Storylines / Topic
Biometrics
11 developments and 11 rules on biometrics in 9 countries and bodies. The most recent is Upper Tribunal rules the ICO can enforce UK data law against Clearview AI, 8 Oct 2025.
KeyStoryRule or lawAlso on another Storyline
- Rule, In consultationChinaTechnology export catalogue: AI additions (draft)
Consultation draft adding 40 technologies to China’s export catalogue: 23 AI technologies (large models, agents, computing clusters, information processing), 5 biomedicine and 12 photovoltaic.
- Rule, In forceUSDHS DeepSeek exclusion and removal order
Orders every federal civilian executive branch agency to exclude Hangzhou DeepSeek Artificial Intelligence Co., its affiliates and their products and services from procurements, including agency-approved product lists, service provider equipment lists and e-commerce markets, and to remove DeepSeek products and third-party products and services developed using DeepSeek implementations from agency information technology systems, both effective immediately on issuance.
- Rule, In forceEUDigital Omnibus on AI
Amends the AI Act: postpones high-risk obligations to 2 Dec 2027 (Annex III stand-alone systems) and 2 Aug 2028 (Annex I product-embedded systems), adds bans on AI that generates non-consensual sexual images of identifiable people or child sexual abuse material from 2 Dec 2026, and gives pre-Aug-2026 generative systems until 2 Dec 2026 to watermark outputs.
- Rule, In forceCanadaProtecting Victims Act (sexual deepfakes)
Expands the Criminal Code offence of non-consensual distribution of intimate images to cover sexual deepfakes, criminalises threatening to distribute such images, and raises the maximum penalty.
- Rule, Partly in forceUKCrime and Policing Act 2026 (nudification tools, AI CSAM generators)
Creates an offence of making, adapting or supplying a tool for generating purported intimate images (nudification apps), with a defence for taking all reasonable steps to prevent non-consensual use; creates offences relating to AI ‘child sexual abuse image-generators’; and gives the Secretary of State power to extend Online Safety Act duties to providers of AI services regarding illegal AI-generated content.
- Rule, ProposedKenyaKenya AI Bill
Private member’s bill proposing an EU-style four-tier risk framework, an Office of the Artificial Intelligence Commissioner with inspection and fining powers, a public register of high-risk systems, disclosure duties for all providers and deployers, and offences including non-consensual deepfakes.
- Upper Tribunal rules the ICO can enforce UK data law against Clearview AI
Foreign companies that scrape images of UK residents to build facial recognition databases were told that UK data protection law can reach them.
- Peru issues AI regulation with banned uses and phased deadlines by sector
Companies and public bodies using AI in Peru now have binding banned and high-risk categories, with staggered deadlines by sector and company size.
- Rule, In forcePeruPeru AI Regulation
Implements Peru’s 2023 AI law with a risk-based scheme: lists prohibited (‘uso indebido’) uses such as manipulative systems, unlawful mass surveillance and most real-time public biometric identification, and sets transparency, documentation and human-oversight duties for high-risk uses in areas such as credit, employment, health, education and social programmes.
- Rule, In forceTexasTRAIGA
Prohibits developing or deploying AI intended to incite self-harm or crime, to discriminate intentionally against protected classes (disparate impact alone is not enough), or to produce child sexual abuse material and unlawful deepfakes; bars government social scoring and certain biometric identification.
- Texas enacts TRAIGA with intent-based AI bans and a 36-month sandbox
AI developers and deployers in Texas face intent-based prohibitions enforced only by the Attorney General, while state agencies must disclose AI use to the public.
- Rule, In forceEUProhibited-practices and AI-definition guidelines
Two non-binding Commission guidelines explaining, with examples, the AI practices banned under Article 5 (e.g., harmful manipulation, social scoring, workplace emotion recognition, real-time remote biometric identification) and how to decide whether software is an ‘AI system’ within the Act’s scope.
- AI Act bans and AI literacy duty start to apply in the EU
Companies and public bodies in the EU had to stop banned AI uses and train staff on AI from this date, and the guidelines show how the Commission reads each ban.
- Dutch regulator fines Clearview AI €30.5m and warns firms not to use it
Dutch organisations that use Clearview’s face search now risk their own large fines, because the regulator ruled the service itself unlawful.
- Argentina’s security ministry creates an AI unit to patrol social media and predict crime
People in Argentina face police use of AI for online monitoring and crime prediction under a ministerial resolution, with no statute setting limits on the unit’s powers.
- Rule, Partly in forceEUEU AI Act
Risk-based EU law that bans certain AI practices, imposes conformity, documentation and oversight duties on high-risk AI systems, transparency duties on chatbots and generative AI, and separate duties on general-purpose AI (GPAI) model providers.
Also on Project Meridian and the race to govern military AI, What frontier AI developers must disclose, Who decides if a medical AI is safe?
- Rule, ProposedChileChile AI Bill
EU-style risk-based bill regulating uses of AI systems that the Chamber of Deputies approved on 13 Oct 2025; it is now before the Senate’s Future Challenges committee.
- Chile sends a risk-based AI bill to Congress and updates its national AI policy
Developers and deployers in Chile faced a draft EU-style risk regime with prohibited uses and fines, making Chile one of the Latin American states with an executive-backed AI bill.
- European Parliament adopts the AI Act by 523 votes to 46
The plenary vote fixed the AI Act’s text for companies selling AI in the EU, leaving only Council endorsement and publication before its staged deadlines started.
- EU Parliament and Council reach political agreement on the AI Act
Companies selling AI in the EU learned that binding rules on banned practices, high-risk systems and general-purpose models would become law, with the details still to be written into the final text.
- European Parliament adopts its AI Act negotiating position by 499 votes to 28
Developers of foundation models such as those behind ChatGPT faced proposed EU duties on risk assessment, registration and copyright summaries, which went straight into negotiations with member states.
- China’s rules on deep synthesis services take effect, requiring labels on synthetic media
Every company offering face swaps, voice cloning or text generation to users in China had to label output, verify users and assess security before the generative AI boom reached the country.