A new analysis published June 1, 2026 by Troutman Pepper's privacy team summarizes where state-level AI and privacy proposals stand at the midpoint of the year, and the picture is the same one businesses have been navigating all spring: a patchwork of state regimes, a federal effort to centralize, and a calendar that is about to bite.
The most immediate enforcement milestone is Colorado's AI Act, scheduled to take effect on June 30, 2026. The law requires covered deployers and developers of high-risk AI systems to operate risk-management programs, conduct impact assessments, and follow disclosure rules tied to consequential decisions about consumers. Companies that have not yet completed inventories of high-risk AI systems are running out of runway.
Beyond Colorado, California's AI Transparency Act and Texas's Responsible Artificial Intelligence Governance Act continue to add disclosure and governance requirements around automated decision-making and the use of personal data in training and operating AI systems. Several other states have proposals pending that would create their own variants of impact assessments and consumer rights — a continuation of the trend that has defined US AI regulation since the start of the year.
The federal side adds another layer. The Trump administration's December 2025 executive order initiated an attempt to centralize AI regulation, and the Attorney General's AI litigation task force announced in January 2026 signals stepped-up federal enforcement intent. The Troutman update flags the ongoing tension as one of the most material compliance variables for the second half of 2026.
For in-house teams, the practical implication is the same the firm has been highlighting for months: track Colorado readiness, watch state attorneys general for early enforcement signaling, and build a flexible governance framework that can accommodate divergent state and federal requirements without rebuilding from scratch every quarter.
Source: [Troutman Pepper Privacy + Cyber + AI](https://www.troutmanprivacy.com/2026/05/proposed-state-privacy-and-ai-law-update-june-1-2026/)