{
  "@context": "https://everyailaw.com/api/v1/context.jsonld",
  "meta": {
    "generated": "2026-09-01T00:00:00Z",
    "count": 217,
    "license": {
      "name": "EveryAILaw Data License v1.4.1",
      "url": "https://everyailaw.com/data-license.html",
      "summary": "Direct use, evaluation, research, citation, internal tooling, and machine/agent querying (including by LLMs and via MCP) are free via the public Free Endpoint, no permission required. Commercial redistribution, or embedding the corpus into a Product or Service made available to a Third Party, requires a Commercial Agreement.",
      "commercial": "https://paice.work/contact/"
    }
  },
  "provisions": [
    {
      "@id": "https://everyailaw.com/ont/provision/colorado-sb24-205-human-review",
      "@type": "Provision",
      "id": "colorado-sb24-205-human-review",
      "regulation": "colorado-sb24-205",
      "authority": "colorado-ag",
      "source_file": "data/instruments/colorado-sb24-205.md",
      "source_heading": "Meaningful Human Review",
      "obligations": [
        "human-oversight"
      ],
      "scope": "deployers",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/colorado-sb24-205-transparency",
      "@type": "Provision",
      "id": "colorado-sb24-205-transparency",
      "regulation": "colorado-sb24-205",
      "authority": "colorado-ag",
      "source_file": "data/instruments/colorado-sb24-205.md",
      "source_heading": "Transparency in Consequential Decisions",
      "obligations": [
        "transparency"
      ],
      "scope": "deployers",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/colorado-sb26-189-developer-documentation",
      "@type": "Provision",
      "id": "colorado-sb26-189-developer-documentation",
      "regulation": "colorado-sb26-189",
      "authority": "colorado-ag",
      "source_file": "data/instruments/colorado-sb26-189.md",
      "source_heading": "Developer Documentation",
      "obligations": [
        "transparency",
        "record-keeping"
      ],
      "scope": "Developers of covered ADMT intended to materially influence consequential decisions involving Colorado consumers (§§ 6-1-1701(5), 6-1-1702)",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/colorado-sb26-189-deployer-disclosures",
      "@type": "Provision",
      "id": "colorado-sb26-189-deployer-disclosures",
      "regulation": "colorado-sb26-189",
      "authority": "colorado-ag",
      "source_file": "data/instruments/colorado-sb26-189.md",
      "source_heading": "Deployer Disclosures & Post-Adverse Notice",
      "obligations": [
        "transparency"
      ],
      "scope": "Deployers using covered ADMT to materially influence a consequential decision involving a Colorado consumer (§§ 6-1-1701(5), 6-1-1704)",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/colorado-sb26-189-human-review",
      "@type": "Provision",
      "id": "colorado-sb26-189-human-review",
      "regulation": "colorado-sb26-189",
      "authority": "colorado-ag",
      "source_file": "data/instruments/colorado-sb26-189.md",
      "source_heading": "Consumer Correction & Human Review",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Deployers whose covered ADMT materially influenced an adverse consequential decision involving a Colorado consumer (§§ 6-1-1701(5), 6-1-1705)",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/colorado-sb26-189-record-keeping",
      "@type": "Provision",
      "id": "colorado-sb26-189-record-keeping",
      "regulation": "colorado-sb26-189",
      "authority": "colorado-ag",
      "source_file": "data/instruments/colorado-sb26-189.md",
      "source_heading": "Deployer Record-Keeping",
      "obligations": [
        "record-keeping"
      ],
      "scope": "Deployers making consequential decisions materially influenced by covered ADMT (§ 6-1-1703)",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/california-ccpa-admt-transparency",
      "@type": "Provision",
      "id": "california-ccpa-admt-transparency",
      "regulation": "california-ccpa-admt",
      "authority": "cppa",
      "source_file": "data/instruments/california-ccpa-admt.md",
      "source_heading": "Consumer Transparency for ADMT",
      "obligations": [
        "transparency",
        "explainability"
      ],
      "scope": "Businesses using ADMT to make a **significant decision** concerning a consumer. \"Significant decision\" means one resulting in the provision or denial of financial or lending services, housing, education enrollment or opportunities, employment or independent contracting opportunities or compensation, or healthcare services (11 CCR § 7001(ddd)). Each domain is defined in turn: housing excludes decisions based solely on availability, vacancy, or receipt of payment (§ 7001(ddd)(2)); education covers admission, credentials, and suspension or expulsion (§ 7001(ddd)(3)); employment covers hiring, work allocation and compensation, promotion, and demotion, suspension or termination (§ 7001(ddd)(4)). Advertising to a consumer is expressly not a significant decision (§ 7001(ddd)(6))",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/california-ccpa-admt-risk-assessment",
      "@type": "Provision",
      "id": "california-ccpa-admt-risk-assessment",
      "regulation": "california-ccpa-admt",
      "authority": "cppa",
      "source_file": "data/instruments/california-ccpa-admt.md",
      "source_heading": "ADMT Risk Assessment",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Businesses using ADMT to make a **significant decision** concerning a consumer. \"Significant decision\" means one resulting in the provision or denial of financial or lending services, housing, education enrollment or opportunities, employment or independent contracting opportunities or compensation, or healthcare services (11 CCR § 7001(ddd)). Each domain is defined in turn: housing excludes decisions based solely on availability, vacancy, or receipt of payment (§ 7001(ddd)(2)); education covers admission, credentials, and suspension or expulsion (§ 7001(ddd)(3)); employment covers hiring, work allocation and compensation, promotion, and demotion, suspension or termination (§ 7001(ddd)(4)). Advertising to a consumer is expressly not a significant decision (§ 7001(ddd)(6))",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/connecticut-pa26-15-frontier-reporting",
      "@type": "Provision",
      "id": "connecticut-pa26-15-frontier-reporting",
      "regulation": "connecticut-pa26-15",
      "authority": "connecticut-ag",
      "source_file": "data/instruments/connecticut-pa26-15.md",
      "source_heading": "Frontier Developer Catastrophic Risk Reporting",
      "obligations": [
        "incident-reporting"
      ],
      "scope": "Frontier developers, with the internal-process duty falling on large frontier developers. \"Catastrophic risk\" is defined as a foreseeable and material risk that development, storage, use, or deployment of a frontier model materially contributes to the death of or serious injury to more than fifty individuals, or more than one billion dollars in damage to covered property or loss (§ 2(a))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/connecticut-pa26-15-provenance",
      "@type": "Provision",
      "id": "connecticut-pa26-15-provenance",
      "regulation": "connecticut-pa26-15",
      "authority": "connecticut-ag",
      "source_file": "data/instruments/connecticut-pa26-15.md",
      "source_heading": "Generative AI Content Provenance",
      "obligations": [
        "transparency"
      ],
      "scope": "Covered providers — any person who creates, codes, or otherwise produces a generative AI system with more than one million users per month that is publicly accessible to consumers for personal use; federal, state, and local government agencies are excluded (§ 15(a)(2))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/connecticut-pa26-15-employment-disclosure",
      "@type": "Provision",
      "id": "connecticut-pa26-15-employment-disclosure",
      "regulation": "connecticut-pa26-15",
      "authority": "connecticut-ag",
