As an artificial intelligence (AI) lawyer, RICHT is at the cutting edge of this dynamic new area of the law that is rapidly evolving. Here, via our AI legal resource hub, we compile legal developments and resources concerning AI and the law and group them into categories ranging from AI and IP to AI and privacy.
Significant Artificial Intelligence Laws From Around The Globe
| AI Laws | Passage Date | Enforcement Date |
|---|---|---|
| Colorado AI Act | May 2024 | February 20261 |
| Utah Artificial Intelligence Policy Act | March 2024 | May 2024 |
| EU AI Act | May 2024 | 2024 (Date TBD) |
| California AI Laws | Varying | Varying |
AI & Intellectual Property
- George Carlin Estate Settles Lawsuit Over AI Imitation: The estate sued, alleging that the special violated the estate’s copyrights and its publicity right to Carlin’s name, image, and likeness.
AI & Privacy
- Italy: Garante fines OpenAI €15M for GDPR non-compliance in management of ChatGPT: The Italian data protection authority, Garante, fined OpenAI OpCo, LLC €15 million for GDPR non-compliance in the management of ChatGPT, citing violations such as inadequate legal basis for data processing, lack of transparency, and insufficient age verification.
- COLORADO: Bill for consumer AI protection passed by the legislature. “From February 1, 2026, developers and deployers of AI systems must adhere to specific requirements to avoid harmful or inappropriate uses of AI.”
- A Regulatory Roadmap to AI and Privacy: This short essay provides a regulatory roadmap to artificial intelligence and privacy. AI and privacy are deeply intertwined and have a complicated relationship with much overlap.
- UK’s ICO Looking Into Microsoft AI Taking Screenshots: The UK data watchdog says it is “making inquiries with Microsoft” over a new feature that can take screenshots of your laptop every few seconds.
- Meta Pauses Plans To Train AI With User Data In EU & UK: The UK and Ireland’s data protection authorities issued statements welcoming Meta’s decision to pause plans to use user data to train AI models.
- How Apple Intelligence’s Privacy Stacks Up Against Android’s ‘Hybrid AI’: Generative AI is seeping into the core of your phone, but what does that mean for privacy? Here’s how Apple’s unique AI architecture compares to the “hybrid” approach adopted by Samsung and Google.
- Azure OpenAI Service Has Confidentiality Loophole: A contract provision gives Microsoft the right to retain and have its employees review certain prompts, creating a problem for law firms and companies trying to protect sensitive information.
- The Hamburg Commissioner For Data Protection & Freedom Of Information: This discussion paper reflects the current state of knowledge and understanding at the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI) regarding the applicability of the General Data Protection Regulation (GDPR) to Large Language Models1 (LLMs).
AI & Online Terms
- Adobe Defends Changes in Its Terms of Service Amid Gen AI ‘Explosion’: Adobe, maker of Photoshop and Creative Cloud, has run afoul of its user base with changes to its terms of service that, among other things, give it the right to look at your files and existing projects in the name of content moderation.
AI & Political Campaigns
- Consultant Behind Deepfaked Biden Robocall Fined $6m As New Charges Filed: Steve Kramer, a political consultant who admitted that he deepfaked Joe Biden’s voice in a robocall that was sent out to thousands of US voters in January 2024, has been indicted and fined $6m. (The FCC is also pursuing the telco, Lingo, “alleging a violation of the STIR/SHAKEN rules for failing to use reasonable “Know Your Customer” protocols to verify caller ID information in connection with Kramer’s alleged illegal robocalls.”)
- California Enacts New Laws to Combat AI-Generated Deceptive Election Content: California has enacted three new bills in an effort to curb the spread of misinformation and deceptive election content.
AI & Employment
- CVS Settles Lawsuit Alleging It Used AI ‘Lie Detector’ In Interviews: CVS Health Corp. and CVS Pharmacy reached a tentative settlement in a proposed class-action lawsuit accusing the company of making job applicants take a lie detector test during the interview process without notice, according to a July 17 filing in the Massachusetts federal court.
- Illinois Passes Bill to Regulate Use of Artificial Intelligence in Employment Settings: HB 3773, which goes into effect on January 1, 2026, adds to the list of prohibited activities by prohibiting employers from using artificial intelligence that “has the effect of subjecting employees to discrimination on the basis of protected classes under [the Illinois Human Rights Act] or to use zip codes as a proxy for protected classes under” the Illinois Human Rights Act specifically with respect to “recruitment, hiring, promotion, renewal of employment, selection for training or apprenticeship, discharge, discipline, tenure, or the terms, privileges, or conditions of employment.”
AI & Cybersecurity
AI & Publicity Rights
- AI’s Impacts on Cybersecurity & Legal Requirements: A growing number of threat actors are using AI, including GenAI, to conduct cyberattacks, a trend we could expect to continue in 2024. Among other things, GenAI enables attackers to more easily impersonate their potential victims, drafting ever more sophisticated and convincing phishing communications and even using GenAI-enabled software to emulate real voices.
AI Claims
- Texas Attorney General Reaches Generative AI Settlement: On September 18, 2024, the Texas Attorney General announced that it had reached a settlement with a Dallas-based artificial intelligence healthcare company. The Attorney General’s press release represents that it is a first-of-its-kind settlement, resolving allegations that the company deployed its artificial intelligence (“AI”) products at Texas hospitals while making false and misleading statements about the safety of its products.
- FTC Announces Crackdown on Deceptive AI Claims and Schemes: The Federal Trade Commission is taking action against multiple companies that have relied on artificial intelligence as a way to supercharge deceptive or unfair conduct that harms consumers, as part of its new law enforcement sweep called Operation AI Comply.
AI & Cybersecurity
- Tennessee Out Front: Enacting Protections Against AI Misuse in the Music Industry: In late March, Tennessee Governor Bill Lee signed into law the Ensuring Likeness Voice and Image Security Act of 2024—known as the “ELVIS Act”—making Tennessee the first state to address head-on potential misuses of artificial intelligence (AI) related to an individual’s voice. The law prohibits individuals from using AI to generate and distribute replicas of another’s voice or image without their prior consent.
General Resources
- AI Governance: A consolidated reference of the EU AI Act — European Commission Draft, OECD Recommendations on Artificial Intelligence, and the NIST AI Risk Management Framework.
- Stanford’s Artificial Intelligence Index Report 2024: The AI Index report tracks, collates, distills, and visualizes data related to artificial intelligence (AI).
- EU AI Act Compliance Matrix: This resource is intended to aid in compliance with the EU AI Act by providing a high-level overview of its key requirements for organizations.
- Global AI Regulation Report: Artificial intelligence (AI) policy is in its early stages, with different jurisdictions’ frameworks, guidelines, and requirements in varying stages of maturity—from the European Union’s more risk-based AI Act and the Association of Southeast Asian Nations’ business-friendly Guide on AI to Governance and Ethics to President Biden’s executive order and myriad state- and country-specific laws now taking shape.
- Getting Started with AI Governance: In today’s rapidly evolving landscape of artificial intelligence, the need for responsible AI governance has never been more pressing. In this whitepaper, we’ll dive into the critical drivers behind the surge in AI governance, highlighting the factors propelling its growth.
- Most provisions go into effect in February 2026 ↩︎