Which countries require human oversight of AI?

Duties of human oversight or review, and rights to a human decision instead of an automated one.

10 of 21 reviewed jurisdictions address this in at least one tracked instrument. Updated 2026-09-26.

Each answer cites the instrument it rests on; open it for the provision and the full analysis. Whether a rule is binding law, a bill or guidance comes from the instrument's type and status, not from wording.

“Not found” means none of the instruments we track for that jurisdiction addresses the topic. It is not a finding that no such rule exists.

Yes — binding law in force (6)

Partly — regional, framework or general (non-AI) law (3)

  • India

    Partly — regional, framework or general (non-AI) law

    Intermediaries must use proportionate technology-based content-identification measures with human oversight and review of automated tools.

    Status verified 2026-09-08

    1 of 4 regions address this
    • KarnatakaNot found in the instruments we track
    • MaharashtraGuidance or policy only

      AI advisories are to support rather than replace agricultural experts' professional judgment.

      Status verified 2026-09-09

    • Tamil NaduNot found in the instruments we track
    • TelanganaNot found in the instruments we track
  • United Kingdom

    Partly — regional, framework or general (non-AI) law

    Automated decisions using non-sensitive personal data must include human review pathways.

    A possible change to a cited instrument is not yet verified.

    Status verified 2026-09-09

    0 of 1 regions address this
    • ScotlandNot found in the instruments we track
  • United States

    Partly — regional, framework or general (non-AI) law

    Coverage determinations using AI must be individualized rather than based solely on algorithmic outputs.

    Status verified 2026-09-09

    13 of 51 states address this
    • AlabamaNot found in the instruments we track
    • AlaskaNot found in the instruments we track
    • ArizonaPartly — regional, framework or general (non-AI) law

      Insurers must obtain an individual medical-director review using independent medical judgment before specified denials.

      Status verified 2026-09-09

    • ArkansasPartly — regional, framework or general (non-AI) law

      Public-entity policies must preserve final decision authority for human employees or designees.

      Status verified 2026-09-07

    • CaliforniaPartly — regional, framework or general (non-AI) law

      Driverless testing requires continuous monitoring and remote operators able to take control in emergencies.

      Status verified 2026-09-08

    • ColoradoPartly — regional, framework or general (non-AI) law

      A regulated professional must review AI treatment recommendations and retain responsibility for administrative AI use.

      Status verified 2026-09-08

    • ConnecticutNot found in the instruments we track
    • DelawareNot found in the instruments we track
    • FloridaNot found in the instruments we track
    • GeorgiaAdopted — not yet in force

      Final healthcare coverage denials require review and approval by a qualified human clinical peer.

      Status verified 2026-09-07

    • HawaiiNot found in the instruments we track
    • IdahoPartly — regional, framework or general (non-AI) law

      AI implementations must preserve human educators' ultimate control and decision-making authority.

      Status verified 2026-09-10

    • IllinoisPartly — regional, framework or general (non-AI) law

      Licensed professionals must directly review and approve AI therapeutic recommendations and treatment plans.

      A possible change to a cited instrument is not yet verified.

      Status verified 2026-09-08

    • IndianaPartly — regional, framework or general (non-AI) law

      Insurers and providers must ensure human review when automated processes, including AI, are used for specified claims actions.

      A possible change to a cited instrument is not yet verified.

      Status verified 2026-09-09

    • IowaNot found in the instruments we track
    • KansasNot found in the instruments we track
    • KentuckyNot found in the instruments we track
    • LouisianaNot found in the instruments we track
    • MaineNot found in the instruments we track
    • MarylandNot found in the instruments we track
    • MassachusettsNot found in the instruments we track
    • MichiganNot found in the instruments we track
    • MinnesotaNot found in the instruments we track
    • MississippiNot found in the instruments we track
    • MissouriNot found in the instruments we track
    • MontanaPartly — regional, framework or general (non-AI) law

      AI-controlled critical infrastructure must include human control and intervention mechanisms for emergencies.

      Status verified 2026-09-08

    • NebraskaPartly — regional, framework or general (non-AI) law

      Adverse prior-authorization determinations must be made by a qualified physician or clinical peer rather than automated systems.

      Status verified 2026-09-08

    • NevadaNot found in the instruments we track
    • New HampshireNot found in the instruments we track
    • New JerseyNot found in the instruments we track
    • New MexicoNot found in the instruments we track
    • New YorkNot found in the instruments we track
    • North CarolinaPartly — regional, framework or general (non-AI) law

      Each Cabinet agency must establish an AI Oversight Team to lead its AI-related work.

      Status verified 2026-09-08

    • North DakotaNot found in the instruments we track
    • OhioNot found in the instruments we track
    • OklahomaNot found in the instruments we track
    • OregonNot found in the instruments we track
    • PennsylvaniaNot found in the instruments we track
    • Puerto RicoNot found in the instruments we track
    • Rhode IslandNot found in the instruments we track
    • South CarolinaNot found in the instruments we track
    • South DakotaNot found in the instruments we track
    • TennesseeNot found in the instruments we track
    • TexasNot found in the instruments we track
    • UtahProposed

      Insurers must ensure adverse clinical or medical-necessity determinations are made using independent medical judgment rather than solely other recommendations.

      Status verified 2026-09-07

    • VermontNot found in the instruments we track
    • VirginiaNot found in the instruments we track
    • WashingtonPartly — regional, framework or general (non-AI) law

      AI cannot be the sole means for adverse care decisions, and medical-necessity denials require human review.

      Status verified 2026-09-07

    • West VirginiaNot found in the instruments we track
    • WisconsinNot found in the instruments we track
    • WyomingNot found in the instruments we track

Proposed (3)

Guidance or policy only (7)

Not found in the instruments we track (1)

  • Mexico

    Not found in the instruments we track

International organisations (1)

  • European Union

    Yes — binding law in force

    It requires human oversight measures for high-risk AI systems and assigns deployers responsibility for ensuring that oversight.

    A possible change to a cited instrument is not yet verified.

    Status verified 2026-09-11

Not yet reviewed for this topic (65)

We track instruments for these jurisdictions but have not yet classified them for this topic. This is not a finding that they have no such rule.

Austria, Bahrain, Bangladesh, Belgium, Bulgaria, Colombia, Costa Rica, Côte d'Ivoire, Croatia, Cyprus, Czech Republic, Denmark, Ecuador, Egypt, Estonia, Ethiopia, Finland, France, Germany, Ghana, Greece, Hong Kong, Hungary, Iceland, Iran, Iraq, Ireland, Israel, Italy, Kenya, Latvia, Lebanon, Lithuania, Luxembourg, Malaysia, Maldives, Malta, Morocco, Netherlands, New Zealand, Nigeria, Norway, Pakistan, Panama, Peru, Philippines, Poland, Portugal, Qatar, Romania, Russia, Rwanda, Senegal, Serbia, Slovakia, Slovenia, South Africa, Spain, Sweden, Taiwan, Thailand, Tunisia, Ukraine, Uruguay, Uzbekistan