For journalists · Data checked 15 Oct 2026
Citable figures on AI laws, deadlines, fines and the vendor market — computed from our source-cited datasets and updated automatically. Every figure has its own link, the date it is true for, what it counts, and its source.
From our state AI law tracker: the major AI-specific laws and bills in each state, each cited to the legislature.
9states have a major AI law in force
Nine US states have at least one major AI law in force as of 19 Oct 2026, and New York City has its own, according to the AI Compliance Vendors state AI law tracker.
Counts the 24 major AI-specific laws and bills in our tracker, each cited to the legislature — not every AI-related bill. Trackers that count all AI-related legislation report higher numbers.
As of 19 Oct 2026 · data checked 14 Oct 2026 · State AI law tracker
18major state and city AI laws in force
18 major state and city AI laws were in force as of 19 Oct 2026, across 9 states and New York City.
Counts the 24 major AI-specific laws and bills in our tracker, each cited to the legislature — not every AI-related bill. Trackers that count all AI-related legislation report higher numbers.
As of 19 Oct 2026 · data checked 14 Oct 2026 · State AI law tracker
2enacted laws take effect in the next 12 months
Two enacted state AI laws take effect in the next 12 months: Colorado SB 26-189 on 1 Jan 2027 and New York S 6953B (RAISE Act) on 1 Jan 2027.
Counts the 24 major AI-specific laws and bills in our tracker, each cited to the legislature — not every AI-related bill. Trackers that count all AI-related legislation report higher numbers.
As of 19 Oct 2026 · data checked 14 Oct 2026 · State AI law tracker
2major AI bills pending
Two state AI proposals in our tracker are pending: New York A 768 and Massachusetts AI bills.
Counts the 24 major AI-specific laws and bills in our tracker, each cited to the legislature — not every AI-related bill. Trackers that count all AI-related legislation report higher numbers.
As of 19 Oct 2026 · data checked 14 Oct 2026 · State AI law tracker
2major AI bills vetoed or failed
Two major state AI bills in our tracker did not become law: Maryland HB 1331 (2025) died in committee and Virginia HB 2094 was vetoed.
Counts the 24 major AI-specific laws and bills in our tracker, each cited to the legislature — not every AI-related bill. Trackers that count all AI-related legislation report higher numbers.
As of 19 Oct 2026 · data checked 14 Oct 2026 · State AI law tracker
4major AI laws in force in each of California and Maryland
California and Maryland each have the most major AI laws in force in our tracker: 4 each.
Counts the 24 major AI-specific laws and bills in our tracker, each cited to the legislature — not every AI-related bill. Trackers that count all AI-related legislation report higher numbers.
As of 19 Oct 2026 · data checked 14 Oct 2026 · State AI law tracker
From our deadline registry, where every date is checked against the statute, regulator or Official Journal.
74days until 3 AI-law deadlines on 1 Jan 2027
The next major AI-law deadlines fall on 1 Jan 2027, 74 days after 19 Oct 2026: California CPPA rules — ADMT, risk assessments, audits; Colorado SB 26-189 (replaces SB 24-205); and New York S 6953B (RAISE Act).
Across the EU AI Act, California privacy rules and the US state AI laws in our tracker; each date is checked against its official source.
As of 19 Oct 2026 · data checked 27 Sep 2026 · AI compliance timeline
3major AI-law deadlines in the next 12 months
Three major AI-law deadlines fall in the 12 months after 19 Oct 2026, all on 1 Jan 2027: California CPPA rules — ADMT, risk assessments, audits; Colorado SB 26-189 (replaces SB 24-205); and New York S 6953B (RAISE Act).
Across the EU AI Act, California privacy rules and the US state AI laws in our tracker; each date is checked against its official source.
As of 19 Oct 2026 · data checked 27 Sep 2026 · AI compliance timeline
Maximum penalties as written in the law.
€35Mor 7% of worldwide turnover: the EU AI Act's top fine
The EU AI Act's maximum fine is €35 million or 7% of worldwide annual turnover, whichever is higher, for prohibited AI practices (Article 99(3)).
