AI compliance plan
Your AI compliance plan.
17 duties from 4 enacted laws in 1 state. Each one says who it falls on, when it starts and where in the law it comes from. The next start date is January 1, 2027.
The plan at a glance
Pro turns this plan into a spreadsheet for audit files and a calendar of every start date. The plan on this page stays open to everyone.
Already in effect 10 duties
These duties are in force today.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| July 1, 2021 | Indiana personal delivery devices law (HEA 1072, 2021) | Operator | Give each device a unique identifying number and a means of identifying the operator.Applies when: Any device operating on Indiana sidewalks, crosswalks, roads or streets. | Ongoing | IC 9-21-11.5-5(1)-(2) |
| July 1, 2021 | Indiana personal delivery devices law (HEA 1072, 2021) | Operator | Operate without unreasonably interfering with traffic or blocking public rights-of-way, obey traffic and pedestrian signals, and stay at or under 10 mph on sidewalks and crosswalks.Applies when: Any device in operation. | Ongoing | IC 9-21-11.5-5(3)-(6) |
| July 1, 2021 | Indiana personal delivery devices law (HEA 1072, 2021) | Operator | Equip devices with a controlled-stop system and front and rear lights visible from 500 feet when operating between sunset and sunrise.Applies when: Any device in operation. | Ongoing | IC 9-21-11.5-5(7)-(8) |
| July 1, 2021 | Indiana personal delivery devices law (HEA 1072, 2021) | Operator | Do not transport hazardous materials that must be placarded under 49 CFR Part 172, Subpart F.Applies when: Any device in operation. | Ongoing | IC 9-21-11.5-5(9) |
| July 1, 2021 | Indiana personal delivery devices law (HEA 1072, 2021) | Operator | Carry general liability insurance of at least $100,000 covering the combined operation of devices under the operator's control.Applies when: Any operator of personal delivery devices. | Ongoing | IC 9-21-11.5-8 |
| March 12, 2024 | Indiana fabricated media in campaign communications law (HEA 1133, 2024) | Person who paid for a campaign communication | Include a separate disclaimer stating elements of the media were digitally altered or artificially generated, in the statute's exact wording.Applies when: A campaign communication includes fabricated media depicting a candidate. This is in addition to the IC 3-9-3-2.5(d) disclaimer. | Each time it happens | IC 3-9-8-5 |
| March 12, 2024 | Indiana fabricated media in campaign communications law (HEA 1133, 2024) | Person who paid for a campaign communication | In audio, read the disclaimer in each language used, understandably, no quieter than the loudest audio, at the start and end and every two minutes.Applies when: Audio campaign communications with fabricated media of a candidate. | Each time it happens | IC 3-9-8-5 |
| March 12, 2024 | Indiana fabricated media in campaign communications law (HEA 1133, 2024) | Person who paid for a campaign communication | In video and print, show the disclaimer as IC 3-9-3-2.5(e) requires; in video, display it continuously for the whole communication.Applies when: Printed or video campaign communications with fabricated media of a candidate. | Each time it happens | IC 3-9-8-5 |
| March 12, 2024 | Indiana fabricated media in campaign communications law (HEA 1133, 2024) | Disseminator | Do not knowingly, intentionally or recklessly alter or remove the fabricated-media disclaimer before disseminating a campaign communication.Applies when: The communication carried the disclaimer when the disseminator received it. | Each time it happens | IC 3-9-8-6(a)(3) |
| July 1, 2024 | Indiana computer-generated intimate images law (HEA 1047, 2024) | Person | Do not distribute an intimate image, including a computer-generated or AI-altered image appearing to depict someone, knowing or having reason to know the person depicted does not consent.Applies when: The depicted person need not have sent the image. Exceptions in IC 35-45-4-8(a) apply. | Ongoing | IC 35-45-4-8(c)-(e) |
Starting in the next 90 days 6 duties
Time to prepare is short for these.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| January 1, 2027 | Indiana social media providers and adolescents law (HEA 1408, 2026) | Social media provider | When an Indiana account is requested, use commercially reasonable means, such as a neutral age screen, to determine the person's age and state of residence.Applies when: Any account creation request. | Each time it happens | IC 24-16-3-1 |
