Skip to content

Session Expired

Your session has expired. Please sign in again to continue where you left off.

Sign In Again

Federal · AI compliance plan

What Federal’s AI laws require of you.

Federal has 10 enacted AI laws in our records. We have mapped 2 of them duty by duty: 10 duties in all, each with who it falls on, when it starts and the section of law it comes from.

Read from official legal texts by AI Laws by State Last checked November 15, 2026 How we verify Information, not legal advice
Change states or topics

Build a plan

Where you do business
Topics that matter to you (leave blank for all)
Numbers show how many mapped laws each choice includes. No sign-up needed to see the plan.

The plan at a glance

10duties from 2 laws
0start in the next 90 days
0laws let people sue over a violation
0laws give a set number of days to fix a violation before enforcement
Download CSV and calendar with Pro Open as a checklist

Pro turns this plan into a spreadsheet for audit files and a calendar of every start date. The plan on this page stays open to everyone.

Already in effect 6 duties

These duties are in force today.

StartsLawWhoWhat it requiresHow oftenSource
May 19, 2025 FederalTAKE IT DOWN Act (S. 146) Person Do not knowingly publish, through an interactive computer service, a digital forgery of an identifiable adult without consent where it is intended to or does cause harm.Applies when: Also bars publishing authentic private intimate images, and AI forgeries or real images of minors with intent to abuse, harass or arouse; exceptions apply. Ongoing 47 U.S.C. 223(h)(2)(A), (2)(B), (3)(A), (3)(B), as added by Public Law 119-12, sec. 2
May 19, 2025 FederalTAKE IT DOWN Act (S. 146) Person Do not intentionally threaten to publish an intimate depiction or digital forgery covered by the Act to intimidate, coerce, extort or create mental distress.Applies when: Any such threat involving an identifiable individual. Ongoing 47 U.S.C. 223(h)(6), as added by Public Law 119-12, sec. 2
January 17, 2026 FederalNational Defense Authorization Act for Fiscal Year 2026: AI provisions that reach contractors Defense Department contractor Do not use covered AI (developed by DeepSeek or High Flyer-linked entities) during performance of a Defense Department contract, unless the Secretary of Defense grants a waiver.Applies when: During the period of performance of any Defense Department contract. Ongoing Public Law 119-60, sec. 1532(a)(3)(A), (b)
May 19, 2026 FederalTAKE IT DOWN Act (S. 146) Covered platform Establish a process for an identifiable individual, or someone authorized to act for them, to notify the platform of a nonconsensual intimate depiction and request its removal.Applies when: All covered platforms. Once Public Law 119-12, sec. 3(a)(1)(A)
May 19, 2026 FederalTAKE IT DOWN Act (S. 146) Covered platform Accept written removal requests containing the person's signature, information to locate the depiction, a brief good-faith statement that it was published without consent, and contact information.Applies when: Part of the required notice-and-removal process. Ongoing Public Law 119-12, sec. 3(a)(1)(B)
May 19, 2026 FederalTAKE IT DOWN Act (S. 146) Covered platform Post a clear and conspicuous, plain-language notice on the platform (a link is allowed) explaining the process and the platform's responsibilities, and how to submit a request.Applies when: All covered platforms. Ongoing Public Law 119-12, sec. 3(a)(2)

Triggered by an event 4 duties

These apply when something happens, such as a request, an incident or a decision about a person. Each row says what triggers it.

