporate AI use policy
Rules for staff use of AI tools: shadow AI, prohibited inputs and data leaks.
Intermediate High-risk classification form
Check whether a system is high-risk before you build or buy it.
Intermediate AI in hiring: discrimination risk form
CV screening, candidate notices and human oversight.
Intermediate Automated discrimination in HR
Where HR algorithms create legal risk.
Intermediate Copyright and commercial use of AI output
Ownership, provider terms and infringement checks for images, text and code.
Advanced AI agent authorisation protocol
Limits of authority and human approval thresholds for agents that act.
Advanced Who is accountable when AI acts on its own?
Liability questions raised by agentic AI.

Lawyers, courts and generative AI

For lawyers, judges and anyone who files documents in court.

Beginner Two thousand fabricated citations
What the cases on AI-invented case law teach, across countries.
Beginner Decisions on fabricated citations
The database filtered to this topic: decisions from Türkiye, the UK, the US, Korea and Canada.
Beginner KVKK tells lawyers: a chatbot can mean a transfer abroad
The authority's 2026 guide on personal data in legal practice.
Intermediate Is ChatGPT confidential?
Are chats with an AI tool protected? A US ruling and Turkish law.
Intermediate A court discloses its own use of AI
An Istanbul commercial court records in its judgment how it used AI to verify and translate foreign case law.
Intermediate Constitutional Court: AI principles for the judiciary
Principles stated by the President of Türkiye's Constitutional Court: AI must support the judge, not replace them.
Advanced California SB 574: AI rules for lawyers and arbitrators
A statute on lawyers' and arbitrators' use of generative AI, applying from 1 January 2027.

South Korea's AI Basic Act

For businesses serving users in Korea.

Beginner AI Basic Act readiness kit
In force since 22 January 2026: high-impact AI, generative-AI labels and the domestic representative.
Intermediate PIPA and automated decisions
The right to refuse fully automated decisions and to ask for an explanation (Art. 37-2).
Intermediate The PIPA amendment on AI training
When personal data may be used to train AI without consent.
Intermediate AI labels move to posters and platforms
The media regulator's plans to extend labelling duties.
Intermediate What Korean law punishes in deepfakes
Criminal penalties for sexual deepfakes since 2020 and the 2024 changes.
Advanced PIPC and DeepSeek
The data protection authority's measures over users' data sent abroad.
Advanced Korean decisions in the database
All Korean court and authority summaries (16 at present).

EU AI Act · Regulation (EU) 2024/1689

Your role and your obligations under the EU AI Act

Two questions. The answer lists the articles that apply to your role, with their dates as they stand after Regulation (EU) 2026/1744 (the Digital Omnibus on AI), and links to the official text.

General information, not a legal opinion. This tool is provided for public information. No responsibility is accepted for the results or their use; a definitive assessment depends on the facts of each case.

Checked: 25 October 2026 · Source: Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744 (OJ L, 24.7.2026)

All categories at a glance

Category	Who must do what	Applies from
All categories	Art. 4 (AI literacy): providers and deployers.	2 Feb 2025
Prohibited practice (Art. 5)	Art. 5: no placing on the market, putting into service or use (providers, deployers, importers, product manufacturers).	2 Feb 2025; new bans (Art. 5(1)(ba)–(bb)) from 2 Dec 2026
High-risk use listed in Annex III	Providers: Art. 16 (and Art. 22 outside the EU). Deployers: Art. 26, Art. 27 for some, Art. 86. Importers: Art. 23. Distributors: Art. 24. Authorised representatives: Art. 22. Role change: Art. 25.	2 Dec 2027
Safety component of a product, or a product, under Annex I	Providers: Art. 16, Art. 43(3). Product manufacturers: Art. 25(3). Deployers: Art. 26. Importers: Art. 23. Distributors: Art. 24. Section B products: only Arts. 6(1), 60a and 102–112 (Art. 2(2)).	2 Aug 2028
A system that interacts directly with people (e.g. a chatbot)	Providers: Art. 50(1).	2 Aug 2026
A system that generates synthetic audio, images, video or text	Providers: Art. 50(2).	2 Aug 2026; systems already on the market: 2 Dec 2026
Emotion recognition or biometric categorisation	Deployers: Art. 50(3). Check Art. 5(1)(f)–(g) and Annex III, point 1.	2 Aug 2026
Deepfake image, audio or video	Deployers: Art. 50(4). Providers: Art. 50(2).	2 Aug 2026
AI-generated text published to inform the public on matters of public interest	Deployers: Art. 50(4). Providers: Art. 50(2).	2 Aug 2026
General-purpose AI model	Model providers: Art. 53; outside the EU: Art. 54. Representatives: Art. 54(3).	2 Aug 2025; models already on the market: 2 Aug 2027
General-purpose AI model with systemic risk	As above, plus Arts. 51, 52 and 55.	2 Aug 2025; models already on the market: 2 Aug 2027
None of these (minimal risk)	Art. 4 (AI literacy) for providers and deployers; voluntary codes (Art. 95).	2 Feb 2025

