US state AI laws in force in 2026, and what starts in 2027
No general federal AI law: the duties come from the states. Texas, Illinois, Utah, California and NYC rules already apply; Colorado and New York's RAISE Act follow in 2027.
The federal position
There is no general federal AI statute on record. Federal policy comes from executive action and agency guidance; OMB memorandum M-25-21 binds federal agencies' own use of AI, and the NIST AI RMF is voluntary. Private-sector duties come from the states.
Texas: TRAIGA
The Texas Responsible AI Governance Act applies from 1 January 2026. It prohibits developing or deploying AI to manipulate people towards harm, to discriminate unlawfully against a protected class, or to produce child sexual abuse material or unlawful deepfakes, and requires government agencies and health-care providers to disclose AI use. The Attorney General enforces it after a 60-day cure period.
Illinois and Utah
Illinois HB 3773 amends the Human Rights Act to address AI in employment decisions, effective 1 January 2026; Illinois's AI Video Interview Act has applied since 2020. Utah's Artificial Intelligence Policy Act has applied since 1 May 2024: a business using generative AI with consumers must disclose it when asked (as amended in 2025, also when the interaction is high-risk), and regulated occupations such as health and legal services must disclose it up front.
California and New York City
California SB 53 has required large frontier developers to publish a frontier AI framework and report critical safety incidents since 1 January 2026, with a set of further California laws signed in September 2026 (recorded, pending review). New York City Local Law 144 has required bias audits and candidate notices for automated employment decision tools since July 2023.
Coming in 2027
Colorado SB 26-189 applies from 1 January 2027, replacing the repealed Colorado AI Act (record pending review). New York's RAISE Act on frontier model safety also applies from 1 January 2027; its record is verified but at low confidence, so check the text.
A multi-state baseline
Most of these laws ask for the same few things: know which systems make or influence decisions about people, tell people when AI is used, test for discrimination, keep records, and offer a human route. Building those once covers most of the state duties; the applicability matrix template lists every instrument on record.
Obligations referenced in this guide
- Legal Large frontier developers must publish a frontier AI framework (California SB 53, California (United States))
- Legal Notify consumers before automated decision-making technology influences a consequential decision (Colorado ADMT law (SB 26-189), Colorado (United States))
- Legal Employers and employment agencies must obtain an independent bias audit before using an automated employment decision tool (NYC Local Law 144 (automated employment decision tools), New York (United States))
- Legal Health-care providers must disclose the use of AI in patient services (Texas Responsible AI Governance Act (TRAIGA), Texas (United States))
- Legal Developers and deployers must not use AI with the intent to unlawfully discriminate against a protected class (Texas Responsible AI Governance Act (TRAIGA), Texas (United States))
Frequently asked questions
Which US states have AI laws in effect?
On record: Texas (TRAIGA, from 1 January 2026), Illinois (HB 3773 from 1 January 2026, and the AI Video Interview Act), Utah (since 1 May 2024), California (SB 53 since 1 January 2026), Tennessee (the ELVIS Act) and New York City (Local Law 144). Colorado and New York State follow on 1 January 2027.
Is there a federal AI law in the US?
There is no general federal AI statute on record. Federal agencies are bound by OMB guidance for their own use of AI; the NIST AI RMF is voluntary.
What changes on 1 January 2027?
Colorado SB 26-189 (automated decision-making technology) and New York's RAISE Act (frontier model safety) apply, according to the records, and several California laws signed in September 2026 take effect.
Does Texas TRAIGA apply to private companies?
Yes, in part. Its prohibitions on manipulation, unlawful discrimination and sexual-content misuse apply to developers and deployers generally; its disclosure duties fall on government agencies and health-care providers.
Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.