How to Fight Back Against AI

California AB 3030 (signed 2024) requires healthcare providers using AI to generate patient communications to include a clear disclosure that the message was AI-generated and provide a means for the patient to reach a human healthcare provider. The law responds to the rapid adoption of AI-generated …

California AB 2013 (signed 2024) requires developers of AI systems trained on data generated after January 1, 2022 to publicly post documentation about their training data, including what types of data were used, whether consent was obtained, and what harmful categories of data (such as AI-generated…

California AB 1066 (proposed 2024) would have required employers to notify workers at least 30 days before deploying automated decision systems that could affect their employment terms, conditions, or performance evaluations. The bill aimed to give workers time to prepare, retrain, or challenge AI-d…

California SB 1047 (2024) would have required developers of large AI foundation models to implement safety protocols and conduct testing before deploying systems that could affect critical infrastructure, including employment systems. The bill created a Board of Frontier Models and established liabi…

California's Protecting Our Kids from Social Media Addiction Act (SB 976, 2024) bans social media platforms from serving AI-driven addictive feed features (infinite scroll, push notifications, autoplay) to users under 18 without parental consent. Platforms must develop age-appropriate versions of th…

California AB 1836 (2024) requires explicit consent to use a deceased person's digital likeness to create AI-generated performances, photos, or voice recordings. Studios and tech companies that create AI representations of deceased performers without consent from the estate face civil liability. The…

California AB 2602 (2024) prohibits studios and employers from using AI to replicate a performer's digital likeness in ways that would have required the performer to be physically present, without a specific negotiated agreement covering the specific use. The law protects actors, singers, and other …

California SB 1381 (2024) makes it a crime to create or distribute AI-generated child sexual abuse material (CSAM), closing a legal gap that had allowed synthetic AI-generated images to escape prosecution under laws written for photographic CSAM. The law applies even when no real child was used and …

California AB 3279 (2024) requires large AI data centers to report annual greenhouse gas emissions, water consumption, and energy usage to the California Air Resources Board, and develop a plan to achieve carbon neutrality by 2035. The bill targets the exploding energy and water demands of AI model …

The TAKE IT DOWN Act (Taking Action to Knock out Exploitative Non-Consensual AI-Generated Images of Minors) was signed into law in 2025, requiring platforms to remove AI-generated sexual images of minors within 48 hours of a report. The law creates a federal felony for publishing non-consensual inti…

Minnesota HF 4432 (2024) requires political communications using AI-generated content depicting real people to prominently disclose the use of AI. The law also prohibits AI-generated deepfakes that falsely depict candidates saying things they did not say within 90 days of an election, creating both …

The EU AI Act (Regulation 2024/1689), adopted in May 2024, classifies AI systems used in employment — including CV sorting, interview analysis, task allocation, and performance monitoring — as high-risk AI. Employers must conduct conformity assessments, maintain logs, provide transparency to workers…

Colorado SB24-205 (signed May 2024) is the first comprehensive US state AI law, applying to developers and deployers of high-risk AI systems used in consequential decisions about employment, education, housing, healthcare, credit, and legal matters. Developers must use reasonable care to protect con…

Maryland's Kids Code (SB 571 / HB 603, 2024) requires social media platforms and AI-driven services to configure all settings to the most privacy-protective defaults for users under 18, and prohibits the use of AI profiling algorithms to serve personalized content to minors without verifiable parent…

Vermont's Data Privacy Act (H.121, 2024) includes strong provisions against AI-driven consumer profiling without consent, requiring controllers to provide clear opt-outs from any AI system that processes sensitive personal data. Vermont became the first state to explicitly ban the sale of data that …

Georgia SB 392 (2024) extends Georgia's existing right of publicity statute to cover AI-generated replicas of voice and likeness, prohibiting use for commercial purposes without consent. The Georgia law is notable for applying to deceased individuals for 50 years after death, protecting the estates …

The American Privacy Rights Act (APRA, proposed 2024) would create a national consumer data privacy framework that includes specific provisions on AI profiling, requiring opt-in consent for sensitive data used in AI systems, mandating impact assessments for high-risk automated decision-making, and g…

Georgia HB 1023 (2024) requires large data centers seeking state tax incentives to submit environmental impact assessments including projected water and energy consumption over a 10-year period. The bill is a response to drought concerns and grid reliability issues tied to rapid AI-driven data cente…

Florida HB 3 (2024), signed into law as the Online Protections for Minors Act, prohibits social media platforms from using algorithmic recommendation systems to serve content to children under 14 without verifiable parental consent, and bans autoplay features and infinite scroll designed to maximize…

Washington SB 5649 requires employers using automated decision tools for employment-related decisions to disclose their use to affected workers and explain the factors considered. Workers have the right to request human review of any adverse employment decision made with the assistance of an automat…

Tennessee's Ensuring Likeness Voice and Image Security (ELVIS) Act, signed into law in 2024, extends the state's existing personal rights law to explicitly protect musicians and artists from AI-generated imitations of their voice. The law makes it illegal to use AI to create a replica of a person's …

Utah's Artificial Intelligence Policy Act (SB 149, signed March 2024) requires businesses interacting with consumers through AI chatbots or automated systems to disclose upon request that the consumer is communicating with AI. The law holds businesses liable for actions taken by AI systems they depl…

Virginia SB 603 (2024) requires data centers over a certain size to report annual water consumption and energy usage to the state's Department of Energy. The law responds to rapid data center expansion in Northern Virginia — home to the world's largest data center cluster — and growing community con…

The AI Environmental Impacts Act (proposed 2024) would require the Department of Energy to develop a framework for measuring and disclosing the energy and water consumption of AI systems. It mandates that large AI developers publish annual environmental impact reports covering training runs and depl…