{ "@context": "https://schema.org", "@type": "Dataset", "name": "Health AI Observatory — registry of health-AI legal obligations", "url": "https://healthaiobservatory.org/map.json", "license": "https://creativecommons.org/licenses/by/4.0/", "creator": { "@type": "Person", "name": "Cassiana Souza Meyer", "identifier": "https://orcid.org/0009-0002-6628-5435" }, "isBasedOn": { "@type": "Dataset", "name": "Observatório de Responsabilização de IA em Saúde", "url": "https://inteligencianasaude.com.br/panorama.json" }, "provenance": { "snapshot_of": "https://inteligencianasaude.com.br/panorama.json", "source_updated": "2026-09-17", "read_at": "2026-10-02T20:16:56.750Z", "etag": "W/\"e746e3309af10382bc23760a697fe661\"", "verbatim_test": "Each quoted sentence was tested character by character against the retained source file. The test proves the quote matches that file. It does not prove the file is the act, nor that it is the version in force.", "not_checked_is_not_no": "An absent answer means no instrument has been read on that question in that jurisdiction. It never means the answer is no.", "source_class_is_ours": "The upstream registry marks each source with a single boolean, \"primary\". That boolean conflates the weight of the document with the nature of its host. This edition publishes both: \"asserted_primary\" is the upstream claim, unaltered, and \"source_class\" is derived here from the host, which is checkable. Where they disagree, both are shown.", "source_class_meaning": { "official_repository": "Served by the legislature, the government or the regulator that issued the instrument.", "mirror": "A faithful copy of the instrument's text, served by a third party. It reproduces the act; it is not the official repository, and it is not the record of enactment.", "secondary": "A commentary or analysis about the instrument, not the instrument itself." }, "unverifiable_links": [ { "chave": "$.linhas[].obrigacoes[]#colorado-sb-26-189::dever-de-informar::instituicao", "obrigacoes": 2, "fontes_resolvidas": [ "https://leg.colorado.gov/bill_files/116489/download" ], "risco": "baixo-hoje" } ], "confirmed_relinks": [], "key_regime": "derivada" }, "counts": { "instruments": 21, "jurisdictions": 11, "obligations": 55, "with_operative_sentence": 40, "without_operative_sentence": 15 }, "instruments": [ { "id": "brasil-cfm-2454", "jurisdiction": "Brasil", "citation": "Resolution CFM No. 2,454/2026 (Federal Council of Medicine, Brazil)", "citation_note": null, "status": "em_vigor", "effective": "2026-08-26", "accessed": "2026-09-17", "caveat": null, "sources": [ { "url": "https://sistemas.cfm.org.br/normas/arquivos/resolucoes/BR/2026/2454_2026.pdf", "source_class": "official_repository", "asserted_primary": true } ], "obligations": [ { "kind": "decisao-humana", "kind_label": "Human decision", "bearer": [ "medico" ], "bearer_label": [ "physician" ], "provision": "art. 18, § 2º", "verbatim": "A decisão sobre diagnóstico, prognóstico, prescrição, ou qualquer ato médico, caberá sempre ao médico, que pode acolher ou rejeitar as sugestões da IA conforme seu julgamento.", "source": "https://sistemas.cfm.org.br/normas/arquivos/resolucoes/BR/2026/2454_2026.pdf" }, { "kind": "dever-de-informar", "kind_label": "Duty to inform", "bearer": [ "medico" ], "bearer_label": [ "physician" ], "provision": "art. 11", "verbatim": "Qualquer utilização de IA deverá ser comunicada e explicada aos pacientes, reforçando-se que tais sistemas servem de apoio ao médico, mas não substituem a autoridade e a decisão final humana sobre o cuidado.", "source": "https://sistemas.cfm.org.br/normas/arquivos/resolucoes/BR/2026/2454_2026.pdf" }, { "kind": "risco-e-registro", "kind_label": "Risk and recordkeeping", "bearer": [ "instituicao" ], "bearer_label": [ "health care institution" ], "provision": null, "verbatim": null, "source": "https://sistemas.cfm.org.br/normas/arquivos/resolucoes/BR/2026/2454_2026.pdf" }, { "kind": "risco-e-registro", "kind_label": "Risk and recordkeeping", "bearer": [ "medico" ], "bearer_label": [ "physician" ], "provision": "art. 4º, V", "verbatim": "V – registrar no prontuário do paciente o uso de sistemas de IA como apoio à decisão médica", "source": "https://sistemas.cfm.org.br/normas/arquivos/resolucoes/BR/2026/2454_2026.pdf" }, { "kind": "governanca", "kind_label": "Governance", "bearer": [ "instituicao", "medico" ], "bearer_label": [ "health care institution", "physician" ], "provision": "art. 14, caput", "verbatim": "A instituição médica ou o médico que desenvolver ou contratar um modelo, sistema e/ou aplicações de IA deverá estabelecer processos internos de governança aptos a garantir a segurança, a qualidade e a ética, incluindo as seguintes medidas contidas no Anexo III.", "source": "https://sistemas.cfm.org.br/normas/arquivos/resolucoes/BR/2026/2454_2026.pdf" } ] }, { "id": "ue-art-50", "jurisdiction": "União Europeia", "citation": "Regulation (EU) 2024/1689 (AI Act), art. 50 — transparency", "citation_note": null, "status": "em_vigor", "effective": "2026-08-02", "accessed": "2026-07-30", "caveat": null, "sources": [ { "url": "https://eur-lex.europa.eu/legal-content/PT/TXT/?uri=OJ:L_202401689", "source_class": "official_repository", "asserted_primary": true } ], "obligations": [ { "kind": "dever-de-informar", "kind_label": "Duty to inform", "bearer": [ "fabricante", "instituicao" ], "bearer_label": [ "manufacturer", "health care institution" ], "provision": "artigo 50.º, n.º 1", "verbatim": "Os prestadores devem assegurar que os sistemas de IA destinados a interagir diretamente com pessoas singulares sejam concebidos e desenvolvidos de maneira que as pessoas singulares em causa sejam informadas de que estão a interagir com um sistema de IA", "source": "https://eur-lex.europa.eu/legal-content/PT/TXT/?uri=OJ:L_202401689" } ] }, { "id": "ue-art-4", "jurisdiction": "União Europeia", "citation": "Regulation (EU) 2024/1689 (AI Act), art. 4 — AI literacy, as amended by Regulation (EU) 2026/1744", "citation_note": null, "status": "em_vigor", "effective": "2025-02-02", "accessed": "2026-07-30", "caveat": "Analyses published before 2026-07-24 describe the previous wording of Article 4. The wording in force is that of Reg. (EU) 2026/1744, conferred on 2026-09-17.", "sources": [ { "url": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng", "source_class": "official_repository", "asserted_primary": true } ], "obligations": [ { "kind": "capacitacao", "kind_label": "Training", "bearer": [ "fabricante", "instituicao" ], "bearer_label": [ "manufacturer", "health care institution" ], "provision": "Regulation (EU) 2026/1744, Article 1, point (5) — replaces Article 4 of Regulation (EU) 2024/1689; new Article 4(1), first sentence", "verbatim": "Providers and deployers of AI systems shall take measures to support the development of AI literacy of their staff and other persons dealing with the operation and use of AI systems on their behalf, taking into account their technical knowledge, experience, education and training and the context the AI systems are to be used in, and considering the persons or groups of persons on whom the AI systems are to be used.", "source": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng" } ] }, { "id": "ue-alto-risco-anexo-iii", "jurisdiction": "União Europeia", "citation": "Regulation (EU) 2024/1689 (AI Act), art. 6(2) and Annex III — high-risk", "citation_note": "The cited source is Regulation (EU) 2026/1744, which sets the application date. The duties themselves are in Regulation (EU) 2024/1689, arts. 9, 13, 14, 17, 43 and 49. The registry's source field has not yet been corrected upstream.", "status": "futuro", "effective": "2027-12-02", "accessed": "2026-07-30", "caveat": null, "sources": [ { "url": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng", "source_class": "official_repository", "asserted_primary": true } ], "obligations": [ { "kind": "risco-e-registro", "kind_label": "Risk and recordkeeping", "bearer": [ "fabricante" ], "bearer_label": [ "manufacturer" ], "provision": null, "verbatim": null, "source": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng" }, { "kind": "decisao-humana", "kind_label": "Human decision", "bearer": [ "fabricante" ], "bearer_label": [ "manufacturer" ], "provision": null, "verbatim": null, "source": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng" }, { "kind": "governanca", "kind_label": "Governance", "bearer": [ "fabricante" ], "bearer_label": [ "manufacturer" ], "provision": null, "verbatim": null, "source": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng" }, { "kind": "dever-de-informar", "kind_label": "Duty to inform", "bearer": [ "fabricante" ], "bearer_label": [ "manufacturer" ], "provision": null, "verbatim": null, "source": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng" } ] }, { "id": "ue-alto-risco-anexo-i", "jurisdiction": "União Europeia", "citation": "Regulation (EU) 2024/1689 (AI Act), art. 6(1) and Annex I — high-risk", "citation_note": "The cited source is Regulation (EU) 2026/1744, which sets the application date. The duties themselves are in Regulation (EU) 2024/1689, arts. 9, 13, 14, 17, 43 and 49. The registry's source field has not yet been corrected upstream.", "status": "futuro", "effective": "2028-08-02", "accessed": "2026-07-30", "caveat": null, "sources": [ { "url": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng", "source_class": "official_repository", "asserted_primary": true } ], "obligations": [ { "kind": "risco-e-registro", "kind_label": "Risk and recordkeeping", "bearer": [ "fabricante" ], "bearer_label": [ "manufacturer" ], "provision": "Regulation (EU) 2026/1744, Article 1, point (19) — replaces Article 43(3) of Regulation (EU) 2024/1689; new Article 43(3), first subparagraph, first sentence", "verbatim": "For high-risk AI systems covered by the Union harmonisation legislation listed in Section A of Annex I, the provider of the system shall follow the relevant conformity assessment procedure as required in accordance with the relevant Union harmonisation legislation.", "source": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng" }, { "kind": "decisao-humana", "kind_label": "Human decision", "bearer": [ "fabricante" ], "bearer_label": [ "manufacturer" ], "provision": null, "verbatim": null, "source": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng" }, { "kind": "governanca", "kind_label": "Governance", "bearer": [ "fabricante" ], "bearer_label": [ "manufacturer" ], "provision": null, "verbatim": null, "source": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng" }, { "kind": "dever-de-informar", "kind_label": "Duty to inform", "bearer": [ "fabricante" ], "bearer_label": [ "manufacturer" ], "provision": null, "verbatim": null, "source": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng" } ] }, { "id": "texas", "jurisdiction": "Texas", "citation": "Tex. Bus. & Com. Code § 552.051 (HB 149, TRAIGA)", "citation_note": null, "status": "em_vigor", "effective": "2026-01-01", "accessed": "2026-07-28", "caveat": null, "sources": [ { "url": "https://statutes.capitol.texas.gov/Docs/BC/htm/BC.552.htm", "source_class": "official_repository", "asserted_primary": true } ], "obligations": [ { "kind": "dever-de-informar", "kind_label": "Duty to inform", "bearer": [ "medico", "instituicao" ], "bearer_label": [ "physician", "health care institution" ], "provision": "Sec. 552.051(f)", "verbatim": "If an artificial intelligence system is used in relation to health care service or treatment, the provider of the service or treatment shall provide the disclosure under Subsection (b) to the recipient of the service or treatment or the recipient's personal representative not later than the date the service or treatment is first provided, except in the case of emergency, in which case the provider shall provide the required disclosure as soon as reasonably possible.", "source": "https://statutes.capitol.texas.gov/Docs/BC/htm/BC.552.htm" } ] }, { "id": "washington", "jurisdiction": "Washington", "citation": "Wash. Rev. Code § 48.43.830 (SB 5395, ch. 157, Laws of 2026)", "citation_note": null, "status": "em_vigor", "effective": "2026-06-11", "accessed": "2026-09-17", "caveat": null, "sources": [ { "url": "https://app.leg.wa.gov/RCW/default.aspx?cite=48.43.830", "source_class": "official_repository", "asserted_primary": true } ], "obligations": [ { "kind": "decisao-humana", "kind_label": "Human decision", "bearer": [ "operadora" ], "bearer_label": [ "insurer or health plan" ], "provision": "RCW 48.43.830(3)(a)", "verbatim": "Only a licensed physician or a licensed health professional working within their scope of practice may deny a prior authorization request based on medical necessity. The licensed physician or licensed health professional shall evaluate the specific clinical issues involved in the health care services requested by the requesting provider by reviewing and considering the requesting provider's recommendation, the enrollee's medical or other clinical history, as applicable, and individual clinical circumstances. Artificial intelligence shall not be the sole means used to deny, delay, or modify health care services.", "source": "https://app.leg.wa.gov/RCW/default.aspx?cite=48.43.830" }, { "kind": "governanca", "kind_label": "Governance", "bearer": [ "operadora" ], "bearer_label": [ "insurer or health plan" ], "provision": "RCW 48.43.830(3)(b)", "verbatim": "A carrier that uses artificial intelligence for the purpose of prior authorization or prior authorization functions, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses artificial intelligence for the purpose of prior authorization or prior authorization functions, based in whole or in part on medical necessity, shall ensure all of the following:", "source": "https://app.leg.wa.gov/RCW/default.aspx?cite=48.43.830" } ] }, { "id": "illinois", "jurisdiction": "Illinois", "citation": "Ill. Pub. Act 104-0054 (HB 1806, Wellness and Oversight for Psychological Resources Act)", "citation_note": null, "status": "em_vigor", "effective": "2025-08-04", "accessed": "2026-07-28", "caveat": "SECONDARY SOURCE: the official text of the act lives on ilga.gov and this registry has not been able to retain it. On 2026-09-24, from this machine: DNS resolves (ilga.gov -> 12.43.67.2) and TCP never connects — connect time 0.000 s, timing out at 25 s, in all three URL forms tested and at the apex. This is not a content block and not a bot challenge: the host does not accept the connection, and the same symptom was observed from a second network. Until the file can be retained, this row rests on LegiScan, which is a third-party reproduction. — Open date discrepancy: the IDFPR announcement gives 2025-08-04 and the legislative record gives 2025-08-01. The registry publishes 2025-08-04. The credit line in the code itself — \"Source: P.A. 104-54, eff. 8-1-25\" — is the codifier's own authority on the effective date and prevails over an agency announcement; it reached us through a mirror, and ilga.gov did not respond on 2026-09-17. Once that credit line is confirmed in the official source, the published date becomes 2025-08-01.", "sources": [ { "url": "https://legiscan.com/IL/text/HB1806/id/3248540", "source_class": "mirror", "asserted_primary": false } ], "obligations": [ { "kind": "proibicao", "kind_label": "Prohibition", "bearer": [ "desenvolvedor", "medico" ], "bearer_label": [ "developer", "physician" ], "provision": null, "verbatim": null, "source": "https://legiscan.com/IL/text/HB1806/id/3248540" }, { "kind": "decisao-humana", "kind_label": "Human decision", "bearer": [ "medico" ], "bearer_label": [ "physician" ], "provision": null, "verbatim": null, "source": "https://legiscan.com/IL/text/HB1806/id/3248540" } ] }, { "id": "rhode-island-saude-mental", "jurisdiction": "Rhode Island", "citation": "R.I. Gen. Laws ch. 40.1-5.5, enacted by S 2197 Substitute A as amended", "citation_note": null, "status": "em_vigor", "effective": "2026-06-22", "accessed": "2026-09-17", "caveat": "Until 