The AI preemption fight is loud. The rules that bind builders are already written.

The question that gets the headlines is whether Washington will set one national AI standard or use federal power to strike down state laws. That is the wrong thing to watch. For anyone actually shipping an AI product, the binding rules already exist, and they are the EU AI Act plus whichever US state law is strictest in your sector. The preemption fight changes the politics. It does not change your compliance file.

Picture a single model shipped onto a map where the borders disagree. That map is the product now.

What is already settled

The EU AI Act is not a proposal. Its prohibitions and AI-literacy duties took effect in February 2025, obligations for general-purpose model providers followed on August 2, 2025, and the rules for high-risk systems plus the regulator’s enforcement powers switch on August 2, 2026. The top penalty tier reaches 35 million euros or 7 percent of global turnover. A provider can sign the voluntary Code of Practice to earn a presumption of compliance, which is the Commission’s way of trading certainty for cooperation while the binding technical standards are still being drafted.

The United States has no equivalent law, and that absence is the whole story. A proposed ten-year freeze on state AI rules was stripped from the federal budget bill by a 99 to 1 Senate vote, so the states kept legislating. Texas put its Responsible Artificial Intelligence Governance Act into effect on January 1, 2026, focused on government use and intent-based liability, with civil penalties that run from $10,000 for curable violations to $200,000 for uncurable ones. Illinois regulates AI in video interviews. The EU, separately, classifies employment and credit decisions as high-risk. The map already has lines on it.

The altitude that matters

Drop from the statute to the startup. A general-purpose model obligation in the EU means documenting training data, publishing a copyright policy, and assessing systemic risk. None of that is free. For a small company, the cost of a model release is no longer just compute. It is the legal review, the documentation, and the decision about which markets are worth entering at all. The rules do not ban you from Europe. They price the door.

That is why the strictest applicable regime, not the friendliest, sets your engineering requirements. If you build one product for a global market, you build to the EU plus the toughest US state in your vertical, because maintaining separate compliant versions per jurisdiction costs more than meeting the high bar once.

Where the genuine uncertainty is

Here is the honest ledger, because not everything is settled. The federal government is actively trying to clear the state patchwork. Executive Order 14365, signed in December 2025, directs the Justice Department to stand up a litigation task force to challenge “burdensome” state laws on commerce-clause and preemption grounds, conditions roughly $42 billion in broadband funding on states repealing such rules, and orders the Commerce Department to publish a list of offending state laws by March 11, 2026. The task force’s first move was intervening in xAI’s suit against Colorado.

But an executive order is not a statute, and preemption normally flows from an act of Congress. So the order pressures and litigates rather than erases. The courts will decide whether it has teeth.

The clearest sign of how unstable this is comes from the bellwether itself. Colorado wrote the first comprehensive state AI Act in 2024, then repealed and replaced it with a narrower transparency regime whose compliance date slid into 2027. The state that set the template rewrote it before it ever took effect. When the model law is a moving target, building to it is an act of faith.

1. 1 Feb 2025 EU AI Act prohibitions and AI-literacy duties take effect.
2. 2 Aug 2025 EU obligations for general-purpose model providers apply.
3. 3 Jan 2026 Texas's RAIGA and Illinois's video-interview AI law go live.
4. 4 Mar 2026 US Commerce is directed to publish its list of preemptible state laws — a political signal.
5. 5 Aug 2026 — the gate The EU regulator's enforcement powers switch on: information requests, model access, recalls.

The two dates on the calendar

Forget the speeches and watch two days. March 11, 2026 is when the US Commerce Department was directed to publish its list of state laws it considers preemptible, which tells you where the federal fight goes next. August 2, 2026 is when the EU’s regulator can begin issuing information requests, demanding model access, and ordering recalls. One date is a political signal. The other is a legal switch.

The companies that treat the preemption fight as a reason to wait are reading the wrong document. The borders on the map are already drawn, the strictest line is already your line, and the only question a builder controls is whether the compliance work starts before August or after the first information request lands.