Issue 46 | August 31, 2026


A Healthy Diet of AI Usage: How States Are Regulating AI in Healthcare

With legislation and rulemaking at the federal level stalled, many states have moved to fill the regulatory gap by placing guardrails on artificial intelligence (AI) usage in the healthcare sector. While varied, these efforts generally fall within the following categories: 1) AI use from payers in prior authorization and claims decisions, 2) limiting AI decision-making in the provision of healthcare services, and 3) disclosure requirements intended to increase transparency. 


Below our team outlines select developments from Maryland and beyond. 


Noteworthy Legislation From Across the United States


Indiana: HB 1271 is unique in that it specifically addresses the issue of downcoding. “Downcoding” is the process insurance companies use to change higher-cost procedures or codes submitted by a medical provider to less-complex, lower-cost codes. This Indiana law prohibits AI from downcoding a claim without a healthcare professional’s review of the patient’s medical record. The law also prevents healthcare providers from using AI to submit claims without review from a billing professional or healthcare provider.


Utah: SB 319 requires that insurers disclose to the Utah Insurance Department, providers, and enrollees if AI was used to review prior authorizations. Also, the law requires healthcare professionals to render adverse determinations based on their independent medical judgement, separate from AI recommendations.


Washington: SB 5395 prohibits health carriers, benefits managers, and public employee health plans from using AI to deny, delay, or limit the services provided in the prior authorization process. Further, the law requires that only licensed or qualified health professionals make adverse decisions on prior authorization requests. Any AI used must account for the individual patient’s clinical conditions and undergo performance reviews. Lastly, the law requires insurers to report to the insurance commissioner the number of prior authorization requests denied with the use of AI.


Georgia: State legislators took a different approach with SB 444 – the law specifically authorizes the use of AI in the prior authorization decision making process. However, the law prohibits insurers from using AI to make adverse determinations without review from a licensed healthcare provider. 


How Is Maryland Addressing These Issues?


Legislators in Annapolis have not been passive on this topic. Maryland passed HB 820 in 2025, requiring insurance carriers to make detailed quarterly disclosures to the Insurance Commissioner, including information on whether AI was used in making any adverse coverage decisions. The law also requires that insurance carriers, benefits managers, and private review agents ensure that any AI tools used: 

  1. Base determinations on the patient’s individual medical history and not on group datasets 
  2. Not replace the judgement of healthcare providers in the decision making process
  3. Avoid discrimination against patients
  4. Undergo regular reviews for accuracy and reliability
  5. Not use patient data beyond its intended and stated purpose 

In 2026, Maryland subsequently passed HB 1563, which requires insurers to comply with additional disclosure and transparency requirements. The law also gives the Insurance Commissioner authority to investigate insurance carriers that have issued “a pattern” of adverse determinations or grievance decisions for a claim for services in or related to an emergency department. 

What's Next?

While unsuccessful in passing additional legislation during the most recent regular session, the Maryland General Assembly continues to introduce related bills. HB 712 stalled in 2026 but it may have more momentum in the future – the bill defined AI as a “product” governed under product liability standards, establishing a product liability cause of action against AI developers.


The General Assembly also attempted to address AI usage in the mental healthcare space through HB 995, prohibiting behavioral healthcare providers from using AI to provide care to patients while allowing AI use for administrative tasks. The bill would require providers to obtain informed consent from patients if the provider attempted to use AI under specific circumstances. 


The Gallagher team will continue to monitor this shifting regulatory landscape. If you have any questions, please reach out to:

Leah Irwin

Email

Benjamin Link

Email

View all of our Monday Minute issues here.

About Our Firm

For 65 years, Gallagher has been a trusted partner to businesses and non-profits across the Mid-Atlantic region and nationwide. We represent leading universities, hospitals, financial institutions, real estate developers, and more. Our firm is experienced in a wide range of practice areas, including real estate development, affordable housing, civil litigation, confidential investigations, healthcare, employment law, corporate law, renewable energy, and tax-driven transactions. We pride ourselves on offering innovative, practical solutions with a personal touch, acting as your partner and trusted advisor. With a deep commitment to seeing challenges from every angle, Gallagher is here to help you navigate the complex legal landscape with confidence. For more information, visit www.GallagherLLP.com.

Facebook  LinkedIn

650 S Exeter Street Suite 1200 | Baltimore, MD 21202 US