Artificial intelligence has rapidly transitioned from emerging technology into a central pillar of modern business operations. Across industries ranging from healthcare and finance to manufacturing and legal services, organizations are increasingly relying on AI-driven tools to automate decision-making, enhance productivity, and unlock new forms of value creation. In Michigan, a state with a long-standing reputation for industrial innovation and a growing technology sector, the adoption of artificial intelligence has accelerated at an unprecedented pace. However, with this rapid integration comes a corresponding shift in the legal landscape. Lawmakers in Michigan have begun to respond to the risks and complexities associated with AI by introducing a series of legislative measures that will significantly affect how businesses deploy and manage these technologies in 2026 and beyond.
The evolving regulatory framework in Michigan reflects a broader national and global movement toward AI governance. Unlike previous waves of technological regulation, which often lagged behind innovation, the current approach seeks to anticipate potential harm before they fully materialize. This proactive stance introduces new compliance obligations, operational considerations, and legal risks that businesses must carefully navigate. Companies that fail to understand or adapt to these changes may face substantial penalties, reputational damage, and operational disruptions. Conversely, organizations that proactively align their AI strategies with emerging legal requirements may gain a competitive advantage by demonstrating trustworthiness, transparency, and accountability in their use of technology.
Michigan’s approach to AI regulation in 2026 is not defined by a single comprehensive statute but rather by a collection of legislative initiatives, regulatory proposals, and existing legal frameworks that together shape the obligations of businesses. This evolving landscape reflects both the complexity of AI technology, and the challenges lawmakers face in crafting effective regulation. Among the most significant developments are House Bill 4667 and House Bill 4668, which together signal the state’s intent to address both the misuse of AI and the responsibilities of those who develop and deploy it.
House Bill 4667 focuses primarily on the misuse of artificial intelligence, particularly in contexts involving fraud, discrimination, and other unlawful activities. By explicitly criminalizing certain harmful uses of AI, the legislation underscores the principle that technology does not exist outside the bounds of existing legal norms. Rather, it reinforces the idea that the use of AI to facilitate illegal conduct will be treated as an aggravating factor, potentially resulting in enhanced penalties. This approach aligns with a broader trend in state-level AI legislation, where lawmakers seek to close perceived gaps in enforcement by explicitly addressing AI-enabled misconduct. ¹
Complementing this enforcement-focused approach, House Bill 4668 introduces a more forward-looking regulatory framework aimed at AI developers and operators. The bill establishes requirements for safety and security protocols, particularly for organizations developing large-scale or high-risk AI systems. These obligations are designed to mitigate risks associated with advanced AI models, including the potential for large-scale harm, cybersecurity threats, and unintended consequences arising from automated decision-making. By imposing duties on developers to proactively manage these risks, the legislation reflects a shift toward preventative regulation rather than purely reactive enforcement. ²
For businesses operating in Michigan, the practical implications of these legislative developments are extensive. Artificial intelligence is no longer simply a tool that can be deployed without significant oversight; it is increasingly treated as a regulated system that requires careful governance. Companies must now consider how their use of AI intersects with a wide range of legal obligations, including consumer protection laws, employment regulations, data privacy requirements, and anti-discrimination statutes.
One of the most immediate impacts is the need for organizations to conduct comprehensive assessments of their AI systems. This includes identifying where AI is used within the business, understanding how decisions are made, and evaluating the potential risks associated with those systems. Such assessments are not merely best practices but are becoming essential components of compliance strategies. Businesses that lack visibility into their AI operations may find it difficult to demonstrate compliance with regulatory requirements or to respond effectively to incidents involving AI-related harm.
In addition to internal governance, businesses must also consider the implications of AI regulation for their relationships with third-party vendors and service providers. Many organizations rely on external AI tools, such as cloud-based platforms, machine learning models, and generative AI applications. Under the emerging legal framework, businesses may be held accountable not only for their own use of AI but also for the actions of their vendors. This creates a need for robust vendor management practices, including contractual safeguards, due diligence processes, and ongoing monitoring of third-party AI systems.
One of the most significant areas of regulatory focus in Michigan’s AI legislation is the use of AI in employment decisions. Proposed measures seek to limit or regulate the use of AI in hiring, compensation, performance evaluation, and termination decisions. These initiatives reflect growing concerns about algorithmic bias and the potential for AI systems to perpetuate or exacerbate existing inequalities in the workplace.