| January 1, 2027 | Indiana social media providers and adolescents law (HEA 1408, 2026) | Social media provider | Create an account for an adolescent only with verifiable parental consent.Applies when: The person requesting an account is under 16. | Each time it happens | IC 24-16-3-1 |
| January 1, 2027 | Indiana social media providers and adolescents law (HEA 1408, 2026) | Social media provider | For known Indiana adolescents, block messages and search visibility except linked accounts, stop usage-based content, recommendations and ads, and disable addictive features; users cannot change these.Applies when: Account holder known to be an Indiana adolescent. | Ongoing | IC 24-16-3-2(a)-(c) |
| January 1, 2027 | Indiana social media providers and adolescents law (HEA 1408, 2026) | Social media provider | Give a consenting parent a separate password to monitor time spent, set daily, weekly and time-of-day limits, and access the account.Applies when: A parent has given verifiable parental consent. | Ongoing | IC 24-16-3-2(d) |
| January 1, 2027 | Indiana social media providers and adolescents law (HEA 1408, 2026) | Social media provider | Determine an Indiana holder's age within 14 days of 25 hours' use in six months; verify after 50 hours; redo every further 100 hours and on collecting demographics.Applies when: Existing Indiana account holders, starting January 1, 2027. | Ongoing | IC 24-16-4-1(a), (c), (e) |
| January 1, 2027 | Indiana social media providers and adolescents law (HEA 1408, 2026) | Social media provider | Use information received for parental consent only to register that consent, then delete it immediately unless other law requires keeping it.Applies when: Any verifiable parental consent process. | Each time it happens | IC 24-16-5-1 |
Triggered by an event 1 duty
These apply when something happens, such as a request, an incident or a decision about a person. Each row says what triggers it.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| When triggered | Indiana social media providers and adolescents law (HEA 1408, 2026) | Social media provider | Notify an adolescent holder lacking parental consent within 7 days, allow a 30-day dispute, and terminate the account if not resolved.Applies when: Age estimation shows an adolescent without verifiable parental consent. | Each time it happens | IC 24-16-4-2 |
Law by law
Who each law covers, who enforces it, the penalties, whether people can sue and what the text leaves open. Open a law to see it; every line cites its section.
Indiana computer-generated intimate images law (HEA 1047, 2024)
1 duty · checked November 15, 2026
House Enrolled Act 1047 (2024), P.L. 79-2024; amends IC 34-21.5-2-1, IC 35-45-4-5 and IC 35-45-4-8. Official text · Full law page
Who it covers
- Person. Any person who distributes an intimate image, including a computer-generated, AI-created or digitally altered image that appears to depict the alleged victim. IC 35-45-4-8(c)-(d)
Enforcement
- Enforcer: Criminal prosecution by the State; the section does not name a prosecuting office. No lawsuit challenging the law was found in this review.
- Penalty: Class A misdemeanor, distributing an intimate image without consent. IC 35-45-4-8(d)
- Penalty: Level 6 felony, the same offense by a person with a prior unrelated conviction under the section. IC 35-45-4-8(d)
- Can people sue? The law does not say IC 34-21.5-2-1 (definitions amended; the civil remedy sections of IC 34-21.5 were not in the act)
- Time to fix before enforcement: The law does not say
Exemptions
- Reporting a possible crime, criminal investigations and court orders. IC 35-45-4-8(a)
- News and entertainment media, news services publishing online, cloud providers, and internet providers or search engines that only provide access and are not responsible for the content. IC 35-45-4-8(a)
- Storage in password-protected personal storage. IC 35-45-4-8(a)
What the text leaves open
- The act adds computer-generated images to the definitions in IC 34-21.5, Indiana's civil article on intimate images; its civil remedy sections were not opened, so whether victims can sue is left not stated here.
