New Mexico 2025 HB 60

• Authority: New Mexico
• Parent authority: State governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Proposed
• Most recent activity date: 2025-01-22

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Unfair discrimination and misrepresentation
• Unequal performance across groups
• Governance failure
• Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Compromise of privacy
• AI system security vulnerabilities
• Fraud, scams, and targeted manipulation
• Overreliance and unsafe use
• Loss of human agency and autonomy
• Lack of capability or robustness

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 6-8 subdomains, with strong focus on unfair discrimination (1.1, 1.3), privacy compromise (2.1), lack of transparency (7.4), and governance failure (6.5). Coverage is concentrated in discrimination/toxicity, privacy/security, and AI system safety domains, with minimal coverage of malicious actors, misinformation, or socioeconomic risks.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Finance & Insurance
• Health Care & Social Assistance

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Information
• Real Estate, Rental & Leasing
• Professional & Technical Services
• Scientific Research & Development Services
• Management, Administrative & Support Services
• Educational Services
• Public Administration (excl. National Security)
• National Security

All other sectors had no coverage in this document.

Sectors Summary

The document governs AI use across multiple sectors through its definition of 'consequential decisions' which explicitly covers education, employment, financial services, healthcare, housing, insurance, and legal services. The regulation applies to any deployer or developer whose AI systems make decisions in these domains.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding state legislative act with mandatory obligations, enforcement mechanisms through the state department of justice, civil action rights for consumers, and penalties under the Unfair Practices Act. The document uses mandatory language throughout ('shall') and establishes clear legal requirements for developers and deployers of high-risk AI systems.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: New Mexico State Legislature
• Summary: The document is a legislative bill enacted by the New Mexico State Legislature, as indicated by the opening enactment clause and the legislative bill number (HB 60).

Target

• Entity Types: AI_Developer, AI_Deployer
• Summary: The act explicitly targets two categories of entities: developers (persons who develop or intentionally and substantially modify AI systems) and deployers (persons who deploy/use AI systems). These are the primary regulated entities throughout the document.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: New Mexico State Department of Justice
• Summary: The State Department of Justice is explicitly designated as the primary enforcement authority with power to enforce the act, promulgate rules, receive disclosures, and evaluate compliance.

Monitor

• Entity Types: AI_Governance_Actor, Affected_Stakeholder
• Entities: New Mexico State Department of Justice; Consumers (New Mexico residents)
• Summary: The State Department of Justice monitors compliance through submission and evaluation of risk management policies, impact assessments, and records. Consumers also have monitoring roles through civil action rights and receiving disclosures about AI system use.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document covers multiple lifecycle stages with primary focus on deployment and operational monitoring. It addresses design considerations through developer documentation requirements, validation through impact assessments, deployment through notification requirements, and ongoing monitoring through post-deployment oversight. The act does not substantially cover data collection/processing or model building stages.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Systems

Technical Scope Summary

The document explicitly defines and covers AI systems and AI models but does not mention frontier AI, general purpose AI, task-specific AI, foundation models, generative AI, predictive AI, open-weight models, or compute thresholds. The focus is on 'high-risk artificial intelligence systems' that make consequential decisions.