Free Tool — No Login Required

AI Compliance Penalty Calculator

Enter your annual turnover and pick the laws that reach you. We compute the statutory maximum for each — from 505 penalty clauses across 163 jurisdictions, each quoted verbatim with its article reference.

These are statutory maximums, not predictions. They are the ceilings the text of each law allows — not a forecast of what a regulator would actually impose. Real enforcement weighs severity, intent, cooperation, self-reporting and remediation, and most enforcement lands far below the ceiling. This is informational, not legal advice.

Annual global turnover

Group-wide worldwide turnover — that is the base the revenue-percentage limbs use.

Which laws reach your business? (0 selected)Not sure? Find out →

UAE Federal Personal Data Protection Law (PDPL) · 2 penalty tiers

AFRICA

Morocco Law 09-08 on Personal Data Protection + National AI Strategy 2030 · 3 penalty tiersNigeria Data Protection Regulation (NDPR 2019) + Nigeria Data Protection Act 2023 · 2 penalty tiers

Argentina — Personal Data Protection Act (Law 25,326) · 2 penalty tiers

ASIA PACIFIC

Hong Kong — PDPO AI Guidance (PCPD) · 1 penalty tierIndia Digital Personal Data Protection Act 2023 (DPDPA) · 3 penalty tiersPakistan Personal Data Protection Bill (PDPB 2023, pending) + PECA 2016/2025 · 2 penalty tiersPhilippines Data Privacy Act (DPA, Republic Act 10173) + NPC AI Advisory · 4 penalty tiersSingapore Personal Data Protection Act (PDPA 2012) + AI Governance Framework 2.0 · 2 penalty tiersSouth Korea Personal Information Protection Act (PIPA) — AI Provisions · 2 penalty tiers

Austria — DSG + EU AI Act + Austrian AI Strategy · 2 penalty tiers

Australia — Privacy Act 1988 AI Obligations + Reform Watch (2024 Amendments) · 3 penalty tiers

Belgium — APD/GBA + EU AI Act + Belgian AI Strategy · 2 penalty tiers

Brazil LGPD + AI Bill (PL 2338/2023) — AI Provisions · 3 penalty tiers

Canada PIPEDA — AI & Automated Decision-Making (Post-C-27 Framework) · 1 penalty tier

CA AB

Canada — Alberta PIPA · 2 penalty tiers

CA BC

Canada — British Columbia PIPA · 2 penalty tiers

CA ON

Ontario Working for Workers Four Act, 2024 — AI Hiring Disclosure (job-posting rules) · 1 penalty tier

CA QC

Québec Law 25 — Automated Decisions & Privacy (Act 25 / Bill 64) · 1 penalty tier

Switzerland — New Federal Act on Data Protection (nFADP/revDSG) · 3 penalty tiers

China Data Security Law (DSL) · 4 penalty tiersChina Interim Measures for Generative AI Services (AIGC) · 4 penalty tiersChina Personal Information Protection Law (PIPL) · 2 penalty tiers

