An Act to amend the general business law, in relation to the management and oversight of personal data (Section 7)

• Authority: New York
• Parent authority: State governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Proposed
• Most recent activity date: 2023-02-03

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Unfair discrimination and misrepresentation
• Unequal performance across groups
• Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Overreliance and unsafe use
• Loss of human agency and autonomy
• Lack of capability or robustness

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document primarily addresses discrimination and fairness risks (1.1, 1.3), with strong focus on automated decision-making systems affecting critical services. It also covers transparency issues (7.4) through disclosure requirements and governance mechanisms to prevent unfair outcomes.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Finance & Insurance
• Real Estate, Rental & Leasing
• Health Care & Social Assistance

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Trade, Transportation & Utilities
• Educational Services
• Accommodation, Food & Other Services
• Public Administration (excl. National Security)

All other sectors had no coverage in this document.

Sectors Summary

The document governs AI use across multiple critical service sectors including Finance and Insurance, Health Care and Social Assistance, Real Estate, Educational Services, and Public Administration. It applies to automated decision-making systems that affect access to financial services, housing, healthcare, education, employment, insurance, and basic necessities.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding legal statute with mandatory obligations, enforcement mechanisms, and specific compliance requirements for controllers and processors engaged in automated decision-making.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: New York State Legislature
• Summary: This is an Act to amend the general business law of New York, indicating it was proposed by the New York State Legislature.

Target

• Entity Types: AI_Deployer
• Summary: The document explicitly targets 'controllers' and 'processors' engaged in automated decision-making affecting critical services. These are entities that deploy AI systems for decision-making purposes.

Enforcer

• Entity Types: AI_Governance_Actor
• Summary: The document grants enforcement authority to state, federal, or local government authorities who can request and review impact assessments.

Monitor

• Entity Types: AI_Governance_Actor
• Summary: Government authorities at state, federal, or local levels are empowered to monitor compliance by requesting and reviewing impact assessments. Additionally, external independent auditors or researchers are required to conduct assessments.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Collect and Process Data
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily covers the Deploy and Operate and Monitor stages, with requirements for disclosure at deployment and ongoing annual impact assessments. It also addresses Verify and Validate through testing requirements for accuracy, fairness, bias and discrimination, and touches on Build and Use Model through requirements to evaluate training data.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• Predictive AI
• Task-specific AI

Technical Scope Summary

The document explicitly covers automated decision-making systems and processes but does not use specific AI terminology like 'AI models', 'AI systems', 'frontier AI', or 'general purpose AI'. It focuses on automated processing systems used for consequential decisions. No compute thresholds or model types are mentioned.