AI compliance plan
Your AI compliance plan.
66 duties from 15 enacted laws in 1 state. Each one says who it falls on, when it starts and where in the law it comes from.
The plan at a glance
Pro turns this plan into a spreadsheet for audit files and a calendar of every start date. The plan on this page stays open to everyone.
Already in effect 50 duties
These duties are in force today.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| June 10, 2019 | Texas personal delivery and mobile carrying devices law (SB 969, 2019) | Business entity | Operate a personal delivery device only as a business entity whose human agent can monitor or physically control its navigation and operation.Applies when: Any personal delivery device operated under the subchapter. | Ongoing | Transportation Code 552A.0003(a); 552A.0005(a)(7) |
| June 10, 2019 | Texas personal delivery and mobile carrying devices law (SB 969, 2019) | Operator | Make the device follow pedestrian rules, yield to all traffic including pedestrians, avoid unreasonable obstruction, follow consistent local rules, and carry no placardable hazardous materials.Applies when: Any operation in a pedestrian area or on a road's side or shoulder. | Ongoing | Transportation Code 552A.0005(a)(1)-(3), (5), (6) |
| June 10, 2019 | Texas personal delivery and mobile carrying devices law (SB 969, 2019) | Operator | Keep to 10 mph in pedestrian areas (or a lower local limit, not under 7 mph) and 20 mph on a road's side or shoulder.Applies when: Any operation. | Ongoing | Transportation Code 552A.0006 |
| June 10, 2019 | Texas personal delivery and mobile carrying devices law (SB 969, 2019) | Business entity | Fit each personal delivery device with a marker giving the owner's name, contact information and a unique ID number, and brakes allowing a controlled stop.Applies when: Every personal delivery device. | Ongoing | Transportation Code 552A.0007(a) |
| June 10, 2019 | Texas personal delivery and mobile carrying devices law (SB 969, 2019) | Operator | At night, show front and rear lights visible from 1 to 500 feet on a delivery device, or 1 to 50 feet on a mobile carrying device.Applies when: Nighttime operation. | Ongoing | Transportation Code 552A.0005(a)(4); 552A.0007(b); 552A.0008(b) |
| June 10, 2019 | Texas personal delivery and mobile carrying devices law (SB 969, 2019) | Business entity | Maintain general liability insurance of at least $100,000 for damages arising from operating a personal delivery device.Applies when: Any business entity operating a personal delivery device. | Ongoing | Transportation Code 552A.0010 |
| September 1, 2019 | Texas deep fake video election offense (SB 751, 2019) | Person | Do not create a deep fake video and cause it to be published or distributed within 30 days of an election, intending to injure a candidate or influence the result.Applies when: Any election. The statute has no disclosure safe harbor. | Ongoing | Election Code 255.004(d), (e) |
| September 1, 2023 | Texas sexually explicit deep fake media offense (SB 1361, as amended in 2025) | Person | Do not knowingly produce or distribute by electronic means deep fake media showing a person's intimate parts or sexual conduct without that person's effective consent.Applies when: Any conduct on or after September 1, 2025 (videos only before then, from September 1, 2023). A disclaimer that the media is not authentic is not a defense. | Ongoing | Penal Code 21.165(b), (c-2), as amended by SB 441 and HB 449 |
| September 1, 2024 | Texas SCOPE Act (HB 18): algorithm provisions for known minors | Digital service provider | Make a commercially reasonable effort to ensure that algorithms used to suggest, promote or rank information for known minors do not interfere with your harm-prevention duties under Section 509.053.Applies when: The provider uses algorithms to automate the suggestion, promotion or ranking of information to known minors.Blocked in court for members of CCIA and NetChoice. A federal preliminary injunction bars the Texas Attorney General from enforcing this duty against members of the two trade groups; the Fifth Circuit affirmed it on Section 230 grounds. Not blocked for other providers. CCIA v. Paxton, Nos. 24-50721 and 25-50096 (5th Cir.), Jul 24, 2026 | Ongoing | Bus. & Com. Code 509.056(1) |
| September 1, 2024 | Texas SCOPE Act (HB 18): algorithm provisions for known minors | Digital service provider | Disclose clearly in terms of service, a privacy policy or similar document how the service uses algorithms, how they promote, rank or filter content, and the personal identifying information used.Applies when: The provider uses algorithms to automate the suggestion, promotion or ranking of information to known minors. | Ongoing | Bus. & Com. Code 509.056(2) |
| September 1, 2024 | Texas SCOPE Act (HB 18): algorithm provisions for known minors | Digital service provider | Develop and implement a strategy to prevent known minors' exposure to harmful material and listed harmful content, including filtering, human review and making algorithm code available to independent security researchers.Applies when: A known minor uses the digital service. Listed content promotes, glorifies or facilitates suicide, self-harm, eating disorders, substance abuse, stalking, bullying, harassment, grooming, trafficking or sexual exploitation. Trade secrets need not be disclosed.Blocked in court for members of CCIA and NetChoice. A federal preliminary injunction bars the Texas Attorney General from enforcing this duty against members of the two trade groups; the Fifth Circuit affirmed it on Section 230 grounds. Not blocked for other providers. CCIA v. Paxton, Nos. 24-50721 and 25-50096 (5th Cir.), Jul 24, 2026 | Ongoing | Bus. & Com. Code 509.053(a), (b)(1); 509.058 |
| September 1, 2025 | Texas AI-generated media and phishing financial exploitation law (SB 2373) | Person | Do not knowingly or intentionally disseminate artificially generated media or a phishing communication for the purpose of financial exploitation.Applies when: Any dissemination on or after September 1, 2025; providers carrying another person's content are excluded. | Ongoing | Civ. Prac. & Rem. Code 100B.002(a), 100B.003(a) |
| September 1, 2025 | Texas AI-generated media and phishing financial exploitation law (SB 2373) | Person | Do not knowingly engage in financial abuse through artificially generated media disseminated to another person, or by digitally tricking someone into giving personal, financial or identifying information.Applies when: Any conduct on or after September 1, 2025. | Ongoing | Penal Code 32.56(b) |
| September 1, 2025 | Texas AI-generated obscene child imagery offense (SB 20) | Person | Do not knowingly possess, access with intent to view, or promote obscene visual material depicting an apparent child under 18, including AI-created images, cartoons or animation.Applies when: Any conduct on or after September 1, 2025. | Ongoing | Penal Code 43.235(b)(1) |
| September 1, 2025 | Texas AI-generated obscene child imagery offense (SB 20) | Person | Do not use an image of an actual child under 18 with the intent to train an AI model to produce child pornography as described in Penal Code 43.26.Applies when: Any conduct on or after September 1, 2025; the child was under 18 when the image was made. | Ongoing | Penal Code 43.235(b)(2) |
| September 1, 2025 | Texas age verification for AI sexual image tools (HB 581) | Commercial entity | Use reasonable age verification, by digital identification or a commercial system using government ID or transactional data, to confirm users of the AI creation tool are 18 or older.Applies when: The entity offers a publicly accessible tool or app for creating artificial sexual material harmful to minors and does not meet the 129B.002(a-2) exemption. | Ongoing | Civ. Prac. & Rem. Code 129B.002(a-1); 129B.003(b) |
| September 1, 2025 | Texas age verification for AI sexual image tools (HB 581) | Commercial entity or third-party verifier | Do not retain any identifying information of the individual after performing the required age verification.Applies when: Age verification is performed under Section 129B.002. | Ongoing | Civ. Prac. & Rem. Code 129B.002(b) |
| September 1, 2025 | Texas age verification for AI sexual image tools (HB 581) | Commercial entity | Ensure any individual used as a source for the material is 18 or older and has consented to use of their face and body.Applies when: The entity is subject to the age verification duty in 129B.002(a-1); exempt entities under 129B.002(a-2) are excluded. | Ongoing | Civ. Prac. & Rem. Code 129B.0045 |
| September 1, 2025 | Texas automated motor vehicle authorization law (SB 2807, 2025) | Owner or operator | Run with the system engaged only if the vehicle can obey traffic law, has a recording device, a federally compliant system, minimal-risk capability, registration, title and insurance.Applies when: Any automated motor vehicle on a Texas highway or street with the automated driving system engaged. | Ongoing | Transportation Code 545.455(b) |
| September 1, 2025 | Texas civil liability for AI intimate imagery and nudification apps (SB 441) | Owner of a website or application | Make available on the website or app an easily accessible system for depicted people to request removal of artificial intimate visual material.Applies when: Artificial intimate visual material is disclosed on the owner's website or application. | Ongoing | Civ. Prac. & Rem. Code 98B.0022(c) |
| September 1, 2025 | Texas civil liability for AI intimate imagery and nudification apps (SB 441) | Owner of a website or application | Post a clear and conspicuous plain-language notice describing the removal process, the owner's responsibilities and how to submit a request.Applies when: Artificial intimate visual material is disclosed on the owner's website or application. | Ongoing | Civ. Prac. & Rem. Code 98B.0022(d) |
