AI Governance Profile
United States AI Governance Profile
Source-based profile of United States AI governance, tracking federal and state policy signals, agency guidance, standards activity, and enterprise implications.

Profile at a glance
Executive overview
Key signals for United States AI governance, structured for quick institutional review before the full profile analysis below.
Region
North America
Governance model
Sectoral and standards-led governance
Regulatory maturity
AdvancedEnterprise impact
HighPublic-sector readiness
DevelopingEnforcement maturity
DevelopingEnterprise implications
Enterprises should maintain a two-level compliance map. At federal level, monitor executive policy, OMB use and acquisition memoranda, NIST testing and documentation, FTC consumer-protection authority, procurement expectations and sector rules. At state level, assess whether Texas HB 149, California SB 53, Colorado’s 2027 regime, or another state statute applies to the product, developer, deployment or affected people. Proposed FTC or Colorado materials and voluntary NIST frameworks should not be treated as binding law, but they can signal implementation and enforcement expectations.
Read full enterprise implicationsMajor policy and regulatory signals
- AI in Government Act of 2020
- Executive Order 13960: Promoting the Use of Trustworthy Artificial Intelligence in the Federal Government
- Advancing American AI Act
- NIST AI Risk Management Framework 1.0
- Executive Order 14179: Removing Barriers to American Leadership in Artificial Intelligence
Key institutions
- National Institute of Standards and Technology
- Office of Management and Budget
- Federal Trade Commission
Watchlist
What We're Monitoring
Upcoming milestones, unresolved regulatory questions and implementation developments that may change the governance landscape.
- Federal agency implementation guidance
- State-level AI legislation
- Sector-specific enforcement activity
- NIST TEVV-Athlon and public-facing AI documentation drafts and comment outcomes
- NIST AITE evaluation scope, participation, and publication of comparable results
- FTC follow-up on the proposed AI-accuracy policy statement
- AI-related FTC enforcement and consumer-protection orders
- Implementation of NSPM-11 across federal agencies and national-security AI programmes
- Texas HB 149 implementation and Texas Attorney General enforcement or guidance
- California SB 53 implementation and frontier-AI enforcement activity
- Colorado’s 2027 commencement and final rules for automated decision-making and chatbot safety
- Additional state attorney-general AI enforcement and sector-specific state legislation
- Implementation of Executive Order 14434 terminology changes and any subsequent legislative proposal; distinguish executive direction from a future congressional change
- Use and evolution of NIST ARIA-style evaluation methods in federal assurance practice
- Follow-on NIST/NSA/CISA frontier-AI incident playbooks, technical updates or separately adopted binding agency/sector requirements; current ten practices are voluntary
Source basis
Official source basis
This profile is grounded in official laws, policy documents, regulator guidance, standards, and public-sector source materials listed below.
- White House Presidential Actions (opens in a new tab)
- OMB Memoranda Index (opens in a new tab)
- AI.gov (opens in a new tab)
- America’s AI Action Plan (opens in a new tab)
- Federal Register (opens in a new tab)
- NIST AI Risk Management Framework (opens in a new tab)
- AI in Government Act of 2020 (opens in a new tab)
- Executive Order 13960: Promoting the Use of Trustworthy Artificial Intelligence in the Federal Government (opens in a new tab)
Executive summary
The United States continues to rely on a federal mix of executive policy, agency authority, procurement direction, standards activity, and sectoral enforcement rather than a single comprehensive AI law. Since the previous review, NIST has expanded the federal testing and evaluation infrastructure through its AI Technology Evaluation programme, a draft TEVV-Athlon framework, and a public-facing AI documentation zero draft. These are voluntary, draft, or implementation-support instruments, not binding federal AI regulations.
The Federal Trade Commission has also proposed a policy statement on suppression of accuracy in AI systems and finalized orders against firms accused of deceptive claims about an AI-powered marketing service. Those developments strengthen the profile’s consumer-protection and enforcement signal without creating a new horizontal AI statute.
