Security Legislation &
Mandate Tracker
The definitive database of active, enacted, and pending laws requiring security technology upgrades across schools, healthcare, and critical infrastructure. Updated August 5, 2026.
The Compliance Landscape in 2026
This tracker confirms 15 states with enacted Alyssa's Law or functionally equivalent statewide mandates, requiring silent panic alert systems in all public schools. Healthcare workplace violence prevention laws have expanded to 20+ state and federal measures, with Oregon, Washington, New York, Illinois, and Ohio among the most comprehensive. The Joint Commission's NPG 2a, effective January 1, 2026, now imposes WPV prevention program, training, and worksite-analysis requirements on every accredited U.S. hospital — making this the highest-impact compliance change of the year for healthcare security leaders.
Critical infrastructure security mandates — from NDAA equipment bans to CIRCIA cyber requirements — continue to expand federal obligations for operators of essential services. State consumer privacy laws covering biometric data now number 21 comprehensive statutes, with Alabama, Indiana, Kentucky, and Rhode Island the newest additions; Maryland and Virginia have layered on first-of-their-kind police facial recognition rules. Tennessee added the first AI-in-mental-health-care statute in April 2026 with a private right of action. The EU AI Act's high-risk obligations were politically deferred to December 2027 by the May 7, 2026 Digital Omnibus agreement, while Connecticut's SB 1295 amendments rewrite the CTDPA effective July 2026 — both reshape the compliance posture for biometric and video-analytics deployments. Compliance deadlines in 2026 are accelerating action across every sector.
Understand Your
Compliance Obligations
IntelliSee monitors this legislative landscape continuously, helping organizations in education, healthcare, and critical infrastructure identify which laws apply to their facilities — and what technology investments are required to meet them.
As of August 5, 2026, this tracker confirms statewide enactments in 15 states: New Jersey, Florida, New York, Texas, Tennessee, Utah, Virginia, Oklahoma, Georgia, Louisiana, Maryland, Oregon, Pennsylvania, Washington, and West Virginia. Illinois HB 1072 was not enacted; it was re-referred to the House Rules Committee on March 21, 2025. Illinois HB 5107, sent to the governor on June 26, 2026, requires schools to consider mobile panic alert systems and directs rulemaking, but it is not a statewide installation mandate. Several additional states have pending or narrower proposals.
Most state-level Alyssa's Law mandates apply specifically to public K-12 schools. Private schools and higher education institutions are generally not covered by these mandates, though several states have extended requirements to charter schools and certain higher education settings. Organizations beyond the mandate scope often choose to adopt compliant systems proactively to align with safety best practices and position for future grant funding eligibility.
State workplace violence prevention laws — particularly for healthcare facilities — typically require a written prevention plan, annual security risk assessment, employee training, incident reporting and tracking systems, and designated safety committees. California SB 553, effective July 2024, sets a broad template requiring all employers to identify hazards and implement controls. Healthcare-specific laws such as New York S5294B (effective September 2026) add requirements for trained security personnel in emergency departments and site-specific security plans. Joint Commission-accredited hospitals must also meet NPG 2a, which became effective January 1, 2026 and applies nationwide to every TJC-accredited facility.
NDAA Section 889 prohibits the procurement or use of video surveillance equipment from specified Chinese manufacturers — including Hikvision, Dahua, and others — by federal agencies and federal contractors. IntelliSee layers onto existing IP camera infrastructure and is compatible with NDAA-compliant camera systems. For organizations replacing non-compliant cameras, IntelliSee's deployment model requires no camera replacement, which means compliance upgrades can be prioritized without affecting the IntelliSee implementation timeline.
IntelliSee connects to your existing IP camera infrastructure and begins detection within seconds of deployment — no camera replacement, no network redesign, no extended installation window. A typical facility can be fully operational in hours. For organizations facing a specific compliance deadline, IntelliSee's team conducts a pre-deployment assessment to identify required detection types, map camera coverage, and confirm integration with existing mass notification or dispatch systems. Contact us to discuss your timeline.
Know Your Obligations.
Act Before the Deadline.
Schedule a compliance assessment and see exactly which laws apply to your facilities, what gaps exist in your current security posture, and how IntelliSee closes them.
Verified K-12 and campus incidents confirmed through law enforcement reports and major news sources. Updated weekly.