AI compliance plan
Your AI compliance plan.
15 duties from 4 enacted laws in 1 state. Each one says who it falls on, when it starts and where in the law it comes from. The next start date is January 1, 2027.
The plan at a glance
Pro turns this plan into a spreadsheet for audit files and a calendar of every start date. The plan on this page stays open to everyone.
Already in effect 2 duties
These duties are in force today.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| March 24, 2025 | Kentucky SB 4 (2025): synthetic media in electioneering communications | Sponsor of an electioneering communication | Include a clear and conspicuous disclosure, likely to be noticed, on any electioneering communication that alters a candidate's likeness with synthetic media.Applies when: Within 45 days before a primary or regular election. A candidate may sue for an order requiring disclosure; disclosure is an affirmative defense. | Each time it happens | 2025 Ky. Acts ch. 66, § 5 |
| March 24, 2025 | Kentucky SB 4 (2025): synthetic media in electioneering communications | Medium disseminating an electioneering communication | Do not intentionally remove a required synthetic media disclosure and fail to restore it when notified, and do not alter content so it becomes synthetic media.Applies when: Broadcasters under 47 U.S.C. 315 and interactive computer services as to third-party content are excepted. | Each time it happens | 2025 Ky. Acts ch. 66, § 5 |
Starting in the next 90 days 1 duty
Time to prepare is short for these.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| January 1, 2027 | Kentucky automated license plate reader law (HB 58, 2026) | Insurance carrier or financial institution | Notify applicants of ALPR data use through your website privacy statement, the application disclaimer, or both.Applies when: People applying for insurance or financing on or after January 1, 2027. | Ongoing | 2026 Ky. Acts ch. 71, § 1(4)(d) |
Triggered by an event 12 duties
These apply when something happens, such as a request, an incident or a decision about a person. Each row says what triggers it.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| When triggered | Kentucky automated license plate reader law (HB 58, 2026) | Individual, entity, partnership, corporation or association | Use an automated license plate reader only to regulate parking, control access to secured areas, or promote public safety, deter crime and address auto theft.Applies when: Any use of an ALPR in Kentucky. The Act states no general effective date. | Ongoing | 2026 Ky. Acts ch. 71, § 1(2), (3)(a) |
| When triggered | Kentucky automated license plate reader law (HB 58, 2026) | Entity that deployed the ALPR | Do not keep captured plate data longer than 90 days unless an exception applies, and use it only directly for the permitted purposes.Applies when: Exceptions include evidence in criminal or insurance claim investigations, redacted training, auditing, and subpoenas or preservation notices. | Ongoing | 2026 Ky. Acts ch. 71, § 1(4)(a)-(c) |
| When triggered | Kentucky automated license plate reader law (HB 58, 2026) | Entity that deployed the ALPR | Do not sell, share, give access to or transfer captured plate data except to the listed recipients for their stated purposes.Applies when: Listed recipients include law enforcement and its contractors, subpoenas, the National Insurance Crime Bureau, insurers and financial institutions. | Ongoing | 2026 Ky. Acts ch. 71, § 1(4)(d) |
| When triggered | Kentucky automated license plate reader law (HB 58, 2026) | Law enforcement agency | Before deploying an ALPR, adopt and publish a written policy covering databases, retention, training, oversight, data security and audits every 90 days.Applies when: Before deployment by a law enforcement agency. | Ongoing | 2026 Ky. Acts ch. 71, § 1(5) |
| When triggered | Kentucky computer-generated sexual images of minors (HB 207, 2024) | Person | Do not produce, direct or promote a performance including sexual conduct by a minor or by a computer-generated image of a minor.Applies when: Effective date not stated in the Act. | Ongoing | KRS 531.320 |
| When triggered | Kentucky computer-generated sexual images of minors (HB 207, 2024) | Person | Do not knowingly possess or intentionally view matter depicting a sexual performance by a minor or a computer-generated image of a minor.Applies when: Knowing its content and character; listed exemptions apply. | Ongoing | KRS 531.335(1), (2) |
| When triggered | Kentucky computer-generated sexual images of minors (HB 207, 2024) | Person | Do not distribute, sell, exhibit for profit, advertise or condition sales on such matter, including computer-generated images of minors.Applies when: Effective date not stated in the Act. | Ongoing | KRS 531.340; 531.350; 531.360 |
