Federal AI Bill Would Freeze State Consumer Protections for Three Years — Backlash Mounts

By Hector Herrera | June 7, 2026 | Legal

A federal AI governance bill introduced June 4 includes a three-year moratorium on state consumer AI protections — and state attorneys general, consumer advocates, and labor groups are organizing against it. The preemption clause in the Great American AI Act could suspend dozens of state-level laws that are either already in force or near final adoption, creating a three-year vacuum in consumer protection while federal rulemaking catches up.

The backlash represents one of the sharpest fault lines in U.S. AI governance: whether a federal floor is better than 50 competing state standards, or whether a federal floor that replaces stronger state protections is actually a ceiling dressed up as minimum coverage.

The Bill

The Great American AI Act (GAAIA) is a 269-page discussion draft introduced by Rep. Jay Obernolte (R-CA) and Rep. Lori Trahan (D-MA). Its primary mechanism targets frontier AI developers — companies with more than $500 million in annual AI revenue — and would require them to:

• Undergo third-party audits every six months
• Disclose audit results to a designated federal agency
• Face civil penalties of up to $1 million per violation per day for non-compliance

These provisions have drawn qualified support from some safety advocates who argue that mandatory audits are overdue. But they come bundled with the preemption clause, which is driving the opposition.

The Preemption Clause

Under the GAAIA, existing state AI consumer protection laws would be suspended for three years upon enactment, and no new state laws could take effect during that window. The stated rationale is regulatory uniformity: companies facing 50 different compliance frameworks can't build AI responsibly, the bill's sponsors argue.

Critics read it differently. The three-year moratorium coincides almost exactly with the federal rulemaking timeline required to implement GAAIA's own provisions — meaning the window during which state laws are frozen is also the window during which federal replacements don't yet exist. For consumers in states with strong protections, this is not a transition period. It's a protection gap.

Laws at risk include:

• Colorado's AI Act (effective June 30), which requires developers of high-risk AI to demonstrate "reasonable care" against algorithmic discrimination
• California's proposed AI liability framework, which would hold developers accountable for harms from defective AI products
• Illinois biometric privacy expansions covering AI-generated voice and facial data
• Texas algorithmic discrimination rules targeted at hiring and lending systems

State attorneys general from at least 12 states have signed a joint letter opposing the preemption clause, according to TechTimes. Consumer advocacy organizations including Public Citizen and the Electronic Privacy Information Center have called the moratorium "a pretext for weakening protections under the cover of standardization."

Industry's Position

The AI industry has offered measured support for the bill's audit requirements while remaining quiet on preemption. Major frontier AI developers — OpenAI, Anthropic, Google DeepMind, Microsoft — have lobbied for federal preemption as a matter of operational efficiency. A single compliance framework, they argue, is better for innovation than a patchwork. That position is not stated explicitly in the bill, but it runs through the preemption rationale.

The tension is real: a developer building a hiring AI today genuinely faces contradictory requirements across states. But opponents argue that contradiction is an argument for stronger federal standards, not for suspending state ones.

What the Bill Gets Right

The GAAIA's audit requirements are substantive. Six-month cycles with third-party evaluators — not self-certification — is a meaningful accountability mechanism for systems affecting employment, credit, healthcare access, and public safety. The $1 million per violation per day penalty structure is designed to be felt by companies with hundreds of millions in revenue. These aren't symbolic provisions.

If Congress could separate the audit framework from the preemption clause — or narrow preemption to apply only where state laws conflict with federal requirements, not where they exceed them — the bill could command broader support.

What to Watch

The discussion draft is unlikely to advance unchanged. Obernolte and Trahan have signaled openness to amendments, and the preemption clause is the obvious negotiating point. Watch for a narrowed preemption carve-out — one that preserves state laws stricter than the federal floor — as the most likely compromise path. In the meantime, Colorado's June 30 deadline is the immediate pressure point: the state's law takes effect regardless of what Congress does, and companies need a compliance answer now.

Sources: TechTimes