Skip to main content
Regulome
Search the register
For ProvidersRun the free checker

AI regulation by industry

Which AI laws apply to healthcare, HR and recruiting, fintech, and insurance, and what each one actually requires.

Healthcare

2 of 4 laws apply
Reg. 2024/1689Applies

EU AI Act

AI as a safety component of regulated medical devices falls under Annex I; standalone clinical decision AI can be Annex III high-risk. High-risk duties apply from December 2, 2027 (Annex III) and August 2, 2028 (Annex I embedded).

NYC Local Law 144Not covered

NYC LL 144

NYC LL 144 covers employment decisions only, not clinical AI. Healthcare employers using AEDTs for NYC-located jobs are covered on the hiring side.

SB 26-189Applies

Colorado AI Act

Health care is a covered consequential-decision domain, but HIPAA covered entities and business associates are carved out of the core duties. Check your entity status before assuming coverage either way.

820 ILCS 42Not covered

IL AIVIRA

Illinois AIVIRA covers AI analysis of employment video interviews only. Clinical AI is not covered.

HR / Recruiting

4 of 4 laws apply
Reg. 2024/1689Applies

EU AI Act

Annex III lists AI for recruitment, selection, screening, promotion, and termination as high-risk. Conformity assessment duties apply from December 2, 2027.

NYC Local Law 144Applies

NYC LL 144

The core use case. Any AEDT used for hiring or promotion for jobs located in NYC needs an annual independent bias audit (including intersectional categories), public posting of results, and 10-day advance notice.

SB 26-189Applies

Colorado AI Act

Employment decisions made or materially influenced by ADMT for Colorado consumers are covered. Pre-use notice, adverse-decision explanation, and human-review rights apply from January 1, 2027.

820 ILCS 42Applies

IL AIVIRA

Illinois AIVIRA covers AI analysis of video interviews: notice, explanation, written consent, 30-day deletion on request, and annual demographic reporting where AI screens in-person interview eligibility.

Fintech / Lending

2 of 4 laws apply
Reg. 2024/1689Applies

EU AI Act

Annex III includes AI for creditworthiness assessment and credit scoring as high-risk (from December 2, 2027). GDPR Article 22 profiling rules apply separately.

NYC Local Law 144Not covered

NYC LL 144

NYC LL 144 covers employment decisions only; lending AI is out of scope. Federal ECOA and FCRA obligations apply separately.

SB 26-189Applies

Colorado AI Act

Financial and lending services are a covered domain. ADMT that makes or materially influences credit decisions for Colorado consumers triggers notice, explanation, and human-review duties from January 1, 2027.

820 ILCS 42Not covered

IL AIVIRA

Illinois AIVIRA covers employment video interviews only; lending and credit AI are out of scope.

Insurance

2 of 4 laws apply
Reg. 2024/1689Applies

EU AI Act

Annex III includes AI for risk assessment and pricing in life and health insurance as high-risk (from December 2, 2027).

NYC Local Law 144Not covered

NYC LL 144

NYC LL 144 covers employment decisions only; underwriting AI is not covered unless used for hiring.

SB 26-189Applies

Colorado AI Act

Insurance is a covered domain, but insurers subject to C.R.S. 10-3-1104.9 (and affiliates) are deemed compliant in the practice of insurance. Verify whether the carve-out reaches your use case.

820 ILCS 42Not covered

IL AIVIRA

Illinois AIVIRA covers video interview AI only. The Illinois Department of Insurance has separate guidance on AI underwriting.

Notes on reading this matrix

  • This matrix shows the primary AI-specific regulations. Federal laws (ECOA, FCRA, HIPAA, ADA) and general anti-discrimination laws apply independently and may impose additional requirements.
  • “Not covered” means that specific law does not apply. It does not mean the sector is unregulated.
  • Virginia HB 2094 was vetoed on March 24, 2025 and never became law. Virginia has no comprehensive AI-specific statute.
  • Texas TRAIGA (HB 149) took effect January 1, 2026. The Colorado AI Act applies from January 1, 2027 under SB 26-189. The EU deferred Annex III high-risk duties to December 2, 2027.
  • This matrix reflects the law as of August 3, 2026. Verify your specific situation with qualified counsel.