For small and medium-sized enterprises, including start-ups, the lower of the two amounts applies (Article 99(6)).
As of 19 Oct 2026 · data checked 27 Sep 2026 · EU AI Act penalties · Official source ↗
From our directory of AI governance, compliance, audit and risk vendors. Every profile cites public sources.
70active AI governance and compliance vendors in our directory
AI Compliance Vendors lists 70 active AI governance, compliance, audit and risk vendors as of 19 Oct 2026, plus 22 AI audit and assurance firms.
Vendors that meet our published inclusion criteria; acquired or discontinued products are counted separately.
As of 19 Oct 2026 · data checked 15 Oct 2026 · Vendor directory
16vendors in our directory acquired
16 AI governance and compliance vendors in our directory have been acquired; the most recent: Arize AI (by Dynatrace, 2026); TrojAI (by A10 Networks, 2026); and Galileo (by Cisco, 2026).
Acquisitions recorded on vendor profiles, each with a public source.
As of 19 Oct 2026 · data checked 15 Oct 2026 · Vendor directory
6vendors hold ISO/IEC 42001 certification
Six of the 70 active vendors in our directory hold ISO/IEC 42001 (AI management system) certification, each confirmed by a primary source: the vendor's announcement, trust page or certificate.
Only certifications we have confirmed and recorded; other vendors may hold certifications we have not yet verified.
As of 19 Oct 2026 · data checked 15 Oct 2026 · ISO 42001 certified companies (verified list)
Maximum penalties as written in each law, with links to the full entry and its official source.
| Breach | Maximum fine | Article |
|---|---|---|
| Prohibited AI practices | €35,000,000 or 7% of worldwide annual turnover | Article 99(3) |
| Other operator obligations | €15,000,000 or 3% of worldwide annual turnover | Article 99(4) |
| Misleading information to authorities | €7,500,000 or 1% of worldwide annual turnover | Article 99(5) |
| General-purpose AI model providers | €15,000,000 or 3% of worldwide annual turnover | Article 101 |
Whichever amount is higher, except for SMEs and start-ups, which pay the lower (Article 99(6)). EUR-Lex ↗ · Penalty calculator
| Law | Status | Maximum penalty | Enforced by |
|---|---|---|---|
| California AB 2013 | In force | No statutory dollar schedule; enforcement via California AG and consumer protection statutes. | California Attorney General / CPPA (via general consumer protection authority) |
| California AB 3030 | In force | Health facility licensure actions; California Medical Board disciplinary action. | California Medical Board; California Department of Public Health; licensing boards |
| California SB 1120 (Physicians Make Decisions Act) | In force | DMHC administrative penalties; CDI Insurance Commissioner penalties; willful violation by a health plan is a crime under Knox-Keene Act. | California DMHC; California Department of Insurance (CDI) |
| California SB 942 (AI Transparency Act) | In force | $5,000 per violation; each day of continued violation is a separate violation; attorneys fees. | California Attorney General; city attorneys; county counsel |
| Colorado SB 26-189 | Enacted — effective 2027 | Enforced under the Colorado Consumer Protection Act; 60-day cure period until Jan 1, 2030. | Colorado Attorney General (exclusive; no private right of action) |
| Illinois HB 3773 | In force | IHRA civil remedies — back pay, compensatory damages, attorneys fees, civil penalties. | Illinois Department of Human Rights (IDHR); Illinois Human Rights Commission |
| Maryland HB 1202 (2020) | In force | None specified — the statute sets no penalty and no private right of action. | No enforcement provision in the statute; the fiscal note expects any investigations by the Maryland Commissioner of Labor and Industry |
| Maryland HB 820 (2025) | In force | No penalty amount set in the Act; compliance is overseen through Insurance Commissioner audits and reviews. | Maryland Insurance Administration / Insurance Commissioner |
