States are accelerating from general AI guidance to formal policy infrastructure across K-12 and postsecondary education, with an Education Commission of the States overview identifying consistent priorities. Multiple states now require districts and institutions to adopt acceptable-use policies, while many others issue frameworks ranging from short advisories to detailed governance. The report highlights three core policy lanes: minimizing risk, building AI literacy, and strengthening cybersecurity and data protection. A New York law prohibits educational institutions from using AI in ways that eliminate job functions or shift responsibilities away from employees. More than four dozen states have enacted AI deepfake and student-misconduct guardrails, often linking enforcement to cyberbullying and sexual misconduct policies. Compliance duties are expanding as well, including recurring reviews for institutions connected to state systems. For higher education leaders, the immediate impact is operational: institutions must align acceptable-use, data protection controls, and AI training across faculty, staff, and students—while anticipating state-by-state audit expectations.