TRAIGA
The law bans certain high-risk artificial intelligence uses, restricts intentional discrimination, sets sector-specific rules, and authorizes penalties enforced by the attorney general.
54 on file · 37 became law · 0 still moving · 0 moved in 30 days
The law bans certain high-risk artificial intelligence uses, restricts intentional discrimination, sets sector-specific rules, and authorizes penalties enforced by the attorney general.
Requires digital service providers to register users' ages, limit collection and use of minors' data, give parents supervision tools, and filter harmful content for known minors.
Requires mobile app stores to verify user ages, obtain parental consent before minors download apps or make purchases, and share age-category data with developers.
Governor directive banning AI and social media apps affiliated with the People's Republic of China and the Chinese Communist Party, including DeepSeek, RedNote and Lemon8, from government-issued devices and adding them to the state prohibited technologies list.
Governor directive adding Chinese-affiliated AI companies, hardware and software to the state prohibited technologies list for state employees and devices and naming the Texas Cyber Command lead agency for identifying such threats.
Bans developing or deploying AI systems for certain intentional harms such as behavioral manipulation toward self-harm, unlawful discrimination, government social scoring and sexual deepfakes of minors, requires state agencies to disclose AI use to consumers, and creates an AI regulatory sandbox and the Texas Artificial Intelligence Council, enforced by the attorney general.
Requires commercial websites and apps that offer tools to create artificial sexual material using real people's likenesses to verify users are adults, with civil penalties.
Creates a criminal offense for possessing, promoting or producing obscene visual material that appears to depict a child, including AI-generated or animated images.
Prohibits utilization review agents from using automated decision systems, including AI, to make adverse determinations on health benefit claims in whole or in part.
Expands child sexual abuse material offenses to cover computer-generated and AI-altered images depicting children, including recognizable real children.
Bars exemplary damages in data breach lawsuits against businesses with fewer than 250 employees that maintained a qualifying cybersecurity program.
Creates civil liability and expands criminal offenses for producing or distributing nonconsensual sexually explicit deepfake media and artificial intimate visual material, with an affirmative defense for AI application providers that prohibit and take steps to prevent such content.
Sets electronic health record requirements, including storage of records in the United States, and allows practitioners to use AI for diagnostic recommendations only if they review AI-generated records and disclose the use to patients.
Bars covered facilities and companies from using genome sequencers or software produced by foreign adversaries and from storing Texans' genome sequencing data in foreign adversary countries, with civil penalties and a private right of action.
Sets rules for state and local government use of AI, including a Department of Information Resources AI code of ethics and minimum standards, inventories of agency AI systems, and reviews of heightened-scrutiny AI systems used in consequential decisions.
Establishes the Texas Cyber Command, with a facility in San Antonio, to prevent and respond to cybersecurity incidents, and transfers state cybersecurity duties from the Department of Information Resources to it.
Creates an artificial intelligence division within the Department of Information Resources to help state agencies adopt generative AI and modernize legacy systems.
Requires certain state agency and local government employees and officials to complete certified artificial intelligence training, alongside existing cybersecurity training.
Sets procedures for civil asset forfeiture of digital currency and similar property.
Updates the notice that data brokers must post on their websites and include with their Texas registration statements.
Broadens the definition of data broker to any business that collects, processes or transfers personal data it did not collect directly from the individual, removing the principal-revenue test from the 2023 law.
Creates criminal and civil liability for financial exploitation or abuse carried out with artificially generated media or phishing communications.
Requires social media platforms to provide a way for users to report explicit deepfake material and to respond to and act on such reports on set timelines.
Requires commercial websites where more than one third of content is sexual material harmful to minors to verify that users are adults.
Would have broadened the offense of producing or distributing sexually explicit deepfakes from videos to any deepfake media, including images.
Sets interconnection standards, cost-sharing, disclosure and emergency curtailment rules for large electric loads of 75 megawatts or more, such as data centers, in the ERCOT region.
Creates the Texas Strategic Bitcoin Reserve, managed by the comptroller outside the state treasury, to invest in bitcoin and other qualifying cryptocurrency.
Applies open meetings and public information law exceptions to government information about certain cybersecurity measures.
Would have prohibited social media platforms from allowing Texas residents younger than 18 to hold accounts.
Would have restricted censorship of or interference with digital expression on social media platforms and email services.
Would have amended the applicability section of the SCOPE Act (Business and Commerce Code Chapter 509) governing protection of minors from harmful material on digital services.
Would have regulated virtual currency kiosks, with administrative penalties.
Would have increased criminal penalties for unlawful production or distribution of certain sexually explicit deepfake media.
Would have required public school policies and programs on the production or distribution of intimate visual material, including deepfakes, by students.
Would have regulated access and communications settings for minors' accounts on digital services.
Would have required disclosures on certain automated (bot) posts on social media platforms, with civil penalties.
Would have created property rights in a person's digital replica of voice and visual likeness, with private causes of action for unauthorized use.
Would have set rules for interconnecting and operating large electric loads such as data centers on the ERCOT grid.
Amended the Capture or Use of Biometric Identifier Act (Business and Commerce Code 503.001) to limit disclosure of commercially captured biometric identifiers and require their destruction within one year after the collection purpose expires; the act is enforced by the attorney general.
Would have created a grant program for health care facilities using AI to scan medical images for cancer detection.
Would have required a disclosure on political advertising that contains AI-altered or synthetic media and made failure to disclose a criminal offense.
Would have created a private cause of action against people who create certain explicit deepfake material.
Would have required certain social media platforms to display a warning label about the association between minors' social media use and mental health problems.
Would have required disclosures and other consumer protections for virtual currency kiosk transactions.
Would have required disclosure of information regarding artificial intelligence use.
Comprehensive consumer data privacy law giving Texans rights to access, correct, delete and opt out of the sale, targeted advertising and profiling uses of their personal data, enforced by the attorney general.
Created a criminal offense for producing or distributing sexually explicit deepfake videos of a person without consent.
Requires data brokers to register annually with the Secretary of State, post consumer notices and maintain a data security program, with civil penalties.
Bars digital asset service providers from commingling customer funds with company funds and requires them to make customer holdings information available to customers and auditors and to report annually, with administrative penalties.
Requires virtual currency mining facilities in the ERCOT region with more than 75 megawatts of interruptible load to register with the Public Utility Commission as large flexible loads.