A computer with Kansas state flag graphics, symbolizing Kansas AI policy.
A computer with Kansas state flag graphics, symbolizing Kansas AI policy.

What is AI regulation in Kansas?

AI regulation: countries and regions

Kansas has no single AI regulatory framework; its approach is piecemeal. In 2025 the state passed laws targeting specific AI uses: HB 2313 bans state agencies from using AI platforms tied to certain foreign entities (e.g. DeepSeek), and SB 186 expands child exploitation and privacy laws to cover AI-generated sexual content involving minors. The governor's office has a generative AI policy for state agencies (2023). Otherwise AI in Kansas falls under existing laws (consumer protection, data laws) rather than dedicated AI regulation.

Reviewed by Jackie, Head of Learning & Development, Levellers · Last reviewed 18 June 2026

What this means

Kansas has not created broad laws or a comprehensive strategy for AI. Instead, recent legislation and policies target specific issues. For example, a 2025 law prohibits state employees from using certain foreign-controlled AI platforms (like the DeepSeek model) on government devices or networks. Another 2025 law criminalizes AI-generated child sexual abuse imagery and adds AI-generated "deepfake" images to the state's privacy and child exploitation laws.

For executive branch agencies, Governor Kelly issued a statewide policy on generative AI (2023) to guide safe use of AI tools within state government. Beyond these, Kansas generally treats AI through existing rules (such as data privacy, consumer protection, and sectoral laws). Proposed AI task-force or AI-ethics bills have been debated, but none have passed yet, so there is no sweeping AI regulatory framework in Kansas.

Why it matters

Kansas's AI regulations matter for organizations in a few ways. State agencies and contractors must avoid banned AI platforms: for example, a public department cannot use any DeepSeek-based system or AI tools from the listed countries of concern on state devices. Tech companies and schools should know that Kansas law now treats AI-generated child abuse images as illegal; selling or distributing such material could trigger criminal penalties.

Businesses and software providers should also be aware of the Kansas Attorney General's tough stance: the AG has warned AI firms they may face liability under existing laws if their products harm children or mislead consumers. In short, even without a broad AI law, Kansas's targeted rules and enforcement approach mean anyone deploying AI affecting Kansans needs to heed these specific prohibitions and general legal obligations (e.g. privacy and consumer protection).

How it works

Foreign AI restrictions on state systems

Kansas law now bans certain AI systems on government equipment. Under 2025's HB 2313, state agencies may not use any "artificial intelligence platform of concern" on state-issued devices or networks. This definition explicitly covers the DeepSeek AI model (and any successor) and any AI model controlled by a "country of concern" (China, Cuba, Iran, North Korea, Russia or Venezuela). Agencies found using such platforms must deactivate accounts and stop usage. The law has an exemption for law enforcement and security investigations.

HB 2313 also bars Kansas medical and research facilities from using foreign-produced genetic sequencing hardware or software (targeting China, Russia, Iran, etc.). The law went into effect upon publication in 2025. Enforcement falls to the agencies themselves (and ultimately to the state treasurer for reimbursement of replacement costs if needed).

AI-related criminal law changes

Kansas criminal codes have been updated to address AI content. In 2025, SB 186 amended child pornography and privacy statutes to cover AI images. For example, the law made it illegal to possess or distribute sexual imagery of children that is "artificially generated". It defines "artificially generated visual depiction" as an obscene computer-generated image or video of a child (including deepfakes "indistinguishable from a real child" or "morphed from a real child's image"). Violating these provisions is a felony under Kansas law, just like traditional child porn.

SB 186 also expanded the crime of "breach of privacy" to include items created or altered by AI that depict people sexually without consent. For instance, sharing an AI-manipulated nude image of an identifiable person against their will now violates Kansas's privacy laws. These changes strengthen penalties for AI-facilitated abuse, treating it on par with real-child abuse images.

