Texas TRAIGA: what businesses need to know

TRAIGA — Texas Responsible AI Governance Act

TRAIGA establishes a governance framework for high-risk artificial intelligence systems used in Texas or that materially affect Texas residents. The law requires developers and deployers to maintain documented risk management practices, implement human oversight mechanisms, and provide transparency to individuals subject to AI-influenced decisions. The Texas Attorney General enforces the law beginning January 1, 2026.

Scope: who is covered

TRAIGA applies to any person or entity that develops or deploys a high-risk AI system and either operates in Texas, contracts with Texas-based entities, or serves Texas consumers. There is no minimum revenue or employee threshold — the law can apply to startups and enterprises alike if their AI systems affect covered decision categories.

NIST AI RMF safe harbor

Texas provides an affirmative defense for organizations that have implemented risk management practices substantially aligned with the NIST AI Risk Management Framework. This is a meaningful compliance pathway: organizations that document their AI governance using the NIST AI RMF's Govern, Map, Measure, and Manage functions may invoke the safe harbor in enforcement proceedings.

Penalties and cure period

Violations carry civil penalties of $10,000 to $200,000 per violation. Continuing violations accrue $40,000 per day. There is a 60-day cure period, during which a violating party can remediate before penalties are assessed. The AG can also seek injunctive relief and restitution for affected consumers.