Quarterly AI Legislation Reports

Latest Report

Q1 2026 Full Report

Q1 2026: The Year AI Law Enforcement Begins

The first quarter of 2026 marks a meaningful inflection point in US AI governance: laws are no longer merely pending — they are in force. Colorado SB 205, signed in May 2024 and now effective June 30, 2026 (delayed from February 2026 by SB 25B-004 signed August 2025), is approaching its operational effect date, transforming abstract compliance obligations into live legal duties for hundreds of companies deploying high-risk AI systems in Colorado.

At the federal level, the regulatory picture remains unsettled. The Trump administration's January 2025 revocation of Biden's Executive Order 14110 removed the primary federal AI governance framework, and Congress has yet to advance durable replacement legislation. This vacuum has accelerated state-level activity: 38 states now have active AI legislation, up from 29 at the start of 2025.

Colorado: Compliance Clock Is Running

With SB 205 now operative, companies using "high-risk AI systems" — defined as systems making or substantially facilitating consequential decisions in employment, education, financial services, healthcare, housing, insurance, and legal services — must demonstrate compliance with Colorado's developer and deployer obligations. The Colorado Attorney General has signaled a focus on audit readiness before penalty actions, and the office is expected to publish formal enforcement guidance in Q2 2026. Legal teams advising affected clients should review impact assessment documentation and consumer notice obligations now.

Texas: The Next Major Battleground

Texas SB 896 (Responsible AI Governance Act) is the most significant pending AI bill outside Colorado. If enacted, it would require organizations deploying AI systems in regulated industries to register covered systems with a new state bureau, submit to mandatory third-party audits on a rolling 24-month basis, and maintain accessible grievance mechanisms for consumers. Industry opposition is substantial, but the bill has garnered bipartisan backing in the Senate. A House companion bill is expected in early Q2.

Cross-State Trends to Watch

Three legislative patterns are emerging across states this quarter: sectoral AI bills targeting healthcare AI, hiring tools, and financial underwriting are advancing faster than broad horizontal frameworks; transparency and disclosure mandates are attracting broader political support than liability-focused bills; and preemption debates — whether a federal law should preempt state AI regulation — are intensifying as more states pass meaningful laws.

Archive

Previous Reports

Click any report card to read inline. Subscribe to receive all reports automatically.

Q4 2025 Full Report

Q4 2025: The Pre-Enforcement Calm

Top Developments This Quarter

• Colorado SB 205 compliance deadline looming — with the June 30, 2026 effective date approaching (delayed from February 2026 by SB 25B-004), organizations raced to finalize impact assessments, consumer disclosures, and internal governance frameworks for high-risk AI systems deployed in Colorado.
• Colorado AG published pre-enforcement guidance — the Attorney General's office released formal compliance guidance ahead of SB 205's effective date, clarifying key definitions and signaling a focus on audit readiness before penalty actions.
• Year-end legislative sessions cleared a backlog — several states used their fall sessions to advance AI-related bills that had been pending since spring, resulting in a burst of enactments and committee actions in November and December.
• Multiple states carried AI bills to 2026 sessions — ambitious comprehensive AI frameworks that did not advance in 2025 were formally carried over, setting the stage for significant legislative activity in the new year.

Year-End Legislative Wrap-Up

The fourth quarter of 2025 closed with a striking statistic: 47 states had introduced at least one AI-related bill during the calendar year, a milestone that would have been unthinkable just two years earlier. While the majority of these bills did not advance to enactment, the sheer volume of legislative proposals signals that AI governance has moved from a niche policy concern to a mainstream legislative priority. Several states enacted new AI-related laws during their fall sessions, spanning topics from automated decision transparency to deepfake disclosure requirements.

The Colorado Countdown

The dominant compliance story of Q4 2025 was the approaching effective date for Colorado SB 205 (subsequently delayed to June 30, 2026 by SB 25B-004), the Colorado AI Act. As the first comprehensive state AI law targeting high-risk automated systems, SB 205 established a new compliance paradigm requiring developers to provide impact assessments, maintain risk documentation, and enable deployer compliance. Deployers, in turn, must conduct their own impact assessments, provide consumer disclosures, and establish human oversight mechanisms. Q4 saw a wave of compliance consulting engagements, vendor contract renegotiations, and internal governance buildouts as companies raced to meet the deadline.

