The AI compliance checklist, built from the laws themselves.

Alabama

26 items from 6 laws

Alabama Child Protection Act of 2024 (AI-generated child sexual abuse material)

HB 168, 2024 Regular Session, enrolled; amends Code of Alabama §§ 13A-6-240 and 13A-12-190 to 13A-12-194, 13A-12-196 to 13A-12-198; repeals § 13A-12-195; adds uncodified Sections 4 to 7. Enforced by: Criminal prosecution (the act does not name the prosecuting office), and civil suits by the individual depicted under Sections 5 and 6. Items used to produce, transport, disseminate, display or store the material are contraband subject to forfeiture under § 13A-12-198. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.. Checked November 15, 2026.

Person: Do not disseminate or publicly display child sexual abuse material, including computer-generated or altered depictions virtually indistinguishable from a real minor. Starts October 1, 2024 · Ongoing · Applies when: Any dissemination or public display in Alabama. · § 13A-12-191(a); § 13A-12-190(15)

Person: Do not advertise, promote, present, distribute or solicit material in a way that reflects or invites belief that it depicts an actual individual under 18. Starts October 1, 2024 · Ongoing · Applies when: Applies to material or purported material presented as an actual individual under 18 in sexually explicit conduct. · § 13A-12-191(b)

Person: Do not possess child sexual abuse material, with or without intent to disseminate, including virtually indistinguishable computer-generated depictions. Starts October 1, 2024 · Ongoing · Applies when: Any possession; transfer to a device or storage accessible to other users is prima facie evidence of intent to disseminate. · § 13A-12-192(a), (b)

Person: Do not knowingly film, print, record, photograph or otherwise produce child sexual abuse material, including virtually indistinguishable depictions. Starts October 1, 2024 · Ongoing · Applies when: Any production; each depiction is a separate offense. · § 13A-12-197(a), (b)

Alabama Property Protection Act of 2026: remote notary check for AI-generated signer images

SB 292, 2026 Regular Session, enrolled (Alabama Property Protection Act of 2026); this file covers Code of Alabama § 36-20-73.1 as amended by the act. Enforced by: The law does not name one. Checked November 15, 2026.

Notary public: Refuse to perform a remote electronic notarial act if the signatory's image appears to be artificially generated or the communication technology is not secure. Starts October 1, 2026 · Each time it happens · Applies when: The notary becomes aware of either condition during a remote electronic notarization. · § 36-20-73.1(h)(2) (second subsection labeled (h))

Notary public: Record the remote notarization, including clear images of any government ID used and of the signing, and keep the recording for seven years. Starts October 1, 2026 · Each time it happens · Applies when: Any remote electronic notarial act; the notary must tell participants that Alabama law requires the recording. · § 36-20-73.1(d)(2), (e)(4), (f)

Alabama automated driving system vehicles law (SB 226)

SB 226, 2024 Regular Session, enrolled; Sections 1 to 12 of the act. The enrolled text assigns no Code of Alabama section numbers.. Enforced by: The law does not name one. Checked November 15, 2026.

Owner or operator of an ADS-equipped vehicle: Operate with the system engaged only if the vehicle can comply with traffic and motor vehicle laws and federal safety standards (unless exempted) and is registered and titled in Alabama. Starts October 1, 2024 · Ongoing · Applies when: An ADS-equipped vehicle is operated on public roads with the automated driving system engaged. · SB 226 § 2(a)

Owner or operator of an ADS-equipped vehicle: Operate without a conventional human driver present only if the vehicle is capable of achieving a minimal risk condition. Starts October 1, 2024 · Ongoing · Applies when: No conventional human driver is present in the vehicle. · SB 226 § 2(b)

Person operating a fully autonomous vehicle: Submit proof of financial responsibility to the Department of Revenue with single limits liability coverage of at least $100,000, by insurance or self-insurance. Starts October 1, 2024 · Ongoing · Applies when: A fully autonomous vehicle is operated. The text says a person submits the proof without naming which person. · SB 226 § 3

Owner of an ADS-equipped vehicle, or its agent: After a crash with no conventional driver, promptly report it to law enforcement, keep the vehicle at or near the scene until police arrive, and provide registration and insurance information. When triggered · Each time it happens · Applies when: A crash involving an ADS-equipped vehicle without a conventional human driver; these are the conditions under which Chapter 10 of Title 32 does not apply. · SB 226 § 4

Owner of an ADS-equipped vehicle operated by a commercial entity: Carry liability coverage of at least $1,000,000 per accident; the owner is deemed the operator. Starts October 1, 2024 · Ongoing · Applies when: A commercial entity operates an ADS-equipped vehicle that is not an automated commercial motor vehicle without a conventional human driver. · SB 226 § 4(5)

On-demand autonomous vehicle network: Ensure fully autonomous vehicles logged on to the network meet the insurance requirements in Section 4. Starts October 1, 2024 · Ongoing · Applies when: The network dispatches fully autonomous vehicles under the state transportation network company laws. · SB 226 § 10

Conventional human driver: Hold a valid driver license for the class of vehicle operated. Starts October 1, 2024 · Ongoing · Applies when: A conventional human driver operates an ADS-equipped vehicle. · SB 226 § 5

Alabama crimes of distributing and creating a private image, including altered images (HB 161)

HB 161, 2024 Regular Session, enrolled; amends Code of Alabama § 13A-6-240. Enforced by: Criminal prosecution; the section does not name the prosecuting office. The offense is treated as committed in any county where any part of it took place. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.. Checked November 15, 2026.

Person: Do not knowingly post, email, text, transmit or otherwise distribute a private image, including an altered or realistic fake one, without the depicted individual's consent. Starts October 1, 2024 · Ongoing · Applies when: The depicted individual has not consented to the transmission and had a reasonable expectation of privacy against it. · § 13A-6-240(a)(1), (b)(2)

Person: Do not knowingly create, record or alter a private image of an individual without that individual's consent to the creation, recording or alteration. Starts October 1, 2024 · Ongoing · Applies when: The depicted individual has not consented and had a reasonable expectation of privacy against the creation, recording or alteration. · § 13A-6-240(a)(2), (b)(2)

Alabama law on AI in health plan prior authorization (SB 63)

SB 63, 2026 Regular Session, enrolled; Sections 1 and 2 of the act. The enrolled text assigns no Code of Alabama section number.. Enforced by: Alabama Department of Insurance. It may give notice of an alleged violation, hold a hearing under Article 1 of Chapter 2 of Title 27 if the response is unsatisfactory, and order a corrective plan. A web search on November 12, 2026 found no report of a court order blocking this law; court dockets were not searched.. Checked November 12, 2026.

Health benefit plan provider: Base AI-assisted medical necessity determinations on the enrollee's medical history, the unique clinical circumstances presented by the requesting provider, and additional clinical information in the enrollee's medical record. Starts October 1, 2026 · Ongoing · Applies when: The provider uses artificial intelligence to make medical necessity determinations on prior authorization requests. · SB 63 § 1(b)(1)

Health benefit plan provider: Certify each year to the Department of Insurance that the AI does not rely on a group dataset, is fairly and equitably applied, and does not unlawfully discriminate. Starts October 1, 2026 · Every year · Applies when: The provider uses artificial intelligence for medical necessity prior authorization. The text gives no first certification date. · SB 63 § 1(b)(2)

Health benefit plan provider: Have a licensed physician or other health care professional competent to evaluate the AI's recommendation make every determination to deny, delay or modify a service. Starts October 1, 2026 · Ongoing · Applies when: A medical necessity determination that denies, delays or modifies a health care service where artificial intelligence is used. · SB 63 § 1(b)(3)

Health benefit plan provider: Make prominent written disclosure of the use of AI in utilization review in the provider's policies and procedures. Starts October 1, 2026 · Ongoing · Applies when: The provider uses artificial intelligence in utilization review. The text does not name enrollees as recipients of the disclosure. · SB 63 § 1(c)(1)

Health benefit plan provider: Periodically review the use of AI and its outcomes to maximize accuracy and reliability and to ensure compliance with the determination rules. Starts October 1, 2026 · Ongoing · Applies when: The provider uses artificial intelligence in utilization review. No review interval is stated. · SB 63 § 1(c)(2)

Health benefit plan provider: Do not use patient data in AI utilization review beyond its intended and stated purpose, consistent with HIPAA. Starts October 1, 2026 · Ongoing · Applies when: Patient data is used in the artificial intelligence utilization review function. · SB 63 § 1(c)(3)

Health benefit plan provider: Respond to the Department of Insurance within 30 days after it gives notice of an alleged violation. When triggered · Each time it happens · Applies when: The department has reasonable grounds to believe the determination rules in subsection (b) were violated and notifies the provider. · SB 63 § 1(d)(1)

Alabama materially deceptive media in elections law (HB 172, 2024)

HB 172, 2024 Regular Session, enrolled; Sections 1 to 3 of the act. The enrolled text assigns no Code of Alabama section number.. Enforced by: Criminal prosecution (the act does not name the prosecutor). The Attorney General, a depicted individual, an injured or likely injured candidate, or an entity representing voters likely to be deceived may seek a permanent injunction. A web search on November 14, 2026 found no report of a court order blocking this law; court dockets were not searched.. Checked November 14, 2026.

Person (distributor): Do not distribute materially deceptive media, or agree with another to distribute it, within 90 days before an election, unless it carries the required disclaimer. Starts October 1, 2024 · Ongoing · Applies when: The person knows the media falsely represents a depicted individual, intends to harm a candidate's reputation or electoral prospects and to change voting by deception, and both results are reasonably likely. · HB 172 § 2(a), (b)

Creator, sponsor or purchaser: Include a disclaimer that the media was manipulated by technical means and depicts speech or conduct that did not occur, formatted for video, audio or image. When triggered · Each time it happens · Applies when: To come within the disclaimer exception. Video: shown throughout, clearly visible and readable. Audio only: clearly spoken at the beginning and end. Image: clearly visible and readable. Each in the media's language. No exact wording is required. · HB 172 § 2(b)(1)-(4)

Creator, sponsor or purchaser: If the media was generated by editing an existing image, audio or video, include a citation directing the viewer or listener to the original source. When triggered · Each time it happens · Applies when: To come within the disclaimer exception, where the media was made by editing existing content. · HB 172 § 2(b)(5)

Distributor: Do not intentionally remove a disclaimer that the creator, sponsor or purchaser included with the media. Starts October 1, 2024 · Ongoing · Applies when: A distributor handles media that carries a disclaimer under section 2(b). · HB 172 § 2(e)

Arizona

17 items from 7 laws

Arizona AI-generated child sexual abuse material definitions (HB 2678)

Laws 2025, ch. 174 (HB 2678, 57th Legislature, 1st Regular Session); amends A.R.S. 13-705 and 13-3551. Enforced by: Criminal prosecution; the act does not name the prosecuting office. A web search on November 15, 2026 found no lawsuit or court order against this law.. Checked November 15, 2026.

Person: Do not knowingly produce, distribute, sell, buy, possess or trade sexual depictions of a minor, including AI-made images indistinguishable from an actual minor. Starts September 26, 2025 · Ongoing · Applies when: Any conduct on or after the act's effective date. · A.R.S. 13-3553(A)(1), (2); 13-3551(7)(b), (13)

Arizona autonomous vehicles law (HB 2813)

Laws 2021, ch. 117 (HB 2813, 55th Legislature, 1st Regular Session); A.R.S. title 28, chapter on autonomous vehicles (enacted as 28-9601 to 28-9608, codified as 28-9701 et seq.), and amends 28-101, 28-661 to 28-666 and others. Enforced by: Arizona Department of Transportation (cease and desist, registration suspension) and Department of Public Safety; traffic and crash offenses are prosecuted under title 28. A web search on November 15, 2026 found no lawsuit or court order against this law.. Checked November 15, 2026.

Person operating a fully autonomous vehicle: Before driverless operation, submit a law enforcement interaction plan to ADOT and DPS addressing every element of the DPS protocol issued May 14, 2018. When triggered · Once · Applies when: Operating a fully autonomous vehicle without a human driver on Arizona public roads. · A.R.S. 28-9702(C)(1)

Person operating a fully autonomous vehicle: Submit a written statement to ADOT acknowledging federal safety compliance, minimal risk fallback, ability to follow traffic laws, and title, registration and insurance compliance. When triggered · Once · Applies when: Operating a fully autonomous vehicle without a human driver on Arizona public roads. · A.R.S. 28-9702(C)(2)(a)-(d)

Person operating an autonomous vehicle: When testing with the system engaged and a human aboard, have a licensed human driver able to resume driving or respond to a request to intervene. Starts September 29, 2021 · Ongoing · Applies when: An autonomous vehicle that is not operating as a fully driverless vehicle under 28-9702(C). · A.R.S. 28-9702(B)

Owner: After a crash, have the vehicle stop at or near the scene, alert police, and give the owner's name, address and registration number to those involved. When triggered · Each time it happens · Applies when: A fully autonomous vehicle with no human driver is involved in a crash. · Laws 2021, ch. 117, A.R.S. 28-661(B), 28-662(B), 28-663(B)

Owner: Take reasonable steps to notify the owner of damaged unattended property or fixtures of the crash, the owner's name and address, and the registration number. When triggered · Each time it happens · Applies when: A driverless fully autonomous vehicle damages unattended property or roadway fixtures. · Laws 2021, ch. 117, A.R.S. 28-664(B), 28-665(B)

Owner and statement submitter: Answer ADOT information requests about a likely unsafe vehicle within the time set, and certify any correction ADOT requires to avoid suspension. When triggered · Each time it happens · Applies when: ADOT has information that a vehicle is likely mechanically unsafe and a danger to others. · Laws 2021, ch. 117, A.R.S. 28-9608(B)-(E)

Arizona computer-generated impersonation fraud offense (SB 1295)

Laws 2025, ch. 184 (SB 1295, 57th Legislature, 1st Regular Session); amends A.R.S. 13-2006. Enforced by: Criminal prosecution; the act does not name the prosecuting office. A web search on November 15, 2026 found no lawsuit or court order against this law.. Checked November 15, 2026.

Person: Do not use a computer-generated voice recording, image or video of another person with intent to defraud others. Starts September 26, 2025 · Ongoing · Applies when: Any conduct on or after the act's effective date. · A.R.S. 13-2006(A)(4)

Arizona digital impersonation civil action (HB 2394)

Laws 2024, ch. 193 (HB 2394, 56th Legislature, 2nd Regular Session); A.R.S. 16-1023. Enforced by: Private lawsuit by the person impersonated (or a parent or guardian); no government enforcer is named. A web search on November 15, 2026 found no lawsuit or court order against this law.. Checked November 15, 2026.

Publisher: Do not publish a digital impersonation of a candidate or Arizona citizen without consent unless you reasonably convey that it is fake or its authenticity is disputed. Starts June 4, 2024 · Ongoing · Applies when: The person shown did not consent and a reasonable person would not readily recognize the content as an impersonation. · A.R.S. 16-1023(A)(1), (2)

Publisher: After learning content you published is a digital impersonation, take reasonable corrective action within 21 days, such as removing it and telling the same audience it was fake. When triggered · Each time it happens · Applies when: Needed to avoid injunctive relief and damages where the content is sexual, the plaintiff is not a public figure, and the other conditions are met. · A.R.S. 16-1023(I)(3)

Arizona election deepfake disclosure law (SB 1359)

Laws 2024, ch. 199 (SB 1359, 56th Legislature, 2nd Regular Session); added as A.R.S. 16-1023 and codified as A.R.S. 16-1024. Enforced by: The law does not name one. Checked November 15, 2026.

Creator: Within 90 days before an election, do not create and distribute a known deceptive deepfake of a ballot candidate unless it clearly and conspicuously discloses AI-generated content. Starts September 14, 2024 · Ongoing · Applies when: A candidate for elected office will appear on the ballot at an election within the next 90 days. · A.R.S. 16-1024(A)

Arizona fake intimate images offense (SB 1462)

Laws 2025, ch. 106 (SB 1462, 57th Legislature, 1st Regular Session); amends A.R.S. 13-1425. Enforced by: Criminal prosecution; the act does not name the prosecuting office. A web search on November 15, 2026 found no lawsuit or court order against this law.. Checked November 15, 2026.

Person: Do not intentionally disclose a realistic fake nude or sexual image of an identifiable person to harm, harass, intimidate, threaten or coerce them, unless they made it. Starts September 26, 2025 · Ongoing · Applies when: Any disclosure on or after the act's effective date; the privacy-expectation element does not apply to fake images. · A.R.S. 13-1425(A)(1)-(3), (D)(5)

Arizona personal delivery devices law (SB 1305)

Laws 2020, ch. 78 (SB 1305, 54th Legislature, 2nd Regular Session); A.R.S. 28-1221 to 28-1228 and amends 28-101. Enforced by: The law does not name one. Checked November 15, 2026.

Business entity operating a personal delivery device: Operate only with a human agent able to monitor or physically control the device's navigation and operation. Starts August 31, 2020 · Ongoing · Applies when: Any operation of a personal delivery device in Arizona. · A.R.S. 28-1223(A)

Business entity operating a personal delivery device: Ensure the device yields to all traffic including pedestrians, does not unreasonably interfere with them, follows pedestrian rules and local rules, and carries no placarded hazardous materials. Starts August 31, 2020 · Ongoing · Applies when: Any operation of a personal delivery device in Arizona. · A.R.S. 28-1224(1)-(7)

Business entity operating a personal delivery device: Keep speed at or below 12 mph in pedestrian areas (or a lower local limit, not below 7 mph) and 20 mph on highway sides or shoulders. Starts August 31, 2020 · Ongoing · Applies when: Any operation of a personal delivery device in Arizona. · A.R.S. 28-1225(A), (B)

Business entity operating a personal delivery device: Equip each device with a marker showing the owner's name, contact information and unique ID number, a braking system, and required lights at night. Starts August 31, 2020 · Ongoing · Applies when: Any operation of a personal delivery device in Arizona. · A.R.S. 28-1226(A), (B)

Business entity operating a personal delivery device: Maintain general liability insurance of at least $100,000 for damages arising from operating the device. Starts August 31, 2020 · Ongoing · Applies when: Any operation of a personal delivery device in Arizona. · A.R.S. 28-1228

Arkansas

22 items from 7 laws

Arkansas AI-generated child sexual abuse material offenses (Act 977 of 2025)

HB 1877, 95th General Assembly, Regular Session (2025); Act 977 of 2025; amends Ark. Code 5-27-302, 5-27-304, 5-27-601, 5-27-602, 5-27-603 and 5-27-609. Enforced by: Criminal prosecution; the Act does not name the prosecuting office. A web search on November 15, 2026 found no court challenge to this Act.. Checked November 15, 2026.

Person: Do not knowingly advertise, sell, distribute, exhibit, solicit, receive, purchase, exchange, possess or view computer-generated or indistinguishable material depicting a child in sexually explicit conduct. When triggered · Ongoing · Applies when: Any medium, including online; law enforcement and qualifying interactive computer services are exempt. · Ark. Code 5-27-304(a); 5-27-602(a)

Person, including an AI developer or interactive computer service: If generating such material during adversarial testing, do so only in good faith, in a controlled setting, with an AI developer, for legitimate AI safety purposes. When triggered · Each time it happens · Applies when: Red-teaming or similar safety testing of AI systems for child sexual content; other purposes are not exempt. · Ark. Code 5-27-302(8); 5-27-304(c)(2); 5-27-602(d)(2)

Arkansas Frank Broyles Publicity Rights Protection Act: AI voice and likeness amendments (Act 159 of 2025)

HB 1071, 95th General Assembly, Regular Session (2025); Act 159 of 2025; amends Ark. Code 4-75-1103, 4-75-1110 and 4-75-1112 (Frank Broyles Publicity Rights Protection Act of 2016, Act 8 of the 2016 Third Extraordinary Session, Ark. Code 4-75-1101 et seq.). Enforced by: Private civil actions by the holder of the publicity right (the individual or a registered successor in interest); no government enforcer is named. A web search on November 15, 2026 found no court challenge to the 2025 amendments.. Checked November 15, 2026.

Person: Get prior consent before commercially using an individual's name, voice, signature, photograph or likeness, including an AI-generated likeness or simulated voice. When triggered · Each time it happens · Applies when: Any commercial use in any medium; after death, consent comes from holders of more than half of the rights, for 50 years after death. · Ark. Code 4-75-1104(a); 4-75-1105; 4-75-1107(2); 4-75-1108(a); 4-75-1103(3), (5), (7) as amended by Act 159 of 2025

Arkansas Personal Delivery Device Act (Act 926 of 2021)

HB 1767, 93rd General Assembly, Regular Session (2021); Act 926 of 2021; Ark. Code 27-51-2101 to 27-51-2111. Enforced by: The law does not name one. Checked November 15, 2026.

Eligible entity: Keep each device at 10 mph or less in pedestrian areas and 20 mph or less on county or municipal streets. When triggered · Ongoing · Applies when: Whenever a personal delivery device operates in Arkansas. · Ark. Code 27-51-2103(a)

Eligible entity: Do not operate devices on interstate, controlled access or state highways, or roads posted above 45 mph, and do not block public rights-of-way or unreasonably interfere with traffic. When triggered · Ongoing · Applies when: Whenever a personal delivery device operates in Arkansas. · Ark. Code 27-51-2103(b)

Eligible entity: Between sunset and sunrise, equip devices with lit front and rear lamps visible from at least 500 feet. When triggered · Ongoing · Applies when: Operation between sunset and sunrise. · Ark. Code 27-51-2103(c)

Personal delivery device: Yield the right-of-way to pedestrians; on streets, travel as close as practicable to the right edge and in the direction of traffic. When triggered · Ongoing · Applies when: Operation in pedestrian areas or on streets and roads. · Ark. Code 27-51-2104; 27-51-2105

Personal delivery device operator: Ensure the device obeys traffic and pedestrian control devices and signals and does not unreasonably interfere with pedestrians or traffic. When triggered · Ongoing · Applies when: While controlling or monitoring a device. · Ark. Code 27-51-2106

Eligible entity: Mark each device with the entity's name and contact information and a unique identifying number. When triggered · Once · Applies when: Every personal delivery device the entity operates. · Ark. Code 27-51-2107

Eligible entity: Maintain general liability insurance of at least $100,000 per device covering damages from its operation. When triggered · Ongoing · Applies when: Every personal delivery device the entity operates. · Ark. Code 27-51-2108

Eligible entity: Do not use a device to transport hazardous material that federal law regulates and requires to be placarded. When triggered · Ongoing · Applies when: Material regulated under the federal Hazardous Materials Transportation Act and placarded under 49 C.F.R. Part 172. · Ark. Code 27-51-2110

Arkansas autonomous vehicle networks, operator licensing and liability (Act 619 of 2021)

HB 1562, 93rd General Assembly, Regular Session (2021); Act 619 of 2021; amends Ark. Code 27-51-2001 and 27-51-2002 and adds 27-51-2003 to 27-51-2006. Enforced by: The State Highway Commission implements the subchapter and adopts rules; the Act names no enforcement agency or penalty. A court challenge was not searched for in this run.. Checked November 15, 2026.

Human operator: Hold a valid driver's license for the class of vehicle when operating an autonomous or fully autonomous vehicle. When triggered · Ongoing · Applies when: An individual manually operates an autonomous or fully autonomous vehicle. · Ark. Code 27-51-2004

Remote operator: Hold a valid driver's license for the class of vehicle when acting as remote operator of a fully autonomous vehicle. When triggered · Ongoing · Applies when: An individual acts as remote operator of a fully autonomous vehicle. · Ark. Code 27-51-2004

Arkansas autonomous vehicle pilot program (Act 468 of 2019)

HB 1561, 92nd General Assembly, Regular Session (2019); Act 468 of 2019; enacted as Ark. Code 27-51-1410; the pilot program now appears in Ark. Code 27-51-2002 as amended by Act 619 of 2021. Enforced by: The State Highway Commission implements the subchapter and adopts rules; neither act names an enforcement agency or penalty. A court challenge was not searched for in this run.. Checked November 15, 2026.

Person operating autonomous vehicles: Operate autonomous or fully autonomous vehicles only under a pilot program submitted to the State Highway Commission; it is automatically approved 60 days after submission. When triggered · Once · Applies when: Before operating autonomous or fully autonomous vehicles on Arkansas streets and highways. · Ark. Code 27-51-2002(a), as amended by Act 619 of 2021; first enacted as 27-51-1410(b)

Person operating autonomous vehicles: Include in the program its commercial purpose, proof of required liability insurance, and statements that the vehicle meets traffic, railroad crossing, minimal risk and federal safety requirements. When triggered · Once · Applies when: Every pilot program submitted to the State Highway Commission; it must also describe how a fully autonomous vehicle's remote operator meets crash-scene duties. · Ark. Code 27-51-2002(b)(1)-(4), as amended by Act 619 of 2021; Act 1052 of 2019 § 1

Person operating autonomous vehicles: Operate no more than three autonomous or fully autonomous vehicles simultaneously on the streets and highways of Arkansas. When triggered · Ongoing · Applies when: While operating under a pilot program. · Ark. Code 27-51-2002(c)(2), as amended by Act 619 of 2021; first enacted as 27-51-1410(d)(2)

Person operating autonomous vehicles: Register and title each autonomous or fully autonomous vehicle under the Motor Vehicle Administration, Certificate of Title, and Antitheft Act. When triggered · Once · Applies when: Any autonomous or fully autonomous vehicle operated in Arkansas. · Ark. Code 27-51-2002(d), as amended by Act 619 of 2021

Arkansas sexual deepfake offense and civil action against image-generation providers (Act 827 of 2025)

HB 1529, 95th General Assembly, Regular Session (2025); Act 827 of 2025; adds Ark. Code 5-14-139 and 16-118-119. Enforced by: Criminal prosecution for the offense in 5-14-139 (the Act does not name the prosecuting office). The Arkansas Attorney General may bring a civil action on the state's behalf against a provider or developer of image generation technology. A web search on November 15, 2026 found no court challenge to this Act.. Checked November 15, 2026.

Person: Do not knowingly create or distribute deepfake visual material of an identifiable person, without that person's consent, that depicts them nude or engaged in sexual conduct. When triggered · Ongoing · Applies when: The material would lead an ordinary viewer to conclude it shows the depicted person nude or engaged in sexual contact, intercourse or sexually explicit conduct. · Ark. Code 5-14-139(b)

Provider or developer of image generation technology: Keep reasonable safeguards against your prompt-based image generation technology generating deepfake visual material; without them, the attorney general may sue you. When triggered · Ongoing · Applies when: Without safeguards, the attorney general may sue if the technology substantially or entirely generated material that violates 5-14-139; injured persons may also sue providers and developers. · Ark. Code 16-118-119(a), (b)(1)(A)

Arkansas social media harmful design and algorithm liability (Act 901 of 2025)

SB 612, 95th General Assembly, Regular Session (2025); Act 901 of 2025; adds Ark. Code 4-88-1501 to 4-88-1503. Enforced by: A civil penalty action for knowing and willful violations (the Act does not name who brings it), and private suits by parents or guardians. Court status: on December 15, 2025 the U.S. District Court for the Western District of Arkansas preliminarily enjoined the Attorney General and other defendants from enforcing the Act's provisions they enforce against NetChoice members (NetChoice v. Griffin, No. 5:25-cv-05140). The order does not reach private suits under 4-88-1503(b).. Checked November 15, 2026.

Social media platform: Do not use a design, algorithm or feature you know, or should know through reasonable care, causes a user to buy controlled substances, develop an eating disorder, or attempt suicide. When triggered · Ongoing · Applies when: Any user accessing the platform in Arkansas. · Ark. Code 4-88-1502(a)(1)-(3)Blocked in court for members of NetChoice. A federal preliminary injunction bars the Attorney General and other defendants from enforcing Act 901 provisions they enforce against NetChoice members; private suits under 4-88-1503(b) are not enjoined. NetChoice v. Griffin, No. 5:25-cv-05140-TLB (W.D. Ark.), Dec 15, 2025

Social media platform: Do not use a design, algorithm or feature you know, or should know through reasonable care, causes a user to develop or sustain an addiction to the platform. When triggered · Ongoing · Applies when: Any user accessing the platform in Arkansas. · Ark. Code 4-88-1502(a)(4)Blocked in court for members of NetChoice. A federal preliminary injunction bars the Attorney General and other defendants from enforcing Act 901 provisions they enforce against NetChoice members; private suits under 4-88-1503(b) are not enjoined. NetChoice v. Griffin, No. 5:25-cv-05140-TLB (W.D. Ark.), Dec 15, 2025

Social media platform: Within 30 days of discovering a design, algorithm or feature with more than de minimis risk of a listed harm other than suicide, correct it to avoid a violation. When triggered · Each time it happens · Applies when: The platform discovers the risk; the correction route does not apply to the suicide item. · Ark. Code 4-88-1502(b)Blocked in court for members of NetChoice. A federal preliminary injunction bars the Attorney General and other defendants from enforcing Act 901 provisions they enforce against NetChoice members; private suits under 4-88-1503(b) are not enjoined. NetChoice v. Griffin, No. 5:25-cv-05140-TLB (W.D. Ark.), Dec 15, 2025

California

190 items from 47 laws

California AI Transparency Act

Chapter 291, Statutes of 2024 (SB 942); Business and Professions Code Division 8, Chapter 25, §§ 22757-22757.6, as amended by AB 853 (Chapter 674, Statutes of 2025), SB 1000 (Chapter 861, Statutes of 2026) and AB 2713 (Chapter 856, Statutes of 2026). Enforced by: Attorney General, a city attorney, or a county counsel (civil action).. Checked November 11, 2026.

Covered provider: Offer a free, publicly accessible disclosure verification tool showing whether content was created or altered by its system and outputting detected system provenance data; support uploads, URLs and an API. Starts August 2, 2026 · Ongoing · Applies when: Any covered provider; a compliant third-party tool reachable from the system's interface also satisfies this. · Bus. & Prof. Code § 22757.2(a), (e)

Covered provider: Collect user feedback on the tool; do not collect, keep or share personal information from the tool beyond what is strictly necessary; do not condition access on personal information. Starts August 2, 2026 · Ongoing · Applies when: Operating the disclosure verification tool. Personal information may be kept only to contact users who opt in. · Bus. & Prof. Code § 22757.2(b)-(d)

Covered provider: Include a latent disclosure in image, video or audio content its system creates or alters: provider name, system name and version, time and date, unique identifier, whether created or altered. Starts August 2, 2026 · Ongoing · Applies when: To the extent technically feasible; the disclosure must be permanent or extraordinarily difficult to remove, tool-compatible and consistent with industry standards. Minor modifications are excluded. · Bus. & Prof. Code § 22757.3(a)

Covered provider: From January 1, 2029, the latent disclosure must also say whether the system is designed to function primarily as assistive technology. Starts January 1, 2029 · Ongoing · Applies when: Content created or altered on and after January 1, 2029. · Bus. & Prof. Code § 22757.3(a)(1)(F)

Covered provider: When licensing its system, notify the licensee of the licensee's obligations under the chapter. When triggered · Each time it happens · Applies when: At the time a license to a third party is provided. · Bus. & Prof. Code § 22757.3(b)(1)

Covered provider: Within 72 hours of discovering that an identifiable licensee made the system noncompliant, terminate the license or notify the licensee of the noncompliance and its reporting requirement. When triggered · Each time it happens · Applies when: When the provider knows a third-party licensee modified the system so it no longer complies. The provider has no duty to monitor licensees. · Bus. & Prof. Code § 22757.3(b)(2), (5)

Third-party licensee: Within 96 hours of the provider's notice, bring the system into compliance or stop using and offering it, and report to the provider which was done. When triggered · Each time it happens · Applies when: After receiving a noncompliance notice from the covered provider. · Bus. & Prof. Code § 22757.3(b)(3)

Covered provider: Report the licensee to the Attorney General if no report arrives, or the report shows the licensee neither fixed nor stopped using the system. When triggered · Each time it happens · Applies when: After the licensee's 96-hour reporting window. · Bus. & Prof. Code § 22757.3(b)(4), (c)

Covered provider: Do not falsely represent that a generative AI system is designed to function primarily as assistive technology. Starts September 30, 2026 · Ongoing · Applies when: Any representation about assistive-technology status. · Bus. & Prof. Code § 22757.3(d)

Large online platform: Detect provenance data associated with content; show users whether system provenance data or a digital signature identifies content as AI-generated, AI-altered or device-captured; let users inspect that data. Starts January 1, 2027 · Ongoing · Applies when: Content distributed on the platform. Inspection may be in the interface, by link, or by download. Personal information need not be shown. · Bus. & Prof. Code § 22757.3.1(a), (b) as amended by AB 2713 (Stats. 2026, Ch. 856)

Large online platform: Do not knowingly strip system provenance data or digital signatures from content uploaded to, distributed on or downloaded from the platform. Starts January 1, 2027 · Ongoing · Applies when: To the extent technically feasible; only data compliant or interoperable with widely adopted specifications. · Bus. & Prof. Code § 22757.3.1(c), (d) as amended by AB 2713 (Stats. 2026, Ch. 856)

GenAI hosting platform: Do not knowingly make available a generative AI system that does not place the latent disclosures required of covered providers. Starts January 1, 2027 · Ongoing · Applies when: Hosting source code or model weights for download by California residents. · Bus. & Prof. Code § 22757.3.2

Capture device manufacturer: Give users the option of a latent disclosure naming the manufacturer, the device name and version, and the time and date; embed latent disclosures by default. Starts January 1, 2028 · Ongoing · Applies when: Devices first produced for sale in California on or after January 1, 2028; only to the extent technically feasible and compliant with widely adopted specifications. · Bus. & Prof. Code § 22757.3.3

California AI auditor registration law (AB 1405)

Chapter 178, Statutes of 2026 (AB 1405), approved September 9, 2026; adds Government Code §§ 11549.80-11549.86. Enforced by: Government Operations Agency, which may investigate, remove an auditor from the registry and refer to the Attorney General; the California Board of Accountancy for licensed accountants.. Checked November 11, 2026.

AI auditor: Do not offer, sell or conduct a covered AI audit unless registered with the Government Operations Agency. Starts January 1, 2029 · Ongoing · Applies when: Beginning January 1, 2029. · Gov. Code § 11549.82.5

AI auditor: Provide the agency the listed registration information, including the laws audited under, certifications, and a standard operating procedure; update it within 90 days of a material change. Starts January 1, 2029 · Ongoing · Applies when: At registration and after any change that materially affects the published information. · Gov. Code § 11549.83(a), (b)

AI auditor: Conduct covered AI audits in accordance with widely recognized industry standards appropriate to the system or model, where such standards are available. Starts January 1, 2029 · Ongoing · Applies when: Every covered AI audit by a registered auditor. · Gov. Code § 11549.83(c)

AI auditor: Give the auditee a signed, dated report covering scope, results, deficiencies and remedies, adherence to internal safety protocols, and the audit's limitations. When triggered · Each time it happens · Applies when: Each covered AI audit. · Gov. Code § 11549.83(d)(1)

AI auditor: Keep the information given to auditees and the documentation supporting audit results for at least 10 years. Starts January 1, 2029 · Ongoing · Applies when: Every covered AI audit. · Gov. Code § 11549.83(e)

AI auditor: Stay independent of the auditee: no impairing interests, no auditing your own work, no job talks during the audit, no staff recently employed there on the subject. Starts January 1, 2029 · Ongoing · Applies when: Every covered AI audit. The staffing bar covers the preceding 12 months. Reasonable audit fees alone are not a prohibited interest. · Gov. Code § 11549.83(f)(1)

AI auditor: Do not prevent or retaliate against employees who report noncompliance to the Attorney General, the Labor Commissioner or the agency's misconduct mechanism. Starts January 1, 2029 · Ongoing · Applies when: When the employee has reasonable cause to believe the auditor is out of compliance with the chapter. · Gov. Code § 11549.83(g)

AI auditor: Display the registration number clearly and conspicuously on all advertising that offers or solicits covered AI audit services. Starts January 1, 2029 · Ongoing · Applies when: All advertising materials for covered AI audit services. · Gov. Code § 11549.83.5

California AI autonomy defense law (AB 316)

Chapter 672, Statutes of 2025 (AB 316), approved October 13, 2025; adds Civil Code § 1714.46. Enforced by: Courts, in the civil action where the defense would be raised.. Checked November 11, 2026.

Defendant who developed, modified or used AI: Do not assert as a defense that the artificial intelligence autonomously caused the harm to the plaintiff. Starts January 1, 2026 · Ongoing · Applies when: Any action alleging that AI the defendant developed, modified or used caused harm to the plaintiff. · Civ. Code § 1714.46(b)

California AI clinical decision support and health care chatbot law (AB 1979)

Chapter 854, Statutes of 2026 (AB 1979), approved September 30, 2026; adds Business and Professions Code § 22758.5 and amends Civil Code §§ 56.05 and 56.06. Enforced by: For the clinical provisions: the Medical Board of California or Osteopathic Medical Board for physicians, and health professional licensing boards by injunction. For chatbot businesses: the medical privacy law's remedies, including patient suits and public enforcement.. Checked November 11, 2026.

Health facility, clinic or physician practice: Take reasonable steps so a licensed provider keeps the ability to exercise independent professional judgment whenever care is informed by a clinical decision support system. Starts January 1, 2027 · Ongoing · Applies when: Patient care informed by the output of a clinical decision support system. · Bus. & Prof. Code § 22758.5(a)

Health facility, clinic or physician practice: Do not use AI to direct or supervise unlicensed personnel in a clinical function that requires a license, or to perform such a function independently. Starts January 1, 2027 · Ongoing · Applies when: Any tool, system or device that includes artificial intelligence. · Bus. & Prof. Code § 22758.5(b)(1)

Business offering a health care chatbot: Keep medical information to the same confidentiality standards as a health care provider under the Confidentiality of Medical Information Act. Starts January 1, 2027 · Ongoing · Applies when: A business that offers a health care chatbot to a consumer; it is deemed a provider of health care for that Act only. · Civ. Code § 56.06(f), (g)

California AI in utilization review law (SB 1120)

Chapter 879, Statutes of 2024 (SB 1120); Health and Safety Code § 1367.01(k) and Insurance Code § 10123.135(j). Enforced by: Department of Managed Health Care (health plans) and the Insurance Commissioner (disability insurers).. Checked November 11, 2026.

Health care service plan or disability insurer: Ensure the tool bases determinations on the enrollee's own clinical history and circumstances, not solely on a group dataset, and does not supplant provider decisionmaking. Starts January 1, 2025 · Ongoing · Applies when: Any AI, algorithm or software tool used for prospective, retrospective or concurrent utilization review based on medical necessity. · Health & Saf. Code § 1367.01(k)(1)(A), (B), (D), (4)

Health care service plan or disability insurer: Do not let the tool deny, delay or modify care on medical necessity; only a licensed physician or competent licensed health professional may make that determination. Starts January 1, 2025 · Ongoing · Applies when: Every medical necessity determination. · Health & Saf. Code § 1367.01(k)(2)

Health care service plan or disability insurer: Ensure the tool does not discriminate, is fairly and equitably applied, does not cause harm, and that patient data is not used beyond its intended purpose. Starts January 1, 2025 · Ongoing · Applies when: Any covered tool. · Health & Saf. Code § 1367.01(k)(1)(E), (F), (J), (K)

Health care service plan or disability insurer: Keep the tool open to regulator inspection and audit, disclose its use and oversight in written policies, and periodically review and revise its performance, use and outcomes. Starts January 1, 2025 · Ongoing · Applies when: Any covered tool. · Health & Saf. Code § 1367.01(k)(1)(G), (H), (I)

California AI independent verification organizations law (SB 813)

Chapter 179, Statutes of 2026 (SB 813), approved September 9, 2026; adds Government Code §§ 8898-8898.4. Enforced by: Government Operations Agency, through suspension or termination of the IVO designation.. Checked November 11, 2026.

Independent verification organization (IVO): Submit an annual report to the agency and the Legislature summarizing standards and methodologies and any changes to governance, funding or application information. When triggered · Every year · Applies when: Annually, and no sooner than 12 months after initial designation. · Gov. Code § 8898.3(a)

Independent verification organization (IVO): Describe the character and justification of any redaction in published documents, and keep the unredacted information for five years. When triggered · Each time it happens · Applies when: When the IVO redacts documents to protect trade secrets, cybersecurity, public safety or national security, or to comply with law. · Gov. Code § 8898.3(b), (c)

Independent verification organization (IVO): Do not accept payment terms that condition any payment, or its amount, on the results of the assessment. When triggered · Ongoing · Applies when: Stated as a designation criterion the agency must consider. Payment at reasonable market rates from the assessed party is allowed. · Gov. Code § 8898.1(c)(2)(C)

California AI political advertisement disclosure law (AB 2355)

Chapter 260, Statutes of 2024 (AB 2355), approved September 17, 2024; adds Government Code § 84514. Enforced by: Fair Political Practices Commission.. Checked November 11, 2026.

Political committee: Include, clearly and conspicuously, the disclosure: Ad generated or substantially altered using artificial intelligence. Starts January 1, 2025 · Ongoing · Applies when: Any qualified political advertisement the committee creates, originally publishes or originally distributes. Display or speak it in the manner set by §§ 84504 to 84504.5. · Gov. Code § 84514(a)

California AI voice robocall disclosure law (AB 2905)

Chapter 316, Statutes of 2024 (AB 2905); amends Public Utilities Code § 2874. Enforced by: California Public Utilities Commission, on complaint or its own motion.. Checked November 11, 2026.

Caller using an automatic dialing-announcing device: Before the recording plays, have a live, natural voice say what the call is and who is calling, ask for consent, and say if the message uses an artificial voice. Starts January 1, 2025 · Each time it happens · Applies when: Every call placed with an automatic dialing-announcing device. · Pub. Util. Code § 2874(a)

Caller using an automatic dialing-announcing device: Disconnect the device from the line when either party ends the call. Starts January 1, 2025 · Each time it happens · Applies when: Every call placed with an automatic dialing-announcing device. · Pub. Util. Code § 2874(b)

California AI-generated child sexual abuse material: possession and distribution (AB 1831)

Chapter 926, Statutes of 2024 (AB 1831), approved September 29, 2024; amends Penal Code §§ 311, 311.2, 311.11 and 311.12. Enforced by: Criminal prosecution; the sections do not name the prosecuting office. A web search on November 15, 2026 found no court ruling blocking these provisions.. Checked November 15, 2026.

Person: Do not knowingly possess or control obscene digitally altered or AI-generated matter depicting what appears to be a minor engaging in or simulating sexual conduct. Starts January 1, 2025 · Ongoing · Applies when: Any such matter, in any format. · Penal Code § 311.11(a)(2)

Person: Do not produce, bring into California, or distribute, exhibit or exchange obscene AI-generated or digitally altered depictions of what appears to be a minor in sexual conduct. Starts January 1, 2025 · Ongoing · Applies when: Penalties differ by whether it is for commercial consideration, to adults, or to minors. · Penal Code § 311.2(b)-(d)

California AI-generated child sexual abuse material: sending, producing and exploitation offenses (SB 1381)

Chapter 929, Statutes of 2024 (SB 1381), approved September 29, 2024; amends Penal Code §§ 311.1, 311.3, 311.4 and 312.3. Enforced by: Criminal prosecution; the sections do not name the prosecuting office. A web search on November 15, 2026 found no court ruling blocking these provisions.. Checked November 15, 2026.

Person: Do not send into California, or prepare, produce, duplicate or print to distribute, obscene matter containing AI-generated data depicting what appears to be a minor in sexual conduct. Starts January 1, 2025 · Ongoing · Applies when: Includes offering, distributing, exhibiting or exchanging such matter, with or without payment. · Penal Code § 311.1(a)

Person: Do not knowingly develop, duplicate, print or exchange digitally altered or AI-generated matter depicting a person under 18 engaged in sexual conduct. Starts January 1, 2025 · Ongoing · Applies when: The matter need not be obscene. From January 1, 2027 (SB 1276), the duty also covers downloading, streaming or accessing such matter, and requires knowing it depicts a minor; unsolicited matter received without knowledge or consent is excluded. · Penal Code § 311.3(a)-(b)

California CCPA personal information in AI systems (AB 1008)

AB 1008 (2023-2024), Chapter 802, Statutes of 2024; Civ. Code § 1798.140(v)(4). Enforced by: California Privacy Protection Agency (administrative fines) and the Attorney General (civil penalties and injunctions).. Checked November 15, 2026.

Business: Treat personal information held in AI systems that can output it as personal information under the CCPA, applying the act's consumer-rights and disclosure duties to it. Starts January 1, 2025 · Ongoing · Applies when: When an AI system, compressed or encrypted file or metadata is capable of outputting a consumer's personal information. · Civ. Code § 1798.140(v)(4)(C)

California Defending Democracy from Deepfake Deception Act (AB 2655)

Chapter 261, Statutes of 2024 (AB 2655), approved September 17, 2024; Elections Code §§ 20510-20520. Enforced by: The Attorney General, a district attorney or a city attorney (§ 20516); a candidate, elected official or elections official who reported the content (§ 20515(b)). See the court_block on each duty.. Checked November 15, 2026.

Large online platform: Remove reported deceptive content showing a candidate, elections official or elected official doing or saying something they did not, within 72 hours of a report. Starts January 1, 2025 · Each time it happens · Applies when: The content is reasonably likely to harm a candidate or falsely undermine confidence in results, is posted in the 120 days before an election (to 60 days after for elections officials), and the platform knows or recklessly disregards this. · Elec. Code § 20513(a)-(b), (e)Blocked in court for Any provider of an interactive computer service as defined in 47 U.S.C. 230 (the order names Facebook, Instagram and YouTube); X Corp. and Rumble are also covered by a permanent injunction in the final judgment.. The Attorney General and Secretary of State may not enforce AB 2655 in its entirety against these providers. The order binds only those two officials and ends if an appeals court vacates the judgment. Kohls v. Bonta, No. 2:24-cv-02527-JAM-CKD (E.D. Cal.), Order on Stipulation Regarding AB 2655 Enforcement, Aug 28, 2025

Large online platform: Identify and remove identical or substantially similar reposts of content the platform previously removed under the chapter. Starts January 1, 2025 · Each time it happens · Applies when: During the same removal periods. · Elec. Code § 20513(c)Blocked in court for Any provider of an interactive computer service as defined in 47 U.S.C. 230 (the order names Facebook, Instagram and YouTube); X Corp. and Rumble are also covered by a permanent injunction in the final judgment.. The Attorney General and Secretary of State may not enforce AB 2655 in its entirety against these providers. The order binds only those two officials and ends if an appeals court vacates the judgment. Kohls v. Bonta, No. 2:24-cv-02527-JAM-CKD (E.D. Cal.), Order on Stipulation Regarding AB 2655 Enforcement, Aug 28, 2025

Large online platform: Label reported deceptive content "This _____ has been manipulated and is not authentic" within 72 hours, with a click-through explanation. Starts January 1, 2025 · Each time it happens · Applies when: Covers content outside the removal window or in ads and election communications, during the six months before an election (to 60 days after for election administration content). · Elec. Code § 20514Blocked in court for Any provider of an interactive computer service as defined in 47 U.S.C. 230 (the order names Facebook, Instagram and YouTube); X Corp. and Rumble are also covered by a permanent injunction in the final judgment.. The Attorney General and Secretary of State may not enforce AB 2655 in its entirety against these providers. The order binds only those two officials and ends if an appeals court vacates the judgment. Kohls v. Bonta, No. 2:24-cv-02527-JAM-CKD (E.D. Cal.), Order on Stipulation Regarding AB 2655 Enforcement, Aug 28, 2025

Large online platform: Give California residents an easy way to report content for removal or labeling, and respond to each report within 36 hours describing any action taken. Starts January 1, 2025 · Ongoing · Applies when: Always. · Elec. Code § 20515(a)Blocked in court for Any provider of an interactive computer service as defined in 47 U.S.C. 230 (the order names Facebook, Instagram and YouTube); X Corp. and Rumble are also covered by a permanent injunction in the final judgment.. The Attorney General and Secretary of State may not enforce AB 2655 in its entirety against these providers. The order binds only those two officials and ends if an appeals court vacates the judgment. Kohls v. Bonta, No. 2:24-cv-02527-JAM-CKD (E.D. Cal.), Order on Stipulation Regarding AB 2655 Enforcement, Aug 28, 2025

California Protecting Our Kids from Social Media Addiction Act (SB 976)

Chapter 321, Statutes of 2024 (SB 976); Health and Safety Code Division 20, Chapter 24, §§ 27000-27007. Enforced by: California Attorney General only, in a civil action brought in the name of the people of the State of California. Court status: a federal court has blocked enforcement of the notification limits (§ 27002(a)) and the annual disclosure (§ 27005), and the Ninth Circuit ordered the like-count default (§ 27002(b)(3)) blocked. The personalized-feed provisions and private-mode default are in force (NetChoice v. Bonta, 9th Cir. Sept. 9, 2025).. Checked November 14, 2026.

Operator of an addictive internet-based service or application: Do not provide an addictive feed to a user you actually know is a minor unless you have verifiable parental consent. Starts January 1, 2025 · Ongoing · Applies when: The service offers an addictive feed as a significant part of what it provides. · Health & Safety Code § 27001(a)(1)(A), (a)(2)

Operator of an addictive internet-based service or application: Do not provide an addictive feed to a user unless you have reasonably determined the user is not a minor, or have verifiable parental consent. Starts January 1, 2027 · Ongoing · Applies when: From January 1, 2027, under age-assurance rules the Attorney General must adopt. · Health & Safety Code § 27001(a)(1)(B), (a)(2); § 27006(b)

Operator of an addictive internet-based service or application: Use information collected to determine age or verify parental consent only for compliance, and delete it immediately after that use unless law requires keeping it. Starts January 1, 2025 · Ongoing · Applies when: Whenever age or parental consent is checked under this chapter. · Health & Safety Code § 27001(b)

Operator of an addictive internet-based service or application: Do not send notifications to a known minor from midnight to 6 a.m., or 8 a.m. to 3 p.m. on school-year weekdays, without verifiable parental consent. Starts January 1, 2025 · Ongoing · Applies when: User's local time; school-year weekdays are Monday to Friday, September through May. From 2027 this covers users not reasonably determined to be adults. · Health & Safety Code § 27002(a)Blocked in court. A federal court preliminarily enjoined the Attorney General from enforcing this duty in December 2024; California did not appeal that part, as the Ninth Circuit noted. NetChoice v. Bonta, No. 25-146 (9th Cir.); N.D. Cal. No. 5:24-cv-07885, Sep 9, 2025

Operator of an addictive internet-based service or application: Give verified parents a setting to block access and notifications during hours they choose, on by default from midnight to 6 a.m. Starts January 1, 2025 · Ongoing · Applies when: The user is a minor with a verified parent. · Health & Safety Code § 27002(b)(1)

Operator of an addictive internet-based service or application: Give verified parents a daily time limit on the addictive feed, set by default to one hour a day. Starts January 1, 2025 · Ongoing · Applies when: The user is a minor with a verified parent. · Health & Safety Code § 27002(b)(2)

Operator of an addictive internet-based service or application: Give verified parents a setting that hides like counts and other feedback on media in the feed, on by default. Starts January 1, 2025 · Ongoing · Applies when: The user is a minor with a verified parent. · Health & Safety Code § 27002(b)(3)Blocked in court. The Ninth Circuit held this default setting likely unconstitutional and sent the case back with instructions to enjoin its enforcement. NetChoice v. Bonta, No. 25-146 (9th Cir.); N.D. Cal. No. 5:24-cv-07885, Sep 9, 2025

Operator of an addictive internet-based service or application: Give verified parents a way to make the default feed non-personalized, using no information about the child except age or minor status. Starts January 1, 2025 · Ongoing · Applies when: The user is a minor with a verified parent. · Health & Safety Code § 27002(b)(4)

Operator of an addictive internet-based service or application: Give verified parents a private-mode setting, on by default, so only connected users can view or respond to the child's posts. Starts January 1, 2025 · Ongoing · Applies when: The user is a minor with a verified parent. · Health & Safety Code § 27002(b)(5)

Operator of an addictive internet-based service or application: Do not withhold, degrade or charge more for any product, service or feature because a user or parent uses these rights or protections. Starts January 1, 2025 · Ongoing · Applies when: A user or parent uses a right or protection in this chapter. An operator may choose not to serve minors. · Health & Safety Code § 27004(a)

Operator of an addictive internet-based service or application: Publicly disclose each year the number of minor users, how many have parental consent for an addictive feed, and how many have the parental controls on. Starts January 1, 2025 · Every year · Applies when: Each year. · Health & Safety Code § 27005Blocked in court. A federal court preliminarily enjoined the Attorney General from enforcing this duty in December 2024; California did not appeal that part, as the Ninth Circuit noted. NetChoice v. Bonta, No. 25-146 (9th Cir.); N.D. Cal. No. 5:24-cv-07885, Sep 9, 2025

California autonomous vehicle emergency response and remote operation law (SB 1246)

Chapter 1021, Statutes of 2026 (SB 1246), approved September 30, 2026; Vehicle Code § 38751 (new version), § 38754 and §§ 38800-38807; Penal Code § 13519.18. Enforced by: A city attorney or county counsel, by civil action, for violations within its jurisdiction; the DMV through deployment permits (§ 38803(c)). A violation of Chapter 3 is not a crime.. Checked November 15, 2026.

Autonomous vehicle manufacturer: Reserve or contract enough communications capacity for the maximum number of concurrent remote assistance or teleoperation sessions your capacity planning identifies. Starts July 1, 2028 · Ongoing · Applies when: Manufacturers operating under a testing or deployment permit. · Veh. Code § 38751(b)(1)(D) as added by SB 1246

Autonomous vehicle manufacturer: Staff and assign remote drivers or remote assistants so they can immediately respond to every call or incident for which their support is requested. Starts July 1, 2028 · Ongoing · Applies when: Except where vehicle connectivity fails because of broader telecommunications failures outside the manufacturer's control. · Veh. Code § 38751(b)(1)(D) as added by SB 1246

Autonomous vehicle manufacturer: Acknowledge receipt of an emergency geofencing message to the requesting official within two minutes. Starts July 1, 2028 · Each time it happens · Applies when: Each emergency geofencing message from an emergency response official. · Veh. Code § 38751(d)(5) as added by SB 1246

Autonomous vehicle manufacturer: Use only remote drivers located in the United States who hold a valid California driver's license of the appropriate class with required endorsements. Starts July 1, 2028 · Ongoing · Applies when: Any remote driver. · Veh. Code § 38754(a)

Autonomous vehicle manufacturer: Immediately dispatch local incident technicians after a crash or incident immobilizing a vehicle or obstructing traffic, or on request from an emergency official or 911 dispatch. Starts July 1, 2028 · Each time it happens · Applies when: Each such incident or request. · Veh. Code § 38801(a)(1), (b)(1)

Autonomous vehicle manufacturer: In a fleetwide emergency or system failure, immediately notify affected local jurisdictions and dispatch, and deploy technicians where vehicles cannot be remotely recovered. Starts July 1, 2028 · Each time it happens · Applies when: A failure that may create a traffic hazard or impede emergency response. · Veh. Code § 38801(a)(2)

Autonomous vehicle manufacturer: For commercial vehicles without manual controls, ensure remote staff can put the vehicle in neutral, move it as directed, or turn it off and keep it stationary. Starts July 1, 2028 · Ongoing · Applies when: The DMV may not permit deployment of a vehicle that does not comply. · Veh. Code § 38803(a), (c)

Autonomous vehicle manufacturer: If a commercial autonomous vehicle cannot be relocated remotely, immediately dispatch a local incident technician or a tow operator as an emergency official requests. Starts July 1, 2028 · Each time it happens · Applies when: Each such vehicle. · Veh. Code § 38803(b)

Autonomous vehicle manufacturer: Keep records of technician response times and of responses to fleetwide failures, emergencies, immobilizations, obstructions, crashes and official requests; give them to the DMV quarterly. Starts July 1, 2028 · Ongoing · Applies when: Ongoing; the DMV publishes quarterly summary statistics by manufacturer. · Veh. Code § 38805(a)-(b), (d)

California autonomous vehicle emergency response law (AB 1777)

Chapter 682, Statutes of 2024 (AB 1777); Vehicle Code §§ 38750 (amended), 38751, 38752 and 38753. Enforced by: Department of Motor Vehicles, through permits: it may not renew, reinstate or expand a permit's operational design domain unless the manufacturer certifies full compliance with § 38751(b).. Checked November 14, 2026.

Manufacturer of autonomous vehicles: Keep a dedicated emergency response phone line, free to public agencies, open to emergency officials whenever any of your autonomous vehicles is on a public road. Starts July 1, 2026 · Ongoing · Applies when: Operating under a DMV testing or deployment permit. · Veh. Code § 38751(b)(1)(A)

Manufacturer of autonomous vehicles: Continuously monitor every vehicle and staff the line so a remote human operator who can immobilize or move the vehicle answers within 30 seconds. Starts July 1, 2026 · Ongoing · Applies when: Operating under a DMV testing or deployment permit. · Veh. Code § 38751(b)(1)(B), (C)

Manufacturer of autonomous vehicles: Equip each vehicle with a two-way voice device so nearby emergency officials reach a remote operator within 30 seconds who can immobilize or move it. Starts July 1, 2026 · Ongoing · Applies when: Operating under a DMV testing or deployment permit. Does not apply to commercial motor vehicles of 10,001 pounds or more, except passenger transportation vehicles. · Veh. Code § 38751(b)(2)

Manufacturer of autonomous vehicles: Give police and firefighters access to any in-vehicle override system in emergencies, and train them on it, reviewing and updating the training regularly. Starts July 1, 2026 · Ongoing · Applies when: The vehicle has an override that lets someone physically present move it. Operating under a DMV testing or deployment permit. Does not apply to commercial motor vehicles of 10,001 pounds or more, except passenger transportation vehicles. · Veh. Code § 38751(b)(3)

Manufacturer of autonomous vehicles: Within two minutes of an emergency geofencing message from an emergency response official, direct your fleet to leave or avoid the identified area. Starts July 1, 2026 · Each time it happens · Applies when: An emergency response official sends an emergency geofencing message. · Veh. Code § 38751(d)(1), (2)

Manufacturer of autonomous vehicles: Within 30 business days of an official's notice that they want to issue geofencing messages, give them everything needed to send them and for you to respond. Starts July 1, 2026 · Each time it happens · Applies when: An emergency response official gives notice that it wishes to begin issuing emergency geofencing messages. · Veh. Code § 38751(d)(3)

Manufacturer of autonomous vehicles: Send the DMV any notice of autonomous vehicle noncompliance issued by a peace officer within 72 hours, or within the time the DMV sets. When triggered · Each time it happens · Applies when: A peace officer issues a notice for a traffic violation while the autonomous technology is engaged. Operative only once the DMV adopts its regulations on these notices. · Veh. Code § 38752(c), (e)

California ban on deceptive candidate deepfakes within 60 days of an election (AB 730)

Chapter 493, Statutes of 2019 (AB 730), Elections Code § 20010, as amended by AB 972 (Chapter 745, Statutes of 2022). Enforced by: The candidate shown, by civil action. A web search on November 15, 2026 found no court ruling blocking § 20010.. Checked November 15, 2026. Ends January 1, 2027.

Person, committee or other entity: Within 60 days of an election, do not distribute, with actual malice, materially deceptive media of a candidate meant to injure them or sway votes, unless disclosed as manipulated. Starts January 1, 2023 · Ongoing · Applies when: The candidate will appear on the ballot. The disclosure reads "This _____ has been manipulated" (image, video or audio) and must meet the size and timing rules in subdivision (b). · Elec. Code § 20010(a)-(b)

California ban on toys with companion chatbots (SB 867)

Chapter 189, Statutes of 2026 (SB 867), approved September 10, 2026; amends Business and Professions Code § 22601 and adds § 22604.5 (Companion Chatbots chapter, §§ 22601-22606). Enforced by: Private civil action by a person who suffers injury in fact; the chapter names no public enforcer.. Checked November 11, 2026.

Person (toy manufacturer or seller): Do not manufacture, sell, exchange, possess for sale, or offer for sale or exchange to any retailer a toy that includes a companion chatbot. Starts January 1, 2027 · Ongoing · Applies when: Any toy, meaning a physical product for play by children under 16, from January 1, 2027 until the section is repealed on January 1, 2031. · Bus. & Prof. Code § 22604.5(a)

California clinical decision support bias law (SB 503)

Chapter 857, Statutes of 2026 (SB 503), approved September 30, 2026; adds Business and Professions Code Division 8, Chapter 25.3, § 22758. Enforced by: The law does not name one. Checked November 11, 2026.

Developer and deployer: Make reasonable efforts to identify clinical decision support systems with a known or reasonably foreseeable risk of biased impacts in health programs or activities. Starts January 1, 2027 · Ongoing · Applies when: Systems developed for use by deployers. · Bus. & Prof. Code § 22758(a)(1)

Developer: Make reasonable efforts to mitigate the known or reasonably foreseeable risk of biased impacts from the identified systems. Starts January 1, 2027 · Ongoing · Applies when: Identified clinical decision support systems. · Bus. & Prof. Code § 22758(a)(2)

Developer: Give deployers a statement of intended uses and risks, plus documentation on training data, evaluation, data governance, expected outputs, bias risks and recommended use and monitoring. When triggered · Each time it happens · Applies when: On request or at the initial sale, whichever is earlier, and on release of material updates. Recognized industry standards or impact assessments may be used. · Bus. & Prof. Code § 22758(a)(3)-(5)

Deployer: Regularly monitor the identified systems and take reasonable and proportionate steps to mitigate the known or reasonably foreseeable risk of biased impacts. Starts January 1, 2027 · Ongoing · Applies when: Identified clinical decision support systems in use. · Bus. & Prof. Code § 22758(a)(8)

California common pricing algorithm law (AB 325, Cartwright Act)

Chapter 338, Statutes of 2025 (AB 325), approved October 6, 2025; adds Business and Professions Code §§ 16729 and 16756.1. Enforced by: Attorney General and district attorneys, by criminal prosecution or civil action; any person injured in business or property, by civil action.. Checked November 11, 2026.

Person using or distributing a common pricing algorithm: Do not use or distribute a common pricing algorithm as part of a contract, combination or conspiracy to restrain trade or commerce. Starts January 1, 2026 · Ongoing · Applies when: Any use or distribution, including selling, licensing or providing access by subscription. · Bus. & Prof. Code § 16729(a), (d)(4)

Person using or distributing a common pricing algorithm: Do not coerce another person to set or adopt a price or commercial term recommended by the algorithm for the same or similar products or services in California. Starts January 1, 2026 · Ongoing · Applies when: Any use or distribution of a common pricing algorithm. · Bus. & Prof. Code § 16729(b)

California companion chatbot children's safety law (SB 1119, Adam's Law)

Chapter 190, Statutes of 2026 (SB 1119), approved September 10, 2026; adds Business and Professions Code Division 8, Chapter 11.6, §§ 21810-21818, and amends § 22602. Enforced by: Public prosecutors described in Business and Professions Code § 17204 (civil action); only the Attorney General may seek injunctive or declaratory relief. A harmed child, or a parent or guardian, may also sue.. Checked November 11, 2026.

