No state-specific AI law. Federal laws apply. Missouri AG monitors AI-driven consumer protection violations under the Merchandising Practices Act.
Missouri within the United States
What companies in Missouri need to know about AI compliance
As of 2026-04-29, Missouri has not enacted an AI-specific statute; the Missouri Attorney General office defers to no comprehensive state privacy statute; UDAP coverage via Missouri Merchandising Practices Act (Mo. Rev. Stat. sec. 407.020). Operators across sectors in Missouri watch federal signals first.
Three neighboring regimes create compounding exposure: Illinois (HB 3773 — AI in Employment (amends the IL Human Rights Act), penalty IDHR/IHRC make-whole relief + tiered civil penalties up to ~$16,000–$70,000 per act per aggrieved party), Kentucky (AI Study Resolution, penalty TBD), and Tennessee (ELVIS Act — AI Voice/Likeness, penalty Civil damages). Multi-state Cross-Sector operators headquartered in Missouri default to the strictest stack.
Federal law still governs Cross-Sector AI in Missouri primarily through FTC Section 5 (15 USC 45) and NIST AI RMF 1.0. Adjacent federal authorities include Gramm-Leach-Bliley Act (GLBA) / NIST Cybersecurity Framework (15 U.S.C. § 6801-6809; NIST CSF 2.0); General Data Protection Regulation (GDPR) (for EU users) (EU Regulation 2016/679); Section 508 / ADA Title III (Digital Accessibility) (29 U.S.C. § 794(d); 42 U.S.C. § 12181). Gramm-Leach-Bliley Act (GLBA) / NIST Cybersecurity Framework (enforced by Federal Trade Commission; NIST) applies to saas platforms handling personal/financial data via ai must implement nist csf security standards: identify, protect, detect, respond, recover. Penalty exposure: ftc civil penalties up to $100,000/violation; private litigation for data breaches. FTC Operation AI Comply (Sep 2024) targeted five companies across sectors.
The practical effect for Missouri operators: AI compliance risk is driven by federal agencies first, with Missouri Attorney General acting on UDAP residual authority only when consumer harm surfaces.
The federal and neighboring-state framework that governs your AI operations. Cross-Sector operators in Missouri operate under a federal-dominant framework anchored by FTC Section 5 (15 USC 45) and NIST AI RMF 1.0, with adjacent authorities Gramm-Leach-Bliley Act (GLBA) / NIST Cybersecurity Framework (15 U.S.C. § 6801-6809; NIST CSF 2.0); General Data Protection Regulation (GDPR) (for EU users) (EU Regulation 2016/679); Section 508 / ADA Title III (Digital Accessibility) (29 U.S.C. § 794(d); 42 U.S.C. § 12181). FTC Operation AI Comply (Sep 2024) targeted five companies across sectors. The practical risk they have to price in is cross-sector FTC Section 5 exposure and state UDAP liability, and the bellwether signal to monitor is NIST AI RMF 1.0 (Jan 2023) is cited as the federal baseline across 30+ agency guidance documents. Illinois -- HB 3773 — AI in Employment (amends the IL Human Rights Act) sets the de-facto regional floor. Missouri has considered AI-liability and deepfake bills (e.g., HB 1462, the AI Non-Sentience and Responsibility Act, 2025) but enacted no comprehensive AI statute; it tracks neighboring Illinois HB 3773 and regional AI working groups. Use this as a starting point; sector pages on this site go deeper into industry-specific obligations.
With 11-50 employees you can justify a half-time compliance lead and part-time external counsel on retainer. Small-stage Cross-Sector operators should deploy a named compliance lead, formal AI inventory, quarterly bias spot-checks, and a documented escalation path, with semi-annual internal audit with annual external review and ownership resting with a designated AI compliance lead reporting to the CEO. small-business budgets ($50K-$250K) justify a compliance lead plus a GRC tool such as Credo AI, Fairly, or Holistic AI. For Cross-Sector specifically, the sharpest exposure to manage is cross-sector FTC Section 5 exposure and state UDAP liability. Given Missouri's concentration in transportation logistics, financial services, and healthcare, freight-routing algorithms, consumer-lending models, and rural telehealth AI deserve priority in your AI inventory.
