Texas AI Governance Act: A Dallas Business Checklist

The Texas Responsible Artificial Intelligence Governance Act, commonly called TRAIGA, took effect January 1, 2026. It regulates specified AI practices in Texas, but it does not impose the same checklist on every private business. The right starting point is to map each AI use case to the law, other applicable rules, contracts, and the people or data affected.

What TRAIGA establishes

TRAIGA creates a Texas framework for AI development and deployment. The official state summary identifies prohibitions involving specified harmful conduct, unlawful discrimination, certain biometric uses, and impairment of constitutional rights. It also identifies disclosure duties for particular actors, including governmental agencies and healthcare service providers.

What the law does not establish

The law is not evidence that every Dallas company must publish a universal AI notice, complete a fixed assessment, or adopt a particular vendor. Applicability depends on the actor, system, purpose, data, and conduct. A legal conclusion should come from counsel reviewing the current statute and facts, not from a marketing checklist.

Build a practical AI inventory

• System and vendor name, version, and accountable business owner.
• Business purpose and whether the system recommends or makes consequential decisions.
• Data received, generated, retained, shared, and used for training.
• People affected, including consumers, employees, patients, and minors.
• Human review, appeal, testing, access, logging, incident, and retirement controls.

Use a risk framework without overstating it

The voluntary NIST AI Risk Management Framework organizes work around Govern, Map, Measure, and Manage. It can structure an evidence record, but using it does not by itself prove legal compliance. Keep legal mapping, risk management, and technical validation connected but distinct.

Frequently asked questions

Does TRAIGA apply only to AI companies?

No. The official Texas overview addresses entities deploying AI in Texas as well as developers, but the exact duties and prohibitions vary. Review each use case with counsel.

Is an AI inventory required for every business?

This guide recommends an inventory as a governance control. Whether a particular record is legally required depends on the law, contract, sector, and use case.

Next step

Create a one-page inventory for every production AI use case, then have counsel identify which Texas and sector-specific duties apply. For an environment-specific baseline, request an ITECS technology and security assessment.

Primary Sources

• Texas Attorney General — Consumer AI rights and TRAIGA overview
• Texas Legislature — HB 149 enrolled bill summary
• NIST — AI Risk Management Framework 1.0

Review trigger: Review after Texas Attorney General guidance, enforcement, rulemaking, or statutory amendments, and before a new high-impact AI use goes live.