New York S 8828 (RAISE Act, Article 44-B)

• Authority: New York
• Parent authority: State governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Enacted
• Most recent activity date: 2026-03-27

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• AI system security vulnerabilities
• Cyberattacks, weapon development or use
• Governance failure
• AI pursuing its own goals
• AI possessing dangerous capabilities
• Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Disinformation, surveillance, and influence at scale
• Fraud, scams, and targeted manipulation
• Competitive dynamics
• Lack of capability or robustness

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 8-10 subdomains, with strong focus on malicious actors (4.2, 4.3), AI system security (2.2), competitive dynamics (6.4), governance failure (6.5), and AI safety failures (7.1, 7.2, 7.3, 7.4). Coverage is concentrated in security, catastrophic risk prevention, and transparency domains.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Information
• Scientific Research & Development Services

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Educational Services
• Health Care & Social Assistance
• National Security

All other sectors had no coverage in this document.

Sectors Summary

This regulation primarily governs the Information sector and Scientific Research and Development Services sector, as it targets companies that develop large-scale frontier AI models ('large frontier developers'). These companies are primarily AI developers and technology companies operating in data processing, AI research, and information services. The regulation does not govern specific application sectors but rather the developers of frontier AI systems themselves.

Legislative Status

Hard Law

Legislative Status Summary

This is binding legislation enacted by the New York State Legislature with mandatory obligations ('shall'), specific enforcement mechanisms through the Attorney General, civil penalties up to $3 million per violation, and formal regulatory oversight by the Department of Financial Services.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Summary: The document is a legislative enactment by the New York State Legislature, as indicated by the opening clause and legislative findings section.

Target

• Entity Types: AI_Developer
• Summary: The act explicitly targets 'large frontier developers' and 'frontier developers' - entities that train foundation models using significant computing power (>10^26 FLOPs). The requirements apply specifically to companies developing frontier AI models.

Enforcer

• Entity Types: AI_Governance_Actor
• Summary: The Attorney General has explicit authority to bring civil actions and recover penalties. The Department of Financial Services and its designated Office have administrative and oversight responsibilities.

Monitor

• Entity Types: AI_Governance_Actor
• Summary: The Office within DFS is explicitly tasked with receiving and reviewing reports, producing annual reports, and monitoring compliance. The Office reviews critical safety incident reports and assessments of catastrophic risk.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily focuses on the Deploy and Operate and Monitor stages, with significant coverage of Verify and Validate. It addresses pre-deployment assessment requirements, deployment transparency reporting, and ongoing incident monitoring. There is some implicit coverage of Build and Use Model stage through training compute requirements and framework requirements.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• Foundation Models
• Frontier AI
• AI Systems
• Compute Threshold

Technical Scope Summary

The document explicitly defines and focuses on frontier AI models (foundation models trained with >10^26 FLOPs), with detailed definitions of foundation models, model weights, and artificial intelligence models. It does not explicitly mention general purpose AI, task-specific AI, generative AI, predictive AI, or open-weight models. The compute threshold of 10^26 FLOPs is central to the regulatory trigger.