United States AI Governance Cheat Sheet — Free reference

Key laws

Colorado AI Act C.R.S. § 6-1-1701: definitions including "high-risk artificial intelligence system" and "consequential decision"
Colorado AI Act C.R.S. § 6-1-1702: developer obligations — reasonable care to protect from algorithmic discrimination, documentation duties
Colorado AI Act C.R.S. § 6-1-1703: consumer notice and disclosure requirements when AI is used in consequential decisions
Colorado AI Act C.R.S. § 6-1-1704: deployer obligations — risk management programme, impact assessments
Texas TRAIGA Section 1: definitions and scope (developer / deployer)
Texas TRAIGA Section 5: prohibited AI uses (intentional discrimination, behavioural manipulation, social scoring)
Texas TRAIGA Section 6: transparency and disclosure requirements for consumer-facing AI
Texas TRAIGA Section 11: AG enforcement, civil penalties, regulatory sandbox

Re-map your governance against the NIST AI RMF (1.0 plus the 600-1 Generative AI Profile). EO 14179 (23 Jan 2025) revoked EO 14110; NIST AI RMF is now the federal de-facto reference.
Colorado AI Act (SB 24-205) takes full effect 1 February 2026. Anyone making consequential decisions about Colorado residents needs an impact assessment + a risk-management programme in place.
NYC Local Law 144 bias audits — confirm the audit is current (annual cadence) and the summary results are publicly posted at least 10 business days before use.
California CCPA + CPRA ADM regulations (final rules effective 1 January 2026) require pre-use notice + opt-out + risk assessments. Confirm your privacy notice covers AI-driven decisions.
Sector overlays: financial services align with NYDFS Cybersecurity Regulation 23 NYCRR 500 updates; healthcare AI confirm 21st Century Cures Act + HIPAA controls; check FTC Section 5 enforcement on deceptive AI claims.

One-page .docx · ~10 KB · free. You'll also be subscribed to the weekly Brief.