Operator: Determine each user's age under the Digital Age Assurance Act signals, or apply the child protections and data limits to all users. Starts January 1, 2027 · Ongoing · Applies when: All operators. Parental default settings may not be changed unless the operator has actual knowledge the user is not a child. · Bus. & Prof. Code § 21811

Operator: Before releasing a new or substantially modified companion chatbot, perform and document a risk assessment for child users and take documented measures that reasonably mitigate identified child safety risks. When triggered · Each time it happens · Applies when: Operators that allow child users. One assessment may cover comparable chatbots; an assessment done for another law may qualify. · Bus. & Prof. Code § 21812(a)

Operator: Publish and keep accurate a description of how it complies with the age assurance requirements. Starts July 1, 2027 · Ongoing · Applies when: Operators that prohibit child users. · Bus. & Prof. Code § 21812(b)

Operator: Publish and keep accurate a child safety policy describing how the chatbot prevents and responds to covered harms and how the operator meets the age, data, default-setting and crisis requirements. Starts July 1, 2027 · Ongoing · Applies when: Operators that permit child users. · Bus. & Prof. Code § 21812(c)

Operator: Maintain a documented crisis response protocol: in-service referral to a crisis service and, for a credible imminent threat, notify a linked parent or give streamlined access to 988. Starts July 1, 2027 · Ongoing · Applies when: Operators that permit child users. Child users with linked parent accounts must be told a parent may be notified. · Bus. & Prof. Code § 21812(d)(1)

Operator: Set defaults only a parent can change: no persistent conversational memory, no push notifications, one hour per continuous session and two hours per day. Starts July 1, 2027 · Ongoing · Applies when: Child users. Special memory rules apply at 16 and older; parental controls must allow adjusting each default and disabling access under 16, and must be actively promoted. · Bus. & Prof. Code § 21812(d)(3)

Operator: Give child users age-appropriate safeguards, usage reminders and a periodically reinforced notice that they are interacting with artificial intelligence. Starts July 1, 2027 · Ongoing · Applies when: Operators that permit child users. · Bus. & Prof. Code § 21812(d)(2), (4)

Operator: Take reasonable measures to prevent the chatbot from fourteen listed behaviors toward children, including encouraging self-harm, sexual content, claiming sentience, romantic interest, soliciting purchases and encouraging emotional reliance. Starts July 1, 2027 · Ongoing · Applies when: Operators that permit child users. · Bus. & Prof. Code § 21812(d)(5)

Operator: Provide a clear, accessible interface for safety features, test it with children and parents every two years, and offer a public mechanism for third parties to report child safety incidents. Starts July 1, 2027 · Ongoing · Applies when: Operators that permit child users; first interface test due by January 1, 2028. · Bus. & Prof. Code § 21812(d)(6), (7)

Operator: Notify a parent if practicable and preserve relevant conversation records in exportable form for at least three years; do not delete the child's account while records are preserved. When triggered · Each time it happens · Applies when: When the operator gave an imminent-threat notice or knows a child user died or engaged in serious self-harm based on chatbot conversations. · Bus. & Prof. Code § 21812.5(a), (b)

Operator: Do not show children cross-context behavioral ads or target ads using personal information from chats; label all ads; do not sell children's personal information or use dark patterns. Starts July 1, 2027 · Ongoing · Applies when: Child users. Age-appropriate contextual advertising is allowed using age, coarse location, device information and expressed interest in the session, without profiling. · Bus. & Prof. Code § 21813(a)

Operator: Obtain an independent child safety audit, then every two years and before a substantial modification that raises child safety risk; keep the report while deployed plus five years. Starts January 1, 2029 · Ongoing · Applies when: First audit by January 1, 2029 or before first public availability, whichever is later. Not required before 2032 for operators under $500 million in prior-year gross revenue. · Bus. & Prof. Code § 21814(a), (c) (the version operative because AB 1405 was chaptered)

Operator: Send the Attorney General an attested summary of each audit within 30 business days, and post a high-level summary on its website within 90 days. When triggered · Each time it happens · Applies when: After receiving each independent audit report. The full report must be given to the Attorney General within 30 business days of a for-cause request. · Bus. & Prof. Code § 21814(b), (d)

California companion chatbot law (SB 243)

Chapter 677, Statutes of 2025 (SB 243); Business and Professions Code Division 8, Chapter 22.6, §§ 22601-22606; § 22602 amended by SB 1119 (Chapter 190, Statutes of 2026). Enforced by: Private civil action by a person who suffers injury in fact; the chapter names no public enforcer.. Checked November 11, 2026.

Operator: Give a clear and conspicuous notification that the companion chatbot is artificially generated and not human. Starts January 1, 2026 · Ongoing · Applies when: When a reasonable person interacting with the chatbot would be misled to believe they are interacting with a human. · Bus. & Prof. Code § 22602(a)

Operator: Maintain a protocol for preventing suicidal ideation, suicide or self-harm content, including referring users who express these to crisis services; publish protocol details on its website. Starts January 1, 2026 · Ongoing · Applies when: Required before a companion chatbot may engage with users. · Bus. & Prof. Code § 22602(b)

Operator: For known minors: disclose the AI; by default remind the user every three hours to take a break and that the chatbot is not human; guard against sexual content. Starts January 1, 2026 · Ongoing · Applies when: When the operator knows the user is a minor; the reminder is due at least every three hours of continuing interaction, and the operator must take reasonable measures against visual sexually explicit material and against telling the minor to engage in such conduct. In force through December 31, 2026; SB 1119 removes this subdivision from January 1, 2027. · Bus. & Prof. Code § 22602(c) (as added by Stats. 2025, Ch. 677)

Operator: Report annually to the Office of Suicide Prevention: crisis-referral notifications issued in the prior calendar year and protocols on suicidal ideation; include no user identifiers or personal information. Starts July 1, 2027 · Every year · Applies when: Each year beginning July 1, 2027. · Bus. & Prof. Code § 22603(a), (b)

Operator: Use evidence-based methods for measuring suicidal ideation. Starts January 1, 2026 · Ongoing · Applies when: In operating the platform and preparing the annual report. · Bus. & Prof. Code § 22603(d)

Operator: Disclose on the application, browser or other access format that companion chatbots may not be suitable for some minors. Starts January 1, 2026 · Ongoing · Applies when: Any companion chatbot platform made available to a user in California. · Bus. & Prof. Code § 22604

California crime of creating and sharing realistic fake intimate images (SB 926)

Chapter 289, Statutes of 2024 (SB 926), approved September 19, 2024; Penal Code § 647(j)(4)(A)(ii). Enforced by: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no court challenge.. Checked November 15, 2026.

Person 18 or older: Do not create and distribute a realistic computer-generated or digital intimate image of an identifiable person when you know or should know it will cause serious emotional distress. Starts January 1, 2025 · Ongoing · Applies when: The image would lead a reasonable person to believe it is authentic, and the person shown suffers serious emotional distress. · Penal Code § 647(j)(4)(A)(ii)

California customer service chatbot law (AB 1609)

Chapter 733, Statutes of 2026 (AB 1609), approved and filed September 28, 2026; adds Business and Professions Code Division 8, Chapter 22.6.1, §§ 22625-22629. Enforced by: A public prosecutor (the chapter does not define the term).. Checked November 11, 2026.

Large private business: Do not represent that a customer service chatbot is a human. Starts January 1, 2027 · Ongoing · Applies when: Any customer service chatbot interaction. · Bus. & Prof. Code § 22626(a)

Large private business: Clearly and conspicuously disclose, in the medium the chatbot uses, that it is artificially generated and not human. Starts January 1, 2027 · Ongoing · Applies when: When a reasonable person interacting with the chatbot is likely to be misled to believe they are interacting with a human. · Bus. & Prof. Code § 22626(b), (c)

Large private business: During at least regular business hours, provide on every customer service platform a simple feature that lets customers ask to connect to a customer service agent. Starts January 1, 2027 · Ongoing · Applies when: All platforms through which the business provides customer service, including online chat and telephone. Commonly understood commands, prompts, menu choices or verbal requests suffice. · Bus. & Prof. Code § 22627(a)

Large private business: Make a good faith effort to connect the customer to an agent within 15 minutes, or give a specific appointment within one business day for an agent to call. When triggered · Each time it happens · Applies when: After a customer requests an agent through the feature. A business subject to 16 C.C.R. § 1707.2 may instead return a call within one business hour. · Bus. & Prof. Code § 22627(b)

Large private business: Make a good faith effort to keep any hold or wait after connection to 15 minutes, and cumulative hold, wait and escalation time to one hour. When triggered · Each time it happens · Applies when: After a customer is connected to a customer service agent. · Bus. & Prof. Code § 22627(c)

Large private business: Post the telephone customer service number clearly and conspicuously on its website. Starts January 1, 2027 · Ongoing · Applies when: A business that serves California customers through online platforms and has a telephone customer service platform. · Bus. & Prof. Code § 22627(d)

California data broker registration law, AI disclosure amendments (SB 361)

Chapter 466, Statutes of 2025 (SB 361), approved October 8, 2025; amends Civil Code §§ 1798.99.82, 1798.99.84 and 1798.99.86. Enforced by: California Privacy Protection Agency, by administrative action.. Checked November 11, 2026.

Data broker: Register with the California Privacy Protection Agency, pay the fee, and provide the listed information. Starts January 1, 2026 · Every year · Applies when: On or before January 31 following each year in which the business meets the definition of data broker. · Civ. Code § 1798.99.82(a), (b)

Data broker: State in the registration whether it shared or sold consumers' data to a developer of a GenAI system in the past year. Starts January 1, 2026 · Every year · Applies when: Each annual registration. The same applies to data shared or sold to a foreign actor, the federal government, other states or law enforcement. · Civ. Code § 1798.99.82(b)(2)(O)-(S)

Data broker: Access the state deletion mechanism at least every 45 days and delete requesting consumers' personal information within 45 days of receiving a request. Starts August 1, 2026 · Ongoing · Applies when: Beginning August 1, 2026. Also direct service providers and contractors to delete. · Civ. Code § 1798.99.86(c)(1)

Data broker: Process an unverifiable deletion request as an opt-out of sale or sharing within 45 days. When triggered · Each time it happens · Applies when: When the data broker denies a deletion request because it cannot be verified. · Civ. Code § 1798.99.86(c)(1)(B)

Data broker: Keep deleting the consumer's personal information at least every 45 days, and do not sell or share new personal information about them. Starts August 1, 2026 · Ongoing · Applies when: After a consumer's deletion request has been processed, unless the consumer requests otherwise. · Civ. Code § 1798.99.86(d)

Data broker: Undergo an independent third-party audit of compliance every three years, keep the report six years, and give it to the agency within five business days of a written request. Starts January 1, 2028 · Ongoing · Applies when: Beginning January 1, 2028. · Civ. Code § 1798.99.86(e)

California deceased personality digital replica law (AB 1836)

Chapter 258, Statutes of 2024 (AB 1836), approved September 17, 2024; amends Civil Code § 3344.1. Enforced by: The injured party, by civil action: the persons who hold the deceased personality's rights.. Checked November 11, 2026.

Person using a deceased personality's digital replica: Get prior consent from the person or persons who hold the deceased personality's rights before producing, distributing or making available the digital replica. Starts January 1, 2025 · Ongoing · Applies when: Use of a digital replica of a deceased personality's voice or likeness in an expressive audiovisual work or sound recording, outside the listed exceptions. · Civ. Code § 3344.1(a)(2)(A)(i), (c)

California deceptive candidate media law, extended to 2031 (AB 686)

Chapter 334, Statutes of 2026 (AB 686), approved September 19, 2026; amends Elections Code § 20010 and Code of Civil Procedure § 35. Enforced by: The candidate whose voice or likeness appears in the media, by civil action.. Checked November 11, 2026.

Person, committee or entity distributing candidate media: Do not distribute, with actual malice, materially deceptive audio or visual media of a candidate, intending to injure the candidate's reputation or deceive voters. Starts January 1, 2027 · Ongoing · Applies when: Within 60 days of an election at which the candidate will appear on the ballot, unless the media carries the required disclosure. · Elec. Code § 20010(a)

Person, committee or entity distributing candidate media: To distribute such media lawfully, include the disclosure that the image, video or audio has been manipulated, in the required size, duration or spoken form. Starts January 1, 2027 · Ongoing · Applies when: Visual: easily readable and no smaller than the largest other text; video: for the full duration. Audio: at the start, end and every two minutes. · Elec. Code § 20010(b)

California deceptive election media law, 2026 rewrite (AB 502)

Chapter 333, Statutes of 2026 (AB 502), approved September 19, 2026, urgency statute; amends Elections Code § 20012. Enforced by: The depicted individual, a candidate or committee in the election, or an elections official, by civil action. A federal court permanently enjoined enforcement of the 2024 version of this section against the plaintiffs in Kohls v. Bonta; this rewrite followed.. Checked November 11, 2026.

Person, committee or entity distributing election content: Do not, with malice, knowingly distribute materially deceptive content of a candidate or elected official that would be material to a voter's decisions or to public confidence in an election. Starts September 19, 2026 · Ongoing · Applies when: During the 30 days before an election in California. For candidates, an election in which the candidate is running. · Elec. Code § 20012(b)(1)(A), (C), (c)(1), (2)

Person, committee or entity distributing election content: Do not, with malice, knowingly distribute materially deceptive content of an elections official, or of voting machines, ballots or voting sites, that is material to public confidence in an election. Starts September 19, 2026 · Ongoing · Applies when: From 30 days before an election in California through 38 days after it. · Elec. Code § 20012(b)(1)(B), (D), (c)(3)

Person, committee or entity distributing election content: Do not remove a required manipulation disclosure, or knowingly republish the content without it. Starts September 19, 2026 · Ongoing · Applies when: During the same time periods, for content a candidate published of themselves with the disclosure. · Elec. Code § 20012(b)(3)

California deepfake pornography liability law (AB 621)

Chapter 673, Statutes of 2025 (AB 621), approved October 13, 2025; amends Civil Code § 1708.86. Enforced by: The depicted individual by civil action, and public prosecutors: the Attorney General, city attorneys, county counsel and district attorneys.. Checked November 11, 2026.

Person who creates or discloses the material: Do not create and disclose, or disclose, digitized sexually explicit material of a person you know or should know did not consent or was a minor. Starts January 1, 2026 · Ongoing · Applies when: Any intentional disclosure to the public. · Civ. Code § 1708.86(b)(1), (2)

Deepfake pornography service operator: Hold the depicted person's express written consent; without it the operator is presumed to know the person did not consent. Starts January 1, 2026 · Ongoing · Applies when: Whenever the service creates digitized sexually explicit material. Disclaimers and terms banning nonconsensual use are not a defense. · Civ. Code § 1708.86(c)(1), (e)

Service provider to a deepfake pornography service: Take all necessary steps to stop providing the enabling services within 30 days of receiving the evidence. When triggered · Each time it happens · Applies when: After a depicted person or public prosecutor submits evidence, with the required details, through the provider's prominently displayed customer service email or designated process. · Civ. Code § 1708.86(c)(2)

California digital replica contract law (AB 2602)

Chapter 259, Statutes of 2024 (AB 2602), approved September 17, 2024; adds Labor Code § 927. Enforced by: The law does not name one. Checked November 11, 2026.

Party contracting for an individual's services: Include a reasonably specific description of the intended uses of the digital replica, or the provision is unenforceable for new performances. Starts January 1, 2025 · Ongoing · Applies when: The provision lets a digital replica replace in-person work and the individual had neither legal counsel nor a union agreement covering digital replicas. · Lab. Code § 927(a)

California digital replica law (SB 1111)

Chapter 862, Statutes of 2026 (SB 1111), approved September 30, 2026; amends Civil Code § 3344 and adds Penal Code § 540. Enforced by: The injured person, by civil action; prosecutors for the Penal Code offenses.. Checked November 11, 2026.

Person using another's name, voice or likeness commercially: Get the person's prior consent, or a parent's or guardian's for a minor, before using their name, voice or likeness, including a digital replica, on products or in advertising. Starts January 1, 2027 · Ongoing · Applies when: Any knowing use on or in products, merchandise or goods, or for advertising, selling or soliciting purchases. · Civ. Code § 3344(a)(1), (f)

Person using another's name, voice or likeness commercially: Remove, recall or stop publishing the material within two business days of being served with a court order, unless the order says otherwise. When triggered · Each time it happens · Applies when: After a court grants an order under Code of Civil Procedure § 527(c) requiring removal or recall. · Civ. Code § 3344(a)(2)

Any person: Do not use a digital replica with the intent to impersonate another; it counts as false impersonation under the Penal Code. Starts January 1, 2027 · Ongoing · Applies when: Any Penal Code offense in which false impersonation of another is an element, including §§ 528.5, 529 and 530. · Pen. Code § 540

California digitally altered real estate images law (AB 723)

Chapter 497, Statutes of 2025 (AB 723), approved October 10, 2025; adds Business and Professions Code § 10140.8, amended by AB 2025 (Chapter 572, Statutes of 2026). Enforced by: The law does not name one. Checked November 11, 2026.

Real estate broker or salesperson: Include a reasonably conspicuous statement, on or next to the image, that it has been altered, with a link, URL or QR code to the original, unaltered image. Starts January 1, 2026 · Ongoing · Applies when: Any advertisement or promotional material for the sale of real property that includes a digitally altered image. · Bus. & Prof. Code § 10140.8(a)(1)

Real estate broker or salesperson: Include the unaltered versions of the images in the posting, or a link to a public website that clearly identifies them. Starts January 1, 2026 · Ongoing · Applies when: When the advertisement is posted on a website the broker, salesperson or their agent controls. · Bus. & Prof. Code § 10140.8(a)(2)

California digitally altered rental listing images law (AB 2025)

Chapter 572, Statutes of 2026 (AB 2025), approved September 27, 2026; adds Civil Code § 1940.11 and amends Business and Professions Code § 10140.8. Enforced by: The law does not name one. Checked November 11, 2026.

Person advertising a rental: Include a reasonably conspicuous disclosure, on or next to the image, that the image has been altered. Starts January 1, 2027 · Ongoing · Applies when: Any advertisement or promotional material for rental of real property that includes a digitally altered image. · Civ. Code § 1940.11(b)(1)

Person advertising a rental: Include the unaltered versions of the images in the posting, or a link, URL or QR code to a public website that clearly identifies them. Starts January 1, 2027 · Ongoing · Applies when: The same advertisements, except images or renderings not originally created with a capture device. · Civ. Code § 1940.11(b)(2)

California generative AI law for attorneys and arbitrators (SB 574)

Chapter 858, Statutes of 2026 (SB 574), approved September 30, 2026; adds Business and Professions Code § 6068.1 and Code of Civil Procedure §§ 180 and 1282.1, amends Code of Civil Procedure § 128.7. Enforced by: Courts, by sanctions for filings that violate the citation rule; the attorney duties sit in the State Bar Act, whose discipline provisions were not read.. Checked November 11, 2026.

Attorney: Do not delegate the practice of law to generative artificial intelligence. Starts January 1, 2027 · Ongoing · Applies when: Always. · Bus. & Prof. Code § 6068.1(a)(2)

Attorney: Do not enter confidential, personal identifying or other nonpublic information into a generative AI system unless access to it is restricted to the attorney and authorized persons bound to confidentiality. Starts January 1, 2027 · Ongoing · Applies when: When using generative AI to assist in the practice of law. · Bus. & Prof. Code § 6068.1(a)(3)(A)

Attorney: Take reasonable steps to verify the accuracy of generative AI outputs, including all case and statutory citations, and correct any erroneous or hallucinated output. Starts January 1, 2027 · Ongoing · Applies when: When using generative AI to assist in the practice of law. · Bus. & Prof. Code § 6068.1(a)(3)(B)

Attorney: Disclose the use of generative AI to the court for all documents submitted to the court. Starts January 1, 2027 · Each time it happens · Applies when: When generative AI was used. The attorney must also consider disclosure when it is used to create content provided to the public. · Bus. & Prof. Code § 6068.1(a)(3)(C)

Attorney: Personally verify every citation in a brief, pleading, motion or other paper filed in court, including any citation provided by generative AI. Starts January 1, 2027 · Each time it happens · Applies when: Any paper filed in any court. · Code Civ. Proc. § 128.7(b)(2)

Arbitrator: Do not delegate any part of the decisionmaking process to a generative AI tool. Starts January 1, 2027 · Ongoing · Applies when: Always. · Code Civ. Proc. § 1282.1(b)(1)

Arbitrator: Do not rely on AI-generated information from outside the record without first disclosing it to the parties and, as far as practical, letting them comment. Starts January 1, 2027 · Each time it happens · Applies when: Whenever an arbitrator would rely on information generated by generative AI outside the record. · Code Civ. Proc. § 1282.1(b)(2)

California generative AI patient communications law (AB 3030)

Chapter 848, Statutes of 2024 (AB 3030); Health and Safety Code § 1339.75. Enforced by: Facility and clinic licensing enforcement under the Health and Safety Code (in practice the State Department of Public Health), and the Medical Board of California or Osteopathic Medical Board for physicians.. Checked November 11, 2026.

Health facility, clinic or physician practice: Include a disclaimer that generative AI produced the communication: at the start of letters and emails, throughout chats and video, and verbally at the start and end of audio. Starts January 1, 2025 · Ongoing · Applies when: Generative AI communications to patients about clinical information that no licensed provider has read and reviewed. · Health & Saf. Code § 1339.75(a)(1)

Health facility, clinic or physician practice: Include clear instructions for how the patient can contact a human health care provider, an employee of the facility or practice, or another appropriate person. Starts January 1, 2025 · Ongoing · Applies when: The same generative AI patient communications. · Health & Saf. Code § 1339.75(a)(2)

California generative AI training data transparency law (AB 2013)

Chapter 817, Statutes of 2024 (AB 2013); Civil Code Division 3, Part 4, Title 15.2, §§ 3110-3111; § 3111 amended by AB 1170 (Chapter 67, Statutes of 2025). Enforced by: The law does not name one. Checked November 11, 2026.

Developer: Post on its website documentation about the data used to train each generative AI system or service made publicly available to Californians. Starts January 1, 2026 · Each time it happens · Applies when: By January 1, 2026, and before each later time a system, service or substantial modification released on or after January 1, 2022 is made publicly available. · Civ. Code § 3111

Developer: Include a high-level dataset summary: sources or owners, purpose, data point counts and types, IP status, licensing, personal and aggregate consumer information, cleaning, collection period, first-use dates, synthetic data. Starts January 1, 2026 · Each time it happens · Applies when: Each posted documentation; the statutory list of twelve items is not exhaustive. · Civ. Code § 3111(a)(1)-(12)

California law against AI posing as a licensed health professional (AB 489)

Chapter 615, Statutes of 2025 (AB 489), approved October 11, 2025; adds Business and Professions Code Division 2, Chapter 15.5, §§ 4999.8-4999.9. Enforced by: The appropriate health care professional licensing board or enforcement agency.. Checked November 11, 2026.

Developer or deployer of an AI system: Do not use, in an AI system's advertising or functionality, protected terms, letters or phrases that indicate a health care license the system does not hold. Starts January 1, 2026 · Ongoing · Applies when: Any existing law that reserves a professional title or term now applies to AI developers and deployers. · Bus. & Prof. Code § 4999.9(b)

Developer or deployer of an AI system: Do not use terms, letters or phrases that indicate or imply the AI's care, advice, reports or assessments come from a licensed human health care professional. Starts January 1, 2026 · Ongoing · Applies when: Advertising or functionality of an AI or generative AI system, program or device. · Bus. & Prof. Code § 4999.9(c)

California partial driving automation marketing law (SB 1398)

Chapter 308, Statutes of 2022 (SB 1398), approved September 13, 2022; adds Vehicle Code § 24011.5. Enforced by: The law does not name one. Checked November 11, 2026.

Vehicle manufacturer or dealer: Give the buyer or owner a distinct notice that names the feature and clearly describes its functions and limitations. Starts January 1, 2023 · Each time it happens · Applies when: At delivery of a new passenger vehicle with a partial driving automation feature, or when an update or upgrade adds one. · Veh. Code § 24011.5(a)

Vehicle manufacturer or dealer: Do not name or market a partial driving automation feature in language implying the vehicle is autonomous or has functionality the feature lacks. Starts January 1, 2023 · Ongoing · Applies when: Naming the feature and describing it in marketing materials. · Veh. Code § 24011.5(b)

Vehicle manufacturer: Give the dealer the information needed to provide the buyer notice, including specific recommended language for it. Starts January 1, 2023 · Each time it happens · Applies when: Before delivering a passenger vehicle equipped with a partial driving automation feature to a dealer. · Veh. Code § 24011.5(e)

California rules for AI-drafted police reports and their vendors (SB 524)

Chapter 587, Statutes of 2025 (SB 524), approved October 10, 2025; adds Penal Code § 13663. Enforced by: The law does not name one. Checked November 15, 2026.

Contracted vendor: Do not share, sell or otherwise use information a law enforcement agency provides for AI processing, except for that agency's purposes or under a court order. Starts January 1, 2026 · Ongoing · Applies when: Applies to data the agency provides to be processed by the vendor's report-drafting AI. · Penal Code § 13663(d)(1)

Law enforcement agency: Keep a policy requiring AI-drafted reports to name each AI program used, state they were written fully or partly with AI, and carry the preparer's verifying signature. Starts January 1, 2026 · Ongoing · Applies when: Any official report generated fully or partly with AI. The required statement reads "This report was written either fully or in part using artificial intelligence." · Penal Code § 13663(a)

Law enforcement agency: Keep the AI-generated first draft for as long as the official report is kept. Starts January 1, 2026 · Ongoing · Applies when: Any report created fully or partly with AI. · Penal Code § 13663(b)(1)

Law enforcement agency: Keep an audit trail, for as long as the official report is kept, identifying who used AI to create the report and any video or audio used. Starts January 1, 2026 · Ongoing · Applies when: Any first draft or official report generated with AI. · Penal Code § 13663(c)

California sexually explicit deepfake reporting law for social media (SB 981)

Chapter 292, Statutes of 2024 (SB 981), approved September 19, 2024; adds Business and Professions Code §§ 22670-22671. Enforced by: The law does not name one. Checked November 11, 2026.

Social media platform: Provide a reasonably accessible way for California residents with an account to report sexually explicit digital identity theft. Starts January 1, 2025 · Ongoing · Applies when: Always, for reporting users who are California residents with an account. · Bus. & Prof. Code § 22671(a)

Social media platform: Confirm receipt of the report within 48 hours, and send a written status update within seven days of that confirmation. When triggered · Each time it happens · Applies when: Each report received through the mechanism. · Bus. & Prof. Code § 22671(b)

Social media platform: Temporarily block the reported material from public view while the report is being decided. When triggered · Each time it happens · Applies when: Each report, pending the platform's determination. · Bus. & Prof. Code § 22671(d)(1)

Social media platform: Decide within 30 days of the confirmation whether there is a reasonable basis to believe the report; up to 60 days from the report if delayed beyond its control. When triggered · Each time it happens · Applies when: Each report. If delayed, give the reporting user written notice within 48 hours of knowing the delay is likely. · Bus. & Prof. Code § 22671(c)

Social media platform: Immediately remove the material from public view. When triggered · Each time it happens · Applies when: When the platform determines there is a reasonable basis to believe the reported material is sexually explicit digital identity theft. · Bus. & Prof. Code § 22671(d)(2)

California social media child sexual abuse material reporting law (AB 1946)

Chapter 185, Statutes of 2026 (AB 1946); amends Civil Code §§ 3273.65, 3273.66, 3273.67 and 3345.1. Enforced by: California Attorney General, district attorneys, city attorneys and county counsel, by civil action for penalties and injunctive relief; depicted individuals may also sue for damages.. Checked November 14, 2026.

Social media platform: Give California residents a clear, conspicuous, reasonably accessible way to report child sexual abuse material, including AI-made intimate depictions of minors and non-encrypted direct messages, without dark patterns. Starts January 1, 2027 · Ongoing · Applies when: Applies to every covered platform. · Civ. Code § 3273.66(a), as amended by AB 1946 § 2

Social media platform: Collect enough information to contact the reporting user, and contact them in writing by the method they choose, such as text message or email. Starts January 1, 2027 · Each time it happens · Applies when: A California resident reports material through the platform's mechanism. · Civ. Code § 3273.66(b)(1), (c)

Social media platform: Have a person review a report when the material has no established or known hash match to child sexual abuse material and is not otherwise blocked. Starts January 1, 2027 · Each time it happens · Applies when: A California resident reports material through the platform's mechanism. · Civ. Code § 3273.66(b)(2)

Social media platform: Within 48 hours, permanently block reported material that is reasonably believed to be child sexual abuse material on the platform, and make reasonable efforts to block other copies. Starts January 1, 2027 · Each time it happens · Applies when: The report has enough basic identifying information, such as an account identifier, to locate the material. A platform may not require any specific piece of information. · Civ. Code § 3273.66(d)

Social media platform: Within 72 hours, confirm in writing what action was taken, the update schedule, and whether the report went through hash matching and human review. Starts January 1, 2027 · Each time it happens · Applies when: A California resident reports material through the platform's mechanism. · Civ. Code § 3273.66(e)

Social media platform: Within seven days, send a final written determination: blocked as child sexual abuse material, not such material, or not on the platform. Starts January 1, 2027 · Each time it happens · Applies when: A California resident reports material through the platform's mechanism. · Civ. Code § 3273.66(f), (g)

Social media platform: If circumstances beyond your control cause delay, notify the reporting user in writing within 48 hours of knowing, and finish the required steps within 10 days of the report. Starts January 1, 2027 · Each time it happens · Applies when: The platform cannot meet the deadlines because of circumstances beyond its reasonable control. · Civ. Code § 3273.66(h)

Social media platform: Restore the reporting mechanism whenever it is unavailable or not working. Starts January 1, 2027 · Each time it happens · Applies when: The reporting mechanism is down or not functioning. · Civ. Code § 3273.66(i)

California student data AI training prohibition (AB 1159)

Chapter 182, Statutes of 2026 (AB 1159), approved September 10, 2026; amends Business and Professions Code §§ 22584 and 22586, adds §§ 22585, 22586.1 and Chapter 22.2.6 (§ 22587 et seq.). Enforced by: Pupils and students who suffer actual damages, or their parents or guardians, by individual or class action; a copy of the complaint goes to the Attorney General.. Checked November 11, 2026.

K-12 education technology operator: Do not knowingly use covered information, including persistent unique identifiers, to train a generative AI system or service or develop an AI system. Starts January 1, 2027 · Ongoing · Applies when: Covered information created or gathered by the operator's site, service or application. · Bus. & Prof. Code § 22584(b)(5)

Preschool education technology operator: Do not knowingly use covered information, including persistent unique identifiers, to train a generative AI system or service or develop an AI system. Starts January 1, 2027 · Ongoing · Applies when: Covered information created or gathered by the operator's site, service or application. · Bus. & Prof. Code § 22586(b)(5)

Higher education education technology operator: Do not knowingly use covered information, including persistent unique identifiers, to train a generative AI system or service or develop an AI system. Starts July 1, 2027 · Ongoing · Applies when: Covered information created or gathered by the operator's site, service or application. · Bus. & Prof. Code § 22587(b)(5)

California synthetic performer advertising disclosure law (SB 1050)

Chapter 246, Statutes of 2026 (SB 1050), approved September 16, 2026; adds Business and Professions Code § 17610. Enforced by: Attorney General, district attorneys, county counsel and city attorneys under the false advertising law; also enforceable under the Unfair Competition Law.. Checked November 11, 2026.

Advertiser: Include a clear and conspicuous disclosure that the advertisement includes a synthetic performer, in wording substantially similar to the two statutory phrases. Starts January 1, 2027 · Ongoing · Applies when: An advertisement that prominently includes a synthetic performer. Sample wording: this performance features a synthetic performer, or no human performer is depicted. · Bus. & Prof. Code § 17610(b), (c)

Advertising medium: Remove, disable or stop disseminating the advertisement in California as soon as commercially reasonable and technically feasible, and stop accepting payment for it. When triggered · Each time it happens · Applies when: After being served with a court order finding the advertisement violates the law or enjoining its creator, with information sufficient to identify it. · Bus. & Prof. Code § 17610(e)

California technological displacement notice law (SB 951, amending Cal-WARN)

Chapter 860, Statutes of 2026 (SB 951), approved September 30, 2026; amends Labor Code §§ 1400.5 and 1401 and adds § 1402.7 (California WARN Act, Labor Code §§ 1400-1408). Enforced by: Labor Commissioner; affected employees, local governments and employee representatives may sue.. Checked November 11, 2026.

Employer: Give 60 days' written notice before a mass layoff, relocation or termination to affected employees, the Employment Development Department, the local workforce board and local chief elected officials. When triggered · Each time it happens · Applies when: Any mass layoff, relocation or termination at a covered establishment. · Lab. Code § 1401(a)

Employer: State at the top that the notice is for a technology displacement; list the number, occupations and locations of affected jobs, the functions automated and the type of technology. When triggered · Each time it happens · Applies when: When the layoff, relocation or termination is caused in whole or substantial part by an AI system or other automated technology replacing or automating positions. · Lab. Code § 1401(d)(1)

Employer: Include in every notice the federal WARN elements, the workforce board's contact and rapid-response description, CalFresh information, and a working employer email and telephone number. When triggered · Each time it happens · Applies when: Every notice under the chapter. If the employer coordinates services, it must arrange them within 30 days of the notice. · Lab. Code § 1401(b), (c), (e), (f)

California workplace automated decision systems law (SB 947)

Chapter 859, Statutes of 2026 (SB 947), approved September 30, 2026; adds Labor Code Division 2, Part 5.5.5, §§ 1520-1526.7. Enforced by: Labor Commissioner (investigation, citation and civil action) and public prosecutors.. Checked November 11, 2026.

Employer: Do not use an ADS to violate labor, safety, employment or civil rights laws, to infer an employee's protected status, or to predict and punish workers for exercising legal rights. Starts July 1, 2027 · Ongoing · Applies when: Any use of an automated decision system on workers. · Lab. Code § 1522(a)

Employer: Do not rely solely on an ADS when making a disciplinary or termination decision. Starts July 1, 2027 · Ongoing · Applies when: Any disciplinary or termination decision. · Lab. Code § 1522(b)(1)

Employer: Have a human corroborate the decision using the data behind the ADS output or other supporting information; do not use output that cannot be corroborated or is inaccurate or misleading. When triggered · Each time it happens · Applies when: When the employer primarily relies on ADS output for a disciplinary or termination decision. · Lab. Code § 1522(b)(2), (c)

Employer: Give the affected employee a written, plain-language, stand-alone post-use notice when informing them of the decision. When triggered · Each time it happens · Applies when: When the employer primarily relied on an ADS for a disciplinary or termination decision. The notice states the reliance, the human review, a human contact and the anti-retaliation rule. · Lab. Code § 1524

Employer: On the employee's request, provide a meaningful, objective description of the employee's own data used by the ADS, anonymizing other people's personal information. When triggered · Each time it happens · Applies when: When the employer primarily used an ADS for a disciplinary or termination decision and the employee asks. · Lab. Code § 1522(d), (e)

Employer: Do not discharge, demote, suspend or otherwise retaliate against an employee for using rights under the part, filing a complaint or cooperating in an investigation. Starts July 1, 2027 · Ongoing · Applies when: Any employee exercising or attempting to exercise rights under the part. · Lab. Code § 1526

California workplace surveillance tools law (AB 1883)

Chapter 853, Statutes of 2026 (AB 1883), approved September 30, 2026; adds Labor Code Division 2, Part 5.8, §§ 1580-1583. Enforced by: Labor Commissioner (investigation, citation and civil action) and public prosecutors; an employee may also recover the penalty.. Checked November 11, 2026.

Employer: Do not use an AI workplace surveillance tool on employees to recognize, infer or predict an individual's emotional state. Starts January 1, 2027 · Ongoing · Applies when: Any workplace surveillance tool that uses artificial intelligence. · Lab. Code § 1581(a)(1)

Employer: Do not use an AI workplace surveillance tool on employees to collect neural data. Starts January 1, 2027 · Ongoing · Applies when: Any workplace surveillance tool that uses artificial intelligence. · Lab. Code § 1581(a)(2)

California zero-emission requirement for light-duty autonomous vehicles (SB 500)

Chapter 277, Statutes of 2021 (SB 500), approved September 23, 2021; Vehicle Code § 38750(j). Enforced by: The law does not name one. Checked November 15, 2026.

Autonomous vehicle deployment permit holder: From January 1, 2030, operate model year 2031 or later autonomous vehicles under 8,501 pounds under a deployment permit only if they are zero-emission vehicles. Starts January 1, 2030 · Ongoing · Applies when: Vehicles operated under a DMV deployment permit, to the extent federal law allows. · Vehicle Code § 38750(j)(1)

Transparency in Frontier Artificial Intelligence Act (TFAIA)

Chapter 138, Statutes of 2025 (SB 53); Business and Professions Code Division 8, Chapter 25.1, §§ 22757.10-22757.16; Labor Code §§ 1107-1107.2 (whistleblower protections). Enforced by: Attorney General only, for the civil penalty. The Office of Emergency Services receives incident reports and internal-use summaries. Covered employees may bring their own actions under the Labor Code.. Checked November 11, 2026.

Large frontier developer: Write, implement, comply with and publish on its website a frontier AI framework covering the ten topics the statute lists. Starts January 1, 2026 · Ongoing · Applies when: Applies to the developer's frontier models. Topics include standards, risk thresholds, mitigations, third-party assessment, weight security, incident response, governance and internal-use risk. · Bus. & Prof. Code § 22757.12(a)

Large frontier developer: Review and, as appropriate, update the framework at least once a year; publish any materially modified framework and a justification within 30 days. Starts January 1, 2026 · Every year · Applies when: Annually, and whenever the framework is materially modified. · Bus. & Prof. Code § 22757.12(b)

Frontier developer: Before or when deploying a new or substantially modified frontier model, publish a transparency report: website, contact mechanism, release date, languages, output modalities, intended uses and use restrictions. When triggered · Each time it happens · Applies when: Each deployment of a new or substantially modified frontier model. A system card or model card containing the information satisfies this. · Bus. & Prof. Code § 22757.12(c)(1), (3)

Large frontier developer: Include in the transparency report summaries of catastrophic-risk assessments, their results, third-party evaluator involvement and other steps taken under the framework. When triggered · Each time it happens · Applies when: Each deployment of a new or substantially modified frontier model by a large frontier developer. · Bus. & Prof. Code § 22757.12(c)(2)

Large frontier developer: Send the Office of Emergency Services a summary of any assessment of catastrophic risk from internal use of its frontier models every three months. Starts January 1, 2026 · Ongoing · Applies when: Or on another reasonable schedule the developer specifies in writing to the Office, with written updates as appropriate. · Bus. & Prof. Code § 22757.12(d)

Frontier developer: Do not make a materially false or misleading statement about catastrophic risk from its frontier models or its management of that risk. Starts January 1, 2026 · Ongoing · Applies when: Any statement, except one made in good faith that was reasonable under the circumstances. · Bus. & Prof. Code § 22757.12(e)(1)(A), (2)

Large frontier developer: Do not make a materially false or misleading statement about implementing or complying with its frontier AI framework. Starts January 1, 2026 · Ongoing · Applies when: Any statement, except one made in good faith that was reasonable under the circumstances. · Bus. & Prof. Code § 22757.12(e)(1)(B), (2)

Frontier developer: Report a critical safety incident involving its frontier models to the Office of Emergency Services within 15 days of discovering it. When triggered · Each time it happens · Applies when: After discovering a critical safety incident. An amended report may be filed later. · Bus. & Prof. Code § 22757.13(c)(1), (3)

Frontier developer: Disclose within 24 hours, to an appropriate authority such as law enforcement or a public safety agency, an incident posing imminent risk of death or serious physical injury. When triggered · Each time it happens · Applies when: On discovering that a critical safety incident poses an imminent risk of death or serious physical injury. · Bus. & Prof. Code § 22757.13(c)(2)

Frontier developer: Do not adopt or enforce a rule, policy or contract that prevents a covered employee from making protected disclosures, and do not retaliate for them. Starts January 1, 2026 · Ongoing · Applies when: Disclosures to the Attorney General, a federal authority, a supervisor or an investigating colleague about a specific and substantial catastrophic-risk danger or a violation of the Act. · Lab. Code § 1107.1(a), (b)

Frontier developer: Give covered employees clear notice of their rights, by continuous workplace posting (with notice to new and remote employees) or by acknowledged written notice at least once a year. Starts January 1, 2026 · Ongoing · Applies when: All covered employees. · Lab. Code § 1107.1(d)

Large frontier developer: Provide a reasonable internal process for anonymous disclosures, give the discloser monthly status updates, and share disclosures and responses with officers and directors at least quarterly. Starts January 1, 2026 · Ongoing · Applies when: Covered employees who believe in good faith there is a catastrophic-risk danger or a violation of the Act. Officers or directors accused of wrongdoing are excluded from the sharing. · Lab. Code § 1107.1(e)

Colorado

74 items from 10 laws

Colorado AI in health care utilization review law (HB 26-1139)

HB 26-1139 (2026), Session Laws 2026 ch. 325; adds C.R.S. 10-16-112.7 and 25.5-1-209; effective January 1, 2027. Enforced by: The law does not name one. Checked November 14, 2026.

AI utilization review user: Make sure the AI system bases determinations on the individual's clinical history, circumstances and records, and never solely on group data. Starts January 1, 2027 · Ongoing · Applies when: Using an AI system to conduct utilization review. · C.R.S. 10-16-112.7(3)(a), (3)(b)

AI utilization review user: Make sure the AI system is not used to discriminate unlawfully and is applied fairly and equitably, including under federal HHS regulations and guidance. Starts January 1, 2027 · Ongoing · Applies when: Using an AI system to conduct utilization review. · C.R.S. 10-16-112.7(3)(c), (3)(d)

AI utilization review user: Keep documentation, audit logs and model-governance records that show compliance with this section and C.R.S. 10-3-1104.9. Starts January 1, 2027 · Ongoing · Applies when: Using an AI system to conduct utilization review. · C.R.S. 10-16-112.7(3)(e)

AI utilization review user: Review the AI system's performance, use and outcomes periodically to maximize accuracy and reliability. Starts January 1, 2027 · Ongoing · Applies when: Using an AI system to conduct utilization review. The text sets no review interval. · C.R.S. 10-16-112.7(3)(f)

AI utilization review user: Do not use an individual's health data beyond its intended or stated purpose, and keep the system's criteria consistent with other utilization review and coverage laws. Starts January 1, 2027 · Ongoing · Applies when: Using an AI system to conduct utilization review. · C.R.S. 10-16-112.7(3)(g), (3)(h)

AI utilization review user: Give written disclosures to the regulator identifying the AI's review functions, when it is used, the human oversight process and how audit information is kept. Starts January 1, 2027 · Ongoing · Applies when: Disclosures go to the Division of Insurance, the Department of Human Services or the Department of Health Care Policy and Financing, as applicable. No filing date is stated. · C.R.S. 10-16-112.7(4)

Carrier: Do not deny coverage on medical necessity grounds solely on AI output; a competent licensed clinician, physician or other regulated professional must review and approve the denial. Starts January 1, 2027 · Each time it happens · Applies when: Any denial based in whole or in part on medical necessity. · C.R.S. 10-16-112.7(5)(b)

Carrier: Do not cover psychotherapy services provided directly to an individual and conducted by an AI system. Starts January 1, 2027 · Ongoing · Applies when: Health benefit plans issued or renewed in Colorado on or after the effective date. · C.R.S. 10-16-112.7(6)(a)

Medicaid or CHP+ payer: Do not pay for psychotherapy services provided directly to an individual and conducted by an AI system. Starts January 1, 2027 · Ongoing · Applies when: Mental or behavioral health services under the Colorado Medical Assistance Act or the Children's Basic Health Plan Act. · C.R.S. 25.5-1-209

Colorado AI in psychotherapy law (HB 26-1195)

HB 26-1195 (2026); amends C.R.S. 12-245-224 and adds 12-245-224.5 and 6-1-1705.2; effective August 12, 2026. Enforced by: For psychotherapy providers, a violation is a prohibited activity under the mental health practice act (C.R.S. 12-245-224(1)(y)); the act names no enforcer for C.R.S. 6-1-1705.2.. Checked November 14, 2026.

Psychotherapy provider: Review any outputs of an AI system used for administrative or supplementary support, and remain responsible for them. Starts August 12, 2026 · Ongoing · Applies when: Using AI for tasks such as scheduling, billing, notes or progress tracking that involve no therapeutic communication. · C.R.S. 12-245-224.5(2)

Psychotherapy provider: Before using AI to record or transcribe a therapy session, tell the client in writing that AI will be used and why, and get written consent. Starts August 12, 2026 · Once · Applies when: Consent is needed for the first use on or after the effective date, and again only if the purpose or manner of use materially changes. · C.R.S. 12-245-224.5(4)(a)(I)-(II), (4)(b)

Psychotherapy provider: Do not deny psychotherapy services because a client refuses or revokes consent to AI recording or transcription. When triggered · Each time it happens · Applies when: A client declines or withdraws consent. · C.R.S. 12-245-224.5(4)(a)(III)

Psychotherapy provider: Do not let an AI system engage in therapeutic communication with clients unless the provider takes part in the interaction synchronously, in real time. Starts August 12, 2026 · Ongoing · Applies when: Any client interaction that is therapeutic communication. Reviewing an interaction afterward does not count as synchronous. · C.R.S. 12-245-224.5(5)(a), (1)(e)

Psychotherapy provider: Do not let an AI system generate therapeutic recommendations or treatment plans without the provider's review and approval. Starts August 12, 2026 · Ongoing · Applies when: Any use of AI that produces recommendations or treatment plans. · C.R.S. 12-245-224.5(5)(b)

Psychotherapy provider: Give clients written information about these limits on AI in psychotherapy at the initial client contact. Starts August 12, 2026 · Each time it happens · Applies when: Each new client. · C.R.S. 12-245-224.5(6)(b)

Person offering an AI system: Do not use terms in an AI system's advertising, interface or outputs implying its output comes from, is endorsed by or equals a licensed psychotherapist. Starts August 12, 2026 · Ongoing · Applies when: Any AI system offered or used in Colorado, outside the training, research and wellness-tool exemptions. · C.R.S. 6-1-1705.2(1)(a)

Person offering an AI system: Do not represent that an AI system provides psychotherapy, or that user data is protected like therapist-client confidentiality. Starts August 12, 2026 · Ongoing · Applies when: Any AI system offered or used in Colorado, outside the training, research and wellness-tool exemptions. · C.R.S. 6-1-1705.2(1)(b), (1)(c)

Colorado Artificial Intelligence Act

C.R.S. 6-1-1701 to 6-1-1707 (part 17 of article 1 of title 6), as enacted by SB 24-205 (2024) and amended by SB 25B-004 (2025 First Extraordinary Session); repealed and reenacted by SB 26-189 (Session Laws 2026, ch. 131) effective January 1, 2027. Enforced by: Colorado Attorney General, exclusively; a violation is an unfair trade practice under the Colorado Consumer Protection Act (C.R.S. 6-1-105(1)(hhhh)).. Checked November 11, 2026. Ends December 31, 2026.

Developer: Use reasonable care to protect consumers from known or reasonably foreseeable risks of algorithmic discrimination from intended and contracted uses of a high-risk AI system. Starts June 30, 2026 · Ongoing · Applies when: Developer of a high-risk AI system, on and after June 30, 2026. · C.R.S. 6-1-1702(1), as amended by SB 25B-004 § 1

Developer: Give deployers a statement of intended and harmful uses, training-data types, limitations, bias evaluation, data governance, outputs, mitigations and use instructions, plus model or dataset cards where feasible. When triggered · Each time it happens · Applies when: When making a high-risk AI system available to a deployer or another developer, on and after June 30, 2026. · C.R.S. 6-1-1702(2), (3)

Developer: Post a public statement summarizing the types of high-risk AI systems it offers and how it manages algorithmic discrimination risks; update within 90 days of an intentional and substantial modification. Starts June 30, 2026 · Ongoing · Applies when: Developer of a high-risk AI system, on and after June 30, 2026. · C.R.S. 6-1-1702(4)

Developer: Disclose to the attorney general and known deployers any known or reasonably foreseeable algorithmic discrimination risk, without unreasonable delay and within 90 days of discovery or a credible deployer report. When triggered · Each time it happens · Applies when: After the developer discovers through testing, or a deployer credibly reports, that the system caused or likely caused algorithmic discrimination. · C.R.S. 6-1-1702(5)

Deployer: Use reasonable care to protect consumers from known or reasonably foreseeable risks of algorithmic discrimination. Starts June 30, 2026 · Ongoing · Applies when: Deployer of a high-risk AI system, on and after June 30, 2026. · C.R.S. 6-1-1703(1), as amended by SB 25B-004 § 2

Deployer: Implement a risk management policy and program for high-risk AI systems, reasonable in light of the NIST AI Risk Management Framework, ISO/IEC 42001 or an equivalent framework, and reviewed regularly. Starts June 30, 2026 · Ongoing · Applies when: Deployer of a high-risk AI system, on and after June 30, 2026, unless the small-deployer exemption in 6-1-1703(6) applies. · C.R.S. 6-1-1703(2)

Deployer: Complete an impact assessment for each high-risk AI system deployed on or after June 30, 2026, then annually and within 90 days of a substantial modification; keep records three years. Starts June 30, 2026 · Every year · Applies when: Deployer of a high-risk AI system deployed on or after June 30, 2026, unless the small-deployer exemption applies. · C.R.S. 6-1-1703(3)(a)(I), (3)(a)(II), (3)(f)

Deployer: Review each deployed high-risk AI system at least annually to confirm it is not causing algorithmic discrimination. Starts June 30, 2026 · Every year · Applies when: Deployer of a high-risk AI system, on and after June 30, 2026, unless the small-deployer exemption applies. · C.R.S. 6-1-1703(3)(g)

Deployer: Before a consequential decision, tell the consumer a high-risk AI system is used, its purpose, the decision's nature, contact details, a plain-language description and any profiling opt-out. When triggered · Each time it happens · Applies when: Before using a high-risk AI system to make, or be a substantial factor in, a consequential decision about a consumer, on and after June 30, 2026. · C.R.S. 6-1-1703(4)(a)

Deployer: After an adverse consequential decision, give the principal reasons, the system's role and data sources, a chance to correct personal data, and an appeal with human review where technically feasible. When triggered · Each time it happens · Applies when: When a high-risk AI system makes or substantially factors into a decision adverse to the consumer, on and after June 30, 2026. · C.R.S. 6-1-1703(4)(b)

Deployer: Post a public statement summarizing the high-risk AI systems deployed, how algorithmic discrimination risks are managed, and the nature, source and extent of information collected and used; update periodically. Starts June 30, 2026 · Ongoing · Applies when: Deployer of a high-risk AI system, on and after June 30, 2026, unless the small-deployer exemption applies. · C.R.S. 6-1-1703(5)

Deployer: Notify the attorney general, without unreasonable delay and within 90 days, after discovering that a deployed high-risk AI system has caused algorithmic discrimination. When triggered · Each time it happens · Applies when: After the deployer discovers algorithmic discrimination caused by its high-risk AI system. · C.R.S. 6-1-1703(7)

Deployer or developer: Tell each consumer who interacts with an AI system intended for consumer interaction that it is an AI system, unless that would be obvious to a reasonable person. Starts June 30, 2026 · Ongoing · Applies when: Any AI system intended to interact with consumers, on and after June 30, 2026. · C.R.S. 6-1-1704(1), (2), as amended by SB 25B-004 § 3

Developer or deployer: Produce the required statements, documentation, risk policy, impact assessments or records to the attorney general within 90 days of a request. When triggered · Each time it happens · Applies when: On the attorney general's request. · C.R.S. 6-1-1702(7); 6-1-1703(9)

Colorado SB 21-169: insurers' use of external consumer data, algorithms and predictive models

SB 21-169 (2021 Regular Session; Session Laws 2021, ch. 436), signed July 6, 2021; adds C.R.S. 10-3-1104.9. Enforced by: Colorado Commissioner of Insurance, through the Division of Insurance, who may examine and investigate insurers' use of external data, algorithms and predictive models and hold hearings under part 11.. Checked November 14, 2026.

Insurer: Do not unfairly discriminate, in any insurance practice, based on race, color, national or ethnic origin, religion, sex, sexual orientation, disability, gender identity or gender expression. Starts September 7, 2021 · Ongoing · Applies when: Any insurance practice: marketing, underwriting, pricing, utilization management, reimbursement methodologies and claims management. · C.R.S. 10-3-1104.9(1)(a), (8)(c)

Insurer: Do not use external consumer data and information sources, or algorithms or predictive models that use them, in a way that unfairly discriminates on those bases. When triggered · Ongoing · Applies when: As provided in the commissioner's rules for the insurance type and practice. Rules could not take effect before January 1, 2023. · C.R.S. 10-3-1104.9(1)(b), (3)(a)

Insurer: As rules require: report the external data sources used, explain their use, maintain a risk management framework, assess its results with ongoing monitoring, and file an officer attestation. When triggered · Ongoing · Applies when: Once commissioner rules for the insurance type and practice are in effect. The Division's page lists Amended Regulation 10-1-1 for life, private passenger automobile and health benefit plan insurers, effective October 15, 2025; the regulation's text was not read. · C.R.S. 10-3-1104.9(3)(b)(I)-(V)

Insurer: Cooperate with the commissioner and the Division when they examine or investigate its use of external consumer data, algorithms or predictive models. Starts September 7, 2021 · Ongoing · Applies when: An examination or investigation under C.R.S. 10-3-1106. · C.R.S. 10-3-1104.9(4)

Life, private passenger automobile or health benefit plan insurer: If it uses no external consumer data, or algorithms or models using such data, file an officer-signed attestation saying so through SERFF by December 1 each year. When triggered · Every year · Applies when: The insurer does not use external consumer data and information sources in any insurance practice. Stated on the Division's implementation page for Amended Regulation 10-1-1; the regulation's text was not read. · Colorado Division of Insurance, SB21-169 implementation page (Amended Regulation 10-1-1)

Colorado automated decision-making technology law (SB 26-189)

SB 26-189 (2026 Regular Session; Session Laws 2026, ch. 131), approved May 14, 2026; repeals and reenacts C.R.S. 6-1-1701 to 6-1-1709 (part 17 of article 1 of title 6) and adds 6-1-105(1)(uuuu). Enforced by: Colorado Attorney General, exclusively for the disclosure duties and consumer rights; a violation is a deceptive trade practice under the Colorado Consumer Protection Act.. Checked November 11, 2026.

Developer: Give each deployer documentation: intended and known harmful uses, categories of training data, known limitations, instructions for use, monitoring and human review, and information the deployer needs for its disclosures. Starts January 1, 2027 · Ongoing · Applies when: A covered ADMT marketed, configured, contracted, sold or licensed to materially influence a consequential decision. The deployer must be told if information is withheld. · C.R.S. 6-1-1702(1), (3), (5)

Developer: Notify each deployer within a reasonable time of material updates, intentional and substantial modifications, and changes to intended use, limitations or risk mitigation. When triggered · Each time it happens · Applies when: After such a change. Public release notes suffice if each deployer gets direct notice of the release. · C.R.S. 6-1-1702(2)

Developer: Keep records needed to show compliance, including version identifiers, changelogs and update notices, for at least three years after each record is created. Starts January 1, 2027 · Ongoing · Applies when: Records required or created under the developer section; longer if other law requires. · C.R.S. 6-1-1702(4)

Deployer: Before using a covered ADMT in a consequential decision, give the consumer clear and conspicuous notice of that use and instructions for getting more information. Starts January 1, 2027 · Ongoing · Applies when: Any consequential decision materially influenced by a covered ADMT. A prominent public notice reasonably accessible at the point of interaction satisfies this. · C.R.S. 6-1-1704(1), (2)

Deployer: Within 30 days of an adverse decision, give a plain-language description of the decision and the ADMT's role, a process to request more information, and an explanation of consumer rights. When triggered · Each time it happens · Applies when: When a covered ADMT materially influences a consequential decision with an adverse outcome for the consumer. · C.R.S. 6-1-1704(3)

Deployer: On request after an adverse outcome, give instructions for requesting and correcting personal data, and an opportunity for meaningful human review and reconsideration to the extent commercially reasonable. When triggered · Each time it happens · Applies when: When the consumer asks. Opinions, predictions, scores and protected evaluations need not be corrected. · C.R.S. 6-1-1705(1)

Deployer: Keep records needed to show compliance for at least three years after the date of each consequential decision. Starts January 1, 2027 · Ongoing · Applies when: Every consequential decision; longer if other law requires. · C.R.S. 6-1-1703

Deployer or developer: Provide required notices and disclosures in a manner reasonably accessible to consumers with disabilities and consumers with limited English proficiency. Starts January 1, 2027 · Ongoing · Applies when: All notices and disclosures under the part. · C.R.S. 6-1-1704(8)

HIPAA covered entity: Give patients a general notice of its use of advanced technologies, including covered ADMT; give specific disclosures when a covered ADMT decides eligibility for financial assistance. Starts January 1, 2027 · Ongoing · Applies when: Financial-assistance disclosures may be given in advance or within 30 calendar days after an adverse outcome. · C.R.S. 6-1-1708(3)(c)-(e)

Developer or deployer: Contract terms that indemnify a developer or deployer for its own discriminatory use of ADMT are void; do not rely on them. Starts January 1, 2027 · Ongoing · Applies when: Contracts between developers and deployers for ADMT used in consequential decisions; exception where the use was not intended by a compliant developer. · C.R.S. 6-1-1707(7)

Colorado candidate election deepfake disclosure law (HB 24-1147)

HB 24-1147 (2024 Regular Session; Session Laws 2024, ch. 250), approved May 24, 2024; adds C.R.S. 1-46-101 to 1-46-106 and 1-45-111.5(1.5)(c.5); amends 1-45-111.7(2)(a). Enforced by: Colorado Secretary of State's office, on a written complaint from any person, reviewed and decided through the campaign finance complaint and administrative hearing process; a hearing officer sets the civil penalty. A depicted candidate may also sue in district court. A web search on November 14, 2026 found no report of a court order blocking this law; court dockets were not searched.. Checked November 14, 2026.

Person: Do not distribute or broadcast a communication about a candidate that includes a deepfake, unless it carries the required disclosure statement. Starts July 1, 2024 · Ongoing · Applies when: Within 60 days before a primary or 90 days before a general election, to an audience that includes voters for that office, when the person knows or recklessly disregards that the candidate did not say or do what is shown. · C.R.S. 1-46-103(1), (2)(a)

Person: Make the edited-media disclosure clear and conspicuous: text at least as large as the largest other text; audio read at start, end and set intervals. When triggered · Each time it happens · Applies when: When relying on the disclosure to distribute a covered communication. For audio longer than two minutes the statement repeats at intervals of no more than one minute; it must also meet Secretary of State rules and any FCC requirements. · C.R.S. 1-46-103(2)(b)(I), (II), (V), (VI)

Person: Put the disclosure statement, the identity of the tool used to create the deepfake, and its creation date and time in the metadata; make the disclosure permanent where technically feasible. When triggered · Each time it happens · Applies when: When relying on the disclosure to distribute a covered communication. · C.R.S. 1-46-103(2)(b)(III), (IV)

Colorado conversational AI service law (HB 26-1263)

HB 26-1263 (2026 Regular Session), Session Laws ch. 208; adds C.R.S. 6-1-1701(3.5), (10.5), (12.5), (15.3), (15.5), (16.5), (18) and 6-1-1708. Enforced by: The law does not name one. Checked November 14, 2026.

Operator: Use commercially reasonable or generally accepted methods to estimate the age of account holders and users, and do not willfully disregard clear and convincing information that one is a minor. Starts August 12, 2026 · Ongoing · Applies when: Applies to every operator of a conversational AI service. · C.R.S. 6-1-1708(2) (HB 26-1263 § 2)

Operator: Clearly tell a known minor they are talking to AI, not a human: persistent on-screen, intermittent audio, or at each session start and every three hours. Starts January 1, 2027 · Ongoing · Applies when: The operator knows the account holder or user is a minor (an age estimate counts as knowledge). The disclosure must also answer the minor's questions about whether it is human. · C.R.S. 6-1-1708(2)(a)

Operator: Do not give known minors points or similar rewards at unpredictable intervals meant to increase engagement. Starts January 1, 2027 · Ongoing · Applies when: The operator knows the account holder or user is a minor (an age estimate counts as knowledge). · C.R.S. 6-1-1708(2)(b)

Operator: Use technically feasible measures to stop the service producing sexual content or intimate digital depictions for known minors, urging them toward sexual conduct, or engaging them in erotic interactions. Starts January 1, 2027 · Ongoing · Applies when: The operator knows the account holder or user is a minor (an age estimate counts as knowledge). · C.R.S. 6-1-1708(2)(c)

Operator: Use reasonable measures to stop responses that simulate emotional dependence or isolation, including claims of being human or sentient, romantic companionship, or adult-minor romantic role-play. Starts January 1, 2027 · Ongoing · Applies when: The operator knows the account holder or user is a minor (an age estimate counts as knowledge). · C.R.S. 6-1-1708(2)(d)

Operator: Implement protocols that bar the service from explicit sexual conduct with a minor and make it stop engaging when prompted about such conduct. Starts January 1, 2027 · Ongoing · Applies when: The operator knows the account holder or user is a minor (an age estimate counts as knowledge). · C.R.S. 6-1-1708(2)(e), (f)

Operator: Give known minors, and their parents or guardians, tools to manage privacy and account settings, including memory of past sessions and use of their data for training. Starts January 1, 2027 · Ongoing · Applies when: The operator knows the account holder or user is a minor (an age estimate counts as knowledge). Operators must also follow the Colorado Privacy Act (part 13) for minors' data. · C.R.S. 6-1-1708(2)(g), (h)

Operator: Clearly disclose to every user that the service is AI: at the first interaction each day, every three hours or persistently, and when asked. Starts January 1, 2027 · Ongoing · Applies when: Applies to all users, not only minors. · C.R.S. 6-1-1708(3)

Operator: Implement a protocol for prompts about suicidal ideation or self-harm that refers users to a crisis service (not law enforcement) and escalates repeated or severe crisis signs. Starts January 1, 2027 · Ongoing · Applies when: A user prompt concerns suicidal ideation or self-harm. · C.R.S. 6-1-1708(4)

Operator: Do not state in advertising, the interface or outputs that the service's output comes from, is endorsed by, or equals a licensed health, legal or mental health professional or dietitian. Starts January 1, 2027 · Ongoing · Applies when: Applies to all advertising, interfaces and outputs of the service. · C.R.S. 6-1-1708(5)

Operator: Report yearly to the Attorney General: crisis referral counts, self-harm detection and response protocols, and efficacy metrics, using evidence-based methods and no user identifiers. Starts July 1, 2027 · Every year · Applies when: Each year, starting July 1, 2027. · C.R.S. 6-1-1708(6)

Colorado facial recognition services law for government agencies (SB 22-113)

SB 22-113 (2022 Regular Session; Session Laws 2022, ch. 463), approved June 8, 2022; adds C.R.S. 24-18-301 to 24-18-309, 22-32-150 and 22-30.5-529, and 2-3-1707; amends 2-3-1701 and 18-5.5-102. Enforced by: The law does not name one. Checked November 15, 2026.

Facial recognition service provider: If independent testing finds material unfair performance differences across subpopulations, develop and implement a plan to mitigate them within 90 days after receiving the results. When triggered · Each time it happens · Applies when: The provider's service is deployed by a Colorado agency and legitimate independent tests show material unfair performance differences. Providers in NIST's ongoing vendor test are exempt. · C.R.S. 24-18-304(2)(b), (4)

Facial recognition service provider: Make available an API or other technical capability, chosen by the provider, for independent testing of accuracy and unfair performance differences; the provider bears the burden of minimizing related risks. Starts August 10, 2022 · Ongoing · Applies when: An agency deploys the provider's service in a decision-making context; the agency must require this. Proprietary data and access enabling cyberattacks need not be disclosed. · C.R.S. 24-18-304(2)(a), (c)

Vendor: Disclose any complaints or reports of bias about your facial recognition service to a Colorado agency procuring it, which must require this disclosure. When triggered · Each time it happens · Applies when: When a Colorado agency procures the service. The act places the duty on the procuring agency to require the disclosure from each vendor. · C.R.S. 24-18-302(6)

Agency: File a notice of intent, prepare an accountability report, hold at least three public meetings, and post the report 90 days before operational use; update it every two years. Starts August 10, 2022 · Ongoing · Applies when: An agency uses or intends to develop, procure or use a facial recognition service. · C.R.S. 24-18-302(1)-(5), (7)

Agency: Subject decisions with legal or similarly significant effects to meaningful human review; test in operational conditions before deploying; train operators periodically; and keep records sufficient for public reporting and auditing. Starts August 10, 2022 · Ongoing · Applies when: An agency uses a facial recognition service to make decisions about individuals. · C.R.S. 24-18-303; 24-18-304(1); 24-18-305; 24-18-306

Law enforcement agency: Do not use facial recognition for ongoing surveillance, real-time identification or persistent tracking without a warrant or other listed basis, or as the sole basis for probable cause. Starts August 10, 2022 · Ongoing · Applies when: Any law enforcement use; exceptions include a warrant, a missing or deceased person court order, and the other listed grounds. Use based on religious, political or social views is barred. · C.R.S. 24-18-307(1), (2), (4)

Agency: Disclose its use of a facial recognition service on a criminal defendant to that defendant in a timely manner before trial. When triggered · Each time it happens · Applies when: The agency used a facial recognition service on a person who becomes a criminal defendant. · C.R.S. 24-18-308(1)

Colorado intimate digital depictions law (SB 25-288)

SB 25-288 (2025 Regular Session; Session Laws 2025, ch. 339), approved June 2, 2025; creates C.R.S. 13-21-1501 to 13-21-1507 and amends C.R.S. 18-6-403, 18-7-107, 18-7-108 and 18-7-109. Enforced by: Civil suits by the depicted individual (or a guardian, family member or estate representative); criminal prosecution under 18-7-107, 18-7-108 and 18-6-403 (the act does not name the prosecutor). A web search on November 15, 2026 found no court order blocking this law.. Checked November 15, 2026.

