Law / United States /
Texas
TRAIGA (H.B. 149, 2025), prohibited AI practices binding any person
Tex. Bus. & Com. Code §§ 552.052, 552.055-552.057
In force since .
An AI prohibited practices rule binding public and private bodies.
- Enforcement body
- Office of the Attorney General of Texas, with exclusive enforcement authority
- How the hook was established
- express
- What makes it apply
- Market targeting, Place of effect
- Obligation class
- Prohibition
- Audit expectation
- none
- Setting the rule reaches
- General
What it requires
- Do not develop or deploy an AI system that intentionally aims to incite or encourage physical self-harm, harm to another person, or criminal activity.
- Do not develop or deploy an AI system with the sole intent of infringing, restricting, or impairing a constitutional right.
- Do not develop or deploy an AI system with intent to unlawfully discriminate against a protected class; a disparate impact alone is not enough to show that intent.
- Do not develop or distribute an AI system with the sole intent of producing or distributing AI-generated child pornography or deepfake sexually explicit media, or that engages in text-based sexual conversation while impersonating a child younger than 18.
- The Attorney General has exclusive enforcement authority and must give 60 days' notice and a chance to cure before suing; there is no private right of action.
- Civil penalties run from $10,000 to $12,000 per curable violation, $80,000 to $200,000 per uncurable violation, and $2,000 to $40,000 per day of a continuing violation.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MAP 3.3Targeted application scope is specified and documented based on the system’s capability, established context, and AI system categorization.
- NIST AI 600-1
- GAI-RISK-08Information Integrity
- GAI-RISK-11Obscene, Degrading, and/or Abusive Content
- MIT mitigations Draft
- FINOS AIGF
- AIR-PREV-005System Acceptance Testing
- ETSI EN 304 223
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI.
If you get it wrong
Criminal exposureNo
Private right of actionNo
Penalty structure
Sec. 552.105(a) sets three tiers: $10,000 to $12,000 per violation the court finds curable or a breach of a cure statement, $80,000 to $200,000 per violation the court finds uncurable, and $2,000 to $40,000 per day for a continued violation. The figure recorded here is the top of the uncurable-violation range; the $2,000 daily figure is recorded as the minimum.
- Rule
- Per violation only
- As of
- Minimum
- 2,000
- Currency
- USD
- Per violation unit
- Violation
- Per violation amount
- 200,000
What it makes you log
Logging duty
Sections 552.052, 552.055, 552.056 and 552.057 are worded as outright prohibitions on developing or deploying an artificial intelligence system for the listed purposes. None of the four states a duty to create, keep, or produce a log or record. Section 552.103, elsewhere in the chapter, lets the attorney general request a range of documentation about a reported system once an investigation is open, but that provision is phrased as an investigative power reaching whatever the person already has, not as a duty on the developer or deployer to create or maintain any of it in the first place.
- Kind
- None
- As of
What this law does
A person may not develop or deploy an AI system that intentionally aims to incite self-harm, harm to another, or criminal activity; may not develop or deploy an AI system with the sole intent of infringing a constitutional right; may not develop or deploy an AI system with intent to unlawfully discriminate against a protected class, though disparate impact alone does not show that intent; and may not develop or distribute an AI system with the sole intent of producing AI-generated child pornography or deepfake sexually explicit media, or that engages a minor in simulated sexual conversation while impersonating a child.
Enforcement is exclusively by the Attorney General, with no private right of action and a 60-day notice-and-cure period. Civil penalties run from $10,000 to $12,000 per curable violation, $80,000 to $200,000 per uncurable violation, and $2,000 to $40,000 per day for a continuing violation, and the Attorney General cannot bring an action over a system that has not been deployed.
When LexLint raises it
When your app profile says your app generates content with AI, generates text with AI, generates images with AI, generates video with AI, generates audio with AI, deploys a chatbot or makes high-risk automated decisions.
Back to the example · Lint your app
Page updated .