- US (federal): no single AI law, but the FTC has said there is no AI exemption from existing laws.
- US (federal): a December 2025 executive order seeks one national framework and set up a task force to challenge some state AI laws.
- New York City: employers using automated hiring tools need a yearly bias audit and must notify candidates.
- Illinois and Texas: AI laws took effect on 1 January 2026; Colorado replaced its 2024 AI Act with a new law whose requirements start on 1 January 2027.
- California: rules on AI in employment decisions are in effect; privacy-law rules on automated decision-making apply from 1 January 2027.
On this page:No single federal AI lawExisting federal rules already cover AIState and city laws to knowWhat this means in practice
No single federal AI law
At federal level there is no general AI statute like the EU AI Act. On 11 December 2025 the President signed an executive order, Ensuring a National Policy Framework for Artificial Intelligence. According to the White House fact sheet, it calls for a national legislative framework that would preempt state AI laws seen as stifling innovation, sets up an AI Litigation Task Force to challenge state laws, and links some federal funding to state AI laws. An executive order does not itself repeal state laws, so state rules on the books remain relevant unless courts or Congress change them.
Want a clear map of where AI touches decisions about people in your organisation? Book a free AI Value Briefing and we will look at it with you.
Existing federal rules already cover AI
- Deceptive claims (FTC): in its 2024 Operation AI Comply, the Federal Trade Commission brought cases against companies making false AI claims or using AI to deceive, stating there is no AI exemption from the laws on the books. Claims about what your AI can do must be true and backed up.
- Lending: under Regulation B, creditors must give specific reasons when they refuse credit, or tell applicants they can ask for them. The Consumer Financial Protection Bureau has said a complex algorithm does not excuse this.
- Other sectors: health, insurance, employment and financial regulators apply their existing rules to AI used in their areas.
State and city laws to know
- New York City, Local Law 144 (in force; enforced since 5 July 2023): an employer or agency may use an automated employment decision tool only if it has had a bias audit within the past year, must publish a summary of the results, and must notify candidates and employees.
- Illinois, Public Act 103-0804 (in effect from 1 January 2026): amends the Illinois Human Rights Act so that it is a civil rights violation for an employer to use AI that has the effect of discriminating against protected classes, to use zip codes as a proxy for them, or to fail to tell employees it is using AI for these decisions. The state Department of Human Rights is to set the notice rules.
- Texas, HB 149 (in effect from 1 January 2026): bans developing or deploying AI intended to unlawfully discriminate or to encourage self-harm, harm to others or crime; requires government agencies to tell people when they interact with AI, and health care providers to disclose AI use in care. The Attorney General enforces it, with 60 days to cure a violation first.
- Colorado, SB26-189 (signed 14 May 2026; requirements from 1 January 2027): repeals and re-enacts the 2024 Colorado AI Act, which therefore did not take effect in its original form. The new law covers automated decision-making technology used in consequential decisions such as employment, housing, lending, insurance and health care, with disclosure duties after adverse outcomes and Attorney General enforcement.
- California (several rules in effect): Civil Rights Council regulations on automated-decision systems in employment took effect on 1 October 2025, including keeping related records for four years; regulations under the California Consumer Privacy Act on automated decision-making technology took effect on 1 January 2026, and businesses using it for significant decisions must comply by 1 January 2027; and SB 53, signed on 29 September 2025, sets transparency and incident-reporting duties for large developers of frontier AI models.
What this means in practice
If you only use AI to draft, summarise and search, US rules mainly ask you not to mislead anyone about it. If AI plays a part in hiring, promotion, lending, insurance, housing or health decisions, check the rules in each state and city where your candidates or customers are, keep a person in charge of the decision, and keep records. Ask vendors of HR and decision tools what audits and documentation they provide.
This is general information, not legal advice.
What to do next
- List any AI or automated tools used in decisions about people, and the states and cities those people are in.
- Ask each vendor of hiring or decision tools for bias audit results and documentation, and check notice duties with your counsel.
- Review your marketing and sales materials so that every claim about AI is accurate and can be backed up.
Goes deeper in our free AI Field Guide: 9. Checking AI output before you use it, 26. Guardrails and permissions: what AI may and may not do, 32. Leading AI adoption: what leaders do differently. Ask for these guides.
Talk it through with us
We help your teams focus AI on everyday work where a person checks and decides, and give leaders a clear view of where AI is used, so legal questions reach your counsel early.
Book my AI Value BriefingA conversation, not a pitch. We will not ask for confidential data. How we handle your details.How this page was made: researched and drafted with AI assistance from the sources below, each opened and checked on the date shown, and reviewed against our editorial rules.
Related questions
- The White House, Fact Sheet: Ensuring a National Policy Framework for Artificial Intelligence (11 December 2025) (checked 2026-10-27)
- Federal Trade Commission, FTC Announces Crackdown on Deceptive AI Claims and Schemes (25 September 2024) (checked 2026-10-27)
- Consumer Financial Protection Bureau, Regulation B, 12 CFR 1002.9 Notifications (checked 2026-10-27)
- Consumer Financial Protection Bureau, Circular 2022-03: Adverse action notification requirements and complex algorithms (checked 2026-10-27)
- NYC Department of Consumer and Worker Protection, Automated Employment Decision Tools (Local Law 144) (checked 2026-10-27)
- Illinois General Assembly, Public Act 103-0804 (HB 3773) (checked 2026-10-27)
- Texas Legislature Online, HB 149 (89th Legislature) bill history (checked 2026-10-27)
- Texas Legislature Online, HB 149 enrolled text (checked 2026-10-27)
- Colorado General Assembly, SB26-189 Automated Decision-Making Technology (checked 2026-10-27)
- Colorado General Assembly, SB24-205 Consumer Protections for Artificial Intelligence (checked 2026-10-27)
- California Civil Rights Department, Civil Rights Council secures approval for regulations on AI in employment (30 June 2025) (checked 2026-10-27)
- California Privacy Protection Agency, CCPA updates, cybersecurity audits, risk assessments and ADMT regulations (checked 2026-10-27)
- Office of the Governor of California, Governor Newsom signs SB 53 (29 September 2025) (checked 2026-10-27)