Czech Republic — ÚOOÚ + EU AI Act + Czech AI Strategy · 2 penalty tiers

Germany — EU AI Act + National AI Strategy + BSI/DSK Guidance · 2 penalty tiers

Denmark — Datatilsynet AI Guidance + EU AI Act · 2 penalty tiers

Bulgaria — GDPR + EU AI Act + National Digital Transformation Programme · 2 penalty tiersCroatia — GDPR + EU AI Act + Croatian AI Strategy 2021 · 2 penalty tiersCyprus — GDPR + EU AI Act + Cyprus Digitalization Strategy + CPDBP · 2 penalty tiersEstonia — GDPR + EU AI Act + Estonian AI Strategy (e-Governance Leader) · 2 penalty tiersEU AI Act — General-Purpose AI (GPAI) Obligations (Art. 50-55) + GPAI Code of Practice · 2 penalty tiersEU AI Act — High-Risk Medical Device AI (Article 6 / MDR / IVDR) · 1 penalty tierEU AI Act — Prohibited Practices (Article 5) · 3 penalty tiersEU Artificial Intelligence Act · 6 penalty tiersEU Cyber Resilience Act (CRA) — Software & AI Products · 3 penalty tiersEU Digital Operational Resilience Act (DORA) · 3 penalty tiersEU Digital Services Act (DSA) — AI Transparency Obligations · 3 penalty tiersEU GDPR Article 22 — Automated Decision-Making & AI Profiling · 5 penalty tiersEU Product Liability Directive 2024 — AI Systems (Directive 2024/2853) · 2 penalty tiersIreland — GDPR AI Enforcement (Data Protection Commission) · 2 penalty tiersItaly — AI Enforcement under GDPR (Garante) · 2 penalty tiersLatvia — GDPR + EU AI Act + Latvian AI Strategy 2021-2027 · 2 penalty tiersLithuania — GDPR + EU AI Act + Lithuanian AI Strategy · 2 penalty tiersLuxembourg — GDPR + EU AI Act + Digital Luxembourg Strategy 2025 · 3 penalty tiersMalta — GDPR + EU AI Act + Malta AI Strategy 2019 (World's First National AI Strategy) · 2 penalty tiersNetherlands — AI Governance under GDPR (Autoriteit Persoonsgegevens) · 2 penalty tiersPoland — AI Framework under GDPR (UODO) · 1 penalty tierSlovakia — GDPR + EU AI Act + Slovak AI Strategy 2030 · 2 penalty tiersSlovenia — GDPR + EU AI Act + Slovenian Digital Strategy + AI Sandbox · 1 penalty tierSpain — AI Framework under GDPR (AEPD) · 2 penalty tiersSweden — AI Guidance under GDPR (IMY) · 1 penalty tier

EUROPE

Turkey Personal Data Protection Law (KVKK No. 6698) + AI Strategy 2021-2025 · 3 penalty tiers

Finland — Tietosuojavaltuutettu + EU AI Act + Finnish AI Programme · 2 penalty tiers

France — EU AI Act + CNIL AI Guidance · 2 penalty tiers

Greece — HDPA + EU AI Act + Hellenic AI Strategy · 2 penalty tiers

Hungary — NAIH + EU AI Act + Hungarian AI Strategy · 2 penalty tiers

Indonesia Personal Data Protection Act (PDPA) · 2 penalty tiers

Israel — Privacy Protection Law (Amendment 13) + PPA AI Guidelines · 1 penalty tier

Japan AI Promotion Act + APPI AI Provisions + AI Governance Guidelines · 1 penalty tier

Kenya Data Protection Act 2019 · 3 penalty tiers

South Korea Framework Act on AI Development and Trust (AI Basic Act) · 4 penalty tiers

LATIN AMERICA

Colombia — AI Framework under Habeas Data (SIC) · 1 penalty tierMexico Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) + AI Governance · 4 penalty tiersPeru Personal Data Protection Law No. 29733 · 1 penalty tier

MIDDLE EAST

Bahrain Personal Data Protection Law (PDPL, Law No. 30 of 2018) · 1 penalty tierBahrain Personal Data Protection Law (PDPL) · 1 penalty tierIsrael Privacy Protection Law (PPL 5741-1981) + Amendment 13 + INCD AI · 1 penalty tierKuwait — CITRA Data Privacy Protection Regulation + E-Commerce/Cybercrime Laws + National AI Strategy · 2 penalty tiersQatar Personal Data Privacy Protection Law (Law No. 13 of 2016) + NDS 2030 · 1 penalty tierQatar Personal Data Protection Law (PDPL) · 1 penalty tierUAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection + UAE AI Strategy 2031 · 1 penalty tier

MIDDLE EAST / AFRICA

Egypt Personal Data Protection Law No. 151 of 2020 · 3 penalty tiers

Malaysia — AI Governance and Ethics Guidelines (AIGE) + PDPA 2010 · 1 penalty tier

Nigeria Data Protection Act 2023 (NDPA) · 1 penalty tier

Norway — EU AI Act (EEA, Pending) + Datatilsynet AI Guidance · 1 penalty tier

New Zealand — Privacy Act 2020 + Algorithm Charter (Monitoring for Mandatory AI Law) · 2 penalty tiersNew Zealand — Privacy Act 2020 + Algorithm Charter + OPC AI Guidance · 2 penalty tiers

Philippines Data Privacy Act — AI Systems (NPC Advisory 2024-04) · 1 penalty tier

Portugal — CNPD + EU AI Act + Portuguese National AI Strategy · 2 penalty tiers

Romania — ANSPDCP + EU AI Act + Romanian AI Strategy · 2 penalty tiers

Saudi Arabia PDPL + SDAIA AI Ethics Framework + Vision 2030 AI Programme · 2 penalty tiersSaudi Arabia Personal Data Protection Law (PDPL) · 1 penalty tier