- Sentencing ranges for a Class A misdemeanor and a Level 6 felony are set elsewhere in IC 35-50 and were not opened.
- Whether IC 35-45-4-8 was amended after 2024 was not confirmed against the current Indiana Code.
Indiana fabricated media in campaign communications law (HEA 1133, 2024)
4 duties · checked November 15, 2026
House Enrolled Act 1133 (2024), P.L. 81-2024; adds IC 3-9-8. Official text · Full law page
Who it covers
- Person who paid for a campaign communication. The person who paid for a campaign communication that includes fabricated media depicting a candidate. IC 3-9-8-5
- Sponsor or disseminator. The sponsor of the communication; and a person who disseminates it after knowingly, intentionally or recklessly altering or removing a disclaimer it carried. IC 3-9-8-6(a)
Enforcement
- Enforcer: No public enforcer is named; the depicted candidate enforces through a civil action. No lawsuit challenging the law was found in this review.
- Penalty: Actual damages, injunctive relief, court costs and reasonable attorney's fees, a candidate's civil action over fabricated media in a campaign communication without the required disclaimer; the court must expedite the hearing. IC 3-9-8-6(b), (d)
- Can people sue? Yes IC 3-9-8-6(a)-(c) (depicted candidate; clear and convincing evidence of being depicted)
- Time to fix before enforcement: The law does not say
Exemptions
- The act states no exemptions for broadcasters, news media, satire or online platforms; a disseminator is liable only if it altered or removed a disclaimer the communication already carried. IC 3-9-8-6(a)(3)
What the text leaves open
- The print format rules are set by IC 3-9-3-2.5(e), which was not opened.
- Whether any later act amended IC 3-9-8 was not checked against the current Indiana Code.
- The enrolled-act copy read has blank signature lines; the March 12, 2024 date comes from the official Enrolled Act Summary.
Indiana personal delivery devices law (HEA 1072, 2021)
5 duties · checked November 15, 2026
House Enrolled Act 1072 (2021); adds IC 9-21-11.5. Official text · Full law page
Who it covers
- Operator. A person, or that person's agent, who physically controls or monitors the navigation and operation of a personal delivery device. Threshold: Devices weigh no more than 500 pounds excluding cargo. IC 9-21-11.5-2; IC 9-21-11.5-3
Enforcement
- Enforcer: The law does not name one
- Penalty: the law does not set an amount.
- Can people sue? The law does not say IC 9-21-11.5
- Time to fix before enforcement: The law does not say
Exemptions
- The chapter does not apply to state routes, U.S. routes and interstate highways in the state highway system located within a municipality. IC 9-21-11.5-0.5
- Personal delivery devices are exempt from motor vehicle licensing and registration. IC 9-21-11.5-7
What the text leaves open
- A device on a sidewalk or crosswalk has a pedestrian's rights and duties (IC 9-21-11.5-6); penalties for pedestrian rule breaches are set elsewhere and were not opened.
- The signing date and public law number were not confirmed from an official source in this run.
- Whether IC 9-21-11.5 was amended after 2021 was not checked.
Indiana social media providers and adolescents law (HEA 1408, 2026)
7 duties · checked November 15, 2026
House Enrolled Act 1408 (2026), SECTIONS 13-14; adds IC 24-16 and IC 24-5-0.5-3(b)(44). Official text · Full law page
Who it covers
- Social media provider. An online forum, website or app mainly for sharing user content that uses algorithms on user data to select content and has at least one listed addictive feature. Threshold: 10% or more of daily active users under 16 average 2+ hours a day on it; owner and affiliates had $1 billion or more in worldwide gross revenue in one of the three prior years. IC 24-16-2-5(a)
Enforcement
- Enforcer: Indiana Attorney General; a violation of IC 24-16 is a deceptive act actionable by the Attorney General under the Deceptive Consumer Sales Act (IC 24-5-0.5). No lawsuit challenging the law was found in this review.
