Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.
All other risk subdomains had no coverage in this document.
Risk Coverage Summary
The document has good coverage of approximately 8-10 subdomains, with strong focus on malicious actors (4.1, 4.2, 4.3), AI system security (2.2), privacy compromise (2.1), competitive dynamics (6.4), governance failure (6.5), and misinformation (3.1, 3.2). Coverage is concentrated in security, misuse prevention, and geopolitical risk domains.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.
All other sectors had no coverage in this document.
Sectors Summary
The document primarily governs the Information sector (specifically connected software applications, telecommunications, and data processing services) and has significant implications for Finance and Insurance (through transaction prohibitions and sanctions). It also affects Professional and Technical Services and National Security sectors through its enforcement and intelligence provisions.
Hard Law
Legislative Status Summary
This is a binding legislative act passed by the United States Congress with mandatory enforcement mechanisms, sanctions, penalties, and specific regulatory directives requiring compliance by United States persons and foreign entities.
Proposer
Target
Enforcer
Monitor
Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems
AI Lifecycle Summary
The document does not focus on specific AI lifecycle stages but rather on the operational use and deployment of connected software applications. It primarily addresses the Deploy and Operate and Monitor stages through sanctions on entities operating such applications and requirements for ongoing monitoring and determination of compliance.
Terms relating to technical scope that are mentioned or implicitly referenced in the document
No technical scope terms identified.
Technical Scope Summary
The document does not explicitly define or distinguish between AI models, AI systems, or specific AI categories. It uses the term 'connected software application' and references 'recommendation algorithms' but does not provide technical definitions or compute thresholds. The focus is on software applications with algorithmic capabilities rather than on AI-specific technical classifications.
Document data from AGORA, CSET Emerging Technology Observatory.