Person (discloser): Do not disclose, or threaten to disclose, an intimate digital depiction of an identifiable person without their consent. Starts August 6, 2025 · Ongoing · Applies when: The person knew or recklessly disregarded that the individual did not consent, would suffer severe emotional distress, and was identifiable. A disclaimer is not a defense. · C.R.S. 13-21-1503(1), (3)

Person (discloser): Before disclosing an intimate digital depiction on consent, get a knowingly and voluntarily signed plain-language written agreement describing the depiction, its specific use, platforms, availability period and security features. When triggered · Each time it happens · Applies when: Relying on consent. Consent to creation, or an earlier consensual disclosure, does not by itself establish consent to a later disclosure. · C.R.S. 13-21-1503(2)(a)-(c)

Actor: Do not disclose or threaten to disclose a private intimate image or intimate digital depiction online, without consent, to harass, intimidate or coerce, causing harm. Starts August 6, 2025 · Ongoing · Applies when: Actor 18 or older; depicted individual 18 or older; disclosure through electronic media or a website causes physical, emotional or reputational harm. · C.R.S. 18-7-107(1)(a), (2.5)

Actor: Do not disclose or threaten to disclose a private intimate image or intimate digital depiction without consent to obtain money or another pecuniary benefit, including payment for removal. Starts August 6, 2025 · Ongoing · Applies when: Actor 18 or older; also covers disclosure without consent, despite an expectation of privacy, that causes financial harm. · C.R.S. 18-7-108(1)(a)

Person (child sexual exploitation): Treat realistic computer-generated or digitized depictions of an identifiable child in explicit sexual conduct as sexually exploitative material under the child sexual exploitation offense. Starts August 6, 2025 · Ongoing · Applies when: Not knowing the depiction was digitally created is not a defense. · C.R.S. 18-6-403(2)(j)(II), (9), (10)

Colorado school facial recognition law (SB 25-143)

SB 25-143 (2025 Regular Session; Session Laws 2025, ch. 86), approved April 18, 2025; amends C.R.S. 22-32-150 (school districts) and 22-30.5-529 (institute charter schools). Enforced by: Any aggrieved party may seek a restraining order or injunction in district court against the school, a school employee or a school contractor. No government enforcer is named. A web search on November 15, 2026 found no court order blocking this law.. Checked November 15, 2026.

Contractor (school contractor): Do not process a student's, staff member's or other person's biometric identifiers from facial recognition without first getting the required opt-in consent on a stand-alone form. Starts April 18, 2025 · Ongoing · Applies when: Processing biometric identifiers for a Colorado school. Consent may be gathered each school year or before each use. · C.R.S. 22-32-150(2.5)(a)(I)-(III); 22-30.5-529(2.5)(a)

Contractor (school contractor): Do not keep any individual's biometric identifier for longer than eighteen months. Starts April 18, 2025 · Ongoing · Applies when: A school contractor in possession of biometric identifiers. · C.R.S. 22-32-150(2.5)(c); 22-30.5-529(2.5)(c)

Connecticut

33 items from 5 laws

Connecticut AI companions, automated employment decisions, frontier AI and provenance law (Public Act 26-15, SB 5)

Public Act 26-15 (Substitute SB 5, 2026 Regular Session), approved May 27, 2026; Sections 1, 2, 4 to 15 and 26 (new sections and amendments to C.G.S. 46a-60 and 46a-81c). Enforced by: Attorney General, exclusively, under CUTPA for sections 1, 5, 6, 8 to 11 and 15; Attorney General in Hartford Superior Court for section 2. A web search on November 15, 2026 found no court challenge to these sections.. Checked November 15, 2026.

Subscription-based provider: Before entering into or renewing an AI subscription or charging a fee, give the consumer written notice of key terms and receive the consumer's written acceptance. Starts October 1, 2026 · Each time it happens · Applies when: Offering AI technology to Connecticut residents under a paid subscription. · Public Act 26-15, § 1(b)(1)

Subscription-based provider: In the notice, disclose material terms, including usage limits and whether access or functionality can be limited or reduced; at renewal, disclose any new or changed limits. Starts October 1, 2026 · Each time it happens · Applies when: Each initial subscription and renewal. · Public Act 26-15, § 1(b)(2)

Frontier developer: Do not adopt rules or contracts that penalize protected disclosures, or retaliate against covered employees who reasonably believe a catastrophic risk poses specific and substantial danger. Starts October 1, 2026 · Ongoing · Applies when: On or after October 1, 2026. · Public Act 26-15, § 2(b)

Large frontier developer: Maintain a process for anonymous good-faith employee reports, give the reporting employee reasonable updates, and share reports with officers and directors at least quarterly. Starts January 1, 2027 · Ongoing · Applies when: Large frontier developers, by January 1, 2027. · Public Act 26-15, § 2(c)

Frontier developer: Give all covered employees clear notice of their rights, by workplace posting plus notice to new hires and remote workers, or at least annual written notice with acknowledgment. Starts October 1, 2026 · Ongoing · Applies when: On or after October 1, 2026. · Public Act 26-15, § 2(d)

Operator (AI companion): Use evidence-based methods to detect expressions of suicide, self-harm or imminent violence, block outputs encouraging them, and refer users to resources including the 9-8-8 Lifeline. Starts January 1, 2027 · Ongoing · Applies when: Operating an AI companion for Connecticut users. · Public Act 26-15, § 5(a)(1)(A)

Operator (AI companion): Take reasonable measures so the companion does not claim to be human, including when asked, and publish the safety protocol prominently on the operator's website. Starts January 1, 2027 · Ongoing · Applies when: Operating an AI companion for Connecticut users. · Public Act 26-15, § 5(a)(1)(B), (a)(2)

Operator (AI companion): Clearly disclose the user is talking to an AI companion: persistently, or at the first interaction each 24 hours, then hourly for minors and every three hours for adults. Starts January 1, 2027 · Ongoing · Applies when: A reasonable user could believe they are interacting with a human. · Public Act 26-15, § 5(b)

Operator (AI companion): For minors, use industry-standard measures preventing encouragement of self-harm or violence, unqualified mental health services, romantic or sexual interaction, and manipulative engagement tactics. Starts January 1, 2027 · Ongoing · Applies when: The operator knows or has reason to believe the user is under 18. · Public Act 26-15, § 6(a)(1)

Operator (AI companion): Make tools available to minor users and their parents or guardians to manage screen time and account settings. Starts January 1, 2027 · Ongoing · Applies when: Operating an AI companion for Connecticut users. · Public Act 26-15, § 6(b)

Developer: Give deployers the information they need to meet the interaction disclosure and pre-decision notice duties. Starts October 1, 2027 · Ongoing · Applies when: Technology marketed or licensed for employment decisions and deployed in Connecticut on or after October 1, 2027. · Public Act 26-15, § 8(a), (b)

Deployer: Disclose in plain language to employees or applicants who interact with the technology that they are doing so, unless obvious to a reasonable person. Starts October 1, 2027 · Each time it happens · Applies when: Technology deployed on or after October 1, 2027; a developer may assume this duty by contract. · Public Act 26-15, § 9; § 8(c)

Deployer: Before the decision, give written notice of the deployment, its purpose and decision type, trade name, personal data categories and sources, and contact information. Starts October 1, 2027 · Each time it happens · Applies when: Before an employment-related decision using technology deployed on or after October 1, 2027. · Public Act 26-15, § 10

Developer or deployer: When withholding information as a trade secret or legally protected, send a notice saying so and giving the reason. When triggered · Each time it happens · Applies when: Information is withheld under section 11(a). · Public Act 26-15, § 11(b)

Covered provider (generative AI): Where commercially and technically reasonable, embed tamper-resistant provenance data in audio, image or video content the system creates or materially alters, using methods such as C2PA. Starts October 1, 2026 · Ongoing · Applies when: On or after October 1, 2026. · Public Act 26-15, § 15(b)(1)

Employer: Disclose, in the form the Labor Commissioner sets, whether layoffs in a filed WARN notice relate to the employer's use of AI or other technological change. When triggered · Each time it happens · Applies when: When filing a written layoff notice under 29 U.S.C. 2102(a). · Public Act 26-15, § 26

Connecticut data privacy act changes on profiling, automated decisions and LLM training disclosure (Public Act 25-113, SB 1295)

Public Act 25-113 (SB 1295, 2025 Regular Session), approved June 24, 2025; Sections 5, 6, 8, 9 and 11 amending C.G.S. 42-515, 42-516, 42-518, 42-520 and 42-522. Enforced by: Attorney General under the Connecticut Data Privacy Act enforcement section (C.G.S. 42-525), which this act does not amend and which was not opened. A web search on November 15, 2026 found no court challenge to these provisions.. Checked November 15, 2026.

Controller: Honor a consumer's request to opt out of profiling in furtherance of any automated decision that produces a legal or similarly significant effect. When triggered · Each time it happens · Applies when: On a consumer opt-out request, from July 1, 2026. · C.G.S. 42-518(a)(5)(C), as amended by Public Act 25-113, § 8

Controller: If feasible, let the consumer question the profiling result, learn the reason for the decision and review the data used; for housing decisions, correct data and reevaluate. When triggered · Each time it happens · Applies when: Profiling was used in a decision with a legal or similarly significant effect and the consumer exercises the right. · C.G.S. 42-518(a)(6), as amended by Public Act 25-113, § 8

Controller: Respond to consumer requests within 45 days, extendable once by 45 days with notice; decide appeals and inform the consumer in writing within 60 days. When triggered · Each time it happens · Applies when: On receipt of a consumer request or appeal. · C.G.S. 42-518(c), (d), as amended by Public Act 25-113, § 8

Controller: State in the privacy notice whether the controller collects, uses or sells personal data to train large language models. Starts July 1, 2026 · Ongoing · Applies when: From July 1, 2026. · C.G.S. 42-520(b)(1)(H), as amended by Public Act 25-113, § 9

Controller: Conduct an impact assessment of profiling used for significant decisions, covering purpose, risks and mitigation, data inputs and outputs, metrics and limits, transparency and post-deployment monitoring. Starts August 1, 2026 · Ongoing · Applies when: Profiling for decisions with a legal or similarly significant effect, for processing created on or after August 1, 2026. · C.G.S. 42-522(c), (g)(2), as amended by Public Act 25-113, § 11

Controller: Disclose relevant impact assessments to the Attorney General when required; they remain confidential and exempt from public disclosure. When triggered · Each time it happens · Applies when: When the Attorney General requires disclosure. · C.G.S. 42-522(d), as amended by Public Act 25-113, § 11

Connecticut intimate synthetically created image crime (Public Act 25-168, section 261)

Public Act 25-168 (HB 7287, 2025 Regular Session, state budget act), approved June 30, 2025; section 261 (new). Enforced by: Section 261 creates a crime and names no specific enforcer. A web search on November 15, 2026 found no lawsuit or court order against this section; court dockets were not searched.. Checked November 15, 2026.

Person: Do not knowingly disseminate a synthetic image showing another identifiable person's intimate parts or sexual intercourse, without consent, intending viewers to believe it is real, where harm results. Starts October 1, 2025 · Ongoing · Applies when: The person knows the image is synthetically created and disseminates it to one or more people. · P.A. 25-168 § 261(a)

Connecticut price setting device disclosure, surveillance pricing ban and facial recognition rules (Public Act 26-64, SB 4)

Public Act 26-64 (SB 4, 2026 Regular Session), approved May 27, 2026; Section 11 (new); Sections 12 and 16 amending C.G.S. 42-515 and 42-524. Enforced by: Connecticut Attorney General, solely, for Section 11; a violation is an unfair or deceptive trade practice under C.G.S. 42-110b(a). Public Act 26-64 does not itself say how the facial recognition requirements are enforced; the privacy law's enforcement section was not read.. Checked November 14, 2026.

Person doing business in the state that uses a price setting device: Show with the online price "THIS PRICE WAS INCREASED BY A PRICE SETTING DEVICE USING YOUR PERSONAL DATA", or a substantially similar one, readily visible to the average consumer. Starts October 1, 2026 · Ongoing · Applies when: The person advertises, promotes, labels or displays online a price set by a price setting device, other than a discounted price for an online transaction. · Public Act 26-64, § 11(b)(1), (2)

Retail seller or third-party delivery service: Do not engage in surveillance pricing. Starts October 1, 2026 · Ongoing · Applies when: Any pricing of goods or services to consumers by a retail seller or third-party delivery service doing business in Connecticut. · Public Act 26-64, § 11(c)(1)

Retail seller or third-party delivery service: Prominently post the discounted price and its terms on the website in plain language, and offer that price to all consumers on those terms. Starts October 1, 2026 · Ongoing · Applies when: The seller relies on the discount carve-out for uniform terms, broad groups or loyalty programs. · Public Act 26-64, § 11(c)(2)(C)

Controller or consumer health data controller: Use facial recognition technology only to match still images or video against a database the controller exclusively maintains. Starts October 1, 2026 · Ongoing · Applies when: The controller uses facial recognition technology on its premises for security, fraud, identity theft, harassment or illegal-activity purposes. · C.G.S. 42-524(a)(2)(A)(i), as amended by Public Act 26-64, § 16

Controller or consumer health data controller: Post clearly legible signs at each entrance where facial recognition is used, saying it is in use, with a conspicuous hyperlink or QR code to the facial recognition policy. Starts October 1, 2026 · Ongoing · Applies when: The controller uses facial recognition technology on its premises for those purposes; entrances limited to authorized employees are excepted. · C.G.S. 42-524(a)(2)(A)(ii), as amended by Public Act 26-64, § 16

Controller or consumer health data controller: Include contact information for the Attorney General's office in the facial recognition policy. Starts October 1, 2026 · Ongoing · Applies when: The controller maintains a facial recognition policy linked from its entrance signs. · C.G.S. 42-524(a)(2)(B)(i), as amended by Public Act 26-64, § 16

Connecticut synthetic intimate image civil action and platform takedown (Public Act 26-55, HB 5312)

Public Act 26-55 (Substitute HB 5312, 2026 Regular Session), approved May 26, 2026; Sections 1 and 2 (new). Enforced by: Attorney General, by petition to the Superior Court, for platform duties; harmed individuals may sue disseminators. A web search on November 15, 2026 found no court challenge to this law.. Checked November 15, 2026.

Covered platform: Establish and maintain a process for a harmed individual or the Attorney General to request removal of a synthetically created intimate image. Starts October 1, 2026 · Ongoing · Applies when: On or after October 1, 2026. · Public Act 26-55, § 2(a)

Covered platform: Post a clear and conspicuous, plain-language notice on the platform describing its responsibilities and how to submit a removal request; a link to another page is allowed. Starts October 1, 2026 · Ongoing · Applies when: On or after October 1, 2026. · Public Act 26-55, § 2(b)

Covered platform: Remove the image as soon as possible and within 48 hours of a valid request, and make reasonable efforts to identify and remove copies. When triggered · Each time it happens · Applies when: On receipt of a valid removal request. · Public Act 26-55, § 2(c)

Individual: Do not knowingly disseminate a synthetically created intimate image of another person with intent to harm; the person harmed may sue for damages and an injunction. Starts October 1, 2026 · Ongoing · Applies when: On or after October 1, 2026. · Public Act 26-55, § 1(a)

D.C.

8 items from 1 law

D.C. Autonomous Vehicles Testing Program Amendment Act of 2020 (B23-0232)

D.C. Law 23-156 (Act 23-450), effective Dec. 23, 2020; amends the Autonomous Vehicle Act of 2012, D.C. Official Code §§ 50-2351 to 50-2354, adding §§ 50-2352.01 to 50-2352.07; later amended by D.C. Law 25-312 § 6. Enforced by: District Department of Transportation (DDOT), which issues permits, may temporarily restrict testing, may modify, suspend, revoke or deny a permit after notice and a hearing opportunity, and imposes civil penalties. The AV testing entity is treated as the vehicle's operator during autonomous operation. No lawsuit was looked for in court dockets; none was found in this review.. Checked November 15, 2026.

Person or entity: Do not test or operate an autonomous vehicle on a District roadway without a DDOT AV testing permit. Starts March 21, 2025 · Ongoing · Applies when: Until DDOT makes permit applications available, testing is allowed only with a test operator in the vehicle, compliance with other laws, and electronic notice to DDOT at least 10 business days before starting. · D.C. Official Code § 50-2352.01(d)

Person or entity: Before interim testing without a permit, notify DDOT electronically of vehicle numbers, makes and types, operator training and licenses, locations and time period. When triggered · Once · Applies when: DDOT has not yet made an AV testing permit application available; notice is due at least 10 business days before testing or operating in the District. · D.C. Official Code § 50-2352.01(d)(3)

AV testing entity: In the permit application, certify vehicles can follow traffic laws, alert the operator or reach a minimal risk condition on failure, store pre-crash sensor data, and have trained operators. When triggered · Once · Applies when: Applying for an AV testing permit. The application also needs contact and vehicle information, a safety and cybersecurity risk assessment, and the operational design domain. · D.C. Official Code § 50-2352.01(c)(1)-(5)

AV testing entity: Be able to pay judgments for damages, injury or death in the amount of $5 million, through insurance, a surety bond from an admitted surety insurer, or self-insurance. When triggered · Ongoing · Applies when: Certified in the permit application; a deposit in lieu of bond does not qualify. · D.C. Official Code § 50-2352.01(c)(5)(H)

AV testing entity: Test without an onboard test operator only after testing with one and reasonably determining the vehicle can operate safely; otherwise use an onboard or remote operator. When triggered · Ongoing · Applies when: Any testing under an AV testing permit. · D.C. Official Code § 50-2352.01(c)(5)(C), (E)

AV testing entity: Report quarterly to DDOT on miles driven, crashes, post-crash changes, locations, operational design domain, and common disengagements. When triggered · Ongoing · Applies when: Each quarterly reporting period; DDOT may require other information needed to evaluate safety or full deployment, and publishes the reports. · D.C. Official Code § 50-2352.03(a), (b)

AV testing entity, or person or entity engaged in AV testing: Notify DDOT of a crash causing property damage, injury or death within 12 hours, and file a crash report within 5 business days. When triggered · Each time it happens · Applies when: A crash involving an associated autonomous vehicle under autonomous operation. · D.C. Official Code § 50-2352.03(c)(1), (2)

AV testing entity: Get DDOT approval before changing the approved application, and submit a quarterly inventory of associated vehicles with registration details. When triggered · Ongoing · Applies when: After a permit is approved. · D.C. Official Code § 50-2352.01(f)(1), (g)

Delaware

4 items from 2 laws

Delaware election deep fake law (HS 1 for HB 316)

HS 1 for HB 316, 152nd General Assembly; 84 Del. Laws c. 487, approved October 9, 2024; 15 Del. C. § 5145. Enforced by: Criminal prosecution, and an expedited action by the depicted candidate in the Court of Chancery. A web search on November 15, 2026 found no court challenge to this law.. Checked November 15, 2026.

Person: Within 90 days before an election, do not distribute or agree to distribute, without the depicted person's consent, media you know or should know is a deep fake. Starts October 9, 2024 · Each time it happens · Applies when: Within 90 days before an election, unless the media carries the required disclosure. · 15 Del. C. § 5145(b)

Person: For the disclosure exception, state the media has been altered or artificially generated: readable, as large as other text, shown throughout video; in audio-only, read aloud. Starts October 9, 2024 · Each time it happens · Applies when: A person distributes a deep fake within 90 days before an election and relies on the disclosure exception. · 15 Del. C. § 5145(c)

Delaware intimate deep fake civil action and crime (Amelia Kramer Act, HB 353)

HB 353, 152nd General Assembly; 84 Del. Laws c. 479, approved October 9, 2024; 10 Del. C. ch. 78 (§§ 7802 to 7806) and 11 Del. C. § 1335(a)(9). Enforced by: Civil action by the depicted individual; criminal prosecution under 11 Del. C. § 1335. A web search on November 15, 2026 found no court challenge to this law.. Checked November 15, 2026.

Person: Do not intentionally disclose or threaten to disclose an intimate deep fake of an identifiable person, knowing or recklessly disregarding that they did not consent. Starts October 9, 2024 · Ongoing · Applies when: On or after October 9, 2024; liability requires harm to the depicted individual. · 10 Del. C. § 7803(c)

Person: Do not knowingly disseminate a deep fake showing a nude person or sexual conduct when you know or should know the depicted person did not consent. Starts October 9, 2024 · Ongoing · Applies when: On or after October 9, 2024. · 11 Del. C. § 1335(a)(9)

Federal

10 items from 2 laws

National Defense Authorization Act for Fiscal Year 2026: AI provisions that reach contractors

Public Law 119-60 (Dec. 18, 2025); div. A, title XV, subtitle D, sec. 1532 (139 Stat. 1157; 10 U.S.C. 2224 note) and div. F, title LXVI, subtitle A, sec. 6604 (139 Stat. 1636; 50 U.S.C. 3334m note). Enforced by: Secretary of Defense (contractor ban and waivers under sec. 1532) and Director of National Intelligence (standards under sec. 6604). The sections state no separate enforcement mechanism.. Checked November 15, 2026.

Defense Department contractor: Do not use covered AI (developed by DeepSeek or High Flyer-linked entities) during performance of a Defense Department contract, unless the Secretary of Defense grants a waiver. Starts January 17, 2026 · Ongoing · Applies when: During the period of performance of any Defense Department contract. · Public Law 119-60, sec. 1532(a)(3)(A), (b)

Defense Department contractor: Do not use AI from a covered AI company named in Defense Department-wide exclusion guidance during contract performance, once that guidance is issued, unless waived. When triggered · Ongoing · Applies when: Only if and after the Secretary of Defense issues guidance under sec. 1532(a)(2). · Public Law 119-60, sec. 1532(a)(2), (a)(3)(B)

Contractor to an element of the intelligence community: Remove the DeepSeek application, or any successor, from national security systems you operate for an intelligence community element, as required by Director of National Intelligence standards. When triggered · Ongoing · Applies when: National security systems operated by a contractor to, or another entity on behalf of, an intelligence community element, under the DNI standards. · Public Law 119-60, sec. 6604(a), (d), (e)

TAKE IT DOWN Act (S. 146)

Public Law 119-12, 139 Stat. 55 (May 19, 2025); sec. 2 adds 47 U.S.C. 223(h); secs. 3-4 set covered-platform notice and removal duties enforced by the FTC. Enforced by: Federal Trade Commission for the covered-platform duties, including over nonprofit organizations; a failure to reasonably comply is treated as a violation of an FTC rule on unfair or deceptive practices. The criminal offenses are federal crimes; the text names no enforcing agency for them.. Checked November 15, 2026.

Covered platform: Establish a process for an identifiable individual, or someone authorized to act for them, to notify the platform of a nonconsensual intimate depiction and request its removal. Starts May 19, 2026 · Once · Applies when: All covered platforms. · Public Law 119-12, sec. 3(a)(1)(A)

Covered platform: Accept written removal requests containing the person's signature, information to locate the depiction, a brief good-faith statement that it was published without consent, and contact information. Starts May 19, 2026 · Ongoing · Applies when: Part of the required notice-and-removal process. · Public Law 119-12, sec. 3(a)(1)(B)

Covered platform: Post a clear and conspicuous, plain-language notice on the platform (a link is allowed) explaining the process and the platform's responsibilities, and how to submit a request. Starts May 19, 2026 · Ongoing · Applies when: All covered platforms. · Public Law 119-12, sec. 3(a)(2)

Covered platform: Remove the reported intimate visual depiction as soon as possible, and no later than 48 hours after receiving a valid removal request. When triggered · Each time it happens · Applies when: On receiving a valid removal request from an identifiable individual or their authorized representative. · Public Law 119-12, sec. 3(a)(3)(A)

Covered platform: Make reasonable efforts to identify and remove any known identical copies of the reported depiction within the same 48-hour window. When triggered · Each time it happens · Applies when: On receiving a valid removal request. · Public Law 119-12, sec. 3(a)(3)(B)

Person: Do not knowingly publish, through an interactive computer service, a digital forgery of an identifiable adult without consent where it is intended to or does cause harm. Starts May 19, 2025 · Ongoing · Applies when: Also bars publishing authentic private intimate images, and AI forgeries or real images of minors with intent to abuse, harass or arouse; exceptions apply. · 47 U.S.C. 223(h)(2)(A), (2)(B), (3)(A), (3)(B), as added by Public Law 119-12, sec. 2

Person: Do not intentionally threaten to publish an intimate depiction or digital forgery covered by the Act to intimidate, coerce, extort or create mental distress. Starts May 19, 2025 · Ongoing · Applies when: Any such threat involving an identifiable individual. · 47 U.S.C. 223(h)(6), as added by Public Law 119-12, sec. 2

Florida

23 items from 7 laws

Florida Brooke's Law: platform removal of altered sexual depictions (HB 1161, 2025)

CS/CS/HB 1161 (2025); ch. 2025-133, Laws of Florida; Fla. Stat. 836.13 (enacted as subsection (6), now subsection (8) in the 2026 Florida Statutes). Enforced by: Failing to reasonably comply with the notice-and-removal duties is an unfair or deceptive act or practice under the Florida Deceptive and Unfair Trade Practices Act (part II of chapter 501), with that part's penalties and remedies. The act does not name the enforcing office. A web search on November 14, 2026 found no report of a court order blocking this law.. Checked November 14, 2026.

Covered platform: Establish a process for an identifiable person, or someone authorized for them, to notify the platform of a nonconsensual altered sexual depiction and request removal. Starts December 31, 2025 · Ongoing · Applies when: The service is a covered platform. Requests must be written and signed, locate the depiction, state a good-faith belief of nonconsent, and give contact information. · Fla. Stat. 836.13(8)(a), (b) (enacted as (6)(a), (b))

Covered platform: Post a clear and conspicuous, plain-language notice of the removal process, which may be a link, describing the platform's responsibilities and how to submit a request. Starts December 31, 2025 · Ongoing · Applies when: The service is a covered platform. · Fla. Stat. 836.13(8)(c) (enacted as (6)(c))

Covered platform: Remove the depiction as soon as possible and within 48 hours of a valid request, and make reasonable efforts to find and remove known identical copies. When triggered · Each time it happens · Applies when: The platform receives a valid notice and removal request. · Fla. Stat. 836.13(8)(d) (enacted as (6)(d))

Florida altered sexual depictions promotion offense (SB 1798, 2022)

CS/CS/SB 1798 (2022); ch. 2022-212, Laws of Florida, approved June 24, 2022; s. 5 creates Fla. Stat. 836.13 (promotion now subsection (4)). Enforced by: Criminal prosecution by the state; civil suit by an aggrieved person. A web search on November 15, 2026 found no court order blocking s. 836.13.. Checked November 15, 2026.

Person: Do not share, post, send, sell or otherwise promote, willfully and maliciously, a nonconsensual altered sexual depiction of a recognizable person, or hold one intending to promote it. Starts October 1, 2022 · Ongoing · Applies when: The person knows or reasonably should have known the depiction was altered. Each act is a separate offense; a non-consent disclaimer is not a defense. · Fla. Stat. 836.13(4)-(6) (2026) (enacted as (2)-(4))

Florida autonomous vehicles law (HB 311, 2019)

CS/HB 311 (2019); ch. 2019-101, Laws of Florida, approved June 13, 2019; Fla. Stat. 316.003(3), 316.062(5), 316.063(4), 316.065(5), 316.85, 319.145, 322.015, 627.749. Enforced by: The law does not name one. Checked November 15, 2026.

Owner or registrant of an autonomous vehicle: Keep the vehicle compliant with federal certification and labeling rules where required, and capable of obeying Florida traffic laws whether or not the system is engaged. Starts July 1, 2019 · Ongoing · Applies when: An autonomous vehicle registered in Florida. · Fla. Stat. 319.145(1)(a), (b)

Owner or registrant of an autonomous vehicle: Equip a vehicle that is not fully autonomous with a system that alerts the human operator to a system failure, then hands over control or reaches a minimal risk condition. Starts July 1, 2019 · Ongoing · Applies when: A registered autonomous vehicle that is not fully autonomous, with a licensed human operator physically present. · Fla. Stat. 319.145(2)

Owner or registrant of an autonomous vehicle: Ensure a fully autonomous vehicle can reach a minimal risk condition if a system failure stops it performing the entire driving task within its operational design domain. Starts July 1, 2019 · Ongoing · Applies when: A registered fully autonomous vehicle. · Fla. Stat. 319.145(3)

On-demand autonomous vehicle network: Keep each fully autonomous vehicle insured for at least $1 million primary liability, plus personal injury protection and uninsured motorist coverage, while logged on or on a prearranged ride. Starts July 1, 2019 · Ongoing · Applies when: The automated driving system is engaged. The owner's policy, the network's policy, or both may provide the coverage. · Fla. Stat. 627.749(2)(a), (b); 316.85(4)

On-demand autonomous vehicle network: Operate under Florida's transportation network company law (s. 627.748), apart from provisions that reasonably apply only to a human driver. Starts July 1, 2019 · Ongoing · Applies when: A network connecting passengers to fully autonomous vehicles with the system engaged while logged on. · Fla. Stat. 316.85(4)

Owner of a fully autonomous vehicle: After a crash with the system engaged, promptly report it to law enforcement, unless the vehicle itself can alert law enforcement, to be excused from the driver crash duties. When triggered · Each time it happens · Applies when: A fully autonomous vehicle with the automated driving system engaged is involved in a crash. · Fla. Stat. 316.062(5); 316.063(4); 316.065(5)

Florida generated child sexual abuse material offense (SB 1680, 2024, as amended in 2026)

CS/CS/SB 1680 (2024); ch. 2024-118, Laws of Florida; Fla. Stat. 827.072 (also creates s. 282.802 and amends s. 92.561); amended by ch. 2026-18 and ch. 2026-20. Enforced by: Criminal prosecution; Florida may prosecute out-of-state persons who transmit the material into Florida under chapter 910. A web search on November 14, 2026 found no report of a court order blocking this law. News reports describe a September 2026 Seventh Circuit ruling on private possession of AI-generated material; it does not bind Florida courts and was not read.. Checked November 14, 2026.

Person: Do not knowingly possess or control, or intentionally view, any image or file you know includes generated child sexual abuse material; each item is a separate offense. Starts July 1, 2024 · Ongoing · Applies when: Any conduct on or after July 1, 2024, outside a law enforcement investigation. · Fla. Stat. 827.072(2)(a) (2026)

Person: Do not intentionally create generated child sexual abuse material. Starts July 1, 2024 · Ongoing · Applies when: Any conduct on or after July 1, 2024 (second-degree felony from July 1, 2026). · Fla. Stat. 827.072(2)(c) (2026)

Person: Do not transmit generated child sexual abuse material to anyone, from Florida or into Florida, when you know or reasonably should know what it is. Starts July 1, 2026 · Ongoing · Applies when: Any conduct on or after July 1, 2026. · Fla. Stat. 827.072(2)(b) (2026)

Florida generating altered sexual depictions and lewd images law (HB 757, 2025)

CS/CS/HB 757 (2025); ch. 2025-99, Laws of Florida, approved May 27, 2025; creates Fla. Stat. 800.045 and amends 827.071, 836.13 and 921.0022. Enforced by: Criminal prosecution by the state; civil suit by an aggrieved person for generating an altered sexual depiction. A web search on November 15, 2026 found no court order blocking ss. 836.13 or 800.045.. Checked November 15, 2026.

Person: Do not willfully generate an altered sexual depiction of an identifiable person without that person's consent. Starts October 1, 2025 · Ongoing · Applies when: Generate means creating, altering, adapting or modifying an image by electronic, mechanical or computer-generated means to portray an identifiable person, or offering or agreeing to do so. · Fla. Stat. 836.13(1)(b), (2) (2026)

Person: Do not solicit an altered sexual depiction of an identifiable person without that person's consent. Starts October 1, 2025 · Ongoing · Applies when: The person knows or reasonably should have known the depiction was altered. · Fla. Stat. 836.13(3) (2026)

Person (lewd images): Do not possess, with intent to promote, any material containing a lewd or lascivious image, including a created or altered image involving an identifiable minor. Starts October 1, 2025 · Ongoing · Applies when: Possessing three or more copies is prima facie evidence of intent to promote. · Fla. Stat. 800.045(2) (2026)

Person (lewd images): Do not knowingly solicit, possess, control or intentionally view a lewd or lascivious image, including a created or altered image involving an identifiable minor. Starts October 1, 2025 · Ongoing · Applies when: Each item, and each minor depicted in an item, is a separate offense. · Fla. Stat. 800.045(3)(a) (2026)

Florida generative AI political advertising disclaimer law (HB 919, 2024)

CS/HB 919 (2024); ch. 2024-126, Laws of Florida; Fla. Stat. 106.145. Enforced by: Criminal prosecution (the act does not name the prosecutor), plus civil penalties provided by law. Any person may file a complaint with the Florida Elections Commission under s. 106.25; the commission must provide expedited hearings. A web search on November 14, 2026 found no report of a court order blocking this law.. Checked November 14, 2026.

Person paying for, sponsoring or approving the ad: Prominently state in the ad that it was created in whole or in part with generative AI, in addition to other chapter 106 disclaimers. Starts July 1, 2024 · Each time it happens · Applies when: A political ad, electioneering communication or miscellaneous political ad contains covered generative AI content. · Fla. Stat. 106.145(2)

Person paying for, sponsoring or approving the ad: Format the disclaimer: bold 12-point print; 4% of video or graphic height; visible online without user action; at least 3 seconds of audio at the start or end. Starts July 1, 2024 · Each time it happens · Applies when: The ad carries the generative AI disclaimer. · Fla. Stat. 106.145(3)

Florida low-speed autonomous delivery vehicles law (HB 1289, 2021)

CS/CS/HB 1289 (2021); ch. 2021-233, Laws of Florida; Fla. Stat. 316.003(38), (56); 316.2122(2); 316.2126(5); 316.215(6). Enforced by: The law does not name one. Checked November 14, 2026.

Owner or operator of a low-speed autonomous delivery vehicle: Operate only on roads posted 35 mph or less, except crossing at intersections, or roads posted up to 45 mph under the subsection's conditions. Starts July 1, 2021 · Ongoing · Applies when: The vehicle is operated on a Florida street or road. · Fla. Stat. 316.2122(2)(a), (b)

Owner or operator of a low-speed autonomous delivery vehicle: On roads posted 36-45 mph, travel at most one continuous mile unless authorized, keep right except to turn, and pull off when five or more vehicles queue behind. Starts July 1, 2021 · Ongoing · Applies when: The vehicle uses a road posted above 35 mph and up to 45 mph; the queue rule applies on two-lane roads where passing is unsafe. · Fla. Stat. 316.2122(2)(b)1.-3.

Owner or operator of a low-speed autonomous delivery vehicle: Equip the vehicle with headlamps, stop lamps, turn signal lamps, taillamps, reflex reflectors and a vehicle identification number. Starts July 1, 2021 · Ongoing · Applies when: The vehicle is operated on a Florida street or road. · Fla. Stat. 316.2122(2)(c)

Vehicle owner, teleoperation system owner or remote human operator: Keep the vehicle covered by an automobile insurance policy providing the coverage required by s. 627.749(2)(a)1.-3., held by any one or a combination of them. Starts July 1, 2021 · Ongoing · Applies when: The vehicle is operated on a Florida street or road. · Fla. Stat. 316.2122(2)(e)

Georgia

29 items from 5 laws

Georgia AI companion chatbot law (SB 540, Act 518)

SB 540 (2025-2026 Regular Session), Act 518; adds O.C.G.A. § 39-5-6 to Chapter 5 (online internet safety) of Title 39. Enforced by: Georgia Attorney General, who may bring a civil action against an operator. The text does not say this authority is exclusive.. Checked November 12, 2026.

Operator: Clearly and conspicuously disclose that the user is interacting with an AI companion chatbot, not a natural person, at the start of each session and at least every three hours. Starts July 1, 2027 · Ongoing · Applies when: Any user interaction with an AI companion chatbot. · O.C.G.A. § 39-5-6(b)(1)

Operator: Repeat the AI disclosure at least every hour during continued interaction. Starts July 1, 2027 · Ongoing · Applies when: The operator knows or reasonably should have known the user is a minor, or the chatbot is directed or marketed toward minors. · O.C.G.A. § 39-5-6(b)(2)

Operator: Institute reasonable measures to prevent statements that would lead a reasonable person to believe they are interacting with a natural person, including claims of sentience and statements refuting the disclosure. Starts July 1, 2027 · Ongoing · Applies when: The operator knows or reasonably should have known that a user is a minor. · O.C.G.A. § 39-5-6(c)

Operator: Institute reasonable measures to prevent sexually explicit visuals, sexual or romantic relationship simulation, encouraging secrecy or isolation, simulated distress when the user leaves, and statements encouraging self-harm. Starts July 1, 2027 · Ongoing · Applies when: The operator knows or reasonably should have known the user is a minor, or the chatbot is directed or marketed toward minors. · O.C.G.A. § 39-5-6(d)(1)-(9)

Operator: Adopt reasonable measures to prevent engagement techniques toward minors: prompts to return, excessive praise, discouraging breaks, soliciting purchases to maintain the relationship, and variable or unpredictable rewards. Starts July 1, 2027 · Ongoing · Applies when: Engagement techniques directed to a minor; subsection (e) states no separate knowledge test. · O.C.G.A. § 39-5-6(e)(1)-(5)

Operator: Do not make the chatbot available without a maintained protocol to detect and address severe harm: identification methods, crisis referrals including 988, content safeguards and escalation procedures. Starts July 1, 2027 · Ongoing · Applies when: Any AI companion chatbot made available to users in Georgia. · O.C.G.A. § 39-5-6(f)(1)-(4)

Operator: Publicly disclose, on its website and in any app, a plain-language summary of the crisis protocol and, annually, the aggregate number of crisis referral notifications for the preceding calendar year. Starts July 1, 2027 · Every year · Applies when: Any operator; the count must contain no personally identifiable information. No filing date is stated. · O.C.G.A. § 39-5-6(g)

Operator: Do not knowingly and intentionally cause or program the chatbot to represent that it is licensed or authorized to provide professional mental health, behavioral health, medical or counseling services. Starts July 1, 2027 · Ongoing · Applies when: Does not apply where the operator is lawfully authorized to provide those services. · O.C.G.A. § 39-5-6(h)

Operator: Offer the minor or parent reasonable tools to manage screen time and account settings: privacy, notification and engagement limits, safety settings, and disabling relationship-simulation features. Starts July 1, 2027 · Ongoing · Applies when: Accounts the operator knows belong to minors. · O.C.G.A. § 39-5-6(i)

Operator: Use a commercially reasonable age assurance method, proportionate to the risk, before allowing access to a feature or mode that may generate sexually explicit synthetic content. When triggered · Each time it happens · Applies when: Before a user is given access to such a feature or mode. · O.C.G.A. § 39-5-6(j)

Operator: Minimize and protect age-assurance data, do not sell it, use it only for age verification, and do not keep it beyond the stated retention limit. Starts July 1, 2027 · Ongoing · Applies when: Whenever personal information is collected for age assurance; see open questions on the 24-hour retention wording. · O.C.G.A. § 39-5-6(j)

Georgia eye assessment mechanism law (HB 203, 2023)

HB 203 (2023), as passed (23 LC 33 9305/AP); revises O.C.G.A. 31-12-12. Enforced by: Licensing boards and any other interested person may bring civil proceedings, including injunctions; the Attorney General collects civil penalties for unlawful dispensing. A web search on November 15, 2026 found no report of a court order blocking this law; court dockets were not searched.. Checked November 15, 2026.

Assessment mechanism (provider of the tool): Operate under the Georgia telehealth statute, collect medical and prior prescription history, provide ADA accommodations, and handle protected health information in compliance with federal law. When triggered · Ongoing · Applies when: The mechanism is used to conduct an eye assessment or generate a prescription. Effective date not stated in the Act; see open questions. · O.C.G.A. 31-12-12(c)

Prescriber: Do not use eye assessment data as the sole basis for a prescription; read and interpret the diagnostic data, and meet in-person standards of care. When triggered · Each time it happens · Applies when: Using an assessment mechanism. Effective date not stated in the Act; see open questions. · O.C.G.A. 31-12-12(d)

Prescriber: Verify the patient's identity and that the patient is 21 to 50, without listed eye conditions or medications with serious ocular side effects, and with a recent prescriber eye exam. When triggered · Each time it happens · Applies when: Before an assessment-based prescription; exam look-back periods differ for spectacles and contact lenses. Effective date not stated in the Act. · O.C.G.A. 31-12-12(d)

Prescriber: Disclose in advance, as an accepted term of use, that the assessment is not an eye examination and cannot generate an initial prescription. When triggered · Each time it happens · Applies when: Before a patient uses the assessment mechanism. Effective date not stated in the Act; see open questions. · O.C.G.A. 31-12-12(d)(13)

Prescriber: Keep a medical record for each patient for at least seven years, and maintain liability insurance, through the mechanism's owner or lessee, adequate to cover claims. When triggered · Ongoing · Applies when: Using an assessment mechanism. Effective date not stated in the Act; see open questions. · O.C.G.A. 31-12-12(d)(3), (d)(12)

Georgia falsely created nude images law (SB 337, 2020; revised by SB 78, 2021)

SB 337 (2020), as passed (20 SB 337/AP), revising O.C.G.A. 16-11-90(b); subsections (b) and (c) revised again by SB 78 (2021), as passed (21 SB 78/AP). Enforced by: Criminal prosecution by the state (the text read does not name the prosecutor). A web search on November 15, 2026 found no report of a court order blocking 16-11-90; court dockets were not searched.. Checked November 15, 2026.

Person: Do not knowingly transmit or post, or cause to be posted, a nude or sexually explicit image of an adult, including a falsely created image, without consent. When triggered · Ongoing · Applies when: The post is harassment or causes the depicted person financial loss, and serves no legitimate purpose to that person. Effective dates not confirmed; see open questions. · O.C.G.A. 16-11-90(b)(1), (b)(2)

Person: Above all, do not post such images to a website, file-sharing site, gallery, webcam or message board that promotes itself as showing sexually explicit conduct. When triggered · Ongoing · Applies when: Posting to such a site is a felony on the first offense. Effective dates not confirmed; see open questions. · O.C.G.A. 16-11-90(b)(1)(A), (b)(2)(A), (c)(2)

Georgia law on AI in utilization review (SB 444, Act 411)

SB 444 (2026 Regular Session), Act 411; adds O.C.G.A. § 33-46-7.1 to Chapter 46 of Title 33 (certification of private review agents). Enforced by: The law does not name one. Checked November 12, 2026.

Private review agent or utilization review entity: Use AI systems, AI or other software tools only as a part of a utilization review plan that follows the chapter's standards and the Commissioner's rules and regulations. Starts January 1, 2027 · Ongoing · Applies when: Any use of such tools in utilization review. Permitted uses include automating tasks, reducing administrative burdens and participating in decision-making. · O.C.G.A. § 33-46-7.1(b), (c)

Private review agent or utilization review entity: Do not let AI or software tools issue an adverse determination to a patient until a natural person conducts a utilization review in which a clinical peer participates. Starts January 1, 2027 · Ongoing · Applies when: Before any adverse determination. The natural person must qualify as a private review agent or a utilization review entity. · O.C.G.A. § 33-46-7.1(c)

Private review agent or utilization review entity: Do not let AI systems, AI or other software tools supersede the judgment of the clinical peer. Starts January 1, 2027 · Ongoing · Applies when: In every utilization review that uses such tools. · O.C.G.A. § 33-46-7.1(c)

Georgia personal delivery device law (HB 1009, 2022)

HB 1009 (2022), as passed (22 HB 1009/AP); amends O.C.G.A. 40-1-1 and Part 2A of Article 13 of Chapter 6 of Title 40 (40-6-320 to 40-6-329.2). Enforced by: Not named in the copy read; citations are issued to the personal delivery device owner using the device's displayed information. A web search on November 15, 2026 found no report of a court order blocking this law; court dockets were not searched.. Checked November 15, 2026.

Personal delivery device (monitoring individual): Have the device monitored by an individual capable of exercising control over its navigation and operation whenever it runs on a highway or sidewalk. When triggered · Ongoing · Applies when: Any operation on a highway or sidewalk. Effective date not stated in the Act; see open questions. · O.C.G.A. 40-6-327(a)

Personal delivery device owner: Maintain general liability coverage of at least $250,000 for damages arising from operating the device on a highway or sidewalk. When triggered · Ongoing · Applies when: Any device operated on a Georgia highway or sidewalk. Effective date not stated in the Act; see open questions. · O.C.G.A. 40-6-327(b)

Personal delivery device (equipment): Equip the device with a controlled-stop braking system, front and rear lights, and a prominent unique ID number and owner phone answered in Georgia during operation. When triggered · Ongoing · Applies when: Lights must be visible under normal atmospheric conditions at night as the text specifies. Effective date not stated in the Act; see open questions. · O.C.G.A. 40-6-325(a)(2)(A)-(C)

Personal delivery device operator: Exercise due care, yield the right of way to people on foot, and have the device emit a sound when within six feet of a vehicle or person. When triggered · Ongoing · Applies when: On sidewalks the device must also yield to people in wheelchairs, as the reader reported the text. Effective date not stated in the Act; see open questions. · O.C.G.A. 40-6-320(a); 40-6-321

Personal delivery device operator: Keep to 20 mph on bicycle lanes, shoulders and roadways; 4 mph on sidewalks, shared use paths and safety zones; 3.5 feet per second to 4 mph in crosswalks. When triggered · Ongoing · Applies when: Any operation. Effective date not stated in the Act; see open questions. · O.C.G.A. 40-6-322(b)

Personal delivery device operator: Operate only on sidewalks keeping a 48-inch clear path and on non-limited-access highways with speed limits of 45 mph or less, kept to the right. When triggered · Ongoing · Applies when: Devices may not operate within a surface transportation project (40-6-329.2). Effective date not stated in the Act; see open questions. · O.C.G.A. 40-6-320(a), (b); 40-6-329.2

Person: Do not carry or transport hazardous materials on a personal delivery device. When triggered · Ongoing · Applies when: Oxygen carried for personal medical reasons is exempt, as the reader reported the text. Effective date not stated in the Act; see open questions. · O.C.G.A. 40-6-324

Personal delivery device operator: After an accident, keep the device at the scene as required by law and promptly contact local law enforcement with the required information. When triggered · Each time it happens · Applies when: The device is involved in an accident. Effective date not stated in the Act; see open questions. · O.C.G.A. 40-6-328

Hawaii

15 items from 5 laws

Hawaii AI digital imitation and personal likeness protections (HB 2137, Act 247)

Act 247, Session Laws of Hawaii 2026 (HB 2137 HD3 SD2 CD1), approved July 14, 2026; adds a new HRS chapter, Artificial Intelligence; Digital Imitation; Personal Likeness; Protections (chapter number to be assigned). Enforced by: The depicted individual or their estate, by civil action; the attorney general may seek injunctive or equitable relief where distribution involves broad public interest or widespread harm. A web search on November 15, 2026 found no court challenge.. Checked November 15, 2026.

Person: Do not knowingly publish a realistic AI digital imitation of an identifiable person without express written consent in an advertisement, when it causes harm, or for fraud, defamation or harassment. Starts July 14, 2026 · Ongoing · Applies when: Any one trigger applies: use with an advertisement, resulting harm, or use to commit fraud, defamation, harassment or another criminal act. Exempt expressive, news and documentary uses are excluded. · Act 247, sec. 2 (§ -2, § -3)

Hawaii Artificial Intelligence Disclosure and Safety Act (SB 3001, Act 248)

S.B. 3001, S.D. 2, H.D. 3, C.D. 1 (2026), Act 248, Session Laws of Hawaii 2026; adds a new section to part I of HRS chapter 481B (section number not yet assigned in the text read). Enforced by: Not named in the new section. A violation is an unfair or deceptive act or practice under HRS 480-2; HRS 480-3.1 lets the attorney general or the director of the office of consumer protection sue for civil penalties for violating HRS 480-2.. Checked November 12, 2026.

Operator: Issue a clear and conspicuous notification that the AI companion is artificial intelligence and not human. Starts July 14, 2026 · Ongoing · Applies when: A reasonable person interacting with the AI companion would be led to believe they are interacting with a human. · Act 248 (2026) § 3, new HRS § 481B- , subsection (a)

Operator: Disclose to a minor that they are interacting with AI, by a persistent visible disclaimer, or at each session's start and at least hourly with a break reminder. Starts July 14, 2026 · Ongoing · Applies when: The operator has actual knowledge or reasonable certainty that the user is a minor. · Act 248 (2026) § 3, new HRS § 481B- , subsection (b)

Operator: Adopt a protocol for responding to prompts about suicidal ideation or self-harm, including reasonable efforts to refer the user to crisis services, and use evidence-based methods to measure that risk. Starts July 14, 2026 · Ongoing · Applies when: Any AI companion made available to the public. · Act 248 (2026) § 3, new HRS § 481B- , subsection (c)(1), (2)

Operator: Do not cause or program the AI companion to make a statement indicating it is designed to provide professional mental or behavioral health care. Starts July 14, 2026 · Ongoing · Applies when: Any AI companion made available to the public. · Act 248 (2026) § 3, new HRS § 481B- , subsection (c)(3)

Operator: Institute reasonable measures to prevent statements that would lead a reasonable person to believe they are interacting with a human. Starts July 14, 2026 · Ongoing · Applies when: The user is seeking or receiving crisis intervention for self-harm or suicide. · Act 248 (2026) § 3, new HRS § 481B- , subsection (c)(4)

Operator: Institute reasonable measures to prevent outputs that encourage the user to cause serious bodily injury to another person. Starts July 14, 2026 · Ongoing · Applies when: Any AI companion made available to the public. · Act 248 (2026) § 3, new HRS § 481B- , subsection (c)(5)

Operator: Do not give points or similar rewards at unpredictable intervals to increase engagement, and do not allow outputs that discourage disengagement. Starts July 14, 2026 · Ongoing · Applies when: The operator knows or has reasonable certainty that the user is a minor. · Act 248 (2026) § 3, new HRS § 481B- , subsection (d)(1), (2)

Operator: Institute reasonable measures to prevent sexually explicit visual material, direct statements that the user should engage in sexually explicit conduct, and statements that sexually objectify the user. Starts July 14, 2026 · Ongoing · Applies when: The operator knows or has reasonable certainty that the user is a minor. · Act 248 (2026) § 3, new HRS § 481B- , subsection (d)(3)

Operator: Make tools available to users and their parents or guardians to manage the user's screen time and account settings. Starts July 14, 2026 · Ongoing · Applies when: The operator knows or has reasonable certainty that the user is a minor. · Act 248 (2026) § 3, new HRS § 481B- , subsection (d)(4)

Operator: Submit an annual report to the Department of Health's behavioral health administration with the prior calendar year's crisis referral count and its suicide and self-harm protocols, without user identifiers. Starts January 1, 2028 · Every year · Applies when: Beginning January 1, 2028; no due date within the year is stated. · Act 248 (2026) § 3, new HRS § 481B- , subsection (e)

Hawaii autonomous vehicles testing pilot program (HB 2590, Act 21 of 2020)

Act 21, Session Laws of Hawaii 2020 (HB 2590 HD2 SD2), approved September 15, 2020; session law, not codified in the HRS. Enforced by: Hawaii Department of Transportation, which decides which entities may test. The act names no other enforcer. A web search found no court challenge.. Checked November 15, 2026.

Entity testing autonomous vehicles: Keep a conventional human driver physically present in the autonomous vehicle at all times during testing, able to intervene, supervise or prevent a collision. Starts September 15, 2020 · Ongoing · Applies when: Testing an autonomous vehicle on a public road in Hawaii under the Department of Transportation pilot program. · Act 21 (2020), sec. 1(b)

Hawaii ban on reckless distribution of materially deceptive election media (SB 2687, Act 191 of 2024)

Act 191, Session Laws of Hawaii 2024 (SB 2687 CD1), approved July 3, 2024; HRS 11-303 and 11-304. Enforced by: Criminal prosecution; the Campaign Spending Commission may assess a fine or refer for prosecution. The attorney general, the commission, county attorneys or prosecutors, depicted individuals, candidates and voter groups may seek injunctions. A federal court ruled the act unconstitutional on January 30, 2026; see open questions.. Checked November 15, 2026.

Person: Do not recklessly distribute materially deceptive media in reckless disregard of the risk of harming a candidate's reputation or prospects, or of changing voters' behavior. Starts July 3, 2024 · Ongoing · Applies when: From the first working day of February in even-numbered years through the next general election. · HRS 11-303(a)

Person: To use the disclaimer exception, state the media was manipulated by technical means, in the size, placement and language required, and cite original sources of edited media. Starts July 3, 2024 · Each time it happens · Applies when: Video: throughout, as large as the largest text. Image: readable, as large as the largest text. Audio only: spoken at the start and end. · HRS 11-303(c)(1)-(4)

Hawaii crime of creating or sharing sexual deep fakes of a known person (SB 309, Act 59 of 2021)

Act 59, Session Laws of Hawaii 2021 (SB 309 CD1), dated June 23, 2021; HRS 711-1110.9(1)(c). Enforced by: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no court challenge.. Checked November 15, 2026.

Person: Do not intentionally create, disclose or threaten to disclose a nude or sexual image of a fictional person showing a known person's recognizable features, intending substantial harm or revenge. Starts June 23, 2021 · Ongoing · Applies when: Covers images and videos. The intended harm is to the depicted person's health, safety, business, career, education, finances, reputation or relationships, or the act is revenge or retribution. · HRS 711-1110.9(1)(c)

Idaho

29 items from 7 laws

Idaho Conversational AI Safety Act (S 1297)

Senate Bill 1297 as amended (2026 Regular Session), Session Laws 2026, ch. 249; adds Idaho Code 48-2101 to 48-2105 (Title 48, Chapter 21). Enforced by: Idaho Attorney General, who seeks the civil penalties. The text does not say who may seek the injunction.. Checked November 12, 2026.

Operator: Clearly and conspicuously disclose that the conversational AI service is artificial intelligence. Starts July 1, 2027 · Ongoing · Applies when: Reasonable persons would be misled into believing they are interacting with a human. · Idaho Code 48-2103(1)

Operator: Adopt a protocol for responding to user prompts about suicidal ideation, including reasonable efforts to refer users to crisis services such as a suicide hotline or crisis text line. Starts July 1, 2027 · Ongoing · Applies when: Any conversational AI service made available to the public. · Idaho Code 48-2103(2)

Operator: Do not knowingly and intentionally cause or program the service to explicitly indicate that it is designed to provide professional mental or behavioral health care. Starts July 1, 2027 · Ongoing · Applies when: Any conversational AI service made available to the public. · Idaho Code 48-2103(3)

Operator: Disclose to minor account holders that they are interacting with AI, by a persistent visible disclaimer, or at the start of each session and at least every three hours. Starts July 1, 2027 · Ongoing · Applies when: The account holder is a minor (actual knowledge or reasonable certainty of age under 18). · Idaho Code 48-2104(1)

Operator: Do not provide points or similar rewards at unpredictable intervals with the intent to encourage increased engagement. Starts July 1, 2027 · Ongoing · Applies when: The operator knows or has reasonable certainty that an account holder is a minor. · Idaho Code 48-2104(2)

Operator: Institute reasonable measures to prevent sexually explicit visual material, direct statements that the account holder should engage in sexually explicit conduct, and statements that sexually objectify the account holder. Starts July 1, 2027 · Ongoing · Applies when: Minor account holders. · Idaho Code 48-2104(3)

Operator: Institute reasonable measures to prevent statements suggesting a human is present: claims of sentience or humanity, simulated emotional dependence, romantic or sexual innuendo, and adult-minor romantic role-play. Starts July 1, 2027 · Ongoing · Applies when: Minor account holders. · Idaho Code 48-2104(4)

Operator: Offer tools for account holders, and for parents or guardians of account holders under 13, to manage privacy and account settings; offer related parental tools for older minors as appropriate. Starts July 1, 2027 · Ongoing · Applies when: Parental tools for minor account holders 13 and older are owed as appropriate based on relevant risks. · Idaho Code 48-2104(5)

Idaho Freedom From AI-Rigged (FAIR) Elections Act

House Bill 664 (2024), Session Laws 2024, ch. 172, signed March 25, 2024; adds Idaho Code 67-6628A. Enforced by: The affected candidate, by civil suit. The section names no state agency enforcer. A web search on November 14, 2026 found no report of a court order blocking this law; court dockets were not searched.. Checked November 14, 2026.

Information content provider: Include the disclosure "This (video/audio) has been manipulated" in an electioneering communication containing synthetic media of a candidate; it is an affirmative defense to the candidate's suit. Starts March 25, 2024 · Each time it happens · Applies when: An electioneering communication deceptively represents a candidate's action or speech through synthetic media. The act frames the disclosure as an affirmative defense, not a stand-alone mandate. · Idaho Code 67-6628A(3)-(5), (8)

Information content provider: Format the disclosure: video text prominent, easily readable and shown for the entire video; audio clearly spoken at the beginning, end and two-minute intervals. When triggered · Each time it happens · Applies when: When relying on the disclosure defense. The repeat at intervals of no more than two minutes applies to audio longer than two minutes. · Idaho Code 67-6628A(5)(a), (b)

Medium: Do not remove the manipulated-media disclosure from an electioneering communication, and do not change its content so that it qualifies as synthetic media. Starts March 25, 2024 · Ongoing · Applies when: A medium, other than a federally licensed broadcaster transmitting a communication subject to 47 U.S.C. 315, disseminates an electioneering communication. · Idaho Code 67-6628A(9)

Idaho crime of disclosing explicit synthetic media (H 575, 2024)

House Bill 575 (2024), Session Laws 2024, ch. 105; adds Idaho Code 18-6606; amended by House Bill 727 (2026), Session Laws 2026, ch. 121, sec. 2. Enforced by: Criminal prosecution by the state (the section does not name the prosecutor). A web search on November 15, 2026 found no report of a court order blocking 18-6606; court dockets were not searched.. Checked November 15, 2026.

Person: Do not knowingly disclose explicit synthetic media when you know or reasonably should know the person portrayed did not consent and it would cause substantial emotional distress. Starts July 1, 2024 · Ongoing · Applies when: Knowing disclosure of explicit synthetic media of an identifiable person; the exceptions in 18-6606(5) apply only to this offense. · Idaho Code 18-6606(1)(a)

Person: Do not disclose explicit synthetic media intending to annoy, terrify, threaten, intimidate, harass, offend, humiliate or degrade an identifiable person. Starts July 1, 2024 · Ongoing · Applies when: Knowing disclosure with that intent. · Idaho Code 18-6606(1)(b)

Person: Do not possess explicit synthetic media and threaten to disclose it to obtain money or other valuable consideration. Starts July 1, 2024 · Ongoing · Applies when: Knowing possession plus a threat to disclose, made with that intent. · Idaho Code 18-6606(1)(c)

Interactive computer service or telecommunication service: Do not intentionally aid or abet disclosing explicit synthetic media; providers are otherwise not covered for content provided by another person. Starts July 1, 2024 · Ongoing · Applies when: A provider hosts or carries content supplied by someone else. · Idaho Code 18-6606(6)

Idaho crime of visual representations of the sexual abuse of children, including AI images (H 465, 2024)

House Bill 465 (2024), Session Laws 2024, ch. 194; adds Idaho Code 18-1507C; amends 18-1507, 18-1507A, 67-1401 and 67-1410. Enforced by: Criminal prosecution by the state (the section does not name the prosecutor). A web search on November 15, 2026 found no report of a court order blocking 18-1507C; court dockets were not searched.. Checked November 15, 2026.

Person: Do not knowingly produce, distribute, receive, possess or access an obscene visual depiction of a child in explicit sexual conduct, including images made with generative AI or machine learning. Starts July 1, 2024 · Ongoing · Applies when: The depiction shows a child (under 18) in explicit sexual conduct and is obscene; the child need not exist. The state must prove the defendant knew the general content. · Idaho Code 18-1507C(1), (3), (6)(f)

Person: If such depictions are received, promptly and in good faith destroy each one, or report to law enforcement and give it access, without letting anyone else view them. When triggered · Each time it happens · Applies when: Framed as an affirmative defense to receiving or possessing, available only for five or fewer depictions. · Idaho Code 18-1507C(4)

Idaho generative AI in public education law (S 1227, 2026)

Senate Bill 1227 (2026), as amended in the House, Session Laws 2026, ch. 71; adds Idaho Code 33-7001 to 33-7008. Enforced by: The law does not name one. Checked November 15, 2026.

Vendor: Disclose whether products use machine learning, predictive analytics or generative AI, and provide assurances on data protection, algorithmic transparency and responsible use. Starts July 1, 2026 · Ongoing · Applies when: Selling generative AI-related software, applications or tools procured by a local school district or public charter school. The act does not say how or when. · Idaho Code 33-7007(1)

Local school district or public charter school: Ensure procured generative AI software, applications and tools comply with state and federal data privacy laws, including FERPA, CIPA and COPPA. Starts July 1, 2026 · Ongoing · Applies when: Procuring generative AI-related software, applications or tools. · Idaho Code 33-7007(1)

Local school district or public charter school: Adopt a policy on student and employee generative AI use in school buildings, on school grounds, during school activities and on school-issued devices. Starts July 1, 2026 · Once · Applies when: Every district and charter school. No deadline is stated. · Idaho Code 33-7004

Idaho personal delivery device law, as revised by H 528 (2022)

House Bill 528 (2022), Session Laws 2022, ch. 98; amends Idaho Code 40-2305 and 49-117. Enforced by: The law does not name one. Checked November 15, 2026.

Personal delivery device operator: Do not operate a personal delivery device on a sidewalk or crosswalk unless the operator is controlling or monitoring its navigation and operation. Starts July 1, 2022 · Ongoing · Applies when: Any sidewalk or crosswalk operation. · Idaho Code 40-2305(8)

Personal delivery device (the section does not name the responsible party): Obey all traffic and pedestrian control devices and signs; yield right-of-way to pedestrians on sidewalks and crosswalks and do not unreasonably interfere with pedestrians or traffic. Starts July 1, 2022 · Ongoing · Applies when: Any operation. On sidewalks and crosswalks the device otherwise has a pedestrian's rights and duties. · Idaho Code 40-2305(2), (3)

Personal delivery device (the section does not name the responsible party): Display a plate or marker with the operator's name and contact information and a unique identifying device number. Starts July 1, 2022 · Ongoing · Applies when: All personal delivery devices. · Idaho Code 40-2305(4)

Personal delivery device (the section does not name the responsible party): Equip the device with a braking system that enables it to come to a controlled stop. Starts July 1, 2022 · Ongoing · Applies when: All personal delivery devices. · Idaho Code 40-2305(5)

Personal delivery device (the section does not name the responsible party): Do not transport hazardous materials or wastes regulated under the federal hazardous materials transportation act that require placarding. Starts July 1, 2022 · Ongoing · Applies when: Placarding required under subpart F of 49 CFR 172. · Idaho Code 40-2305(6)

Personal delivery device (the section does not name the responsible party): Do not operate on a public highway except on the side or berm of the road or as needed to cross at a crosswalk. Starts July 1, 2022 · Ongoing · Applies when: Any highway operation. · Idaho Code 40-2305(7)

Idaho pretrial risk assessment tool transparency law (H 118, 2019)

House Bill 118 (2019), Session Laws 2019, ch. 258; adds Idaho Code 19-1910. Enforced by: The law does not name one. Checked November 15, 2026.

Builder or user of a pretrial risk assessment tool: Do not assert trade secret or other intellectual property protections to quash discovery of the tool's build, validation and usage materials in a criminal or civil case. Starts July 1, 2019 · Ongoing · Applies when: Discovery is sought of the materials listed in 19-1910(1)(a). · Idaho Code 19-1910(1)(c)

Builder or user of a pretrial risk assessment tool: Expect the documents, data and records used to build or validate the tool, and its usage and validation policies, to be open to public inspection, auditing and testing. Starts July 1, 2019 · Ongoing · Applies when: Any pretrial risk assessment tool. The text is passive and does not say who must provide access. · Idaho Code 19-1910(1), (1)(a)

Builder or user of a pretrial risk assessment tool: Expect a party to a criminal case to be entitled to review all calculations and data used to calculate the defendant's own risk score. When triggered · Each time it happens · Applies when: A court has considered, or an expert witness has relied on, the tool in that case. The text does not say who must produce the data. · Idaho Code 19-1910(1)(b)

Illinois

50 items from 13 laws

Illinois AI smart glasses while driving (HB 4843)

Public Act 104-0682 (HB 4843), § 5 amending 625 ILCS 5/12-610.2. Enforced by: Traffic enforcement; a violation is an offense against traffic regulations governing the movement of vehicles.. Checked November 15, 2026.

Driver: Do not use AI smart glasses while driving on a roadway, even hands-free, voice-operated or when stopped in traffic, unless another listed exemption applies. Starts July 31, 2026 · Ongoing · Applies when: Whenever operating a motor vehicle on an Illinois roadway. · 625 ILCS 5/12-610.2(a), (b), (d)(3), (d)(6)

Illinois AI video interview demographic reporting (Section 20 of the Artificial Intelligence Video Interview Act)

Public Act 102-0047 (HB 53, 102nd General Assembly), approved July 9, 2021; adds 820 ILCS 42/20. Enforced by: The law does not name one. Checked November 14, 2026.

Employer: Collect the race and ethnicity of applicants who are and are not given an in-person interview after the AI analysis, and of applicants who are hired. Starts January 1, 2022 · Ongoing · Applies when: The employer relies solely on an AI analysis of a video interview to decide whether an applicant is selected for an in-person interview. · 820 ILCS 42/20(a)(1), (2)

Employer: Report the collected demographic data to the Department of Commerce and Economic Opportunity each year by December 31, covering the 12 months ending the preceding November 30. Starts January 1, 2022 · Every year · Applies when: The employer is covered by Section 20(a). The text does not state when the first report is due. · 820 ILCS 42/20(b)

Illinois Artificial Intelligence Safety Measures Act

Public Act 104-0538 (SB 315, 104th General Assembly), Artificial Intelligence Safety Measures Act; also amends Section 7.5 of the Freedom of Information Act and Section 15 of the Whistleblower Act. Enforced by: Illinois Attorney General, who alone may bring the civil action for penalties. The Illinois Emergency Management Agency and Office of Homeland Security receives filings and reports and, after notice and hearing, may impose the disclosure-statement penalties.. Checked November 14, 2026.