| September 1, 2025 | Texas civil liability for AI intimate imagery and nudification apps (SB 441) | Owner of a website or application; payment processor | Do not recklessly facilitate, or process payment for, producing or disclosing artificial intimate visual material for payment while knowing or recklessly disregarding the depicted person's lack of consent.Applies when: The material is produced or disclosed in exchange for payment without the depicted person's consent. | Ongoing | Civ. Prac. & Rem. Code 98B.0022(a)(1), (3) |
| September 1, 2025 | Texas civil liability for AI intimate imagery and nudification apps (SB 441) | Owner of a nudification application | Do not let a publicly accessible nudification app you own produce material of a person who did not consent, where you know or recklessly disregard that lack of consent.Applies when: Artificial intimate visual material is produced from the owner's publicly accessible nudification application. | Ongoing | Civ. Prac. & Rem. Code 98B.0022(a)(2) |
| September 1, 2025 | Texas computer-generated child sexual material offenses (SB 1621, 2025) | Person | Do not possess, or access with intent to view, visual material depicting a computer-generated child engaged in sexual conduct.Applies when: The person knows or should have known the depiction appears to be under 18, or believes it shows an actual child under 18. State jail felony, raised by prior convictions or 10 or more depictions. | Ongoing | Penal Code 43.26(a-2), (c-3) |
| September 1, 2025 | Texas computer-generated child sexual material offenses (SB 1621, 2025) | Person | Do not promote, or possess with intent to promote, visual material depicting a computer-generated child engaged in sexual conduct.Applies when: Same knowledge test as possession. Third degree felony, raised by a prior conviction, 10 or more depictions, or a depiction appearing under 10. | Ongoing | Penal Code 43.26(e-1), (g-1) |
| September 1, 2025 | Texas computer-generated child sexual material offenses (SB 1621, 2025) | Person | Do not possess, access or promote sexual material depicting a recognizable real child whose image was used to create, adapt or modify it, including with AI.Applies when: Treated as a depiction of a child under 43.26(a)(1)(B). Possession is a third degree felony at base, with enhancements; see open questions on the promotion grade. | Ongoing | Penal Code 43.26(a)(1)(B), (a-1), (c-1), (e) |
| September 1, 2025 | Texas computer-generated child sexual material offenses (SB 1621, 2025) | Person | Do not knowingly possess, access with intent to view, or promote lewd visual material of a child, including AI-generated material virtually indistinguishable from a real child.Applies when: The material shows lewd exhibition of a child's genitals or pubic area, appeals to the prurient interest and has no serious value. State jail felony at base. | Ongoing | Penal Code 43.262(b), (b-1) |
| September 1, 2025 | Texas electronic health record requirements, including AI use by practitioners (SB 1188) | Covered entity | Ensure each electronic health record includes an option for a practitioner to record communications between covered entities about the individual's metabolic health and diet in treating chronic disease.Applies when: Electronic health records prepared on or after September 1, 2025. | Ongoing | Health & Safety Code 183.003; SB 1188 § 2(a) |
| September 1, 2025 | Texas electronic health record requirements, including AI use by practitioners (SB 1188) | Covered entity | Do not collect, store or share information about an individual's credit score or voter registration status in the individual's electronic health record.Applies when: Electronic health records prepared on or after September 1, 2025. | Ongoing | Health & Safety Code 183.004; SB 1188 § 2(a) |
| September 1, 2025 | Texas electronic health record requirements, including AI use by practitioners (SB 1188) | Health care practitioner | When using AI for diagnostic purposes, stay within the scope of the license, and review all records created with AI consistent with Texas Medical Board medical records standards.Applies when: A practitioner uses AI for diagnosis or treatment recommendations based on the patient's medical record, and the use is not otherwise barred by law. | Ongoing | Health & Safety Code 183.005(a) |
| September 1, 2025 | Texas electronic health record requirements, including AI use by practitioners (SB 1188) | Health care practitioner | Disclose to patients the practitioner's use of AI for diagnostic purposes.Applies when: A practitioner uses AI for diagnostic purposes under section 183.005(a). | Ongoing | Health & Safety Code 183.005(b) |
| September 1, 2025 | Texas electronic health record requirements, including AI use by practitioners (SB 1188) | Covered entity | Ensure the electronic health record system lets a minor's parent, or managing conservator or guardian if applicable, immediately obtain complete and unrestricted access to the minor's record.Applies when: The system stores records of minors (17 or younger), unless law or a court order restricts access. | Ongoing | Health & Safety Code 183.006 |
| September 1, 2025 | Texas explicit deep fake reporting on social media platforms law (HB 3133) | Social media platform | Provide an easily accessible complaint system that lets users submit good-faith complaints about explicit deep fake material and track their status.Applies when: At all times for a covered platform. The same system covers illegal content or activity and the platform's removal decisions. | Ongoing | Bus. & Com. Code 120.101 |
| September 1, 2025 | Texas explicit deep fake reporting on social media platforms law (HB 3133) | Social media platform | Post a clear, conspicuous, plain-language notice of the complaint system that describes the platform's processing duties and how to submit a complaint.Applies when: At all times for a covered platform. The notice may sit on a separate web page reached through a clear and conspicuous hyperlink. | Ongoing | Bus. & Com. Code 120.1015 |
| September 1, 2025 | Texas government AI systems law (SB 1964): vendor duties | Vendor | Conduct a system assessment of the heightened scrutiny AI system covering risks of unlawful harm, system limitations and information governance practices.Applies when: The vendor contracts with a state agency to deploy or use a heightened scrutiny AI system. | Ongoing | Gov't Code 2054.708(a) |
| September 1, 2025 | Texas government AI systems law (SB 1964): vendor duties | Vendor (sandbox program) | Provide eligible entities secure access to the AI system used in the sandbox, under department oversight, and submit quarterly reports on performance, risk mitigation and feedback.Applies when: The vendor participates in the Department of Information Resources AI sandbox program. | Ongoing | Gov't Code 2054.706(d), (f) |
| September 1, 2025 | Texas sexually explicit deep fake media offense (SB 1361, as amended in 2025) | Person | Do not intentionally threaten to produce or distribute sexually explicit deep fake media to coerce, extort, harass or intimidate another person.Applies when: Any conduct on or after September 1, 2025. | Ongoing | Penal Code 21.165(b-1), as added by SB 441 |
| January 1, 2026 | Texas Responsible Artificial Intelligence Governance Act (TRAIGA) | Governmental agency | Disclose to consumers, before or at the time of interaction, that they are interacting with an AI system, in clear, conspicuous plain language without dark patterns; required even if obvious.Applies when: A governmental agency makes an AI system available that is intended to interact with consumers. | Ongoing | Bus. & Com. Code 552.051(b)-(e) |
| January 1, 2026 | Texas Responsible Artificial Intelligence Governance Act (TRAIGA) | Person | Do not develop or deploy an AI system that intentionally aims to incite or encourage self-harm, harm to another person, or criminal activity.Applies when: Any development or deployment on or after January 1, 2026. | Ongoing | Bus. & Com. Code 552.052 |
| January 1, 2026 | Texas Responsible Artificial Intelligence Governance Act (TRAIGA) | Governmental entity | Do not use AI to classify people by social behavior or characteristics with the intent to assign a social score that leads to detrimental or disproportionate treatment.Applies when: Any governmental entity use on or after January 1, 2026. | Ongoing | Bus. & Com. Code 552.053 |
| January 1, 2026 | Texas Responsible Artificial Intelligence Governance Act (TRAIGA) | Governmental entity | Do not use AI to uniquely identify individuals with biometric data, or gather images from the internet or other sources, without consent where that would infringe their rights.Applies when: Any governmental entity use on or after January 1, 2026. | Ongoing | Bus. & Com. Code 552.054(b) |
| January 1, 2026 | Texas Responsible Artificial Intelligence Governance Act (TRAIGA) | Person | Do not develop or deploy an AI system with the sole intent of infringing rights under the U.S. Constitution.Applies when: Any development or deployment on or after January 1, 2026. | Ongoing | Bus. & Com. Code 552.055(a) |
| January 1, 2026 | Texas Responsible Artificial Intelligence Governance Act (TRAIGA) | Person | Do not develop or deploy an AI system with the intent to unlawfully discriminate against a protected class; disparate impact alone does not show intent.Applies when: Any development or deployment on or after January 1, 2026; insurers and insured financial institutions have carve-outs. | Ongoing | Bus. & Com. Code 552.056(b), (c) |
