Home › Jurisdictions › Federal
Federal AI Laws & Protections
As of 2026-08-12, AI Laws USA tracks 194 federal AI rules — statutes, agency rules, enforcement actions, and court decisions that apply throughout the United States. Each links to its official source.
-
In effect
Bartz v. Anthropic
N.D. Cal. · Effective 2025-09-05 · Bartz v. Anthropic PBC, No. 3:24-cv-05417 (N.D. Cal.)
Authors Andrea Bartz, Charles Graeber, and Kirk Wallace Johnson sued Anthropic over its use of pirated-book datasets to train Claude. In June 2025 Judge William Alsup ruled that training on lawfully purchased books was fair use. The piracy claims (LibGen ingestion) proceeded toward settlement; in September 2025 Anthropic agreed to a $1.5 billion class settlement covering ~500,000 works. Judge Alsup granted preliminary approval September 25, 2025 and final approval July 20, 2026. The appeal period runs through August 19, 2026; class members will not receive payments until at least end of 2026.
-
In effect
Benavides v. Tesla (Autopilot)
S.D. Fla. · Effective 2025-08-01 · Benavides v. Tesla, Inc., No. 1:21-cv-21940 (S.D. Fla. Aug. 1, 2025)
A Florida federal jury found Tesla 33% liable in August 2025 for the 2019 death of Naibel Benavides Leon, in a crash involving Autopilot. The jury awarded $243M ($129M compensatory + $200M punitive); in February 2026 the court denied Tesla's post-trial motions and upheld the verdict in full — the first Autopilot wrongful-death verdict against Tesla.
-
In effect
COPPA + 2025 Rule (childrens data)
United States · Effective 2025-06-23 · 15 U.S.C. §§ 6501–6506; 16 C.F.R. Part 312
COPPA requires online services aimed at children under 13 to get verifiable parental consent before collecting kids' personal data. The 2025 rule update — fully in effect since April 22, 2026 — adds biometric identifiers (like face templates and voiceprints, which matter for AI tools), requires separate parental consent before sharing children's data for targeted advertising, and tightens data retention limits.
-
In effect
TAKE IT DOWN Act
United States · Effective 2025-05-19 · Pub. L. No. 119-12 (S. 146)
Makes it a federal crime to knowingly publish intimate images of someone without consent, including AI-generated deepfakes. Social media and similar platforms must give victims a way to request removal and must take the content (and known copies) down within 48 hours. The platform removal requirement became enforceable May 19, 2026, and the FTC has already begun enforcement.
-
Blocked / in litigation
NetChoice v. Yost (Ohio)
S.D. Ohio · Effective 2025-04-16 · NetChoice, LLC v. Yost, No. 2:24-cv-00047 (S.D. Ohio Apr. 16, 2025)
Ohio's Social Media Parental Notification Act — requiring parental consent for minors' social-media use, including algorithmic feeds — was preliminarily enjoined on February 12, 2024, then permanently enjoined on April 16, 2025 when the district court granted summary judgment for NetChoice. The state appealed to the Sixth Circuit, which vacated the district court's injunction in 2026.
-
In effect
Thaler v. Perlmutter (Copyright)
D.C. Cir. · Effective 2025-03-18 · Thaler v. Perlmutter, 130 F.4th 1039 (D.C. Cir. 2025)
The companion copyright case: Stephen Thaler sought to register a copyright with 'Creativity Machine' (his AI) as the author. The D.C. Circuit affirmed in March 2025 that the Copyright Act's human-authorship requirement is dispositive as a matter of statutory law. AI cannot be a copyright author under U.S. law.
-
In effect
Thomson Reuters v. Ross
D. Del. · Effective 2025-02-11 · Thomson Reuters Enterprise Centre GmbH v. Ross Intelligence, Inc., No. 1:20-cv-00613 (D. Del. Feb. 11, 2025)
Thomson Reuters sued legal-research startup Ross Intelligence in 2020 for copying Westlaw headnotes to train a competing AI legal-research tool. In February 2025, Judge Stephanos Bibas (sitting by designation) granted summary judgment to Thomson Reuters on direct copyright infringement and rejected Ross's fair-use defense — the first definitive U.S. ruling on AI-training fair use. No jury trial occurred: a 2023 opinion had denied summary judgment and pointed toward trial, but the court invited renewed briefing and reversed course in the 2025 ruling.
-
In effect
Louis v. SafeRent
D. Mass. · Effective 2024-11-20 · Louis v. SafeRent Solutions, LLC, No. 1:22-cv-10800 (D. Mass.)
SafeRent agreed in November 2024 to a $2.275M settlement and a five-year ban on using its 'SafeRent Score' for housing-voucher applicants, after a class action alleged its AI tenant-screening tool systematically denied housing to Black and Hispanic Section 8 voucher holders. The first major AI tenant-screening Fair Housing Act settlement.
-
In effect
FTC Impersonation Rule (AI)
United States · Effective 2024-04-01 · 16 C.F.R. Part 461; 89 Fed. Reg. 15017
The FTC's Impersonation Rule lets the agency directly sue scammers who pretend to be a government agency or a real business — including those who use AI-cloned voices or generated images to do so. Civil penalties can reach $53,088 per violation. The FTC also issued a supplemental notice in February 2024 proposing to extend the rule to all individual impersonation.
-
In effect
TCPA (AI voice calls)
United States · Effective 2024-02-08 · 47 U.S.C. § 227; FCC 24-17
Robocalls using AI-cloned or AI-generated voices are treated like other 'artificial voice' calls: callers need your prior express consent, must identify themselves, and must offer opt-outs for telemarketing. You can personally sue violators for $500 to $1,500 per illegal call.
-
In effect
FTC v. Rite Aid
FTC · Effective 2023-12-19 · FTC v. Rite Aid Corp., No. 2:23-cv-05023 (E.D. Pa. Dec. 19, 2023)
The FTC banned Rite Aid from using facial-recognition technology in its stores for five years after finding the pharmacy chain's FRT system falsely tagged customers — disproportionately women and people of color — as shoplifters, leading to wrongful detentions and humiliations.
-
In effect
EEOC v. iTutorGroup
E.D.N.Y. · Effective 2023-09-11 · EEOC v. iTutorGroup, Inc., No. 1:22-cv-02565 (E.D.N.Y. Sept. 11, 2023)
The EEOC's first AI-hiring-discrimination case ended with a $365,000 consent decree in September 2023. iTutorGroup's online application system was programmed to auto-reject female applicants 55+ and male applicants 60+ — a clear ADEA violation through algorithmic age screening.
-
In effect
Thaler v. Vidal (DABUS)
Fed. Cir. · Effective 2022-08-05 · Thaler v. Vidal, 43 F.4th 1207 (Fed. Cir. 2022), cert. denied, 143 S. Ct. 1783 (2023)
Stephen Thaler, inventor of the 'DABUS' AI system, sought to list DABUS as the inventor on two patent applications. The Federal Circuit ruled in August 2022 that under the Patent Act 'inventor' must be a natural person. The Supreme Court denied certiorari in April 2023, settling U.S. law: AI systems cannot be inventors of record.
-
In effect
Patel v. Facebook (BIPA)
N.D. Cal. · Effective 2021-02-26 · In re Facebook Biometric Info. Privacy Litig., No. 3:15-cv-03747 (N.D. Cal. Feb. 26, 2021); 932 F.3d 1264 (9th Cir. 2019)
The largest biometric-privacy settlement in U.S. history at the time — $650 million paid by Facebook to roughly 1.6 million Illinois users whose facial templates were extracted by the 'Tag Suggestions' feature without BIPA consent. Each class member received about $400.
-
In effect
FAA Part 107 (drones)
United States · Effective 2016-08-29 · 14 C.F.R. Part 107
The core federal rulebook for commercial and recreational small drones (under 55 lb). Operators need a Remote Pilot Certificate, must keep the drone within visual line of sight, fly below 400 ft, avoid most airspace without authorization, and follow operations-over-people limits. Waivers and Beyond-Visual-Line-of-Sight (BVLOS) approvals exist for advanced operators.
-
In effect
ECOA / Regulation B (AI credit discrimination)
United States · Effective 1975-10-28 · 15 U.S.C. § 1691; 12 C.F.R. Part 1002
Lenders cannot discriminate in credit decisions and must give you specific, accurate reasons when they deny or worsen your credit — even if the decision was made by an AI model. Earlier CFPB guidance said lenders can't hide behind 'black box' algorithms; that guidance was withdrawn in May 2025, but the underlying statute and regulation still require accurate adverse-action notices.
-
In effect
FCRA (AI in credit & background checks)
United States · Effective 1971-04-25 · 15 U.S.C. § 1681 et seq.
When a company uses a consumer report or score — including AI-generated risk scores from background-check and tenant/employment screening firms — to deny you credit, insurance, housing, or a job, it must tell you and identify the agency that supplied the report. You have the right to a free copy of your file and to dispute inaccurate information, no matter how algorithmic the scoring was.
-
In effect
Title VII / ADA (AI hiring)
United States · Effective 1965-07-02 · 42 U.S.C. § 2000e et seq.; 42 U.S.C. § 12101 et seq.
Federal anti-discrimination law applies when employers use AI tools to screen resumes, score interviews, or rank candidates: if an AI tool disproportionately screens out people by race, sex, disability, or other protected traits, the employer can be liable. The EEOC's specific AI guidance documents from 2023 were removed in January 2025, but the underlying laws are unchanged and still enforceable.
-
In effect
FTC Act Section 5 (unfair/deceptive AI)
United States · Effective 1914-09-26 · 15 U.S.C. § 45
The FTC's basic consumer-protection law bans unfair or deceptive business practices, and the agency applies it directly to AI. Companies cannot lie about what their AI can do, use AI to deceive people, or sell AI tools designed for fraud. The FTC's 'Operation AI Comply' sweep has brought numerous cases since 2024.
-
Enacted (not yet in effect)
DOJ ADA Title II Web Rule
United States · Effective 2027-04-24 · 89 Fed. Reg. 31320 (Apr. 24, 2024)
DOJ final rule requiring state and local government web content and mobile apps (including AI-driven services) to meet WCAG 2.1 AA. Compliance dates extended to 2027/2028.
-
In effect
Meta AI Layoff Discrimination Lawsuit (2026)
United States · Effective 2026-07-15 · 26 Meta employees v. Meta Platforms, Inc., N.D. Cal. (Oakland), filed July 15, 2026; FMLA, ADA, PDA, PWFA claims
Twenty-six current and former Meta employees filed a lawsuit on July 15, 2026 in the Northern District of California (Oakland) alleging that Meta's internal AI system called 'Metamate' was used to select workers for layoffs in a way that disproportionately targeted employees on medical leave, pregnancy leave, and parental leave. The plaintiffs allege violations of the Family and Medical Leave Act (FMLA), the Americans with Disabilities Act (ADA), the Pregnancy Discrimination Act, and the Pregnant Workers Fairness Act. The court denied an emergency injunction request on July 17, 2026. The case represents a significant test of employer liability when an AI system makes or influences employment termination decisions affecting workers with protected characteristics.
-
Blocked / in litigation
Hachette v. Google (Gemini AI copyright)
United States · Effective 2026-07-10 · Hachette Book Group Inc. et al. v. Google LLC, No. 1:26-cv-05870 (S.D.N.Y., filed July 10, 2026)
Hachette Book Group, Cengage Learning, Elsevier, and author Scott Turow filed a copyright class action against Google in the Southern District of New York on July 10, 2026 (No. 1:26-cv-05870), alleging Google used millions of copyrighted books and academic journal articles without authorization to train its Gemini AI models. The complaint alleges Google misused works supplied for Google Books 'snippet' access to copy full texts for AI training, also sourcing material from pirate websites. An internal Google document cited in the complaint estimates potential copyright exposure of $10 billion to $100 billion. The case is distinct from (and does not overlap with) the existing NYT v. OpenAI and Authors Guild v. OpenAI suits.
