March 31, 2026

Today's briefing covers US developments exclusively; no significant EU, UK, or other international activity is reported in today's event set. The dominant story is a wave of US state-level AI and privacy legislation at various stages — introduction through enactment — reflecting a fragmented but accelerating domestic governance landscape. Compliance teams managing multi-state exposure should treat this as a triage session, not a single-action event.

Washington State's HB1170, requiring disclosure to users when content has been developed or modified by AI, has been delivered to the Governor for signature or veto. This is the most immediately consequential pending action in today's set: a signature converts a disclosed legislative intent into an enforceable obligation for content producers and platforms operating in Washington. Separately, HB2157 — Washington's broader high-risk AI systems bill — has been placed in the House Rules 'X' file, effectively shelving it for this session. The contrast is instructive: Washington advanced a targeted, user-facing transparency measure while stalling a broader risk-based framework, suggesting the legislature may prefer narrow, legible obligations over comprehensive AI governance at this stage. Watch level: PREPARE (content platforms, media operators, AI-generated content producers)

New York's Senate bill S06955 and Assembly bill A06578 — companion measures constituting the Artificial Intelligence Training Data Transparency Act — have both advanced to third reading, requiring generative AI developers to publicly disclose training dataset information on their websites. Movement in both chambers simultaneously suggests coordinated momentum, though floor votes have not yet occurred. If enacted, New York would establish the first significant US state-level statutory baseline for AI training data provenance disclosure, with compliance implications for developers operating nationally who would face practical pressure to publish dataset disclosures regardless of where they are incorporated. Watch level: PREPARE (generative AI developers, LLM operators, AI product counsel)

Virginia's SB384 and HB797 — two companion measures establishing frameworks for independent AI verification organizations — have passed the House with strong votes (99-0 and 84-14 respectively) and are advancing toward enrollment. Colorado's HB1139 on health care AI has passed second reading in the House. Utah's HB0450, amending the state's Consumer Privacy Act, has been enrolled and transmitted for gubernatorial review. Utah's HB0320, amending the state's AI Policy Office, has also been transmitted to the Governor. Wyoming has enacted HB0102 targeting AI-generated deepfakes exploiting minors, assigning it Chapter 91 — making it operative law. Practitioners advising clients with Wyoming content moderation or platform operations should assess liability exposure now. Watch level: ACT NOW (Wyoming-operating platforms, content moderation counsel) | PREPARE (Virginia-operating AI auditors, Colorado health AI developers, Utah-covered businesses)

Several items warrant monitoring rather than immediate action. Oregon's SB1546 regulating AI companion applications has cleared the legislature with the Speaker's signature and awaits potential enactment — compliance teams in the companion AI space should begin scoping Oregon's requirements. Florida's HB0527 proposing mandatory human review of insurance claim denials is in early stages but reflects a durable legislative concern about automated adjudication that has appeared in multiple states. Vermont's H0814 on neurological rights and Colorado's HB1263 on conversational AI operators remain in early committee stages. The CDT-led coalition challenge to Treasury's SORN consolidating financial assistance data may indicate civil society pressure capable of prompting agency reconsideration or Privacy Act litigation, though the legal pathway remains speculative at this stage. Watch level: MONITOR (insurtech/claims automation teams, AI companion developers, federal privacy counsel, neurotech operators)