Indiana AI legislation 2026: a practical guide for business leaders

What Indiana AI laws actually exist in 2026?

Start with the honest picture. Indiana does not have a single sweeping AI law. There is no Indiana version of the Colorado Artificial Intelligence Act, the EU AI Act, or even Illinois House Bill 3773. What Indiana has, as of May 2026, is a small set of narrow, sector-specific statutes plus a privacy law that touches AI indirectly.

The four enacted Indiana laws that AI use will brush against:

• Senate Bill 150 (2024). Created the Indiana Artificial Intelligence Task Force and set rules for state-agency use of AI. Effective July 1, 2024. Inventory chapter expires December 31, 2027. Does not regulate private business use.
• House Bill 1620 (2025). Requires healthcare providers and insurers to disclose AI use to patients and insureds when AI informs treatment decisions, coverage decisions, or generated communications. Effective July 1, 2025.
• House Bill 1133 (2024). Requires a disclaimer on AI-generated political advertising. Took effect ahead of the 2024 primaries. A civil cause of action attaches when the disclaimer is missing.
• The Indiana Consumer Data Protection Act, Senate Bill 5 (2023). Effective January 1, 2026. Applies to entities controlling or processing personal data of 100,000+ Indiana residents, or 25,000+ residents if more than half of revenue comes from data sales. Indiana Attorney General has exclusive enforcement.

None of these is a general-purpose AI statute. None of them imposes a "high-risk AI system" classification, an algorithmic impact assessment requirement, or an employer notification obligation comparable to the Illinois or Colorado laws. What they do is set narrow guardrails in specific sectors and tie AI obliquely into the broader privacy regime.

The result is a regulatory environment that is calmer than the headlines suggest, but more demanding than a "no AI law" reading. Hoosier businesses are not covered by an Indiana AI act, but they are covered by the patchwork of out-of-state and federal rules that follow their employees and customers across borders. The Indiana question is not "what does Indiana require?" The Indiana question is "what does the rest of the regulatory environment require, and where does Indiana enforcement attach?"

What does Indiana SB 150 actually do?

Indiana Senate Bill 150 was signed by Governor Eric Holcomb on March 13, 2024. The AI Task Force became effective immediately upon signing, the inventory chapter took effect July 1, 2024, and later provisions effective July 1, 2025. It is the centerpiece of Indiana's state-level AI policy work to date.

What SB 150 does:

• Created the Indiana Artificial Intelligence Task Force. A study body charged with examining state-agency use of AI and recommending policy. The Task Force met during the 2024 interim and submitted its final report on October 31, 2024.
• Required state agencies to inventory AI systems. The Office of Technology coordinates an inventory of AI systems used by state agencies. The inventory chapter expires December 31, 2027 unless renewed.
• Set rules for entities connecting to state technology infrastructure. Vendors and partners with system-level access must meet specified requirements.

What SB 150 does not do, despite frequent confusion:

• It does not regulate private-sector AI use. A factory in Elkhart deploying an AI vision system, a bank in Indianapolis using a credit-scoring model, a marketing firm in Carmel running a content generator, none of them have a direct SB 150 compliance obligation.
• It does not classify AI systems by risk. No "high-risk" tier, no impact assessment requirement, no notification obligation to employees or consumers.
• It does not preempt municipal action. A city or county could in theory pass its own AI rule for local government use; SB 150 does not block that.

The Task Force's primary recommendation was modest: that the General Assembly establish a permanent interim study committee for emerging technologies, including AI, during regular sessions. As of May 2026 that recommendation has not been formally adopted, though the topic continues to circulate in committee discussion.

The practical read for a private business: SB 150 is a signal of legislative attention, not a compliance burden. The real compliance burden in Indiana for a private business is the privacy regime under SB 5, the healthcare AI disclosure under HB 1620 (if you are a covered entity), and any out-of-state or federal exposure your operations carry.

