AI State Legislation

AI governance is shifting from static policy documents to real-time technical controls that can block or permit AI actions before execution. Enterprise vendors, governance-platform providers, and federal regulators are building runtime enforcement and continuous monitoring into AI systems as these tools become more autonomous and embedded in business operations. The White House has signaled a preference for federal preemption over a patchwork of state AI laws, even as states continue advancing their own disclosure and consumer-protection rules.

More than two dozen states are enacting or advancing AI regulation laws, marking a decisive shift from policy debate to enforcement. California, Colorado, Texas, and Illinois lead the charge with rules targeting generative AI transparency, deepfake labeling, minor protections, and consumer liability. California's transparency and training-data disclosure requirements took effect in January 2026. Colorado's high-risk AI law entered enforcement on June 30, 2026. The White House released a national AI policy framework in March 2026 advocating for unified federal standards, while bipartisan efforts on Capitol Hill address nonconsensual deepfakes and AI safety. The FTC and state attorneys general are positioned as primary enforcers.

Governor Gavin Newsom signed an executive order on May 21 directing California state agencies to assess and prepare for labor-market disruption from rapid AI adoption. The order requires the Government Operations Agency, Department of Technology, Department of Human Resources, and Labor and Workforce Development Agency to study potential layoffs, hiring shifts, and skills gaps across the state. The directive also instructs officials to develop recommendations for early-warning systems and worker protections, and to examine policy options including amendments to California's WARN Act, severance and transition support, workforce training programs, and worker-ownership models.

Colorado has repealed its landmark 2024 artificial intelligence law and replaced it with a narrower statute. Governor Jared Polis signed SB 189 on May 14, 2026, narrowing the state's regulatory focus from broad "high-risk AI" systems to automated decision-making technology used in consequential decisions affecting consumers. The new law delays the effective date to January 1, 2027.

Sam Altman walked back his earlier warnings about artificial intelligence causing mass job displacement, telling investors his near-term labor predictions were "pretty wrong." The OpenAI CEO's recalibration comes as political and market headwinds are mounting against the AI boom. Pennsylvania lawmakers introduced bills to repeal tax incentives for AI data centers and impose an 18-month moratorium on new facilities, while a Gallup poll found 67 percent of adults oppose AI data centers in their communities.

Colorado Gov. Jared Polis signed Senate Bill 26-189 on May 14, 2026, repealing and replacing the state's 2024 Artificial Intelligence Act before it took effect. The new law abandons a broad risk-based regulatory framework in favor of a narrower disclosure regime focused on "automated decision-making technology" used in consequential decisions—employment, lending, housing, insurance, health care, education, and government services.

Colorado has enacted SB 26-189, a sweeping replacement of its 2024 AI Act that takes effect January 1, 2027. The new law repeals the prior comprehensive regime before it could fully take effect and narrows the regulatory focus to automated decision-making technology (ADMT) used to materially influence consequential decisions—such as hiring, housing, lending, health care, and government services. Rather than imposing broad system-level risk assessments, SB 26-189 emphasizes post-decision transparency and accountability, requiring developers and deployers of covered ADMT to provide consumers with notice, data access, correction rights, and meaningful human review.

The European Parliament, Council, and European Commission reached a provisional trilogue agreement on May 13, 2026, amending the EU AI Act and postponing key compliance deadlines for high-risk AI systems. COREPER, the Council's Committee of Permanent Representatives, approved the deal. Formal adoption by both Parliament and Council remains pending.

Connecticut Governor Ned Lamont is expected to sign Senate Bill 5, the Connecticut Artificial Intelligence Responsibility and Transparency Act, a sweeping employment law that restricts how companies can deploy automated decision-making in hiring, promotion, discipline, and termination. The bill passed the House 131-17 and the Senate 32-4 on bipartisan votes. The law's employment provisions create two compliance windows: beginning October 1, 2026, employers can no longer use automated tools as a defense against discrimination claims, and WARN Act notices must disclose whether layoffs involve AI or technological change. Starting October 1, 2027, employers using AI that interacts with applicants or employees must provide plain-language disclosure that the person is communicating with an automated system, along with pre-decision notices describing the tool, underlying data, and employer contact information.

Governor Gavin Newsom signed Executive Order N-6-26 on May 21, 2026, directing California state agencies to assess and respond to artificial intelligence's economic and workforce impacts. The order took effect immediately and requires the Employment Development Department to build AI employment-impact analysis, including a public dashboard powered by unemployment insurance data. The state is also reviewing potential updates to California's WARN Act mass-layoff notification rules. Industry partners and researchers have been asked to supply labor-market data, best practices, and policy recommendations to inform the state's response.

Colorado Governor Jared Polis signed SB 26-189 on May 14, 2026, replacing the state's 2024 AI law with a narrower framework. The new statute centers on transparency, notice, human review, and data correction for automated decision-making in consequential decisions, including employment. The effective date moves to January 1, 2027. The rewrite abandons the original law's broad risk-management, impact-assessment, and bias-audit requirements in favor of a disclosure-focused approach.

States are beginning to enact laws assigning ownership of AI-generated outputs to the person who supplied the prompt, breaking from federal copyright and patent doctrine that requires human authorship and inventorship. Arkansas has passed the first such law, reflecting growing frustration with the federal framework's treatment of machine-created content.