| Maryland SB 141 (2026) | In force | Misdemeanor — up to $5,000 fine, up to 5 years imprisonment, or both; the State Board of Elections may also sue to recover correction costs and damages. | Criminal prosecution; Maryland State Board of Elections and State Administrator of Elections (civil suits, takedown injunctions) |
| Maryland SB 818 (2024) | In force | None — governance and procurement rules for state agencies, not penalties. | Maryland Department of Information Technology (DoIT); Governor’s AI Subcabinet |
| Michigan HB 5144 | In force | Misdemeanor — up to 90 days and/or $500; a repeat violation within 5 years is a felony — up to 5 years and/or $1,000. Courts may issue permanent injunctions. | State prosecutors (criminal); injunctions may be sought by the Attorney General, the depicted individual, an injured candidate or an organization representing voters |
| Minnesota HF 1370 | In force | Up to 90 days and/or $1,000; up to 364 days and/or $3,000 if intended to cause violence or bodily harm; up to 5 years and/or $10,000 for a repeat conviction within 5 years. A convicted candidate forfeits the nomination or office. | Criminal prosecution; injunctions may be sought by the Attorney General, a county or city attorney, the depicted individual or an injured candidate |
| New York S 6953B (RAISE Act) | Enacted — effective 2027 | Up to $1,000,000 first violation; up to $3,000,000 subsequent (per agreed chapter amendments; statute text: $10M / $30M). | New York Attorney General; NY Department of Financial Services (new oversight office) |
| NYC Local Law 144 (AEDT law) | In force | $500 first violation; $1,500 per subsequent violation; each day = separate violation. | NYC Department of Consumer and Worker Protection (DCWP) |
| Tennessee HB 2091 (ELVIS Act) | In force | Civil action for damages, with destruction of infringing goods; treble damages and attorneys fees for members of the armed forces. Unauthorized use is also a misdemeanor. | Private right of action; state prosecutors (criminal) |
| Texas HB 149 (TRAIGA) | In force | $10,000–$12,000 curable; $80,000–$200,000 uncurable; $2,000–$40,000/day continuing; up to $100,000 secondary agency sanctions. | Texas Attorney General (exclusive, 60-day cure period) |
| Texas SB 751 | In force | Criminal offense — Class A misdemeanor to felony depending on circumstances. | State prosecutors (criminal only) |
| Utah HB 452 | In force | Up to $2,500/violation (Utah Division of Consumer Protection); $5,000/violation for order breach; disgorgement; injunctive relief. | Utah Division of Consumer Protection |
| Utah SB 149 (Utah AI Policy Act) | In force | Administrative fines up to $2,500/violation (Utah Division of Consumer Protection); civil penalties up to $5,000/violation for court/admin order breach. | Utah Division of Consumer Protection; Utah Attorney General |
| Washington SB 5152 | In force | Injunctions; general or special damages against the sponsor; the court may award attorneys fees and costs. | Affected candidates (private civil action) |
Nine US states have at least one major AI law in force as of 19 Oct 2026, and New York City has its own, according to the AI Compliance Vendors state AI law tracker. Two enacted state AI laws take effect in the next 12 months: Colorado SB 26-189 on 1 Jan 2027 and New York S 6953B (RAISE Act) on 1 Jan 2027. Counts the 24 major AI-specific laws and bills in our tracker, each cited to the legislature — not every AI-related bill. Trackers that count all AI-related legislation report higher numbers.
The next major AI-law deadlines fall on 1 Jan 2027, 74 days after 19 Oct 2026: California CPPA rules — ADMT, risk assessments, audits; Colorado SB 26-189 (replaces SB 24-205); and New York S 6953B (RAISE Act).
The EU AI Act's maximum fine is €35 million or 7% of worldwide annual turnover, whichever is higher, for prohibited AI practices (Article 99(3)). For small and medium-sized enterprises, including start-ups, the lower of the two amounts applies (Article 99(6)).
AI Compliance Vendors lists 70 active AI governance, compliance, audit and risk vendors as of 19 Oct 2026, plus 22 AI audit and assurance firms. Vendors that meet our published inclusion criteria; acquired or discontinued products are counted separately.