Blue Wave, New AI Rules? What Democratic Control of Congress Means for AI Regulation

Key Takeaways

• Oversight comes first. Expect hearings, document requests, and executive testimony on AI safety incidents, model testing, competition, and data practices beginning in early 2027. House Democratic committee leaders have already asked five frontier AI companies to report misalignment and safety incidents to Congress within 48 hours of detection.
• Frontier AI safety legislation will gain real momentum. Senator Maria Cantwell (D-WA), positioned to chair the Senate Commerce Committee, has released a six‑principle framework calling for enforceable NIST‑developed safety standards, independent pre‑release audits, and mandatory incident reporting.
• Developer liability is on the table. Representative Lori Trahan’s (D-MA) CLAIM Act discussion draft would create a federal cause of action holding developers liable when AI systems cause harm through conduct that would be unlawful if committed by a person, without preempting state law. Whether this type of legislation would be signed and considered by President Trump remains to be seen.
• Congressional preemption of state AI laws becomes far less likely. Democratic proposals generally treat federal rules as a floor rather than a ceiling. State laws in California, New York, Colorado, Texas, and Illinois will therefore likely continue to set the compliance baseline.
• Data centers and AI taxation will become live issues. Democratic leaders on the tax-writing committees have identified AI and data center taxation, including rolling back bonus depreciation, as priorities.
• Gridlock remains a real possibility. Presidential vetoes, the filibuster, and internal Democratic disagreement over approach means many proposals may not become law before the 2028 election cycle. Bipartisan measures, such as kids’ online safety and chip export controls, likely have the best odds.

With Democrats winning majorities in both the U.S. House of Representatives and the U.S. Senate, federal artificial intelligence (AI) policy is poised for its most significant shift since generative AI went mainstream in 2022. For the past two years, federal AI policy has largely been driven by the executive branch, which has favored lighter regulation and a heavier focus on infrastructure investment. When the 120th Congress convenes in January 2027, Democrats will control the committee gavels, the hearing calendar, subpoena power, and the legislative agenda.

The practical consequences on AI policy may vary in scope and impact. Congressional oversight of AI developers and deployers will likely intensify, with a focus on frontier model safety, developer liability, children’s online safety, and data centers. The federal push to preempt state AI laws through Congress is also likely to stall, leaving the growing patchwork of state requirements firmly in place. At the same time, President Trump retains the veto pen and the executive branch’s enforcement and litigation arms through January 2029, and the Senate legislative filibuster remains a meaningful constraint. Companies should prepare for more scrutiny and more oversight, but not for an overnight federal AI code.

The Limits of a Blue Wave

Several factors will limit the impact of the blue wave on AI legislation and policy:

• The veto. The administration has opposed binding AI safety mandates. Absent veto-proof majorities, standalone AI bills will need bipartisan support or must ride on must-pass vehicles such as appropriations or the National Defense Authorization Act (NDAA).
• The filibuster. Most legislation will still need 60 votes in the Senate, which favors bipartisan proposals such as the FRONTIER Act, the AI Kill Switch Act, and kids’ safety legislation.
• Democratic divisions. Democrats agree that guardrails are needed but differ on licensing, chartering, liability, and taxation. Proposals range from National Institutes of Standards and Technology (NIST) standards to a bank-style federal charter for AI firms.
• The calendar. Attention will shift quickly to the 2028 presidential cycle. Absent a major AI incident, comprehensive legislation may remain out of reach, making oversight and targeted measures the most likely outcomes.
• Political pressure points. Polling shows broad bipartisan support for stronger AI regulation, with 66% of registered voters in an October survey wanting more AI regulation. A poor Republican showing could prompt the administration and congressional Republicans to reconsider their resistance, which could open the door to compromise legislation.

What Companies Should Do Now

1. Prepare for oversight. Identify likely congressional touchpoints, designate a response team, review document retention and privilege protocols, and prepare executives for potential testimony. Ensure public statements about safety practices are accurate and consistent with internal records.
2. Build an incident inventory. Catalog AI safety, misalignment, and security incidents and the processes used to detect, escalate, and remediate them. These records will be relevant to congressional requests, state incident reporting obligations, and future federal requirements.
3. Stay on track with state compliance. Do not pause state compliance programs in anticipation of federal preemption. Prioritize the January 1, 2027, effective dates for the California and Colorado Automated Decision-Making Technology (ADMT) laws and monitor ongoing rulemaking.
4. Revisit contract risk allocation. Review indemnities, limitation of liability provisions, and AI-specific representations in agreements with model providers, customers, and vendors, particularly for agentic AI deployments, in light of potential federal liability legislation.
5. Align governance with emerging standards. Map AI risk management, testing, and third-party audit practices to NIST frameworks as a baseline, which are likely templates for federal requirements. Alignment with ISO 42001 and other emerging frameworks, like AIUC-1, may also prove beneficial.

How Foley Can Help

Foley & Lardner LLP’s Artificial Intelligence Team advises developers, deployers, and investors on AI governance, state AI law compliance, congressional investigations, and legislative strategy. For more information, please contact the author or your Foley relationship partner.