250+ State AI Health Care Bills Across 47 States: What Behavioral Health Operators Must Do Now

Here is what my team walks clients through.

1. Inventory every AI touchpoint. Scribes, scheduling, triage chat, predictive risk, UM/auth automation, marketing chatbots, voice agents on the call center. Name the vendor, the workflow, the data flow, and the states it touches. No inventory, no defense.
2. Map each tool to the strictest applicable state rule. If you operate in Illinois, anything that looks like therapeutic communication is off the table, full stop. If you operate in Colorado, you need consumer notice, adverse-outcome disclosure, human review pathways, and records retention. The Colorado AG can require developers to produce documentation within 90 days of a request.
3. Get written client consent where required. Illinois requires “clear, explicit affirmative” consent for AI-supported recording or transcription. A general terms-of-service click does not count. Build a standalone consent form and train clinical staff on when to deploy it.
4. Put governance in the compliance committee, not in IT. Bias testing, vendor due diligence, model change logs, and impact assessments belong on the same calendar as your mock survey and your payer readiness review.
5. Watch the chatbot vendors closest. Per Manatt, over 30 bills introduced in 2026 (in states including Louisiana, Kansas, and Missouri) include prohibitions on chatbots representing themselves as licensed professionals. Your marketing team’s website widget could create licensure exposure your clinical leadership never authorized.

None of this requires a six-figure consulting engagement. It requires an owner. Pick one. Give them the calendar, the budget, and the authority to say no to a vendor.

Frequently asked questions

How many states have passed AI healthcare laws as of 2025?

47 states introduced more than 250 healthcare AI bills in 2025, and 33 were signed into law across 21 states, per a Manatt Health analysis reported by Becker’s Hospital Review in December 2025. State activity accelerated further in 2026, with 43 states introducing 240+ additional bills in the first months of the year.

Does Illinois’s WOPR Act ban all AI use in behavioral health?

No. The Wellness and Oversight for Psychological Resources Act (HB 1806), signed August 1, 2025, prohibits AI from providing therapy, therapeutic decision-making, or direct therapeutic communication with clients. It permits AI for administrative tasks (scheduling, billing) and supplementary support (note drafting, ambient scribing) when a licensed professional reviews outputs and obtains written client consent. Violations carry civil penalties up to $10,000 per violation, enforced by Illinois IDFPR.

What does Colorado’s AI Act require of behavioral health providers?

Colorado SB 24-205 originally applied to “high-risk” AI systems making consequential decisions in healthcare. In May 2026, Governor Polis signed SB 26-189, which repeals and replaces the framework effective January 1, 2027, eliminating mandatory risk management programs and annual impact assessments in favor of a disclosure-based regime. The new law still requires consumer notice, adverse-outcome disclosure, human review options, and records retention. HIPAA-covered entities get broader exemptions for non-employment uses.

If federal policy preempts state AI laws, do operators still need to comply?

Yes, for now. Executive Order 14365 (December 2025) directed DOJ to challenge state AI laws and Commerce to evaluate them by March 2026, but no federal preemption has displaced existing state statutes. State legislators continue to pass and defend their laws. Operators should build governance to the strictest applicable state rule and adjust if a federal standard materializes.