AI compliance plan
Your AI compliance plan.
16 duties from 7 enacted laws in 1 state. Each one says who it falls on, when it starts and where in the law it comes from.
The plan at a glance
16duties from 7 laws
0start in the next 90 days
3laws let people sue over a violation
0laws give a set number of days to fix a violation before enforcement
Download CSV and calendar with Pro
Open as a checklist
Pro turns this plan into a spreadsheet for audit files and a calendar of every start date. The plan on this page stays open to everyone.
Already in effect 7 duties
These duties are in force today.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| July 1, 2025 | Montana computer-generated child sexual abuse material possession offense (HB 82) | Person | Do not knowingly possess computer-generated child pornography, including AI-made depictions indistinguishable from a real minor, showing a child in actual or simulated sexual conduct.Applies when: Includes possession by electronic communication. | Ongoing | 45-5-625(1)(e), MCA |
| October 1, 2025 | Montana deepfakes in election communications law (SB 25) | Person or entity working in an official election capacity | Do not pay for or sponsor election communications you knew or should have known are deepfakes of a ballot candidate or party unless they carry the required AI disclosure.Applies when: Within 60 days of the start of voting in an election with a candidate on the ballot.Blocked in court for The named plaintiffs only: Accountability in State Government and Dan Bartel.. Preliminary injunction: defendants Austin Knudsen, Kevin Downs and Chris Gallus (Commissioner of Political Practices) may not review, investigate, prosecute, adjudicate or enforce the act against these plaintiffs. Everyone else remains covered. Accountability in State Government v. Knudsen, No. 6:26-cv-00038-SPW (D. Mont.), Order granting preliminary injunction (Doc. 31), Sep 16, 2026 | Ongoing | SB 25 § 2; 13-35-802, MCA |
| October 1, 2025 | Montana deepfakes in election communications law (SB 25) | Person or entity working in an official election capacity | Format the disclosure: bold 12-point print; readable video text at least 4% of picture height; online text viewable without user action; audio at least 8 seconds, at start or end.Applies when: When relying on the disclosure to use a deepfake in the 60-day window.Blocked in court for The named plaintiffs only: Accountability in State Government and Dan Bartel.. Preliminary injunction: defendants Austin Knudsen, Kevin Downs and Chris Gallus (Commissioner of Political Practices) may not review, investigate, prosecute, adjudicate or enforce the act against these plaintiffs. Everyone else remains covered. Accountability in State Government v. Knudsen, No. 6:26-cv-00038-SPW (D. Mont.), Order granting preliminary injunction (Doc. 31), Sep 16, 2026 | Each time it happens | SB 25 § 2; 13-35-802, MCA |
| October 1, 2025 | Montana digitally fabricated intimate images offense (HB 514) | Person | Do not publish, distribute or disclose real or digitally fabricated nude or sexual images of an identifiable person without consent to terrify, intimidate, threaten, harass, injure or obtain money.Applies when: Knowing or purposeful conduct; the (2)(b) exceptions apply. | Ongoing | 45-8-213(1)(d), MCA |
| October 1, 2025 | Montana digitally fabricated intimate images offense (HB 514) | Person | Do not possess and threaten to disclose real or digitally fabricated nude or sexual images of an identifiable person to obtain money or other valuable consideration without consent.Applies when: Knowing or purposeful conduct. | Ongoing | 45-8-213(1)(e), MCA |
| January 1, 2026 | Montana name, voice and likeness law: unauthorized digital voice and visual depictions (HB 513) | Person (distributor of a tool) | Do not distribute or make available a tool, software, service or device whose primary purpose is producing unauthorized digital voice or visual depictions of an identified individual for commercial use.Applies when: Without consent of the individual or rights holder, and with actual and specific knowledge of that primary purpose. | Ongoing | HB 513 § 1(3)(a) |
| January 1, 2026 | Montana name, voice and likeness law: unauthorized digital voice and visual depictions (HB 513) | Person (publisher) | Do not publish, perform, distribute or make available an unauthorized digital voice or visual depiction of an individual for commercial use without consent.Applies when: Intentional conduct with actual and specific knowledge that the material depicts the individual and is unauthorized. | Ongoing | HB 513 § 1(3)(b) |