| When triggered | Kentucky fully autonomous vehicles law (HB 7, 2024) | Person operating a fully autonomous vehicle | Before driverless operation, submit a law enforcement interaction plan to the Transportation Cabinet and State Police covering fleet support contact, towing, confirming engagement and hazards.Applies when: Before operating a fully autonomous vehicle without a human driver. The Act states no general effective date. | Once | 2024 Ky. Acts ch. 176, § 2(3) |
| When triggered | Kentucky fully autonomous vehicles law (HB 7, 2024) | Person operating a fully autonomous vehicle | Before driverless operation, show proof of financial responsibility including $1,000,000 single-limit liability coverage, or $1,000,000 per accident for injury and for property for motor carriers.Applies when: Before operating without a human driver; motor carriers follow the Section 15 minimums. | Once | 2024 Ky. Acts ch. 176, §§ 3, 15 |
| When triggered | Kentucky fully autonomous vehicles law (HB 7, 2024) | Person operating a fully autonomous vehicle | Operate driverless only if the system reaches a minimal risk condition on failure, can follow traffic and safety laws, and bears any federally required certification label.Applies when: Driverless operation with the automated driving system engaged. | Ongoing | 2024 Ky. Acts ch. 176, § 2(1) |
| When triggered | Kentucky fully autonomous vehicles law (HB 7, 2024) | Vehicle owner | Title and register the vehicle as a fully autonomous vehicle; as owner, comply with traffic laws when the system is engaged, even if not present.Applies when: The automated driving system is installed and engaged. | Ongoing | 2024 Ky. Acts ch. 176, §§ 4, 9 |
| When triggered | Kentucky fully autonomous vehicles law (HB 7, 2024) | Vehicle owner or person acting for the owner | Immediately notify law enforcement of an accident; file a written State Police report within 10 days if property damage exceeds $500 and police did not investigate.Applies when: A fully autonomous vehicle is involved in an accident. | Each time it happens | KRS 189.635, as amended by 2024 Ky. Acts ch. 176, § 11 |
Law by law
Who each law covers, who enforces it, the penalties, whether people can sue and what the text leaves open. Open a law to see it; every line cites its section.
Kentucky SB 4 (2025): synthetic media in electioneering communications
2 duties · checked November 15, 2026
SB 4, 2025 Regular Session; 2025 Ky. Acts ch. 66; amends KRS 117.001 and creates a new section of KRS Chapter 117 (election provisions); also amends KRS 42.722 and 42.726. Official text · Full law page
Who it covers
- Sponsor of an electioneering communication. The person or entity paying for a covered electronic communication referring to a state, county, city or district candidate or ballot measure within 45 days before a primary or regular election. 2025 Ky. Acts ch. 66, §§ 4, 5
- Medium disseminating the communication. Media and advertising sales representatives, liable only in the limited cases the section lists. 2025 Ky. Acts ch. 66, § 5
Enforcement
- Enforcer: Civil action by the candidate whose likeness was altered, in the circuit court of the county where the candidate lives; failing to obey a disclosure order carries the penalty for violating KRS 121.190(1). A web search on November 15, 2026 found no court challenge to these provisions.
- Penalty: Injunctive or equitable relief; attorney fees and costs to the prevailing party at the court's discretion, candidate's action over synthetic media; clear and convincing evidence required. 2025 Ky. Acts ch. 66, § 5
- Can people sue? Yes 2025 Ky. Acts ch. 66, § 5 (candidates only, for injunctive or equitable relief)
- Time to fix before enforcement: The law does not say
Exemptions
- Broadcasters subject to 47 U.S.C. 315; interactive computer service providers and users as to third-party content; other media unless they remove a required disclosure and fail to restore it, or alter content into synthetic media. 2025 Ky. Acts ch. 66, § 5
- Bona fide news coverage and editorials by outlets not controlled by a candidate, committee or party, and other listed communications, are not electioneering communications. 2025 Ky. Acts ch. 66, § 4
What the text leaves open
- Only the election synthetic media provisions are covered; the Act's state-agency AI governance duties apply to government, not private parties.
- The KRS section number for the new Chapter 117 section was not confirmed.
- The Act defines synthetic media by generative adversarial network techniques; whether other generative methods are covered is not stated.
