Are there AI laws for small businesses?

Yes, but most are narrow: they apply when AI helps make important decisions about people, or when a business builds AI. General privacy and discrimination laws apply too.

Do I have to tell customers I use AI?

Sometimes, such as AI in decisions about people or certain chatbots. Being upfront builds trust either way.

Does federal law override state AI laws?

Not yet. There's no general federal AI law, and the December 2025 executive order doesn't cancel state laws on its own.

What's the first step toward AI compliance?

List the AI tools you use and what for, then write an AI use policy.

Does Wrangl Platinum make us legally compliant?

No. It's a private certification, not a legal review. It builds practices many AI laws expect, but check specific laws with a lawyer.

AI Regulation for Small Businesses: What Applies in 2026

General information, not legal advice. AI laws change often, so check with a lawyer about your situation.

The Short Version

Most AI laws target two groups: companies that build AI models, and businesses using AI to help make important decisions about people, like hiring, lending, housing, insurance or health care. Everyday uses like drafting emails mostly aren’t regulated directly.

Existing privacy, discrimination and consumer protection laws still apply to what AI does for you. “The AI did it” isn’t a defense.

The Laws Worth Knowing

United States: no single federal AI law

Congress hasn’t passed one. A December 2025 executive order (Ensuring a National Policy Framework for Artificial Intelligence) told federal agencies to challenge conflicting state AI laws, but it doesn’t cancel them on its own. State laws still apply.

Colorado: notices and human review

SB 26-189 replaced Colorado’s original AI Act in May 2026 and takes effect January 1, 2027. If an automated tool helps make a consequential decision about someone, you must give notice, explain adverse decisions and how to ask for reconsideration, let people correct their data and request human review, and keep records for three years.

Texas: limits on harmful uses

The Texas Responsible AI Governance Act (effective January 1, 2026) bans AI used with intent to unlawfully discriminate, encourage self-harm or crime, or make certain illegal deepfakes. Only the Attorney General enforces it.

Illinois: AI in employment

Since January 1, 2026, employers with even one Illinois employee must tell staff when AI is used in hiring, promotion, discipline or firing, and can’t use AI in ways that discriminate, including zip codes as a stand-in for protected traits.

California: targeted rules

Several laws took effect January 1, 2026. Most hit AI developers, but some reach ordinary businesses. Real estate agents, for example, must disclose digitally altered listing photos.

New York City: automated hiring tools

Employers using automated hiring or promotion tools need an independent bias audit, a public summary of results, and notice to candidates.

European Union: the AI Act

If you sell into the EU, it may apply. A 2026 update pushed many high-risk rules to December 2, 2027, and some product rules to August 2, 2028.

What to Do Now

List your AI tools, including AI built into your software.
Find where AI touches decisions about people. That’s where most rules land.
Write an AI use policy.
Keep a person in the loop on important decisions.
Check your vendors’ AI features and data handling.
Keep records of tools, uses and approvals.

Where Wrangl Fits

Wrangl Platinum isn’t a legal compliance certification. It builds the habits these laws keep returning to: known tools, written rules, human oversight and records. We track new rules weekly in Wrangl Wire.

AI Regulation, in Plain English.