Singapore MAS AI Model Risk Management (Information Paper 2024 + Proposed AI Risk Management Guidelines, in consultation) + Model AI Governance Framework · 1 penalty tier

Thailand Personal Data Protection Act (PDPA) — AI Provisions · 2 penalty tiers

UK AI Governance Framework (UK GDPR Arts. 22A-22D + ICO + Sectoral Regulators) · 4 penalty tiers

US AK

Alaska — Bulletin B 24-01, THE FIRST NAIC AI MODEL ADOPTION IN THE UNITED STATES (1 February 2024): a NINTH model-diff shape — ADOPTION-ANNOTATED AND ONE AUTHORITY LIMB SHORT (model numbers stripped, model-act names kept, all four remaining brackets filled with real AS cites, and the Market Conduct Surveillance bullet deleted outright because Alaska never enacted Model #693) + the Vein's Most Emphatic A&H EXCLUSION (AS 21.39.020(b)(2) excludes health insurance in terms) + a UTPA Penalty Ladder Topping Out at $1,000,000 Per Violation With a Permanent Industry Bar (AS 21.36.910(f)) + Credit/Insurance-Scoring Rules That Name Algorithms and Models (AS 21.36.460) + the Prior-Authorization Act Alaska Enacted Through the SENATE Bill While the Identical HOUSE Bill Died in Committee (SB 133 / Ch. 21 SLA 2025, AS 21.07.100-21.07.180, effective 1 January 2027) + the Vein's Sharpest UR Bar: a PERSONAL-REVIEW ATTESTATION (AS 21.07.120(b)) · 6 penalty tiersAlaska — Federal AI Compliance Profile + State AI-CSAM/Deepfake Law (HB 239 omnibus crime bill, became law 2026-06-18) + Tribal Sovereignty · 4 penalty tiers

US AL

Alabama — Federal AI Profile + State AI Laws (HB 161 NCII deepfakes 2024; HB 168 AI-CSAM 2024; HB 172 election deepfakes 2024; SB 63 AI health-coverage determinations, eff Oct 2026) · 6 penalty tiers

US AR

Arkansas — Insurance AI Bulletin 13-2024 + Prior Authorization Transparency Act + State AI Laws (Acts 159 / 927 / 827 / 977 of 2025) + Federal AI Compliance Profile · 6 penalty tiers

US CA

California Privacy Rights Act (CPRA) — AI Provisions · 1 penalty tierCalifornia SB 243 — AI Companion Chatbot Safety Act · 2 penalty tiersCalifornia SB 942 — AI Transparency Act (AI-Generated Content) · 6 penalty tiers

US CO

Colorado AI / ADMT Law — SB 24-205 repealed & replaced by SB 26-189 (operative Jan 1, 2027) · 2 penalty tiers

US CT

Connecticut AI & Data Privacy Stack — PA 26-15 (AI/Online Safety), PA 26-64 (Privacy/Surveillance Pricing), CTDPA as amended by PA 25-113, CID Bulletin MC-25 · 6 penalty tiers

US DC

District of Columbia — DISB Bulletin 24-IB-002-05/21 (NAIC AI Model, Verbatim) + Price Optimization Ban 15-IB-06-8/15 + Prior Authorization Act (D.C. Law 25-100) + UITPA Rating Discrimination Bar · 6 penalty tiersWashington DC — No Specific AI Law (Federal Laws Apply) · 1 penalty tier

US DE

Delaware — Domestic and Foreign Bulletin No. 148 (NAIC AI Model VERBATIM, but the Market-Conduct Authority DELETED and the Rating Limb BROADENED to "All Forms of Insurance") + a Rate Chapter That Reaches HEALTH (18 Del. C. § 2502(a)(4)) + Mandatory Insurance-Scoring MODEL FILING (18 Del. C. § 8309) + Price-Optimization Prohibition (Bulletin No. 78) + Physician-Only Denials (18 Del. C. § 6410(a)) + Pre-Authorization Reform Act of 2025 (SB 12 / 85 Del. Laws c. 176, applies after 31 Dec 2026) + Aerial Imagery Bulletin No. 150 · 6 penalty tiersDelaware — Federal AI Profile + State AI Laws (HB 316 election deepfakes 2024; HB 353 deepfake NCII 2024; HB 191 AI medical-title ban 2026) + Corporate Governance · 5 penalty tiers

US FL

Florida — Federal AI Compliance Profile (FTC, EEOC, FCRA, COPPA + Insurance AI) · 6 penalty tiers