Kentucky automated license plate reader law (HB 58, 2026)
5 duties · checked November 15, 2026
HB 58, 2026 Regular Session; 2026 Ky. Acts ch. 71; new section of KRS Chapter 189 and KRS 189.990(33). Official text · Full law page
Who it covers
- Individual, entity, partnership, corporation or association. Any private person or business using an automated license plate reader, allowed only for parking, secured-area access control, or public safety, crime deterrence and auto theft. 2026 Ky. Acts ch. 71, § 1(2), (3)(a)
- Insurance carrier or financial institution. Insurers, their agents and insurance support organizations, and financial institutions and their agents that receive captured plate data. 2026 Ky. Acts ch. 71, § 1(4)(d)
- Public and law enforcement agency. Public agencies, law enforcement agencies and the Transportation Cabinet, and their agents. 2026 Ky. Acts ch. 71, § 1(3)(b), (5)
Enforcement
- Enforcer: Criminal prosecution under KRS 189.990(33); the Act does not name the prosecuting office. A web search on November 15, 2026 found no court challenge to this Act.
- Penalty: Fine of $20 to $2,000, up to 1 year in county jail, or both, violating any part of Section 1. KRS 189.990(33), added by 2026 Ky. Acts ch. 71, § 2
- Can people sue? The law does not say 2026 Ky. Acts ch. 71
- Time to fix before enforcement: The law does not say
Exemptions
- Data may be kept beyond 90 days for listed public purposes, by law enforcement as evidence in criminal or insurance claim investigations, for redacted training or auditing, or under a subpoena or preservation notice. 2026 Ky. Acts ch. 71, § 1(4)(a)
- People who entered an insurance or financing contract or applied before January 1, 2027 need no notice. 2026 Ky. Acts ch. 71, § 1(4)(d)
What the text leaves open
- The Act states no general effective date; it was not confirmed on an official page in this run.
- The new KRS Chapter 189 section number was not assigned in the Act text read.
- Whether a private user also needs a Transportation Cabinet permit beyond highway rights-of-way is not stated.
Kentucky computer-generated sexual images of minors (HB 207, 2024)
3 duties · checked November 15, 2026
HB 207, 2024 Regular Session; 2024 Ky. Acts ch. 15; amends KRS 531.010, 531.320, 531.330, 531.335, 531.340, 531.350, 531.360 and related sections. Official text · Full law page
Who it covers
- Person. Any person who produces, promotes, possesses, views, distributes, sells or advertises matter showing a minor, or a computer-generated image of a minor, in a sexual performance. KRS 531.320, 531.335, 531.340, 531.350, 531.360 as amended by 2024 Ky. Acts ch. 15
Enforcement
- Enforcer: Criminal prosecution by the Commonwealth. A web search on November 15, 2026 found no court challenge to these provisions.
- Penalty: Class C felony; Class B if the minor is under 16; Class A if the minor is physically injured, promoting a sexual performance by a minor or computer-generated image of a minor. KRS 531.320
- Penalty: Class D felony; Class C if under 12; at least 85% of sentence before probation or parole, possession or viewing (as amended by HB 366). KRS 531.335(3), (4)
- Penalty: Class D felony first offense, Class C after; Class C first and Class B after if under 12, distribution. KRS 531.340
- Penalty: Class A misdemeanor to Class C felony by offense count, promoting sale, or advertising, of such matter. KRS 531.350; 531.360
- Can people sue? The law does not say 2024 Ky. Acts ch. 15
- Time to fix before enforcement: The law does not say
Exemptions
- Accidental or inadvertent viewing; viewing during a law enforcement investigation or litigation; viewing by the minor, the minor's parents or guardians, or school administrators investigating a violation. KRS 531.335(2)
What the text leaves open
- Neither HB 207 nor HB 366 states an effective date; the dates were not confirmed on an official page in this run.
- Fine and prison ranges for each felony class are in statutes that were not read.
- The Act's child sex doll offenses are not covered because they do not involve AI or synthetic media.
