You do not need to read the statutes. Each rule below links to its official source, with one plain line on how it touches your business. Verified June 22, 2026, and the landscape moves, so dates can change.
For mid-market companies, the law is usually the backdrop. The pressure you feel first comes from your customers and your insurer.
What it means for you: if any of your AI counts as high-risk, you will owe documentation, human oversight, and risk controls. Most mid-market firms are not high-risk, but you need to know which of your AI uses qualify.
Official sourceWhat it means for you: when AI helps decide who gets a job, a loan, insurance, or housing, you will owe consumer notices and documentation. The original law was repealed and replaced with a narrower version (SB 26-189).
Official sourceWhat it means for you: Texas bans a short list of harmful AI uses and sets baseline duties. For most businesses it is a floor to stay above, not a heavy compliance lift.
Official sourceWhat it means for you: new state AI bills land constantly. Track which ones reach your customers and your AI uses so nothing surprises you. The tracker maps all of them.
Live state AI law trackerWhat it means for you: your regulators expect a written AI governance program covering how AI is used in underwriting, pricing, and claims. Examiners can ask to see it.
Official sourceWhat it means for you: if you touch defense or government work, you will need an independent cybersecurity certification, and so will your subcontractors. The requirement flows down the supply chain.
Official sourceWhat it means for you: this is the certificate buyers ask for to trust your AI governance. It is the bar your program builds toward, earned through an independent audit.
Official sourceWhat it means for you: voluntary and no certificate, but it is the shared language buyers and auditors use. The simplest way to structure your program and show your work.
Official sourceWhat it means for you: the trust report enterprise buyers ask for before sharing data. AI questions are now folded into the same review, so SOC 2 and AI governance arrive together.
Official sourceAnswer five quick questions about your industry, where you operate, and who your customers are, and see which rules likely reach your business.