US AI Regulations
No federal AI statute yet — instead, a fast-growing patchwork of state laws, agency guidance, and sector-specific rules that a compliance program has to track state by state.
The United States has taken a fundamentally different approach than the EU: rather than one comprehensive federal AI law, AI-specific obligations are emerging state by state, layered on top of existing federal law that already applies to AI systems even without AI-specific language — anti-discrimination law, consumer protection law, and sector regulators like the FTC and EEOC issuing guidance that treats AI harms as existing legal violations, not a new category of law.
For a company operating nationally, this means the actual compliance surface is the union of every state you operate in or sell into, not just where you're headquartered. Colorado's AI Act was the first comprehensive state-level statute; several other states have active legislation at varying stages. We track the ones with real legislative movement here, not every bill introduced and abandoned in a single session.
Jurisdictions
California AI Regulations
California has moved on multiple fronts at once — automated decision-making rules, generative AI disclosure requirements, and employment-specific AI rules layered on top of the state's existing privacy regime.
Colorado AI Regulations
Colorado's AI Act (SB 205) is the most comprehensive AI-specific statute enacted by a US state, with duties of reasonable care for both developers and deployers.
Recently updated
regulations us
US Federal AI Regulation: What Actually Exists Today
Frequently asked questions
- Is there a federal AI law in the US?
- Not a comprehensive one. Federal agencies — the FTC, EEOC, CFPB, and others — have issued guidance applying existing law to AI systems, and sector-specific rules (in areas like credit and employment) already cover a meaningful share of AI use cases. But there's no single federal AI statute comparable to the EU AI Act.
- Which US state has the most developed AI law?
- Colorado's AI Act (SB 205) is the most comprehensive enacted state statute, with duties of reasonable care for both developers and deployers of high-risk AI systems. Other states have active legislation at earlier stages — see the state pages here for current status.
- If my company only operates in one state, do other states' AI laws matter?
- They can, if you sell into or serve customers in those states — most of these statutes are triggered by where the affected consumer is, not where your company is based. A company based in a state with no AI-specific law can still owe obligations under another state's statute for the customers it serves there.