State AI policy (executive branch)

Beyond statutes, Kansas has a formal policy for how its own government uses AI. In 2023, Governor Kelly directed that all executive agencies adopt the Kansas Generative Artificial Intelligence Policy. Drafted by the Office of Information Technology Services (OITS), the policy guides state employees on using AI tools safely. It requires staff to review AI outputs for accuracy and to avoid sending sensitive or restricted data to AI systems. Contractors must disclose any AI usage and get approval to use state data in AI projects. This policy does not create new legal rights for the public or penalties beyond existing rules, but it is mandatory for state agencies (and can influence procurement and project decisions).

Other proposals and background laws

Kansas has considered-but not enacted-other AI measures. In 2026 the legislature debated bills like HB 2592 (creating a state AI task force) and SB 405 (restricting certain AI chatbots), but those died in committee. Similarly, SB 499 (2026) was introduced to require AI transparency and age-safe design for children, but as of early 2026 it remained under study.

In the absence of dedicated AI laws, general statutes still apply. Kansas has no specific AI data-privacy law, so AI systems must follow federal rules and sector laws (e.g. HIPAA in health, or COPPA for children's data). Ordinary consumer-protection and deception statutes also govern AI products. Notably, Kansas's Attorney General has warned tech firms that misleading AI could violate existing consumer-fraud laws.

Federal context

Since Kansas sits within the US system, federal AI rules also apply. For example, national content moderation or civil rights laws would govern AI deployed in Kansas just as elsewhere. Kansas's approach is primarily horizontal, addressing specific high-risk AI uses (rather than sector-by-sector or a broad risk-based strategy). The state links to the broader US landscape: it has no known conflict with federal directives, and both its narrow bans and policies complement federal AI guidance.

Overall, Kansas relies on targeted statutes and policies (hard law) for the few AI issues it has addressed, rather than a comprehensive, risk-based AI regulatory framework.

Examples

  • A Kansas health department plans to use a foreign AI image analysis tool for disease research. Because this tool is owned by a company based in China, it qualifies as an "AI platform of concern." Under HB 2313, the department cannot run that software on its computers or network. It would need to choose an AI product from a non-prohibited country or company.

  • A tech firm sells an AI chatbot to Kansas schools. The company must ensure it cannot provide "unsolicited" medical or legal advice in place of professionals, and it must embed disclaimers if giving information about students. (SB 405 was proposed in 2026 to restrict chatbots from acting as professionals, but it did not pass; still, Kansas schools should watch for future rules and follow general privacy laws with student data.)

  • A university research lab receives a federal grant to sequence genomes at a Kansas state university hospital. The lab discovers its genetic analysis machine was built by a subsidiary of a Chinese firm. Because HB 2313 (Section 2) bans "genetic sequencers or operational software" from designated foreign adversaries, the hospital must stop using that equipment and replace it (applying for state reimbursement if needed).

  • A Kansas newspaper exposes an AI-generated deepfake campaign impersonating local officials. Kansas consumer protection laws could apply, but no Kansas law specifically bans deepfakes yet. Legislators have considered updating criminal statutes (as SB 186 did for CSAM), but for now the case likely uses existing fraud and libel laws. Law enforcement might refer to the AG's statements demanding AI accountability, but there's no special Kansas AI violation beyond general law.

Common misunderstandings

  • Misconception: Kansas bans all AI from foreign countries. Reality: Only specific AI models tied to "countries of concern" (China, etc.) are banned on government devices/networks. Private use in Kansas by citizens or businesses is not prohibited by that law.

  • Misconception: Kansas has broad AI privacy rules or a data-protection law. Reality: Kansas does not currently have a general privacy or AI data law. AI-related data must follow federal rules (like HIPAA) or existing Kansas sector laws, not a state AI-specific privacy law.

  • Misconception: The state AI policy applies to businesses. Reality: Governor Kelly's generative AI policy governs only state agencies and contractors; it's an internal executive guideline, not a public law. Private firms in Kansas do not have to follow it, though they may face other legal duties.

  • Misconception: The AG's warnings are new laws. Reality: The Attorney General's letter holds companies accountable under existing statutes (consumer protection, fraud, child safety). There's no new statutory "AI liability" law from Kansas beyond SB 186's criminal provisions.

