ABCDEFGHIJKLMNOPQRSTUVWXYZ
1
StateAuthorsYearName of ReportWebsitePurpose
2
AlabamaChestnut, R., Almond, R., Tillman, R., Gray, R., Robbins, R., Daniels, R., Shaw, R., & Pringle, R.2024HB172 ENGROSSEDhttps://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2024RS/HB172-eng.pdfH172, enacted May 15, 2024, prohibits a person from distributing or entering into an agreement to distribute materially deceptive media. “Materially deceptive media” is “any image, audio, or video” that (1) “depicts an individual engaging in speech or conduct in which the depicted individual did not in fact engage,” (2) “a reasonable viewer or listener would incorrectly believe that the depicted individual engaged in the speech or conduct depicted,” and (3) AI created the media. AI includes any “artificial system or generative artificial intelligence system that performs tasks under varying and unpredictable circumstances without significant human oversight or that can learn from experience and improve performance when exposed to data sets.” A violation occurs if the person knows the media falsely represents someone, the distribution occurs within 90 days before an election, and the person intends to distribute this and cause a particular result. The creator, sponsor, or purchaser must have a disclaimer informing viewers the media has been manipulated. A violation results in criminal penalties. Effective: October 01, 2024.
3
AlabamaGovernor Kay Ivery - Governor's Task Force on Generative Artifical Intelligence (GenAI)2024State of Alabama GenAI Task Force Final Reporthttps://governor.alabama.gov/assets/2025/03/GenAI-TaskForce-Report_Final_20250321.pdfThe Alabama Generative AI Task Force's final report outlines a strategic approach to responsibly implementing generative AI in state government. It highlights current usage across agencies, identifies key risks like data privacy and algorithmic bias, and recommends adopting the NIST AI Risk Management Framework, creating oversight boards, and mandating employee training. The report emphasizes strong data governance, clear procurement standards, and the use of testing environments, while advising against immediate legislation to allow flexibility as AI technology evolves.
4
AlabamaState of Alabama2025Artificial Intelligence Governance Policyhttps://oit.alabama.gov/wp-content/uploads/2025/01/Artificial-Intelligence-Governance-Policy.pdfThe Alabama Artificial Intelligence Governance Policy, effective as of January 31, 2025, serves as a comprehensive framework for AI policy and regulation within the state government. Developed by the Office of Information Technology (OIT), this policy outlines the planning, implementation, procurement, security, privacy, and governance requirements for AI technologies used by state agencies and contractors.
5
AlaskaSenator Shelley Hughes2024S117https://www.akleg.gov/basis/Bill/Detail/33?Root=SB%20177#tab5_4Failed: S117, introduced January 16, 2024, would have prohibited a person from making or retaining services to make an election-related communication the person “knows or reasonably should know includes a deepfake relating to a candidate or proposition without including” a specified disclosure stating AI has manipulated or generated the content. The disclosure placement and readability are based on the type of media. “Deepfake” constitutes an “image, audio recording, or video of an individual’s appearance, conduct, or spoken words that has been created or manipulated with machine learning, natural language processing, or another computational processing technique in a manner to create a realistic but false image, audio, or video” that a reasonable person would understand to depict a real individual.
6
CaliforniaSenator Scott Wiener [D]; Senator Nancy Skinner [D]2018SB1001https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=201720180SB1001Introduced in 2018 as SB 1001, The Bolstering Online Transparency Act (BOT), went into effect in July 2019. BOT makes it unlawful for a person or entity to use a bot to communicate or interact online with a person in California in order to incentivize a sale or transaction of goods or services or to influence a vote in an election without disclosing that the communication is via a bot. The law defines a “bot” as “an automated online account where all or substantially all of the actions or posts of that account are not the result of a person.” The law applies only to communications with persons in California. In addition, it applies only to public-facing websites, applications, or social networks that have at least 10 million monthly U.S. visitors or users. BOT does not provide a private right of action.
