Michigan: AI health laws
3 entries on the map: 1 in force and 2 bills in the legislature.
Payer and utilization review AI
Insurers', benefit managers' and utilization reviewers' use of AI, including prior authorization and claim denials.
Bulletin 2024-20-INS, Use of Artificial Intelligence Systems by Insurers
Expects insurers, nonprofit health service plans and HMOs to develop, implement and maintain a written program for the responsible use of AI systems that mitigates the risk of adverse consumer outcomes, with governance, risk management and internal controls and due diligence and audit rights for third-party AI vendors, and lists the documentation the Department of Insurance and Financial Services may request; the NAIC lists it as Michigan's adoption of its model bulletin.
Physician read. It places no duty on physicians. Since August 2024, health insurers, nonprofit health service plans and HMOs in Michigan are expected to keep a written AI governance program and to show the Department of Insurance and Financial Services their testing and vendor controls on request.
Notes: Issued by Director Anita G. Fox. The bulletin states no separate effective date; the issue date is used. It does not single out utilization review or prior authorization.
Patient disclosure of AI use
Telling patients that AI is used in their care or in messages to them.
Nothing in this category was found in the review of Sept 29, 2026.
Clinical decision and chatbot limits
Limits on AI in clinical decisions and on health chatbots, including AI presenting itself as a licensed professional.
SB 760, Leading Ethical AI Development for Kids Act
Would bar chatbot operators, unless they know a user is an adult, from offering chatbot features that simulate companionship or a human relationship, outputs that promote or facilitate suicide, self-harm, violence, disordered eating or drug or alcohol abuse, outputs that encourage secrecy, self-isolation or avoidance of professional help, engagement optimization above safety guardrails, and sexually explicit content; would limit the data used to determine age and bar training on minors' inputs without a parent's written consent, with attorney general enforcement through civil fines of $25,000 per violation and a private right of action.
Physician read. It binds no one yet. As passed by the Senate, it would exclude a system used in a clinical setting under the direct supervision of a health professional, and its duties would begin only when the attorney general's first implementing rules take effect.
Notes: Introduced Dec. 17, 2025; reported by the Senate Finance, Insurance, and Consumer Protection Committee March 25, 2026; substitute S-1 adopted in the Committee of the Whole; passed the Senate 20-17 on April 29, 2026; in the House Communications and Technology Committee since April 29, 2026, with no action since. It moved with SB 757 (addictive feeds for minors) and SB 758 (Michigan Kids Code Act), which passed the Senate the same day and are out of scope. The text sets a civil fine of $25,000 per violation (section 7); the Senate Fiscal Agency analysis of May 29, 2026 describes it as up to $25,000. Besides clinical systems, the definition of advanced chatbot excludes customer service, research and technical assistance, internal employee productivity and narrowly tailored educational tools. Personal data obtained to determine whether a user is a minor could not be passed to third parties and would have to be deleted immediately after that use.
Mental health AI
AI in therapy and mental health care.
Nothing in this category was found in the review of Sept 29, 2026.
Data and privacy
Health and consumer data, biometrics, and data used to train AI.
SB 359, Personal Data Privacy Act
Would give Michigan consumers rights to access, correct, delete and port their personal data and to opt out of targeted advertising, sale and profiling in furtherance of solely automated decisions with legal or similarly significant effects, require consent to process sensitive data, including health diagnoses, consumer health data, genetic and biometric data and precise geolocation, bar the sale of sensitive data and geofencing within 1,750 feet of mental health or reproductive or sexual health facilities, and require data protection assessments, enforced by the attorney general.
Physician read. It binds no one yet; as reported, it would exempt HIPAA covered entities, business associates and protected health information and would take effect one year after enactment. For patients, it would require consent before health apps and other businesses outside HIPAA process their health data, and it would bar using geofences within 1,750 feet of mental health or reproductive or sexual health facilities to identify or track consumers or collect their health data.
Notes: Introduced June 5, 2025; reported without amendment by the Senate Finance, Insurance, and Consumer Protection Committee June 11, 2025 (entered in the Senate Journal June 12), and referred to the Committee of the Whole June 12, 2025; no floor vote since. Enforcement would rest with the attorney general alone, with civil fines of up to $7,500 per violation, a 30-day cure period available only during the first 18 months after the act takes effect, and no private right of action; data brokers would have to register.
Also relevant here: SB 760, Leading Ethical AI Development for Kids Act (under clinical decision and chatbot limits).
Federal law also applies in every state: see federal law and policy.
Most recently checked Sept 29, 2026. General information, not legal advice. How the map works, and the data.