Triggered by an event 9 duties
These apply when something happens, such as a request, an incident or a decision about a person. Each row says what triggers it.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| When triggered | Montana Facial Recognition for Government Use Act (SB 397): third-party vendor duties | Third-party vendor | Before obtaining a person's facial biometric data, tell them in writing it is being collected, the specific purpose and term of use, and get their written consent.Applies when: Vendor under contract with a state or local government agency for facial recognition services. | Each time it happens | 44-15-109(2), MCA |
| When triggered | Montana Facial Recognition for Government Use Act (SB 397): third-party vendor duties | Third-party vendor | Give the agency a dated, readable written privacy policy and notify the agency of policy changes within a reasonable time.Applies when: Vendor under contract with a state or local government agency for facial recognition services. | Ongoing | 44-15-109(3), MCA |
| When triggered | Montana Facial Recognition for Government Use Act (SB 397): third-party vendor duties | Third-party vendor | Publish a retention and destruction schedule and follow it; keep data past its purpose only with affirmative authorization, destroying it within 1 year of the person's last interaction.Applies when: Absent a valid warrant or subpoena from a court of competent jurisdiction. | Ongoing | 44-15-109(4), MCA |
| When triggered | Montana Facial Recognition for Government Use Act (SB 397): third-party vendor duties | Third-party vendor | Adopt a written information security policy with administrative, technical and physical controls, stating the data is stored in the United States, and protect it with industry-standard care.Applies when: Vendor under contract with a state or local government agency for facial recognition services. | Ongoing | 44-15-109(5), (7)(a), MCA |
| When triggered | Montana Facial Recognition for Government Use Act (SB 397): third-party vendor duties | Third-party vendor | Do not give, sell, lease or trade facial biometric data without affirmative authorization, or release it to a federal or state agency without a valid warrant or court order.Applies when: Vendor under contract with a state or local government agency for facial recognition services. | Ongoing | 44-15-109(6), (7)(b), MCA |
| When triggered | Montana Right to Compute Act | Deployer | Develop a reasonable risk management policy that considers the latest NIST AI risk management framework, the ISO/IEC AI standard named in the text, or another recognized AI risk management framework.Applies when: After deploying a critical artificial intelligence system that controls a critical infrastructure facility in whole or in part. A plan prepared under federal requirements counts as compliance. | Once | MCA 2-10-205; SB 212 Section 4 |
| When triggered | Montana Right to Compute Act | Government entity | Limit actions that restrict lawful private ownership or use of computational resources to those demonstrably necessary and narrowly tailored to a compelling government interest.Applies when: A law, ordinance, rule, policy, permit or administrative practice restricts the common or intended use of computational resources by their owner or invitees. | Ongoing | MCA 2-10-204; 2-10-203(7); SB 212 Section 3 |
| When triggered | Montana disclosing explicit synthetic media offense (SB 413) | Person | Do not disclose explicit synthetic media of an identifiable person knowing or having reason to know they did not consent and it would cause substantial emotional distress.Applies when: Offenses committed on or after the act took effect on passage and approval in 2025. | Ongoing | SB 413 § 1(1)(a); §§ 3, 4 |
| When triggered | Montana disclosing explicit synthetic media offense (SB 413) | Person | Do not disclose explicit synthetic media to terrify, intimidate, threaten, harass or injure the depicted person, or possess and threaten to disclose it to obtain money.Applies when: Offenses committed on or after the act took effect on passage and approval in 2025. | Ongoing | SB 413 § 1(1)(b), (c); §§ 3, 4 |
Law by law
Who each law covers, who enforces it, the penalties, whether people can sue and what the text leaves open. Open a law to see it; every line cites its section.