7
CaliforniaSenator Scott Wiener2024SB1047: Safe and Secure Innovation for Frontier Artificial Intelligence Models Acthttps://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202320240SB1047This bill would enact the Safe and Secure Innovation for Frontier Artificial Intelligence Models Act to, among other things, require that a developer, before beginning to initially train a covered model, as defined, comply with various requirements, including implementing the capability to promptly enact a full shutdown, as defined, and implement a written and separate safety and security protocol, as specified.
8
CaliforniaAssemblymember Rebecca Bauer-Kahan [D]; Senator Tom Umberg [D]2024AB2885https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202320240AB2885Introduced on February 15, 2024, AB2885 defines artificial intelligence as “an engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objective, infer from the input it receives how to generate outputs that can influence physical or virtual environments.” The purpose of this definition is to standardize the definition of AI across various California statutes, including the California Business and Professions Code, Education Code, and Government Code. The law took effect January 1, 2025.
9
CaliforniaAssemblymember Rebecca Bauer-Kahan [D]2024AB1008https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202320240AB1008AB 1008 updates the definition of “personal information” as defined in the California Consumer Privacy Act to clarify that “personal information” can exist in various formats, including artificial intelligence (AI) systems that are capable of outputting personal information.
10
CaliforniaSecretary of State Jerry Brown2024AB2355https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202320240AB2355Introduced on February 12, 2024, AB2355 requires that electoral advertisements using AI-generated or substantially altered content feature a disclosure that the material has been altered. The law will be enforced by the Fair Political Practices Commission.
11
CaliforniaAssembly member Jacqui Irwin2024AB-2013 Generative artificial intelligence: training data transparency.https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202320240AB2013Under AB 2013, developers of generative AI models must disclose key details about their training data, effectively pulling back the curtain on how these algorithms have been fed. No more treating data like a casserole of mystery ingredients.
12
California2024AB-2839 Elections: deceptive media in advertisements.https://leginfo.legislature.ca.gov/faces/billHistoryClient.xhtml?bill_id=202320240AB2839Introduced on February 15, 2024, AB2839 expands the timeframe in which a committee or other entity is prohibited from knowingly distributing an advertisement or other election material containing deceptive AI-generated or manipulated content.
13
CaliforniaSenator Josh Becker (D-Menlo Park)2024SB-942 California AI Transparency Act.https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202320240SB942SB-942, the California AI Transparency Act, requires developers of generative AI systems with over 1 million monthly users to offer AI detection tools and include disclosures on AI-generated content. These disclosures, both visible and hidden, help users know when content was AI-created or altered. The law aims to enhance transparency and empower consumers to identify AI-generated content.
14
ConnecticutSenator James Maroney2023Connecticut Privacy Act (CTPA)https://www.cga.ct.gov/2022/ACT/PA/PDF/2022PA-00015-R00SB-00006-PA.PDFThe Connecticut Privacy Act (CTPA) which goes into force on July 1, 2023, provides consumers the right to opt-out of profiling if such profiling is in furtherance of automated decision-making that produces legal or other similarly significant effects. Controllers must also perform data risk assessments prior to processing consumer data when such processing presents a “heightened risk of harm.” These situations include certain profiling activities that present a reasonably foreseeable risk of unfair or deceptive treatment of or unlawful disparate impact on consumers, financial, physical or reputational injury to consumers, physical or other intrusion into the solitude, seclusion or private affairs or concerns of consumers that would be offensive to a reasonable person, or other substantial injury to consumers.
15
ColoradoRodriguez, Cutter, Michaelson Jenet, Priola, F. Winter, Fenberg, Titone, & Rutinel2024Senate Bill 24-205 "Colorado AI Act"https://leg.colorado.gov/sites/default/files/2024a_205_signed.pdfSenate Bill 24-205, the Colorado AI Act, aims to protect Colorado residents from algorithmic discrimination by high-risk AI systems. It takes effect on February 1, 2026, and requires developers and deployers to exercise reasonable care, disclose the use of AI in consequential decisions, and manage risks of algorithmic discrimination.
