State AI Laws in 2026: What Is in Effect and What Is Coming
A plain-English map of the state AI laws in effect or enacted as of October 2026, from Colorado's rewritten AI Act to chatbot, hiring and deepfake rules.
Synthetic audio, video, or images generated or altered with AI to convincingly show someone saying or doing something they did not.
Deepfakes use generative AI models to swap faces, clone voices, or create entirely artificial footage. The technology has legitimate uses in film production, dubbing, and accessibility, but it is widely associated with misinformation, harassment, and fraud.
Businesses face a growing risk of deepfake-enabled scams. In one widely reported case, an employee was persuaded to transfer money after a video call in which the other participants were deepfake recreations of company executives. Voice clones are also used in phone scams that impersonate family members or managers. Practical defenses include verifying payment requests through a separate known channel, agreeing code words for urgent requests, training staff to recognize pressure tactics, and using detection and content provenance tools where available.
A type of generative AI model that creates images, audio, or video by starting from random noise and refining it step by step.
Generative AIAI systems that create new content, such as text, images, audio, video, or code, based on patterns learned from training data.
Text-to-SpeechTechnology that turns written text into spoken audio, often using AI to produce natural-sounding voices.
VishingVoice phishing, a scam in which attackers use phone calls or voice messages to trick people into revealing information or sending money.
A plain-English map of the state AI laws in effect or enacted as of October 2026, from Colorado's rewritten AI Act to chatbot, hiring and deepfake rules.
Annotated example emails showing the exact clues employees should check before clicking, plus what to do when a suspicious message lands in your inbox.
When a US business falls under the EU AI Act, how the 4 risk tiers work, the updated 2026-2028 deadlines after the Digital Omnibus, and what to do first.