Wyoming

Wyoming has not enacted a general-purpose AI-transparency, risk-management, or output-labeling statute; its only enacted AI-specific law is criminal.

House Bill 102 of the 2026 Budget Session, Enrolled Act No. 32, effective July 1, 2026, created a new Article 7 (Artificial Intelligence Offenses) and companion sections banning nonconsensual AI-generated or digitally altered synthetic sexual material depicting any identifiable person, banning the development or distribution of an AI system built to create or promote child pornography or synthetic sexual material, banning the development or distribution of an AI system built to promote self-harm, and adding AI-generated child pornography as its own basis for the existing sexual-exploitation-of-a-child offense.

A companion section states that using an AI system to commit a crime is not a defense to the crime, and a separate new section gives an AI system's developer civil immunity from harm caused by another person's illegal use of the system unless the developer built it knowing or intending its primary purpose to be illegal.

The enacting act's own title recites an additional purpose to address AI-enabled censorship of political speech and to provide causes of action, but no operative section on either point appears anywhere in the enrolled text.

A separate 2026 bill, House Bill 91, would have barred Wyoming government entities (not private industry) from using AI for social scoring or for identifying persons through biometric data or bulk image gathering; it had not received final passage when the 2026 Budget Session adjourned sine die on March 11, 2026, and would have bound only government use of AI in any event.

Wyoming's general Consumer Protection Act, Wyo. Stat. Ann. §§ 40-12-101 to 40-12-116, prohibits unfair or deceptive trade practices and would be available in principle, though untested, against a deceptive chatbot or AI-generated content used to defraud a consumer. No provision of Title 22 (Elections) requires disclosure of AI-generated or synthetic content in political communications.

Wyoming has never had a comprehensive controller or processor personal-data bill reach a floor vote in either chamber, and none is pending. Wyoming's only enacted personal-data statute of general application is its breach-notification statute, Wyo. Stat. Ann. secs. 40-12-501 to 40-12-511, which reaches biometric, medical, and health-insurance data only by cross-reference to the criminal identity-theft statute's definition of personal identifying information, Wyo. Stat. Ann. sec. 6-3-901(b).

Biometric data reaches the notification duty only when used for authentication purposes, with no exclusion anywhere for an identifier derived from a photograph, video, or audio recording.

Wyoming is the one state in this batch where an indirect private right of action was never opened at all, rather than opened and then foreclosed: the breach statute contains no deeming clause characterizing a notice violation as a violation of Wyoming's general Consumer Protection Act, so that Act's own real private right of action, Wyo. Stat. Ann. sec. 40-12-108, which arms a person injured by an uncured unlawful deceptive trade practice, is simply never incorporated into the breach statute in the first place.

This is a different finding from the express or exclusivity-based foreclosures found elsewhere, and is recorded as such.

Wyoming's computer-crime statute sets a bare without-authorization test for unauthorized access, narrower in scope than California's without-permission standard is broad but with no malicious-intent or deceptive-means gate of the kind Virginia's statute carries, so an unauthenticated, non-deceptive automated access to a public page can fit its elements on a plain reading; no Wyoming court has construed the statute in a scraping context.

Wyoming has no comprehensive personal-data statute; its only enacted personal-data law is the breach-notification statute already covered in the privacy topic document, which excludes information in government records or lawfully available through widely distributed media from its notice duty regardless of source. Terms-of-service enforceability rests on ordinary Wyoming contract law, with no reported Wyoming decision on browsewrap versus clickwrap in a scraping dispute.

Copyright, text-and-data-mining, and database rights are federal only; Wyoming adds nothing beyond the national document. No Wyoming statute assigns robots.txt independent legal weight, and Wyoming's common-law unfair-competition and misappropriation doctrine, available in principle, has not been reported applied to a scraping fact pattern.

Wyoming has required age verification for covered internet platforms hosting material harmful to minors since July 1, 2025, under HB 43 (Chapter 139, Session Laws of Wyoming 2025). A recurring bill to require parental consent for minors' social media accounts (most recently HB 19) has failed to receive the two thirds vote needed for introduction in multiple sessions, including 2024 and 2025. Wyoming has not enacted an app store accountability act or an age appropriate design code.