Georgia Technology Authority Artificial Intelligence Responsible Use (SS-23-002)

• Authority: Georgia
• Parent authority: State governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Enacted
• Most recent activity date: 2024-12-01

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Unfair discrimination and misrepresentation
• Unequal performance across groups
• Compromise of privacy
• AI system security vulnerabilities
• False or misleading information
• Overreliance and unsafe use
• Governance failure
• Lack of capability or robustness
• Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Exposure to toxic content
• Disinformation, surveillance, and influence at scale
• Cyberattacks, weapon development or use
• Fraud, scams, and targeted manipulation
• Loss of human agency and autonomy
• AI pursuing its own goals

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 10-12 subdomains, with strong focus on discrimination and bias (1.1, 1.3), privacy and security (2.1, 2.2), misinformation (3.1), malicious actors (4.1, 4.2, 4.3), human-computer interaction (5.1), governance (6.5), and AI system safety (7.1, 7.3, 7.4). Coverage is concentrated in fairness, security, misuse prevention, and responsible AI deployment domains.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Public Administration (excl. National Security)

All other sectors had no coverage in this document.

Sectors Summary

This is an internal government policy that governs AI use within Georgia state agencies. The primary sector governed is Public Administration (excluding National Security), as the document regulates how state government agencies deploy and use AI tools in their operations and service delivery.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding regulatory standard issued by the Georgia Technology Authority under statutory authority (O.C.G.A 50-25-4) with mandatory compliance requirements, enforcement mechanisms including termination and disciplinary action, and oversight by GTA.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: Georgia Technology Authority (GTA); State CIO
• Summary: The document is issued by the Georgia Technology Authority under its statutory authority (O.C.G.A 50-25-4) to establish policies, standards and guidelines for state government technology use.

Target

• Entity Types: AI_Deployer, AI_Developer
• Entities: State agencies; Contractors; Vendors; Third-party providers; Subcontractors
• Summary: The standard applies to state agencies using AI tools and all entities developing or providing AI solutions to state agencies, including contractors, vendors, and their subcontractors.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Georgia Technology Authority (GTA); State CIO; GTA OIS (Office of Information Security); Agency CIO
• Summary: GTA and the State CIO have explicit enforcement authority including the power to assess tools, order termination of non-compliant AI systems, conduct audits, and impose disciplinary action. GTA OIS investigates misuse reports.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Georgia Technology Authority (GTA); GTA OIS; Agency designated staff member; Agency CIO; Data Protection Officer (DPO)
• Summary: GTA conducts audits and monitoring of AI tool compliance. Each agency must designate a staff member responsible for compliance monitoring. GTA OIS investigates misuse reports and recommends corrective action.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document comprehensively covers all AI lifecycle stages with particular emphasis on deployment, operation and monitoring. It addresses planning through procurement requirements, data collection through privacy standards, model development through vendor requirements, validation through testing protocols, deployment through approval processes, and ongoing monitoring through audit mechanisms.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• AI Systems
• Generative AI

Technical Scope Summary

The document explicitly mentions AI systems, AI tools, Generative AI, Deep Learning, and Machine Learning. It does not specifically mention frontier AI, general purpose AI, foundation models, or compute thresholds. The focus is on AI systems broadly defined as machine-based systems that make predictions, recommendations or decisions.