Three regional operators have queues of proposed data centers requesting more power than they can supply this decade. Two have begun approving projects only if they bring their own generation.
The high-risk obligations that were due to apply next spring move to 2028. Transparency requirements, including labeling synthetic media, take effect on schedule.
The statute requires firms to publish the categories of data used in any automated decision affecting credit, housing or employment, and to keep a record a regulator can audit.