Across all 50 states and territories, provenance enforcement is anchored by federal frameworks. In the United States, provenance law sits at the intersection of federal criminal law, international conventions, and civil remedies, with a growing role for technology-driven documentation in establishing accountability and traceability. At its core, the federal framework addresses stolen, looted, or illegally exported cultural property and artworks, increasingly integrating AI and blockchain as verification tools to close gaps in historical ownership and cross-border transactions.

Federal enforcement is carried out through multiple agencies. The Department of Justice prosecutes violations under the NSPA and CPIA. Homeland Security Investigations (HSI) and U.S. Customs and Border Protection enforce import restrictions and inspect incoming works for provenance documentation. The FBI Art Crime Team actively investigates cross-border trafficking, often in collaboration with INTERPOL’s National Central Bureau in the U.S. context. The U.S. Department of State provides diplomatic leverage and coordination with foreign governments under CPIA agreements, while the Smithsonian and federal museums provide centralized archival and provenance research support.

Technology is increasingly embedded in these frameworks. The government now pilots digital registries, blockchain certification for cultural property, and AI-based provenance analytics to preempt laundering of illicit artworks. This trend positions the U.S. as a potential model for linking federal regulatory compliance with market transparency, especially for auction houses, galleries, and private collectors seeking due diligence in high-value transactions.

From a predictive perspective, by 2028, federal provenance frameworks are likely to mandate AI-audited provenance reports for transactions above threshold values, tying import/export compliance directly to digitally verified ownership history. This will accelerate a convergence between regulatory enforcement, technological innovation, and market practice, redefining what constitutes “trustworthy provenance” in the U.S. and globally.

In practice, NPC foresees galleries, auction houses, and private-wealth advisors integrating EU-compliant provenance AI as both a risk management and market signaling tool. Systems will need to log detailed provenance metadata, from original creation and exhibition history to ownership transfers and prior AI analyses, in formats that regulators can inspect. This aligns with broader market pressure for interoperable, verifiable provenance chains, the kind demanded by the emerging Global-Provenance Standard across luxury assets.

Key regulatory works:

2026 Holocaust Expropriated Art Recovery Act of 2026 helps Holocaust survivors and their families recover artwork looted by the Nazis. The new Act removes a “sunset” provision from a 2016 law of the same name. The measure ensures claims can continue to be heard and limits the use of procedural defenses (such as statutes of limitations) that have often led courts to dismiss cases without considering their merits. 

2026 Art Market Integrity Act The proposed Art Market Integrity Act (AMIA) (introduced July 2025) aims to bring the U.S. art market under Bank Secrecy Act (BSA) anti-money laundering (AML) regulations. It requires dealers, galleries, and auction houses with >$50k annual sales to perform due diligence, verify clients, and report suspicious transactions, targeting money laundering in the $59.6B global, yet largely unregulated, market. 

2021 EU Anti Money Laundering Directives. Europe is moving faster than the US in integrating art into financial surveillance.

2021 The US Anti Money Laundering Act is a federal law with specific provisions targeting antiquities dealers.

2016 HEAR Act – Holocaust Expropriated Art & Recovery and expanded 2025 for Nazi looted art (see 2026)

2016 FAIR Principles – Findable, Accessible, Interoperable, Reusable—are now reshaping art provenance, transforming it from static documentation into a predictive infrastructure. By assigning unique identifiers, enabling cross-institutional access, standardizing data exchange, and ensuring contextual richness, provenance becomes both a governance tool and a market asset.

2013 Association of Art Museum Directors (AAMD), Guidelines on the Acquisition of Archaeological Material and Ancient Art

2009 Holocaust Era Assets Conference Prague, followed immediately by the Terezín Declaration issued on June 30, 2009 in Terezín, Czech Republic. This was not strictly an EU-only initiative. It was an international conference with broad participation, though strongly supported by European states and institutions.

2001  American Alliance of Museums’ Standards Regarding the Unlawful Appropriation of Objects During the Nazi Era (formerly called Guidelines Concerning the Unlawful Appropriation of Objects During the Nazi Era) 

1998 The Washington Conference on Holocaust-Era Assets. This conference produced the Washington Principles on Nazi-Confiscated Art, a set of non-binding guidelines agreed to by 44 countries. It focuses on identifying looted art, opening archives, and pursuing “just and fair solutions” for restitution.

