FRAMEWORKS DRUM

All regulations in the reference index — sorted, sourced, searchable. Reference index; measurement, not certification.

218framework
130charter
126regulation
131article
9sector
36benchmark

NameRegionBindingStatus
Argentina Personal Data Protection Law 25.326ArgentinayesLIVE
Australia Privacy Act 1988 (incl. 2024 amendments)AustraliayesLIVE
Australia Voluntary AI Safety StandardAUnovoluntary
Bahrain Personal Data Protection Law 2018BahrainyesLIVE
Brazil AI Bill (PL 2338/2023)BRnopending
Brazil LGPD (Lei Geral de Proteção de Dados) 2018BrazilyesLIVE
California AB 853 (AI Transparency Act)USA (California)yesLIVE
California AI Transparency Act (SB 942)US-Stateyesin force
California Bot Disclosure (SB 1001)US-Stateyesin force
California GenAI Training-Data Transparency (AB 2013)US-Stateyesin force
California SB 53 (Transparency in Frontier AI Act)USA (California)yesLIVE
Canada AIDACAnolapsed
Canada PIPEDACanadayesLIVE
Chile AI BillCLnopending
Chile Data Protection Law 19.628ChileyesLIVE
China Algorithm Recommendation Provisions (2022)ChinayesLIVE
China Cybersecurity Law (CSL)ChinayesLIVE
China GenAI & Algorithm RulesCNyesin force
China Interim Measures for Generative AI Services (2023)ChinayesLIVE
China PIPLCNyesin force
China Synthetic Content Identification Provisions (2024)ChinayesLIVE
Colombia Personal Data Protection Law 1581/2012ColombiayesLIVE
Colorado AI Act (SB24-205)US-Stateyesenacted (amended)
Cyber Resilience Act (CRA)EUyesin force (phased)
DORAEUyesin force
Ecuador Data Protection Law 2021EcuadoryesLIVE
Egypt Personal Data Protection Law 151/2020EgyptyesLIVE
Egypt Responsible-AI CharterEGnovoluntary
EMIR (European Market Infrastructure Regulation)EUyesLIVE
EU AI ActEUyesin force (phased)
EU AI Liability DirectiveEUnoproposed
EU AI Pact (voluntary pledges)EUnovoluntary
EU CSRD / ESRSEUyesin force
EU Data ActEUyesin force
EU Digital Markets ActEUyesin force
EU Digital Omnibus (2025–2026)EUnoPROPOSED
EU Digital Services ActEUyesin force
EU GMP Annex 11 (computerised systems)EUyesLIVE
EU Medical Device Regulation 2017/745 (MDR)EUyesLIVE
EU Product Liability Directive (revised)EUyesin force
EU Space Law / EU Space Act (proposal)EUnoproposed (Council compromise text 2026; still in legislative process)
EU Space Programme Regulation (EU) 2021/696EUyesin force
FDA 21 CFR Part 11 (electronic records)USAyesLIVE
FINRA Rule 3110 (US broker-dealer supervision)USAyesLIVE
GDPR / UK GDPREU/UKyesin force
HIPAAUSyesin force
HIPAA Security Rule NPRM 2025USAnoPROPOSED
HITECH Act (US)USAyesLIVE
Hong Kong AI Personal Data (Privacy) Ordinance 2025Hong KongyesLIVE
Iceland Data Protection Act 2000IcelandyesLIVE
Illinois AI in Employment (HB 3773)US-Stateyesin force
Illinois Biometric Privacy (BIPA)US-Stateyesin force
IMO MASS Code (Maritime Autonomous Surface Ships)Global (IMO)yesLIVE
India Digital Personal Data Protection Act 2023IndiayesLIVE
India IT Rules — Synthetic ContentINyesin force
Indonesia AI Ethics CircularIDnovoluntary
Indonesia Personal Data Protection Law 2022IndonesiayesLIVE
Israel AI Policy & EthicsILnovoluntary
Israel Privacy Protection Law 1981IsraelyesLIVE
ITAR (US International Traffic in Arms Regulations)USAyesLIVE
Japan AI Promotion ActJPnoin force (non-punitive)
Jordan Personal Data Protection Law 2023JordanyesLIVE
Kenya National AI StrategyKEnovoluntary
Korea AI Basic ActKRyesin force
