AI compliance plan
Your AI compliance plan.
17 duties from 7 enacted laws in 1 state. Each one says who it falls on, when it starts and where in the law it comes from.
The plan at a glance
Pro turns this plan into a spreadsheet for audit files and a calendar of every start date. The plan on this page stays open to everyone.
Already in effect 11 duties
These duties are in force today.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| August 31, 2020 | Arizona personal delivery devices law (SB 1305) | Business entity operating a personal delivery device | Operate only with a human agent able to monitor or physically control the device's navigation and operation.Applies when: Any operation of a personal delivery device in Arizona. | Ongoing | A.R.S. 28-1223(A) |
| August 31, 2020 | Arizona personal delivery devices law (SB 1305) | Business entity operating a personal delivery device | Ensure the device yields to all traffic including pedestrians, does not unreasonably interfere with them, follows pedestrian rules and local rules, and carries no placarded hazardous materials.Applies when: Any operation of a personal delivery device in Arizona. | Ongoing | A.R.S. 28-1224(1)-(7) |
| August 31, 2020 | Arizona personal delivery devices law (SB 1305) | Business entity operating a personal delivery device | Keep speed at or below 12 mph in pedestrian areas (or a lower local limit, not below 7 mph) and 20 mph on highway sides or shoulders.Applies when: Any operation of a personal delivery device in Arizona. | Ongoing | A.R.S. 28-1225(A), (B) |
| August 31, 2020 | Arizona personal delivery devices law (SB 1305) | Business entity operating a personal delivery device | Equip each device with a marker showing the owner's name, contact information and unique ID number, a braking system, and required lights at night.Applies when: Any operation of a personal delivery device in Arizona. | Ongoing | A.R.S. 28-1226(A), (B) |
| August 31, 2020 | Arizona personal delivery devices law (SB 1305) | Business entity operating a personal delivery device | Maintain general liability insurance of at least $100,000 for damages arising from operating the device.Applies when: Any operation of a personal delivery device in Arizona. | Ongoing | A.R.S. 28-1228 |
| September 29, 2021 | Arizona autonomous vehicles law (HB 2813) | Person operating an autonomous vehicle | When testing with the system engaged and a human aboard, have a licensed human driver able to resume driving or respond to a request to intervene.Applies when: An autonomous vehicle that is not operating as a fully driverless vehicle under 28-9702(C). | Ongoing | A.R.S. 28-9702(B) |
| June 4, 2024 | Arizona digital impersonation civil action (HB 2394) | Publisher | Do not publish a digital impersonation of a candidate or Arizona citizen without consent unless you reasonably convey that it is fake or its authenticity is disputed.Applies when: The person shown did not consent and a reasonable person would not readily recognize the content as an impersonation. | Ongoing | A.R.S. 16-1023(A)(1), (2) |
| September 14, 2024 | Arizona election deepfake disclosure law (SB 1359) | Creator | Within 90 days before an election, do not create and distribute a known deceptive deepfake of a ballot candidate unless it clearly and conspicuously discloses AI-generated content.Applies when: A candidate for elected office will appear on the ballot at an election within the next 90 days. | Ongoing | A.R.S. 16-1024(A) |
| September 26, 2025 | Arizona AI-generated child sexual abuse material definitions (HB 2678) | Person | Do not knowingly produce, distribute, sell, buy, possess or trade sexual depictions of a minor, including AI-made images indistinguishable from an actual minor.Applies when: Any conduct on or after the act's effective date. | Ongoing | A.R.S. 13-3553(A)(1), (2); 13-3551(7)(b), (13) |
| September 26, 2025 | Arizona computer-generated impersonation fraud offense (SB 1295) | Person | Do not use a computer-generated voice recording, image or video of another person with intent to defraud others.Applies when: Any conduct on or after the act's effective date. | Ongoing | A.R.S. 13-2006(A)(4) |
