AI Compliance
Laws Guide
Three AI laws are reshaping how companies build and deploy AI. Here's what each one requires - and which ones apply to you.
AI Law Compliance Guides
Three AI regulations with different scopes, penalties, and timelines. Pick the one that applies to your organization - or compare them all below.
Texas AI Law (TRAIGA / HB 149)
Texas Responsible AI Governance Act. Effective January 1, 2026. Covers applicability tests, prohibited practices, disclosure duties, penalties ($10K-$200K), 60-day cure period, NIST AI RMF defense pathway, and regulatory sandbox.
read guide →EU AI Act
World's first complete AI regulation. Risk-tiered framework for all AI on the EU market. Full enforcement August 2026. Penalties up to €35M or 7% of global revenue. Mapped to the ISAF framework published in Zenodo.
read guide →NYC Local Law 144
Bias audit requirements for automated employment decision tools (AEDTs). Active enforcement since July 2023. Annual independent bias audits, 10-day candidate notice, $500-$1,500/day penalties. Informed by deterministic bias detection research.
read guide →Technical Guides & Security Tools
Beyond legal compliance - the engineering guides, assessment tools, and frameworks you need to actually implement AI governance in production.
How to Secure and Govern AI
Seven-layer compliance stack covering NIST AI RMF, ISO 42001, SOC 2, security testing, and continuous evidence. Includes the AI Governance Execution Framework and HAIEC integration patterns.
open guide →HAIEC AI Exposure Assessment
Deterministic security analysis covering prompt injection testing, RAG poisoning detection, tool abuse analysis, and evidence-grade compliance outputs. The assessment engine behind HAIEC.
open guide →The Hidden SEO Risk in AI-Assisted Frontend Development
Technical position paper on how client-only rendering in AI-assisted Next.js and React apps reduces crawlability, delays Google indexing, and obscures public web content from search engines.
open guide →AI Security Tools & Checklists
Interactive tools - blast radius calculator, agent read/write/action matrix, prompt-injection scenario library. Plus downloadable risk register, vendor due-diligence checklist, and incident evidence checklist.
open guide →Cross-Law Comparison
Quick reference comparing the three major AI compliance regulations. Use this to determine which laws apply to your organization.
| Feature | EU AI Act | NYC LL144 | Texas TRAIGA |
|---|---|---|---|
| Effective Date | Aug 2, 2026 (full) | Jul 5, 2023 | Jan 1, 2026 |
| Scope | All AI on EU market | AI in NYC hiring | All AI systems in Texas |
| Risk Approach | Tiered (4 levels) | Single category (AEDTs) | Prohibited practices list |
| Key Prohibitions | Social scoring, biometric ID, manipulation | Using AEDT without bias audit | Manipulation, social scoring (gov), discrimination, deepfakes |
| Max Penalty | €35M or 7% revenue | $1,500/day | $200,000/violation |
| Enforcement | National AI authorities + EU AI Office | NYC DCWP | Texas Attorney General |
| Cure Period | No | No | Yes - 60 days |
| NIST AI RMF | Not required | Not required | Defense pathway |
| Disclosure Duty | Transparency for limited-risk AI | Candidate notice 10 days before | Gov/healthcare AI disclosure |
| Sandbox | Yes (Art. 57) | No | Yes (Ch. 553, 36 months) |
| Private Right of Action | No | No | No |
Which AI Laws Apply to You?
A quick decision framework to determine which regulations may apply to your organization.
EU AI Act
You place AI systems on the EU market, or your AI output is used in the EU - regardless of where your company is headquartered.
NYC Local Law 144
You use an automated employment decision tool (AEDT) for hiring or promotion decisions for positions located in New York City.
Texas TRAIGA
You develop, deploy, or offer AI systems with a Texas nexus - you conduct business in TX, produce products used by TX residents, or develop/deploy AI in TX.
Multiple laws can apply simultaneously. A company using AI for hiring in NYC while also serving EU customers and operating in Texas could be subject to all three regulations. Each law has independent applicability criteria.
These guides are for informational purposes and do not constitute legal advice. For jurisdiction-specific compliance guidance, contact Subodh KC for advisory services. Last updated: July 2026.