US GA

Georgia — AI, Age-Verification & Consumer-Protection Stack (SB 540 AI companion chatbots O.C.G.A. § 39-5-6 · SB 444 AI in health-plan utilization review § 33-46-7.1 · SB 351 age verification §§ 39-5-5 / 39-6-1 et seq. · breach notification § 10-1-910 et seq. · FBPA § 10-1-390 et seq.) · 6 penalty tiersGeorgia SB 540 — AI Companion Chatbot Law (Enacted — O.C.G.A. § 39-5-6, effective July 1, 2027) [duplicate of georgia_ai_chatbot — RQ-51] · 1 penalty tier

US HI

Hawaii — State AI/Deepfake Laws + Insurance AI Governance (Commissioner Memorandum 2025-13A, NAIC AI bulletin adopted 2025-12-10) + Federal AI Profile (HRS §711-1110.9 sexual-deepfake NCII 2021; Act 247 general deepfakes + Act 248 AI chatbot safety, both signed July 2026; 2024 election-deepfake Act 191 enacted-then-enjoined) · 6 penalty tiers

US IA

Iowa — AI Duty Profile (Synthetic Media SF 2243 + HF 2240; IID Bulletin 24-04; AI Utilization-Review Limits, Iowa Code §§ 514F.8(2A), 514F.8A) · 6 penalty tiers

US ID

Idaho Conversational AI Safety Act (S 1297) · 1 penalty tierIdaho S 1227 — Generative AI in Education Framework Act · 2 penalty tiers

US IL

Illinois — Employment AI (AIVIA 820 ILCS 42 + HB 3773) + Insurance AI (IDOI Company Bulletin 2024-08; algorithmic utilization review, 215 ILCS 134) · 6 penalty tiersIllinois AI Video Interview Act (AIVIA) — duplicate of illinois_aaia, retained for code compatibility · 1 penalty tierIllinois Biometric Information Privacy Act (BIPA) · 1 penalty tier

US IN

Indiana — Consumer Data Protection Act (IC 24-15; in force 1 Jan 2026 — profiling opt-out + DPIAs) + State AI Laws (HEA 1133 election fabricated media; HEA 1047 AI intimate images; HEA 1271 insurer/provider AI claim review; SEA 256 AI-vendor state contracts) + Federal AI Profile · 6 penalty tiers

US KS

Kansas — Federal AI Profile + State AI Laws (SB 186 AI/synthetic CSAM 2025; HB 2183 AI child images, live eff 2026-07-01; HB 2313 gov AI-platform ban 2025) · 4 penalty tiers

US KY

Kentucky — Federal AI Profile + State AI Laws (HB 207 AI-CSAM 2024; SB 4 election synthetic-media disclosure 2025) + DOI Bulletin 2024-02 Insurer AI Systems (NAIC model) + Bulletin 2026-01 imagery AI + KRS 304.17A-607 physician-only utilization review · 6 penalty tiers

US LA

Louisiana — Federal AI Profile + State Criminal/Regulatory AI Laws (SB 175 AI-CSAM 2023; R.S. 14:73.14 AI deepfakes 2024; HB 119 + HB 459 confirmed enacted eff. 2026-08-01) · 6 penalty tiers

US MA

Massachusetts — Ch. 93A + AG AI Advisory, 201 CMR 17.00 WISP, c. 93H Breach, c. 272 §99 Wiretap, Ch. 118/2024 Deepfake NCII, Insurance AI (DOI Bulletin 2024-10; utilization review, c. 176O §12) + Federal AI Profile · 6 penalty tiers

US MD

Maryland Insurance AI Surface — MIA Bulletin 24-11, HB 820/SB 474 Utilization-Review AI (Ins. § 15-10B-05.1), and Bulletin 25-10 Imagery · 6 penalty tiers

US ME

Maine — AI Chatbot Disclosure (LD 1727, 2025) + Deepfake NCII (LD 1944, 2025) + AI Mental-Health-Therapy Restriction (LD 2082, live since July 2026) · 3 penalty tiers

US MI

Michigan — State AI + Consumer/Data Regimes (PA 263–266 of 2023 election AI eff 2024; PA 11–12 of 2025 intimate deepfakes; DIFS AI bulletins 2024-20-INS & 2026-03-BT/CF/CU; MCL 445.72 breach; MCPA post-Eli Lilly) + Federal AI Profile · 6 penalty tiers