Montana Facial Recognition for Government Use Act (SB 397): third-party vendor duties
5 duties · checked November 15, 2026
Chapter 781, Laws of 2023 (SB 397); 44-15-101 to 44-15-112, MCA. Official text · Full law page
Who it covers
- Third-party vendor. A vendor under contract with a state or local government agency to provide facial recognition services. 44-15-109(2), MCA
Enforcement
- Enforcer: A person may sue for injunctive or declaratory relief; a person whose information was improperly handled may sue an entity for damages; the attorney general may seek civil penalties. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.
- Penalty: $1,000 or actual damages, whichever is greater, per violation, a negligent violation of the part, in a suit against an entity ($5,000 minimum if the violation is of 44-15-104 or 44-15-105). 44-15-112, MCA
- Penalty: $5,000 or actual damages, whichever is greater, per violation, an intentional or reckless violation of the part, in a suit against an entity ($10,000 minimum if the violation is of 44-15-104 or 44-15-105). 44-15-112, MCA
- Penalty: $10,000 or actual damages, whichever is greater, per violation, a civil penalty in an action by the attorney general. 44-15-112, MCA
- Penalty: Reasonable attorney fees, costs, expert fees and litigation expenses, plus injunctive or other relief, a prevailing party in a suit under the part. 44-15-112, MCA
- Can people sue? Yes 44-15-112, MCA
- Time to fix before enforcement: The law does not say
Exemptions
- School districts and law enforcement agencies are not a state or local government agency under the definitions, so 44-15-109 vendor duties tied to agency contracts may not reach their vendors. 44-15-103(18), MCA
What the text leaves open
- The 2023 session law was not opened, so the original effective date and any applicability clause were not confirmed.
- 44-15-112 refers to suits against an entity but does not define entity; whether it reaches private vendors as well as agencies is not stated in the section read.
- 'Vendor' is defined by reference to 18-4-123, MCA, which was not opened.
- Chapters 226 and 484 of 2025 amended the definitions section; their text was not read, and the definitions above are from the 2025 MCA as amended.
Montana Right to Compute Act
2 duties · checked November 14, 2026
SB 212, 69th Legislature (2025); Laws of Montana 2025, ch. 150; Montana Code Annotated 2-10-201 to 2-10-207. Official text · Full law page
Who it covers
- Deployer. An individual, company or other organization that uses an artificial intelligence system. The duty applies only where a critical artificial intelligence system controls a critical infrastructure facility in whole or in part. MCA 2-10-203(6); 2-10-205
- Government entity. Any unit of state or local government, including the state, counties, cities, towns, political subdivisions and their branches, departments and offices. MCA 2-10-203(8)
Enforcement
- Enforcer: The law does not name one
- Penalty: the law does not set an amount.
- Can people sue? The law does not say MCA 2-10-204; 2-10-205 (silent)
- Time to fix before enforcement: The law does not say
Exemptions
- Not critical artificial intelligence: systems for a narrow procedural task, improving a completed human activity, a preparatory task or detecting decision patterns; listed tools such as antivirus, spam filtering, spreadsheets, web hosting and search. MCA 2-10-203(4)(b)(i), (ii)
- Not critical artificial intelligence: natural-language technology that gives information, referrals, answers or other content and is subject to an acceptable use policy barring unlawful content. MCA 2-10-203(4)(b)(iii)
- The Act does not alter rights and remedies under federal or state intellectual property law. SB 212 Section 5 (codified as MCA 2-10-206)
- The Act is not to be read as preempting federal law. SB 212 Section 6 (codified as MCA 2-10-207)
What the text leaves open
- The approval date, and so the effective date, could not be confirmed on an official page. Section 10 makes the act effective on passage and approval; the enrolled text read has blank signature lines.
- Both the enrolled bill and the codified section print the standard as ISO/IEC 4200. No standard of that exact number was confirmed.
- Consequential decision is not defined, so the reach of critical artificial intelligence is unclear.
- MCA 82-1-601, which defines critical infrastructure facility, was not opened.
- The Act names no enforcer, penalty or deadline for the risk management policy. Whether other provisions of Title 2, chapter 10 supply a remedy was not checked.