      "source_file": "data/instruments/connecticut-pa26-15.md",
      "source_heading": "Automated Employment Decision Technology Disclosure",
      "obligations": [
        "transparency",
        "explainability"
      ],
      "scope": "Developers and deployers of automated employment-related decision technology deployed in Connecticut on or after 2027-10-01. The technology is defined as any technology that processes personal data and uses computation to generate an output — prediction, recommendation, classification, ranking, or score — used in employment-related decisions (§ 7)",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/connecticut-pa26-15-employment-discrimination",
      "@type": "Provision",
      "id": "connecticut-pa26-15-employment-discrimination",
      "regulation": "connecticut-pa26-15",
      "authority": "connecticut-ag",
      "source_file": "data/instruments/connecticut-pa26-15.md",
      "source_heading": "AI as No Defense to Employment Discrimination",
      "obligations": [
        "bias-prevention"
      ],
      "scope": "Employers and their agents subject to Conn. Gen. Stat. § 46a-60",
      "roles": [
        "employer",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/connecticut-pa26-15-companion-protocol",
      "@type": "Provision",
      "id": "connecticut-pa26-15-companion-protocol",
      "regulation": "connecticut-pa26-15",
      "authority": "connecticut-ag",
      "source_file": "data/instruments/connecticut-pa26-15.md",
      "source_heading": "AI Companion Crisis Protocol",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Operators providing or operating an artificial intelligence companion for a user in Connecticut, with heightened duties where the operator knows or has reason to believe the user is under eighteen (§§ 4, 6(a)(1))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/connecticut-pa26-15-disclosure",
      "@type": "Provision",
      "id": "connecticut-pa26-15-disclosure",
      "regulation": "connecticut-pa26-15",
      "authority": "connecticut-ag",
      "source_file": "data/instruments/connecticut-pa26-15.md",
      "source_heading": "AI Companion and Subscription Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "Subscription-based providers of AI technology contracting with Connecticut consumers (§ 1), and operators of AI companions whose product would cause a reasonable user to believe they are interacting with a human (§ 5(b))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/connecticut-sb1295-opt-out",
      "@type": "Provision",
      "id": "connecticut-sb1295-opt-out",
      "regulation": "connecticut-sb1295",
      "authority": "connecticut-ag",
      "source_file": "data/instruments/connecticut-sb1295.md",
      "source_heading": "Expanded Consumer Opt-Out",
      "obligations": [
        "transparency"
      ],
      "scope": "controllers (entities subject to CTDPA)",
      "roles": [
        "controller"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/cms-medicare-clinician-oversight",
      "@type": "Provision",
      "id": "cms-medicare-clinician-oversight",
      "regulation": "cms-medicare-advantage",
      "authority": "cms",
      "source_file": "data/instruments/cms-medicare-advantage.md",
      "source_heading": "Clinician Oversight Mandate",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Medicare Advantage organizations and plans",
      "roles": [
        "insurer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/california-sb1120-physician-supervision",
      "@type": "Provision",
      "id": "california-sb1120-physician-supervision",
      "regulation": "california-sb1120",
      "authority": "california-dmhc",
      "source_file": "data/instruments/california-sb1120.md",
      "source_heading": "Physician Supervision of AI",
      "obligations": [
        "human-oversight"
      ],
      "scope": "health care service plans, disability insurers, and their contractors",
      "roles": [
        "insurer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/california-sb53-transparency",
      "@type": "Provision",
      "id": "california-sb53-transparency",
      "regulation": "california-sb53",
      "authority": "california-ag",
      "source_file": "data/instruments/california-sb53.md",
      "source_heading": "Frontier AI Framework Publication",
      "obligations": [
        "transparency"
      ],
      "scope": "large frontier developers (annual gross revenue > $500M)",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/california-sb53-incident-reporting",
      "@type": "Provision",
      "id": "california-sb53-incident-reporting",
      "regulation": "california-sb53",
      "authority": "california-ag",
      "source_file": "data/instruments/california-sb53.md",
      "source_heading": "Incident Reporting",
      "obligations": [
        "incident-reporting"
      ],
      "scope": "frontier developers (models trained with > 10^26 operations)",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/new-york-ai-companion-protocol",
      "@type": "Provision",
      "id": "new-york-ai-companion-protocol",
      "regulation": "new-york-ai-companion-models",
      "authority": "nyag",
      "source_file": "data/instruments/new-york-ai-companion-models.md",
      "source_heading": "AI Companion Self-Harm Protocol",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Operators — any person, partnership, association, firm, or business entity (including members, affiliates, subsidiaries, and beneficial owners) that operates for or provides an AI companion to a user in New York. An AI companion is a system using AI, generative AI, and/or emotional recognition algorithms designed to simulate a sustained human-like relationship by retaining prior-session information, asking unprompted emotion-based questions, and sustaining ongoing dialogue on matters personal to the user; systems used solely for customer service, efficiency or research assistance, or internal employee productivity are excluded (§ 1700(4))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/new-york-ai-companion-notification",
      "@type": "Provision",
      "id": "new-york-ai-companion-notification",
      "regulation": "new-york-ai-companion-models",
      "authority": "nyag",
      "source_file": "data/instruments/new-york-ai-companion-models.md",
      "source_heading": "AI Companion Non-Human Notification",
      "obligations": [
        "transparency"
      ],
      "scope": "Operators of AI companions provided to users in New York (§ 1700(4)-(5))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/california-sb243-disclosure",
      "@type": "Provision",
      "id": "california-sb243-disclosure",
      "regulation": "california-sb243",
      "authority": "california-osp",
      "source_file": "data/instruments/california-sb243.md",
      "source_heading": "Companion Chatbot Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "Operators — persons who make a companion chatbot platform available to a user in California, where a companion chatbot is an AI system with a natural language interface giving adaptive, human-like responses capable of meeting a user's social needs and sustaining a relationship across interactions; customer-service and operational bots, video-game bots confined to game topics, and voice-assistant speaker devices are excluded (§ 22601(b))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/california-sb243-crisis-protocol",
      "@type": "Provision",
      "id": "california-sb243-crisis-protocol",
      "regulation": "california-sb243",
      "authority": "california-osp",
      "source_file": "data/instruments/california-sb243.md",
      "source_heading": "Self-Harm Crisis Protocol",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Operators of companion chatbot platforms made available to users in California (§ 22601(e))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/california-sb243-reporting",
      "@type": "Provision",
      "id": "california-sb243-reporting",
      "regulation": "california-sb243",
      "authority": "california-osp",
