The Regulatory Vacuum in AI

The U.S. lacks a legal framework to govern AI-powered bot farms and coordinated political manipulation.

Sue Williamson and Ricardo Abbott were two ordinary Americans voicing their pro-Russian opinions on X, formerly known as Twitter, in 2024. Or were they? They were actually AI-generated personas, part of a Kremlin-backed bot farm disrupted by the Department of Justice in July 2024. That disruption was a rare win. The United States has no comprehensive legal framework to prevent the next one, and the threat has evolved faster than the law has moved to address it.

In September 2025, leaked documents from a Beijing-based technology firm called GoLaxy provided an unsettling window into just how far that evolution has gone. The documents described what the company called a “Smart Propaganda System”—a network of artificial intelligence (AI)-generated personas engineered to build psychological profiles of targets, adapt their messaging in real time, and saturate search results with fabricated content to warp the targets’ perceptions. One internal dossier revealed that the system had targeted 117 members of the U.S. Congress. The accounts did not just broadcast propaganda. They listened, learned, and persuaded.

GoLaxy was not alone: in June 2026, OpenAI disclosed that it had disrupted a Chinese influence operation that used its own tool—ChatGPT—to generate social media posts targeting U.S. public opinion on tariffs, AI policy, and data centers. Understanding why these operations are so difficult to detect and govern requires understanding how much the underlying technology has changed.

Traditional bot farms were labor-intensive—operators ran networks of fake accounts that mimicked human posting behavior, and their repetitive patterns made coordinated inauthentic behavior detectable by researchers and platforms. The new generation of AI-enabled influence operations has eroded many of those detection advantages.

A Frontiers in Artificial Intelligence study documents that AI-generated election disinformation is now indistinguishable from authentic human-written journalism in more than half of evaluated instances—meaning that the tools platforms and researchers built to flag synthetic content are increasingly inadequate. The same study found that bot-driven amplification accounts for roughly 25 percent of Twitter activity, and that AI-generated fake news websites have grown tenfold, with over 1,200 such sites identified by 2024 alone.

The persuasion dimension represents a further escalation. Research published in late 2025 found that AI chatbots shifted voters’ political views by a substantially larger margin than traditional political advertising. Bot farms are no longer simply amplifying messages that humans might otherwise ignore. They are actively constructing and updating in real time the information environment in which political judgments are made.

The existing U.S. regulatory architecture was not designed to address this threat. In 2024, the Federal Election Commission (FEC) declined to issue binding rules addressing AI-generated content in campaign communications, adopting only an interpretive rule that clarified existing misrepresentation prohibitions apply, regardless of the technology used. The FEC’s authority under the Federal Election Campaign Act applies specifically to candidates and their agents—it does not extend to political action committees, foreign state actors, or private firms operating AI persona networks from abroad.

The Justice Department has pursued foreign bot operations under the International Emergency Economic Powers Act and federal money laundering statutes, while separately charging foreign operatives under the Foreign Agents Registration Act. This is reactive, case-by-case enforcement that leaves the underlying infrastructure of AI-driven influence operations largely unaddressed. Several states, including California, have enacted bot disclosure laws requiring operators of automated accounts to identify themselves as such.

But disclosure requirements designed for crude spam bots offer limited protection against AI systems sophisticated enough to evade current detection systems. In a letter written by members of Congress in October 2025, they asked social media platforms to share metrics on bot prevalence and describe their coordination with federal agencies—an acknowledgment of how much remains unknown and ungoverned.

The contrast with the European Union is instructive. The EU’s Digital Services Act, which entered into force for large platforms in 2023, requires designated platforms to conduct annual risk assessments addressing systemic threats—including information manipulation and coordinated inauthentic behavior—and to provide vetted researchers with access to platform data for independent auditing. The EU AI Act separately requires that AI-generated content be clearly labeled. Neither Act fully closes the regulatory gap, but together they create obligations directed at the infrastructure of manipulation, and they provide researchers and regulators with data access that no U.S. framework currently mandates.

Constructing an analogous U.S. framework faces genuine legal obstacles. The First Amendment offers broad protection to anonymous political speech, and courts have been skeptical of disclosure requirements that chill protected expression. Any federal statute governing AI-generated political content would need to navigate the line between regulating deceptive foreign manipulation and regulating domestic political speech, which holds the highest constitutional protection.

The Frontiers study’s policy recommendations reflect this constraint—rather than targeting content directly, the authors propose structural interventions aimed at reducing the economics of manipulation, which includes platform transparency obligations, mandatory bot labeling for AI-generated accounts, and pre-bunking standards during election periods.

The Trump Administration’s response to date points in the opposite direction. In January 2026, the Department of Justice established an AI Litigation Task Force tasked with challenging state AI laws—including the bot disclosure laws that currently represent the only domestic legal check on automated political accounts. In March 2026, the White House released a National AI Legislative Framework that explicitly recommends against creating any new federal rulemaking body to regulate AI and calls instead for governing AI through existing agencies whose mandates were not designed with influence operations in mind. Taken together, these developments suggest that the federal government is moving away from the structural intervention this problem requires.

The conclusions drawn from the GoLaxy documents suggest that the gap between what AI-powered influence operations can do and what the law can address is widening, not narrowing. A July 2026 Brennan Center report confirmed that foreign influence threats to U.S. elections remain elevated. That awareness has not yet translated into adequate action—Senator Schiff recently reintroduced legislation targeting AI-generated political deepfakes, but a bill focused on synthetic images alone does not address the bot farm infrastructure at the heart of the problem. Closing it will require federal legislation that treats coordinated inauthentic behavior as a structural regulatory problem rather than as just a content moderation challenge for platforms to manage on their own.