-
In effect
FERC Large-Load Interconnection Orders (RM26-4)
United States · Effective 2026-06-18 · FPA § 206 show-cause orders, FERC Docket Nos. EL26-67 through EL26-72 (June 18, 2026), advancing ANOPR Docket No. RM26-4-000
On June 18, 2026, FERC issued tailored show-cause orders under Section 206 of the Federal Power Act to the six major U.S. regional grid operators (PJM, MISO, SPP, CAISO, ISO-NE, and NYISO), directing each to either justify its existing large-load interconnection tariff as just and reasonable or file tariff revisions within 60 days. The orders target the surge in demand from AI data centers and large industrial loads, requiring reforms to study processes, cost transparency to prevent cost-shifting onto ordinary ratepayers, co-location and behind-the-meter accommodation, and new services for flexible large loads. FERC left retail cost-shifting protection to state regulators; reforms apply prospectively and do not disrupt existing deals.
-
In effect
DOJ-RealPage Consent Decree (algorithmic rent)
United States · Effective 2026-05-01 · United States v. RealPage, Inc. et al., No. 1:24-cv-00710 (M.D.N.C.); 15 U.S.C. §§ 1–2
In November 2025, the DOJ settled with RealPage — the dominant algorithmic rent-pricing software company — requiring it to stop using competitors' real-time pricing data to coordinate rents. The settlement received preliminary court approval in May 2026 and places RealPage under a court-appointed compliance monitor for seven years. Thousands of property managers used RealPage's software; the DOJ alleged it enabled competing landlords to align rental prices, harming renters across the country.
-
In effect
Doe v. X.AI (Grok NCII deepfakes class action)
United States · Effective 2026-01-23 · Doe v. X.AI Corp., No. 5:26-cv-00772 (N.D. Cal., filed Jan. 23, 2026); amended complaint July 7, 2026
A class action filed January 23, 2026 in the Northern District of California (Case No. 5:26-cv-00772) alleges that X.AI's Grok AI model generated over three million sexualized deepfake images in an 11-day period, including images of minors. An amended complaint filed July 7, 2026 added Stability AI as a co-defendant and two new plaintiffs, including one who alleges approximately 7,000 child sexual abuse material (CSAM) images were generated of them. Claims include product liability, negligence, public nuisance, and privacy violations. A companion case (Doe 1 v. X.AI Corp., No. 5:26-cv-02246) was filed March 16, 2026. Note: X.AI Corp. has rebranded to SpaceXAI following its merger with SpaceX.
-
In effect
Kistler v. Eightfold AI (FCRA, AI hiring)
United States · Effective 2026-01-20 · Kistler et al. v. Eightfold AI Inc., Case 3:26-cv-1768 (N.D. Cal.); 15 U.S.C. § 1681 et seq. (FCRA)
Erin Kistler and Sruti Bhaumik filed a class action in California Superior Court in January 2026 (later removed to federal court as Case 3:26-cv-1768 in the Northern District of California) against Eightfold AI, a leading AI hiring platform. The plaintiffs allege that Eightfold scraped over one billion worker profiles and used an AI model to rank job applicants on a scale of 0 to 5 without providing the disclosures and adverse action notices required by the Fair Credit Reporting Act (FCRA). The case targets AI hiring tools that function as employment screening reports, arguing that the FCRA's consumer-report protections extend to AI-driven applicant scoring systems. A motion to dismiss is set for hearing on August 4, 2026 before Judge Yvonne Gonzalez Rogers.
-
Blocked / in litigation
Disney v. Midjourney
C.D. Cal. · Effective 2025-06-11 · Disney Enterprises, Inc. v. Midjourney, Inc., No. 2:25-cv-05275 (C.D. Cal.)
Disney and Universal — the first major Hollywood studios to sue a generative-AI company — filed a copyright action against Midjourney in June 2025 alleging Midjourney is a 'bottomless pit of plagiarism' that reproduces Star Wars, Marvel, Minions and other studio characters on demand.
-
In effect
OMB M-25-21
United States · Effective 2025-04-03 · OMB Memo M-25-21 (Apr. 3, 2025)
OMB Memorandum M-25-21 (Apr. 3, 2025) is the Trump-era replacement for M-24-10. It sets the binding rule for how federal agencies use AI — requiring CAIO designations, AI use inventories, and risk-management practices for rights/safety-impacting AI, with a pro-innovation framing.
-
In effect
OMB M-25-22
United States · Effective 2025-04-03 · OMB Memo M-25-22 (Apr. 3, 2025)
OMB Memorandum M-25-22 (Apr. 3, 2025) governs federal AI procurement — superseding M-24-18 — and sets pro-competition, pro-innovation rules for how agencies buy AI systems.
-
Blocked / in litigation
NetChoice v. Bonta (SB 976)
N.D. Cal. · Effective 2024-12-31 · NetChoice, LLC v. Bonta, No. 5:24-cv-07885 (N.D. Cal.)
NetChoice (the tech-industry trade group) challenged California's SB 976 — which would have restricted addictive algorithmic feeds for minors — and won a preliminary injunction blocking key portions on First Amendment grounds in December 2024. The 9th Circuit is reviewing.
-
In effect
FTC v. IntelliVision
FTC · Effective 2024-12-19 · In re IntelliVision Techs. Corp., FTC No. C-4813 (Dec. 19, 2024)
The FTC settled with IntelliVision in December 2024, alleging the company falsely claimed its facial-recognition product had 'zero gender or racial bias' without testing-data to support that — and that its accuracy claims were unsubstantiated. Builds on the FTC's Rite Aid theory.
-
In effect
FDA PCCP Guidance (AI/ML devices)
United States · Effective 2024-12-04 · FDA Guidance (Dec. 4, 2024); 21 U.S.C. § 360e-4
FDA finalized a framework that lets manufacturers update an AI-enabled medical device after clearance without filing a new submission for each change — but only if they pre-specify what changes are allowed, how they'll be validated, and how transparency to clinicians and patients will be preserved.
-
In effect
FTC v. Evolv
FTC · Effective 2024-11-26 · Federal Trade Commission v. Evolv Technologies Holdings, Inc., No. 1:24-cv-12940 (D. Mass. Nov. 26, 2024)
The FTC settled with Evolv Technology in November 2024 over claims it falsely marketed its AI-powered scanners as accurately detecting weapons in schools and venues, when in fact the systems missed weapons (including the knife in the Utica, NY school stabbing) and flagged everyday objects. Customers can cancel contracts.
-
In effect
FinCEN deepfake-fraud BSA alert
United States · Effective 2024-11-13 · FinCEN Alert FIN-2024-Alert004 (Nov. 13, 2024)
FinCEN issued an alert telling banks and other financial institutions how to spot — and report — fraud schemes that use generative-AI deepfakes to defeat identity verification. Suspicious activity reports must use the SAR keyword 'FIN-2024-DEEPFAKEFRAUD' so FinCEN can track the trend in synthetic identity and account-takeover fraud.
-
In effect
CFPB AI chatbot circular
United States · Effective 2024-10-23 · CFPB Issue Spotlight (June 2023); CFPB UDAAP / ECOA / TILA enforcement posture (2024)
Building on its 2023 chatbot report, the CFPB has warned that banks and lenders using generative-AI chatbots that mislead consumers — about fees, account terms, or credit denials — face liability under the Consumer Financial Protection Act, the Equal Credit Opportunity Act, and the Truth in Lending Act. Hallucinating chatbots are not a regulatory loophole.
-
Blocked / in litigation
Character.AI Companion Chatbot Suits
M.D. Fla. + E.D. Tex. · Effective 2024-10-22 · Garcia v. Character Techs., Inc., No. 6:24-cv-01903 (M.D. Fla.); A.F. v. Character Techs., Inc., No. 2:24-cv-01014 (E.D. Tex.)
Five plaintiffs across two jurisdictions sued Character.AI in 2024 alleging the companion chatbot service caused minors' suicide, self-harm, sexual abuse, and severe mental injury. Garcia v. Character.AI in Florida was the first AI companion wrongful-death suit; in Texas a federal court issued a landmark May 2025 ruling that AI chatbot outputs are not protected First Amendment speech.
-
In effect
FTC Operation AI Comply
United States · Effective 2024-09-25 · FTC Operation AI Comply (Sept. 25, 2024)
FTC enforcement sweep announcing five settlements against firms using AI to enable deceptive or unfair conduct. Establishes a baseline of cases for ongoing AI deception enforcement.
-
In effect
FTC v. DoNotPay
FTC · Effective 2024-09-25 · In re DoNotPay, Inc., FTC No. C-4796 (Sept. 25, 2024)
The FTC settled with 'AI lawyer' DoNotPay in September 2024 over claims the company falsely marketed an AI chatbot as a substitute for a human lawyer, without ever testing whether its outputs matched a competent attorney's work. Part of the FTC's 'Operation AI Comply' sweep.
-
In effect
FTC v. Rytr
FTC · Effective 2024-09-25 · In re Rytr LLC, FTC No. C-4795 (Sept. 25, 2024)
Part of Operation AI Comply: the FTC ordered AI writing service Rytr to stop offering a 'testimonial and review' generator that produced fake consumer reviews on demand. The first FTC action against an AI product specifically designed to generate deceptive content.
-
In effect
FTC Operation AI Comply (Sept. 2024)
FTC · Effective 2024-09-25 · FTC Press Release, Operation AI Comply (Sept. 25, 2024)
On September 25, 2024 the FTC announced 'Operation AI Comply' — a coordinated sweep against five companies (DoNotPay, Rytr, Ascend Ecom, Ecommerce Empire Builders, FBA Machine) accused of using AI claims to defraud consumers. Marked the FTC's first systemic AI enforcement sweep.
-
In effect
DOJ AI-fraud sentencing guidance
United States · Effective 2024-09-23 · DOJ Criminal Division ECCP (Sept. 23, 2024); Deputy AG Lisa Monaco, ABA White Collar Conf. (Mar. 5, 2024)
The Justice Department updated its corporate compliance guidance in September 2024 to require companies to assess and mitigate AI-related risks, and Deputy AG Lisa Monaco announced in March 2024 that DOJ will seek stiffer sentences when AI is used to commit fraud — treating AI as an aggravating factor.
-
Blocked / in litigation
CCIA v. Paxton (TX SCOPE)
W.D. Tex. · Effective 2024-08-30 · CCIA v. Paxton, No. 1:24-cv-00849 (W.D. Tex.)
The Computer & Communications Industry Association and NetChoice partially enjoined Texas's SCOPE Act (HB 18), which restricts targeted advertising and algorithmic content curation for minors, before its September 2024 effective date.
-
In effect
FCC Lingo Telecom Biden deepfake fine
United States · Effective 2024-08-21 · FCC Consent Decree, DA 24-823 (Aug. 21, 2024)
The FCC fined voice provider Lingo Telecom $1 million for carrying AI-generated robocalls that used a cloned voice of President Biden to suppress votes in the January 2024 New Hampshire primary. It was the first FCC enforcement action against a carrier for transmitting AI deepfake robocalls.
-
In effect
FTC HBNR Rule (AI health apps)
United States · Effective 2024-07-29 · 16 C.F.R. Part 318; 89 Fed. Reg. 47028
Health apps and connected devices — including AI-powered mental health and fitness tools — must notify users, the FTC, and (in some cases) the media within 60 days of a breach of identifiable health information. The 2024 amendments confirm that AI-generated inferences about health are covered.
-
In effect
FTC v. NGL Labs
FTC · Effective 2024-07-09 · United States v. NGL Labs, LLC, No. 2:24-cv-05753 (C.D. Cal. July 9, 2024)
The FTC and the Los Angeles DA settled with anonymous-messaging app NGL Labs for $5M in July 2024, alleging the company used fake AI-generated 'anonymous' messages to manipulate teen users into paying for premium features that wouldn't actually reveal sender identities. NGL is banned from marketing to under-18 users.
