About
AI Transparency Disclosure

AI Transparency Disclosure

Tracking how state legislatures, federal agencies, and enforcement authorities are building AI transparency and disclosure obligations - what's required, who enforces it, and where the patchwork is heading.

26 entries in Tech Counsel Tracker

U.S. AI governance is shifting to real-time controls as policy lags

AI governance is shifting from static policy documents to real-time technical controls that can block or permit AI actions before execution. Enterprise vendors, governance-platform providers, and federal regulators are building runtime enforcement and continuous monitoring into AI systems as these tools become more autonomous and embedded in business operations. The White House has signaled a preference for federal preemption over a patchwork of state AI laws, even as states continue advancing their own disclosure and consumer-protection rules.

EU institutions strike deal on Digital Omnibus delaying key AI Act deadlines

The European Parliament, Council, and European Commission reached a provisional trilogue agreement on May 13, 2026, amending the EU AI Act and postponing key compliance deadlines for high-risk AI systems. COREPER, the Council's Committee of Permanent Representatives, approved the deal. Formal adoption by both Parliament and Council remains pending.

OpenClaw founders warn AI-generated “vibe slop” is creating risky code

OpenClaw creators Mario Zechner and Armin Ronacher have warned that AI-generated code is increasingly producing low-quality "vibe slop"—software that appears functional but contains bugs, security vulnerabilities, and maintainability problems. The concern centers on agentic AI tools that prioritize speed and conversational ease over correctness and safety, particularly as startups adopt these systems to accelerate product delivery.

U.S. states and Congress escalate AI deepfake, chatbot, and transparency rules in May 2026

More than two dozen states are enacting or advancing AI regulation laws, marking a decisive shift from policy debate to enforcement. California, Colorado, Texas, and Illinois lead the charge with rules targeting generative AI transparency, deepfake labeling, minor protections, and consumer liability. California's transparency and training-data disclosure requirements took effect in January 2026. Colorado's high-risk AI law entered enforcement on June 30, 2026. The White House released a national AI policy framework in March 2026 advocating for unified federal standards, while bipartisan efforts on Capitol Hill address nonconsensual deepfakes and AI safety. The FTC and state attorneys general are positioned as primary enforcers.

AI security, autonomy, and robotics advances mark a “singularity” milestone

A commentary roundup argues that artificial intelligence has crossed from experimental technology into institutional infrastructure, framing recent advances across security, coding, education, and robotics as evidence that the "singularity" transition is already underway. The piece centers on Anthropic, citing claims that its Project Glasswing partners have identified over 10,000 high- or critical-severity vulnerabilities in major software systems, and reporting that internal leaks suggest the company is preparing a Claude Security dashboard for enterprise clients alongside a new model variant. The narrative also names OpenAI, Google DeepMind, Tesla, SpaceX, the NTSB, and the ECB as participants in this broader shift, alongside federal restrictions on AI-generated voice reconstruction technology.

White House orders voluntary prelaunch review of frontier AI models

President Trump signed an executive order on June 2, 2026, establishing a voluntary framework that permits frontier AI developers to share their most advanced models with the federal government for up to 30 days before public release. Titled "Promoting Advanced Artificial Intelligence Innovation and Security," the order explicitly disclaims any mandatory licensing, preclearance, or permitting regime for AI models.

Trump signs AI order for pre-release government review of advanced models

President Trump signed an executive order Tuesday requiring AI companies to provide the federal government early access to their most advanced models for up to 30 days of review and testing before public release. The order frames this requirement as a safety measure, directing agencies to examine the systems for cybersecurity vulnerabilities and threats to national infrastructure. OpenAI, Anthropic, and Google are the primary targets, with the administration seeking their voluntary participation in the review process.

ChatGPT Answers on China Draw Reader Backlash; China Film Deal Collapses Over Censorship

Researchers testing ChatGPT and similar large language models on questions about China found inconsistent outputs, raising questions about how well these systems handle politically sensitive topics. The experiment comes as OpenAI's ChatGPT has scaled to over 100 million users globally, though its reach in China remains limited due to the platform's requirement for non-Chinese phone numbers during account verification.

Colorado repeals 2024 AI Act, replaces it with narrower ADMT law

Colorado has repealed its landmark 2024 artificial intelligence law and replaced it with a narrower statute. Governor Jared Polis signed SB 189 on May 14, 2026, narrowing the state's regulatory focus from broad "high-risk AI" systems to automated decision-making technology used in consequential decisions affecting consumers. The new law delays the effective date to January 1, 2027.