| January 1, 2026 | Texas Responsible Artificial Intelligence Governance Act (TRAIGA) | Person | Do not develop or distribute an AI system solely intended to produce child sexual abuse material or unlawful sexual deepfakes, or one impersonating a minor in sexual conduct.Applies when: Any development or distribution on or after January 1, 2026. | Ongoing | Bus. & Com. Code 552.057 |
| January 1, 2026 | Texas ban on automated adverse determinations in utilization review (SB 815) | Utilization review agent | Do not use an automated decision system to make, wholly or partly, an adverse determination.Applies when: Utilization review for a health benefit plan delivered, issued for delivery or renewed on or after January 1, 2026. | Ongoing | Insurance Code 4201.156(a); SB 815 § 4 |
| January 1, 2026 | Texas electronic health record requirements, including AI use by practitioners (SB 1188) | Covered entity | Ensure electronic health records containing patient information are physically maintained in the United States or a U.S. territory, including records held by third-party or cloud providers.Applies when: Storage of an electronic health record on or after January 1, 2026, whenever the record was prepared. | Ongoing | Health & Safety Code 183.002(a); SB 1188 § 2(b) |
| January 1, 2026 | Texas electronic health record requirements, including AI use by practitioners (SB 1188) | Covered entity | Ensure Texas residents' electronic health record information, other than open data, is accessible only to individuals who need it for treatment, payment or health care operations duties.Applies when: Storage of an electronic health record on or after January 1, 2026. | Ongoing | Health & Safety Code 183.002(b); SB 1188 § 2(b) |
| January 1, 2026 | Texas electronic health record requirements, including AI use by practitioners (SB 1188) | Covered entity | Implement reasonable and appropriate administrative, physical and technical safeguards to protect the confidentiality, integrity and availability of electronic health record information.Applies when: Storage of an electronic health record on or after January 1, 2026. | Ongoing | Health & Safety Code 183.002(c); SB 1188 § 2(b) |
| May 28, 2026 | Texas automated motor vehicle authorization law (SB 2807, 2025) | Commercial operator | Hold and maintain a TxDMV authorization before carrying property or passengers for a commercial enterprise in an automated motor vehicle without a human driver.Applies when: Commercial driverless operation. TxDMV says authorization became enforceable May 28, 2026. | Ongoing | Transportation Code 545.455(c)(1); 545.456; SB 2807 § 12(b) |
| May 28, 2026 | Texas automated motor vehicle authorization law (SB 2807, 2025) | Commercial operator | File with DPS a plan telling police, fire and medical responders how to reach a fleet support specialist, tow the vehicle and tell whether the system is engaged.Applies when: Before commercial driverless operation; the authorization application must certify DPS received it. | Ongoing | Transportation Code 545.455(c)(2); 545.456(b)(3) |
Triggered by an event 16 duties
These apply when something happens, such as a request, an incident or a decision about a person. Each row says what triggers it.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| When triggered | Texas Responsible Artificial Intelligence Governance Act (TRAIGA) | Health care service provider | Disclose AI use to the patient or their representative no later than the date the service is first provided, or as soon as reasonably possible in an emergency.Applies when: An AI system is used in a health care service. | Each time it happens | Bus. & Com. Code 552.051(f) |
| When triggered | Texas Responsible Artificial Intelligence Governance Act (TRAIGA) | Person under investigation | Respond to the attorney general's civil investigative demand and requests for documentation about the AI system.Applies when: After the attorney general receives a complaint and issues a demand or request. | Each time it happens | Bus. & Com. Code 552.103 |
| When triggered | Texas Responsible Artificial Intelligence Governance Act (TRAIGA) | Sandbox participant | File quarterly reports with the Department of Information Resources while testing an AI system in the regulatory sandbox; participation is limited to 36 months unless extended for good cause.Applies when: Only for persons admitted to the Chapter 553 sandbox program. | Ongoing | Bus. & Com. Code 553.053(a), (b); 553.102(a) |
| When triggered | Texas automated motor vehicle authorization law (SB 2807, 2025) | Authorization holder | Update the contact, vehicle and compliance statements and the plan certification within 30 days after material information changes.Applies when: Any material change. TxDMV may immediately suspend, revoke or cancel for failure to update or to provide documents on request. | Each time it happens | Transportation Code 545.456(e), (f) |
| When triggered | Texas automated motor vehicle authorization law (SB 2807, 2025) | Owner, person acting for the vehicle or human driver | After a collision involving an automated motor vehicle, comply with the collision duties in Transportation Code Chapter 550.Applies when: Any collision involving an automated motor vehicle. | Each time it happens | Transportation Code 545.457 |
| When triggered | Texas automated motor vehicle authorization law (SB 2807, 2025) | Authorization holder | On a TxDMV notice that a vehicle is unsafe and endangers the public, correct the issues and file a certification explaining the corrections before the deadline.Applies when: TxDMV finds the vehicle's operation has caused or is likely to cause serious bodily injury. | Each time it happens | Transportation Code 545.459(a)-(f) |
| When triggered | Texas ban on automated adverse determinations in utilization review (SB 815) | Utilization review agent | Allow the commissioner to audit and inspect, at any time, the agent's use of an automated decision system for utilization review.Applies when: The commissioner of insurance chooses to audit or inspect. | Each time it happens | Insurance Code 4201.156(b) |
| When triggered | Texas ban on automated adverse determinations in utilization review (SB 815) | Utilization review agent | Include in each adverse determination notice the principal reasons, the clinical basis, a description and source of the screening criteria and review procedures, and the complaint and appeal process.Applies when: An adverse determination is issued for a plan delivered, issued or renewed on or after January 1, 2026. | Each time it happens | Insurance Code 4201.303(a); SB 815 § 4 |
| When triggered | Texas civil liability for AI intimate imagery and nudification apps (SB 441) | Owner of a website or application | Remove the material within 72 hours of the depicted person's removal request and make reasonable efforts to identify and remove known identical copies.Applies when: The depicted person requests removal of artificial intimate visual material disclosed on the site or app. | Each time it happens | Civ. Prac. & Rem. Code 98B.0022(b) |
| When triggered | Texas electronic health record requirements, including AI use by practitioners (SB 1188) | Covered entity | Amend recorded biological sex only to correct a clerical error, or to the opposite sex after a sexual development disorder diagnosis, recording the disorder in the separate space.Applies when: A covered entity changes the biological sex listed in an electronic health record. | Each time it happens | Health & Safety Code 183.008 |
| When triggered | Texas explicit deep fake reporting on social media platforms law (HB 3133) | Social media platform | Immediately confirm to the reporting user that the platform is aware of the reported explicit deep fake material.Applies when: The platform receives notice of explicit deep fake material on the platform. | Each time it happens | Bus. & Com. Code 120.102(b)(1) |
| When triggered | Texas explicit deep fake reporting on social media platforms law (HB 3133) | Social media platform | Remove the reported content and any known content that is a copy of or identical to it.Applies when: The platform receives notice of explicit deep fake material. The text sets no removal deadline; the 48-hour clock in 120.102(a) applies to illegal content reports. | Each time it happens | Bus. & Com. Code 120.102(b)(2) |
| When triggered | Texas explicit deep fake reporting on social media platforms law (HB 3133) | Social media platform | Send the reporting user written notice of the status of the reported content no later than the seventh day after the report was submitted.Applies when: A user has submitted a report of explicit deep fake material. | Each time it happens | Bus. & Com. Code 120.102(b)(3) |
| When triggered | Texas explicit deep fake reporting on social media platforms law (HB 3133) | Social media platform | Implement measures to ensure the same material is not posted on the platform again.Applies when: Reported content is determined to be explicit deep fake material. | Each time it happens | Bus. & Com. Code 120.1025(b) |
| When triggered | Texas government AI systems law (SB 1964): vendor duties | Vendor | Make the system assessment available to the Department of Information Resources on request.Applies when: The department requests the assessment. | Each time it happens | Gov't Code 2054.708(b) |
| When triggered | Texas government AI systems law (SB 1964): vendor duties | Vendor | Report a violation of Government Code chapter 2054, subchapter S to the attorney general and, if applicable, the Department of Information Resources.Applies when: The vendor becomes aware of a violation. | Each time it happens | Gov't Code 2054.709(a) |
Law by law
Who each law covers, who enforces it, the penalties, whether people can sue and what the text leaves open. Open a law to see it; every line cites its section.