| September 26, 2025 | Arizona fake intimate images offense (SB 1462) | Person | Do not intentionally disclose a realistic fake nude or sexual image of an identifiable person to harm, harass, intimidate, threaten or coerce them, unless they made it.Applies when: Any disclosure on or after the act's effective date; the privacy-expectation element does not apply to fake images. | Ongoing | A.R.S. 13-1425(A)(1)-(3), (D)(5) |
Triggered by an event 6 duties
These apply when something happens, such as a request, an incident or a decision about a person. Each row says what triggers it.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| When triggered | Arizona autonomous vehicles law (HB 2813) | Person operating a fully autonomous vehicle | Before driverless operation, submit a law enforcement interaction plan to ADOT and DPS addressing every element of the DPS protocol issued May 14, 2018.Applies when: Operating a fully autonomous vehicle without a human driver on Arizona public roads. | Once | A.R.S. 28-9702(C)(1) |
| When triggered | Arizona autonomous vehicles law (HB 2813) | Person operating a fully autonomous vehicle | Submit a written statement to ADOT acknowledging federal safety compliance, minimal risk fallback, ability to follow traffic laws, and title, registration and insurance compliance.Applies when: Operating a fully autonomous vehicle without a human driver on Arizona public roads. | Once | A.R.S. 28-9702(C)(2)(a)-(d) |
| When triggered | Arizona autonomous vehicles law (HB 2813) | Owner | After a crash, have the vehicle stop at or near the scene, alert police, and give the owner's name, address and registration number to those involved.Applies when: A fully autonomous vehicle with no human driver is involved in a crash. | Each time it happens | Laws 2021, ch. 117, A.R.S. 28-661(B), 28-662(B), 28-663(B) |
| When triggered | Arizona autonomous vehicles law (HB 2813) | Owner | Take reasonable steps to notify the owner of damaged unattended property or fixtures of the crash, the owner's name and address, and the registration number.Applies when: A driverless fully autonomous vehicle damages unattended property or roadway fixtures. | Each time it happens | Laws 2021, ch. 117, A.R.S. 28-664(B), 28-665(B) |
| When triggered | Arizona autonomous vehicles law (HB 2813) | Owner and statement submitter | Answer ADOT information requests about a likely unsafe vehicle within the time set, and certify any correction ADOT requires to avoid suspension.Applies when: ADOT has information that a vehicle is likely mechanically unsafe and a danger to others. | Each time it happens | Laws 2021, ch. 117, A.R.S. 28-9608(B)-(E) |
| When triggered | Arizona digital impersonation civil action (HB 2394) | Publisher | After learning content you published is a digital impersonation, take reasonable corrective action within 21 days, such as removing it and telling the same audience it was fake.Applies when: Needed to avoid injunctive relief and damages where the content is sexual, the plaintiff is not a public figure, and the other conditions are met. | Each time it happens | A.R.S. 16-1023(I)(3) |
Law by law
Who each law covers, who enforces it, the penalties, whether people can sue and what the text leaves open. Open a law to see it; every line cites its section.
Arizona AI-generated child sexual abuse material definitions (HB 2678)
1 duty · checked November 15, 2026
Laws 2025, ch. 174 (HB 2678, 57th Legislature, 1st Regular Session); amends A.R.S. 13-705 and 13-3551. Official text · Full law page
Who it covers
- Person. Any person who knowingly produces, distributes, possesses or trades a visual depiction of a minor in sexual conduct. A.R.S. 13-3553(A)
Enforcement
- Enforcer: Criminal prosecution; the act does not name the prosecuting office. A web search on November 15, 2026 found no lawsuit or court order against this law.
- Penalty: Class 2 felony, sexual exploitation of a minor. A.R.S. 13-3553(C)
- Penalty: Sentenced as a dangerous crime against children under 13-705 (ranges not opened), where the minor, including an indistinguishable depiction, is under fifteen. A.R.S. 13-3553(C); 13-705(T)(1)(b)
- Can people sue? The law does not say A.R.S. 13-3553
- Time to fix before enforcement: None
What the text leaves open
- The new definitions also reach other chapter 35.1 offenses, such as commercial sexual exploitation (13-3552), which were not opened in this run.
- Sentencing ranges in A.R.S. 13-705 were not opened.