AI Hiring Laws Go Mainstream

The proliferation of AI hiring legislation was one of the defining trends of 2025, and Q4 saw several more states advance bills modeled on the foundational frameworks established by NYC Local Law 144 and the Illinois Artificial Intelligence Video Interview Act (AIVIA). By December, more than a dozen states had active legislation addressing automated employment decision tools, with requirements ranging from bias audits and candidate notice to opt-out rights and human review guarantees.

These findings represent editorial analysis of public legislative records as of December 31, 2025. Not legal advice.

Q3 2025 Full Report

Q3 2025: The Summer of AI Bills

Top Developments This Quarter

• Summer legislative sessions produced sector-specific AI bills — healthcare AI regulation, hiring tool requirements, and insurance underwriting rules advanced in multiple states, reflecting a shift from broad horizontal frameworks to targeted sectoral approaches.
• Colorado SB 205 compliance guidance published — the Colorado AG's office released its first formal compliance guidance for SB 205, providing clarity on key definitions and enforcement priorities. In August 2025, SB 25B-004 delayed the effective date from February 1, 2026 to June 30, 2026.
• NYC Local Law 144 produced first bias audit results — the first publicly available bias audit summaries were published, revealing significant variation in audit methodologies and raising questions about the adequacy of the law's requirements.
• Growing state preemption concerns — industry groups intensified lobbying for federal preemption as the number of states with active AI legislation continued to grow, arguing that divergent state approaches created unworkable compliance burdens.

Summer Sessions Deliver Results

The third quarter of 2025 marked the end of most state legislative sessions, producing a final wave of AI-related legislative activity. Six states passed new AI disclosure or transparency requirements during this period, bringing the total number of states with enacted AI-specific legislation to a new high. The bills that advanced tended to focus on narrow, well-defined requirements — disclosure of AI-generated content, transparency in automated decision-making, and notice requirements for consumer-facing AI systems — rather than comprehensive horizontal frameworks.

Enforcement Becomes Real

Q3 2025 saw enforcement activity transition from theoretical to tangible. NYC's Department of Consumer and Worker Protection issued its first penalties under Local Law 144, fining employers that failed to conduct required bias audits on automated employment decision tools or failed to provide proper candidate notice. Meanwhile, Illinois continued to produce significant settlements under the Biometric Information Privacy Act (BIPA), with several cases involving AI-powered facial recognition and biometric analysis tools. These enforcement actions demonstrated that AI liability exposure was real and growing.

Colorado Compliance Countdown Begins

With Colorado SB 205's effective date approaching (subsequently delayed to June 30, 2026 by SB 25B-004), Q3 saw a marked increase in compliance preparation activity. Law firms reported increased demand for AI governance consulting, and several major AI platform providers began publishing compliance guides and toolkits for their customers. Companies deploying AI systems in Colorado's covered sectors — employment, education, financial services, healthcare, housing, insurance, and legal services — were advised to have compliance programs substantially complete by year-end.

These findings represent editorial analysis of public legislative records as of September 30, 2025. Not legal advice.

Q2 2025 Full Report

Q2 2025: States Fill the Federal Vacuum

Top Developments This Quarter

• Post-EO 14110 revocation landscape crystallized — with the federal AI executive order revoked in January 2025, Q2 saw states accelerating their own AI legislation to fill the widening federal gap, introducing bills at a pace not seen in previous quarters.
• First comprehensive AI bills advanced in TX, IL, and other states — moving beyond narrow disclosure requirements, several states introduced broad AI governance frameworks modeled on aspects of Colorado SB 205 and the EU AI Act.
• Industry pushback and lobbying intensified — technology industry groups mounted coordinated opposition to comprehensive state AI bills, arguing for lighter-touch approaches and federal preemption over a patchwork of state regulations.
• Colorado SB 205 rulemaking progressed — the Colorado AG's office advanced implementation guidance ahead of SB 205's effective date (subsequently delayed to June 30, 2026 by SB 25B-004), providing early signals about enforcement priorities.

The Post-Executive Order Landscape

The second quarter of 2025 was defined by the emerging shape of AI governance in a post-EO 14110 world. The revocation of President Biden's comprehensive AI executive order in January 2025 had removed the primary federal AI governance framework, and by Q2, the consequences were becoming clear: federal agencies that had been developing AI safety standards, bias testing protocols, and sector-specific guidance largely paused their work. The regulatory vacuum did not go unnoticed at the state level, where legislators increasingly cited the absence of federal action as justification for state-level AI bills.