1995 The UNIDROIT Convention on Stolen or Illegally Exported Cultural Objects. This is critical for restitution logic across jurisdictions.

1990 Native American Graves Protection and Repatriation Act (NAGPRA, 25 U.S.C. §§ 3001–3013) establishes federal requirements for the inventory, documentation, and repatriation of human remains and associated artifacts.

1989 The Financial Action Task Force (FATF) is an intergovernmental body that sets global standards to combat money laundering, terrorist financing, and threats to the integrity of the international financial system

1983 The Cultural Property Implementation Act (CPIA, 19 U.S.C. § 2601 et seq.) operationalizes U.S. compliance with the UNESCO 1970 Convention, allowing import restrictions on illegally exported cultural property from partner nations.

1979 The Archaeological Resources Protection Act (ARPA, 16 U.S.C. §§ 470aa–470mm) regulates excavation, removal, and trade of archaeological material from federal lands, enforcing strict provenance requirements.

1973 Convention on International Trade in Endangered Species of Wild Fauna and Flora (CITES)

1970 UNESCO Convention (sometimes called the Accord) on the Means of Prohibiting and Preventing the Illicit Import, Export, and Transfer of Ownership of Cultural Property. Convention enforcement

1970 The Bank Secrecy Act (BSA), also known as the Currency and Foreign Transactions Reporting Act, is a United States federal law that establishes recordkeeping and reporting obligations for financial institutions. 

1934 National Stolen Property Act (NSPA, 18 U.S.C. §§ 2314–2315), which criminalizes the interstate or international trafficking of stolen goods, explicitly covering artworks.

Precursors:

1963 British Museums Act

1954 The Hague Convention for the Protection of Cultural Property in the Event of Armed Conflict, adopted on May 14, 1954 in The Hague, Netherlands under the framework of UNESCO.

1874 Brussels Declaration was drafted in August 1874 in Brussels, Belgium at the Brussels Conference of 1874. It was never ratified, but it advanced early language around safeguarding cultural institutions and artworks.

1863 Lieber Code was issued April 24, 1863 in Washington, D.C., United States during the American Civil War. It is the first formal codification that implicitly protects cultural property within military conduct.

1880 Oxford Manual, associated with Gustave Moynier, was adopted in September 1880 in Oxford, United Kingdom by the Institute of International Law. It systematized prior ideas into a more coherent legal and ethical framework.

1899 and 1907 Hague Conventions emerged from the Hague Peace Conferences in The Hague, Netherlands. These are the first broadly ratified international agreements that explicitly include protections for cultural property during armed conflict.

Modern Initiatives:

2026 Global Provenance Standard (emerging) – allowing AI-driven verification, risk assessment, and value prediction, turning trust into a measurable, investable layer of the art ecosystem.

2026 Information Processing and Telecommunications Center (IPTC) works with C2PA Content Credentials as a critical step toward restoring trust in digital content.

2026 The Swiss government in Bern has created a new Commission for Historically Problematic Cultural Heritage with a mandate to evaluate claims about art and cultural property taken under duress during the Nazi era and in colonial contexts. This effort responds to decades of pressure on Switzerland to reckon with its historical role as a market hub for art that passed through or was held in Swiss collections after being looted or sold under duress in the 1930–40s.

2021 The EU AI Act, in March 2026 as advancing through regulatory review with expected phased adoption across the European Union from 2026 onward, is set to recalibrate provenance frameworks for the art and luxury sectors in unprecedented ways. At its core, the Act introduces a risk-based classification system for AI, with “high-risk” systems (including those used for authentication, valuation, and provenance verification of art and collectibles) subject to stringent requirements around transparency, auditability, and traceability. For art provenance, this translates into an enforceable expectation that any AI-assisted cataloging, imaging, or predictive analytics platform must maintain an immutable record of data lineage, clearly documenting every input, algorithmic intervention, and output affecting an object’s attribution, condition, or market valuation.

