Regulate generative AI models to protect safety, privacy, and IP rights. Define models as those with ≥1 billion parameters. Prohibit discriminatory AI use. Mandate AI text watermarks/authentication. Require data security, informed consent, and timely data deletion. Conduct regular risk assessments. Mandate registration with the attorney general, detailing practices. Authorize attorney general to enforce compliance.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.
All other risk subdomains had no coverage in this document.
Risk Coverage Summary
The document has good coverage of approximately 8-9 subdomains, with strong focus on discrimination (1.1), privacy compromise (2.1), security vulnerabilities (2.2), disinformation/surveillance (4.1), fraud/manipulation (4.3), lack of robustness (7.3), and lack of transparency (7.4). Coverage is concentrated in discrimination, privacy/security, malicious use prevention, and AI system reliability domains.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.
All other sectors had no coverage in this document.
Sectors Summary
This bill governs AI developers across all sectors by regulating companies operating large-scale generative AI models. The regulation is sector-agnostic and applies to any company meeting the technical threshold (≥1 billion parameters), regardless of industry. The primary sector directly governed is Information (AI model developers), but the requirements apply to any organization operating such models.
Hard Law
Legislative Status Summary
This is a binding legislative bill with mandatory requirements, enforcement mechanisms through the attorney general, and legal penalties for non-compliance under chapter 93A.
Proposer
Target
Enforcer
Monitor
Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems
AI Lifecycle Summary
The document covers multiple lifecycle stages with primary focus on Build and Use Model (through design and development requirements), Deploy (through registration requirements), and Operate and Monitor (through ongoing risk assessments and compliance obligations). It also addresses data collection and processing requirements.
Terms relating to technical scope that are mentioned or implicitly referenced in the document
Technical Scope Summary
The document explicitly defines and covers large-scale generative AI models with at least one billion parameters. It specifically mentions ChatGPT as an example. It does not distinguish between frontier AI, general purpose AI, or task-specific AI, nor does it mention foundation models, predictive AI, open-weight models, or specific compute thresholds beyond the parameter count.
Document data from AGORA, CSET Emerging Technology Observatory.