Healthcare AI Law Checker
This is a starting map, not legal advice. Pick your state, your organisation type and what the AI actually touches, and this tool shows which rules from Clunic's own regulation pages bind you, plus the federal baseline that applies no matter which state you picked. Where a state has no AI law we track, it says so rather than showing you nothing or guessing at one.
Updated August 10, 2026Free, no signupRuns in your browser
Three questions
Tell us about the deployment
Where the organisation operates. This drives the state-specific result.
The category several of these rules key off directly.
What does the AI touch?
Select every category that genuinely applies. Most deployments touch more than one.
Answer all three above to see which rules bind this deployment.
Methodology and assumptions
What the model does, and what it refuses to guess
Every rule this tool can show you is drawn from Clunic's own regulation pages, each of which cites primary sources: the statute text, HHS, CMS, FDA or the relevant state legislature. Nothing here is invented for the sake of a fuller-looking result. Coverage was last checked against those pages on August 10, 2026, which is the date shown at the top of this tool. Read the underlying page for a rule before you rely on it: California, Colorado, Texas, Utah, HIPAA, FDA, ONC HTI-1 and the CMS prior authorization rule each carry their own last-checked date.
How a match is decided
Four states carry a healthcare-specific AI statute this tool tracks: California, Colorado, Texas and Utah. Pick any other state and the tool tells you plainly that it tracks no state-specific AI law for that state, rather than leaving the result blank or inventing one. It does not mean no law of any kind applies: general consumer protection, professional licensing and data breach statutes exist in every state and sit outside what this tool checks.
Inside a tracked state, each rule fires only where the organisation type and the AI touch you selected match what that rule's own page says it binds. California's SB 1120, for example, binds payers doing utilization review, not a private practice running an intake agent, so it only appears when you select payer-facing and utilization review together. Where a rule's trigger is broad, such as Texas's disclosure duty reaching almost any AI used in relation to a health care service, the tool reflects that breadth rather than narrowing it artificially.
The federal baseline, HIPAA, the FDA device question, ONC's HTI-1 transparency rule and the CMS prior authorization rule, is shown regardless of which state you picked, because none of those depend on state law. The wording under each adapts to what you selected: an AI touch that never approaches a diagnostic claim gets a note explaining why the FDA question is unlikely to bite, rather than a boilerplate warning.
What this tool refuses to do
It does not tell you whether you are compliant. It tells you which rules to go and read, on pages that cite where each requirement comes from. It does not cover every US jurisdiction's every AI-adjacent law, only the healthcare-specific statutes tracked on this site, and it does not cover the EU AI Act, which is a separate question addressed on its own regulation page for organisations with an EU footprint. State AI law is moving fast: Colorado alone repealed and rewrote its entire AI statute between 2024 and 2026. This page carries a review date for exactly that reason, and the underlying regulation pages are what get updated first when a rule changes.
Sources
The named reports and rules this calculator’s figures are drawn from. Where a figure moves, this calculator moves with it.
- StateAB 3030, health care services and artificial intelligence, California Legislative Information (opens in a new tab)
- StateSB26-189 Automated Decision-Making Technology, Colorado General Assembly (opens in a new tab)
- StateHB 149, Responsible Artificial Intelligence Governance Act, Texas Legislature Online (opens in a new tab)
- StateSB 226, Artificial Intelligence Consumer Protection Amendments, Utah State Legislature (opens in a new tab)
- HHSHIPAA Security Rule, HHS Office for Civil Rights (opens in a new tab)
- FDAClinical Decision Support Software Frequently Asked Questions, FDA (opens in a new tab)
- ONCHTI-1 Final Rule, ASTP/ONC (opens in a new tab)
- CMSCMS Interoperability and Prior Authorization Final Rule CMS-0057-F, fact sheet (opens in a new tab)
Questions we get asked
Is this legal advice?
No. This tool is a starting map that tells you which rules to go and read, built from Clunic's own regulation pages. It is not a substitute for advice from counsel who knows your specific facts, your contracts and your state's current text. Use it to work out where to look, not as the final answer.
Why does the tool only track California, Colorado, Texas and Utah?
Those are the four states that, as of the last review date on this page, have a healthcare-specific AI statute Clunic maintains a dedicated regulation page for. Other states may have general AI bills, consumer protection rules or professional licensing requirements that touch AI indirectly, but this tool only reports on the healthcare-specific statutes it actively tracks, and it says so honestly rather than guessing at a result for a state it has not verified.
My state is not listed. Does anything apply to me?
Yes. The federal baseline, HIPAA for any vendor handling protected health information, the FDA device question if the AI approaches diagnosis or treatment, ONC's HTI-1 transparency rule for predictive models inside a certified EHR, and the CMS prior authorization rule for payers, applies regardless of which state you operate in. This tool always shows that baseline underneath the state result, tracked or not.
How often is this checked?
The date at the top of this tool is when its rule logic was last checked against the underlying regulation pages. State AI law is moving fast: Colorado repealed and rewrote its entire AI statute between 2024 and 2026, and several other states amended their AI laws within a year of passing them. Check the specific regulation page linked in each result for its own last-updated date before you rely on anything here.
What if the AI I am evaluating touches more than one of the listed categories?
Select every category it genuinely touches. An ambient scribe that also answers patient questions in a portal touches both clinical documentation and patient-facing chat, and the tool will show you the rules for both rather than making you run it twice and lose the combined picture.
Where do the rules shown here actually come from?
Each result links to one of Clunic's own regulation pages, and each of those cites the underlying statute, HHS guidance, CMS rule or FDA guidance it is describing, with a sources list at the foot of the page. This tool does not introduce any legal claim that is not already documented on one of those pages.
Does this cover the EU AI Act or rules outside the United States?
No. This tool is scoped to US state and federal healthcare AI rules. If your organisation has an EU footprint, telehealth serving EU residents or an EU entity, read the separate EU AI Act in healthcare page, which is not part of this checker's state or organisation-type logic.
Find out what an agent could safely do today
The readiness assessment scores your data, systems, staffing and governance against what agents actually require, and tells you which use cases are reachable this year.
Book an evaluation call at any point. No obligation.