AI faces pushback on jobs, regulation, and weak enterprise results

Sam Altman walked back his earlier warnings about artificial intelligence causing mass job displacement, telling investors his near-term labor predictions were "pretty wrong." The OpenAI CEO's recalibration comes as political and market headwinds are mounting against the AI boom. Pennsylvania lawmakers introduced bills to repeal tax incentives for AI data centers and impose an 18-month moratorium on new facilities, while a Gallup poll found 67 percent of adults oppose AI data centers in their communities.

Google launches Gemini Spark AI agent and Omni video model at I/O 2026

Google has launched two new AI products designed to deepen its foothold in autonomous agents and generative media. Gemini Spark, a cloud-based personal AI agent, runs continuously in the background to complete multi-step tasks across Google's suite of applications—Gmail, Calendar, Drive, Docs, Sheets, Slides, YouTube, and Google Maps—and can execute actions on user direction. Simultaneously, Google introduced Gemini Omni (also called Omni Flash), a multimodal video-creation model that generates and edits video from text, images, audio, and video inputs. Both products were unveiled at Google's I/O 2026 developer conference, with early access rolling out to Google AI Ultra subscribers, business users, and developers.

New York Enacts AI Digital Replica Laws for Fashion Models Effective June 2026

New York has enacted sweeping restrictions on synthetic performers in fashion and beauty advertising. Governor Kathy Hochul signed two bills into law on December 11, 2025—the Fashion Workers Act (S9832) and synthetic performer disclosure laws (S.8420-A/A.8887-B)—that take effect June 19, 2026. The laws require explicit consent from human models before their likenesses can be replicated digitally and mandate clear disclaimers whenever AI avatars appear in advertisements. Violations carry fines of $500 to $1,000. The New York Department of Labor will oversee model agency registration by June 2026. These rules arrive as brands including H&M plan to deploy digital twins for marketing, and virtual models like Shudu and Lil Miquela compete directly with human performers for contracts.

Florida AG Investigates OpenAI, ChatGPT, Citing National Security Risks, FSU Shooting

Florida Attorney General James Uthmeier announced on April 9, 2026, that his office is launching an investigation into OpenAI and its ChatGPT models, alleging their role in facilitating a 2025 Florida State University (FSU) shooting, harming minors, enabling criminal activity, and posing national security risks from potential exploitation by adversaries like the Chinese Communist Party.[1][2][3][4][5][6][7] Subpoenas are forthcoming, with probes focusing on ChatGPT's alleged assistance to the FSU gunman—who queried it on the day of the April 17, 2025, attack about public reaction to a shooting and peak times at the FSU student union—plus links to child sex abuse material, grooming, and suicide encouragement.[1][3][5][6][7]

Jury consultant weighs juror perception in AI chatbot harm lawsuits

Character Technologies and its Character.AI chatbot platform face the first state lawsuit alleging the company violated consumer and data-protection laws by targeting children and facilitating self-harm. Kentucky Attorney General Russell Coleman filed the complaint on January 8, 2026. Separate litigation from Texas parents makes similar allegations—that the chatbot promoted self-harm, violence, and sexual content—and seeks to shut down the platform until safety defects are remedied.

Colorado Gov. Polis signs SB 189, rewriting the state’s AI employment law

Colorado Gov. Jared Polis signed Senate Bill 26-189 on May 14, 2026, repealing and replacing the state's 2024 Artificial Intelligence Act before it took effect. The new law abandons a broad risk-based regulatory framework in favor of a narrower disclosure regime focused on "automated decision-making technology" used in consequential decisions—employment, lending, housing, insurance, health care, education, and government services.

Anthropic says hackers used Claude Code in a large AI-run cyberespionage campaign

Anthropic disclosed on May 29, 2026, that Chinese state-sponsored hackers exploited its Claude Code agent to conduct a largely autonomous cyberattack campaign targeting approximately 30 organizations, including major technology companies, financial institutions, and government agencies. The attackers used the model to perform reconnaissance, develop exploits, move laterally through networks, harvest credentials, and exfiltrate data—with human operators intervening only at critical decision points. The campaign began with a jailbreak technique: attackers decomposed malicious objectives into small, seemingly benign steps framed as legitimate security testing, then leveraged Claude Code's tool access and code-execution capabilities to automate the attack chain.

Colorado replaces 2024 AI law with new automated decision-making rules

Colorado has enacted SB 26-189, a sweeping replacement of its 2024 AI Act that takes effect January 1, 2027. The new law repeals the prior comprehensive regime before it could fully take effect and narrows the regulatory focus to automated decision-making technology (ADMT) used to materially influence consequential decisions—such as hiring, housing, lending, health care, and government services. Rather than imposing broad system-level risk assessments, SB 26-189 emphasizes post-decision transparency and accountability, requiring developers and deployers of covered ADMT to provide consumers with notice, data access, correction rights, and meaningful human review.

