{"yaml_version_hash":"a1868efcf6c7f5fa","license":"CC BY 4.0","source_repo":"https://github.com/buzzi-ai/us-state-ai-compliance-rules","generated_at":"2026-06-09T06:21:03.136Z","laws":[{"law":{"id":"ca-ab1008","name":"California AB 1008 — CCPA AI Inferences","statute":"AB 1008 (2024)","effective":"2026-01-01","source_url":"https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202320240AB1008","jurisdiction":"California consumers; businesses subject to CCPA","enforcement":"California Privacy Protection Agency","status":"active","last_reviewed":"2026-03-15","reviewer":"pending_counsel_review"},"triggers":{"all_of":[{"state_includes":["ca"]},{"any_of":[{"handles_consumer_pii":true},{"any_use_case":["ai_hiring","ai_lending","ai_chatbots","ai_generated_content"]}]}]},"obligations":{"if_either":[{"id":"ab1008-ai-inference-disclosure","short_title":"Disclose AI inferences as personal information","priority_tier":"P1","plain_english":"Treat AI-generated inferences about consumers as personal information under CCPA, including in privacy policies and right-to-know responses.","statute_excerpt":"AB 1008 amends Civ. Code 1798.140 to clarify that AI inferences are personal information.","statute_url":"https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202320240AB1008","satisfied_by_posture":["formal_ai_policy"]},{"id":"ab1008-honor-deletion-requests","short_title":"Honor deletion requests covering AI inferences","priority_tier":"P1","plain_english":"Honor consumer deletion and correction requests that target AI-generated inferences and downstream model artifacts.","statute_excerpt":"AB 1008 (codified).","statute_url":"https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202320240AB1008"}]},"penalty_range":{"min_usd":2500,"max_usd":7500,"per_violation":true,"enforcement":"California Privacy Protection Agency"}},{"law":{"id":"ca-sb53","name":"California Frontier AI Transparency Act","statute":"SB 53 (2025)","effective":"2026-01-01","source_url":"https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260SB53","jurisdiction":"California; frontier-model developers operating in CA","enforcement":"California Attorney General","status":"active","last_reviewed":"2026-03-15","reviewer":"pending_counsel_review"},"triggers":{"all_of":[{"state_includes":["ca"]},{"any_of":[{"is_developer_of_high_risk_ai":true},{"any_use_case":["frontier_ai_development"]}]}]},"obligations":{"if_developer":[{"id":"sb53-safety-framework","short_title":"Publish a frontier AI safety framework","priority_tier":"P1","plain_english":"Publish and update a written safety framework that describes risk identification, mitigation, and incident response.","statute_excerpt":"SB 53 Sec. 22757.10. Frontier developers shall publish a safety framework.","statute_url":"https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260SB53","satisfied_by_posture":["nist_ai_rmf","iso_42001"]},{"id":"sb53-incident-reporting","short_title":"Critical incident reporting to AG","priority_tier":"P1","plain_english":"Report critical safety incidents to the California Attorney General within 15 days.","statute_excerpt":"SB 53 Sec. 22757.12.","statute_url":"https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260SB53"},{"id":"sb53-whistleblower-protections","short_title":"Whistleblower protections","priority_tier":"P1","plain_english":"Maintain internal channels and non-retaliation protections for employee safety disclosures.","statute_excerpt":"SB 53 Sec. 22757.14.","statute_url":"https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260SB53"}]},"penalty_range":{"min_usd":0,"max_usd":10000000,"per_violation":false,"enforcement":"California Attorney General (civil penalties up to $10M per violation)"}},{"law":{"id":"co-caia","name":"Colorado AI Act","statute":"Colorado Revised Statutes Part 17, SB 24-205","effective":"2026-06-30","source_url":"https://leg.colorado.gov/bills/sb24-205","jurisdiction":"Colorado residents; deployers operating in CO","enforcement":"Colorado Attorney