- Penalty: the law does not set an amount.
- Can people sue? The law does not say IC 24-16-6-1 (actionable by the Attorney General)
- Time to fix before enforcement: The law does not say
Exemptions
- Email or direct messaging services shared only between sender and recipients, device manufacturers, app stores, and communications service providers under IC 8-1-2.6-13(b). IC 24-16-2-5(b)
- The article does not apply to an emancipated adolescent. IC 24-16-1-1
- After ten consecutive years as an account holder, a provider may treat the holder as not an adolescent without age estimation. IC 24-16-4-1(g)
What the text leaves open
- Penalty amounts under IC 24-5-0.5 were not opened in this run.
- Because the act adds IC 24-16 violations to the list of deceptive acts in IC 24-5-0.5-3, whether consumers can also sue under IC 24-5-0.5-4 is not stated in the act.
- The 30-day user dispute window is not a cure period for violations.
- The enrolled-act copy read has blank signature lines; the signing date was not confirmed from an official source in this run.
Other enacted laws to check
These 1 enacted AI law is in the states you chose, but it is not yet mapped duty by duty, so it is not in the plan above. Each page has a summary and the official source.
- Indiana SB0150: Artificial intelligence and cybersecurity. (effective July 1, 2024)
How the plan is built
Each law in the plan was read from its official text, on the legislature’s or state’s own website. 265 of the 326 have also been read a second time to confirm every date, threshold, penalty and enforcer; the rest have had one full read, and each shows the date it was last checked. Each duty is written in plain English in 30 words or fewer and carries the section it comes from, with a link.
Where a law is silent, the plan says so. It does not borrow a penalty from another statute or guess at a deadline. A law that is repealed or replaced on a known date shows that end date, and its duties leave the plan once the date passes. The date each law was last checked appears with it.
The plan is built fresh from these records every time the page loads, so it changes as soon as a law is added or re-checked. To report an error, use the corrections page. For how we find laws and decide what counts as an AI law, see our methodology. If you are not sure which laws touch your business at all, start with Am I Affected?
Common questions
What does an AI compliance plan cover?
Each duty an enacted state AI law places on a business or other regulated party: who it applies to, what it requires, when it starts, how often it recurs, who enforces it, the penalties and whether people can sue. The builder covers 1,235 duties in 326 enacted laws across 50 states, and every duty links to the section of law it comes from.
Where does the information come from?
From the official text of each law: the enrolled bill, session law or codified statute, opened on the legislature's or state's own website. 265 of the 326 laws have also been read a second time to confirm every date, threshold, penalty and enforcer, and the date each law was last checked is shown with it. Where a law is silent on a point, such as a penalty amount, the plan says the law does not say rather than filling the gap. Law firm summaries and news reports are never used as sources.
Does the plan include every AI law in a state?
Not yet. It includes the enacted laws we have mapped duty by duty. When you choose a state, its other enacted AI laws are listed separately with links, so nothing is left out of view. New laws are added as they are read. When a law is repealed or replaced on a set date, its duties show that end date and leave the plan once it passes.
How do I know which duties apply to my company?
Start with the 'who it covers' entry for each law: many apply only above a size or revenue threshold, only to developers or only to deployers, or only in one industry. The plan quotes those conditions from the text. Whether your company meets them depends on facts only you and your counsel know.
Is this legal advice?
No. It is information drawn from official legal texts, organized so you can see what each law requires. Use it to brief your team and your lawyers, not in place of them.
What does Pro add?
The same plan as a CSV file for spreadsheets and audit files, and as a calendar file (.ics) with every dated duty as an event that links back to the law. Both are built from the states and uses you pick. The plan on this page, and printing it, are open to everyone.