AI use case
AI in lending and credit — US AI compliance
AI lending is regulated as a high-risk use case under the Colorado AI Act and overlaps with federal ECOA fair-lending obligations. California AB 1008 treats AI inferences about creditworthiness as personal information under CCPA, requiring deletion-request honoring. Texas TRAIGA prohibits opaque scoring. Expect 2-4 triggered obligations.
State-by-state breakdown
| Jurisdiction | Law | Effective | Max penalty |
|---|---|---|---|
| California consumers; businesses subject to CCPA | California AB 1008 — CCPA AI Inferences | 2026-01-01 | $7,500 |
| Colorado residents; deployers operating in CO | Colorado AI Act | 2026-06-30 | $20,000 |
| Colorado | Colorado SB 25-318 (CAIA Amendment) | 2026-08-30 | $20,000 |
| Texas residents; deployers operating in TX | Texas Responsible AI Governance Act | 2026-01-01 | $25,000 |
| Utah consumers | Utah AI Policy Act | 2024-05-01 | $5,000 |
Headline obligations for ai in lending and credit
- ECOA overlap
- inference disclosure
- risk management
Frequently asked questions about ai in lending and credit compliance
Which states regulate ai in lending and credit?
2 jurisdictions: California consumers; businesses subject to CCPA, Colorado residents; deployers operating in CO, Colorado, Texas residents; deployers operating in TX, Utah consumers.
What is the maximum penalty exposure?
Per-violation maximum: $25,000. Aggregate exposure depends on consumer counts and per-violation multiplication; engage counsel for a tailored estimate.
What are the headline obligations?
ECOA overlap, inference disclosure, risk management.
Run the matrix for your full posture
Map every law that applies to your AI systems — not just ai in lending and credit — in 5 minutes.
Run the matrix