Arizona autonomous vehicles law (HB 2813)
6 duties · checked November 15, 2026
Laws 2021, ch. 117 (HB 2813, 55th Legislature, 1st Regular Session); A.R.S. title 28, chapter on autonomous vehicles (enacted as 28-9601 to 28-9608, codified as 28-9701 et seq.), and amends 28-101, 28-661 to 28-666 and others. Official text · Full law page
Who it covers
- Person operating an autonomous vehicle. Any person who operates an autonomous vehicle on Arizona public roads, including a fully autonomous vehicle with no human driver. A.R.S. 28-9702(B), (C)
- Owner. The owner of a fully autonomous vehicle involved in a crash with no human driver aboard. Laws 2021, ch. 117, A.R.S. 28-663(B), 28-665(B)
Enforcement
- Enforcer: Arizona Department of Transportation (cease and desist, registration suspension) and Department of Public Safety; traffic and crash offenses are prosecuted under title 28. A web search on November 15, 2026 found no lawsuit or court order against this law.
- Penalty: Cease and desist letter barring operation, failing to submit the interaction plan or written statement. A.R.S. 28-9702(D)
- Penalty: Registration suspension or operating restriction, failing to certify correction of an unsafe vehicle. Laws 2021, ch. 117, A.R.S. 28-9608(D), (E)
- Penalty: Class 2 misdemeanor, failing to stop after a property-damage-only crash. Laws 2021, ch. 117, A.R.S. 28-662(C)
- Penalty: Class 3 misdemeanor, failing to give the required name, address and registration information. Laws 2021, ch. 117, A.R.S. 28-663(C)
- Penalty: Class 2, 3 or 5 felony, failing to stop or comply after a crash causing injury or death. Laws 2021, ch. 117, A.R.S. 28-661(C), (D)
- Can people sue? The law does not say A.R.S. 28-9702
- Time to fix before enforcement: None
Exemptions
- Counties, cities and towns may not tax or impose other requirements on autonomous vehicles or their operators; airports may charge reasonable fees and set pickup areas. Laws 2021, ch. 117, A.R.S. 28-9606(A), (B)
- A licensed human driver is not required for a fully autonomous vehicle that complies with the chapter. A.R.S. 28-9702(F)
What the text leaves open
- The crash-duty sections (28-661 to 28-665) and 28-9608 were read in the 2021 act only; their current codified text was not opened.
- The DPS law enforcement protocol referenced in 28-9702(C)(1) was not opened.
Arizona computer-generated impersonation fraud offense (SB 1295)
1 duty · checked November 15, 2026
Laws 2025, ch. 184 (SB 1295, 57th Legislature, 1st Regular Session); amends A.R.S. 13-2006. Official text · Full law page
Who it covers
- Person. Any person who uses a computer-generated voice recording, image or video of another person. A.R.S. 13-2006(A)(4)
Enforcement
- Enforcer: Criminal prosecution; the act does not name the prosecuting office. A web search on November 15, 2026 found no lawsuit or court order against this law.
- Penalty: Class 5 felony, criminal impersonation using a computer-generated voice, image or video to defraud. A.R.S. 13-2006(C)
- Can people sue? The law does not say A.R.S. 13-2006
- Time to fix before enforcement: None
Exemptions
- Comedy, parody, artistic expression, criticism, and content a reasonable listener or viewer clearly sees as digitally manipulated are not fraudulent. A.R.S. 13-2006(B)
What the text leaves open
- Sentencing ranges for a class 5 felony are in A.R.S. 13-702, which was not opened in this run.
Arizona digital impersonation civil action (HB 2394)
2 duties · checked November 15, 2026
Laws 2024, ch. 193 (HB 2394, 56th Legislature, 2nd Regular Session); A.R.S. 16-1023. Official text · Full law page
Who it covers
- Publisher. Any person who publishes a digital impersonation of an Arizona ballot candidate or Arizona citizen to others without consent; for paid ads, only whoever originated, ordered, placed or paid for the ad. A.R.S. 16-1023(A), (B)
Enforcement
- Enforcer: Private lawsuit by the person impersonated (or a parent or guardian); no government enforcer is named. A web search on November 15, 2026 found no lawsuit or court order against this law.