Why Indiana HB 1620 is the most concrete AI compliance burden today

If you operate in healthcare or health insurance in Indiana, House Bill 1620 is the rule that actually has teeth. It became effective July 1, 2025, and adds two new chapters to Indiana law: IC 16-51-2.5 for healthcare providers and IC 27-8-44 for insurers.

The bill requires:

• Healthcare providers must inform patients when AI technology is used to make or inform treatment decisions, or to generate communications to patients.
• Insurers must disclose to insureds when AI is used in coverage decisions or to generate communications about coverage.
• Health insurers cannot use AI as the sole basis to downcode a claim without medical-record review (per the related provisions effective July 1, 2026).
• Disclosure when AI informs an adverse prior authorization decision.
• Notification to providers when a claim is downcoded by AI-assisted review.

This is the single most practical Indiana-specific AI compliance burden a Hoosier business is likely to encounter today. It is narrow (healthcare and health insurance only), but it is concrete, it imposes affirmative disclosure obligations, and it has a defined effective date with downstream enforcement.

Indiana's most concrete AI rule in 2026 is not a general statute. It is a healthcare-disclosure rule. Almost no business outside healthcare has any direct Indiana-specific AI compliance burden today.

For healthcare leaders, the operational steps are straightforward and worth doing now: inventory every clinical and administrative AI system, classify which ones touch patient communications or treatment decisions, set the disclosure mechanism (visit summary language, intake forms, EHR-embedded notice, or whichever route the workflow supports), train the people who will deliver the disclosure, and document the inventory in a way that an auditor or plaintiff's lawyer would find defensible. None of those steps is novel. All of them are easier when the workforce understands what AI is doing inside the workflow, which is a capability question, not a compliance question.

How the Indiana Consumer Data Protection Act intersects with AI

Indiana's general privacy law, the Consumer Data Protection Act (INCDPA), passed in 2023 as Senate Bill 5 and took effect January 1, 2026. INCDPA is a privacy law, not an AI law, but the way modern AI systems consume personal data means it quietly governs a lot of AI activity in the state.

Three INCDPA provisions weigh heaviest on AI use:

• Data minimization and purpose limitation. Controllers can collect only the personal data adequate, relevant, and reasonably necessary for the purpose disclosed to the consumer. Training AI on personal data outside the disclosed purpose is a problem.
• Consumer rights. Indiana residents can request access, correction, deletion, and a portable copy of their data; can opt out of targeted advertising, the sale of personal data, and certain types of profiling that produce "legal or similarly significant effects." Profiling that drives an AI-powered hiring or credit decision is exactly the kind of activity this provision was designed to reach.
• Sensitive data handling. Health, biometric, immigration, religious, location, ethnicity, sexual orientation, citizenship, and children's data require explicit consent. AI training datasets that include sensitive categories carry compounded risk.

INCDPA applicability is gated by volume: 100,000 Indiana residents, or 25,000 residents with greater-than-50% revenue from data sales. A mid-market Indiana company that handles a few thousand customer records is technically below the threshold, but the prudent operating posture is to treat INCDPA as the floor, not the ceiling.

The Indiana Attorney General has exclusive enforcement authority, with a 30-day cure period before any action. There is no private right of action under INCDPA, which makes the enforcement profile narrower than (for example) California's CCPA. That does not make the law weak; it makes the enforcement concentrated.

What pending 2026 Indiana bills should leaders track?

The 2026 short session of the Indiana General Assembly adjourned in mid-March 2026 without passing any sweeping AI legislation. Two AI-adjacent bills moved during the session:

House Bill 1182

Authored by Rep. Maureen Bauer (D-District 6) with co-authorship from Rep. Craig Haggard (R-District 57). Would create a new criminal offense in Indiana law for the creation, possession, and distribution of AI-generated nonconsensual sexual images. The bill establishes accountability at the point of creation, not just distribution. Bipartisan support. The bill cleared its House committee but did not reach final passage in the short session.

House Bill 1201

Would prohibit the use of an AI system to impersonate or substitute for a licensed mental health professional. Referred to the House Committee on Insurance. Did not reach final passage in the short session.