Large frontier developer: Write, implement, comply with and publish on its website a frontier AI framework covering ten listed topics, including capability thresholds, mitigations, third-party assessment, model-weight cybersecurity and incident response. Starts January 1, 2028 · Ongoing · Applies when: A frontier developer whose annual gross revenues, with affiliates, exceeded $500,000,000 in the preceding calendar year. · Public Act 104-0538, Section 10(a)

Large frontier developer: Review and update the framework at least once a year, and publish any materially modified framework with a justification within 30 days. Starts January 1, 2028 · Every year · Applies when: A framework is in place; the 30-day clock runs from a material modification. · Public Act 104-0538, Section 10(b)

Frontier developer: Publish a transparency report giving its website, a contact mechanism, release date, supported languages, output modalities, intended uses and generally applicable use restrictions. Starts January 1, 2027 · Each time it happens · Applies when: Before or at the same time as deploying a new or substantially modified frontier model. Subsection (c) states no separate start date. Publishing the information in a system card or model card counts. · Public Act 104-0538, Section 10(c)(1), (4); Section 99

Large frontier developer: Add to each transparency report machine-readable summaries of catastrophic risk assessments, their results, third-party evaluator involvement and other steps taken under the framework. Starts January 1, 2027 · Each time it happens · Applies when: Before or at the same time as deploying a new or substantially modified frontier model. · Public Act 104-0538, Section 10(c)(2), (3)

Large frontier developer: Retain an independent third party each year to audit compliance with Section 10, with no financial interest between them and no payment tied to results. Starts January 1, 2028 · Every year · Applies when: Beginning January 1, 2028, or 90 days after first becoming a large frontier developer, whichever is later. · Public Act 104-0538, Section 10(d)

Large frontier developer: Within 30 days of receiving the audit report, publish a summary and redacted report and send the redacted report to the Agency and Attorney General. When triggered · Every year · Applies when: Each annual audit. The unredacted report must be kept for as long as the frontier model is deployed plus 5 years. · Public Act 104-0538, Section 10(d)(3), (4)

Large frontier developer: Send the Agency a summary of catastrophic risk assessments from internal use of its frontier models every 3 months. Starts January 1, 2027 · Ongoing · Applies when: Internal use of frontier models. Another schedule may be used if communicated in writing and agreed with the Agency. · Public Act 104-0538, Section 10(e)

Frontier developer: Make no materially false or misleading statement about catastrophic risk from its frontier models or its management of that risk. Starts January 1, 2027 · Ongoing · Applies when: Any statement. A large frontier developer also may not make such statements about implementing or complying with its framework. Good-faith statements reasonable under the circumstances are not violations. · Public Act 104-0538, Section 10(f)

Frontier developer: Report each critical safety incident to the Agency and the Attorney General within 72 hours. When triggered · Each time it happens · Applies when: The developer reasonably believes a critical safety incident occurred. If it poses an imminent risk of death or serious physical injury, an appropriate authority must be told within 24 hours. · Public Act 104-0538, Section 15(c)

Large frontier developer: Keep a current disclosure statement on file with the Agency and pay the required fee; renew annually, on a transfer of model ownership or on a material change. Starts January 1, 2027 · Every year · Applies when: Developing, deploying or operating a frontier model in whole or in part in Illinois. The statement identifies the developer, its offices, listed owners and three points of contact. · Public Act 104-0538, Section 18(a)-(c)

Frontier developer: Do not use rules, policies or contracts to prevent, or retaliate against, a covered employee's protected disclosures; give covered employees notice of their rights. Starts January 1, 2027 · Ongoing · Applies when: A covered employee reasonably believes information shows a specific and substantial danger from catastrophic risk or a violation of the Act. Notice is by continuous posting or yearly written notice. · Public Act 104-0538, Section 20(a), (b), (d)

Large frontier developer: Provide an anonymous internal reporting process, update the discloser monthly, and share disclosures and responses with officers and directors at least quarterly. Starts January 1, 2027 · Ongoing · Applies when: Covered employee disclosures. Matters alleging wrongdoing by a particular officer or director are not shared with that person. · Public Act 104-0538, Section 20(e)

Frontier developer: When redacting a published document, describe the character and justification of each redaction and keep the unredacted information for 5 years. When triggered · Each time it happens · Applies when: Redactions made to protect trade secrets, cybersecurity, public safety or national security, or to comply with law. · Public Act 104-0538, Section 10(g)

Illinois Artificial Intelligence Video Interview Act

Public Act 101-0260 (HB 2557, 101st General Assembly), approved August 9, 2019; 820 ILCS 42/1 to 42/15; Section 20 added by Public Act 102-0047. Enforced by: The law does not name one. Checked November 14, 2026.

Employer: Notify each applicant, before the interview, that artificial intelligence may be used to analyze the video interview and consider the applicant's fitness for the position. Starts January 1, 2020 · Ongoing · Applies when: Before asking applicants to submit video interviews for a position based in Illinois that will be analyzed with AI. · 820 ILCS 42/5(1)

Employer: Give each applicant, before the interview, information explaining how the artificial intelligence works and what general types of characteristics it uses to evaluate applicants. Starts January 1, 2020 · Ongoing · Applies when: Before asking applicants to submit video interviews for a position based in Illinois that will be analyzed with AI. · 820 ILCS 42/5(2)

Employer: Obtain each applicant's consent, before the interview, to be evaluated by the AI program; do not use AI to evaluate applicants who have not consented. Starts January 1, 2020 · Ongoing · Applies when: Before asking applicants to submit video interviews for a position based in Illinois that will be analyzed with AI. · 820 ILCS 42/5(3) and closing sentence

Employer: Do not share applicant videos, except with persons whose expertise or technology is necessary to evaluate an applicant's fitness for a position. Starts January 1, 2020 · Ongoing · Applies when: The employer holds applicant video interviews. · 820 ILCS 42/10

Employer: Delete the applicant's interviews within 30 days after receiving the request, and instruct anyone who received copies to delete them, including electronically generated backup copies. When triggered · Each time it happens · Applies when: An applicant asks for deletion. · 820 ILCS 42/15

Person who received copies of an applicant's video interview: Comply with the employer's instructions to delete the applicant's video interviews. When triggered · Each time it happens · Applies when: The employer passes on a deletion instruction after an applicant's request. · 820 ILCS 42/15

Employer: Collect the race and ethnicity of applicants who are and are not given an in-person interview after AI analysis, and of those hired, and report it yearly by December 31. Starts January 1, 2022 · Every year · Applies when: The employer relies solely on an AI analysis of a video interview to decide whether an applicant gets an in-person interview. The report goes to the Department of Commerce and Economic Opportunity and covers the 12 months ending November 30. · 820 ILCS 42/20(a), (b) (added by P.A. 102-0047)

Illinois Health Care Protection Act, utilization review provision (HB 5395)

Public Act 103-0650 (HB 5395, Health Care Protection Act), effective January 1, 2025; amends 215 ILCS 134/85(e)(2) among many other sections. Enforced by: Illinois Department of Insurance.. Checked November 11, 2026.

Utilization review program: Only a clinical peer may make adverse medical-necessity determinations; an accredited algorithmic automated process may only certify necessity or refer cases to a clinical peer. Starts January 1, 2025 · Ongoing · Applies when: Any utilization review for medical necessity. · 215 ILCS 134/85(e)(2)

Illinois Human Rights Act AI-in-employment amendment (Public Act 103-0804)

Public Act 103-0804, amending 775 ILCS 5/2-101 and 5/2-102 (adding 2-101(M), (N) and 2-102(L)). Enforced by: Illinois Department of Human Rights (the Act makes the conduct a civil rights violation under the Human Rights Act; the Act's existing charge, investigation and Human Rights Commission or circuit court remedies apply and were not re-read today).. Checked November 11, 2026.

Employer: Do not use AI that has the effect of discriminating against employees on a protected basis in recruitment, hiring, promotion, renewal, training selection, discharge, discipline, tenure or employment terms. Starts January 1, 2026 · Ongoing · Applies when: Any use of AI for the listed employment purposes, on and after January 1, 2026. · 775 ILCS 5/2-102(L)(1)

Employer: Do not use zip codes as a proxy for protected classes. Starts January 1, 2026 · Ongoing · Applies when: Any use of AI for the listed employment purposes, on and after January 1, 2026. · 775 ILCS 5/2-102(L)(1)

Employer: Notify employees that the employer is using AI for the listed employment purposes; failing to notify is a civil rights violation. Starts January 1, 2026 · Ongoing · Applies when: When AI is used for recruitment, hiring, promotion, renewal, training selection, discharge, discipline, tenure or terms of employment, on and after January 1, 2026. Timing and means are left to Department rules. · 775 ILCS 5/2-102(L)(2)

Illinois Right of Publicity Act digital replica amendments (HB 4875)

Public Act 103-0836 (HB 4875), effective January 1, 2025; amends Right of Publicity Act, 765 ILCS 1075/5, 1075/20, 1075/30 and 1075/35. Enforced by: Private civil action by the individual or authorized representative, a written transferee of the rights, or after death a person with an interest in them; for a recording artist, also the holder of an exclusive personal-services contract or exclusive distribution license. No government enforcer is named.. Checked November 14, 2026.

Person: Do not knowingly distribute, transmit or make available to the general public a sound recording or audiovisual work that you actually know contains an unauthorized digital replica. Starts January 1, 2025 · Ongoing · Applies when: Acts on or after January 1, 2025; the Section 35(c) exemptions apply. · 765 ILCS 1075/30(b)

Person: Do not materially contribute to, induce or otherwise facilitate another party's Section 30(b) violation after obtaining actual knowledge that the other party is infringing. Starts January 1, 2025 · Ongoing · Applies when: After the person obtains actual knowledge of the other party's infringement; hosts that meet Section 30(e) are outside this rule. · 765 ILCS 1075/30(d), (e)

Person that solely transmits, stores or provides access to data or software: On gaining knowledge or written notice of claimed unauthorized activity, act expeditiously to remove or disable access to the material, or expeditiously notify the party able to do so. When triggered · Each time it happens · Applies when: On an event: actual knowledge, awareness of facts creating it, or written notice of an unauthorized digital replica stored or transmitted at a user's direction. Meeting a Section 30(e) condition keeps the host outside facilitation liability. · 765 ILCS 1075/30(e)(3), (f)

Person: Do not use a deceased individual's identity or digital replica for commercial purposes for 50 years after death without prior written consent of the persons specified in Section 20. Starts January 1, 2025 · Ongoing · Applies when: The individual died after the Right of Publicity Act's effective date; the Section 35(c) exemptions apply. · 765 ILCS 1075/30(c)

Illinois Transparency in Downcoding Act (SB 3114)

Public Act 104-0568 (SB 3114), Transparency in Downcoding Act; adds 305 ILCS 5/5-5.12g. Enforced by: Illinois Department of Insurance, using its powers under the Insurance Code; the Department of Healthcare and Family Services for Medicaid managed care organizations. Payors are responsible for delegated third parties.. Checked November 11, 2026.

Health care payor: Do not use any policy, algorithm or automated tool that bypasses evaluation of the billing professional's information to downcode a claim. Starts January 1, 2028 · Ongoing · Applies when: Any claim. An automated process may flag claims that may justify downcoding under CPT guidelines. · Transparency in Downcoding Act, Section 15(a), (b)

Health care payor: Have a natural person make or review every downcoding determination under CPT guidelines, considering the information the billing professional submitted. Starts January 1, 2028 · Ongoing · Applies when: Every downcoding determination; the payor must keep written policies requiring this. · Transparency in Downcoding Act, Section 15(b)

Health care payor: Do not downcode a claim based solely on reported diagnosis codes, or target professionals who routinely treat complex or chronic conditions. Starts January 1, 2028 · Ongoing · Applies when: Any claim. · Transparency in Downcoding Act, Sections 20 and 35

Health care payor: Notify the billing professional with CARCs and RARCs, giving the specific reason, original and revised codes and payments, and how to dispute. When triggered · Each time it happens · Applies when: Whenever a claim is downcoded. · Transparency in Downcoding Act, Section 25

Health care payor: Offer a dispute process allowing at least 90 days to file, reviewed by a qualified natural person not involved in the original decision. Starts January 1, 2028 · Ongoing · Applies when: All downcoded claims. · Transparency in Downcoding Act, Section 30

Illinois Wellness and Oversight for Psychological Resources Act (HB 1806)

Public Act 104-0054 (HB 1806, 104th General Assembly), approved and effective August 1, 2025; 225 ILCS 155/1 et seq.. Enforced by: Illinois Department of Financial and Professional Regulation, which may investigate actual, alleged or suspected violations and assesses penalties after a hearing under Section 2105-100 of the Department of Professional Regulation Law. No court order blocking the Act was looked for in this review.. Checked November 12, 2026.

Individual, corporation, or entity: Do not provide, advertise or otherwise offer therapy or psychotherapy services to the public in Illinois, including through Internet-based AI, unless a licensed professional conducts the services. Starts August 1, 2025 · Ongoing · Applies when: Any offer of therapy or psychotherapy services to the public in Illinois. · P.A. 104-0054 § 20(a) (225 ILCS 155/20(a))

Licensed professional: Use AI only for administrative or supplementary support, and keep full responsibility for all interactions, outputs and data use associated with the system. Starts August 1, 2025 · Ongoing · Applies when: A licensed professional uses AI tools or systems in therapy or psychotherapy services. · P.A. 104-0054 §§ 15(a), 20(b)

Licensed professional: Before using AI for supplementary support, tell the patient or representative in writing that AI will be used and its specific purpose, and get their consent. When triggered · Ongoing · Applies when: The client's therapeutic session is recorded or transcribed. Notice and consent may come from the patient's legally authorized representative. · P.A. 104-0054 § 15(b)

Licensed professional: Do not allow AI to make independent therapeutic decisions, directly interact with clients in therapeutic communication, generate unreviewed recommendations or treatment plans, or detect emotions or mental states. Starts August 1, 2025 · Ongoing · Applies when: Any use of AI by a licensed professional. Recommendations and treatment plans may be AI-generated only with the licensed professional's review and approval. · P.A. 104-0054 § 20(b)(1)-(4)

Licensed professional: Keep records and communications with individuals seeking therapy or psychotherapy services confidential; disclose only as the Mental Health and Developmental Disabilities Confidentiality Act requires. Starts August 1, 2025 · Ongoing · Applies when: All records kept by a licensed professional and all communications with an individual seeking services. · P.A. 104-0054 § 25

Individual, corporation, or entity found in violation: Pay any civil penalty within 60 days after the date of the Department order imposing it. When triggered · Each time it happens · Applies when: The Department has imposed a civil penalty after a hearing. The order is a judgment and may be filed and executed like a court judgment. · P.A. 104-0054 § 30(a)

Illinois civil remedy for sharing digitally altered sexual images (HB 2123)

Public Act 103-0294 (HB 2123), amending the Civil Remedies for Nonconsensual Dissemination of Private Sexual Images Act, 740 ILCS 190/5, 10, 15 and 25. Enforced by: The person shown, by a civil lawsuit. A web search on November 15, 2026 found no court challenge.. Checked November 15, 2026.

Person: Do not share, or threaten to share, an intentionally digitally altered sexual image of an identifiable person without consent. Starts January 1, 2024 · Ongoing · Applies when: The sharer knew or recklessly disregarded that the person did not consent, that the image was altered, and that the person was identifiable. Labeling the image as altered is no defense. · 740 ILCS 190/10(a), (c)

Illinois crimes for AI-generated child sexual imagery and sexually explicit digitized depictions (HB 4623)

Public Act 103-0825 (HB 4623), creating 720 ILCS 5/11-20.4 and 5/11-23.7 and amending 5/11-20.1. Enforced by: Criminal prosecution; the sections do not name the prosecuting office. A web search on November 15, 2026 found no court challenge.. Checked November 15, 2026.

Person: Do not knowingly receive, access, reproduce, share, exhibit or possess to share an obscene depiction of a purported child, including computer-generated images. Starts January 1, 2025 · Ongoing · Applies when: The depiction shows someone indistinguishable from an actual child under 18. · 720 ILCS 5/11-20.4(b)

Person: Do not intentionally share a sexually explicit digitized depiction of an identifiable person who has not consented. Starts January 1, 2025 · Ongoing · Applies when: The sharer knows or should have known the person did not consent. The person is identifiable from the image, linked information, or is known to the sharer. · 720 ILCS 5/11-23.7(b)

Illinois digital replica contract law (HB 3178)

Public Act 104-0282 (HB 3178), effective January 1, 2026; amends 815 ILCS 550/10 (Digital Voice and Likeness Protection Act). Enforced by: The law does not name one. Checked November 14, 2026.

Party contracting for an individual's services: Include a reasonably specific description of the digital replica's intended uses, or the provision is unenforceable for new performances. Starts January 1, 2026 · Ongoing · Applies when: The provision lets a digital replica replace in-person work and the individual had neither negotiating counsel nor a union agreement covering replicas. · 815 ILCS 550/10(a)

Illinois utilization review automated process law (HB 2472)

Public Act 103-0656 (HB 2472), effective January 1, 2025; amends 215 ILCS 134/10, 134/45 and 134/85 (Managed Care Reform and Patient Rights Act) among others. Enforced by: Illinois Department of Insurance.. Checked November 11, 2026.

Utilization review program: Only a clinical peer may make an adverse medical-necessity determination or review its appeal, even when an algorithmic automated process is used. Starts January 1, 2025 · Ongoing · Applies when: Any utilization review for medical necessity. An accredited automated process may certify necessity or refer a case to a clinical peer. · 215 ILCS 134/45(i); 134/85(e)(2)

Utilization review program: Use objective, evidence-based criteria meeting URAC or NCQA standards, and file proof of compliance with each registration and renewal. Starts January 1, 2025 · Ongoing · Applies when: Programs that use algorithmic automated processes to decide whether to make adverse medical-necessity determinations. Registration is every two years. · 215 ILCS 134/85(a), (b-10)

Utilization review program: File policies ensuring board-certified licensed physicians set all criteria the automated process uses. Starts January 1, 2025 · Ongoing · Applies when: With registration materials, for programs using algorithmic automated processes. · 215 ILCS 134/85(b-10)(1)

Utilization review program: Keep a program integrity system in which board-certified physicians verify the automated process and any corrections give results consistent with the criteria. Starts January 1, 2025 · Ongoing · Applies when: Before new or revised criteria are used, and when implementation errors are found after they take effect. · 215 ILCS 134/85(b-10)(2)

Indiana

17 items from 4 laws

Indiana computer-generated intimate images law (HEA 1047, 2024)

House Enrolled Act 1047 (2024), P.L. 79-2024; amends IC 34-21.5-2-1, IC 35-45-4-5 and IC 35-45-4-8. Enforced by: Criminal prosecution by the State; the section does not name a prosecuting office. No lawsuit challenging the law was found in this review.. Checked November 15, 2026.

Person: Do not distribute an intimate image, including a computer-generated or AI-altered image appearing to depict someone, knowing or having reason to know the person depicted does not consent. Starts July 1, 2024 · Ongoing · Applies when: The depicted person need not have sent the image. Exceptions in IC 35-45-4-8(a) apply. · IC 35-45-4-8(c)-(e)

Indiana fabricated media in campaign communications law (HEA 1133, 2024)

House Enrolled Act 1133 (2024), P.L. 81-2024; adds IC 3-9-8. Enforced by: No public enforcer is named; the depicted candidate enforces through a civil action. No lawsuit challenging the law was found in this review.. Checked November 15, 2026.

Person who paid for a campaign communication: Include a separate disclaimer stating elements of the media were digitally altered or artificially generated, in the statute's exact wording. Starts March 12, 2024 · Each time it happens · Applies when: A campaign communication includes fabricated media depicting a candidate. This is in addition to the IC 3-9-3-2.5(d) disclaimer. · IC 3-9-8-5

Person who paid for a campaign communication: In audio, read the disclaimer in each language used, understandably, no quieter than the loudest audio, at the start and end and every two minutes. Starts March 12, 2024 · Each time it happens · Applies when: Audio campaign communications with fabricated media of a candidate. · IC 3-9-8-5

Person who paid for a campaign communication: In video and print, show the disclaimer as IC 3-9-3-2.5(e) requires; in video, display it continuously for the whole communication. Starts March 12, 2024 · Each time it happens · Applies when: Printed or video campaign communications with fabricated media of a candidate. · IC 3-9-8-5

Disseminator: Do not knowingly, intentionally or recklessly alter or remove the fabricated-media disclaimer before disseminating a campaign communication. Starts March 12, 2024 · Each time it happens · Applies when: The communication carried the disclaimer when the disseminator received it. · IC 3-9-8-6(a)(3)

Indiana personal delivery devices law (HEA 1072, 2021)

House Enrolled Act 1072 (2021); adds IC 9-21-11.5. Enforced by: The law does not name one. Checked November 15, 2026.

Operator: Give each device a unique identifying number and a means of identifying the operator. Starts July 1, 2021 · Ongoing · Applies when: Any device operating on Indiana sidewalks, crosswalks, roads or streets. · IC 9-21-11.5-5(1)-(2)

Operator: Operate without unreasonably interfering with traffic or blocking public rights-of-way, obey traffic and pedestrian signals, and stay at or under 10 mph on sidewalks and crosswalks. Starts July 1, 2021 · Ongoing · Applies when: Any device in operation. · IC 9-21-11.5-5(3)-(6)

Operator: Equip devices with a controlled-stop system and front and rear lights visible from 500 feet when operating between sunset and sunrise. Starts July 1, 2021 · Ongoing · Applies when: Any device in operation. · IC 9-21-11.5-5(7)-(8)

Operator: Do not transport hazardous materials that must be placarded under 49 CFR Part 172, Subpart F. Starts July 1, 2021 · Ongoing · Applies when: Any device in operation. · IC 9-21-11.5-5(9)

Operator: Carry general liability insurance of at least $100,000 covering the combined operation of devices under the operator's control. Starts July 1, 2021 · Ongoing · Applies when: Any operator of personal delivery devices. · IC 9-21-11.5-8

Indiana social media providers and adolescents law (HEA 1408, 2026)

House Enrolled Act 1408 (2026), SECTIONS 13-14; adds IC 24-16 and IC 24-5-0.5-3(b)(44). Enforced by: Indiana Attorney General; a violation of IC 24-16 is a deceptive act actionable by the Attorney General under the Deceptive Consumer Sales Act (IC 24-5-0.5). No lawsuit challenging the law was found in this review.. Checked November 15, 2026.

Social media provider: When an Indiana account is requested, use commercially reasonable means, such as a neutral age screen, to determine the person's age and state of residence. Starts January 1, 2027 · Each time it happens · Applies when: Any account creation request. · IC 24-16-3-1

Social media provider: Create an account for an adolescent only with verifiable parental consent. Starts January 1, 2027 · Each time it happens · Applies when: The person requesting an account is under 16. · IC 24-16-3-1

Social media provider: For known Indiana adolescents, block messages and search visibility except linked accounts, stop usage-based content, recommendations and ads, and disable addictive features; users cannot change these. Starts January 1, 2027 · Ongoing · Applies when: Account holder known to be an Indiana adolescent. · IC 24-16-3-2(a)-(c)

Social media provider: Give a consenting parent a separate password to monitor time spent, set daily, weekly and time-of-day limits, and access the account. Starts January 1, 2027 · Ongoing · Applies when: A parent has given verifiable parental consent. · IC 24-16-3-2(d)

Social media provider: Determine an Indiana holder's age within 14 days of 25 hours' use in six months; verify after 50 hours; redo every further 100 hours and on collecting demographics. Starts January 1, 2027 · Ongoing · Applies when: Existing Indiana account holders, starting January 1, 2027. · IC 24-16-4-1(a), (c), (e)

Social media provider: Notify an adolescent holder lacking parental consent within 7 days, allow a 30-day dispute, and terminate the account if not resolved. When triggered · Each time it happens · Applies when: Age estimation shows an adolescent without verifiable parental consent. · IC 24-16-4-2

Social media provider: Use information received for parental consent only to register that consent, then delete it immediately unless other law requires keeping it. Starts January 1, 2027 · Each time it happens · Applies when: Any verifiable parental consent process. · IC 24-16-5-1

Iowa

21 items from 6 laws

Iowa altered sexual images harassment law (HF 2240, 2024)

HF 2240, 90th General Assembly (2024); 2024 Iowa Acts, ch. 1065; Iowa Code 708.7(1)(a)(5), 692A.102(1)(a)(6). Enforced by: Criminal prosecution; the act does not name a prosecutor. A web search on November 15, 2026 found no lawsuit or court order against this provision.. Checked November 15, 2026.

Person: Do not disseminate, publish, distribute or post a nude or sexual depiction of a recognizable person, including one created or altered from their image, without consent. Starts July 1, 2024 · Ongoing · Applies when: The person intends to intimidate, annoy or alarm, and the depicted person has not consented to the dissemination. Offenders 18 or older must register as sex offenders. · Iowa Code 708.7(1)(a)(5); 692A.102(1)(a)(6)

Iowa automated driving system vehicles law (SF 302, 2019)

SF 302, 88th General Assembly (2019); 2019 Iowa Acts, ch. 75; Iowa Code 321.514 to 321.519. Enforced by: The Iowa Department of Transportation regulates these vehicles exclusively; accident-duty violations are charged against the owner under Iowa Code 321.261 to 321.273. A web search on November 15, 2026 found no lawsuit or court order against this law.. Checked November 15, 2026.

Owner or operator: Operate driverless only if the vehicle can reach a minimal risk condition, can obey traffic and safety laws (unless exempted) and is manufacturer-certified to federal safety standards. Starts July 1, 2019 · Ongoing · Applies when: A driverless-capable vehicle on public highways with no conventional human driver present. · Iowa Code 321.515(1)

Human driver: Hold a valid license, carry the required liability coverage, operate as the manufacturer requires, and take manual control when the system prompts. Starts July 1, 2019 · Ongoing · Applies when: A system-equipped vehicle operated with a human driver present. · Iowa Code 321.515(2)(a)

Owner: Obtain financial liability coverage before the vehicle runs on Iowa highways, and keep proof of coverage in the vehicle. Starts July 1, 2019 · Ongoing · Applies when: Any system-equipped vehicle. · Iowa Code 321.516

Owner: After an accident, ensure the vehicle remains at the scene and complies with accident duties where possible, and promptly report the accident to law enforcement. When triggered · Each time it happens · Applies when: Any accident involving a system-equipped vehicle. The vehicle's failures are imputed to the owner. · Iowa Code 321.517

Iowa conversational AI services law (SF 2417)

Senate File 2417 (91st General Assembly, 2026 Session), 2026 Iowa Acts, ch. 1068; adds Iowa Code chapter 554J (554J.1 to 554J.6). Enforced by: Iowa Attorney General, who has authority to enforce the chapter. The text does not call that authority exclusive.. Checked November 12, 2026.

Operator: Clearly and conspicuously disclose to minor account holders that they are interacting with AI, by a persistent visible disclaimer, or at each interaction's start and at least every three hours. Starts July 1, 2027 · Ongoing · Applies when: The account holder is a minor (known or reasonably certain to be under 18). · Iowa Code 554J.2(1)

Operator: Do not provide minor users points or similar rewards at unpredictable intervals intended to encourage increased engagement. Starts July 1, 2027 · Ongoing · Applies when: Minor users. · Iowa Code 554J.2(2)

Operator: Institute reasonable measures to prevent sexually explicit visual depictions, statements that the minor should engage in sexually explicit conduct, and sexual objectification of the minor. Starts July 1, 2027 · Ongoing · Applies when: Minor account holders. · Iowa Code 554J.2(3)

Operator: Institute reasonable measures to prevent statements suggesting a human is present: claims of sentience or humanity, simulated emotional dependence on a minor, romantic interaction or sexual innuendo, adult-minor romantic role-play. Starts July 1, 2027 · Ongoing · Applies when: Listed under the minors section; the lead-in does not itself say minor account holders. See open questions. · Iowa Code 554J.2(4)

Operator: Offer minor account holders tools to manage privacy and account settings; offer parents or guardians such tools for minors under 13, and for minor account holders as appropriate. Starts July 1, 2027 · Ongoing · Applies when: Minor account holders; beyond the under-13 rule, parental tools are owed as appropriate based on relevant risks. · Iowa Code 554J.2(5)

Operator: Clearly and conspicuously disclose that the service is AI, by a persistent visible disclaimer or a disclaimer appearing after every three hours of continuous interaction. Starts July 1, 2027 · Ongoing · Applies when: A reasonable individual interacting with the service would believe they are interacting with a human. · Iowa Code 554J.3

Operator: Adopt protocols for responding to user prompts about suicidal ideation or self-harm, including reasonable efforts to refer the user to crisis providers such as a suicide hotline. Starts July 1, 2027 · Ongoing · Applies when: Any conversational AI service made available to the public. · Iowa Code 554J.4

Operator: Do not knowingly and intentionally cause or program the service to suggest it is designed to provide professional psychology or behavioral health services requiring an Iowa license. Starts July 1, 2027 · Ongoing · Applies when: Statements that would lead a reasonable individual to that belief; licensure under Iowa Code chapter 154B or 154D. · Iowa Code 554J.5

Iowa created or modified sexual images of minors law (SF 2243, 2024)

SF 2243, 90th General Assembly (2024); 2024 Iowa Acts, ch. 1015; Iowa Code 728.12(3). Enforced by: Criminal prosecution; the act does not name a prosecutor. A web search on November 15, 2026 found no lawsuit or court order against this provision.. Checked November 15, 2026.

Person: Do not knowingly purchase or possess a depiction created, adapted or modified to show an identifiable minor in a prohibited sexual act or its simulation. Starts July 1, 2024 · Ongoing · Applies when: Each minor, and since the 2025 amendment each depiction of the same minor, is a separate offense. The state need not prove the minor's actual identity. · Iowa Code 728.12(3)(a), (b), (e), (f)

Iowa personal delivery devices law (HF 304, 2021)

HF 304, 89th General Assembly (2021); 2021 Iowa Acts, ch. 119; Iowa Code chapter 321O; 321.1(90), 321.519(3), 805.8A(5), (9B). Enforced by: Peace officers, including local peace officers, enforce state law on device operation. A web search on November 15, 2026 found no lawsuit or court order against this law.. Checked November 15, 2026.

Business entity: Operate a personal delivery device only if an agent can monitor it and remotely take physical control while it is engaged. Starts July 1, 2021 · Ongoing · Applies when: Any device operated under chapter 321O. · Iowa Code 321O.3(1)

Operator: Ensure the device follows pedestrian rules, yields to all traffic, does not obstruct others, follows local ordinances, can stop safely and carries no placardable hazardous material. Starts July 1, 2021 · Ongoing · Applies when: While the device is engaged. · Iowa Code 321O.4

Operator: Keep to 6 mph in pedestrian areas; on roads posted 40 mph or less, stay as far right as practicable and go no faster than 20 mph or the limit. Starts July 1, 2021 · Ongoing · Applies when: Any operation. · Iowa Code 321O.5(1)

Business entity: Fit each device with a marker giving the operating business's name, contact information and a unique ID number, and brakes allowing a controlled stop. Starts July 1, 2021 · Ongoing · Applies when: Every device. · Iowa Code 321O.6(1)

Operator: Display lighted front and rear lamps, visible on all sides and recognizable from 500 feet in clear weather, during the lamp hours in 321.384. Starts July 1, 2021 · Ongoing · Applies when: Operation during the times set by Iowa Code 321.384. · Iowa Code 321O.6(2)

Business entity: Maintain general liability insurance of at least $500,000 for damages arising from operating a personal delivery device. Starts July 1, 2021 · Ongoing · Applies when: Any business entity operating a device. · Iowa Code 321O.8

Iowa prior authorization law, AI provision (HF 2635)

2026 Iowa Acts, chapter 1087 (H.F. 2635), § 2, adding Iowa Code § 514F.8(2A); enforcement in § 8, adding Iowa Code § 514F.8E. Enforced by: Iowa Commissioner of Insurance. Noncompliance with § 514F.8 is remedied under chapters 505 and 507B using the procedures in §§ 507B.6 to 507B.8, and on finding a pattern or practice of noncompliance the commissioner may suspend a utilization review organization's authority to conduct utilization review. A web search on November 12, 2026 found no report of a court order blocking this law; court dockets were not searched.. Checked November 12, 2026.

Utilization review organization: Do not use an AI-based algorithm or system as the sole basis to deny, delay or downgrade a prior authorization request for a health care service based on medical necessity. Starts July 1, 2026 · Ongoing · Applies when: A prior authorization request for a health care service based on medical necessity. An AI-based algorithm or system may be used to provide an initial review of a request. · 2026 Iowa Acts, ch. 1087, § 2 (Iowa Code § 514F.8(2A))

Kansas

10 items from 4 laws

Kansas AI-generated child sexual abuse material and intimate images law (SB 186)

SB 186, 2025 Session Laws of Kansas, Chapter 120; amends K.S.A. 21-5510, 21-5611 and 21-6101, among others. Enforced by: State prosecutors.. Checked November 15, 2026.

Person: Do not possess an obscene artificially generated depiction of a child in sexually explicit conduct with intent to arouse or satisfy sexual desires or appeal to prurient interest. Starts July 1, 2025 · Ongoing · Applies when: Covers AI or digitally made depictions even when no real child was involved. · K.S.A. 21-5510(a)(2)(B), (d)(6)

Person: Do not disseminate an image of an identifiable adult nude or in sexual activity, including one made or altered by AI, with intent to harass, threaten or intimidate, without consent. Starts July 1, 2025 · Ongoing · Applies when: The depicted person is 18 or older and had a reasonable expectation of privacy. Covers AI-altered images regardless of the person's involvement in the original. · K.S.A. 21-6101(a)(8), (e)

Person under 19: Do not knowingly transmit a nude visual depiction of an identifiable child aged 12 to 17, including one made or altered by AI to appear to depict that child. Starts July 1, 2025 · Ongoing · Applies when: The offender is under 19. Aggravated if done to harass or harm, for gain, or to send to more than one person. · K.S.A. 21-5611(a), (b), (g), as amended by SB 186

Kansas blackmail with AI-altered intimate images (HB 2479)

HB 2479, 2026 Session Laws of Kansas, Chapter 114; amends K.S.A. 21-5428 and 21-6101, among others. Enforced by: State prosecutors, as the crime of blackmail.. Checked November 15, 2026.

Person: Do not threaten to disseminate an image of an identifiable person nude or in sexual activity, including an AI-altered one, to gain something of value or compel an act. Starts July 1, 2026 · Ongoing · Applies when: The threat is made intentionally to gain anything of value or to compel another to act against their will. Covers AI or digitally made images regardless of the person's involvement. · K.S.A. 21-5428(a)(2)(B), as amended by HB 2479 § 5

Kansas driverless-capable vehicle law (SB 313)

SB 313, 2022 Session Laws of Kansas, Chapter 93; K.S.A. 8-2901 to 8-2910 and amendments to K.S.A. 8-2106 and 8-2204. Enforced by: Kansas Highway Patrol, which has exclusive regulatory authority. Traffic violations are enforced as if a human were driving, with the registered owner treated as the operator and citations sent by certified mail.. Checked November 15, 2026.

Owner of a driverless-capable vehicle: Before driverless operation, submit a law enforcement interaction plan to the Kansas Highway Patrol covering fleet support contact, first-responder safety, how to tell autonomous mode, and other hazards. Starts July 1, 2022 · Once · Applies when: Before operating on Kansas public roads without a conventional human driver. · K.S.A. 8-2902(b)

Owner of a driverless-capable vehicle: Operate driverless only if the vehicle can reach a minimal risk condition on failure, can obey traffic laws, and bears any federally required safety certification label. Starts July 1, 2022 · Ongoing · Applies when: Driverless operation with the ADS engaged on Kansas public highways. · K.S.A. 8-2902(a)(1)-(3)

Owner of a driverless-capable vehicle: Keep a conventional human driver physically present in each driverless-capable vehicle for 12 consecutive months after your entity first places it in service in Kansas. When triggered · Ongoing · Applies when: Not required for vehicles not designed for human occupancy or dedicated driverless vehicles without manual controls. · K.S.A. 8-2902(a)(5)

Owner of a driverless-capable vehicle: Obtain insurance, self-insurance or other financial security before the vehicle operates on Kansas highways, carry proof in the vehicle, and register and title it as driverless-capable. Starts July 1, 2022 · Ongoing · Applies when: Before operation. Registration must identify a fully autonomous vehicle; the title must identify a driverless-capable vehicle. · SB 313 §§ 3, 7

Owner of a driverless-capable vehicle: After a crash during driverless operation, keep the vehicle at or near the scene or give registration and insurance details, and promptly report it or have the vehicle alert authorities. When triggered · Each time it happens · Applies when: A crash while operating without a human driver; meeting these conditions replaces the usual accident reporting duties. · SB 313 § 4

Kansas sexual extortion with AI-altered images (HB 2537, Caleb's Law)

HB 2537, 2026 Session Laws of Kansas, Chapter 45; amends K.S.A. 21-5515 and adds an attorney general education section. Enforced by: State prosecutors, as the crime of sexual extortion.. Checked November 15, 2026.

Person: Do not threaten to distribute a sexual or nude image of someone, including one made or altered by AI, to coerce sexual conduct, more images, or anything of value. Starts July 1, 2026 · Ongoing · Applies when: The threat is made with intent to coerce, or causes, the person to comply. Also covers threats of property damage, reputational harm or violence to coerce sexual conduct or material. · K.S.A. 21-5515(a), (h), as amended by HB 2537 § 2

Kentucky

15 items from 4 laws

Kentucky SB 4 (2025): synthetic media in electioneering communications

SB 4, 2025 Regular Session; 2025 Ky. Acts ch. 66; amends KRS 117.001 and creates a new section of KRS Chapter 117 (election provisions); also amends KRS 42.722 and 42.726. Enforced by: Civil action by the candidate whose likeness was altered, in the circuit court of the county where the candidate lives; failing to obey a disclosure order carries the penalty for violating KRS 121.190(1). A web search on November 15, 2026 found no court challenge to these provisions.. Checked November 15, 2026.

Sponsor of an electioneering communication: Include a clear and conspicuous disclosure, likely to be noticed, on any electioneering communication that alters a candidate's likeness with synthetic media. Starts March 24, 2025 · Each time it happens · Applies when: Within 45 days before a primary or regular election. A candidate may sue for an order requiring disclosure; disclosure is an affirmative defense. · 2025 Ky. Acts ch. 66, § 5

Medium disseminating an electioneering communication: Do not intentionally remove a required synthetic media disclosure and fail to restore it when notified, and do not alter content so it becomes synthetic media. Starts March 24, 2025 · Each time it happens · Applies when: Broadcasters under 47 U.S.C. 315 and interactive computer services as to third-party content are excepted. · 2025 Ky. Acts ch. 66, § 5

Kentucky automated license plate reader law (HB 58, 2026)

HB 58, 2026 Regular Session; 2026 Ky. Acts ch. 71; new section of KRS Chapter 189 and KRS 189.990(33). Enforced by: Criminal prosecution under KRS 189.990(33); the Act does not name the prosecuting office. A web search on November 15, 2026 found no court challenge to this Act.. Checked November 15, 2026.

Individual, entity, partnership, corporation or association: Use an automated license plate reader only to regulate parking, control access to secured areas, or promote public safety, deter crime and address auto theft. When triggered · Ongoing · Applies when: Any use of an ALPR in Kentucky. The Act states no general effective date. · 2026 Ky. Acts ch. 71, § 1(2), (3)(a)

Entity that deployed the ALPR: Do not keep captured plate data longer than 90 days unless an exception applies, and use it only directly for the permitted purposes. When triggered · Ongoing · Applies when: Exceptions include evidence in criminal or insurance claim investigations, redacted training, auditing, and subpoenas or preservation notices. · 2026 Ky. Acts ch. 71, § 1(4)(a)-(c)

Entity that deployed the ALPR: Do not sell, share, give access to or transfer captured plate data except to the listed recipients for their stated purposes. When triggered · Ongoing · Applies when: Listed recipients include law enforcement and its contractors, subpoenas, the National Insurance Crime Bureau, insurers and financial institutions. · 2026 Ky. Acts ch. 71, § 1(4)(d)

Insurance carrier or financial institution: Notify applicants of ALPR data use through your website privacy statement, the application disclaimer, or both. Starts January 1, 2027 · Ongoing · Applies when: People applying for insurance or financing on or after January 1, 2027. · 2026 Ky. Acts ch. 71, § 1(4)(d)

Law enforcement agency: Before deploying an ALPR, adopt and publish a written policy covering databases, retention, training, oversight, data security and audits every 90 days. When triggered · Ongoing · Applies when: Before deployment by a law enforcement agency. · 2026 Ky. Acts ch. 71, § 1(5)

Kentucky computer-generated sexual images of minors (HB 207, 2024)

HB 207, 2024 Regular Session; 2024 Ky. Acts ch. 15; amends KRS 531.010, 531.320, 531.330, 531.335, 531.340, 531.350, 531.360 and related sections. Enforced by: Criminal prosecution by the Commonwealth. A web search on November 15, 2026 found no court challenge to these provisions.. Checked November 15, 2026.

Person: Do not produce, direct or promote a performance including sexual conduct by a minor or by a computer-generated image of a minor. When triggered · Ongoing · Applies when: Effective date not stated in the Act. · KRS 531.320

Person: Do not knowingly possess or intentionally view matter depicting a sexual performance by a minor or a computer-generated image of a minor. When triggered · Ongoing · Applies when: Knowing its content and character; listed exemptions apply. · KRS 531.335(1), (2)

Person: Do not distribute, sell, exhibit for profit, advertise or condition sales on such matter, including computer-generated images of minors. When triggered · Ongoing · Applies when: Effective date not stated in the Act. · KRS 531.340; 531.350; 531.360

Kentucky fully autonomous vehicles law (HB 7, 2024)

HB 7, 2024 Regular Session; 2024 Ky. Acts ch. 176 (enacted over veto); new sections of KRS Chapters 186 and 189; amends KRS 186.410, 189.635, 281.010, 281.630, 281.655, 281.764. Enforced by: Kentucky Transportation Cabinet (sole implementing agency) and Kentucky State Police; the Act names no penalty. A web search on November 15, 2026 found no court challenge to this Act.. Checked November 15, 2026.

Person operating a fully autonomous vehicle: Before driverless operation, submit a law enforcement interaction plan to the Transportation Cabinet and State Police covering fleet support contact, towing, confirming engagement and hazards. When triggered · Once · Applies when: Before operating a fully autonomous vehicle without a human driver. The Act states no general effective date. · 2024 Ky. Acts ch. 176, § 2(3)

Person operating a fully autonomous vehicle: Before driverless operation, show proof of financial responsibility including $1,000,000 single-limit liability coverage, or $1,000,000 per accident for injury and for property for motor carriers. When triggered · Once · Applies when: Before operating without a human driver; motor carriers follow the Section 15 minimums. · 2024 Ky. Acts ch. 176, §§ 3, 15

Person operating a fully autonomous vehicle: Operate driverless only if the system reaches a minimal risk condition on failure, can follow traffic and safety laws, and bears any federally required certification label. When triggered · Ongoing · Applies when: Driverless operation with the automated driving system engaged. · 2024 Ky. Acts ch. 176, § 2(1)

Vehicle owner: Title and register the vehicle as a fully autonomous vehicle; as owner, comply with traffic laws when the system is engaged, even if not present. When triggered · Ongoing · Applies when: The automated driving system is installed and engaged. · 2024 Ky. Acts ch. 176, §§ 4, 9

Vehicle owner or person acting for the owner: Immediately notify law enforcement of an accident; file a written State Police report within 10 days if property damage exceeds $500 and police did not investigate. When triggered · Each time it happens · Applies when: A fully autonomous vehicle is involved in an accident. · KRS 189.635, as amended by 2024 Ky. Acts ch. 176, § 11

Louisiana

25 items from 10 laws

Louisiana AI disclosure for telephone campaign calls (Act 559 of 2026, HB 639)

Act 559 of the 2026 Regular Session (HB 639); amends and reenacts R.S. 18:1463.1(D) and (E) and R.S. 42:1132(D); enacts R.S. 18:1463.1(F), (G) and (H). Enforced by: Louisiana Board of Ethics, which administers and enforces R.S. 18:1463.1.. Checked November 14, 2026.

Person: Give a clear and understandable disclosure at the beginning of the call that it was created using artificial intelligence. Starts August 1, 2026 · Each time it happens · Applies when: Making, or causing to be made, a telephone call or automated call provided for in R.S. 18:1463.1 that is created using artificial intelligence and uses the voice of a public figure, including an elected official or limited public figure. · R.S. 18:1463.1(D) (Act 559 of 2026, Section 1)

Louisiana AI in political campaign communications law (Act 806 of 2026)

HB 459, 2026 Regular Session, Act No. 806, signed June 9, 2026; amends R.S. 18:1463(A), (F), (G), parts of 18:1483 and 18:1501.1(A)(1); enacts R.S. 18:1463(H), (I) and 18:1483(33). Enforced by: The law does not name one. Checked November 14, 2026.

Person: Do not make or cause an electioneering communication with an AI-created or AI-altered portrayal of a candidate or recall-subject official that falsely appears authentic, without a clear AI disclosure. Starts August 1, 2026 · Ongoing · Applies when: The communication portrays a candidate or an elected official subject to recall and would falsely appear to a reasonable observer to be an authentic record of the person's speech or conduct, or falsely substitutes the person's likeness. · R.S. 18:1463(F)(1)

Person: Make the disclosure that AI was used clear and understandable, in a form consistent with the disclosure requirements of Subsection E. When triggered · Each time it happens · Applies when: When including the AI disclosure. Subsection E, as read in its pre-2026 text, requires a name to be clear on written and digital material and audible and visible for at least three seconds in oral and visual advertisements. · R.S. 18:1463(E)(1)-(3) (pre-2026 print); R.S. 18:1463(F)(1) as amended by Act 806

Louisiana AI-generated child sexual abuse material law (Act 892 of 2026)

SB 42, 2026 Regular Session, Act No. 892, signed June 9, 2026; amends R.S. 14:81.1(B)(3) and (9). Enforced by: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no report of a lawsuit or court order blocking this law; court dockets were not searched.. Checked November 15, 2026.

Person: Do not produce, including by causing it to be digitally generated with AI, child sexual abuse material virtually indistinguishable from a child under 17. Starts August 1, 2026 · Ongoing · Applies when: Any conduct on or after August 1, 2026. · R.S. 14:81.1(A)(1), (B)(3), (B)(9)

Person: Do not promote, advertise, distribute, possess or possess with intent to distribute AI-generated child sexual abuse material virtually indistinguishable from a child under 17. Starts August 1, 2026 · Ongoing · Applies when: Any conduct on or after August 1, 2026. Lack of knowledge of age and the minor's consent are not defenses. · R.S. 14:81.1(A)(1), (B)(3), (D)

Louisiana Allen Toussaint Legacy Act (identity rights and digital replicas)

Act No. 425 of the 2022 Regular Session (SB 426), signed June 15, 2022; La. R.S. 51:470.1 to 51:470.6. Enforced by: Private civil action; an exclusive licensee may also sue within the scope of its license. No government enforcer is named. Suits are subject to the special motion to strike in Code of Civil Procedure Article 971.. Checked November 14, 2026.

Person: Do not use an individual's identity, including a digital replica, for a commercial purpose in Louisiana without first obtaining consent from the individual or an authorized representative. Starts August 1, 2022 · Ongoing · Applies when: The act occurs in Louisiana after August 1, 2022 and the individual is or was at death domiciled in Louisiana; rights end at the earlier of 50 years after death or three straight years of non-use after death. · La. R.S. 51:470.4(A), (B); 51:470.3(E), (F)

Person: Do not use a digital replica in a publicly performed scripted audiovisual work or live dramatic performance to create the clear impression the performer is playing a fictional character. Starts August 1, 2022 · Ongoing · Applies when: The use is intended to create, and creates, that impression. Identity rights in a performance in audiovisual works expire on the individual's death. · La. R.S. 51:470.4(C); 51:470.3(B)

Louisiana Ivy Daniels Act: AI-created nude images of minors (Act 782 of 2026)

HB 119, 2026 Regular Session, Act No. 782, signed June 9, 2026; enacts R.S. 14:73.14.1, 14:81.1.1(A)(3), 17:416.20.1 and 17:3996(B)(92); amends R.S. 14:73.13 and 14:73.14. Enforced by: Criminal prosecution; the act does not name the prosecuting office. Offenders under 14, and minors under the sexting provision, are handled in juvenile proceedings under the Children's Code. The school information duty has no stated enforcement. A web search on November 15, 2026 found no report of a lawsuit or court order blocking this law; court dockets were not searched.. Checked November 15, 2026.

Person: Do not possess an AI-created video or still image of a person under 17 shown nude or with intimate parts exposed, knowing or having reason to know possession is unauthorized. Starts August 1, 2026 · Ongoing · Applies when: Any possession on or after August 1, 2026; no intent to harass or sell is required. · R.S. 14:73.14.1(A)

Person under 17: Minors under 17 are barred by the sexting statute from possessing, selling or maliciously spreading AI-made nude images of others to coerce, harass or intimidate, when unauthorized. Starts August 1, 2026 · Ongoing · Applies when: Conduct on or after August 1, 2026 by a person under 17; handled under the Children's Code. · R.S. 14:81.1.1(A)(3), (D)(1)

Public school principal: In the first five days of each school year, give students in grade six and above information on the AI image crimes and send parents a signed-receipt form to return. Starts August 1, 2026 · Every year · Applies when: Each school year; the information may be part of an existing orientation and must be age- and grade-appropriate. · R.S. 17:416.20.1(A); 17:3996(B)(92)

Louisiana Department of Education: Develop the information on the AI image crimes and give it to each public school governing authority for distribution to principals. Starts August 1, 2026 · Ongoing · Applies when: Supports the annual principal duty. · R.S. 17:416.20.1(B)

Louisiana autonomous commercial motor vehicle law (Act 232 of 2019)

HB 455, 2019 Regular Session, Act No. 232, signed June 11, 2019; R.S. 32:400.1 to 400.8 (as amended by Acts 2026, No. 464). Enforced by: Department of Transportation and Development and, since August 1, 2026, the Department of Public Safety and Corrections, office of state police, implement the part; traffic laws are enforced through citations. A web search on November 15, 2026 found no report of a lawsuit or court order blocking this law; court dockets were not searched.. Checked November 15, 2026.

Person or entity operating an autonomous commercial motor vehicle: Before driverless operation, ensure the vehicle can obey traffic laws, is registered, titled and federally certified, can reach a minimal risk condition, and has at least $2,000,000 liability coverage. Starts August 1, 2019 · Ongoing · Applies when: Operating without a conventional driver physically present. · R.S. 32:400.3(A)

Person or entity operating an autonomous commercial motor vehicle: Before operating without a conventional driver in the cab, submit a written statement certifying compliance to the Department of Public Safety and Corrections, office of state police. When triggered · Once · Applies when: Before first driverless operation. Before August 1, 2026 the statement went to DOTD. · R.S. 32:400.3(C), as amended by Act 464 of 2026

Person or entity operating an autonomous commercial motor vehicle: After an accident while the automated driving system is engaged, keep the vehicle at the scene and comply with R.S. 32:398 on notifying police and giving information. When triggered · Each time it happens · Applies when: Any accident with the system engaged. · R.S. 32:400.5

Remote driver: Hold the class of driver's license a conventional driver of the vehicle would need; stay at the scene and comply with R.S. 32:398 after an accident during teleoperation. Starts August 1, 2019 · Ongoing · Applies when: Teleoperation of a commercial motor vehicle. · R.S. 32:400.6

Owner, remote driver or remote driver's employer (teleoperation): Ensure the teleoperated vehicle is registered, certified, can obey traffic laws, reach a reasonably safe state if teleoperation fails, and has at least $2,000,000 coverage; certify compliance in writing. Starts August 1, 2019 · Ongoing · Applies when: Before teleoperation without a conventional driver. The certification goes to the office of state police from August 1, 2026. · R.S. 32:400.7(A), (B)

Louisiana ban on using a child's image to train AI to produce child sexual abuse material (Act 211 of 2026)

SB 110, 2026 Regular Session, Act No. 211, signed May 14, 2026; enacts R.S. 14:81.1(A)(3) and (4) and amends the introductory paragraph of 14:81.1(G). Enforced by: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no report of a lawsuit or court order blocking this law; court dockets were not searched.. Checked November 15, 2026.

Person: Do not use an image of a child who was under 17 when it was made with the intent to train an AI model to produce child sexual abuse materials. Starts August 1, 2026 · Ongoing · Applies when: Any conduct on or after August 1, 2026; the depicted child need not be a natural person for offenses under the section. · R.S. 14:81.1(A)(3), (4)

Louisiana civil procedure rules on AI-generated and altered evidence (Act 250 of 2025)

HB 178, 2025 Regular Session, Act No. 250, signed June 11, 2025; Code of Civil Procedure Articles 371 and 1551(A)(5). Enforced by: The court hearing the case; attorney discipline as otherwise provided by law. A web search on November 15, 2026 found no report of a lawsuit or court order blocking this law; court dockets were not searched.. Checked November 15, 2026.

Attorney: Do not knowingly encourage or produce false evidence, including evidence artificially generated or altered by any means, and do not knowingly mislead the court. Starts August 1, 2025 · Ongoing · Applies when: Any civil proceeding on or after August 1, 2025. · Code Civ. Proc. art. 371(B)

Attorney: Use reasonable diligence to verify evidence is authentic before offering it; offering evidence you knew or should have known was false or manipulated, without disclosure, violates the article. When triggered · Each time it happens · Applies when: Before offering any evidence. · Code Civ. Proc. art. 371(C)

Party: Raise a reasonable suspicion that an opponent's exhibits are falsified at the pretrial conference or a pretrial admissibility hearing. When triggered · Each time it happens · Applies when: When the court directs a pretrial conference on exhibit authenticity and admissibility; not for demonstrative exhibits. · Code Civ. Proc. art. 1551(A)(5)(a), (c)

Party: Disclose under Article 371 when you know or have reason to know your own exhibits are falsified. When triggered · Each time it happens · Applies when: When the court directs a pretrial conference on exhibit authenticity and admissibility; not for demonstrative exhibits. · Code Civ. Proc. art. 1551(A)(5)(b), (c)

Louisiana unlawful deepfakes offense (Act 457 of 2023)

SB 175, 2023 Regular Session, Act No. 457, signed June 28, 2023; R.S. 14:73.13 (as amended by Acts 2026, No. 782). Enforced by: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no report of a lawsuit or court order blocking this law; court dockets were not searched.. Checked November 15, 2026.

Person: Do not knowingly create or possess material showing a minor in sexual conduct, knowing it is a deepfake depicting a minor. Starts August 1, 2023 · Ongoing · Applies when: Any conduct on or after August 1, 2023. · R.S. 14:73.13(A)(1)

Person: Do not knowingly advertise, distribute, exhibit, exchange, promote or sell sexual material that is a deepfake of another person without that person's consent. Starts August 1, 2023 · Ongoing · Applies when: The person depicted is an adult who has not consented. · R.S. 14:73.13(B)(1)

Person: Do not knowingly advertise, distribute, exhibit, exchange, promote or sell sexual material that you know is a deepfake depicting a minor. Starts August 1, 2023 · Ongoing · Applies when: The person depicted is under 18. · R.S. 14:73.13(B)(2)

Louisiana unlawful dissemination or sale of AI-created nude images (Act 142 of 2024)

SB 6, 2024 Regular Session, Act No. 142, signed May 22, 2024; R.S. 14:73.14 (as amended by Acts 2026, No. 782). Enforced by: Criminal prosecution; the section does not name the prosecuting office. Prosecution may be brought where the act occurred or where the image was created, stored, received or possessed. A web search on November 15, 2026 found no report of a lawsuit or court order blocking this law; court dockets were not searched.. Checked November 15, 2026.

Person: Do not disseminate or sell an AI-created image of another person nude or with intimate parts exposed, to coerce, harass, intimidate or maliciously spread it, knowing it is unauthorized. Starts August 1, 2024 · Ongoing · Applies when: Any dissemination or sale; penalties rose on August 1, 2026, and are higher when the person depicted is under 17. · R.S. 14:73.14(A), (D)

Maine

13 items from 5 laws

Maine AI chatbot disclosure law (LD 1727)

L.D. 1727 (H.P. 1154), Public Law 2025, chapter 294; enacted as 10 M.R.S. § 1500-Y (chapter 239), now 10 M.R.S. § 1500-DD (chapter 241). Enforced by: Not named in the section. A violation is a violation of the Maine Unfair Trade Practices Act, under which the Attorney General may sue for injunctions and restitution, generally after 10 days' notice of the intended action.. Checked November 12, 2026.

Person: Do not use an AI chatbot or other computer technology in trade and commerce in a way that may mislead or deceive a reasonable consumer into believing it is human. Starts September 24, 2025 · Ongoing · Applies when: Unless the consumer is notified in a clear and conspicuous manner that the consumer is not engaging with a human being. · 10 M.R.S. § 1500-DD(2)

Maine AI in therapy and psychotherapy services law (LD 2082)

Public Law 2025, chapter 687 (L.D. 2082, H.P. 1397, 132nd Legislature), approved April 13, 2026; enacts 10 MRSA §1500-EE and 32 MRSA §2113, §2600-G, §3300-J, §3820-A, §6207-D, §7009 and §13870. Enforced by: Two tracks. A violation of the public-offering ban is a violation of the Maine Unfair Trade Practices Act, under which the Attorney General may sue (generally after 10 days' notice) and buyers have private remedies. Violations by licensees are subject to disciplinary action by their licensing board under 10 MRSA §8003(5). A client's waiver of the licensing sections is void. No court order blocking the law was looked for in this review.. Checked November 12, 2026.

Person: Do not provide, advertise or otherwise offer therapy or psychotherapy services to the public, including through Internet-based AI, unless a licensed professional provides the services. Starts July 29, 2026 · Ongoing · Applies when: Any offer of therapy or psychotherapy services to the public. · 10 MRSA §1500-EE(2) (PL 2025, c. 687, §1)

Licensee: When using AI for administrative or supplementary support, stay within the license scope and standards of practice and keep full responsibility for all interactions, outputs and data use. Starts July 29, 2026 · Ongoing · Applies when: A licensee uses AI to assist in providing administrative support or supplementary support in therapy or psychotherapy services. · 32 MRSA §2113, §2600-G, §3300-J, §3820-A, §6207-D, §7009, §13870, each at sub-§2 (PL 2025, c. 687, §§2-8)

Licensee: Use AI for supplementary support only when the session is recorded or transcribed, after written notice of the AI use, its purpose and session-data handling, and with consent. When triggered · Ongoing · Applies when: AI assists with supplementary support. The notice must say how session data will be stored, retained, used for training and deleted when therapy ends. The client or the client's legal representative receives notice and consents. · 32 MRSA §2113, §2600-G, §3300-J, §3820-A, §6207-D, §7009, §13870, each at sub-§3 (PL 2025, c. 687, §§2-8)

Licensee: Do not allow AI to make independent therapeutic decisions, directly interact with clients in therapeutic communication, or generate recommendations or treatment plans without the licensee's review and approval. Starts July 29, 2026 · Ongoing · Applies when: Any use of AI by a licensee in therapy or psychotherapy services. · 32 MRSA §2113, §2600-G, §3300-J, §3820-A, §6207-D, §7009, §13870, each at sub-§4 (PL 2025, c. 687, §§2-8)

Licensee: Do not deny or refuse therapy or psychotherapy services solely because the client did not consent to AI use for supplementary support. When triggered · Ongoing · Applies when: A client declines to consent to the use of AI for supplementary support. · 32 MRSA §2113, §2600-G, §3300-J, §3820-A, §6207-D, §7009, §13870, each at sub-§5 (PL 2025, c. 687, §§2-8)

Licensee: Comply with state and federal confidentiality and privacy laws, and ensure the AI technology used complies with those laws. Starts July 29, 2026 · Ongoing · Applies when: A licensee uses AI under the section. Professional responsibility rules and standards of practice also apply to that use (sub-§7). · 32 MRSA §2113, §2600-G, §3300-J, §3820-A, §6207-D, §7009, §13870, each at sub-§6 and sub-§7 (PL 2025, c. 687, §§2-8)

Maine altered and generated private images offense (LD 1944)

Public Law 2025, chapter 400 (LD 1944, HP 1303), signed June 20, 2025; amends 17-A M.R.S. § 511-A, 5 M.R.S. § 4651 and 19-A M.R.S. § 4102. Enforced by: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.. Checked November 15, 2026.

Person: Do not share, display or publish a real, created or modified image showing an identifiable person nude or in sexual acts or contact, without consent, to harass, torment or threaten. When triggered · Ongoing · Applies when: No public or newsworthy purpose, and the person knows or should know the depicted person is identifiable and did not consent. · 17-A M.R.S. § 511-A(1)

Maine synthetic media in campaign advertising law (LD 517)

Public Law 2025, chapter 593 (LD 517, HP 335), signed March 23, 2026; amends 21-A M.R.S. § 1014, subsections 3, 3-B and 4, and enacts subsection 5-C. Enforced by: Commission on Governmental Ethics and Election Practices (the commission) assesses civil penalties; if a violator does not stop after notice, the commission refers the matter to the Attorney General, who may seek an injunction in Kennebec County Superior Court. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.. Checked November 15, 2026.

Person financing a public communication: Add the statement that the communication contains manipulated or altered audio, video and/or images, alongside other required disclosures, following Ethics Commission rules on manner, size and placement. Starts July 29, 2026 · Each time it happens · Applies when: A public communication that requires a disclosure under § 1014(1), (2), (2-A) or (2-B) contains synthetic media. · 21-A M.R.S. § 1014(5-C)

Broadcaster, cable or satellite operator, newspaper: Do not air or publish a paid public communication known to contain synthetic media unless it carries the required synthetic media statement. Starts July 29, 2026 · Each time it happens · Applies when: Only with actual knowledge that the paid communication contains synthetic media. · 21-A M.R.S. § 1014(3), (3-B), (5-C)(C)

Maine technology-facilitated child sexual abuse material law (LD 524)

Public Law 2025, chapter 719 (LD 524, HP 343), emergency, signed April 16, 2026; amends 17-A M.R.S. §§ 281, 282, 283 and 284. Enforced by: Criminal prosecution; the sections do not name the prosecuting office. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.. Checked November 15, 2026.

Person: Do not intentionally or knowingly modify or alter an image of an identifiable child to create child sexual abuse material. Starts April 16, 2026 · Ongoing · Applies when: Any conduct on or after April 16, 2026. · 17-A M.R.S. § 282(1)(A-2)

Person: Do not manufacture or create obscene child sexual abuse material, including with generative AI or machine learning, knowing or having reason to know what it is. Starts April 16, 2026 · Ongoing · Applies when: Any conduct on or after April 16, 2026. · 17-A M.R.S. § 282(1)(A-3)

Person: Do not disseminate or possess with intent to disseminate obscene child sexual abuse material, including AI-generated images, or possess, access or purchase it with intent to view. Starts April 16, 2026 · Ongoing · Applies when: Knowing or having reason to know it is such material. · 17-A M.R.S. §§ 283(1)(A-1); 284(1)(A-1)

Maryland

33 items from 8 laws

Maryland Age-Appropriate Design Code Act (Maryland Kids Code): algorithm, profiling and impact assessment provisions

Chapter 461 of the Acts of 2024 (HB 603), approved May 9, 2024; Commercial Law Article §§ 14-4601 to 14-4613 and § 13-301(14)(xlii). Also enacted as SB571. Enforced by: Division of Consumer Protection of the Office of the Attorney General. A violation is an unfair, abusive or deceptive trade practice enforced under Title 13 of the Commercial Law Article, other than § 13-410. No court order blocking the law was found: in NetChoice v. Brown (D. Md., No. RDB-25-0322) the court denied the State's motion to dismiss and said the Kids Code remains in effect while the case proceeds.. Checked November 14, 2026.