16
FloridaRepresentative Alex Rizo of Hialeah2024H 919 - Artificial Intelligence Use in Political Advertisinghttps://www.flsenate.gov/Session/Bill/2024/919/BillText/er/PDFRequires certain political advertisements, electioneering communications, or other miscellaneous advertisements to include a specified disclaimer; specifies requirements for the disclaimer; provides for criminal and civil penalties; authorizes any person to file certain complaints; provides for expedited hearings.
17
HawaiiSenator Mike Gabbard2023SB2572https://data.capitol.hawaii.gov/sessions/session2024/bills/SB2572_.HTMIntroduced January 19, 2024, SB 2572 (Assembly version A2176) would have prohibited a person from deploying AI-generated products in Hawaii without submitting proof of the product’s safety to the office regulating AI. Violation of this bill would be subject to a monetary fine for each offense.
18
HawaiiLEE, CHANG, KEITH-AGARAN, MCKELVEY, SHIMABUKURO, Ihara2023SB974https://www.capitol.hawaii.gov/session/archives/measure_indiv_Archives.aspx?billtype=SB&billnumber=974&year=2023Introduced on January 20, 2023, SB974, the Hawaii Consumer Data Protection Act, would establish a framework to regulate controllers and processors' access to personal consumer data and introduces penalties, as well as a new consumer privacy special fund.
19
HawaiiSenator Karl Rhoads [D]2024SB2524https://www.capitol.hawaii.gov/sessions/session2024/bills/SB2524_.HTMSB 2524, introduced January 19, 2024, would have prevented a covered entity, including an individual, firm, corporation, legal entity, or other commercial entity, from making an algorithmic eligibility determination or an algorithmic information availability determination on the basis of class, race, color, religion, national origin, sex, gender identity or expression, sexual orientation, familial status, wealth, or disability. “Algorithmic eligibility determination” is a determination about a person’s eligibility for important life opportunities based in whole or part on an algorithmic process using AI, machine learning, or similar technologies. “Algorithmic information availability determination” is an AI-generated determination of a person’s receipt of advertising, marketing, solicitations, or other information about important life opportunities. A violation shall be deemed an unlawful discriminatory practice.
20
HawaiiRepresentative Gene Ward [R]; Representative David Alcos [R]; Representative Diamond Garcia [R]; Representative Elijah Pierick [R]; Representative Lauren Matsumoto [R]2024HB1734https://data.capitol.hawaii.gov/sessions/session2024/bills/HB1734_.HTMHB 1734, introduced January 18, 2024, would have required any AI-generated political advertisement containing an “image, video, footage, or audio recording” to include a “clear and conspicuous statement” disclosing the use of AI in creating the content. The disclosure, depending on the media, must be readable, follow specified procedures, and be intelligible
21
HawaiiRepresentative David Tarnas [D]; Representative Terez Amato [D]; Representative Della au Belatti [D]; Representative Elle Cochran [D]; Representative Ernesto Ganaden [D]; Representative Jeanne Kapela [D]; Representative Lisa Marten [D]; Representative Rose Martinez [D]; Representative Mark Nakashima [D]; Representative Amy Perruso [D]; Representative Mahina Poepoe [D]; Representative Gregg Takayama [D]; Representative Adrian Tam [D]2024HB1607https://data.capitol.hawaii.gov/sessions/session2024/bills/HB1607_.pdfIntroduced January 17, 2024, HB 1607 (Senate version S2524) would have prohibited a covered entity, such as an individual, firm, corporation, partnership, or other commercial entity, from making an “algorithmic eligibility determination” or an “algorithmic information availability determination” on basis of class, race, color, religion, national origin, sex, gender identity or expression, sexual orientation, familial status, wealth, or disability in a discriminatory manner. “Algorithmic eligibility determination” is an AI-generated determination in whole or in part regarding a person’s eligibility for, or opportunity to access, important life opportunities. “Algorithmic information availability determination” is an AI-generated determination about a person’s ability to receive advertising, marketing, solicitations, or other offers for an important life opportunity. Failure to comply would result in a violation of an unlawful discriminatory practice.
