AI compliance checklist

The AI compliance checklist, built from the laws themselves.

Every item below is a duty an enacted state AI law sets out, written in plain English and tied to the section of law it comes from. 1235 items from 326 laws in 50 states, grouped by state and law. Filter to your states and topics, tick items off as you go, and print it for your files.

Read from official legal texts by AI Laws by State Last checked November 15, 2026 How we verify Information, not legal advice

State Topic Clear

16 items for your choices

0 of 16 ticked. Ticks are saved in this browser only.

See it as a dated plan Download as CSV with Pro

Montana

16 items from 7 laws

Montana Facial Recognition for Government Use Act (SB 397): third-party vendor duties

Chapter 781, Laws of 2023 (SB 397); 44-15-101 to 44-15-112, MCA. Enforced by: A person may sue for injunctive or declaratory relief; a person whose information was improperly handled may sue an entity for damages; the attorney general may seek civil penalties. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.. Checked November 15, 2026.

Third-party vendor: Before obtaining a person's facial biometric data, tell them in writing it is being collected, the specific purpose and term of use, and get their written consent. When triggered · Each time it happens · Applies when: Vendor under contract with a state or local government agency for facial recognition services. · 44-15-109(2), MCA

Third-party vendor: Give the agency a dated, readable written privacy policy and notify the agency of policy changes within a reasonable time. When triggered · Ongoing · Applies when: Vendor under contract with a state or local government agency for facial recognition services. · 44-15-109(3), MCA

Third-party vendor: Publish a retention and destruction schedule and follow it; keep data past its purpose only with affirmative authorization, destroying it within 1 year of the person's last interaction. When triggered · Ongoing · Applies when: Absent a valid warrant or subpoena from a court of competent jurisdiction. · 44-15-109(4), MCA

Third-party vendor: Adopt a written information security policy with administrative, technical and physical controls, stating the data is stored in the United States, and protect it with industry-standard care. When triggered · Ongoing · Applies when: Vendor under contract with a state or local government agency for facial recognition services. · 44-15-109(5), (7)(a), MCA

Third-party vendor: Do not give, sell, lease or trade facial biometric data without affirmative authorization, or release it to a federal or state agency without a valid warrant or court order. When triggered · Ongoing · Applies when: Vendor under contract with a state or local government agency for facial recognition services. · 44-15-109(6), (7)(b), MCA

Montana Right to Compute Act

SB 212, 69th Legislature (2025); Laws of Montana 2025, ch. 150; Montana Code Annotated 2-10-201 to 2-10-207. Enforced by: The law does not name one. Checked November 14, 2026.

Deployer: Develop a reasonable risk management policy that considers the latest NIST AI risk management framework, the ISO/IEC AI standard named in the text, or another recognized AI risk management framework. When triggered · Once · Applies when: After deploying a critical artificial intelligence system that controls a critical infrastructure facility in whole or in part. A plan prepared under federal requirements counts as compliance. · MCA 2-10-205; SB 212 Section 4

Government entity: Limit actions that restrict lawful private ownership or use of computational resources to those demonstrably necessary and narrowly tailored to a compelling government interest. When triggered · Ongoing · Applies when: A law, ordinance, rule, policy, permit or administrative practice restricts the common or intended use of computational resources by their owner or invitees. · MCA 2-10-204; 2-10-203(7); SB 212 Section 3

Montana computer-generated child sexual abuse material possession offense (HB 82)

Chapter 102, Laws of 2025 (HB 82); amends 45-5-625, MCA (sexual abuse of children) and other sections. Enforced by: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.. Checked November 15, 2026.

Person: Do not knowingly possess computer-generated child pornography, including AI-made depictions indistinguishable from a real minor, showing a child in actual or simulated sexual conduct. Starts July 1, 2025 · Ongoing · Applies when: Includes possession by electronic communication. · 45-5-625(1)(e), MCA

Montana deepfakes in election communications law (SB 25)

Chapter 541, Laws of 2025 (SB 25); codified as a new part of Title 13, chapter 35, MCA (13-35-801 to 13-35-804 per the 2025 MCA history note on 13-35-802). Enforced by: Commissioner of Political Practices, on a complaint under 13-37-111; civil penalties by the commissioner or a county attorney; repeat findings referred to the county attorney or attorney general for prosecution. A harmed candidate or party may sue. On September 16, 2026 a federal court barred enforcement against the two named plaintiffs only.. Checked November 15, 2026.

