Boise Regulations 4.30q City Use of Artificial Intelligence (AI)

• Authority: Boise, ID
• Parent authority: Local governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Enacted
• Most recent activity date: 2023-12-01

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Compromise of privacy
• False or misleading information
• Governance failure
• Lack of capability or robustness

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Exposure to toxic content
• AI system security vulnerabilities
• Overreliance and unsafe use
• Lack of transparency or interpretability

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has minimal to good coverage of approximately 8-10 subdomains, with primary focus on privacy compromise (2.1), AI system security (2.2), false information (3.1), overreliance (5.1), governance failure (6.5), and lack of robustness (7.3). Coverage is concentrated in privacy/security, misinformation prevention, and basic AI safety domains.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Public Administration (excl. National Security)

All other sectors had no coverage in this document.

Sectors Summary

This is an internal municipal government policy that governs AI use within the City of Boise's own operations. The primary sector governed is Public Administration (excluding National Security), as it applies to city departments, agencies, and employees delivering public services. The policy does not regulate external sectors but rather controls how the city government itself uses AI technologies.

Legislative Status

Other

Legislative Status Summary

This is an internal municipal government policy document that establishes guidelines for city employees and contractors regarding AI use. While it uses mandatory language ('shall'), it functions as an internal administrative regulation rather than externally binding law.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: City of Boise; Information Technology Department; Innovation and Performance Department
• Summary: The document identifies the City of Boise as the proposing entity, with specific ownership assigned to the Director of Innovation and Performance (Business Owner) and Director of Information Technology (Technical Owner).

Target

• Entity Types: AI_Deployer, AI_User
• Entities: City of Boise departments; City of Boise agencies; City employees; third-party contractors; vendors
• Summary: The regulation explicitly applies to all city departments, agencies, and entities involved in AI use, as well as city employees and third-party contractors or vendors working on AI-related projects with the City.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Information Technology Department; IT Department
• Summary: The IT Department is explicitly designated as the oversight and enforcement body, responsible for approval processes, maintaining approved AI product lists, and ensuring compliance with the regulation.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Information Technology Department; IT Department
• Summary: The IT Department is assigned monitoring responsibilities including establishing ongoing evaluation processes, conducting periodic audits, and assessing effectiveness, fairness, and safety of AI systems.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document covers multiple AI lifecycle stages with primary focus on deployment and operational monitoring. It addresses planning through approval requirements, deployment through validation and disclosure requirements, and operation through ongoing monitoring and audits. The document does not substantially cover data collection or model building stages.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• AI Systems
• Generative AI
• Task-specific AI

Technical Scope Summary

The document explicitly mentions AI systems, AI technologies, and provides detailed coverage of Generative AI with specific examples (ChatGPT, Bard, Dall-E). It also references Narrow/Weak AI, Machine Learning, and Natural Language Processing. No mention of frontier AI, general purpose AI, foundation models, compute thresholds, or open-weight models.