The state layer has also produced material developments. Texas HB 149 is effective from 1 January 2026; California’s SB 53 establishes current frontier-AI requirements; and Colorado’s enacted automated-decision and chatbot framework is scheduled for 1 January 2027, with Attorney General rulemaking materials published in August 2026. These state measures must remain distinct from federal guidance and from each other.
For federal agencies and enterprises, the current U.S. governance pattern is therefore a two-level, standards-led and enforcement-sensitive system: NIST measurement and risk-management resources, OMB federal-use and acquisition memoranda, White House national-security policy, agency authority, procurement controls, state statutes, state AG implementation, and sector-specific rules must be read together.
Governance architecture
The United States has a two-level AI governance architecture. Federal executive policy, OMB memoranda, agency authority, procurement, NIST standards and testing, and FTC enforcement form one layer; state legislatures and attorneys general form a second layer through statutes and implementation activity such as Texas HB 149, California SB 53, and Colorado’s enacted 2027 automated-decision regime. These layers should not be collapsed into a single federal AI code. NIST’s 2026 testing and documentation work expands voluntary assurance infrastructure, while FTC and state enforcement channels create practical compliance exposure.
Major policies and frameworks
| Policy | Issuer | Year | Status | Summary |
|---|---|---|---|---|
| AI in Government Act of 2020 | U.S. Congress | 2020 | Binding law | Statutory foundation for federal AI use, including OMB guidance, agency planning, the GSA AI Center of Excellence, and federal AI workforce provisions. |
| Executive Order 13960: Promoting the Use of Trustworthy Artificial Intelligence in the Federal Government | Executive Office of the President | 2020 | Executive order | Establishes principles for trustworthy AI use by federal agencies, including lawful, purposeful, accurate, safe, secure, understandable, responsible, and transparent AI use. |
| Advancing American AI Act | U.S. Congress | 2022 | Binding law | Federal statute supporting AI adoption and procurement within government, including OMB guidance and agency implementation responsibilities. |
| NIST AI Risk Management Framework 1.0 | National Institute of Standards and Technology | 2023 | Voluntary framework | Core voluntary U.S. AI risk-management framework organized around Govern, Map, Measure, and Manage functions. |
| Executive Order 14179: Removing Barriers to American Leadership in Artificial Intelligence | The White House | 2025 | Executive order | Current executive-policy anchor directing a pro-innovation federal AI policy reset and review of prior federal AI actions. |
| OMB M-25-21: Accelerating Federal Use of AI through Innovation, Governance, and Public Trust | Office of Management and Budget | 2025 | Memorandum | Core federal agency-use memorandum requiring AI governance, agency AI strategies, inventories, Chief AI Officers, and minimum practices for high-impact AI. |
| OMB M-25-22: Driving Efficient Acquisition of Artificial Intelligence in Government | Office of Management and Budget | 2025 | Memorandum | Federal AI procurement memorandum covering acquisition strategy, vendor competition, interoperability, privacy, intellectual property, data rights, and cross-functional review. |
| America’s AI Action Plan | The White House / AI.gov | 2025 | Policy plan | Current federal AI strategy document focused on innovation, infrastructure, and international diplomacy and security. |
| NIST Artificial Intelligence Technology Evaluation (AITE) | National Institute of Standards and Technology | 2026 | Voluntary testing and evaluation programme | NIST programme providing a sequestered testbed for volunteer evaluation of AI models using common data, metrics, and scoring across domains and modalities. |
| NIST TEVV-Athlon Framework for Evaluating AI Systems | National Institute of Standards and Technology | 2026 | Draft technical framework / public consultation | Initial public draft framework for testing, evaluation, verification, and validation processes across AI systems, including generative and agentic systems; comments are invited through 6 October 2026. |
| NIST Guidance and Templates for Public-Facing AI Documentation zero draft | National Institute of Standards and Technology | 2026 | Draft standards-development material | Initial public zero draft for guidance and templates on documenting public-facing AI systems; NIST is collecting input for a subsequent revision. |
| FTC proposed policy statement concerning suppression of accuracy in AI systems | Federal Trade Commission | 2026 | Proposed agency policy statement - not final or binding rule | Proposed statement addressing the application of Section 5 of the FTC Act to companies that market AI systems alleged to manipulate system behaviour contrary to reasonable consumer expectations. |