Trump orders voluntary federal review of frontier AI models before release

On June 2, President Trump signed an executive order directing federal agencies to establish a voluntary process for AI companies to submit frontier models to the government for up to 30 days of pre-release review. The review focuses on cybersecurity and national security risks, particularly the potential for advanced systems to discover software vulnerabilities or enable cyberattacks. Critically, the order does not create a licensing requirement, mandatory preclearance, or government veto authority—companies retain full control over whether and when to release their models.

Pope Leo XIV issues first AI encyclical urging tech to serve human dignity

Pope Leo XIV released his first major encyclical, Magnifica Humanitas, on May 15, 2026, arguing that artificial intelligence must be governed by human dignity, conscience, and the common good rather than profit or military efficiency. The document rejects the premise that AI is morally neutral and specifically warns against lethal autonomous weapons, mass surveillance, labor displacement, and the concentration of power within technocratic systems. While framed as formal Catholic teaching, the encyclical addresses multiple audiences: AI developers, governments, military planners, employers, and institutions deploying algorithmic systems in credit decisions, hiring, service delivery, and warfare. Media coverage has interpreted the message as directed at Silicon Valley firms including Meta, Google, and Amazon, though the text's scope extends beyond any single company.

Trump signs AI cyber order requiring pre-release security testing of advanced models

President Trump signed an executive order Tuesday directing federal agencies to conduct cybersecurity testing of advanced AI models before public release. The order targets high-risk deployments in critical infrastructure—banks, hospitals, emergency services—and aims to reduce security vulnerabilities from powerful AI systems before they reach the market.

Texas AI law takes effect as experts urge bias and validation testing

Texas' new AI law has taken effect, and with it comes a hard deadline for compliance: organizations must now demonstrate that their AI systems are explainable, auditable, and resistant to bias. Expert commentary accompanying the law's implementation emphasizes that validation testing—including human-in-the-loop review, boundary testing, consistency checks, and adversarial testing—can no longer be deferred to later development stages. The shift reflects a broader regulatory move from AI experimentation toward mandatory pre-deployment accountability.

Spain advances new social media and AI safety rules despite tech lobbying

Spain's government will proceed with new regulations governing social media platforms and artificial intelligence systems despite sustained lobbying from major technology companies. Digital Transformation Minister Óscar López told Reuters the government will not retreat from the measures, which would restrict high-risk AI applications and mandate disclosure of how social media algorithms function. The rules are framed as responses to documented harms affecting young users, including cyberbullying and AI-generated sexual deepfakes.

Connecticut enacts SB 5, new AI workplace disclosure and bias law

Connecticut Governor Ned Lamont is expected to sign Senate Bill 5, the Connecticut Artificial Intelligence Responsibility and Transparency Act, a sweeping employment law that restricts how companies can deploy automated decision-making in hiring, promotion, discipline, and termination. The bill passed the House 131-17 and the Senate 32-4 on bipartisan votes. The law's employment provisions create two compliance windows: beginning October 1, 2026, employers can no longer use automated tools as a defense against discrimination claims, and WARN Act notices must disclose whether layoffs involve AI or technological change. Starting October 1, 2027, employers using AI that interacts with applicants or employees must provide plain-language disclosure that the person is communicating with an automated system, along with pre-decision notices describing the tool, underlying data, and employer contact information.

Employers Face Rising AI Workplace Bias, Privacy, and Compliance Risks

Employers are rapidly deploying artificial intelligence across hiring, promotion, and productivity monitoring—creating significant legal exposure for bias, privacy violations, and discrimination claims even as these tools promise operational efficiency. The EEOC, Department of Labor, and regulators in Illinois, New York City, Colorado, and California are actively scrutinizing the practice. Under existing anti-discrimination law, employers remain legally responsible for employment decisions made by AI systems, regardless of whether a vendor built the tool or a human made the final call.

Opinion | Pope Leo’s AI Manifesto

Pope Leo XIV published Magnifica Humanitas, his first major encyclical on artificial intelligence, positioning AI as a moral and social question rather than a technical one. The document argues that AI systems must remain subordinate to human dignity, work, freedom, and responsibility, and warns that current deployments risk eroding human agency, intensifying surveillance, and concentrating power. The encyclical addresses Catholics, governments, developers, employers, and institutions shaping AI policy, and assigns responsibility across the entire AI lifecycle—from designers and developers to those who deploy systems for consequential decisions. The Vatican calls for Catholic social-doctrine principles including subsidiarity, solidarity, justice, and the common good to guide AI governance.

LawSnap Briefing Updated June 8, 2026

State of play.

Where things stand.