- Section 2-10-204 limits government actions and states no remedy or cause of action.
Montana computer-generated child sexual abuse material possession offense (HB 82)
1 duty · checked November 15, 2026
Chapter 102, Laws of 2025 (HB 82); amends 45-5-625, MCA (sexual abuse of children) and other sections. Official text · Full law page
Who it covers
- Person. Any person who knowingly possesses computer-generated child pornography. 45-5-625(1)(e), MCA, as amended by HB 82 § 4
Enforcement
- Enforcer: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.
- Penalty: Fine up to $10,000, state prison up to 10 years, or both, except as provided in 46-18-219, possession under 45-5-625(1)(e). 45-5-625(2)(c), MCA
- Can people sue? The law does not say 45-5-625, MCA (criminal offense only)
- Time to fix before enforcement: None
Exemptions
- Subsections (1)(d) to (1)(g) do not apply to material that is part of a sexual offender information or treatment course run or approved by the Department of Corrections. 45-5-625(3), MCA
What the text leaves open
- The act adds computer-generated material expressly only to the possession offense in (1)(e); whether the distribution and sale offenses in (1)(d), (f) and (g) reach it is not stated.
Montana deepfakes in election communications law (SB 25)
2 duties · checked November 15, 2026
Chapter 541, Laws of 2025 (SB 25); codified as a new part of Title 13, chapter 35, MCA (13-35-801 to 13-35-804 per the 2025 MCA history note on 13-35-802). Official text · Full law page
Who it covers
- Person or entity working in an official election capacity. A person, corporation, committee, political party or other entity working in an official election capacity that pays for or sponsors an election or electioneering communication. SB 25 § 2(1); 13-35-802, MCA
Enforcement
- Enforcer: Commissioner of Political Practices, on a complaint under 13-37-111; civil penalties by the commissioner or a county attorney; repeat findings referred to the county attorney or attorney general for prosecution. A harmed candidate or party may sue. On September 16, 2026 a federal court barred enforcement against the two named plaintiffs only.
- Penalty: Up to $500 or three times the unlawful amount, whichever is greater, a first sufficiency finding, under the civil penalty section 13-37-128. SB 25 § 4; 13-37-128, MCA
- Penalty: Misdemeanor: fine up to $500, county jail up to 6 months, or both, a second sufficiency finding, referred to the county attorney. SB 25 § 4
- Penalty: Felony: fine up to $5,000, state prison up to 2 years, or both, a third sufficiency finding, referred to the attorney general or county attorney. SB 25 § 4
- Penalty: Injunction, costs and attorney fees; actual damages if proved plus up to $10,000 punitive damages, a civil action by a harmed candidate or party, proved by clear and convincing evidence. SB 25 § 3
- Can people sue? Yes SB 25 § 3 (candidate, or a party representing the candidate)
- Time to fix before enforcement: None
Exemptions
- Broadcasters and streaming or website operators airing a deepfake in a bona fide news segment with a clear disclaimer; broadcasters paid to air it or required by federal law to air candidate ads. SB 25 § 2
- Satire or parody. SB 25 § 2
- Distribution platforms whose disclaimer rules match the act and were given to the purchaser; interactive computer, information and telecommunications services for content provided by another party. SB 25 § 2
What the text leaves open
- Accountability in State Government v. Knudsen, No. 6:26-cv-00038-SPW (D. Mont.): the September 16, 2026 preliminary injunction covers only the named plaintiffs. govinfo.gov lists no later opinion in the case as of November 15, 2026; whether an appeal was filed was not checked.
- Whether the 60-day window and the disclosure duty apply to text-only content is unclear: the definition covers text, but the disclosure statement lists image, audio, video or multimedia.
- The text has no cure provision; whether the commissioner's general complaint process allows correction was not checked.
- The Governor's approval date was not confirmed from an official page in this run.