| FTC orders concerning deceptive claims about an AI-powered active-listening service | Federal Trade Commission | 2026 | Enforcement action | FTC finalized orders against Cox Media Group and two firms, requiring a total of $930,000 in settlements over alleged deception about an AI-powered marketing service and consumer consent. |
| National Security Presidential Memorandum NSPM-11 | The White House | 2026 | Presidential national-security memorandum / current federal policy directive | Federal national-security direction relevant to advanced AI, security, critical infrastructure and implementation coordination. It is executive policy, not a generally applicable statute or regulation. |
| Texas HB 149 — Responsible Artificial Intelligence Governance Act | Texas Legislature / Texas Attorney General | 2025–2026 | Binding state statute, effective 2026-01-01 | Texas AI governance statute creating state-level duties and enforcement mechanisms for covered AI activity. It is a state law and should not be described as federal regulation. |
| California SB 53 — Frontier Artificial Intelligence | California Legislature / California Attorney General | 2026 | Binding state statute | California frontier-AI statute creating state-level requirements and enforcement architecture for covered developers and systems. |
| Colorado automated-decision and chatbot AI regime | Colorado General Assembly / Colorado Attorney General | 2026 | Enacted state legislation — scheduled to apply 2027-01-01 | Colorado’s enacted automated-decision and chatbot safety framework is not yet applicable before 1 January 2027; the source page also tracks implementation materials. |
| Colorado Attorney General proposed AI rules | Colorado Attorney General | 2026 | Proposed implementing rules / rulemaking material | Proposed implementation materials for Colorado’s automated-decision and chatbot statutes. These are not final rules and should not be treated as currently binding requirements. |
| Executive Order: Advancing Artificial Intelligence Education for American Youth | The White House | 2025 | Executive order | Federal AI education and literacy order establishing an AI education task force, Presidential AI Challenge, K-12 partnerships, and educator training priorities. |
| NIST AI RMF: Generative Artificial Intelligence Profile | National Institute of Standards and Technology | 2024 | Voluntary framework profile | Generative AI companion profile to the NIST AI RMF, identifying risks unique to or exacerbated by generative AI and suggested risk-management actions. |
| NIST SP 800-218A: Secure Software Development Practices for Generative AI and Dual-Use Foundation Models | National Institute of Standards and Technology | 2024 | Technical guidance | Secure software development profile for generative AI and dual-use foundation models, useful for AI model producers, system producers, and acquirers. |
| GAO Artificial Intelligence Accountability Framework | U.S. Government Accountability Office | 2021 | Institutional report | Official accountability framework for AI oversight, organized around governance, data, performance, and monitoring. |
| Executive Order 14434 — Inaugurating the Era of Super Intelligence | White House | 2026 | Executive order — executive-branch direction within lawful authority | To the maximum extent permitted by law, departments and agencies must use “Super Intelligence” / “SI” in specified non-statutory executive-branch materials. Previously issued regulations, Presidential actions, contracts, grants and historical documents need not be altered. For this order SI incorporates the existing AI definition in 15 U.S.C. § 9401(3); Congress has not changed that statutory definition. This is not a new horizontal enterprise AI statute. |
| NIST ARIA Evaluation Planning Manual | National Institute of Standards and Technology | 2026 | Official technical / evaluation guidance — non-binding | ARIA-style evaluation planning combines model testing, red teaming and user testing. The manual is an official evaluation methodology, not binding federal AI law. |
| Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation | NIST CAISSI / NSA SISC / CISA | 2026 | Voluntary federal technical guidance — published 2026-10-16 | On 16 October 2026 NIST CAISSI, NSA SISC and CISA published ten voluntary practices for frontier AI / Super Intelligence training and evaluation. They cover preparation, detection, response, recovery and reporting, including significant uninstructed agent actions. This is technical guidance, not new binding legislation or a general incident-reporting mandate. |
Policy timeline
Milestones are grouped relative to the last review; source date precision is retained.