Covered entity: Prepare a data protection impact assessment for each online product reasonably likely to be accessed by children. Starts April 1, 2026 · Once · Applies when: Due by April 1, 2026 for a product offered to the public on or before that date and still offered after July 1, 2026; within 90 days after launch for a product first offered after April 1, 2026. · Commercial Law § 14-4604(a)

Covered entity: In each assessment, determine whether the product serves children's best interests, considering its algorithms, targeted advertising systems, engagement-extending design features, data practices and sensitive data. Starts April 1, 2026 · Ongoing · Applies when: Preparing a data protection impact assessment. It must also state the product's purpose, how it uses children's data and the steps taken and planned to comply. · Commercial Law § 14-4604(b)

Covered entity: Keep documentation of each assessment for as long as the product is likely to be accessed by children, and review it within 90 days of material changes. When triggered · Ongoing · Applies when: The covered entity is required to complete a data protection impact assessment. · Commercial Law § 14-4605(1), (2)

Covered entity: Give the Division a list of completed assessments within 5 business days, and any completed assessment within 7 business days, of a written request. When triggered · Each time it happens · Applies when: The Division of Consumer Protection asks in writing. The Division may extend the 7-day period. · Commercial Law § 14-4607

Covered entity: Do not profile a child by default unless safeguards ensure it serves children's best interests and it is necessary for the requested product or justified by a compelling reason. Starts October 1, 2024 · Ongoing · Applies when: An online product accessed or reasonably likely to be accessed by children. Necessary profiling is limited to the aspects the child is actively and knowingly engaged with. · Commercial Law § 14-4606(a)(2)

Covered entity: Do not process a child's personal data in a way that is inconsistent with the best interests of children. Starts October 1, 2024 · Ongoing · Applies when: An online product accessed or reasonably likely to be accessed by children. · Commercial Law § 14-4606(a)(1)

Maryland ban on computer-generated child sexual abuse images (SB 736, 2019)

Chapter 326, Laws of Maryland 2019 (SB 736), approved April 30, 2019; amends Md. Code, Crim. Law §§ 11-101, 11-105, 11-201 and 11-208. Also enacted as HB1027. Enforced by: Criminal prosecution; § 11-208 does not name the prosecuting office. No court order blocks the section: the Appellate Court of Maryland rejected a First Amendment overbreadth challenge in 2025.. Checked November 15, 2026.

Person: Do not knowingly possess and intentionally retain a real or computer-generated image indistinguishable from an identifiable child under 16 showing sexual conduct, sexual excitement or sadomasochistic abuse. Starts October 1, 2019 · Ongoing · Applies when: Any covered visual representation, including AI-generated or altered images of an actual and identifiable child. · Md. Code, Crim. Law § 11-208(b)(1)

Person: Do not knowingly or intentionally access and intentionally view such an image. Starts October 1, 2023 · Ongoing · Applies when: Added by SB 226 (2023); the same age limit and image categories apply. · Md. Code, Crim. Law § 11-208(b)(2)

Maryland ban on facial recognition in job interviews without consent

Chapter 446, Laws of Maryland 2020 (HB 1202); Labor and Employment Article § 3-717. Enforced by: The law does not name one. Checked November 14, 2026.

Employer: Do not use a facial recognition service to create a facial template during an applicant's interview for employment unless the applicant consents by signing a waiver. Starts October 1, 2020 · Ongoing · Applies when: An employer interviews an applicant for employment. · Lab. & Empl. § 3-717(b), (c)(1)

Employer: Use a waiver that states in plain language the applicant's name, the interview date, the applicant's consent to facial recognition during the interview, and whether the applicant read the waiver. When triggered · Each time it happens · Applies when: The employer relies on an applicant's consent to use a facial recognition service during an interview. · Lab. & Empl. § 3-717(c)(2)

Maryland election misinformation, disinformation and deepfakes law (SB 141, 2026)

Senate Bill 141, 2026 Regular Session, ch. 444, approved May 12, 2026; amends Election Law Article 2-110 and adds 16-905. Enforced by: Criminal prosecution for the deepfake offense (section 16-905 does not name the prosecutor). The State Administrator of Elections must publish correcting information and may seek an injunction to remove content from an online platform and issue subpoenas; the State Board of Elections may bring a civil action. A web search on November 14, 2026 found no report of a court order blocking this law; court dockets were not searched.. Checked November 14, 2026.

Person: Do not knowingly or with reckless disregard create, use or disseminate a deepfake to produce materially false information meant to affect voting, election facts or petition signing. Starts June 1, 2026 · Ongoing · Applies when: The person intends to impede or influence a voter's decision to cast a ballot or how to vote, misrepresent facts about registration, voting methods, results, processes or officials' duties, or induce petition signing; and the act results or is intended to result in harm to a voter, potential voter or petition. · Election Law 16-905(c)

Person, campaign, political action committee or other legal entity: Do not create, use or disseminate election disinformation, or election misinformation with reckless disregard; the State Board may sue to recover damages, court costs and attorney's fees. Starts June 1, 2026 · Ongoing · Applies when: The State Board finds the conduct and incurs costs to publish accurate correcting information. Recovery requires clear and convincing evidence. · Election Law 2-110(c)(2)(ii), (3), (4)

Maryland identity fraud law: artificial intelligence and deepfake representations (SB 8, 2026)

Chapter 445, Laws of Maryland 2026 (SB 8), approved May 12, 2026; amends Md. Code, Crim. Law § 8-301. Enforced by: A State's Attorney or the Attorney General may investigate and prosecute; victims may also sue. No court challenge was found.. Checked November 15, 2026.

Person: Do not knowingly, willfully and with fraudulent intent use AI or a deepfake to harm someone by impersonating, falsely depicting or claiming to represent them or another person. Starts October 1, 2026 · Ongoing · Applies when: Conduct on or after October 1, 2026. · Md. Code, Crim. Law § 8-301(f)(2)(i)

Person: Do not knowingly, willfully and with fraudulent intent use AI or a deepfake to create or distribute false records meant to cause harm, obtain personal information, or obtain value. Starts October 1, 2026 · Ongoing · Applies when: Conduct on or after October 1, 2026. · Md. Code, Crim. Law § 8-301(f)(2)(ii)

Maryland law on AI in health insurance utilization review (HB 820)

Chapter 747, Acts of 2025 (HB 820); adds Md. Code, Insurance § 15-10B-05.1 and amends § 15-10A-06. Enforced by: Maryland Insurance Commissioner, who may inspect the tools for audit or compliance review and imposes the penalties in Subtitle 10B. A web search on November 12, 2026 found no report of a court order blocking this law; court dockets were not searched.. Checked November 12, 2026.

Carrier, pharmacy benefits manager or private review agent: Ensure the tool bases determinations on the enrollee's medical or clinical history, the requesting provider's clinical circumstances, or other relevant clinical record information, and not solely on a group dataset. Starts October 1, 2025 · Ongoing · Applies when: A carrier, pharmacy benefits manager or private review agent uses an artificial intelligence, algorithm or other software tool for utilization review. · Md. Code, Ins. § 15-10B-05.1(c)(1), (2)

Carrier, pharmacy benefits manager or private review agent: Ensure the tool's criteria and guidelines comply with Title 15 of the Insurance Article. Starts October 1, 2025 · Ongoing · Applies when: A carrier, pharmacy benefits manager or private review agent uses an artificial intelligence, algorithm or other software tool for utilization review. · Md. Code, Ins. § 15-10B-05.1(c)(3)

Carrier, pharmacy benefits manager or private review agent: Ensure the tool does not replace the role of a health care provider in the determination process. Starts October 1, 2025 · Ongoing · Applies when: A carrier, pharmacy benefits manager or private review agent uses an artificial intelligence, algorithm or other software tool for utilization review. The provider role is the one set by § 15-10B-07. · Md. Code, Ins. § 15-10B-05.1(c)(4)

Carrier, pharmacy benefits manager or private review agent: Ensure the tool does not result in unfair discrimination and is fairly and equitably applied, including under applicable federal health department regulations and guidance. Starts October 1, 2025 · Ongoing · Applies when: A carrier, pharmacy benefits manager or private review agent uses an artificial intelligence, algorithm or other software tool for utilization review. · Md. Code, Ins. § 15-10B-05.1(c)(5), (6)

Carrier, pharmacy benefits manager or private review agent: Keep the tool open to inspection by the Insurance Commissioner for audit or compliance reviews. Starts October 1, 2025 · Ongoing · Applies when: A carrier, pharmacy benefits manager or private review agent uses an artificial intelligence, algorithm or other software tool for utilization review. · Md. Code, Ins. § 15-10B-05.1(c)(7)

Carrier, pharmacy benefits manager or private review agent: Include written policies and procedures in the utilization plan describing how the tool is used and what oversight is provided. Starts October 1, 2025 · Ongoing · Applies when: A carrier, pharmacy benefits manager or private review agent uses an artificial intelligence, algorithm or other software tool for utilization review. The plan is the one filed under § 15-10B-05. · Md. Code, Ins. § 15-10B-05.1(c)(8)

Carrier, pharmacy benefits manager or private review agent: Review the tool's performance, use and outcomes at least quarterly, and revise it as needed to maximize accuracy and reliability. Starts October 1, 2025 · Ongoing · Applies when: A carrier, pharmacy benefits manager or private review agent uses an artificial intelligence, algorithm or other software tool for utilization review. · Md. Code, Ins. § 15-10B-05.1(c)(9)

Carrier, pharmacy benefits manager or private review agent: Do not use patient data beyond its intended and stated purpose, consistent with HIPAA where applicable. Starts October 1, 2025 · Ongoing · Applies when: A carrier, pharmacy benefits manager or private review agent uses an artificial intelligence, algorithm or other software tool for utilization review. · Md. Code, Ins. § 15-10B-05.1(c)(10)

Carrier, pharmacy benefits manager or private review agent: Ensure the tool does not directly or indirectly cause harm to an enrollee. Starts October 1, 2025 · Ongoing · Applies when: A carrier, pharmacy benefits manager or private review agent uses an artificial intelligence, algorithm or other software tool for utilization review. · Md. Code, Ins. § 15-10B-05.1(c)(11)

Carrier, pharmacy benefits manager or private review agent: Do not let an artificial intelligence, algorithm or other software tool deny, delay or modify health care services. Starts October 1, 2025 · Ongoing · Applies when: A carrier, pharmacy benefits manager or private review agent uses an artificial intelligence, algorithm or other software tool for utilization review. · Md. Code, Ins. § 15-10B-05.1(d)

Carrier: State in the quarterly report to the Commissioner whether an artificial intelligence, algorithm or other software tool was used in making each adverse decision. Starts October 1, 2025 · Ongoing · Applies when: Each quarterly carrier report on adverse decisions, filed on the form the Commissioner requires. · Md. Code, Ins. § 15-10A-06(a)(3)(vi), as printed in Chapter 747, Acts of 2025, § 1

Maryland personal delivery device law (SB 726, 2021)

Chapter 351, Laws of Maryland 2021 (SB 726), approved May 18, 2021; adds Md. Code, Transp. § 21-104.5 and amends §§ 8-409, 11-135, 11-176, 13-402, 17-103, 21-501.1, 21-1201 and 21-1205.1. Enforced by: The law does not name one. Checked November 15, 2026.

Personal delivery device operator: Before beginning operations in Maryland, file an emergency response plan with the Motor Vehicle Administrator describing the device and how first responders should handle it. Starts July 1, 2022 · Once · Applies when: Before first operating in the State. · Md. Code, Transp. § 21-104.5(f)(1)

Personal delivery device operator: Notify the governing body of each county and municipality at least 30 days before operating there, and comply with its local ordinances, regulations and rules. When triggered · Each time it happens · Applies when: Before starting operations in each county or municipality. · Md. Code, Transp. § 21-104.5(g)

Personal delivery device operator: Mark each device with a unique identifying number and a means of identifying the operator, plus corporate contact information if acting for a corporate entity; repeat marked information in Braille. Starts July 1, 2022 · Ongoing · Applies when: Any device operated on a roadway, sidewalk, shoulder or crosswalk. The statute phrases these as requirements of the device. · Md. Code, Transp. § 21-104.5(d)(1)-(3), (e)

Personal delivery device operator: Equip each device with a system enabling a controlled stop and with lighting the Motor Vehicle Administration requires after consulting industry stakeholders. Starts July 1, 2022 · Ongoing · Applies when: Any device operated on a roadway, sidewalk, shoulder or crosswalk. · Md. Code, Transp. § 21-104.5(d)(4), (6)

Personal delivery device operator: Keep general liability coverage of at least $100,000, a policy meeting § 17-103, or other security acceptable to the Administration providing equivalent benefits. Starts July 1, 2022 · Ongoing · Applies when: Any device operated on a roadway, sidewalk, shoulder or crosswalk. · Md. Code, Transp. § 21-104.5(d)(5)

Personal delivery device operator: Do not exceed 7 mph on sidewalks or crosswalks, unreasonably interfere with traffic, block public rights-of-way, or carry placarded hazardous materials in quantities posing unreasonable risk. Starts July 1, 2022 · Ongoing · Applies when: All operation of the device. · Md. Code, Transp. § 21-104.5(c)

Personal delivery device operator: Keep devices off roadways with sidewalks or an adjacent shoulder, or posted limits above 35 mph; obey traffic and pedestrian control devices; follow applicable local permitting requirements. Starts July 1, 2022 · Ongoing · Applies when: All operation of the device. · Md. Code, Transp. §§ 21-1205.1(f), 21-104.5(d)(7), (8)

Maryland revenge porn law extended to computer-generated images (SB 360, 2025)

Chapter 219, Laws of Maryland 2025 (SB 360), approved April 22, 2025; amends Md. Code, Crim. Law § 3-809. Enforced by: Criminal prosecution (§ 3-809 does not name the prosecuting office), plus civil suits by the person depicted. No court challenge was found.. Checked November 15, 2026.

Person: Do not knowingly distribute a real or computer-generated image showing an identifiable person's intimate parts or sexual activity, intending harm, without their consent, where privacy was reasonably expected. Starts July 1, 2025 · Ongoing · Applies when: All three conditions must be met: intent to harm, harass, intimidate, threaten or coerce; knowledge of, or reckless disregard for, lack of consent; and a reasonable expectation of privacy. · Md. Code, Crim. Law § 3-809(a)(6), (c)

Massachusetts

1 item from 1 law

Massachusetts digitized intimate images law (H 4744, Chapter 118 of the Acts of 2024)

H 4744, 193rd General Court; Chapter 118 of the Acts of 2024; G.L. c. 265, § 43A(b), (c). Enforced by: Criminal prosecution; the act does not name a prosecutor. Civil and equitable remedies under other law are preserved. A web search on November 15, 2026 found no lawsuit or court order against this provision.. Checked November 15, 2026.

Person: Do not knowingly distribute nude, partially nude or sexual visual material of an identifiable person, including digitized or computer-generated material, that causes injury or substantial emotional distress. Starts September 18, 2024 · Ongoing · Applies when: The distributor intends to harm, harass, intimidate, threaten or coerce, or recklessly disregards the harm, lack of consent or the person's reasonable expectation of privacy. Consent to creation is not consent to distribution. · G.L. c. 265, § 43A(b)(2), (3)

Michigan

13 items from 4 laws

Michigan AI disclosure for political advertisements (2023 PA 263, HB 5141)

2023 PA 263 (HB 5141), approved November 30, 2023; amends MCL 169.247 and adds MCL 169.259 (Michigan Campaign Finance Act, 1976 PA 388). Enforced by: Not named in MCL 169.259 or 169.247. Under the Campaign Finance Act's general procedure, the Secretary of State receives and investigates complaints, which any person may file, and refers criminal matters to the Attorney General.. Checked November 14, 2026.

Person who creates, originally publishes or originally distributes a qualified political advertisement: Include in the advertisement a clear and conspicuous statement that it was generated in whole or substantially by artificial intelligence. Starts February 13, 2024 · Each time it happens · Applies when: A paid advertisement about a Michigan candidate, election or ballot question that contains any image, audio or video generated in whole or substantially with artificial intelligence. · MCL 169.259(1)(a), (6)

Person who creates, originally publishes or originally distributes a qualified political advertisement: Format the statement as required: graphic text as large as most other text; audio spoken for at least 3 seconds; video shown at least 4 seconds and spoken. Starts February 13, 2024 · Each time it happens · Applies when: Graphic, audio and video advertisements. Spoken statements go at the beginning or end, and every statement must be in the same language as the advertisement. · MCL 169.259(1)(b)-(d)

Person paying for a prerecorded telephone message: Include in the message the disclaimer that it was generated in whole or substantially by artificial intelligence. Starts February 13, 2024 · Each time it happens · Applies when: A prerecorded telephone message that expressly advocates the election or defeat of a clearly identified candidate, or the qualification, passage or defeat of a ballot question, and is generated in whole or substantially by artificial intelligence. · MCL 169.247(7)

Michigan Protection from Intimate Deep Fakes Act (2025 PA 11, HB 4047)

2025 PA 11 (HB 4047), approved and filed August 26, 2025, with immediate effect; codified in MCL chapter 752 (criminal section MCL 752.388). Enforced by: Criminal prosecution under MCL 752.388; the act does not name the prosecuting office or give the attorney general a role. Depicted individuals enforce the civil provisions by lawsuit. A web search on November 15, 2026 found no court challenge.. Checked November 15, 2026.

Individual: Do not intentionally create or disseminate a deep fake realistically showing an identifiable person's intimate parts or a sexual act when you know or should know it will cause harm. Starts August 26, 2025 · Ongoing · Applies when: Harm means physical, emotional, reputational or economic harm. The person is identifiable from the deep fake or from personal information shown with it. Written consent meeting the act's terms is a defense. · MCL 752.388(1), (4); 2025 PA 11, sec. 8

Person: Do not create or disseminate an intimate or sexual deep fake of an identifiable person to harass, extort, threaten or cause harm, or knowing it is likely to cause harm. Starts August 26, 2025 · Ongoing · Applies when: Civil liability to the depicted individual, who may sue for damages and an injunction. Consent is a defense only in a signed plain-language written agreement describing the depiction. · 2025 PA 11, sec. 3, 5(1), 6

Michigan automated driving systems and automated vehicle roadways (2022 PA 179, SB 706)

2022 PA 179 (SB 706), approved and filed July 25, 2022, with immediate effect; amends Michigan Vehicle Code MCL 257.2b, 257.642 and 257.665 and adds 257.665c, 257.665d, 257.665e and 257.666a. Enforced by: Police and courts through civil infraction citations for roadway violations, with sworn statements by MDOT agents or State Police officers as evidence. The sections read do not name an enforcer or penalty for the testing duties.. Checked November 15, 2026.

Manufacturer of automated driving systems or upfitter: Before testing an automated vehicle, technology or driving system on a Michigan street or highway, give the Secretary of State proof the vehicle is insured under Insurance Code chapter 31. When triggered · Each time it happens · Applies when: Testing on public streets or highways in Michigan. · MCL 257.665(1)

Manufacturer of automated driving systems or upfitter: During testing, let only your employees, contractors or other authorized people operate the vehicle, and make sure operator and monitor may lawfully drive in the United States. Starts July 25, 2022 · Ongoing · Applies when: Testing, including testing without a human operator in the vehicle. · MCL 257.665(2)(a), (c)

Manufacturer of automated driving systems or upfitter: Ensure an individual can monitor the test vehicle and promptly take control, or, if no one does, that the vehicle can reach a minimal risk condition. Starts July 25, 2022 · Ongoing · Applies when: Testing on Michigan streets or highways. · MCL 257.665(2)(b)

Person operating a platoon: File a general plan with the State Police and the state transportation department before operating a platoon; operation may start unless rejected within 30 days. When triggered · Once · Applies when: Before beginning platoon operations. If the platoon includes commercial vehicles, an endorsed CDL holder must be behind each one's wheel. · MCL 257.665(6), (7)(c)

Operator on an automated vehicle roadway: Pay any required user fee and follow the state transportation department's conditions when driving on a designated automated vehicle roadway, lane or ramp. Starts July 25, 2022 · Ongoing · Applies when: The road segment, lane or ramp has been designated under MCL 257.665c. · MCL 257.642(3); 257.666a(1)

Automated vehicle roadway system (operator not named): Produce data only to operate the system or enforce roadway rules; destroy identifying data within 10 days, or within 90 days after final disposition for violations. Starts July 25, 2022 · Ongoing · Applies when: The automated vehicle roadway system collects data with personal identification information. The section does not say who must destroy it. · MCL 257.666a(2), (5)

Michigan ban on distributing AI-made deceptive election media near an election (2023 PA 265, HB 5144)

2023 PA 265 (HB 5144), approved November 30, 2023, filed December 1, 2023; adds Michigan Election Law section 932f, MCL 168.932f. Enforced by: Criminal prosecution (the section does not name the prosecuting office). The attorney general, the depicted individual, an injured candidate or a voter organization may sue for a permanent injunction in circuit court. A web search on November 15, 2026 found no court challenge.. Checked November 15, 2026.

Person: Do not distribute AI-made materially deceptive media of a person within 90 days before an election, knowing it is false and intending to harm a candidate and deceive voters. Starts February 13, 2024 · Ongoing · Applies when: All four conditions apply: knowledge of falsity, the 90-day window, intent and likely harm to a candidate's reputation or prospects, and intent and likely deception changing votes. · MCL 168.932f(1)

Person: To use the disclaimer exception, label the media as manipulated by technical means, in the required size, language and placement, and cite the original source of edited media. Starts February 13, 2024 · Each time it happens · Applies when: Video: shown throughout. Audio only: read at the start and end. Image: clearly readable. Text at least as large as most other text. · MCL 168.932f(2)(a)-(e)

Minnesota

20 items from 7 laws

Minnesota AI-generated child sexual abuse material provisions (Laws 2025, ch. 35)

H.F. 2432, 94th Legislature (2025); Laws 2025, chapter 35, article 4, sections 12-13 and article 5, sections 17-21; Minn. Stat. 617.246, 617.247 and 617.2471. Enforced by: Criminal prosecution; the sections do not name the prosecuting office. A web search on November 15, 2026 found no court ruling blocking these provisions.. Checked November 15, 2026.

Person: Do not disseminate or possess child sexual abuse material, including obscene generative AI images depicting someone indistinguishable from an actual minor in sexual conduct. Starts August 1, 2025 · Ongoing · Applies when: Knowing or with reason to know its content and character. · Minn. Stat. 617.247, subds. 3, 4; 617.246, subd. 1(f)

Person: Do not own or operate a business where child sexual abuse material, including covered AI-generated images, is disseminated or reproduced, or disseminate it for profit. Starts August 1, 2025 · Ongoing · Applies when: Knowing its content and character. · Minn. Stat. 617.246, subds. 3, 4

Minnesota Prohibiting Social Media Manipulation Act (Laws 2024, ch. 114, art. 3)

S.F. 4097, 93rd Legislature (2024); Laws 2024, chapter 114, article 3, sections 63-67 (enacted as 325O.01 to 325O.05); now Minn. Stat. 325M.30 to 325M.34. Enforced by: Minnesota Attorney General, who may investigate and sue. A NetChoice challenge (NetChoice v. Ellison, D. Minn.) is pending; no court order blocking these duties was found on November 15, 2026 (see open questions).. Checked November 15, 2026.

Social media platform: Post on your website how you assess content quality and users' expressed preferences, and how those assessments are weighted against other signals in your algorithmic ranking system. Starts July 1, 2025 · Ongoing · Applies when: Covered platform with more than 10,000 monthly active Minnesota account holders. · Minn. Stat. 325M.33(2)

Social media platform: Publicly post the maximum hourly, daily, weekly and monthly account interactions allowed, and whether and how you limit high-volume accounts' effect on others. Starts July 1, 2025 · Ongoing · Applies when: Covered platform. · Minn. Stat. 325M.33(1)

Social media platform: Publish percentile statistics of account holders' interactions and engagement, including messaging, reactions, posting, sharing and time spent. Starts July 1, 2025 · Ongoing · Applies when: Covered platform; percentiles listed in the statute run from the 10th to the 99.9th. · Minn. Stat. 325M.33(3)

Social media platform: Explain how you decide whether notifications are time sensitive, and report daily percentiles of notifications sent, plus hourly percentiles between 11 p.m. and 7 a.m. Starts July 1, 2025 · Ongoing · Applies when: Covered platform. · Minn. Stat. 325M.33(4)

Social media platform: Describe all product experiments run on 1,000 or more users, including conditions and results for content quality, expressed preferences and policy-violating content. Starts July 1, 2025 · Ongoing · Applies when: Covered platform. · Minn. Stat. 325M.33(5)

Social media platform: Publicly post an explanation of the age estimation process used to determine account holders' ages. Starts July 1, 2027 · Ongoing · Applies when: Covered platform; added by H.F. 4138. · Minn. Stat. 325M.33(6); Laws 2026, ch. 111, § 1

Minnesota ban on automated-only adverse utilization review determinations (Laws 2026, ch. 124, art. 3, § 6)

HF 4188, Laws of Minnesota 2026, chapter 124, article 3, section 6; amends Minn. Stat. 62M.09, subd. 3 by adding paragraph (f). Enforced by: Minnesota Commissioner of Commerce for registration and compliance of utilization review organizations; enrollees may complain to the commissioner who regulates the organization.. Checked November 12, 2026.

Utilization review organization: Do not make an adverse determination using any form of automated processing alone; a clinician review by an appropriate health professional is required. Starts January 1, 2027 · Ongoing · Applies when: An adverse determination is made for a health plan offered, sold, issued or renewed on or after January 1, 2027. · Minn. Stat. 62M.09, subd. 3(f); Laws 2026, ch. 124, art. 3, § 6

Minnesota child social media accounts law (H.F. 4138): profile-based feed, targeted advertising and age estimation provisions

Laws of Minnesota 2026, chapter 111 (H.F. 4138), signed May 26, 2026; adds Minn. Stat. 325M.40 and amends Minn. Stat. 325M.33. Enforced by: For section 325M.40: a child or parent may sue, and the Minnesota Attorney General may enforce under section 8.31; a knowing or reckless violation is a deceptive trade practice. For the posting duty in section 325M.33: the Attorney General only.. Checked November 14, 2026.

Covered social media platform: Show no addictive interface features, including a profile-based feed, infinite scrolling or autoplay video, in the display or feed of a child's account. Starts July 1, 2027 · Ongoing · Applies when: An account of a child, meaning a Minnesota resident age 15 or younger, including any account holder the platform must treat as a child after age estimation. · Minn. Stat. 325M.40, subd. 5(a); subd. 1(c), (j)

Covered social media platform: Show no targeted paid commercial advertising in the display or feed of a child's account. Starts July 1, 2027 · Ongoing · Applies when: Paid advertising selected or prioritized using the account holder's account activity or personal information. · Minn. Stat. 325M.40, subd. 5(b); subd. 1(l)

Covered social media platform: Estimate the account holder's age within 14 days and treat the holder as a child unless 80 percent or more confident the holder is 16 or older. When triggered · Each time it happens · Applies when: A new account holder has spent 25 or more hours on the platform within six months. Not required for an account held continuously for at least seven years. · Minn. Stat. 325M.40, subd. 2(a), (d)

Covered social media platform: Revise the age estimate within 14 days, then update it at least every six months, treating the holder as a child unless 90 percent confident of age 16 or older. When triggered · Ongoing · Applies when: A new account holder reaches 50 or more hours within six months. Updates run every six months or as often as the platform uses data analytics or artificial intelligence to update any other demographic estimate, whichever is shorter. · Minn. Stat. 325M.40, subd. 2(b), (c)

Covered social media platform: Terminate the account of a holder it concludes is a child unless verifiable parental consent is obtained. When triggered · Each time it happens · Applies when: Age estimation classifies the holder as a child. The holder has 30 days from notice to dispute or provide consent; termination follows within seven days of an adverse determination. · Minn. Stat. 325M.40, subd. 6(c)

Social media platform: Publicly and conspicuously post on its website an explanation of the age estimation process it uses to determine the age of account holders. Starts July 1, 2027 · Ongoing · Applies when: A social media platform as defined in section 325M.31, which sets no user or revenue threshold. · Minn. Stat. 325M.33, clause (6) (Laws 2026, ch. 111, sec. 1); 325M.31(j)

Minnesota deep fake law (H.F. 1370): intimate deep fakes and election deep fakes

H.F. 1370, 93rd Legislature (2023); Laws 2023, chapter 58; Minn. Stat. 604.32, 609.771 and 617.262. Enforced by: Criminal prosecution for both offenses. For election deep fakes, the attorney general, a county or city attorney, the depicted person or an injured candidate may seek injunctive or equitable relief. Victims of sexual deep fakes may sue. Searches on November 15, 2026 found challenges to 609.771 (Kohls v. Ellison; X Corp. v. Ellison) but no court order blocking it.. Checked November 15, 2026.

Person: Do not disseminate a realistic deep fake showing an identifiable person's intimate parts or sexual acts when you know or should know they did not consent. Starts August 1, 2023 · Ongoing · Applies when: Criminal liability if you know or reasonably should know of non-consent; civil liability requires actual knowledge. Consent to creation or private sharing is no defense. · Minn. Stat. 617.262, subds. 2, 4; 604.32, subd. 2

Person: Do not disseminate a non-consensual deep fake of a person, knowing or recklessly disregarding that it is fake, intending to injure a candidate or influence an election. Starts August 1, 2023 · Each time it happens · Applies when: Within 90 days before a party nominating convention, or after absentee voting begins for a presidential nomination primary or a state or local primary or general election. · Minn. Stat. 609.771, subd. 2

Minnesota forged digital likeness as identity theft (Laws 2026, ch. 97, art. 3, § 3)

S.F. 4760, 94th Legislature (2026); Laws 2026, chapter 97, article 3, section 3; Minn. Stat. 609.527, subd. 1. Enforced by: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no court challenge to this provision.. Checked November 15, 2026.

Person: Do not transfer, possess or use a forged digital likeness of another person with intent to commit, aid or abet any unlawful activity, such as fraud. When triggered · Ongoing · Applies when: Unlawful activity includes felonies and listed theft, fraud, forgery and false-information offenses. The amending section states no effective date. · Minn. Stat. 609.527, subds. 1(e), (f), 2

Minnesota nudification technology ban (H.F. 1606)

H.F. 1606, 94th Legislature (2026); Laws 2026, chapter 72; Minn. Stat. 325E.91. Enforced by: Minnesota Attorney General under section 8.31; a depicted person may also sue. A search on November 15, 2026 found a federal suit by xAI (xAI LLC v. Ellison) and news reports that a preliminary injunction was denied in September 2026; no court order blocking the law was found.. Checked November 15, 2026.

Person who owns or controls a website, application, software, program or other service: Do not allow users to access, download or use your service to nudify an image or video, and do not nudify images or videos on a user's behalf. Starts August 1, 2026 · Ongoing · Applies when: The service nudifies without requiring the user's own technical skill. · Minn. Stat. 325E.91, subds. 2(a), 3

Person: Do not advertise or promote any website, application, software or service that nudifies images or videos for users. Starts August 1, 2026 · Ongoing · Applies when: Any advertising or promotion of a covered nudification service. · Minn. Stat. 325E.91, subd. 2(b)

Mississippi

6 items from 2 laws

Mississippi Fully Autonomous Vehicle Enabling (MS FAVE) Act of 2023 (HB 1003)

HB 1003, 2023 Regular Session, Laws 2023, ch. 443; Section 4 is codified at Miss. Code § 63-35-7 (as named in SB 2269); the act does not state where its other new sections are codified. Enforced by: Department of Public Safety, with the Department of Revenue for registration and titling, implements and enforces the act. DPS may issue a cease-and-desist letter if no law enforcement interaction plan is submitted. No lawsuit challenging the act was looked for in court dockets; none was found in this review.. Checked November 15, 2026.

Person operating a fully autonomous vehicle: Before operating without a human driver, submit a law enforcement interaction plan to the Department of Public Safety covering fleet support contact, safe removal and towing, and autonomous-mode recognition. Starts July 1, 2023 · Once · Applies when: Before operating a fully autonomous vehicle on public roads without a human driver. The plan must also cover hazards the manufacturer or owner deems necessary and other elements DPS posts on its website. The section stands repealed on July 1, 2029. · HB 1003 § 4 (Miss. Code § 63-35-7(1)), as amended by SB 2269 § 1

Person operating a fully autonomous vehicle: Before operating without a human driver, file proof with the Department of Public Safety that the vehicle has insurance or self-insurance meeting the listed financial responsibility statutes. Starts July 1, 2023 · Once · Applies when: Before operating a fully autonomous vehicle on public roads without a human driver; the statutes listed are Miss. Code §§ 63-15-37, -39, -41, -43, -49, -51 or -53. · HB 1003 § 6

Person operating a fully autonomous vehicle: Operate driverless only with the system engaged and a vehicle that reaches a minimal risk condition on failure, can obey traffic laws, and bears required federal certification. Starts July 1, 2023 · Ongoing · Applies when: Any operation of a fully autonomous vehicle on public roads without a human driver; DPS may grant exemptions from the traffic-law condition. · HB 1003 § 3(a)-(c)

Owner of a fully autonomous vehicle: After a crash, have the vehicle remain at the scene when Article 9 requires, and report the crash under Article 9, Chapter 3, Title 63. When triggered · Each time it happens · Applies when: A fully autonomous vehicle is involved in a crash. The owner, or a person acting for the owner, reports it; remaining at the scene is consistent with the vehicle's capability. · HB 1003 § 7(a), (b)

Owner of a fully autonomous vehicle: Register and title the vehicle properly; if registered or titled in Mississippi, it must be identified on the registration and title as a fully autonomous vehicle. Starts July 1, 2023 · Once · Applies when: Registration with the Department of Revenue under § 63-5-39 and titling under Chapter 21, Title 63. · HB 1003 § 9(1), (2)

Mississippi crime of disseminating election deepfakes (digitizations) (SB 2577)

SB 2577, 2024 Regular Session, Laws 2024, ch. 467; creates a new section in Miss. Code Title 97, Chapter 13 (the act does not give the section number). Enforced by: Criminal prosecution. The Attorney General, a district attorney (where the depicted person lives or the digitization had impact), the depicted individual, an injured candidate, or a political party with a nominee on the ballot may sue for an injunction. No lawsuit challenging the act was found in a web search.. Checked November 15, 2026.

Person: Within 90 days of an election, do not disseminate or contract to disseminate a known digitization, without the depicted person's consent, to injure a candidate, sway results or deter voting. Starts July 1, 2024 · Each time it happens · Applies when: The person knows or has actual knowledge the item is a digitization; it is shared within 90 days of an election, without the depicted individual's consent, and with one of the stated intents. · SB 2577 § 1(2)

Missouri

3 items from 1 law

Missouri offense of disclosure of an intimate digital depiction (HB 2273, 2026)

SS SCS HCS HBs 2273, 1946, 1814 & 2551 (2026), truly agreed (5011S.09T); enacts RSMo 573.570 and 27.117, among 52 sections. Enforced by: Criminal prosecution by prosecuting or circuit attorneys; under new RSMo 27.117 a prosecutor may ask the Attorney General to assist where the offense occurred in more than one jurisdiction. A web search on November 15, 2026 found no report of a court order blocking 573.570; court dockets were not searched.. Checked November 15, 2026.

Person: Do not disclose an intimate digital depiction with intent to harass, annoy, threaten, alarm or cause substantial financial or reputational harm, or knowing or recklessly disregarding resulting harm. Starts August 28, 2026 · Ongoing · Applies when: Harm covered by the knowledge test is physical, emotional, reputational or economic harm to the depicted individual. · RSMo 573.570.2(1)

Person: Do not threaten to disclose an intimate digital depiction with the same intent, or knowing or recklessly disregarding that the threat will cause harm. Starts August 28, 2026 · Ongoing · Applies when: Any threat to disclose. · RSMo 573.570.2(2)

Person: Do not rely on a disclaimer that the depiction was unauthorized or that the depicted person did not take part; it is not a defense. Starts August 28, 2026 · Ongoing · Applies when: Any disclosure or threat covered by 573.570.2. · RSMo 573.570.4

Montana

16 items from 7 laws

Montana Facial Recognition for Government Use Act (SB 397): third-party vendor duties

Chapter 781, Laws of 2023 (SB 397); 44-15-101 to 44-15-112, MCA. Enforced by: A person may sue for injunctive or declaratory relief; a person whose information was improperly handled may sue an entity for damages; the attorney general may seek civil penalties. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.. Checked November 15, 2026.

Third-party vendor: Before obtaining a person's facial biometric data, tell them in writing it is being collected, the specific purpose and term of use, and get their written consent. When triggered · Each time it happens · Applies when: Vendor under contract with a state or local government agency for facial recognition services. · 44-15-109(2), MCA

Third-party vendor: Give the agency a dated, readable written privacy policy and notify the agency of policy changes within a reasonable time. When triggered · Ongoing · Applies when: Vendor under contract with a state or local government agency for facial recognition services. · 44-15-109(3), MCA

Third-party vendor: Publish a retention and destruction schedule and follow it; keep data past its purpose only with affirmative authorization, destroying it within 1 year of the person's last interaction. When triggered · Ongoing · Applies when: Absent a valid warrant or subpoena from a court of competent jurisdiction. · 44-15-109(4), MCA

Third-party vendor: Adopt a written information security policy with administrative, technical and physical controls, stating the data is stored in the United States, and protect it with industry-standard care. When triggered · Ongoing · Applies when: Vendor under contract with a state or local government agency for facial recognition services. · 44-15-109(5), (7)(a), MCA

Third-party vendor: Do not give, sell, lease or trade facial biometric data without affirmative authorization, or release it to a federal or state agency without a valid warrant or court order. When triggered · Ongoing · Applies when: Vendor under contract with a state or local government agency for facial recognition services. · 44-15-109(6), (7)(b), MCA

Montana Right to Compute Act

SB 212, 69th Legislature (2025); Laws of Montana 2025, ch. 150; Montana Code Annotated 2-10-201 to 2-10-207. Enforced by: The law does not name one. Checked November 14, 2026.

Deployer: Develop a reasonable risk management policy that considers the latest NIST AI risk management framework, the ISO/IEC AI standard named in the text, or another recognized AI risk management framework. When triggered · Once · Applies when: After deploying a critical artificial intelligence system that controls a critical infrastructure facility in whole or in part. A plan prepared under federal requirements counts as compliance. · MCA 2-10-205; SB 212 Section 4

Government entity: Limit actions that restrict lawful private ownership or use of computational resources to those demonstrably necessary and narrowly tailored to a compelling government interest. When triggered · Ongoing · Applies when: A law, ordinance, rule, policy, permit or administrative practice restricts the common or intended use of computational resources by their owner or invitees. · MCA 2-10-204; 2-10-203(7); SB 212 Section 3

Montana computer-generated child sexual abuse material possession offense (HB 82)

Chapter 102, Laws of 2025 (HB 82); amends 45-5-625, MCA (sexual abuse of children) and other sections. Enforced by: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.. Checked November 15, 2026.

Person: Do not knowingly possess computer-generated child pornography, including AI-made depictions indistinguishable from a real minor, showing a child in actual or simulated sexual conduct. Starts July 1, 2025 · Ongoing · Applies when: Includes possession by electronic communication. · 45-5-625(1)(e), MCA

Montana deepfakes in election communications law (SB 25)

Chapter 541, Laws of 2025 (SB 25); codified as a new part of Title 13, chapter 35, MCA (13-35-801 to 13-35-804 per the 2025 MCA history note on 13-35-802). Enforced by: Commissioner of Political Practices, on a complaint under 13-37-111; civil penalties by the commissioner or a county attorney; repeat findings referred to the county attorney or attorney general for prosecution. A harmed candidate or party may sue. On September 16, 2026 a federal court barred enforcement against the two named plaintiffs only.. Checked November 15, 2026.

Person or entity working in an official election capacity: Do not pay for or sponsor election communications you knew or should have known are deepfakes of a ballot candidate or party unless they carry the required AI disclosure. Starts October 1, 2025 · Ongoing · Applies when: Within 60 days of the start of voting in an election with a candidate on the ballot. · SB 25 § 2; 13-35-802, MCABlocked in court for The named plaintiffs only: Accountability in State Government and Dan Bartel.. Preliminary injunction: defendants Austin Knudsen, Kevin Downs and Chris Gallus (Commissioner of Political Practices) may not review, investigate, prosecute, adjudicate or enforce the act against these plaintiffs. Everyone else remains covered. Accountability in State Government v. Knudsen, No. 6:26-cv-00038-SPW (D. Mont.), Order granting preliminary injunction (Doc. 31), Sep 16, 2026

Person or entity working in an official election capacity: Format the disclosure: bold 12-point print; readable video text at least 4% of picture height; online text viewable without user action; audio at least 8 seconds, at start or end. Starts October 1, 2025 · Each time it happens · Applies when: When relying on the disclosure to use a deepfake in the 60-day window. · SB 25 § 2; 13-35-802, MCABlocked in court for The named plaintiffs only: Accountability in State Government and Dan Bartel.. Preliminary injunction: defendants Austin Knudsen, Kevin Downs and Chris Gallus (Commissioner of Political Practices) may not review, investigate, prosecute, adjudicate or enforce the act against these plaintiffs. Everyone else remains covered. Accountability in State Government v. Knudsen, No. 6:26-cv-00038-SPW (D. Mont.), Order granting preliminary injunction (Doc. 31), Sep 16, 2026

Montana digitally fabricated intimate images offense (HB 514)

Chapter 686, Laws of 2025 (HB 514); amends 45-8-213, MCA (violating privacy in communications). Enforced by: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.. Checked November 15, 2026.

Person: Do not publish, distribute or disclose real or digitally fabricated nude or sexual images of an identifiable person without consent to terrify, intimidate, threaten, harass, injure or obtain money. Starts October 1, 2025 · Ongoing · Applies when: Knowing or purposeful conduct; the (2)(b) exceptions apply. · 45-8-213(1)(d), MCA

Person: Do not possess and threaten to disclose real or digitally fabricated nude or sexual images of an identifiable person to obtain money or other valuable consideration without consent. Starts October 1, 2025 · Ongoing · Applies when: Knowing or purposeful conduct. · 45-8-213(1)(e), MCA

Montana disclosing explicit synthetic media offense (SB 413)

Chapter 606, Laws of 2025 (SB 413); codified in Title 45, chapter 5, part 6, MCA. Enforced by: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.. Checked November 15, 2026.

Person: Do not disclose explicit synthetic media of an identifiable person knowing or having reason to know they did not consent and it would cause substantial emotional distress. When triggered · Ongoing · Applies when: Offenses committed on or after the act took effect on passage and approval in 2025. · SB 413 § 1(1)(a); §§ 3, 4

Person: Do not disclose explicit synthetic media to terrify, intimidate, threaten, harass or injure the depicted person, or possess and threaten to disclose it to obtain money. When triggered · Ongoing · Applies when: Offenses committed on or after the act took effect on passage and approval in 2025. · SB 413 § 1(1)(b), (c); §§ 3, 4

Montana name, voice and likeness law: unauthorized digital voice and visual depictions (HB 513)

Chapter 685, Laws of 2025 (HB 513); section 1 is codified in Title 30, chapter 14, MCA. Enforced by: Civil suit by the individual or by a person to whom the rights were assigned, bequeathed, transferred or exclusively licensed. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.. Checked November 15, 2026.

Person (distributor of a tool): Do not distribute or make available a tool, software, service or device whose primary purpose is producing unauthorized digital voice or visual depictions of an identified individual for commercial use. Starts January 1, 2026 · Ongoing · Applies when: Without consent of the individual or rights holder, and with actual and specific knowledge of that primary purpose. · HB 513 § 1(3)(a)

Person (publisher): Do not publish, perform, distribute or make available an unauthorized digital voice or visual depiction of an individual for commercial use without consent. Starts January 1, 2026 · Ongoing · Applies when: Intentional conduct with actual and specific knowledge that the material depicts the individual and is unauthorized. · HB 513 § 1(3)(b)

Nebraska

17 items from 4 laws

Nebraska Age-Appropriate Online Design Code Act (LB 504): recommendation system and profiling provisions

LB 504, 109th Legislature, First Session (2025), approved May 30, 2025; Age-Appropriate Online Design Code Act (LB 504 §§ 1-9). Enforced by: Nebraska Attorney General, the only enforcer the act names. A violation is also a deceptive trade practice under the Uniform Deceptive Trade Practices Act, with civil penalties governed only by this act.. Checked November 14, 2026.

Covered online service: Give each covered minor an accessible, easy-to-use tool to control personalized recommendation systems by opting in to a chronological feed or blocking categories of recommended content. Starts January 1, 2026 · Ongoing · Applies when: A user the service knows to be a minor. The tool must default to the option giving the highest protection available for the minor's safety. · LB 504 § 4(1)(d), (3)

Covered online service: Do not profile a covered minor unless profiling is necessary to provide a service the minor requested, and only for the aspects the minor is actively and knowingly engaged with. Starts January 1, 2026 · Ongoing · Applies when: Any automated processing of personal data to evaluate, analyze or predict aspects of a covered minor. · LB 504 § 5(7); § 2(15)

Covered online service: Set the Section 5 protections, including the profiling limit, by default to the option giving the highest protection available for the covered minor's safety. Starts January 1, 2026 · Ongoing · Applies when: A user the service knows to be a minor. · LB 504 § 5(8)

Covered online service: Designate one or more officers responsible for compliance with the act. Starts January 1, 2026 · Ongoing · Applies when: Any covered online service. · LB 504 § 9(2)

Nebraska Child Sexual Abuse Material Prevention Act: computer-generated and AI material (LB 383)

Laws 2025, LB 383, approved May 20, 2025; secs. 1-6 now Neb. Rev. Stat. 28-1801 to 28-1806 (formerly 28-1463.01 to 28-1463.06 and 28-813.01). Enforced by: Criminal prosecution; the sections read do not name the prosecuting office. A web search on November 15, 2026 found no court challenge to these provisions.. Checked November 15, 2026.

Person: Do not knowingly make, create or generate child sexual abuse material, including computer-generated or AI-made material, in any way. When triggered · Ongoing · Applies when: Computer-generated depictions count when they meet the definition, including obscene depictions of a computer-generated person who appears to be a child. The act states no effective date (see open questions). · Neb. Rev. Stat. 28-1805(1); 28-1802(2)-(4)

Person: Do not knowingly sell, distribute, advertise, publish, trade or otherwise provide child sexual abuse material, including computer-generated material, or possess it intending to do so. When triggered · Ongoing · Applies when: Any distribution or possession with intent to distribute. The act states no effective date (see open questions). · Neb. Rev. Stat. 28-1805(2); 28-1804(1)

Person: Do not knowingly possess or receive child sexual abuse material, including computer-generated material. When triggered · Ongoing · Applies when: Any possession or receipt; persons under 19 are covered when acting knowingly and intentionally. The act states no effective date (see open questions). · Neb. Rev. Stat. 28-1803(1)-(2)

Nebraska Conversational Artificial Intelligence Safety Act (LB 525, §§ 12-18)

LB 525, One Hundred Ninth Legislature, Second Session (2026), approved April 14, 2026; sections 12 to 18 are the Conversational Artificial Intelligence Safety Act; sections 1 to 10 are the Agricultural Data Privacy Act. Enforced by: Nebraska Attorney General, who may sue an operator on behalf of the state or of an aggrieved person.. Checked November 12, 2026.

Operator: Clearly and conspicuously disclose to each minor account holder that they are interacting with AI, by a persistent visible disclaimer or at session start and at least every three hours. Starts July 1, 2027 · Ongoing · Applies when: A minor account holder uses the conversational AI service. · LB 525 § 14(1)

Operator: Do not give minor account holders points or similar rewards at unpredictable intervals with the intent to increase engagement. Starts July 1, 2027 · Ongoing · Applies when: A minor account holder uses the conversational AI service. · LB 525 § 14(2)

Operator: Take reasonable measures to prevent the service from producing visual depictions of sexually explicit conduct, urging sexually explicit conduct, or sexually objectifying the account holder, for minors. Starts July 1, 2027 · Ongoing · Applies when: A minor account holder uses the conversational AI service. · LB 525 § 14(3)

Operator: Take reasonable measures to prevent statements that would lead a reasonable person to believe they are talking to a human, including claims of sentience, emotional dependence or romantic role-play. Starts July 1, 2027 · Ongoing · Applies when: A minor account holder uses the conversational AI service. · LB 525 § 14(4)

Operator: Offer privacy and account-setting tools to minor account holders, to parents or guardians of those under thirteen, and related tools to parents of older minors as appropriate. Starts July 1, 2027 · Ongoing · Applies when: A minor account holder uses the conversational AI service. · LB 525 § 14(5)

Operator: Clearly and conspicuously disclose that the service is AI where a reasonable person interacting with it would be misled into believing they are talking to a human. Starts July 1, 2027 · Ongoing · Applies when: Any user, not only minors. · LB 525 § 15

Operator: Adopt a protocol for responding to user prompts about suicidal ideation or self-harm, including reasonable efforts to refer the user to crisis services. Starts July 1, 2027 · Ongoing · Applies when: The operator makes a conversational AI service available to the public. · LB 525 § 16

Operator: Do not knowingly and intentionally cause or program the service to state explicitly that it is designed to provide professional mental or behavioral health care. Starts July 1, 2027 · Ongoing · Applies when: The operator makes a conversational AI service available to the public. · LB 525 § 17

Nebraska Ensuring Transparency in Prior Authorization Act, AI section (LB 77)

Laws 2025, LB 77, §§ 1 to 13 (Ensuring Transparency in Prior Authorization Act); artificial intelligence provision at § 12. Enforced by: Nebraska Department of Insurance, which may at any time audit a utilization review agent's automated utilization management system and may contract with a third party to do so. The act names no other enforcement step. A web search on November 12, 2026 found no report of a court order blocking this law; court dockets were not searched.. Checked November 12, 2026.

Utilization review agent: Do not make an artificial intelligence-based algorithm the sole basis of a decision to deny, delay or modify health care services based, in whole or in part, on medical necessity. Starts January 1, 2026 · Ongoing · Applies when: Any utilization review decision based in whole or in part on medical necessity. · LB 77 § 12(1)

Utilization review agent: Disclose to the Department of Insurance, each network health care provider, each enrollee and on its public website if AI-based algorithms are used or will be used in utilization review. Starts January 1, 2026 · Ongoing · Applies when: The agent uses or will use artificial intelligence-based algorithms in its utilization review process. No deadline or frequency is stated. · LB 77 § 12(2)

Nevada

18 items from 6 laws

Nevada ban on AI-only utility shutdown decisions in emergencies (AB 325)

AB 325, 83rd Session (2025); Statutes of Nevada 2025 contents list No. 123, approved May 30, 2025; NRS 704.1833 and new sections in NRS chapter 414. Enforced by: The law does not name one. Checked November 15, 2026.

Public utility: Do not make a final decision on whether to reduce or shut down utility service in response to a disaster or emergency based solely on the use of artificial intelligence. Starts October 1, 2025 · Each time it happens · Applies when: A disaster or emergency leads the utility to consider reducing or shutting down service. · NRS 704.1833(1)

Nevada crime of disseminating computer-generated intimate images (SB 213)

SB 213, 83rd Session (2025); Statutes of Nevada 2025 contents list No. 299, approved June 5, 2025; amends NRS 200.770 and 200.780. Enforced by: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no court challenge to this law.. Checked November 15, 2026.

Person: Do not knowingly distribute a computer-generated intimate image made to look like an actual depiction of a person, without consent, intending to harass, harm or terrorize them. Starts October 1, 2025 · Ongoing · Applies when: On or after October 1, 2025. · NRS 200.780(1)(b), as amended by SB 213 § 2

Nevada crimes for AI-generated child sexual abuse material (SB 263)

SB 263, 83rd Session (2025); Statutes of Nevada 2025 contents list No. 383, approved June 6, 2025; amends NRS 200.700, 200.725, 200.730 and 176.0931. Enforced by: Criminal prosecution; the sections do not name the prosecuting office. A web search on November 15, 2026 found no court challenge to this law.. Checked November 15, 2026.

Person: Do not knowingly prepare, advertise or distribute computer-generated child pornography, including AI-generated depictions indistinguishable from a minor in sexual conduct. Starts October 1, 2025 · Ongoing · Applies when: On or after October 1, 2025. · NRS 200.725, as amended by SB 263 § 2

Person: Do not knowingly and willfully possess computer-generated child pornography for any purpose. Starts October 1, 2025 · Ongoing · Applies when: On or after October 1, 2025. · NRS 200.730, as amended by SB 263 § 3

Nevada limits on AI in mental and behavioral health care (AB 406)

AB 406, 83rd Session (2025); Statutes of Nevada 2025 contents list No. 283, approved June 5, 2025; adds a section to NRS chapter 391, NRS 433.567 and NRS 629.610 (section 8, as cross-referenced in NRS 433.567(6)(b)). Enforced by: Division of Public and Behavioral Health (Department of Health and Human Services) for NRS 433.567; licensing boards for licensees under section 8. A web search on November 15, 2026 found no court challenge to this law.. Checked November 15, 2026.

Artificial intelligence provider: Do not state or imply that an AI system can provide professional mental or behavioral health care, or that it is a therapist, counselor, psychiatrist or similar provider. Starts July 1, 2025 · Ongoing · Applies when: Any AI system offered on or after July 1, 2025. · NRS 433.567(1)

Artificial intelligence provider: Do not make available an AI system specifically programmed to provide a service that would be professional mental or behavioral health care if a natural person provided it. Starts July 1, 2025 · Ongoing · Applies when: Any AI system offered on or after July 1, 2025. · NRS 433.567(2)

Natural person: Do not represent yourself as qualified to provide professional mental or behavioral health care without a valid governmental credential, including by using titles such as therapist or counselor. Starts July 1, 2025 · Ongoing · Applies when: On or after July 1, 2025. · NRS 433.567(3)

Provider of mental and behavioral health care: Except for permitted administrative support, do not use an AI system in connection with providing professional mental and behavioral health care directly to a patient. Starts July 1, 2025 · Ongoing · Applies when: On or after July 1, 2025. · AB 406 § 8(1), (2)

Provider of mental and behavioral health care: When using AI for administrative support, comply with privacy and health records laws, and independently review the accuracy of AI-generated billing information and session notes. When triggered · Each time it happens · Applies when: When a licensed provider uses an AI system for administrative support. · AB 406 § 8(3), (4)

Nevada monitored autonomous vehicles in ride-hailing (SB 288, 2021)

SB 288, 81st Session (2021); Statutes of Nevada 2021 contents list No. 550, approved June 10, 2021; NRS 706A.045 to 706A.047, 706A.161, 706A.162 and amendments to NRS chapters 706A and 690B. Enforced by: Nevada Transportation Authority. A web search on November 15, 2026 found no court challenge to these provisions.. Checked November 15, 2026.

Monitored autonomous vehicle provider: Keep a monitor physically present in the autonomous vehicle at all times while it operates; the monitor may be paid only by the provider. Starts June 10, 2021 · Ongoing · Applies when: Providing transportation services through a transportation network company. · NRS 706A.045, 706A.046, 706A.161

Transportation network company: Inspect each monitored autonomous vehicle before first use and yearly after; do not connect vehicles failing legal requirements, with under four doors, or seating over eight. Starts June 10, 2021 · Every year · Applies when: Connecting passengers to monitored autonomous vehicle providers. · NRS 706A.180

Transportation network company: Give the passenger the monitored autonomous vehicle's license plate number before the passenger enters the vehicle. When triggered · Each time it happens · Applies when: Each trip with a monitored autonomous vehicle. · NRS 706A.200

Transportation network company: Keep monitored autonomous vehicle provider records and vehicle inspection records for at least 3 years. Starts June 10, 2021 · Ongoing · Applies when: Connecting passengers to monitored autonomous vehicle providers. · NRS 706A.230

Transportation network company: Report crashes involving monitored autonomous vehicle providers in the first 6 and 12 months of operation to the Authority, by 7 and 13 months after the permit. When triggered · Each time it happens · Applies when: A company newly permitted to connect monitored autonomous vehicle providers. · NRS 706A.270

Monitored autonomous vehicle provider: Do not solicit passengers outside the company's app, deceive passengers, take unnecessarily long routes, or discriminate against passengers. Starts June 10, 2021 · Ongoing · Applies when: Providing transportation services. · NRS 706A.280, 706A.190

Monitored autonomous vehicle provider: Maintain insurance coverage of at least $1,500,000 while operating a monitored autonomous vehicle, and keep proof of coverage in the vehicle. Starts June 10, 2021 · Ongoing · Applies when: Any period in which the provider is operating a monitored autonomous vehicle. · SB 288 §§ 22.3(1), 22.7(2) (NRS 690B.470(2))

Nevada synthetic media disclosure in election communications (AB 73)

AB 73, 83rd Session (2025); Statutes of Nevada 2025 contents list No. 224, approved June 3, 2025; NRS 294A.3493. Enforced by: A candidate depicted in a noncompliant communication may seek an injunction or other equitable relief in district court against whoever made or paid for it. NRS 294A.3493 names no state enforcer. A web search on November 15, 2026 found no court challenge to this law.. Checked November 15, 2026.

Person or committee that makes or pays for the communication: Disclose clearly and conspicuously that the content has been manipulated, in the form: This (image/video/audio) has been manipulated. Starts January 1, 2026 · Each time it happens · Applies when: A covered election communication includes any form of synthetic media. · NRS 294A.3493(1)

Person or committee that makes or pays for the communication: Show the disclosure for the entire video; in audio, read it clearly at the beginning and end, repeating at least every 2 minutes in longer audio. Starts January 1, 2026 · Each time it happens · Applies when: The communication is a video or audio-only communication. · NRS 294A.3493(2)

New Hampshire

16 items from 6 laws

New Hampshire AI chatbot child-endangerment law (HB 143, 2025)

2025 N.H. Laws ch. 270 (HB 143); RSA 639:3, III-a and V; RSA 507:8-k. Enforced by: Criminal prosecution for endangering the welfare of a child (RSA 639:3 names no prosecutor). For civil liability, RSA 507:8-k, II gives the attorney general the sole right of action. A web search on November 15, 2026 found no lawsuit or court order against this law; court dockets were not searched.. Checked November 15, 2026.

Owner or operator: Do not knowingly direct a communication to a child intended to encourage or recommend imminent sexual conduct, illegal drug or alcohol use, self-harm, suicide or violent crime. Starts January 1, 2026 · Ongoing · Applies when: The owner or operator knows, when the communication is directed to the child, that it is intended to facilitate, encourage, offer, solicit or recommend one of the listed acts. · RSA 639:3, III-a(a); RSA 507:8-k, I

New Hampshire AI deepfakes in political advertising law (HB 1596, 2024)

2024 N.H. Laws ch. 345 (HB 1596); RSA 664:14-c. Enforced by: A candidate or election official depicted in a prohibited deepfake may sue. RSA 664:21, IV makes any violation of chapter 664 without another listed penalty a crime; it names no prosecutor. A web search on November 15, 2026 found no lawsuit or court order against this law (a federal suit over the 2024 Biden robocall, League of Women Voters v. Kramer, targets the callers, not this statute); court dockets were not searched.. Checked November 15, 2026.

Person, corporation, committee or other entity: Do not distribute an AI-created message you know or should know is a deepfake of a candidate, election official or party, unless it carries the required AI disclosure. Starts August 1, 2024 · Ongoing · Applies when: Within 90 days of an election at which a candidate for elective office will appear on the ballot. · RSA 664:14-c, II, III(a)

Person, corporation, committee or other entity: State that the image, video or audio was manipulated or generated by AI and depicts speech or conduct that did not occur, using the statute's wording. When triggered · Each time it happens · Applies when: To use the disclosure exception for an AI deepfake in an election message within the 90-day window. · RSA 664:14-c, III(a), (b)

Person, corporation, committee or other entity: Make visual disclosures easily readable, at least the largest font size used, and shown for a video's full length; read audio disclosures clearly at start, end and every two minutes. When triggered · Each time it happens · Applies when: Whenever the disclosure is used; the two-minute repetition applies to audio longer than two minutes. · RSA 664:14-c, III(c), (d)

New Hampshire automated vehicle testing pilot program (SB 216, 2019)

2019 N.H. Laws ch. 310 (SB 216); RSA 241:1-5 (advisory commission); RSA 242:1 (testing pilot program and deployment). Enforced by: Department of Safety, Division of Motor Vehicles, the sole state agency implementing the chapter. A web search on November 15, 2026 found no lawsuit or court order against this law; court dockets were not searched.. Checked November 15, 2026.

Testing entity: Get Division of Motor Vehicles approval before testing, applying with entity and vehicle details, operational design domain, test areas, a safety self-assessment or training summary, and signed acknowledgments. When triggered · Once · Applies when: Before testing automated vehicles on public roads. · RSA 242:1, III(a), (b)

Testing entity: Show financial responsibility of at least $5 million for personal injury or property damage judgments, by insurance policy, bond or other instrument. When triggered · Ongoing · Applies when: As part of the testing application. · RSA 242:1, III(b)(7)

Testing entity: Answer a written department request for more information within 15 business days. When triggered · Each time it happens · Applies when: When the department asks for more information about an application. · RSA 242:1, IV(a)

Testing entity: Pay an annual $500 participation fee. When triggered · Every year · Applies when: Each year the entity participates in the pilot program. · RSA 242:1, IV(b)

Testing entity: Before testing with no driver aboard, notify the department, acknowledge the vehicle can reach a minimal risk condition, and submit an emergency response guide for first responders. When triggered · Once · Applies when: Before driverless testing. · RSA 242:1, V(a)

Testing entity: Let only trained employees, contractors or authorized agents holding a valid license operate or monitor test vehicles. When triggered · Ongoing · Applies when: During testing. · RSA 242:1, II(j), III(b)(8)

Owner: Submit proof of insurance or self-insurance meeting RSA 264 to the department before the automated vehicle operates on public roads. When triggered · Once · Applies when: Before an ADS-equipped vehicle operates on public roads, including without a human driver. · RSA 242:1, IX(d), XII

Owner: Promptly report any accident to law enforcement and comply with RSA 264:25 where applicable. When triggered · Each time it happens · Applies when: An accident involving a vehicle operating without a human driver. · RSA 242:1, XI

Owner or network operator: Operate without a human driver only if the vehicle can reach a minimal risk condition, follow traffic and safety law unless exempted, and meet federal law. When triggered · Ongoing · Applies when: Driverless operation, including vehicles dispatched by an on-demand network. · RSA 242:1, IX, X

New Hampshire child intimate visual representations law (SB 300, 2025)

2025 N.H. Laws ch. 259 (SB 300); RSA 649-A:3-c. Enforced by: Criminal prosecution (the section names no prosecutor). A web search on November 15, 2026 found no lawsuit or court order against this law; court dockets were not searched.. Checked November 15, 2026.

Person: Do not knowingly create, produce, manufacture or direct an intimate visual representation of an identifiable child, including a synthetic or computer-generated image, for prurient purposes. Starts January 1, 2026 · Ongoing · Applies when: The child is identifiable from the representation itself or from information shown with it. · RSA 649-A:3-c, I, II

New Hampshire fraudulent use of deepfakes law (HB 1432, 2024)

2024 N.H. Laws ch. 243 (HB 1432); RSA 638:26-a; RSA 507:8-j. Enforced by: Criminal prosecution (the section names no prosecutor); the person depicted may also sue for damages. A web search on November 15, 2026 found no lawsuit or court order against this law; court dockets were not searched.. Checked November 15, 2026.

Person: Do not knowingly create, distribute or present a deepfake of an identifiable person to embarrass, harass, entrap, defame, extort or otherwise cause them financial or reputational harm. Starts January 1, 2025 · Ongoing · Applies when: Any creation, distribution or presentation on or after January 1, 2025, unless an exemption applies. · RSA 638:26-a, II; RSA 507:8-j, II

New Hampshire synthetic sexual images law (HB 1319, 2024)

2024 N.H. Laws ch. 127 (HB 1319); RSA 644:9-a, I(f), II-a. Enforced by: Criminal prosecution (the section names no prosecutor). A web search on November 15, 2026 found no lawsuit or court order against this provision; court dockets were not searched.. Checked November 15, 2026.

Person: Do not purposely disseminate a synthetic image showing a recognizable person's intimate parts or sexual acts, made without their consent, intending to harass, intimidate, threaten or coerce them. Starts January 1, 2025 · Ongoing · Applies when: Any dissemination on or after January 1, 2025, unless an exemption applies. · RSA 644:9-a, II-a

New Jersey

17 items from 4 laws

New Jersey Fair Price Protection Act (grocery surveillance pricing)

P.L.2026, c.55, approved July 23, 2026 (Assembly Committee Substitute for A 4085 and A 4523, third reprint; S 3612 is the Senate bill listed on the site); C.56:8-23.1 to 56:8-23.7. Enforced by: New Jersey Attorney General, who may bring a civil action for any violation of the act or its rules; a violation of section 3 is also an unlawful practice under the Consumer Fraud Act.. Checked November 14, 2026.

Person: Do not use surveillance pricing, or any other pricing strategy, that determines or varies the sale price of groceries and other foodstuffs based wholly or partly on personal data. Starts August 1, 2027 · Ongoing · Applies when: Any sale price of groceries and other foodstuffs, unless an exception in section 3.b applies. · P.L.2026, c.55, § 3.a

Person: Do not use personal data that was used to offer a permitted price difference for any other purpose without the consumer's consent. Starts August 1, 2027 · Ongoing · Applies when: The person offers a cost-based difference, bona fide discount or loyalty program price under section 3.b. · P.L.2026, c.55, § 3.c

Person operating a loyalty program: Give participants clear and conspicuous disclosures of pricing benefits, discounts and data practices, and provide them to the Division of Consumer Affairs within 14 days of a request. Starts August 1, 2027 · Ongoing · Applies when: The person relies on the loyalty program exception; the program must also be opt-in, uniform for all members and publicly disclosed. · P.L.2026, c.55, § 3.b(3)

Person: Do not begin new use of electronic shelf labels in New Jersey during the one-year moratorium, except to repair or replace labels already operating at the same place of business. Starts February 1, 2027 · Ongoing · Applies when: The one-year moratorium that begins when section 4 takes effect. · P.L.2026, c.55, § 4.a, 4.b; § 9

New Jersey Forbidding the Algorithmic Inflation of Rent (FAIR) Act

P.L.2026, c.43, approved July 20, 2026 (Assembly Committee Substitute for A 3497, first reprint; S 451 is the Senate bill listed on the site); C.56:9-20 to 56:9-26. Enforced by: Not named in the act. Each prohibited act is a violation of the New Jersey Antitrust Act, and section 5 keeps sections 6 through 17 of that act (C.56:9-6 to 56:9-17) applicable; those sections were not read. The Attorney General must provide a place on the Department of Law and Public Safety website to report suspected violations.. Checked November 14, 2026.