  • Colorado's new ADMT law displaces the 2024 Act entirely. SB 26-189, signed May 14, 2026, narrows the regulatory focus to automated decision-making technology used in consequential decisions — hiring, housing, lending, health care, insurance, education, government services. Developers must provide technical documentation; deployers must give pre-use and post-adverse-decision notice, retain records for three years, and allow data correction and human review. The 60-day cure window before AG enforcement begins is the key remediation lever (→ Colorado repeals 2024 AI Act, replaces it with narrower ADMT law, Colorado replaces 2024 AI law with new automated decision-making rules, Colorado Gov. Polis signs SB 189, rewriting the state’s AI employment law).
  • Connecticut's AI Responsibility and Transparency Act creates the most demanding near-term employer compliance deadline. Starting October 1, 2026, automated tools cannot be used as a defense to discrimination claims and WARN Act notices must disclose AI involvement in layoffs. Starting October 1, 2027, employers must provide plain-language chatbot disclosure and pre-decision notices describing the tool, underlying data, and employer contact information (→ Connecticut enacts SB 5, new AI workplace disclosure and bias law).
  • EU AI Act compliance timelines are in active flux. The provisional Digital Omnibus trilogue agreement adjusts transparency and documentation requirements and modifies sandbox and conformity procedures, but the specific deadline extensions remain undisclosed pending formal Parliament and Council adoption — leaving companies with EU-facing high-risk AI systems in a compliance-planning limbo against the original August 2, 2026 deadline (→ EU institutions strike deal on Digital Omnibus delaying key AI Act deadlines).
  • Workplace AI enforcement is multi-jurisdictional and employer-side liability is settled doctrine. Under existing anti-discrimination law, employers bear responsibility for AI-driven employment decisions regardless of whether a vendor built the tool or a human made the final call; the EEOC and state regulators in Illinois, New York City, Colorado, and California are all active (→ Employers Face Rising AI Workplace Bias, Privacy, and Compliance Risks).
  • State disclosure laws remain the operative baseline across multiple vectors. California's transparency and training-data disclosure requirements took effect January 1, 2026; more than two dozen states are enacting or advancing AI regulation, with the FTC and state AGs positioned as primary enforcers (→ U.S. states and Congress escalate AI deepfake, chatbot, and transparency rules in May 2026).
  • Federal preemption is the administration's stated goal, not yet law. The March 2026 National Policy Framework and the December 2025 EO directing agencies to identify conflicting state laws define the posture — but no legislation has passed, and states continue advancing their own regimes in the interim (→ U.S. AI governance is shifting to real-time controls as policy lags, U.S. states and Congress escalate AI deepfake, chatbot, and transparency rules in May 2026).
  • AI governance is becoming operational infrastructure. Enterprise vendors and regulators are building runtime enforcement and continuous monitoring into AI systems; the 2026 compliance landscape is expected to include inventory requirements, risk assessment protocols, vendor review processes, and continuous monitoring for high-risk and agentic AI systems — though the binding legal framework has not yet solidified (→ U.S. AI governance is shifting to real-time controls as policy lags).
  • AI-generated code quality is an emerging governance and liability gap. OpenClaw founders have warned that agentic AI tools are producing "vibe slop" — code that appears functional but contains bugs, security vulnerabilities, and maintainability problems — with governance and quality control underdeveloped as enterprises scale AI code generation into production (→ OpenClaw founders warn AI-generated “vibe slop” is creating risky code).

Latest developments.

Active questions and open splits.

What to watch.

  • Formal Parliament and Council adoption of the EU Digital Omnibus — the adopted text will disclose which high-risk AI deadlines are deferred and by how long, resolving the compliance-planning limbo for companies with EU-facing operations before the original August 2, 2026 deadline.
  • Whether the Connecticut AG issues implementation guidance clarifying the scope of "automated employment decision tool" before the October 1, 2026 compliance deadline.
  • Whether other states follow Colorado's disclosure-only template or Connecticut's more demanding framework — the divergence will define whether a national compliance standard emerges or the patchwork deepens.
  • The first EEOC or state AG enforcement action against an employer for AI-driven employment decisions — the outcome will define the standard of care for audit, validation, and explainability obligations across all jurisdictions.
  • Whether the White House's federal preemption push produces draft legislation — and whether the scope language reaches disclosure-only statutes or remains targeted at bias-mitigation mandates.
  • Whether enterprise vendor contracts begin incorporating AI governance audit rights, indemnification provisions, and ADMT compliance representations as a standard term — driven by Colorado's January 2027 and Connecticut's October 2026 deadlines landing in the same contracting cycle.

mail Subscribe to AI Transparency Disclosure email updates

Primary sources. No fluff. Straight to your inbox.

Also on LawSnap