Key dates

1 August 2024The AI Act enters into force.
2 February 2025General provisions, including AI literacy (Art. 4), and the bans in Article 5 apply.
2 August 2025Rules on general-purpose AI models, governance and penalties apply.
27 July 2026Regulation (EU) 2026/1744 (Digital Omnibus on AI) enters into force.
2 August 2026Most other provisions apply, including the Article 50 transparency duties and the Commission's power to fine model providers.
2 December 2026New bans on non-consensual intimate imagery and child sexual abuse material apply; deadline for machine-readable marking by generative systems already on the market.
2 August 2027General-purpose AI models placed on the market before 2 August 2025 must comply.
2 December 2027High-risk rules apply to Annex III systems.
2 August 2028High-risk rules apply to Annex I systems.
2 August 2030Providers and deployers of high-risk systems placed on the market earlier and intended for use by public authorities must comply.

Official text: Regulation (EU) 2024/1689 (AI Act), EUR-Lex · Regulation (EU) 2026/1744 (Digital Omnibus on AI), EUR-Lex

Comparison

How six jurisdictions regulate AI

The cells were checked against official sources on 25 October 2026. Points that could not be confirmed were left out.

AI regulation by jurisdiction
Jurisdiction	Horizontal AI law	Main authority	Approach	Data protection law	On this site
European Union	Yes: AI Act, Regulation (EU) 2024/1689. In force since 1 Aug 2024 and applied in stages: bans from 2 Feb 2025, general-purpose AI from 2 Aug 2025, most rules from 2 Aug 2026, high-risk rules from 2 Dec 2027 and 2 Aug 2028 (as moved by Regulation (EU) 2026/1744).	National market surveillance authorities; the AI Office (European Commission) for general-purpose AI models and some systems built on them.	Horizontal and risk-based.	GDPR, Regulation (EU) 2016/679.	EU AI Act: legislation note 2 decisions
Türkiye	No horizontal AI law (25 Oct 2026). Policy: AI Action Plan 2026–2030, Presidential Circular 2026/9 (Official Gazette 18 Aug 2026, no. 33344), addressed to public bodies.	No AI regulator for the private sector. Public-sector AI: the Public AI Directorate-General of the Cybersecurity Presidency (Presidential Decree No. 192, Official Gazette 25 Dec 2025). Personal data: the Personal Data Protection Authority (KVKK).	Policy documents; existing law (data protection, competition, consumer, criminal) applied to AI.	Law No. 6698 on the Protection of Personal Data (KVKK), Official Gazette 7 Apr 2016.	Türkiye AI Action Plan 2026–2030 15 decisions
South Korea	Yes: Framework Act on the Development of AI and the Establishment of a Foundation of Trust (AI Basic Act), Law No. 20676, promulgated 21 Jan 2025, in force since 22 Jan 2026, together with its Enforcement Decree (Presidential Decree No. 36053).	Ministry of Science and ICT; the Personal Information Protection Commission for personal data.	Framework law: duties for high-impact and generative AI, alongside promotion measures.	Personal Information Protection Act (PIPA).	Korea AI Basic Act kit 16 decisions
United States	No comprehensive federal AI statute; federal policy is set by executive orders (e.g. EO 14365 of 11 Dec 2025 and EO 14434 of 29 Sep 2026). State laws include Colorado SB 26-189 (signed 14 May 2026), which repealed and re-enacted the 2024 AI Act (SB 24-205) as rules on automated decision-making technology used in consequential decisions, applying from 1 Jan 2027, and California SB 53 (frontier AI transparency, in force since 1 Jan 2026).	No single AI regulator; sector agencies (e.g. the FTC) and state attorneys general apply existing law.	Sector by sector and state by state.	No general federal privacy law; sector laws and state laws (e.g. the California CCPA).	The US approach to AI 11 decisions
United Kingdom	No AI-specific statute. Private members' bills, such as the Artificial Intelligence (Regulation) Bill [HL], have not been enacted.	Existing regulators within their own sectors (e.g. the ICO for data protection); no AI regulator.	Principles-based and regulator-led (White Paper of March 2023; government response of 6 Feb 2024).	UK GDPR and the Data Protection Act 2018, amended by the Data (Use and Access) Act 2025 (Royal Assent 19 Jun 2025).	Global AI Law Index 6 decisions
China	No single horizontal AI law. Targeted rules: algorithmic recommendation (in force 1 Mar 2022), deep synthesis (10 Jan 2023), generative AI services (15 Aug 2023), labelling of AI-generated content (1 Sep 2025).	Cyberspace Administration of China (CAC), with other agencies.	Vertical: rules for specific technologies and services.	Personal Information Protection Law (PIPL), in force since 1 Nov 2021.	China's AI legislation 5 decisions