2026-09-17 this row cited the plain Substitute A, which is not the version that became law: the one enacted is Substitute A as amended (S2197Aaa), identical to its companion H 7349A. Two provisions differ between them — § 40.1-5.5-3(a), which now reaches use \"to assist in supplementary support or therapeutic communication\", and § 40.1-5.5-3(c)(2), which replaced contemporaneous clinical supervision with an established therapeutic relationship with consent, and divided responsibility with the vendor. Read from outside this machine, on 2026-09-17: the Rhode Island assembly's server does not answer from here. The Rhode Island Public Law was not obtained and is not cited. And the prohibition in § 40.1-5.5-3(b) — offering or advertising psychotherapy to the public — is not codified yet: its normative subject is \"an individual, corporation, or entity\", which matches no value in the obligated-party taxonomy.", "sources": [ { "url": "https://webserver.rilegislature.gov/BillText/BillText26/SenateText26/S2197Aaa.pdf", "source_class": "official_repository", "asserted_primary": true } ], "obligations": [ { "kind": "decisao-humana", "kind_label": "Human decision", "bearer": [ "medico" ], "bearer_label": [ "physician" ], "provision": "R.I. Gen. Laws § 40.1-5.5-3(c)", "verbatim": "A licensed professional or provider may use artificial intelligence only to the extent that such use meets the requirements of subsection (a) of this section. A licensed professional or provider may not allow or otherwise use artificial intelligence to do any of the following: (1) Make independent therapeutic decisions; (2) Directly interact with clients in any form of therapeutic communication without an established relationship when the licensed professional or provider agrees to undertake diagnosis and treatment of the patient and the patient consents under this section, whether or not there has been an in-person encounter between the licensed professional or provider and the patient. The provider retains responsibility for clinical judgement and reasonable therapeutic oversight of the patient's use of the system, but not for vendor-controlled system design, algorithms, or outputs; or (3) Determine therapeutic recommendations or treatment plans.", "source": "https://webserver.rilegislature.gov/BillText/BillText26/SenateText26/S2197Aaa.pdf" }, { "kind": "dever-de-informar", "kind_label": "Duty to inform", "bearer": [ "medico" ], "bearer_label": [ "physician" ], "provision": "R.I. Gen. Laws § 40.1-5.5-3(a)", "verbatim": "No licensed professional or provider shall be permitted to use artificial intelligence, designed to simulate emotional attachment, bonding, or dependency or artificial intelligence companions for mental health or emotional support, to assist in supplementary support or therapeutic communication in therapy or psychotherapy services where the client's therapeutic session is recorded or transcribed unless the patient or the patient's parent, guardian or other legally authorized representative is informed in writing of the following and provides consent as defined in § 40.1-5.5-2: (1) That artificial intelligence will be used; (2) The specific purpose of the artificial intelligence tool or system that will be used; and (3) The patient or the patient's parents, or other legally authorized representative, provides consent to the use of artificial intelligence.", "source": "https://webserver.rilegislature.gov/BillText/BillText26/SenateText26/S2197Aaa.pdf" } ] }, { "id": "rhode-island-notificacao", "jurisdiction": "Rhode Island", "citation": "R.I. Gen. Laws ch. 23-106, enacted by S 2570 Substitute A", "citation_note": null, "status": "em_vigor", "effective": "2026-06-22", "accessed": "2026-09-17", "caveat": "Until 2026-09-17 this row rested on a law-firm analysis (Nixon Peabody). It has been replaced by the official text of S 2570 Substitute A (LC004719/SUB A), R.I. Gen. Laws § 23-106-3. The coding by obligated party — physician, health care institution — was confirmed against the text and did not change.", "sources": [ { "url": "https://webserver.rilegislature.gov/Billtext/BillText26/SenateText26/S2570A.pdf", "source_class": "official_repository", "asserted_primary": true } ], "obligations": [ { "kind": "dever-de-informar", "kind_label": "Duty to inform", "bearer": [ "medico", "instituicao" ], "bearer_label": [ "physician", "health care institution" ], "provision": "R.I. Gen. Laws § 23-106-3", "verbatim": "Any and all healthcare providers and healthcare facilities that employ artificial intelligence (\"AI\") to document in-person or telehealth visits shall notify patients of the use of AI for that sole purpose and review the AI-generated documentation for accuracy after the visit.", "source": "https://webserver.rilegislature.gov/Billtext/BillText26/SenateText26/S2570A.pdf" } ] }, { "id": "rhode-island-companhia", "jurisdiction": "Rhode Island", "citation": "R.I. S 2195 (2026) — AI companion models", "citation_note": null, "status": "futuro", "effective": "2027-01-01", "accessed": "2026-07-28", "caveat": "OUTSIDE THE INCLUSION CRITERION, AND KEPT ON THE MAP FOR WANT OF A MECHANISM — decided 2026-09-17. It is commercial law (Title 6), it does not bear on care, and the obligated party — the operator of an AI companion model — is not an actor in care. Marking it out of scope was attempted and gate 7 of the hard rule refused: the id has already been served on the Portuguese edition's public /mapa.json, and leaving the projection is what the rule forbids. Retiring a published id requires a mechanism this house does not yet have, and that decision is the house's. Until then the row stays on the Map, flagged here. It is also the only row resting on a third-party analysis (Nixon Peabody); the Rhode Island assembly's server did not answer on 2026-09-17.", "sources": [ { "url": "https://www.nixonpeabody.com/insights/alerts/2026/07/20/rhode-island-joins-the-wave-of-states-regulating-ai-in-healthcare-and-ai-companion-tools", "source_class": "secondary", "asserted_primary": false } ], "obligations": [ { "kind": "dever-de-informar", "kind_label": "Duty to inform", "bearer": [ "desenvolvedor" ], "bearer_label": [ "developer" ], "provision": null, "verbatim": null, "source": "https://www.nixonpeabody.com/insights/alerts/2026/07/20/rhode-island-joins-the-wave-of-states-regulating-ai-in-healthcare-and-ai-companion-tools" }, { "kind": "governanca", "kind_label": "Governance", "bearer": [ "desenvolvedor" ], "bearer_label": [ "developer" ], "provision": null, "verbatim": null, "source": "https://www.nixonpeabody.com/insights/alerts/2026/07/20/rhode-island-joins-the-wave-of-states-regulating-ai-in-healthcare-and-ai-companion-tools" } ] }, { "id": "california-sb-1120", "jurisdiction": "Califórnia", "citation": "Cal. Health & Safety Code § 1367.01(k) (SB 1120)", "citation_note": null, "status": "em_vigor", "effective": "2025-01-01", "accessed": "2026-09-17", "caveat": "The 2025-01-01 effective date stopped being an inference on 2026-08-03: it is printed in the credit line of the codified text, not deduced from California's general rule.", "sources": [ { "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=HSC§ionNum=1367.01", "source_class": "official_repository", "asserted_primary": true } ], "obligations": [ { "kind": "decisao-humana", "kind_label": "Human decision", "bearer": [ "operadora" ], "bearer_label": [ "insurer or health plan" ], "provision": "Health and Safety Code § 1367.01(k)(2)", "verbatim": "Notwithstanding paragraph (1), the artificial intelligence, algorithm, or other software tool shall not deny, delay, or modify health care services based, in whole or in part, on medical necessity. A determination of medical necessity shall be made only by a licensed physician or a licensed health care professional competent to evaluate the specific clinical issues involved in the health care services requested by the provider, as