The pattern is consistent with prior Indiana sessions: harm-specific bills addressing specific public concerns (deepfake pornography, mental-health impersonation, election integrity) move further than broad regulatory bills. The General Assembly has not introduced an Indiana version of the Colorado AI Act or the Illinois Human Rights Act amendments. There is no indication, as of May 2026, that one is forthcoming for the 2027 session.

What that means operationally: Indiana businesses planning a 2026-2027 AI compliance roadmap should not assume Indiana will introduce a sweeping AI statute. Plan for the rules that already exist, plus the cross-border exposure described below, and treat the Indiana statehouse as a slow-moving variable rather than a near-term forcing function.

What is the IN AI initiative and what does it mean for businesses?

On April 28, 2026, Governor Mike Braun announced IN AI, a statewide initiative to help Indiana businesses adopt artificial intelligence. The official announcement positioned the program as a workforce-development and adoption play, not a regulatory body.

The structural facts:

• Execution partner. The Central Indiana Corporate Partnership (CICP), a private consortium of large Indiana employers, executes the program. State agencies provide branding and convening; CICP runs the operational delivery.
• Stated reach. The program targets more than one million Hoosiers and thousands of employers statewide.
• Delivery channels. Roadshows, virtual sessions, regional partners, industry networks, economic development organizations, and a centralized digital platform at inaiready.com.
• Funding posture. The announcement positioned IN AI as a public-private partnership rather than a line-item state appropriation. Specific budget figures were not detailed in the launch.
• Endorsement. The Indiana Chamber of Commerce called IN AI a "forward-looking move in the right direction" in its same-day statement.

What IN AI is:

• A coordination layer for Indiana's AI adoption push.
• A digital platform for businesses to find resources, peer success stories, and pathways into AI projects.
• A statewide signal that Indiana wants to be perceived as AI-friendly to investment.

What IN AI is not:

• A regulator. There are no compliance obligations triggered by the initiative's existence.
• A funder. There is no significant grant pool announced as of the launch.
• A direct AI training program for the workforce. The platform points businesses toward existing resources, partners, and university connections; it does not itself deliver hands-on capability training.

The practical read for an Indiana business leader: IN AI is the front door for whatever AI policy posture the Braun administration intends to adopt, and watching the front door is useful. It is not a substitute for an internal AI strategy. Companies that engage with IN AI without their own capability plan will get peer events and resources; companies that engage with their own plan will get visibility, partnership opportunities, and a faster path to whatever workforce-development funding the program eventually attracts.

It is also worth naming what IN AI does not address. The initiative is built around adoption, not workforce capability measurement. The number of employees an Indiana company has at practitioner-level proficiency versus literacy-only exposure is the variable that determines whether AI investments produce measurable results. IN AI offers a coordination platform; it does not offer a measurement instrument.

How does the Illinois AI Act affect Indiana businesses?

This is the rule most Indiana businesses underestimate. Illinois House Bill 3773, effective January 1, 2026, amended the Illinois Human Rights Act (IHRA) to make it a civil rights violation for an employer to use AI in a way that subjects employees or applicants to discrimination, or to fail to notify employees and applicants when AI is used in employment-related decisions.

The covered employment decisions include recruitment, hiring, promotion, renewal of employment, selection for training or apprenticeship, discharge, discipline, and tenure, plus any other use that affects the terms, privileges, or conditions of employment. The notification requirement is broad.

Why this reaches Indiana businesses:

• Geographic proximity. Northwestern Indiana shares a labor market with Chicagoland. Companies in Lake County, Porter County, and along the I-65 / I-90 corridor routinely employ Illinois residents or assign Indiana employees to Illinois work.
• Remote work expansion. An Indianapolis-based company with even a single Illinois remote employee may meet the IHRA's "20 or more calendar weeks" applicability test.
• Recruiting reach. Indiana employers that recruit applicants from Illinois (which most large Indiana employers do) need to ensure AI screening tools meet Illinois notification rules for those applicants.
• Trucking and logistics. Indiana trucking, third-party logistics, and warehouse companies with Illinois drivers, dock workers, or terminal staff are exposed.