General","status":"active","last_reviewed":"2026-03-15","reviewer":"pending_counsel_review","amendments":[{"bill":"SB 25-318","status":"pending","effect":"exemption_clarification"}]},"triggers":{"all_of":[{"state_includes":["co"]},{"any_of":[{"any_use_case":["ai_hiring","ai_lending","ai_healthcare","ai_educational","ai_housing","ai_insurance"]},{"is_developer_of_high_risk_ai":true}]}]},"obligations":{"if_deployer":[{"id":"caia-risk-management-program","short_title":"Risk management program","priority_tier":"P1","plain_english":"Document and operate a program to identify and reduce algorithmic discrimination risk.","statute_excerpt":"Sec. 6-1-1703(2). A deployer shall use reasonable care to protect consumers from any known or reasonably foreseeable risks of algorithmic discrimination.","statute_url":"https://leg.colorado.gov/bills/sb24-205","satisfied_by_posture":["eu_ai_act_classification","nist_ai_rmf"]},{"id":"caia-annual-impact-assessment","short_title":"Annual impact assessment","priority_tier":"P1","plain_english":"Conduct and document an impact assessment for each high-risk AI system annually.","statute_excerpt":"Sec. 6-1-1703(3)(b). Annual impact assessments required.","statute_url":"https://leg.colorado.gov/bills/sb24-205","satisfied_by_posture":["algorithmic_impact_assessments"]},{"id":"caia-consumer-notice","short_title":"Consumer notice before decision","priority_tier":"P1","plain_english":"Notify consumers before an AI system makes a consequential decision about them.","statute_excerpt":"Sec. 6-1-1704(1)(a).","statute_url":"https://leg.colorado.gov/bills/sb24-205"},{"id":"caia-appeal-right","short_title":"Appeal right for adverse decisions","priority_tier":"P1","plain_english":"Give consumers a right to appeal adverse AI decisions to a human reviewer.","statute_excerpt":"Sec. 6-1-1704(3).","statute_url":"https://leg.colorado.gov/bills/sb24-205"}],"if_developer":[{"id":"caia-developer-documentation","short_title":"Documentation package for deployers","priority_tier":"P1","plain_english":"Provide deployers with information sufficient to comply with CAIA.","statute_excerpt":"Sec. 6-1-1702(2)(a).","statute_url":"https://leg.colorado.gov/bills/sb24-205"},{"id":"caia-harm-disclosure-to-ag","short_title":"Harm disclosure to Attorney General","priority_tier":"P1","plain_english":"Notify the CO AG within 90 days of discovering algorithmic discrimination risk.","statute_excerpt":"Sec. 6-1-1702(5).","statute_url":"https://leg.colorado.gov/bills/sb24-205"}]},"penalty_range":{"min_usd":2000,"max_usd":20000,"per_violation":true,"enforcement":"Colorado Attorney General (civil penalties under CO UDPA)"},"small_business_exemption":{"applies_if":"fewer_than_50_employees","conditions":["no_high_risk_ai_deployment","training_data_transparency_maintained"]},"small_business_threshold_applied_if":{"handles_sensitive_pi":false}},{"law":{"id":"co-sb25-318","name":"Colorado SB 25-318 (CAIA Amendment)","statute":"SB 25-318 (amends SB 24-205)","effective":"2026-08-30","source_url":"https://leg.colorado.gov/bills/sb25-318","jurisdiction":"Colorado","enforcement":"Colorado Attorney General","status":"amended","last_reviewed":"2026-03-15","reviewer":"pending_counsel_review"},"triggers":{"all_of":[{"state_includes":["co"]},{"any_use_case":["ai_hiring","ai_lending","ai_healthcare","ai_educational","ai_housing","ai_insurance"]}]},"obligations":{"if_either":[{"id":"caia-amend-clarified-exemption","short_title":"Updated small-business exemption thresholds","priority_tier":"P2","plain_english":"Re-evaluate small-business exemption status under the amended thresholds.","statute_excerpt":"SB 25-318 Sec. 2 (amends 6-1-1701(11)).","statute_url":"https://leg.colorado.gov/bills/sb25-318"}]},"penalty_range":{"min_usd":2000,"max_usd":20000,"per_violation":true,"enforcement":"Colorado Attorney General"}},{"law":{"id":"federal-eo-14410","name":"Federal Executive Order 14410 (Contested)","statute":"Executive Order 14410","effective":"contested","source_url":"https://www.whitehouse.gov/briefing-room/presidential-actions/","jurisdiction":"Federal