Gavin Newsom just fired the first real shot in the AI regulation war. On Monday, California's governor signed an executive order that imposes new safety, privacy, and transparency requirements on any AI company that wants to do business with the state. It is a direct, deliberate rejection of the Trump administration's demand that states back off and let Washington handle AI policy.

The order gives California four months to develop AI procurement policies that force vendors to prove their models have safeguards against distributing child sexual abuse material and violent content. Companies will need to show how they prevent harmful bias and unlawful discrimination. They will also need to detail their approach to watermarking AI-generated images and videos. In other words: if you want California's money, you play by California's rules.

This matters because California is not just any state. It is the world's fifth-largest economy and home to virtually every major AI company on the planet. OpenAI, Anthropic, Google, Meta, and Nvidia all operate there. When California sets procurement standards, it sets de facto national standards, because no AI company is going to build a separate product just to avoid Newsom's rules.

Trump's position is clear and has been since December: AI companies "must be free to innovate without cumbersome regulation." His White House released a national policy framework explicitly designed to preempt state laws, and the Department of Justice was directed to create a litigation task force to challenge state AI regulations in court. The message was not subtle. Stay out of our lane.

Newsom's response was equally unsubtle. "California leads in AI, and we're going to use every tool we have to ensure companies protect people's rights, not exploit them or put them in harm's way," he wrote. Translation: sue us.

California is not alone. States have already passed more than 100 AI-related laws covering everything from chatbot protections for children to copyright enforcement. New York's RAISE Act adds another layer. The states are not waiting because they have concluded, probably correctly, that Congress will not act on AI regulation in any meaningful way before something goes seriously wrong.

The real losers here are the AI companies themselves. A patchwork of 50 different state AI regulations is a compliance nightmare that makes GDPR look simple. Big tech lobbied hard for federal preemption precisely to avoid this scenario. They got Trump on board but forgot that the governor of California does not answer to the White House. Now they are stuck between a president who wants no rules and a governor who wants all of them.

This constitutional showdown is just beginning. Expect DOJ lawsuits. Expect California to fight every single one. And expect the AI industry to spend the next two years in legal limbo while the adults argue about who gets to make the rules.