AI compliance for government agencies

Your regulatory exposure

Companies in Government and Public Sector using common AI tools could face up to 37 regulations across 20 states.

• Colorado AI Act (SB 24-205)

  Colorado's AI Act requires companies doing business in Colorado that develop or use high-risk AI systems for consequential decisions (employme...

  HighUpcoming
• CCPA/CPRA Automated Decision-Making Technology Regulations

  California's ADMT regulations require businesses using automated decisionmaking technology for significant decisions (employment, finance, hou...

  HighUpcoming
• Illinois Biometric Information Privacy Act (BIPA)

  Illinois BIPA requires written consent before collecting fingerprints, facial scans, voiceprints, iris scans, or hand geometry. Companies must...

  HighIn effect
• Colorado Privacy Act (CPA profiling and ADM)

  Colorado profiling rules define three tiers: Solely Automated Processing, Human Reviewed Automated Processing, and Human Involved Automated Pr...

  HighIn effect
• Connecticut Public Act 25-113 (SB 1295) CTDPA and profiling amendments

  Connecticut's omnibus bill dramatically expands the CTDPA. Lowers the applicability threshold from 100,000 to 35,000 consumers. Adds LLM train...

  HighUpcoming

Key obligations

• Impact assessments for AI-assisted government decisions
• Right to human review for benefits determinations
• Transparency notices for AI interactions with the public
• Bias audits with public reporting expectations
• Record-keeping for AI-assisted agency decisions

Risk factors

Upcoming deadlines

• May 19, 2026 · TAKE IT DOWN Act (S. 146)
• June 30, 2026 · Colorado AI Act (SB 24-205)
• July 1, 2026 · Connecticut Public Act 25-113 (SB 1295) CTDPA and profiling amendments
• January 1, 2027 · CCPA/CPRA Automated Decision-Making Technology Regulations

Related state guides

• California
• Texas
• Utah
• Colorado