XIRA
Tracking 100 regulations across 24 states and jurisdictions.

AI Regulations Tracker

Every AI and automated decision-making regulation XIRA tracks, organized by state. Every entry verified against enrolled statute text.

Compare AI regulations between states

Pick two states to compare obligations, timing, and enforcement exposure.

Signal: compare totals, in-effect counts, and highest state penalty side by side.

California has 33 regulations while Colorado has 13. California requires AI detection tool required, Manifest disclosure option required, Latent disclosure required that Colorado does not. Colorado requires Developer documentation required, Developer material-update notice required, Point-of-interaction ADMT notice required that California does not. Both states require Record-keeping required, Bias testing required, Transparency notice required.

Summary statsCaliforniaColorado
Total regulations3313
AI-specific laws201
Sector-specific laws10
Privacy ADM laws11
Highest state penalty$1,000,000$20,000
Already in effect3112
Upcoming21

Federal penalties also apply: up to $53,088 per violation (FTC). These apply in every state in addition to state-level penalties above.

ObligationCACO
ADM impact assessment required●
ADMT access right required●
ADMT opt-out required●
ADMT privacy policy disclosure required●
AI detection tool required●
AI interaction disclosure required●
Annual reporting required●
Bias testing required●●
Bias testing required●●
Capture device default disclosure required●
Consent required●
Consent required●
Consumer notification required●●
Consumer opt-out required●
Content provenance required●
Content removal required●●
Cybersecurity audit certification required●
Cybersecurity audit required●
Data access and correction rights required●
Developer documentation required●
Developer material-update notice required●
Developer risk assessment support required●
Disclosure to users required●●
Disclosure to users required●
Hosting disclosure gate required●
Human review and reconsideration required●
Impact assessment required●
Impact assessment required●●
Incident reporting required●
Latent disclosure required●
Licensee contract requirement●
Manifest disclosure option required●
No-strip provenance required●
Point-of-interaction ADMT notice required●
Post-adverse-outcome disclosure required●
Pre-use notice required●
Profiling disclosure required●
Prohibited practices●●
Provenance data detection required●
Record-keeping required●●
Record-keeping required●●
Reporting required●
Risk assessment filing required●
Risk management program required●●
Transparency notice required●●
Transparency notice required●●

California

Colorado

This comparison shows the regulatory landscape. Your actual obligations depend on which AI tools you use and whether you build or deploy AI. Run a free scan with your specific details.

Scan your exposure

Popular comparisons

Colorado vs CaliforniaNew York vs IllinoisTexas vs CaliforniaColorado vs Connecticut
100Regulations tracked
24Jurisdictions
88In effect
OnePath from scan to export

Numbers reflect the live catalog and site configuration.

See the match before you commit

Lead with the scan. Add a work email only if you want updates. Nothing here blocks the free exposure path.