Artificial intelligence is quickly becoming a core technology for e-commerce. From customer service chatbots and marketing automation to fraud detection and inventory forecasting, AI tools are now embedded in many of the systems online businesses rely on to compete and grow.

But as AI adoption accelerates, policymakers are facing a key question: who should regulate it?

Recently, more than 50 Republican state lawmakers urged the White House not to block state-level AI laws, arguing that states should retain authority to regulate emerging technologies. The effort has been supported by policy groups such as Americans for Responsible Innovation (ARI), which encourage states to continue developing their own AI frameworks.

For ecommerce businesses operating nationwide, the outcome of this debate could significantly shape how AI tools are used—and how complex compliance becomes.

The Risk of a Patchwork AI System

In the absence of comprehensive federal legislation, states have begun introducing their own AI regulations focused on issues such as transparency, automated decision-making, and consumer protections around generative AI.

Several states are already moving forward. Colorado has enacted one of the most comprehensive state AI laws, while California and Utah have passed measures requiring certain AI disclosures. Other states—including Illinois, Texas, and New York—have introduced legislation addressing biometric data, algorithmic accountability, automated systems and AI use in healthcare.

More recently, Florida lawmakers have debated an “AI Bill of Rights,” highlighting how quickly states are stepping in while federal standards are still evolving.

For ecommerce companies selling across state lines, this raises the possibility of a patchwork regulatory landscape. Businesses could face different disclosure requirements or compliance rules depending on where their customers live—particularly when using AI-powered marketing tools, chatbots, or recommendation systems.

The Federal Government’s Role

At the federal level, policymakers have not yet passed a comprehensive AI law. Instead, agencies are relying on existing authority to address emerging risks.

For example:

• The FTC is examining deceptive AI-generated content and algorithmic bias.
• The FCC has begun addressing AI-generated robocalls.
• NIST has developed voluntary guidance through its AI Risk Management Framework.

Some policymakers have proposed federal preemption measures that would temporarily prevent states from enacting their own AI laws, allowing Congress time to develop a national framework. For example, a recent federal budget proposal included a provision that would pause new state AI regulations for up to 10 years, an effort aimed at preventing a fragmented regulatory landscape. 

In December 2025, the White House also issued an executive order titled “Ensuring a National Policy Framework for Artificial Intelligence.” The order directs federal agencies to develop a national AI strategy and examine state laws that may conflict with federal priorities. However, the order itself does not create binding nationwide regulations. A comprehensive federal framework would likely require future legislation from Congress.

How EIA Views the Debate

The Ecommerce Innovation Alliance (EIA) supports responsible AI governance that protects consumers while allowing ecommerce businesses to innovate and grow. EIA believes the most effective path forward requires federal leadership establishing clear baseline rules for AI. With mobile technologies, like SMS, it is technically impossible to apply and assign state-specific rules to a consumer as they travel for work or move across the country.  Without national standards, ecommerce businesses will face a growing patchwork of regulations that complicate the adoption of AI tools used to improve customer experience, marketing, and operations.

A Familiar Challenge for Ecommerce

Ecommerce businesses have long seen the impact of fragmented state regulation. Several states have introduced “mini-TCPA” laws that impose marketing communication requirements beyond federal standards set by the FCC in the decades old Telephone Consumer Protection Act (TCPA). 

These state-level rules have created a patchwork of compliance obligations for businesses operating nationally. The result is higher compliance costs, increased legal uncertainty, and significant risk exposure for companies trying to follow the rules. 

In many cases, these laws have also led to waves of opportunistic litigation, where businesses face lawsuits for technical violations of individual state laws—even when they are acting in good faith. A similar patchwork approach to AI regulation could create the same challenges, particularly for small and mid-sized ecommerce companies without large compliance teams.

What Comes Next

The debate over federal versus state authority on AI regulation is just beginning. As Congress, federal agencies, and state legislatures continue shaping AI policy, the challenge will be balancing consumer protection with regulatory clarity for businesses operating across state lines.

For ecommerce businesses, the goal is clear: a framework that supports responsible innovation without creating a fragmented regulatory environment that slows growth and adoption of new technologies.

Join the EIA today to help strengthen and shape policies that affect all ecommerce businesses. Together, we can continue to create the future of ecommerce. Subscribe to EIA email updates to stay informed on key developments and their impact on your business.

Ecommerce Innovation Alliance provides members with analysis of litigation and regulatory developments affecting online commerce and digital marketing. This post is for informational purposes only and does not constitute legal advice.