US State AI Compliance Matrix

Key Requirements

• Developers must provide deployers with documentation on intended uses and known risks
• Deployers must implement risk management policies for high-risk AI systems
• Impact assessments required before deploying high-risk AI systems
• Consumers must be notified when AI makes or substantially supports consequential decisions
• Disclosure of AI interaction required
• Annual review of high-risk AI systems

Penalties

Enforcement by Colorado Attorney General under Colorado Consumer Protection Act. No private right of action. Civil penalties up to $20,000 per violation.

Safe Harbor

Affirmative defense available for deployers who discover and cure violations within 90 days. Compliance with NIST AI RMF or comparable framework creates rebuttable presumption of reasonable care.

COMPEL Stage Mapping

Key Requirements

• Employers using AI to analyze video interviews must notify applicants before the interview
• Written consent required from applicants before AI analysis
• Applicants may request deletion of video and AI analysis within 30 days
• Employers must report demographic data on AI-screened applicants annually
• Bias audit required annually for AI video interview tools

Penalties

Civil penalties up to $1,000 per violation. Enforced by Illinois Department of Human Rights. Private right of action available.

COMPEL Stage Mapping

Key Requirements

• Generative AI providers must offer free AI detection tools
• AI-generated content must include provenance data (metadata or watermarking)
• Manifest or embedded disclosure of AI-generated content required
• Clear and conspicuous disclosure when interacting with AI systems
• Annual transparency report on AI system capabilities and limitations

Penalties

Enforcement by California Attorney General. Civil penalties per California Business and Professions Code. Injunctive relief available.

COMPEL Stage Mapping

Key Requirements

• Impact assessments required for automated decision tools used in employment
• Notice to employees and applicants before AI-assisted employment decisions
• Annual bias audits by independent third-party auditors
• Employers must allow employees to opt-out of AI-only decisions for significant employment actions
• Record-keeping of AI deployment and audit results for 4 years

Penalties

Civil penalties up to $10,000 per violation enforced by California Civil Rights Department. Private right of action for affected individuals.

COMPEL Stage Mapping

Key Requirements

• Annual independent bias audit required for AEDTs
• Audit results must be publicly posted on employer website
• Candidates must be notified 10 business days before AEDT use
• Alternative selection process must be available upon request
• Notification of data collected and data retention policy required

Penalties

Civil penalties: $500 for first violation, $500-$1,500 for each subsequent violation per day. Enforced by NYC Department of Consumer and Worker Protection.

COMPEL Stage Mapping

Key Requirements

• Risk assessments required for high-risk AI systems
• Deployers must implement governance programs proportionate to AI risk
• Transparency disclosures to consumers affected by AI decisions
• Impact assessments before deployment of high-risk AI systems
• Annual reporting to Connecticut Attorney General on AI deployments
• Right to opt-out of AI profiling for consequential decisions

Penalties

Enforcement by Connecticut Attorney General under Connecticut Unfair Trade Practices Act. Civil penalties up to $5,000 per willful violation.

Safe Harbor

Compliance with NIST AI RMF or ISO 42001 creates rebuttable presumption of reasonable care. 60-day cure period for first-time violations.

COMPEL Stage Mapping

Key Requirements

• State agencies must inventory all AI systems in use
• Risk assessment required before deploying AI in government services
• Transparency reports for AI systems making decisions affecting Texans
• AI governance officer designation for state agencies using high-risk AI
• Private sector entities may voluntarily adopt AI governance frameworks

Penalties

State agencies: remedial action by Texas Department of Information Resources. No direct penalties for private sector entities that voluntarily comply.

Safe Harbor

Private sector entities that adopt and maintain compliance with NIST AI RMF, ISO 42001, or equivalent frameworks receive safe harbor protections from state enforcement actions related to AI governance.

COMPEL Stage Mapping

Key Requirements

• Data protection assessments required for AI processing activities that present heightened risk
• Consumer right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects
• Transparency about AI-driven profiling in privacy policies
• Purpose limitation for data used in AI-driven profiling

Penalties

Enforcement by Virginia Attorney General. Civil penalties up to $7,500 per violation. 30-day cure period.

Safe Harbor

30-day right to cure violations before enforcement action. Compliance with recognized frameworks may be considered in enforcement discretion.

COMPEL Stage Mapping

Key Requirements

• Impact assessments for AI systems affecting fundamental rights
• Right to human review of consequential AI decisions
• Algorithmic accountability reporting requirements
• Bias testing and auditing mandates

Penalties

Proposed: civil penalties and private right of action.

COMPEL Stage Mapping

Key Requirements

• Impact assessments for high-risk AI systems
• AI transparency requirements for government agencies
• Establishment of an AI advisory board
• Annual public reporting on AI system deployments

Penalties

Proposed: enforcement by Washington Attorney General.

COMPEL Stage Mapping

Key Requirements

• Registration of high-risk automated decision systems
• Annual impact assessments and bias audits
• Consumer notification of AI-assisted decision-making
• Right to human review of consequential AI decisions

Penalties

Proposed: civil penalties up to $10,000 per violation.

COMPEL Stage Mapping

Key Requirements

• Employers must disclose use of AI in hiring process
• Bias audits required for AI hiring tools
• Applicant consent before AI analysis of interview data

Penalties

Proposed: enforcement by Maryland Commission on Civil Rights.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping

Key Requirements

Penalties

General consumer protection laws may apply.

COMPEL Stage Mapping