How to comply with the Texas Responsible AI Governance Act
Texas Responsible AI Governance Act (HB 149)
- Status
- In force
- Binding
- Yes
- Object analysed
- AI system
- Requirements
- 4
- Next milestone
- —
In short
Texas law focused on prohibited intents and the public sector. 36-month regulatory sandbox, 60-day cure period.
Steps to compliance
- Qualify each AI systemAxes to decide: TRAIGA scope.
- Determine your roleDuties vary by role: Developer, Deployer and Government entity.
- Apply the 4 requirementsThey focus on: Prohibited practices, Transparency & notice, Technical documentation and Authorities & registration.
- Prove it with checks6 checks to document, 6 of which also serve AI Act, PL 2338 and AI Basic Act.
- Keep compliance up to dateEvery known milestone has passed: the obligations apply.
Scope and penalties
- Kind
- Statute
- Scope
- Developers and deployers in Texas; stronger duties for government entities.
- Territorial reach
- Doing business in Texas or products used by residents.
- Penalties
- $10,000 to $200,000 per violation, plus daily penalties; Attorney General enforcement only.
- Jurisdiction
- Texas
Timeline
Qualifying a system
Classification axes and possible verdicts
TRAIGA scope
Requirements
4 requirements
| Code | Article | Requirement | Applies to | Checks |
|---|---|---|---|---|
| TX-01 | §552.052-056 | Prohibited intents: manipulation, government social scoring, unlawful discrimination, sexual deepfakes | ||
| TX-02 | §552.051 | Disclose AI interaction to consumers (government, healthcare) | ||
| TX-03 | §552.103 | Answer an AG civil investigative demand (purpose, data, metrics, limits, monitoring) | ||
| TX-04 | §552.105 | Safe harbour: alignment with NIST AI RMF |
Checks to document
Evidence collected for a check counts for every regulation that uses it.
| Code | Check | Scope | Themes | Also used by |
|---|---|---|---|---|
| VER-002-01 | Documented process for detecting drift towards prohibited practices | Organisation | ||
| VER-002-02 | System free of prohibited practices (provider assessment) | System | ||
| VER-018-D-01 | Persons informed of the interaction with an AI system | System | ||
| VER-005-01 | Complete technical documentation compliant with Annex IV | System | ||
| VER-AUTO-02 | Cooperation procedure with authorities | Organisation | ||
| CHK-POL-RISK | An AI risk-management policy and process are established through transparent, documented controls | Organisation |
Themes covered
Frequently asked questions
Who is in scope of TRAIGA?
Developers and deployers in Texas; stronger duties for government entities. Doing business in Texas or products used by residents.
What penalties does TRAIGA carry?
$10,000 to $200,000 per violation, plus daily penalties; Attorney General enforcement only.
When do the TRAIGA obligations apply?
Jun 22, 2025: Signed into law; Jan 1, 2026: Effective date.
Is TRAIGA binding?
Yes. Kind: statute. Status: in force.
How does TRAIGA relate to other regulations?
The same checks serve several texts. Shared checks: AI Act (5), PL 2338 (4) and AI Basic Act (2).
Related regulations
Official sources
Data checked on Sep 25, 2026. General information, not legal advice. Check the official texts and get advice for your situation.
Run these requirements across all your AI systems
TrustFlow inventories your systems, qualifies them under each regulation and collects evidence once for every referential.