Massachusetts House Docket 4053 (2025)

• Authority: Massachusetts
• Parent authority: State governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Proposed
• Most recent activity date: 2025-01-17

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Unfair discrimination and misrepresentation
• Unequal performance across groups
• Governance failure
• Lack of capability or robustness
• Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Compromise of privacy
• Loss of human agency and autonomy

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 5-6 subdomains, with strong focus on unfair discrimination (1.1), unequal performance across groups (1.3), lack of transparency (7.4), and governance failure (6.5). Coverage is concentrated in discrimination/toxicity and system safety domains, with minimal coverage of privacy, misinformation, or malicious actor risks.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Finance & Insurance
• Real Estate, Rental & Leasing
• Professional & Technical Services
• Educational Services
• Health Care & Social Assistance
• Public Administration (excl. National Security)

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Information
• Scientific Research & Development Services
• Arts, Entertainment & Recreation
• National Security

All other sectors had no coverage in this document.

Sectors Summary

The document governs AI use across multiple sectors through its definition of 'consequential decisions'. Primary sectors with good coverage include Educational Services, Finance and Insurance, Health Care and Social Assistance, Real Estate, Professional and Technical Services, and Public Administration. The regulation applies to any AI system making decisions affecting education, employment, financial services, government services, healthcare, housing, insurance, or legal services.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding legislative statute with mandatory obligations, enforcement mechanisms through the Attorney General, and penalties for non-compliance under Chapter 93A (unfair trade practices).

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: Massachusetts House of Representatives
• Summary: This is Massachusetts House Docket 4053 (2025), indicating it was proposed by the Massachusetts state legislature through the House of Representatives.

Target

• Entity Types: AI_Developer, AI_Deployer
• Summary: The document explicitly targets developers and deployers of high-risk AI systems doing business in Massachusetts. Developers are defined as persons developing or substantially modifying AI systems, while deployers are persons using high-risk AI systems.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Attorney General of Massachusetts
• Summary: The Attorney General is explicitly granted exclusive enforcement authority over this chapter, with power to bring enforcement actions, require disclosures, and promulgate implementing rules.

Monitor

• Entity Types: AI_Governance_Actor, AI_Developer, AI_Deployer
• Entities: Attorney General of Massachusetts
• Summary: The Attorney General has monitoring authority through disclosure requirements and evaluation powers. Additionally, developers and deployers have self-monitoring obligations including ongoing testing, annual reviews, and post-deployment monitoring.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document comprehensively covers multiple lifecycle stages with primary focus on Deploy and Operate and Monitor stages. It addresses planning through risk management requirements, data collection through data governance measures, model building through documentation of training, verification through impact assessments, deployment through notification requirements, and ongoing monitoring through annual reviews and post-deployment oversight.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Systems

Technical Scope Summary

The document explicitly defines and extensively covers AI systems and high-risk AI systems. It does not explicitly mention frontier AI, general purpose AI, task-specific AI, foundation models, generative AI, predictive AI, open-weight models, or specific compute thresholds. The focus is on AI systems that make consequential decisions affecting consumers.