🗺️ AI Laws USA

10 AI policy moves you should know about — week of July 27, 2026

By AI Laws USA ·

Nashville banned large data centers permanently, Florida became the first state to sue OpenAI, and a $10 billion copyright case landed on Google's desk.

AI Laws USA tracks every U.S. federal, state, county, and city AI law on a single live map at ailawsusa.com. The week of July 27, 2026 saw a trifecta of themes. Cities are moving past moratoriums to permanent rules: Nashville's Metro Council unanimously enacted the first-ever Nashville data center zoning ordinance — a flat 500,000 square-foot cap, no exceptions, no expiration. Courts are entering territory they have never covered before: the Florida Attorney General became the first state AG to file a law-enforcement lawsuit against an AI company and personally name its CEO; and for the first time a major AI company sued one of its own users for misusing the product to generate child sexual abuse material. And the data center grid problem found its bipartisan moment: a House committee voted 52-0 on a bill that would make large data centers pay the full cost of the grid upgrades their load requires. Here are ten moves that mattered this week.

  1. NEW LAW

    1. Nashville banned data centers over 500,000 square feet — one of the strictest city land-use rules in the country

    Nashville, TN (city) · Enacted July 21, 2026 — effective immediately, no expiration

    Nashville's Metro Council voted unanimously on July 21, 2026 to enact Davidson County's first-ever permanent data center zoning rules. The ordinance bans all data centers exceeding 500,000 square feet anywhere in the county. Smaller facilities must be located in heavy-industrial (HI) zoning districts and must obtain a Board of Zoning Appeals special exception following a public hearing before any permit can be issued. The rules were driven by a proposed data center adjacent to the Nashville Zoo — a project that produced the largest public comment turnout in Metro Council history. A companion temporary moratorium running through December 1, 2026 was also enacted the same night. Mayor Freddie O'Connell separately advanced eminent-domain legislation aimed at acquiring the Zoo-adjacent DC Blox parcel. Nashville is one of the first major U.S. cities to enact a categorical data center size limit with no sunset date.

    Cite this source ↗ · View live entry on the map →

  2. COURT

    2. Florida became the first state to file a law-enforcement lawsuit against OpenAI — and personally named its CEO

    United States — S.D. Fla. (removed from Highlands County Circuit Court) · Filed June 1, 2026 — removed to S.D. Fla. July 2, 2026 — litigation ongoing

    Florida Attorney General James Uthmeier filed a 10-count complaint against OpenAI LLC and CEO Sam Altman on June 1, 2026 in Highlands County Circuit Court — the first state-led law-enforcement lawsuit against an AI company in the United States and the first to name a sitting AI CEO personally as a defendant. The complaint alleges ChatGPT was deceptively marketed to minors despite known safety risks, citing the death of 16-year-old Adam Raine — who died by suicide following extended ChatGPT sessions — and the alleged use of ChatGPT by the accused Florida State University mass shooter. Claims include violations of the Florida Deceptive and Unfair Trade Practices Act, negligence, strict product liability, and collection of minor data without meaningful parental oversight. OpenAI removed the case to federal court on July 2, 2026, where it was assigned to Judge Aileen Cannon in Fort Pierce. Florida has moved to remand; the jurisdictional dispute is ongoing.

    Cite this source ↗ · View live entry on the map →

  3. PROPOSED

    3. A House committee passed the Ratepayer Protection Act 52-0 — the strongest congressional signal yet on data center grid costs

    United States (federal — House committee) · Passed House committee 52-0 on July 21, 2026 — pending full House and Senate action

    H.R. 9340 — the Ratepayer Protection Act — would amend Section 111(d) of the Public Utility Regulatory Policies Act of 1978 to require that any 'large-load customer' (defined as a non-residential electricity consumer with 100 megawatts or more of peak demand at a single site or campus) pay the full incremental cost of every generation, transmission, or distribution upgrade a utility makes to serve its load — including if the customer later terminates its contract. Before making such an upgrade, utilities would be required to demand financial assurances or cost contributions from the large-load customer. A 52-0 bipartisan committee vote is the strongest congressional signal yet that requiring data centers to bear their own grid costs has cross-aisle support, even if the full bill faces an uncertain path.