22
IllinoisRep. Jaime M. Andrade, Jr. - Diane Pappas - Terra Costa Howard2019;2022`Illinois AI Video Interview Acthttps://www.ilga.gov/legislation/ilcs/ilcs3.asp?ActID=4015&ChapterID=68In 2019, Illinois became the first state to enact restrictions with respect to the use of AI in hiring. The Illinois AI Video Interview Act was amended in 2021 and went into effect in 2022, and now requires employers using AI-enabled assessments to:
Notify applicants of AI use;
Explain how the AI works and the “general types of characteristics” it uses to evaluate applicants;
Obtain their consent;
Share any applicant videos only with service providers engaged in evaluating the applicant;
Upon an applicant’s request, destroy all copies of the applicant’s videos and instruct service providers to do so as well; and
Report annually, after use of AI, a demographic breakdown of the applicants they offered an interview, those they did not, and the ones they hired.
23
IndianaSen. Liz Brown, Sen. Brian Buchanan, Sen. Jon Ford.2023SB5https://iga.in.gov/legislative/2023/bills/senate/5/detailsIntroduced on January 9, 2023, SB5, creates an omnibus consumer privacy law along the lines of the Virginia Consumer Data Privacy Act and the Colorado Privacy Act, to regulate, among other data uses, the collection and processing of personal information. In particular, the bill sets out rules for profiling and automated decision-making. The bill enables individuals to opt-out of “profiling in furtherance of decisions that produce legal or similarly significant effects” concerning the consumer. Profiling is defined as “any form of automated processing of personal data to evaluate, analyze, or predict personal aspects concerning an identified or identifiable natural person's economic situation, health, personal preferences, interests, reliability, behavior, location, or movements[.]” Controllers must also perform a data protection impact assessment for high-risk profiling activities.
24
MarylandDelegates Miller, Szeliga, Adams, Arentz, Fisher, Hartman, McComas,
M. Morgan, T. Morgan, Nawrocki, Pippy, and Tomlinson		2024HB1202https://mgaleg.maryland.gov/2023RS/bills/hb/hb1202F.pdfMaryland law, HB 1202, prohibits an employer from using a facial recognition service for the purpose of creating a facial template during an applicant’s pre-employment interview, unless the applicant consents by signing a specified waiver. This workplace AI law went into force on October 1, 2020.
25
MichiganReps. Tsernoglou, Rheingans, Price, Conlin, Puri, Paiz, Hope, Martus, Brixie, Bierlein, Rogers, Scott, Andrews, McFall, Brabec, Morse, Haadsma, Wilson, Dievendorf, Morgan, Hood, Skaggs, Byrnes, Steckloff, Tyrone Carter, MacDonell, Hoskins, Brenda Carter, O’Neal, Neeley, Shannon and Farhat2023HOUSE BILL No. 5141https://www.legislature.mi.gov/documents/2023-2024/publicact/htm/2023-PA-0263.htmEffective Feb. 13, 2024, HB 5141 regulates use of AI in political advertising. The law requires political ads created using AI, including prerecorded phone messages created using AI, to include a clear and conspicuous disclaimer. The law includes specific requirements for the disclaimer depending on the media form. The fine for the first violation of this section is $250, then $1,000.
26
MinnesotaElkins ; Bahner ; Noor ; Feist2023HF2309https://www.revisor.mn.gov/bills/bill.php?b=House&f=HF2309&ssn=0&y=2023Introduced on March 1, 2023, HF2309, would create an omnibus consumer privacy law based on the Colorado Privacy Act and Connecticut Data Privacy Act, to regulate, among other data uses, the collection and processing of personal information. In particular, the bill sets out rules for profiling and automated decision-making. Specifically, the bill enables individuals to opt-out of “profiling in furtherance of decisions that produce legal or similarly significant effects” concerning the consumer. Profiling is defined as “any form of automated processing of personal data to evaluate, analyze, or predict personal aspects concerning an identified or identifiable natural person's economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.” Controllers must also perform a data privacy and protection assessment for high-risk profiling activities.