provided in subdivision (e), by reviewing and considering the requesting provider’s recommendation, the enrollee’s medical or other clinical history, as applicable, and individual clinical circumstances.", "source": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=HSC§ionNum=1367.01" }, { "kind": "governanca", "kind_label": "Governance", "bearer": [ "operadora" ], "bearer_label": [ "insurer or health plan" ], "provision": "Health and Safety Code § 1367.01(k)(1)", "verbatim": "A health care service plan, including a specialized health care service plan that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity, shall comply with this section and shall ensure all of the following:", "source": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=HSC§ionNum=1367.01" } ] }, { "id": "california-ab-3030", "jurisdiction": "Califórnia", "citation": "Cal. Health & Safety Code ch. 2.13, § 1339.75 (AB 3030)", "citation_note": null, "status": "em_vigor", "effective": "2025-01-01", "accessed": "2026-08-03", "caveat": null, "sources": [ { "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=HSC§ionNum=1339.75", "source_class": "official_repository", "asserted_primary": true } ], "obligations": [ { "kind": "dever-de-informar", "kind_label": "Duty to inform", "bearer": [ "instituicao", "medico" ], "bearer_label": [ "health care institution", "physician" ], "provision": "§ 1339.75(a)(1) (o trecho começa no caput da (a))", "verbatim": "A health facility, clinic, physician’s office, or office of a group practice that uses generative artificial intelligence to generate written or verbal patient communications pertaining to patient clinical information shall ensure that those communications include both of the following: (1) A disclaimer that indicates to the patient that the communication was generated by generative artificial intelligence.", "source": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=HSC§ionNum=1339.75" } ] }, { "id": "texas-sb-815", "jurisdiction": "Texas", "citation": "Tex. Ins. Code § 4201.156 (SB 815)", "citation_note": null, "status": "em_vigor", "effective": "2025-09-01", "accessed": "2026-08-03", "caveat": "The statutory definition of \"automated decision system\" reaches an algorithm that uses data analysis to \"make, suggest, or recommend certain determinations, decisions, judgments, or conclusions\" — so it reaches one that only suggests or recommends. And the prohibition is on using such a system to decide \"wholly or partly\". How far that reaches a tool that merely supports a human reviewer is an open question of interpretation — recorded here, not resolved.", "sources": [ { "url": "https://statutes.capitol.texas.gov/Docs/IN/htm/IN.4201.htm", "source_class": "official_repository", "asserted_primary": true } ], "obligations": [ { "kind": "proibicao", "kind_label": "Prohibition", "bearer": [ "operadora" ], "bearer_label": [ "insurer or health plan" ], "provision": "Sec. 4201.156(a)", "verbatim": "A utilization review agent may not use an automated decision system to make, wholly or partly, an adverse determination.", "source": "https://statutes.capitol.texas.gov/Docs/IN/htm/IN.4201.htm" } ] }, { "id": "texas-sb-1188", "jurisdiction": "Texas", "citation": "Tex. Health & Safety Code ch. 183, § 183.005 (SB 1188)", "citation_note": null, "status": "em_vigor", "effective": "2025-09-01", "accessed": "2026-08-03", "caveat": "Read in the enrolled version on capitol.texas.gov. The other two Texas rows cite the consolidated code; this one cites the act, and the difference is one of provenance, not of content.", "sources": [ { "url": "https://capitol.texas.gov/tlodocs/89R/billtext/html/SB01188F.htm", "source_class": "official_repository", "asserted_primary": true } ], "obligations": [ { "kind": "decisao-humana", "kind_label": "Human decision", "bearer": [ "medico" ], "bearer_label": [ "physician" ], "provision": "Sec. 183.005(a)(3), Health and Safety Code (acrescentado pela SECTION 1 do SB 1188)", "verbatim": "the practitioner reviews all records created with artificial intelligence in a manner that is consistent with medical records standards developed by the Texas Medical Board.", "source": "https://capitol.texas.gov/tlodocs/89R/billtext/html/SB01188F.htm" }, { "kind": "dever-de-informar", "kind_label": "Duty to inform", "bearer": [ "medico" ], "bearer_label": [ "physician" ], "provision": "Sec. 183.005(b), Health and Safety Code (acrescentado pela SECTION 1 do SB 1188)", "verbatim": "A health care practitioner who uses artificial intelligence for diagnostic purposes as described by Subsection (a) must disclose the practitioner's use of that technology to the practitioner's patients.", "source": "https://capitol.texas.gov/tlodocs/89R/billtext/html/SB01188F.htm" } ] }, { "id": "maryland-hb-820", "jurisdiction": "Maryland", "citation": "Md. Code Ann., Ins. §§ 15-10A-06 and 15-10B-05.1 (HB 820, ch. 747, 2025)", "citation_note": null, "status": "em_vigor", "effective": "2025-10-01", "accessed": "2026-09-17", "caveat": "Three caveats, and the first is about this row itself. (1) IT REPLACES AN ALREADY PUBLISHED id. Until 2026-08-09 this matter was served on the Portuguese edition's /panorama.json under `maryland-hb-1563`, crediting HB 1563 of 2026. HB 1563 only re-enacted the provision — its header says \"repealing and reenacting, with amendments\" and the AI item appears in lower case, which in Maryland marks pre-existing text. What created it was HB 820. Changing the id was an editorial decision of 2026-08-09: an id that names the wrong act is worse than a broken link. This house has NO mechanism for retiring a published id, and the Portuguese edition's /panorama.json does not even carry a register of ids the way its /mapa.json does. Anyone consuming the dataset while holding `maryland-hb-1563` receives no signal that the matter moved address. It is a known gap, declared rather than hidden. (2) IMPRECISE OBLIGATED PARTY, and it is declared. The provision reaches three figures — carrier, pharmacy benefits manager and private review agent — and all three were coded as insurer or health plan, the only value available. A private review agent is not a payer: it reviews on behalf of whoever pays. It is the same gap that exists between developer and manufacturer, and it is not solved by widening a term because of one row. (3) The reading was done on the PDF of the enacted text of Chapter 747, reopened on 2026-08-09; the prohibition in (D) and the date in SECTION 2 are confirmed literally in the document.", "sources": [ { "url": "https://mgaleg.maryland.gov/2025RS/Chapters_noln/CH_747_hb0820t.pdf", "source_class": "official_repository", "asserted_primary": true } ], "obligations": [ { "kind": "proibicao", "kind_label": "Prohibition", "bearer": [ "operadora" ], "bearer_label": [ "insurer or health plan" ], "provision": "§ 15-10B-05.1(d)", "verbatim": "AN ARTIFICIAL INTELLIGENCE, ALGORITHM, OR OTHER SOFTWARE TOOL MAY NOT DENY, DELAY OR MODIFY HEALTH CARE SERVICES.", "source": "https://mgaleg.maryland.gov/2025RS/Chapters_noln/CH_747_hb0820t.pdf" }, { "kind": "decisao-humana", "kind_label": "Human decision", "bearer": [ "operadora" ], "bearer_label": [ "insurer or health plan" ], "provision": "§ 15-10B-05.1(c)(4)", "verbatim": "AN ARTIFICIAL INTELLIGENCE, ALGORITHM, OR OTHER SOFTWARE TOOL DOES NOT REPLACE THE ROLE OF A HEALTH CARE PROVIDER IN THE DETERMINATION PROCESS UNDER § 15–10B–07 OF THIS SUBTITLE", "source": "https://mgaleg.maryland.gov/2025RS/Chapters_noln/CH_747_hb0820t.pdf" }, { "kind": "governanca", "kind_label": "Governance", "bearer": [ "operadora" ], "bearer_label": [ "insurer or health plan" ], "provision": "§ 15-10B-05.1(c)(8)", "verbatim": "WRITTEN POLICIES AND PROCEDURES ARE INCLUDED IN THE UTILIZATION PLAN SUBMITTED UNDER § 15–10B–05 OF THIS SUBTITLE, INCLUDING HOW AN ARTIFICIAL INTELLIGENCE, ALGORITHM, OR OTHER SOFTWARE TOOL WILL BE USED AND WHAT OVERSIGHT WILL BE