What AI rules apply to hiring in Texas?

Texas does not currently have a private-sector AI hiring law that forces employers to disclose AI use, run bias audits, or let candidates opt out — there is no Texas equivalent of Illinois's AI Video Interview Act, Colorado's AI Act, or NYC Local Law 144. HB-2060 was a state-agency AI inventory and advisory law, not an employer hiring rule. TRAIGA (HB-149), effective January 1, 2026, is the main Texas AI statute for private employers, but for hiring it bites mainly when a tool is intentionally deployed to discriminate against a protected class or otherwise hits TRAIGA's prohibited-practice categories; TRAIGA does not create a general private-sector hiring disclosure mandate. TRAIGA's biometric-identification and social-scoring prohibitions apply to government entities only — biometric consent for private-sector AI tools, such as video-interview face or voice capture, is governed by Texas's CUBI statute (Tex. Bus. & Com. Code §503.001), not TRAIGA. Federal Title VII still applies, so an AI tool that produces a disparate impact on protected groups is a legal risk even without a Texas disclosure law. Practically, Texas employers should document each tool, its bias controls, any biometric-consent process, and a human-review checkpoint before any adverse hiring decision.

What are the Texas TRAIGA private sector AI obligations?

Texas HB-149 (the Texas Responsible Artificial Intelligence Governance Act, or TRAIGA) — effective January 1, 2026 — is structured as a prohibition-based statute, not an affirmative-obligation regime like Colorado's AI Act. Private-sector businesses that promote, advertise, or conduct business in Texas, produce products or services for Texas residents, or develop/deploy AI systems in the state are prohibited from: (1) using AI designed to incite self-harm, harm to others, or criminal activity (behavioral manipulation); (2) intentionally deploying AI to discriminate against protected classes (disparate impact alone is insufficient to prove intent); and (3) using AI to infringe constitutional rights or target individuals based on constitutionally protected characteristics. Two further TRAIGA prohibitions — biometric identification from publicly available sources, and social scoring — apply to government entities only; for private-sector employers, biometric consent for AI tools is governed by Texas's CUBI statute (Tex. Bus. & Com. Code §503.001), not TRAIGA. TRAIGA's consumer-disclosure duty (telling a person they are interacting with AI) applies to government agencies; healthcare-provider AI disclosure to patients is governed separately by SB 1188, not TRAIGA. There is no statewide mandate for risk assessments, governance policies, or high-impact-system recordkeeping. Enforcement is exclusive to the Texas Attorney General; no private right of action. A 36-month regulatory sandbox allows approved companies to test AI systems with certain requirements waived.

AI compliance answer

Does the Texas TRAIGA require biometric consent?

Freshness: Last verified: June 1, 2026
Coverage: State-specific guidance
Jurisdictions: TX
Referenced records: 1

Direct answer

For private-sector employers, TRAIGA itself does not impose biometric consent — its biometric-identification ban applies to government entities only. The controlling law is Texas's CUBI statute (Tex. Bus. & Com. Code §503.001): before capturing face geometry or a voiceprint for a commercial purpose, you must give notice, obtain consent, protect the data, and destroy it on schedule. TRAIGA's 2026 amendments updated CUBI's AI provisions. The Attorney General enforces both.

For private-sector employers, no — TRAIGA itself does not impose the biometric consent obligation. Texas HB-149's (TRAIGA) prohibition on identifying individuals from publicly available biometric data without consent applies to government entities only. The controlling biometric consent law for private-sector employers is Texas's CUBI statute (Capture or Use of Biometric Identifier Act, Tex. Bus. & Com. Code §503.001): before capturing a biometric identifier — such as face geometry or a voiceprint in an AI video interview — for a commercial purpose, an employer must inform the individual and obtain consent, protect the data, and destroy it within a set period after the collection purpose ends. TRAIGA's 2025 amendments to CUBI, effective January 1, 2026, add an AI-model-training exception and clarify that media appearing publicly online does not by itself constitute consent unless the individual made it public. Enforcement of both TRAIGA and CUBI is exclusive to the Texas Attorney General; CUBI carries civil penalties up to $25,000 per violation. Employers already compliant with a strict biometric regime such as Illinois BIPA will generally meet CUBI's consent requirements.

