Compliance Stuff

  On June 22, 2025, Governor Abbott signed the Texas Responsible Artificial Intelligence Governance Act (TRAIGA), which will take effect January 1, 2026. Any business or government agency working with AI in Texas should take note that TRAIGA is not a copy-paste of other states’ laws; rather, it specifically targets intentional misuse of AI, not just “high-risk” AI. Unlike broader “high-risk AI” frameworks emerging in other states, TRAIGA puts intent at the center of its rules, with an emphasis on preventing deliberate misuse . It also makes meaningful changes to Texas’s privacy statutes to address AI-specific issues, particularly around biometric data and transparency obligations. Who Must Comply? Government agencies are explicitly within scope if they use AI to interact with the public. Private sector companies that develop, market, sell, or otherwise provide AI-generated content or AI services to Texas residents, even if the company is based outside the state, if its AI systems ...

A California bill aimed at curbing the explosion of lawsuits filed against businesses using common website tools like cookies, pixels, and session replay software has stalled out in the 2025 legislative session, meaning your business will remain vulnerable to the newest type of privacy litigation for at least the next year . Despite the Senate unanimously approving SB 690 just a month ago, the bill’s author announced on July 2 that it would be made into a “two-year bill” – meaning it will not advance further this year but may be taken up again in 2026. What does your business need to do to put yourself in the best position to defend against these California Invasion of Privacy Act (CIPA) wiretapping claims? CIPA’s Emergence as a Class Action Weapon CIPA was originally enacted in 1967 to combat traditional wiretapping and eavesdropping, primarily in the context of telephone communications. It was never designed to address the complexities of the digital age or regulate how businesses t...