PROVIDED", "source": "https://mgaleg.maryland.gov/2025RS/Chapters_noln/CH_747_hb0820t.pdf" }, { "kind": "risco-e-registro", "kind_label": "Risk and recordkeeping", "bearer": [ "operadora" ], "bearer_label": [ "insurer or health plan" ], "provision": "§ 15-10A-06(a)(3)(vi)", "verbatim": "WHETHER AN ARTIFICIAL INTELLIGENCE, ALGORITHM, OR OTHER SOFTWARE TOOL WAS USED IN MAKING THE ADVERSE DECISION", "source": "https://mgaleg.maryland.gov/2025RS/Chapters_noln/CH_747_hb0820t.pdf" } ] }, { "id": "indiana-hb-1271", "jurisdiction": "Indiana", "citation": "Ind. Code ch. 27-1-52, § 9 (HEA 1271, P.L. 88-2026)", "citation_note": null, "status": "em_vigor", "effective": "2026-07-01", "accessed": "2026-09-23", "caveat": "The text read is the Enrolled Act, whose declared origin is the official URL of the Indiana General Assembly, iga.in.gov, and which arrived on 2026-09-23 by declared delivery, on the same route as the Alabama act and the Colorado session law. The file's identity rests on the hash of its bytes. Until then the row rested on a copy hosted by a third party (LegiScan), which on 2026-09-17 began blocking automated reading — and was still blocking on 2026-09-24, with HTTP 403. ⚠ The official URL does not answer from every network: CloudFront returns the application shell for any path, including its own JavaScript. Three occurrences of \"artificial intelligence\", none of \"algorithm\", re-checked on 2026-09-24 by exhaustive sweep.", "sources": [ { "url": "https://iga.in.gov/pdf-documents/124/2026/house/bills/HB1271/HB1271.07.ENRS.pdf", "source_class": "official_repository", "asserted_primary": true } ], "obligations": [ { "kind": "decisao-humana", "kind_label": "Human decision", "bearer": [ "operadora" ], "bearer_label": [ "insurer or health plan" ], "provision": null, "verbatim": null, "source": "https://iga.in.gov/pdf-documents/124/2026/house/bills/HB1271/HB1271.07.ENRS.pdf" }, { "kind": "decisao-humana", "kind_label": "Human decision", "bearer": [ "medico", "instituicao" ], "bearer_label": [ "physician", "health care institution" ], "provision": null, "verbatim": null, "source": "https://iga.in.gov/pdf-documents/124/2026/house/bills/HB1271/HB1271.07.ENRS.pdf" }, { "kind": "dever-de-informar", "kind_label": "Duty to inform", "bearer": [ "operadora" ], "bearer_label": [ "insurer or health plan" ], "provision": null, "verbatim": null, "source": "https://iga.in.gov/pdf-documents/124/2026/house/bills/HB1271/HB1271.07.ENRS.pdf" } ] }, { "id": "alabama-sb-63", "jurisdiction": "Alabama", "citation": "Ala. Act No. 2026-589, § 1 (SB 63)", "citation_note": "Approved by Governor Kay Ivey on 16 April 2026 at 9:00 a.m., read in the image of the act filed with the Alabama Secretary of State. Aggregators report 17 April; the primary record says 16 in three independent places.", "status": "em_vigor", "effective": "2026-10-01", "accessed": "2026-10-02", "caveat": "Act number located on 2026-09-23: Act No. 2026-589, approved on 2026-04-16. It was read in the IMAGE of the act published by the Alabama Secretary of State (sha256 71ff9d04…), by declared delivery, not in the enrolled text, which does not carry it. On 2026-09-24 the citation in the codigo field was changed to include the number, on the basis of that image. ⚠ Twelve occurrences of \"artificial intelligence\" in the act, checked on 2026-09-24 by exhaustive sweep and without distinguishing case: eleven in lower case, including in the act's title, and one in capitals in the definition, § 1(a)(1). The earlier wording of this caveat said nine, and nine does not appear under any extraction mode — it was a typed count, not a derived one.", "sources": [ { "url": "https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2026RS/SB63-enr.pdf", "source_class": "official_repository", "asserted_primary": true } ], "obligations": [ { "kind": "decisao-humana", "kind_label": "Human decision", "bearer": [ "operadora" ], "bearer_label": [ "insurer or health plan" ], "provision": "Section 1(b)(3)", "verbatim": "a determination to deny, delay, or modify a request for prior authorization based on medical necessity shall always be made by a licensed physician or other health care professional who is competent to evaluate any recommendation or conclusion of artificial intelligence", "source": "https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2026RS/SB63-enr.pdf" }, { "kind": "dever-de-informar", "kind_label": "Duty to inform", "bearer": [ "operadora" ], "bearer_label": [ "insurer or health plan" ], "provision": "Section 1(c)(1) (o trecho começa no caput da (c))", "verbatim": "A health benefit plan provider shall do all of the following: (1) Make prominent written disclosure regarding its use of artificial intelligence in utilization review in its policies and procedures.", "source": "https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2026RS/SB63-enr.pdf" }, { "kind": "risco-e-registro", "kind_label": "Risk and recordkeeping", "bearer": [ "operadora" ], "bearer_label": [ "insurer or health plan" ], "provision": "Section 1(b)(2)", "verbatim": "A health benefit plan provider shall certify annually to the department that the artificial intelligence used to make determinations of medical necessity on requests for prior authorization complies with all of the following", "source": "https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2026RS/SB63-enr.pdf" }, { "kind": "governanca", "kind_label": "Governance", "bearer": [ "operadora" ], "bearer_label": [ "insurer or health plan" ], "provision": "Section 1(c)(2)", "verbatim": "Ensure that its use of artificial intelligence and the outcomes that it generates are reviewed on a periodic basis to maximize accuracy and reliability to ensure its use of artificial intelligence in utilization review complies with the requirements of subsection (b).", "source": "https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2026RS/SB63-enr.pdf" } ] }, { "id": "colorado-hb-26-1195", "jurisdiction": "Colorado", "citation": "Colo. Rev. Stat. §§ 12-245-224.5 and 6-1-1705.2 (HB 26-1195)", "citation_note": null, "status": "em_vigor", "effective": "2026-08-12", "accessed": "2026-09-17", "caveat": "The reading was made in the Final Act of 2026-06-02, which is the enrolled text sent for signature. The Signed Act of 2026-06-03 is NOT retained in this registry — what the earlier wording asserted about its text layer cannot be sustained here, because there is no file to test against. Final Act and Signed Act are the names the Colorado legislature gives its download variants, not text of the document, and they carry no quotation marks for that reason.", "sources": [ { "url": "https://leg.colorado.gov/bill_files/116915/download", "source_class": "official_repository", "asserted_primary": true } ], "obligations": [ { "kind": "decisao-humana", "kind_label": "Human decision", "bearer": [ "medico" ], "bearer_label": [ "physician" ], "provision": "C.R.S. § 12-245-224.5(5)(a)-(b)", "verbatim": "A LICENSEE, REGISTRANT, CERTIFICATE HOLDER, OR OTHER INDIVIDUAL LAWFULLY PERMITTED TO PROVIDE PSYCHOTHERAPY SERVICES IN THE STATE SHALL NOT ALLOW AN ARTIFICIAL INTELLIGENCE SYSTEM TO DO ANY OF THE FOLLOWING: (a) INTERACT WITH CLIENTS IN ANY FORM OF THERAPEUTIC COMMUNICATION WITHOUT SYNCHRONOUS, REAL-TIME INTERACTION BETWEEN THE LICENSEE, REGISTRANT, CERTIFICATE HOLDER, OR OTHER INDIVIDUAL LAWFULLY PERMITTED TO PROVIDE PSYCHOTHERAPY SERVICES IN THE STATE, THE ARTIFICIAL INTELLIGENCE SYSTEM, AND THE CLIENT; OR (b) GENERATE THERAPEUTIC RECOMMENDATIONS OR TREATMENT PLANS WITHOUT REVIEW AND APPROVAL BY THE LICENSEE, REGISTRANT, CERTIFICATE HOLDER, OR OTHER INDIVIDUAL LAWFULLY PERMITTED TO PROVIDE PSYCHOTHERAPY SERVICES IN THE STATE.", "source": "https://leg.colorado.gov/bill_files/116915/download" }, { "kind": "dever-de-informar", "kind_label": "Duty to inform", "bearer": [ "medico" ], "bearer_label": [ "physician" ], "provision": "C.R.S. § 12-245-224.5(4)(a)(I)(A)-(B)", "verbatim": "A LICENSEE, REGISTRANT, CERTIFICATE HOLDER, OR OTHER INDIVIDUAL LAWFULLY PERMITTED TO