27
MinnesotaWestlin ; Maye Quade2023SF2915Originally introduced on March 15, 2023 as SF2915, the Minnesota Consumer Data Privacy Act was passed as Section 325O of HF 4757 an omnibus bill dealing primarily with cannabis. Section 325O.05 gives consumers the option to opt-out of 1) having their data used for targeted advertising, 2) sale of personal data, and 3) personal data processing for use in profiling for automated decisions that produce legal or similarly significant effects. Consumers may also request access to their data, correct inaccuracies in their data, request a copy of their data, and request the deletion of their collected data. Section 325O.08 requires a controller to conduct a DPA if processing personal data for the purpose of profiling if the profiling presents a reasonably foreseeable risk to the consumer.
28
MississippiOffice of the Governor2025Executive Order No. 1584https://mcusercontent.com/08cb3e52aa1308600f84d49ea/files/e91a16a0-1bae-0eb8-4c6d-04ffa4f82a6d/Executive_Order_1584_AI.pdfMandates the Mississippi Department of Information Technology Services (ITS) to develop a framework for the responsible use of AI within state government.
29
MontanaSenator Daniel Zolnikov2023SB384https://archive.legmt.gov/bills/2023/billpdf/SB0384.pdfIntroduced on February 16, 2023, SB384, An act establishing the Consumer Data Privacy Act, would create an omnibus consumer privacy law, to regulate, among other data uses, the collection and processing of personal information, and profiling and automated decision-making. Specifically, the bill creates certain transparency requirements around profiling and enable individuals to opt-out of “profiling in furtherance of automated decisions that produce legal or similarly significant effects” concerning the consumer. Profiling is defined as “any form of automated processing performed on personal data to evaluate, analyze, or predict personal aspects related to an identified or identifiable individual's economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.” Controllers must also perform a data protection assessment for high-risk profiling activities.
30
MontanaSenator Daniel Zolnikov2025SB212https://bills.legmt.gov/#/laws/bill/2/LC0292?open_tab=billIntroduced on Feb. 4, 2025, SB 212 sets requirements for critical infrastructure (as defined by Montana Code 82-1-601 as an asset critical to US “security, national economic security, national public health or safety”) controlled by AI. All systems of critical infrastructure run in whole or in part by AI need to have a shutoff the developer can deploy to regain human control of the system. To this end, the entity using the AI system must implement an annual review and test a risk management program to ensure manual takeover is possible. If passed, the act would be effective on date of passage.
31
New HampshireSPONSORS: Rep. Brennan, Merr. 9; Rep. McGhee, Hills. 35; Rep. Berry, Hills. 39; Rep. Cormen, Graf. 15; Rep. Boehm, Hills. 14; Rep. Kenney, Straf. 10; Rep. D. McGuire, Merr. 14; Rep. Massimilla, Graf. 1; Sen. Perkins Kwoka, Dist 21; Sen. Whitley, Dist 15; Sen. Fenton, Dist 102024HOUSE BILL 1596-FNhttps://legiscan.com/NH/text/HB1596/id/2864639/New_Hampshire-2024-HB1596-Introduced.html
This bill requires the disclosure of deceptive synthetic media and deceptive and fraudulent deep fakes usage in political advertising.
32
New JerseyPrimary Sponsor:
Singleton, Troy
Codey, Richard J.
Mukherji, Raj
Benson, Daniel R.
Moriarty, Paul D.
Co-Sponsor:
Greenstein, Linda R.
Madden, Fred H., Jr.
Pou, Nellie
McKnight, Angela V.
DeAngelo, Wayne P.
Verrelli, Anthony S.