      "source_file": "data/instruments/california-sb243.md",
      "source_heading": "Annual Crisis Referral Reporting",
      "obligations": [
        "incident-reporting"
      ],
      "scope": "Operators of companion chatbot platforms made available to users in California (§ 22601(e))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/california-ab2013-training-data",
      "@type": "Provision",
      "id": "california-ab2013-training-data",
      "regulation": "california-ab2013",
      "authority": "california-ag",
      "source_file": "data/instruments/california-ab2013.md",
      "source_heading": "Training Data Documentation",
      "obligations": [
        "data-governance"
      ],
      "scope": "Developers — persons, partnerships, state or local government agencies, or corporations that design, code, produce, or substantially modify a GenAI system or service for use by members of the public — for any system or service released on or after 2022-01-01 that is made publicly available to Californians, whether or not for compensation (§§ 3110(b), 3111)",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/new-york-raise-safety",
      "@type": "Provision",
      "id": "new-york-raise-safety",
      "regulation": "new-york-raise",
      "authority": "nyag",
      "source_file": "data/instruments/new-york-raise.md",
      "source_heading": "Safety Protocols",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "frontier developers (operates or deploys frontier models in New York)",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/new-york-raise-incident-reporting",
      "@type": "Provision",
      "id": "new-york-raise-incident-reporting",
      "regulation": "new-york-raise",
      "authority": "nyag",
      "source_file": "data/instruments/new-york-raise.md",
      "source_heading": "Incident Reporting",
      "obligations": [
        "incident-reporting"
      ],
      "scope": "frontier developers (operates or deploys frontier models in New York)",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/idaho-s1297-disclosure",
      "@type": "Provision",
      "id": "idaho-s1297-disclosure",
      "regulation": "idaho-s1297",
      "authority": "idaho-ag",
      "source_file": "data/instruments/idaho-s1297.md",
      "source_heading": "Conversational AI Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "Operators — persons who make a conversational AI service available to the public, where a conversational AI service is a publicly accessible AI application, web interface, or program that primarily simulates human conversation through textual, visual, or aural communication (§ 48-2102(2)(a), (6)). Nine carve-outs apply: developer/researcher tools, features embedded in non-conversational software, in-game chatbots confined to game topics, narrow-and-discrete-topic systems, systems primarily designed and marketed for commercial use by business entities, voice-assistant and speaker interfaces, internal business use, services gated behind a commercial or enterprise agreement, and customer-service or operational chatbots (§ 48-2102(2)(b)). App stores and search engines are not operators merely for providing access (§ 48-2102(6))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/idaho-s1297-crisis-protocol",
      "@type": "Provision",
      "id": "idaho-s1297-crisis-protocol",
      "regulation": "idaho-s1297",
      "authority": "idaho-ag",
      "source_file": "data/instruments/idaho-s1297.md",
      "source_heading": "Suicidal Ideation Response Protocol",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Operators of conversational AI services made available to the public in Idaho (§ 48-2102(6))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/idaho-s1297-minor-protection",
      "@type": "Provision",
      "id": "idaho-s1297-minor-protection",
      "regulation": "idaho-s1297",
      "authority": "idaho-ag",
      "source_file": "data/instruments/idaho-s1297.md",
      "source_heading": "Minor Protection Measures",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Operators, as to minor account holders — account holders whom the operator has actual knowledge or reasonable certainty are under 18 (§ 48-2102(4)-(5))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/idaho-s1297-parental-controls",
      "@type": "Provision",
      "id": "idaho-s1297-parental-controls",
      "regulation": "idaho-s1297",
      "authority": "idaho-ag",
      "source_file": "data/instruments/idaho-s1297.md",
      "source_heading": "Account and Parental Controls",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Operators, as to all account holders for privacy and account settings tools, and as to parents or guardians of minor account holders — mandatory for account holders under 13, and risk-calibrated for minor account holders 13 and older (§ 48-2104(5))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/georgia-sb540-disclosure",
      "@type": "Provision",
      "id": "georgia-sb540-disclosure",
      "regulation": "georgia-sb540",
      "authority": "georgia-ag",
      "source_file": "data/instruments/georgia-sb540.md",
      "source_heading": "AI Companion Chatbot Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "Operators — persons that own, control, or develop and make available an AI companion chatbot to users in Georgia (§ 39-5-6(a)(5)). An AI companion chatbot is a system using AI, generative AI, or emotional recognition algorithms designed to simulate a sustained human or human-like relationship by retaining prior-interaction information to personalize engagement, asking unprompted emotion-based questions, and sustaining ongoing dialogue on matters personal to the user — all three conjunctively (§ 39-5-6(a)(1)(A)). Excluded: internal business systems; systems marketed primarily for software development, research, technical assistance, or enterprise productivity; customer-service bots that neither sustain a cross-session relationship nor elicit emotional attachment; stand-alone speaker/voice-assistant devices; narrowly tailored curriculum-aligned educational tools; video-game non-player characters restricted to game subject matter; and video game, film, television, audiovisual, theme-park, or location-based entertainment tie-ins (§ 39-5-6(a)(1)(B))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/georgia-sb540-minor-safety",
      "@type": "Provision",
      "id": "georgia-sb540-minor-safety",
      "regulation": "georgia-sb540",
      "authority": "georgia-ag",
      "source_file": "data/instruments/georgia-sb540.md",
      "source_heading": "Minor-User Safety and Engagement Design Limits",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Operators where they know or reasonably should have known a user is a minor, or where the AI companion chatbot is directed or marketed toward minor users (§ 39-5-6(d)); the engagement-technique limits in § 39-5-6(e) apply to techniques directed to a minor",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/georgia-sb540-crisis-protocol",
      "@type": "Provision",
      "id": "georgia-sb540-crisis-protocol",
      "regulation": "georgia-sb540",
      "authority": "georgia-ag",
      "source_file": "data/instruments/georgia-sb540.md",
      "source_heading": "Severe Harm Crisis Protocol",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "All operators making an AI companion chatbot available to users in Georgia — the protocol is a precondition to availability, not a minor-specific duty (§ 39-5-6(f))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/georgia-sb540-protocol-disclosure",
      "@type": "Provision",
      "id": "georgia-sb540-protocol-disclosure",
      "regulation": "georgia-sb540",
      "authority": "georgia-ag",
      "source_file": "data/instruments/georgia-sb540.md",
      "source_heading": "Crisis Protocol and Referral Disclosure",
      "obligations": [
        "incident-reporting"
      ],
      "scope": "All operators making an AI companion chatbot available to users in Georgia (§ 39-5-6(g))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/georgia-sb540-parental-tools",
      "@type": "Provision",
