AI Regulations Tracker
Every AI and automated decision-making regulation XIRA tracks, organized by state. Every entry verified against enrolled statute text.
Category
Status
Regulation catalog
Database snapshot. 99 regulations, 24 jurisdictions. Updated April 20, 2026.
Connecticut
(2 tracked)
- ConnecticutUpcoming
Connecticut Public Act 25-113 (SB 1295) CTDPA and profiling amendments
Connecticut's omnibus bill dramatically expands the CTDPA. Lowers the applicability threshold from 100,000 to 35,000 consumers. Adds LLM training data disclosure (first in nation). Creates a new profiling impact assessment requirement separate from existing DPIAs. Adds consumer rights to question, explain, review, and correct profiling decisions. Establishes a voluntary bias auditing safe harbor. Expands sensitive data to include neural and financial data. Adds minors' data sale prohibition. Cure period expired December 31, 2024.
- ConnecticutIn Effect
Connecticut Government AI Procurement and Oversight (SB 1103)
First-in-nation state government AI procurement law. Requires state agencies to inventory AI systems, conduct impact assessments, prohibit discriminatory AI, and publicly post inventories. Applies to state agencies and contractors, not private sector employers.
Maryland
(2 tracked)
- MarylandIn Effect
Maryland Online Data Privacy Act (MODPA), ADM and profiling provisions
Statute effective October 1, 2025, but enforcement does not begin until April 1, 2026. The law does not apply to processing activities before April 1, 2026. Considered one of the strongest state privacy laws due to strict data minimization and a complete ban on selling sensitive data (not only opt-in consent). The threshold of 35,000 consumers is lower than most states. Controllers must handle profiling and automated decision-making with strong consumer protections, including documented risk assessments and opt-out rights. Impact assessments required per algorithm used in high-risk processing. Nonprofits are largely included. Universal opt-out signals required from day one. 60-day cure period with no sunset date in the current statute.
- MarylandIn Effect
Maryland AI Governance Act of 2024 (SB 818)
Requires Maryland state agencies to inventory AI systems, conduct impact assessments, and follow DoIT policies for AI procurement and use. Applies to state government agencies only, not the private sector.
Numbers reflect the live catalog and site configuration.
See the match before you commit
Lead with the scan. Add a work email only if you want updates. Nothing here blocks the free exposure path.