AI Regulations Are Changing Fast—Here’s What Investors Need to Know by State

Big Tech’s dreams of generating major profits from AI with minimal supervision were dealt a significant blow in 2025, after Republican efforts in Congress to halt individual states’ regulation of the sector for 10 years were defeated.

States can now pursue their own AI restrictions, though a July 2025 “AI Action Plan” from the White House threatened federal funding to states whose AI-related laws the administration deems onerous. Still, states have been moving quickly to shift from a largely hands-off approach that allowed the current AI boom to getting legislation on the books that serve as a reality check for many investors who have been aggressively buying tech stocks without fully considering the regulatory risks ahead.

State-by-State AI Legal Map

According to the International Association of Privacy Professionals, which tracks AI governance legislation across the country, almost half of all states are giving serious consideration to AI laws or have enacted them.

As you can see, AI regulation is no longer confined to California. We’ve broken down state-level activity into four broad categories:

• Those that have passed major legislation (lightest blue): California, New York, Colorado, and Texas have either enacted comprehensive AI laws or have multiple major pieces of legislation under consideration.
• Emerging regulators: Nine states—Illinois, Massachusetts, Vermont, Hawaii, Utah, Iowa, Minnesota, Nebraska, and Oklahoma—have comprehensive bills under consideration or have recently enacted targeted AI laws.
• Legislation under consideration: Eleven states have introduced AI bills that have either stalled in committee or were recently withdrawn, but these legislative efforts signal growing political interest in AI oversight. These states could move into active regulation in future sessions.
• Limited legislative activity (darkest blue): Twenty-six states have not yet introduced comprehensive private-sector AI governance legislation, but virtually all states have seen some legislation introduced at least in legislative committees.

Big Tech’s Regulatory Exposure: Who’s Most at Risk

State-level AI laws come with compliance costs, litigation risk, the possibility of having to delay or reengineer products, and the potential for significant financial penalties. Major tech firms lobbied Congress and the Trump administration extensively in 2025 to avoid state actions through federal legislation, but ultimately came up empty-handed in terms of achieving their goals through federal legislation. These are the firms with the most at risk:

• Meta (Facebook/Instagram) relies heavily on AI for content moderation, recommendation algorithms, developing new products, and ad targeting. Its AI applications have repeatedly sparked controversy and legal action. The company was forced to pay settlements totaling over $1.4 billion to Texas and Illinois because its facial recognition technology violated state privacy rules. In April 2025, a Wall Street Journal investigation said that the company’s AI chatbots introduced sexual content to minors, raising safety concerns about an area where Meta is making a major bet—AI companions.
• Amazon relies heavily on AI for warehouse automation, delivery optimization, demand forecasting, inventory management, cloud services through AWS, Ring security systems, and the Alexa voice assistant. Among other controversies, in 2018, the company scrapped an AI-driven tool said to discriminate against women. In July 2025, employees with disabilities sent a letter to executives arguing that its AI systems were engaged in “systemic discrimination” against them.
• Alphabet (Google) deploys AI technology across virtually all its operations, including search algorithms, Gmail, Google Cloud, YouTube recommendations, and targeted advertising. The company has faced multiple controversies over AI bias in its systems, including issues with its Gemini AI model producing racist and misogynistic imagery and allegations that its search algorithms exhibit similar biases. Meanwhile, errors in the company’s AI Overviews remain a consistent PR problem for the company.
• Microsoft is a major investor in OpenAI, the company behind ChatGPT, and uses AI across its entire business, from productivity software and cloud infrastructure to security, customer service, and enterprise tools. Like the other major AI firms, the company has faced lawsuits arguing it trained its systems using copyrighted material.

The Bottom Line

While AI remains a massive growth opportunity, the companies driving this revolution—Meta, Amazon, Alphabet, and Microsoft—face a patchwork of state rules that could increase compliance costs, create operational complexities, and potentially limit how aggressively they can deploy AI technologies. For investors, this could represent a shift in the risk/reward profile of the Big Tech firms least able to adapt to these new laws.