AI Compliance for Texas Hospital Districts
Hospital districts sit at a unique intersection: covered by SB 1964's governmental framework and SB 1188's clinical AI rules, subject to HB 3512 training and TRAIGA's person-level prohibitions — yet excluded from TRAIGA's government-agency disclosure rule.
- § 2054.711(c)
- consent-form carve-out (SB 1964)
- § 183.005(b)
- diagnostic-AI patient disclosure (SB 1188)
- Excluded
- from TRAIGA's government-agency rules
- ≥25%
- computer-use threshold for HB 3512 training
SB 1964: The Governmental Framework for Hospital Districts
SB 1964 (effective September 1, 2025) includes hospital districts in its definition of governmental entity — unlike TRAIGA, which excludes them from its government-agency disclosure rule. Under SB 1964, hospital districts must:
- Adopt the DIR ethics code and minimum standards for AI use.
- Classify each AI system under the binary Heightened Scrutiny AI (HSAI) definition (§ 2054.003(6-a)).
- Run risk and impact assessments for AI systems.
- Provide standardized AI notices — with a hospital-district-specific consent-form carve-out at § 2054.711(c).
- Submit an annual review to DIR, include AI clauses in vendor contracts, and designate an AI Risk Officer (1 TAC § 219.21).
SB 1188 and HB 3512: Clinical AI and Workforce Training
SB 1188 (effective September 1, 2025, Health & Safety Code Chapter 183) governs the clinical side: practitioners using AI for diagnostic purposes must disclose that use to patients (§ 183.005(b), which sits alongside the broader TRAIGA § 552.051(f) duty to disclose any AI used in relation to a health care service or treatment by the first service) and review AI-created records under Texas Medical Board standards (§ 183.005(a)(3)). Electronic health record data must be stored in the United States (§ 183.002). The Attorney General enforces with penalty tiers of $5,000, $25,000, and $250,000.
HB 3512 (effective September 1, 2025) requires annual DIR-certified AI training for employees and officials who use a computer for at least 25% of their duties, with completion verified and reported to DIR.
Where TRAIGA Fits — and Where It Does Not
Hospital districts are excluded from TRAIGA's government-agency definition, so the § 552.051 consumer AI-interaction disclosure duty does not attach. But as persons, hospital districts remain subject to the person-level prohibitions in §§ 552.052–.057, and the § 552.105(e) NIST AI RMF safe harbor is available to them like anyone else.
Risk Meridian maps every hospital-district AI system across all four statutes at once: HSAI classification and SB 1964 assessments, SB 1188 diagnostic-AI disclosures and record-review controls, HB 3512 training tracking, and TRAIGA prohibited-use screening with safe-harbor evidence.
Frequently asked questions
Do hospital districts owe the TRAIGA § 552.051 disclosure?
No. TRAIGA's government-agency definition excludes hospital districts (and institutions of higher education), so the consumer AI-interaction disclosure duty does not apply. The person-level prohibitions in §§ 552.052–.057 still do.
What is the § 2054.711(c) consent-form carve-out?
SB 1964's standardized-notice requirement includes a hospital-district-specific carve-out at § 2054.711(c) addressing how notice interacts with patient consent forms. Confirm the operational details with counsel when designing your notice workflow.
Does SB 1188 apply to our practitioners?
Yes. Practitioners using AI for diagnostic purposes must disclose that use to patients (§ 183.005(b)) and review AI-created records under Texas Medical Board standards (§ 183.005(a)(3)). EHR data must also reside in the United States (§ 183.002).
Who needs HB 3512 AI training?
Employees and officials who use a computer for at least 25% of their duties must complete annual DIR-certified AI training, with completion verified and reported to DIR.
Related resources
Start your AI governance program today
Risk Meridian is the fastest path to an audit-ready AI governance program — inventory, risk reviews, controls, disclosures, and board-ready reports in one place.
✓ No credit card ✓ Full platform access ✓ Cancel anytime