    Cite this source ↗ · View live entry on the map →

  4. NEW LAW

    4. Arizona's ban on AI-only health insurance denials took effect July 1 — joining California and Georgia

    Arizona (state) · Effective July 1, 2026 (signed May 12, 2025)

    Arizona HB 2175, signed by Governor Katie Hobbs on May 12, 2025, took effect July 1, 2026. The law requires health insurers and managed-care organizations to have a licensed physician or medical director individually review each case before denying a health insurance claim or prior authorization based on medical necessity or experimental status. Insurers may not rely solely on AI algorithms, automated decision-support tools, or algorithmic recommendations to deny coverage — but may use AI tools to assist if a licensed physician makes the final determination. Arizona is among the first states to ban AI-only health insurance denials by statute, alongside California's SB 1120 (effective January 1, 2025) and Georgia's SB 444 (2026). Enforcement falls to the Arizona Department of Insurance and Financial Institutions.

    Cite this source ↗ · View live entry on the map →

  5. COURT

    5. Publishers filed a $10 billion copyright class action against Google for using books to train Gemini

    United States — S.D.N.Y. (No. 1:26-cv-05870) · Filed July 10, 2026 — litigation ongoing

    Hachette Book Group, Cengage Learning, Elsevier, and author Scott Turow filed a class action against Google in the Southern District of New York on July 10, 2026 (No. 1:26-cv-05870), alleging Google used millions of copyrighted books and academic journal articles without authorization to train its Gemini AI models. The complaint alleges Google obtained works through Google Books's 'snippet' access program — where publishers supplied works for limited indexing — then used the full texts for AI training, and also sourced material from pirate websites. An internal Google document cited in the complaint estimates potential copyright exposure at $10 billion to $100 billion. Additional claims allege Google stripped copyright management information from the works in violation of the DMCA's Section 1202. The case is distinct from the ongoing NYT v. OpenAI and Authors Guild v. OpenAI suits.

    Cite this source ↗ · View live entry on the map →

  6. MORATORIUM

    6. Monroe County, Wisconsin enacted an 18-month moratorium covering data centers and battery storage facilities

    Monroe County, WI (county) · Enacted July 21, 2026 — 18 months

    Acting under Wis. Stat. § 59.69(4), the Monroe County Board of Supervisors barred all zoning applications for the placement or construction of Battery Storage Facilities and Medium or Large Scale Data Centers on July 21, 2026. Medium Scale Data Centers are defined as up to 3,000 square feet with power demand of 10 megawatts or less, including colocation facilities and cryptocurrency mining. Large Scale is over 3,000 square feet with more than 10 megawatts. Battery Storage Facilities — any site housing interconnected batteries designed to accumulate electrical energy from any source — are covered separately, making Monroe County's moratorium materially broader than most. Small data centers (single-organization onsite facilities under 500 kilowatts with no crypto mining) are excluded.

    Cite this source ↗ · View live entry on the map →

  7. COURT

    7. For the first time, an AI company sued a user for generating child sexual abuse material — xAI filed against Terry Harwood

    United States — N.D. Tex. (Dallas Division) · Civil complaint filed July 14, 2026 — litigation ongoing

    xAI Corp. — the company behind the Grok AI chatbot — filed a civil lawsuit on July 14, 2026 in the Northern District of Texas against Terry Harwood, a South Carolina man who had already been arrested on criminal charges in February 2026. The civil complaint alleges Harwood opened multiple Grok accounts between December 8, 2025 and February 18, 2026, uploaded non-sexual photos of adults and minors, and manipulated Grok into generating sexually explicit deepfake images — including child sexual abuse material — by bypassing the system's safety guardrails. xAI is seeking unspecified monetary damages and a permanent ban on Harwood from all xAI products. The case is one of the first known instances of a major AI company filing a civil lawsuit against a user for misusing the AI system to generate harmful content, rather than the more common pattern of victims suing the AI company. xAI separately disclosed it suspended 52,222 accounts and filed 73,604 NCMEC reports related to Grok deepfake abuse in 2026, leading to at least 244 arrests.