Recorded milestones
2020
AI in Government Act enacted
Congress establishes federal AI-in-government provisions, including OMB guidance, agency planning, the GSA AI Center of Excellence, and workforce-related measures.
2020
Executive Order 13960 establishes trustworthy AI principles for federal use
The federal government sets principles for trustworthy AI use by agencies, including lawful, purposeful, accurate, safe, secure, understandable, responsible, and transparent use.
2022
Advancing American AI Act enacted
Congress strengthens federal AI adoption and procurement direction, including OMB guidance and agency implementation responsibilities.
2023
NIST releases AI Risk Management Framework 1.0
NIST publishes the voluntary AI RMF, creating a common U.S. risk-management vocabulary around Govern, Map, Measure, and Manage.
2024
NIST releases Generative AI Profile and secure-development guidance
NIST publishes a generative AI profile for the AI RMF and related secure-development guidance for generative AI and dual-use foundation models.
Jan. 2025
Executive Order 14110 revoked
The White House rescinds prior executive actions, including EO 14110, requiring the U.S. profile to treat EO 14110-era executive policy as historical or superseded where applicable.
Jan. 2025
Executive Order 14179 resets federal AI policy direction
The White House issues a new AI executive order focused on removing barriers to American AI leadership and reviewing prior federal AI policies.
2025
HHS and DOL publish agency AI compliance and implementation materials
Federal agencies begin operationalizing OMB AI governance through compliance plans, strategies, governance boards, inventories, and workforce development initiatives.
Apr. 2025
OMB issues M-25-21 on federal agency AI use
OMB establishes current federal agency-use requirements, including Chief AI Officers, agency AI strategies, AI inventories, and high-impact AI risk practices.
Apr. 2025
OMB issues M-25-22 on federal AI acquisition
OMB sets current federal AI procurement expectations covering competition, interoperability, privacy, intellectual property, data rights, and acquisition review.
Apr. 2025
White House issues AI education executive order
The White House launches federal AI education and literacy initiatives, including an AI education task force, Presidential AI Challenge, and educator training.
Dec. 2025
OMB issues M-26-04 on public trust and unbiased AI principles
OMB issues additional AI guidance relevant to federal public trust and unbiased AI principles; full scope should be monitored through the OMB memoranda index.
2026-01-01
Texas HB 149 takes effect
Texas’s Responsible Artificial Intelligence Governance Act became effective as a state statute, creating a state-level governance and enforcement layer distinct from federal policy.
2026
California SB 53 establishes a frontier-AI state-law layer
California’s current SB 53 framework adds state-level frontier-AI requirements and enforcement architecture; it is not federal law.
June 2026
White House issues AI innovation and security executive order
The White House adds a frontier-model and AI security watchlist item, including voluntary review and cybersecurity coordination signals.
2026-06-05
NSPM-11 adds a federal AI national-security policy layer
The White House issued NSPM-11, adding current executive national-security direction relevant to advanced AI and implementation coordination; it is not a generally applicable statute or regulation.
2026-07 to 2026-08
NIST expands AI testing, evaluation, and documentation work
NIST launched AITE, released a draft TEVV-Athlon framework for public comment, and published a public-facing AI documentation zero draft, strengthening voluntary federal assurance and standards infrastructure.
2026-07-01
FTC proposed AI-accuracy policy statement
The FTC invited comment on a proposed policy statement applying Section 5 deceptive-practices principles to alleged suppression of accuracy in AI systems; it remains proposed agency policy, not a binding rule.
2026-08-11
Colorado Attorney General publishes proposed AI rules
The Colorado Attorney General published proposed implementing materials; these remain proposed rules, not final binding regulations.
2026-08-27
FTC finalized deceptive-AI marketing orders
FTC finalized orders requiring Cox Media Group and two other firms to pay $930,000 over alleged deceptive claims about an AI-powered marketing service and consumer consent.
2026-09-18
NIST ARIA Evaluation Planning Manual
Official technical / evaluation guidance — non-binding. ARIA-style evaluation planning combines model testing, red teaming and user testing. The manual is an official evaluation methodology, not binding federal AI law.