The Illinois Department of Human Rights released draft notice regulations during 2025-2026 that operationalize the disclosure obligation: timing of notice, form of notice, content of notice, retention obligations. The final regulations remain in flux as of May 2026, but the underlying statutory obligation took effect January 1.

The practical Indiana action: any Indiana employer that uses an AI tool in any employment decision should map which tools touch Illinois-resident applicants or Illinois-resident employees, and ensure the notification mechanism is in place. The audit work is not enormous; the consequences of skipping it can be substantial because IHRA violations carry civil rights remedies, including damages and injunctive relief.

How does the Colorado AI Act affect Indiana businesses?

The Colorado Artificial Intelligence Act (CAIA), originally signed by Governor Jared Polis in 2024, was scheduled to take effect on June 30, 2026. CAIA is the most ambitious U.S. state AI law to date, regulating both developers and deployers of "high-risk" AI systems used in consequential decisions: employment, lending, education, housing, insurance, healthcare, legal services, and government services.

Original CAIA requirements for deployers included:

• Implement a risk management program.
• Conduct algorithmic impact assessments before deploying a covered high-risk AI system.
• Notify consumers when a high-risk AI system is used in a consequential decision.
• Disclose specific information about the AI system's purpose, the types of data it uses, and known limitations.
• Annually review the system for algorithmic discrimination.
• Report incidents of algorithmic discrimination.

That is a heavier compliance burden than anything Indiana, Illinois, or most other states have imposed. The Colorado timeline has shifted twice. In April 2025 Senate Majority Leader Robert Rodriguez introduced SB 25-318 to soften CAIA's risk-management, impact-assessment, and discrimination-reporting obligations; the bill was killed before passage. In August 2025 Governor Polis signed SB 25B-004, postponing the effective date from February 1, 2026 to June 30, 2026 without altering the substantive requirements.

As of May 2026 no legislative softening has passed, but the courts have moved. xAI filed suit on April 9, 2026 seeking to enjoin CAIA on commerce-clause and First Amendment grounds. The U.S. Department of Justice intervened on April 24. On April 28 U.S. Magistrate Judge Cyrus Y. Chung issued a stipulated order under which the Colorado Attorney General will not initiate enforcement for fourteen days following the court's ruling on xAI's preliminary injunction motion. The June 30 effective date itself stands. What is paused is enforcement, and the rule-making process at the Colorado AG's office continues alongside.

Why Indiana businesses should track this anyway:

• Companies with Colorado employees, customers, or covered transactions are within scope of whatever the final CAIA rule is.
• Colorado is a leading-state legal environment. The pattern Colorado adopts often surfaces in subsequent state legislation, including in Indiana's neighbor states.
• Federal preemption challenges to CAIA could reshape the broader state AI regulatory environment, including any future Indiana statute.

The Indiana action: inventory whether the company has covered Colorado contacts, designate someone to track CAIA developments through 2026, and avoid building heavy CAIA-specific compliance until the rule stabilizes. A workforce that understands the underlying obligations (algorithmic impact assessment, AI inventory, discrimination monitoring) is portable across whatever the final rule looks like, which is one more reason to invest in capability rather than only in compliance paperwork.

Does the EU AI Act apply to Indiana businesses?

Yes, in some cases. The EU AI Act applies extraterritorially. Indiana businesses that sell into the EU, license AI systems used in the EU, or generate AI outputs intended for EU recipients can be in scope. The remaining provisions become applicable on August 2, 2026. The European Commission published the Digital Omnibus on AI on November 19, 2025, proposing to defer high-risk compliance: Annex III standalone systems to December 2, 2027 and AI embedded in regulated products under Annex I to August 2, 2028. The April 28, 2026 trilogue between Council and Parliament failed after twelve hours of talks over a sectoral product-safety carve-out. The next trilogue is scheduled for May 13, 2026. If the Omnibus is not adopted before August 2, 2026, the original AI Act timeline applies as written.

