Every State Law Regulating Healthcare AI in 2026

Federal healthcare AI regulation moves slowly. Congress hasn't passed a comprehensive healthcare AI law. CMS and FDA act within their existing authority. So states are filling the gap, and they're doing it fast. As of 2026, at least seven states have laws that specifically regulate AI in healthcare. Different requirements. Different scopes. Different penalties. And they stack on top of federal rules. California AB 3030: GenAI Patient Notifications Effective January 1, 2025. If you use generative AI to create or alter patient communications, you have to say so. Written messages need a disclaimer. Chat interactions need a disclosure at the start. Audio interactions need a verbal disclosure. There's an exemption: if a licensed provider reviews the communication before it goes to the patient, no disclosure needed. But the review has to be substantive. Running it through a provider's inbox doesn't count. This is narrower than it sounds. It only covers generative AI in patient communications. Not diagnostic AI. Not clinical decision support. Not administrative AI. Just the messages patients receive. California SB 1120: The Coverage Denial Ban This one targets health plans.