Does TRAIGA Apply to Your Business? A Scope Guide.

Start with geography, because that is where TRAIGA reaches furthest. Any individual or entity that promotes, advertises, or conducts business in Texas; produces products or services used by Texas residents; or develops or deploys an AI system in Texas falls under the law — no matter where it is headquartered. The language sweeps in out-of-state companies whose AI tools simply reach Texas users.

The statute defines “AI system” broadly: any machine-based system that infers from inputs how to generate outputs — content, decisions, predictions, or recommendations — that can influence physical or virtual environments. Most enterprise AI deployments fit that description.

What duties actually apply

Who you are, and the context you deploy AI in, determines which rules bite.

Government agencies must disclose AI interaction to consumers before or at the time of the interaction. The notice has to be clear, conspicuous, written in plain English, and free of dark patterns. No consumer consent is required — just disclosure.

Healthcare providers carry a separate requirement: disclose AI use in treatment on the date of service, or as soon as reasonably possible in emergencies. That notice can be embedded in standard intake forms.

Private non-healthcare businesses face no consumer-AI disclosure duty under the enacted text. What applies universally — to every entity, private or public — is TRAIGA’s set of prohibited uses: no AI system may be deployed with the intent to incite self-harm or criminal activity, infringe constitutional rights, commit intentional unlawful discrimination, or generate child sexual content or deepfakes.

B2B and employment contexts are partly out of scope. The statute defines a “consumer” to exclude people acting in an employment or commercial context (§ 551.001(2)), so the consumer disclosure duty and the complaint mechanism do not reach those interactions. The discrimination ban is broader: § 552.056 says “a person may not develop or deploy” an AI system with the intent to unlawfully discriminate, with no consumer limit, so it covers AI used in hiring.

Key exemptions and carve-outs

Several industries have explicit carve-outs from the anti-discrimination provision.

Insurers already subject to state insurance laws that prohibit unfair discrimination are exempt from TRAIGA’s parallel anti-discrimination rule. Federally-insured financial institutions complying with applicable federal and state banking law are deemed compliant with that same provision.

Hospital districts and institutions of higher education are excluded from the definition of “governmental entity” (§ 552.001(3)(A)–(B)), which governs the social-scoring and biometric bans. Whether that exclusion also reaches the agency disclosure duty, which uses the term “governmental agency,” is unsettled, and a hospital district providing care still owes the healthcare AI disclosure (§ 552.051(f)).

Biometric data used for fraud prevention and cybersecurity training is carved out. And TRAIGA preempts any city or county AI ordinance, setting one statewide compliance standard instead of a patchwork of local rules.

For most private companies, it’s lighter than the headline

For a private Texas company outside healthcare, the day-one burden is smaller than the law’s reputation suggests — no disclosure obligation, no impact assessments, no B2B or employment requirements. What every covered entity does carry is the universal prohibition set and exposure to Attorney General investigation if a consumer AI system is alleged to have caused harm. The AG’s online AI complaint mechanism is now live, ahead of its September 1, 2026 statutory deadline — the date most compliance attorneys had circled as the real enforcement inflection point.