contractors; agency procurement","enforcement":"OMB; agency CIOs","status":"contested","last_reviewed":"2026-03-15","reviewer":"pending_counsel_review"},"triggers":{"any_of":[{"all_of":[{"is_developer_of_high_risk_ai":true},{"industry_in":["federal_contractor","government"]}]},{"all_of":[{"any_use_case":["ai_government","frontier_ai_development"]}]}]},"obligations":{"if_either":[{"id":"eo-14410-watch-procurement","short_title":"Monitor federal AI procurement guidance","priority_tier":"watch","plain_english":"Track OMB and agency guidance on AI procurement; this EO is currently contested and obligations may change.","statute_excerpt":"EO 14410 Sec. 4 (procurement guidance).","statute_url":"https://www.whitehouse.gov/briefing-room/presidential-actions/"},{"id":"eo-14410-watch-safety-reporting","short_title":"Monitor frontier-model reporting expectations","priority_tier":"watch","plain_english":"Track safety-reporting obligations for dual-use foundation models; subject to revision pending litigation outcomes.","statute_excerpt":"EO 14410 Sec. 4.2.","statute_url":"https://www.whitehouse.gov/briefing-room/presidential-actions/"}]},"penalty_range":{"min_usd":0,"max_usd":0,"per_violation":false,"enforcement":"Currently contested — no active enforcement penalty band confirmed"}},{"law":{"id":"fl-ai-act","name":"Florida AI Transparency Act","statute":"Florida HB 919 (2024 extended)","effective":"2026-07-01","source_url":"https://www.flsenate.gov/Session/Bill/2024/919","jurisdiction":"Florida consumers; political advertising; healthcare","enforcement":"Florida Attorney General; Florida Elections Commission","status":"active","last_reviewed":"2026-03-15","reviewer":"pending_counsel_review"},"triggers":{"all_of":[{"state_includes":["fl"]},{"any_of":[{"any_use_case":["ai_generated_content","ai_chatbots","ai_healthcare"]}]}]},"obligations":{"if_either":[{"id":"fl-political-ad-disclosure","short_title":"Political ad AI disclosure","priority_tier":"P1","plain_english":"Disclose generative-AI use on political advertisements distributed in Florida.","statute_excerpt":"Fla. Stat. 106.145.","statute_url":"https://www.flsenate.gov/Session/Bill/2024/919"},{"id":"fl-healthcare-ai-disclosure","short_title":"Healthcare AI disclosure","priority_tier":"P2","plain_english":"Disclose AI involvement in patient communications and certain clinical workflows.","statute_excerpt":"Fla. Stat. 408.0625.","statute_url":"https://www.flsenate.gov/Session/Bill/2024/919","satisfied_by_posture":["formal_ai_policy"]}]},"penalty_range":{"min_usd":1000,"max_usd":5000,"per_violation":true,"enforcement":"Florida Attorney General"}},{"law":{"id":"il-hb3773","name":"Illinois HB 3773 — AI in Employment","statute":"775 ILCS 5/2-101 et seq. (HB 3773, 2024)","effective":"2026-01-01","source_url":"https://www.ilga.gov/legislation/BillStatus.asp?DocNum=3773&GAID=17&LegId=153521","jurisdiction":"Illinois employers","enforcement":"Illinois Department of Human Rights","status":"active","last_reviewed":"2026-03-15","reviewer":"pending_counsel_review"},"triggers":{"all_of":[{"state_includes":["il"]},{"any_use_case":["ai_hiring"]}]},"obligations":{"if_deployer":[{"id":"hb3773-discrimination-prohibition","short_title":"Prohibit discriminatory AI in employment decisions","priority_tier":"P1","plain_english":"Do not use AI that subjects employees to discrimination on the basis of a protected class.","statute_excerpt":"775 ILCS 5/2-102(L).","statute_url":"https://www.ilga.gov/legislation/BillStatus.asp?DocNum=3773&GAID=17&LegId=153521","satisfied_by_posture":["algorithmic_impact_assessments"]},{"id":"hb3773-notice-to-applicants","short_title":"Notice to applicants and employees","priority_tier":"P1","plain_english":"Provide written notice to applicants and employees when AI is used in recruitment, hiring, promotion, or discipline decisions.","statute_excerpt":"775 ILCS 5/2-102(L)(2).","statute_url":"https://www.ilga.gov/legislation/BillStatus.asp?DocNum=3773&GAID=17&LegId=153521"}]},"penalty_range":{"min_usd":0,"max_usd":75000,"per_violation":true,"enforcement":"Illinois