The enforcement surface for Cross-Sector centres on FTC, CFPB, State Attorneys General, and the statute operators most often under-document is General Data Protection Regulation (GDPR) (for EU users) (EU Regulation 2016/679) — a gap that surfaces in cross-sector FTC Section 5 exposure disputes. Build an evidence binder covering AI inventory, risk-tier register, incident-response runbook, and board-level AI risk report. Treat NIST AI RMF 1.0 (Jan 2023) is cited as the federal baseline across 30+ agency guidance documents as your leading indicator and escalate when the signal shifts.
Verified 2026-04-29. See https://ago.mo.gov/ for the Missouri Attorney General public record on Missouri AI policy.
Even without a Missouri-specific AI law, federal enforcement from the FTC, EEOC, CFPB, and HHS applies to AI-driven decisions in your state. The in-force federal framework is set out below; the industry pages further down cover sector-specific obligations.
No state AI law — but this federal framework still applies in Missouri
Missouri has not enacted its own AI-specific statute. That does not mean AI is unregulated here: the U.S. federal framework below is in force in Missouri exactly as it is in every other state. Each authority links to its official government source. This is the cross-sector baseline — see the federal AI tracker for bills moving through Congress, and the industry pages below for sector-specific obligations.
✓ Last verified · Jul 5, 2026Sourced from official primary sources (linked below).
Prohibits unfair or deceptive acts or practices in or affecting commerce. AI-generated marketing content that deceives consumers — synthetic testimonials, undisclosed AI-created imagery, deceptive personalization, dark patterns amplified by AI — is actionable under Section 5.
Penalty exposure: Civil penalties up to $51,744 per violation (2024 CPI-adjusted); consumer redress; disgorgement; algorithmic model-deletion remedies as in the Rite Aid and Everalbum orders
EEOC Technical Assistance on AI and Title VII (May 18, 2023) ↗EEOC, Assessing Adverse Impact in Software, Algorithms, and Artificial Intelligence Used in Employment Selection Procedures Under Title VII of the Civil Rights Act of 1964 (May 18, 2023)
Enforced by Equal Employment Opportunity Commission
Applies the Uniform Guidelines on Employee Selection Procedures four-fifths rule to AI hiring tools. Employer is liable for discriminatory AI outputs even when the tool is built and operated by a third-party vendor.
Penalty exposure: Title VII remedies: back pay, compensatory damages, punitive damages up to $300K per claimant (employer-size tiered caps), injunctive relief, attorney fees
Enforced by Equal Employment Opportunity Commission
AI hiring and performance monitoring systems must accommodate individuals with disabilities. Must not eliminate essential job functions or require unnecessary testing.
Penalty exposure: Compensatory and punitive damages; back pay; injunctive relief; up to $100,000 in civil penalties
Enforced by National Institute of Standards and Technology
Voluntary framework organizing AI risk into Govern, Map, Measure, and Manage functions. A manufacturing-focused profile is under development. Framework is referenced in federal-contractor expectations and in agency best-practice guidance.
Penalty exposure: Not directly enforceable; cited in regulatory actions, contract requirements, and standard-of-care determinations in tort litigation
This is a cross-sector summary, not an exhaustive list. Federal coverage evolves — always confirm current requirements against each official source above and the federal AI bill tracker.
✓ Free · No email · 2 minutes
Does your Missouri business comply with AI laws?
Answer 4 quick questions → get your personalized risk score + action list.
AI-related bills currently tracked in the Missouri legislature, updated automatically from Open States and the state legislature's own official record. Follow each link for the official bill text, sponsors, and status history.
Risk levels based on Missouri AI law requirements and industry-specific regulations
Do you also serve EU customers?
The EU AI Act applies to any company serving EU customers, even if you're based in Missouri. Penalties reach €35M or 7% of global revenue. Deadline: August 2, 2026.
Anchored to the primary government source (statute, bill text, or agency rule) and verified directly against it · Last verified Apr 29, 2026. See our methodology.