      "id": "georgia-sb540-parental-tools",
      "regulation": "georgia-sb540",
      "authority": "georgia-ag",
      "source_file": "data/instruments/georgia-sb540.md",
      "source_heading": "Minor Account Controls and Parental Tools",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Operators, for accounts known to belong to minor users; the tools must be available to the minor or to a parent, defined as the parent or legal guardian of a minor (§ 39-5-6(a)(6), (i))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/georgia-sb540-age-assurance",
      "@type": "Provision",
      "id": "georgia-sb540-age-assurance",
      "regulation": "georgia-sb540",
      "authority": "georgia-ag",
      "source_file": "data/instruments/georgia-sb540.md",
      "source_heading": "Age Assurance and Age-Data Handling",
      "obligations": [
        "data-governance"
      ],
      "scope": "Operators, before allowing access to a feature or mode that may generate synthetic content containing sexually explicit conduct, where sexually explicit conduct takes the meaning in O.C.G.A. § 16-12-100 (§ 39-5-6(a)(9), (j))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/illinois-hb3773-bias",
      "@type": "Provision",
      "id": "illinois-hb3773-bias",
      "regulation": "illinois-hb3773",
      "authority": "illinois-dol",
      "source_file": "data/instruments/illinois-hb3773.md",
      "source_heading": "Prohibition on Discriminatory AI in Employment",
      "obligations": [
        "bias-prevention"
      ],
      "scope": "employers (including staffing agencies)",
      "roles": [
        "employer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/texas-traiga-bias",
      "@type": "Provision",
      "id": "texas-traiga-bias",
      "regulation": "texas-traiga",
      "authority": "texas-ag",
      "source_file": "data/instruments/texas-traiga.md",
      "source_heading": "AI Discrimination Prohibition",
      "obligations": [
        "bias-prevention"
      ],
      "scope": "developers and deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/oregon-sb1546-disclosure",
      "@type": "Provision",
      "id": "oregon-sb1546-disclosure",
      "regulation": "oregon-sb1546",
      "authority": "oregon-ag",
      "source_file": "data/instruments/oregon-sb1546.md",
      "source_heading": "Artificial Intelligence Companion Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "Operators — persons that control or make an artificial intelligence companion or companion platform available to users in Oregon (§ 1(1)(d)). An artificial intelligence companion is a system using AI, generative AI, or emotion-recognising algorithms designed to simulate a sustained human-like platonic, intimate, or romantic relationship by retaining information across sessions, asking unprompted questions on emotional topics, and sustaining ongoing personal dialogue (§ 1(1)(a)(A)). Customer service, patient or resident care support, education, financial services, business operations, productivity, information analysis, internal research and technical assistance software; in-game bots confined to game topics; and stand-alone speaker or voice-assistant devices are excluded (§ 1(1)(a)(B))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/oregon-sb1546-crisis-protocol",
      "@type": "Provision",
      "id": "oregon-sb1546-crisis-protocol",
      "regulation": "oregon-sb1546",
      "authority": "oregon-ag",
      "source_file": "data/instruments/oregon-sb1546.md",
      "source_heading": "Suicide and Self-Harm Detection Protocol",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Operators that allow users in Oregon access to an artificial intelligence companion or companion platform (§ 1(1)(d), § 1(3)(a))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/oregon-sb1546-minor-protection",
      "@type": "Provision",
      "id": "oregon-sb1546-minor-protection",
      "regulation": "oregon-sb1546",
      "authority": "oregon-ag",
      "source_file": "data/instruments/oregon-sb1546.md",
      "source_heading": "Minor Protection and Engagement-Maximisation Limits",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Operators that know or have reason to believe a user of their artificial intelligence companion or platform is a minor (§ 1(4)(a))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/oregon-sb1546-annual-report",
      "@type": "Provision",
      "id": "oregon-sb1546-annual-report",
      "regulation": "oregon-sb1546",
      "authority": "oregon-ag",
      "source_file": "data/instruments/oregon-sb1546.md",
      "source_heading": "Annual Crisis Referral Report",
      "obligations": [
        "incident-reporting"
      ],
      "scope": "Operators that control or make an artificial intelligence companion or platform available to users in Oregon (§ 1(1)(d))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/washington-hb2225-disclosure",
      "@type": "Provision",
      "id": "washington-hb2225-disclosure",
      "regulation": "washington-hb2225",
      "authority": "washington-ag",
      "source_file": "data/instruments/washington-hb2225.md",
      "source_heading": "AI Companion Chatbot Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "Operators — any person, partnership, corporation, or entity that makes available or controls access to an AI companion chatbot for users in Washington (Sec. 2(4)). An AI companion chatbot is an AI system with a natural language interface providing adaptive, human-like responses including anthropomorphic features, able to sustain a relationship across multiple interactions (Sec. 2(1)(a)). Excluded: business-operations, productivity, internal-research, technical-assistance and customer-service bots that neither sustain a relationship nor generate emotionally eliciting outputs; in-game bots confined to game topics; stand-alone speaker or voice-assistant devices; and narrowly tailored curriculum-aligned educational tools without open-ended conversational companionship (Sec. 2(1)(b))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/washington-hb2225-minor-protection",
      "@type": "Provision",
      "id": "washington-hb2225-minor-protection",
      "regulation": "washington-hb2225",
      "authority": "washington-ag",
      "source_file": "data/instruments/washington-hb2225.md",
      "source_heading": "Minor Protections and Manipulative Engagement Ban",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Operators that know the user of an AI companion chatbot is a minor (any person under 18, Sec. 2(3)), and operators whose AI companion chatbot is directed to minors regardless of actual knowledge (Sec. 4(1))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/washington-hb2225-crisis-protocol",
      "@type": "Provision",
      "id": "washington-hb2225-crisis-protocol",
      "regulation": "washington-hb2225",
      "authority": "washington-ag",
      "source_file": "data/instruments/washington-hb2225.md",
      "source_heading": "Suicide and Self-Harm Response Protocol",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Operators making available or deploying an AI companion chatbot for users in Washington (Sec. 2(4), Sec. 5(1))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/washington-hb2225-protocol-disclosure",
      "@type": "Provision",
      "id": "washington-hb2225-protocol-disclosure",
      "regulation": "washington-hb2225",
      "authority": "washington-ag",
      "source_file": "data/instruments/washington-hb2225.md",
      "source_heading": "Public Protocol and Crisis Referral Disclosure",
      "obligations": [
        "incident-reporting"
      ],
      "scope": "Operators making available or deploying an AI companion chatbot for users in Washington (Sec. 2(4))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/iowa-sf2417-disclosure",
      "@type": "Provision",
      "id": "iowa-sf2417-disclosure",
      "regulation": "iowa-sf2417",
      "authority": "iowa-ag",
      "source_file": "data/instruments/iowa-sf2417.md",
