In 2024, Colorado passedthe first comprehensive state-level law in the U.S. regulating the use of artificial intelligence, the Artificial Intelligence Act (the Act). It imposed strict requirements on developers and users of “high-risk” AI systems, particularly in sectors like employment, housing, finance, and healthcare. The Act drew criticism for its complexity, breadth, and potential to
Colorado’s Artificial Intelligence Act (CAIA) Updates: A Summary of CAIA’s Consumer Protections When Interacting with Artificial Intelligence Systems
During the 2024 legislative session, the Colorado General Assembly passed Senate Bill 24-205, which is known as the Colorado Artificial Intelligence Act (CAIA). This law will take effect on February 1, 2026, and requires developers and deployers of a high-risk AI system to protect Colorado residents (“consumers”) from risks of algorithmic discrimination. Notably, the Act
Proposed State Privacy Law Update: May 12, 2025
Keypoint: Last week, the Colorado legislature passed an amendment to the state’s data privacy law, the Texas legislature passed a bill regulating app stores, and there were developments with bills in Connecticut, Maine, New York and South Carolina.
Below is the eighteenth weekly update on the status of proposed state privacy legislation in 2025. As
Understanding the Utah AI Act and Newly Effective Amendments: What Your Business Needs to Know
Introduction
On May 7, 2025, the Utah Artificial Intelligence Policy Act (UAIP) amendments will go into effect. These amendments provide significant updates to Utah’s 2024 artificial intelligence (AI) laws. In particular, the amendments focus on regulation of AI in the realm of consumer protection (S.B. 226 and S.B. 332), mental health applications (
CPPA Board Opens Draft Regulations for Public Comment
Key Changes to Upcoming AI, Risk Assessment, and Cybersecurity Regulations
On May 1, 2025, the California Privacy Protection Agency (CPPA) Board met again to discuss updates to the latest draft California Consumer Privacy Act (CCPA) regulations related to automated decision-making technology (ADMT), cybersecurity audits, risk assessments, and an assortment of other updates to existing regulations.
R&G Tech Studio Presents: AI Innovation vs. Safety—Insights on Trump’s New Executive Order
On this episode of the R&G Tech Studio podcast, Ropes & Gray partners and co-leaders of the firm’s AI initiative, Megan Baca and Ed McNicholas, delve into the key implications of President Trump’s new AI Executive Order 14179, contrasting it with the previous Biden administration’s approach to AI regulation. They explore the nuances of AI
The European Commission’s Guidance on Prohibited AI Practices: Unraveling the AI Act
The European Commission published its long-awaited Guidelines on Prohibited AI Practices (CGPAIP) on February 4, 2025, two days after the AI Act’s articles on prohibited practices became applicable.
The good news is that in clarifying these prohibited practices (and those excluded from its material scope), the CGPAIP also addresses other more general aspects
The European Commission’s Guidance on Prohibited AI Practices: Unraveling the AI Act
The European Commission published its long-awaited Guidelines on Prohibited AI Practices (CGPAIP) on February 4, 2025, two days after the AI Act’s articles on prohibited practices became applicable.
The good news is that in clarifying these prohibited practices (and those excluded from its material scope), the CGPAIP also addresses other more general aspects
Adversarial Machine Learning in Focus: Novel Risks, Straightforward Legal Approaches
The Artificial Intelligence and Machine Learning (“AI/ML”) risk environment is in flux. One reason is that regulators are shifting from AI safety to AI innovation approaches, as a recent DataPhiles post examined. Another is that the privacy and cybersecurity risks such technologies pose, which this post refers to as adversarial machine learning (“AML”) risk, differ
On Demand Webinar: Update on State Developments – May 2025
In this on-demand webinar, David Stauss provides an update on state privacy and AI laws that are going into effect in the coming months or that passed during this legislative session. The webinar includes a discussion of new and upcoming consumer data privacy laws, including the draft CCPA regulations, AI laws, health data privacy laws,