Department of Human Rights (administrative)"}},{"law":{"id":"mi-ai-act","name":"Michigan AI Political Advertising Act","statute":"Public Act 264 of 2024","effective":"2025-02-01","source_url":"https://www.legislature.mi.gov/Bills/Bill?ObjectName=2023-HB-5141","jurisdiction":"Michigan political communications","enforcement":"Michigan Department of State; Michigan Attorney General","status":"active","last_reviewed":"2026-03-15","reviewer":"pending_counsel_review"},"triggers":{"all_of":[{"state_includes":["mi"]},{"any_use_case":["ai_generated_content"]}]},"obligations":{"if_either":[{"id":"mi-deepfake-political-disclosure","short_title":"Deepfake political ad disclosure","priority_tier":"P1","plain_english":"Disclose AI-generated content in political communications within 90 days of an election.","statute_excerpt":"MCL 169.247a.","statute_url":"https://www.legislature.mi.gov/Bills/Bill?ObjectName=2023-HB-5141"},{"id":"mi-criminal-deepfake","short_title":"Criminal liability for malicious deepfakes","priority_tier":"P1","plain_english":"Producing materially deceptive media to harm a candidate within 90 days of an election may carry criminal penalties.","statute_excerpt":"MCL 750.411x.","statute_url":"https://www.legislature.mi.gov/Bills/Bill?ObjectName=2023-HB-5141"}]},"penalty_range":{"min_usd":250,"max_usd":1000,"per_violation":true,"enforcement":"Michigan Department of State; Attorney General"}},{"law":{"id":"ny-ll144","name":"NYC Local Law 144 — Automated Employment Decision Tools","statute":"NYC Local Law 144 of 2021","effective":"ongoing","source_url":"https://www.nyc.gov/site/dca/about/automated-employment-decision-tools.page","jurisdiction":"New York City employers","enforcement":"NYC Department of Consumer and Worker Protection","status":"active","last_reviewed":"2026-03-15","reviewer":"pending_counsel_review"},"triggers":{"all_of":[{"state_includes":["nyc"]},{"any_use_case":["ai_hiring"]}]},"obligations":{"if_deployer":[{"id":"ll144-bias-audit","short_title":"Annual independent bias audit","priority_tier":"P1","plain_english":"Commission an independent bias audit of any automated employment decision tool used in NYC, annually.","statute_excerpt":"NYC Admin Code 20-871. Bias audit required within one year prior to use.","statute_url":"https://www.nyc.gov/site/dca/about/automated-employment-decision-tools.page"},{"id":"ll144-public-summary","short_title":"Publish bias-audit summary","priority_tier":"P1","plain_english":"Publish a summary of the most recent bias audit on the employer website.","statute_excerpt":"NYC Admin Code 20-871(b)(2).","statute_url":"https://www.nyc.gov/site/dca/about/automated-employment-decision-tools.page"},{"id":"ll144-candidate-notice","short_title":"10-day candidate notice","priority_tier":"P1","plain_english":"Notify candidates and employees at least 10 business days before using an AEDT.","statute_excerpt":"NYC Admin Code 20-871(b)(3).","statute_url":"https://www.nyc.gov/site/dca/about/automated-employment-decision-tools.page"}]},"penalty_range":{"min_usd":500,"max_usd":1500,"per_violation":true,"enforcement":"NYC DCWP (per-violation per-day penalties)"}},{"law":{"id":"tn-elvis","name":"Tennessee ELVIS Act","statute":"HB 2091 / SB 2096 (Ensuring Likeness Voice and Image Security Act)","effective":"2024-07-01","source_url":"https://wapp.capitol.tn.gov/apps/BillInfo/Default.aspx?BillNumber=HB2091","jurisdiction":"Tennessee residents (voice and likeness rights)","enforcement":"Tennessee Attorney General; private right of action","status":"active","last_reviewed":"2026-03-15","reviewer":"pending_counsel_review"},"triggers":{"all_of":[{"state_includes":["tn"]},{"any_of":[{"any_use_case":["ai_generated_content"]},{"is_developer_of_high_risk_ai":true}]}]},"obligations":{"if_either":[{"id":"elvis-no-unauthorized-voice-clones","short_title":"No unauthorized voice or likeness simulation","priority_tier":"P1","plain_english":"Do not produce, distribute, or commercially exploit