Wimberly, Benjie E.		2022S332https://www.njleg.state.nj.us/bill-search/2022/S332Initially introduced on January 11, 2022, S332 (the “Act”), creates an omnibus consumer privacy law along the lines of the Washington Privacy Act. Among other things, the Act requires companies to conduct data protection assessments of “processing that presents a heightened risk of harm to a consumer” before conducting such processing. Such “heightened risk” results from activities such as profiling. “Profiling” means any form of automated processing performed on personal data to evaluate, analyze or predict personal aspects related to an identified or identifiable individual’s economic situation, health, personal preferences, interests, reliability, behavior, location or movements. Consumers are also afforded the right to opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.
The bill was signed into law on January 16, 2024. The law will go into effect January 15, 2025.
33
New MexicoGail Chasey and Charlotte Little and Katy M. Duhigg2024HB182https://www.nmlegis.gov/Sessions/24%20Regular/bills/house/HB0182.HTMLN.M. Stat. Ann. § 1-19-26.4 (proposed as HB 182), outlines regulations regarding advertisements containing AI-generated media. If someone creates, produces, or purchases an advertisement with deceptive media, they must include a clear disclaimer stating, "This [image/video/audio] has been manipulated or generated by artificial intelligence," depending on the type of media used. The disclaimer must be easily readable or audible, depending on the media type, and must be present throughout the duration of the media or at specific intervals. These regulations became effective on May 15, 2024.
34
New YorkLaurie A. Cumbo, Alicka Ampry-Samuel , Helen K. Rosenthal, Robert E. Cornegy, Jr., Ben Kallos, Adrienne E. Adams, Farah N. Louis, Margaret S. Chin, Fernando Cabrera , Deborah L. Rose, Vanessa L. Gibson, Justin L. Brannan, Carlina Rivera , Mark Levine, Diana I. Ayala, I. Daneek Miller, Stephen T. Levin, Inez D. Barron2021Local Law 144https://legistar.council.nyc.gov/LegislationDetail.aspx?ID=4344524&GUID=B051915D-A9AC-451E-81F8-6596032FA3F9In December 2021, New York City passed the first law (Local Law 144), in the United States requiring employers to conduct bias audits of AI-enabled tools used for employment decisions.
35
TennesseeLamberth2024ELVIS Acthttps://www.capitol.tn.gov/Bills/113/Bill/HB2091.pdfThe Ensuring Likeness Voice and Image Security Act (“ELVIS Act”) was signed into law on March 21, 2024. The Act protects voices of songwriters, performers, and celebrities from artificial intelligence and deepfakes by prohibiting the use of AI to mimic a person’s voice without their permission, and treats violations as Class A misdemeanors. The Act also authorizes civil action against any person who violates the law. The Act becomes effective July 1, 2024.
36
TexasCapriglione | Longoria | Burrows | Meyer2024HB4, Texas Data Privacy and Security Acthttps://capitol.texas.gov/BillLookup/History.aspx?LegSess=88R&Bill=HB4Introduced on February 16, 2023, HB4, the Texas Data Privacy and Security Act, is based on the Virginia Consumer Data Protection Act. Once effective, the law will create similar requirements enabling individuals to opt-out of “profiling” that produces a legal or similarly significant effect concerning the individual. Controllers must also perform a data protection assessment for high-risk profiling activities. The Act goes into force on July 1, 2024.
37
Utah"Chief Sponsor: Kirk A. Cullimore
House Sponsor: Jefferson Moss"		2024UTAH ARTIFICIAL INTELLIGENCE POLICY ACT (UAIP)https://le.utah.gov/~2024/bills/static/SB0149.htmlSigned into law on March 13, 2024, the Artificial Intelligence Policy Act (SB149) requires covered businesses to “clearly and conspicuously” disclose to a consumer that they are interacting with “generative artificial intelligence and not a human.” “Generative artificial intelligence” refers to “an artificial system that: i) is trained on data; ii) interacts with a person using text, audio, or visual communication; and iii) generates non-scripted outputs similar to outputs created by a human, with limited or no human oversight.” The Act applies to any “person” in a “regulated occupation” (i.e., occupations that require a person to obtain a license or state certificate), and any person regulated by the Utah Consumer Protection Division that uses generative artificial intelligence (though the disclosures obligations differ).
