AI Laws in Cary, North Carolina
AI Laws USA tracks 23 AI rules that apply to people and businesses in Cary, North Carolina: 10+ federal rules, 12 North Carolina state-level rules, and 1 local Cary ordinance. Coverage is strongest on government use of AI, automated decision-making, consumer protection, and data-center siting and energy. 10 of these rules are already in effect. Each entry below links to its official source.
Cary local AI rules (and Wake County County)
1 local AI rule specific to Cary, North Carolina or Wake County County.
-
In effect Strength: stronger
Cary NC 18-month data center moratorium (2026)
Cary, NC · Effective August 1, 2026 · Town of Cary, N.C. — 18-month moratorium on all data center development (approved August 2026)
Cary Town Council unanimously approved an EIGHTEEN-MONTH moratorium on ALL data center development in August 2026. The length puts it among the longest local pauses in this dataset, and the town was specific about what the time is for: staff will study power demand and grid capacity, water consumption, noise and vibration effects, and site design and buffering, while engaging the community and coordinating with regional partners. Staff will give periodic progress updates to council, with a decision on a permanent ordinance expected in February. The carve-out is the part worth copying. The moratorium expressly excepts 'enterprise, small-scale, collocated data processing equipment, such as server rooms at offices or hospitals' DRAWING LESS THAN ONE MEGAWATT of demand. That is a cleanly drafted exclusion: it is defined by function and by a hard numerical threshold, so a hospital's server closet is unambiguously outside the moratorium while anything of real scale is inside. Several other jurisdictions in this dataset had to solve the same problem by describing the excluded use in words alone, which leaves argument room. Not everyone supported it — Cary resident Michael Morris, who works in IT, told council the town has been about growth for twenty years and the moratorium 'sends the wrong message,' while accepting that a data center should not go next to a supermarket. Cary is in Wake County, in the Research Triangle, where Durham County and the City of Durham also paused data centers in 2026.
North Carolina-level AI rules most relevant to Cary
12 North Carolina state rules apply to residents and businesses in Cary. Showing the 8 most relevant to Cary's local picture; 4 more are on the North Carolina jurisdiction page.
-
In effect Strength: limited
NC HB 469 (2017 AV statute)
North Carolina · Effective December 1, 2017 · S.L. 2017-166; N.C. Gen. Stat. §§ 20-400–20-403
North Carolina legalized fully autonomous vehicles, treats the registered owner as the operator for traffic-enforcement purposes, allows AVs to transport unaccompanied minors only with parental consent, and preempts local AV regulation.
-
In effect Strength: stronger
EBCI Ord. 158 (Data Center Moratorium)
Eastern Band of Cherokee Indians · Effective May 7, 2026 · EBCI Ordinance No. 158, Cherokee Code ch. 47E (May 7, 2026)
Indefinite moratorium on data center development on the Qualla Boundary. Dinilawigi (Tribal Council) voted 11-0 to amend the Cherokee Code Chapter 47E, finding that high-impact digital infrastructure 'presents a clear and present danger to the lands and people' of the EBCI.
-
Proposed / pending
North Carolina Senate Bill 730 (Data Center Water and Coolin
North Carolina · North Carolina Senate Bill 730 (Data Center Water and Cooling Regulations)
North Carolina's House advanced SB 730 to largely prohibit evaporative cooling, require closed-loop water systems, and direct the state to set water-use standards for large data centers.
-
In effect Strength: limited
Executive Order No. 24: Advancing Trustworthy Artificial Int
North Carolina · Effective September 2, 2025 · Executive Order No. 24: Advancing Trustworthy Artificial Intelligence That Benefits All North Carolinians
Governor Josh Stein's order establishes an AI Leadership Council and an AI Accelerator within NCDIT and requires each Cabinet agency to form an AI Oversight Team and submit AI use cases for risk assessment.
-
In effect Strength: limited
North Carolina State Government Responsible Use of Artificia
North Carolina · Effective August 1, 2024 · North Carolina State Government Responsible Use of Artificial Intelligence Framework
NCDIT published a NIST-based framework of principles, practices, and guidance for state agencies deploying AI while reducing privacy and data-protection risks to residents.