Montana digitally fabricated intimate images offense (HB 514)
2 duties · checked November 15, 2026
Chapter 686, Laws of 2025 (HB 514); amends 45-8-213, MCA (violating privacy in communications). Official text · Full law page
Who it covers
- Person. Any person who discloses or threatens to disclose the images described in 45-8-213(1)(d) or (1)(e). 45-8-213(1)(d), (e), MCA, as amended by HB 514 § 1
Enforcement
- Enforcer: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.
- Penalty: Fine up to $500, county jail up to 6 months, or both (misdemeanor for a first offense), a first conviction under (1)(d) or (1)(e). 45-8-213(4)(a), MCA
- Penalty: Up to 5 years imprisonment, a fine up to $25,000, or both, a second or subsequent conviction under (1)(d) or (1)(e). 45-8-213(4)(d), MCA
- Can people sue? The law does not say 45-8-213, MCA (criminal offense only)
- Time to fix before enforcement: None
Exemptions
- An interactive computer service is not liable for content provided by another person. 45-8-213(5), MCA
- For (1)(d): voluntary exposure in public or commercial settings, disclosures in the public interest such as reporting unlawful conduct, law enforcement, news reporting, legal proceedings or medical treatment, and historic, artistic, scientific or educational materials. 45-8-213(2)(b), MCA
What the text leaves open
- Subsection (4)(b) sets up to 1 year in county jail and a fine up to $1,000 for a second (1)(d) conviction, while (4)(d) makes it a felony; the text does not say how the two fit together.
- The (2)(b) exceptions are written for (1)(d) and do not mention (1)(e).
- The Governor's approval date was not confirmed from an official page in this run.
Montana disclosing explicit synthetic media offense (SB 413)
2 duties · checked November 15, 2026
Chapter 606, Laws of 2025 (SB 413); codified in Title 45, chapter 5, part 6, MCA. Official text · Full law page
Who it covers
- Person. Any person who discloses, or possesses and threatens to disclose, explicit synthetic media; interactive computer services only if they intentionally aid or abet disclosure. SB 413 § 1(1), (4)
Enforcement
- Enforcer: Criminal prosecution; the section does not name the prosecuting office. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.
- Penalty: Fine up to $1,000, county jail up to 1 year, or both, a first offense. SB 413 § 1(2)(a)
- Penalty: Fine up to $10,000, state prison up to 5 years, or both, a second or subsequent conviction. SB 413 § 1(2)(b)
- Penalty: Fine up to $10,000, state prison up to 10 years, or both, an offense where the person depicted was under 18. SB 413 § 1(2)(c)
- Can people sue? The law does not say SB 413 § 1 (criminal offense only)
- Time to fix before enforcement: None
Exemptions
- Disclosures to report unlawful conduct, for legitimate scientific research or education, or in the normal course of legal proceedings. SB 413 § 1(3)
- Interactive computer services, for content provided by another person, unless they intentionally aid or abet the disclosure. SB 413 § 1(4)
What the text leaves open
- The Governor's approval date, which is the effective date, was not confirmed from an official page in this run.
- The codified MCA section number was not confirmed from an official page in this run.
Montana name, voice and likeness law: unauthorized digital voice and visual depictions (HB 513)
2 duties · checked November 15, 2026
Chapter 685, Laws of 2025 (HB 513); section 1 is codified in Title 30, chapter 14, MCA. Official text · Full law page
Who it covers
- Person (distributor of a tool). Any person, including businesses, associations, nonprofits, educational and religious institutions, political parties and civic groups, that distributes or makes available an algorithm, software, tool, service or device. HB 513 § 1(3)(a), (10)
- Person (publisher). Any person who publishes, performs, distributes or makes available a digital voice or visual depiction for commercial use. HB 513 § 1(3)(b), (10)
Enforcement
- Enforcer: Civil suit by the individual or by a person to whom the rights were assigned, bequeathed, transferred or exclusively licensed. A web search on November 15, 2026 found no report of a lawsuit against this law; court dockets were not searched.