Texas AI-generated media and phishing financial exploitation law (SB 2373)
2 duties · checked November 14, 2026
SB 2373, 89th Legislature, Regular Session (2025); Civil Practice and Remedies Code ch. 100B; Penal Code 32.56. Official text · Full law page
Who it covers
- Person. Any person who knowingly or intentionally disseminates artificially generated media or a phishing communication for financial exploitation, or knowingly engages in financial abuse through them. Civ. Prac. & Rem. Code 100B.002(a); Penal Code 32.56(b)
Enforcement
- Enforcer: A harmed claimant may sue; the attorney general may sue for a civil penalty in Travis County or where the events occurred; criminal prosecution for the Penal Code offense (prosecuting office not named). A web search on November 14, 2026 found no report of a court order blocking this law.
- Penalty: Up to $1,000 per day the media or communication is disseminated, knowing or intentional dissemination for financial exploitation (attorney general action). Civ. Prac. & Rem. Code 100B.003(a), (b)
- Penalty: Actual damages including mental anguish, the defendant's attributable profits, court costs and reasonable attorney's fees; injunction available, claimant suit for dissemination for financial exploitation. Civ. Prac. & Rem. Code 100B.002(b), (c)
- Penalty: Class B misdemeanor (under $100) up to first-degree felony ($150,000 or more), by value of property involved, financial abuse using artificially generated media or phishing. Penal Code 32.56(c)
- Can people sue? Yes Civ. Prac. & Rem. Code 100B.002
- Time to fix before enforcement: None
Exemptions
- No liability or offense, for content provided by another person, for interactive computer service providers (47 U.S.C. 230(f)), telecommunications services (47 U.S.C. 153) or FCC-licensed radio and TV stations. Civ. Prac. & Rem. Code 100B.002(d), 100B.003(c); Penal Code 32.56(d)
What the text leaves open
- Financial exploitation (Finance Code 281.001) and financial abuse (Penal Code 32.55) were not read, so who counts as a victim is not set out here.
- Fine and confinement ranges for each offense grade are in Penal Code chapter 12, which was not read.
- The Governor's signing date was not confirmed on an official page in this run.
Texas AI-generated obscene child imagery offense (SB 20)
2 duties · checked November 14, 2026
SB 20, 89th Legislature, Regular Session (2025); Penal Code 43.235; amends Penal Code 3.03(b) and 71.02(a). Official text · Full law page
Who it covers
- Person. Any person who possesses, accesses with intent to view or promotes the covered material, or who uses an image of a real child to train an AI model. Penal Code 43.235(b)
Enforcement
- Enforcer: Criminal prosecution; the act does not name the prosecuting office. A web search on November 14, 2026 found no report of a court order blocking this law. News reports describe a September 2026 Seventh Circuit ruling on private possession of AI-generated material; it does not bind Texas courts and was not read.
- Penalty: State jail felony; fine and confinement amounts are not stated in the act, an offense under Section 43.235. Penal Code 43.235(c)
- Penalty: Third-degree felony (one prior conviction) or second-degree felony (two or more); amounts not stated in the act, a repeat offense after a conviction under 43.235, 43.23, 43.26, 43.261 or 43.262. Penal Code 43.235(c)
- Can people sue? The law does not say SB 20 (criminal offense only; no civil action created)
- Time to fix before enforcement: None
Exemptions
- No exception or affirmative defense is stated in Section 43.235. Conduct that also violates another law may be prosecuted under either law or both. Penal Code 43.235(d)
What the text leaves open
- Obscene and the conduct in Penal Code 43.21(a)(1)(B) are defined in sections that were not opened.
- Fine and confinement ranges for each felony grade are set in Penal Code chapter 12, which was not read.
- The page reader's account of the training offense in 43.235(b)(2) was a paraphrase; the exact link between the training intent and Section 43.26 should be checked against the bill text.
- The Governor's signing date was not confirmed on an official page in this run.
Texas Responsible Artificial Intelligence Governance Act (TRAIGA)
10 duties · checked November 11, 2026
HB 149, 89th Legislature, Regular Session (2025); Business & Commerce Code Title 11, Subtitle D, Chapters 551-554; amends Bus. & Com. Code 503.001, 541.104 and Gov't Code 325.011, 2054.068, 2054.0965. Official text · Full law page
Who it covers
- Person (developer or deployer of an AI system). Any person who promotes, advertises or conducts business in Texas, produces a product or service used by Texas residents, or develops or deploys an AI system in Texas. Bus. & Com. Code 551.002
- Governmental entity / governmental agency. Texas governmental entities, excluding hospital districts and institutions of higher education; the consumer-disclosure duty in 552.051 applies to a governmental agency that makes an AI system available to interact with consumers. Bus. & Com. Code 552.001(3); 552.051(b)
- Health care service provider. A provider of health care services that uses an AI system in the service. Bus. & Com. Code 552.051(f)
Enforcement
- Enforcer: Texas Attorney General, exclusively; state licensing agencies may add sanctions after an attorney general finding and recommendation.
- Penalty: $10,000 to $12,000 per violation, curable violations, or breach of a written cure statement. Bus. & Com. Code 552.105(a)(1)
- Penalty: $80,000 to $200,000 per violation, uncurable violations. Bus. & Com. Code 552.105(a)(2)
- Penalty: $2,000 to $40,000 per day, continued violations. Bus. & Com. Code 552.105(a)(3)
- Penalty: Up to $100,000 monetary penalty, plus license suspension, probation or revocation, sanctions by a state licensing agency against a licensed person found in violation under 552.105, on the attorney general's recommendation. Bus. & Com. Code 552.106(b)
- Can people sue? No Bus. & Com. Code 552.101(b)
- Time to fix before enforcement: 60 days
Exemptions
- Hospital districts and institutions of higher education are not 'governmental entities'. Bus. & Com. Code 552.001(3)(A), (B)
- Chapter 552 may not impose requirements that adversely affect rights, including free speech; only the Department of Insurance may regulate the business of insurance. Bus. & Com. Code 552.002
- Insurance entities subject to unfair-discrimination insurance statutes are exempt from the unlawful-discrimination section for insurance services; federally insured financial institutions complying with banking anti-discrimination law are deemed compliant with it. Bus. & Com. Code 552.056(d), (e)
- HIPAA-covered information is excluded from 'biometric data'; the biometric statute exempts financial-institution voiceprints, AI training and storage of biometric identifiers unless used to uniquely identify a person, and security or fraud uses. Bus. & Com. Code 552.054(a); 503.001(e)
- No liability where another person uses the defendant's AI system in a prohibited manner; the attorney general may not seek a civil penalty for an AI system that has not been deployed. Bus. & Com. Code 552.105(e)(1), (f)
- The chapter supersedes and preempts local ordinances, resolutions and rules on the use of AI systems. Bus. & Com. Code 552.003
What the text leaves open
- 552.051 uses 'governmental agency' for the consumer-disclosure duty while the rest of Chapter 552 uses 'governmental entity'; the enrolled text defines only 'governmental entity'. Private businesses have no general AI-interaction disclosure duty under this Act.