-
In effect
HHS § 1557 Rule (AI clinical tools)
United States · Effective 2024-07-05 · 45 C.F.R. § 92.210; 89 Fed. Reg. 37522
HHS's Section 1557 rule bans discrimination in 'patient care decision-support tools,' which includes AI and algorithmic clinical tools. Covered health programs and providers must identify when a tool relies on patient race, age, disability, or other protected traits and take steps to mitigate the risk of discrimination.
-
Blocked / in litigation
CIR v. OpenAI
S.D.N.Y. · Effective 2024-06-27 · Ctr. for Investigative Reporting, Inc. v. OpenAI, Inc., No. 1:24-cv-04872 (S.D.N.Y.)
The nonprofit Center for Investigative Reporting (publisher of Mother Jones and Reveal) sued OpenAI and Microsoft in June 2024 over alleged use of its journalism for training. Joins the consolidated New York publisher actions.
-
Blocked / in litigation
UMG v. Suno
D. Mass. · Effective 2024-06-24 · UMG Recordings, Inc. v. Suno, Inc., No. 1:24-cv-11611 (D. Mass.)
The three major record labels — UMG, Sony Music, Warner — sued AI music generator Suno in Boston in June 2024, alleging Suno trained on copyrighted recordings and produces output that closely mimics specific tracks. A parallel suit was filed in S.D.N.Y. against competitor Udio.
-
Blocked / in litigation
UMG v. Udio
S.D.N.Y. · Effective 2024-06-24 · UMG Recordings, Inc. v. Uncharted Labs, Inc., No. 1:24-cv-04777 (S.D.N.Y.)
Companion to the Suno suit. UMG, Sony, and Warner sued Uncharted Labs (Udio) the same day, alleging Udio's training corpus included copyrighted master recordings and that outputs reproduce signature elements of identifiable tracks.
-
In effect
In re Clearview AI Class Settlement
N.D. Ill. · Effective 2024-06-21 · In re Clearview AI, Inc. Consumer Privacy Litig., MDL 2967, No. 1:21-cv-00135 (N.D. Ill.)
A nationwide BIPA class action against Clearview AI settled in 2024 on an unusual basis: rather than cash, class members receive a 23 percent equity interest in Clearview, valued by plaintiffs at up to $51 million depending on company valuation. The arrangement reflected Clearview's inability to pay cash damages of the magnitude BIPA would require.
-
Blocked / in litigation
Lehrman v. Lovo
S.D.N.Y. · Effective 2024-05-16 · Lehrman v. Lovo, Inc., No. 1:24-cv-03770 (S.D.N.Y.)
Voice actors Paul Lehrman and Linnea Sage sued AI voice-cloning startup Lovo, alleging Lovo cloned their voices through deceptive Fiverr commissions and resold the clones without consent. The case is the highest-profile U.S. voice-cloning right-of-publicity action and was certified in part in 2025.
-
In effect
FAA Reauthorization Act 2024 (drones)
United States · Effective 2024-05-16 · Pub. L. No. 118-63
The five-year FAA reauthorization sets the agenda for U.S. drone integration through 2028: it directs the FAA to finalize a Beyond-Visual-Line-of-Sight rule, expands counter-drone authority for federal and (in pilot programs) state and local agencies, advances Advanced Air Mobility (passenger drones / eVTOLs), and tightens rules on drones produced by countries of concern.
-
In effect
HUD FHEO Tenant Screening AI
United States · Effective 2024-05-02 · HUD FHEO, Guidance on Application of the Fair Housing Act to the Screening of Applicants for Rental Housing (May 2, 2024)
HUD guidance applying the Fair Housing Act to algorithmic tenant screening — landlords and screening vendors share liability for discriminatory outcomes.
-
In effect
HUD FHEO Digital Advertising AI
United States · Effective 2024-05-02 · HUD FHEO, Guidance on Application of the Fair Housing Act to the Advertising of Housing, Credit, and Other Real Estate-Related Transactions through Digital Platforms (May 2, 2024)
HUD guidance making clear that algorithmic ad-targeting causing discriminatory exposure violates the Fair Housing Act.
-
Blocked / in litigation
Daily News v. OpenAI
S.D.N.Y. · Effective 2024-04-30 · Daily News LP v. Microsoft Corp., No. 1:24-cv-03285 (S.D.N.Y.)
Eight Alden Global Capital newspapers (New York Daily News, Chicago Tribune, Orlando Sentinel, Sun Sentinel, San Jose Mercury News, Denver Post, Orange County Register, St. Paul Pioneer Press) sued OpenAI and Microsoft in April 2024 alleging mass copying of their journalism for GPT training and ChatGPT outputs.
-
In effect
OFCCP AI Selection Guidance
United States · Effective 2024-04-29 · OFCCP AI EEO Guidance (Apr. 29, 2024)
Federal contractors using AI in hiring must comply with OFCCP nondiscrimination requirements: vendor due diligence, recordkeeping, validation under the Uniform Guidelines on Employee Selection Procedures, and accommodations for applicants with disabilities. OFCCP makes clear contractors cannot outsource liability to AI vendors.
-
In effect
DOL WHD FAB 2024-1
United States · Effective 2024-04-29 · DOL WHD FAB 2024-1 (Apr. 29, 2024)
DOL Wage and Hour Division guidance on FLSA, FMLA, PUMP Act, and EPPA compliance when employers use AI for scheduling, timekeeping, monitoring, or performance evaluation.
-
In effect
SEC AI-washing settlement
United States · Effective 2024-03-18 · In re Delphia (USA) Inc., Securities Act Rel. No. 11264 (Mar. 18, 2024); In re Global Predictions Inc., Securities Act Rel. No. 11265 (Mar. 18, 2024)
The SEC charged two investment advisers — Delphia (USA) and Global Predictions — with making false and misleading statements about using AI and machine learning. The firms paid $400,000 combined in civil penalties. It was the SEC's first 'AI-washing' enforcement action and signals scrutiny of overstated AI capability claims in financial services.
-
In effect
DOJ/HUD Statement of Interest (algorithmic rent)
DOJ / HUD · Effective 2024-03-01 · Statement of Interest of the United States, McKenna Duffy v. Yardi Systems, Inc., et al., W.D. Wash. (Mar. 2024)
The Justice Department's Antitrust Division and the FTC (not HUD) filed a joint Statement of Interest in Duffy v. Yardi Systems (W.D. Wash.), arguing that competing landlords' joint use of Yardi's common pricing algorithm can constitute per-se illegal price fixing under the Sherman Act, even when landlords retain some discretion to deviate from the algorithm's recommendations.
-
In effect
CMS MA Rule (AI prior auth)
United States · Effective 2024-01-01 · 42 C.F.R. § 422.101(c); 88 Fed. Reg. 22120 (Apr. 12, 2023)
Medicare Advantage plans cannot use algorithms or AI to deny medically necessary care. Any algorithm-driven coverage decision must comply with traditional Medicare coverage criteria and consider the individual patient's circumstances — not just generic model output.
-
Blocked / in litigation
DOJ / Multistate v. Yardi
W.D. Wash. · Effective 2023-12-29 · Duffy v. Yardi Systems, Inc., No. 2:23-cv-01391 (W.D. Wash.)
Renters brought a parallel class action against Yardi Systems — RealPage's main competitor in algorithmic rent-pricing — alleging it likewise coordinated multifamily rents across competing landlords. State AGs joined as enforcement actors; the case is moving in parallel with the DOJ-RealPage proceeding.
-
Blocked / in litigation
NYT v. OpenAI / Microsoft
S.D.N.Y. · Effective 2023-12-27 · The New York Times Co. v. Microsoft Corp., No. 1:23-cv-11195 (S.D.N.Y.)
The New York Times sued OpenAI and Microsoft in December 2023, alleging the companies copied millions of Times articles to train GPT models and that ChatGPT regurgitates Times content verbatim. The case is the most consequential of the news-publisher AI training-data suits and is in discovery; in March 2025 Judge Sidney Stein largely denied OpenAI's motion to dismiss, allowing the direct, contributory, and DMCA claims to proceed. On July 9, 2026, the NYT and Daily News filed a motion to sanction OpenAI, alleging OpenAI concealed evidence. On August 6, 2026, Judge Stein denied the NYT's motion to amend its complaint to add Microsoft-specific contributory infringement claims, ruling the motion was untimely given the US Supreme Court's March 2026 ruling raising the bar for platform liability.
-
Blocked / in litigation
Lokken v. UnitedHealth (nH Predict)
D. Minn. · Effective 2023-11-14 · Estate of Lokken v. UnitedHealth Group, Inc., No. 0:23-cv-03514 (D. Minn.)
Families of deceased Medicare Advantage patients sued UnitedHealth in November 2023 over the 'nH Predict' algorithm, alleging the AI tool overrode physicians and prematurely terminated post-acute care coverage with an error rate above 90 percent in appeals — accelerating patient harms and deaths. On March 9, 2026, the court issued a significant discovery order compelling UnitedHealth to produce broad documentation of the nH Predict algorithm, including training data, model documentation, and internal performance audits.
-
Blocked / in litigation
Concord Music v. Anthropic
M.D. Tenn. · Effective 2023-10-18 · Concord Music Group, Inc. v. Anthropic PBC, No. 3:23-cv-01092 (M.D. Tenn.); 5:24-cv-03811 (N.D. Cal.)
Concord, Universal Music Publishing, ABKCO, and other major music publishers sued Anthropic in Tennessee in October 2023, alleging Claude was trained on copyrighted song lyrics and reproduces them on demand. In March 2024 the court declined to grant a preliminary injunction; in 2025 the case was transferred to the Northern District of California where parallel actions are consolidated.
-
In effect
VA Trustworthy AI Framework
United States · Effective 2023-09-22 · VA Directive 1003.2; VA AI Strategy (Sept. 2023)
The VA's Trustworthy AI Framework governs how AI may be used across VA healthcare, benefits, and operations. AI used in benefits or clinical decisions requires human review, bias testing, and an AI use-case inventory submitted to OMB.
-
In effect
CFPB Circ. 2023-03 (AI credit)
United States · Effective 2023-09-19 · CFPB Circular 2023-03 (Sept. 19, 2023)
CFPB Circular 2023-03 clarifies that lenders using AI or other complex credit models for credit denial cannot rely on checklist adverse-action notices. They must provide specific, accurate reasons under ECOA — even if the AI's decision is hard to explain.
-
Blocked / in litigation
Authors Guild v. OpenAI
S.D.N.Y. · Effective 2023-09-19 · Authors Guild v. OpenAI Inc., No. 1:23-cv-08292 (S.D.N.Y.)
The Authors Guild plus 17 prominent fiction authors (George R.R. Martin, John Grisham, Jodi Picoult, Jonathan Franzen, Michael Connelly, and others) sued OpenAI alleging it copied their books wholesale to train GPT. Filed September 2023, the case was consolidated with related author suits under Judge Sidney Stein.
-
In effect
Drone Remote ID Rule
United States · Effective 2023-09-16 · 14 C.F.R. Part 89; 86 Fed. Reg. 4390 (Jan. 15, 2021)
Most drones flying in U.S. airspace must broadcast a digital 'license plate' — Remote ID — that includes the drone's ID, location, altitude, and the control station's location, so law enforcement and the public can identify drones in the sky.
-
In effect
CFPB § 1071 Rule (small-biz AI lending)
United States · Effective 2023-08-29 · 12 C.F.R. Part 1002 Subpart B; 88 Fed. Reg. 35150
Lenders covered by the rule must collect and report demographic and transactional data on small-business credit applications — including data needed to detect algorithmic discrimination by AI underwriting models.
