Does the United States Have a Federal AI Law?

A Patchwork Rather Than a Single Statute

Unlike the European Union, which built a single comprehensive AI law from the ground up, the United States has taken a more fragmented approach. There is no federal statute that comprehensively defines AI risk tiers and imposes uniform obligations across every industry and use case the way the EU AI Act does. Instead, AI governance in the US emerges from a combination of presidential executive actions, guidance from federal agencies, enforcement of existing laws that were not originally written with AI in mind, and a rapidly growing body of state-level legislation.

This means the answer to “is this AI use legal” in the US often depends less on a single AI statute and more on which existing bodies of law — consumer protection, employment discrimination, financial services regulation, healthcare privacy — already apply to the activity the AI system is performing.

Why the US Approach Looks Different From Europe’s

The US regulatory tradition tends to favor sector-specific rules and agency enforcement over sweeping horizontal legislation, and AI governance has largely followed that pattern so far. Federal agencies such as the Federal Trade Commission have made clear that they view existing authority over unfair and deceptive practices, along with anti-discrimination law, as already applicable to AI systems — meaning a company doesn’t necessarily need a new “AI law” to face liability for harmful AI-driven outcomes, such as discriminatory lending decisions or deceptive AI-generated marketing claims.

At the same time, the executive branch has used tools like executive orders and agency directives to set expectations around AI safety, federal procurement of AI systems, and research priorities, without those actions carrying the same binding, comprehensive force as an act of Congress. Various federal AI bills have been introduced, reflecting ongoing debate about topics like deepfakes, algorithmic transparency, and frontier AI safety, but as of now none has become a single overarching law.

Meanwhile, states have moved more assertively. A number of states have passed or proposed laws addressing specific AI concerns, such as requiring disclosure when AI is used in hiring decisions, restricting deceptive AI-generated media, or regulating automated decision-making in consequential contexts like insurance and employment. This creates a genuine compliance challenge for companies operating nationally, since obligations can differ meaningfully from one state to the next.

What This Means in Practice for Businesses and Individuals

For a company deploying AI in the US, this patchwork means compliance work often looks like mapping AI use cases against multiple overlapping bodies of law simultaneously: federal consumer protection and anti-discrimination law, sector rules if operating in health, finance, or education, and an increasing number of state AI-specific statutes depending on where customers or employees are located. A hiring tool used nationwide, for example, might need to account for state-specific transparency or bias-audit requirements even without a single federal hiring-AI law.

For individuals, this fragmented landscape means legal protections around AI can vary meaningfully depending on which state they live in, and enforcement often comes through the lens of older laws being applied to new technology rather than AI-specific statutes.

Bottom Line

The US does not currently have one comprehensive federal AI law akin to the EU AI Act; AI governance instead runs through executive actions, agency enforcement of existing law, and an expanding patchwork of state legislation, with broader federal AI legislation still under active debate in Congress.

Go deeper

• What regulations currently govern self-driving car testing and deployment?
• What laws regulate AI use in insurance underwriting?
• Do Regulations Require Disclosure of AI-Generated Advertising Content?