Obligation guide
What Are AI Consent Requirements?
Required by 20 regulations across 9 jurisdictions in the XIRA catalog (state, federal, and local codes).
Definition
Consent requirements may apply, calling for clear permission before certain AI processing, often video interviews or biometric analysis. Silence or pre-checked boxes rarely qualify where these rules apply.
See also our AI compliance glossary for short definitions of common terms.
Related glossary entries
Which regulations require this
- Illinois Biometric Information Privacy Act (BIPA)
Illinois BIPA may apply to written consent before collecting fingerprints, facial scans, voiceprints, iris scans, or...
ILAI-specificHighIn effect - California Companion Chatbots Act (SB 243)
California's Companion Chatbot Act may apply to operators of AI chatbots designed for ongoing social interaction. Whe...
CAAI-specificHighIn effect - Connecticut Public Act 25-113 (SB 1295) CTDPA and profiling amendments
Connecticut's omnibus bill dramatically expands the CTDPA. Lowers the applicability threshold from 100,000 to 35,000...
CTPrivacy ADMHighUpcoming - Texas TRAIGA (Responsible Artificial Intelligence Governance Act, HB 149)
Texas RAIGA (HB 149) prohibits AI systems from intentionally manipulating behavior to cause harm, infringing constitu...
TXAI-specificMediumIn effect - Washington My Health My Data Act
Broad health data privacy law covering health data collected outside HIPAA, including data from health-related AI too...
WAPrivacy ADMMediumIn effect - Tennessee ELVIS Act (Ensuring Likeness, Voice, and Image Security)
First enacted US legislation specifically designed to protect musicians from unauthorized AI voice synthesis. Covers...
TNAI-specificMediumIn effect - California Deepfake Pornography Expansion (AB 621)
Expands civil remedies for non-consensual deepfake pornography. Broadens definitions, adds liability for deepfake por...
CAAI-specificMediumIn effect - Texas TRAIGA Biometric and AI Training Amendments (HB 149, 89th Legislature)
Amends the Texas Capture or Use of Biometric Identifier Act (CUBI) and related Business and Commerce Code provisions...
TXAI-specificMediumIn effect - Illinois Right of Publicity Act, Digital Replica Amendment (HB 4875)
Prohibits unauthorized AI-generated digital replicas of individual voices, images, and likenesses. Holds liable anyon...
ILAI-specificMediumIn effect - California Digital Replicas of Deceased Performers Act (AB 1836)
Restricts commercial uses of realistic AI-generated replicas of deceased performers' voices or likenesses in audiovis...
CAAI-specificMediumIn effect - Illinois Digital Forgeries Act (HB 2123)
Extends nonconsensual intimate image protections to AI-generated deepfakes. Provides civil remedies including statuto...
ILAI-specificLowIn effect - Washington Fabricated Intimate Images (2024)
Criminalizes creation and distribution of AI-generated intimate images without consent. Provides civil remedies for v...
WAAI-specificLowIn effect - Maryland Nonconsensual Pornography Deepfake Expansion (SB 360)
Expands Maryland's revenge porn statute to cover AI-generated and computer-generated sexual imagery. Strengthens civi...
MDAI-specificLowIn effect - New York Deceased Performer Digital Replicas (SB 8391)
Amends the Right of Publicity law to protect digital replicas of deceased performers. Provides civil remedies for una...
NYAI-specificLowIn effect - Utah Unauthorized AI Impersonation (SB 271)
Expands Utah's abuse of personal identity law to cover AI-generated deepfakes and digital replicas used for commercia...
UTAI-specificLowIn effect - Illinois AI Video Interview Act (820 ILCS 42)
Requires employers using AI to analyze video interviews to notify candidates, explain how AI is used, and obtain cons...
ILAI-specificLowIn effect - Illinois Digital Voice and Likeness Protection Act (HB 4762)
Protects individual digital voice and likeness in contracts. Contract provisions for digital replica use are unenforc...
ILAI-specificLowIn effect - New York Digital Replica Contract Protections (S7676B)
Establishes protections for individuals regarding the use of digital replicas in professional contracts. Requires spe...
NYAI-specificLowIn effect - California Digital Replica Contract Protections (AB 2602)
Makes contract terms unenforceable when they allow digital replicas of a performer without the performer giving speci...
CAAI-specificLowIn effect - Maryland HB 1202 (Facial Recognition in Hiring)
Prohibits creating facial templates of job applicants during interviews without signed consent. Where applicable, the...
MDAI-specificLowIn effect
Which states reference this obligation
What you should do next
- Map each AI touchpoint that needs opt-in versus implied consent.
- Localize consent text for the states where candidates or users live.
- Store proof with timestamps, channel, and version of the language shown.
- Give a no-friction path for someone who declines without retaliation.
- Reconfirm consent when you materially widen how the model uses data.
Check if this applies to your company
The free scan maps obligations to your states, tools, and role.
Start your free scan