Requires developers of generative AI models, by January 2027, to publicly document on their websites detailed information about training datasets, including sources, contents, and any modifications. Exempts models for aircraft operation and national security purposes from this requirement.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.
All other risk subdomains had no coverage in this document.
Risk Coverage Summary
The document primarily addresses transparency risks (7.4) with good coverage, requiring comprehensive disclosure of AI training data. It has minimal coverage of privacy risks (2.1) and intellectual property/creative work devaluation risks (6.3) through required disclosures about personal information and copyrighted content in training datasets.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.
All other sectors had no coverage in this document.
Sectors Summary
This is a cross-sectoral legislative act that applies to developers of generative AI models across all industries making AI available to New Yorkers. It explicitly exempts only aircraft operation (Trade, Transportation and Utilities) and national security applications (National Security sector). The law governs AI developers regardless of their industry sector, making it broadly applicable rather than sector-specific.
Hard Law
Legislative Status Summary
This is a binding legislative act that amends New York's general business law with mandatory requirements for AI developers. It uses mandatory language ('shall'), establishes specific obligations with deadlines (January 1, 2027), and creates legally enforceable requirements as part of state law.
Proposer
Target
Enforcer
Monitor
Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems
AI Lifecycle Summary
The document primarily covers the data collection and processing stage, with significant focus on the model building and training phase. It also applies requirements at the deployment stage by requiring documentation before models are made publicly available. The act does not address planning, verification, or ongoing monitoring stages.
Terms relating to technical scope that are mentioned or implicitly referenced in the document
Technical Scope Summary
The document explicitly defines and focuses on generative artificial intelligence models and AI models more broadly. It does not mention frontier AI, general purpose AI, foundation models, task-specific AI, predictive AI, compute thresholds, or open-weight models. AI systems are not explicitly defined as distinct from AI models.
Document data from AGORA, CSET Emerging Technology Observatory.