XIRA

AI Regulations Tracker

Every AI and algorithmic decision-making regulation XIRA tracks, organized by state. Updated as new laws are signed.

Tracking 99 regulations across 24 states and jurisdictions. Every entry verified against enrolled statute text. Last updated April 9, 2026.

Upcoming effective dates and regulatory changes

Sorted by what arrives soonest, with timeline context and weekly update notes.

Signal: Next deadline is TAKE IT DOWN Act (S. 146) in 39 days.

5 regulations take effect within 90 days

  • May 19, 2026: TAKE IT DOWN Act (S. 146)
  • June 9, 2026: New York Synthetic Performers Disclosure (SB 8420A)
  • June 11, 2026: Washington SB 5395 (AI in Health Insurance Prior Authorization)
  • June 30, 2026: Colorado AI Act (SB 24-205)
  • July 1, 2026: Connecticut Public Act 25-113 (SB 1295) CTDPA and profiling amendments
Run a scan to see if this applies to you

Coming up

9
TODAY

Already in effect

90

These deadlines apply differently depending on your AI tools, your states, and your role. Run a free scan to see which ones matter for your company.

Start your free scan

Regulatory updates

Upcoming in the next 90 days

5 regulations take effect in the next 90 days.

Filters

July 2026

  • July 1, 2026High impactEffective dateCT

    Connecticut Public Act 25-113 (SB 1295) CTDPA and profiling amendments takes effect

    Major CTDPA overhaul signed June 25, 2025. Removes solely from automated decision scope: after July 1, 2026, covered decisions include any automated decisions in scope, not just solely automated. New consumer right to contest certain profiling decisions. Privacy notices must state whether data is used to train large language models. Impact assessments for profiling are required separate from existing data protection assessments (unique dual-assessment requirement). Applicability thresholds are dramatically lowered: 35,000 consumers or any entity processing sensitive data or any entity selling personal data, among the broadest nationally. Categorical prohibition on processing minor data for targeted advertising or sale (consent cannot override). Expanded sensitive data includes disability and treatment information, neural data, nonbinary and transgender status, financial account numbers, and government-issued identifiers. GLBA entity-level exemption removed and replaced with a data-level exemption. First CTDPA enforcement action was an $85,000 settlement in 2025. Most amendments effective July 1, 2026; impact assessment rules for new processing activities apply August 1, 2026. Effective in about 82 days, so teams should map obligations and prepare evidence now.

    View regulation

June 2026

  • June 30, 2026High impactEffective dateCO

    Colorado AI Act (SB 24-205) takes effect

    Requires developers and deployers of high-risk AI systems to use reasonable care to protect consumers from algorithmic discrimination in consequential decisions. The law uses a substantial factor test: AI that makes or is a substantial factor in making consequential decisions is in scope, not only fully automated systems. Small deployer exemption: deployers with fewer than 50 employees are exempt from certain obligations if they do not use proprietary AI data. Affirmative defense may apply for organizations that discover and cure violations and align with recognized risk frameworks such as NIST AI RMF. A repeal-and-replace effort may modify obligations before the June 30, 2026 effective date. Plan for current law until replacement is enacted. Effective in about 81 days, so teams should map obligations and prepare evidence now.

    View regulation
  • June 11, 2026Medium impactEffective dateWA

    Washington SB 5395 (AI in Health Insurance Prior Authorization) takes effect

    Enacted as Chapter 157, Laws of 2026; Governor signed March 23, 2026; effective June 11, 2026. AI tools may be used to approve prior authorization requests but may not deny care without human review by a licensed physician or health professional. Managed care organizations must report the percentage of total denials aided by AI. Periodic performance reviews of AI tools required for accuracy and reliability. Effective in about 62 days, so teams should map obligations and prepare evidence now.

    View regulation
  • June 9, 2026Low impactEffective dateNY

    New York Synthetic Performers Disclosure (SB 8420A) takes effect

    Requires conspicuous disclosure in advertisements when AI-generated synthetic performers are used. A synthetic performer is a digitally created asset generated using AI intended to create the impression of a human performer not recognizable as any real person. Exempt: advertisements for expressive works (movies, TV, streaming, games), audio-only ads, and AI language translation. Effective in about 60 days, so teams should map obligations and prepare evidence now.

    View regulation

May 2026

  • May 19, 2026High impactEffective dateFEDERAL

    TAKE IT DOWN Act (S. 146) takes effect

    Dual-effective-date framework now reaches the platform compliance milestone: criminal provisions already took effect at signing, and platform duties are now in force. The law covers both authentic NCII and AI-generated deepfakes, includes FTC jurisdiction over nonprofits, and requires operational notice-and-removal workflows with statutory timelines.

    View regulationView source

April 2026

  • April 8, 2026High impactDatabase updateALL

    Database reviewed and expanded

    XIRA regulation database was reviewed and expanded with recent state and federal items. Coverage now includes additional California, New York, Connecticut, Utah, and federal entries reflected in the live tracker.

March 2026

  • March 17, 2026High impactProposedCO

    Colorado repeal-and-replace draft released

    A governor-endorsed draft proposes replacing portions of Colorado SB 24-205 with narrower ADMT-style disclosure and recordkeeping obligations. The proposal does not pause current compliance planning for the enacted law.

    View regulation
  • March 11, 2026Medium impactEnforcementFEDERAL

    Federal commentary on state AI laws published

    Commerce commentary discussed implementation burden in certain state AI statutes. No federal action from this commentary overrides enacted state obligations.

    View source

January 2026

  • January 1, 2026High impactNew lawCA

    California 2026 AI statute wave takes effect

    Multiple California laws in the XIRA database move into force, including frontier model transparency and healthcare disclosure requirements. Teams operating in California should verify notice, disclosure, and governance artifacts before launch windows.

December 2025

  • December 11, 2025Medium impactEnforcementFEDERAL

    DOJ AI litigation posture strengthened

    Federal enforcement signaling from DOJ indicates stronger cross-agency focus on AI-related misconduct and harms. This raises the importance of retained evidence and governance controls across high-risk use cases.

    View source

Find which regulations apply to you.

Start your free scan

Free. No account required.