- Penalty: Actual damages plus the violator's profits from the unauthorized use, a violation of § 1(3)(a) or (3)(b). The plaintiff need show only gross revenue tied to the use; the violator must prove deductible expenses. HB 513 § 1(4), (6)
- Can people sue? Yes HB 513 § 1(4), (7)
- Time to fix before enforcement: The law does not say
Exemptions
- Uses protected by the First Amendment or Montana Constitution Art. II, § 7, including news gathering and reporting, sports broadcasts, comment, criticism, scholarship, satire or parody, fleeting or negligible uses, and ads for those works. HB 513 § 1(8)
- Portraying an individual as themself in an audiovisual work, unless it is meant to and does create a false impression of an authentic recording. HB 513 § 1(8)(d)
- Providers of broadband internet access service. HB 513 § 1(11)
What the text leaves open
- Section 2 says the provisions of Title 30, chapter 14, MCA apply to section 1; whether that brings in that chapter's other remedies or public enforcement was not checked because those sections were not opened.
- The codified MCA section number and the Governor's approval date were not confirmed from an official page in this run.
- Section 1(5) bars actual damages for a reasonable-belief publisher but does not say whether profits remain recoverable.
Other enacted laws to check
These 1 enacted AI law is in the states you chose, but it is not yet mapped duty by duty, so it is not in the plan above. Each page has a summary and the official source.
- Montana HB178: Limit government use of AI systems (effective October 1, 2025)
Information, not legal advice. This plan summarizes what the official texts of the laws listed say. It does not decide whether a law applies to your organization; that turns on facts such as your size, your role as a developer or deployer, and how you use AI. Laws change, and courts and regulators can read them differently. Check the official text linked with each duty and talk to a qualified lawyer before acting. Using this page does not create an attorney-client relationship. See our terms of service.
How the plan is built
Each law in the plan was read from its official text, on the legislature’s or state’s own website. 265 of the 326 have also been read a second time to confirm every date, threshold, penalty and enforcer; the rest have had one full read, and each shows the date it was last checked. Each duty is written in plain English in 30 words or fewer and carries the section it comes from, with a link.
Where a law is silent, the plan says so. It does not borrow a penalty from another statute or guess at a deadline. A law that is repealed or replaced on a known date shows that end date, and its duties leave the plan once the date passes. The date each law was last checked appears with it.
The plan is built fresh from these records every time the page loads, so it changes as soon as a law is added or re-checked. To report an error, use the corrections page. For how we find laws and decide what counts as an AI law, see our methodology. If you are not sure which laws touch your business at all, start with Am I Affected?
Common questions
What does an AI compliance plan cover?
Each duty an enacted state AI law places on a business or other regulated party: who it applies to, what it requires, when it starts, how often it recurs, who enforces it, the penalties and whether people can sue. The builder covers 1,235 duties in 326 enacted laws across 50 states, and every duty links to the section of law it comes from.
Where does the information come from?
From the official text of each law: the enrolled bill, session law or codified statute, opened on the legislature's or state's own website. 265 of the 326 laws have also been read a second time to confirm every date, threshold, penalty and enforcer, and the date each law was last checked is shown with it. Where a law is silent on a point, such as a penalty amount, the plan says the law does not say rather than filling the gap. Law firm summaries and news reports are never used as sources.
Does the plan include every AI law in a state?
Not yet. It includes the enacted laws we have mapped duty by duty. When you choose a state, its other enacted AI laws are listed separately with links, so nothing is left out of view. New laws are added as they are read. When a law is repealed or replaced on a set date, its duties show that end date and leave the plan once it passes.
How do I know which duties apply to my company?
Start with the 'who it covers' entry for each law: many apply only above a size or revenue threshold, only to developers or only to deployers, or only in one industry. The plan quotes those conditions from the text. Whether your company meets them depends on facts only you and your counsel know.
Is this legal advice?
No. It is information drawn from official legal texts, organized so you can see what each law requires. Use it to brief your team and your lawyers, not in place of them.
What does Pro add?
The same plan as a CSV file for spreadsheets and audit files, and as a calendar file (.ics) with every dated duty as an event that links back to the law. Both are built from the states and uses you pick. The plan on this page, and printing it, are open to everyone.