-
In effect
FTC v. Amazon (Ring)
FTC · Effective 2023-07-31 · Federal Trade Commission v. Ring LLC, No. 1:23-cv-01549 (D.D.C. 2023)
The FTC settled with Amazon's Ring subsidiary for $5.8M in 2023 over privacy and security failures — including allowing employees and contractors to view customer videos without consent and failing to prevent stalkers from compromising accounts. The settlement restricts Ring's use of customer videos for product / AI development.
-
In effect
FTC v. Amazon (Alexa)
FTC · Effective 2023-07-25 · United States v. Amazon.com, Inc., No. 2:23-cv-00811 (W.D. Wash. July 25, 2023)
Companion FTC action settled with Amazon's Alexa division for $25M in 2023, alleging Amazon retained children's voice recordings indefinitely despite COPPA, deleted records when parents requested but kept transcripts and the underlying voice models, and used the data to train Alexa's voice-recognition AI.
-
Blocked / in litigation
Cigna PXDX AI Denial Class Action
E.D. Cal. · Effective 2023-07-24 · Kisting-Leung v. Cigna Corp., No. 2:23-cv-01477 (E.D. Cal.)
Patients sued Cigna in 2023 alleging its 'PxDx' algorithm reviewed and denied roughly 300,000 claims in two months — averaging 1.2 seconds per denial — without genuine physician review, violating California and federal law. Triggered a wave of similar AI healthcare-denial suits against UnitedHealth (NaviHealth) and Humana.
-
Blocked / in litigation
Silverman v. OpenAI
N.D. Cal. · Effective 2023-07-07 · Silverman v. OpenAI, Inc., No. 3:23-cv-03416 (N.D. Cal.)
Comedian and author Sarah Silverman, along with Christopher Golden and Richard Kadrey, sued OpenAI in July 2023 alleging ChatGPT was trained on their books via shadow-library datasets like Books3. The case proceeds in N.D. Cal. consolidated with related author actions.
-
Blocked / in litigation
Kadrey v. Meta
N.D. Cal. · Effective 2023-07-07 · Kadrey v. Meta Platforms, Inc., No. 3:23-cv-03417 (N.D. Cal.)
Authors Richard Kadrey, Sarah Silverman, Christopher Golden — later joined by Junot Díaz, Ta-Nehisi Coates, Andrew Sean Greer and others — sued Meta in July 2023 over the use of pirated books (LibGen / Books3) to train Llama. In June 2025 Judge Chhabria granted Meta partial summary judgment on fair use for these specific plaintiffs, but the ruling was narrow and the case continues on remaining theories.
-
Blocked / in litigation
Tremblay v. OpenAI
N.D. Cal. · Effective 2023-06-28 · Tremblay v. OpenAI, Inc., No. 3:23-cv-03223 (N.D. Cal.)
Authors Paul Tremblay and Mona Awad filed one of the first author copyright suits against OpenAI in the Northern District of California in June 2023, alleging ChatGPT was trained on their copyrighted books without permission. Now consolidated with Silverman, Chabon, and other West Coast author actions before Judge Araceli Martínez-Olguín.
-
In effect
Mata v. Avianca (ChatGPT fake cites)
S.D.N.Y. · Effective 2023-06-22 · Mata v. Avianca, Inc., 678 F. Supp. 3d 443 (S.D.N.Y. 2023)
Two New York attorneys submitted a brief containing six fictitious case citations generated by ChatGPT. In June 2023 Judge P. Kevin Castel sanctioned them $5,000 each — the first formal federal sanction for AI-hallucinated legal citations, and the most-cited case in subsequent bar opinions on attorney AI use.
-
In effect
EEOC AI Title VII Guidance
United States · Effective 2023-05-18 · EEOC TA (May 18, 2023)
EEOC guidance applying Title VII disparate-impact analysis to AI hiring tools. Employers are liable for discriminatory outcomes even when the tool is built by a vendor.
-
Blocked / in litigation
Getty Images v. Stability AI (US)
D. Del. · Effective 2023-02-03 · Getty Images (US), Inc. v. Stability AI, Inc., No. 1:23-cv-00135 (D. Del.)
Getty Images sued Stability AI in Delaware in February 2023, alleging Stable Diffusion was trained on millions of Getty's copyrighted photos and that the model reproduces Getty's distinctive watermark. A separate parallel proceeding is underway in the UK High Court.
-
In effect
DoD Directive 3000.09 (LAWS)
United States · Effective 2023-01-25 · DoDD 3000.09 (2023)
The Defense Department's policy on autonomous and semi-autonomous weapons. Updated in January 2023, it requires every autonomous or semi-autonomous weapon system to allow 'appropriate levels of human judgment over the use of force,' undergo a multi-phase senior review before development and fielding, and comply with DoD AI ethical principles.
-
Blocked / in litigation
Andersen v. Stability AI
N.D. Cal. · Effective 2023-01-13 · Andersen v. Stability AI Ltd., No. 3:23-cv-00201 (N.D. Cal.)
Visual artists Sarah Andersen, Kelly McKernan, and Karla Ortiz brought the first major image-generator class action, alleging Stability AI, Midjourney, DeviantArt, and Runway trained text-to-image models on artists' copyrighted works scraped from the web. After two rounds of motions to dismiss, key claims survived and the case is in discovery.
-
Blocked / in litigation
Huskey v. State Farm
N.D. Ill. · Effective 2022-12-14 · Huskey v. State Farm Fire & Cas. Co., No. 1:22-cv-07014 (N.D. Ill.)
Black homeowners sued State Farm in 2022, alleging the insurer's claims-handling AI subjected them to greater scrutiny — more documentation requests, more delays, and higher denial rates — than white homeowners. One of the leading insurance-AI disparate-treatment cases.
-
In effect
In re Google Photos BIPA
Ill. Cir. Ct. Cook Cty. · Effective 2022-09-28 · Rivera v. Google LLC, No. 2019-CH-00990 (Ill. Cir. Ct. Cook Cty.)
Illinois Google Photos users won a $100 million settlement in 2022 over allegations Google extracted face templates from uploaded photos without BIPA consent. Each claimant was estimated to receive between $200 and $400.
-
In effect
In re TikTok ($92M)
N.D. Ill. · Effective 2022-07-28 · In re TikTok, Inc. Consumer Privacy Litig., MDL No. 2948 (N.D. Ill. 2022)
TikTok agreed to a $92 million multi-district settlement in 2021 (final approval July 2022) over claims it collected facial geometry, voiceprints, and biometric identifiers from minor and adult users without BIPA consent — among the first major social-media settlements covering algorithmic face/voice analysis on short-form video.
-
In effect
FDA GMLP Principles
United States · Effective 2021-10-27 · FDA/HC/MHRA GMLP Guiding Principles (Oct. 27, 2021)
Joint guiding principles by FDA, Health Canada, and the UK MHRA on safe development of ML-enabled medical devices. Updated by FDA's 2024 Transparency Guiding Principles.
-
In effect
NHTSA SGO 2021-01 (AV/ADAS reporting)
United States · Effective 2021-06-29 · NHTSA SGO 2021-01
Manufacturers and operators of vehicles equipped with SAE Level 2 driver-assistance (Tesla Autopilot, GM Super Cruise) or Level 3-5 automated driving systems must report crashes to NHTSA on a strict timeline — within one day for serious crashes. The data drives recall actions including Tesla's Dec. 2023 over-the-air Autopilot recall.
-
In effect
NHTSA AV federal framework
United States · Effective 2021-06-29 · NHTSA Standing General Order 2021-01; 49 U.S.C. § 30166
NHTSA's Standing General Order requires automakers and operators of Level 2 driver-assistance and Level 3–5 automated driving systems to report crashes involving those systems. Federal Motor Vehicle Safety Standards regulate vehicle design; NHTSA's voluntary safety guidance (AV 4.0) and the Automated Vehicle Comprehensive Plan provide non-binding policy direction.
-
In effect
FDA AI/ML SaMD Action Plan
United States · Effective 2021-01-12 · FDA AI/ML SaMD Action Plan (Jan. 12, 2021)
FDA's 5-part roadmap for regulating AI/ML-based Software as a Medical Device, including a proposed Predetermined Change Control Plan framework that lets developers update models without full FDA re-review.
-
In effect
Robles v. Domino's
9th Cir. · Effective 2019-10-07 · Robles v. Domino's Pizza, LLC, 913 F.3d 898 (9th Cir. 2019), cert. denied, 140 S. Ct. 122
While predating modern generative AI, the Ninth Circuit's 2019 Robles v. Domino's ruling — followed by Supreme Court cert. denial — established that ADA Title III applies to web and mobile apps that interact with brick-and-mortar services. The decision is now the doctrinal anchor for AI chatbot and voice-assistant accessibility claims.
-
In effect
FDA 510(k) — surgical robots
United States · Effective 1976-05-28 · 21 U.S.C. § 360(k); 21 C.F.R. Part 807
Robotically-assisted surgical devices (RASD) — like Intuitive's da Vinci or Stryker's Mako — are FDA-regulated medical devices. Most clear the market through the 510(k) pathway by showing substantial equivalence to a predicate device. The FDA issued a 2019 safety communication and continues to police off-label robotic mastectomy and AI-software updates under its evolving 'Predetermined Change Control Plan' authority.
-
In effect
OSHA industrial robots
United States · Effective 1971-04-28 · 29 U.S.C. § 654(a)(1); 29 C.F.R. § 1910.212
OSHA does not have a robot-specific standard, but uses its general machine-guarding rule and the General Duty Clause to require employers to protect workers from industrial robots. Its Technical Manual Chapter 4 incorporates the ANSI/RIA R15.06 robot safety standard as the de facto benchmark for guarding, presence-sensing, and lockout/tagout around robotic cells and collaborative robots ('cobots').
-
Blocked / in litigation
xAI v. Harwood (Grok NCII Counter-Suit 2026)
United States · Effective 2026-07-14 · xAI Corp. v. Terry Harwood, N.D. Tex. (Dallas Div.), filed July 14, 2026
xAI Corp. (the company behind the Grok AI chatbot, formerly operating as 'X.AI') filed a civil lawsuit on July 14, 2026 in the Northern District of Texas against Terry Harwood, a South Carolina man. The lawsuit alleges Harwood opened two Grok accounts between December 8, 2025 and February 18, 2026, uploading non-sexual photos of adults and minors and manipulating Grok into generating sexually explicit deepfake images — bypassing the system's safety guardrails. xAI seeks unspecified monetary damages and a permanent ban on Harwood from all xAI products. Harwood was separately arrested on February 26, 2026 on criminal charges of sexual exploitation of a minor. The case is notable as one of the first civil lawsuits filed by an AI company against a user for misusing the AI system to generate harmful content, rather than the more common pattern of a victim suing the AI company. xAI disclosed it suspended 52,222 accounts and filed 73,604 NCMEC reports related to Grok deepfake abuse in 2026, leading to at least 244 arrests.
-
In effect
Trump AI Innovation & Security EO (June 2026)
United States · Effective 2026-06-02 · E.O. (June 2, 2026) — Promoting Advanced Artificial Intelligence Innovation and Security
President Trump signed an executive order on June 2, 2026, directing frontier AI developers to voluntarily share new models with the federal government 30 days before public release for national-security review. The order also directs CISA to build an AI cybersecurity framework and tasks DOJ with prioritizing criminal enforcement of AI-enabled fraud. No binding requirements apply to private AI developers — the framework is voluntary.