California continues to be a leader in artificial intelligence initiatives that impact art, cultural history, and our use of the Internet. We highlight this state as a leader in regulatory actions involving provenance.

California Assembly Bill 2655
California Assembly Bill 2655 has had more than one identity in recent legislative cycles. In the 2023‑2024 session in Sacramento it became known as the Defending Democracy from Deepfake Deception Act of 2024, a law that was chaptered and signed into state law on September 17, 2024, in Sacramento. This version set standards for online platforms to label and block materially deceptive AI‑generated or digitally modified political images, audio, and video during election seasons. It required large platforms to apply provenance metadata and make available all provenance data about a piece of media that had been labeled “inauthentic” so users could inspect the creation history and origin story of that content. This was explicitly intended to protect electoral integrity against AI‑powered deepfake disinformation in California’s 2024 and 2026 electoral cycles. The law’s provenance requirement recognized that trustworthy provenance is critical to distinguishing authentic creative or documentary content from generative falsifications, though it applied in a narrow electoral context.

The idea of provenance here is about tracking the lineage of digital media, linking back to where, when, by whom, and how an image or video was created or altered. That is the same concept that matters for art market provenance, record‑keeping, and chain‑of‑custody in creative works, but in AB 2655 it was about digital trust for civic content rather than for paintings or artifacts.

Of note, SB 1000 amends the California AI Transparency Act to tighten provenance disclosure requirements for generative AI. It swaps out “AI detection tool” for “disclosure verification tool” and requires latent disclosures to flag whether content was generated or modified by AI. Penalties: $5,000 per violation, enforced by the AG.

SB 1111 tackles digital replicas around unauthorized use of someone’s likeness, adding civil and criminal provisions

SB 1217 creates a Nonconsensual Intimate Image Clearinghouse.

And SB 957 gives the state new subpoena power over social media companies on privacy matters.

Each one approaches the same underlying problem from a different angle: when AI can generate content that looks, sounds, and acts like a real person, who’s responsible?

Nationally, as of April 2026, 19 new AI laws have been signed across multiple states in the first two weeks of April alone, bringing the 2026 total to 25.

Lawmakers in 45 states have introduced over 1,500 AI-related bills this session, already surpassing all of 2024.

ISO 21127
ISO 21127, the Information and documentation — A reference ontology for the interchange of cultural heritage information, is increasingly central to discussions around provenance in art, museums, and cultural heritage. It’s a structured framework for describing the relationships between people, objects, events, and places, allowing institutions and collectors to track an artwork or artifact’s full life cycle with semantic precision. In practice, it turns provenance from a narrative of ownership into a machine-readable network of linked data, which can verify authenticity, identify gaps, and connect objects to historical, legal, or ethical contexts.

For 2026, ISO 21127 is becoming a foundation for high-net-worth collectors, auction houses, and museums to integrate provenance into digital infrastructure. When paired with AI-driven due diligence, blockchain verification, or FAIR-aligned databases, it enables real-time, globally interoperable provenance tracking. This shifts the field from archival static records to dynamic, actionable intelligence about risk, historical significance, and market valuation.

ISO 42001
In 2026 in Geneva, Switzerland, ISO 42001 emerged as the first international standard for AI governance with deep implications for provenance in art markets, museums, and cultural archives. Provenance is no longer just historical lineage of an artwork; it is now a living dataset that feeds machine learning systems. ISO 42001 mandates traceable audit trails, documented decision logic, human oversight checkpoints, and risk management protocols that make AI‑assisted attributions and ownership histories auditable and defensible. Institutions that adopt these principles early will shift from reactive compliance to proactive trust leadership in the provenance economy.

Indigenous Peoples

On Friday, March 27, 2026, the Harvard Project on Indigenous Governance and Development hosted the Symposium on Indigenous Data Sovereignty, exploring emerging global and national efforts to strengthen Indigenous data governance and sovereignty. Central to the discussion was IEEE 2890-2025 Recommended Practice for Provenance of Indigenous Peoples’ Data, the first international standard establishing guidance for documenting the origins, stewardship, and movement of data relating to Indigenous Peoples.

NIST Guidance