Several US states have moved ahead of federal legislation on AI governance. California has passed measures like AB 2013 (training-data transparency) and SB 942 (AI transparency for generative content), with additional consumer-privacy amendments tightening AI use of personal data. Colorado's SB 24-205 (the Colorado AI Act, effective February 2026) requires impact assessments, disclosure, and consumer rights to challenge "high-risk" automated decision systems used in employment, lending, education, housing, health, insurance, and government services.
Together, these laws signal that AI training and deployment will face meaningful state-level rules even absent federal action, and that "where the company is incorporated" and "where the user lives" are increasingly different jurisdictions with different requirements.