AI Regulation in the United States
40 policies tracked , of which 37 carry binding duties and 3 are voluntary or emerging. Every entry links to its primary source.
California SB 1001
California Bot Disclosure Act (B.O.T. Act)
Makes it unlawful to use a bot to mislead people about its artificial identity in commercial or electoral contexts. An early chatbot disclosure rule that remains in force.
California SB 243
California Companion Chatbot Safety Act (SB 243)
The first US law aimed squarely at companion chatbots, and the template the 2026 state wave copied. Operators must say the chatbot is not human where a reasonable person could be misled, run suicide and self-harm protocols that refer users to crisis services, and give minors a break reminder every three hours.
California AB 2013
California Generative AI Training Data Transparency Act
Requires generative AI developers to publish high-level documentation about the datasets used to train their systems, including sources and whether personal or copyrighted data is included.
California SB 53
California Transparency in Frontier Artificial Intelligence Act
Requires developers of the largest frontier models to publish safety frameworks, report critical safety incidents, and protect whistleblowers. It is the leading US model for frontier-AI transparency.
CFPB Circular 2022-03
CFPB Circular 2022-03: Adverse Action Notification Requirements for Algorithmic Credit Decisions
Confirms that creditors must give specific reasons for adverse credit decisions even when a complex algorithm produced them. Model opacity is not a defence under ECOA.
Tennessee ELVIS Act
Ensuring Likeness, Voice, and Image Security Act
The first US law expressly protecting individuals' voice and likeness from AI cloning, extending publicity rights to cover generative-AI voice and image deepfakes.
US Federal AI EO (2025)
Executive Order: Ensuring a National Policy Framework for Artificial Intelligence
A December 2025 executive order seeking a single national AI policy framework and signalling federal intent to preempt state AI laws judged inconsistent. It is the central variable in the US patchwork's future.
FDA AI/ML SaMD Guidance
FDA Guidance on Artificial Intelligence and Machine Learning in Software as a Medical Device
The FDA's approach to AI/ML-enabled medical devices, covering predetermined change-control plans, good machine-learning practice and transparency to clinicians. The main route to market for clinical AI in the US.
FTC Operation AI Comply
FTC Enforcement Against Deceptive AI Claims (Operation AI Comply)
The FTC's enforcement sweep against exaggerated and deceptive AI claims, applying existing Section 5 unfairness and deception authority. Establishes that AI marketing claims need substantiation like any other.
Hawaii AI Disclosure & Safety Act
Hawaii Artificial Intelligence Disclosure and Safety Act (SB 3001, Act 248)
Requires conversational AI to disclose it is not human wherever a reasonable person could be misled, with persistent or three-hourly disclosure for minors, suicide and self-harm protocols, and annual safeguard reports to the state Department of Health.
Illinois HB 3773
Illinois House Bill 3773: Artificial Intelligence in Employment Decisions
Amends the Illinois Human Rights Act to make discriminatory AI use in employment decisions a civil rights violation, and bars using ZIP code as a proxy for protected class.
Iowa SF 2417
Iowa Chatbot Safety Act (SF 2417)
In force since 1 July 2026, which makes it the most urgent of the 2026 state chatbot laws. Carries a customer-service carve-out that decides whether a support bot is in scope, and requires a three-hourly AI reminder for every user, not just minors.
Maryland HB 1202
Maryland House Bill 1202: Use of Facial Recognition Services in Job Interviews
Bars employers from using facial recognition during job interviews without the applicant's signed consent waiver. One of the earliest US limits on biometric AI in hiring.
NY LOADinG Act
New York LOADinG Act: Legislative Oversight of Automated Decision-making in Government
Requires New York State agencies to inventory and review automated decision-making systems, keep meaningful human oversight, and bars using them to displace unionised state workers.
NYC LL 144 (Bias Audit)
NYC Local Law 144: Automated Employment Decision Tools
Requires an annual independent bias audit of hiring/promotion AI tools, publication of results, and advance notice to candidates. It is the most-cited US example of mandatory algorithmic bias auditing.
OMB M-25-21
OMB Memorandum M-25-21: Accelerating Federal Use of AI through Innovation, Governance, and Public Trust
The operative US federal AI use policy. Replaces the rights- and safety-impacting split with a single high-impact AI category carrying minimum practices for pre-deployment testing, impact assessment, ongoing monitoring and human oversight.
OMB M-25-22
OMB Memorandum M-25-22: Driving Efficient Acquisition of Artificial Intelligence in Government
The procurement companion to M-25-21, replacing M-24-18. Sets what federal agencies must require of AI vendors, and so functions as a de facto baseline questionnaire for anyone selling AI into government.
US TAKE IT DOWN Act
TAKE IT DOWN Act
Criminalises publishing non-consensual intimate imagery, including AI-generated deepfakes, and requires covered platforms to remove reported content within 48 hours of a valid request.
Tennessee SB 1580
Tennessee Health Care AI Act (SB 1580)
Bars AI systems from being marketed as capable of acting as a qualified mental health professional. Narrowly drafted at the marketing claim rather than the technology, and one of the few 2026 AI laws with a stated per-violation penalty.
Texas TRAIGA
Texas Responsible Artificial Intelligence Governance Act
A narrowed governance statute focused on state-agency AI use, with bans on AI designed for behavioural manipulation, unlawful discrimination, or producing unlawful deepfake content, and a regulatory sandbox.
