City of San Jose Generative AI Guidelines

• Authority: San Jose, CA
• Parent authority: Local governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Enacted
• Most recent activity date: 2023-09-23

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Compromise of privacy
• AI system security vulnerabilities
• False or misleading information
• Fraud, scams, and targeted manipulation
• Overreliance and unsafe use
• Lack of capability or robustness
• Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Unfair discrimination and misrepresentation
• Unequal performance across groups
• Disinformation, surveillance, and influence at scale
• Cyberattacks, weapon development or use
• Economic and cultural devaluation of human effort

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 8-10 subdomains, with strong focus on privacy compromise (2.1), security vulnerabilities (2.2), false information (3.1), fraud and manipulation (4.3), overreliance (5.1), and lack of robustness (7.3). Coverage is concentrated in privacy, security, misinformation, and AI system safety domains.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Public Administration (excl. National Security)

All other sectors had no coverage in this document.

Sectors Summary

This is an internal municipal government policy that governs the use of generative AI by City of San José employees, contractors, and volunteers. The primary sector governed is Public Administration excluding National Security, as it regulates AI use within city government operations and services.

Legislative Status

Other

Legislative Status Summary

This is an internal municipal government policy document establishing guidelines for City of San José employees' use of generative AI. It functions as internal administrative guidance rather than binding law or voluntary soft law principles.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: City of San José; Information Technology Department; Digital Privacy Office
• Summary: The document is issued by the City of San José government, with the Information Technology Department leading the working group development and the Digital Privacy Office providing contact and oversight.

Target

• Entity Types: AI_User
• Entities: City of San José staff members; contractors; volunteers
• Summary: The guidelines explicitly apply to all City staff, contractors, and volunteers using generative AI for City work purposes.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: City departments; managers; Digital Privacy Office; Cybersecurity Office
• Summary: Enforcement is conducted through departmental managers who can establish additional rules, with oversight from the Digital Privacy Office and Cybersecurity Office for specific security and privacy matters.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: City AI working group; Digital Privacy Advisory Taskforce; GovAI Coalition; Digital Privacy Office
• Summary: Monitoring occurs through multiple mechanisms including usage tracking forms, working groups, and the Digital Privacy Advisory Taskforce that advises on AI practices.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily focuses on the Deploy and Operate and Monitor stages of the AI lifecycle, with some coverage of Verify and Validate. It addresses the use of already-developed generative AI systems by City employees rather than the development of AI systems.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• AI Systems
• Generative AI

Technical Scope Summary

The document explicitly focuses on Generative AI systems, mentioning specific examples like ChatGPT, Google Bard, and Stable Diffusion. It does not distinguish between different AI model types (foundation models, GPAI, etc.) or mention compute thresholds. The scope is limited to generative AI tools used by City employees.