Status as of October 2026 · 9 sourced guides
Which AI rules apply to your business?
There is no single AI law in the United States. A business that builds, buys, or uses AI answers to cross-border laws like the EU AI Act, federal agencies applying old rules to new tools, a growing set of state AI laws, the rules of its own sector, and voluntary frameworks that regulators point to.
- 9 sourced guides
- 5 layers of rules mapped
- Sources linked in every guide
- 0 scripts, cookies, or forms
Rule finder
What does your AI decide?
Start with the decision, not the technology. Pick the decision the AI touches and go straight to the guides that cover it.
Start here The AI-specific laws are new. The duties they sit on top of are not. Map the five layers first, then the sector.
- AI compliance, layer by layer
How the five layers of AI regulation fit together, and what to do in the first 90 days.
- US state AI laws
Colorado, Texas, California, Utah, Illinois, and NYC AI laws, with dates and a comparison table.
- AI governance frameworks
How NIST AI RMF, the Generative AI Profile, and ISO/IEC 42001 map to legal duties, plus a policy and inventory template.
Key date Colorado’s SB 26-189 covers financial and lending decisions from January 1, 2027.
- AI in financial services
Model risk guidance after SR 11-7, adverse action notices, fair lending, FINRA, SEC, and NYDFS.
- US state AI laws
Colorado, Texas, California, Utah, Illinois, and NYC AI laws, with dates and a comparison table.
- AI governance frameworks
How NIST AI RMF, the Generative AI Profile, and ISO/IEC 42001 map to legal duties, plus a policy and inventory template.
Key date Illinois HB 3773 took effect January 1, 2026.
- AI in hiring and HR
NYC bias audits, Illinois and California rules, Colorado, Title VII after the EEOC pullback, and the FCRA.
- US state AI laws
Colorado, Texas, California, Utah, Illinois, and NYC AI laws, with dates and a comparison table.
- EU AI Act compliance
Who the EU AI Act reaches, what each risk tier requires, and the dates after the 2026 Omnibus.
Key date Colorado private passenger auto and health benefit plan insurers owed full compliance and their first annual report by July 1, 2026.
- AI in insurance
The NAIC model bulletin, Colorado’s SB21-169 rules, NYDFS Circular Letter No. 7, and unfair discrimination testing.
- US state AI laws
Colorado, Texas, California, Utah, Illinois, and NYC AI laws, with dates and a comparison table.
- AI governance frameworks
How NIST AI RMF, the Generative AI Profile, and ISO/IEC 42001 map to legal duties, plus a policy and inventory template.
Key date In traditional Medicare, CMS’s WISeR model began January 1, 2026 in New Jersey, Ohio, Oklahoma, Texas, Arizona, and Washington.
- AI in health care
FDA device status, HIPAA vendor rules, Section 1557, health IT transparency, Medicare Advantage, and state laws.
- US state AI laws
Colorado, Texas, California, Utah, Illinois, and NYC AI laws, with dates and a comparison table.
- EU AI Act compliance
Who the EU AI Act reaches, what each risk tier requires, and the dates after the 2026 Omnibus.
Key date California’s AB 325 on common pricing algorithms took effect January 1, 2026.
- AI pricing and antitrust
When pricing software becomes an antitrust problem, new state laws, surveillance pricing, and FTC AI cases.
- US state AI laws
Colorado, Texas, California, Utah, Illinois, and NYC AI laws, with dates and a comparison table.
Key date Stand-alone high-risk duties moved from August 2, 2026 to December 2, 2027.
- EU AI Act compliance
Who the EU AI Act reaches, what each risk tier requires, and the dates after the 2026 Omnibus.
- AI governance frameworks
How NIST AI RMF, the Generative AI Profile, and ISO/IEC 42001 map to legal duties, plus a policy and inventory template.
The stack
Five layers apply at once
Open a layer to see where it is covered.
01 Cross-border laws EU AI Act
The EU AI Act reaches non-EU companies whose AI or its output is used in the EU. EU AI Act compliance
02 Federal agencies Old rules, new tools
Federal agencies apply existing rules to AI. Each sector guide covers the regulators for that sector; insurance is regulated mainly by the states. The overview
03 State AI laws Colorado, Texas, California
Colorado, Texas, California, Utah, Illinois, and NYC AI laws, with dates and a comparison table. US state AI laws
04 Sector rules Your industry’s own law
Guides for financial services, health care, hiring and HR, insurance, and pricing.
05 Voluntary frameworks NIST AI RMF, ISO/IEC 42001
How NIST AI RMF, the Generative AI Profile, and ISO/IEC 42001 map to legal duties, plus a policy and inventory template. AI governance frameworks
Key dates
What applies now, and what is next
Dates that moved in 2026 are shown as amended. Each line links to the guide with the source.
- In force EU EU AI Act prohibited practices apply
- In force EU General-purpose AI model duties apply
- In force US states Texas HB 149 and California SB 53 take effect
- In force EU Article 50 transparency duties apply
- Next deadline EU New prohibitions on non-consensual intimate imagery and child sexual abuse material; Article 50(2) marking grace period ends
- Upcoming Colorado SB 26-189 regulates automated decision-making technology in consequential decisions
- Upcoming EU Stand-alone high-risk system duties apply (moved from Aug 2, 2026)
- Upcoming EU High-risk duties for AI in regulated products apply (moved from Aug 2, 2027)
Library
Guides by sector
Each guide covers which rules apply, what they require in practice, the key dates, and links to the primary text. Status is stated as of the date at the top of each guide.
AI compliance, layer by layer
How the five layers of AI regulation fit together, and what to do in the first 90 days.
EU AI Act compliance
Who the EU AI Act reaches, what each risk tier requires, and the dates after the 2026 Omnibus.
US state AI laws
Colorado, Texas, California, Utah, Illinois, and NYC AI laws, with dates and a comparison table.
AI in financial services
Model risk guidance after SR 11-7, adverse action notices, fair lending, FINRA, SEC, and NYDFS.
AI in health care
FDA device status, HIPAA vendor rules, Section 1557, health IT transparency, Medicare Advantage, and state laws.
AI in hiring and HR
NYC bias audits, Illinois and California rules, Colorado, Title VII after the EEOC pullback, and the FCRA.
AI in insurance
The NAIC model bulletin, Colorado’s SB21-169 rules, NYDFS Circular Letter No. 7, and unfair discrimination testing.
AI pricing and antitrust
When pricing software becomes an antitrust problem, new state laws, surveillance pricing, and FTC AI cases.
AI governance frameworks
How NIST AI RMF, the Generative AI Profile, and ISO/IEC 42001 map to legal duties, plus a policy and inventory template.
What changed in 2026?
In 2026 the EU delayed most high-risk duties under the AI Act, Colorado repealed its 2024 AI Act before it took effect and passed a narrower replacement, and federal bank regulators replaced the model risk guidance that had stood since 2011. Plans built on the old dates need rework. The overview and each sector guide give the current dates with sources.
What this site is and is not
It is a free, sourced reference that links to the statute, regulation, agency text, or court record behind the rules it describes where that text is available, and names law firm and press sources for what they are in each guide’s source list. It is not legal advice, it does not sell compliance services, and it is not written by a law firm. Confirm anything you act on against the primary text and a qualified lawyer.