AI-generated simulations of a person's voice or likeness without authorization.","statute_excerpt":"T.C.A. 47-25-1105.","statute_url":"https://wapp.capitol.tn.gov/apps/BillInfo/Default.aspx?BillNumber=HB2091"},{"id":"elvis-platform-liability","short_title":"Platform liability for hosted simulations","priority_tier":"P1","plain_english":"Platforms that knowingly distribute unauthorized voice/likeness AI simulations may face liability.","statute_excerpt":"T.C.A. 47-25-1106.","statute_url":"https://wapp.capitol.tn.gov/apps/BillInfo/Default.aspx?BillNumber=HB2091"}]},"penalty_range":{"min_usd":2500,"max_usd":25000,"per_violation":true,"enforcement":"Tennessee Attorney General; private civil action with statutory damages"}},{"law":{"id":"tx-traiga","name":"Texas Responsible AI Governance Act","statute":"TRAIGA (HB 149, 2025)","effective":"2026-01-01","source_url":"https://capitol.texas.gov/tlodocs/89R/billtext/html/HB00149I.htm","jurisdiction":"Texas residents; deployers operating in TX","enforcement":"Texas Attorney General","status":"active","last_reviewed":"2026-03-15","reviewer":"pending_counsel_review"},"triggers":{"all_of":[{"state_includes":["tx"]},{"any_of":[{"any_use_case":["ai_chatbots","ai_hiring","ai_government","ai_healthcare","ai_lending","biometric_recognition"]},{"is_developer_of_high_risk_ai":true}]}]},"obligations":{"if_either":[{"id":"traiga-chatbot-disclosure","short_title":"Chatbot disclosure to consumers","priority_tier":"P1","plain_english":"Disclose to consumers that they are interacting with an AI system, not a human.","statute_excerpt":"TRAIGA Sec. 552.054. Disclosure required for consumer-facing AI.","statute_url":"https://capitol.texas.gov/tlodocs/89R/billtext/html/HB00149I.htm","satisfied_by_posture":["formal_ai_policy"]},{"id":"traiga-prohibited-purposes","short_title":"Prohibited purposes — social scoring, manipulation","priority_tier":"P1","plain_english":"Do not deploy AI for social scoring, behavioral manipulation, or unlawful discrimination.","statute_excerpt":"TRAIGA Sec. 552.052.","statute_url":"https://capitol.texas.gov/tlodocs/89R/billtext/html/HB00149I.htm"},{"id":"traiga-government-procurement","short_title":"Government AI procurement standards","priority_tier":"P2","plain_english":"AI sold to TX government agencies must meet documented governance and bias-testing standards.","statute_excerpt":"TRAIGA Sec. 552.060.","statute_url":"https://capitol.texas.gov/tlodocs/89R/billtext/html/HB00149I.htm"}]},"penalty_range":{"min_usd":10000,"max_usd":25000,"per_violation":true,"enforcement":"Texas Attorney General"}},{"law":{"id":"ut-ai-disclosure","name":"Utah AI Policy Act","statute":"SB 149 (2024)","effective":"2024-05-01","source_url":"https://le.utah.gov/~2024/bills/static/SB0149.html","jurisdiction":"Utah consumers","enforcement":"Utah Division of Consumer Protection; Office of AI Policy","status":"active","last_reviewed":"2026-03-15","reviewer":"pending_counsel_review"},"triggers":{"all_of":[{"state_includes":["ut"]},{"any_of":[{"any_use_case":["ai_chatbots","ai_generated_content","ai_healthcare","ai_lending"]}]}]},"obligations":{"if_either":[{"id":"ut-ai-disclosure-on-request","short_title":"Disclose AI on consumer request","priority_tier":"P1","plain_english":"When asked, disclose to a consumer that they are interacting with generative AI, not a human.","statute_excerpt":"Utah Code 13-2-12. Disclosure required upon consumer inquiry.","statute_url":"https://le.utah.gov/~2024/bills/static/SB0149.html","satisfied_by_posture":["formal_ai_policy"]},{"id":"ut-ai-regulated-occupations","short_title":"Proactive AI disclosure in regulated occupations","priority_tier":"P1","plain_english":"For regulated occupations (medical, financial, legal), proactively disclose AI use at the start of the interaction.","statute_excerpt":"Utah Code 13-2-12(2).","statute_url":"https://le.utah.gov/~2024/bills/static/SB0149.html"}]},"penalty_range":{"min_usd":2500,"max_usd":5000,"per_violation":true,"enforcement":"Utah Division of Consumer Protection"}}]}