Research tools

What the site contains

AI decisions database

80 court and authority decisions on AI from 20 jurisdictions, each summarised with its source. Filter by country or topic.

Legislation tracker

8 notes on AI laws, bills and policy documents, by jurisdiction, with status and key provisions.

Analyses

37 dated analyses of AI law, data protection and technology regulation.

News

39 dated reports on new laws, decisions and enforcement.

Guides and compliance kits

10 guides with blank templates (EU AI Act, KVKK, Korea), in three languages.

English Türkçe 한국어

Article 50 transparency kit

Scope test and templates for chatbot notices, machine-readable marking and deepfake disclosure.

Separate topic, not AI law

Liquidation of 131 Turkish investment funds: legal note, fund list and calculators

Editorial principles

How the content is published and checked

General information
The content is general information for the public. It is not legal advice and creates no lawyer–client relationship.
Dated and sourced
Every article shows its date. Articles link to the primary sources they rely on, such as official gazettes, legislation databases and the decisions themselves.
Law, drafts and comment kept apart
The text says whether a rule is in force, a draft or proposal, or the author's own view. The author's own assessment is marked as such, usually under a separate heading.
Corrections
Corrections are dated and shown at the top of the article.
Withdrawal
Content that cannot be verified is corrected or withdrawn. A withdrawn page returns HTTP 410 (Gone).

FAQ

Frequently asked questions

What is AI law?

AI law is the set of rules that apply to building, selling and using AI systems. It includes laws written for AI, such as the EU AI Act or South Korea's AI Basic Act, and general laws that also reach AI, such as data protection, copyright, consumer protection and liability law.

Does the EU AI Act apply to companies in Türkiye?

It can. The Act applies to providers that place AI systems or general-purpose AI models on the EU market, wherever they are established, and to providers and deployers outside the EU whose AI output is used in the EU (Article 2(1)). A company with no such link to the EU is outside it. Türkiye is not an EU member, so the Act is not part of Turkish law.

What is a high-risk AI system?

Under Article 6 of the EU AI Act, a system is high-risk in two cases: it is a safety component of a product, or is itself a product, covered by the EU laws in Annex I that must undergo third-party conformity assessment; or it is used in an area listed in Annex III, such as employment, education, credit scoring or access to essential public services. An Annex III system that poses no significant risk and meets one of the Article 6(3) conditions is not high-risk, but a system that profiles people always is. The obligations apply from 2 December 2027 (Annex III) and 2 August 2028 (Annex I), as set by Regulation (EU) 2026/1744.

What does the AI literacy duty require?

Since 2 February 2025, providers and deployers of AI systems must take measures to support the AI literacy of their staff and of others who operate or use AI systems on their behalf (Article 4). Regulation (EU) 2026/1744 rewrote the article: it now says the duty does not require any specific level of AI literacy to be guaranteed for an individual, and that the Commission and Member States must support companies, in particular SMEs.

Does Türkiye have an AI law?

Not a horizontal one, as of 25 October 2026. The AI Action Plan 2026–2030 (Presidential Circular 2026/9) is a policy document addressed to public bodies. Existing laws still apply to AI: for example, the Personal Data Protection Law (KVKK, Law No. 6698) applies whenever an AI system processes personal data.

Answers checked on 25 October 2026 against Regulation (EU) 2024/1689, Regulation (EU) 2026/1744 and the Turkish Official Gazette.