2026-09-29
Executive Order 14434 — Inaugurating the Era of Super Intelligence
Executive order — executive-branch direction within lawful authority. To the maximum extent permitted by law, departments and agencies must use “Super Intelligence” / “SI” in specified non-statutory executive-branch materials. Previously issued regulations, Presidential actions, contracts, grants and historical documents need not be altered. For this order SI incorporates the existing AI definition in 15 U.S.C. § 9401(3); Congress has not changed that statutory definition. This is not a new horizontal enterprise AI statute.
2026-10-16
NIST, NSA and CISA publish voluntary frontier-AI incident practices
On 16 October 2026 NIST CAISSI, NSA SISC and CISA published ten voluntary practices for frontier AI / Super Intelligence training and evaluation. They cover preparation, detection, response, recovery and reporting, including significant uninstructed agent actions. This is technical guidance, not new binding legislation or a general incident-reporting mandate.
Scheduled milestones
2027-01-01
Colorado automated-decision and chatbot regime scheduled to apply
Colorado’s enacted automated-decision and chatbot framework is scheduled for application from 1 January 2027, subject to final scope and implementation materials.
Enterprise implications
Enterprises should maintain a two-level compliance map. At federal level, monitor executive policy, OMB use and acquisition memoranda, NIST testing and documentation, FTC consumer-protection authority, procurement expectations and sector rules. At state level, assess whether Texas HB 149, California SB 53, Colorado’s 2027 regime, or another state statute applies to the product, developer, deployment or affected people. Proposed FTC or Colorado materials and voluntary NIST frameworks should not be treated as binding law, but they can signal implementation and enforcement expectations.
NIST’s ARIA methodology adds a practical federal reference for combining model testing, red teaming and user testing. It remains technical guidance rather than a generally binding enterprise requirement. The September executive order changes specified executive-branch terminology within lawful authority; it does not change Congress’s statutory AI definition or create a horizontal private-sector AI regime.
Organisations training or evaluating highly capable models can use the joint NIST/NSA/CISA practices to plan incident scenarios, escalation, containment, recovery and lessons learned. Voluntary reporting recommendations must remain distinct from independently applicable sector-specific cybersecurity or notification duties.
Observatory interpretation
The United States is best classified as a two-level, sectoral and standards-led governance system. Federal executive policy and agency authority remain central, but state statutes and state attorney-general activity now materially shape enterprise exposure. The profile therefore distinguishes federal directives, voluntary standards, proposed agency policy, enacted state law, future commencement dates, and enforcement actions rather than treating all U.S. AI policy as one national regime.
Official resources
| Resource | Source | Type | Date | Legal force | Why it matters |
|---|---|---|---|---|---|
Official source hub for executive orders, presidential memoranda, and presidential actions relevant to AI governance. Resource type: Official source hub. Legal force/status: Source hub. | The White House | Guidance | Current | Not applicable | Federal executive foundation, watchlist, and policy timeline. |
Official index for OMB memoranda, including current federal AI use and acquisition guidance. Resource type: Official source hub. Legal force/status: Source hub. | Office of Management and Budget | Guidance | Current | Not applicable | Federal agency governance, procurement, and implementation. |
Central federal AI portal for current administration AI initiatives, strategy, and public-facing AI policy resources. Resource type: Official portal. Legal force/status: Implementation signal. | The White House / AI.gov | Guidance | Current | Guidance | Current policy posture, AI Action Plan, and watchlist. |
Official portal for America’s AI Action Plan, organized around innovation, infrastructure, and international diplomacy and security. Resource type: Policy plan. Legal force/status: Policy plan. | The White House / AI.gov | Strategy | 2025 | Guidance | Strategic direction and current policy framing. |
Official publication source for executive orders, proposed rules, final rules, notices, and agency regulatory actions. Resource type: Official legal publication source. Legal force/status: Official publication record. | Office of the Federal Register | Law | Current | Not applicable | Executive orders, rules, official dates, and archival verification. |