    Cite this source ↗ · View live entry on the map →

  8. NEW LAW

    8. Puerto Rico signed its third AI law of 2026 — mandating that government employees receive AI training

    Puerto Rico (territory) · Signed July 23, 2026 — effective immediately

    Governor Jenniffer González Colón signed Law 140-2026 (originating as H.B. 824, 19th Legislative Assembly) on July 23, 2026, amending Puerto Rico's Government Cybersecurity Law to add artificial intelligence as a mandatory topic in the continuing-education program for government information officers and public servants. The virtual continuing-education program must now cover AI use alongside privacy, systems security, data management, cyberattack prevention, and responsible use of new technologies. The Office of Government Ethics endorsed the measure. Puerto Rico has now enacted three AI-specific laws in 2026: Ley 105-2026 (AI in elections), Ley 116-2026 (bot disclosure), and this mandate.

    Cite this source ↗ · View live entry on the map →

  9. NEW LAW

    9. A New Jersey high school district adopted a three-tier AI Use Scale requiring teachers to label every assignment

    Watchung Hills Regional High School District, NJ · Effective July 14, 2026

    Watchung Hills Regional High School District in New Jersey adopted Policy 2365 on July 14, 2026, creating a mandatory three-tier AI Use Scale for classroom assignments. Level 0 Red means no AI — individual effort only. Level 1 Yellow permits AI-assisted brainstorming, outlining, grammar checks, and tone adjustments. Level 2 Green allows AI co-creation with human oversight and demonstrated comprehension. Teachers must state the applicable level for every assignment. Students must disclose and cite all AI use, including the prompt used or a link to the chat transcript where feasible. The policy prohibits students from entering personally identifiable information — including names, Social Security numbers, IEPs, and photos — into public AI models, and bars submitting fully AI-generated work as one's own.

    Cite this source ↗ · View live entry on the map →

  10. MORATORIUM

    10. Chester County, South Carolina made its data center pause retroactive to June 15 — before the council even voted

    Chester County, SC (county) · Enacted July 20, 2026 — effective retroactive to June 15, 2026 — expires December 31, 2026

    Chester County, South Carolina enacted Ordinance No. 2026-14 on July 20, 2026, barring any county official, employee, board, or commission from accepting, processing, or approving any data center development application. The ordinance's pending-ordinance doctrine applied the restriction from first reading, making the effective date June 15, 2026 — more than a month before the final vote. Covered applications include rezonings, planned developments, special exceptions, variances, subdivisions, site plans, utility approvals, and building permits for data centers, server farms, colocation facilities, cryptocurrency mining operations, and AI computing facilities. The ordinance expires December 31, 2026 unless extended. Planning staff must use the pause period to develop use-specific standards covering permitted districts, setbacks, screening, electric and water adequacy, noise limits, and decommissioning requirements.

    Cite this source ↗ · View live entry on the map →

Two through-lines run beneath this week's events. The first is geography: the data center wave has reached a point where almost no region is unaffected — Monroe County, Wisconsin; Chester County, South Carolina; Watchung Hills, New Jersey; Puerto Rico. The second is accountability: Florida's lawsuit, xAI's counter-suit, and the Hachette-Google copyright action all represent governments, companies, and content owners demanding that someone bear the cost of what AI generates and consumes. Whether any of those cases succeed, the legal theories they advance are now part of the record. Every one of these developments is tracked and updated in real time at ailawsusa.com. New posts every Monday.

All posts