<?xml version='1.0' encoding='utf-8'?>
<section article="gsf" article_name="State Finance and Procurement" number="3.5-803" title_number="3.5" title_name="Department of Information Technology" subtitle_number="8" subtitle_name="Internship and Registered Apprenticeship Program">
  <level label="a">
    <text>On or before December 1, 2025, and regularly thereafter, each unit of State government shall:</text>
    <level label="1">
      <text>conduct an inventory of systems that employ high–risk artificial intelligence; and</text>
    </level>
    <level label="2">
      <text>provide the inventory to the Department in a format required by the Department.</text>
    </level>
  </level>
  <level label="b">
    <text>For each system, the inventory required by this section shall include:</text>
    <level label="1">
      <text>the name of the system;</text>
    </level>
    <level label="2">
      <text>the vendor that provided the system, if applicable;</text>
    </level>
    <level label="3">
      <text>a description of the capabilities of the system;</text>
    </level>
    <level label="4">
      <text>a statement of the purpose and the intended uses of the system;</text>
    </level>
    <level label="5">
      <text>whether the system underwent an impact assessment prior to being deployed;</text>
    </level>
    <level label="6">
      <text>whether the system is used to independently make a decision or judgment or to inform or support a decision or judgment determined by the Department to involve high–risk artificial intelligence; and</text>
    </level>
    <level label="7">
      <text>a summary of the results of the most recent impact assessment.</text>
    </level>
  </level>
  <level label="c">
    <text>The Department shall make an aggregated statewide inventory publicly available on its website.</text>
  </level>
  <level label="d">
    <level label="1">
      <text>The Department may not make publicly available on the Department’s website information from the inventories required by this section that relate to the safety and security of State systems if the publication of the information is likely to compromise the security or integrity of the system.</text>
    </level>
    <level label="2">
      <text>On request, the Department shall provide to the Governor, members of the General Assembly, and law enforcement the information described in paragraph (1) of this subsection.</text>
    </level>
  </level>
  <level label="e">
    <level label="1">
      <text>On or before December 31, 2026, each unit of State government shall conduct an impact assessment of a system procured on or after February 1, 2026, that involves high–risk artificial intelligence.</text>
    </level>
    <level label="2">
      <text>On or before July 1, 2027, each unit of State government shall conduct an impact assessment of a system procured before February 1, 2026, that involves high–risk artificial intelligence.</text>
    </level>
  </level>
</section>