Person or entity working in an official election capacity: Do not pay for or sponsor election communications you knew or should have known are deepfakes of a ballot candidate or party unless they carry the required AI disclosure. Starts October 1, 2025 · Ongoing · Applies when: Within 60 days of the start of voting in an election with a candidate on the ballot. · SB 25 § 2; 13-35-802, MCABlocked in court for The named plaintiffs only: Accountability in State Government and Dan Bartel.. Preliminary injunction: defendants Austin Knudsen, Kevin Downs and Chris Gallus (Commissioner of Political Practices) may not review, investigate, prosecute, adjudicate or enforce the act against these plaintiffs. Everyone else remains covered. Accountability in State Government v. Knudsen, No. 6:26-cv-00038-SPW (D. Mont.), Order granting preliminary injunction (Doc. 31), Sep 16, 2026

Person or entity working in an official election capacity: Format the disclosure: bold 12-point print; readable video text at least 4% of picture height; online text viewable without user action; audio at least 8 seconds, at start or end. Starts October 1, 2025 · Each time it happens · Applies when: When relying on the disclosure to use a deepfake in the 60-day window. · SB 25 § 2; 13-35-802, MCABlocked in court for The named plaintiffs only: Accountability in State Government and Dan Bartel.. Preliminary injunction: defendants Austin Knudsen, Kevin Downs and Chris Gallus (Commissioner of Political Practices) may not review, investigate, prosecute, adjudicate or enforce the act against these plaintiffs. Everyone else remains covered. Accountability in State Government v. Knudsen, No. 6:26-cv-00038-SPW (D. Mont.), Order granting preliminary injunction (Doc. 31), Sep 16, 2026

Montana digitally fabricated intimate images offense (HB 514)

Chapter 686, Laws of 2025 (HB 514); amends 45-8-213, MCA (violating privacy in communications). Enforced by: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.. Checked November 15, 2026.

Person: Do not publish, distribute or disclose real or digitally fabricated nude or sexual images of an identifiable person without consent to terrify, intimidate, threaten, harass, injure or obtain money. Starts October 1, 2025 · Ongoing · Applies when: Knowing or purposeful conduct; the (2)(b) exceptions apply. · 45-8-213(1)(d), MCA

Person: Do not possess and threaten to disclose real or digitally fabricated nude or sexual images of an identifiable person to obtain money or other valuable consideration without consent. Starts October 1, 2025 · Ongoing · Applies when: Knowing or purposeful conduct. · 45-8-213(1)(e), MCA

Montana disclosing explicit synthetic media offense (SB 413)

Chapter 606, Laws of 2025 (SB 413); codified in Title 45, chapter 5, part 6, MCA. Enforced by: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.. Checked November 15, 2026.

Person: Do not disclose explicit synthetic media of an identifiable person knowing or having reason to know they did not consent and it would cause substantial emotional distress. When triggered · Ongoing · Applies when: Offenses committed on or after the act took effect on passage and approval in 2025. · SB 413 § 1(1)(a); §§ 3, 4

Person: Do not disclose explicit synthetic media to terrify, intimidate, threaten, harass or injure the depicted person, or possess and threaten to disclose it to obtain money. When triggered · Ongoing · Applies when: Offenses committed on or after the act took effect on passage and approval in 2025. · SB 413 § 1(1)(b), (c); §§ 3, 4

Montana name, voice and likeness law: unauthorized digital voice and visual depictions (HB 513)

Chapter 685, Laws of 2025 (HB 513); section 1 is codified in Title 30, chapter 14, MCA. Enforced by: Civil suit by the individual or by a person to whom the rights were assigned, bequeathed, transferred or exclusively licensed. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.. Checked November 15, 2026.

Person (distributor of a tool): Do not distribute or make available a tool, software, service or device whose primary purpose is producing unauthorized digital voice or visual depictions of an identified individual for commercial use. Starts January 1, 2026 · Ongoing · Applies when: Without consent of the individual or rights holder, and with actual and specific knowledge of that primary purpose. · HB 513 § 1(3)(a)

Person (publisher): Do not publish, perform, distribute or make available an unauthorized digital voice or visual depiction of an individual for commercial use without consent. Starts January 1, 2026 · Ongoing · Applies when: Intentional conduct with actual and specific knowledge that the material depicts the individual and is unauthorized. · HB 513 § 1(3)(b)

Also check: 1 other enacted AI law in your state is not yet mapped duty by duty: HB178.

Get an email when Montana AI bills change

We’ll email you when AI bills in Montana are introduced or change status (at most one alert email a day), plus our weekly digest.

We’ll send a confirmation link first; nothing else is sent until you confirm. Unsubscribe anytime. See past weekly issues. Need alerts for specific bills only? Per-bill alerts come with Pro.

Information, not legal advice. This checklist summarizes what the official texts of the laws listed say. It does not decide whether a law applies to your organization; that turns on facts such as your size, your role as a developer or deployer, and how you use AI. Laws change, and courts and regulators can read them differently. Check the official text linked with each item and talk to a qualified lawyer before acting. Using this page does not create an attorney-client relationship. See our terms of service.

Where the items come from

Each item is one duty from an enacted law, read from the official text on the legislature’s or state’s own website. 265 of the 326 laws have also been read a second time to confirm every date, threshold, penalty and enforcer. Each item names who the duty falls on, when it starts, how often it recurs and the section it comes from, with a link.

Where a law is silent, the checklist says so rather than guessing. A law that is repealed or replaced on a known date shows that end date and drops off afterward. The list is rebuilt from these records every time the page loads.

Want the same duties ordered by start date, with penalties and enforcers side by side? Use the compliance plan builder. For AI in hiring specifically, see the AI hiring compliance checklist. To report an error, use the corrections page.

Session Expired