      "source_heading": "Conversational AI Artificiality Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "Operators — persons who develop and make a conversational AI service available to the public (§ 554J.1(4)); a conversational AI service is publicly accessible software whose primary purpose is simulating human conversation and interaction through text, audio, or visual communication, excluding R&D tools, features inside a program with a different primary purpose, narrow-and-discrete-topic systems, customer-service and commerce assistants sold to businesses, speaker/voice-assistant interfaces, and systems used solely for internal business purposes (§ 554J.1(2)); app stores and search engines are not operators merely for providing access (§ 554J.1(4))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/iowa-sf2417-anti-anthropomorphism",
      "@type": "Provision",
      "id": "iowa-sf2417-anti-anthropomorphism",
      "regulation": "iowa-sf2417",
      "authority": "iowa-ag",
      "source_file": "data/instruments/iowa-sf2417.md",
      "source_heading": "Anti-Anthropomorphism and Emotional Dependency Measures",
      "obligations": [
        "transparency"
      ],
      "scope": "Operators of conversational AI services (§ 554J.1(4)); the duty sits in § 554J.2, headed \"minors — requirements\", and two of its four enumerated examples are framed around a minor account holder, but the operative test is what a reasonable individual would believe",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/iowa-sf2417-minor-safeguards",
      "@type": "Provision",
      "id": "iowa-sf2417-minor-safeguards",
      "regulation": "iowa-sf2417",
      "authority": "iowa-ag",
      "source_file": "data/instruments/iowa-sf2417.md",
      "source_heading": "Minor Engagement and Sexual Content Safeguards",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Operators of conversational AI services, as to minor users and minor account holders — a minor being an individual the operator knows is, or is reasonably certain is, under eighteen years of age (§ 554J.1(3)); \"sexually explicit conduct\" and \"visual depiction\" take their 18 U.S.C. § 2256 meanings (§§ 554J.1(5)-(6))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/iowa-sf2417-parental-controls",
      "@type": "Provision",
      "id": "iowa-sf2417-parental-controls",
      "regulation": "iowa-sf2417",
      "authority": "iowa-ag",
      "source_file": "data/instruments/iowa-sf2417.md",
      "source_heading": "Minor Privacy and Parental Control Tools",
      "obligations": [
        "data-governance"
      ],
      "scope": "Operators of conversational AI services with minor account holders; the guardian-facing duty is unconditional for account holders under thirteen years of age and risk-calibrated for older minors (§ 554J.2(5)(b)-(c))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/iowa-sf2417-crisis-protocol",
      "@type": "Provision",
      "id": "iowa-sf2417-crisis-protocol",
      "regulation": "iowa-sf2417",
      "authority": "iowa-ag",
      "source_file": "data/instruments/iowa-sf2417.md",
      "source_heading": "Suicide and Self-Harm Response Protocol",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Operators of conversational AI services; the duty runs to all users, not only minors (§ 554J.4)",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/iowa-sf2417-mental-health-bar",
      "@type": "Provision",
      "id": "iowa-sf2417-mental-health-bar",
      "regulation": "iowa-sf2417",
      "authority": "iowa-ag",
      "source_file": "data/instruments/iowa-sf2417.md",
      "source_heading": "Licensed Mental Health Service Representation Bar",
      "obligations": [
        "transparency"
      ],
      "scope": "Operators of conversational AI services; the reference point is professional psychology or behavioral health services that would require licensure under Iowa Code chapter 154B (psychologists) or 154D (behavioral science practitioners) (§ 554J.5)",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/rhode-island-ai-companion-protocol",
      "@type": "Provision",
      "id": "rhode-island-ai-companion-protocol",
      "regulation": "rhode-island-ai-companion",
      "authority": "rhode-island-ag",
      "source_file": "data/instruments/rhode-island-ai-companion.md",
      "source_heading": "AI Companion Crisis Protocol",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Operators — any person, partnership, association, firm or business entity, or any member, affiliate, subsidiary or beneficial owner of one, who operates or provides an AI companion to a user in Rhode Island. An \"AI companion\" simulates a sustained human or human-like relationship by retaining prior-interaction information to personalize engagement, asking unprompted emotion-based questions beyond direct responses, and sustaining ongoing dialogue on matters personal to the user — all three conjunctively (§ 6-63-1(1)(i)). Excluded: pure customer-service or product-information systems, systems primarily designed and marketed for efficiency improvements or research or technical assistance, and systems used solely for internal or employee-productivity purposes (§ 6-63-1(1)(ii))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/rhode-island-ai-companion-notification",
      "@type": "Provision",
      "id": "rhode-island-ai-companion-notification",
      "regulation": "rhode-island-ai-companion",
      "authority": "rhode-island-ag",
      "source_file": "data/instruments/rhode-island-ai-companion.md",
      "source_heading": "Non-Human Interaction Notification",
      "obligations": [
        "transparency"
      ],
      "scope": "Operators of AI companions used by users within Rhode Island (§§ 6-63-1(6), 6-63-1(8))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/rhode-island-ai-companion-reporting",
      "@type": "Provision",
      "id": "rhode-island-ai-companion-reporting",
      "regulation": "rhode-island-ai-companion",
      "authority": "rhode-island-ag",
      "source_file": "data/instruments/rhode-island-ai-companion.md",
      "source_heading": "Annual Safety Protocol Reporting",
      "obligations": [
        "incident-reporting"
      ],
      "scope": "Operators of AI companions used by users within Rhode Island (§ 6-63-1(6))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/rhode-island-ai-mental-health-oversight",
      "@type": "Provision",
      "id": "rhode-island-ai-mental-health-oversight",
      "regulation": "rhode-island-ai-mental-health",
      "authority": "rhode-island-eohhs",
      "source_file": "data/instruments/rhode-island-ai-mental-health.md",
      "source_heading": "Licensed Professional Responsibility for AI in Therapy",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Licensed professionals or providers — individuals holding a valid Rhode Island license, credential, or certification to provide therapy or psychotherapy services (§ 40.1-5.5-2(4)) — and, under § 40.1-5.5-3(b), any individual, corporation, or entity that provides, advertises, or otherwise offers therapy or psychotherapy services to the public in Rhode Island, including through internet-based AI. Does not apply to religious counseling, peer support, public self-help and educational materials that do not purport to offer therapy, FDA-cleared (or other federal-agency-cleared) AI tools, or IRB-approved research under 21 C.F.R. Pt. 50 / 45 C.F.R. Pt. 46 (§ 40.1-5.5-5(c))",
      "roles": [
        "healthcare-provider",
        "deployer",
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/rhode-island-ai-mental-health-consent",
      "@type": "Provision",
      "id": "rhode-island-ai-mental-health-consent",
      "regulation": "rhode-island-ai-mental-health",
      "authority": "rhode-island-eohhs",
      "source_file": "data/instruments/rhode-island-ai-mental-health.md",
      "source_heading": "Written Consent for Recorded AI-Assisted Sessions",
      "obligations": [
        "transparency"
      ],
      "scope": "Licensed professionals or providers using AI designed to simulate emotional attachment, bonding, or dependency, or AI companions for mental health or emotional support, to assist in supplementary support or therapeutic communication where the client's therapeutic session is recorded or transcribed (§ 40.1-5.5-3(a))",