38
UtahChief Sponsor: Kirk A. Cullimore
House Sponsor: Jefferson Moss		2025SB 226 (Admendent of Artifical Intelligence Policy Act)https://le.utah.gov/~2025/bills/static/SB0226.htmlEffective May 7, 2025, SB 226 amends the Artificial Intelligence Policy Act. If a supplier uses generative AI to interact with an individual in connection with a consumer transaction and the individual clearly and unambiguously asks the supplier about whether AI is being used, it shall disclose to the individual at the start of the interaction that the individual is interacting with generative AI and not a human.
39
UtahChief Sponsor: Jefferson Moss
Senate Sponsor: Kirk A. Cullimore		2025HB 452 (“Artificial Intelligence Applications Relating to Mental Health”)https://le.utah.gov/~2025/bills/static/HB0452.htmlEffective May 7, 2025, HB 452 (“Artificial Intelligence Applications Relating to Mental Health”) regulates the use of mental health chatbots that employ artificial intelligence (AI) technology. A "Mental health chatbot" means an AI technology that: (i) uses generative AI to engage in interactive conversations with a user of the mental health chatbot similar to the confidential communications that an individual would have with a licensed mental health therapist; and (ii) a supplier represents, or a reasonable person would believe, can or will provide mental health therapy or help a user manage or treat mental health conditions. Where a supplier uses a mental health chatbot, it must cause the mental health chatbot to clearly and conspicuously disclose to users that the mental health chatbot is an AI technology and not a human. Such disclosures must be made before the Utah user can access the mental health chatbot features, at the beginning of any interaction with a Utah user if the user has not used the chatbot within the past seven days, and any time the user asks the chatbot whether AI is being used.
40
VirginiaDelegate Michael Feggans [D]; Delegate Bonita Anthony [D]; Delegate Alex Askew [D]; Delegate Katrina Callsen [D]; Delegate Nadarius Clark [D]; Delegate Laura Jane Cohen [D]; Delegate Rae Cousins [D]; Delegate Jackie Glass [D]; Delegate Rozia Henson [D]; Delegate Amy Laufer [D]; Delegate Marty Martinez [D]; Delegate Atoosa Reaser [D]; Delegate Joshua Thomas [D]; Delegate Kathy Tran [D]2025VA321127https://law.lis.virginia.gov/vacode/title32.1/chapter5/section32.1-127/VA ST § 32.1-127, effective July 1, 2025, requires each hospital, nursing home, and certified nursing facility to establish and implement policies to ensure the permissible access to and use of an “intelligent personal assistant” provided by a patient, in accordance with such regulations, while receiving inpatient services. Such policies shall ensure protection of health information in accordance with the requirements of the federal Health Insurance Portability and Accountability Act of 1996
41
New HampshireThomas H Cormen
primary
(D - Grafton 15)

James Summers
cosponsor
(R - Rockingham 20)

David John Preece
cosponsor		2024H 1688 Artificial Intelligencehttps://custom.statenet.com/public/resources.cgi?mode=show_text&id=ID:bill:NH2023000H1688&verid=NH2023000H1688_20240712_0_EF&Relates to the use of AI by state agencies; prohibits state agencies from using AI to manipulate, discriminate against or surveil members of the public.
42
New HampshireSenator Sharon Carson [R]; Senator Daniel Innis [R]; Senator Donna Soucy [D]; Senator Cindy Rosenwald [D]; Senator Shannon Chandley [D]; Senator Denise Ricciardi [R]; Representative Jess Edwards [R]; Representative Shaun Filiault [D]; Senator Tim McGough [R]; Representative David Luneau [D]2024SB255https://gc.nh.gov/bill_status/billinfo.aspx?id=865&inflect=1Introduced on January 19, 2023, SB 255, creates an omnibus consumer privacy law based on a composite of the Colorado Privacy Act, Connecticut Data Privacy Act, and Virginia Consumer Data Protection Act. In particular, the bill sets out rules for profiling and automated decision-making. Specifically, the bill enables individuals to opt-out of “in furtherance of solely automated decisions that produce legal or similarly significant effects concerning the consumer.” Profiling is defined as “any form of automated processing of personal data to evaluate, analyze, or predict personal aspects concerning an identified or identifiable natural person's economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.” Controllers must also perform a data protection assessment for high-risk profiling activities. The bill was reintroduced and passed by the legislature on January 18, 2024.