-
Blocked / in litigation
Florida AG v. OpenAI (AI safety, minors)
United States · Effective 2026-06-01 · State of Florida ex rel. Uthmeier v. OpenAI LLC et al. (Highlands County 10th Jud. Cir., June 1, 2026; removed to S.D. Fla. July 2, 2026)
Florida Attorney General James Uthmeier filed the first-in-nation state-led lawsuit against OpenAI on June 1, 2026, in Highlands County Circuit Court, alleging ChatGPT was deceptively marketed to minors despite known safety risks. The 10-count complaint cites specific harms including the death of 16-year-old Adam Raine, who died by suicide following extensive ChatGPT conversations, and the alleged use of ChatGPT by the accused Florida State University mass shooter. OpenAI LLC and CEO Sam Altman (named personally) removed the case to federal court before Judge Aileen Cannon in Fort Pierce on July 2, 2026. Florida has moved to remand; the jurisdictional battle is ongoing.
-
Blocked / in litigation
NAACP v. xAI (Colossus 2 Air Pollution)
N.D. Miss. · Effective 2026-04-14 · NAACP et al. v. xAI Corp. et al., No. 3:26-cv-00074-MPM-JMV (N.D. Miss., filed April 14, 2026)
The NAACP and local organizations sued xAI and its affiliate MZX Tech in April 2026, alleging 27 natural gas turbines at xAI's Colossus 2 data center in Southaven, Mississippi were operated without required air permits, harming predominantly Black residents near the facility. In June 2026, the Trump DOJ moved to intervene and dismiss the case, arguing the lawsuit would 'hamper America's AI innovation' — marking the first time DOJ used a motion to dismiss a citizen Clean Air Act suit on AI-policy grounds.
-
Proposed / pending
NAIC AI Evaluation Tool Pilot (12 states, 2026)
United States · Effective 2026-03-02 · NAIC Big Data and AI (H) Working Group — AI Systems Evaluation Tool Pilot (launched March 2, 2026)
The National Association of Insurance Commissioners launched a 12-state pilot program in March 2026 to test a new 'AI Systems Evaluation Tool' — a standardized framework giving insurance examiners a structured method to assess how insurance companies govern their AI systems during market conduct and financial examinations. The 12 participating states are California, Colorado, Connecticut, Florida, Iowa, Louisiana, Maryland, Pennsylvania, Rhode Island, Vermont, Virginia, and Wisconsin. The tool requires insurers to complete four exhibits: one quantifying AI usage, one assessing governance risk, one detailing high-risk AI systems, and one documenting AI data practices. The pilot runs through September 2026, with tool updates through October 2026 and formal NAIC adoption expected at the Fall National Meeting in November 2026.
-
In effect
Final Rule: Collection of Biometric Data From Aliens Upon En
United States · Effective 2025-12-26 · Final Rule: Collection of Biometric Data From Aliens Upon Entry to and Departure From the United States
This DHS/CBP final rule authorizes facial-biometric collection from all noncitizens on entry and exit at airports, seaports and land ports, removing prior exemptions and expanding to new travel modalities.
-
In effect
EPA AI Strategic Plan
United States · Effective 2025-10-30 · EPA AI Strategy (Oct. 30, 2025)
EPA's AI Strategic Plan governs the use of AI for environmental enforcement, pollution monitoring, satellite imagery analysis, and permit review — establishing risk classifications and human-review requirements for AI in enforcement decisions.
-
Blocked / in litigation
Harper v. Sirius XM
E.D. Mich. · Effective 2025-08-04 · Harper v. Sirius XM Radio Inc., No. 2:25-cv-12403 (E.D. Mich., filed Aug. 4, 2025)
A private class action filed in August 2025 in the Eastern District of Michigan alleges that Sirius XM Radio's automated applicant-screening tools produced unlawful disparate impact against Black and minority job applicants under Title VII. Filed shortly after the EEOC's FY2024 enforcement-focus announcement targeting Sirius XM's AI hiring systems, the case is one of the first private Title VII class actions to directly challenge a corporate AI hiring algorithm.
-
In effect
ACA § 1557 (AI in patient care)
United States · Effective 2025-05-01 · 42 U.S.C. § 18116; 45 C.F.R. § 92.210
A 2024 HHS rule says hospitals, insurers, and other covered health entities may not discriminate through clinical algorithms and AI decision-support tools, and must make reasonable efforts to find and fix bias in those tools. The requirement took effect May 1, 2025, but HHS has stayed quiet on enforcement, so its practical protection is uncertain while it stays on the books.
-
In effect
FBI 2024 Elder Fraud Report
United States · Effective 2025-04-29 · FBI IC3 2024 Elder Fraud Report (Apr. 29, 2025)
The FBI's annual Elder Fraud Report — published April 2025 for calendar year 2024 — documented $4.885 billion in losses by Americans 60+, with AI voice cloning, AI-driven romance and pig-butchering scams, and tech-support fraud identified as fastest-growing vectors. The report is the principal federal basis for AI elder-fraud policy and enforcement priorities.
-
In effect
Federal AI Executive Orders
United States · Effective 2025-01-23 · Exec. Order 14179 (Jan. 23, 2025); Exec. Order of Dec. 11, 2025
The current federal posture is deregulatory: EO 14179 (January 2025) revoked the prior AI safety order and directed agencies to remove AI rules seen as barriers to innovation, leading agencies like the EEOC and CFPB to pull AI guidance. A December 11, 2025 executive order directs the DOJ to challenge state AI laws and pushes for a uniform federal framework — but it does not itself preempt state laws, which remain in force absent congressional action or court rulings.
-
In effect
FBI IC3 AI fraud PSA
United States · Effective 2024-12-03 · FBI IC3 PSA I-120324-PSA (Dec. 3, 2024)
The FBI's Internet Crime Complaint Center warned that criminals are using generative AI for phishing, impersonation, romance scams, investment fraud, and synthetic identity creation — and gave concrete defenses, like asking a 'secret word' on suspicious family calls. The PSA underpins FBI investigative priority and informs federal AI-fraud charging decisions.
-
In effect
DHS AI Critical Infra Framework
United States · Effective 2024-11-14 · DHS Framework (Nov. 14, 2024)
DHS released a voluntary framework that lays out the responsibilities of cloud providers, AI developers, AI deployers, critical-infrastructure owners, and civil society for the safe and secure use of AI in U.S. critical infrastructure sectors — including grid, water, financial services, and healthcare.
-
Repealed / replaced
OMB M-24-18 (superseded by M-25-22)
United States · Effective 2024-10-03 · OMB M-24-18 (Oct. 3, 2024)
OMB's original federal AI acquisition memo set rules for how agencies buy AI, including performance testing, vendor competition, and IP protections for federal AI use cases. Superseded by M-25-22 in April 2025 but established the federal baseline for AI procurement still in effect through M-25-22.
-
In effect
USDA AI Strategy
United States · Effective 2024-09-30 · USDA AI Strategy (Sept. 30, 2024)
USDA's AI Strategy governs how the department deploys AI across food safety inspection, SNAP eligibility processing, agricultural research, and farm-loan adjudication — with use-case inventory disclosure required by OMB.
-
In effect
GSA AI Procurement Guide
United States · Effective 2024-09-24 · GSA AI Guide for Government (2024)
GSA's AI procurement guide gives federal contracting officers a step-by-step playbook for buying AI — including risk classification, vendor due diligence, evaluation criteria, and contract clauses that comply with OMB M-25-22.
-
In effect
HHS ASPR AI Public Health
United States · Effective 2024-08-28 · HHS ASPR AI Framework (Aug. 28, 2024)
HHS's Administration for Strategic Preparedness and Response framework governs AI use in public-health emergencies — including pandemic modeling, vaccine distribution, and resource allocation — with bias auditing and transparency required for algorithms that affect access to scarce medical countermeasures.
-
Repealed / replaced
Battle v. Microsoft
D. Md. · Effective 2024-08-22 · Battle v. Microsoft Corp., No. 1:23-cv-01822 (D. Md.)
Aerospace consultant Jeffery Battle sued Microsoft alleging Bing/Copilot conflated him with a convicted terrorist of the same name. The case was dismissed in 2024 — among the early dismissals signaling that AI hallucination defamation suits face uphill battles on actual malice and statement-of-fact grounds.
-
In effect
NTIA Open Weights Report
United States · Effective 2024-07-30 · NTIA Open Weights Report (July 30, 2024)
NTIA's open-weights report concluded that the federal government should monitor — but not currently restrict — the public release of advanced AI model weights. It established the federal policy baseline that open AI models offer competitive and research benefits that outweigh current risks.
-
In effect
SSA AI Disability Adjudication
United States · Effective 2024-07-30 · SSA AI Governance Framework (July 30, 2024)
Social Security Administration governance for AI used to help adjudicate disability claims — including the Insight tool and Quick Disability Determinations. Human adjudicators must review every AI-assisted determination; AI cannot deny benefits without ALJ or examiner review.
-
In effect
NIST GenAI Profile (AI 600-1)
United States · Effective 2024-07-26 · NIST AI 600-1
NIST's voluntary GenAI Profile is the leading federal playbook for managing risks unique to generative AI: hallucinations, harmful content, intellectual property leakage, data poisoning, and CBRN misuse. Federal contractors and many enterprises adopt it as the de facto AI risk-management baseline.
-
In effect
FINRA AI Notice 24-09
United States · Effective 2024-06-27 · FINRA Reg. Notice 24-09 (June 27, 2024)
FINRA reminded broker-dealers that existing rules — supervision, recordkeeping, advertising, and anti-fraud — apply fully to AI tools, including generative AI used for customer communications, surveillance, and trading. Firms misrepresenting AI capabilities or failing to supervise AI outputs face enforcement.
-
In effect
DOE AI Energy Framework
United States · Effective 2024-04-29 · DOE AI for Energy Report (Apr. 29, 2024)
DOE's AI for Energy report sets federal expectations for how utilities, grid operators, and large compute customers use AI for grid operations, demand forecasting, and energy-resource planning — including data centers that strain regional grids.
-
In effect
OPM AI Workforce Guidance
United States · Effective 2024-04-29 · OPM CHCO Memo (Apr. 29, 2024)
OPM AI competency model and skills-based hiring guidance for federal AI/data roles under EO 14110 and the AI in Government Act.
-
In effect
FSMB AI Guidance
United States · Effective 2024-04-26 · FSMB Policy (Apr. 26, 2024)
FSMB adopted a national framework guiding all U.S. state medical boards on what physicians must do when using AI: maintain transparency with patients, ensure AI tools are appropriate to use, supervise AI outputs, and protect patient privacy. States are adopting it as the model framework.
-
In effect
Treasury AI Cyber Report (Fin. Services)
United States · Effective 2024-03-27 · Treasury Report (March 2024)
Treasury released a sector-wide report outlining AI-specific cybersecurity risks facing banks and financial institutions, the gap between large and small firms in AI-fraud defense, and supervisory expectations for AI-driven fraud, deepfakes, and prompt-injection attacks.
-
In effect
NTIA AI Accountability Report
United States · Effective 2024-03-27 · NTIA AI Accountability Report (Mar. 27, 2024)
The Commerce Department's NTIA released the federal government's flagship policy report on AI accountability — concluding that independent AI audits, evaluations, and disclosure mechanisms are essential and recommending federal investment in the AI accountability ecosystem.
-
Blocked / in litigation
Intercept v. OpenAI
S.D.N.Y. · Effective 2024-02-28 · Intercept Media, Inc. v. OpenAI, Inc., No. 1:24-cv-01515 (S.D.N.Y.)
The Intercept (and originally Raw Story and AlterNet, since voluntarily dismissed without prejudice) sued OpenAI on a DMCA-only theory — focusing on the alleged stripping of copyright-management information (author, title, terms) from training-data articles. The court allowed The Intercept's case to proceed in February 2025.
-
In effect
NIST AISI / AISIC
United States · Effective 2024-02-08 · NIST AISI Charter (Feb. 8, 2024)
NIST stood up the U.S. AI Safety Institute and a consortium of AI developers, civil-society groups, and academic labs to develop technical guidance, test methodologies, and safety evaluations for advanced AI models — including red-teaming and dual-use foundation model evaluation.