PROVIDE PSYCHOTHERAPY SERVICES IN THE STATE SHALL NOT USE AN ARTIFICIAL INTELLIGENCE SYSTEM TO RECORD OR TRANSCRIBE A CLIENT'S THERAPEUTIC SESSION, UNLESS: (I) THE CLIENT OR THE CLIENT'S LEGALLY AUTHORIZED REPRESENTATIVE IS INFORMED IN ADVANCE IN WRITING OF THE FOLLOWING: (A) THAT AN ARTIFICIAL INTELLIGENCE SYSTEM WILL BE USED; AND (B) THE SPECIFIC PURPOSE FOR WHICH THE ARTIFICIAL INTELLIGENCE SYSTEM WILL BE USED;", "source": "https://leg.colorado.gov/bill_files/116915/download" }, { "kind": "proibicao", "kind_label": "Prohibition", "bearer": [ "desenvolvedor" ], "bearer_label": [ "developer" ], "provision": "C.R.S. § 6-1-1705.2(1)", "verbatim": "A PERSON SHALL NOT USE ANY TERM, LETTER, OR PHRASE IN THE ADVERTISING, INTERFACE, OR OUTPUTS OF AN ARTIFICIAL INTELLIGENCE SYSTEM IN A MANNER THAT: (a) INDICATES OR IMPLIES THAT THE ARTIFICIAL INTELLIGENCE SYSTEM'S OUTPUT DATA IS BEING PROVIDED BY, IS ENDORSED BY, OR IS EQUIVALENT TO SERVICES PROVIDED BY AN INDIVIDUAL LICENSED, REGISTERED, OR CERTIFIED IN THE STATE PURSUANT TO ARTICLE 245 OF TITLE 12 TO ENGAGE IN THE PRACTICE OF PSYCHOTHERAPY OR TO PROVIDE PSYCHOTHERAPY SERVICES; (b) REPRESENTS THAT THE ARTIFICIAL INTELLIGENCE SYSTEM PROVIDES PSYCHOTHERAPY SERVICES; OR (c) REPRESENTS THAT A USER'S DATA IS CONFIDENTIAL IN A MANNER THAT WOULD LEAD A REASONABLE USER TO BELIEVE THAT THE DATA IS PROTECTED IN A MANNER COMPARABLE TO PRIVACY PROTECTIONS AFFORDED BY THERAPIST-CLIENT CONFIDENTIALITY IN A RELATIONSHIP BETWEEN A LICENSEE, REGISTRANT, CERTIFICATE HOLDER, OR OTHER PERSON LAWFULLY PERMITTED TO PROVIDE PSYCHOTHERAPY SERVICES IN THE STATE AND THE CLIENT.", "source": "https://leg.colorado.gov/bill_files/116915/download" } ] }, { "id": "colorado-hb-26-1139", "jurisdiction": "Colorado", "citation": "Colo. Rev. Stat. §§ 10-16-112.7 and 25.5-1-209 (HB 26-1139, ch. 325, 2026 Colo. Sess. Laws 1889)", "citation_note": "Takes effect 1 January 2027, and the act is subject to referendum petition: if a petition is filed within ninety days of final adjournment, it takes effect only if approved at the November 2026 general election. The date is conditional.", "status": "futuro", "effective": "2027-01-01", "accessed": "2026-09-17", "caveat": "Signed on 2026-06-02 by Jared S. Polis and published as Chapter 325, 2026 Colo. Sess. Laws 1889: the session-law PDF prints \"Ch. 325 Insurance 1889\" at the top, the two-line header \"CHAPTER 325\" and \"INSURANCE\", the title \"AN ACT CONCERNING THE USE OF ARTIFICIAL INTELLIGENCE IN HEALTH CARE\", and \"Approved: June 2, 2026\". ⚠ The reading of 2026-09-17 was made outside this machine; since 2026-09-23 the session-law PDF has been retained (sha256 77c19099…, 80,795 bytes, 5 pages), by declared delivery, and the official URL as tested returned HTTP 403. METHOD NOTE, good for every Colorado instrument: the chapter number does not appear in the Signed Act — it is assigned when the Session Laws are indexed by the Office of Legislative Legal Services. Signed Act and Session Law are two distinct official documents, and the citation names both. Effective 2027-01-01, subject to a referendum clause; the window closed 2026-08-11 and the registry records no later check of the Referendum Petitions page. The act reaches five entities: carrier, pharmacy benefit manager, private utilization review organization, behavioral health administrative services organization and managed care entity. And § 25.5-1-209 reaches both the state agency (Department of Health Care Policy and Financing) and the entities it contracts with to pay for those services: the text says \"A PAYER OF MENTAL OR BEHAVIORAL HEALTH\" … \"SERVICES PROVIDED UNDER\" the programs, and draws no distinction. ⚠ The quotation is given in two segments because the PDF's text layer breaks \"HEALTH-CARE\" into \"HEALTH -CARE\": the whole sentence does not match literally, and the two halves do.", "sources": [ { "url": "https://leg.colorado.gov/bill_files/116723/download", "source_class": "official_repository", "asserted_primary": true } ], "obligations": [ { "kind": "decisao-humana", "kind_label": "Human decision", "bearer": [ "operadora" ], "bearer_label": [ "insurer or health plan" ], "provision": "C.R.S. § 10-16-112.7(5)(b)", "verbatim": "A CARRIER'S DENIAL OF COVERAGE BASED IN WHOLE OR IN PART ON MEDICAL NECESSITY SHALL NOT BE ISSUED SOLELY ON THE OUTPUT OF AN ARTIFICIAL INTELLIGENCE SYSTEM WITHOUT HUMAN REVIEW AND APPROVAL OF THE DENIAL BY A LICENSED CLINICIAN, LICENSED PHYSICIAN, OR OTHER REGULATED PROFESSIONAL THAT IS COMPETENT TO EVALUATE THE SPECIFIC CLINICAL ISSUES INVOLVED IN THE HEALTH-CARE SERVICES REQUESTED BY THE PROVIDER AND A REVIEW OF THE HEALTH BENEFIT PLAN'S TERMS OF COVERAGE FOR THE HEALTH-CARE SERVICE.", "source": "https://leg.colorado.gov/bill_files/116723/download" }, { "kind": "risco-e-registro", "kind_label": "Risk and recordkeeping", "bearer": [ "operadora" ], "bearer_label": [ "insurer or health plan" ], "provision": "C.R.S. § 10-16-112.7(4)(a)", "verbatim": "A PERSON DESCRIBED IN SUBSECTION (2) OF THIS SECTION SHALL PROVIDE WRITTEN DISCLOSURES TO THE DIVISION, THE DEPARTMENT OF HUMAN SERVICES, OR THE DEPARTMENT OF HEALTH CARE POLICY AND FINANCING, AS APPLICABLE, THAT IDENTIFY: (a) THE UTILIZATION REVIEW FUNCTIONS FOR WHICH THE ARTIFICIAL INTELLIGENCE SYSTEM WILL BE USED;", "source": "https://leg.colorado.gov/bill_files/116723/download" }, { "kind": "governanca", "kind_label": "Governance", "bearer": [ "operadora" ], "bearer_label": [ "insurer or health plan" ], "provision": "C.R.S. § 10-16-112.7(3)(e)-(f)", "verbatim": "THE ARTIFICIAL INTELLIGENCE SYSTEM PRODUCES AND RETAINS DOCUMENTATION, AUDIT LOGS, AND MODEL-GOVERNANCE RECORDS IN ORDER TO DEMONSTRATE COMPLIANCE WITH THIS SECTION AND SECTION 10-3-1104.9; (f) THE ARTIFICIAL INTELLIGENCE SYSTEM'S PERFORMANCE, USE, AND OUTCOMES ARE PERIODICALLY REVIEWED TO MAXIMIZE ACCURACY AND RELIABILITY;", "source": "https://leg.colorado.gov/bill_files/116723/download" }, { "kind": "proibicao", "kind_label": "Prohibition", "bearer": [ "operadora" ], "bearer_label": [ "insurer or health plan" ], "provision": "C.R.S. § 10-16-112.7(6)(a)", "verbatim": "A CARRIER OFFERING A HEALTH BENEFIT PLAN ISSUED OR RENEWED IN THE STATE ON OR AFTER THE EFFECTIVE DATE OF THIS SECTION SHALL NOT PROVIDE COVERAGE FOR SERVICES THAT CONSTITUTE PSYCHOTHERAPY SERVICES, AS DEFINED IN SECTION 12-245-202 (14), THAT ARE PROVIDED DIRECTLY TO AN INDIVIDUAL AND THAT ARE CONDUCTED BY AN ARTIFICIAL INTELLIGENCE SYSTEM.", "source": "https://leg.colorado.gov/bill_files/116723/download" }, { "kind": "proibicao", "kind_label": "Prohibition", "bearer": [ "poder-publico" ], "bearer_label": [ "public authority" ], "provision": "C.R.S. § 25.5-1-209", "verbatim": "A PAYER OF MENTAL OR BEHAVIORAL HEALTH-CARE SERVICES PROVIDED UNDER THE \"COLORADO MEDICAL ASSISTANCE ACT\", AS SPECIFIED IN ARTICLES 4, 5, AND 6 OF THIS TITLE 25.5, OR THE \"CHILDREN'S BASIC HEALTH PLAN ACT\", AS SPECIFIED IN ARTICLE 8 OF THIS TITLE 25.5, SHALL NOT PAY FOR SERVICES THAT CONSTITUTE PSYCHOTHERAPY SERVICES, AS DEFINED IN SECTION 12-245-202 (14), THAT ARE PROVIDED DIRECTLY TO AN INDIVIDUAL AND THAT ARE CONDUCTED BY AN ARTIFICIAL INTELLIGENCE SYSTEM, AS THAT TERM IS DEFINED IN SECTION 10-16-112.7 (1)(b).", "source": "https://leg.colorado.gov/bill_files/116723/download" } ] }, { "id": "colorado-sb-26-189", "jurisdiction": "Colorado", "citation": "Colo. Rev. Stat. §§ 6-1-1701 to 6-1-1709 (SB 26-189)", "citation_note": "Takes effect 1 January 2027. The chapter number of the session law is not stated here: no file carrying it has been retained and hashed. Two obligations on this instrument share a derived key and are excluded from the link-integrity check; see provenance.unverifiable_links.", "status": "futuro", "effective": "2027-01-01", "accessed": "2026-09-17", "caveat": "Four caveats. (1) SCOPE DECIDED ON 2026-08-09, AND THE PATH IS ON THE RECORD. The row was first routed to the Panorama, under the rule of 2026-08-08 — a general AI