State AI regulations are real, confusing, and genuinely important. We explain them like you're a smart adult who just hasn't had time to read 47 pages of legislative text. Because that's most people.
Texas TRAIGA has been live for 4 months. Zero public AG enforcement so far. The complaint portal launches September 1, 2026 — and what you have documented before that matters more than what you do after.
Colorado's AI law takes effect June 30, 2026. No amending bill has been introduced. The legislature has failed to revise the law four times. The deadline is real.
A federal court is testing whether AI vendors — not just employers — can be sued for discriminatory hiring outcomes. The certified class could include hundreds of millions of applicants.
HR software that screens candidates, scores performance, or ranks employees is classified as high-risk AI under Colorado's law. The June 30, 2026 deadline applies to both the companies that build these tools and the HR teams that use them.
Not sure if AI compliance applies to your business? Walk through four questions — and know exactly which laws apply, which documents you need, and where to start.
Colorado, California, Texas, Illinois, and NYC all have active AI laws — and they don't all require the same things. If you operate in multiple states, here's what applies to you and why.
Oregon's privacy law has been in effect since July 2024, requires data protection assessments for AI profiling, and flatly prohibits processing personal data of consumers under 16 for targeted advertising or data sales — a protection not found in most other state laws. The 30-day cure period effectively expired for most businesses on January 1, 2026 (Oregon Laws 2025, c.417).
Colorado, California, and Illinois all require some version of an AI impact assessment — but they don't call it the same thing or require the same format. Here's what every version has in common, and what each state specifically demands.
Three different laws. Three different definitions of 'high-risk AI.' If your business uses AI to make decisions about people, here's how to figure out which rules apply to you.
The federal government removed every page of AI hiring guidance it ever published. Over a year later, the pages are still down. Four states wrote their own — and none of them agree.
Colorado, Texas, and Illinois all passed AI laws with deadlines in early 2026 — and none of them are identical. Here's the one compliance checklist that covers all three at once.
HIPAA protects patient records. It has nothing to say about whether the AI making decisions about those patients is fair. New rules are filling that gap — and they apply to you even if your HIPAA program is airtight.
The US government published a free framework for managing AI risk — and Colorado's AI law turns following it into a legal shield. If something goes wrong with your AI, this is the document that shifts the burden of proof.
Texas passed an AI law that applies to every business — no exemptions for small companies, no carveout for low-risk tools. It's already in effect, and a single uncurable violation starts at $80,000.
AI compliance can cost $49 or $50,000 — depending on what you actually need. Here's what each option costs in real numbers, so you can stop guessing and start budgeting.
"Per violation" sounds like one fine. It isn't. Here's what the penalty math actually looks like state by state — and why the numbers can compound into company-ending territory fast.
If an AI tool touches patient data at your healthcare organization, HIPAA applies — and most vendor contracts aren't written to cover it. Here's what you need before you deploy.
Europe's AI law applies to US companies — even ones with no European office. If your AI is used by anyone in the EU, the deadline is August 2026 and the fines are calculated on your global revenue.
Enterprise clients are starting to require ISO 42001 certification before they'll buy AI products — the same way they require SOC 2. Here's what the standard actually requires and why getting it early is a competitive advantage.
New York City requires an annual test of any AI hiring tool to check whether it's filtering out one group of people more than others. If you hire in NYC, this isn't optional — here's what the audit actually involves.
California's AI rules are already in effect — and the agency enforcing them just handed out its largest fine ever. Here's what your business needs to do and when.
Colorado passed the most detailed AI law in the country. If your business uses AI to make decisions about people, here's what you need to have ready by June 30.
Connecticut's privacy law has been in effect since 2023, and as of 2025 the AG no longer has to warn you before taking action. If you use customer data for ads or profiling, you need to have your paperwork in order now.
If your HR software filters resumes or ranks candidates, you're probably already covered by new AI employment laws — whether you know it or not. The liability falls on you, not the vendor.
If you use AI in hiring and you have employees in Illinois, you can be fined up to $70,000 per violation. The law is already in effect.
Virginia's privacy law has been active since 2023, and it requires a written justification any time you use someone's data to target ads or make predictions about them. Penalties run up to $7,500 per violation.
Stop reading about it. Generate your compliance documentation today.
Browse Compliance Packages