StartsLawWhoWhat it requiresHow oftenSource
When triggered FederalNational Defense Authorization Act for Fiscal Year 2026: AI provisions that reach contractors Defense Department contractor Do not use AI from a covered AI company named in Defense Department-wide exclusion guidance during contract performance, once that guidance is issued, unless waived.Applies when: Only if and after the Secretary of Defense issues guidance under sec. 1532(a)(2). Ongoing Public Law 119-60, sec. 1532(a)(2), (a)(3)(B)
When triggered FederalNational Defense Authorization Act for Fiscal Year 2026: AI provisions that reach contractors Contractor to an element of the intelligence community Remove the DeepSeek application, or any successor, from national security systems you operate for an intelligence community element, as required by Director of National Intelligence standards.Applies when: National security systems operated by a contractor to, or another entity on behalf of, an intelligence community element, under the DNI standards. Ongoing Public Law 119-60, sec. 6604(a), (d), (e)
When triggered FederalTAKE IT DOWN Act (S. 146) Covered platform Remove the reported intimate visual depiction as soon as possible, and no later than 48 hours after receiving a valid removal request.Applies when: On receiving a valid removal request from an identifiable individual or their authorized representative. Each time it happens Public Law 119-12, sec. 3(a)(3)(A)
When triggered FederalTAKE IT DOWN Act (S. 146) Covered platform Make reasonable efforts to identify and remove any known identical copies of the reported depiction within the same 48-hour window.Applies when: On receiving a valid removal request. Each time it happens Public Law 119-12, sec. 3(a)(3)(B)

Law by law

Who each law covers, who enforces it, the penalties, whether people can sue and what the text leaves open. Open a law to see it; every line cites its section.

Federal: National Defense Authorization Act for Fiscal Year 2026: AI provisions that reach contractors

3 duties · checked November 15, 2026

Public Law 119-60 (Dec. 18, 2025); div. A, title XV, subtitle D, sec. 1532 (139 Stat. 1157; 10 U.S.C. 2224 note) and div. F, title LXVI, subtitle A, sec. 6604 (139 Stat. 1636; 50 U.S.C. 3334m note). Official text · Full law page

Who it covers

  • Contractor (Department of Defense). Any contractor during the period of performance of a Defense Department contract. Public Law 119-60, sec. 1532(a)(3)
  • Contractor to an element of the intelligence community. A contractor, or another entity acting for an intelligence community element, that operates a national security system. Public Law 119-60, sec. 6604(a), (e)

Enforcement

  • Enforcer: Secretary of Defense (contractor ban and waivers under sec. 1532) and Director of National Intelligence (standards under sec. 6604). The sections state no separate enforcement mechanism.
  • Penalty: the law does not set an amount.
  • Can people sue? The law does not say Public Law 119-60, secs. 1532, 6604
  • Time to fix before enforcement: The law does not say

Exemptions

  • The Secretary of Defense may waive the contractor ban case by case when necessary for scientifically valid research; national-security evaluation, training or testing; counterterrorism, counterintelligence or operational military activities; or mission-critical functions, with risk mitigation. Public Law 119-60, sec. 1532(b)
  • The intelligence community standards must include exceptions for national security purposes and research activities, with risk mitigation standards. Public Law 119-60, sec. 6604(c)

What the text leaves open

  • Whether, and when, the Secretary of Defense issued the Department-wide guidance on covered AI companies that triggers the second contractor ban was not checked.
  • The DNI standards under sec. 6604 were not read; contractor duties depend on their terms.
  • Consequences for contractors (for example, contract remedies under procurement rules) are not stated in these sections.
  • Only the two AI subtitles were read; other parts of this large act may contain AI provisions binding private parties.

Federal: TAKE IT DOWN Act (S. 146)

7 duties · checked November 15, 2026

Public Law 119-12, 139 Stat. 55 (May 19, 2025); sec. 2 adds 47 U.S.C. 223(h); secs. 3-4 set covered-platform notice and removal duties enforced by the FTC. Official text · Full law page

Who it covers

  • Covered platform. A website, online service, online application or mobile application that serves the public and either primarily provides a forum for user-generated content, or publishes, curates, hosts or makes available nonconsensual intimate depictions in the regular course of trade or business. Public Law 119-12, sec. 4(3)(A)
  • Person (publisher of an intimate visual depiction). Anyone who knowingly publishes, or threatens to publish, a covered intimate visual depiction or digital forgery using an interactive computer service. 47 U.S.C. 223(h)(2), (3), (6), as added by Public Law 119-12, sec. 2

