The US AI compliance landscape without a federal AI law

The absence of a comprehensive federal AI law in the US does not mean the absence of AI compliance obligations. It means that those obligations are distributed across multiple federal agencies and an increasingly active state legislative landscape, creating a more complex compliance environment than a single comprehensive law would produce. Organisations that assume they have no AI governance obligations because there is no federal AI law are consistently surprised when enforcement actions materialise.

The core of US AI compliance in 2026 is the application of existing federal law to AI contexts. Section 5 of the FTC Act prohibiting unfair or deceptive acts and practices, the Equal Credit Opportunity Act and Fair Housing Act prohibiting discriminatory lending, Title VII of the Civil Rights Act prohibiting employment discrimination, and the healthcare privacy and safety frameworks, all apply to AI with full force. The agencies enforcing these laws have been active in developing AI-specific interpretations and pursuing enforcement.

FTC enforcement on AI

The Federal Trade Commission has been the most broadly active federal regulator on AI, drawing on its Section 5 authority to address AI across sectors. FTC AI enforcement themes include: false capability claims (AI products marketed with capabilities they do not have), discriminatory outcomes (AI systems that produce discriminatory results in consumer-facing contexts), privacy violations (AI systems that collect or use data in ways that violate the FTC Act), and dark patterns (AI-assisted interface design that manipulates consumers). The FTC has also issued guidance requiring that organisations using AI be able to explain their AI systems' decisions to affected consumers, guidance that creates de facto explainability requirements for consumer-facing AI.

State law compliance map

Illinois's Artificial Intelligence Video Interview Act (AIVIA) requires employers using AI to evaluate job applicants via video interviews to: disclose before the interview that AI is being used, explain how the AI works and what characteristics it evaluates, obtain consent before the interview, and limit sharing of interview recordings. Illinois is the most enforced state AI employment law and has generated significant litigation.

Colorado's AI Act (HB 24-1468), passed in 2024, created obligations for developers and deployers of high-risk AI systems, but its enforcement has been stayed pending amendments to address concerns about its scope and application. Organisations should monitor Colorado AI Act developments closely as the amendments may produce a revised law with different obligations.

Texas's Responsible Artificial Intelligence Governance Act (TRAIGA, HB 149), effective 1 January 2026, takes an intent-based approach rather than the Colorado-style impact-assessment model of its abandoned HB 1709 draft. It prohibits AI used to intentionally discriminate or to enable certain unlawful conduct, governs state-agency AI use, and requires disclosure by government bodies and healthcare providers. It is enforced exclusively by the Texas Attorney General, with no private right of action and a 60-day notice-and-cure period.

Further reading: NIST AI RMF

Related reading

Further reading: NIST AI RMF