-
In effect
CFTC AI trading-scam advisory
United States · Effective 2024-01-25 · CFTC OCEO Customer Advisory (Jan. 25, 2024)
The Commodity Futures Trading Commission warned consumers about AI-related investment scams — fraudsters promising guaranteed returns from AI trading bots, AI-generated celebrity endorsements, and AI-themed pump-and-dump schemes in crypto and forex markets. The advisory laid the groundwork for CFTC enforcement against AI-touted commodity fraud.
-
In effect
NSF NAIRR Pilot
United States · Effective 2024-01-24 · NSF NAIRR Pilot (Jan. 24, 2024)
NSF's NAIRR pilot is a two-year initiative providing U.S. academic researchers with shared access to compute, data, and AI models — establishing federal terms for responsible AI research, including bias evaluation, model documentation, and access guardrails.
-
In effect
NAIC AI Model Bulletin (Insurance)
United States · Effective 2023-12-04 · NAIC Model Bulletin: Use of AI Systems (Dec. 4, 2023); NAIC Impl. Map (Apr. 2025)
The National Association of Insurance Commissioners adopted a Model Bulletin in December 2023 directing insurers to govern their AI responsibly — documenting AI systems, testing for bias, and overseeing third-party AI vendors. As of early 2026, over half of U.S. states and D.C. have adopted the bulletin through their own state insurance departments, making it the broadest AI governance standard in the insurance sector. It is not a federal law and has no penalties on its own, but state commissioners use it as a market-conduct examination standard.
-
In effect
CISA AI Roadmap
United States · Effective 2023-11-14 · CISA AI Roadmap (Nov. 14, 2023)
CISA's AI Roadmap outlines how the U.S. cybersecurity agency will use AI to defend networks, secure AI systems against attacks, and protect critical infrastructure from AI-enabled threats — including deepfakes and AI-driven cyberattacks on the 16 critical-infrastructure sectors.
-
In effect
EEOC SEP FY24-28 (AI priority)
United States · Effective 2023-09-21 · 88 Fed. Reg. 65042
EEOC's Strategic Enforcement Plan elevates algorithmic and AI hiring discrimination to one of the agency's top investigation priorities through FY 2028 — even after the agency removed its 2023 AI technical assistance documents in January 2025.
-
Blocked / in litigation
Chabon v. Meta
N.D. Cal. · Effective 2023-09-12 · Chabon v. Meta Platforms, Inc., No. 3:23-cv-04663 (N.D. Cal.)
The same Chabon plaintiff group filed a parallel action against Meta for Llama training, later consolidated into the broader Kadrey v. Meta proceedings.
-
Blocked / in litigation
Chabon v. OpenAI
N.D. Cal. · Effective 2023-09-08 · Chabon v. OpenAI, Inc., No. 3:23-cv-04625 (N.D. Cal.)
Pulitzer winner Michael Chabon, Ayelet Waldman, David Henry Hwang, and other authors sued OpenAI in September 2023 alleging ChatGPT was trained on their copyrighted books. Consolidated with Tremblay and Silverman before the same judge.
-
In effect
ED AI in Education Report
United States · Effective 2023-05-24 · ED OET Report (May 24, 2023)
The Education Department's first major AI report set federal policy direction for AI in K-12 and higher education — calling for human-centered design, educator oversight, equity safeguards, and a moratorium on high-stakes uses of AI to evaluate students or teachers without strong evidence and oversight.
-
In effect
FDA AI Drug/Bio Guidance
United States · Effective 2023-05-10 · FDA Discussion Paper (May 2023); CDER/CBER Draft Guidance (Jan. 2025)
FDA published a framework setting expectations for how drug and biologics companies use AI/ML across drug discovery, clinical trials, postmarket safety surveillance, and manufacturing. The framework signals that AI used in regulatory submissions must be transparent, validated, and reproducible.
-
In effect
DOJ Civil Rights AI Statement
United States · Effective 2023-04-25 · DOJ-CFPB-EEOC-FTC Joint Statement (Apr. 25, 2023)
DOJ joined three other federal agencies in an interagency statement confirming that existing civil rights laws — Fair Housing Act, ECOA, Title VII, ADA — apply fully to AI and algorithmic systems. AI does not create a 'liability shield' for discrimination.
-
Blocked / in litigation
Young v. NeoCortext (Reface)
C.D. Cal. · Effective 2023-04-03 · Young v. NeoCortext, Inc., No. 2:23-cv-02496 (C.D. Cal.); 9th Cir. Dec. 2024
Reality TV personality Kyland Young sued NeoCortext (developer of the Reface face-swap app) under California's right-of-publicity statute, alleging Reface used his image in its in-app catalog without consent. In 2024 the Ninth Circuit affirmed denial of NeoCortext's anti-SLAPP motion, allowing the case to proceed.
-
In effect
NIST AI RMF (voluntary AI risk framework)
United States · Effective 2023-01-26 · NIST AI 100-1 (AI RMF 1.0); NIST AI 600-1
A voluntary federal framework that helps organizations identify, measure, and manage risks from AI systems — including bias, safety, and security issues. It creates no legal rights for individuals, but it has become the de facto standard referenced by regulators, several state AI laws, and federal contractors.
-
In effect
TSA Facial Comparison Technology (CAT-2 / Traveler Verificat
United States · Effective 2023-01-01 · TSA Facial Comparison Technology (CAT-2 / Traveler Verification Service)
TSA uses CAT-2 camera units at 350+ airport checkpoints to compare a live photo of a traveler to their ID photo (or to a CBP TVS gallery), with signage stating participation is voluntary and travelers may decline.
-
In effect
FY23 NDAA §7224B (civilian AI inventory)
United States · Effective 2022-12-23 · Pub. L. No. 117-263, §7224B (Dec. 23, 2022)
Section 7224B of the FY23 NDAA (Pub. L. 117-263, the James M. Inhofe NDAA for FY23) extended the federal AI use case inventory requirement from EO 13960 to non-CFO Act civilian agencies and required updated procurement guidance from GSA. Quiet but significant — broadened federal AI transparency baseline beyond defense and major civilian agencies.
-
Blocked / in litigation
Doe v. GitHub (Copilot)
N.D. Cal. · Effective 2022-11-03 · Doe 1 v. GitHub, Inc., No. 4:22-cv-06823 (N.D. Cal.)
Anonymous software developers sued GitHub, Microsoft, and OpenAI in November 2022, alleging GitHub Copilot trained on their open-source code in violation of open-source licenses (which require attribution) and DMCA § 1202. After significant attrition of claims, a narrowed case survives.
-
In effect
AI Training Act (2022)
United States · Effective 2022-10-17 · Pub. L. No. 117-207, 136 Stat. 2253 (Oct. 17, 2022)
Public Law 117-207, signed October 17, 2022, requires OMB to provide regular AI training to the federal acquisition workforce. A narrow but enacted federal AI statute — one of only three AI-specific bills passed by Congress before 2024 (alongside the AI in Government Act and National AI Initiative Act).
-
In effect
OSTP AI Bill of Rights Blueprint
United States · Effective 2022-10-04 · OSTP Blueprint (October 2022)
The Blueprint laid out five non-binding principles for protecting Americans from automated systems: safe and effective systems, algorithmic discrimination protections, data privacy, notice and explanation, and human alternatives. It remains the most widely cited federal articulation of AI rights and is referenced by state AI laws.
-
In effect
Simplified Arrival Facial Biometric Comparison at All U.S. I
United States · Effective 2022-06-01 · Simplified Arrival Facial Biometric Comparison at All U.S. International Airports
CBP completed nationwide deployment of Simplified Arrival, which photographs international arrivals at airport inspection points and matches faces against government passport/visa galleries, with opt-out for U.S. citizens.
-
In effect
FY22 NDAA §256 (DoD AI T&E)
United States · Effective 2021-12-27 · Pub. L. No. 117-81, §256 (Dec. 27, 2021)
Section 256 of the FY22 NDAA (Pub. L. 117-81) directed the Department of Defense to develop a comprehensive AI test and evaluation master plan covering data quality, model validation, and adversarial robustness. One of several discrete AI-related provisions across the FY22 NDAA — together they formed the federal government's first comprehensive AI safety-testing framework.
-
In effect
FTC AI Guidance (2021)
United States · Effective 2021-04-19 · FTC Business Guidance (Apr. 19, 2021)
FTC's foundational AI compliance blog warning that biased algorithms can violate FTC Act Sec. 5, FCRA, and ECOA. Sets the agency's enforcement posture on deceptive and unfair AI practices.
-
In effect
Interagency AI/ML Risk Mgmt (OCC/Fed/FDIC)
United States · Effective 2021-03-31 · 86 Fed. Reg. 16837; SR 11-7; OCC Bulletin 2011-12
Banking regulators issued a joint request for information setting their supervisory expectations for banks using AI and machine learning — covering model risk, fair lending, third-party AI vendors, and consumer-protection compliance. The 2011 model-risk-management guidance (SR 11-7) governs AI underwriting models.
-
In effect
National AI Initiative Act (2020)
United States · Effective 2021-01-01 · Pub. L. No. 116-283, Div. E, 134 Stat. 4523 (Jan. 1, 2021); 15 U.S.C. §§ 9401-9462
Enacted as Division E of the FY21 NDAA (signed by Congressional override Jan. 1, 2021), the National AI Initiative Act codified a coordinated federal AI R&D strategy. It created the National AI Initiative Office (NAIIO) inside OSTP, established AI Research Institutes via NSF, and directed NIST to develop AI risk-management standards — the statutory authority behind NIST AI RMF 1.0.
-
In effect
FY21 NDAA §7224 (AI procurement pilot)
United States · Effective 2021-01-01 · Pub. L. No. 116-283, §7224 (Jan. 1, 2021)
Section 7224 of the FY21 NDAA (William M. (Mac) Thornberry National Defense Authorization Act, Pub. L. 116-283) directed the Department of Defense to establish AI ethics steering committees and procurement pilots. One of the earliest federal AI-specific procurement guardrails, predating the EO 14110 framework by nearly three years.
-
In effect
AI in Government Act (2020)
United States · Effective 2020-12-27 · Pub. L. No. 116-260, Div. U, Title I, §104 (Dec. 27, 2020); 40 U.S.C. §11301 note
Enacted as part of the Consolidated Appropriations Act 2021 (Dec. 27, 2020), the AI in Government Act of 2020 created the GSA AI Center of Excellence, directed OMB to issue federal AI use guidance, and required OPM to establish federal AI workforce occupational series. One of three enacted pre-2024 federal AI statutes — foundational federal procurement and workforce architecture.
-
In effect
CBP Biometric Facial Comparison at Cruise Seaports
United States · Effective 2020-01-01 · CBP Biometric Facial Comparison at Cruise Seaports
CBP runs biometric facial comparison at roughly 11 U.S. cruise seaports (including Miami and Port Everglades), scanning disembarking passengers' faces against passport/visa photos with a U.S.-citizen opt-out.
-
Enacted (not yet in effect)
FERC order directing PJM and other grid operators to reform
United States · FERC order directing PJM and other grid operators to reform tariffs on large-load (data center) transmission cost allocation (Docket RM26-4-000)
FERC ordered PJM and other regional grid operators to revise or defend their tariffs within 60 days to prevent existing ratepayers from being unlawfully charged for transmission upgrades required to serve large new loads such as AI data centers.
-
Blocked / in litigation
Chatrie v. United States (Fourth Amendment protection for lo
United States · Chatrie v. United States (Fourth Amendment protection for location data / geofence warrants)
The U.S. Supreme Court ruled that people have a Fourth Amendment expectation of privacy in smartphone location data, holding that government access to such data (including via geofence warrants) is a search requiring constitutional protection.