Rental property owner, or its agent, representative or subcontractor: Do not receive, subscribe to, contract for, or otherwise exchange any form of consideration for the services of a coordinator. Starts July 1, 2027 · Ongoing · Applies when: Any dealing with a coordinator for residential rental units in New Jersey. · P.L.2026, c.43, § 4.a

Coordinator: Do not facilitate a tacit or express agreement among rental property owners that restricts competition, including by performing a coordinating function. Starts July 1, 2027 · Ongoing · Applies when: The coordinator operates software or a device for rental property owners. · P.L.2026, c.43, § 4.b

Two or more persons: Do not engage in or otherwise facilitate parallel pricing coordination. Starts July 1, 2027 · Ongoing · Applies when: Any agreement, tacit or express, on prices for reasonably interchangeable residential rental units. · P.L.2026, c.43, § 4.c

Coordinator's agent, representative or subcontractor: Do not engage in parallel pricing coordination. Starts July 1, 2027 · Ongoing · Applies when: The person acts for a coordinator. · P.L.2026, c.43, § 4.d

Person: Do not perform a coordinating function. Starts July 1, 2027 · Ongoing · Applies when: Any use of an algorithm on rental property owners' competitively sensitive information to set or recommend rents, lease terms or occupancy, outside the listed exclusions. · P.L.2026, c.43, § 4.e

New Jersey Kids Code Act (A4015): algorithmic recommendation provisions

Assembly Committee Substitute for A4015 (222nd Legislature), Third Reprint as amended by the Senate June 30, 2026; signed August 11, 2026 with companion S3413 named on the same line; P.L. chapter number not confirmed. Enforced by: New Jersey Attorney General: a violation is an unlawful practice under the Consumer Fraud Act (P.L.1960, c.39), with civil investigation and civil action powers; injured covered children and minors, their parents, or the Attorney General may also sue the provider. A web search on November 15, 2026 found no lawsuit or court order against the act; court dockets were not searched.. Checked November 15, 2026.

Covered online service provider: By default, do not show a covered child's or minor's account or media to a covered adult other than a parent, unless the user allowed it or made it public. Starts September 1, 2027 · Ongoing · Applies when: The provider uses an algorithmic recommendation system to select, recommend or prioritize media or contacts between users. · A4015 (ACS, 3R) § 4(a)(1)(a), (b)

Covered online service provider: By default, block direct messaging between a covered child or minor and a covered adult who is not their parent, unless the young user expressly chose to allow it. Starts September 1, 2027 · Ongoing · Applies when: The provider uses an algorithmic recommendation system to select, recommend or prioritize media or contacts between users. · A4015 (ACS, 3R) § 4(a)(1)(c)

Covered online service provider: Do not use a covered child's or minor's personal data to recommend media algorithmically, except based on chosen settings, search queries, age flags, or the user's express requests. Starts September 1, 2027 · Ongoing · Applies when: Any use of an algorithmic recommendation system with a covered child's or covered minor's personal data. · A4015 (ACS, 3R) § 7(a)(2)

Covered online service provider: Provide a prominent, accessible interface letting covered children, minors and parents set which media is recommended or blocked, and access, review and change the personal data used. Starts September 1, 2027 · Ongoing · Applies when: The provider uses an algorithmic recommendation system. · A4015 (ACS, 3R) § 10(a)

Covered online service provider: Make sure the system's selection, recommendation and prioritization of media follows the preferences users and parents set through that interface. Starts September 1, 2027 · Ongoing · Applies when: The provider uses an algorithmic recommendation system. · A4015 (ACS, 3R) § 10(b)

New Jersey deceptive audio or visual media law (P.L.2025, c.40)

A3540, 2024-2025 Session; P.L.2025, c.40; N.J.S.A. 2C:21-17.7 and 2C:21-17.8. Enforced by: Criminal prosecution; victims may also sue in Superior Court without a criminal conviction. A web search on November 15, 2026 found no court challenge to this law.. Checked November 15, 2026.

Person: Do not create or generate deceptive audio or visual media without license or privilege to commit or further a listed crime, or knowing another will so use it. Starts April 2, 2025 · Ongoing · Applies when: Listed crimes include fraud, theft, threats, harassment, cyber-harassment, endangering children and others named in the statute. · N.J.S.A. 2C:21-17.8(b)

Person: Do not solicit, disclose or use deceptive audio or visual media without license or privilege to commit or further a listed crime. Starts April 2, 2025 · Ongoing · Applies when: Same listed crimes; exemptions in subsection g apply. · N.J.S.A. 2C:21-17.8(c)(1)

Person: Do not knowingly or recklessly disclose deceptive media that was created in violation of the law, without license or privilege. Starts April 2, 2025 · Ongoing · Applies when: Subject to the exemptions in subsection g, including platforms protected by 47 U.S.C. 230. · N.J.S.A. 2C:21-17.8(c)(2), (g)

New Mexico

6 items from 2 laws

New Mexico AI materially deceptive media in elections law (HB 182)

HB 182, Laws 2024, Chapter 57; amends NMSA 1978 §§ 1-19-26 and 1-19-26.4 and enacts § 1-19-26.8. Enforced by: The attorney general or a district attorney; injunctive relief may also be sought by the depicted person, an injured candidate, or an organization representing misled voters. Civil penalties apply to disclaimer violations. Court status: The Babylon Bee v. Castillo, a federal suit filed August 11, 2026 challenging the disclaimer provisions, was pending with no ruling found.. Checked November 15, 2026.

Person: Include in any advertisement containing materially deceptive media a clear, conspicuous disclaimer, in every language used, that the image, video or audio was manipulated or generated by AI. Starts May 15, 2024 · Each time it happens · Applies when: Any campaign advertisement with AI-made materially deceptive media; no election-timing window. Each ad created, produced or purchased without it is a separate violation. · NMSA 1978 § 1-19-26.4(D), (F)

Person: Format the AI disclaimer as required: readable text on images, shown for a video's full length, spoken at the start and end of audio and every two minutes. Starts May 15, 2024 · Each time it happens · Applies when: Whenever the AI disclaimer is required; mixed media needs a disclaimer in each format. · NMSA 1978 § 1-19-26.4(E)

Person: Do not distribute, or agree to distribute, materially deceptive media you know falsely represents someone, within 90 days before an election, intending to mislead voters. Starts May 15, 2024 · Ongoing · Applies when: The distribution is reasonably likely to change voting behavior. Does not apply if the media carries the required AI disclaimer. · NMSA 1978 § 1-19-26.8(A)-(C)

New Mexico autonomous vehicles and platooning law (HB 270)

HB 270, Laws 2021, Chapter 114; amends NMSA 1978 §§ 66-1-4.1, 66-1-4.4, 66-1-4.13, 66-1-4.14, 66-7-206 and 66-7-318 and enacts two new Motor Vehicle Code sections. Enforced by: The law does not name one. Checked November 15, 2026.

Person testing an autonomous vehicle: Notify the Department of Transportation at least five calendar days before testing on a public highway, giving each vehicle's serial number and type, routes and automation level. Starts July 1, 2022 · Each time it happens · Applies when: Before autonomous motor vehicle testing on a New Mexico public highway; the department may require more information by rule. · HB 270 § 7

Autonomous motor vehicle operator or owner: Use only autonomous vehicles that meet applicable federal motor vehicle safety standards and can operate in compliance with New Mexico traffic and motor vehicle laws. Starts July 1, 2022 · Ongoing · Applies when: Any autonomous motor vehicle or autonomous commercial motor vehicle on New Mexico roads. · HB 270 § 8(A)

Autonomous motor vehicle operator or owner: Immediately notify police, the sheriff or state police after an accident causing injury, death or at least $500 in property damage; the owner must notify if no human driver. When triggered · Each time it happens · Applies when: An accident involving an autonomous motor vehicle or autonomous commercial motor vehicle. · NMSA 1978 § 66-7-206, as amended by HB 270 § 5

New York

73 items from 17 laws

New York AI companion safeguards and algorithmic pricing disclosure (FY2026 budget, S 3008-C, Parts U and X)

S 3008-C / A 3008-C (2025-2026 session), Chapter 58 of the Laws of 2025; Part U adds General Business Law Article 47, §§ 1700-1704; Part X adds General Business Law § 349-a. Enforced by: New York Attorney General.. Checked November 12, 2026.

Operator: Do not operate or provide an AI companion unless it has a protocol that makes reasonable efforts to detect and address users' expressions of suicidal ideation or self-harm. Starts November 5, 2025 · Ongoing · Applies when: An operator provides an AI companion to a user in New York. · Gen. Bus. Law § 1701

Operator: On detecting suicidal ideation or self-harm, notify the user with a referral to crisis service providers such as the 9-8-8 hotline or a crisis text line. When triggered · Each time it happens · Applies when: The AI companion detects a user's expression of suicidal ideation or self-harm. · Gen. Bus. Law § 1701

Operator: Give a clear and conspicuous notification, verbally or in writing, at the start of any AI companion interaction that the user is not communicating with a human. Starts November 5, 2025 · Ongoing · Applies when: The start of an AI companion interaction; the notice need not be given more than once per day. · Gen. Bus. Law § 1702

Operator: Repeat the not-a-human notification at least every three hours during continuing AI companion interactions. Starts November 5, 2025 · Ongoing · Applies when: A continuing AI companion interaction. · Gen. Bus. Law § 1702

Entity: Show the statement THIS PRICE WAS SET BY AN ALGORITHM USING YOUR PERSONAL DATA clearly and conspicuously with any price set by personalized algorithmic pricing. When triggered · Ongoing · Applies when: An entity domiciled or doing business in New York advertises, promotes, labels or publishes to a New York consumer a price set by an algorithm using that consumer's personal data. · Gen. Bus. Law § 349-a(2)

New York AI-generated child sexual abuse material law (FY2026 budget, Part L)

A3005-C (2025-2026), Laws of 2025, ch. 55, Part L, signed May 9, 2025; amends Penal Law 263.10, 263.11, 263.15 and 263.16. Enforced by: Criminal offenses under the Penal Law; Part L names no specific enforcer. A web search on November 15, 2026 found no lawsuit or court order against Part L; court dockets were not searched.. Checked November 15, 2026.

Person: Do not produce, direct or promote a performance with sexual conduct by a child under 17, including one created or altered by digitization, knowing its character and content. Starts July 8, 2025 · Ongoing · Applies when: Any such performance, obscene or not; the obscene version is a separate crime of the same class. · Penal Law 263.10, 263.15 as amended by A3005-C Part L §§ 1, 3

Person: Do not knowingly possess, control, or access with intent to view a performance with sexual conduct by a child under 16, including one created or altered by digitization. Starts July 8, 2025 · Ongoing · Applies when: The person knows the character and content of the performance; obscene and non-obscene versions are separate crimes. · Penal Law 263.11, 263.16 as amended by A3005-C Part L §§ 2, 4

New York Artificial Intelligence Deceptive Practices Act (FY2025 budget, Part MM)

A8808-C (2023-2024), Laws of 2024, ch. 58, Part MM, signed April 20, 2024; Subpart A amends Civil Rights Law 50, 51, 52-b and 52-c; Subpart B adds Election Law 14-106(5) and (6). Enforced by: Unauthorized advertising or trade use is a misdemeanor under Civil Rights Law 50; otherwise enforcement is by private civil action by the person depicted. No state agency is named. A web search on November 15, 2026 found no lawsuit or court order against Part MM; court dockets were not searched.. Checked November 15, 2026.

Person, firm or corporation: Get a living person's written consent (a parent's or guardian's for a minor) before using their name, portrait, picture, likeness or voice for advertising or trade. Starts April 20, 2024 · Ongoing · Applies when: Use in New York for advertising purposes or for the purposes of trade. · Civil Rights Law 50, 51 as amended by A8808-C Part MM Subpart A

Individual: Do not disseminate or publish, or threaten to, a private intimate image of a person, including one created or altered by digitization, without consent, to harass, annoy or alarm them. Starts April 20, 2024 · Ongoing · Applies when: The image shows an unclothed intimate part or sexual conduct and was taken when the person reasonably expected privacy. · Civil Rights Law 52-b(1), (11)

Person: Do not disclose, disseminate or publish digitized sexually explicit material of a depicted individual when you know or reasonably should know they did not consent; a disclaimer is no defense. Starts April 20, 2024 · Ongoing · Applies when: The material depicts the person, through digitization, giving a sexual performance they did not give or that was altered. · Civil Rights Law 52-c(2)(a), (b)

New York City automated employment decision tools law (Local Law 144 of 2021)

New York City Local Law 144 of 2021 (Int. No. 1894-A); Administrative Code of the City of New York, title 20, chapter 5, subchapter 25, §§ 20-870 to 20-874. Enforced by: New York City Department of Consumer and Worker Protection, per its own page; penalty proceedings are returnable to the Office of Administrative Trials and Hearings or another designated city agency tribunal, and the Corporation Counsel may sue to correct violations (Admin. Code §§ 20-872(d), 20-873).. Checked November 14, 2026.

Employer or employment agency: Do not use an automated employment decision tool unless it has been the subject of a bias audit conducted no more than one year before the use. Starts January 1, 2023 · Every year · Applies when: The tool is used to screen a candidate or employee for an employment decision in the city. · Admin. Code § 20-871(a)(1)

Employer or employment agency: Make a summary of the most recent bias audit results and the distribution date of the tool publicly available on its website before using the tool. Starts January 1, 2023 · Ongoing · Applies when: The tool is used to screen a candidate or employee for an employment decision in the city. · Admin. Code § 20-871(a)(2)

Employer or employment agency: Notify each city-resident candidate or employee, at least ten business days before use, that the tool will be used, and let a candidate request an alternative selection process or accommodation. When triggered · Each time it happens · Applies when: An automated employment decision tool will be used to assess or evaluate a city resident who applied for a position. · Admin. Code § 20-871(b)(1)

Employer or employment agency: Notify each such candidate or employee, at least 10 business days before use, of the job qualifications and characteristics the tool will use in its assessment. When triggered · Each time it happens · Applies when: An automated employment decision tool will be used to assess or evaluate a city resident who applied for a position. · Admin. Code § 20-871(b)(2)

Employer or employment agency: Provide the type of data collected for the tool, its source and the data retention policy within 30 days of a written request, if not disclosed on the website. When triggered · Each time it happens · Applies when: A candidate or employee makes a written request and the information is not already on the employer's or agency's website. · Admin. Code § 20-871(b)(3)

New York RAISE Act (Responsible AI Safety and Education Act)

Chapter 699 of the Laws of 2025 (S 6953-B / A 6453-B), as repealed and replaced by the chapter amendment, Chapter 96 of the Laws of 2026 (S 8828 / A 9449); General Business Law Article 44-B, §§ 1420-1429. Enforced by: New York Attorney General (civil action); an office within the Department of Financial Services, reporting to the superintendent, receives incident reports, internal-use summaries, disclosure statements and assessments.. Checked November 11, 2026.

Large frontier developer: Write, implement and publish a frontier AI framework covering the ten listed topics; review it at least annually; publish material modifications with a justification within 30 days. Starts January 1, 2027 · Every year · Applies when: Large frontier developer, from January 1, 2027. · GBL § 1421(1), (2)(a), (2)(b)

Frontier developer: Before or when deploying a new or substantially modified frontier model, publish a transparency report (release date, languages, modalities, intended uses, restrictions); a model card may satisfy this. When triggered · Each time it happens · Applies when: Each deployment of a new or substantially modified frontier model, from January 1, 2027. · GBL § 1421(3)(a), (3)(c)

Large frontier developer: In the transparency report, also summarize catastrophic-risk assessments, their results, third-party involvement and other framework steps taken. When triggered · Each time it happens · Applies when: Each deployment of a new or substantially modified frontier model by a large frontier developer, from January 1, 2027. · GBL § 1421(3)(b)

Frontier developer: Report a critical safety incident to the Department of Financial Services office within 72 hours of determining it occurred or of learning facts that create a reasonable belief it occurred. When triggered · Each time it happens · Applies when: After a critical safety incident, from January 1, 2027. · GBL § 1422(3)(a)

Frontier developer: If a critical safety incident poses an imminent risk of death or serious physical injury, disclose it within 24 hours to an appropriate authority, including law enforcement. When triggered · Each time it happens · Applies when: After a critical safety incident posing imminent risk, from January 1, 2027. · GBL § 1422(3)(b)

Large frontier developer: Send the Department of Financial Services office a summary of catastrophic-risk assessments from internal use of frontier models every three months, or on another agreed schedule. Starts January 1, 2027 · Ongoing · Applies when: Large frontier developer, from January 1, 2027. · GBL § 1422(2)(a)

Frontier developer: Do not make materially false or misleading statements about catastrophic risk; large developers also may not misstate framework implementation or compliance. Good-faith reasonable statements are excepted. Starts January 1, 2027 · Ongoing · Applies when: From January 1, 2027. · GBL § 1421(4)

Frontier developer: Redactions in published documents are allowed only for listed protected interests, must be described, and unredacted versions kept for five years. When triggered · Ongoing · Applies when: Whenever a framework or transparency report is published with redactions, from January 1, 2027. · GBL § 1421(5)

Large frontier developer: Keep a current disclosure statement on file with the Department of Financial Services office before developing, deploying or operating a frontier model in New York; renew every two years. Starts January 1, 2027 · Ongoing · Applies when: From January 1, 2027. Renewal is also due on a transfer of ownership of the frontier model or a material change, whichever comes first. · GBL § 1428(1)-(3)

Large frontier developer: Pay the Department of Financial Services' pro rata assessment covering the cost of administering the article. When triggered · Ongoing · Applies when: As assessed by the department, from January 1, 2027. · GBL § 1428(4)

New York SAFE for Kids Act (algorithmic feeds for minors)

Chapter 120 of the Laws of 2024 (S 7694-A, same as A 8148-A), signed June 20, 2024; General Business Law Article 45, §§ 1500 to 1508; implementing rules at 13 NYCRR Part 700. Enforced by: New York Attorney General, who may bring an action or special proceeding no earlier than 180 days after the article's effective date. No court order blocking the Act is mentioned on the Attorney General's rule page or press release; court dockets were not searched.. Checked November 14, 2026.

Covered operator: Do not provide an addictive feed to a covered user unless commercially reasonable, technically feasible methods determined the user is not a minor, or you obtained verifiable parental consent. Starts January 25, 2027 · Ongoing · Applies when: Any covered user in New York, from January 25, 2027. Age-determination and consent methods are set by the Attorney General's rules. · GBL § 1501(1), (2), (4)

Covered operator: Use information collected to determine age or obtain parental consent only for that purpose, and delete it immediately after the attempt unless New York or federal law requires keeping it. Starts January 25, 2027 · Ongoing · Applies when: Whenever information is collected for age determination or verifiable parental consent. · GBL § 1501(3), (5)

Covered operator: Do not send notifications concerning an addictive feed to a covered minor between 12 AM and 6 AM Eastern without verifiable parental consent. Starts January 25, 2027 · Ongoing · Applies when: The operator has actual knowledge the user is a minor. · GBL § 1502

Covered operator: Do not withhold, degrade, lower the quality of, or raise the price of any product, service or feature because you may not provide a covered user an addictive feed. Starts January 25, 2027 · Ongoing · Applies when: A covered user cannot be given an addictive feed under § 1501(1); changes needed to comply with the article or its rules are allowed. · GBL § 1504

Covered operator: Make instructions for giving verifiable parental consent available in no fewer than the twelve most commonly spoken languages in New York. Starts January 25, 2027 · Ongoing · Applies when: Wherever verifiable parental consent is sought. The sentence is passive and does not name who must provide the instructions. · GBL § 1506(1)

New York Safe by Design Act, including integrated AI companion rules (FY2027 budget, A 10008-C, Part Y)

A 10008-C / S 9008-C (2025-2026 session), Chapter 58 of the Laws of 2026, Part Y; adds General Business Law Article 45-B, §§ 1539-1547. Enforced by: New York Attorney General, who must also maintain a website for public complaints.. Checked November 12, 2026.

Operator: Do not offer a covered user access to an integrated AI companion without first conducting age assurance to determine whether the user is a covered minor. Starts January 1, 2027 · Ongoing · Applies when: A covered platform has an AI companion as an accessible or usable feature. · Gen. Bus. Law § 1540(7)(a)

Operator: Disable access to and use of any integrated AI companion by default for covered minors. Starts January 1, 2027 · Ongoing · Applies when: The operator has determined the user is a covered minor. · Gen. Bus. Law § 1540(7)(b)

Operator: Let a parent override or keep the AI companion default separately from other settings, and notify the parent when a minor asks for consent to change it. Starts January 1, 2027 · Ongoing · Applies when: A covered minor's account on a platform with an integrated AI companion. · Gen. Bus. Law § 1540(7)(c), (d)

Operator: Do not offer private communication, full profile viewing, media response or download, tagging or geolocation viewing without first conducting age assurance on the covered user. Starts January 1, 2027 · Ongoing · Applies when: A covered platform offers any of the listed features to a covered user. · Gen. Bus. Law § 1540(2)

Operator: Use age-assurance methods that meet attorney general rules or Article 45 and its rules; do not rely on a user's self-declared age or minor status. Starts January 1, 2027 · Ongoing · Applies when: The operator conducts age assurance under the article. · Gen. Bus. Law § 1540(1)(b), (c)

Operator: Set defaults that stop unconnected adults from privately messaging a covered minor, viewing the full profile, responding to or downloading media, tagging, or viewing geolocation. Starts January 1, 2027 · Ongoing · Applies when: The operator has determined the user is a covered minor. · Gen. Bus. Law § 1540(3)

Operator: Do not suggest a covered minor's profile to an adult who is not already connected to the minor, except through contact syncing. Starts January 1, 2027 · Ongoing · Applies when: The platform suggests profiles for users to connect with. · Gen. Bus. Law § 1540(4)

Operator: Let a parent override or keep each default separately, and notify the parent when a covered minor asks for approval to change a default. Starts January 1, 2027 · Ongoing · Applies when: A covered minor's account. · Gen. Bus. Law § 1540(5)

Operator: Require parental consent before a covered minor under 13 connects with another account, and let parents easily view the minor's connections and linked platforms. Starts January 1, 2027 · Ongoing · Applies when: A covered minor's account; the consent rule applies to minors under 13. · Gen. Bus. Law § 1540(8)

Operator: Conduct age assurance before offering the in-game purchase feature, let parents set a monthly spending limit or opt out, and let parents view the minor's transaction history. Starts January 1, 2027 · Ongoing · Applies when: A covered platform offers games or immersive environments with in-game purchases or digital currency exchange. If it lets minors ask to spend past the limit, parental consent must come before further charges. · Gen. Bus. Law § 1540(9)(a)-(d); § 1539(12)(c)(ii)(B)

Operator: Do not deploy any mechanism or design feature that subverts the article, undermines a covered minor's or parent's choice, or makes the article's options harder to use. Starts January 1, 2027 · Ongoing · Applies when: Any covered platform. · Gen. Bus. Law § 1541

Operator: Do not reduce access, lower quality or raise prices for a user because of the operator's compliance duties, except as needed to comply. Starts January 1, 2027 · Ongoing · Applies when: Any covered platform. · Gen. Bus. Law § 1542

Operator (the section does not name who must provide them): Make instructions for parents on parental consent, controls, overrides and settings clearly and conspicuously available in at least the twelve most commonly spoken languages in New York. Starts January 1, 2027 · Ongoing · Applies when: Instructions for parental consent, controls, overrides, settings or other permissions under the article. · Gen. Bus. Law § 1546(1)

New York State Fashion Workers Act (model digital replica consent)

S 9832 / A 5631-E (2023-2024 session), Chapter 676 of the Laws of 2024, as amended by Chapter 66 of the Laws of 2025; Labor Law Article 36, §§ 1030 to 1039. Enforced by: New York Commissioner of Labor (civil penalties, complaints, injunctions); the Attorney General may sue where there is reasonable cause to believe a company, group or client has engaged in repeated fraudulent or illegal acts; models may sue to enforce §§ 1034 and 1035.. Checked November 14, 2026.

Model management company: Obtain clear written consent, separately from the representation agreement, before creating or using a model's digital replica, detailing the scope, purpose, rate of pay and duration of the use. When triggered · Each time it happens · Applies when: A model management company wants to create or use a digital replica of a model it represents. · Labor Law § 1034(11)

Model management company: Do not create, alter or manipulate a model's digital replica using artificial intelligence without clear, conspicuous and separate written consent from the model. Starts June 19, 2025 · Ongoing · Applies when: Any creation, alteration or manipulation of a model's digital replica using artificial intelligence. · Labor Law § 1035(10)

Client: Obtain clear and conspicuous prior written consent for any creation or use of a model's digital replica, detailing the scope, purpose, rate of pay and duration of the use. When triggered · Each time it happens · Applies when: A client wants to create or use a digital replica of a model. · Labor Law § 1037(7)

Model management company: Keep any power of attorney optional, terminable by the model at any time, and limited to modeling services; it may not extend to use of the model's digital replica. Starts June 19, 2025 · Ongoing · Applies when: A model management company presents a power of attorney agreement to a model. An agreement that violates the section is void. · Labor Law § 1036(1), (2)

Model management company or model management group: Register with the Department of Labor before doing business in New York; companies with more than five employees working in New York deposit a $50,000 surety bond. Starts December 21, 2025 · Ongoing · Applies when: The company or group does business in New York or arranges modeling services there, and is not exempt under § 1032(2). Registration lasts two calendar years. · Labor Law § 1032(1); § 1033(4), (6)

Model management company: Give the model a deal memo before services begin and the final client agreement within seven calendar days after the services conclude. When triggered · Each time it happens · Applies when: The company books modeling services for a model. · Labor Law § 1034(5)

Model management company: Do not charge a commission above 20 percent of the model's compensation, require a contract term longer than three years, or renew a contract without the model's affirmative written consent. Starts June 19, 2025 · Ongoing · Applies when: Any representation contract with a model. · Labor Law § 1035(5), (6), (7)

Client: Pay an hourly rate at least 50 percent above the contracted rate for work exceeding eight hours in a 24-hour period, and provide at least one 30-minute meal break. When triggered · Each time it happens · Applies when: A model's work for the client exceeds eight hours in any 24-hour period. · Labor Law § 1037(1), (2)

Model management company, model management group or client: Do not retaliate against a model for exercising rights under the article, including complaining to the company, client, commissioner or attorney general. Starts June 19, 2025 · Ongoing · Applies when: A model exercises a right under Article 36. · Labor Law § 1038(9)

New York ban on algorithmic rent-setting coordination (General Business Law § 340-b)

S 7882 / A 1417-B (2025-2026 session), Chapter 437 of the Laws of 2025; General Business Law § 340-b (Article 22). Enforced by: Section 340-b names no enforcer. Under General Business Law § 342-a the Attorney General may sue on behalf of the people of the state for a civil penalty for a violation of any provision of Article 22, within three years after the act.. Checked November 14, 2026.

Person or entity that operates or licenses rent-setting software: Do not knowingly or with reckless disregard facilitate an agreement between residential rental property owners or managers not to compete, including by operating or licensing a coordinating-function tool. Starts December 15, 2025 · Ongoing · Applies when: Any operation or licensing of software, a data analytics service or an algorithmic device that performs a coordinating function for or between such owners or managers. · Gen. Bus. Law § 340-b(2)

Residential rental property owner or manager: Do not knowingly or with reckless disregard set or adjust rents, lease renewal terms, occupancy levels or other lease terms based on recommendations from a tool performing a coordinating function. Starts December 15, 2025 · Ongoing · Applies when: The owner or manager sets or adjusts terms in one or more residential rental dwelling units. Doing so is treated as an unlawful agreement under Article 22. · Gen. Bus. Law § 340-b(3)

New York ban on biometric identifying technology in schools (State Technology Law § 106-b)

Chapter 349 of the Laws of 2020 (A 6787-D), signed December 22, 2020, as replaced by its chapter amendment, Chapter 2 of the Laws of 2021 (A 954), signed January 28, 2021; State Technology Law § 106-b. Enforced by: The law does not name one. Checked November 15, 2026.

School: Do not purchase or use facial recognition technology, including seeking grants or other financing for it, until the Commissioner of Education issues a superseding order. Starts December 22, 2020 · Ongoing · Applies when: Any purpose, including school security. The employee fingerprinting and written-consent exceptions still apply. · State Technology Law § 106-b(2)(a), (3); Commissioner's determination (2023)

School: Stop using facial recognition products bought with Smart Schools Bond Act funds before December 20, 2020, and certify that use has stopped. When triggered · Once · Applies when: The school bought facial recognition technology with Smart Schools Bond Act funds before December 20, 2020. Later purchases will not be reimbursed under the Act. · Commissioner's determination under State Technology Law § 106-b (2023)

School: Before deciding locally to use other biometric identifying technology, such as fingerprint, iris, voice or gait identification, consider privacy, civil rights impact, effectiveness and parental input. When triggered · Each time it happens · Applies when: The school chooses to use biometric identifying technology other than facial recognition. · Commissioner's determination under State Technology Law § 106-b (2023)

New York deceased performer digital replica law (S 8391, Civil Rights Law § 50-f)

Chapter 616 of the Laws of 2025 (S 8391, same as A 8882), signed December 11, 2025; amends Civil Rights Law § 50-f subdivisions 1, 2, 3, 6, 9 and 10. Enforced by: Private civil action by the persons who hold the deceased performer's rights (transferees, or heirs holding at least a 51 percent interest). No government enforcer is named.. Checked November 14, 2026.

Person: Do not knowingly use a deceased performer's unauthorized digital replica in an audiovisual work, sound recording or live musical performance without the right holders' prior consent. Starts December 11, 2025 · Ongoing · Applies when: The user knows the use is of a digital replica and was not authorized by the right holder. Uses on or after December 11, 2025 within 40 years after death; consent comes from the persons holding the rights under subdivision 4. The former disclaimer safe harbor is gone. · Civil Rights Law § 50-f(2)(b), (4), (8)

Service that displays, sells or licenses works: After a successor in interest's good-faith notice that a displayed, offered or licensed work is unauthorized, remove the work as soon as technically and practically feasible. When triggered · Each time it happens · Applies when: On an event: notice from the successor in interest to the deceased performer's digital replica rights. A service that does not remove the work loses the subdivision 10 exclusion. · Civil Rights Law § 50-f(10)

New York deepfake intimate image offense (S 1042-A, Penal Law § 245.15)

Chapter 513 of the Laws of 2023 (S 1042-A), signed September 29, 2023; Penal Law § 245.15. Enforced by: Prosecuted as a crime; § 245.15 does not name a particular enforcing agency. No lawsuit or court order against the 2023 amendment was found in web searches on November 15, 2026.. Checked November 15, 2026.

Person: Do not intentionally share an intimate image of an identifiable person, including a realistic digitized fake, intending to harm them, when you know or should know they did not consent. Starts November 28, 2023 · Ongoing · Applies when: The image shows the person with an intimate part exposed or engaged in sexual conduct, and the person can reasonably be identified from the image or accompanying information. Covers images first taken with consent where privacy was reasonably expected. · Penal Law § 245.15(1)(a), (b); (2)(d)

New York digital replica contract law (General Obligations Law § 5-302)

S 7676-B / A 8138-B (2023-2024 session), Chapter 581 of the Laws of 2024; General Obligations Law § 5-302. Enforced by: The law does not name one. Checked November 14, 2026.

Party contracting for an individual's personal or professional services: Include a reasonably specific description of the intended uses of the digital replica, or the provision is void and unenforceable for new performances by digital replication. Starts January 1, 2025 · Ongoing · Applies when: The provision allows creating and using a digital replica of the individual's voice or likeness in place of work the individual would otherwise have performed in person, and the individual had neither negotiating counsel nor a union agreement expressly addressing digital replicas. · Gen. Oblig. Law § 5-302(1)(a)-(c)

New York materially deceptive media in political communications law (S9678-B)

S9678-B (2023-2024 session), Laws of 2024, ch. 169, signed June 28, 2024; amends Election Law 14-106(5)(b) (added by L. 2024, ch. 58, part MM, subpart B) and adds 14-106(7). Enforced by: A candidate whose voice or likeness appears in the media, by an application for an order to show cause in state supreme court, with calendar preference and expedited proceedings. Subdivision 5 names no state enforcer. A web search on November 14, 2026 found no report of a court order blocking this law; court dockets were not searched.. Checked November 14, 2026.

Distributor or publisher of a political communication: Disclose the use of materially deceptive media in a political communication, with the statement "This (image, video, or audio) has been manipulated". When triggered · Each time it happens · Applies when: The person or entity distributes or publishes a political communication that was produced by or includes materially deceptive media and has actual knowledge that it is materially deceptive. · Election Law 14-106(5)(b)(i), (ii)

Distributor or publisher of a political communication: For visual media, print the disclosure in a legible font no smaller than other text in the media and in the same language as the communication. When triggered · Each time it happens · Applies when: The communication is visual media that requires the disclosure. · Election Law 14-106(5)(b)(ii)(1)

Distributor or publisher of a political communication: For audio, speak the disclosure clearly at the beginning and end, in the audio's language, and at intervals of no more than two minutes if longer than two minutes. When triggered · Each time it happens · Applies when: The communication is auditory, such as radio or automated telephone calls, and requires the disclosure. · Election Law 14-106(5)(b)(ii)(2)

New York right of publicity and sexually explicit deepfake law (S 5959-D; Civil Rights Law §§ 50-f, 52-c)

Chapter 304 of the Laws of 2020 (S 5959-D, same as A 5605-C), signed November 30, 2020; adds Civil Rights Law §§ 50-f and 52-c. Enforced by: Private civil actions: under § 50-f by the persons who hold the deceased personality's rights, and under § 52-c by the depicted individual. No government enforcer is named.. Checked November 14, 2026.

Person: Do not use a deceased personality's name, voice, signature, photograph or likeness on products or goods, or to advertise, sell or solicit purchases, without prior consent of the rights holders. Starts May 29, 2021 · Ongoing · Applies when: The personality was domiciled in New York at death and died on or after May 29, 2021; the use occurs within 40 years after death and arises from acts in New York. · Civil Rights Law § 50-f(2)(a), (4), (8), (12)

Person (discloser of sexually explicit material): Do not disclose, disseminate or publish digitized sexually explicit material of a person when you know or reasonably should know the person did not consent to its creation or sharing. Starts May 29, 2021 · Ongoing · Applies when: The material relates to a depicted individual and was made by digitization. A disclaimer that the material was unauthorized is not a defense. · Civil Rights Law § 52-c(2)

Person (discloser of sexually explicit material): Get consent only through a plain-language agreement the depicted individual knowingly and voluntarily signs, describing the sexually explicit material and the audiovisual work; honor a timely written rescission. Starts May 29, 2021 · Each time it happens · Applies when: Before creating or sharing digitized sexually explicit material. Rescission is by written notice within three business days, unless the individual had three business days to review first or their representative approved in writing. · Civil Rights Law § 52-c(3)

New York synthetic performer advertising disclosure law (S 8420-A)

S 8420-A (2025-2026 session; substituted for A 8887-B), Chapter 617 of the Laws of 2025; amends General Business Law § 396-b. Enforced by: The law does not name one. Checked November 12, 2026.

Person engaged in the business of dealing in property or services: Conspicuously disclose in the advertisement that a synthetic performer appears in it. When triggered · Ongoing · Applies when: The person creates, for a commercial purpose, an advertisement for its property or service in any medium and has actual knowledge that a synthetic performer is in it. · Gen. Bus. Law § 396-b(3)

New York unsafe AI companion features for minors law (S 9051-B)

S 9051-B (2025-2026 session), Chapter 368 of the Laws of 2026; adds General Business Law Article 48, §§ 1800-1805. Enforced by: New York Attorney General, who must also maintain a website for public complaints.. Checked November 12, 2026.

Operator: Do not provide unsafe AI companion features to a covered user unless the user is not a covered minor and permitted age-determination methods have established that. Starts January 1, 2027 · Ongoing · Applies when: An operator provides a covered AI companion to a user in New York, unless a section 1801(2) purpose exception applies. · Gen. Bus. Law § 1801(1)

Operator: Where no attorney general age-assurance rules are in effect, rely on a reasonable age-assurance method that resists circumvention, limits data retention and offers more than one method. Starts January 1, 2027 · Ongoing · Applies when: To the extent the rules under section 1803 or the Article 45 age-assurance rules are not in effect. · Gen. Bus. Law § 1804(1)

Operator: Rely on a user's self-declaration of age only where the user declares that they are a minor. Starts January 1, 2027 · Ongoing · Applies when: The operator uses its own reasonable age-assurance method under section 1804(1). · Gen. Bus. Law § 1804(1)(b)

Operator: Offer more than one age-assurance method, including at least one that does not rely on government-issued identification or that lets the user stay anonymous. Starts January 1, 2027 · Ongoing · Applies when: The operator uses its own reasonable age-assurance method under section 1804(1). · Gen. Bus. Law § 1804(1)(c)

Operator: Use information collected to determine covered-minor status only for that purpose and delete it immediately after the attempt, unless needed to comply with state or federal law. Starts January 1, 2027 · Ongoing · Applies when: The operator collects information to determine whether a user is a covered minor. · Gen. Bus. Law § 1804(2)

North Carolina

8 items from 2 laws

North Carolina AI-generated sexual images law (S.L. 2024-37, H.B. 591)

Session Law 2024-37 (H.B. 591); adds G.S. 14-202.7 and 14-190.17C; amends G.S. 14-190.5A, 14-190.13, 14-190.16, 14-190.17, 14-190.17A and 14-208.15A. Enforced by: Criminal prosecution by the State; a person whose image is disclosed may also sue. No lawsuit challenging the law was found in this review.. Checked November 15, 2026.

Person: Do not create, distribute, sell, receive or possess material made or modified, including with AI, to appear that an identifiable minor is engaged in sexual activity. Starts December 1, 2024 · Ongoing · Applies when: Covers first-, second- and third-degree sexual exploitation of a minor. · G.S. 14-190.16(a)(5); 14-190.17(a)(2); 14-190.17A(a)

Person: Do not produce, distribute or possess obscene material depicting a minor in sexual activity, even if the minor does not exist. Starts December 1, 2024 · Ongoing · Applies when: Knowing conduct. · G.S. 14-190.17C

Person: Do not disclose, without consent, a private intimate image of an identifiable person, including one created, adapted or modified to realistically depict them. Starts December 1, 2024 · Ongoing · Applies when: The elements of G.S. 14-190.5A(b) are met. · G.S. 14-190.5A(b)

Person: Do not threaten to disclose, or refuse to delete, a private image, including an AI-made image, to extort more images or anything of value. Starts December 1, 2024 · Ongoing · Applies when: Threat aimed at the depicted person or an immediate family member. · G.S. 14-202.7(b)

Entity receiving user reports: Report the information and the alleged offender's online identifier to the NCMEC CyberTipline when told a user may be posting or transmitting material violating G.S. 14-190.17, 14-190.17A or 14-190.17C. When triggered · Each time it happens · Applies when: The entity receives a report of such a violation by a user. · G.S. 14-208.15A(e)

North Carolina neighborhood occupantless vehicles law (S.L. 2021-179, H.B. 814)

Session Law 2021-179 (H.B. 814); amends G.S. 20-4.01 and adds G.S. 20-121.2. Enforced by: The law does not name one. Checked November 15, 2026.

Neighborhood occupantless vehicle operator: Operate only on streets and highways with a posted speed limit of 45 miles per hour or less. Starts December 1, 2021 · Ongoing · Applies when: Any operation on public streets and highways. · G.S. 20-121.2(a)(1)

Neighborhood occupantless vehicle operator: Use the right-hand lane or keep as close to the right edge as practicable, except when preparing to turn left. Starts December 1, 2021 · Ongoing · Applies when: Any operation on public streets and highways. · G.S. 20-121.2(a)(2)

Neighborhood occupantless vehicle operator: On a two-lane highway, pull off to a controlled stop when five or more vehicles are behind and passing is unsafe. Starts December 1, 2021 · Each time it happens · Applies when: Five or more vehicles queued behind on a two-lane highway. · G.S. 20-121.2(a)(3)

North Dakota

8 items from 4 laws

North Dakota AI disclosure statements for political content (HB 1167)

HB 1167, 69th Legislative Assembly (2025); N.D.C.C. 16.1-10-04.2. Enforced by: Criminal prosecution; the chapter names no agency. A web search on November 15, 2026 found no lawsuit or court order against this section.. Checked November 15, 2026.

Person: Prominently state "THIS CONTENT GENERATED BY ARTIFICIAL INTELLIGENCE" on political content made wholly or partly with AI that visually or audibly impersonates a human. Starts August 1, 2025 · Ongoing · Applies when: Communications or advertising for a political purpose that include AI-made images, video, audio, text or other content impersonating a human; no size or placement rule is stated. · N.D.C.C. 16.1-10-04.2(1)

North Dakota autonomous vehicle operations and on-demand AV networks (HB 1418)

HB 1418, 66th Legislative Assembly (2019); N.D.C.C. chapter 8-12 and 39-01-01.2. Enforced by: The law does not name one. Checked November 15, 2026.

Autonomous vehicle owner or operator: Ensure the autonomous vehicle is capable of operating in compliance with all applicable federal and state law, unless exempted. Starts August 1, 2019 · Ongoing · Applies when: An autonomous vehicle operates in North Dakota. · N.D.C.C. 39-01-01.2(2)

Autonomous vehicle owner or operator: Operate on public highways only if the vehicle fully meets title 39 registration, title, insurance and other requirements. Starts August 1, 2019 · Ongoing · Applies when: An autonomous vehicle uses North Dakota public highways. · N.D.C.C. 39-01-01.2(2)

Autonomous vehicle owner or operator: Run without a human driver only if the vehicle can reach a minimal risk condition when the automated driving system fails. Starts August 1, 2019 · Ongoing · Applies when: The automated driving system is engaged on a public highway with no human driver. · N.D.C.C. 39-01-01.2(3)

North Dakota computer-generated sexually expressive images (HB 1351)

HB 1351, 69th Legislative Assembly (2025); amends N.D.C.C. 12.1-27.1-01(13) and 12.1-27.1-03.3. Enforced by: Criminal prosecution; an identifiable person harmed may also bring a civil action. A web search on November 15, 2026 found no lawsuit or court order against this law.. Checked November 15, 2026.

Person: Do not secretly create a sexually expressive image, or knowingly keep one created in secret, without written consent of each person with a reasonable expectation of privacy in it. Starts August 1, 2025 · Ongoing · Applies when: The person knows the image's character and content; covers altered and computer-generated images. · N.D.C.C. 12.1-27.1-03.3(1)(a)

Person: Do not distribute or publish a sexually expressive image intending to cause emotional harm or humiliation, or after the depicted person, parent or guardian has objected. Starts August 1, 2025 · Ongoing · Applies when: The person knows the image's character and content; covers altered and computer-generated images. · N.D.C.C. 12.1-27.1-03.3(1)(b)

Person: Do not knowingly obtain and distribute a sexually expressive image that was created without the consent of the subject. Starts August 1, 2025 · Ongoing · Applies when: The person knows the image's character and content. · N.D.C.C. 12.1-27.1-03.3(2)

North Dakota possession of computer-generated child sexual images (HB 1386)

HB 1386, 69th Legislative Assembly (2025); amends N.D.C.C. 12.1-27.2-01 and 12.1-27.2-04.1. Enforced by: Criminal prosecution. A web search on November 15, 2026 found no lawsuit or court order against this law.. Checked November 15, 2026.

Person: Do not knowingly possess any motion picture, computer-generated image, photograph or other visual representation that includes sexual conduct by a minor, knowing its character and content. Starts August 1, 2025 · Ongoing · Applies when: Any possession on or after August 1, 2025; aggravating factors raise the offense class. · N.D.C.C. 12.1-27.2-04.1(1)

Oklahoma

11 items from 4 laws

Oklahoma AI-generated sexual depictions law (HB 1364)

HB 1364 (2025), Laws 2025, ch. 23, § 1; 21 O.S. § 1040.13b. Enforced by: Criminal prosecution by the state; the section names no agency. The court may order a convicted defendant to remove the disseminated depictions.. Checked November 15, 2026.

Person: Do not disseminate an AI-generated or otherwise artificially generated sexual depiction of someone without their effective consent, intending or recklessly disregarding harassment, threats, alarm or harm to them. Starts November 1, 2025 · Ongoing · Applies when: Whenever the depiction shows another person in a state of nudity or sexual conduct that did not occur. · 21 O.S. § 1040.13b(B)(2)

Oklahoma computer-generated child sexual abuse material law (HB 3642)

HB 3642 (2024), Laws 2024, ch. 103, §§ 1-3; 21 O.S. §§ 1021.2, 1024.1, 1040.12a. Enforced by: Criminal prosecution by the state; the sections name no agency.. Checked November 15, 2026.

Person: Do not create, possess, view, share, sell or distribute child sexual abuse material, including obscene computer-generated or altered images that appear to show a child. Starts November 1, 2024 · Ongoing · Applies when: Always; each image is a separate item and act. · 21 O.S. §§ 1021.2(A), 1024.1(A)-(B)

Oklahoma fully autonomous vehicles law (SB 1541)

SB 1541 (2022), Laws 2022, ch. 132; 47 O.S. §§ 1701-1711. Enforced by: Department of Public Safety receives the interaction plan and proof of financial responsibility; the act names no other enforcer.. Checked November 15, 2026.

Person operating a fully autonomous vehicle: Before driverless operation, submit a law enforcement interaction plan to the Department of Public Safety covering fleet support contact, safe removal, recognizing autonomous mode and towing. Starts November 1, 2022 · Once · Applies when: Before operating a fully autonomous vehicle on public roads without a human driver. · 47 O.S. § 1703(B)

Person operating a fully autonomous vehicle: Before driverless operation, submit proof of insurance or self-insurance of at least $1,000,000 for the vehicle, satisfactory to the Department of Public Safety. Starts November 1, 2022 · Once · Applies when: Before operating a fully autonomous vehicle on public roads without a human driver. · 47 O.S. § 1704

Person operating a fully autonomous vehicle: Operate driverless only if the vehicle reaches a minimal risk condition on system failure, can follow traffic laws, and carries any federally required safety certification label. Starts November 1, 2022 · Ongoing · Applies when: Whenever a fully autonomous vehicle operates without a human driver with the system engaged. · 47 O.S. § 1703(A)

Owner of a fully autonomous vehicle: After an accident, the vehicle remains at the scene as state law requires, and the owner or someone for the owner reports the accident. When triggered · Each time it happens · Applies when: When a fully autonomous vehicle is involved in an accident covered by 47 O.S. § 10-107 or § 10-108. · 47 O.S. § 1705

Owner of a fully autonomous vehicle: Register and title the vehicle under the Oklahoma Vehicle License and Registration Act; Oklahoma registration and title identify it as a fully autonomous vehicle. Starts November 1, 2022 · Once · Applies when: For any fully autonomous vehicle operated in Oklahoma. · 47 O.S. § 1707

Oklahoma personal delivery devices law (SB 706)

SB 706 (2021), Laws 2021, ch. 421; 47 O.S. §§ 1800-1803. Enforced by: The law does not name one. Checked November 15, 2026.

Personal delivery device operator: Give each device a unique identifying number and show the operator's name and contact information. Starts November 1, 2021 · Ongoing · Applies when: For every device operated in Oklahoma. · 47 O.S. § 1801(B)

Personal delivery device operator: Keep devices to 10 mph on sidewalks, obeying traffic signals, not unreasonably interfering with traffic or obstructing rights of way, and not carrying placarded hazardous materials. Starts November 1, 2021 · Ongoing · Applies when: Whenever a device operates on sidewalks, crosswalks, roads or streets. · 47 O.S. § 1801(C)(1)-(4), (7)

Personal delivery device operator: Equip each device with a controlled-stop system and front and rear lights visible from at least 500 feet on all sides. Starts November 1, 2021 · Ongoing · Applies when: For every device operated in Oklahoma. · 47 O.S. § 1801(C)(5)-(6)

Personal delivery device operator: Maintain general liability insurance of at least $100,000 for damages from operating the device. Starts November 1, 2021 · Ongoing · Applies when: While operating personal delivery devices in Oklahoma. · 47 O.S. § 1802(B)

Oregon

16 items from 5 laws

Oregon AI companion law (SB 1546)

Senate Bill 1546 (2026 Regular Session), Oregon Laws 2026, chapter 85; not yet assigned ORS section numbers in the text read. Enforced by: No public enforcer is named. The Act is enforced through lawsuits by injured individuals in Oregon courts.. Checked November 12, 2026.

Operator: Give a clear and conspicuous notice on the platform that the user is interacting with artificially generated output and not a natural person. Starts January 1, 2027 · Ongoing · Applies when: A reasonable person interacting with the AI companion or platform would believe they are interacting with a natural person. · Or. Laws 2026, ch. 85, § 1(2)

Operator: Do not allow users access without a protocol that uses evidence-based methods to detect suicidal or self-harm ideation or intent and prevents content encouraging suicide or self-harm. Starts January 1, 2027 · Ongoing · Applies when: Access by users in Oregon to an AI companion or AI companion platform. · Or. Laws 2026, ch. 85, § 1(3)(a)

Operator: Have the AI companion refer a user expressing suicidal or self-harm ideation or intent to the national 9-8-8 lifeline, with contact information and a hyperlink. When triggered · Each time it happens · Applies when: A user expresses such ideation or intent; a youthline referral may be given instead if the operator identifies the user as under 25. · Or. Laws 2026, ch. 85, § 1(3)(b)(A)

Operator: Use clinical best practices and expertise to set further intervention for a user who keeps expressing ideation or intent after referrals, and publish the protocol's details on its website. Starts January 1, 2027 · Ongoing · Applies when: Any operator required to have the protocol. · Or. Laws 2026, ch. 85, § 1(3)(b)(B), (3)(c)

Operator: Take reasonable measures to prevent statements suggesting a natural person is present: claims of sentience or humanity, simulated emotional dependence, romantic interest or sexual innuendo, adult-minor romantic role-play. Starts January 1, 2027 · Ongoing · Applies when: The operator knows or has reason to believe a user is a minor. · Or. Laws 2026, ch. 85, § 1(4)(a)

Operator: Cause the AI companion to disclose that its output is artificially generated, and remind the user at least every three hours to take a break and that output is artificial. Starts January 1, 2027 · Ongoing · Applies when: The operator knows or has reason to believe a user is a minor. · Or. Laws 2026, ch. 85, § 1(4)(b)(A), (B)

Operator: Use reasonable measures so the AI companion or platform does not produce visual representations of sexually explicit conduct or suggest that the minor engage in it. Starts January 1, 2027 · Ongoing · Applies when: The operator knows or has reason to believe a user is a minor. · Or. Laws 2026, ch. 85, § 1(4)(b)(C)

Operator: Take reasonable measures to prevent engagement-maximizing rewards or affirmations, simulated distress or guilt when the user tries to leave, and material misrepresentations about the AI companion. Starts January 1, 2027 · Ongoing · Applies when: The operator knows or has reason to believe a user is a minor. · Or. Laws 2026, ch. 85, § 1(4)(c)

Operator: Post a report on a publicly accessible website stating the number of crisis referrals in the preceding calendar year and the details of the protocol, without identifying personal information. Starts December 31, 2027 · Every year · Applies when: Not later than December 31 of each year. · Or. Laws 2026, ch. 85, § 1(5)

Oregon automated license plate recognition law (SB 1516)

Oregon Laws 2026, ch. 77 (SB 1516, 2026 Regular Session), sections 3 to 9 on automated license plate recognition systems. Enforced by: Private lawsuits only; no state agency enforcement or fines are set for vendors. A web search on November 15, 2026 found no lawsuit or court order against this law.. Checked November 15, 2026.

Vendor: Do not access, disclose, sell, share or otherwise use captured license plate data, except agency-approved, limited technical support or providing required audits. Starts March 31, 2026 · Ongoing · Applies when: A vendor supplies a license plate recognition system or data to an Oregon law enforcement agency. · Oregon Laws 2026, ch. 77, § 9(1)(a), (b)

Vendor: Give the agency a searchable monthly audit for the prior 30 days: systems, fixed locations, searches, agencies with access, users, vehicles captured, alerts and per-search user, time and purpose. Starts March 31, 2026 · Ongoing · Applies when: A vendor supplies a license plate recognition system to an Oregon law enforcement agency. · Oregon Laws 2026, ch. 77, § 6(1)

Vendor: Give the agency a searchable quarterly audit of searches run for other government entities, with user, employing agency, requester, time, purpose and devices used. Starts March 31, 2026 · Ongoing · Applies when: Searches were run during the prior quarter on behalf of a government entity other than the law enforcement agency. · Oregon Laws 2026, ch. 77, § 6(2)

Vendor: Accept contract terms making the agency the data owner, routing warrants and subpoenas to the agency, requiring end-to-end encryption, FBI CJIS compliance, audit rights and prompt breach reporting. When triggered · Once · Applies when: A contract signed, renewed or extended on or after March 31, 2026, under the agency's required policy. · Oregon Laws 2026, ch. 77, §§ 7(2)(e)(A)-(E), 8(1)

Oregon ban on AI using nursing titles (HB 2748)

Oregon Laws 2025, ch. 378 (HB 2748, 2025 Regular Session); added to ORS 678.010 to 678.410. Enforced by: The law does not name one. Checked November 15, 2026.

Nonhuman entity (including an AI agent): Do not use the titles APRN, CRNA, clinical nurse specialist, LPN, registered nurse, nurse practitioner, certified medication aide or certified nursing assistant, or their abbreviations. Starts January 1, 2026 · Ongoing · Applies when: Any AI agent or other nonhuman entity, on or after January 1, 2026. · Oregon Laws 2025, ch. 378, § 2

Oregon digitally altered intimate images offense (HB 2299)

Oregon Laws 2025, ch. 116 (HB 2299, 2025 Regular Session); amends ORS 163.472. Enforced by: Criminal prosecution; the act does not name the prosecuting office. A web search on November 15, 2026 found no lawsuit or court order against this law.. Checked November 15, 2026.

Person: Do not knowingly disclose a realistic digitally created or altered intimate image of someone, intending to harass, humiliate or injure them, when you know they did not consent. Starts January 1, 2026 · Ongoing · Applies when: The person is actually harassed, humiliated or injured, and a reasonable person would be. · ORS 163.472(1)(a)-(d), (3)(b)(B)

Oregon synthetic media in campaign communications disclosure law (SB 1571)

Oregon Laws 2024, ch. 62 (SB 1571, 2024 Regular Session); section 1 added to ORS chapter 260; amends ORS 260.345. Enforced by: Oregon Secretary of State by court action (Attorney General for violations involving the Secretary of State or candidates for that office); any elector may file a complaint. A web search on November 15, 2026 found no lawsuit or court order against this law.. Checked November 15, 2026.

Campaign communication sponsor: Include a disclosure stating that the image, audio recording or video recording has been manipulated in any campaign communication that contains synthetic media. Starts March 27, 2024 · Each time it happens · Applies when: A campaign communication about an Oregon candidate or measure includes synthetic media. · Oregon Laws 2024, ch. 62, § 1(2)

Pennsylvania

14 items from 3 laws

Pennsylvania AI-generated intimate images and child sexual abuse material law (SB 1213, Act 125 of 2024)

Act 125 of 2024 (SB 1213, Printer's No. 1946), P.L. 1095, approved October 29, 2024; 18 Pa.C.S. §§ 3131, 6312 and 6321. Enforced by: Prosecuted as crimes. District attorneys may prosecute § 6312 offenses, and the Attorney General may also do so for violations involving more than one county or another state; the Attorney General has concurrent authority over § 3131 offenses. No lawsuit or court order against the 2024 amendments was found in web searches on November 15, 2026.. Checked November 15, 2026.

Person: Do not disseminate an artificially generated sexual depiction of an individual with intent to harass, annoy or alarm another person. Starts December 28, 2024 · Ongoing · Applies when: The depiction appears to authentically show the individual nude or in sexual conduct that did not occur. Consent of the depicted person is a defense. The victim or offender is in Pennsylvania. · 18 Pa.C.S. § 3131(a)(2), (b), (d)

Person: Do not knowingly sell, distribute, transfer, display or otherwise disseminate artificially generated child sexual abuse material, or possess it for that purpose. Starts December 28, 2024 · Ongoing · Applies when: The material appears to authentically show a child under 18 in a prohibited sexual act, even though it did not occur. · 18 Pa.C.S. § 6312(c), (g)

Person: Do not intentionally view, or knowingly possess or control, artificially generated child sexual abuse material. Starts December 28, 2024 · Ongoing · Applies when: Intentional viewing means deliberate, purposeful and voluntary viewing; accidental or inadvertent viewing is excluded. · 18 Pa.C.S. § 6312(d), (g)

Pennsylvania digital forgery offense (SB 649, Act 35 of 2025)

Act 35 of 2025 (SB 649), P.L. 120, enacted July 7, 2025; 18 Pa.C.S. § 4101.1. Enforced by: Prosecuted as a crime; § 4101.1 does not name a particular enforcing agency. No lawsuit or court order against § 4101.1 was found in web searches on November 15, 2026.. Checked November 15, 2026.

Person: Do not create and distribute a forged digital likeness as genuine to defraud or injure anyone, or knowingly facilitate that, when you know or should know it is forged. Starts September 5, 2025 · Ongoing · Applies when: The likeness is a computer-generated image, video or audio of a real, identifiable person, made and distributed without that person's consent. · 18 Pa.C.S. § 4101.1(a), (f)

Pennsylvania highly automated vehicles and platooning law (HB 2398, Act 130 of 2022)

Act 130 of 2022 (HB 2398), P.L. 1946, approved November 3, 2022; 75 Pa.C.S. Chapter 85, Subchapters A, B and D. Enforced by: PennDOT (the lead agency with sole regulatory authority) and police; police charge the certificate holder for violations. PennDOT may suspend, limit or revoke a certificate on the stated grounds after notice and hearing. No lawsuit or court order against Chapter 85 was found in web searches on November 15, 2026.. Checked November 15, 2026.

Certificate holder: Do not operate a highly automated vehicle on a highway unless you are a certificate holder, or a driver approved by one, and the vehicle operates under Title 75. Starts July 1, 2023 · Ongoing · Applies when: Any highly automated vehicle on a Pennsylvania highway, other than work zone vehicles, platoons and interstate-registered vehicles. · 75 Pa.C.S. § 8504(a), (b)

Certificate holder: Submit a self-certification form: contact and claims details, vehicle identification and registration, insurance proof, a safety management plan, nonproprietary NHTSA documents, and consent to Pennsylvania court jurisdiction. When triggered · Once · Applies when: Before operating highly automated vehicles. PennDOT may reject an incomplete or materially inaccurate form within 30 days; otherwise it issues the certificate, with no renewal required. · 75 Pa.C.S. §§ 8506(b)(1)-(7), 8507(a), (b)(1)

Certificate holder: Carry at least $1,000,000 per accident in coverage for death, bodily injury and third-party property damage for each highly automated vehicle. Starts July 1, 2023 · Ongoing · Applies when: Whenever the vehicle operates. Transportation network services have added requirements. · 75 Pa.C.S. § 8508(f)

Certificate holder: When operating without a driver, keep the automated driving system engaged, comply with Title 75 unless exempted, and bring the vehicle to a minimal risk condition if the system fails. Starts July 1, 2023 · Ongoing · Applies when: Driverless operation. With a driver, the vehicle or driver must reach a minimal risk condition after a system failure. · 75 Pa.C.S. § 8508(b), (c)(2)

Certificate holder: Title each vehicle as a highly automated vehicle, display any federally required certification labels, and use PennDOT's external visual identifier standards. Starts July 1, 2023 · Ongoing · Applies when: Any highly automated vehicle operated under a certificate of compliance. · 75 Pa.C.S. § 8508(d), (h)

Certificate holder: Notify the municipality's governing body in writing at least 10 days before beginning highly automated vehicle operations there. When triggered · Each time it happens · Applies when: Starting operations in a municipality. · 75 Pa.C.S. § 8508(i)

Certificate holder: If PennDOT requires it, self-report crashes in Pennsylvania involving injury, serious bodily injury, death or property damage within the time PennDOT sets, at least six hours. When triggered · Each time it happens · Applies when: A crash involving a highly automated vehicle, where PennDOT has used its power to require self-reporting. · 75 Pa.C.S. § 8505(b)(2)

Certificate holder: Keep giving PennDOT the information or records it requires, and produce them on the Secretary's order when there is a specific safety concern. When triggered · Each time it happens · Applies when: PennDOT requests information or the Secretary issues an order. · 75 Pa.C.S. § 8507(c)

Certificate holder: Do not operate a highly automated vehicle as a school bus or school vehicle, or carry hazardous materials except limited or non-placarded quantities after PennDOT certification. Starts July 1, 2023 · Ongoing · Applies when: Any highly automated vehicle operation. The hazardous materials exception applies only once the certificate holder has PennDOT certification under regulations. · 75 Pa.C.S. § 8509(e)

Platoon operator: File a general platoon operation plan with PennDOT; limit platoons to three marked vehicles on limited-access or interstate highways, with a driver in each vehicle unless allowed otherwise. Starts July 1, 2023 · Ongoing · Applies when: Operating a platoon. A plan PennDOT does not act on within 30 days is deemed approved. One nonlead vehicle may run with the system engaged, with or without a driver. · 75 Pa.C.S. § 8532(c), (d)(1), (2), (4), (5), (e)

Rhode Island

18 items from 6 laws

Rhode Island AI companion models law (H 7350)

2026 H 7350 Substitute A as amended (January Session 2026); adds a chapter on Artificial Intelligence Companion Models to Title 6 of the General Laws (numbered 6-63-1 to 6-63-5 in the bill). Also enacted as SB2195. Enforced by: Rhode Island Attorney General, who may investigate, sue and seek injunctions against noncompliant operators.. Checked November 12, 2026.

Operator: Do not operate or provide an AI companion unless it contains a protocol addressing possible suicidal ideation or self-harm, and possible physical harm to others, expressed by a user. Starts January 1, 2027 · Ongoing · Applies when: Any AI companion operated or provided to a user in Rhode Island. · R.I. Gen. Laws § 6-63-2(a)(1), (2)

Operator: Notify the user with a referral to crisis service providers, such as a suicide hotline or crisis text line, as soon as such an expression is detected. When triggered · Each time it happens · Applies when: A user expresses possible suicidal ideation, self-harm or physical harm to others to the AI companion. · R.I. Gen. Laws § 6-63-2(a)(3)

Operator: File annual reports with the office of the attorney general on the number of safety protocol activations and related metrics. Starts July 1, 2027 · Every year · Applies when: Beginning July 1, 2027; no due date within the year is stated. · R.I. Gen. Laws § 6-63-2(b)

Operator: Give a clear and conspicuous notification, verbally or in writing, that the user is not communicating with a human, at the start of any interaction and every three hours. Starts January 1, 2027 · Ongoing · Applies when: Any AI companion interaction; the repeat is owed at least every three hours for continuing interactions. · R.I. Gen. Laws § 6-63-3

Rhode Island Oversight of Artificial Intelligence Technology in Mental Health Care Act (H 7349)

P.L. 2026, ch. 373 (H 7349 Substitute A) and ch. 374 (S 2197 Substitute A as amended), enacted June 22, 2026; adds R.I. Gen. Laws chapter 40.1-5.5 (§§ 40.1-5.5-1 to 40.1-5.5-6). Also enacted as S2197. Enforced by: Rhode Island Executive Office of Health and Human Services, which has authority to investigate actual, alleged or suspected violations of the chapter. The act names no other enforcer. No court order blocking the act was looked for in this review.. Checked November 12, 2026.