US EEOC / Title VII (AI)
US Anti-Discrimination Law Applied to AI (Title VII & ADA)
Rather than a new AI statute, US federal anti-discrimination law (Title VII, ADA) already reaches biased AI hiring and employment tools. It is the enforcement baseline for algorithmic discrimination in US workplaces.
Utah SB 149
Utah Artificial Intelligence Policy Act
Requires businesses to disclose generative-AI use to consumers on request (and proactively in regulated professions), and creates a state Office of AI Policy with a regulatory 'learning lab'.
California SB 942
California AI Transparency Act
Requires large generative AI providers to offer free AI-detection tools and embed latent + manifest provenance disclosures in AI-generated content, tackling synthetic-media transparency at scale.
California ADMT Regulations
California CCPA Regulations on Automated Decision-making Technology
Gives California consumers pre-use notice, opt-out and access rights over automated decision-making used for significant decisions, and requires risk assessments plus cybersecurity audits.
Colorado AI Act (SB 26-189)
Colorado Artificial Intelligence Act
The first US comprehensive state AI law targeting algorithmic discrimination in consequential decisions. Since repealed and replaced by a narrower automated-decision-technology statute taking effect January 2027.
Colorado Chatbot Safety Act
Colorado Conversational Artificial Intelligence Service Operator Requirements (Chatbot Safety Act)
A first-in-nation state law on conversational AI. Operators must disclose that a user is talking to AI, estimate user age, run crisis protocols for suicide and self-harm prompts, and protect minors from sexually explicit output and engineered emotional dependence.
Connecticut CART Act
Connecticut Artificial Intelligence Responsibility and Transparency Act (Public Act 26-15)
The broadest US state AI statute after Colorado's: eight distinct regimes in one act, covering layoff disclosure, AI subscriptions, companions, content provenance, automated employment decisions, frontier-developer whistleblowing and state procurement. Duties phase in from 1 October 2026.
Illinois AI (HR)
Illinois AI Employment Laws (AI Video Interview Act & HB 3773)
Illinois pairs its 2020 AI Video Interview Act with a 2026 Human Rights Act amendment (HB 3773) that makes discriminatory use of AI in employment decisions an unlawful practice and requires notice to workers.
New Jersey FAIR Act
Forbidding the Algorithmic Inflation of Rent (FAIR) Act (A3497)
The first US state law to treat algorithmic rent-setting as an antitrust violation rather than a consumer-protection problem. Bars landlords and software vendors from using pricing algorithms that coordinate rents, lease terms or occupancy across competitors.
Georgia SB 540
Georgia AI Companion Chatbot Act (SB 540)
The first chatbot law enacted by a Republican-led state in 2026, and the strictest on scope: it has no platform carve-out, so assistants embedded in large services must comply on the same terms as standalone companion apps.
Idaho S 1297
Idaho Conversational AI Safety Act (S 1297)
Closely tracks Nebraska's Act. Where an operator has actual knowledge or reasonable certainty that a user is a minor, it must show a persistent AI disclaimer, block sexually explicit content, avoid gamification designed to drive excessive engagement, and provide parental supervision tools.
Illinois AI Safety Measures Act
Illinois Artificial Intelligence Safety Measures Act (SB 315)
The first US state law to require annual independent audits of large frontier AI developers. Covered developers must publish a frontier AI framework covering catastrophic-risk assessment, mitigations, internal governance, cybersecurity and third-party evaluation, and report critical safety incidents within 72 hours.
Nebraska LB 525
Nebraska Conversational Artificial Intelligence Safety Act (LB 525)
The model the other plains-state chatbot laws follow. Conversational AI must disclose it is not human, must not represent itself as providing professional mental or behavioural health care, and must avoid engagement gamification and engineered emotional dependence.
NY RAISE Act
New York Responsible AI Safety and Education Act
Requires large frontier developers to publish their safety protocols, report critical-harm incidents to the state within 72 hours, and submit to an oversight office inside the Department of Financial Services. Signed on 19 December 2025 and amended in March 2026.
Oregon SB 1546
Oregon Artificial Intelligence Companion Act (SB 1546)
The 2026 chatbot law with the sharpest enforcement teeth: a private right of action at $1,000 per violation. Operators must detect expressions of suicidal ideation or self-harm, interrupt the conversation, refer users to crisis resources and file annually.
Rhode Island AI Companion Act
Rhode Island AI Companion Chatbot Safety Act (S 2195 / H 7350)
One of three AI bills Rhode Island signed on the same day. Requires companion chatbots to handle expressions of suicidal ideation and of physical or financial harm to others, on top of the disclosure duties common to the 2026 state wave.
Washington HB 2225
Washington Chatbot Disclosure Act (HB 2225)
Requires non-human disclosure and minor-safety protocols for companion chatbots. Washington sits at the strict end of the reminder spectrum: three-hourly disclosure for adults but hourly for minors.
NIST AI RMF
NIST AI Risk Management Framework 1.0
A voluntary, widely adopted framework organised around four functions (Govern, Map, Measure and Manage) that has become the de facto reference for building trustworthy AI programmes in the US and beyond.
NIST GenAI Profile
NIST AI Risk Management Framework: Generative AI Profile (NIST AI 600-1)
Names twelve risks unique to or amplified by generative AI (confabulation, CBRN uplift, harmful bias, data leakage) and maps suggested actions onto the AI RMF's four functions.
NIST SP 800-218A
Secure Software Development Practices for Generative AI and Dual-Use Foundation Models (SP 800-218A)
Extends the Secure Software Development Framework to generative AI, adding practices for training-data provenance, model weight protection and supply-chain integrity.