Federal vs State AI Law: How to Sort the Layers
A jurisdiction-layer framework for sorting federal, state, and ethics rules that apply to AI systems.
Key Takeaway
AI legal analysis requires layering — not choosing one jurisdiction. Federal agency guidance, state AI statutes, existing privacy and employment law, court rules, and bar ethics opinions may all apply to the same product feature.
Why this matters
Teams often ask "what AI law applies?" as if one answer exists. In practice, AI systems trigger overlapping legal buckets. A hiring AI tool might implicate federal employment guidance, state automated-decision laws, comprehensive privacy statutes, and vendor contract terms simultaneously.
Key analysis
Start with the fact pattern
Before researching statutes, define what the system actually does: what data it uses, what decisions it influences, who is affected, and whether outputs are externally relied upon.
Jurisdiction layering
The practice of mapping multiple legal sources — federal, state, agency, court, and ethics — that may apply to a single AI use case, rather than treating AI law as a single statute.
Sort the layers
| Layer | What it covers | Why it matters |
|---|---|---|
| Federal executive & agency action | Cross-sector governance and procurement expectations | Sets baseline for regulated entities |
| Federal sector regulation | Industry-specific AI rules | Determines compliance for regulated products |
| State AI-specific statutes | Targeted transparency and impact assessment rules | Creates direct multi-state compliance duties |
| State general law overlays | Privacy, employment, consumer protection | Often applies even without AI-specific statutes |
| Court & ethics layer | Litigation procedure and professional responsibility | Governs legal practice and filing obligations |
Federal layer
Agency guidance and executive action
Active monitoring
State AI-specific
Transparency and impact rules
Patchwork — varies by state
State privacy overlay
Automated decision and profiling rights
Expanding
Court & ethics
AI disclosure in filings
Judge-by-judge variation
Federal vs state sorting checklist
Step 1
Define fact pattern
Document data use, decisions, affected populations, and human review.
Step 2
Identify legal buckets
Ethics, privacy, employment, contracts, governance, evidence.
Step 3
Layer jurisdictions
Federal, state, court, and ethics sources.
Step 4
Map practical risk
Translate legal layers into operational action items.
Open Questions
Sources