Kentucky fully autonomous vehicles law (HB 7, 2024)
5 duties · checked November 15, 2026
HB 7, 2024 Regular Session; 2024 Ky. Acts ch. 176 (enacted over veto); new sections of KRS Chapters 186 and 189; amends KRS 186.410, 189.635, 281.010, 281.630, 281.655, 281.764. Official text · Full law page
Who it covers
- Person operating a fully autonomous vehicle / vehicle owner. Anyone who operates a fully autonomous vehicle (SAE Level 4 or 5) on Kentucky highways without a human driver; the owner is treated as the operator when the system is engaged. 2024 Ky. Acts ch. 176, §§ 2, 3, 9
- Motor carrier. Fully autonomous vehicles that meet the motor carrier definition, operating under a certificate. 2024 Ky. Acts ch. 176, §§ 6, 15
Enforcement
- Enforcer: Kentucky Transportation Cabinet (sole implementing agency) and Kentucky State Police; the Act names no penalty. A web search on November 15, 2026 found no court challenge to this Act.
- Penalty: the law does not set an amount.
- Can people sue? The law does not say 2024 Ky. Acts ch. 176
- Time to fix before enforcement: The law does not say
Exemptions
- Vehicles designed to be driven only by the automated driving system are exempt from equipment rules that relate only to a human driver seated in the vehicle. 2024 Ky. Acts ch. 176, § 10
- The Transportation Cabinet may grant exemptions from traffic and safety law compliance requirements. 2024 Ky. Acts ch. 176, §§ 2(1)(b), 5
What the text leaves open
- The Act states no general effective date; it was not confirmed on an official page in this run.
- Penalties for existing traffic and reporting statutes applied to owners were not read; Section 13 refers to an existing KRS 281.990 fine for motor carrier violations, which was not read.
- Whether a 2026 act changed these provisions was not checked.
Other enacted laws to check
These 1 enacted AI law is in the states you chose, but it is not yet mapped duty by duty, so it is not in the plan above. Each page has a summary and the official source.
- Kentucky HB366: AN ACT relating to possession or viewing of matter portraying a sexual performance by a minor. (effective July 15, 2026)
How the plan is built
Each law in the plan was read from its official text, on the legislature’s or state’s own website. 265 of the 326 have also been read a second time to confirm every date, threshold, penalty and enforcer; the rest have had one full read, and each shows the date it was last checked. Each duty is written in plain English in 30 words or fewer and carries the section it comes from, with a link.
Where a law is silent, the plan says so. It does not borrow a penalty from another statute or guess at a deadline. A law that is repealed or replaced on a known date shows that end date, and its duties leave the plan once the date passes. The date each law was last checked appears with it.
The plan is built fresh from these records every time the page loads, so it changes as soon as a law is added or re-checked. To report an error, use the corrections page. For how we find laws and decide what counts as an AI law, see our methodology. If you are not sure which laws touch your business at all, start with Am I Affected?
Common questions
What does an AI compliance plan cover?
Each duty an enacted state AI law places on a business or other regulated party: who it applies to, what it requires, when it starts, how often it recurs, who enforces it, the penalties and whether people can sue. The builder covers 1,235 duties in 326 enacted laws across 50 states, and every duty links to the section of law it comes from.
Where does the information come from?
From the official text of each law: the enrolled bill, session law or codified statute, opened on the legislature's or state's own website. 265 of the 326 laws have also been read a second time to confirm every date, threshold, penalty and enforcer, and the date each law was last checked is shown with it. Where a law is silent on a point, such as a penalty amount, the plan says the law does not say rather than filling the gap. Law firm summaries and news reports are never used as sources.
Does the plan include every AI law in a state?
Not yet. It includes the enacted laws we have mapped duty by duty. When you choose a state, its other enacted AI laws are listed separately with links, so nothing is left out of view. New laws are added as they are read. When a law is repealed or replaced on a set date, its duties show that end date and leave the plan once it passes.
How do I know which duties apply to my company?
Start with the 'who it covers' entry for each law: many apply only above a size or revenue threshold, only to developers or only to deployers, or only in one industry. The plan quotes those conditions from the text. Whether your company meets them depends on facts only you and your counsel know.
Is this legal advice?
No. It is information drawn from official legal texts, organized so you can see what each law requires. Use it to brief your team and your lawyers, not in place of them.
What does Pro add?
The same plan as a CSV file for spreadsheets and audit files, and as a calendar file (.ics) with every dated duty as an event that links back to the law. Both are built from the states and uses you pick. The plan on this page, and printing it, are open to everyone.