Washington's AI Preemption Fight Just Hit a Courtroom
Randy Hall, CEO

AI regulation for the channel no longer means tracking one state's checklist. Washington is now fighting state legislatures directly over who gets to write the rules, and the first real courtroom clash already happened this year. For MSPs reselling AI-powered tools, the practical move is to build governance into your stack now, because neither side is backing down.
Why is Washington trying to override state AI laws?
President Trump signed Executive Order 14365, "Ensuring a National Policy Framework for Artificial Intelligence," on December 11, 2025, directing federal agencies to build a uniform national AI policy and to challenge state laws that conflict with it. The order treats the growing pile of state AI statutes as a drag on competitiveness rather than consumer protection working as intended. For MSPs, that framing matters less than the outcome. The compliance assumptions you built a service catalog around this year may not hold next year.
The order did not stop at rhetoric. It set federal agencies on a clock to act, and several of those deadlines have already come and gone with real consequences for how AI law gets made and challenged in the United States.
What has actually changed since the executive order?
A Department of Justice AI Litigation Task Force became responsible for challenging state AI laws in federal court starting January 10, 2026, arguing that some state statutes unconstitutionally burden interstate commerce or are preempted by federal policy. For months the task force filed nothing on its own. Then the fight stopped being theoretical.
Colorado's AI Act was designed to require developers of high-risk AI systems to use reasonable care against algorithmic discrimination, originally starting February 1, 2026, until lawmakers pushed that date back five months to June 30, 2026 after a special legislative session collapsed under tech industry opposition. Before that pushed-back date ever arrived, the law got caught in the federal fight too.
The Department of Justice intervened for the first time in a lawsuit challenging a state AI law when it joined xAI's challenge to Colorado's AI Act on April 24, 2026, and the court suspended enforcement of that law three days later. The court did not rule on whether Colorado's law is unconstitutional. It simply paused enforcement pending the end of Colorado's legislative session and a decision on xAI's injunction request. That is a meaningful signal on its own. A federal intervention can freeze a state AI law before its compliance deadlines ever bite, and that is exactly the kind of uncertainty an MSP pricing out an AI-governance offering has to plan around.
Meanwhile, the laws already on the books kept moving forward on their own timelines. Texas's Responsible AI Governance Act became effective January 1, 2026, applying to any company that advertises, conducts business in, or develops or deploys AI systems in the state. California's Transparency in Frontier AI Act also took effect January 1, 2026, requiring frontier model developers to publish safety frameworks, report critical incidents to state regulators within 15 days (or 24 hours for incidents posing imminent risk of death or injury), and exposing violators to civil penalties of up to $1 million per violation.
So the picture for the channel right now is state laws fully in force in Texas and California, a federal executive order trying to override laws like them, and a Justice Department that has shown it will step into private litigation to pause enforcement while the fight plays out in court.
Who actually has to comply right now?
Right now, you do, if you or your clients touch Texas or California. Preemption fights change what the rules will be later. They do not suspend the rules already in effect, and a court pausing one state's law while a case proceeds is not the same as that law being struck down. Treat every AI law currently on the books as live until a court or legislature says otherwise, not until a headline says a law "might" fall.
This is where a lot of MSPs get the sequencing wrong. Waiting for Washington to settle the preemption question before building any AI governance practice means waiting through state deadlines that have already passed and a federal process with no fixed end date. The order itself calls for a legislative recommendation to Congress, not a law that takes effect on its own, and Congress has not acted on it.
The executive order also set the Federal Trade Commission on its own clock. The order directed the FTC to issue a policy statement treating certain state-mandated bias mitigation requirements as deceptive trade practices, with a deadline tied to the Commerce Secretary's March 11, 2026 review of state AI laws. That is a federal agency potentially arguing that complying with some state laws is itself deceptive, on top of a Justice Department arguing some of those same laws are unconstitutional. For an MSP managing client expectations, that is not background noise. It is a live argument over whether following certain state rules could someday expose a business to federal scrutiny instead of protecting it from state scrutiny.
How should MSPs price AI governance into their stack?
Treat AI governance as a billable service line, not a compliance footnote, because whichever government wins this fight, clients still need evidence of what their AI tools did. Commentary from operators in the channel has already converged on this point. ChannelE2E's analysis of AI compliance for MSPs argues that AI agents and automated workflows should be treated like privileged systems, with logging, approval gates, and rollback paths built in before a client or auditor asks for them, rather than retrofitted after an incident.
That framing holds regardless of which state a client operates in, because the underlying ask, proving what an automated system did and who approved it, does not depend on which legislature or court wins. An MSP that builds this evidence trail into its AI-powered offerings now will not need to redo that work if Congress eventually passes a uniform federal framework, since even the executive order's own approach preserves some state authority (child safety rules, for example) rather than wiping every state law off the board.
Consider a hypothetical MSP running managed AI tools for forty client accounts split across Texas, California, and a handful of states with no comprehensive AI statute yet. If that MSP treats governance as a single line item applied uniformly, rather than a patchwork it rebuilds every time a new state law passes or a federal court pauses one, it avoids re-engineering its service delivery every time this fight produces a new headline. The clients in states without a law today still benefit from the same logging and approval discipline, because comprehensive AI statutes keep spreading to new states.
What should you tell clients who ask which rules apply?
Give them the honest answer: it depends on where they operate, and it may change again before year end. What does not need to wait is the operational discipline underneath it. Regardless of which law or court ends up governing a given client, build the same baseline into every AI-powered engagement:
- Who approved the AI tool for a given workflow, and when
- What client data the tool can see or touch, and what it cannot
- A log of what the tool did, not just what it was told to do
- A documented path to review or roll back an AI-driven action
Building that into how you deliver AI-powered services, through a platform like Catalyst's approach to AI operational workflows, means you are not retrofitting compliance evidence after a client or an auditor asks for it.
If you are deciding which white-labeled AI and compliance tooling actually fits your current client mix, Actiforge's stack builder walks through the tradeoffs without a vendor demo cycle. AI governance sits alongside the rest of the white-labeled lineup in Actiforge's product catalog, not as a bolt-on afterthought. The regulatory fight over who writes AI rules in this country is not going to resolve cleanly or soon, and MSPs that wait for clarity before building governance into their AI offerings are choosing to compete without it.
The channel partners who come out ahead here will be the ones who stopped treating AI compliance as a wait-and-see problem back when the first state laws took effect, not the ones still watching Washington to see who wins. See the full stack.