AI Hiring Bills Gain Momentum Nationwide

The wave of AI hiring legislation that began with NYC Local Law 144 continued to expand during Q2 2025. At least eight states introduced bills addressing automated employment decision tools, with requirements varying from mandatory bias audits and transparency disclosures to candidate opt-out rights. Meanwhile, NYC's own enforcement apparatus became more active, with the Department of Consumer and Worker Protection issuing compliance notices and increasing its audit cadence.

Looking Ahead: The State Acceleration

Q2 2025 set the stage for what would become an increasingly aggressive state legislative push through the remainder of the year. With approximately 15 states maintaining active AI legislation and the federal government showing no signs of advancing comprehensive AI regulation, the trajectory was clear: states would continue to be the primary engine of AI governance activity in the United States. Compliance teams were advised to begin building multi-state monitoring capabilities and to treat Colorado SB 205 compliance preparation as a template for the broader state-level obligations that were likely to follow.

These findings represent editorial analysis of public legislative records as of June 30, 2025. Not legal advice.

Q1 2025 Full Report

Q1 2025: The Year AI Regulation Got Serious

Top Developments This Quarter

• Executive Order 14110 revoked by new administration — in one of the first policy actions of January 2025, the incoming administration revoked President Biden's comprehensive AI executive order, creating immediate regulatory uncertainty and removing the primary federal AI governance framework.
• States responded with accelerated legislative activity — in the weeks following the EO revocation, multiple states introduced their own AI governance frameworks, explicitly citing the need to fill the federal regulatory gap.
• Colorado SB 205 entered final rulemaking phase — with the original February 2026 effective date approaching (subsequently delayed to June 30, 2026 by SB 25B-004), the Colorado AG's office began developing detailed implementation rules, including definitions of "high-risk AI system" and "consequential decision" that would shape compliance obligations.
• NYC Local Law 144 enforcement lessons emerged — early enforcement experience under NYC's automated employment decision tool law provided valuable compliance lessons for other jurisdictions developing similar requirements.

The Federal Policy Reversal

The first quarter of 2025 was dominated by the seismic policy shift at the federal level. The revocation of Executive Order 14110 in January removed the most comprehensive federal AI governance framework that had existed, effectively ending mandatory AI safety testing requirements, federal agency AI use guidelines, and the coordinated inter-agency approach to AI governance that had been developing throughout 2024. The immediate consequence was a regulatory vacuum: federal agencies that had been developing AI-specific rules and guidance paused their efforts, and the AI governance community was left to recalibrate expectations about the federal role in AI regulation.

States Step Into the Breach

The state-level response to the federal policy reversal was swift and decisive. Within weeks of the EO revocation, legislators in multiple states introduced AI governance bills, many explicitly framed as responses to the absence of federal action. Approximately 30 states had active AI-related legislation by the end of Q1, with proposals ranging from narrow disclosure requirements to comprehensive frameworks modeled on Colorado SB 205 and elements of the EU AI Act. The pace of state legislative activity signaled a fundamental shift in the US AI governance landscape: states were no longer waiting for federal leadership and were instead charting their own regulatory courses.

Colorado Implementation Progress

Colorado SB 205, signed into law in May 2024, continued its march toward its original February 1, 2026 effective date during Q1 2025 (the date was subsequently delayed to June 30, 2026 by SB 25B-004, signed in August 2025). The Colorado Attorney General's office initiated the formal rulemaking process, developing detailed guidance on key aspects of the law including the definition of covered "high-risk AI systems," the scope of impact assessment requirements, and the obligations of both developers and deployers. Companies with AI deployments in Colorado's covered sectors began preliminary compliance efforts, though many were waiting for final rules before making significant investments in compliance infrastructure.

These findings represent editorial analysis of public legislative records as of March 31, 2025. Not legal advice.

Q4 2024 Full Report

Q4 2024: Building the Foundation

Top Developments This Quarter

• Post-election regulatory outlook shifted — the November 2024 election results introduced significant uncertainty about the future of federal AI governance, with the incoming administration signaling a different approach to AI regulation than the incumbent.
• Colorado SB 205 continued to set the national standard — signed in May 2024, Colorado's comprehensive AI law remained the benchmark against which other state proposals were measured, and compliance preparation began for companies operating in the state.
• California AI transparency bills advanced — California's legislature continued developing AI-specific legislation, with several transparency and disclosure bills advancing through committee during the fall session.
• FTC signaled on AI deception enforcement — the Federal Trade Commission issued enforcement guidance on AI-related deception, indicating that existing consumer protection authority would be used to address misleading AI practices.