Sources checked

Scope

Clarifies that for private-sector employers biometric consent flows from Texas's CUBI statute (Tex. Bus. & Com. Code §503.001), not TRAIGA, whose biometric ban is government-only. Covers CUBI's notice, consent, and retention duties and TRAIGA's 2026 CUBI amendments. Illinois BIPA is referenced only for comparison.

Operational implication

If a hiring AI extracts face geometry or a voiceprint, CUBI requires pre-capture notice, consent, protection, and timely destruction. Operationally that means a consent step before any biometric processing, a documented retention/destruction schedule, and vendor confirmation of how biometric data is handled — or the employer inherits the §503.001 exposure directly.

Applicable Regulations

HB-149

Texas Responsible Artificial Intelligence Governance Act (TRAIGA)

enacted

Signed June 22, 2025; effective January 1, 2026. TRAIGA is Texas's primary comprehensive AI governance law from the 89th Legislature. It establishes prohibited AI practices applying to all entities that promote, advertise, or conduct business in Texas, produce products or services for Texas residents, or develop/deploy AI systems in the state. Key prohibitions cover behavioral manipulation (inciting self-harm, violence, or criminal activity), government social scoring, unlawful discrimination, government biometric identification from public sources without consent, and constitutional rights infringement via AI. Government agencies must disclose to consumers when they are interacting with an AI system, using clear and conspicuous language free of dark patterns; healthcare-provider AI disclosure to patients is governed separately by Texas SB 1188. Enforcement is exclusively by the Texas Attorney General; no private right of action exists. A 36-month regulatory sandbox program allows companies to test AI systems with certain requirements waived. The law also establishes the Texas Artificial Intelligence Council (seven members) to advise on ethical, privacy, and public safety implications — though the Council cannot adopt binding rules.

Key Requirements

Prohibition on Behavioral Manipulation Cannot develop or deploy AI systems intentionally designed to incite or encourage a person to commit physical self-harm (including suicide), harm another person, or engage in criminal activity

Government Social Scoring Ban Government entities cannot use AI to assign detrimental categorical scores to individuals based on their behavior or personal characteristics

Biometric Identification Prohibition (Government Entities) Government entities cannot use AI with publicly available images or data to uniquely identify individuals via biometric identifiers without consent (law enforcement and fraud prevention excepted). This prohibition does not apply to private-sector employers; their biometric consent obligations for AI tools — such as video-interview face or voice capture — are governed by Texas's CUBI statute (Tex. Bus. & Com. Code §503.001), which TRAIGA amended effective January 1, 2026

Unlawful Discrimination Prohibition Cannot intentionally deploy AI to discriminate against protected classes under state and federal law; note that disparate impact alone is insufficient to prove intent

Constitutional Rights Protection Cannot develop or deploy AI systems designed to infringe constitutional rights or target individuals based on constitutionally protected characteristics

AI Interaction Disclosure Government agencies must disclose to consumers, before or at the time of interaction, that they are interacting with an AI system; disclosures must be clear and conspicuous with no dark patterns. Healthcare-provider AI disclosure to patients is governed separately by Texas SB 1188 (effective September 1, 2025), not by TRAIGA

Effective: 2026-01-01 Penalties: Civil penalties enforced exclusively by the Texas Attorney General. Curable violations: up to $12,000 per violation. Uncurable violations: up to $200,000 per violation. Continuing violations: up to $40,000 per day. A 60-day written cure period is provided before enforcement action for curable violations. State agencies may also impose additional sanctions including license suspension or revocation up to $100,000.

Full State Analysis

Texas AI Regulations

Where this lands operationally

Gridex turns the compliance or coverage question into operated workflow controls: intake, review points, audit trails, and the places a person stays in the decision.

Managed Intake & QualificationCapture, qualify, and route incoming work with disclosure, consent, and human review built into the intake step.