DeadlineHigh Impact
Colorado AI Act creates high-risk AI obligations affecting healthcare workflows
Colorado SB24-205 establishes consumer protections for high-risk artificial intelligence systems, with obligations for deployers to protect consumers from algorithmic discrimination.
Operator impact: Colorado-facing clinics using AI for triage, intake, patient prioritization, eligibility, hiring, pricing, risk scoring, or care navigation should review vendor documentation, impact assessments, human review, and patient notice workflows.
Effective Jun 30, 2026
Deadline Jun 30, 2026
ProposedHigh Impact
New York AI chatbot bill would target unauthorized medical advice
New York lawmakers advanced a proposal to restrict AI chatbots from providing advice that substitutes for licensed professional services, including medical advice.
Operator impact: New York clinics using AI intake, symptom checkers, health coaches, patient education bots, or sales chatbots should monitor the bill and tighten disclaimers, escalation rules, human review, and scope boundaries.
EffectiveHigh Impact
California prohibits AI from implying licensed health professional status
California AB 489 makes health-profession license-title restrictions enforceable against AI and GenAI systems that imply care, advice, reports, or assessments are provided by a licensed natural person when they are not.
Operator impact: California clinics and vendors should audit AI chatbot names, voice-agent scripts, disclaimers, sales copy, intake flows, AI-generated assessments, and patient-facing automation to avoid implying a bot is a licensed clinician.
EffectiveHigh Impact
Texas SB 1188 regulates AI use and EHR storage in health care
Texas SB 1188 creates requirements around electronic health record storage, AI use for diagnostic purposes, patient disclosure, record review, and enforcement exposure for covered entities.
Operator impact: Texas clinics and vendors should review AI-assisted diagnosis workflows, clinician review, patient disclosure, EHR vendor storage location, offshore access, parent/minor record access, safeguards, and PHI-related civil penalty exposure.
Effective Sep 1, 2025
Deadline Jan 1, 2026
EffectiveHigh Impact
Texas Responsible AI Governance Act takes effect in 2026
Texas HB 149 establishes the Texas Responsible Artificial Intelligence Governance Act and creates a state AI governance framework with consumer-protection and enforcement provisions.
Operator impact: Texas clinics and AI vendors should audit AI agents, patient communications, diagnostic support, marketing claims, consent flows, risk assessments, vendor contracts, and prohibited or misleading uses of AI systems.
EffectiveHigh Impact
California SB 243 creates companion chatbot safeguards
California SB 243 regulates companion chatbot platforms and requires clear disclosures and safety safeguards when users may believe they are interacting with a human.
Operator impact: California clinics using companion-style wellness bots, mental health support bots, chronic-care check-in bots, or AI health coaches should review disclosures, youth safeguards, self-harm escalation, reporting duties, and human handoff design.
EffectiveHigh Impact
New York AI Companion Models law creates chatbot safety and notice obligations
New York General Business Law Article 47 regulates artificial intelligence companion models and establishes disclosure, safety, and enforcement requirements.
Operator impact: New York-facing clinics using ongoing conversational AI, emotional support bots, mental health companions, health coaching bots, or patient engagement agents should review notices, crisis response, interaction design, and vendor contracts.
EffectiveHigh Impact
Illinois WOPR Act restricts AI therapy and psychotherapy services
Illinois HB1806 created the Wellness and Oversight for Psychological Resources Act, limiting AI use in therapy and psychotherapy services and establishing penalties for violations.
Operator impact: Illinois behavioral health clinics, teletherapy providers, wellness apps, and AI vendors should review whether AI tools directly interact in therapeutic communication, generate treatment plans, make therapeutic decisions, or are advertised as therapy.
EffectiveHigh Impact
Nevada restricts AI use in mental and behavioral health care
Nevada AB 406 restricts certain AI systems and representations involving professional mental or behavioral health care.
Operator impact: Nevada behavioral health, teletherapy, wellness, and AI-enabled patient support platforms should review whether AI tools provide or appear to provide therapy, diagnosis, behavioral health treatment, or therapeutic recommendations outside permitted support use.
EffectiveHigh Impact
Utah regulates AI mental health chatbots
Utah HB 452 enacts provisions regulating AI mental health chatbots accessible to Utah users.
Operator impact: Behavioral health clinics, telehealth groups, and wellness platforms serving Utah users should review AI chatbot scope, disclosures, escalation, emergency handling, marketing claims, and whether the system simulates confidential therapist-like communications.
EffectiveHigh Impact
California requires GenAI notice for patient clinical communications
California AB 3030 requires certain health facilities, clinics, physician offices, and group practices to notify patients when using generative AI to communicate patient clinical information, unless a licensed or certified human reviews the communication.
Operator impact: California clinics using AI agents, AI-generated patient education, automated clinical follow-up, SMS/email clinical communication, chatbots, or voice workflows should review notice language, human review pathways, and escalation procedures.
EffectiveHigh Impact
Utah AI Policy Act creates disclosure duties for regulated occupations
Utah SB 149 created the Artificial Intelligence Policy Act, including disclosure expectations when generative AI is used in regulated occupations.
Operator impact: Utah clinics using AI chat, SMS, voice, documentation, sales assistance, or patient support should review whether AI disclosures are required for licensed healthcare interactions and update scripts, consent flows, and vendor requirements.
