Montana Right to Compute Act + AI Governance (SB 212): AI Compliance Requirements
Montana Governor Greg Gianforte signed Senate Bill 212 (the Montana Right to Compute Act) on April 17, 2025 — the first US state law affirming a right to own and use computational resources. The enacted law has two real, verified components: (1) it establishes a fundamental right to privately own and use computational resources (hardware, software, AI tools) for lawful purposes, applying strict scrutiny to any government restriction on computing — this constrains the STATE of Montana, not private businesses; (2) it requires deployers of "critical infrastructure facilities" (per Montana's existing 22-category critical-infrastructure definition — power, water, telecommunications, major industrial facilities) controlled in whole or part by a "critical AI system" to develop a risk management policy after deployment, informed by a recognized framework (NIST AI RMF, ISO/IEC 42001, or another nationally/internationally recognized framework). NOTE: an earlier draft of SB 212 would have required AI-controlled critical infrastructure to be able to shut down and revert to human control — this requirement was REMOVED before passage and is NOT part of the enacted law. No corroborated Montana 2025 legislation prohibits government AI use for "cognitive behavioral manipulation," "discriminatory classification," or "mass surveillance," or establishes AI-profiling data-subject rights — a prior version of this entry stated these as fact; no source found this cycle confirms them, and Montana's complete 2025 AI-bill roster (HB 82 CSAM, SB 212, HB 514 NCII, HB 513 name/voice/likeness, SB 413 deepfakes, SB 25 election deepfakes) contains nothing matching that framing.
Summary of publicly-available regulatory text as of 2026-08-22. Verify against current official sources before relying on this for compliance decisions. Not legal advice.
Key Facts
April 17, 2025
No statutory monetary penalty specified in SB 212 itself for the risk-management-policy duty; the Right to Compute strict-scrutiny provision is a constraint on government action, enforceable via civil litigation/injunctive relief, not a penalty schedule.
What Your Business Must Do
1 compliance requirement identified. Critical requirements carry the highest risk of enforcement action.
Critical Infrastructure AI Risk Management
High PriorityMontana SB 212: if a "critical AI system" controls, in whole or part, a critical infrastructure facility (per Montana's existing 22-category definition — power generation, water treatment, telecommunications, major industrial facilities, etc.) in Montana, the deployer must develop a risk management policy AFTER deployment, informed by a recognized framework (NIST AI RMF, ISO/IEC 42001, or another nationally/internationally recognized framework). NOTE: an earlier draft would have additionally required a human-override "shutdown" capability — this was removed before enactment and is not a current legal requirement.
Deadline: April 17, 2025
Montana SB 212 (2025), Right to Compute Act, Ch. 150Who Does This Apply To?
Applies in two layers. (1) Right to Compute — SB 212 (eff. Apr 17, 2025) establishes a right to own and use computational resources (hardware, software, and AI tools) for lawful purposes and subjects government restrictions on computing to strict scrutiny; this layer constrains the State of Montana, not private businesses. (2) Operational duties fall on deployers of AI systems that control, in whole or part, a Montana critical-infrastructure facility (per the state's existing 22-category definition — power, water, telecommunications, major industrial facilities) — they must develop a risk-management policy AFTER deployment, informed by a recognized framework (NIST AI RMF, ISO/IEC 42001, or another recognized framework). An earlier draft would have also required a human-override "shutdown" capability; this was removed before passage and is not part of the enacted law. No corroborated Montana legislation prohibits AI used for cognitive-behavioral manipulation, discriminatory classification, or mass surveillance (a prior version of this entry stated this as fact — not found in any source this cycle). There is no general small-business mandate; the affirmative compliance trigger for the risk-management duty is deploying AI that controls Montana critical infrastructure.
Recent Regulatory Guidance
Right to Compute Coalition — Montana SB 212 Implementation Guide (2025)
Following Governor Greg Gianforte's April 17, 2025 signature, the Right to Compute Coalition (the bill's lead advocacy group) published implementation guidance: SB 212 enshrines the fundamental right to own and use computational technology for lawful purposes — applying strict scrutiny to government restrictions on computing. Critical-infrastructure deployers must document risk-management policies informed by a recognized framework (NIST AI RMF, ISO/IEC 42001, or similar) after deployment. An earlier draft's human-override "shutdown" requirement was removed before passage.
Key Case Law & Precedent
Reno v. ACLU (US 1997)
Supreme Court of the United States · 1997Foundational First Amendment doctrine on government regulation of online and computational activity. Montana SB 212's strict-scrutiny requirement for government restrictions on computational technology builds explicitly on the Reno tradition — government must demonstrate compelling interest and narrow tailoring before restricting computing. Montana's law is the strongest US state codification of this doctrine to date.
Outcome: CDA §223 anti-indecency provisions struck down; framework for narrow-tailoring of online-speech regulation established
Case referenceIndustry Playbooks covering Montana Right to Compute Act + AI Governance (SB 212)
These industry playbooks include jurisdiction-specific checklist items and guidance for Montana Right to Compute Act + AI Governance (SB 212).
Frequently Asked Questions
Does Montana Right to Compute Act + AI Governance (SB 212) apply to my business?
Montana Governor Greg Gianforte signed Senate Bill 212 (the Montana Right to Compute Act) on April 17, 2025 — the first US state law affirming a right to own and use computational resources. The enacted law has two real, verified components: (1) it… Use Aegis Firma's free scanner to get a personalized assessment in under 5 minutes.
What is the penalty for non-compliance?
The maximum penalty under Montana Right to Compute Act + AI Governance (SB 212) is: No statutory monetary penalty specified in SB 212 itself for the risk-management-policy duty; the Right to Compute strict-scrutiny provision is a constraint on government action, enforceable via civil litigation/injunctive relief, not a penalty schedule.. Fines are typically scaled by company size, severity of violation, and whether violations were willful or accidental.
How do I comply with Montana Right to Compute Act + AI Governance (SB 212)?
The 1 requirements above cover the core obligations. The fastest path to compliance is: (1) conduct an AI risk assessment, (2) document your AI systems, (3) implement transparency disclosures where required. Aegis Firma generates all required documents automatically.
Official Source
https://righttocompute.ai/montana-governor-signs-right-to-compute/Last updated: 2026-08-22 — verify at source before relying on this information.
Don't leave compliance to chance
Aegis Firma scans your AI tools, tells you exactly which regulations apply, and generates all required documents — in 30 minutes.
Start your free compliance scan