The Ongoing Report of ClingantryThe Report

Alabama's new law (signed April 17, 2026, effective October 1, 2026) says a health insurer can't rely only on AI to decide whether care gets covered — any decision to deny or reduce coverage has to be made by a qualified healthcare professional. Insurers must also tell enrollees that AI is used in coverage decisions, base prior-auth determinations on the individual patient's medical history rather than group data alone, and certify annually to the state that their AI is monitored for accuracy and doesn't discriminate. If you're in Alabama, this is leverage: after October 1, an AI-only denial is something you can push back on by law.

A December 2025 executive order (EO 14365) directs the federal government to push back on state AI laws it considers burdensome — including a Justice Department task force to challenge them in court, and reviews by Commerce and the FTC identifying which state laws conflict with federal policy. What this means for you: the state AI rules covered in this feed (Texas, Colorado, Indiana, Alabama, and others) are valid law today and you should keep complying — but some may end up challenged in court over the next year or two. Don't un-build your compliance program based on headlines; do expect uncertainty about which state rules survive.

Georgia's SB 444, effective January 1, 2027, draws a clean line: insurers may use AI in prior authorization to automate paperwork and reduce administrative burden — but an adverse decision (denying or reducing care) can't be issued until a qualified clinical peer has actually conducted the review and participated in the decision. The AI also can't override that clinician's judgment. If you operate in Georgia, nothing changes today, but this is worth having on your 2027 compliance calendar now.

Utah's SB 319, in effect since May 6, 2026, requires insurers to publicly post their preauthorization requirements on their website and to disclose whether AI is used when reviewing authorization requests. It also sets a maximum time insurers can take to answer an authorization request, and sets minimum periods an approval stays valid. Practical upshot for your utilization and scheduling teams: approvals should be faster to get and harder to have silently expire — and you can now find out whether a Utah payer is using AI on your requests just by asking.

Colorado's AI law (requirements around AI systems not discriminating against patients) now takes effect June 30, 2026 — pushed back from its original February date. A companion healthcare-specific rule adds a plain but important protection: your staff can't let an AI system be the sole reason a patient's coverage or care is denied. A human still has to be involved in that decision.

If you operate in Texas, there are two separate AI laws to know about, not one. The first, HB 149, is the broad rulebook for how AI systems can be used — it's been in effect since January 1, 2026. The second, SB 1188, is narrower but easy to overlook: it requires your staff to tell patients when AI was used in their diagnosis or treatment. That one has actually been in effect longer, since September 1, 2025. If your compliance team only checked the first law, you may already be missing a disclosure requirement that's been live for almost a year.

As of July 1, 2026, health insurers in Indiana can no longer use AI as the only basis to downcode a claim (pay it at a lower level than billed) — a human must review the patient's medical record first. Insurers also now have to disclose, in plain view, whenever AI was used to deny a prior authorization or downcode a claim. Two things for your team: your billing office should start watching downcoded claims for the required disclosures, and note the law cuts both ways — providers also can't submit claims generated by AI without a person involved in the claim reviewing them. Appeals get at least 180 days.