Pennsylvania Executive Order 2023-19

• Authority: Pennsylvania
• Parent authority: State governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Enacted
• Most recent activity date: 2023-09-20

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Unfair discrimination and misrepresentation
• Compromise of privacy
• AI system security vulnerabilities
• False or misleading information
• Governance failure
• Lack of capability or robustness
• Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Unequal performance across groups
• Overreliance and unsafe use
• Loss of human agency and autonomy

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 6-8 subdomains, with strong focus on discrimination and bias (1.1, 1.3), privacy (2.1), misinformation (3.1), governance structures (6.5), and AI system robustness and transparency (7.3, 7.4). Coverage is concentrated in fairness, privacy, governance, and AI system reliability domains.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Public Administration (excl. National Security)

All other sectors had no coverage in this document.

Sectors Summary

This executive order governs AI use exclusively within Pennsylvania state government agencies under the Governor's jurisdiction. It applies to Public Administration (excluding National Security) as it regulates how government agencies design, develop, procure, deploy, and use Generative AI in their operations and service delivery to residents.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding executive order issued by the Governor of Pennsylvania with mandatory language throughout, establishing governance structures and requiring compliance from state agencies under the Governor's jurisdiction.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: Josh Shapiro, Governor of the Commonwealth of Pennsylvania; Office of the Governor of Pennsylvania
• Summary: The executive order is explicitly issued by Governor Josh Shapiro under constitutional and statutory authority, as stated in the order's introduction and signature.

Target

• Entity Types: AI_Governance_Actor, AI_Deployer
• Entities: Commonwealth agencies under the Governor's jurisdiction; Office of Administration (OA); Department of General Services (DGS); Department of Labor & Industry
• Summary: The order explicitly applies to 'Agencies' defined as 'Commonwealth agencies under the Governor's jurisdiction' and specifically names several agencies with responsibilities.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Generative AI Governing Board; Office of Administration (OA); Secretary of Administration
• Summary: The Generative AI Governing Board is established to oversee and make recommendations on AI use, with OA responsible for developing and implementing policies. The Board is chaired by the Secretary of Administration.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Generative AI Governing Board; Office of Administration (OA); Chief Information Security Officer; Chief Privacy Officer; Chief Data Officer
• Summary: The Board has explicit monitoring and oversight responsibilities including monthly meetings, review processes, and engagement with stakeholders. Specific officers are designated for security, privacy, and data oversight.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document comprehensively covers all AI lifecycle stages from planning through monitoring. It addresses design principles and core values (Plan and Design), data privacy and bias in datasets (Collect and Process Data), development and procurement (Build and Use Model), testing and bias evaluation (Verify and Validate), deployment procedures and approval processes (Deploy), and ongoing monitoring and auditing (Operate and Monitor).

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• Generative AI

Technical Scope Summary

The document explicitly focuses on Generative AI, defining it as 'technology or tools that use predictive algorithms to create new content including audio, code, images, text, simulations, and videos.' It does not mention AI models separately from systems, nor does it reference frontier AI, general purpose AI, task-specific AI, foundation models, predictive AI, open-weight models, or compute thresholds.