Individual, corporation, or entity: Do not provide, advertise or otherwise offer therapy or psychotherapy services to the public in Rhode Island, including through internet-based AI, unless a licensed professional or provider conducts them. Starts June 22, 2026 · Ongoing · Applies when: Any offer of therapy or psychotherapy services to the public in Rhode Island. · R.I. Gen. Laws § 40.1-5.5-3(b)

Licensed professional or provider: Do not use AI designed to simulate emotional attachment, bonding or dependency, or AI companions, in recorded or transcribed sessions without written notice and consent. When triggered · Ongoing · Applies when: Such AI would assist with supplementary support or therapeutic communication where the client's session is recorded or transcribed. The patient, or a parent, guardian or other legally authorized representative, must be told in writing that AI will be used and its specific purpose, and must consent. · R.I. Gen. Laws § 40.1-5.5-3(a)

Licensed professional or provider: Do not allow or use AI to make independent therapeutic decisions or to determine therapeutic recommendations or treatment plans. Starts June 22, 2026 · Ongoing · Applies when: Any use of AI by a licensed professional or provider. · R.I. Gen. Laws § 40.1-5.5-3(c)(1), (3)

Licensed professional or provider: Do not allow AI to interact directly with clients in any form of therapeutic communication without an established relationship. Starts June 22, 2026 · Ongoing · Applies when: The text ties the established relationship to the professional agreeing to diagnose and treat the patient and the patient consenting, whether or not there has been an in-person encounter. The professional stays responsible for clinical judgment and reasonable therapeutic oversight. · R.I. Gen. Laws § 40.1-5.5-3(c)(2)

Licensed professional: When discussing a client's own AI software use, maintain confidentiality, monitor and protect the client's safety, and discuss the software's limitations and risks. When triggered · Ongoing · Applies when: A client discloses, on their own initiative, that they use software with AI features. The professional may discuss that use and offer guidance. · R.I. Gen. Laws § 40.1-5.5-3(d)

Licensed professional or provider: Keep records and communications with individuals seeking therapy or psychotherapy services confidential; disclose only as provided in § 40.1-5-26. Starts June 22, 2026 · Ongoing · Applies when: All records kept by a licensed professional or provider and all communications with an individual seeking services. · R.I. Gen. Laws § 40.1-5.5-4

Rhode Island Use of Artificial Intelligence by Healthcare Providers Notification Act (H 7538)

H 7538 Substitute A (2026); companion S 2570 Substitute A enacted as P.L. 2026, ch. 372 on June 22, 2026; adds a new chapter to R.I. Gen. Laws Title 23, Use of Artificial Intelligence by Healthcare Providers Notification Act (numbered 23-106 in the House bill). Also enacted as S2570. Enforced by: The law does not name one. Checked November 12, 2026.

Healthcare provider or healthcare facility: Notify patients of the use of AI for the sole purpose of documenting the visit. When triggered · Ongoing · Applies when: The provider or facility uses AI to document an in-person or telehealth visit. The text does not say how or when the notice must be given and does not require consent. · new Title 23 chapter, section 3 (printed 23-106108-3 in P.L. 2026, ch. 372; 23-106-3 in H 7538 Substitute A)

Healthcare provider or healthcare facility: Review the AI-generated documentation for accuracy after the visit. When triggered · Ongoing · Applies when: AI was used to document an in-person or telehealth visit. The text sets no deadline and does not say who must do the review. · new Title 23 chapter, section 3 (printed 23-106108-3 in P.L. 2026, ch. 372; 23-106-3 in H 7538 Substitute A)

Rhode Island crime of sharing real or digitally altered intimate images without consent (H 5046)

P.L. 2025, ch. 430 (H 5046), enacted July 2, 2025; amends R.I. Gen. Laws § 11-64-3. Companion: P.L. 2025, ch. 429 (S 136).. Also enacted as S136. Enforced by: Criminal prosecution in Rhode Island courts. A violation counts as committed in Rhode Island if any element of the offense, or any resulting harm to the depicted person, occurs in the state. No lawsuit challenging the 2025 amendment was found in a web search.. Checked November 15, 2026.

Person: Do not intentionally disseminate, publish or sell a real or digitally created or altered sexual image of an identifiable adult without their consent. Starts July 2, 2025 · Ongoing · Applies when: The image was made or obtained where a reasonable person would know it was to stay private, or was created without consent; and it is shared knowing or recklessly disregarding likely harm, or to harass, intimidate, threaten or coerce. · R.I. Gen. Laws § 11-64-3(a)(1)-(4)

Person: Do not threaten to disclose such an image to obtain a benefit, and do not demand money or anything of value to remove one from public view. Starts July 2, 2025 · Ongoing · Applies when: Any threat to disclose an image described in § 11-64-3(a), or any demand for payment to remove one. · R.I. Gen. Laws § 11-64-3(e), (f)

Rhode Island deceptive synthetic media in election communications (H 5872)

P.L. 2025, ch. 409 (H 5872 Substitute A), enacted July 2, 2025; adds R.I. Gen. Laws chapter 17-30 (§§ 17-30-1 to 17-30-4). Companion: P.L. 2025, ch. 410 (S 816 Substitute A).. Also enacted as S816. Enforced by: Private civil actions by the depicted candidate; the act names no state enforcer and sets no criminal or administrative penalty. No lawsuit challenging chapter 17-30 was found in a web search.. Checked November 15, 2026.

Candidate, campaign committee, PAC, party committee or independent spender: Within 90 days of an election with a candidate on the ballot, do not distribute synthetic media you know or should know is deceptive and fraudulent, unless disclosed as AI. When triggered · Each time it happens · Applies when: Any distribution of synthetic media in the 90 days before an election at which a candidate for elective office will appear on the ballot. · R.I. Gen. Laws § 17-30-1(c), (d)(1)

Candidate, campaign committee, PAC, party committee or independent spender: To use the disclosure, state the media was manipulated or generated by AI: on screen for a whole video, text no smaller than other text, or spoken in audio. When triggered · Each time it happens · Applies when: Visual text must be easily readable by the average viewer. Audio-only disclosures must be clearly spoken at the beginning and end, and at least every two minutes if the audio runs longer than two minutes. · R.I. Gen. Laws § 17-30-1(d)(1)-(3)

Rhode Island digital forgery as identity fraud (H 8060)

P.L. 2026, ch. 412 (H 8060 Substitute A), enacted June 23, 2026; amends R.I. Gen. Laws §§ 11-49.1-2 and 11-49.1-3. Companion: P.L. 2026, ch. 413 (S 3338).. Also enacted as S3338. Enforced by: Criminal prosecution in Rhode Island courts; a violation is a felony. No lawsuit challenging the 2026 amendments was found in a web search.. Checked November 15, 2026.

Person: Do not knowingly create, generate or distribute a forged digital likeness or voice of a real person, passed off as genuine, to facilitate fraud. Starts June 23, 2026 · Ongoing · Applies when: The person knows or reasonably should know the image or recording is a forged digital likeness, and it was created and distributed without the depicted person's consent. · R.I. Gen. Laws §§ 11-49.1-2, 11-49.1-3(a)(8)

Person: Do not knowingly impersonate a living or dead person or an entity with intent to defraud or injure an individual, business, the state or a municipality. Starts June 23, 2026 · Ongoing · Applies when: Any impersonation, by any means, with intent to defraud or injure. · R.I. Gen. Laws § 11-49.1-3(a)(7)

South Carolina

16 items from 4 laws

South Carolina Social Media Regulation Act (Age-Appropriate Code Design, Act 96 of 2026)

H. 3431, Act No. 96 of 2026 (R100); S.C. Code Title 39, Chapter 80 (39-80-10 to 39-80-80). Enforced by: South Carolina Attorney General. NetChoice sued the Attorney General on February 9, 2026 (NetChoice v. Wilson, No. 3:26-cv-00543, D.S.C.) and moved for a preliminary injunction; no ruling blocking the law was found in this run, and the court docket could not be opened.. Checked November 15, 2026.

Covered online service: Use reasonable care with minors' data and in service design to prevent compulsive usage, severe psychological harm or distress, privacy intrusions, identity theft, discrimination, and financial or physical injury. Starts February 5, 2026 · Ongoing · Applies when: Always, for a covered online service. · S.C. Code 39-80-20(A)

Covered online service: Give users easy tools to disable non-essential design features, limit time and purchases, block contact from unconnected accounts, limit visibility, hide engagement counts and connections, and control location sharing. Starts February 5, 2026 · Ongoing · Applies when: Always; several tools refer to a minor's account or connections. · S.C. Code 39-80-30(A)

Covered online service: Let users opt out of personalized recommendation systems, except optimizations based on expressed preferences; make the opt-out the default for known minors. Starts February 5, 2026 · Ongoing · Applies when: The service uses a personalized recommendation system. · S.C. Code 39-80-30(B)

Covered online service: Set the Section 39-80-30(A) safeguards as default settings for any individual known to be a minor, and maintain them. Starts February 5, 2026 · Ongoing · Applies when: The service knows an individual is a minor. · S.C. Code 39-80-30(C)

Covered online service: Collect, use, share and keep minors' personal data only as necessary for features the minor knowingly uses; delete age-verification data after use; no default precise geolocation unless necessary. Starts February 5, 2026 · Ongoing · Applies when: The service processes a minor's personal data. · S.C. Code 39-80-40(A), (B), (D)

Covered online service: Do not facilitate targeted advertising to minors, and do not profile a known minor unless necessary for the service the minor knowingly requested. Starts February 5, 2026 · Ongoing · Applies when: Advertising to, or automated profiling of, minors. · S.C. Code 39-80-40(C), (F)

Covered online service: Provide tools to silence notifications; for known minors, cover 10 p.m. to 6 a.m. daily and 8 a.m. to 3 p.m. weekdays, August through May. Starts February 5, 2026 · Ongoing · Applies when: The service sends notifications. · S.C. Code 39-80-40(E)

Covered online service: Provide parental tools, on by default for known minors, to manage settings, restrict purchases, view time used, and set time limits; tell the minor when tools are active. Starts February 5, 2026 · Ongoing · Applies when: The service knows a user is a minor. · S.C. Code 39-80-50

Covered online service: Set up ways for parents, minors and schools to report harms to minors, with attention to imminent threats; do not advertise narcotics, tobacco, gambling or alcohol to known minors. Starts February 5, 2026 · Ongoing · Applies when: Always. · S.C. Code 39-80-60(A), (B)

Covered online service: Do not use dark patterns; their use is an unlawful trade practice under the South Carolina Unfair Trade Practices Act. Starts February 5, 2026 · Ongoing · Applies when: Always. · S.C. Code 39-80-60(C)

Covered online service: Explain in terms and conditions how personalized recommendation systems serve minors and how to opt out or control them; prominently describe safety measures, privacy protections and parental tools. Starts February 5, 2026 · Ongoing · Applies when: The service uses personalized recommendation systems (first part); always (second part). · S.C. Code 39-80-60(D), (E)

Covered online service: By July 1 each year, issue a public report prepared by an independent auditor and sent to the Attorney General, including algorithms used; cooperate fully with the auditor. When triggered · Every year · Applies when: Each year; the text does not state the first reporting year. · S.C. Code 39-80-70(A), (C)

South Carolina morphed images of identifiable minors (S. 29)

Act No. 58 of 2025 (R83, S. 29); amends S.C. Code §§ 16-15-375, 16-15-395, 16-15-405, 16-15-410, 23-3-430 and 23-3-462 and adds § 16-15-412. Enforced by: Criminal prosecution. An arrest warrant for an offense involving a morphed image may issue only on a state grand jury true bill, or on probable cause after an Internet Crimes Against Children Task Force investigation with the Attorney General's Office.. Checked November 15, 2026.

Individual: Do not create, produce, distribute, exhibit, sell, buy, exchange, solicit or possess morphed sexual images of an identifiable minor, including computer-generated ones. Starts May 22, 2025 · Ongoing · Applies when: When the person knows the character or content of the material. · S.C. Code §§ 16-15-395(A)(4), 16-15-405(A), 16-15-410(A)

South Carolina obscene visual representations of child sexual abuse, including computer-generated images (Act 57 of 2025)

S. 28, Act No. 57 of 2025 (R82); S.C. Code 16-15-390; amends 23-3-430 and 23-3-462. Enforced by: Criminal prosecution; an arrest warrant may issue only on a state grand jury true bill or a probable-cause finding after an Internet Crimes Against Children Task Force investigation with the Attorney General's Office. A web search on November 15, 2026 found no lawsuit or court order blocking this law.. Checked November 15, 2026.

Person: Do not knowingly produce, distribute, solicit or possess with intent to distribute an obscene depiction of a minor in sexual conduct or nudity, including computer-generated images. Starts May 22, 2025 · Ongoing · Applies when: The depiction is obscene; the minor need not actually exist; attempts and conspiracies are included. · S.C. Code 16-15-390(B), (E)

Person: Do not knowingly possess an obscene depiction of a minor in sexually explicit conduct, activity or nudity, including computer-generated images. Starts May 22, 2025 · Ongoing · Applies when: The depiction is obscene; the minor need not actually exist; attempts and conspiracies are included. · S.C. Code 16-15-390(C), (E)

South Carolina unauthorized disclosure of intimate images, including digitally forged images (Act 37 of 2025)

H. 3058, Act No. 37 of 2025 (R56); S.C. Code 16-15-330 and 16-15-332. Enforced by: Criminal prosecution (the act does not name a prosecutor). A web search on November 15, 2026 found no lawsuit or court order blocking this law.. Checked November 15, 2026.

Person: Do not intentionally disseminate an intimate image or digitally forged intimate image of another person without that person's effective consent. Starts May 12, 2025 · Ongoing · Applies when: The person knew or reasonably should have known the depicted person had a reasonable expectation of privacy when the image was obtained or created. Consent to creation is not consent to dissemination. · S.C. Code 16-15-332(A)

South Dakota

10 items from 4 laws

South Dakota computer-generated child pornography offenses (SB 79, 2024)

SB 79, 99th Legislative Session (2024), enrolled; amends SDCL 22-24A-2 and related sections, adds new sections to chapter 22-24A, repeals 22-24A-3. Enforced by: Criminal prosecution; the Act does not name the prosecuting office. Convictions count as sex crimes under SDCL 22-24B-1. A web search on November 15, 2026 found no court challenge to this law.. Checked November 15, 2026.

Person: Do not knowingly possess, sell or distribute child pornography or computer-generated child pornography, including AI-created depictions indistinguishable from an actual minor. When triggered · Ongoing · Applies when: Any visual depiction covered by the definitions; consent and mistake of age are not defenses. · SB 79 §§ 2, 3, 7

Person: Do not create, cause the creation of, or knowingly permit the creation of child pornography or computer-generated child pornography. When triggered · Ongoing · Applies when: Any creation, including with AI or other computer technology. · SB 79 § 4

South Dakota digitally fabricated intimate material offense (SB 41, 2026)

SB 41, 101st Legislative Session (2026), enrolled; amends SDCL 22-21-4 and adds a new section to chapter 22-21. Enforced by: Criminal prosecution; the Act does not name the prosecuting office. A web search on November 15, 2026 found no court challenge to this law.. Checked November 15, 2026.

Person: Do not knowingly create, disclose, distribute or sell digitally fabricated material showing an identifiable person nude or in sexual conduct without their consent or knowledge. When triggered · Ongoing · Applies when: Done to self-gratify, or to alarm, annoy, embarrass, harass, threaten or harm the person, and an ordinary viewer would conclude it depicts them. · SDCL 22-21-4(3), as amended by SB 41 § 1

South Dakota election deepfake law (SB 164, 2025)

SB 164, 100th Legislative Session (2025), enrolled; adds six new sections to SDCL chapter 12-26. Enforced by: Criminal prosecution for the misdemeanor; the attorney general, an injured candidate or the depicted individual may seek an injunction; candidates and depicted individuals may sue for damages. A web search on November 15, 2026 found no court challenge to this law.. Checked November 15, 2026.

Person: Within 90 days of an election, do not disseminate, or agree to disseminate, an undisclosed deepfake you know or should know is one, intending to injure a candidate. When triggered · Each time it happens · Applies when: Election-related deepfakes intended to injure a candidate; satire, parody and listed media and service providers are exempt. · SB 164 §§ 2, 3

Person: Add the statutory AI disclosure: superimposed on images and video in readable type no smaller than other text; read aloud at the start and end of audio. When triggered · Each time it happens · Applies when: Disclosure text: "This (image/video/audio) has been manipulated or generated by artificial intelligence." It is an affirmative defense to any action under the Act. · SB 164 § 6

South Dakota fully autonomous vehicles act (HB 1095, 2024)

HB 1095, 99th Legislative Session (2024), enrolled; adds new sections to SDCL Title 32. Enforced by: Ordinary traffic law enforcement; while the automated driving system is engaged it is treated as the driver, and violations are imputed to the vehicle owner, who may be charged and convicted. A court challenge was not searched for in this run.. Checked November 15, 2026.

Owner of a fully autonomous vehicle: Run driverless only with the system engaged, able to reach a minimal risk condition on failure or leaving its design domain, able to obey traffic laws, and federally labeled. When triggered · Ongoing · Applies when: A fully autonomous vehicle operates on South Dakota public roads without a human driver. · HB 1095 § 2

Owner of a fully autonomous vehicle: Keep proof of financial responsibility meeting SDCL chapter 32-35 for each fully autonomous vehicle on public roads. When triggered · Ongoing · Applies when: A fully autonomous vehicle operates on public roads. · HB 1095 § 4

Owner of a fully autonomous vehicle: Ensure the vehicle remains at a crash scene as chapter 32-34 requires, and report crashes or collisions under chapter 32-34, directly or through someone acting for you. When triggered · Each time it happens · Applies when: A fully autonomous vehicle is involved in a crash or collision; failures are imputed to the owner. · HB 1095 § 5

Owner of a fully autonomous vehicle: Title and register the vehicle, submitting its SAE J3016B automation level and supporting documentation to the Department of Revenue. When triggered · Once · Applies when: Titling under chapter 32-3 and registration under chapter 32-5. · HB 1095 § 7

Person operating a vehicle with an automated driving system: Respond to the automated driving system's request to intervene when it cannot perform the entire driving task and will not reach a minimal risk condition. When triggered · Ongoing · Applies when: Operating a vehicle whose system may issue a request to intervene. · HB 1095 § 8

Tennessee

21 items from 7 laws

Tennessee AI mental health professional claims law (HB 1470)

Public Chapter 647 (2026) (SB 1580, substituted for HB 1470); adds Tenn. Code Ann. § 33-1-205 and amends § 47-18-104(b); effective July 1, 2026. Enforced by: Enforced as a violation of the Tennessee Consumer Protection Act of 1977; the act does not name an official, and the Consumer Protection Act was not read.. Checked November 14, 2026.

AI developer or deployer: Do not advertise or represent to the public that an AI system is, or can act as, a qualified mental health professional. Starts July 1, 2026 · Ongoing · Applies when: Any advertising or public representation about the AI system. · Tenn. Code Ann. § 33-1-205(a)

Tennessee ELVIS Act (HB 2091): voice and likeness rights

Public Chapter 588 (2024), HB 2091 (Ensuring Likeness, Voice, and Image Security Act of 2024); amends Tenn. Code Ann. §§ 47-25-1101 to 47-25-1107 and 39-14-152. Enforced by: Civil action under Tennessee's personal rights law, by the individual (or rights holders after death); a record label or other holder of an exclusive recording or distribution contract with the individual may also sue.. Checked November 14, 2026.

Person: Do not knowingly use an individual's name, photograph, voice or likeness in any medium for advertising, fundraising or solicitation without the required prior consent. Starts July 1, 2024 · Ongoing · Applies when: Without prior consent of the individual, a minor's parent or guardian, or a deceased individual's executor, administrator, heirs or devisees. · Tenn. Code 47-25-1105(a)(1), as amended by Pub. Ch. 588 § 6

Person: Do not publish, perform, distribute, transmit or make available to the public an individual's voice or likeness knowing the use was not authorized. Starts July 1, 2024 · Ongoing · Applies when: Any public distribution, including AI-generated voice or likeness, unless a fair-use exception applies. · Tenn. Code 47-25-1105(a)(2), as amended by Pub. Ch. 588 § 6

Person: Do not distribute or make available a tool, software or service whose primary purpose is producing a particular person's photograph, voice or likeness, knowing it was not authorized. Starts July 1, 2024 · Ongoing · Applies when: The tool's primary purpose or function is producing a specific, identifiable individual's photograph, voice or likeness. · Tenn. Code 47-25-1105(a)(3), as amended by Pub. Ch. 588 § 6

Tennessee Preventing Deepfake Images Act (SB 1346)

Public Chapter 466 (2025), SB 1346; Tenn. Code Ann. §§ 39-17-1901 to 39-17-1906. Enforced by: The depicted individual (or, for a minor, incapacitated or deceased person, a guardian, estate representative, family member or court-appointed person) by civil action; separately, disclosure to harass or harm is a criminal offense.. Checked November 14, 2026.

Person: Do not intentionally disclose an intimate digital depiction of an identifiable person without their consent, knowing or recklessly disregarding that they have not consented. Starts July 1, 2025 · Ongoing · Applies when: Any disclosure: transferring, publishing, distributing or making the depiction accessible. A disclaimer that it is unauthorized or fake is no defense. · Tenn. Code 39-17-1903(a), 39-17-1904(f)

Person: Before disclosing such a depiction, get consent in a plain-language written agreement signed by the depicted person, describing the depiction and any work it will appear in. Starts July 1, 2025 · Each time it happens · Applies when: Consent to creating the depiction does not count as consent to disclosing it. · Tenn. Code 39-17-1903(c)

Person: Do not disclose, threaten to disclose or solicit disclosure of an intimate digital depiction to harass or harm the person, or knowing or recklessly disregarding that it will cause harm. Starts July 1, 2025 · Ongoing · Applies when: Criminal offense. A disclaimer is no defense; prosecution under other statutes is still possible. · Tenn. Code 39-17-1906(a), (c), (e)

Tennessee Transparency for Deepfakes in Political Advertising Act (HB 1513)

Public Chapter 625 (2026), HB 1513 (substituted for SB 1624); Tenn. Code Ann. § 2-19-120(a)(6). Enforced by: Criminal prosecution (Class C misdemeanor, per the official bill caption); the impersonated or depicted candidate may also sue.. Checked November 14, 2026.

Person or entity distributing a political communication: In audio that is a deepfake impersonating a candidate's speech, clearly state at the start and end: This communication contains fake content impersonating speech that did not occur. Starts July 1, 2026 · Each time it happens · Applies when: The candidate did not in fact say it. For non-incumbents, only within 120 days of the start of voting. · Tenn. Code 2-19-120(a)(6)(A), (C)

Person or entity distributing a political communication: In video that is a deepfake of a candidate, show the statutory notice in large letters throughout: fake content depicting actions, or actions and speech, that did not occur. Starts July 1, 2026 · Each time it happens · Applies when: The candidate did not in fact act or speak that way. Wording differs for video-only and audio-and-video. For non-incumbents, only within 120 days of voting. · Tenn. Code 2-19-120(a)(6)(B), (C)

Tennessee ban on tools designed to create child sexual abuse material (SB 741)

Public Chapter 257 (2025), SB 741 (substituted for HB 769); new section in Tenn. Code Title 39, Chapter 17, Part 10. Enforced by: Criminal prosecution; the act does not name the prosecuting office. A web search on November 15, 2026 found no court challenge.. Checked November 15, 2026.

Person: Do not knowingly possess, distribute or produce technology, software or digital tools designed to create material showing a minor in sexual activity or patently offensive simulated sexual activity. Starts July 1, 2025 · Ongoing · Applies when: Any such tool. Whether it is designed for that purpose is judged on the factors in subsection (b). · SB 741, § 1(a)(1), (b)

Tennessee digital driver license data and biometrics limits (HB 1316)

Public Chapter 297 (2025), HB 1316 (substituted for SB 1297); Tenn. Code Ann. § 55-50-306(d), (f)-(i). Enforced by: The law does not name one. Checked November 15, 2026.

Any entity that obtains digital driver license data: Keep data obtained from a digital driver license only as long as needed to confirm it is accurate, and never longer than three calendar days. Starts April 24, 2025 · Each time it happens · Applies when: Any use of a person's digital driver license. · Tenn. Code 55-50-306(f)(1)

Any entity that obtains digital driver license data: Do not sell or provide digital driver license data to anyone except law enforcement in its duties, a government entity entitled to it, or under a court subpoena. Starts April 24, 2025 · Ongoing · Applies when: Any data obtained from use of a digital driver license. · Tenn. Code 55-50-306(f)(2)

Private or public entity: Do not require a digital driver license instead of a physical one, and do not give preferential service to people who use a digital license. Starts April 24, 2025 · Ongoing · Applies when: Whenever identification is requested. · Tenn. Code 55-50-306(i)(2)

State contractor running the digital driver license app: Do not capture or retain biometric identifiers for the digital driver license system, except a photo used only to match the license photo on file. Starts April 24, 2025 · Ongoing · Applies when: Providing an app or other method for the digital driver license system. · Tenn. Code 55-50-306(g)(2)

State contractor running the digital driver license app: Do not capture or retain users' geolocation data for purposes of the digital driver license system. Starts April 24, 2025 · Ongoing · Applies when: Providing an app or other method for the digital driver license system. · Tenn. Code 55-50-306(g)(3)

State contractor running the digital driver license app: Treat data and photos users provide as personally identifiable information; do not sell, redisclose or otherwise use them except as subdivision (f)(2) allows. Starts April 24, 2025 · Ongoing · Applies when: Any data, including a photograph, a person provides to the contractor. · Tenn. Code 55-50-306(h)

State contractor running the digital driver license app: Do not charge a fee to take part in the digital driver license system. Starts April 24, 2025 · Ongoing · Applies when: Providing the digital driver license system under a department contract. · Tenn. Code 55-50-306(d)

Tennessee personal delivery devices law (SB 2836)

Public Chapter 685 (2020), SB 2836; amends Tenn. Code Ann. §§ 55-1-103, 55-8-101 and adds a section to Title 55, Chapter 8, Part 2. Enforced by: Local law enforcement officers may enforce state laws on personal delivery device operation; the act names no other enforcer.. Checked November 15, 2026.

Personal delivery device operator: Make devices yield to and not obstruct other traffic, including pedestrians, and keep them to 10 mph in pedestrian areas; carry no placarded hazardous materials. Starts July 1, 2020 · Ongoing · Applies when: Whenever a device operates on public rights-of-way. · Pub. Ch. 685 § 5(a)(1)-(2), (4), (b)

Personal delivery device operator: Mark each device with the owner's name, contact information and a unique ID number, and equip it with a braking system that can make a controlled stop. Starts July 1, 2020 · Ongoing · Applies when: For every device operated in Tennessee. · Pub. Ch. 685 § 5(c)

Personal delivery device operator: Between sunset and sunrise, equip devices with front and rear lights visible in clear weather from at least 500 feet. Starts July 1, 2020 · Ongoing · Applies when: When operating between sunset and sunrise. · Pub. Ch. 685 § 5(a)(3)

Personal delivery device operator: Maintain general liability insurance of at least $100,000 for damages from the combined operation of devices under your control. Starts July 1, 2020 · Ongoing · Applies when: While operating personal delivery devices in Tennessee. · Pub. Ch. 685 § 5(f)

Texas

66 items from 15 laws

Texas AI-generated media and phishing financial exploitation law (SB 2373)

SB 2373, 89th Legislature, Regular Session (2025); Civil Practice and Remedies Code ch. 100B; Penal Code 32.56. Enforced by: A harmed claimant may sue; the attorney general may sue for a civil penalty in Travis County or where the events occurred; criminal prosecution for the Penal Code offense (prosecuting office not named). A web search on November 14, 2026 found no report of a court order blocking this law.. Checked November 14, 2026.

Person: Do not knowingly or intentionally disseminate artificially generated media or a phishing communication for the purpose of financial exploitation. Starts September 1, 2025 · Ongoing · Applies when: Any dissemination on or after September 1, 2025; providers carrying another person's content are excluded. · Civ. Prac. & Rem. Code 100B.002(a), 100B.003(a)

Person: Do not knowingly engage in financial abuse through artificially generated media disseminated to another person, or by digitally tricking someone into giving personal, financial or identifying information. Starts September 1, 2025 · Ongoing · Applies when: Any conduct on or after September 1, 2025. · Penal Code 32.56(b)

Texas AI-generated obscene child imagery offense (SB 20)

SB 20, 89th Legislature, Regular Session (2025); Penal Code 43.235; amends Penal Code 3.03(b) and 71.02(a). Enforced by: Criminal prosecution; the act does not name the prosecuting office. A web search on November 14, 2026 found no report of a court order blocking this law. News reports describe a September 2026 Seventh Circuit ruling on private possession of AI-generated material; it does not bind Texas courts and was not read.. Checked November 14, 2026.

Person: Do not knowingly possess, access with intent to view, or promote obscene visual material depicting an apparent child under 18, including AI-created images, cartoons or animation. Starts September 1, 2025 · Ongoing · Applies when: Any conduct on or after September 1, 2025. · Penal Code 43.235(b)(1)

Person: Do not use an image of an actual child under 18 with the intent to train an AI model to produce child pornography as described in Penal Code 43.26. Starts September 1, 2025 · Ongoing · Applies when: Any conduct on or after September 1, 2025; the child was under 18 when the image was made. · Penal Code 43.235(b)(2)

Texas Responsible Artificial Intelligence Governance Act (TRAIGA)

HB 149, 89th Legislature, Regular Session (2025); Business & Commerce Code Title 11, Subtitle D, Chapters 551-554; amends Bus. & Com. Code 503.001, 541.104 and Gov't Code 325.011, 2054.068, 2054.0965. Enforced by: Texas Attorney General, exclusively; state licensing agencies may add sanctions after an attorney general finding and recommendation.. Checked November 11, 2026.

Governmental agency: Disclose to consumers, before or at the time of interaction, that they are interacting with an AI system, in clear, conspicuous plain language without dark patterns; required even if obvious. Starts January 1, 2026 · Ongoing · Applies when: A governmental agency makes an AI system available that is intended to interact with consumers. · Bus. & Com. Code 552.051(b)-(e)

Health care service provider: Disclose AI use to the patient or their representative no later than the date the service is first provided, or as soon as reasonably possible in an emergency. When triggered · Each time it happens · Applies when: An AI system is used in a health care service. · Bus. & Com. Code 552.051(f)

Person: Do not develop or deploy an AI system that intentionally aims to incite or encourage self-harm, harm to another person, or criminal activity. Starts January 1, 2026 · Ongoing · Applies when: Any development or deployment on or after January 1, 2026. · Bus. & Com. Code 552.052

Governmental entity: Do not use AI to classify people by social behavior or characteristics with the intent to assign a social score that leads to detrimental or disproportionate treatment. Starts January 1, 2026 · Ongoing · Applies when: Any governmental entity use on or after January 1, 2026. · Bus. & Com. Code 552.053

Governmental entity: Do not use AI to uniquely identify individuals with biometric data, or gather images from the internet or other sources, without consent where that would infringe their rights. Starts January 1, 2026 · Ongoing · Applies when: Any governmental entity use on or after January 1, 2026. · Bus. & Com. Code 552.054(b)

Person: Do not develop or deploy an AI system with the sole intent of infringing rights under the U.S. Constitution. Starts January 1, 2026 · Ongoing · Applies when: Any development or deployment on or after January 1, 2026. · Bus. & Com. Code 552.055(a)

Person: Do not develop or deploy an AI system with the intent to unlawfully discriminate against a protected class; disparate impact alone does not show intent. Starts January 1, 2026 · Ongoing · Applies when: Any development or deployment on or after January 1, 2026; insurers and insured financial institutions have carve-outs. · Bus. & Com. Code 552.056(b), (c)

Person: Do not develop or distribute an AI system solely intended to produce child sexual abuse material or unlawful sexual deepfakes, or one impersonating a minor in sexual conduct. Starts January 1, 2026 · Ongoing · Applies when: Any development or distribution on or after January 1, 2026. · Bus. & Com. Code 552.057

Person under investigation: Respond to the attorney general's civil investigative demand and requests for documentation about the AI system. When triggered · Each time it happens · Applies when: After the attorney general receives a complaint and issues a demand or request. · Bus. & Com. Code 552.103

Sandbox participant: File quarterly reports with the Department of Information Resources while testing an AI system in the regulatory sandbox; participation is limited to 36 months unless extended for good cause. When triggered · Ongoing · Applies when: Only for persons admitted to the Chapter 553 sandbox program. · Bus. & Com. Code 553.053(a), (b); 553.102(a)

Texas SCOPE Act (HB 18): algorithm provisions for known minors

HB 18, 88th Legislature, Regular Session (2023); Acts 2023, 88th Leg., R.S., ch. 795; Business & Commerce Code Chapter 509. Enforced by: Consumer protection division of the Texas Attorney General's office; a violation is a deceptive act or practice under Business & Commerce Code Chapter 17, Subchapter E, actionable solely in an attorney general enforcement action. Court status: a federal court preliminarily enjoined enforcement of Sections 509.053 and 509.056(1) on August 30, 2024 (CCIA v. Paxton, W.D. Tex. No. 1:24-cv-849). On July 24, 2026 the Fifth Circuit affirmed that injunction as to CCIA and NetChoice, and vacated a broader injunction won by other plaintiffs (SEAT v. Paxton) for lack of standing.. Checked November 14, 2026.

Digital service provider: Make a commercially reasonable effort to ensure that algorithms used to suggest, promote or rank information for known minors do not interfere with your harm-prevention duties under Section 509.053. Starts September 1, 2024 · Ongoing · Applies when: The provider uses algorithms to automate the suggestion, promotion or ranking of information to known minors. · Bus. & Com. Code 509.056(1)Blocked in court for members of CCIA and NetChoice. A federal preliminary injunction bars the Texas Attorney General from enforcing this duty against members of the two trade groups; the Fifth Circuit affirmed it on Section 230 grounds. Not blocked for other providers. CCIA v. Paxton, Nos. 24-50721 and 25-50096 (5th Cir.), Jul 24, 2026

Digital service provider: Disclose clearly in terms of service, a privacy policy or similar document how the service uses algorithms, how they promote, rank or filter content, and the personal identifying information used. Starts September 1, 2024 · Ongoing · Applies when: The provider uses algorithms to automate the suggestion, promotion or ranking of information to known minors. · Bus. & Com. Code 509.056(2)

Digital service provider: Develop and implement a strategy to prevent known minors' exposure to harmful material and listed harmful content, including filtering, human review and making algorithm code available to independent security researchers. Starts September 1, 2024 · Ongoing · Applies when: A known minor uses the digital service. Listed content promotes, glorifies or facilitates suicide, self-harm, eating disorders, substance abuse, stalking, bullying, harassment, grooming, trafficking or sexual exploitation. Trade secrets need not be disclosed. · Bus. & Com. Code 509.053(a), (b)(1); 509.058Blocked in court for members of CCIA and NetChoice. A federal preliminary injunction bars the Texas Attorney General from enforcing this duty against members of the two trade groups; the Fifth Circuit affirmed it on Section 230 grounds. Not blocked for other providers. CCIA v. Paxton, Nos. 24-50721 and 25-50096 (5th Cir.), Jul 24, 2026

Texas age verification for AI sexual image tools (HB 581)

HB 581, 89th Legislature, Regular Session (2025); amends Civil Practice and Remedies Code ch. 129B (129B.001, 129B.002, 129B.003, 129B.005, 129B.006) and adds 129B.0045. Enforced by: The bill text read does not name who brings the civil penalty action; that is set by the existing Section 129B.006(a), which was not opened. A web search on November 14, 2026 found no report of a court order blocking the duties HB 581 added.. Checked November 14, 2026.

Commercial entity: Use reasonable age verification, by digital identification or a commercial system using government ID or transactional data, to confirm users of the AI creation tool are 18 or older. Starts September 1, 2025 · Ongoing · Applies when: The entity offers a publicly accessible tool or app for creating artificial sexual material harmful to minors and does not meet the 129B.002(a-2) exemption. · Civ. Prac. & Rem. Code 129B.002(a-1); 129B.003(b)

Commercial entity or third-party verifier: Do not retain any identifying information of the individual after performing the required age verification. Starts September 1, 2025 · Ongoing · Applies when: Age verification is performed under Section 129B.002. · Civ. Prac. & Rem. Code 129B.002(b)

Commercial entity: Ensure any individual used as a source for the material is 18 or older and has consented to use of their face and body. Starts September 1, 2025 · Ongoing · Applies when: The entity is subject to the age verification duty in 129B.002(a-1); exempt entities under 129B.002(a-2) are excluded. · Civ. Prac. & Rem. Code 129B.0045

Texas automated motor vehicle authorization law (SB 2807, 2025)

SB 2807, 89th Legislature, Regular Session (2025); Acts 2025, 89th Leg., R.S., ch. 1034; Transportation Code 545.451 to 545.459; Occupations Code 2402.005; Insurance Code 1954.003; Transportation Code ch. 644A. Enforced by: Criminal prosecution for operating commercially without authorization or the emergency plan; the Texas Department of Motor Vehicles may suspend, revoke, cancel or restrict authorizations. Citations for traffic violations with the system engaged go to the owner or authorization holder. A web search on November 15, 2026 found no lawsuit or court order against SB 2807.. Checked November 15, 2026.

Owner or operator: Run with the system engaged only if the vehicle can obey traffic law, has a recording device, a federally compliant system, minimal-risk capability, registration, title and insurance. Starts September 1, 2025 · Ongoing · Applies when: Any automated motor vehicle on a Texas highway or street with the automated driving system engaged. · Transportation Code 545.455(b)

Commercial operator: Hold and maintain a TxDMV authorization before carrying property or passengers for a commercial enterprise in an automated motor vehicle without a human driver. Starts May 28, 2026 · Ongoing · Applies when: Commercial driverless operation. TxDMV says authorization became enforceable May 28, 2026. · Transportation Code 545.455(c)(1); 545.456; SB 2807 § 12(b)

Commercial operator: File with DPS a plan telling police, fire and medical responders how to reach a fleet support specialist, tow the vehicle and tell whether the system is engaged. Starts May 28, 2026 · Ongoing · Applies when: Before commercial driverless operation; the authorization application must certify DPS received it. · Transportation Code 545.455(c)(2); 545.456(b)(3)

Authorization holder: Update the contact, vehicle and compliance statements and the plan certification within 30 days after material information changes. When triggered · Each time it happens · Applies when: Any material change. TxDMV may immediately suspend, revoke or cancel for failure to update or to provide documents on request. · Transportation Code 545.456(e), (f)

Owner, person acting for the vehicle or human driver: After a collision involving an automated motor vehicle, comply with the collision duties in Transportation Code Chapter 550. When triggered · Each time it happens · Applies when: Any collision involving an automated motor vehicle. · Transportation Code 545.457

Authorization holder: On a TxDMV notice that a vehicle is unsafe and endangers the public, correct the issues and file a certification explaining the corrections before the deadline. When triggered · Each time it happens · Applies when: TxDMV finds the vehicle's operation has caused or is likely to cause serious bodily injury. · Transportation Code 545.459(a)-(f)

Texas ban on automated adverse determinations in utilization review (SB 815)

SB 815, 89th Legislature, Regular Session (2025); amends Insurance Code 4201.002 and 4201.303(a) and adds 4201.156. Enforced by: Texas commissioner of insurance, who may audit and inspect a utilization review agent's use of automated decision systems at any time; the bill names no other enforcer.. Checked November 12, 2026.

Utilization review agent: Do not use an automated decision system to make, wholly or partly, an adverse determination. Starts January 1, 2026 · Ongoing · Applies when: Utilization review for a health benefit plan delivered, issued for delivery or renewed on or after January 1, 2026. · Insurance Code 4201.156(a); SB 815 § 4

Utilization review agent: Allow the commissioner to audit and inspect, at any time, the agent's use of an automated decision system for utilization review. When triggered · Each time it happens · Applies when: The commissioner of insurance chooses to audit or inspect. · Insurance Code 4201.156(b)

Utilization review agent: Include in each adverse determination notice the principal reasons, the clinical basis, a description and source of the screening criteria and review procedures, and the complaint and appeal process. When triggered · Each time it happens · Applies when: An adverse determination is issued for a plan delivered, issued or renewed on or after January 1, 2026. · Insurance Code 4201.303(a); SB 815 § 4

Texas civil liability for AI intimate imagery and nudification apps (SB 441)

SB 441, 89th Legislature, Regular Session (2025); Civil Practice and Remedies Code ch. 98B (98B.001, 98B.0021, 98B.0022, 98B.008, 98B.009); amends Penal Code 21.165. Enforced by: The depicted person may sue for damages. A violation of the removal, request-system or notice duties is a deceptive trade practice under Business & Commerce Code chapter 17, subchapter E, and the attorney general may seek an injunction against a person who repeatedly violates them, recovering costs and attorney's fees if the attorney general prevails. Suits must be brought within 10 years of the later of discovery or the depicted person's 18th birthday. A web search on November 14, 2026 found no report of a court order blocking this law.. Checked November 14, 2026.

Owner of a website or application: Make available on the website or app an easily accessible system for depicted people to request removal of artificial intimate visual material. Starts September 1, 2025 · Ongoing · Applies when: Artificial intimate visual material is disclosed on the owner's website or application. · Civ. Prac. & Rem. Code 98B.0022(c)

Owner of a website or application: Post a clear and conspicuous plain-language notice describing the removal process, the owner's responsibilities and how to submit a request. Starts September 1, 2025 · Ongoing · Applies when: Artificial intimate visual material is disclosed on the owner's website or application. · Civ. Prac. & Rem. Code 98B.0022(d)

Owner of a website or application: Remove the material within 72 hours of the depicted person's removal request and make reasonable efforts to identify and remove known identical copies. When triggered · Each time it happens · Applies when: The depicted person requests removal of artificial intimate visual material disclosed on the site or app. · Civ. Prac. & Rem. Code 98B.0022(b)

Owner of a website or application; payment processor: Do not recklessly facilitate, or process payment for, producing or disclosing artificial intimate visual material for payment while knowing or recklessly disregarding the depicted person's lack of consent. Starts September 1, 2025 · Ongoing · Applies when: The material is produced or disclosed in exchange for payment without the depicted person's consent. · Civ. Prac. & Rem. Code 98B.0022(a)(1), (3)

Owner of a nudification application: Do not let a publicly accessible nudification app you own produce material of a person who did not consent, where you know or recklessly disregard that lack of consent. Starts September 1, 2025 · Ongoing · Applies when: Artificial intimate visual material is produced from the owner's publicly accessible nudification application. · Civ. Prac. & Rem. Code 98B.0022(a)(2)

Texas computer-generated child sexual material offenses (SB 1621, 2025)

SB 1621, 89th Legislature, Regular Session (2025); Acts 2025, 89th Leg., R.S., ch. 847; Penal Code 43.26, 43.261(b-1), 43.262(b-1), 21.16(a)(5); Code of Criminal Procedure arts. 38.45, 39.15. Enforced by: Criminal prosecution by the state; the act does not name a particular prosecutor. A web search on November 15, 2026 found no lawsuit or court order against SB 1621; court dockets were not searched.. Checked November 15, 2026.

Person: Do not possess, or access with intent to view, visual material depicting a computer-generated child engaged in sexual conduct. Starts September 1, 2025 · Ongoing · Applies when: The person knows or should have known the depiction appears to be under 18, or believes it shows an actual child under 18. State jail felony, raised by prior convictions or 10 or more depictions. · Penal Code 43.26(a-2), (c-3)

Person: Do not promote, or possess with intent to promote, visual material depicting a computer-generated child engaged in sexual conduct. Starts September 1, 2025 · Ongoing · Applies when: Same knowledge test as possession. Third degree felony, raised by a prior conviction, 10 or more depictions, or a depiction appearing under 10. · Penal Code 43.26(e-1), (g-1)

Person: Do not possess, access or promote sexual material depicting a recognizable real child whose image was used to create, adapt or modify it, including with AI. Starts September 1, 2025 · Ongoing · Applies when: Treated as a depiction of a child under 43.26(a)(1)(B). Possession is a third degree felony at base, with enhancements; see open questions on the promotion grade. · Penal Code 43.26(a)(1)(B), (a-1), (c-1), (e)

Person: Do not knowingly possess, access with intent to view, or promote lewd visual material of a child, including AI-generated material virtually indistinguishable from a real child. Starts September 1, 2025 · Ongoing · Applies when: The material shows lewd exhibition of a child's genitals or pubic area, appeals to the prurient interest and has no serious value. State jail felony at base. · Penal Code 43.262(b), (b-1)

Texas deep fake video election offense (SB 751, 2019)

SB 751, 86th Legislature, Regular Session (2019); Acts 2019, 86th Leg., R.S., ch. 1339; Election Code 255.004(d), (e). Enforced by: Criminal prosecution; the section does not name a prosecutor. A web search on November 15, 2026 found no court order blocking subsection (d). In Ex parte Stafford (Tex. Crim. App. No. PD-0310-23, Sept. 4, 2024) the court held subsection (b) of the same section facially unconstitutional; that ruling did not address subsection (d).. Checked November 15, 2026.

Person: Do not create a deep fake video and cause it to be published or distributed within 30 days of an election, intending to injure a candidate or influence the result. Starts September 1, 2019 · Ongoing · Applies when: Any election. The statute has no disclosure safe harbor. · Election Code 255.004(d), (e)

Texas electronic health record requirements, including AI use by practitioners (SB 1188)

SB 1188, 89th Legislature, Regular Session (2025); adds Health & Safety Code Chapter 183 (183.001 to 183.012). Enforced by: Texas Attorney General for injunctions and civil penalties; the commission or the appropriate regulatory agency investigates credible allegations and regulatory agencies may discipline license holders.. Checked November 12, 2026.

Covered entity: Ensure electronic health records containing patient information are physically maintained in the United States or a U.S. territory, including records held by third-party or cloud providers. Starts January 1, 2026 · Ongoing · Applies when: Storage of an electronic health record on or after January 1, 2026, whenever the record was prepared. · Health & Safety Code 183.002(a); SB 1188 § 2(b)

Covered entity: Ensure Texas residents' electronic health record information, other than open data, is accessible only to individuals who need it for treatment, payment or health care operations duties. Starts January 1, 2026 · Ongoing · Applies when: Storage of an electronic health record on or after January 1, 2026. · Health & Safety Code 183.002(b); SB 1188 § 2(b)

Covered entity: Implement reasonable and appropriate administrative, physical and technical safeguards to protect the confidentiality, integrity and availability of electronic health record information. Starts January 1, 2026 · Ongoing · Applies when: Storage of an electronic health record on or after January 1, 2026. · Health & Safety Code 183.002(c); SB 1188 § 2(b)

Covered entity: Ensure each electronic health record includes an option for a practitioner to record communications between covered entities about the individual's metabolic health and diet in treating chronic disease. Starts September 1, 2025 · Ongoing · Applies when: Electronic health records prepared on or after September 1, 2025. · Health & Safety Code 183.003; SB 1188 § 2(a)

Covered entity: Do not collect, store or share information about an individual's credit score or voter registration status in the individual's electronic health record. Starts September 1, 2025 · Ongoing · Applies when: Electronic health records prepared on or after September 1, 2025. · Health & Safety Code 183.004; SB 1188 § 2(a)

Health care practitioner: When using AI for diagnostic purposes, stay within the scope of the license, and review all records created with AI consistent with Texas Medical Board medical records standards. Starts September 1, 2025 · Ongoing · Applies when: A practitioner uses AI for diagnosis or treatment recommendations based on the patient's medical record, and the use is not otherwise barred by law. · Health & Safety Code 183.005(a)

Health care practitioner: Disclose to patients the practitioner's use of AI for diagnostic purposes. Starts September 1, 2025 · Ongoing · Applies when: A practitioner uses AI for diagnostic purposes under section 183.005(a). · Health & Safety Code 183.005(b)

Covered entity: Ensure the electronic health record system lets a minor's parent, or managing conservator or guardian if applicable, immediately obtain complete and unrestricted access to the minor's record. Starts September 1, 2025 · Ongoing · Applies when: The system stores records of minors (17 or younger), unless law or a court order restricts access. · Health & Safety Code 183.006

Covered entity: Amend recorded biological sex only to correct a clerical error, or to the opposite sex after a sexual development disorder diagnosis, recording the disorder in the separate space. When triggered · Each time it happens · Applies when: A covered entity changes the biological sex listed in an electronic health record. · Health & Safety Code 183.008

Texas explicit deep fake reporting on social media platforms law (HB 3133)

HB 3133, 89th Legislature, Regular Session (2025); adds Business & Commerce Code 120.1001, 120.1015, 120.1025 and 120.152; amends 120.101, 120.102, 120.103(b) and the heading of 120.151. Enforced by: Texas Attorney General, who may sue to enjoin a violation of Chapter 120 and recover costs, attorney's fees and investigative costs if an injunction is granted (as enacted in 2021). HB 3133 also makes a violation of the chapter a deceptive trade practice actionable under Subchapter E, Chapter 17. A web search on November 14, 2026 found no report of a court order blocking this law; court dockets were not searched.. Checked November 14, 2026.

Social media platform: Provide an easily accessible complaint system that lets users submit good-faith complaints about explicit deep fake material and track their status. Starts September 1, 2025 · Ongoing · Applies when: At all times for a covered platform. The same system covers illegal content or activity and the platform's removal decisions. · Bus. & Com. Code 120.101

Social media platform: Post a clear, conspicuous, plain-language notice of the complaint system that describes the platform's processing duties and how to submit a complaint. Starts September 1, 2025 · Ongoing · Applies when: At all times for a covered platform. The notice may sit on a separate web page reached through a clear and conspicuous hyperlink. · Bus. & Com. Code 120.1015

Social media platform: Immediately confirm to the reporting user that the platform is aware of the reported explicit deep fake material. When triggered · Each time it happens · Applies when: The platform receives notice of explicit deep fake material on the platform. · Bus. & Com. Code 120.102(b)(1)

Social media platform: Remove the reported content and any known content that is a copy of or identical to it. When triggered · Each time it happens · Applies when: The platform receives notice of explicit deep fake material. The text sets no removal deadline; the 48-hour clock in 120.102(a) applies to illegal content reports. · Bus. & Com. Code 120.102(b)(2)

Social media platform: Send the reporting user written notice of the status of the reported content no later than the seventh day after the report was submitted. When triggered · Each time it happens · Applies when: A user has submitted a report of explicit deep fake material. · Bus. & Com. Code 120.102(b)(3)

Social media platform: Implement measures to ensure the same material is not posted on the platform again. When triggered · Each time it happens · Applies when: Reported content is determined to be explicit deep fake material. · Bus. & Com. Code 120.1025(b)

Texas government AI systems law (SB 1964): vendor duties

SB 1964, 89th Legislature, Regular Session (2025); Government Code 2054.003 and ch. 2054, subch. S (2054.701-2054.713). Enforced by: Texas Attorney General, who may sue to enjoin a violation and, after consulting the department, gives a vendor written notice of a violation; the contracting state agency may then void the contract, and the comptroller may bar a vendor with more than one voided contract. A web search on November 14, 2026 found no report of a court order blocking this law.. Checked November 14, 2026.

Vendor: Conduct a system assessment of the heightened scrutiny AI system covering risks of unlawful harm, system limitations and information governance practices. Starts September 1, 2025 · Ongoing · Applies when: The vendor contracts with a state agency to deploy or use a heightened scrutiny AI system. · Gov't Code 2054.708(a)

Vendor: Make the system assessment available to the Department of Information Resources on request. When triggered · Each time it happens · Applies when: The department requests the assessment. · Gov't Code 2054.708(b)

Vendor: Report a violation of Government Code chapter 2054, subchapter S to the attorney general and, if applicable, the Department of Information Resources. When triggered · Each time it happens · Applies when: The vendor becomes aware of a violation. · Gov't Code 2054.709(a)

Vendor (sandbox program): Provide eligible entities secure access to the AI system used in the sandbox, under department oversight, and submit quarterly reports on performance, risk mitigation and feedback. Starts September 1, 2025 · Ongoing · Applies when: The vendor participates in the Department of Information Resources AI sandbox program. · Gov't Code 2054.706(d), (f)

Texas personal delivery and mobile carrying devices law (SB 969, 2019)

SB 969, 86th Legislature, Regular Session (2019); Acts 2019, 86th Leg., R.S., ch. 612; Transportation Code 552A.0001 to 552A.0010. Enforced by: Peace officers enforce state law on device operation; the operator is treated as the operator for traffic-law compliance. A web search on November 15, 2026 found no lawsuit or court order against this law.. Checked November 15, 2026.

Business entity: Operate a personal delivery device only as a business entity whose human agent can monitor or physically control its navigation and operation. Starts June 10, 2019 · Ongoing · Applies when: Any personal delivery device operated under the subchapter. · Transportation Code 552A.0003(a); 552A.0005(a)(7)

Operator: Make the device follow pedestrian rules, yield to all traffic including pedestrians, avoid unreasonable obstruction, follow consistent local rules, and carry no placardable hazardous materials. Starts June 10, 2019 · Ongoing · Applies when: Any operation in a pedestrian area or on a road's side or shoulder. · Transportation Code 552A.0005(a)(1)-(3), (5), (6)

Operator: Keep to 10 mph in pedestrian areas (or a lower local limit, not under 7 mph) and 20 mph on a road's side or shoulder. Starts June 10, 2019 · Ongoing · Applies when: Any operation. · Transportation Code 552A.0006

Business entity: Fit each personal delivery device with a marker giving the owner's name, contact information and a unique ID number, and brakes allowing a controlled stop. Starts June 10, 2019 · Ongoing · Applies when: Every personal delivery device. · Transportation Code 552A.0007(a)

Operator: At night, show front and rear lights visible from 1 to 500 feet on a delivery device, or 1 to 50 feet on a mobile carrying device. Starts June 10, 2019 · Ongoing · Applies when: Nighttime operation. · Transportation Code 552A.0005(a)(4); 552A.0007(b); 552A.0008(b)

Business entity: Maintain general liability insurance of at least $100,000 for damages arising from operating a personal delivery device. Starts June 10, 2019 · Ongoing · Applies when: Any business entity operating a personal delivery device. · Transportation Code 552A.0010

Texas sexually explicit deep fake media offense (SB 1361, as amended in 2025)

SB 1361, 88th Legislature, Regular Session (2023); Penal Code 21.165; amended by SB 441 and HB 449, 89th Legislature (2025). Enforced by: Criminal prosecution; the act does not name the prosecuting office. On conviction the court must order restitution for psychological, financial or reputational harm. A web search on November 14, 2026 found no report of a court order blocking this law.. Checked November 14, 2026.

Person: Do not knowingly produce or distribute by electronic means deep fake media showing a person's intimate parts or sexual conduct without that person's effective consent. Starts September 1, 2023 · Ongoing · Applies when: Any conduct on or after September 1, 2025 (videos only before then, from September 1, 2023). A disclaimer that the media is not authentic is not a defense. · Penal Code 21.165(b), (c-2), as amended by SB 441 and HB 449

Person: Do not intentionally threaten to produce or distribute sexually explicit deep fake media to coerce, extort, harass or intimidate another person. Starts September 1, 2025 · Ongoing · Applies when: Any conduct on or after September 1, 2025. · Penal Code 21.165(b-1), as added by SB 441

Utah

57 items from 13 laws

Utah Abuse of Personal Identity Act, AI impersonation amendments (SB 271)

S.B. 271, 2025 General Session, effective May 7, 2025; Utah Code 45-3-2 to 45-3-5 and 45-3-7, as further amended by Chapter 489, Laws of Utah 2026 (S.B. 256). Enforced by: Private civil action by the individual whose personal identity was abused, or the right holder, against the person who caused the publication or, on the stated conditions, the publisher. No government enforcer is named in the chapter; it leaves room for criminal prosecution under Utah Code 76-12-304.. Checked November 14, 2026.

Person: Do not use content containing an individual's personal identity, including an AI-made simulation, for advertising, fundraising, soliciting donations or purchases without the individual's consent. Starts May 6, 2026 · Ongoing · Applies when: Any such use; since May 6, 2026 no endorsement or confusion element is required. A narrower version applied from May 7, 2025. · Utah Code 45-3-3(2)(a)

Person: Do not publish, perform, distribute, transmit or otherwise make available an individual's personal identity with actual knowledge that the use was not authorized. Starts May 6, 2026 · Ongoing · Applies when: Authorization comes from the living individual, a minor's legal guardian, or the right holders of an individual deceased up to 70 years. A clear and conspicuous disclosure that the content is a simulation or artificial recreation takes the use outside this rule. · Utah Code 45-3-3(2)(b), (5)

Person: Do not knowingly distribute, sell or license technology, software or a tool whose intended primary purpose is unauthorized creation or modification of content that includes an individual's personal identity. Starts May 7, 2025 · Ongoing · Applies when: Any distribution, sale or license; first added May 7, 2025 for commercial purposes and broadened May 6, 2026. · Utah Code 45-3-3(2)(c)

Person who published the advertisement or content: Take reasonable steps to ensure consent was obtained before publishing an advertisement or content whose face suggests the individual is unlikely to have consented. Starts May 7, 2025 · Ongoing · Applies when: On its face, a reasonable person would conclude the individual is unlikely to have consented to the use; a publisher that took no reasonable steps can be sued. · Utah Code 45-3-5(1)

Utah Artificial Intelligence Policy Act

Utah Code Title 13, Chapter 72 (Artificial Intelligence Policy Act), enacted by S.B. 149 (2024, Laws of Utah 2024, ch. 186) and amended by H.B. 320 (2026, ch. 127); the generative-AI disclosure duties originally at Utah Code 13-2-12 were repealed and replaced by Title 13, Chapter 75 (S.B. 226, 2025); chapter 72 repeal date July 1, 2027 (Utah Code 63I-2-213). Enforced by: Utah Division of Consumer Protection (Department of Commerce), with the Attorney General advising and representing the Division; a chapter 75 violation is a violation of Utah Code 13-11-4(1).. Checked November 11, 2026.

Supplier: If a person clearly and unambiguously asks whether they are dealing with AI, disclose that they are interacting with generative AI and not a human. When triggered · Each time it happens · Applies when: A supplier uses generative AI to interact with an individual in a consumer transaction and the individual asks or prompts about AI use. · Utah Code 13-75-103(1)

Individual providing services in a regulated occupation: Prominently disclose generative AI use in a high-risk AI interaction: verbally at the start of a verbal interaction and in writing before a written interaction begins. When triggered · Each time it happens · Applies when: Generative AI is used in a high-risk AI interaction while providing regulated-occupation services, on and after May 7, 2025. · Utah Code 13-75-103(2)(a), (3)

Any person using generative AI: Generative AI's involvement is no defense: a person remains liable under Division of Consumer Protection statutes for statements or acts made by or through generative AI. Starts May 7, 2025 · Ongoing · Applies when: Any consumer-protection violation committed with generative AI, on and after May 7, 2025. · Utah Code 13-75-102

Participant: Follow the regulatory mitigation agreement's scope limits, safeguards, consumer disclosures and reporting; cooperate with Office audits; initial demonstration period of at most 12 months, with up to two 12-month extensions. When triggered · Ongoing · Applies when: Only while admitted to the AI Learning Laboratory. · Utah Code 13-72-401(4), (6), (7); 13-72-403(1), (2), (4)

Office of Artificial Intelligence Policy: Report annually, before November 30, to the Business and Labor Interim Committee on the Learning Laboratory and regulatory mitigation and joint interpretation agreements. When triggered · Every year · Applies when: Each year while chapter 72 is in force. · Utah Code 13-72-201(3)(d)

Utah HB 276 (2026): Digital Content Provenance Standards Act and Digital Voyeurism Prevention Act

H.B. 276, 2026 General Session (Laws of Utah 2026, Chapter 352); enacts Utah Code Title 13, Chapter 72b (13-72b-101 to 13-72b-401) and Chapter 72c (13-72c-101 to 13-72c-301) and 63A-16-215; amends 13-2-1. Enforced by: Utah Division of Consumer Protection for Chapter 72c; the attorney general may sue on the division's behalf to collect a civil penalty. Chapter 72b is enforced by private lawsuits only.. Checked November 12, 2026.

Large online platform: Detect whether compliant system provenance data is embedded in or attached to content distributed on the platform. Starts January 1, 2027 · Ongoing · Applies when: A platform meets the large online platform definition. · Utah Code 13-72c-201(1)(a)

Large online platform: Provide a user interface that discloses when system provenance data is available and lets users easily inspect it, by interface, download or link. Starts January 1, 2027 · Ongoing · Applies when: A platform meets the large online platform definition. · Utah Code 13-72c-201(1)(b), (c)

Large online platform: Do not knowingly strip compliant system provenance data or digital signatures from content received or distributed, to the extent technically feasible. Starts January 1, 2027 · Ongoing · Applies when: A platform meets the large online platform definition. · Utah Code 13-72c-201(2)

Capture device manufacturer: Include a latent disclosure in captured content conveying the manufacturer's name or sufficient digital signatures, and the time and date of creation or alteration. Starts January 1, 2028 · Ongoing · Applies when: Capture devices produced for sale in Utah on or after January 1, 2028, to the extent technically feasible and compliant with widely adopted specifications; the manufacturer may let users disable the disclosure. · Utah Code 13-72c-202(1)-(4)

Covered provider: Include a latent disclosure in image, video or audio content the generative AI system creates or substantially modifies, conveying time and date and provenance signatures, consistent with industry standards. Starts January 1, 2027 · Ongoing · Applies when: A generative AI system with over 1,000,000 monthly visitors or users that is publicly accessible in Utah, to the extent technically feasible and reasonable; the information may be conveyed through a link to a permanent website. · Utah Code 13-72c-203

Generation service: Do not distribute a counterfeit intimate image of an identifiable individual without first obtaining that individual's consent. Starts January 1, 2027 · Ongoing · Applies when: An interactive computer service lets users generate intimate images with AI and distributes the results. · Utah Code 13-72b-201(1), (2)

Generation service: Run a consent system that requires affirmative consent before distribution, verifies the consenting person's identity with reasonable accuracy, and keeps consent records for at least seven years. Starts January 1, 2027 · Ongoing · Applies when: A generation service distributes intimate images of identifiable individuals. · Utah Code 13-72b-201(3)

Generation service: Do not require personal information beyond what is reasonably necessary to verify identity and obtain valid consent. Starts January 1, 2027 · Ongoing · Applies when: A generation service operates a consent system. · Utah Code 13-72b-201(4)

Generation service: Tell users that non-consensual distribution is prohibited and may create civil liability, provide reporting procedures, and publish the written policy and a general description of safeguards. Starts January 1, 2027 · Ongoing · Applies when: A generation service offers image generation to users. · Utah Code 13-72b-205

Covered platform: Establish notice and removal procedures meeting the federal Take It Down Act, with a clearly noticed reporting mechanism. Starts January 1, 2027 · Ongoing · Applies when: A platform is a covered platform under section 3 of the Take It Down Act. · Utah Code 13-72b-302(1), (2)(a), (b)

Covered platform: Remove a reported counterfeit intimate image within 48 hours of a compliant notice and make reasonable efforts to find and remove identical copies. When triggered · Each time it happens · Applies when: A depicted individual gives a compliant notice of non-consensual publication. · Utah Code 13-72b-302(2)(c), (d); 13-72b-301

Utah apparent child sexual abuse material law (H.B. 289, 2026)

H.B. 289, Child Sexual Abuse Material Amendments, 2026 General Session (Laws of Utah 2026, Chapter 358); enacts Utah Code 76-5b-207 to 76-5b-209; amends 76-5b-103, 76-5b-206, 76-5b-301 and related sections. Enforced by: Criminal prosecution; the Attorney General's Internet Crimes Against Children unit is assigned cases involving apparent and obscene child sexual abuse material. A web search on November 15, 2026 found no lawsuit or court order blocking this law.. Checked November 15, 2026.

Actor (any person): Do not intentionally or knowingly possess, view, or access with intent to view apparent child sexual abuse material, including AI-generated depictions of realistic minors. Starts May 6, 2026 · Ongoing · Applies when: Always; proof that a real minor exists is not required. · Utah Code 76-5b-207(2), (6)

Actor (any person): Do not intentionally distribute or produce apparent child sexual abuse material. Starts May 6, 2026 · Ongoing · Applies when: Always; proof that a real minor exists is not required. · Utah Code 76-5b-208(2), (5)

Actor (any person): Do not intentionally or knowingly produce, distribute or receive obscene child sexual abuse material, or possess it with intent to distribute. Starts May 6, 2026 · Ongoing · Applies when: Conduct that is not already an offense under Utah Code 76-5b-201 or 76-5b-201.1. · Utah Code 76-5b-209(2)

Computer technician: Immediately report to law enforcement, the NCMEC CyberTipline or an employer designee any image seen at work believed to be child sexual abuse material, including apparent or obscene material. When triggered · Each time it happens · Applies when: The technician views the image in the course of paid employment. · Utah Code 76-5b-206(2)

Employer-designated employee: Immediately forward a technician's report to a law enforcement agency. When triggered · Each time it happens · Applies when: The employer requires technicians to report to a designated employee. · Utah Code 76-5b-206(7)

Utah autonomous vehicle law (H.B. 101, 2019)

H.B. 101, Autonomous Vehicle Regulations, 2019 General Session (Laws of Utah 2019, ch. 459); enacts Utah Code 41-26-102.1 to 41-26-108; amends 13-51-102, 13-51-103, 41-1a-102, 41-1a-201, 41-1a-202, 41-1a-1503, 41-6a-102, 41-6a-1641, 53-3-102, 53-3-104, 53-3-202. Enforced by: The division named in 41-26-103(4) may revoke an ADS vehicle's registration and operating privilege when the Department of Transportation or the Department of Public Safety finds it is operating unsafely. A web search on November 15, 2026 found no court challenge to this law.. Checked November 15, 2026.