43
IllinoisRep. Jaime M. Andrade, Jr. - Abdelnasser Rashid, Lilian Jiménez, Jay Hoffman, Dave Vella, Natalie A. Manley, Will Guzzardi, Dagmara Avelar, Barbara Hernández and Emanuel "Chris" WelchEffective date: Jan. 1, 2026.HB 3773 - LIMIT PREDICTIVE ANALYTICS USEhttps://www.ilga.gov/legislation/BillStatus_pf.asp?DocNum=3773&DocTypeID=HB&LegID=&GAID=17&SessionID=112&GA=103Amends the Illinois Human Rights Act to regulate the use of AI by employers. It prohibits employers from using AI that could potentially subject employees to unlawful discrimination based on what the Illinois Human Rights Act defines as protected classes. It also stops employers from using zip codes in the recruitment and hiring process
44
OregonSenator Prozanski, Representative Holvey2023SB619https://olis.oregonlegislature.gov/liz/2023R1/Measures/Overview/SB619On August 1, 2023, Oregon passed SB619, the state’s first omnibus consumer privacy law. The bill generally follows the Virginia Consumer Data Protection Act and sets out rules for profiling and automated decision-making. Specifically, the bill enables individuals to opt-out of processing for the purpose of “profiling the consumer to support decisions that produce legal effects or effects of similar significant significance.” Profiling is defined as “an automated processing of personal data for the purpose of evaluating, analyzing or predicting an identified or identifiable consumer’s economic circumstances, health, personal preferences, interests, reliability, behavior, location or movements.” Controllers must also perform a data protection assessment for high-risk profiling activities. The law goes into effect on July 1, 2024.
45
OregonSenators WOODS, MANNING JR, GELSER BLOUIN, Representative NERON; Senators CAMPOS, DEMBROW, FREDERICK, GOLDEN, HANSELL, HAYDEN, JAMA, KNOPP, PATTERSON, PROZANSKI, WEBER, Representatives ANDERSEN, BOWMAN, BYNUM, DEXTER, EVANS, FAHEY, GAMBA, GOMBERG, GRAYBER, HARTMAN, HUDSON, LEVY E, LIVELY, MANNIX, NATHANSON, NELSON, NGUYEN D, PHAM H, PHAM K, SOSA2024S 1571 AI in Campaign Adshttps://custom.statenet.com/public/resources.cgi?mode=show_text&id=ID:bill:OR2024000S1571&verid=OR2024000S1571_20240327_0_EF&Relates to the use of AI in campaign communications; provides that a campaign communication that includes any form of synthetic media must include a disclosure stating that the image, audio recording or video recording has been manipulated; provides that the secretary of state may institute proceedings to enjoin any violation of this requirement; provides that the court shall impose a civil penalty.
46
Tennessee*Lamberth , Cochran, Burkhart, White, Freeman, Johnson G, Martin G, Jones, Davis, Camper, Todd, Hardaway, Powell, Hemmer, Leatherwood, Sherrell, Cepicky, Chism, Zachary, Terry, Russell, Howell, Hawk, Towns, Hurt, Williams, Richey, Baum, Martin B, Eldridge, Dixie, Shaw, Slater, Ragan, McKenzie, Powers, Raper, Bricken, Parkinson, Love, Rudder, Butler, Capley, Hakeem2024Ensuring Likeness, Voice and Image Security (ELVIS) Acthttps://www.capitol.tn.gov/Bills/113/Bill/HB2091.pdfTargets AI-generated deepfakes by updating Tennessee's Protection of Personal Rights Law to prohibit individuals from using AI to mimic a person's voice without permission.
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100