Official NIST hub for the AI Risk Management Framework and related AI risk-management resources. Resource type: Framework hub. Legal force/status: Voluntary framework. | National Institute of Standards and Technology | Framework | 2023 | Voluntary | Risk management framework, enterprise implications, and governance model. |
NIST resource center supporting implementation of trustworthy and responsible AI practices, including AI RMF resources, playbooks, profiles, and crosswalks. Resource type: Implementation resource hub. Legal force/status: Official guidance / implementation support. | National Institute of Standards and Technology | Guidance | Current | Guidance | Risk-management operationalization and technical implementation. |
GAO source hub for AI accountability, oversight, federal implementation, and audit-related AI reports. Resource type: Official oversight hub. Legal force/status: Institutional report / oversight source. | U.S. Government Accountability Office | Report | Current | Not applicable | Accountability framework, federal oversight, and QA support. |
FTC AI topic hub covering consumer protection, deceptive AI claims, unfair or deceptive practices, and AI-related enforcement materials. Resource type: Agency topic hub. Legal force/status: Agency enforcement / implementation signal. | Federal Trade Commission | Enforcement case | Current | Guidance | Consumer protection, deceptive AI claims, and enterprise enforcement risk. |
EEOC resource hub on artificial intelligence, employment, disability rights, and ADA-related risks. Resource type: Agency guidance hub. Legal force/status: Official guidance. | Equal Employment Opportunity Commission | Guidance | Current | Guidance | Employment AI, civil rights, disability accommodation, and workforce implications. |
DOJ Civil Rights Division source for civil-rights enforcement and automated-system discrimination issues. Resource type: Agency enforcement hub. Legal force/status: Agency enforcement / civil-rights source. | U.S. Department of Justice | Enforcement case | Current | Guidance | Civil-rights enforcement and sectoral AI governance. |
HHS hub for AI strategy, compliance planning, governance, and responsible AI implementation in health and human services. Resource type: Agency implementation hub. Legal force/status: Agency strategy / implementation signal. | U.S. Department of Health and Human Services | Strategy | Current | Guidance | Health-sector governance and agency implementation. |
FDA source hub for AI and machine learning in software as a medical device, including regulatory pathways and lifecycle-management guidance. Resource type: Sectoral regulatory guidance hub. Legal force/status: Official guidance / sectoral regulatory source. | U.S. Food and Drug Administration | Guidance | Current | Guidance | Health AI, medical-device AI, and sectoral regulation. |
DOL source hub for AI compliance plans, strategies, inventories, workforce guidance, and AI literacy materials. Resource type: Agency implementation hub. Legal force/status: Agency strategy / implementation signal. | U.S. Department of Labor | Strategy | Current | Guidance | Workforce, labor, AI literacy, and agency implementation. |
DHS source hub for homeland-security AI use, AI inventories, public-sector deployment, and agency AI strategy. Resource type: Agency implementation hub. Legal force/status: Agency strategy / implementation signal. | U.S. Department of Homeland Security | Strategy | Current | Guidance | Federal agency governance, public-sector AI, and security-related implementation. |
CISA source hub for AI cybersecurity, critical infrastructure, secure AI adoption, and cyber-risk coordination. Resource type: Cybersecurity guidance hub. Legal force/status: Official guidance / cybersecurity implementation signal. | Cybersecurity and Infrastructure Security Agency | Guidance | Current | Guidance | AI cybersecurity, enterprise risk, and critical-infrastructure governance. |
Official source for federal statutes, bills, public laws, and legislative history relevant to AI governance. Resource type: Official legislative source. Legal force/status: Binding law / bill record source. | U.S. Congress | Law | Current | Binding | Statutory foundation and policy timeline. |
Official congressional research reports useful for policy background, legal context, and federal AI governance synthesis. Resource type: Official secondary research source. Legal force/status: Official secondary source. | Congressional Research Service | Report | Current | Not applicable | Source triangulation, legal-background context, and research QA. |
