In 2025, state legislatures across the country passed 159 AI-related laws. That's not a typo. One hundred and fifty-nine separate pieces of legislation governing how artificial intelligence can be used, deployed, disclosed, and regulated — in a single year.
As of July 1, 2026, states had already enacted another 109. The pace isn't slowing. If anything, it's accelerating.
If your business uses AI — for hiring, customer service, marketing, pricing, content generation, anything — this matters whether you know it or not.
The Scale of What's Happening
According to tracking by Tech Policy Press and the NYU Center on Technology Policy, 46 states enacted AI legislation in 2025. Over 1,200 AI bills were introduced nationwide. The categories range from consumer protection to employment discrimination to child safety to data center regulation.
The hottest category in 2026 is companion chatbot regulation — laws requiring AI chatbots to disclose they're not human and to address risks around minors and self-harm. Fourteen states have enacted chatbot laws this year alone.
But that's just one category. States are also regulating AI in insurance underwriting, dynamic pricing, healthcare, professional licensing, law enforcement, education, and political advertising. If AI touches a part of your business, there's probably a state law that applies to it — or will by next year.
The Federal Pushback That Didn't Work
The Trump administration has actively tried to slow this down. A group of Republican senators proposed a moratorium on state AI laws as part of budget reconciliation. President Trump issued an executive order creating an AI Litigation Task Force to challenge state laws that weren't "minimally burdensome." The Commerce Department was directed to explore withholding federal broadband funding from states that enact "onerous" AI laws.
None of it worked. States kept passing laws. The federal government can't stop state legislatures from legislating — it can only challenge the laws after they're passed or threaten funding. And so far, states are calling the bluff.
What This Means for Your Business
Most business owners aren't tracking this. They're using AI tools that were adopted months or years ago without anyone checking whether the usage complies with state law. Here are the areas most likely to affect a typical business:
Hiring and employment. Several states now require disclosure when AI is used in hiring decisions. Some prohibit AI-based screening that produces discriminatory outcomes. If you're using any automated tool to filter resumes or evaluate candidates, you may already be subject to requirements you haven't seen.
Customer-facing AI. Laws around chatbot disclosure, AI-generated content labeling, and synthetic media are spreading fast. If your website has a chatbot, if you use AI to generate marketing content, or if you deploy AI for customer service, disclosure requirements may apply.
Pricing and insurance. Dynamic pricing algorithms and AI-driven insurance underwriting are both under active regulation. If your pricing adjusts automatically based on AI analysis, some states want to know about it.
Data and privacy. AI systems that process personal data are increasingly subject to state privacy laws. The connection between AI and existing privacy frameworks is getting tighter — and the penalties for getting it wrong are getting larger.
The Colorado Angle
Colorado has been at the forefront. The state's landmark AI Act was passed in 2024, then repealed and replaced in 2026 with a narrower law focused on transparency. We covered that shift in June. But Colorado isn't done — legislators continue to introduce and pass AI-related bills, and the regulatory landscape here is still evolving.
For businesses operating in Colorado, the message is clear: the rules are changing faster than most people can track, and "I didn't know" isn't a defense.
What to Do About It
You don't need to read 159 laws. But you do need to know which ones apply to you. Here's a practical approach:
- Inventory your AI usage. What AI tools are you using? What data do they touch? Who in your organization adopted them? If you can't answer these questions, start there.
- Check the categories. Look at the five areas above — hiring, customer-facing AI, pricing, data privacy, and content generation. If you're using AI in any of them, you need to understand the requirements.
- Document your decisions. When you choose to deploy (or not deploy) an AI tool, write down why. Regulators and plaintiffs' attorneys are increasingly asking businesses to show that they considered the risks — not just that they didn't mean any harm.
- Get help when you need it. AI regulation is a moving target. The laws passed in 2025 are already being amended, challenged, and supplemented. You need someone who tracks this so you don't have to.
The Bottom Line
One hundred and fifty-nine laws in a year is not a trend. It's a framework. States have decided that AI is too consequential to leave unregulated, and they're building the rules in real time. The businesses that get ahead of this will treat AI compliance the way they treat cybersecurity — as an ongoing practice, not a one-time checkbox.
The ones that don't will find out about the rules the hard way. If you're not sure where your business stands, talk to someone who can help you find out — before someone else asks you to.