In particular, legislation under consideration would restrict the use of AI in employment decision-making processes and require greater transparency and human oversight. Employers may be required to obtain consent from employees before using AI-based monitoring tools and to provide clear disclosures about how these systems operate. ³ This represents a significant shift from traditional workplace practices, where monitoring technologies were often implemented with minimal regulatory oversight.
The implications for businesses are substantial. Employers must carefully evaluate whether their use of AI in human resources functions complies with emerging legal standards. This may involve redesigning hiring processes, implementing bias testing protocols, and ensuring that human decision-makers remain actively involved in critical employment decisions. Failure to address these issues could expose businesses to claims of discrimination, regulatory enforcement actions, and reputational harm.
AI systems are inherently data-driven, relying on large volumes of information to function effectively. As a result, the intersection of AI regulation and data privacy law is a critical area of concern for businesses. In Michigan, existing data breach and privacy laws apply to AI systems in much the same way as they do to traditional data processing activities. However, the use of AI introduces additional complexities, particularly with respect to data collection, processing, and storage.
For example, AI systems may inadvertently expose sensitive data through outputs, such as when generative AI models produce content that includes confidential or proprietary information. Businesses must therefore implement robust data governance practices to ensure that AI systems do not compromise the security or privacy of sensitive information. This includes establishing clear policies about data usage, implementing technical safeguards, and conducting regular audits of AI systems.
Moreover, the potential for AI-related data breaches requires businesses to expand their incident response plans to account for new types of risks. Traditional cybersecurity measures may not be sufficient to address the unique challenges posed by AI, such as model inversion attacks or adversarial inputs. As a result, organizations must adopt a more comprehensive approach to security that integrates AI-specific considerations into their overall risk management
framework. ⁴
Given the complexity of Michigan’s emerging AI regulatory landscape, businesses must adopt a proactive approach to compliance and governance. This involves not only understanding the legal requirements but also integrating them into the organization’s broader operational and strategic framework. Effective AI governance requires a combination of policies, procedures, and technical controls that collectively ensure responsible and compliant use of artificial intelligence.
At a foundational level, businesses should develop clear internal policies regarding the use of AI. These policies should define acceptable use cases, establish guidelines for data handling, and outline the responsibilities of employees who interact with AI systems. In addition, organizations should implement training programs to ensure that employees understand the risks and obligations associated with AI use. This is particularly important in environments where AI tools are widely accessible, such as those involving generative AI applications.
Another key component of AI governance is the establishment of oversight mechanisms. This may include the creation of dedicated committees or roles responsible for overseeing AI-related activities, as well as the implementation of regular audits and assessments. By embedding governance into the organizational structure, businesses can ensure that AI-related risks are identified and addressed in a timely and effective manner.
Michigan’s AI laws do not exist in isolation but are part of a broader national trend toward increased regulation of artificial intelligence. Across the United States, states have begun to enact their own AI-related legislation in the absence of comprehensive federal regulation. This has resulted in a patchwork of laws that vary in scope and requirements, creating challenges for businesses that operate across multiple jurisdictions. ⁵
The lack of a unified federal framework means that businesses must navigate a complex and sometimes inconsistent regulatory environment. While some states have adopted comprehensive AI governance frameworks, others have focused on specific use cases, such as deepfakes or employment discrimination. This variability increases the burden on businesses, which must tailor their compliance strategies to account for differing legal requirements.
At the same time, there are ongoing efforts at the federal level to establish a more cohesive approach to AI regulation. Recent policy proposals indicate a desire to balance innovation with risk mitigation, emphasizing the need for standards that protect consumers while allowing businesses to continue developing and deploying AI technologies. However, until such a framework is enacted, state-level laws will continue to play a critical role in shaping the regulatory landscape.
While Michigan’s efforts to regulate AI reflect a growing recognition of the technology’s risks, they have not been without controversy. Critics argue that some of the proposed legislation may be overly broad or duplicative of existing laws, potentially creating unnecessary compliance burdens for businesses. There are concerns that imposing additional regulatory requirements on AI could stifle innovation and place Michigan-based companies at a competitive disadvantage compared with businesses in less regulated jurisdictions.
