Contact usGet started

Frameworks

AI governance frameworks in the United States

The US has no comprehensive federal AI law. Obligations come from federal frameworks and policy, and from a growing set of state and city laws.

Law

LawColorado ADMT law (SB 26-189)Colorado SB 26-189, Automated Decision-Making TechnologyColorado's SB 26-189 replaced the Colorado AI Act before it took effect. What developers and deployers of decision technology must do from 1 January 2027.Enacted 14 May 2026, duties apply from 1 January 2027In Aicura from EnterpriseLawCalifornia CCPA ADMT regulationsCCPA Regulations on Automated Decisionmaking Technology, Risk Assessments and Cybersecurity AuditsCalifornia's CCPA regulations on automated decisionmaking technology and risk assessments. Who they cover, what they require, and the 2027 and 2028 deadlines.In force since 1 January 2026, ADMT duties apply from 1 January 2027In Aicura from EnterpriseLawConnecticut AI in employment (PA 26-15)Connecticut Public Act 26-15, automated employment-related decision technologyConnecticut's Public Act 26-15 sets notice duties for AI used in hiring and other employment decisions from 1 October 2027. Who it covers and what it requires.In force since 1 October 2026, notice duties apply to technology deployed from 1 October 2027LawNYC Local Law 144NYC Local Law 144 of 2021, Automated Employment Decision ToolsNYC Local Law 144 requires a yearly independent bias audit and candidate notice before employers use automated employment decision tools. What it requires.In force, enforced since 5 July 2023In Aicura from EnterpriseLawTexas TRAIGATexas Responsible Artificial Intelligence Governance Act (HB 149)The Texas Responsible AI Governance Act has been in force since 1 January 2026. Its prohibited uses, disclosure duties, penalties and the NIST-linked defence.In force since 1 January 2026In Aicura from EnterpriseLawIllinois AI in employment lawIllinois Human Rights Act amendments on AI in employment (HB 3773, Public Act 103-0804)Illinois HB 3773 makes discriminatory AI use and missing AI notice civil rights violations for employers. What it requires, who it covers and the rule status.In force since 1 January 2026, notice rules not yet adoptedIn Aicura from EnterpriseLawCalifornia ADS employment regulationsCalifornia Civil Rights Council Employment Regulations Regarding Automated-Decision SystemsCalifornia's Civil Rights Council regulations apply anti-discrimination law to automated-decision systems at work. Scope, agent liability, records, testing.In force since 1 October 2025In Aicura from EnterpriseLawUtah AI Policy ActUtah Artificial Intelligence Policy Act and AI consumer protection disclosuresUtah requires disclosure of generative AI in consumer dealings and regulated occupations. What SB 149 and SB 226 require, the penalties and the 2027 repeal.In force, AI Policy Act chapter set to repeal 1 July 2027In Aicura from EnterpriseLawCalifornia SB 53Transparency in Frontier Artificial Intelligence Act (California SB 53)California's SB 53 requires frontier AI developers to publish safety frameworks and transparency reports and to report critical safety incidents to Cal OES.In force since 1 January 2026In Aicura from EnterpriseLawUS state privacy laws on profilingUS state consumer privacy laws, profiling opt-outs and assessmentsMost US state privacy laws let consumers opt out of profiling for significant decisions and require assessments of risky profiling. How the model works now.In force in most states with a comprehensive privacy law, on staggered datesIn Aicura from Enterprise

Regulator guidance

Regulator guidanceNAIC AI Model BulletinNAIC Model Bulletin on the Use of Artificial Intelligence Systems by InsurersThe NAIC Model Bulletin sets regulators' expectations for insurers using AI, centred on a written AIS Program. What it asks for and how states adopt it.Adopted by the NAIC 4 December 2023, issued state by stateRegulator guidanceUS bank model risk guidance (SR 26-2)Supervisory Guidance on Model Risk Management (SR 26-2, replacing SR 11-7)SR 26-2 replaced SR 11-7 as US banking agencies' model risk guidance in April 2026. What it expects, who it targets and why generative and agentic AI are out.Issued 17 April 2026, superseding SR 11-7

Public sector policy

Public sector policyExecutive Order 14365Executive Order 14365, Ensuring a National Policy Framework for Artificial IntelligenceExecutive Order 14365 directs US agencies to challenge state AI laws and seek a federal standard. What it does, what it does not do and what it means for you.In effect since 11 December 2025. It does not itself preempt any state lawPublic sector policyOMB M-25-21OMB Memorandum M-25-21, Accelerating Federal Use of AI through Innovation, Governance, and Public TrustOMB M-25-21 sets how US federal agencies govern AI, with minimum practices for high-impact AI. What it requires, its deadlines and what it means for vendors.In effect since 3 April 2025
All jurisdictions

Other jurisdictions

Guides

Questions

Which AI governance frameworks are listed for United States?

This page lists 14 instruments for United States: Colorado ADMT law (SB 26-189), California CCPA ADMT regulations, Connecticut AI in employment (PA 26-15), NYC Local Law 144, Executive Order 14365, Texas TRAIGA, Illinois AI in employment law, California ADS employment regulations, OMB M-25-21, Utah AI Policy Act, California SB 53, US state privacy laws on profiling, NAIC AI Model Bulletin and US bank model risk guidance (SR 26-2). Which ones apply to you depends on where you operate, your sector and how you use AI. Each framework page explains what it asks of you.

Does Aicura support the frameworks listed for United States?

Aicura carries Colorado ADMT law (SB 26-189), California CCPA ADMT regulations, NYC Local Law 144, Texas TRAIGA, Illinois AI in employment law, California ADS employment regulations, Utah AI Policy Act, California SB 53 and US state privacy laws on profiling as frameworks you can enable for your reviews. Every plan starts with the AI register, the record any framework needs first.

Start with the AI you run.

Every framework begins with knowing which AI systems and agents you have. The AI register is free to start.

Sign upContact us