tech governance round-up #1
While some may call it the “race to regulate,” concerns around data sovereignty and protection against the misuse of AI are real. The majority world has historically borne the brunt of colonialism, and in the face of a growing reality where data is being treated as the new oil, responding to these pressing challenges are key. The “tech governance round-up” is a series that captures recent developments across the world, with a particular emphasis on the majority world, on how states and civil society are responding to the question of governing tech.
Cherokee Nation signed its first AI policy while committing to protect their language and culture. On August 21, 2025, Principal Chief Chuck Hoskin Jr. signed the Cherokee Nation’s first AI policy during a Cherokee Nation Employee Technology Summit, while also vowing to safeguard the Cherokee language and culture. This policy establishes new guidelines for responsible and ethical AI use across all departments and operations at Cherokee Nation, and outlines the specific approved uses for AI, including summarizing publicly available information, brainstorming initiatives, creating communication drafts, and developing code. The policy prohibits the use of AI without quality review measures, and mandates that any AI applications that involve the Cherokee language must receive backing and incorporation from fluent Cherokee speakers.
Zimbabwe is set to launch a National Artificial Intelligence policy to accelerate the adoption of AI by creating a safe environment for its use and promotion. This policy is also set to ensure secure data storage and sovereignty, and aims at building an Africa where AI serves humanity, ensuring that every village is connected, every child is educated, and every youth has opportunities. This policy is to be launched by October 1, 2025.
Malaysia has come up with AI labelling rules to target deepfake risks. By prioritizing mandatory labelling of AI-generated content, including images and videos, the government hopes to curb digital fraud and protect the public from misleading material. The rules are intended as a supplementary measure to the Online Safety Act of 2025 (Act 866) and is intended to address risks such as manipulated AI content and online child protection.
Nepal has adopted the National Artificial Intelligence Policy 2082 BS. This policy lays out a comprehensive institutional, legal, and regulatory framework to ensure the responsible use of AI technologies. It emphasizes ethical standards, transparency, and accountability in all AI-related activities. It is centred on building skilled human resources for AI development and application, promotes the inclusion of AI-related skills in educational curricula, and supports upskilling initiatives to prepare workforces for an AI-driven future. The policy also encourages robust investment in AI research and development to foster innovation and to support the creation and growth of a domestic AI ecosystem. It calls on the integration of AI in all key sectors including health, education, agriculture, and public administration, and emphasizes public-private partnerships. A major priority remains the protection of citizens’ rights, privacy, and data security.
Uzbekistan passed a law on the Legal Regulation of AI. It establishes the general legal framework for the use of AI in creating information resources and operating information systems while protecting the inalienable rights of individuals from the possible negative impacts of AI technologies. The bill states that information resources and systems created with the use of AI must not infringe on the rights, life, health, freedom, honour, dignity, and other inalienable rights of individuals. While making legal decisions affecting human rights and freedoms, conclusions drawn solely from AI-generated resources and systems cannot be used as the only basis. The bill also introduces administrative liability for the unlawful processing of personal data using AI, and for their dissemination in the mass media and on the Internet.
Pakistan unveiled a national AI policy to boost innovation, jobs, and ethical governance. The policy has a six-pillar framework that covers AI innovation, public awareness, secure systems, sectoral transformation, infrastructure, and international partnerships. It also creates a National AI Fund to support research and development, and establishes Centers of Excellence in AI in major cities.
New South Wales (Australia) introduced a legislative measure to outlaw and punish the creation and distribution of sexually explicit deepfakes. This legislation makes it punishable for anyone who creates, shares, or threatens to share AI-generated intimate images without consent, imposing imprisonment for up to three years.
Brazil’s National Data Protection Authority (ANPD) introduced rules for international personal data transfer in 2024, which have entered into force since August 2025. These rules govern the legal transfer of personal data from Brazil to other countries and establish requirements for compliance. The regulation mandates the use of Standard Contractual Clauses approved by the Brazilian National Data Protection Authority.
The Uganda Law Society has called on the Legal and Parliamentary Affairs Committee of Parliament to integrate AI regulatory provisions into the Copyright and Neighboring Rights Amendment Bill of 2025. This endeavour is aimed at centering clarity on ownership and rights related to AI-generated works.
Kenya's Communications Authority released a set of guidelines that require all social media and networking platforms to conduct safety impact assessments before they are launched and deployed for public use and consumption.