US MN

Minnesota — Consumer Data Privacy Act (§§ 325M.10-.21, profiling rights), Social Media Transparency (§§ 325M.33/.335), Nudification Ban (§ 325E.91), Deepfake Election Law (§ 609.771) + MHRA · 6 penalty tiersMinnesota — Federal AI Profile + State AI Laws (§609.771 election deepfakes; §§604.32/617.262 NCII; §325E.91 nudification ban, live since Aug 2026) · 5 penalty tiers

US MO

Missouri — No AI-Specific Statute; MMPA + Age-Verification + Breach + AI-CSAM Surfaces · 6 penalty tiers

US MS

Mississippi — Federal AI Profile + State AI Laws (SB 2577 election-deepfake 2024; HB 1126 AI-CSAM "morphed image" 2024) · 4 penalty tiers

US MT

Montana Right to Compute Act + AI Governance (SB 212) · 1 penalty tier

US NC

North Carolina — State AI Law (SL 2024-37 AI-CSAM/deepfake NCII; DOI Bulletin 24-B-19 insurer AI; SL 2025-84 Art. 51A) + Breach/UDTPA + Federal Profile · 6 penalty tiers

US ND

North Dakota — State AI Laws (SB 2280 health-care prior-auth, HB 1167 political-ad disclosure, HB 1361 AI-personhood) + Federal Profile · 5 penalty tiers

US NE

Nebraska — LB 525 Conversational AI Safety Act (signed Apr 14, 2026; compliance Jul 1, 2027) + NDOI Guidance Document IGD - - H1 on insurer AI (11 Jun 2024) + AI limits on utilization review (operative Jan 1, 2026) · 6 penalty tiersNebraska LB 525 — Conversational Artificial Intelligence Safety Act · 1 penalty tier

US NH

New Hampshire — NHID Bulletin Docket #INS 24-011-AB (NAIC AI Model, BIDIRECTIONALLY Edited) + Statutory Predictive-Model Rate Filing (RSA 412:16, II) + Credit-Scoring-Model Standards (RSA 412:15, III) + 10-Working-Day Production Duty (RSA 400-A:16, II) + Prior-Authorization Rewrite (RSA 420-J:6, SB 561 / 2024 ch. 172) + Aerial Imagery Inspection Bulletin 25-016-AB + Prior-Authorization Reporting Bulletin 25-001-AB · 6 penalty tiersNew Hampshire HB 143 — AI Chatbot Child Safety Law · 2 penalty tiers

US NJ

New Jersey — AI, Data Privacy, Insurance AI & Algorithmic Discrimination · 6 penalty tiers

US NM

New Mexico — Federal AI Profile + State AI Law (HB 182 campaign deepfake disclosure 2024) · 4 penalty tiers

US NV

Nevada AI Stack — DOI Bulletin 24-001 (NAIC AI Model Bulletin), AB 406 Mental/Behavioral Healthcare AI, Utilization-Review and Claim-Denial Law · 6 penalty tiers

US NY

New York AI Companion Models Law (A6767, codified GBL Article 47) · 1 penalty tierNew York RAISE Act (GBL Article 44-B, §§ 1420-1429 — Frontier AI Safety) · 6 penalty tiersNew York State — AI Awareness (Non-RAISE Act Businesses) · 2 penalty tiers

US NY NYC

New York City Local Law 144 — Automated Employment Decision Tools · 3 penalty tiers

US OH

Ohio — State Law (Social Media Parental Notification Act, Data Protection Act safe harbour, School AI Policy Mandate, OCSPA) + Federal AI Compliance Profile · 6 penalty tiers

US OK

Oklahoma — Federal AI Profile + State AI Law (HB 1364 AI-generated nonconsensual intimate images, 2025) + OID Bulletin 2024-11 (verbatim NAIC AI model-bulletin adoption) + algorithmic insurance-scoring statute (36 O.S. §§ 950-959) + physician-made prior-authorization determinations (36 O.S. §§ 6570.3, 6570.53) · 6 penalty tiers

US OR

Oregon AI Companion Chatbot Act (SB 1546) · 4 penalty tiers

US PA

Pennsylvania — AI Duty Profile (Act 35 of 2025 Digital Forgery; Act 125 of 2024; Insurance AI Notice 2024-04; Insurance Data Security Act; BPINA; DOS AI Enforcement Task Force) · 6 penalty tiers

