Law / United States / Texas

TRAIGA (H.B. 149, 2025), prohibited AI practices binding any person

Tex. Bus. & Com. Code §§ 552.052, 552.055-552.057

In force since .

An AI prohibited practices rule binding public and private bodies.

Enforcement body
Office of the Attorney General of Texas, with exclusive enforcement authority
How the hook was established
express
What makes it apply
Market targeting, Place of effect
Obligation class
Prohibition
Audit expectation
none
Setting the rule reaches
General

What it requires

  • Do not develop or deploy an AI system that intentionally aims to incite or encourage physical self-harm, harm to another person, or criminal activity.
  • Do not develop or deploy an AI system with the sole intent of infringing, restricting, or impairing a constitutional right.
  • Do not develop or deploy an AI system with intent to unlawfully discriminate against a protected class; a disparate impact alone is not enough to show that intent.
  • Do not develop or distribute an AI system with the sole intent of producing or distributing AI-generated child pornography or deepfake sexually explicit media, or that engages in text-based sexual conversation while impersonating a child younger than 18.
  • The Attorney General has exclusive enforcement authority and must give 60 days' notice and a chance to cure before suing; there is no private right of action.
  • Civil penalties run from $10,000 to $12,000 per curable violation, $80,000 to $200,000 per uncurable violation, and $2,000 to $40,000 per day of a continuing violation.

These lines are LexLint's reading of the law's text.

In the frameworks

NIST AI RMF
  • MAP 3.3Targeted application scope is specified and documented based on the system’s capability, established context, and AI system categorization.
NIST AI 600-1
MIT mitigations Draft
  • 1.5Safety Decision Frameworks
  • 3.3Access Management
FINOS AIGF
ETSI EN 304 223
  • 5.1.2-1Business need and security risks written down and assessed before deciding to build an AI system.
  • 5.1.4-5End-users told which uses of the system are prohibited.

Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law

Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI.

If you get it wrong

Criminal exposureNo

Private right of actionNo

Penalty structure

Sec. 552.105(a) sets three tiers: $10,000 to $12,000 per violation the court finds curable or a breach of a cure statement, $80,000 to $200,000 per violation the court finds uncurable, and $2,000 to $40,000 per day for a continued violation. The figure recorded here is the top of the uncurable-violation range; the $2,000 daily figure is recorded as the minimum.

Rule
Per violation only
As of
Minimum
2,000
Currency
USD
Per violation unit
Violation
Per violation amount
200,000

What it makes you log

Logging duty

Sections 552.052, 552.055, 552.056 and 552.057 are worded as outright prohibitions on developing or deploying an artificial intelligence system for the listed purposes. None of the four states a duty to create, keep, or produce a log or record. Section 552.103, elsewhere in the chapter, lets the attorney general request a range of documentation about a reported system once an investigation is open, but that provision is phrased as an investigative power reaching whatever the person already has, not as a duty on the developer or deployer to create or maintain any of it in the first place.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

A person may not develop or deploy an AI system that intentionally aims to incite self-harm, harm to another, or criminal activity; may not develop or deploy an AI system with the sole intent of infringing a constitutional right; may not develop or deploy an AI system with intent to unlawfully discriminate against a protected class, though disparate impact alone does not show that intent; and may not develop or distribute an AI system with the sole intent of producing AI-generated child pornography or deepfake sexually explicit media, or that engages a minor in simulated sexual conversation while impersonating a child.

Enforcement is exclusively by the Attorney General, with no private right of action and a 60-day notice-and-cure period. Civil penalties run from $10,000 to $12,000 per curable violation, $80,000 to $200,000 per uncurable violation, and $2,000 to $40,000 per day for a continuing violation, and the Attorney General cannot bring an action over a system that has not been deployed.

When LexLint raises it

When your app profile says your app generates content with AI, generates text with AI, generates images with AI, generates video with AI, generates audio with AI, deploys a chatbot or makes high-risk automated decisions.

Back to the example  ·  Lint your app

Page updated .