- Section 9 lets state agencies defer new mandatory duties without an appropriation; whether any agency has done so was not checked.
Texas SCOPE Act (HB 18): algorithm provisions for known minors
3 duties · checked November 14, 2026
HB 18, 88th Legislature, Regular Session (2023); Acts 2023, 88th Leg., R.S., ch. 795; Business & Commerce Code Chapter 509. Official text · Full law page
Who it covers
- Digital service provider. A person who owns or operates a website, app, program or software that collects or processes personal identifying information, and who decides the purpose and means of that processing, if the service connects users to interact socially, lets users create a public or semi-public profile, and lets users post content others can view. Bus. & Com. Code 509.001(1), (2); 509.002(a)
Enforcement
- Enforcer: Consumer protection division of the Texas Attorney General's office; a violation is a deceptive act or practice under Business & Commerce Code Chapter 17, Subchapter E, actionable solely in an attorney general enforcement action. Court status: a federal court preliminarily enjoined enforcement of Sections 509.053 and 509.056(1) on August 30, 2024 (CCIA v. Paxton, W.D. Tex. No. 1:24-cv-849). On July 24, 2026 the Fifth Circuit affirmed that injunction as to CCIA and NetChoice, and vacated a broader injunction won by other plaintiffs (SEAT v. Paxton) for lack of standing.
- Penalty: the law does not set an amount.
- Can people sue? Yes Bus. & Com. Code 509.152 (only a parent or guardian of an affected known minor, and only for a declaratory judgment or injunction; no class actions; otherwise no private right of action)
- Time to fix before enforcement: The law does not say
Exemptions
- State agencies and political subdivisions; financial institutions and data subject to Gramm-Leach-Bliley Title V; HIPAA covered entities and business associates; institutions of higher education. Bus. & Com. Code 509.002(b)(1)-(3), (5)
- A small business as defined by the U.S. Small Business Administration on September 1, 2024. Bus. & Com. Code 509.002(b)(4)
- Education-services operators regulated by Education Code Chapter 32, Subchapter D, and FERPA-subject persons that primarily serve students or educational institutions; processing of employee or contractor data for employment purposes. Bus. & Com. Code 509.002(b)(6)-(8)
- Services that facilitate only email or direct messaging, and services that primarily provide news, sports, commerce or provider-selected content where chat or comments are incidental. Bus. & Com. Code 509.002(b)(9), (10)
- Internet service providers, search engines and cloud service providers that solely provide access or connection to content they do not control, unless responsible for creating harmful material. Bus. & Com. Code 509.002(c)
- Subchapter B does not require a digital service provider to disclose a trade secret. Bus. & Com. Code 509.058
What the text leaves open
- The CCIA v. Paxton injunction protects members of CCIA and NetChoice; whether a given provider is a member, and how the Attorney General treats non-members after the Fifth Circuit's Section 230 holding, was not determined. The case was remanded to the district court.
- Civil penalties and other remedies under Business & Commerce Code Chapter 17, Subchapter E were not read, so no penalty figure is given.
- The small business exemption turns on the U.S. Small Business Administration definition as of September 1, 2024; those size standards were not read.
- The Governor's signing date was not confirmed on an official page in this run.
Texas age verification for AI sexual image tools (HB 581)
3 duties · checked November 14, 2026
HB 581, 89th Legislature, Regular Session (2025); amends Civil Practice and Remedies Code ch. 129B (129B.001, 129B.002, 129B.003, 129B.005, 129B.006) and adds 129B.0045. Official text · Full law page
Who it covers
- Commercial entity. A corporation, LLC, partnership, sole proprietorship or other business that operates a website with a publicly accessible tool for creating artificial sexual material harmful to minors, or makes such an application publicly available. Civ. Prac. & Rem. Code 129B.001; 129B.002(a-1)
Enforcement
- Enforcer: The bill text read does not name who brings the civil penalty action; that is set by the existing Section 129B.006(a), which was not opened. A web search on November 14, 2026 found no report of a court order blocking the duties HB 581 added.
- Penalty: Up to $10,000 per day, operating a website or making an application available in violation of the age verification requirements. Civ. Prac. & Rem. Code 129B.006(b)(1)
- Penalty: Up to $10,000 per instance, retaining identifying information in violation of 129B.002(b). Civ. Prac. & Rem. Code 129B.006(b)(2)
- Penalty: Up to $250,000 additional, a violation that results in a minor accessing sexual material harmful to minors. Civ. Prac. & Rem. Code 129B.006(b)(3)
- Can people sue? The law does not say HB 581 (no private action stated in the amended sections read)
- Time to fix before enforcement: The law does not say
Exemptions
- An entity whose terms or use policies, acknowledged by users, prohibit generating such material and that takes affirmative steps to limit it (for example model training, reporting tools, output and training-data filtering) is exempt from the age verification and source duties. Civ. Prac. & Rem. Code 129B.002(a-2); 129B.0045
- Internet service providers and their affiliates, search engines and cloud service providers are not liable solely for providing access or connection to content they are not responsible for creating. Civ. Prac. & Rem. Code 129B.005(b)
What the text leaves open
- Section 129B.006(a), which names who may sue for the civil penalty and seek an injunction, was not opened in this run.
- Sexual material harmful to minors is defined in the existing chapter 129B and Penal Code provisions that were not opened.
- The Governor's signing date was not confirmed on an official page in this run.
Texas automated motor vehicle authorization law (SB 2807, 2025)
6 duties · checked November 15, 2026
SB 2807, 89th Legislature, Regular Session (2025); Acts 2025, 89th Leg., R.S., ch. 1034; Transportation Code 545.451 to 545.459; Occupations Code 2402.005; Insurance Code 1954.003; Transportation Code ch. 644A. Official text · Full law page
Who it covers
- Owner or authorization holder. A person operating an automated motor vehicle (Level 4 or 5 automated driving system) on a Texas highway or street with the system engaged; authorization is needed to carry property or passengers for a commercial enterprise without a human driver. Transportation Code 545.451(2), (3); 545.455(b), (c)
- Transportation network company. An entity that uses a digital network to arrange rides in automated motor vehicles for compensation. Occupations Code 2402.005
Enforcement
- Enforcer: Criminal prosecution for operating commercially without authorization or the emergency plan; the Texas Department of Motor Vehicles may suspend, revoke, cancel or restrict authorizations. Citations for traffic violations with the system engaged go to the owner or authorization holder. A web search on November 15, 2026 found no lawsuit or court order against SB 2807.
