AI Obligation Atlas
Most trackers organize by bill. This atlas organizes by duty — each theme links to laws in the LegisGate™ library that imposes it, so counsel can compare the same obligation across jurisdictions.
Consent requirements
77 jurisdictionsRequirements to obtain consent before collecting or processing personal data, or before subjecting individuals to specific AI uses.
86 laws & guidance — e.g. 42 CFR Part 2 · 740 ILCS 14 · Act on the Protection of Personal Information (Act No. 57 of 2003)
Cross-border transfer controls
60 jurisdictionsControls on moving personal data across borders — adequacy findings, standard contractual clauses, and data-localization mandates.
61 laws & guidance — e.g. Act on the Protection of Personal Information (Act No. 57 of 2003) · Albania Law 124/2024 · Australia Privacy Act
AI transparency & disclosure
47 jurisdictionsDuties to disclose AI involvement, label or watermark AI-generated content, and inform users, consumers, or patients that they are interacting with an automated system.
79 laws & guidance — e.g. 2026 Ga. Laws Act 518, amending O.C.G.A. tit. 39, ch. 5 (artificial intelligence companion chatbots) · 2026 Wash. Sess. Laws ch. 157 (Prior Authorization Determinations — Artificial Intelligence Transparency) · 2026 Wash. Sess. Laws ch. 167 (AI disclosures / content provenance) — effective February 1, 2027
Automated decision-making rights
33 jurisdictionsRights of individuals affected by automated decisions or profiling — explanation, objection, appeal, contest, and opt-out.
37 laws & guidance — e.g. C.R.S. § 6-1-1701 et seq. · Cal. Civ. Code § 1798.100 et seq. · Cal. Code Regs. tit. 11 (CPPA — automated decisionmaking technology and risk assessments)
Risk & impact assessments
29 jurisdictionsObligations to assess an AI or data-processing system's risks before or during deployment — impact assessments, DPIAs, conformity assessments, and formal risk-management programs.
34 laws & guidance — e.g. Albania Law 124/2024 · Assessment List for Trustworthy Artificial Intelligence (ALTAI) — EU High-Level Expert Group on AI · Cal. Bus. & Prof. Code Ch. 25.1 (Transparency in Frontier Artificial Intelligence Act)
Breach notification duties
29 jurisdictionsObligations to notify regulators or affected individuals after a data breach or security incident, usually within a statutory window.
30 laws & guidance — e.g. Act on the Protection of Personal Information (Act No. 57 of 2003) · Albania Law 124/2024 · Cyber and Data Protection Act [Chapter 12:07] (Zimbabwe)
Vendor & deployer accountability
29 jurisdictionsObligations that flow through the supply chain — vendor and processor duties, deployer accountability, and third-party oversight.
36 laws & guidance — e.g. 32 CFR Part 170 · AICPA Trust Services Criteria · Artificial Intelligence Safety Measures Act, Pub. Act 104-0538 (Ill. 2026)
Children & minors protections
11 jurisdictionsHeightened duties for services used by children and minors — parental consent, age verification, and design safeguards.
12 laws & guidance — e.g. 2026 Ga. Laws Act 518, amending O.C.G.A. tit. 39, ch. 5 (artificial intelligence companion chatbots) · 2026 Wash. Sess. Laws ch. 168 (artificial intelligence companion chatbots) · Australia Online Safety Act
Human oversight of automated decisions
7 jurisdictionsRequirements to preserve meaningful human review, intervention, or override of automated and AI-driven decisions.
8 laws & guidance — e.g. C.R.S. § 6-1-1701 et seq. · CMS AI Playbook v4 — Auditable Data Lineage and Oversight · False Claims Act
Biometric & facial-recognition limits
7 jurisdictionsRestrictions on collecting or processing biometric identifiers — facial recognition, voiceprints, faceprints, and fingerprints.
7 laws & guidance — e.g. 740 ILCS 14 · FTC Act §5 · Md. Code Ann., Lab. & Empl. § 3-717 (facial recognition services in employment interviews) — 2020 Laws of Maryland Ch. 446
Theme membership is computed deterministically from curated SSOT library text — no model-authored analysis. Counts update as the library grows.