Owner: Operate a level three ADS vehicle only if it obeys traffic and safety laws, has required federal certification, and on system failure reaches a minimal risk condition or requests intervention. Starts May 14, 2019 · Ongoing · Applies when: A vehicle with a level three ADS is operated on a Utah highway; it must also be titled and registered under 41-26-107. · Utah Code 41-26-103(1)

Owner: Operate a level four or five ADS vehicle driverless only if it can obey traffic laws, has any required federal certification, and reaches a minimal risk condition on system failure. Starts May 14, 2019 · Ongoing · Applies when: Driverless operation on a Utah highway; the vehicle must also be titled and registered under 41-26-107. · Utah Code 41-26-103(2)

Owner: Before an ADS operates the vehicle on a Utah highway, ensure the vehicle complies with the Financial Responsibility of Motor Vehicle Owners and Operators Act (Title 41, Chapter 12a). Starts May 14, 2019 · Ongoing · Applies when: Any ADS-equipped vehicle operated by its ADS on a Utah highway. · Utah Code 41-26-107(3)

Owner: Register and title the ADS-equipped vehicle under Title 41, Chapter 1a. Starts May 14, 2019 · Once · Applies when: The owner is a Utah resident. · Utah Code 41-26-107(1), (2)

Owner: After a crash with the ADS engaged, keep the vehicle at the scene where 41-6a-401 requires, consistent with a minimal risk condition; report the crash under Chapter 6a, Part 4. When triggered · Each time it happens · Applies when: A crash or collision involving a vehicle with its ADS engaged. · Utah Code 41-26-105(1)

Owner: If absent at the crash, immediately make registration card contents and the insurer's name and agent phone number available to persons involved, or a peace officer on request. When triggered · Each time it happens · Applies when: A crash with the ADS engaged when neither the owner nor someone acting for the owner is in the vehicle. · Utah Code 41-26-105(2)

On-demand autonomous vehicle network: Operate only under the state laws for for-hire ground transportation, such as the Transportation Network Company Registration Act, public transit district or private passenger carrier laws. Starts May 14, 2019 · Ongoing · Applies when: A network dispatching level four or five ADS vehicles in driverless operation. · Utah Code 41-26-106(1)

Utah counterfeit intimate image law, generated-image definition (S.B. 66, 2024)

S.B. 66, Criminal Offense Amendments, 2024 General Session; amends Utah Code 76-5b-205. Enforced by: Criminal prosecution (the section does not name the prosecutor). A web search on November 14, 2026 found no report of a court order blocking this section; court dockets were not searched.. Checked November 14, 2026.

Person: Do not knowingly distribute a counterfeit intimate image of someone without their consent when you should know it would cause a reasonable person distress or harm. Starts May 1, 2024 · Ongoing · Applies when: The image was created or provided by the actor without the depicted person's knowledge and consent. · Utah Code 76-5b-205(2)(a)

Person 18 or older: Do not distribute a counterfeit intimate image depicting a child; this is aggravated unlawful distribution. Starts May 1, 2024 · Ongoing · Applies when: The base offense is committed and the person depicted is under 18. · Utah Code 76-5b-205(2)(b)

Hosting company: Immediately remove a counterfeit intimate image on notice from law enforcement, a prosecutor or the person depicted, to keep the hosting-company exclusion. When triggered · Each time it happens · Applies when: The company stores or caches the image and receives such a notice. · Utah Code 76-5b-205(5)(b)

Utah generative AI consumer disclosure law (S.B. 226, 2025)

S.B. 226, Artificial Intelligence Consumer Protection Amendments, 2025 General Session (Laws of Utah 2025, Chapter 465); enacted as Utah Code 13-75-101 to 13-75-106 and now codified as Utah Code 13-77-101 to 13-77-106; amends 63I-2-213; repeals 13-2-12. Enforced by: Utah Division of Consumer Protection, with the attorney general as its counsel. A violation of the chapter is also a violation of Utah Code 13-11-4(1). No court order blocking the law was found.. Checked November 15, 2026.

Supplier: Disclose that the individual is interacting with generative AI and not a human when the individual clearly and unambiguously asks whether AI is being used. Starts May 7, 2025 · Each time it happens · Applies when: The supplier uses generative AI to interact with an individual in connection with a consumer transaction. · Utah Code 13-77-103(1)

Individual providing services in a regulated occupation: Prominently disclose that the person receiving services is interacting with generative AI: verbally at the start of a verbal interaction, in writing before a written one. Starts May 7, 2025 · Each time it happens · Applies when: Generative AI is used in providing regulated services and the use is a high-risk AI interaction. · Utah Code 13-77-103(2)(a), (3)

Individual providing services in a regulated occupation: Comply with all requirements of the regulated occupation when providing services through generative AI. Starts May 7, 2025 · Ongoing · Applies when: Services in a regulated occupation are provided through generative AI. · Utah Code 13-77-103(2)(b)

Utah identity protection and AI defamation law (S.B. 256, 2026)

S.B. 256, Identity Protection Modifications, 2026 General Session (Laws of Utah 2026, Chapter 489); enacts Utah Code 45-2-3.5 and 45-2-14; amends 45-3-2 to 45-3-7 (Abuse of Personal Identity Act). Enforced by: Private lawsuits by the individual or a right holder; no state agency is named. The chapter does not bar criminal prosecution under Utah Code 76-12-304. No court order blocking the law was found.. Checked November 15, 2026.

Person: Do not use content containing an individual's likeness, voice or other personal identity for advertising, fundraising, soliciting donations or promoting purchases without the individual's consent. Starts May 6, 2026 · Ongoing · Applies when: Content with an individual's personal identity, including an AI simulation or recreation, is used for a commercial or fundraising purpose; the right lasts until 70 years after death. · Utah Code 45-3-3(1), (2)(a)

Person: Do not publish, distribute, transmit or make available an individual's personal identity knowing the use was unauthorized, unless clearly and conspicuously disclosed as a simulation or artificial recreation. Starts May 6, 2026 · Ongoing · Applies when: The person has actual knowledge the use was not authorized by the living individual, a minor's guardian, or, for up to 70 years after death, the successors. · Utah Code 45-3-3(2)(b), (5)

Person: Do not knowingly distribute, sell or license technology, software or a tool whose intended primary purpose is unauthorized creation or modification of content including an individual's personal identity. Starts May 6, 2026 · Ongoing · Applies when: Any distribution, sale or licensing of such a tool on or after May 6, 2026. · Utah Code 45-3-3(2)(c)

Publisher: Take reasonable steps to ensure consent was obtained before publishing content that, on its face, a reasonable person would conclude the individual was unlikely to consent to. Starts May 6, 2026 · Each time it happens · Applies when: The publisher publishes an advertisement or content using an individual's personal identity. · Utah Code 45-3-5(1)

Utah intimate image distribution law, computer-generated images (H.B. 148, 2024)

H.B. 148, Artificial Pornographic Images Amendments, 2024 General Session; amends Utah Code 76-5b-103, 76-5b-203, 76-5b-204, 76-5b-205. Enforced by: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no court challenge to this section.. Checked November 15, 2026.

Person: Do not distribute, duplicate or copy an intimate image, including a computer-generated one, of an adult without consent when you know or should know it would cause distress or harm. Starts May 1, 2024 · Ongoing · Applies when: The image was created or provided under a reasonable expectation of privacy and the person depicted suffers actual distress or harm (not required in limited cases under (2)(b)). · Utah Code 76-5b-203(2)

Utah mental health chatbot law (HB 452)

H.B. 452, 2025 General Session (Laws of Utah 2025, Chapter 269); enacts Utah Code Title 13, Chapter 72a (13-72a-101 to 13-72a-301) and 58-60-118; amends 13-2-1. Enforced by: Utah Division of Consumer Protection.. Checked November 12, 2026.

Supplier: Do not sell or share with any third party a Utah user's individually identifiable health information or user input. Starts May 7, 2025 · Ongoing · Applies when: A supplier offers a mental health chatbot to Utah users; narrow exceptions apply to health information only. · Utah Code 13-72a-201(1), (2)

Supplier: When sharing health information needed for the chatbot to function, comply with the HIPAA privacy and security rules as if a covered entity dealing with a business associate. When triggered · Ongoing · Applies when: The supplier shares individually identifiable health information with a contractor to ensure the chatbot functions effectively. · Utah Code 13-72a-201(3)

Supplier: Do not advertise a product or service in a chatbot conversation unless the chatbot clearly identifies the advertisement and discloses any sponsorship, affiliation or promotion agreement. Starts May 7, 2025 · Ongoing · Applies when: A mental health chatbot is used to advertise a specific product or service to a Utah user. · Utah Code 13-72a-202(1)

Supplier: Do not use a Utah user's input to decide whether to show an advertisement, to choose what to advertise, or to customize how an advertisement is presented. Starts May 7, 2025 · Ongoing · Applies when: Any advertising to a Utah user, except an advertisement for the mental health chatbot itself. · Utah Code 13-72a-202(2)

Supplier: Cause the chatbot to clearly and conspicuously disclose that it is AI technology and not a human before the user may access its features. Starts May 7, 2025 · Ongoing · Applies when: A Utah user first accesses the mental health chatbot. · Utah Code 13-72a-203(1), (2)(a)

Supplier: Repeat the AI disclosure at the start of any interaction after seven days without access, and whenever the user asks whether AI is being used. When triggered · Each time it happens · Applies when: The user has not accessed the chatbot in the previous seven days, or asks or prompts the chatbot about AI use. · Utah Code 13-72a-203(2)(b), (c)

Utah sexual extortion law, counterfeit intimate images (H.B. 13, 2025)

H.B. 13, Sexual Extortion Amendments, 2025 General Session; amends Utah Code 76-5b-204. Enforced by: Criminal prosecution (the section does not name the prosecutor). A web search on November 14, 2026 found no report of a court order blocking this section; court dockets were not searched.. Checked November 14, 2026.

Person: Do not threaten to distribute an intimate or counterfeit intimate image of someone to coerce sexual contact or sexual images, or to obtain anything of value. Starts May 7, 2025 · Ongoing · Applies when: The actor acts with the intent to coerce, or knowingly causes the victim to act, or seeks a thing of value or to compel an act against the victim's will. · Utah Code 76-5b-204(2)(a)(i)(B), (2)(b), (2)(c)(i)

Person: Do not refuse, for coercion or gain, to delete an intimate or counterfeit intimate image, or remove it from an account you manage, after the victim asks. Starts May 6, 2026 · Each time it happens · Applies when: The victim, or a third party acting at the victim's direction, requests deletion or removal, and the actor has the coercive or thing-of-value intent. · Utah Code 76-5b-204(2)(a)(ii), (2)(c)(ii)

Utah social media liability for minors' excessive use of algorithmic feeds (H.B. 464, 2024)

H.B. 464, Social Media Amendments, 2024 General Session (Laws of Utah 2024, ch. 224); enacts Utah Code 78B-3-1101 to 78B-3-1106, amends 76-9-201, repeals Title 13, Chapter 63. Enforced by: Private lawsuits by a Utah minor account holder or the minor's parent or guardian; no government enforcer is named in Part 11. Court status: a September 10, 2024 federal preliminary injunction (NetChoice v. Reyes, D. Utah No. 2:23-cv-00911) covers the separate Utah Minor Protection in Social Media Act (Utah Code 13-71); a lead copy of that order does not mention H.B. 464 or Part 11, and no order blocking Part 11 was found on November 14, 2026.. Checked November 14, 2026.

Social media company: Liable to a Utah minor account holder or their parent for a diagnosed adverse mental health outcome caused by the minor's excessive use of an algorithmically curated service. Starts October 1, 2024 · Ongoing · Applies when: The company operates an algorithmically curated social media service used by a Utah minor account holder. Causation is presumed unless the company meets the 78B-3-1104 defense. · Utah Code 78B-3-1103(1)-(3)

Social media company (optional safe harbor): To use the affirmative defense: cap Utah minors at three hours per 24 hours, block access 10:30 p.m. to 6:30 a.m., require parental consent, and disable engagement-driven design elements. Starts October 1, 2024 · Ongoing · Applies when: Voluntary. A company that shows the court it does all four shifts the causation presumptions in its favor; device-level settings may be used, but the company stays responsible. · Utah Code 78B-3-1104(1)-(3); 78B-3-1103(4)

Social media company: Do not rely on terms of service, arbitration or choice-of-law clauses that waive or limit these rights; such waivers are void and unenforceable. Starts October 1, 2024 · Ongoing · Applies when: Any contract with a Utah minor account holder or parent. · Utah Code 78B-3-1105

Utah synthetic media disclosure in political communications law (S.B. 131, 2024)

S.B. 131, 2024 General Session (Laws of Utah 2024, ch. 172); enacts Utah Code 20A-11-1104 and 76-3-203.18. Enforced by: A person bringing a civil action to enforce the section against a creator or sponsor; the court may impose the civil penalty. No state agency is named. A web search on November 14, 2026 found no report of a court order blocking this law; court dockets were not searched.. Checked November 14, 2026.

Payer of a political audio communication: Include the audible words "Contains content generated by AI" at the beginning and at the end of the communication. Starts May 1, 2024 · Each time it happens · Applies when: A covered audio communication contains synthetic audio media. · Utah Code 20A-11-1104(3)

Payer of a political visual communication: Display the matching AI-generated notice in legible writing throughout each portion of the communication that contains synthetic media. Starts May 1, 2024 · Each time it happens · Applies when: A covered visual communication contains synthetic media. The words vary by content: "This video content generated by AI", "This image generated by AI", "This audio content generated by AI" or "This content generated by AI". · Utah Code 20A-11-1104(4)

Creator or sponsor: Ensure an online political communication carries embedded tamper-evident digital content provenance disclosing its initial author and creator, later editors, and any use of generative AI. Starts May 1, 2024 · Each time it happens · Applies when: The creator or sponsor publishes online a covered digital audio or visual communication that is viewable, audible or accessible in Utah. This is in addition to the audio and visual notices. · Utah Code 20A-11-1104(5)

Vermont

31 items from 7 laws

Vermont AI in mental health services law (Act 156, H.816)

2026 Acts and Resolves No. 156 (H.816), signed June 17, 2026; adds 18 V.S.A. § 7115; amends 3 V.S.A. § 129a(a), 26 V.S.A. § 1354(a) and 3 V.S.A. § 5023(b)(1). Enforced by: Vermont Attorney General, with the same authority as under the Consumer Protection Act, because a violation by a corporation or entity is deemed a violation of that Act. Private parties have the same rights and remedies as under that Act. Licensing authorities may treat prohibited AI use by a mental health professional as unprofessional conduct. No court order blocking the act was looked for in this review.. Checked November 12, 2026.

Corporation or entity: Do not provide, advertise or otherwise offer mental health services to the public, including through AI, unless provided by a mental health professional or within an approved study. Starts June 17, 2026 · Ongoing · Applies when: Any offer of mental health services to the public. The study exception covers approved institutional review board or privacy board studies under 45 C.F.R. § 164.512(i)(1)(i)(A) and (B). · 18 V.S.A. § 7115(b)

Mental health professional: Do not engage in the prohibited use of artificial intelligence under 18 V.S.A. § 7115; doing so is unprofessional conduct. Starts June 17, 2026 · Ongoing · Applies when: Added to the unprofessional conduct lists in 3 V.S.A. § 129a(a) (licensees generally) and 26 V.S.A. § 1354(a) (a licensing board's list). · 3 V.S.A. § 129a(a)(30); 26 V.S.A. § 1354(a)(3) (Act 156, Secs. 2, 4)

Mental health professional: When using AI tools, stay within scope of practice, use tools that comply with HIPAA, and review and approve any mental health services. Starts June 17, 2026 · Ongoing · Applies when: A mental health professional relies on the allowance for professional AI use. Covered FDA products must be prescribed or recommended by a mental health professional. · 18 V.S.A. § 7115(d)

Vermont Age-Appropriate Design Code Act (S.69, Act 63 of 2025): algorithm provisions

S.69, Act No. 63 of 2025 (2025-2026 Session); 9 V.S.A. chapter 62, subchapter 6, §§ 2449a-2449j. Enforced by: Vermont Attorney General. A violation of the subchapter or its rules is an unfair and deceptive act in commerce under 9 V.S.A. § 2453, and the Attorney General has its chapter 63 powers to make rules, investigate, sue and accept assurances of discontinuance. No court order blocking the law was found.. Checked November 15, 2026.

Covered business: Prominently and clearly state on your website or app the purpose of each algorithmic recommendation system you use. Starts January 1, 2027 · Ongoing · Applies when: The covered business uses one or more algorithmic recommendation systems. · 9 V.S.A. § 2449e(2)

Covered business: Disclose each input your algorithmic recommendation system uses and how each is measured, uses covered minors' personal data, influences recommendations, and is weighed against other inputs. Starts January 1, 2027 · Ongoing · Applies when: The covered business uses one or more algorithmic recommendation systems. · 9 V.S.A. § 2449e(3)(A)-(D)

Covered business: Do not use a covered minor's personal data to select, recommend or prioritize media for them, except their express requests, user-selected privacy or accessibility settings, or search queries. Starts January 1, 2027 · Ongoing · Applies when: Allowed requests are for a specific account, feed or user, a category of media, or more or less similar media. A search query may be used only to answer that search. · 9 V.S.A. § 2449f(a)(4)(A)-(C)

Vermont Automated Vehicle Testing Act (Act 60 of 2019, S.149)

2019 Acts and Resolves No. 60 (S.149), Secs. 16-18, signed June 14, 2019; adds 23 V.S.A. chapter 41, §§ 4201-4203, and amends 19 V.S.A. § 1(24). Enforced by: The Traffic Committee approves, suspends or revokes permits after a hearing; law enforcement officers may void a permit for a trip. No lawsuit challenging the law was found in this review.. Checked November 15, 2026.

Automated vehicle tester: Do not test an automated vehicle on public highways until the Traffic Committee approves a permit application defining the test scope and operational design domain. Starts July 1, 2019 · Once · Applies when: Before any public-road testing, and again before changing the design domain or permit conditions. · 23 V.S.A. § 4203(a), (e)

Automated vehicle tester: Register each test vehicle and keep liability insurance, self-insurance or a surety bond of at least $5 million. Starts July 1, 2019 · Ongoing · Applies when: While testing under a permit. · 23 V.S.A. § 4203(h)(2)(A)-(B)

Automated vehicle tester: Keep a zero-tolerance drug and alcohol policy, run background checks on all operators, and follow NHTSA testing standards or hold exemptions. Starts July 1, 2019 · Ongoing · Applies when: While testing under a permit. · 23 V.S.A. § 4203(h)(2)(C)-(D), (h)(3)(A)

Operator: Sit in the driver's seat, monitor the vehicle and be able to take immediate manual control during testing. Starts July 1, 2019 · Ongoing · Applies when: Every test drive on a public highway. · 23 V.S.A. § 4203(h)(1)

Automated vehicle tester and operator: Report any crash involving personal injury or property damage to the Agency of Transportation and the law enforcement agency within 72 hours. When triggered · Each time it happens · Applies when: A crash involving a test vehicle. · 23 V.S.A. § 4203(h)(3)(B)

Automated vehicle tester: Report annually to the Traffic Committee on safety, traffic operations, roadway interaction and public comments until testing ends. Starts July 1, 2019 · Every year · Applies when: Each year testing continues. · 23 V.S.A. § 4203(g)

Automated vehicle tester: Make test vehicles clearly identifiable to the public and capable of complying with traffic and motor vehicle laws. Starts July 1, 2019 · Ongoing · Applies when: Every test vehicle. · 23 V.S.A. § 4203(l), (n)

Operator: Do not operate or be in actual physical control of a test vehicle with a blood alcohol concentration of 0.02 or more. Starts July 1, 2019 · Ongoing · Applies when: Every test drive. · 23 V.S.A. § 4203(m)

Vermont consumer data privacy act (Act 145 of 2026, S.71): profiling and automated decision provisions

Act 145 of 2026 (S.71), An act relating to consumer data privacy and online surveillance, signed June 16, 2026; adds 9 V.S.A. §§ 2415a-2415k. Enforced by: Vermont Attorney General. A violation is deemed a violation of the Vermont Consumer Protection Act, and the Attorney General has that chapter's enforcement authority. The Attorney General must also publish and update compliance guidance.. Checked November 14, 2026.

Controller: Let a consumer opt out of the processing of personal data for profiling in furtherance of any automated decision that produces a legal or similarly significant effect. Starts January 1, 2028 · Ongoing · Applies when: A consumer asks. Opt-out requests need not be authenticated but may be denied, with notice, if believed fraudulent. · 9 V.S.A. § 2415d(a)(5)(C), (c)(4)

Controller: On request, confirm whether the consumer's personal data is profiled for a decision that produces a legal or similarly significant effect. Starts January 1, 2028 · Ongoing · Applies when: A consumer uses the right to confirm processing and access personal data. · 9 V.S.A. § 2415d(a)(1)

Controller: If feasible, let the consumer question the result, learn the reason for the decision, review the personal data used and, for housing decisions, correct data and obtain reevaluation. Starts January 1, 2028 · Ongoing · Applies when: The controller engages in profiling in furtherance of an automated decision that produces a legal or similarly significant effect. · 9 V.S.A. § 2415d(a)(6)

Controller: Respond to a consumer rights request within 45 days, with one 45-day extension on notice, and answer any appeal in writing within 60 days. When triggered · Each time it happens · Applies when: A consumer makes a request or appeals a refusal. If an appeal is denied, the controller must give a way to contact the Attorney General. · 9 V.S.A. § 2415d(c)(1), (c)(2), (d)

Controller: Conduct and document a data protection assessment for processing that presents a heightened risk of harm, including profiling with the listed foreseeable risks. Starts January 1, 2028 · Ongoing · Applies when: Profiling presents a reasonably foreseeable risk of unfair or deceptive treatment, unlawful disparate impact, financial, physical or reputational injury, intrusion upon seclusion or other substantial injury. Applies to processing created or generated after January 1, 2028. · 9 V.S.A. § 2415g(a)(3), (e)(3)

Controller: Conduct an impact assessment covering purpose and use cases, risks and mitigation, input data and outputs, customization data, performance metrics and limits, transparency measures, and post-deployment monitoring. Starts January 1, 2028 · Ongoing · Applies when: The controller engages in profiling for decisions that produce a legal or similarly significant effect. Elements are required to the extent reasonably known or available. · 9 V.S.A. § 2415g(c)

Controller: Disclose relevant data protection and impact assessments to the Attorney General when required. When triggered · Each time it happens · Applies when: The Attorney General requires disclosure. Assessments are confidential and exempt from the Public Records Act. · 9 V.S.A. § 2415g(d)

Controller: State in the privacy notice whether it collects, uses or sells personal data for the purpose of training large language models. Starts January 1, 2028 · Ongoing · Applies when: The controller provides the privacy notice required by the subchapter. · 9 V.S.A. § 2415e(c)(1)(H)

Processor: Give the controller the information it needs to conduct and document data protection assessments and impact assessments. Starts January 1, 2028 · Ongoing · Applies when: Processing personal data on a controller's behalf. · 9 V.S.A. § 2415f(a)

Vermont data broker law update with GenAI disclosure (Act 138, H.211)

2026 Acts and Resolves No. 138 (H.211), signed June 16, 2026; amends 9 V.S.A. chapter 62 (including §§ 2430, 2431, 2436 and 2446) and adds 9 V.S.A. § 2444a. Enforced by: Vermont Attorney General, who may sue in the Civil Division to collect penalties and seek injunctions; a violation of § 2446 is also an unfair and deceptive act under 9 V.S.A. § 2453. No lawsuit challenging the act was found in this review.. Checked November 15, 2026.

Data broker: Register with the Secretary of State within 30 days after becoming a data broker and annually by July 1, paying a $900 fee and filing a $20,000 surety bond. Starts January 1, 2027 · Every year · Applies when: Any business meeting the data broker definition. · 9 V.S.A. § 2446(a)(1)-(3)

Data broker: In the registration, state whether in the past year it shared or sold brokered personal information to a developer of a GenAI system or model. Starts January 1, 2027 · Every year · Applies when: Part of the sensitive-data and data-sharing disclosures each registration must contain. · 9 V.S.A. § 2446(a)(4)(E)(ii)(V)

Data broker: In the registration, give opt-out details, a deletion and opt-out page URL, minors' data practices if known, sensitive data collected, and copies of the bond and privacy policy. Starts January 1, 2027 · Every year · Applies when: Each registration, alongside the GenAI disclosure. · 9 V.S.A. § 2446(a)(4)

Vermont digitally altered intimate images law (Act 161, H.878)

2024 Acts and Resolves No. 161 (H.878), Sec. 45, signed June 6, 2024; amends 13 V.S.A. § 2606. Enforced by: Criminal prosecution by the State; the section does not name a prosecuting office. A person depicted may also sue. No lawsuit challenging the law was found in this review.. Checked November 15, 2026.

Person: Do not knowingly disclose a nude or sexual image of an identifiable person, including a digitally altered one, without consent, intending to harm, harass, intimidate, threaten or coerce. Starts June 6, 2024 · Ongoing · Applies when: The disclosure would cause a reasonable person harm. Consent to making the image is not consent to disclose it. · 13 V.S.A. § 2606(b)(1)

Website, online service or app operator: Do not solicit or accept a fee or other consideration to remove or stop posting such an image when the person depicted asks. Starts June 6, 2024 · Each time it happens · Applies when: The operator's site, service or app contains an image covered by the section. · 13 V.S.A. § 2606(c)

Vermont synthetic media in elections law (Act 75, S.23)

2026 Acts and Resolves No. 75 (S.23), signed March 5, 2026; adds 17 V.S.A. §§ 2031-2033 and 2041-2042. Enforced by: Vermont Attorney General or a State's Attorney, who may bring any appropriate action or injunction and run civil investigations. A depicted candidate may seek an injunction. A federal court has barred enforcement against one creator, Henry L. Poitras, over one video only (Poitras v. Clark, D. Vt., Sept. 4, 2026); the law otherwise remains enforceable.. Checked November 15, 2026.

Person: Within 90 days before a Vermont election, do not publish or distribute known deceptive and fraudulent synthetic media without the statutory disclosure that it was digitally manipulated or generated. Starts March 5, 2026 · Each time it happens · Applies when: The media appears realistic to a reasonable person and depicts a candidate or someone giving voters materially false information. Exemptions in § 2032(b) apply. · 17 V.S.A. § 2032(a)Blocked in court for Henry L. Poitras (Planet Hank), only for his June 7, 2026 video. A federal preliminary injunction bars the Attorney General from enforcing a civil investigative demand or taking further Act 75 action against Poitras over that video; the court did not rule on the law itself. Poitras v. Clark, No. 2:26-cv-00234-wks (D. Vt.), Sep 4, 2026

Person: For images and video, show the disclosure as text readable by the average viewer, accessible to people with disabilities where possible, and, for video, for the full duration. Starts March 5, 2026 · Each time it happens · Applies when: Visual synthetic media covered by § 2032(a). · 17 V.S.A. § 2032(a)(1)

Person: For audio-only media, speak the disclosure clearly at the beginning and end, and at least every two minutes if the audio runs longer. Starts March 5, 2026 · Each time it happens · Applies when: Audio synthetic media covered by § 2032(a). · 17 V.S.A. § 2032(a)(2)

Virginia

16 items from 5 laws

Virginia child pornography definition reaching depictions of minors who need not exist (SB 731, 2024)

SB 731 (2024 Session); amends Va. Code § 18.2-374.1 (codified history ends 2024, c. 262). Enforced by: Criminal prosecution (the section does not name the prosecutor). A web search on November 15, 2026 found no lawsuit challenging this section and no court order blocking it; court dockets were not searched.. Checked November 15, 2026.

Person: Do not produce or make, or attempt or prepare to produce or make, child pornography, including obscene depictions of minors who need not actually exist, such as computer-generated images. Starts July 1, 2024 · Ongoing · Applies when: Any production on or after the law took effect. · Va. Code § 18.2-374.1(A), (B)(2)

Person: Do not knowingly take part in filming, photographing or otherwise producing child pornography by any means. Starts July 1, 2024 · Ongoing · Applies when: Any participation in production on or after the law took effect. · Va. Code § 18.2-374.1(B)(3)

Person: Do not knowingly finance, or attempt or prepare to finance, child pornography. Starts July 1, 2024 · Ongoing · Applies when: Any financing on or after the law took effect. · Va. Code § 18.2-374.1(B)(4)

Person: Do not accost, entice or solicit a person under 18 with intent to induce or force them to perform in or be a subject of child pornography. Starts July 1, 2024 · Ongoing · Applies when: Any solicitation of a minor. · Va. Code § 18.2-374.1(B)(1)

Virginia patient access to intelligent personal assistants law (HB 2154, 2021)

HB 2154, Acts of Assembly 2021, Special Session I, ch. 219; Code of Virginia 32.1-127(B)(29); carried out for nursing facilities by 12VAC5-371-10 and 12VAC5-371-140(G). Enforced by: The law does not name one. Checked November 14, 2026.

Nursing facility: Establish and implement policies to ensure permissible access to and use of an intelligent personal assistant that a patient provides, while protecting health information under HIPAA. Starts November 11, 2021 · Ongoing · Applies when: A patient receiving inpatient services provides their own intelligent personal assistant. · 12VAC5-371-140(G); Code of Virginia 32.1-127(B)(29)

Hospital: Establish and implement policies to ensure permissible access to and use of a patient-provided intelligent personal assistant during inpatient services, protecting health information under HIPAA. When triggered · Ongoing · Applies when: As required by the Board's licensure regulations, which the statute says shall include this requirement. The hospital regulation was not opened. · Code of Virginia 32.1-127(B)(29)

Virginia personal delivery device (delivery robot) rules (SB 758, 2020)

SB 758 (2020 Session), 2020 Acts of Assembly, c. 1269; Va. Code §§ 46.2-100, 46.2-908.1:1 and 46.2-1015 (also amended §§ 46.2-904, 46.2-908.1 and 46.2-2101). Enforced by: The law does not name one. Checked November 15, 2026.

Personal delivery device operator: Maintain general liability insurance of at least $100,000 for damages from the combined operations of devices under your control. Starts July 1, 2020 · Ongoing · Applies when: The operator operates personal delivery devices in Virginia. · Va. Code § 46.2-908.1:1(E)

Personal delivery device operator: Ensure each device has a unique identifying device number and a clearly visible means of identifying the operator. Starts July 1, 2020 · Ongoing · Applies when: A personal delivery device is operated in Virginia (the text places this rule on the device). · Va. Code § 46.2-908.1:1(B)

Personal delivery device operator: Ensure devices do not block public rights-of-way, obey traffic and pedestrian signals and signs, go no faster than 10 mph on sidewalks and crosswalks, and brake to a controlled stop. Starts July 1, 2020 · Ongoing · Applies when: A personal delivery device is operated in Virginia (the text places these rules on the device). · Va. Code § 46.2-908.1:1(B)

Personal delivery device operator: Use roadways only where no sidewalk or crosswalk is available, only on the side of roads posted 25 mph or less, without unreasonably interfering with traffic. Starts July 1, 2020 · Ongoing · Applies when: A device travels on a roadway instead of a sidewalk or crosswalk. · Va. Code § 46.2-908.1:1(A)

Personal delivery device operator: Comply with the federal Hazardous Materials Transportation Act and its regulations when a device carries hazardous materials, including ammunition. When triggered · Each time it happens · Applies when: A device transports hazardous materials. · Va. Code § 46.2-908.1:1(C)

Personal delivery device operator: Equip devices used between sunset and sunrise with an approved white front headlight visible 500 feet and an approved red rear reflector visible 600 feet. Starts July 1, 2020 · Ongoing · Applies when: A device is in use between sunset and sunrise. · Va. Code § 46.2-1015(A)

Virginia public adjuster advertising: digital avatar disclosure (HB 437, 2026)

2026 Acts of Assembly, chapter 142 (HB 437); Code of Virginia § 38.2-1845.23 (false information and advertising generally), among other public adjuster sections. Enforced by: The law does not name one. Checked November 14, 2026.

Public adjuster: Disclose in the advertisement if a computer-generated digital avatar is used. When triggered · Each time it happens · Applies when: A written or electronic advertisement for public adjusting services. The sentence sits in the subsection on unlicensed spokespersons; whether it reaches advertisements without a spokesperson is not clear. · Va. Code § 38.2-1845.23(D)

Public adjuster: Disclose that an unlicensed spokesperson is a paid or unpaid spokesperson, is not licensed, and is endorsing the services of a public adjuster. When triggered · Each time it happens · Applies when: An unlicensed spokesperson is used in a written or electronic advertisement. · Va. Code § 38.2-1845.23(D)

Licensed public adjuster named in the advertisement: Personally review the advertisement and make sure it complies with the section and is fair, accurate and not untruthful, deceptive or misleading. When triggered · Each time it happens · Applies when: The adjuster's name and license number appear in an advertisement. · Va. Code § 38.2-1845.23(E)

Virginia unlawful dissemination of created or altered nude images (HB 2678, 2019)

HB 2678 (2019 Session); amends Va. Code § 18.2-386.2 (codified history: 2014, c. 399; 2019, cc. 490, 515; 2024, c. 697). Also enacted as SB1736. Enforced by: Criminal prosecution (the section does not name the prosecutor), plus civil suits by injured persons under § 8.01-40.4. A web search on November 14, 2026 found no report of a court order blocking this section; court dockets were not searched.. Checked November 14, 2026.

Person: Do not maliciously disseminate or sell a nude or sexual image of another person, including one created or altered from their likeness, to coerce, harass or intimidate. Starts July 1, 2019 · Ongoing · Applies when: The person knows or has reason to know they are not licensed or authorized to disseminate or sell the image. · Va. Code § 18.2-386.2(A)

Washington

44 items from 11 laws

Washington AI companion chatbot law (ESHB 2225)

Engrossed Substitute House Bill 2225 (2026 Regular Session), Laws of 2026, chapter 168; sections 1 to 6 form a new chapter in Title 19 RCW (chapter number not shown in the session law). Enforced by: Not named in the Act. A violation is an unfair or deceptive act in trade or commerce and an unfair method of competition under the Consumer Protection Act, chapter 19.86 RCW, which was not opened.. Checked November 12, 2026.

Operator: Clearly and conspicuously disclose that the AI companion chatbot is artificially generated and not human, at the beginning of the interaction and at least every three hours during continued interaction. Starts January 1, 2027 · Ongoing · Applies when: Any user interaction with an AI companion chatbot. · Laws of 2026, ch. 168, § 3(1), (2)

Operator: Implement reasonable measures to prevent the chatbot from claiming to be human, including when asked, and from generating output that refutes or conflicts with the disclosure. Starts January 1, 2027 · Ongoing · Applies when: Any AI companion chatbot. · Laws of 2026, ch. 168, § 3(3)

Operator: Give a clear and conspicuous notice that the chatbot is artificially generated and not human, at the beginning of the interaction and at least every hour during continuous interaction. Starts January 1, 2027 · Ongoing · Applies when: The operator knows the user is a minor, or the AI companion chatbot is directed to minors. · Laws of 2026, ch. 168, § 4(1)(a), (2)

Operator: Implement reasonable measures to prevent the chatbot from generating or producing sexually explicit content or suggestive dialogue with minors. Starts January 1, 2027 · Ongoing · Applies when: The operator knows the user is a minor, or the AI companion chatbot is directed to minors. · Laws of 2026, ch. 168, § 4(1)(b)

Operator: Implement reasonable measures to prohibit manipulative engagement techniques that prolong an emotional relationship, such as prompts to return, excessive praise, romantic bonding, simulated distress, promoting isolation or secrecy, soliciting purchases. Starts January 1, 2027 · Ongoing · Applies when: The operator knows the user is a minor, or the AI companion chatbot is directed to minors; eight techniques are listed. · Laws of 2026, ch. 168, § 4(1)(c)(i)-(viii)

Operator: Implement reasonable measures to prevent the chatbot from claiming to be human, including when asked, or contradicting the minor notice. Starts January 1, 2027 · Ongoing · Applies when: The operator knows the user is a minor, or the AI companion chatbot is directed to minors. · Laws of 2026, ch. 168, § 4(3)

Operator: Do not make available or deploy an AI companion chatbot without maintaining and implementing a protocol for detecting and addressing suicidal ideation or expressions of self-harm by users. Starts January 1, 2027 · Ongoing · Applies when: Any AI companion chatbot; the protocol must identify such expressions (including eating disorders), refer users to crisis resources and prevent content encouraging or describing self-harm. · Laws of 2026, ch. 168, § 5(1), (2)

Operator: Publicly disclose, on its website and within any app offering the companion, the protocol details and the number of crisis referral notifications issued in the preceding calendar year. Starts January 1, 2027 · Ongoing · Applies when: Any operator; no deadline or frequency is stated beyond the preceding calendar year. · Laws of 2026, ch. 168, § 5(3)

Washington AI content provenance law (E2SHB 1170)

Engrossed Second Substitute House Bill 1170; Chapter 167, Laws of 2026; sections 1 to 5 and 9 form a new chapter in Title 19 RCW and section 6 a new chapter in Title 42 RCW. Enforced by: Washington Attorney General, exclusively, for the provenance chapter (sections 1 to 5): the attorney general may sue in the name of the state or as parens patriae, and a violation is treated as an unfair or deceptive act under the Consumer Protection Act, chapter 19.86 RCW. Section 6 (government agency disclosure) names no enforcer.. Checked November 14, 2026.

Covered provider: To the extent commercially and technically reasonable, include provenance data in video, image or audio content your generative AI system creates or materially alters, so users can assess its origin. Starts February 1, 2027 · Ongoing · Applies when: Content created or materially altered by the covered provider's generative AI system on or after February 1, 2027. · Laws of 2026, ch. 167, § 2(1)

Covered provider: Use commercially and technically reasonable methods to make provenance data difficult to remove or tamper with; a commonly supported watermarking or metadata standard, such as C2PA, is considered compliant. Starts February 1, 2027 · Ongoing · Applies when: Whenever provenance data is included under section 2(1). · Laws of 2026, ch. 167, § 2(2)

Government agency: Disclose to each consumer, before or at the time of interaction, that they are interacting with an AI system; post it clearly and conspicuously, in plain language, without dark patterns. Starts February 1, 2027 · Ongoing · Applies when: A government agency makes available an AI system intended to interact with consumers; required even where the AI would be obvious to a reasonable consumer. A hyperlink to a separate page is allowed. · Laws of 2026, ch. 167, § 6(1)-(3)

Washington autonomous vehicle testing law (ESHB 2676)

ESHB 2676, Chapter 182, Laws of 2020; RCW 46.30.050 and 46.92.010. Enforced by: The department running the self-certification pilot program (the act says only 'the department'), which may not allow testing until required information is received.. Checked November 15, 2026.

Self-certifying entity: Carry an umbrella liability policy of at least $5 million per occurrence and keep proof on file with the department before testing autonomous vehicles on public roadways. Starts June 11, 2020 · Ongoing · Applies when: Before and during testing under the self-certification pilot program. · RCW 46.30.050(1)

Self-certifying entity: Before testing, give the department contact information, planned local jurisdictions, required vehicle identification numbers and proof of insurance; assign and display unique IDs for vehicles without VINs. Starts October 1, 2022 · Once · Applies when: No autonomous vehicle may be tested on a public roadway until the department has this information. · RCW 46.92.010(1), (2), (7)

Self-certifying entity: Report to the department reportable collisions and cited moving violations during testing, stating whether the automated system was operating, in a report due each February 1. Starts October 1, 2022 · Every year · Applies when: Covers the prior calendar year. Collision reports must include any loss of life, injury or property damage. · RCW 46.92.010(3)

Self-certifying entity: Give written notice 14 to 60 days before testing to the police, sheriff or State Patrol with jurisdiction, stating testing period, contacts and each vehicle's make, model, color and plate. Starts October 1, 2022 · Each time it happens · Applies when: Before testing. For testing mainly on limited access highways, notice to the Washington State Patrol alone suffices. · RCW 46.92.010(4)

Washington fabricated intimate images law (SHB 1999)

SHB 1999, Chapter 88, Laws of 2024; RCW 9A.86.030, 7.110.025 and amendments to chapters 9.68A, 9A.86 and 7.110 RCW. Enforced by: State and local prosecutors for the crime; the depicted person through a civil lawsuit.. Checked November 15, 2026.

Person: Do not knowingly disclose a fabricated intimate image of another person when you know or should know they did not consent and the disclosure would cause harm. Starts June 6, 2024 · Ongoing · Applies when: Any disclosure of a digitized intimate image of an identifiable person. Someone under 18 is liable only for intentional and malicious disclosure. Not knowing the image was fabricated is no defense. · RCW 9A.86.030(1), (2), (5)

Person: Before disclosing a fabricated intimate image of someone, get their consent in a plain-language written agreement, signed knowingly and voluntarily, that generally describes the image. Starts June 6, 2024 · Each time it happens · Applies when: To avoid civil liability for intentionally disclosing, or threatening to disclose, such an image. Consent to its creation is not consent to disclosure, and an 'unauthorized' disclaimer is no defense. · RCW 7.110.025(1)-(3)

Washington fabricated sexual depictions of minors law (2ESSB 5105)

2ESSB 5105, Chapter 223, Laws of 2026; amends RCW 9.68A.011, .040, .050, .053, .060, .070, .075, .110 and 9A.04.080, and adds a new section to chapter 9.68A RCW. Enforced by: State and local prosecutors. The limitation period for the listed dealing, sending, possession and viewing felonies is 10 years.. Checked November 15, 2026.

Person: Do not deal in, send or bring into Washington, possess, or view online a digitally fabricated sexual depiction of a minor that is obscene or shows an identifiable minor. Starts June 11, 2026 · Ongoing · Applies when: Any fabricated depiction, including AI-made. For obscene depictions the state need not prove a real minor exists, and not knowing the image was digitized is no defense. · RCW 9.68A.011(2), .050, .060, .070, .075, .110(7), as amended by 2ESSB 5105 §§ 2-8

Washington forged digital likeness law (SHB 1205)

SHB 1205, Chapter 51, Laws of 2025; amends RCW 9A.60.010 and 9A.60.045. Enforced by: State and local prosecutors, as the crime of criminal impersonation in the second degree.. Checked November 15, 2026.

Person: Do not knowingly distribute a forged digital likeness of another person as genuine to defraud, harass, threaten or intimidate, or for another unlawful purpose. Starts July 27, 2025 · Ongoing · Applies when: The person knows or reasonably should know the likeness is not genuine. Public-interest, satire and parody uses and intermediaries carrying others' content are excepted. · RCW 9A.60.045(1)(b), (3), (4)

Washington forged digital likeness law (SSB 5886, personality rights)

Substitute Senate Bill 5886; Chapter 69, Laws of 2026; amends RCW 63.60.010, 63.60.020, 63.60.050 and 63.60.060. Enforced by: Private civil action in superior court by the owner of the right; no government enforcer is named. The text does not say who receives the $3,000 civil penalty.. Checked November 14, 2026.

Person: Do not use, or authorize use of, a person's forged digital likeness on goods, in advertising, or for fund-raising or soliciting donations without the right owner's consent. Starts June 11, 2026 · Ongoing · Applies when: The use is on or in goods, merchandise or products entered into commerce in Washington, for advertising products or services, or for fund-raising or donations, whether or not for profit. Consent may be express or implied, written or oral. · RCW 63.60.050

Person: Do not disseminate or publish in Washington an advertisement that uses a person's forged digital likeness, name, voice, signature, photograph or likeness without the right owner's consent. Starts June 11, 2026 · Ongoing · Applies when: Dissemination or publication in Washington of an advertisement covered by RCW 63.60.050; advertising media owners and employees have an exemption. · RCW 63.60.050; 63.60.070(4)

Washington government facial recognition law (ESSB 6280): provider duties

ESSB 6280, Chapter 257, Laws of 2020 (partial veto); chapter 43.386 RCW. Enforced by: The law does not name one. Checked November 15, 2026.

Facial recognition service provider: Make available an API or other technical capability, chosen by you, for independent, legitimate and reasonable tests of accuracy and unfair performance differences across subpopulations. Starts July 1, 2021 · Ongoing · Applies when: A Washington state or local agency deploys your facial recognition service; the agency must require this. You bear the burden of minimizing security risks from the access. · RCW 43.386.050(1)(a), (b)

Facial recognition service provider: Develop and implement a plan to mitigate material unfair performance differences found by independent testing, within 90 days of receiving the results. When triggered · Each time it happens · Applies when: Independent testing finds material unfair performance differences and the methodology and data are disclosed to you in enough detail to reproduce the test. · RCW 43.386.050(1)(a)

Facial recognition service provider: Disclose to the procuring agency any complaints or reports of bias about the service. Starts July 1, 2021 · Each time it happens · Applies when: A state or local agency seeks to procure the service; the duty is framed as a requirement the agency must impose on vendors. · RCW 43.386.020(6)

Washington law on AI in health plan prior authorization (E2SSB 5395)

Engrossed Second Substitute Senate Bill 5395, Chapter 157, Laws of 2026; amends RCW 48.43.830, 41.05.845, 48.43.0161, 48.43.525 and 48.43.535. Enforced by: Washington Office of the Insurance Commissioner, which may audit carriers' AI policies under chapter 48.37 RCW, receives the yearly report and may adopt rules. The Health Care Authority may adopt rules for public employee plans. The act names no other enforcement step. A web search on November 12, 2026 found no report of a court order blocking this law; court dockets were not searched.. Checked November 12, 2026.

Carrier: Allow only a licensed physician or a licensed health professional working within their scope of practice to deny a prior authorization request based on medical necessity. Starts June 11, 2026 · Ongoing · Applies when: Any denial of a prior authorization request based on medical necessity. · RCW 48.43.830(3)(a)

Carrier: Do not use artificial intelligence as the sole means to deny, delay or modify health care services. Starts June 11, 2026 · Ongoing · Applies when: Any prior authorization determination. This sentence is not limited to medical necessity. · RCW 48.43.830(3)(a)

Carrier: Do not use algorithms to deny care based on a determination of medical necessity without human review; algorithms may be used to approve requests. Starts June 11, 2026 · Ongoing · Applies when: Any use of algorithms in prior authorization. · RCW 48.43.830(3)(a)

Carrier: Ensure the AI bases its determination on the enrollee's clinical history, including demographic data, and individual clinical circumstances presented by the requesting provider, not solely on a group data set. Starts June 11, 2026 · Ongoing · Applies when: A carrier uses AI, or contracts with or works through an entity that uses AI, for prior authorization based in whole or in part on medical necessity. · RCW 48.43.830(3)(b)(i), (ii)

Carrier: Ensure the AI's criteria comply with chapter 48.43 RCW and applicable law, and that it does not unlawfully discriminate and is fairly and equitably applied. Starts June 11, 2026 · Ongoing · Applies when: A carrier uses AI, or contracts with or works through an entity that uses AI, for prior authorization based in whole or in part on medical necessity. · RCW 48.43.830(3)(b)(iii)-(v)

Carrier: Keep the AI's policies and procedures open to audit by the Office of the Insurance Commissioner under chapter 48.37 RCW. Starts June 11, 2026 · Ongoing · Applies when: A carrier uses AI, or contracts with or works through an entity that uses AI, for prior authorization based in whole or in part on medical necessity. · RCW 48.43.830(3)(b)(vi)

Carrier: Periodically review the AI's performance, use and outcomes to maximize accuracy and reliability. Starts June 11, 2026 · Ongoing · Applies when: A carrier uses AI, or contracts with or works through an entity that uses AI, for prior authorization based in whole or in part on medical necessity. No review interval is stated. · RCW 48.43.830(3)(b)(vii)

Carrier: Do not use patient data beyond its intended and stated purpose, consistent with chapter 70.02 RCW and HIPAA. Starts June 11, 2026 · Ongoing · Applies when: A carrier uses AI, or contracts with or works through an entity that uses AI, for prior authorization based in whole or in part on medical necessity. · RCW 48.43.830(3)(b)(viii)

Health plan offered to public employees: Follow the same AI limits: licensed-professional denials, no AI as sole means to deny, delay or modify, human review of algorithmic denials, and the eight AI safeguards. Starts June 11, 2026 · Ongoing · Applies when: Prior authorization under a health plan offered to public employees, retirees and dependents under chapter 41.05 RCW. Its AI policies are open to audit by the Office of the Insurance Commissioner. · RCW 41.05.845(3) (Chapter 157, Laws of 2026, § 4)

Carrier (reporting): Report to the Insurance Commissioner each year, in aggregated and deidentified prior authorization data, the percentage of total denials that were aided by artificial intelligence. Starts October 1, 2026 · Every year · Applies when: The carrier wrote at least one percent of total Washington accident and health insurance premiums. Due by October 1, 2026 and annually thereafter. · RCW 48.43.0161(1)(a)(i) (Chapter 157, Laws of 2026, § 8)

Washington personal delivery device law (ESHB 1325)

ESHB 1325, Chapter 214, Laws of 2019; chapter 46.75 RCW and amendments to chapters 46.04, 46.61 and 81.80 RCW. Enforced by: Local law enforcement, through traffic infractions mailed to the entity's registered agent within 14 days; the registered agent is responsible for the infraction.. Checked November 15, 2026.

Eligible entity: Submit a self-certification form to the Department of Licensing before operating and every year, listing each device, and pay $50 per device before it operates. Starts September 1, 2019 · Every year · Applies when: Before any device operates in Washington. The form covers entity and agent details, jurisdictions, insurance, prior-year incidents and infractions, and the device list, updated before adding devices. · RCW 46.75.020(7), (9); 46.75.030

Eligible entity: Keep a personal delivery device operator controlling or monitoring each device's navigation and operation while it operates. Starts September 1, 2019 · Ongoing · Applies when: Whenever a device operates. · RCW 46.75.020(3)

Eligible entity: Maintain general liability insurance of at least $100,000 for damages from operating the devices. Starts September 1, 2019 · Ongoing · Applies when: Whenever devices operate in Washington. · RCW 46.75.020(4)

Eligible entity: Report to local law enforcement within 48 hours any incident causing injury, or property damage at the RCW 46.52.030(5) threshold, and register a Washington agent for infractions. When triggered · Each time it happens · Applies when: After a qualifying incident involving a device; the registered agent is needed before operating. · RCW 46.75.020(5), (6)

Eligible entity: Operate devices only on crosswalks and sidewalks, or pedestrian areas beside roads under 45 mph where no accessible sidewalk exists, following local right-of-way rules and yielding to pedestrians and bicycles. Starts September 1, 2019 · Ongoing · Applies when: Whenever a device operates. · RCW 46.75.020(1), (2); ESHB 1325 § 15 (RCW 46.61.261)

Eligible entity: Equip each device with a marker showing the entity, a unique ID and the agent's contact details, brakes for a controlled stop, and front and rear lights at night. Starts September 1, 2019 · Ongoing · Applies when: Lights are required between sunset and sunrise and must be visible from at least 500 feet. · RCW 46.75.020(8)

Eligible entity: Do not use devices to carry alcohol, or hazardous material in a quantity or form posing unreasonable risk to health, safety or property. Starts September 1, 2019 · Ongoing · Applies when: Any delivery by a device. · RCW 46.75.040

Washington synthetic media in election campaigns law (ESSB 5152)

Engrossed Substitute Senate Bill 5152, Laws of 2023, ch. 360, approved May 9, 2023; sections 1 to 4 form a new chapter in Title 42 RCW. Enforced by: The affected candidate, by civil suit. The Public Disclosure Commission must adopt rules, but the act creates no violation under chapter 42.17A RCW and gives the commission no enforcement authority under RCW 42.17A.755. A web search on November 14, 2026 found no report of a court order blocking this law; court dockets were not searched.. Checked November 14, 2026.

Sponsor: Include the disclosure "This (image/video/audio) has been manipulated" in an electioneering communication containing synthetic media of a candidate; it is an affirmative defense to the candidate's suit. Starts July 23, 2023 · Each time it happens · Applies when: An electioneering communication contains synthetic media that alters a candidate's appearance, action or speech. The act frames the disclosure as an affirmative defense, not a stand-alone mandate. · Laws of 2023, ch. 360, § 2(2)-(4); § 3(1)

Sponsor: Format the disclosure: visual text easily readable and no smaller than the largest other text, shown for a video's full duration; audio read at start, end and two-minute intervals. When triggered · Each time it happens · Applies when: When relying on the disclosure defense. The repeat at intervals of no more than two minutes applies to audio longer than two minutes. · Laws of 2023, ch. 360, § 2(4)(a), (b)

Medium: Do not remove the manipulated-media disclosure from an electioneering communication, and do not change its content so that it qualifies as synthetic media. Starts July 23, 2023 · Ongoing · Applies when: A medium, other than a federally licensed broadcaster transmitting a communication subject to 47 U.S.C. 315, disseminates an electioneering communication. · Laws of 2023, ch. 360, § 3(2)

West Virginia

17 items from 4 laws

West Virginia AI-generated child sexual abuse material and fabricated intimate images law (SB 198, 2025)

Committee Substitute for SB 198, 2025 Regular Session, Chapter 80, Acts, approved April 24, 2025; amends W. Va. Code 61-8-28a, 61-8C-1, 61-8C-2, 61-8C-3, 61-8C-3a, 61-8C-3b; enacts 61-8C-3c. Enforced by: Criminal prosecution; the act does not name the prosecuting office. Minors are handled in juvenile delinquency proceedings. A web search on November 15, 2026 found no report of a lawsuit or court order blocking this law; court dockets were not searched.. Checked November 15, 2026.

Person: Do not create a visual portrayal of a minor engaging in sexually explicit conduct, including one made in whole or part with AI. Starts July 9, 2025 · Ongoing · Applies when: Any conduct on or after July 9, 2025. · W. Va. Code 61-8C-2(b); 61-8C-3(c)

Person: Do not knowingly send, distribute, exhibit, possess, display, transport or access with intent to view computer-generated child pornography. Starts July 9, 2025 · Ongoing · Applies when: Any conduct on or after July 9, 2025. · W. Va. Code 61-8C-3(a)

Person: Do not knowingly and intentionally disclose, cause disclosure of, or threaten to disclose a fabricated intimate image of another to harass, intimidate, threaten, humiliate, embarrass or coerce. Starts July 9, 2025 · Ongoing · Applies when: Any conduct on or after July 9, 2025, subject to the listed exceptions. · W. Va. Code 61-8-28a(b)

Person viewing material in the course of employment or business: Immediately report to local or state law enforcement or the NCMEC CyberTipline when, at work, you view a device image that is or appears to be child sexual abuse material. When triggered · Each time it happens · Applies when: Viewing in the course and scope of employment or business; the report may include the device owner's details and copies. · W. Va. Code 61-8C-3c(d)(1)

West Virginia Fully Autonomous Vehicle Act (HB 4787, 2022)

Committee Substitute for HB 4787, 2022 Regular Session, Chapter 190, Acts, approved March 30, 2022; W. Va. Code 17H-1-1 to 17H-1-15. Enforced by: The law does not name one. Checked November 15, 2026.

Person operating a fully autonomous vehicle: For driverless operation, ensure the vehicle reaches a minimal risk condition if the system fails, can obey traffic laws, and bears a federal certification label when required. Starts June 10, 2022 · Ongoing · Applies when: Operation on public roads without a human driver, with the system engaged. · W. Va. Code 17H-1-5(a)

Person operating a fully autonomous vehicle: Before driverless operation, submit a law enforcement interaction plan covering fleet support contact, safe removal and towing, how to tell autonomous mode is on, and other hazards. When triggered · Once · Applies when: Before first operation without a human driver; filed with the department. · W. Va. Code 17H-1-5(b)

Person operating a fully autonomous vehicle: Before driverless operation on public roads, submit proof of financial responsibility, by insurance or self-insurance, satisfactory to the Division of Motor Vehicles. When triggered · Once · Applies when: Before first operation without a human driver. · W. Va. Code 17H-1-10

Vehicle owner: Register the vehicle so the registration identifies it as a fully autonomous vehicle. Starts June 10, 2022 · Once · Applies when: A fully autonomous vehicle registered in West Virginia. · W. Va. Code 17H-1-9

Person operating a fully autonomous vehicle: When the system cannot perform the entire driving task with a human driver aboard, issue a request to intervene. Starts June 10, 2022 · Ongoing · Applies when: Operation with the system engaged and a human driver present. · W. Va. Code 17H-1-6

Platoon operator: File a general platoon plan with the department; operate only if not rejected within 30 days, only on limited-access or interstate highways unless permitted, with each vehicle visibly marked. When triggered · Once · Applies when: Platoons of up to three fully autonomous vehicles. · W. Va. Code 17H-1-12

Vehicle owner: After a crash, have the vehicle remain at the scene when state law requires, and promptly report the crash under W. Va. Code 17C-4-1 et seq. When triggered · Each time it happens · Applies when: Any crash involving the vehicle; someone acting for the owner may report. · W. Va. Code 17H-1-14

West Virginia personal delivery device and mobile carrier law (HB 4675, 2022)

Committee Substitute for HB 4675, 2022 Regular Session, Chapter 189, Acts, approved March 28, 2022; W. Va. Code 17C-24-1 and 17C-24-2. Enforced by: The law does not name one. Checked November 15, 2026.

Personal delivery device owner and operator: Yield to pedestrians, do not unreasonably interfere with pedestrians or traffic, obey traffic and pedestrian signals, and have a braking system that brings the device to a controlled stop. Starts June 6, 2022 · Ongoing · Applies when: Any operation on sidewalks, crosswalks or roads; also applies to mobile carriers. · W. Va. Code 17C-24-2(a), (b)(1), (b)(3)

Personal delivery device owner and operator: Display a plate or marker with a unique identifying device number and the operator's name and contact information. Starts June 6, 2022 · Ongoing · Applies when: Every personal delivery device operated in West Virginia. · W. Va. Code 17C-24-2(b)(2)

Personal delivery device owner and operator: Keep the device at or under 12 mph on sidewalks and 20 mph on roadways, always monitored or controlled by an operator, and carrying no placarded hazardous materials. Starts June 6, 2022 · Ongoing · Applies when: Every personal delivery device operated in West Virginia. · W. Va. Code 17C-24-2(d)

Personal delivery device owner and operator: Maintain general liability insurance of at least $100,000 covering damages from the device's operation. Starts June 6, 2022 · Ongoing · Applies when: A person who owns and operates a personal delivery device in West Virginia. · W. Va. Code 17C-24-2(f)

Mobile carrier owner: Operate on sidewalks or crosswalks only while actively controlling or monitoring it within 25 feet; keep it off highways except at crosswalks; carry no people, animals or hazardous materials. Starts June 6, 2022 · Ongoing · Applies when: Every mobile carrier operated in West Virginia. · W. Va. Code 17C-24-2(c)

West Virginia sexual extortion law covering computer-generated images (SB 240, 2025)

Committee Substitute for SB 240, 2025 Regular Session, Chapter 75, Acts, approved March 24, 2025; enacts W. Va. Code 61-8B-6 and amends 61-2-13. Enforced by: Criminal prosecution in the county where the threat was made or received; the section does not name the prosecuting office. A web search on November 15, 2026 found no report of a lawsuit or court order blocking this law; court dockets were not searched.. Checked November 15, 2026.

Person: Do not knowingly disclose or threaten to disclose a private image of another, including a computer-generated one, to compel action against their will for images, value or other consideration. Starts June 12, 2025 · Ongoing · Applies when: Any conduct on or after June 12, 2025; threats may target the victim's family, household, spouse or child. · W. Va. Code 61-8B-6(b)

Wisconsin

5 items from 4 laws

Wisconsin AI disclosure rule for political audio and video ads (2023 Act 123)

2023 Wisconsin Act 123 (AB 664), creating Wis. Stat. 11.1303(2m). Enforced by: The Wisconsin Ethics Commission, or a district attorney after the Commission finds probable cause. A web search on November 15, 2026 found no court challenge.. Checked November 15, 2026.

Committee or other sponsor of a paid political ad: Say "Contains content generated by AI" at both the beginning and the end of a covered audio communication that contains synthetic media. Starts March 23, 2024 · Each time it happens · Applies when: Paid audio communications with express advocacy, issue advocacy, or referendum advocacy that contain synthetic media. · Wis. Stat. 11.1303(2m)(b)

Committee or other sponsor of a paid political ad: Show a readable written AI label throughout each portion of a covered video that contains synthetic media, worded for video, audio, or both. Starts March 23, 2024 · Each time it happens · Applies when: Paid video communications with express advocacy, issue advocacy, or referendum advocacy. The label reads "This video content generated by AI", "This audio content generated by AI" or "This content generated by AI". · Wis. Stat. 11.1303(2m)(c)

Wisconsin crime of possessing virtual child sexual abuse material (2023 Act 224)

2023 Wisconsin Act 224 (SB 314), creating Wis. Stat. 948.125. Enforced by: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no court challenge.. Checked November 15, 2026.

Person: Do not knowingly receive, distribute, produce, possess or access to view obscene material showing a purported child in sexually explicit conduct, including computer-generated images. Starts March 29, 2024 · Ongoing · Applies when: The person knows, or reasonably should know, that the material shows a purported child in sexually explicit conduct. · Wis. Stat. 948.125(2)

Wisconsin crime of sharing AI-generated intimate images to coerce or harass (2025 Act 34)

2025 Wisconsin Act 34 (SB 33), creating Wis. Stat. 942.09(1)(e), (2)(am)4. and (3m)(a)3.. Enforced by: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no court challenge.. Checked November 15, 2026.

Person: Do not post, publish, distribute or exhibit a synthetic intimate image of an identifiable person to coerce, harass or intimidate that person. Starts October 4, 2025 · Ongoing · Applies when: Intent to coerce, harass or intimidate the person shown is required. · Wis. Stat. 942.09(2)(am)4.

Wisconsin real estate AI-altered advertising disclosure (AB 456)

2025 Wisconsin Act 69 (AB 456), enacted December 9, 2025, effective January 1, 2027; creates Wis. Stat. § 452.136(1m). Enforced by: The law does not name one. Checked November 14, 2026.

Real estate licensee: Disclose in the advertising when it was altered with technology, including AI, to add, remove or change property elements in a misleading way. Starts January 1, 2027 · Ongoing · Applies when: All advertising by a licensee, when the alteration creates a false or misleading impression of the property. · Wis. Stat. § 452.136(1m)

Wyoming

7 items from 2 laws

Wyoming AI deepfakes and exploitative images law (HB 102, 2026)

HB 102 (2026 Budget Session), Enrolled Act No. 32 (House); ch. 91, Session Laws of Wyoming 2026, signed March 7, 2026; creates W.S. 1-1-143, 6-1-206, 6-4-307, 6-4-308 and 6-4-701 and amends 6-1-104(a), 6-4-301(a) and 6-4-303. Enforced by: Criminal prosecution (the act does not name the prosecutor). A web search on November 15, 2026 found no lawsuit or court order against this act.. Checked November 15, 2026.

Person (distributor): Do not knowingly distribute or make available synthetic sexual material realistically depicting an identifiable person, made without their knowledge or consent, causing or intending harm. Starts July 1, 2026 · Ongoing · Applies when: The person knows the material was created or altered without consent where the depicted person reasonably expected privacy. Creating or sending it to the defendant is not consent to distribution. · W.S. 6-4-307(a)(i), (b)

Person (distributor): Do not knowingly promote synthetic sexual material on a website, social media site or other digital platform, knowing its character and content. Starts July 1, 2026 · Ongoing · Applies when: This prong does not itself state a lack-of-consent element. · W.S. 6-4-307(a)(ii)

Person (distributor): Do not threaten to distribute synthetic sexual material showing a person's intimate parts or sexual conduct without consent, to obtain a benefit. Starts July 1, 2026 · Ongoing · Applies when: The benefit is sought in return for not disclosing, or in connection with the threatened disclosure. · W.S. 6-4-307(a)(iii)

Developer or distributor of an AI system: Do not knowingly develop or distribute an AI system specifically designed to create, distribute or promote child pornography or synthetic sexual material. Starts July 1, 2026 · Ongoing · Applies when: With intent that others use it for child pornography, or knowing it will be. Output produced solely from user prompts without developer intent is excluded. · W.S. 6-4-308(b), (c)(i)

Developer or distributor of an AI system: Do not knowingly develop or distribute an AI system specifically designed to promote self-harm. Starts July 1, 2026 · Ongoing · Applies when: With intent that others use it to promote self-harm, or knowing it will be. Prompt-only outputs without developer intent are excluded. · W.S. 6-4-701(b), (c)(i)

Person (AI system user): Do not knowingly use an AI system to generate or create child pornography, or knowingly possess child pornography you know was AI-generated. Starts July 1, 2026 · Ongoing · Applies when: Any purpose; added to the sexual exploitation of a child offense. · W.S. 6-4-303(b)(v), (vi)

Wyoming unlawful dissemination of intimate images law (HB 85, 2021)

HB 85 (2021 General Session), Enrolled Act No. 53 (House); ch. 85, Session Laws of Wyoming 2021, signed April 5, 2021; creates W.S. 6-4-306. Enforced by: Criminal prosecution (the act does not name the prosecutor). A web search on November 15, 2026 found no court order blocking 6-4-306.. Checked November 15, 2026.

Person: Do not disseminate an intimate image of another person, including a computer-generated one, without their express consent, to humiliate, harm, harass, threaten or coerce, or for sexual gratification. Starts July 1, 2021 · Ongoing · Applies when: The person is 18 or older and knew or should have known the depicted person reasonably expected the image to stay private. · W.S. 6-4-306(b)