Enforcement

Exemptions

  • Not covered platforms: broadband internet access providers, email, and services consisting primarily of preselected content that is not user-generated, where interactive features are incidental. The last exclusion does not apply to services that regularly trade in nonconsensual intimate depictions. Public Law 119-12, sec. 4(3)(B)
  • Criminal-offense exceptions: lawful law enforcement and intelligence activity; good-faith disclosures to police, in legal proceedings, for medical, scientific or educational purposes, or to report unlawful content; disclosures meant to help the depicted person; a person's own depiction; and material covered by child pornography laws. 47 U.S.C. 223(h)(2)(C), (3)(C), as added by Public Law 119-12, sec. 2

What the text leaves open

  • The criminal fines are set by reference to title 18; the maximum fine amounts (18 U.S.C. 3571) were not read.
  • The $10,000 FTC civil penalty figure is the amount printed in 15 U.S.C. 45(m)(1)(A); any inflation-adjusted amount set by FTC regulation was not read.
  • The Act does not define a valid removal request beyond the four written elements, or what counts as reasonable compliance.
  • No FTC rule or guidance under the Act was read.

Other enacted laws to check

These 8 enacted AI laws are in the states you chose, but they are not yet mapped duty by duty, so they are not in the plan above. Each page has a summary and the official source.

Information, not legal advice. This plan summarizes what the official texts of the laws listed say. It does not decide whether a law applies to your organization; that turns on facts such as your size, your role as a developer or deployer, and how you use AI. Laws change, and courts and regulators can read them differently. Check the official text linked with each duty and talk to a qualified lawyer before acting. Using this page does not create an attorney-client relationship. See our terms of service.

How the plan is built

Each law in the plan was read from its official text, on the legislature’s or state’s own website. 265 of the 326 have also been read a second time to confirm every date, threshold, penalty and enforcer; the rest have had one full read, and each shows the date it was last checked. Each duty is written in plain English in 30 words or fewer and carries the section it comes from, with a link.

Where a law is silent, the plan says so. It does not borrow a penalty from another statute or guess at a deadline. A law that is repealed or replaced on a known date shows that end date, and its duties leave the plan once the date passes. The date each law was last checked appears with it.

The plan is built fresh from these records every time the page loads, so it changes as soon as a law is added or re-checked. To report an error, use the corrections page. For how we find laws and decide what counts as an AI law, see our methodology. If you are not sure which laws touch your business at all, start with Am I Affected?

Common questions

What does an AI compliance plan cover?

Each duty an enacted state AI law places on a business or other regulated party: who it applies to, what it requires, when it starts, how often it recurs, who enforces it, the penalties and whether people can sue. The builder covers 1,235 duties in 326 enacted laws across 50 states, and every duty links to the section of law it comes from.

Where does the information come from?

From the official text of each law: the enrolled bill, session law or codified statute, opened on the legislature's or state's own website. 265 of the 326 laws have also been read a second time to confirm every date, threshold, penalty and enforcer, and the date each law was last checked is shown with it. Where a law is silent on a point, such as a penalty amount, the plan says the law does not say rather than filling the gap. Law firm summaries and news reports are never used as sources.

Does the plan include every AI law in a state?

Not yet. It includes the enacted laws we have mapped duty by duty. When you choose a state, its other enacted AI laws are listed separately with links, so nothing is left out of view. New laws are added as they are read. When a law is repealed or replaced on a set date, its duties show that end date and leave the plan once it passes.

How do I know which duties apply to my company?

Start with the 'who it covers' entry for each law: many apply only above a size or revenue threshold, only to developers or only to deployers, or only in one industry. The plan quotes those conditions from the text. Whether your company meets them depends on facts only you and your counsel know.

Is this legal advice?

No. It is information drawn from official legal texts, organized so you can see what each law requires. Use it to brief your team and your lawyers, not in place of them.

What does Pro add?

The same plan as a CSV file for spreadsheets and audit files, and as a calendar file (.ics) with every dated duty as an event that links back to the law. Both are built from the states and uses you pick. The plan on this page, and printing it, are open to everyone.