Guides to the US state laws that name the NIST AI RMF or its Generative AI Profile, what each one requires or rewards, what changed when Colorado replaced its AI Act, and how the planned NIST revision affects laws that cite the latest version.
How the Texas Responsible Artificial Intelligence Governance Act ties a liability defense to the NIST Generative AI Profile: what the defense requires, the practices it bans, how the attorney general investigates, the 60-day cure period and the penalties if a violation is not cured.
What Colorado's original AI Act (SB24-205) said about the NIST AI RMF and ISO/IEC 42001, what the May 2026 replacement law SB26-189 requires instead for automated decision-making technology, and what that means for organizations that built programs around the old safe harbor.
What Montana's Right to Compute Act requires of organizations whose critical infrastructure facilities are controlled by AI: the post-deployment risk management policy, the frameworks it must consider, the federal-plan exemption and how a NIST-aligned program supports it.
Where the revision of AI RMF 1.0 stands in October 2026, what America's AI Action Plan asked NIST to remove, how versions are numbered, what happens to the Playbook and profiles, and why laws that cite the latest version make the revision matter.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.