AI Compliance for Healthcare & Medical Device AI in Texas

Last verified: March 24, 2026

Texas healthcare AI compliance: TRAIGA, SB 1188, and medical device workflows

Healthcare providers, health-tech vendors, and digital-health platforms operating in Texas have to reconcile two distinct state AI rules alongside federal medical-device oversight. This page maps how Texas's AI rules reach clinical decision support, patient triage, AI-assisted diagnostic imaging, patient-facing chatbots, and medical-device AI workflows — and which obligation comes from which law.

TRAIGA (HB-149), effective January 1, 2026, is prohibition-based. It bars deploying AI to manipulate behavior toward self-harm or crime, to intentionally discriminate against protected classes, or to infringe constitutional rights. Its AI-interaction disclosure duty — telling a person they are dealing with an AI system — is written for government agencies, not for private healthcare providers. See the private-sector TRAIGA obligations for the full prohibition set.

The patient-facing AI disclosure a healthcare provider owes patients is governed separately by Texas SB 1188 (effective September 1, 2025), not by TRAIGA. Treat them as two obligations: TRAIGA's prohibited-practice bars apply to your AI broadly, while SB 1188 is the statute that governs how and when a provider discloses AI's role to patients. For the statutory text and status of Texas's AI laws, see the Texas AI regulations page.

Regulatory Status

HB-149

Texas Responsible Artificial Intelligence Governance Act (TRAIGA)

enacted

Signed June 22, 2025; effective January 1, 2026. TRAIGA is Texas's primary comprehensive AI governance law from the 89th Legislature. It establishes prohibited AI practices applying to all entities that promote, advertise, or conduct business in Texas, produce products or services for Texas residents, or develop/deploy AI systems in the state. Key prohibitions cover behavioral manipulation (inciting self-harm, violence, or criminal activity), government social scoring, unlawful discrimination, government biometric identification from public sources without consent, and constitutional rights infringement via AI. Government agencies must disclose to consumers when they are interacting with an AI system, using clear and conspicuous language free of dark patterns; healthcare-provider AI disclosure to patients is governed separately by Texas SB 1188. Enforcement is exclusively by the Texas Attorney General; no private right of action exists. A 36-month regulatory sandbox program allows companies to test AI systems with certain requirements waived. The law also establishes the Texas Artificial Intelligence Council (seven members) to advise on ethical, privacy, and public safety implications — though the Council cannot adopt binding rules.

Effective: 2026-01-01 View Bill Text →

Key Requirements

Prohibition on Behavioral Manipulation Cannot develop or deploy AI systems intentionally designed to incite or encourage a person to commit physical self-harm (including suicide), harm another person, or engage in criminal activity
Government Social Scoring Ban Government entities cannot use AI to assign detrimental categorical scores to individuals based on their behavior or personal characteristics
Biometric Identification Prohibition (Government Entities) Government entities cannot use AI with publicly available images or data to uniquely identify individuals via biometric identifiers without consent (law enforcement and fraud prevention excepted). This prohibition does not apply to private-sector employers; their biometric consent obligations for AI tools — such as video-interview face or voice capture — are governed by Texas's CUBI statute (Tex. Bus. & Com. Code §503.001), which TRAIGA amended effective January 1, 2026
Unlawful Discrimination Prohibition Cannot intentionally deploy AI to discriminate against protected classes under state and federal law; note that disparate impact alone is insufficient to prove intent
Constitutional Rights Protection Cannot develop or deploy AI systems designed to infringe constitutional rights or target individuals based on constitutionally protected characteristics
AI Interaction Disclosure Government agencies must disclose to consumers, before or at the time of interaction, that they are interacting with an AI system; disclosures must be clear and conspicuous with no dark patterns. Healthcare-provider AI disclosure to patients is governed separately by Texas SB 1188 (effective September 1, 2025), not by TRAIGA

Medical device and clinical workflow AI

AI embedded in medical devices — software as a medical device, AI-assisted diagnostic imaging, and clinical decision-support tools — is generally regulated through federal pathways rather than Texas's state AI statutes. TRAIGA and SB 1188 sit alongside that federal layer; they do not replace device-specific regulatory requirements, and this page does not substitute for your device's own regulatory documentation.

Operationally, a Texas clinical-workflow deployment usually has to satisfy several layers at once: the device's own regulatory status, SB 1188's patient-disclosure expectations where the AI is patient-facing, and TRAIGA's prohibited-practice limits (no intentional discrimination, no constitutional-rights infringement). Where the facts here do not resolve a specific device or use case, confirm against the primary statute and your device documentation before relying on a general rule.

  • Document where an AI tool informs a clinical decision and where a clinician overrides it.
  • Map which patient-facing AI touchpoints trigger SB 1188 disclosure to patients.
  • Keep bias-validation records for triage and diagnostic models across demographic groups.
  • Confirm AI-related exclusions or sublimits in malpractice and E&O coverage before deployment.

Related guidance: healthcare AI compliance hub, AI compliance issues for healthcare organizations, and Texas biometric consent for AI tools.

Insurance Implications

Relevant policy types: Medical Malpractice, E&O, Cyber, D&O

Compliance Gaps to Address

No patient disclosure that AI contributes to clinical decision-making
No bias validation of AI diagnostic or triage tools across demographic groups
Lack of documentation linking AI outputs to specific clinical decisions
Unaware of AI-related exclusions or sublimits in malpractice or E&O coverage