26 US states urge Congress to pass comprehensive AI regulation framework
On September 24, 2026, Minnesota Attorney General Keith Ellison and 25 other state attorneys general issued a joint letter demanding that Congress establish a comprehensive federal AI regulatory framework. The coalition emphasizes that any legislation must include federal oversight of AI safety testing, transparent incident response procedures, international cooperation, and a ban on federal preemption of state AI laws. The move reflects growing consensus that fragmented state-level regulation is insufficient for businesses deploying AI systems across multiple jurisdictions.
In short
- 26 state AGs demand federal AI regulation with binding safety standards and incident reporting, moving beyond fragmented state rules
- Federal framework could simplify compliance for multi-state operations but enforcement powers remain uncertain until Congress acts
- Employment, credit, and essential-service automation already faces January 1, 2027 compliance deadlines under existing state laws
- Industry leaders at the UN on September 23-24 echoed calls for global AI oversight, signaling investor and customer pressure for governance
- Senate may vote on draft AI safety bill by end of September, though House gridlock suggests no action before election recess
The Call for Federal AI Standards
On September 24, 2026, Minnesota Attorney General Keith Ellison joined a bipartisan coalition of 26 attorneys general in calling on Congress to immediately regulate the artificial intelligence (AI) industry. The letter, addressed to Congress, represents one of the most coordinated state-level demands for federal AI governance to date.
What the States Are Demanding
The coalition emphasizes that any AI regulatory scheme considered by Congress must include federal oversight of safety testing and standards led by experts in AI model safety and backed by consistent performance benchmarks; uniform and transparent government-led incident response with public findings that allow the industry to rapidly evolve in response; safety infrastructure and experienced leaders to make critical safety decisions unburdened by profit maximization; international cooperation to pace AI advancement and prevent the development of harmful superintelligence; and a prohibition on preemption of state laws and full authority for state officials to enforce federal protections.
Why This Matters for Businesses
The letter arrives at a critical juncture for business compliance. State legislatures have moved aggressively in 2026 to regulate AI-powered chatbots, with nearly 100 chatbot-specific bills introduced across 34 states and at the federal level, creating a rapidly expanding patchwork of compliance obligations for companies that develop or deploy conversational AI. Businesses currently navigate conflicting requirements across multiple jurisdictions. A federal framework could simplify compliance—or, if poorly designed, impose new burdens on companies already managing state-level obligations.
The Connecticut Artificial Intelligence Responsibility and Transparency Act takes a targeted approach to AI regulation, with key business-facing requirements for automated employment-related decision technologies (AEDT), subscription-based AI services, and generative AI transparency. Similar patchwork rules now exist in California, New York, Colorado, and other states.
The Broader Regulatory Context
The heads of several major AI firms told the United Nations Security Council (UNSC) their industry urgently needed global oversight to avoid dangers that could threaten the whole world, with Dario Amodei, the chief executive officer of Anthropic, stating on September 23 that if managed poorly, AI could be a risk to humanity as a whole. This industry pressure on the international stage mirrors the domestic pressure from state governments, indicating that businesses face mounting expectations for robust AI governance across all operating regions.
What Changes in Practice for Businesses
For small and mid-size companies automating routine work processes, the immediate impact depends on geography and use case. Significant decisions are those that result in the provision or denial of financial or lending services, housing, education enrollment or opportunities, employment or independent contracting opportunities or compensation, or healthcare services; these regulations went into effect on January 1, 2026, but businesses must come into compliance with new automated decision-making technology (ADMT) requirements by January 1, 2027.
If your automation touches employment decisions, credit scoring, or essential services, you are already subject to California's CCPA rules and similar state laws. A federal framework could either consolidate these into a single standard or layer additional obligations on top.
What to Watch Next
Senate Commerce Committee Chair Ted Cruz, R-Texas, Sen. Amy Klobuchar, D-Minn., and Senate Majority Leader John Thune, R-S.D., have been working on an AI safety bill that has not yet been released; Cruz said in brief comments to reporters this week that it's possible the bill will be voted on in committee by the end of this month. However, one House member noted that nothing meaningful was going to get done on AI regulation in advance of the election, citing too many unknowns. Businesses should expect the regulatory momentum to continue into 2027, regardless of whether Congress acts before the election.
Sources
How AiStaffo would automate this
AiStaffo automates routine back-office work—data entry, billing, reconciliations, follow-ups—in ways that trigger AI compliance obligations only if your automation makes decisions about employment, credit, or essential services. Most routine automation AiStaffo handles falls outside high-risk categories. However, if you use AI to filter job applicants, score customer credit, or flag insurance claims for approval, you now face state-level audit trails, human-override requirements, and incident-reporting obligations under laws like California's CCPA ADMT rules and Connecticut's AI Responsibility Act. A federal framework, when it arrives, will likely impose uniform documentation and testing requirements across all 50 states, making it urgent to audit your automation now and ensure humans retain decision authority over high-consequence outcomes. Book a free automation audit to identify which processes fall under compliance scope and which can scale freely.
Questions people ask
Does my automation software need to comply with AI regulations if I use it to enter data or send reminders?
What happens if I operate in multiple states with different AI laws?
When do I need to have my AI systems compliant?
What is the EU AI Act and does it affect my business?
Why are state AGs pushing for federal AI regulation if they already have their own laws?
Will the Senate pass an AI bill before the election?
Book a free automation audit
Thirty minutes. We look at one process you run every week and tell you exactly what an AI worker would take off your desk, and what it would not.