      "roles": [
        "healthcare-provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/rhode-island-ai-mental-health-confidentiality",
      "@type": "Provision",
      "id": "rhode-island-ai-mental-health-confidentiality",
      "regulation": "rhode-island-ai-mental-health",
      "authority": "rhode-island-eohhs",
      "source_file": "data/instruments/rhode-island-ai-mental-health.md",
      "source_heading": "Confidentiality of AI-Handled Therapy Records",
      "obligations": [
        "data-governance"
      ],
      "scope": "Licensed professionals or providers holding therapy or psychotherapy records and communications, including records prepared or maintained by AI acting as supplementary support under § 40.1-5.5-2(8)(i)",
      "roles": [
        "healthcare-provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/rhode-island-healthcare-ai-notice-review",
      "@type": "Provision",
      "id": "rhode-island-healthcare-ai-notice-review",
      "regulation": "rhode-island-healthcare-ai-notice",
      "authority": "rhode-island-doh",
      "source_file": "data/instruments/rhode-island-healthcare-ai-notice.md",
      "source_heading": "AI Visit Documentation Notice and Review",
      "obligations": [
        "transparency",
        "human-oversight"
      ],
      "scope": "All healthcare providers and healthcare facilities that employ AI to document in-person or telehealth visits. \"Healthcare provider\" covers physicians, physician assistants, dentists, registered nurses, licensed practical nurses, advanced practice registered nurses, nursing assistants, and any other healthcare professional licensed by the director of the department of health; \"healthcare facility\" takes the meaning in § 23-17-2. \"Artificial intelligence\" is defined expansively as any technology that can simulate human intelligence, including natural language processing, training language models, RLHF, and machine learning systems (§ 23-108-2)",
      "roles": [
        "healthcare-provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/pe-ai-law-transparency",
      "@type": "Provision",
      "id": "pe-ai-law-transparency",
      "regulation": "pe-ai-law",
      "authority": "pe-sgtd",
      "source_file": "data/instruments/pe-ai-law.md",
      "source_heading": "Algorithmic Transparency for High-Risk AI",
      "obligations": [
        "transparency"
      ],
      "scope": "Private-sector and public developers (desarrolladores) and deployers (implementadores) of high-risk AI systems (Reglamento Arts. 3, 6(b), 6(d), 25.1)",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/pe-ai-law-explainability",
      "@type": "Provision",
      "id": "pe-ai-law-explainability",
      "regulation": "pe-ai-law",
      "authority": "pe-sgtd",
      "source_file": "data/instruments/pe-ai-law.md",
      "source_heading": "Explanation of Rights-Affecting Automated Decisions",
      "obligations": [
        "explainability"
      ],
      "scope": "Private-sector and public developers and deployers of high-risk AI systems whose decisions impact human rights (Reglamento Arts. 25.1, 25.3)",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/pe-ai-law-records",
      "@type": "Provision",
      "id": "pe-ai-law-records",
      "regulation": "pe-ai-law",
      "authority": "pe-sgtd",
      "source_file": "data/instruments/pe-ai-law.md",
      "source_heading": "High-Risk System Records, Policies, and Staff Training",
      "obligations": [
        "record-keeping"
      ],
      "scope": "Private-sector developers and deployers of AI systems (Título VI Cap. II); the record duty of Art. 31.1 attaches only to high-risk systems, the policy and training duties of Arts. 31.2–31.3 to developers and deployers generally",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/pe-ai-law-human-oversight",
      "@type": "Provision",
      "id": "pe-ai-law-human-oversight",
      "regulation": "pe-ai-law",
      "authority": "pe-sgtd",
      "source_file": "data/instruments/pe-ai-law.md",
      "source_heading": "Human Oversight of High-Risk Decisions",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Private-sector developers and deployers of high-risk AI systems taking decisions with significant impact in health, education, justice, finance, and access to basic programmes and services (Art. 31.4); public entities carry the mirror duty under Art. 28.11",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/pe-ai-law-impact-assessment",
      "@type": "Provision",
      "id": "pe-ai-law-impact-assessment",
      "regulation": "pe-ai-law",
      "authority": "pe-sgtd",
      "source_file": "data/instruments/pe-ai-law.md",
      "source_heading": "High-Risk Impact Assessment (Voluntary, Documented)",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Private-sector developers and deployers of high-risk AI systems (Título VI Cap. II); for public administration entities the equivalent assessment under Art. 30 is mandatory",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/uz-ai-amendments-human-oversight",
      "@type": "Provision",
      "id": "uz-ai-amendments-human-oversight",
      "regulation": "uz-ai-amendments",
      "authority": "uz-mdt",
      "source_file": "data/instruments/uz-ai-amendments.md",
      "source_heading": "Human Oversight of Legally Significant Decisions",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Anyone making legally significant decisions affecting human rights and freedoms using conclusions of AI-based information resources or information systems",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/uz-ai-amendments-data-liability",
      "@type": "Provision",
      "id": "uz-ai-amendments-data-liability",
      "regulation": "uz-ai-amendments",
      "authority": "uz-mdt",
      "source_file": "data/instruments/uz-ai-amendments.md",
      "source_heading": "Administrative Liability for Unlawful AI Personal Data Processing",
      "obligations": [
        "data-governance"
      ],
      "scope": "Any person unlawfully processing personal data using AI technologies, or disseminating such data via mass media, telecommunications networks, or the Internet",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/vermont-act156-licensed-delivery",
      "@type": "Provision",
      "id": "vermont-act156-licensed-delivery",
      "regulation": "vermont-act156",
      "authority": "vermont-ag",
      "source_file": "data/instruments/vermont-act156.md",
      "source_heading": "Licensed Professional Delivery of AI Mental Health Services",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Any corporation or entity that provides, advertises, or otherwise offers mental health services to the public, \"including through the use of artificial intelligence\" (§ 7115(b)). \"Mental health services\" means services to diagnose, treat, or address mental or behavioral health through therapeutic communications and therapeutic decisions (§ 7115(a)(3)); therapeutic communication is defined broadly to include direct client interactions, clinical guidance, clinical support \"including reassurance or empathy in response to emotional or psychological distress\", treatment-plan collaboration, and growth-oriented feedback (§ 7115(a)(4)). Exempt: services provided as part of an approved IRB or privacy-board study under 45 C.F.R. § 164.512(i)(1)(i)(A)-(B) (§ 7115(b)(2))",
      "roles": [
        "deployer",
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/vermont-act156-review-approval",
      "@type": "Provision",
      "id": "vermont-act156-review-approval",
      "regulation": "vermont-act156",
      "authority": "vermont-ag",
      "source_file": "data/instruments/vermont-act156.md",
      "source_heading": "Professional Review and Approval of AI Tools",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Mental health professionals operating within their scope of practice who use artificial intelligence tools in delivering mental health services, and the vendors whose tools they deploy — the safe harbor is conditioned on the tool being HIPAA-compliant and on the professional reviewing and approving any mental health services (§ 7115(d))",