statute reaching health among other domains — when the reading covered only the dates and the final clause. Reading the act in full then found § 6-1-1708(3)(c) and (d): an entity covered by HIPAA is taken out of §§ 1701 to 1706 and, in exchange, must tell the patient that advanced technology is in use and, in a decision on financial assistance, open a path of human review with power to overturn the decision. That changes what a patient can expect in care, which is the Map's criterion and the same one that puts Texas on it — the criterion is the effect, never the obligated party. The reclassification was an editorial decision taken with the act open, not a consequence of new research. (2) THE RULE IT REPEALS REMAINS IN FORCE UNTIL THEN. The act performs a \"repeal and reenact, with amendments, part 17\" in SECTION 1 — and SECTION 1 is not among the provisions that SECTION 5(2) brings into force on signature, so the repeal only takes effect on 2027-01-01. Until that date the earlier part 17 is not repealed; it was created by SB 24-205, the Colorado AI Act, which this registry does not retain, and its effective dates are not asserted here. Corrected on 2026-08-09; the record of that correction is kept on the Portuguese sister edition, where this registry's working record lives. The first draft of this caveat stated the opposite of this, from a sentence inherited and never checked against the act. It is also said that enforcement has been suspended by a judicial settlement since April 2026; the order was not opened and the suspension is not asserted here. (3) OBLIGATED PARTY BY INFERENCE in one of the duties. § 6-1-1708(3)(c) binds the covered entity under HIPAA, and does not name the physician. Coding physician alongside health care institution is this house's reading: a health care provider under the definition in 45 CFR 160.103 reaches the individual professional who transmits health information electronically. It is a good inference, and an inference all the same. (4) There is no staggered entry into force of any duty: what applies from signature is machinery — rulemaking authority and appropriation — and every substantive duty takes effect on 2027-01-01. The act has no safety clause for part 17 other than its own, which exists: section 6 carries the clause, and that is why SB 26-189 was never subject to referendum.", "sources": [ { "url": "https://leg.colorado.gov/bill_files/116489/download", "source_class": "official_repository", "asserted_primary": true } ], "obligations": [ { "kind": "dever-de-informar", "kind_label": "Duty to inform", "bearer": [ "instituicao", "medico" ], "bearer_label": [ "health care institution", "physician" ], "provision": "C.R.S. § 6-1-1708(3)(c)", "verbatim": "A COVERED ENTITY SHALL PROVIDE PATIENTS WITH A GENERAL NOTICE OF USE OF ADVANCED TECHNOLOGIES, INCLUDING A COVERED ADMT.", "source": "https://leg.colorado.gov/bill_files/116489/download" }, { "kind": "dever-de-informar", "kind_label": "Duty to inform", "bearer": [ "instituicao" ], "bearer_label": [ "health care institution" ], "provision": "C.R.S. § 6-1-1708(3)(d)(I)", "verbatim": "NOTWITHSTANDING SUBSECTION (3)(a) OF THIS SECTION, A COVERED ENTITY THAT USES A COVERED ADMT TO DETERMINE A PATIENT'S ELIGIBILITY FOR FINANCIAL ASSISTANCE, INCLUDING DISCOUNTED CARE AS DESCRIBED IN SECTION 25.5-3-502, SHALL PROVIDE A PATIENT THE FOLLOWING DISCLOSURES: (I) A PLAIN LANGUAGE DESCRIPTION OF THE CONSEQUENTIAL DECISION AND THE ROLE OF THE COVERED ADMT IN THE CONSEQUENTIAL DECISION;", "source": "https://leg.colorado.gov/bill_files/116489/download" }, { "kind": "dever-de-informar", "kind_label": "Duty to inform", "bearer": [ "instituicao" ], "bearer_label": [ "health care institution" ], "provision": "C.R.S. § 6-1-1708(3)(d)(IV)", "verbatim": "INFORMATION ON HOW TO REQUEST MEANINGFUL HUMAN REVIEW OR RECONSIDERATION, WHERE APPLICABLE.", "source": "https://leg.colorado.gov/bill_files/116489/download" }, { "kind": "dever-de-informar", "kind_label": "Duty to inform", "bearer": [ "desenvolvedor" ], "bearer_label": [ "developer" ], "provision": "C.R.S. § 6-1-1702(1)(a)", "verbatim": "ON AND AFTER JANUARY 1, 2027, A DEVELOPER SHALL MAKE AVAILABLE TO EACH DEPLOYER OF A COVERED ADMT DEVELOPED BY THE DEVELOPER, IN A FORM AND MANNER THAT IS REASONABLY UNDERSTANDABLE TO A DEPLOYER AND THAT PROTECTS TRADE SECRETS OR INFORMATION PROTECTED FROM DISCLOSURE BY STATE OR FEDERAL LAW: (a) A GENERAL STATEMENT DESCRIBING THE INTENDED USES AND KNOWN HARMFUL OR INAPPROPRIATE USES OF THE COVERED ADMT;", "source": "https://leg.colorado.gov/bill_files/116489/download" }, { "kind": "governanca", "kind_label": "Governance", "bearer": [ "desenvolvedor" ], "bearer_label": [ "developer" ], "provision": "C.R.S. § 6-1-1702(4)", "verbatim": "A DEVELOPER SHALL RETAIN, FOR NOT LESS THAN THREE YEARS AFTER THE CREATION OF A RECORD REQUIRED OR CREATED UNDER THIS SECTION OR FOR A LONGER PERIOD IF REQUIRED BY APPLICABLE STATE OR FEDERAL LAW, RECORDS REASONABLY NECESSARY TO DEMONSTRATE COMPLIANCE WITH THIS SECTION.", "source": "https://leg.colorado.gov/bill_files/116489/download" } ] } ], "answers_by_state": { "washington": { "nome": "Washington", "sigla": "WA", "instrumentos": [ "washington" ], "respostas": { "deny-with-ai": { "valor": "no", "frase_en": "No.", "instrumento": "washington", "obrigacao": { "codigo": "decisao-humana", "obrigado": [ "operadora" ] }, "recorte": "Artificial intelligence shall not be the sole means used to deny, delay, or modify health care services.", "recorte_declarado": "The registry records the whole of § 48.43.830(3)(a); the sentence shown is the last of that provision. The sentences before it name who may deny — a licensed physician or health professional — not who answers for the tool." }, "who-answers": { "valor": "yes", "frase_en": "The carrier — your health plan.", "instrumento": "washington", "obrigacao": { "codigo": "governanca", "obrigado": [ "operadora" ] }, "recorte": "A carrier that uses artificial intelligence for the purpose of prior authorization or prior authorization functions, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses artificial intelligence for the purpose of prior authorization or prior authorization functions, based in whole or in part on medical necessity, shall ensure all of the following:", "nota_en": "Note the reach: hiring a vendor does not move the duty. The plan stays on the hook for what the vendor's model does." }, "chatbot-therapy": { "valor": "nao_conferido", "porque_en": "RCW 48.43.830 is a coverage statute; it does not speak to therapy. No Washington instrument has been read on this question, so this site does not answer it.", "ver_tambem": "Colorado and Rhode Island do have instruments here." }, "ai-wrote-the-note": { "valor": "nao_conferido", "porque_en": "California and Texas do require disclosure; Washington has not been read on this point.", "ver_tambem": "See California § 1339.75 and Texas § 183.005(b)." } }, "rotas": { "washington": "rcw-48-43-830" }, "silencio_censo": { "instrumento": "washington", "escopo_en": "RCW 48.43.830, both versions currently served", "arquivo": "washington__0__default.aspx_cite_48.43.830", "sha256": "d355636bd8a111f83203546ebf013be6a3f0dc8df9c6abcec9ef7c6ac8f7603f", "receita": "busca-v1", "fonte_indice": 0, "medicao": "2026-09-24", "_nota": "Censo feito na edicao irma contra o arquivo retido. Redacao aprovada por Cassiana Souza Meyer em 25.09.2026.", "termos": [ { "termo": "data provenance", "veredito": "REFORMULAR", "en": "No duty to trace the provenance or lineage of the data an AI system uses.", "porque_en": "Subsections (3)(b)(i)–(ii) govern only what a determination may rest on." }, { "termo": "training-data transparency", "veredito": "REFORMULAR", "en": "No transparency duty about training data.", "porque_en": "The statute mentions training only in its definition of artificial intelligence." }, { "termo": "model validation standards", "veredito": "CAI", "porque_en": "The section does address it: