US States Enact Sweeping New Regulations on AI, Privacy, and Repair Rights
State legislatures have rolled out dozens of new laws reshaping how technology companies handle artificial intelligence, personal data, and device maintenance. These measures target risks from AI deployment while expanding consumer protections against data collection and restrictive repair practices. Many provisions focus on transparency requirements for powerful AI systems and restrictions on manipulative digital features.
California now requires major AI developers to publish detailed safety and security protocols. The law also establishes whistleblower protections for employees reporting risks. Separate rules mandate chatbot providers to implement safeguards preventing self-harm encouragement and periodic reminders to minors that systems lack human qualities.
Law enforcement agencies in California must disclose when using AI tools in operations. Nevada mandates labeling for AI-generated content in political advertising, allowing candidates to pursue legal action against undisclosed synthetic media. Oregon expands bans on nonconsensual intimate imagery to include AI-manipulated deepfakes.
Multiple states strengthen data privacy frameworks. Indiana, Kentucky, and Rhode Island adopt models requiring disclosure of personal information sales with opt-out mechanisms. Oregon prohibits selling data from users under 16 and targeted advertising based on such information.
Right to repair laws expand in Colorado and Washington. Manufacturers must provide tools, parts, and diagnostics for consumer electronics, prohibiting software locks like parts pairing. Colorado’s rule covers a broad range of devices, while Washington’s includes specific protections for wheelchair users.
Social media platforms face new restrictions in Virginia, limiting daily usage for users under 16 to one hour per app unless parents adjust settings. Nebraska curbs addictive design elements in apps aimed at children, including infinite scrolling and push notifications.
Additional measures address emerging threats. Colorado imposes limits on cryptocurrency ATM transactions to combat scams. Maine requires subscription services to make cancellation as straightforward as signup. These collective rules create a fragmented regulatory environment for national tech firms operating across state lines.
Industry observers note potential conflicts with federal efforts to centralize oversight. Certain AI-focused provisions already face challenges amid debates over innovation versus risk mitigation. The laws establish varying compliance burdens depending on operational scope and user demographics.
