Three AI laws took effect on January 1. Here is who they reach.

In short: on January 1, 2026 three state AI laws took effect: Texas’s Responsible Artificial Intelligence Governance Act, California’s frontier-model transparency law (SB 53) and Illinois’s amendment on AI in employment decisions. Most employers are touched by Illinois if they have staff or applicants there; most other organizations feel Texas through its prohibited uses and its NIST-based defense; only a handful of model developers are directly covered by SB 53.^1,2,3

January 1, 2026 brought three state AI laws into force on the same day. They differ in who they cover, and a quick map saves a lot of misplaced worry. This briefing is educational, not legal advice.

Texas: the Responsible Artificial Intelligence Governance Act

HB 149 applies to anyone doing business in Texas or deploying AI there. It prohibits AI systems intended to incite self-harm or crime, to unlawfully discriminate against a protected class, to infringe constitutional rights or to produce certain abusive content, and requires government agencies, and health-care providers in treatment contexts, to disclose when people are interacting with AI. Enforcement belongs to the Attorney General alone, with a 60-day cure period and no private right of action. A defendant is not liable for a violation it discovers itself, through feedback, adversarial or red-team testing, state agency guidelines, or an internal review process run in substantial compliance with the NIST AI Risk Management Framework’s Generative AI Profile or another recognized framework.¹

Who it reaches: most private companies feel it mainly through the prohibited uses and the framework defense. That defense is a practical reason to align your program to NIST now.

California: SB 53, the Transparency in Frontier Artificial Intelligence Act

Signed on September 29, 2025, SB 53 requires large frontier developers to publish safety frameworks, and every frontier developer to report critical safety incidents to the state’s Office of Emergency Services within 15 days, or within 24 hours to an appropriate authority where an incident poses an imminent risk of death or serious physical injury, with civil penalties of up to $1 million per violation.²

Who it reaches: a small number of model developers directly. For everyone else it is a source of documentation: ask your model providers for their published frameworks, alongside the documents they now owe under the EU rules for general-purpose models.

Illinois: HB 3773, AI in employment decisions

From January 1, the Illinois Human Rights Act requires employers to notify employees when AI is used for covered employment decisions such as hiring, promotion and discipline, and prohibits using AI in ways that discriminate against protected classes.³

Who it reaches: any employer with Illinois employees or applicants that uses AI in employment decisions, including tools bought from vendors.

California employers already had a deadline

California employers are covered by a separate rule that came earlier. Since October 1, 2025, regulations under the state’s Fair Employment and Housing Act make clear that discrimination through an automated-decision system can violate the Act, extend liability to agents such as staffing firms and software vendors acting for the employer, treat anti-bias testing as relevant evidence, and require employers to keep automated-decision data for four years.⁴ An employer with staff in both states therefore needs the Illinois notice and the California records.

What is next on the calendar

• June 30, 2026 (superseded): the Colorado AI Act was due to apply on this date, after a law signed on August 28, 2025 moved it from February 1 without changing its substance.⁵ It never did: SB 26-189 repealed and replaced it in May 2026, and the new law applies from January 1, 2027 (see the update note above).
• August 2, 2026: California’s AI Transparency Act (SB 942) becomes operative, after AB 853, signed on October 13, 2025, set the date and extended duties to large online platforms and capture devices.⁶
• January 1, 2027: California’s privacy regulator’s rules on automated decision-making technology require pre-use notice, opt-out and access rights for significant decisions.⁷
• New York City’s rule on automated employment decision tools has applied since July 2023.⁸
• Executive Order 14365 (December 2025) directs federal challenges to state AI laws but does not suspend any of them; see what the order does and does not do.⁹

The first task of the year is short: list the AI systems that touch hiring, promotion or employee evaluation, note where the affected people live and work, and check that the Illinois notice and the California records are in place for each. The AIMP program’s Module 6 keeps the state map current for managers.