In particular, some stakeholders have questioned whether laws such as House Bill 4667 add significant value beyond existing legal frameworks. Since activities such as fraud and discrimination are already illegal, critics argue that explicitly targeting AI may not provide additional protections for victims. Instead, they suggest that such legislation could lead to increased litigation and enforcement actions without necessarily improving outcomes. ⁶
Despite these criticisms, proponents of AI regulation emphasize the importance of establishing clear rules and accountability standards for the use of artificial intelligence. They argue that without such measures, businesses may prioritize efficiency and cost savings over ethical considerations, leading to harmful consequences for individuals and society as a whole. The challenge for lawmakers is to strike a balance between promoting innovation and ensuring that AI is used responsibly and ethically.
As Michigan’s AI laws continue to evolve, businesses must take proactive steps to prepare for the future. This involves not only understanding current legal requirements but also anticipating future developments and adapting accordingly. Organizations that approach AI regulation as an opportunity rather than a burden may find themselves better positioned to thrive in an increasingly regulated environment.
Preparation begins with awareness. Businesses must stay informed about legislative developments and understand how they affect their operations. This may require engaging with legal counsel, participating in industry groups, and monitoring regulatory updates. In addition, organizations should invest in building internal expertise in AI governance, either through training programs or by hiring specialists with relevant knowledge and experience.
Ultimately, the goal is to create a culture of responsible AI use that aligns with both legal requirements and organizational values. By embedding principles such as transparency, fairness, and accountability into their AI practices, businesses can not only comply with regulations but also build trust with customers, employees, and stakeholders.
The introduction of new AI laws in Michigan marks a significant shift in the regulatory landscape for businesses. As artificial intelligence continues to reshape industries and redefine how organizations operate, the need for clear and effective governance has become increasingly apparent. Michigan’s approach, characterized by a combination of targeted legislation and broader legal principles, reflects an effort to address the unique challenges posed by AI while supporting continued innovation.
For businesses, the implications are clear. Artificial intelligence is no longer a space free from regulation; it is a domain that requires careful planning, robust governance, and ongoing compliance efforts. Organizations that fail to adapt may face significant risks, while those that embrace responsible AI practices may gain a competitive edge in a rapidly evolving market.
By understanding the key aspects of Michigan’s AI laws and taking proactive steps to align their operations with regulatory requirements, businesses can navigate this new landscape with confidence. In doing so, they will not only mitigate legal risks but also contribute to the development of a more ethical, transparent, and trustworthy AI ecosystem.
Contact Tishkoff
Tishkoff PLC specializes in business law and litigation. For inquiries, contact us at www.tish.law/contact/. & check out Tishkoff PLC’s Website (www.Tish.Law/), eBooks (www.Tish.Law/e-books), Blogs (www.Tish.Law/blog) and References (www.Tish.Law/resources).
Sources:
- Michigan House Bill 4667 (2025–2026 Legislative Session) https://legislature.mi.gov/Bills/Bill?ObjectName=2025-HB-4667
- Michigan House Bill 4668 – AI developer safety and risk requirements https://www.legislature.mi.gov/documents/2025-2026/billintroduced/House/pdf/2025-HIB-4668.pdf
- Michigan legislative proposals on AI use in employment decisions (2026) https://legislature.mi.gov/Bills/Bill?ObjectName=2026-HB-5579
- Michigan data privacy and breach laws applied to AI systems https://pivitstrategy.com/michigan-ai-laws-you-should-know-2026/
- Overview of state-level AI regulation in the United States https://www.proofpoint.com/us/resources/white-papers/securing-governing-ai-data-guide?utm_source=google&utm_medium=cpc&gclsrc=aw.ds&&hstk_creative=802595253749&hstk_campaign=23696416295&hstk_network=googleAds&gad_source=1&gad_campaignid=23696416295&gbraid=0AAAAAohBE7Y9Sl7lZ8zxtSy69ackNv1Bi&gclid=EAIaIQobChMI2PSI4pLckwMVjTIIBR1DUiTVEAAYASAAEgKkLfD_BwE
- Analysis and criticism of Michigan AI legislation approaches https://michigan.law.umich.edu/news/michigan-law-alumni-discuss-ais-impact-legal-profession