Section 230 provides significant immunity to online platforms for third-party content posted by users. It is particularly relevant to AI chat systems, social platforms, marketplaces, moderation systems, and products involving user-generated or AI-assisted content, although important limitations and ongoing legal challenges exist.
Section 5 prohibits unfair or deceptive acts or practices in commerce and serves as the FTC's primary authority for regulating deceptive AI claims, unfair automated systems, and problematic data practices. It applies broadly to technology companies making representations about AI capabilities, automation, security, personalization, or algorithmic decision-making.
Federal law criminalizing the nonconsensual publication of intimate deepfake images and requiring platforms to remove such content within 48 hours of a victim's request. Applies to any platform hosting user-generated content.
Restricts the use of AI in healthcare decisions, including limits on using AI systems to deny or delay medical claims without human review. Applies to health insurers and healthcare providers operating in Arizona.
Requires developers of generative AI systems to publicly disclose summaries of training data used, including sources, data types, and whether the data includes personal information. Aims to increase transparency in how AI models are built.
Requires providers of generative AI systems to offer tools that allow users to identify AI-generated content, including watermarking or labeling mechanisms. Applies to systems that generate text, images, audio, or video.
Requires bots that interact with consumers online to disclose that they are not human. Applies to companies operating automated online accounts for commercial transactions or influencing consumer decisions in California.
Requires developers of large-scale frontier AI models to implement safety protocols, conduct risk assessments, and make public disclosures about model capabilities and limitations before deployment.
Colorado AI Act — Colo. Rev. Stat. §§ 6-1-1701–6-1-1707
Colorado's original AI Act (SB 24-205) was repealed and replaced with a new framework effective January 1, 2027. The replacement narrows the scope and adjusts obligations for developers and deployers of high-risk AI systems used in consequential decisions involving employment, housing, lending, healthcare, and education.
Prohibits employers from using AI systems that discriminate against applicants or employees based on protected characteristics. Requires notice and disclosure when AI is used in employment decisions beyond just video interviews.
Requires disclosure when AI-generated content is used in certain commercial contexts. Relevant for marketing, media, and content companies using AI-generated images, text, or video in commercial communications.
Restricts the use of AI chatbots and automated systems for providing mental health therapy or counseling services. Part of a growing trend of states limiting AI in sensitive healthcare contexts.
Illinois Artificial Intelligence Video Interview Act
IL AI Video Act — 820 ILCS 42/1 et seq.
Regulates the use of artificial intelligence analysis of applicant video interviews in Illinois, requiring notice to applicants, consent, and limits on who may view the video.
Requires employers to obtain consent before using facial recognition technology or AI-driven analysis during employment interviews. Prohibits use of facial recognition on job applicants without written consent.
Requires certain social media platforms to provide transparency about algorithmic ranking and content recommendation systems, including how content is prioritized and surfaced to users.
Requires disclosure when automated software (bots) are used in online sales, advertising, or election-related communications to influence consumer or voter decisions in New Jersey.
First US law regulating automated employment decision tools (AEDTs). Requires employers using AEDTs in hiring or promotion to conduct an independent bias audit and provide notice to candidates.
Protects musicians and other artists against unauthorized AI-generated reproductions of their voice or likeness. First state law to explicitly extend right-of-publicity protections to cover AI-generated content.
TRAIGA establishes governance requirements for certain AI systems used in consequential decision-making and public-sector contexts. It is particularly relevant to companies deploying automated systems affecting consumers, employment decisions, or government-related services in Texas.
Utah's AI law requires certain disclosures when generative AI systems interact with consumers in regulated professional contexts. It may apply to businesses deploying AI chatbots, automated support systems, or AI-generated communications involving consumer-facing services.
The EU AI Act establishes a comprehensive risk-based regulatory framework for artificial intelligence systems, including obligations for high-risk systems, transparency requirements, and governance rules for general-purpose AI models. It applies extraterritorially to many companies offering AI systems or AI-generated outputs to users in the European Union, even if the company is based in the United States.
