Texas Responsible Artificial Intelligence Governance Act (TRAIGA, HB 149)
Texas HB 149, effective 1 January 2026: prohibits AI intended for behavioural manipulation, unlawful discrimination, CSAM or unlawful deepfakes, and infringement of constitutional rights; requires disclosure when consumers interact with AI in government and healthcare; creates a regulatory sandbox and Attorney General enforcement with a 60-day cure period.
| Jurisdiction | Texas |
|---|---|
| Category | AI Regulations |
| Status | Active |
| Effective date | |
| Latest development |
Analysis
Key Requirements
The Texas Responsible AI Governance Act (HB 1709) establishes several key requirements for organizations developing, deploying, or distributing high-risk AI systems:
- Impact Assessments: Organizations must conduct semi-annual impact assessments for high-risk AI systems, evaluating potential risks of algorithmic discrimination, data misuse, and system limitations[1].
- Transparency and Disclosure: Deployers must notify individuals impacted by high-risk AI systems, disclosing the use of AI, its purpose, factors considered, and extent of human oversight[2].
- Bias Mitigation: The Act requires organizations to identify and mitigate risks of algorithmic discrimination, particularly against protected classes under state or federal law[3].
- Human Oversight: Deployers must ensure adequate human oversight of high-risk AI systems by competent and trained personnel[2].
- Reporting Requirements: Organizations must promptly report discrimination risks to the Texas AI Council within 10 days of discovery[2].
- Vendor Accountability: Developers and deployers must provide detailed reports on system performance, including accuracy metrics, data sources, and bias prevention measures[3].
Compliance Challenges
Organizations face several challenges in complying with the Texas Responsible AI Governance Act:
- Defining High-Risk AI Systems: Determining which AI systems qualify as "high-risk" can be complex, as evidenced by discussions in the tech industry[4].
- Conducting Thorough Impact Assessments: Regular, comprehensive assessments require significant resources and expertise, as highlighted in industry analyses[1].
- Ensuring Transparency Without Compromising IP: Balancing disclosure requirements with protecting proprietary algorithms is a challenge noted by legal experts[2].
- Implementing Effective Human Oversight: Ensuring adequate human supervision while maintaining efficiency can be difficult, as discussed in employment contexts[3].
Implementation Best Practices
To effectively implement the requirements of HB 1709, organizations should consider the following best practices:
- Develop a Comprehensive AI Governance Framework: Establish clear policies and procedures for AI system development, deployment, and monitoring. The NIST AI Risk Management Framework provides a useful starting point[5].
- Conduct Regular AI Audits: Implement a schedule for routine audits of AI systems to ensure ongoing compliance and identify potential issues early[1].
- Invest in Employee Training: Provide thorough training on AI ethics, bias recognition, and compliance requirements. The IEEE Ethics Certification Program for Autonomous and Intelligent Systems offers relevant resources[6].
- Establish Clear Documentation Processes: Maintain detailed records of impact assessments, mitigation efforts, and system modifications. Tools like IBM's AI FactSheets can assist in standardizing documentation[7].
- Engage with Regulatory Bodies: Maintain open communication with the Texas AI Council and stay informed about regulatory updates and guidance.
Recent Updates
As of February 2025, there have been no significant amendments to the original HB 1709 text. However:
- The Texas Legislature is currently in session and may consider amendments or clarifications to the Act[8].
- The Texas AI Council is expected to release initial guidance documents for implementation by June 2025[1].
- Organizations should monitor the Texas Department of Information Resources website for upcoming regulatory announcements[9].
Related Regulations
The Texas Responsible AI Governance Act intersects with several other regulations:
- EU AI Act: While more comprehensive, the EU AI Act shares similar principles of risk-based regulation and transparency[10].
- NIST AI Risk Management Framework: This voluntary framework aligns with many of HB 1709's requirements and can support compliance efforts[5].
- California Privacy Rights Act (CPRA): The CPRA's provisions on automated decision-making overlap with HB 1709's transparency requirements.
Industry Impact
The Texas Responsible AI Governance Act is expected to have significant impacts across industries:
- Technology Sector: Industry analyses suggest potential innovation slowdowns due to compliance burdens[4].
- Healthcare: The Act may affect AI-driven diagnostic tools and treatment recommendations, requiring additional oversight and documentation[3].
- Financial Services: Risk assessment models and automated lending decisions will need to comply with stringent fairness and transparency requirements[1].
- Employment: HR technologies using AI for hiring and performance evaluations will face increased scrutiny and disclosure obligations[2].
