Stop Spying Bosses Act

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: U.S. federal laws
• Most recent activity: Defunct
• Most recent activity date: 2025-01-03

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Compromise of privacy
• Overreliance and unsafe use
• Loss of human agency and autonomy
• Increased inequality and decline in employment
• Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Unequal performance across groups
• AI system security vulnerabilities
• Lack of capability or robustness

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 6-8 subdomains, with strong focus on privacy compromise (2.1), unequal performance across groups (1.3), overreliance and unsafe use (5.1), loss of human agency and autonomy (5.2), increased inequality (6.2), and lack of transparency (7.4). Coverage is concentrated in privacy, human-computer interaction, and socioeconomic domains related to workplace surveillance.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Public Administration (excl. National Security)

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Agriculture, Mining, Construction & Manufacturing
• Trade, Transportation & Utilities
• Information
• Finance & Insurance
• Real Estate, Rental & Leasing
• Professional & Technical Services
• Scientific Research & Development Services
• Management, Administrative & Support Services
• Educational Services
• Health Care & Social Assistance
• Arts, Entertainment & Recreation
• Accommodation, Food & Other Services

All other sectors had no coverage in this document.

Sectors Summary

This legislation applies broadly across all economic sectors where employers conduct workplace surveillance on 11 or more employees. The Act explicitly covers private sector employers, government agencies at all levels, and federal offices, making it a cross-sectoral workplace privacy regulation rather than sector-specific governance.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding legislative bill proposed to the U.S. Congress that, if enacted, would establish mandatory legal obligations with enforcement mechanisms including civil penalties, private rights of action, and government enforcement authority.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: United States Congress (Senate and House of Representatives)
• Summary: The document is explicitly proposed legislation to be enacted by the U.S. Congress, as indicated in the opening text.

Target

• Entity Types: AI_Deployer
• Entities: Employers using AI-driven workplace surveillance systems, including private sector employers with 11+ employees, government agencies, Congressional offices, and federal employing agencies
• Summary: The Act explicitly targets employers who conduct workplace surveillance on covered individuals (employees and applicants), with detailed definitions of covered employers including private sector entities, government agencies, and various federal offices.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Privacy and Technology Division (Department of Labor), Secretary of Labor, Administrator of the Privacy and Technology Division, State attorneys general, State privacy regulators, Comptroller General (for GAO), Librarian of Congress, Board of Directors of the Office of Compliance (for Congressional employees), President or designee (for Executive Office employees), Director of Office of Personnel Management (for federal employees)
• Summary: The Act establishes a new Privacy and Technology Division with enforcement authority and designates multiple government entities with enforcement powers including investigation, litigation, and penalty assessment.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Privacy and Technology Division, Administrator of the Privacy and Technology Division, User Advisory Board, Research Advisory Board, Product Advisory Board, Labor Advisory Board, Secretary of Labor
• Summary: The Act establishes monitoring mechanisms through the Privacy and Technology Division, requires annual reports to Congress on workplace surveillance, and creates multiple advisory boards to provide ongoing oversight and information on emerging practices.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Collect and Process Data
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily focuses on the Deploy and Operate and Monitor stages of AI systems used for workplace surveillance. It addresses deployment requirements (disclosure obligations before and during deployment) and operational monitoring (ongoing surveillance practices, data collection, and employment decisions). There is minimal coverage of earlier lifecycle stages.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• Predictive AI

Technical Scope Summary

The document explicitly mentions automated decision systems and workplace surveillance technologies but does not specifically reference AI models, AI systems, frontier AI, general purpose AI, foundation models, generative AI, or compute thresholds. The focus is on automated decision-making technologies used in workplace contexts rather than specific AI model categories.