<?xml version='1.0' encoding='utf-8'?>
<section article="gsf" article_name="State Finance and Procurement" number="3.5-804" title_number="3.5" title_name="Department of Information Technology" subtitle_number="8" subtitle_name="Internship and Registered Apprenticeship Program">
  <level label="a">
    <text>On or before December 1, 2024, the Department, in consultation with the Governor’s Artificial Intelligence Subcabinet, shall adopt policies and procedures concerning the development, procurement, deployment, use, and ongoing assessment of systems that employ high–risk artificial intelligence by a unit of State government.</text>
  </level>
  <level label="b">
    <text>The policies and procedures required by subsection (a) of this section shall:</text>
    <level label="1">
      <text>subject to any other applicable law, govern the procurement, deployment, and ongoing assessment of systems that employ high–risk artificial intelligence by a unit of State government;</text>
    </level>
    <level label="2">
      <text>define the criteria for an inventory of systems that employ high–risk artificial intelligence;</text>
    </level>
    <level label="3">
      <text>be sufficient to ensure that the use of any system that employs artificial intelligence by a unit of State government is governed by adequate guardrails to protect individuals and communities;</text>
    </level>
    <level label="4">
      <text>if the Department is notified that an individual or group of individuals may have been negatively impacted by a system that employs high–risk artificial intelligence, require the Department to:</text>
      <level label="i">
        <text>notify an individual or a group of individuals determined to have been negatively impacted; and</text>
      </level>
      <level label="ii">
        <text>provide guidance to an individual or a group of individuals determined to have been negatively impacted on available options to opt out of the system; and</text>
      </level>
    </level>
    <level label="5">
      <text>provide guidance to units of State government on procurement of a system that employs high–risk artificial intelligence that ensures data privacy and compliance with applicable statutes and regulations.</text>
    </level>
  </level>
  <level label="c">
    <text>The Department shall make the policies and procedures required by subsection (a) of this section publicly available on its website within 45 days after the policies and procedures are adopted.</text>
  </level>
</section>
