Texas · statute
Texas TRAIGA: what it requires, and the records to keep
TRAIGA bans developing or deploying AI with intent to cause specific harms, such as inciting self-harm or unlawful discrimination, rather than imposing audits or impact assessments. It also requires government agencies and health care providers to disclose AI use, creates an AI regulatory sandbox and a Texas AI Council, and gives the Attorney General exclusive enforcement.
01 / What it requires
What Texas TRAIGA requires
Anyone who develops or deploys AI systems in Texas, with added disclosure and use limits for government agencies and a disclosure duty for health care providers.
- 01Government agencies: disclose before or during interaction that a consumer is dealing with AI, clearly, in plain language, without dark patterns.
- 02Health care providers: disclose AI use in a service or treatment by the date it is first provided (emergencies: as soon as possible).
- 03Do not develop or deploy AI intended to incite self-harm, harm to others or criminal activity.
- 04Do not develop or deploy AI with intent to unlawfully discriminate against a protected class; disparate impact alone does not show intent.
- 05Government entities: do not use AI for social scoring, or biometric identification of individuals without consent where it infringes rights.
- 06Do not develop or distribute AI with the sole intent of producing child sexual abuse material or unlawful sexual deepfakes.
02 / AI work
Where it touches AI work
Written for AI systems. Liability mostly turns on intent, and the Act gives a defence to defendants who find violations through red-teaming or who substantially comply with the NIST AI RMF Generative AI Profile or a similar framework.
03 / Dates
The dates that matter
Passed the Texas House
Passed the Texas Senate as amended
Signed by Governor Abbott
Act takes effect
04 / Enforcement
Who enforces it
Texas Attorney General exclusively, after a 60-day cure period; no private right of action. Civil penalties: $10,000-$12,000 per curable violation, $80,000-$200,000 per uncurable violation, $2,000-$40,000 per day for continuing violations.
05 / Records
Records an organisation keeps
What an auditor or an inquiry usually asks to see. Your obligations depend on your role and your facts.
- 01Documented intended purpose and deployment context for each AI system
- 02Red-team and adversarial testing records
- 03Mapping of internal controls to the NIST AI RMF Generative AI Profile
- 04Consumer and patient AI-disclosure text with placement records
Optional evidence · where Planisphere fits
Keep a record anyone can check
When your team meets a duty, Planisphere can seal the event it reports as a receipt.
A disclosure shown, a review signed, a model change approved: the event your system reports.
The event becomes a sealed receipt, dated and attributed to whoever is signed in.
Paste the receipt into Verify. No account or key.
A record supports your compliance evidence process. It is not a legal finding or a certification. Systems that call Planisphere's gate API can also hold or refuse an action before it runs.
QUESTIONS
The questions that come next
When does Texas TRAIGA take effect?+
TRAIGA (HB 149) took effect on 1 January 2026; Governor Abbott signed it on 22 June 2025. It bans developing or deploying AI with intent to incite harm, unlawfully discriminate, or produce child sexual abuse material or unlawful sexual deepfakes; limits government use for social scoring and biometric identification; and requires government agencies and health care providers to disclose AI use. Only the Attorney General enforces it, after a 60-day cure period, with civil penalties of up to $200,000 per uncurable violation. Read the full answer
Does Texas require an AI impact assessment?+
No. TRAIGA does not require impact assessments or risk-management programs. It targets intent: it prohibits developing or deploying AI with the intent to cause listed harms, such as unlawful discrimination, and states that disparate impact alone does not show intent to discriminate. Its affirmative duties are narrow: government agencies must disclose when consumers are interacting with AI, and health care providers must disclose AI use in services or treatment. Only the Attorney General can enforce it, and there is no private right of action. Read the full answer
SOURCES
Go back to the source
Texas Legislature Online
Texas Legislature Online
CHANGE LOG
What changed, and when
Rebuilt from primary sources; facts checked on this date.
Related: FSMB AI / state boards · State Bar AI Opinions · SOPIPA · NYC Local Law 144 · Colorado AI Act · Utah AI Policy Act