Lebanon Law on Data Protection 2024LebanonnoPROPOSED
Malaysia AI Governance & EthicsMYnovoluntary
Mexico LFPDPPP (Federal Personal Data Protection Law)MexicoyesLIVE
MiFID II 2014/65/EUEUyesLIVE
MiFIR 2014/600/EUEUyesLIVE
New Zealand Algorithm CharterNZnovoluntary
New Zealand Privacy Act 2020New ZealandyesLIVE
Nigeria Data Protection Regulation 2019 (NDPR)NigeriayesLIVE
Nigeria National AI StrategyNGnovoluntary
NIS2EUyesin force
Norway AI (EEA)NOnopending
NYC Automated Employment Tools (Local Law 144)US-Stateyesin force
Pakistan National AI PolicyPKnovoluntary
Peru AI Law + RegulationPEyesin force (phased)
Peru Personal Data Protection Law 29733PeruyesLIVE
Philippines AI BillsPHnopending
Qatar Personal Data Privacy Law 2016QataryesLIVE
Quebec Law 25 — Automated DecisionsCA-QCyesin force
Rwanda National AI PolicyRWnovoluntary
Saudi Arabia Personal Data Protection Law (PDPL) 2024Saudi ArabiayesLIVE
Saudi SDAIA AI EthicsSAnovoluntary
Singapore Cybersecurity Act 2018SingaporeyesLIVE
Singapore Digital Services Act 2024SingaporeyesLIVE
Singapore Online Safety (Class Licence) 2023SingaporeyesLIVE
Singapore Personal Data Protection Act 2012SingaporeyesLIVE
South Africa AI Policy FrameworkZAnodraft
South Africa POPIA (Protection of Personal Information Act) 2013South AfricayesLIVE
South Korea Personal Information Protection Act (PIPA)South KoreayesLIVE
Switzerland AI ApproachCHnoactive (sectoral)
Switzerland Revised Data Protection Act 2023 (revDSG)SwitzerlandyesLIVE
Taiwan AI Basic ActTWyesin force
Taiwan Personal Data Protection ActTaiwanyesLIVE
Texas Responsible AI Governance Act (TRAIGA)US-Stateyesin force
Thailand Draft AI LawTHnodraft
Thailand Personal Data Protection Act 2019ThailandyesLIVE
Thailand Royal Decree on AI Ethics 2025ThailandnoPROPOSED
Turkey Draft AI LawTRnodraft
Turkey Personal Data Protection Law (KVKK) 6698TurkeyyesLIVE
UAE AI Charter & StrategyAEnovoluntary
UAE Personal Data Protection Law 2021UAEyesLIVE
UK Data Protection Act 2018UKyesin force
UK FCA HandbookUKyesLIVE
UK MHRA Software as a Medical Device 2024UKyesLIVE
UK Online Safety Act 2023UKyesin force
UK Outer Space Act 1986UKyesin force
UK PRA RulebookUKyesLIVE
UK Pro-Innovation AI ApproachUKnoactive (non-statutory)
UK Space Industry Act 2018UKyesin force
UN Regulation 157 (Automated Lane Keeping)UNECEyesLIVE
Uruguay Personal Data Protection Law 18.331UruguayyesLIVE
US Commercial Space Launch Act + FAA Part 450USyesin force
US Dodd-Frank 2010USAyesLIVE
US Executive Order 11 Dec 2025 (national AI policy + pre-emption)USAyesLIVE
US Executive Order 14110 (AI Safety)USyesrevoked
US Executive Order 14179 (AI Action Plan)USyesin force
US Executive Order 2 Jun 2026 (Promoting Advanced AI Innovation and Security)USAyesLIVE
US Sarbanes-Oxley (SOX) 2002USAyesLIVE
US SEC Reg S-K Item 106 (Climate + Cyber)USAyesLIVE
Utah AI Policy Act (SB 149)US-Stateyesin force
Vietnam Decree on AI 2025VietnamnoPROPOSED
Vietnam Law on AIVNyesin force (grace)
Vietnam Personal Data Protection Decree 13/2023VietnamyesLIVE

Honest register: reference index — describes and sources; it does not certify or score trust. Measurement, not certification. Data via MCP (drum_search/drum_get/drum_crosswalk) + feeds/reg_events.json.

EAT 7-box mission: PARTIAL — 4/7 true, 1 partial, 2 false (honest register). true=boarded,ci,measured,mirrored · partial=chained · false=anchored,signed. Measurement, not certification.