- Penalty: Class B misdemeanor: fine up to $2,000, jail up to 180 days, or both; each day is a separate offense, operating commercially without a TxDMV authorization or the DPS emergency plan. Transportation Code 545.455(d), (e); Penal Code 12.22
- Penalty: Up to $10,000, or up to double the gain or loss, a business entity convicted of the Class B misdemeanor. Transportation Code 545.455(d); Penal Code 12.51(b)(2), (c)
- Penalty: Suspension, revocation or cancellation of authorization, or operating restrictions, failure to update documents, or unsafe operation endangering the public after notice and a chance to correct. Transportation Code 545.456(f); 545.459
- Can people sue? The law does not say Transportation Code Subchapter J (no civil action provision)
- Time to fix before enforcement: The law does not say
Exemptions
- Political subdivisions may not impose franchises or other rules on automated motor vehicle operation; state agencies may not discriminate against automated vehicles. The Public Safety Commission may exempt them from specific traffic laws. Transportation Code 545.452
- Individually owned automated vehicles operated for personal use do not need a TxDMV authorization (per the TxDMV program page; the statute ties authorization to commercial use). Transportation Code 545.455(c); TxDMV Automated Vehicles Regulatory Program page
- Human-driver provisions of commercial vehicle and transportation network company law do not apply while the automated driving system is engaged. Transportation Code 545.458; Occupations Code 2402.005(c)
What the text leaves open
- Section 545.454(c), on not needing a licensed human driver, was reported as ambiguously drafted by the page reader.
- Penal Code 12.22 and 12.51 amounts are as now in force.
- The exact rule chapters adopted by TxDMV and the Public Safety Commission were not read.
- The Governor's signing date was not confirmed on an official page in this run.
Texas ban on automated adverse determinations in utilization review (SB 815)
3 duties · checked November 12, 2026
SB 815, 89th Legislature, Regular Session (2025); amends Insurance Code 4201.002 and 4201.303(a) and adds 4201.156. Official text · Full law page
Who it covers
- Utilization review agent. A utilization review agent regulated under Insurance Code Chapter 4201 that conducts utilization review for a health benefit plan. Insurance Code 4201.156(a); SB 815 § 4
Enforcement
- Enforcer: Texas commissioner of insurance, who may audit and inspect a utilization review agent's use of automated decision systems at any time; the bill names no other enforcer.
- Penalty: the law does not set an amount.
- Can people sue? The law does not say SB 815 (silent)
- Time to fix before enforcement: The law does not say
Exemptions
- Algorithms, AI systems and automated decision systems may still be used for administrative support or fraud detection. Insurance Code 4201.156(c)
- Utilization review for plans delivered, issued or renewed before January 1, 2026 stays under prior law. SB 815 § 4
What the text leaves open
- The bill bars using an automated decision system wholly or partly to make an adverse determination; it does not address approvals or say what counts as partly.
- Penalties and enforcement procedures in the rest of Insurance Code Chapter 4201 and the Texas Department of Insurance's general powers were not read.
- The definition of utilization review agent sits in existing Insurance Code 4201.002, which the bill does not reproduce.
- The Governor's signing date was not confirmed from an official page.
Texas civil liability for AI intimate imagery and nudification apps (SB 441)
5 duties · checked November 14, 2026
SB 441, 89th Legislature, Regular Session (2025); Civil Practice and Remedies Code ch. 98B (98B.001, 98B.0021, 98B.0022, 98B.008, 98B.009); amends Penal Code 21.165. Official text · Full law page
Who it covers
- Owner of a website or application. An owner of a website or app, including a social media platform, on which artificial intimate visual material is disclosed or whose service facilitates producing it for payment. Civ. Prac. & Rem. Code 98B.0022(a)(1), (b)
- Owner of a nudification application. An owner of a publicly accessible AI application primarily designed and marketed to produce artificial intimate visual material. Civ. Prac. & Rem. Code 98B.001(3); 98B.0022(a)(2)
- Payment processor. A person who processes or facilitates payment for producing or disclosing artificial intimate visual material. Civ. Prac. & Rem. Code 98B.0022(a)(3)
Enforcement
- Enforcer: The depicted person may sue for damages. A violation of the removal, request-system or notice duties is a deceptive trade practice under Business & Commerce Code chapter 17, subchapter E, and the attorney general may seek an injunction against a person who repeatedly violates them, recovering costs and attorney's fees if the attorney general prevails. Suits must be brought within 10 years of the later of discovery or the depicted person's 18th birthday. A web search on November 14, 2026 found no report of a court order blocking this law.
- Penalty: the law does not set an amount.
- Can people sue? Yes Civ. Prac. & Rem. Code 98B.0022(a), (b) (depicted person); 98B.009 (10-year limitations period)
- Time to fix before enforcement: The law does not say
Exemptions
- No exemption from the chapter 98B platform duties is stated in the bill text read. Civ. Prac. & Rem. Code 98B.0022
What the text leaves open
- Remedies under Business & Commerce Code chapter 17, subchapter E, and any general damages section of chapter 98B, were not read, so no amount is given.
- The bill does not define how recklessly facilitating production differs from hosting user content; no federal Section 230 analysis was attempted.
- The Governor's signing date was not confirmed on an official page in this run.
Texas computer-generated child sexual material offenses (SB 1621, 2025)
4 duties · checked November 15, 2026
SB 1621, 89th Legislature, Regular Session (2025); Acts 2025, 89th Leg., R.S., ch. 847; Penal Code 43.26, 43.261(b-1), 43.262(b-1), 21.16(a)(5); Code of Criminal Procedure arts. 38.45, 39.15. Official text · Full law page
Who it covers
- Person. Any person who possesses, accesses with intent to view, or promotes the covered visual material. The 43.261 offense applies only to actors who are minors. Penal Code 43.26(a-1), (a-2), (e), (e-1); 43.261; 43.262(b)
Enforcement
- Enforcer: Criminal prosecution by the state; the act does not name a particular prosecutor. A web search on November 15, 2026 found no lawsuit or court order against SB 1621; court dockets were not searched.
- Penalty: State jail felony: 180 days to 2 years in state jail; fine up to $10,000 may be added, base possession or access of computer-generated material (43.26(a-2)) and base lewd-material offense (43.262). Penal Code 43.26(c-3); 43.262; 12.35
- Penalty: Third degree felony: 2 to 10 years; fine up to $10,000 may be added, base promotion of computer-generated material (43.26(e-1)); possession of computer-generated material with one prior conviction or 10 to 49 depictions; base possession of real or recognizable-child material (43.26(a-1)). Penal Code 43.26(c-1), (c-3), (g-1); 12.34
- Penalty: Second degree felony: 2 to 20 years; fine up to $10,000 may be added, possession of computer-generated material with two or more priors or 50 or more depictions; promotion with a prior, 10 or more depictions or a depiction appearing under 10. A 10-year minimum applies in listed cases. Penal Code 43.26(c-3), (g-1); 12.33
- Penalty: First degree felony: life or 5 to 99 years; fine up to $10,000 may be added, enhanced possession of real or recognizable-child material, and enhanced promotion of such material under 43.26(g) (see open questions). Penal Code 43.26(c-1), (g); 12.32
- Penalty: Up to $20,000 for any felony, or up to double the gain or loss, a corporation or association convicted of a felony. Penal Code 12.51(b)(1), (c)
- Can people sue? The law does not say SB 1621 (no civil action provision)
- Time to fix before enforcement: None
Exemptions
- Defense for a law enforcement officer or school administrator who held material in good faith only because of a 43.261 allegation, limited access and took reasonable steps to destroy it. Penal Code 43.26(h)
- Affirmative defense for a judicial or law enforcement officer acting in official duties. Penal Code 43.26(h-1)
- Affirmative defense to the computer-generated offenses if the actor is not more than two years older than the depicted child. Penal Code 43.26(h-2)
What the text leaves open
- Promotion of real or recognizable-child material (43.26(e)) is a second degree felony at base in the enrolled SB 1621, but the codified 43.26 shows two versions of subsection (g), one making it a first degree felony. Acts 2025, ch. 250 (HB 1778) also amended 43.26 and was not read. Check the current code before relying on (e) grades.
- The 43.261 offense (electronic transmission between minors) also now covers AI-made depictions; it applies only to minors and is not listed as a duty here.
- The Governor's signing date was not confirmed on an official page in this run.
- Federal law on computer-generated child sexual material was not reviewed.