-
In effect Strength: limited
NC AI Strategic Roadmap (released Jul. 1, 2026)
North Carolina · Effective July 1, 2026 · North Carolina AI Strategic Roadmap (AI Leadership Council under Executive Order 24), released July 1, 2026
North Carolina released its AI Strategic Roadmap on July 1, 2026. Developed by the AI Leadership Council that Governor Josh Stein created under Executive Order 24, the roadmap lays out 17 goals organized around three priorities: protecting North Carolinians from AI harms, preparing the workforce for AI, and using AI to improve government service delivery. As a published strategy document, it guides state agency AI adoption and safeguards but does not itself impose binding legal requirements.
-
In effect Strength: limited
NC Generative AI Implementation Recommendations and Consider
North Carolina Department of Public Instruction (NCDPI) · Effective January 16, 2024 · NC Generative AI Implementation Recommendations and Considerations for PK-13 Public Schools
North Carolina's education department released a generative AI guidebook (including the 'EVERY' responsible-use framework) covering leadership, human capacity, curriculum, data privacy, and technology infrastructure for public schools.
-
Proposed / pending
NC AG framework for a Duke data center rate class (2026)
North Carolina · N.C. Att'y Gen. framework filed in Duke Energy rate cases before the N.C. Utilities Commission (Sept. 14, 2026)
North Carolina's Attorney General is trying to make data centers pay their own way on the power grid, and he is doing it through the Utilities Commission rather than the legislature. On September 14, 2026 Jeff Jackson filed a framework in Duke Energy's pending rate cases asking the Commission to do five things: create a SEPARATE RATE CLASS for data centers and other large energy users, so their costs are not spread across residential bills; require Duke to make its TEMPLATE CONTRACTS with data centers public; require regular reporting whenever a deal departs from those templates; require Duke to update its load forecasts every 90 days instead of every six months; and PAUSE development of new natural gas plants until those updated forecasts can be evaluated. He is also pressing Duke to make the federal Ratepayer Protection Pledge — under which large users build, bring or buy the generation they need and pay for the delivery upgrades that serve them — legally binding rather than a voluntary promise. The number driving all of this is Duke's own: the company projects that 80 PERCENT of the new energy demand it must meet will come from data centers and other large loads. THIS IS A REQUEST, NOT A RULE. The Commission has not decided. The framework is entered because the proceeding itself was opened at the AG's request and because the relief sought — a distinct large-load rate class — is the mechanism other states are converging on.
Federal AI rules that apply in Cary, North Carolina
These federal rules apply everywhere in the United States, including Cary, North Carolina. Showing the 10 strongest and most recent.
-
In effect Strength: stronger
TVA data center capacity commitment charge (2026)
Tennessee Valley Authority · Effective October 1, 2026 · Tenn. Valley Auth. Bd. of Dirs. — Data Center Capacity Commitment Charge (approved Aug. 20, 2026; eff. Oct. 1, 2026)
The Tennessee Valley Authority's Board of Directors approved a separate, higher wholesale rate for data centers on August 20, 2026, effective October 1. New or expanding data center loads above 5 megawatts now fall under a Capacity Commitment Charge attached to TVA's data center rate schedules, designed to recover the incremental capacity costs those customers impose on the system. The headline figures are substantial: upfront capacity commitment charges of roughly $1.5 million per megawatt, payable over three to five years, and an all-in average billing increase for data center customers of about 10%, phased in across three consecutive fiscal years. The stated purpose is to keep residential rates low while still serving growing data center demand. TVA matters here out of proportion to a single utility. It is a federal corporate agency supplying power across seven states, so this is not a state rate case but a regional cost-allocation decision reaching a large share of the Southeast — and TVA is among the first large US utilities to adopt a tariff aimed specifically at AI-driven load. Where most 2026 measures in this dataset restrict where data centers may be built, this one changes what they pay to run.
-
In effect Strength: stronger
Bartz v. Anthropic
N.D. Cal. · Effective September 5, 2025 · Bartz v. Anthropic PBC, No. 3:24-cv-05417 (N.D. Cal.)
Authors Andrea Bartz, Charles Graeber, and Kirk Wallace Johnson sued Anthropic over its use of pirated-book datasets to train Claude. In June 2025 Judge William Alsup ruled that training on lawfully purchased books was fair use. The piracy claims (LibGen ingestion) proceeded toward settlement; in September 2025 Anthropic agreed to a $1.5 billion class settlement covering ~500,000 works. Judge Alsup granted preliminary approval September 25, 2025 and final approval July 20, 2026. The appeal period runs through August 19, 2026; class members will not receive payments until at least end of 2026.