- Penalty: Declaratory relief (preliminary or permanent), publishing a digital impersonation meeting the subsection A elements; declaratory relief is the sole remedy unless the section says otherwise. A.R.S. 16-1023(A), (F), (K)
- Penalty: Injunctive relief and damages (amount not stated), only where the content is sexual and offends community standards, the plaintiff is not a public figure, and the publisher knew or failed to correct within 21 days. A.R.S. 16-1023(I)
- Can people sue? Yes A.R.S. 16-1023(A), (M)
- Time to fix before enforcement: The law does not say
Exemptions
- Interactive computer service providers are not liable for information supplied by another information content provider. A.R.S. 16-1023(C)
- Commentary, criticism, satire, parody and artistic expression, and content made by or with the consent of the person shown, are not digital impersonations. A.R.S. 16-1023(Q)(1)(d), (e)
- The section must be narrowly construed in favor of open discourse on public matters and artistic expression. A.R.S. 16-1023(N)
What the text leaves open
- The act says the section applies fourteen days after its effective date; June 4, 2024 assumes the emergency clause made May 21, 2024 the effective date.
- Damages amounts are not set in the text.
Arizona election deepfake disclosure law (SB 1359)
1 duty · checked November 15, 2026
Laws 2024, ch. 199 (SB 1359, 56th Legislature, 2nd Regular Session); added as A.R.S. 16-1023 and codified as A.R.S. 16-1024. Official text · Full law page
Who it covers
- Creator. Any person who uses AI or other digital technology to generate synthetic media; providers of the technology used are excluded. A.R.S. 16-1024(A), (D)(1)
Enforcement
- Enforcer: The law does not name one
- Penalty: $10 per day for the first 15 days, then $25 per day, each day a deceptive and fraudulent deepfake is distributed without the required disclosure. A.R.S. 16-1024(C); 16-937(B)
- Can people sue? The law does not say A.R.S. 16-1024
- Time to fix before enforcement: The law does not say
Exemptions
- Synthetic media that is satire or parody. A.R.S. 16-1024(B)(1)
- Interactive computer services as defined in 47 U.S.C. 230. A.R.S. 16-1024(B)(2)
- Providers of the technology used to create the synthetic media are not creators. A.R.S. 16-1024(D)(1)(b)
What the text leaves open
- 16-937 is written for committees that file late reports; who assesses the deepfake penalty, and whether its $5,000 per-report cap from July 1, 2026 applies, is not stated.
- Audio-only content is covered by the synthetic media definition; the text sets no format for the disclosure beyond clear and conspicuous.
Arizona fake intimate images offense (SB 1462)
1 duty · checked November 15, 2026
Laws 2025, ch. 106 (SB 1462, 57th Legislature, 1st Regular Session); amends A.R.S. 13-1425. Official text · Full law page
Who it covers
- Person. Any person who intentionally discloses an image of an identifiable person who is nude or engaged in specific sexual activities. A.R.S. 13-1425(A)
Enforcement
- Enforcer: Criminal prosecution; the act does not name the prosecuting office. A web search on November 15, 2026 found no lawsuit or court order against this law.
- Penalty: Class 5 felony; class 4 felony if disclosed by electronic means, unlawful disclosure of an intimate image. A.R.S. 13-1425(C)
- Penalty: Class 1 misdemeanor, threatening to disclose without disclosing; the same paragraph also names the case where the image is a realistic pictorial representation. A.R.S. 13-1425(C)(2)
- Can people sue? The law does not say A.R.S. 13-1425
- Time to fix before enforcement: None
Exemptions
- Interactive computer, information or cable services for content wholly provided by another party. A.R.S. 13-1425(B)(4)
- Reporting unlawful conduct; lawful law enforcement, legal and medical practices; voluntary public or commercial exposure; disclosures with the person's consent. A.R.S. 13-1425(B)(1), (2), (3), (5)
- Images made in the public interest, including scientific or educational work, newsworthy events or issues of public concern. A.R.S. 13-1425(D)(5)(b)
What the text leaves open
- 13-1425(C)(2) can be read two ways: that any disclosure of a realistic pictorial representation is a class 1 misdemeanor, or only a threat to disclose one. The text was not resolved here.
