North Carolina EO (Advancing Trustworthy AI That Benefits All North Carolinians)

• Authority: North Carolina
• Parent authority: State governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Enacted
• Most recent activity date: 2025-09-02

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Governance failure
• Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Compromise of privacy
• AI system security vulnerabilities
• False or misleading information
• Fraud, scams, and targeted manipulation
• Increased inequality and decline in employment
• Environmental harm
• Lack of capability or robustness

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has minimal to good coverage of approximately 8 subdomains, with primary focus on governance failure prevention (6.5), transparency (7.4), privacy protection (2.1), environmental impacts (6.6), fraud prevention (4.3), misinformation (3.1), security (2.2), and system failures (7.3). Coverage is concentrated in governance structures, risk management, and public accountability domains.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Public Administration (excl. National Security)

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Trade, Transportation & Utilities
• Scientific Research & Development Services
• Educational Services
• Health Care & Social Assistance

All other sectors had no coverage in this document.

Sectors Summary

This executive order primarily governs AI use within Public Administration (state government agencies). While it mentions impacts on education, healthcare, and other sectors, the binding governance measures apply specifically to North Carolina state government operations, Cabinet agencies, and public sector AI deployment.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding executive order issued by the Governor of North Carolina under constitutional and statutory authority that creates mandatory obligations for state Cabinet agencies and establishes enforceable governance structures with monitoring and reporting requirements.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: Governor Josh Stein of North Carolina; North Carolina Department of Information Technology (NCDIT)
• Summary: The Executive Order was issued by Governor Josh Stein under constitutional and statutory authority. NCDIT previously published the North Carolina State Government Responsible Use of Artificial Intelligence Framework which informed this order.

Target

• Entity Types: AI_Deployer, AI_Governance_Actor
• Entities: Cabinet agencies of North Carolina; State agencies; North Carolina Department of Information Technology; North Carolina Department of Commerce; North Carolina Department of Justice; North Carolina Department of Public Instruction
• Summary: The order explicitly applies to all Cabinet agencies which must establish AI Oversight Teams and submit use cases. Non-Cabinet state agencies are encouraged but not required to participate. The order governs state government AI deployment and operations.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: North Carolina Department of Information Technology (NCDIT); North Carolina AI Accelerator; Governor of North Carolina
• Summary: NCDIT operates the AI Accelerator which is responsible for reviewing, approving, and monitoring AI use cases from state agencies. The Accelerator enforces compliance with governance frameworks and maintains public oversight through mandatory reporting.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: North Carolina AI Accelerator; North Carolina AI Leadership Council; North Carolina Department of Information Technology (NCDIT)
• Summary: The AI Accelerator is explicitly responsible for monitoring AI activities across state agencies and submitting annual reports. The AI Leadership Council provides ongoing oversight and strategic guidance. Both entities track implementation and provide public accountability.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document comprehensively covers all stages of the AI lifecycle with particular emphasis on planning and design (governance frameworks, risk assessment), deployment (use case implementation), and operation and monitoring (ongoing oversight and reporting). It addresses data management, model development through pilot projects, and validation through risk assessment frameworks.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• AI Systems
• Generative AI

Technical Scope Summary

The document explicitly mentions AI, artificial intelligence, and Generative AI, requiring standardized definitions. It does not reference frontier AI, general purpose AI, foundation models, compute thresholds, or open-weight models. The focus is on applied AI systems and use cases within state government operations.