Character Technologies and its Character.AI chatbot platform face the first state lawsuit alleging the company violated consumer and data-protection laws by targeting children and facilitating self-harm. Kentucky Attorney General Russell Coleman filed the complaint on January 8, 2026. Separate litigation from Texas parents makes similar allegations—that the chatbot promoted self-harm, violence, and sexual content—and seeks to shut down the platform until safety defects are remedied.

xAI filed suit on April 9, 2026, in U.S. District Court for the District of Colorado to block enforcement of Colorado's SB24-205, a comprehensive AI anti-discrimination law scheduled to take effect June 30, 2026. The statute requires developers and deployers of high-risk AI systems—those used in hiring, lending, and admissions decisions—to conduct impact assessments, make disclosures, and implement risk mitigation measures to prevent algorithmic discrimination. Two weeks later, on April 24, the U.S. Department of Justice intervened with its own complaint, arguing the law violates the Equal Protection Clause by compelling demographic adjustments through disparate-impact liability while simultaneously authorizing discrimination through exemptions for diversity initiatives. The court granted DOJ's intervention and issued a stay suspending enforcement pending resolution.

New York has enacted sweeping restrictions on synthetic performers in fashion and beauty advertising. Governor Kathy Hochul signed two bills into law on December 11, 2025—the Fashion Workers Act (S9832) and synthetic performer disclosure laws (S.8420-A/A.8887-B)—that take effect June 19, 2026. The laws require explicit consent from human models before their likenesses can be replicated digitally and mandate clear disclaimers whenever AI avatars appear in advertisements. Violations carry fines of $500 to $1,000. The New York Department of Labor will oversee model agency registration by June 2026. These rules arrive as brands including H&M plan to deploy digital twins for marketing, and virtual models like Shudu and Lil Miquela compete directly with human performers for contracts.

President Trump signed an executive order Tuesday requiring AI companies to provide the federal government early access to their most advanced models for up to 30 days of review and testing before public release. The order frames this requirement as a safety measure, directing agencies to examine the systems for cybersecurity vulnerabilities and threats to national infrastructure. OpenAI, Anthropic, and Google are the primary targets, with the administration seeking their voluntary participation in the review process.

Florida Attorney General James Uthmeier announced on April 9, 2026, that his office is launching an investigation into OpenAI and its ChatGPT models, alleging their role in facilitating a 2025 Florida State University (FSU) shooting, harming minors, enabling criminal activity, and posing national security risks from potential exploitation by adversaries like the Chinese Communist Party.[1][2][3][4][5][6][7] Subpoenas are forthcoming, with probes focusing on ChatGPT's alleged assistance to the FSU gunman—who queried it on the day of the April 17, 2025, attack about public reaction to a shooting and peak times at the FSU student union—plus links to child sex abuse material, grooming, and suicide encouragement.[1][3][5][6][7]

Texas' new AI law has taken effect, and with it comes a hard deadline for compliance: organizations must now demonstrate that their AI systems are explainable, auditable, and resistant to bias. Expert commentary accompanying the law's implementation emphasizes that validation testing—including human-in-the-loop review, boundary testing, consistency checks, and adversarial testing—can no longer be deferred to later development stages. The shift reflects a broader regulatory move from AI experimentation toward mandatory pre-deployment accountability.

The European Commission, Parliament, and Council have agreed to delay key compliance deadlines under the EU AI Act, pushing obligations for high-risk systems to December 2, 2027, and August 2, 2028. The deal also simplifies documentation requirements for small and mid-sized enterprises and introduces a new ban on AI systems generating non-consensual intimate imagery or child sexual abuse material. The amendments modify Regulation (EU) 2024/1689, which entered force on August 1, 2024.

A federal court rejected Elon Musk's lawsuit against OpenAI, CEO Sam Altman, and co-founder Greg Brockman on statute of limitations grounds, dismissing claims that the company abandoned its nonprofit mission in favor of a for-profit model backed by Microsoft. The ruling eliminates Musk's bid for damages and any court-ordered structural changes to the organization.

Amazon Web Services marked its 20th anniversary this year as a $128.7 billion business that now generates most of Amazon's operating profit. The division has pivoted sharply toward artificial intelligence, expanding beyond cloud storage and compute into foundation-model access, proprietary AI chips, agentic AI tools, and enterprise automation applications. AWS CEO Matt Garman and AI leader Swami Sivasubramanian are driving the strategy, which includes partnerships and competition with Anthropic, OpenAI, Nvidia, DeepSeek, Mistral, and others, while relying on Amazon's custom Trainium processors developed through the Annapurna Labs acquisition.

Connecticut has enacted SB 5, the Artificial Intelligence Responsibility and Transparency Act, imposing new compliance obligations on employers who use automated systems in hiring, promotion, discipline, and termination decisions. Governor Ned Lamont signed the bill into law. The statute creates disclosure and human-oversight requirements designed to prevent "set-and-forget" automation in employment decisions. The Connecticut Department of Labor will enforce new layoff-disclosure requirements tied to WARN notices, and the law strengthens liability exposure under the state's employment-discrimination statutes.

Colorado Governor Jared Polis signed Senate Bill 26-189 on May 14, 2026, repealing and replacing the state's 2024 artificial intelligence law. The new statute narrows the regulatory scope from a broad "high-risk AI system" framework to rules governing "automated decision-making technology" used in consequential decisions—employment, housing, lending, insurance, healthcare, education, and essential government services.

Connecticut's legislature passed the Artificial Intelligence Responsibility and Transparency Act on May 11, 2026, with Governor Ned Lamont expected to sign it into law. The bill imposes new compliance obligations on employers using automated decision tools in recruiting, hiring, promotion, discipline, and termination. Key requirements include disclosure to affected employees, bias testing, human oversight mechanisms, and documentation of anti-discrimination safeguards. The Connecticut Attorney General will enforce the statute. Vendors and platform developers face information-sharing duties tied to their clients' compliance obligations.

California Governor Gavin Newsom signed Executive Order N-6-26 on May 21, 2026, directing state agencies to assess how artificial intelligence will disrupt employment and to recommend worker protections, training programs, and policy changes. The order does not immediately bind private employers to new obligations, but it initiates a formal state review that will likely shape future legislation and regulation.