The exposure is concentrated in three Indiana sectors:

• Pharmaceuticals and life sciences. Indiana's pharma cluster (Eli Lilly, Roche Diagnostics, Cook, and the supplier base around them) routinely sells, licenses, and operates in EU markets. AI systems that touch EU patients, EU clinical trials, or EU regulatory submissions are within scope.
• Manufacturing and industrial automation. Indiana manufacturers exporting equipment with embedded AI to the EU need to evaluate the system against EU AI Act conformity requirements.
• SaaS and software vendors. Indiana-based software companies with even a small EU customer base face the question of whether their AI features fall into prohibited, high-risk, limited-risk, or minimal-risk categories under the EU framework.

Penalties for the most serious EU AI Act violations run up to thirty-five million euros or seven percent of global annual turnover, whichever is higher. The mid-tier penalties for high-risk system non-conformity run up to fifteen million euros or three percent of global turnover. These are not theoretical. The European Commission has been clear that enforcement against U.S. firms is a priority.

The practical step today is the inventory step: identify every AI system the company uses or sells, identify every EU market touch, and size the exposure with counsel. For most mid-market Indiana businesses, the answer will be "no significant EU exposure," and the inventory is a one-time exercise. For companies with EU operations or EU customers, the inventory is the precondition for any defensible compliance posture.

What does federal AI policy in 2026 mean for Indiana businesses?

Federal policy in 2026 has tilted toward asserting national authority over AI regulation and challenging state laws that the administration views as obstacles. Three actions stand out:

Executive Order 14365 (December 11, 2025)

Signed by President Trump and titled "Ensuring a National Policy Framework for Artificial Intelligence," EO 14365 instructs federal agencies to identify state AI laws that the administration views as obstructing a unified national policy and to act against them through litigation, preemption arguments, and federal contractor requirements.

AI Litigation Task Force (early 2026)

The Department of Justice established an AI Litigation Task Force to challenge state AI laws in federal court on commerce-clause, preemption, and other constitutional grounds. The Colorado AI Act, the Illinois Human Rights Act AI provisions, and similar laws are within scope.

National Policy Framework (March 20, 2026)

The administration released "A National Policy Framework for Artificial Intelligence: Legislative Recommendations," outlining the administration's preferred federal AI statute. The framework leans toward minimal-burden federal rules with explicit preemption of state law in covered areas.

The practical read for Indiana businesses:

• Federal AI policy is in active formation. Major federal legislation is plausible during the 2026-2027 window. Plan for both worlds.
• State AI laws may be narrowed or struck by federal action. Compliance posture built on a single state's specific requirements is fragile; compliance posture built on transferable practices (AI inventory, impact assessment, workforce capability) is durable.
• Federal contractor obligations are tightening. Indiana businesses with federal contracts (defense, healthcare, professional services to federal agencies, infrastructure) should expect AI-specific contract clauses and procurement requirements to expand.
• The intersection of state, federal, and international rules will produce inconsistencies. Counsel review on cross-border AI use cases is necessary, not optional, through this window.

Industry-specific implications for Indiana businesses

The legislative environment falls on sectors differently. Five Indiana-relevant industries have specific exposure profiles in 2026.

Healthcare and health insurance

Highest direct Indiana compliance burden today. HB 1620 imposes affirmative disclosure obligations effective July 1, 2025. Additional provisions on AI-driven downcoding take effect July 1, 2026. Plus the EU AI Act's high-risk classification of medical-device AI for any Indiana provider or insurer with EU operations.

Financial services and lending

Indirect Indiana burden through INCDPA's profiling-opt-out and sensitive-data rules. Direct Colorado exposure for any Indiana bank or fintech with Colorado customers when CAIA stabilizes. Federal exposure through Equal Credit Opportunity Act enforcement and CFPB guidance on AI-driven lending decisions.

