Google DeepMind Frontier Safety Framework Version 2.0

• Authority: Private-sector companies
• Collections: Corporate policies and commitments;Editors' Picks
• Most recent activity: Enacted
• Most recent activity date: 2025-02-04

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• AI system security vulnerabilities
• Cyberattacks, weapon development or use
• Loss of human agency and autonomy
• Competitive dynamics
• Governance failure
• AI pursuing its own goals
• AI possessing dangerous capabilities
• Lack of capability or robustness

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Disinformation, surveillance, and influence at scale
• Fraud, scams, and targeted manipulation
• Lack of transparency or interpretability

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 10-12 subdomains, with strong focus on malicious actors (4.1, 4.2, 4.3), AI system security (2.2), competitive dynamics (6.4), governance failure (6.5), and AI safety failures (7.1, 7.2, 7.3). Coverage is concentrated in security, misuse prevention, and AI safety domains, particularly around CBRN, cyber, and deceptive alignment risks.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Information
• Scientific Research & Development Services

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Trade, Transportation & Utilities
• Health Care & Social Assistance
• Public Administration (excl. National Security)
• National Security

All other sectors had no coverage in this document.

Sectors Summary

This is an internal corporate policy document from Google DeepMind governing their own AI development activities. The primary sectors governed are Information (where Google DeepMind operates as a technology company) and Scientific Research and Development Services (as an AI research organization). The document does not regulate external sectors but addresses risks that could affect multiple sectors including national security, healthcare (CBRN), and critical infrastructure.

Legislative Status

Other

Legislative Status Summary

This is an internal corporate policy document from Google DeepMind establishing voluntary safety protocols and governance structures for frontier AI development. The document uses predominantly voluntary language ('intend to', 'aim to', 'may') and establishes internal governance bodies rather than external enforcement mechanisms.

Actors

Proposer

• Entity Types: AI_Developer
• Entities: Google DeepMind
• Summary: The document is authored and proposed by Google DeepMind as indicated throughout the framework. It represents Google DeepMind's internal safety framework for frontier AI development.

Target

• Entity Types: AI_Developer
• Entities: Google DeepMind; frontier AI field
• Summary: The framework primarily applies to Google DeepMind's own frontier AI model development and deployment activities. It also makes recommendations for the broader frontier AI field regarding security practices.

Enforcer

• Entity Types: AI_Developer
• Entities: Google DeepMind AGI Safety Council; Google DeepMind Responsibility and Safety Council; Google Trust & Compliance Council
• Summary: Internal corporate governance bodies within Google DeepMind are responsible for reviewing and approving response plans when alert thresholds are reached, and for periodically reviewing framework implementation.

Monitor

• Entity Types: AI_Developer, AI_Governance_Actor
• Entities: Google DeepMind AGI Safety Council; external evaluators; appropriate government authorities
• Summary: The Google DeepMind AGI Safety Council monitors framework implementation. External evaluators may be used to test models. The document also mentions potential information sharing with government authorities for oversight purposes.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document covers multiple AI lifecycle stages with primary focus on Build and Use Model, Verify and Validate, Deploy, and Operate and Monitor stages. It addresses model development, evaluation protocols, deployment procedures, and ongoing monitoring for frontier AI systems.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• Frontier AI
• AI Systems
• Open Weight / Open Source

Technical Scope Summary

The document explicitly focuses on frontier AI models and systems, with detailed discussion of critical capability levels. It does not explicitly define or distinguish between general purpose AI, task-specific AI, foundation models, or generative vs predictive AI. The document mentions model weights and discusses open release considerations but does not use the term 'open-weight' or 'open-source.' No specific compute thresholds are mentioned.