Does TRAIGA Apply to Your Business? A Scope Guide.

Start with geography, because that is where TRAIGA reaches furthest. Any individual or entity that promotes, advertises, or conducts business in Texas; produces products or services used by Texas residents; or develops or deploys an AI system in Texas falls under the law — no matter where it is headquartered. The language sweeps in out-of-state companies whose AI tools simply reach Texas users.

The statute defines “AI system” broadly: any machine-based system that infers from inputs how to generate outputs — content, decisions, predictions, or recommendations — that can influence physical or virtual environments. Most enterprise AI deployments fit that description.

What duties actually apply

Who you are, and the context you deploy AI in, determines which rules bite.

Government agencies must disclose AI interaction to consumers before or at the time of the interaction. The notice has to be clear, conspicuous, written in plain English, and free of dark patterns. No consumer consent is required — just disclosure.

Healthcare providers carry a separate requirement: disclose AI use in treatment on the date of service, or as soon as reasonably possible in emergencies. That notice can be embedded in standard intake forms.

Private non-healthcare businesses face no consumer-AI disclosure duty. That provision was stripped out of the final bill. What applies universally — to every entity, private or public — is TRAIGA’s set of prohibited uses: no AI system may be deployed with the intent to incite self-harm or criminal activity, infringe constitutional rights, commit intentional unlawful discrimination, or generate child sexual content or deepfakes.

B2B and employment contexts are out of scope. TRAIGA imposes no disclosure, notice, or nondiscrimination requirements for employee or commercial interactions. As Moore & Van Allen put it: “businesses do not need to provide notices or meet specific transparency or nondiscrimination requirements with respect to individuals acting in an employment or B2B context.”

Key exemptions and carve-outs

Several industries have explicit carve-outs from the anti-discrimination provision.

Insurers already subject to state insurance laws that prohibit unfair discrimination are exempt from TRAIGA’s parallel anti-discrimination rule. Federally-insured financial institutions complying with applicable federal and state banking law are deemed compliant with that same provision.

Hospital districts and institutions of higher education are excluded from the definition of “government agency” for the AI disclosure requirement — so they do not carry the real-time consumer-disclosure duty that other state and local government entities do.

Biometric data used for fraud prevention and cybersecurity training is carved out. And TRAIGA preempts any city or county AI ordinance, setting one statewide compliance standard instead of a patchwork of local rules.

For most private companies, it’s lighter than the headline

For a private Texas company outside healthcare, the day-one burden is smaller than the law’s reputation suggests — no disclosure obligation, no impact assessments, no B2B or employment requirements. What every covered entity does carry is the universal prohibition set and exposure to Attorney General investigation if a consumer AI system is alleged to have caused harm. The AG’s complaint portal is required by statute to open by September 1, 2026. That is the date most compliance attorneys have circled as the real enforcement inflection point.