policies and procedures are open to audit by the insurance commissioner, and the carrier must periodically review the system's performance, use and outcomes. That is a duty, not a standard — but an absence claim here would be false." }, { "termo": "patient right to opt out", "veredito": "SOBREVIVE", "en": "No patient right to opt out." } ] }, "dizeres": { "instrumento": "washington", "arquivo": "washington__0__default.aspx_cite_48.43.830", "sha256": "d355636bd8a111f83203546ebf013be6a3f0dc8df9c6abcec9ef7c6ac8f7603f", "receita": "busca-v1", "medicao": "2026-09-24", "medido_em": "2026-09-24T22:00-03:00", "_nota": "8/8 CONFERE. O (3)(b)(i)-(ii) voltou em 24.09.2026 com redacao nova: a anterior omitia \"as applicable\" e \"demographic data\". Regiao (3)(b)(i)-(viii) b3fbe678, 1.777 B, byte-identica nas duas versoes servidas. Aprovado por Cassiana Souza Meyer.", "itens": [ { "dispositivo": "RCW 48.43.830(3)(b)(i)–(ii)", "conferido": true, "en": "The AI's determination must rest, as applicable, on the enrollee's medical or other clinical history, including demographic data, and on the individual clinical circumstances presented by the requesting provider — and not solely on a group data set." }, { "dispositivo": "RCW 48.43.830(3)(b)(vi)", "conferido": true, "en": "Policies and procedures are open to audit by the insurance commissioner." }, { "dispositivo": "RCW 48.43.830(3)(b)(vii)", "conferido": true, "en": "The carrier itself must periodically review the AI's performance, use and outcomes for accuracy and reliability." }, { "dispositivo": "RCW 48.43.830(3)(b)(viii)", "conferido": true, "en": "Patient data may not be used beyond its intended and stated purpose." } ], "regiao": "b3fbe678" } }, "alabama": { "nome": "Alabama", "sigla": "AL", "instrumentos": [ "alabama-sb-63" ], "rotas": { "alabama-sb-63": "act-2026-589" }, "respostas": { "deny-with-ai": { "valor": "no", "frase_en": "No — and the human who decides must be competent to judge what the model concluded.", "instrumento": "alabama-sb-63", "obrigacao": { "codigo": "decisao-humana", "obrigado": [ "operadora" ] }, "recorte_declarado": "The registry stores one sentence per obligation, chosen to prove the duty. What is quoted here is the clause of Section 1(b)(3) that carries it; the subsection around it is longer.", "nota_en": "Most instruments here stop at “a human must decide”. Alabama adds a qualification almost no other statute makes: the reviewer has to be competent to evaluate the recommendation or conclusion of the artificial intelligence. A human signature from someone who cannot judge the model does not satisfy this provision." }, "who-answers": { "valor": "yes", "frase_en": "The health benefit plan provider — and it answers to the regulator, annually.", "instrumento": "alabama-sb-63", "obrigacao": { "codigo": "risco-e-registro", "obrigado": [ "operadora" ] }, "nota_en": "Four duties in this act, one bearer in all four. Nothing here reaches the developer of the model or the vendor that sells it — a scan of the whole act returns zero for vendor, developer, deployer, supplier and contractor. Where the model comes from is not this statute’s question." }, "chatbot-therapy": { "valor": "nao_conferido", "porque_en": "This act governs utilization review by health benefit plans. It does not speak to who may deliver therapy. No Alabama instrument has been read on that question, so this site does not answer it.", "ver_tambem": "Illinois and Rhode Island do have instruments here." }, "ai-wrote-the-note": { "valor": "nao_conferido", "porque_en": "Alabama does require a written disclosure about artificial intelligence — but it falls on the plan, about its own use of AI in utilization review, not on your clinician about the note in your chart. On the clinical-documentation question no Alabama instrument has been read.", "ver_tambem": "See California § 1339.75 and Texas § 183.005(b), which do put the duty on the clinician." } }, "silencio_censo": { "instrumento": "alabama-sb-63", "escopo_en": "Ala. Act No. 2026-589 (SB 63), whole act", "arquivo": "alabama-sb-63__0__SB63-enr.pdf", "sha256": "9c3c3bb8c43de7e3a05f8a5ecb9e33499c02c1d2a46272686121acf7e733f577", "receita": "busca-v1", "fonte_indice": 0, "medicao": "2026-10-02", "_nota": "Censo na edicao irma contra o enrolled. Redacao aprovada por Cassiana Souza Meyer em 25.09.2026. Remedido em 02.10.2026 na edição irmã sobre o mesmo arquivo (sha256 9c3c3bb8…f577), busca-v1 (87cf3472…): texto do ato inteiro 9.533 B ab7a6431…f0a3 e da § 1 8.468 B 46b3f2cd…5afb, idênticos aos de 24.09; controles da § 1 17·7·11·0 iguais. Vereditos e redação inalterados (aprovados por Cassiana Souza Meyer em 25.09.2026).", "termos": [ { "termo": "who built or sold the model", "veredito": "REFORMULAR", "en": "No duty to name who built or sold the AI.", "porque_en": "Third-party vendors appear only as something the insurer's attestation may rely on (§ 1(c)(4)); a contractor is reached for performing utilization review, not for building the model (§ 1(a)(6)c.)." }, { "termo": "what data it was trained on", "veredito": "REFORMULAR", "en": "No duty to disclose the data a system was trained on.", "porque_en": "The Act defines AI by data inputs and learning, and bars reliance on a group dataset (§ 1(b)(2)a.), but requires no disclosure of training data." }, { "termo": "any standard the model itself must meet", "veredito": "CAI", "porque_en": "The Act does set standards the system must meet: § 1(b)(2)a.–c., certified to the Department every year, and periodic review under § 1(c)(2). An absence claim here would be false." }, { "termo": "any patient right to know that AI touched their claim", "veredito": "REFORMULAR", "en": "No duty to tell the patient that AI was used on their claim.", "porque_en": "The required written disclosure of AI use sits in the plan's policies and procedures (§ 1(c)(1)); the Act's only notice runs from the Department to the plan (§ 1(d)(1))." } ] }, "dizeres": { "instrumento": "alabama-sb-63", "arquivo": "alabama-sb-63__0__SB63-enr.pdf", "sha256": "9c3c3bb8c43de7e3a05f8a5ecb9e33499c02c1d2a46272686121acf7e733f577", "receita": "busca-v1", "medicao": "2026-10-02", "medido_em": "2026-10-02T20:18-03:00", "_nota": "4/4 CONFERE. O (c)(4) alcanca toda a subsection (b), inclusive o (b)(3): a decisao por medico tambem se cumpre por atestacao, e a pagina nao pode dizer so medico sem isso ao lado. Aprovado por Cassiana Souza Meyer em 25.09.2026. Reconferido em 02.10.2026: as 4 parafrases lidas contra as alineas extraidas literalmente do texto busca-v1 da § 1 (8.468 B, 46b3f2cd…5afb) do mesmo arquivo (9c3c3bb8…f577): (b)(2) d8d47688…20cf, (b)(3) e6d34688…5e99, (c)(2) 113a2362…4ea5, (c)(4) 746d8c84…f5b8; sujeito da (c) no caput, R1 [5159,5363) 947ab3fa…20eb (\"A health benefit plan provider shall do all of the following\"). 4/4 CONFERE; textos en inalterados. Aprovado por Cassiana Souza Meyer em 02.10.2026.", "itens": [ { "dispositivo": "§ 1(b)(2)", "conferido": true, "en": "The plan must certify to the Department every year that the AI used for prior-authorization medical-necessity determinations does not rely on a group dataset, is applied fairly and equitably, and does not discriminate." }, { "dispositivo": "§ 1(b)(3)", "conferido": true, "en": "A denial, delay or modification of a prior-authorization request based on medical necessity must always be made by a licensed physician or other health care professional competent to evaluate the AI's output." }, { "dispositivo": "§ 1(c)(2)", "conferido": true, "en": "The plan must ensure that its use of AI and the outcomes are reviewed periodically for accuracy and reliability; the subdivision does not name who reviews." }, { "dispositivo": "§ 1(c)(4)", "conferido": true, "en": "The requirements of subsections (b) and (c), the physician decision included, are satisfied by an attestation from an authorized representative of the plan, based on reasonable reliance on internal policies, procedures and third-party vendors." } ] } } } }