All regulations
European Union / UK
GDPR
The General Data Protection Regulation governs how personal data of EU and UK residents is collected, processed and protected, including special rules for automated decision-making.
Who it applies to
- Any organisation processing personal data of EU/UK residents
- Controllers and processors, including AI vendors handling personal data
- Automated decision-making and profiling that significantly affects individuals
Core obligations
- Establish a lawful basis for every processing activity
- Run DPIAs for high-risk AI processing
- Provide data subject rights including access, erasure and objection
- Maintain records of processing and report breaches within 72 hours
How Vigil24 helps
- Flags AI tools processing personal data
- Generates DPIA templates pre-filled from tool metadata
- Tracks vendor DPAs and sub-processor changes
Explore other regulations
EU AI Act
Risk tiers, transparency, high-risk AI obligations.
NIST AI RMF
US risk management framework for AI.
ISO 42001
AI management system standard.
DORA
Operational resilience for finance.
FCA Consumer Duty
Fair outcomes in UK financial services.
India DPDP Act 2023
Data protection for Indian users.
Singapore Model AI Governance
Responsible AI in Singapore.
ASEAN AI Governance Guide 2024
Regional framework across 10 member states.
UK GDPR & DPA 2018
UK data protection for AI systems processing personal data.
UK Equality Act 2010
Discrimination risk for AI in employment and services.
Colorado ADMT Act (SB 26-189)
Disclosure and human review for consequential AI decisions.
Illinois HRA - AI Amendment
AI in employment decisions under Illinois human rights law.
California AI & ADMT Rules
CCPA/CPRA rules on automated decision-making.
HIPAA
Safeguards for AI touching protected health information.
China Generative AI Measures
Pre-launch assessment and content labelling for GenAI.
China Deep Synthesis Regulations
Labelling and provenance for deepfakes and synthetic media.
Brazil LGPD
Personal data protection for AI in Brazil.
Brazil AI Bill (PL 2338/2023)
Upcoming national AI framework, not yet in force.
Canada - Voluntary Code & ADM Directive
Federal AI code of conduct and ADM directive.