Texas deep fake video election offense (SB 751, 2019)
1 duty · checked November 15, 2026
SB 751, 86th Legislature, Regular Session (2019); Acts 2019, 86th Leg., R.S., ch. 1339; Election Code 255.004(d), (e). Official text · Full law page
Who it covers
- Person. Any person who creates a deep fake video and causes it to be published or distributed within 30 days of an election, with intent to injure a candidate or influence the result. Election Code 255.004(d)
Enforcement
- Enforcer: Criminal prosecution; the section does not name a prosecutor. A web search on November 15, 2026 found no court order blocking subsection (d). In Ex parte Stafford (Tex. Crim. App. No. PD-0310-23, Sept. 4, 2024) the court held subsection (b) of the same section facially unconstitutional; that ruling did not address subsection (d).
- Penalty: Class A misdemeanor: fine up to $4,000, jail up to one year, or both, an offense under section 255.004, including the deep fake offense. Election Code 255.004(c); Penal Code 12.21
- Penalty: Up to $10,000, or up to double the gain or loss, a corporation or association convicted of a Class A misdemeanor. Penal Code 12.51(b)(2), (c)
- Can people sue? The law does not say Election Code 255.004 (no civil action provision)
- Time to fix before enforcement: None
What the text leaves open
- Ex parte Stafford (2024) struck down 255.004(b) on First Amendment grounds; the opinion was read only on an unofficial reprint and did not address subsection (d). Whether (d) would survive a similar challenge is unresolved.
- The enrolled bill text could not be read; the codified section was used instead.
- The Class A misdemeanor amounts are from Penal Code 12.21 as now in force.
Texas electronic health record requirements, including AI use by practitioners (SB 1188)
9 duties · checked November 12, 2026
SB 1188, 89th Legislature, Regular Session (2025); adds Health & Safety Code Chapter 183 (183.001 to 183.012). Official text · Full law page
Who it covers
- Covered entity. A covered entity as defined in Health & Safety Code 181.001, expressly including a health care practitioner. Health & Safety Code 183.001(2)
- Health care practitioner. An individual licensed, certified or otherwise authorized to provide health care services in Texas. Health & Safety Code 183.001(4)
Enforcement
- Enforcer: Texas Attorney General for injunctions and civil penalties; the commission or the appropriate regulatory agency investigates credible allegations and regulatory agencies may discipline license holders.
- Penalty: Up to $5,000 per violation, per year, a violation committed negligently, regardless of how long it continues during the year. Health & Safety Code 183.011(b)(1)
- Penalty: Up to $25,000 per violation, per year, a violation committed knowingly or intentionally, regardless of how long it continues during the year. Health & Safety Code 183.011(b)(2)
- Penalty: Up to $250,000 per violation, a violation in which the covered entity knowingly or intentionally used protected health information for financial gain. Health & Safety Code 183.011(b)(3)
- Penalty: License, registration or certification suspension or revocation, disciplinary action by the appropriate regulatory agency against a covered entity that violates the chapter three or more times. Health & Safety Code 183.010
- Can people sue? The law does not say Health & Safety Code 183.009 to 183.011 (enforcement by the attorney general and regulatory agencies; no private action is created or denied)
- Time to fix before enforcement: The law does not say
Exemptions
- Home and community support services agencies, nursing facilities, continuing care facilities, assisted living facilities, intermediate care facilities, day activity and health services facilities, and providers under the TxHmL or HCS waiver programs are not covered entities. Health & Safety Code 183.001(2)(A)-(G)
- Parental access does not apply where state or federal law or a court order restricts access to all or part of a minor's record. Health & Safety Code 183.006(b)
- A state agency may delay implementing a provision until a needed federal waiver or authorization is granted. SB 1188 § 3
What the text leaves open
- Section 183.001(2) borrows the definition of covered entity from Health & Safety Code 181.001, which was not read for this file.
- Chapter 183 refers to 'the commission' and 'the executive commissioner' without defining them in the text read; this file reads them as the Health and Human Services Commission.
- Section 183.007 directs state agencies to ensure records include a separate space for biological sex and that decision assistance tools include it; it is written as a duty on the agencies, so it is not listed as a covered-entity duty.
- Section 183.005 does not say how or when AI use must be disclosed to patients.
- The Texas Medical Board's medical records standards for AI-created records were not checked.
- The Governor's signing date was not confirmed from an official page.
Texas explicit deep fake reporting on social media platforms law (HB 3133)
6 duties · checked November 14, 2026
HB 3133, 89th Legislature, Regular Session (2025); adds Business & Commerce Code 120.1001, 120.1015, 120.1025 and 120.152; amends 120.101, 120.102, 120.103(b) and the heading of 120.151. Official text · Full law page
Who it covers
- Social media platform. A public website or application where users create accounts and communicate mainly by posting information, comments, messages or images. Internet service providers, email, and sites mainly offering provider-selected news, sports or entertainment are excluded. Threshold: More than 50 million active users in the United States in a calendar month (as enacted in 2021; later changes not checked). Bus. & Com. Code 120.001(1), 120.002(b), as enacted by HB 20 (2021, 2nd C.S.)
Enforcement
- Enforcer: Texas Attorney General, who may sue to enjoin a violation of Chapter 120 and recover costs, attorney's fees and investigative costs if an injunction is granted (as enacted in 2021). HB 3133 also makes a violation of the chapter a deceptive trade practice actionable under Subchapter E, Chapter 17. A web search on November 14, 2026 found no report of a court order blocking this law; court dockets were not searched.
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Bus. & Com. Code 120.152 (actionable under Subchapter E, Chapter 17; the bill does not say who may sue)
- Time to fix before enforcement: The law does not say
Exemptions
- A platform need not give the posting user notice or an appeal when it removed content under 120.102(b) on a complaint that it was explicit deep fake material. Bus. & Com. Code 120.103(b)(3)
- If reported content is determined not to be explicit deep fake material, the platform may restore it. Bus. & Com. Code 120.1025(a)
What the text leaves open
- Section 120.152 makes a violation actionable under Subchapter E, Chapter 17 without naming the code or who may sue. That subchapter (the deceptive trade practices law) was not opened, so its penalties and any consumer suit are not stated here.
- The user threshold, platform definition and attorney general remedy were read from the 2021 enrolled HB 20; whether later sessions changed sections 120.001, 120.002 or 120.151 was not checked.
- Chapter 120 was created by HB 20 (2021), which has been challenged in federal court. Whether any court order now limits enforcement of the chapter was not confirmed from an official court source.
- The enrolled text sets no deadline for removing reported explicit deep fake material.
Texas government AI systems law (SB 1964): vendor duties
4 duties · checked November 14, 2026
SB 1964, 89th Legislature, Regular Session (2025); Government Code 2054.003 and ch. 2054, subch. S (2054.701-2054.713). Official text · Full law page
Who it covers
- Vendor (contracting with a state agency). A vendor that contracts with a Texas state agency for the deployment or use of a heightened scrutiny AI system. Gov't Code 2054.708(a); 2054.709
- Vendor (sandbox program). A person registered with the Department of Information Resources as a contractor for commodity items under Gov't Code 2157.068 that takes part in the AI sandbox program. Gov't Code 2054.706(a)(3)
Enforcement
- Enforcer: Texas Attorney General, who may sue to enjoin a violation and, after consulting the department, gives a vendor written notice of a violation; the contracting state agency may then void the contract, and the comptroller may bar a vendor with more than one voided contract. A web search on November 14, 2026 found no report of a court order blocking this law.
- Penalty: Bar from state agency contracts (at the comptroller's discretion), a vendor with more than one contract voided under 2054.709(e). Gov't Code 2054.709(f)
- Can people sue? The law does not say Gov't Code 2054.709-2054.710 (enforcement by the attorney general; the public may file complaints on an attorney general web page)
- Time to fix before enforcement: 30 days
Exemptions
- Systems intended only for narrow procedural tasks, improving a completed human activity, preparatory tasks, or detecting decision-making patterns are not heightened scrutiny systems. Gov't Code 2054.003(6-a)
- Use of a heightened scrutiny system solely to test it before deployment is excluded from unlawful harm. Gov't Code 2054.701
- System assessments are confidential and not subject to public disclosure under Government Code chapter 552. Gov't Code 2054.708(c)
What the text leaves open
- SB 1964 sets no date by which a vendor's system assessment must be done; it may depend on DIR rules or contract terms not read.