Arizona personal delivery devices law (SB 1305)
5 duties · checked November 15, 2026
Laws 2020, ch. 78 (SB 1305, 54th Legislature, 2nd Regular Session); A.R.S. 28-1221 to 28-1228 and amends 28-101. Official text · Full law page
Who it covers
- Business entity operating a personal delivery device. Only a business entity may operate a personal delivery device; it is the operator when the device is engaged. A.R.S. 28-1223(A), (B)
Enforcement
- Enforcer: The law does not name one
- Penalty: the law does not set an amount.
- Can people sue? The law does not say A.R.S. 28-1221 to 28-1228
- Time to fix before enforcement: The law does not say
Exemptions
- A person who requests or dispatches a device for delivery is not its operator. A.R.S. 28-1223(D)
- An agent who controls a device outside the scope of the agent's job is the operator instead of the business. A.R.S. 28-1223(C)
What the text leaves open
- The site lists an effective date of August 25, 2020 (the session's general effective date), but Sec. 5 makes article 22 effective from and after August 31, 2020.
- Whether general title 28 traffic penalties apply to device operators was not checked.
Other enacted laws to check
These 2 enacted AI laws are in the states you chose, but they are not yet mapped duty by duty, so they are not in the plan above. Each page has a summary and the official source.
- Arizona HB2482: sexual assault kits; victim notification (effective October 30, 2023)
- Arizona SB1320: An Act amending section 28-101, Arizona Revised Statutes; relating to autonomous vehicles. (effective September 26, 2025)
How the plan is built
Each law in the plan was read from its official text, on the legislature’s or state’s own website. 265 of the 326 have also been read a second time to confirm every date, threshold, penalty and enforcer; the rest have had one full read, and each shows the date it was last checked. Each duty is written in plain English in 30 words or fewer and carries the section it comes from, with a link.
Where a law is silent, the plan says so. It does not borrow a penalty from another statute or guess at a deadline. A law that is repealed or replaced on a known date shows that end date, and its duties leave the plan once the date passes. The date each law was last checked appears with it.
The plan is built fresh from these records every time the page loads, so it changes as soon as a law is added or re-checked. To report an error, use the corrections page. For how we find laws and decide what counts as an AI law, see our methodology. If you are not sure which laws touch your business at all, start with Am I Affected?
Common questions
What does an AI compliance plan cover?
Each duty an enacted state AI law places on a business or other regulated party: who it applies to, what it requires, when it starts, how often it recurs, who enforces it, the penalties and whether people can sue. The builder covers 1,235 duties in 326 enacted laws across 50 states, and every duty links to the section of law it comes from.
Where does the information come from?
From the official text of each law: the enrolled bill, session law or codified statute, opened on the legislature's or state's own website. 265 of the 326 laws have also been read a second time to confirm every date, threshold, penalty and enforcer, and the date each law was last checked is shown with it. Where a law is silent on a point, such as a penalty amount, the plan says the law does not say rather than filling the gap. Law firm summaries and news reports are never used as sources.
Does the plan include every AI law in a state?
Not yet. It includes the enacted laws we have mapped duty by duty. When you choose a state, its other enacted AI laws are listed separately with links, so nothing is left out of view. New laws are added as they are read. When a law is repealed or replaced on a set date, its duties show that end date and leave the plan once it passes.
How do I know which duties apply to my company?
Start with the 'who it covers' entry for each law: many apply only above a size or revenue threshold, only to developers or only to deployers, or only in one industry. The plan quotes those conditions from the text. Whether your company meets them depends on facts only you and your counsel know.
Is this legal advice?
No. It is information drawn from official legal texts, organized so you can see what each law requires. Use it to brief your team and your lawyers, not in place of them.
What does Pro add?
The same plan as a CSV file for spreadsheets and audit files, and as a calendar file (.ics) with every dated duty as an event that links back to the law. Both are built from the states and uses you pick. The plan on this page, and printing it, are open to everyone.