NIST’s sequestered, volunteer AI model evaluation programme using common data, metrics, and scoring. | National Institute of Standards and Technology | Report | 2026-07-27 | Not applicable | Concrete federal testing infrastructure for AI performance comparison and evaluation integrity. |
Initial public draft of a framework for AI testing, evaluation, verification, and validation, open for comment through 2026-10-06. | National Institute of Standards and Technology | Standard | 2026-08-07 | Draft | Adds current U.S. assurance and technical-standardisation activity; it is not a final standard or binding rule. |
Initial public zero draft for public-facing AI documentation guidance and templates. | National Institute of Standards and Technology | Standard | 2026-07-29 | Draft | Signals emerging documentation practice while preserving the distinction between a draft standards input and a final requirement. |
Proposed FTC policy statement on applying Section 5 principles to AI accuracy and alleged manipulation of AI system behaviour. | Federal Trade Commission | Guidance | 2026-07-01 | Proposed | A live consumer-protection policy signal, but not a final policy or binding rule. |
Finalized FTC orders and settlements concerning alleged deception about an AI-powered marketing service and consumer consent. | Federal Trade Commission | Enforcement case | 2026-08-27 | Not applicable | Concrete enforcement evidence for deceptive AI claims and privacy/consent risk. |
Current federal presidential memorandum on AI-related national-security policy and implementation. | The White House | Public-sector rule | 2026-06-05 | Binding | Adds a federal executive-policy layer relevant to advanced AI and security without presenting it as a generally applicable statute. |
Binding Texas AI statute effective 1 January 2026. | Texas Legislature / Texas Attorney General | Law | 2026-01-01 | Binding | Shows that material U.S. AI governance now exists at state level and must be assessed separately from federal guidance. |
Official implementation and consumer-protection page explaining AI-related rights and complaint pathways under Texas law. | Texas Attorney General | Enforcement case | 2026 | Guidance | Provides the state implementation and enforcement-facing source for HB 149. |
Official California source for the current frontier-AI statute and implementation information. | California Legislature / California Attorney General | Law | 2026 | Binding | Adds a distinct state frontier-AI regime to the U.S. profile. |
Official Colorado implementation page for enacted automated-decision and chatbot safety legislation scheduled to apply from 1 January 2027. | Colorado Attorney General | Law | 2026 | Binding | Preserves the distinction between enacted law and its future application date. |
Proposed implementation materials for Colorado AI statutes. | Colorado Attorney General | Guidance | 2026-08-11 | Proposed | A live rulemaking signal, but not final binding regulation. |
Executive order — executive-branch direction within lawful authority. To the maximum extent permitted by law, departments and agencies must use “Super Intelligence” / “SI” in specified non-statutory executive-branch materials. Previously issued regulations, Presidential actions, contracts, grants and historical documents need not be altered. For this order SI incorporates the existing AI definition in 15 U.S.C. § 9401(3); Congress has not changed that statutory definition. This is not a new horizontal enterprise AI statute. | White House | Public-sector rule | 2026-09-29 | Binding | Review executive-branch terminology in new federal documents without treating it as a generally binding private-sector AI regime. |
Official technical / evaluation guidance — non-binding. ARIA-style evaluation planning combines model testing, red teaming and user testing. The manual is an official evaluation methodology, not binding federal AI law. | National Institute of Standards and Technology | Guidance | 2026-09-18 | Guidance | Use as a practical assurance reference; no generally binding enterprise evaluation duty is created. |
Joint technical document setting out ten voluntary practices across five incident-management stages for highly capable agents. | NIST CAISSI / NSA SISC / CISA | Guidance | 2026-10-16 | Voluntary | Supports incident readiness without imposing a general nationwide notification duty. |
On 16 October 2026 NIST CAISSI, NSA SISC and CISA published ten voluntary practices for frontier AI / Super Intelligence training and evaluation. They cover preparation, detection, response, recovery and reporting, including significant uninstructed agent actions. This is technical guidance, not new binding legislation or a general incident-reporting mandate. | National Institute of Standards and Technology | Report | 2026-10-16 | Not applicable | Confirms publication, joint authorship, intended audience and voluntary status. |
