As AI-specific legislation continues to get introduced, regulators are making clear that existing consumer protection and privacy laws still apply to issues involving AI. Moreover, just because a state does not have an AI law that addresses a certain activity does not mean that it will not take an interest in what another state is doing. This article synthesizes commentary from the Assistant AG and Chief of the Privacy and Responsible Technology Division in the Massachusetts AG’s Office, and the outgoing Director of Privacy and Tech Enforcement in the Texas AG’s Office, on the current AI legislative, regulatory and enforcement landscape, including private litigation, trends and navigating the investigative process. The discussion, moderated by Orrick, took place during IAPP’s AI Governance Global North America conference. See “CFTC Commissioner Johnson Addresses Regulatory Approaches to AI” (Aug. 6, 2025).