      "roles": [
        "healthcare-provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/utah-sb149-general-disclosure",
      "@type": "Provision",
      "id": "utah-sb149-general-disclosure",
      "regulation": "utah-sb149",
      "authority": "utah-dcp",
      "source_file": "data/instruments/utah-sb149.md",
      "source_heading": "General GenAI Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "suppliers in consumer transactions",
      "roles": [
        "supplier"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/utah-sb149-high-risk-disclosure",
      "@type": "Provision",
      "id": "utah-sb149-high-risk-disclosure",
      "regulation": "utah-sb149",
      "authority": "utah-dcp",
      "source_file": "data/instruments/utah-sb149.md",
      "source_heading": "High-Risk GenAI Disclosure in Regulated Occupations",
      "obligations": [
        "transparency"
      ],
      "scope": "regulated-occupation providers",
      "roles": [
        "regulated-professional"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/utah-sb149-chatbot-disclosure",
      "@type": "Provision",
      "id": "utah-sb149-chatbot-disclosure",
      "regulation": "utah-sb149",
      "authority": "utah-dcp",
      "source_file": "data/instruments/utah-sb149.md",
      "source_heading": "Mental Health Chatbot Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "mental health chatbot suppliers",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/utah-sb149-chatbot-data-protection",
      "@type": "Provision",
      "id": "utah-sb149-chatbot-data-protection",
      "regulation": "utah-sb149",
      "authority": "utah-dcp",
      "source_file": "data/instruments/utah-sb149.md",
      "source_heading": "Mental Health Chatbot Data Protection",
      "obligations": [
        "data-governance"
      ],
      "scope": "mental health chatbot suppliers",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/utah-sb149-chatbot-safety-policy",
      "@type": "Provision",
      "id": "utah-sb149-chatbot-safety-policy",
      "regulation": "utah-sb149",
      "authority": "utah-dcp",
      "source_file": "data/instruments/utah-sb149.md",
      "source_heading": "Mental Health Chatbot Safety Policy",
      "obligations": [
        "record-keeping",
        "risk-assessment",
        "human-oversight"
      ],
      "scope": "mental health chatbot suppliers",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/utah-sb149-personal-identity",
      "@type": "Provision",
      "id": "utah-sb149-personal-identity",
      "regulation": "utah-sb149",
      "authority": "utah-dcp",
      "source_file": "data/instruments/utah-sb149.md",
      "source_heading": "AI-Generated Personal Identity Abuse",
      "obligations": [
        "transparency"
      ],
      "scope": "any person using or distributing tools for personal-identity creation",
      "roles": [
        "deployer",
        "distributor"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/utah-sb149-learning-lab-agreements",
      "@type": "Provision",
      "id": "utah-sb149-learning-lab-agreements",
      "regulation": "utah-sb149",
      "authority": "utah-dcp",
      "source_file": "data/instruments/utah-sb149.md",
      "source_heading": "Regulatory Mitigation and Joint Interpretation Agreements",
      "obligations": [
        "record-keeping"
      ],
      "scope": "Learning Lab participants",
      "roles": [
        "program-participant"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/utah-sb149-ai-liability",
      "@type": "Provision",
      "id": "utah-sb149-ai-liability",
      "regulation": "utah-sb149",
      "authority": "utah-dcp",
      "source_file": "data/instruments/utah-sb149.md",
      "source_heading": "Liability for AI-Assisted Violations",
      "obligations": [
        "record-keeping"
      ],
      "scope": "any principal using or prompting GenAI",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/eu-ai-act-literacy",
      "@type": "Provision",
      "id": "eu-ai-act-literacy",
      "regulation": "eu-ai-act",
      "authority": "european-commission",
      "source_file": "data/instruments/eu-ai-act.md",
      "source_heading": "AI Literacy (Article 4)",
      "obligations": [
        "ai-literacy"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/eu-ai-act-human-oversight",
      "@type": "Provision",
      "id": "eu-ai-act-human-oversight",
      "regulation": "eu-ai-act",
      "authority": "european-commission",
      "source_file": "data/instruments/eu-ai-act.md",
      "source_heading": "Human Oversight (Article 14)",
      "obligations": [
        "human-oversight"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/eu-ai-act-transparency",
      "@type": "Provision",
      "id": "eu-ai-act-transparency",
      "regulation": "eu-ai-act",
      "authority": "european-commission",
      "source_file": "data/instruments/eu-ai-act.md",
      "source_heading": "Transparency Disclosure (Article 50)",
      "obligations": [
        "transparency"
      ],
      "scope": "Providers of systems intended to interact directly with natural persons and of systems generating synthetic audio, image, video or text (Article 50(1)-(2)); deployers of emotion recognition or biometric categorisation systems and of systems producing deepfakes (Article 50(3)-(4))",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/eu-ai-act-high-risk-transparency",
      "@type": "Provision",
      "id": "eu-ai-act-high-risk-transparency",
      "regulation": "eu-ai-act",
      "authority": "european-commission",
      "source_file": "data/instruments/eu-ai-act.md",
      "source_heading": "High-Risk Transparency and Instructions for Use (Article 13)",
      "obligations": [
        "transparency"
      ],
      "scope": "Providers of high-risk AI systems. The duty runs to the instructions for use supplied to deployers, not to end users",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/eu-ai-act-risk-management",
      "@type": "Provision",
      "id": "eu-ai-act-risk-management",
      "regulation": "eu-ai-act",
      "authority": "european-commission",
      "source_file": "data/instruments/eu-ai-act.md",
      "source_heading": "Risk Management (Article 9)",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "providers of high-risk AI systems",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/eu-ai-act-conformity",
      "@type": "Provision",
      "id": "eu-ai-act-conformity",
      "regulation": "eu-ai-act",
      "authority": "european-commission",
      "source_file": "data/instruments/eu-ai-act.md",
      "source_heading": "Conformity Assessment",
      "obligations": [
        "conformity-assessment"
      ],
      "scope": "Providers of high-risk AI systems under Article 6 before placing them on the EU market or putting them into service; Annex III and Annex I systems follow their respective phase-in dates",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/nist-ai-rmf-risk",
      "@type": "Provision",
      "id": "nist-ai-rmf-risk",
      "regulation": "nist-ai-rmf",
      "authority": "nist",
      "source_file": "data/instruments/nist-ai-rmf.md",
      "source_heading": "Risk Management Framework",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/eu-ai-act-record-keeping",
      "@type": "Provision",
      "id": "eu-ai-act-record-keeping",
      "regulation": "eu-ai-act",
      "authority": "european-commission",
      "source_file": "data/instruments/eu-ai-act.md",
      "source_heading": "Record-Keeping & Automatic Logging (Article 12)",
      "obligations": [
        "record-keeping"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/eu-ai-act-fria",
      "@type": "Provision",
      "id": "eu-ai-act-fria",
      "regulation": "eu-ai-act",
      "authority": "european-commission",
      "source_file": "data/instruments/eu-ai-act.md",