Manufacturing and industrial automation

Limited Indiana compliance burden today. Significant EU AI Act exposure for any equipment with embedded AI exported to EU markets. Federal contractor exposure for Indiana manufacturers serving defense and federal infrastructure customers.

Logistics, trucking, and warehousing

Concentrated Illinois AI Act exposure because of the cross-border labor market. AI-driven hiring tools, dispatch routing, performance management systems, and disciplinary tools all need Illinois-side disclosure for Illinois workers. The Indiana statehouse has not addressed parallel issues for Indiana workers.

Government contractors and education

Indirect Indiana burden through SB 150's vendor requirements when connecting to state systems. Federal contractor obligations evolving rapidly through Executive Order 14365 and follow-on rules. Education-sector AI use governed at the K-12 level by 2025 Indiana legislation requiring AI policies in school corporations and charter schools (HB 1296), effective July 1, 2025.

What should Indiana business leaders actually do in 2026?

Three steps. None novel. All consequential.

Step 1. Inventory the AI systems in use

Most Indiana mid-market companies cannot produce an accurate list of every AI system in active use across the organization. Start there. The inventory captures: what the system does, what data it consumes, which protected categories it touches (employment, lending, healthcare, advertising, consumer data), which states' residents it interacts with, which jurisdictions are within scope, and who internally owns each system.

The inventory is a precondition for every other step. Counsel cannot scope exposure without it. Workforce capability cannot be measured against it without it. Vendor renewals cannot be evaluated without it. The inventory takes 4-8 weeks for a mid-market company doing it deliberately. It is worth the time.

Step 2. Run a capability audit on the workforce

Compliance posture without workforce capability is paper. The same Grant Thornton 2026 AI Impact Survey that found 78% of executives lack confidence in passing an AI governance audit also found that the operational shortfall is structural: companies have rushed AI deployment ahead of governance, ownership, and workforce capability.

A capability audit measures whether the team can actually operate AI systems responsibly, identify hallucinations, detect inappropriate outputs, escalate when something is wrong, and document the use in a way that satisfies disclosure obligations. It is a workforce question, not a policy question. A real capability audit takes about 90 days: pre-engagement assessment, 6-week intervention, post-engagement reassessment, and a written report.

Step 3. Track the live legislative environment

Federal AI policy, Indiana state activity, neighboring-state laws, EU enforcement, and litigation all move on independent timelines. A monthly update meeting and a daily-updated tracker is enough discipline for most mid-market companies. The AI Law Tracker at ailawtracker.org syncs daily from the Indiana General Assembly and Congress.gov; it is one route to keeping a current view without burning legal-team hours on raw bill-tracking.

The reason to track is not to react to every bill. It is to spot the small number of bills that will actually pass and prepare for them six to twelve months ahead of effective date. Most AI-policy bills die in committee. The ones that pass are predictable in retrospect, and the businesses that prepared early are the ones that absorbed the change without disruption.

Compliance posture without workforce capability is paper. Workforce capability without compliance posture is risk. Indiana businesses need both, and the capability piece is the slower of the two to build.

Indiana AI resources for business leaders

Useful references for ongoing tracking:

• AI Law Tracker. Daily-updated tracking of Indiana state and federal AI bills, with plain-English summaries. Built and maintained by LaunchReady.ai. Case study on how the tracker was built.
• Indiana General Assembly bill search. The official source for any Indiana bill text and status: iga.in.gov.
• State of Indiana AI Policy and Guidance. The Office of Technology and Management Performance Hub maintains state-agency AI policy documents at in.gov/mph/AI.
• IN AI platform. Governor Braun's adoption initiative and resource portal at inaiready.com.
• Indiana Attorney General Consumer Bill of Rights. The AG's plain-language guide to INCDPA consumer rights, published at the time of the law's effective date.
• The 7 Levels of AI Proficiency. The capability framework that gives leaders a measurable read on their workforce's actual AI readiness, separate from compliance posture.