Sources
Texas Legislature HB 1709 Lumenova AI: Texas Responsible AI Governance Act Breakdown K&L Gates: The Texas Responsible AI Governance Act and Its Potential Impact on Employers HireRight: The AI Law Every Employer Needs To Know About Data Innovation: Texas's AI Law Won't Deliver the Accountability It Promises NIST AI Risk Management Framework IEEE Ethics Certification Program for Autonomous and Intelligent Systems IBM AI FactSheets Texas Legislature Texas Department of Information Resources EU AI Act California Privacy Rights Act
Recent developments
- — Texas Governor Greg Abbott signed the **Texas Responsible AI Governance Act (TRAIGA)** into law, establishing categorical prohibitions on certain AI uses (behavioral manipulation, unlawful discrimination, child-sexual-content deepfakes, infringement of constitutional rights) and creating a regulatory sandbox and Texas AI Advisory Council; the Act takes effect on 2026-01-01.[4] (source)
- — Legal analysis outlines enforcement by the Texas Attorney General, including injunctions and civil penalties that can reach up to **$40,000 per day** for continuing violations, signaling substantial compliance risk for businesses deploying covered AI systems in Texas.[4] (source)
- — Commentary describes TRAIGA as a **new model for state AI regulation**, emphasizing its focus on a narrow set of intentional harms, expanded investigatory powers for the Attorney General, and exclusive state-level enforcement without a private right of action, contrasting it with broader, risk-based regimes like Colorado’s law.[1] (source)
- — The article highlights industry-relevant obligations, including disclosure by private health care providers when patients interact with AI and scaled penalties up to **$200,000 per uncurable violation** plus potential license loss for entities with state registrations, prompting scrutiny from health and enterprise AI deployers.[1] (source)
- — A civil society analysis of **“TRAIGA 2.0”** explains how the bill was narrowed late in the legislative process to focus mainly on AI systems used by government agencies, while still prohibiting intentional behavioral manipulation, unlawful discrimination, and certain political viewpoint discrimination, raising questions about reduced protections for private-sector deployments.[5] (source)
- — The same analysis notes removal of earlier broad transparency and impact-assessment requirements and confirms that enforcement remains with the Texas Attorney General and that there is **no private right of action**, which industry groups view as easing litigation exposure but placing more weight on state-level investigations.[5] (source)
- — The Texas Responsible Artificial Intelligence Governance Act (HB 149) took effect, with Attorney General enforcement and a 60-day cure period. (source)
- — Law firm update advising companies on how to prepare for the Texas Responsible AI Governance Act before its January 1, 2026 effective date, focusing on prohibited AI uses, government-entity obligations, and practical compliance steps for private-sector developers and deployers.[7] (source)
- — News coverage reports that Texas lawmakers were considering HB 1709 as a **“tough AI bill”**, with critics warning it could stall U.S. AI progress due to stringent obligations on high-risk AI systems (bias mitigation, transparency metrics, mandatory impact assessments) and steep fines up to **$200,000 per infraction** plus **$40,000 per day** for ongoing violations.[7] (source)
- — A separate article describes Representative Capriglione’s filing of HB 1709, emphasizing goals such as mandatory disclosure of AI use, safeguards against bias and censorship in content-moderation AI, and an **AI regulatory sandbox program**, which drew mixed industry reactions balancing innovation incentives against new compliance and reporting burdens.[8] (source)
- — The introduced text of **HB 1709 (Texas Responsible AI Governance Act)** details regulation and reporting obligations on AI use by certain business entities and state agencies, including civil penalties, marking the formal start of the legislative process that culminated in TRAIGA’s enactment.[3] (source)
- — Legislative tracking shows HB 1709 was referred to the **Delivery of Government Efficiency** committee, signaling early focus on AI’s impact on state operations and efficiency rather than solely on consumer protection or safety, and giving stakeholders an initial venue for input on the bill.[6] (source)
Read the full guide to Texas Responsible Artificial Intelligence Governance Act (TRAIGA, HB 149)
Related regulations
- Internet Information Service Algorithmic Recommendation Management Provisions — China, Active
- National Artificial Intelligence Policy Bill — Chile, Active
- Artificial Intelligence Liability Directive — European Union, Active
- Federal Law on the Development and Use of Artificial Intelligence — Mexico, Active
- Presidential Regulation on the Framework for Artificial Intelligence Development — Indonesia, Active
- Law Establishing the Framework for the Development and Use of Artificial Intelligence — Peru, Active
- California Consumer Privacy Act AI Amendments — California, Active, effective 2020-01-01
- GPAI Framework for Responsible AI — AI Regulations, Active
Put it into practice
- Generate the policy: NIST AI RMF policy generator (generatepolicy.com)
- Buy the policy pack: NIST AI RMF Implementation Policy (cyberpolicy.shop)
- Build it yourself: Pillar 06 Companion — The 2026 AI Risk Register (ciso.diy)
Browse all regulations · Compliance deadlines · Latest updates