- DIR's minimum standards may require contract terms obliging vendors to use risk management frameworks (Gov't Code 2054.703); those standards were not read.
- The Governor's signing date was not confirmed on an official page in this run.
Texas personal delivery and mobile carrying devices law (SB 969, 2019)
6 duties · checked November 15, 2026
SB 969, 86th Legislature, Regular Session (2019); Acts 2019, 86th Leg., R.S., ch. 612; Transportation Code 552A.0001 to 552A.0010. Official text · Full law page
Who it covers
- Business entity (operator of a personal delivery device). A for-profit legal entity that operates a device built mainly to carry cargo in pedestrian areas or on a road's side or shoulder, using automated driving technology with remote human support and supervision. Transportation Code 552A.0001(2), (5); 552A.0003(a)
- Operator of a mobile carrying device. A person operating a cargo device that stays within 25 feet of a human operator who actively monitors it. Transportation Code 552A.0001(3); 552A.0004
Enforcement
- Enforcer: Peace officers enforce state law on device operation; the operator is treated as the operator for traffic-law compliance. A web search on November 15, 2026 found no lawsuit or court order against this law.
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Transportation Code Chapter 552A, Subchapter A
- Time to fix before enforcement: The law does not say
Exemptions
- A person is not the operator merely by requesting a delivery or dispatching the device; an agent acting outside the scope of employment is the operator instead of the business. Transportation Code 552A.0003(c), (d)
- A compliant device is not a vehicle for Transportation Code purposes, including 545.422. Transportation Code 552A.0002(b)
What the text leaves open
- The subchapter does not say which general traffic penalties apply to a device that breaks its rules.
- Local authorities may add rules consistent with the subchapter; local rules were not reviewed.
- The Governor's signing date was not confirmed on an official page; the June 10, 2019 date is from the codified source notes.
Texas sexually explicit deep fake media offense (SB 1361, as amended in 2025)
2 duties · checked November 14, 2026
SB 1361, 88th Legislature, Regular Session (2023); Penal Code 21.165; amended by SB 441 and HB 449, 89th Legislature (2025). Official text · Full law page
Who it covers
- Person. Any person who produces or distributes, or threatens to produce or distribute, covered deep fake media. Penal Code 21.165(b), (b-1)
Enforcement
- Enforcer: Criminal prosecution; the act does not name the prosecuting office. On conviction the court must order restitution for psychological, financial or reputational harm. A web search on November 14, 2026 found no report of a court order blocking this law.
- Penalty: Class A misdemeanor; third-degree felony with a prior conviction under the section or if the depicted person is under 18 (amounts not stated in the act), producing or distributing sexually explicit deep fake media without consent. Penal Code 21.165(c), as amended by SB 441
- Penalty: Class B misdemeanor; Class A misdemeanor with a prior conviction or if the media appears to depict a person under 18 (amounts not stated in the act), threatening to produce or distribute such media. Penal Code 21.165(c-1), as added by SB 441
- Penalty: Restitution for psychological, financial or reputational harm (amount set by the court), any conviction under the section. Penal Code 21.165(e), as added by SB 441
- Can people sue? The law does not say Penal Code 21.165 (criminal offense; the civil action for artificial intimate material is in Civil Practice and Remedies Code ch. 98B, covered in TX-SB441.json)
- Time to fix before enforcement: None
Exemptions
- Affirmative defense for lawful law enforcement practice, reporting unlawful activity, or a legal proceeding where the conduct is permitted or required by law. Penal Code 21.165(c-3), as added by SB 441
- Affirmative defense for internet, cloud, cybersecurity or communication service providers and telecommunications networks acting only in a technical, automatic or intermediate way. Penal Code 21.165(c-4), as added by SB 441
- Affirmative defense for a provider or developer of a public AI tool whose terms ban such media, users must acknowledge, and that took affirmative prevention steps such as filtering and reporting tools. Penal Code 21.165(c-5), as added by SB 441
What the text leaves open
- SB 441 and HB 449 both rewrote Penal Code 21.165(a)(1) and (b) in 2025 with different wording. How the two were merged in the codified section was not confirmed; the duties above use wording common to both.
- Intimate parts and sexual conduct are defined in Penal Code 21.16, and fine and jail ranges in Penal Code chapter 12; neither was read.
- The Governor's signing dates for SB 1361, SB 441 and HB 449 were not confirmed on an official page in this run.
Other enacted laws to check
These 6 enacted AI laws are in the states you chose, but they are not yet mapped duty by duty, so they are not in the plan above. Each page has a summary and the official source.
- Texas HB2060: Relating to the creation of the artificial intelligence advisory council. (effective June 13, 2023)
- Texas HB2700: Relating to prosecution of certain criminal offenses prohibiting sexually explicit visual material involving… (effective September 1, 2023)
- Texas HB2818: Relating to the artificial intelligence division within the Department of Information Resources. (effective September 1, 2025)
- Texas HB3026: Relating to the operation and regulation of certain automated motor vehicles. (effective September 1, 2021)
- Texas HB3512: Relating to artificial intelligence training programs for certain employees and officials of state agencies… (effective September 1, 2025)
- Texas SB1308: Relating to a study on the impacts of using certain motor vehicle technologies. (effective June 18, 2021)
How the plan is built
Each law in the plan was read from its official text, on the legislature’s or state’s own website. 265 of the 326 have also been read a second time to confirm every date, threshold, penalty and enforcer; the rest have had one full read, and each shows the date it was last checked. Each duty is written in plain English in 30 words or fewer and carries the section it comes from, with a link.
Where a law is silent, the plan says so. It does not borrow a penalty from another statute or guess at a deadline. A law that is repealed or replaced on a known date shows that end date, and its duties leave the plan once the date passes. The date each law was last checked appears with it.
The plan is built fresh from these records every time the page loads, so it changes as soon as a law is added or re-checked. To report an error, use the corrections page. For how we find laws and decide what counts as an AI law, see our methodology. If you are not sure which laws touch your business at all, start with Am I Affected?
Common questions
What does an AI compliance plan cover?
Each duty an enacted state AI law places on a business or other regulated party: who it applies to, what it requires, when it starts, how often it recurs, who enforces it, the penalties and whether people can sue. The builder covers 1,235 duties in 326 enacted laws across 50 states, and every duty links to the section of law it comes from.
Where does the information come from?
From the official text of each law: the enrolled bill, session law or codified statute, opened on the legislature's or state's own website. 265 of the 326 laws have also been read a second time to confirm every date, threshold, penalty and enforcer, and the date each law was last checked is shown with it. Where a law is silent on a point, such as a penalty amount, the plan says the law does not say rather than filling the gap. Law firm summaries and news reports are never used as sources.
Does the plan include every AI law in a state?
Not yet. It includes the enacted laws we have mapped duty by duty. When you choose a state, its other enacted AI laws are listed separately with links, so nothing is left out of view. New laws are added as they are read. When a law is repealed or replaced on a set date, its duties show that end date and leave the plan once it passes.
How do I know which duties apply to my company?
Start with the 'who it covers' entry for each law: many apply only above a size or revenue threshold, only to developers or only to deployers, or only in one industry. The plan quotes those conditions from the text. Whether your company meets them depends on facts only you and your counsel know.
Is this legal advice?
No. It is information drawn from official legal texts, organized so you can see what each law requires. Use it to brief your team and your lawyers, not in place of them.
What does Pro add?
The same plan as a CSV file for spreadsheets and audit files, and as a calendar file (.ics) with every dated duty as an event that links back to the law. Both are built from the states and uses you pick. The plan on this page, and printing it, are open to everyone.