AI Regulation Tracker / Regional hub
Middle East and Africa AI Regulation Tracker
The AI and data rules across the Middle East and Africa that change what a professional must do, organized by jurisdiction. We update this as new rules land.
United Arab Emirates
- Central Bank responsible-AI dutiesLicensed finance firms must govern AI and offer human review.
- DIFC Regulation 10 enforcedAI impact assessments and high-risk documentation, now with fines.
Saudi Arabia
- PDPL enforcement is liveActive investigations and fines reach AI processing of personal data.
Israel
- Amendment 13 reaches AIPrivacy by design, automated-decision transparency and no unlawful scraping.
Qatar
- Court rules for AI in filingsLawyers must identify, verify and disclose AI-generated content.
Turkiye
- A deepfake-liability billPlatforms would answer for unauthorized AI content about individuals.
South Africa
- A POPIA-anchored draft policySector-embedded AI oversight rather than a single AI Act.
Nigeria
- AI in the data auditThe NDPC benchmarks responsible AI through compliance audit returns.
Kenya
- Automated-decision and DPIA dutiesNo solely automated decisions with significant effects; DPIAs for AI.
African Union
- A continental AI strategyA directional plan helping states build harmonized AI frameworks.
Sponsored Training
Informational analysis for working professionals, not legal advice. Confirm how any rule applies to your situation with qualified counsel.