Training, fine-tuning or grounding models on customer, employee or public data. It requires a legal basis to reuse personal data, dataset documentation and, when developing a general-purpose model, provider duties.
We only list countries where an obligation in force or adopted mentions this use case.
| Jurisdiction | Level | Date | Note |
|---|---|---|---|
| European Union | Data protection | — | GDPR and EDPB Opinion 28/2024: models are not presumed anonymous and legitimate interest needs a documented test; developing a general-purpose model triggers technical documentation, copyright policy and training-data summary duties since Aug 2, 2025. |
| Ecuador | Data protection | March 10, 2026 | SPDP general rule on AI and the legitimate interest resolution (2025). |
| Mexico | Data protection | March 21, 2025 | 2025 data protection law: new consent for different purposes, such as training. |
| Peru | Data protection | March 31, 2025 | Law 29733 and its regulation (DS 016-2024-JUS): purpose, consent and cross-border flows. |
| Chile | Data protection | December 1, 2026 | Law 21,719: legal bases and purpose compatibility. |
| Colombia | Data protection | — | Law 1581/2012: prior authorization and informed purpose. |
| Argentina | Data protection | — | Law 25,326: purpose and consent. |
| Brazil | Data protection | — | LGPD; the ANPD prioritizes AI in 2026-2027. |
| California | Transparency | January 1, 2026 | AB 2013: generative AI developers must publish information about training data. |
Policy · USD 39 · Available to buy
Datasheet · USD 19 · Available to buy
Datasheet · USD 19 · Available to buy
Standard · USD 39 · Available to buy
Assessment template · USD 39 · Available to buy
Register · USD 39 · Available to buy
Includes 7 documents
Seven base documents for hosting in-house or open-weight models: provenance, security baseline, adversarial testing, architecture, model card, life cycle and rollback.
USD 149USD 233
Complete kit · available to buy