Regulation
12 entries between July 2017 and August 2026, 4 turning points.
Turning points
-
EU AI Act obligations for general-purpose models take effect
From 2 August 2025 the EU AI Act required providers of general-purpose AI models newly placed on the market to keep technical documentation, publish a summary of their training data, comply with EU copyright law, and share information with regulators and downstream developers.
-
The EU AI Act enters into force
The European Union’s AI Act entered into force on 1 August 2024, twenty days after publication in the Official Journal. The law sorts AI systems into four risk tiers, bans some uses outright, and phases in over two years, with most high-risk rules applying from August 2026.
-
EU negotiators reach a political deal on the AI Act
After trilogue talks that ran into the early morning of 9 December 2023, the European Parliament and the Council of the EU reached provisional political agreement on the Artificial Intelligence Act, setting risk tiers for AI systems and separate rules for general-purpose models.
-
GDPR takes effect across the European Union
Regulation (EU) 2016/679 became directly applicable in every member state on 25 May 2018, replacing the 1995 Data Protection Directive. It requires a lawful basis for processing personal data, mandates breach notification, and carries fines of up to 4% of global annual revenue.
Every entry
-
EU begins enforcing the AI Act’s transparency rules
From 2 August 2026 the European Commission’s AI Office and national authorities began enforcing the AI Act’s transparency provisions: interactive systems must tell users they are AI, deepfakes must be labeled, and AI-generated content must carry machine-readable marks.
-
EU Council and Parliament agree to simplify AI Act rules
The Council of the EU and the European Parliament reached a provisional political agreement on 7 May 2026 to simplify parts of the AI Act, easing reporting duties and compliance timelines as part of the bloc’s wider Digital Omnibus effort.
-
EU AI Act obligations for general-purpose models take effect
From 2 August 2025 the EU AI Act required providers of general-purpose AI models newly placed on the market to keep technical documentation, publish a summary of their training data, comply with EU copyright law, and share information with regulators and downstream developers.
-
Trump revokes Biden’s AI order and orders an action plan
President Trump rescinded Executive Order 14110, Biden’s 2023 order on safe and trustworthy AI, on 20 January 2025. On 23 January he signed Executive Order 14179, directing advisers to produce an action plan on American AI leadership within 180 days.
-
The EU AI Act enters into force
The European Union’s AI Act entered into force on 1 August 2024, twenty days after publication in the Official Journal. The law sorts AI systems into four risk tiers, bans some uses outright, and phases in over two years, with most high-risk rules applying from August 2026.
-
EU negotiators reach a political deal on the AI Act
After trilogue talks that ran into the early morning of 9 December 2023, the European Parliament and the Council of the EU reached provisional political agreement on the Artificial Intelligence Act, setting risk tiers for AI systems and separate rules for general-purpose models.
-
Biden signs an executive order on AI safety and security
President Biden signed Executive Order 14110 on 30 October 2023, directing federal agencies to set safety testing standards for the most capable models and requiring the developers of certain large models to report their training runs and safety test results to the government.
-
FTC opens an investigation into OpenAI over consumer harm
The US Federal Trade Commission opened a non-public investigation into OpenAI, reported on 13 July 2023 by The Washington Post. A 20-page civil investigative demand asked how ChatGPT handles personal data and whether what it says about people is unfair or deceptive.
-
Italy’s privacy regulator orders ChatGPT to stop processing data
Italy’s data protection authority, the Garante, ordered OpenAI on 30 March 2023 to stop processing Italian users’ data through ChatGPT, citing no legal basis for training data, no age check for minors, and inaccurate output about named people. The order was lifted on 28 April.
-
White House publishes a Blueprint for an AI Bill of Rights
The White House Office of Science and Technology Policy published the Blueprint for an AI Bill of Rights on 4 October 2022. The non-binding framework set out five principles covering safety, algorithmic discrimination, data privacy, notice and explanation, and human fallback.
-
GDPR takes effect across the European Union
Regulation (EU) 2016/679 became directly applicable in every member state on 25 May 2018, replacing the 1995 Data Protection Directive. It requires a lawful basis for processing personal data, mandates breach notification, and carries fines of up to 4% of global annual revenue.
-
UK regulator finds Royal Free’s DeepMind data deal unlawful
The Information Commissioner’s Office ruled on 3 July 2017 that the Royal Free London NHS Foundation Trust broke the Data Protection Act by giving DeepMind identifiable records for about 1.6 million patients to test Streams, a kidney-injury app. DeepMind accepted the finding.