US RI

Rhode Island — DBR Insurance Bulletin 2024-03 (NAIC AI Model, Verbatim-Plus-BROADENED) + Vehicle History Score Ban (2024-8) + Aerial Imagery Underwriting Rules (2025-3) + UR Same-Licensure Signature Reservation (§ 27-18.9-5(b)(1)) · 6 penalty tiersRhode Island — Federal AI Profile + State AI Laws (§11-64-3 deepfake NCII 2025; Title 17 Ch 17-30 election synthetic media 2025; 3 new 2026 laws: chatbot self-harm safety, AI-therapy ban, healthcare AI notification) · 5 penalty tiers

US SC

South Carolina — Federal AI Profile + State AI Laws (H 3058 digitally-forged intimate images 2025; S 28 AI-generated CSAM 2025) · 4 penalty tiers

US SD

South Dakota Deepfake Pornography Law (SB 41) · 2 penalty tiers

US TN

Tennessee AI Mental-Health Representation Prohibition (SB 1580 / Public Chapter 647; Tenn. Code Ann. § 33-1-205) · 2 penalty tiersTennessee ELVIS Act — Ensuring Likeness, Voice, and Image Security Act of 2024 · 4 penalty tiersTennessee Preventing Deepfake Images Act (Tenn. Code Ann. §§ 39-17-1901 to -1906) · 3 penalty tiersTennessee Transparency for Deepfakes in Political Advertising Act (Tenn. Code Ann. § 2-19-120(a)(6)) · 2 penalty tiers

US TX

Texas Responsible AI Governance Act (TRAIGA / HB 149) · 5 penalty tiersTexas SB 441 — AI Nonconsensual Intimate Visual Materials · 3 penalty tiers

US UT

Utah Artificial Intelligence Policy Act (SB 149, amended by SB 226 / SB 332 / HB 452) · 6 penalty tiersUtah HB 276 — Digital Voyeurism Prevention & AI Content Provenance · 3 penalty tiersUtah SB 256 — Defamation and Identity Protection Amendments (AI Content) · 2 penalty tiersUtah SB 319 — Health Insurance AI Disclosure in Prior Authorization · 3 penalty tiers

US VA

Virginia Consumer Data Protection Act (VCDPA) — Automated Decision-Making · 6 penalty tiers

US VT

Vermont — Insurance Bulletin No. 229 (NAIC AI Model RE-DOMESTICATED: every model-act name scrubbed, all five citation brackets filled, authority clause hedged with "primarily") + the Vein's BROADEST Rating Limb (P&C + health + life + long-term care) That Contradicts Its Own Operative Sentence + Mandatory Scoring-Model Filing (8 V.S.A. § 4727(j)) + Price-Optimization Disclosure Directive With Its Own Violation Hook (Bulletin No. 186) + Virtual/Image-Based Claims Adjusting Backstop Extended to All Lines (Bulletin No. 206 rev., 2026) + Mental-Health Review-Agent LICENSURE (8 V.S.A. § 4064) + Prior-Auth Deemed-Granted Clocks (18 V.S.A. § 9418b) + the AI-Utilization-Review Statute Vermont Passed the House and DID NOT ENACT (H.814 / Act 101 of 2026) · 6 penalty tiersVermont Synthetic Media in Elections Act (S.23 / Act 75) · 1 penalty tier

US WA

Washington AI-Generated Content Disclosure Act (HB 1170) · 1 penalty tierWashington SB 5395 — AI in Health Insurance Prior Authorization · 6 penalty tiersWashington State AI Companion Chatbot Regulation (HB 2225) · 2 penalty tiers

US WI

Wisconsin — Federal AI Profile + State AI Laws (Act 123 political-deepfake disclosure 2024; Act 224 AI-CSAM 2024; Act 34 synthetic intimate images 2025) + OCI AI Bulletin 2025 & Insurance Data Security Law (Act 73) · 6 penalty tiers

US WV

West Virginia — Insurance Bulletin 24-06 (NAIC AI Model, Condensed) + Insurance Scoring Bulletin 20-12 + Prior Authorization Statute §33-15-4s + AI Task Force (HB 3187 of 2025) · 6 penalty tiers

US WY

Wyoming — Federal AI Profile + State AI Law (HB 102 / HEA 32 / Ch 91: AI-CSAM, deepfake NCII, AI self-harm — live since July 1 2026) · 4 penalty tiers

Vietnam — Law on Artificial Intelligence (2025) · 2 penalty tiers

South Africa Protection of Personal Information Act (POPIA) · 3 penalty tiers

Also try: Regulation Finder · Compliance Cost Calculator · AI Risk Assessment