Multistate AI Compliance: Key Differences Between Texas HB 149 and Colorado SB 24-205

As artificial intelligence becomes more embedded in healthcare operations, state-level regulation is evolving just as quickly. For organizations operating across multiple states, that means navigating not just one set of rules—but several, each with its own expectations, definitions, and enforcement mechanisms.

Two of the most closely watched laws today are Texas HB 149 and Colorado SB 24-205. While both aim to promote responsible AI use, they take notably different approaches—creating new complexity for compliance teams.

Texas places a strong emphasis on transparency. Under HB 149, organizations must provide “clear and conspicuous” disclosures whenever individuals interact with AI systems. The goal is straightforward: ensure patients and users understand when AI is involved in decision-making or communication. But the stakes are high, with civil penalties reaching up to $200,000 per uncurable violation.

Colorado, on the other hand, focuses more on outcomes than disclosures. SB 24-205 introduces a “reasonable care” standard, requiring organizations to actively prevent algorithmic discrimination. Rather than prescribing exactly how to communicate AI use, Colorado expects organizations to demonstrate that their systems are designed, tested, and monitored to avoid biased or harmful results. Enforcement falls under unfair trade practice laws, giving the Attorney General authority to act when standards are not met.

For healthcare organizations, the challenge isn’t just understanding each law individually—it’s aligning compliance efforts across both. A disclosure-first approach may not be enough in Colorado, just as strong internal safeguards alone may not satisfy Texas requirements.

The takeaway is clear: AI compliance is no longer a one-size-fits-all effort. Organizations need a coordinated, proactive strategy that addresses both transparency and risk mitigation—while remaining flexible enough to adapt as more states introduce their own frameworks.

As regulation continues to expand, those who take a structured, multistate approach now will be far better positioned to manage risk and maintain trust in the future.

Register for the webinar here.