Governance, risk & compliance

Texas Responsible Artificial Intelligence Governance Act (TRAIGA) B&C Code ch. 551-554, 1 Jan 2026

Texas Responsible Artificial Intelligence Governance Act (TRAIGA), HB 149, Business & Commerce Code Subtitle D (chs.

551-554), in force 1 January 2026. It applies to anyone who promotes, advertises or does business in Texas, makes a product or service Texans use, or develops or deploys an AI system in Texas (s.

551. 002).

It is narrower than its reputation. The duty to tell consumers they are dealing with an AI system binds governmental agencies, and providers using AI in health care services (s.

552. 051(b), (f)); it is not a general rule for private business.

Any person is barred from developing or deploying AI intended to incite self-harm, harm to others or crime (s. 552.

052), intended to infringe constitutional rights (s. 552.

055), or intended to discriminate unlawfully against a protected class (s. 552.

056: disparate impact alone is not enough, with carve-outs for insurers and federally insured banks), and from certain child sexual abuse material, unlawful deepfakes and child-impersonating sexual chat (s. 552.

057). Governmental entities may not use AI for social scoring or for biometric identification without consent where rights would be infringed (ss.

552. 053-552.

054). The Attorney General enforces exclusively, can demand descriptions of a system, its data, metrics, limitations and monitoring (s.

552. 103), must give 60 days to cure (s.

552. 104), and may seek $10,000 to $12,000 per curable violation, $80,000 to $200,000 per uncurable one, and $2,000 to $40,000 per day for a continuing violation (s.

552. 105).

A defendant is not liable if it finds a violation through feedback, testing or red-teaming, or through an internal review while substantially complying with the NIST AI RMF Generative AI Profile or another recognized framework (s. 552.

105(e)). The Subtitle also sets up a regulatory sandbox (ch.

553) and the Texas Artificial Intelligence Council (ch. 554).

Related Texas AI duties for public bodies (Gov’t Code ch. 2054) and for health practitioners (Health & Safety Code s.

183. 005) are mapped here too.

General information, not legal advice.

Assessment tiers & levels Lavawall supports

Lavawall assesses Texas Responsible Artificial Intelligence Governance Act (TRAIGA) at every level below, so you can start where you are and step up as your program matures.

How Lavawall® helps you get to Texas Responsible Artificial Intelligence Governance Act (TRAIGA) compliance

Most of Texas Responsible Artificial Intelligence Governance Act (TRAIGA) comes down to technical controls you have to run and prove: keeping systems patched, hardening configuration, detecting breaches early, backing up what matters, controlling access, and keeping evidence that all of it actually happened. Lavawall® runs those controls across Windows, macOS, Linux, and Microsoft 365 / Google Workspace from one console, maps them to Texas Responsible Artificial Intelligence Governance Act (TRAIGA), and tracks your posture continuously instead of once a year at audit time.

• Assess your current state against Texas Responsible Artificial Intelligence Governance Act (TRAIGA) in the Lavawall GRC module, with the questionnaire and control set built in.
• Remediate the gaps with the same platform — automated patching, configuration fixes, backups, and access review — not a separate project.
• Evidence everything with timestamped, exportable records auditors, insurers, and clients accept.

Related

Lavawall® supports Texas Responsible Artificial Intelligence Governance Act (TRAIGA) as part of a built-in catalogue of compliance frameworks. Framework requirements are summarized for planning purposes; always confirm the current official text before certifying.