-
In effect Strength: stronger
COPPA + 2025 Rule (childrens data)
United States · Effective June 23, 2025 · 15 U.S.C. §§ 6501–6506; 16 C.F.R. Part 312
COPPA requires online services aimed at children under 13 to get verifiable parental consent before collecting kids' personal data. The 2025 rule update — fully in effect since April 22, 2026 — adds biometric identifiers (like face templates and voiceprints, which matter for AI tools), requires separate parental consent before sharing children's data for targeted advertising, and tightens data retention limits.
-
In effect Strength: stronger
TAKE IT DOWN Act
United States · Effective May 19, 2025 · Pub. L. No. 119-12 (S. 146)
Makes it a federal crime to knowingly publish intimate images of someone without consent, including AI-generated deepfakes. Social media and similar platforms must give victims a way to request removal and must take the content (and known copies) down within 48 hours. The platform removal requirement became enforceable May 19, 2026, and the FTC has already begun enforcement.
-
Blocked / in litigation
NetChoice v. Yost (Ohio)
S.D. Ohio · Effective April 16, 2025 · NetChoice, LLC v. Yost, No. 2:24-cv-00047 (S.D. Ohio Apr. 16, 2025)
Ohio's Social Media Parental Notification Act — requiring parental consent for minors' social-media use, including algorithmic feeds — was preliminarily enjoined on February 12, 2024, then permanently enjoined on April 16, 2025 when the district court granted summary judgment for NetChoice. The state appealed to the Sixth Circuit, which vacated the district court's injunction in 2026.
-
In effect Strength: stronger
Thaler v. Perlmutter (Copyright)
D.C. Cir. · Effective March 18, 2025 · Thaler v. Perlmutter, 130 F.4th 1039 (D.C. Cir. 2025)
The companion copyright case: Stephen Thaler sought to register a copyright with 'Creativity Machine' (his AI) as the author. The D.C. Circuit affirmed in March 2025 that the Copyright Act's human-authorship requirement is dispositive as a matter of statutory law. AI cannot be a copyright author under U.S. law.
-
In effect Strength: stronger
Louis v. SafeRent
D. Mass. · Effective November 20, 2024 · Louis v. SafeRent Solutions, LLC, No. 1:22-cv-10800 (D. Mass.)
SafeRent agreed in November 2024 to a $2.275M settlement and a five-year ban on using its 'SafeRent Score' for housing-voucher applicants, after a class action alleged its AI tenant-screening tool systematically denied housing to Black and Hispanic Section 8 voucher holders. The first major AI tenant-screening Fair Housing Act settlement.
-
In effect Strength: stronger
FTC Impersonation Rule (AI)
United States · Effective April 1, 2024 · 16 C.F.R. Part 461; 89 Fed. Reg. 15017
The FTC's Impersonation Rule lets the agency directly sue scammers who pretend to be a government agency or a real business — including those who use AI-cloned voices or generated images to do so. Civil penalties can reach $53,088 per violation. The FTC also issued a supplemental notice in February 2024 proposing to extend the rule to all individual impersonation.
-
In effect Strength: stronger
FTC v. Rite Aid
FTC · Effective February 26, 2024 · FTC v. Rite Aid Corp., No. 2:23-cv-05023 (E.D. Pa. Dec. 19, 2023)
The FTC banned Rite Aid from using facial-recognition technology in its stores for five years after finding the pharmacy chain's FRT system falsely tagged customers — disproportionately women and people of color — as shoplifters, leading to wrongful detentions and humiliations.
-
In effect Strength: stronger
TCPA (AI voice calls)
United States · Effective February 8, 2024 · 47 U.S.C. § 227; FCC 24-17
Robocalls using AI-cloned or AI-generated voices are treated like other 'artificial voice' calls: callers need your prior express consent, must identify themselves, and must offer opt-outs for telemarketing. You can personally sue violators for $500 to $1,500 per illegal call.
Frequently asked questions about AI laws in Cary, North Carolina
Are there AI laws in Cary, North Carolina?
What federal AI rules apply in Cary?
Does North Carolina have an AI privacy law?
Are deepfakes illegal in North Carolina?
Can my employer use AI to screen me for jobs in Cary?
How do I report an AI law violation in Cary?
Are facial recognition cameras allowed in Cary?
Is Cary regulated by North Carolina's consumer privacy act?
Have we missed an AI rule in Cary?
This page is generated from our open civic dataset. If you know of a Cary ordinance, county rule, or local enforcement action we should add, email feedback@ailawsusa.com or submit a correction. Every entry must include a verifiable source.