Related reading: what is an AI capability audit, how to measure AI readiness in a team, AI proficiency vs literacy vs fluency.

Sources

1. Indiana General Assembly. "Senate Bill 150 - Artificial intelligence and cybersecurity." Enacted 2024. iga.in.gov/legislative/2024/bills/senate/150
2. Indiana Legislative Services Agency. "Artificial Intelligence Task Force Final Report." October 2024. iga.in.gov AI Task Force Final Report
3. Indiana General Assembly. "House Bill 1620 - Disclosure of artificial intelligence use." Enacted 2025, effective July 1, 2025. iga.in.gov/legislative/2025/bills/house/1620
4. Indiana General Assembly. "Senate Bill 5 - Consumer data protection." Enacted 2023, effective January 1, 2026. iga.in.gov/legislative/2023/bills/senate/5/details
5. Indiana General Assembly. "House Bill 1182 (2026 session)." Bill details. iga.in.gov/legislative/2026/bills/house/1182/details
6. State of Indiana. "Governor Braun Announces IN AI to Grow Jobs and Wages Through Human-Centered AI." April 28, 2026. events.in.gov IN AI announcement
7. WFYI. "Braun says AI can help Indiana businesses, launches new initiative." April 28, 2026. wfyi.org IN AI coverage
8. Indiana Capital Chronicle. "IN AI: Braun unveils artificial intelligence business portal." April 28, 2026. indianacapitalchronicle.com IN AI portal
9. Indiana Chamber of Commerce. "Indiana Chamber Calls 'IN AI' a Forward-Looking Move in the Right Direction." April 28, 2026. indianachamber.com IN AI statement
10. Illinois General Assembly. "House Bill 3773 - amending the Illinois Human Rights Act." Effective January 1, 2026. Reporting via Hinshaw & Culbertson, "Illinois Adopts New AI-in-Employment Regulations: What Employers Need to Know for 2026." hinshawlaw.com Illinois AI law guide
11. Colorado General Assembly. "SB24-205 Consumer Protections for Artificial Intelligence." leg.colorado.gov/bills/sb24-205
12. Morgan Lewis. "Colorado Takes a Major Step Towards Rewriting Its AI Law As Its Effective Date Approaches." April 2026. lawandtheworkplace.com Colorado AI rewrite
13. Holland & Knight. "U.S. Companies Face EU AI Act's Possible August 2026 Compliance Deadline." April 2026. hklaw.com EU AI Act deadline
14. The White House. "Eliminating State Law Obstruction of National Artificial Intelligence Policy." Executive Order 14365. December 11, 2025. whitehouse.gov EO 14365
15. Mayer Brown. "Trump Administration Issues Legislative Recommendations for a Federal Artificial Intelligence Framework." March 2026. mayerbrown.com federal AI framework
16. Indiana Capital Chronicle. "House panel advances bill criminalizing nonconsensual AI nudity." 2026. indianacapitalchronicle.com HB 1182 coverage
17. Troutman Pepper Locke. "Colorado Attorney General Delays Enforcement of Colorado AI Act." April 2026. Covers the xAI v. Colorado lawsuit, DOJ intervention, and the federal magistrate's stipulated enforcement-delay order. troutmanprivacy.com CAIA enforcement delay
18. IAPP. "AI Act Omnibus: What just happened and what comes next." April 2026. Coverage of the failed April 28, 2026 trilogue and the proposed deferral of high-risk AI Act obligations. iapp.org AI Act Omnibus trilogue
19. Grant Thornton. "2026 AI Impact Survey." Cited findings on executive AI audit confidence.

Harrison Painter

AI Business Strategist. Founder, LaunchReady.ai and AI Law Tracker.

Harrison helps teams build AI systems that cut cost and grow revenue. Nearly twenty years of business experience. 2.8M YouTube views. Founder of LaunchReady.ai and the 7 Levels of AI Proficiency framework. Author of You Have Already Been Replaced by AI and The White-Collar Factory is Closing.

Connect on LinkedIn