-
Proposed / pending
Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757)
United States · Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757)
The U.S. House passed H.R. 7757 (267-117), imposing obligations on AI chatbot providers and online platforms to protect minors, including AI disclosure, crisis resources, use-break prompts, and policies against sexual exploitation and age-restricted content.
-
Proposed / pending
FTC Proposed Policy Statement — AI Accuracy (July 2026)
United States · FTC Proposed Policy Statement on Suppression of Accuracy in AI Systems, 91 Fed. Reg. ___ (July 7, 2026) (Docket 2026-13628)
The Federal Trade Commission published a proposed policy statement in the Federal Register on July 7, 2026 warning that AI companies that steer outputs toward undisclosed ideological objectives (rather than user-requested accuracy) may be engaging in deceptive practices under Section 5 of the FTC Act. The statement was issued pursuant to a Trump Executive Order directing the FTC to clarify how Section 5 applies to AI. Notably, the proposed statement also suggests that state laws requiring AI systems to alter outputs — including some state AI bias and accuracy mandates — may conflict with federal consumer protection law, raising preemption concerns. Public comments are due July 31, 2026. The statement is proposed, not final, and does not itself impose any legal obligations.
-
Blocked / in litigation
Newsom v. ADS/Amazon (Louisa County VA data center nuisance)
United States · Newsom v. ADS, W.D. Va. (Charlottesville Div.) — motion to dismiss denied early July 2026; preliminary-injunction hearing 2026-08-19
A Louisa County, Virginia homeowner sued an Amazon Web Services affiliate (ADS) over a nearby data center construction project, alleging brown tap water, dust, and loud noise since construction began in March 2025. A federal judge denied Amazon's motion to dismiss in early July 2026, letting the private nuisance claim proceed. The plaintiff is seeking a preliminary injunction to force changes to construction practices, not to halt construction entirely; a hearing is set for August 19, 2026.
-
Proposed / pending
2026-10602
United States · HHS 2026-10602
The Food and Drug Administration (FDA or the Agency) is extending the comment period for the notice entitled "AI-Enabled Optimization of Early-Phase Clinical Trials Pilot Program; Request for Information" that appeared in the Federal Register of April 29, 2026. In the notice, FDA requested comments to solicit input on a proposed pilot program to assess how artificial intelligence (AI)-enabled technologies can improve efficiency, speed, and quality of decision- making in early phase clinical trials. The Agency is taking this action in response to a request for an extension to allow interested p
-
In effect
2026-10779
United States · NIST 2026-10779
The National Institute of Standards and Technology (NIST), an agency of the United States Department of Commerce, previously announced the formation of the Artificial Intelligence Safety Institute Consortium ("AISIC") through a publication dated November 2, 2023 (88 FR 75276). AISIC brought together more than 280 organizations to develop science-based and empirically backed guidelines and standards for artificial intelligence (AI) measurement, laying a foundation for global AI metrology. Through this succeeding notice, NIST is announcing the retitling of AISIC as the NIST Artificial Intelligen
-
Proposed / pending
2026-11353
United States · FCC 2026-11353
In this document, the Federal Communications Commission (FCC or Commission) adopted a Notice of Proposed Rulemaking (NPRM) that kicks off a process to examine how the Commission can make some of its high-cost mechanisms even more efficient and effective into the future. Ensuring a predictable High-Cost Program for years to come--call it High-Cost Modernization--will provide continuing support for our Build America Agenda, supercharge American leadership in Artificial Intelligence (AI) by efficiently supporting the broadband-capable networks upon which AI-enhanced applications and services will
-
Enacted (not yet in effect)
2026-10347
United States · ED 2026-10347
The Department of Education (Department) announces a final priority and definitions for use in currently authorized discretionary grant programs or programs that may be authorized in the future. The Secretary may choose to use the entire priority for a grant program or a particular competition or use one or more of the priority's component parts. The final priority and definitions augment the initial set of three Secretary's Supplemental Priorities on Evidence-Based Literacy, Educational Choice, and Returning Education to the States published as final priorities on September 9, 2025 (90 FR 435
-
Proposed / pending
2026-12205
United States · GSA 2026-12205
The General Services Administration (GSA) is seeking public comment on the draft of a new General Services Administration Acquisition Regulation (GSAR) clause regarding basic safeguarding of data within Large Language Model Artificial Intelligence Systems (LLMs). Due to the complexity of the issue, GSA is publishing this notification and draft clause to gather feedback from stakeholders before taking future action (e.g., deviation and/or formal rulemaking).
-
Proposed / pending
2026-08281
United States · HHS 2026-08281
The Food and Drug Administration (FDA or the Agency) is issuing this request for information to solicit input on a proposed pilot program to assess how artificial intelligence (AI)-enabled technologies can improve efficiency, speed, and quality of decision- making in early phase clinical trials. Early-phase clinical trials represent a critical bottleneck in drug development, often characterized by high uncertainty, limited patient populations, and inefficient decision- making processes. This pilot program aims to explore how advances in AI and data science can improve trial efficiency, enhance
-
In effect
2026-07087
United States · ED 2026-07087
The Department of Education (Department) announces one priority and related definitions for use in currently authorized discretionary grant programs or programs that may be authorized in the future. The Secretary may choose to use an entire priority for a grant program or a particular competition or use one or more of the priority's component parts. This priority and definitions augment the initial set of three Secretary's Supplemental Priorities on Evidence- Based Literacy, Educational Choice, and Returning Education to the States published as final priorities on September 9, 2025; the additi
-
Enacted (not yet in effect)
2026-07084
United States · ED 2026-07084
The Department of Education (Department) announces a final priority and definitions for use in currently authorized discretionary grant programs or programs that may be authorized in the future. The Secretary may choose to use the entire priority for a grant program or a particular competition or use one or more of the priority's component parts. This priority and definitions augment the initial set of three Secretary's Supplemental Priorities on Evidence-Based Literacy, Educational Choice, and Returning Education to the States published as final priorities on September 9, 2025; the additional
-
In effect
2026-06952
United States · DOC 2026-06952
The Department of Commerce (the Department), through the International Trade Administration (ITA), invites proposals for full- stack American AI export packages from industry-led `pre-set' consortia for designation under the American Artificial Intelligence (AI) Exports Program (the Program) established pursuant to Executive Order 14320, "Promoting the Export of the American AI Technology Stack." A designated package will be presented by U.S. Government representatives as a standing, full-stack American AI export package and may receive priority government advocacy, export licensing review and
-
Enacted (not yet in effect)
2026-16371
United States · NIST 2026-16371
The National Institute of Standards and Technology (NIST) established and operates the National Vulnerability Database (NVD), which provides the U.S. government repository of standards-based vulnerability management data. NIST seeks stakeholder input on opportunities, challenges, and priorities for modernizing the NVD in an evolving cybersecurity landscape increasingly shaped by artificial intelligence (AI) and machine-consumable security data. NIST's goal is to improve the NVD's scalability, automation, interoperability, transparency, and utility.
-
In effect
Copyright Office AI Guidance
United States · 17 U.S.C. § 102; U.S. Copyright Office, Copyright and AI Reports (2024–2025)
The U.S. Copyright Office has ruled that purely AI-generated works cannot be copyrighted — human creativity is required, and typing prompts alone is not enough. Its multi-part AI report covers digital replicas (2024), copyrightability of AI outputs (Jan 2025), and AI training on copyrighted works (May 2025 pre-publication). Whether AI training is fair use is being decided in ongoing litigation.
-
Blocked / in litigation
Mobley v. Workday (AI Hiring Bias)
United States · Mobley v. Workday, Inc., No. 3:23-cv-00770 (N.D. Cal.)
Derek Mobley's collective action suit in federal court alleges that Workday's AI hiring and screening tools systematically discriminated against Black, disabled, and older job applicants — denying him hundreds of opportunities. As of June 2026, the case has survived multiple dismissal motions; a court authorized notice to class members in February 2026 (March 7 opt-in deadline), and the court rejected Workday's argument that older workers can't be 'applicants' under the ADEA. The case is in discovery and could establish landmark precedent on AI vendor liability.
-
Proposed / pending
Traveler Privacy Protection Act of 2025 (S.1691)
United States · Traveler Privacy Protection Act of 2025 (S.1691)
This pending bipartisan Senate bill would guarantee travelers the right to opt out of TSA facial recognition at airports, bar worse treatment for opting out, and limit retention and secondary use of face data.
-
Proposed / pending
Stop Spying Bosses Act (Senate, 2026)
United States · Stop Spying Bosses Act, introduced June 18, 2026, U.S. Senate (Markey/Schatz/Booker et al.)
The Stop Spying Bosses Act, introduced June 18, 2026 in the U.S. Senate by Senators Markey, Schatz, and Booker, would sharply limit what data employers can collect on workers and how they can use it. Under the bill, employers could only collect data strictly necessary for a defined legitimate work purpose, and would be prohibited from monitoring union activity, political or religious views, immigration status, off-duty conduct, or health information. Biometric data collection — fingerprints, voiceprints, iris scans, facial maps, gait patterns — would require express consent and a legitimate work purpose. The bill would also prohibit using collected data to predict worker behavior, emotions, or beliefs unrelated to job performance. Companion legislation is the Senate No Robot Bosses Act (also introduced June 18, 2026). Senate companion to the House-side No Robot Bosses Act (HB 6371).
-
Proposed / pending
FTC CARS Rule (AI auto)
United States · 16 C.F.R. Part 463; 89 Fed. Reg. 590
The FTC rule targets deceptive auto-dealer practices, including AI-powered tools used in financing offers and add-on sales. The rule's compliance date is stayed pending Fifth Circuit litigation, but core deception standards still apply under FTC Act Section 5.
-
Proposed / pending
FTC Commercial Surveillance ANPR
United States · 87 Fed. Reg. 51273
The FTC's advance notice of proposed rulemaking on 'commercial surveillance and data security' asked whether to write rules limiting how companies collect data, train AI models on consumers, and use automated decision-making. The proceeding is technically open but has not advanced to a notice of proposed rulemaking.
-
Proposed / pending
FCC AI robocall disclosure NPRM
United States · FCC 24-84, NPRM, CG Docket 23-362 (Aug. 8, 2024)
The FCC's August 2024 proposed rule would require callers using AI-generated voices or AI-written texts to disclose that fact at the start of the call or in the text, and would let consumers refuse AI calls even when prerecorded consent was given. The proposal is pending as of June 2026 — track its status before relying on it.
-
Proposed / pending
H.R. 9340 Ratepayer Protection Act (proposed)
United States · H.R. 9340, 119th Cong. (2026)
H.R. 9340 would amend section 111(d) of the Public Utility Regulatory Policies Act of 1978 (16 U.S.C. 2621(d)) to add a federal ratemaking standard for 'large-load customers', requiring that rates charged to such a customer be designed to recover from that customer the full incremental cost of any generation, transmission or distribution upgrade necessary to serve its load, including where the customer terminates its contract or ceases purchasing energy. Before making such an upgrade the utility would have to require the customer to provide financial assurances or contributions covering its cost. A 'large-load customer' is defined as a non-residential electric consumer requesting or contracting for electric energy for one or more facilities with an aggregate peak demand of 100 megawatts or more at a single site or campus.
-
Proposed / pending
DEFIANCE Act (deepfake-porn civil suits)
United States · S. 1837, 119th Cong. (DEFIANCE Act)
This bill would let victims of sexually explicit AI deepfakes sue the people who create or share them, with damages starting around $150,000. The Senate passed it unanimously on January 13, 2026 — the second time it has done so — but as of June 2026 it is still awaiting action in the House and is not yet law.
-
Proposed / pending
QUIET Act
United States · H.R.1027, 119th Congress (2025–2026)
Requires any robocall that uses artificial intelligence to emulate a human voice to include a clear disclosure at the start of the message stating that AI is being used. Also doubles the maximum forfeiture penalty and criminal fines under the TCPA for violations involving AI voice or text impersonation. Seniors are not specifically named but are a primary intended beneficiary — AARP surveys show 95% of adults 50+ received a scam or illegal robocall in 2025.