Landmark Legislation Review

The fourth quarter of 2024 provided an opportunity to assess the year's legislative output in AI governance. Colorado SB 205, signed into law in May 2024, stood as the most significant state AI law enacted during the year — and arguably the most consequential AI-specific legislation in US history to that point. The law's comprehensive framework for regulating high-risk AI systems, with obligations for both developers and deployers, established a template that other states would study and adapt in 2025. Beyond Colorado, several other states enacted narrower AI-related provisions during 2024, including disclosure requirements for AI-generated content and restrictions on specific AI applications in government services.

The Federal Landscape Pre-Transition

As 2024 drew to a close, the federal AI governance landscape was in a state of transition. Executive Order 14110, issued in October 2023, had established the most comprehensive federal AI governance framework to date, directing federal agencies to develop AI safety standards, conduct risk assessments, and implement responsible AI procurement practices. However, with the incoming administration signaling a different regulatory philosophy, the durability of the EO framework was uncertain. Compliance professionals were advised to track both the federal transition and accelerating state activity, as 2025 promised to reshape the US AI regulatory landscape significantly.

2025 Outlook

Looking ahead to 2025, three trends were clear: state AI legislative activity would accelerate, Colorado SB 205 compliance would dominate the regulatory compliance agenda, and the federal regulatory posture would shift with the new administration. Companies deploying AI systems were advised to begin multi-state compliance planning and to treat Colorado's framework as the likely template for future state legislation.

These findings represent editorial analysis of public legislative records as of December 31, 2024. Not legal advice.

Q3 2024 Full Report

Q3 2024: Where It All Began

Top Developments This Quarter

• Colorado SB 205 signed into law — The governor signed the Colorado Artificial Intelligence Act in May 2024, establishing the first comprehensive state-level framework for regulating high-risk AI systems (effective date subsequently delayed from February 1, 2026 to June 30, 2026 by SB 25B-004).
• States began studying Colorado's approach — legislators in multiple states requested briefings on SB 205's structure, signaling that Colorado's framework would serve as a template for future state AI legislation.
• AI-specific legislation emerging from general technology bills — several states began carving AI-specific provisions out of broader technology regulation bills, reflecting growing recognition that AI governance required dedicated legislative attention.
• Early-mover states set templates — California, Illinois, New York, and Colorado emerged as the primary legislative laboratories for AI governance, with their approaches influencing proposals in other states.

The Origin of the State AI Regulation Wave

The third quarter of 2024 can be understood as the true beginning of the US state AI regulation wave. While individual states had enacted narrow AI-related provisions in prior years — notably Illinois's BIPA and AIVIA, and NYC's Local Law 144 — Q3 2024 saw the emergence of comprehensive, horizontal AI governance frameworks at the state level. Colorado's SB 205, signed just weeks before the quarter began, represented a qualitative leap in state AI legislation: rather than targeting a single AI application or industry, it established broad obligations for any AI system making consequential decisions across multiple sectors.

Pioneering Legislation Analysis

The early-mover states — California, Illinois, New York, and Colorado — each brought different strengths and approaches to AI governance. California leveraged its position as home to the world's largest AI companies to develop industry-informed transparency requirements. Illinois built on its groundbreaking BIPA framework to extend privacy protections into AI-specific contexts. New York City's Local Law 144 provided the first real-world test case for employer-focused AI regulation. And Colorado's SB 205 established the most comprehensive framework, drawing elements from the EU AI Act while adapting them for the US federal-state system.

Landscape Overview

With approximately 20 states maintaining active AI-related legislation by September 2024, the US AI governance landscape was rapidly evolving. Executive Order 14110, issued in October 2023, provided a federal backdrop that complemented state activity, creating a layered governance structure that — for the time being — appeared to be developing in a reasonably coordinated fashion. The coming quarters would test whether this coordination could hold as more states entered the regulatory arena and political transitions introduced new variables into the equation.

These findings represent editorial analysis of public legislative records as of September 30, 2024. Not legal advice.

Report Coverage

What Each Report Covers

Every quarterly report is structured around six core coverage areas, giving compliance professionals and legal teams a consistent, comparable view of AI legislative activity across the full US landscape.