  • Misconception: New Kansas AI bills have already created sweeping regulation. Reality: Apart from the narrow 2025 laws, other AI-related bills (task forces, content bans, transparency) have been introduced but have not become law.

Risks and boundaries

Kansas's AI rules are limited in scope. The 2025 bans apply only to state agencies and a narrow class of AI tools; they do not restrict private-sector AI innovation or use. Enforcement depends on state IT departments or prosecutors using general laws. The definitions (e.g. "platform of concern") could be contested in practice - it names DeepSeek specifically, but otherwise relies on the concept of "control by a country".

The CSAM and privacy laws cover only sexual or illicit AI content involving minors or non-consensual imagery. They do not regulate other AI uses like hiring algorithms or autonomous vehicles. Misuse of AI in those areas would invoke ordinary laws (discrimination law, safety regulations) rather than AI-specific rules.

All current AI authority in Kansas is statutory or policy-based; there is no ongoing Kansas regulation pending. Proposed regulations (e.g. SB 405, HB 2592, SB 499) fell short, so any future changes will require new legislation. Organizations should not assume broad AI governance is in place - they must track Kansas bills and federal actions.

What to do next

Kansas leaders (policy-makers, tech officers, business executives) should note the gaps and obligations. State agencies should review their AI tools against HB 2313's foreign restrictions and comply with the new generative AI policy. Any Kansas public-sector AI project must ensure no banned models are used and should document data handling to meet OITS guidelines.

Companies operating in Kansas should monitor AG statements and avoid deceptive AI marketing. They should also prepare for potential future laws (e.g. transparency or safety requirements). For now, firms should apply best practices (risk assessments, testing) and honor existing Kansas statutes on privacy, fraud and child protection.

Everyone should stay informed: the Kansas legislature may introduce new AI laws, and federal rules will shape the landscape. Legal and compliance teams should watch Kansas legislative updates and the Kansas AI policy page. Investing in governance and ethics processes is prudent, since enforcement will come via broad statutes.

FAQs

Does Kansas have a general AI law or regulatory agency?

No. Kansas has no standalone AI regulatory commission or law covering all AI. It has only targeted laws (e.g. HB 2313, SB 186) and a state agency AI policy.

Can Kansas bar Chinese AI for everyone in the state?

No. The 2025 law only prohibits Chinese (and other country) AI platforms on state devices and networks. Private use of those tools by businesses or individuals in Kansas is not banned by that law.

Is it illegal to create an AI image of a person without consent?

Kansas law expanded "breach of privacy" to include non-consensual AI images of people in sexual contexts. However, general (non-sexual) deepfakes are not explicitly prohibited by state law, so other Kansas laws (like libel or impersonation) would apply.

What should Kansas businesses do about AI ethics?

Kansas doesn't impose special state AI ethics rules on companies yet. Businesses should follow industry best practices and federal guidelines. The Kansas AI policy for state agencies suggests careful review of AI output - private companies should do similarly voluntarily.

Are there any AI rules for Kansas universities or schools?

Not specifically. Public universities must avoid using banned AI tools on state equipment. Otherwise, normal educational data laws (FERPA, etc.) govern AI in education. No Kansas law currently requires schools to disclose AI use to students.

Does Kansas regulate AI in hiring or lending?

No Kansas law explicitly governs algorithmic decisions in employment or finance. Federal laws (like the Equal Employment Opportunity Act or fair lending laws) would apply. Kansas lawmakers have not yet added AI-specific requirements in those sectors.

What happens if an AI company violates Kansas's AI laws?

Violating HB 2313 (foreign AI ban) could lead to administrative action by the agency (deactivating the platform). Violating SB 186 (AI child exploit/privacy) is a criminal offense (felony or misdemeanor) under Kansas law. Other violations (fraud, deceptive ads) would be handled under existing consumer protection statutes.

Will Kansas implement federal AI policies?

Kansas agencies must follow federal requirements (e.g. White House AI guidance, if applicable). Kansas has no separate state-level mandate yet, but it will likely adopt or adapt federal standards (through its OITS policy or future legislation) as they evolve.

Sources