-
Proposed / pending
QUIET Act (Senate)
United States · S.3354, 119th Congress (2025–2026)
Senate companion to H.R.1027; requires AI-generated robocalls to disclose AI use at the start of the call and enhances TCPA penalties for AI voice or text impersonation violations. Directly addresses a primary vector for elder fraud — AI voice robocalls. Bipartisan press materials cited protection of older Americans from scam calls as a key goal.
-
Proposed / pending
Preventing Deep Fake Scams Act (House)
United States · H.R.1734, 119th Congress (2025–2026)
Establishes a congressional Task Force on Artificial Intelligence in the Financial Services Sector to assess how deepfakes and voice-cloning tools are used to commit financial fraud and to report best-practice recommendations to Congress within one year of enactment. Fraudsters stole more than $12.5 billion from consumers in 2024; older adults represent the largest victim group. Seniors are not explicitly named but protection of older adults is a stated motivation in the companion Senate press materials.
-
Proposed / pending
Preventing Deep Fake Scams Act (Senate)
United States · S.2117, 119th Congress (2025–2026)
Senate companion to H.R.1734; establishes the Task Force on Artificial Intelligence in the Financial Services Sector to study AI-enabled financial scams — including deepfakes and voice-cloning grandparent scams — and to produce congressional recommendations within one year. FBI data cited by sponsors shows 201,266 complaints from Americans 60+ in 2025 with $7.748 billion in losses. Seniors are not specifically enumerated in the bill text but are the primary demographic motivating the legislation.
-
Proposed / pending
NO FAKES Act of 2025
United States · S.1367, 119th Congress (2025–2026)
Creates the first federal individual right against unauthorized AI-generated digital replicas of a person's image, likeness, or voice. Provides a right to subpoena online platforms for data about unauthorized deepfakes and establishes a DMCA-style notice-and-takedown procedure. Seniors and others whose voices are cloned without consent for use in grandparent or impersonation scams would have a direct cause of action against the parties responsible.
-
Proposed / pending
AI Scam Prevention Act
United States · S.3495, 119th Congress (2025–2026)
Prohibits using artificial intelligence to impersonate any person — family member, government official, or business — with intent to defraud. Codifies and expands the FTC's existing rule against impersonating government or business officials and updates definitions to include text messages, video conference calls, and AI-generated or prerecorded voice. Sen. Klobuchar's press release explicitly cited grandparent scams where criminals clone a grandchild's voice to defraud elderly relatives as a primary motivation.
-
Proposed / pending
AI Fraud Accountability Act
United States · S.3982, 119th Congress (2025–2026)
Amends the Communications Act of 1934 to create a new criminal offense for using a realistic digital impersonation in interstate or foreign communications with intent to defraud a person of money or things of value. Establishes extraterritorial jurisdiction — critical because many AI scam operations targeting American seniors originate overseas. Empowers the FTC with civil enforcement authority and directs NIST to develop best practices. Explicitly endorsed by AARP and the 60 Plus Association because of the devastating toll on seniors.
-
Proposed / pending
AI Fraud Accountability Act (House)
United States · H.R.7786, 119th Congress (2025–2026)
House companion to S.3982; criminalizes the use of realistic digital impersonation tools in interstate or foreign communications with fraudulent intent. Includes extraterritorial jurisdiction to reach foreign-based AI scam operations that frequently target American seniors. Buchanan's press release explicitly stated that the bill responds to 'a disturbing rise in AI-generated voice clones' used to defraud families including older adults.
-
Proposed / pending
AI Fraud Deterrence Act
United States · H.R.6306, 119th Congress (2025–2026)
Amends federal mail fraud, wire fraud, bank fraud, and money laundering statutes to impose significantly higher maximum penalties when AI tools are used to commit those offenses. Proposed fines range from $1–2 million and maximum prison terms of 20–30 years for AI-assisted fraud. Rep. Lieu's press release specifically cited scammers using AI voice cloning to target seniors as the primary motivation. Seniors are not individually named in the bill text but are the explicit focus of the sponsors' public advocacy.
-
Status unknown
Sky / Scarlett Johansson voice-likeness threat
(threatened — no filed case) · Effective 2024-05-20 · Public legal threat by Scarlett Johansson re: OpenAI 'Sky' voice (May 2024)
Scarlett Johansson publicly threatened legal action against OpenAI in May 2024 after the company released a 'Sky' voice for GPT-4o that closely resembled hers — after she had declined to license her voice. OpenAI withdrew the voice. No lawsuit was filed, but the episode became a touchstone for voice-likeness AI right-of-publicity policy debates and shaped the NO FAKES Act.
-
Repealed / replaced
OMB M-24-10 (rescinded)
United States · Effective 2024-03-28 · OMB Memo M-24-10 (Mar. 28, 2024) — rescinded by M-25-21 (Apr. 3, 2025)
OMB M-24-10 was the Biden-era binding OMB rule requiring federal agencies to designate Chief AI Officers, inventory AI use cases, and adopt minimum risk-management practices for rights/safety-impacting AI. Rescinded and replaced by M-25-21/22 under the Trump OMB on April 3, 2025.
-
Repealed / replaced
USPTO AI Inventorship Guidance
United States · Effective 2024-02-13 · 89 Fed. Reg. 10043 (Feb. 13, 2024) — rescinded Nov. 28, 2025
USPTO guidance confirming AI-assisted inventions are patentable but inventorship analysis focuses on significant human contributions (Pannu factors). Rescinded November 28, 2025 and replaced by 2025 successor guidance.
-
Repealed / replaced
EO 14110 (revoked)
United States · Effective 2023-10-30 · Exec. Order No. 14110, 88 Fed. Reg. 75191 (Nov. 1, 2023) — revoked by EO 14148 (Jan. 20, 2025)
President Biden's EO 14110 was the foundational federal AI executive order, requiring safety reporting from frontier AI developers under the Defense Production Act and directing federal agencies to develop AI policies. Revoked by President Trump's EO 14148 on January 20, 2025.
-
Repealed / replaced
EO 13960 (federal AI use)
United States · Effective 2020-12-03 · Exec. Order No. 13960, 85 Fed. Reg. 78939 (Dec. 8, 2020)
President Trump's December 2020 executive order set nine principles for federal agency AI use (lawful, accurate, safe, understandable, accountable, etc.) and required each agency to publish an annual public inventory of its AI use cases. The annual AI use case inventories continued under EO 14110 (Biden) and EO 14179 (Trump-II) — making EO 13960 the foundational federal-AI-transparency baseline.
-
Repealed / replaced
EO 13859 (American AI Initiative)
United States · Effective 2019-02-11 · Exec. Order No. 13859, 84 Fed. Reg. 3967 (Feb. 14, 2019)
President Trump's February 2019 executive order launched the 'American AI Initiative' — the first federal whole-of-government AI strategy. It directed federal agencies to prioritize AI R&D investment, open government data for AI training, set technical standards (via NIST), and develop the AI workforce. The framework was preserved but reorganized under EO 13960 (2020) and EO 14110 (2023), then carried over into EO 14179 (2025).
-
Blocked / in litigation
3:26-cv-05949
District Court, N.D. California · District Court, N.D. California — 3:26-cv-05949
Gagleard v. Perplexity AI, Inc. — 360 P.I.: Other
-
Expired
SEC PDA Rule (proposed)
United States · SEC Release Nos. 34-97990 / IA-6353 (proposed July 26, 2023); withdrawn via Release No. 33-11377 (June 12, 2025)
This SEC proposal (July 2023) would have required broker-dealers and investment advisers to eliminate or neutralize conflicts of interest from AI/predictive-analytics technologies used in investor interactions. It DID NOT take effect: on June 12, 2025 the SEC formally withdrew it (one of 14 Biden/Gensler-era proposals withdrawn), so no rule is in force — any future rulemaking would have to start over with a new proposal.
-
Expired
Algorithmic Accountability Act (2019, died)
United States · H.R. 2231 / S. 1108, 116th Cong. (2019) — died in committee
Sens. Wyden and Booker and Rep. Clarke introduced the first federal Algorithmic Accountability Act on April 10, 2019. It would have empowered the FTC to require large companies to assess and address bias, discrimination, and privacy risks in 'automated decision systems.' Never received a committee vote — but it set the template for every subsequent federal and state algorithmic-accountability bill.
-
Expired
Algorithmic Accountability Act (2022, died)
United States · S. 3572 / H.R. 6580, 117th Cong. (2022) — died in committee
Sens. Wyden and Booker and Rep. Clarke reintroduced an expanded Algorithmic Accountability Act on Feb. 3, 2022. It would have required impact assessments for 'augmented critical decision processes' across employment, housing, credit, education, and healthcare. Died in committee but became the most-cited federal AI bill of the 117th Congress.
-
Expired
Algorithmic Accountability Act (2023, died)
United States · S. 2892 / H.R. 5628, 118th Cong. (2023) — died in committee
The third iteration of the Algorithmic Accountability Act, reintroduced on Sept. 21, 2023 with refined definitions and FTC rulemaking authority. Like its predecessors it never received committee action — but it remains the leading federal ADS-impact-assessment template.
-
Expired
Bot Disclosure Act (Feinstein, died)
United States · S. 3127, 115th Cong. (2018) — died in committee
Sen. Dianne Feinstein's June 2018 bill would have required social media platforms to mandate disclosure of automated bots and would have banned political campaigns from using bots in disguised political ads. The first federal bot-disclosure proposal — never received committee action but inspired CA SB 1001 (2018, enacted) and NJ Bot Disclosure Act (2019, enacted).
-
Expired
Federal facial recognition moratorium (died)
United States · S. 4084 (2020) / S. 2052 (2021) / S. 681 (2023) — never marked up
Sens. Markey, Merkley, Sanders, Warren, and Wyden and Reps. Jayapal, Pressley, and Tlaib first introduced the Facial Recognition and Biometric Technology Moratorium Act on June 25, 2020 — and reintroduced it in 2021 and 2023. It would have banned all federal agency use of facial recognition and other biometric surveillance technologies, and conditioned federal grants on state/local moratoriums. Never received committee action across three congresses.
-
Expired
Algorithmic Justice Act (Markey/Matsui, died)
United States · S. 1896 / H.R. 3611, 117th Cong. (2021) — died in committee
Sen. Markey and Rep. Matsui's May 2021 bill would have banned discriminatory algorithmic processes on online platforms, required plain-language algorithm disclosure to users, and created a cross-agency task force on algorithmic discrimination. Died in committee but became a citation anchor for later FTC trade-rule petitions.
-
Expired
OBBBA §43201 (stripped)
United States · OBBBA §43201 — stripped July 1, 2025 (99-1); OBBBA enacted July 4, 2025
Section 43201 of the One Big Beautiful Bill Act (H.R. 1, 2025) would have imposed a 10-year moratorium on state AI laws. The Senate stripped it on a 99-1 vote on July 1, 2025 — the most significant failed federal preemption attempt against state AI regulation. The OBBBA was signed into law on July 4, 2025 without the AI moratorium.
-
Expired
FY26 NDAA AI preemption (failed)
United States · FY26 NDAA preemption amendment (S.Amdt. to S. 2296) — not adopted
A Cruz-led amendment to the FY26 NDAA would have preempted state AI regulation under a defense-nexus theory. The amendment was not adopted in conference, the second failed federal preemption attempt within a year.
-
Expired
APRA AI provisions (dead)
United States · APRA Discussion Draft (Apr. 2024) — pulled from markup June 27, 2024
The American Privacy Rights Act discussion draft (April 2024) included algorithmic impact assessment requirements. It was pulled from House markup in June 2024 — the last serious federal ADMT framework before the current 2026 federal drafts.