      "source_heading": "Fundamental Rights Impact Assessment (Article 27)",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Deployers that are bodies governed by public law or private entities providing public services, and any deployer of Annex III point 5(b)-(c) systems (creditworthiness assessment, life and health insurance risk assessment and pricing); Annex III point 2 (critical infrastructure) systems are excluded",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/eu-ai-act-bias-data-basis",
      "@type": "Provision",
      "id": "eu-ai-act-bias-data-basis",
      "regulation": "eu-ai-act",
      "authority": "european-commission",
      "source_file": "data/instruments/eu-ai-act.md",
      "source_heading": "Bias Detection Data Basis (Article 4a)",
      "obligations": [
        "bias-prevention"
      ],
      "scope": "Providers of high-risk AI systems (Article 4a(1)); providers and deployers of other AI systems and models, and deployers of high-risk AI systems (Article 4a(2))",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/eu-dora-ict-risk",
      "@type": "Provision",
      "id": "eu-dora-ict-risk",
      "regulation": "eu-dora",
      "authority": "eu-esas",
      "source_file": "data/instruments/eu-dora.md",
      "source_heading": "ICT Risk Management",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "financial entities listed in Article 2(1)(a)-(t) — credit institutions, payment and e-money institutions, investment firms, crypto-asset service providers, CSDs, CCPs, trading venues, trade repositories, AIFMs, management companies, insurance and reinsurance undertakings, IORPs, credit rating agencies and others",
      "roles": [
        "financial-entity"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/eu-dora-incident-reporting",
      "@type": "Provision",
      "id": "eu-dora-incident-reporting",
      "regulation": "eu-dora",
      "authority": "eu-esas",
      "source_file": "data/instruments/eu-dora.md",
      "source_heading": "ICT Incident Reporting",
      "obligations": [
        "incident-reporting"
      ],
      "scope": "financial entities listed in Article 2(1)(a)-(t) — credit institutions, payment and e-money institutions, investment firms, crypto-asset service providers, CSDs, CCPs, trading venues, trade repositories, AIFMs, management companies, insurance and reinsurance undertakings, IORPs, credit rating agencies and others",
      "roles": [
        "financial-entity"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/eu-dora-resilience-testing",
      "@type": "Provision",
      "id": "eu-dora-resilience-testing",
      "regulation": "eu-dora",
      "authority": "eu-esas",
      "source_file": "data/instruments/eu-dora.md",
      "source_heading": "Digital Operational Resilience Testing",
      "obligations": [
        "record-keeping"
      ],
      "scope": "financial entities listed in Article 2(1)(a)-(t) — credit institutions, payment and e-money institutions, investment firms, crypto-asset service providers, CSDs, CCPs, trading venues, trade repositories, AIFMs, management companies, insurance and reinsurance undertakings, IORPs, credit rating agencies and others",
      "roles": [
        "financial-entity"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/eu-dora-third-party-risk",
      "@type": "Provision",
      "id": "eu-dora-third-party-risk",
      "regulation": "eu-dora",
      "authority": "eu-esas",
      "source_file": "data/instruments/eu-dora.md",
      "source_heading": "Third-Party ICT Risk Management",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "financial entities listed in Article 2(1)(a)-(t) — credit institutions, payment and e-money institutions, investment firms, crypto-asset service providers, CSDs, CCPs, trading venues, trade repositories, AIFMs, management companies, insurance and reinsurance undertakings, IORPs, credit rating agencies and others",
      "roles": [
        "financial-entity"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/uk-dpa-2018-adm-human-oversight",
      "@type": "Provision",
      "id": "uk-dpa-2018-adm-human-oversight",
      "regulation": "uk-dpa-2018-adm",
      "authority": "uk-ico",
      "source_file": "data/instruments/uk-dpa-2018-adm.md",
      "source_heading": "Automated Decision-Making Rights (Articles 22A-22D UK GDPR)",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Controllers taking significant decisions based solely on automated processing of personal data under Articles 22A-22C UK GDPR",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/uk-dpa-2018-adm-transparency",
      "@type": "Provision",
      "id": "uk-dpa-2018-adm-transparency",
      "regulation": "uk-dpa-2018-adm",
      "authority": "uk-ico",
      "source_file": "data/instruments/uk-dpa-2018-adm.md",
      "source_heading": "Transparency in Automated Processing",
      "obligations": [
        "transparency"
      ],
      "scope": "Controllers collecting personal data from a data subject or another source where processing includes automated decision-making subject to Article 22C safeguards (Articles 13-14 UK GDPR)",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/uk-osa-transparency",
      "@type": "Provision",
      "id": "uk-osa-transparency",
      "regulation": "uk-online-safety-act",
      "authority": "uk-ofcom",
      "source_file": "data/instruments/uk-online-safety-act.md",
      "source_heading": "AI-Generated Content Duties",
      "obligations": [
        "transparency"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/uk-osa-risk-assessment",
      "@type": "Provision",
      "id": "uk-osa-risk-assessment",
      "regulation": "uk-online-safety-act",
      "authority": "uk-ofcom",
      "source_file": "data/instruments/uk-online-safety-act.md",
      "source_heading": "Risk Assessment for AI Systems",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "providers of regulated user-to-user services",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/uk-osa-risk-assessment-search",
      "@type": "Provision",
      "id": "uk-osa-risk-assessment-search",
      "regulation": "uk-online-safety-act",
      "authority": "uk-ofcom",
      "source_file": "data/instruments/uk-online-safety-act.md",
      "source_heading": "Risk Assessment for Search Services",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "providers of regulated search services, and providers of combined services in respect of the search engine",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/colorado-cpa-rules-human-oversight",
      "@type": "Provision",
      "id": "colorado-cpa-rules-human-oversight",
      "regulation": "colorado-cpa-rules",
      "authority": "colorado-ag",
      "source_file": "data/instruments/colorado-cpa-rules.md",
      "source_heading": "Automated Processing Definitions (Rule 2.02)",
      "obligations": [
        "human-oversight"
      ],
      "scope": "controllers",
      "roles": [
        "controller"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/colorado-cpa-rules-risk-assessment",
      "@type": "Provision",
      "id": "colorado-cpa-rules-risk-assessment",
      "regulation": "colorado-cpa-rules",
      "authority": "colorado-ag",
      "source_file": "data/instruments/colorado-cpa-rules.md",
      "source_heading": "Data Protection Assessments for Profiling (Rule 9.06(A)-(B))",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "controllers",
      "roles": [
        "controller"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/cn-algorithm-recommendation-transparency",
      "@type": "Provision",
      "id": "cn-algorithm-recommendation-transparency",
      "regulation": "cn-algorithm-recommendation",
      "authority": "cn-cac",
      "source_file": "data/instruments/cn-algorithm-recommendation.md",
      "source_heading": "Algorithm Filing and Registration",
      "obligations": [
        "transparency"
      ],
      "scope": "providers with public opinion properties or social mobilization capabilities",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/cn-algorithm-recommendation-risk",
      "@type": "Provision",
      "id": "cn-algorithm-recommendation-risk",
      "regulation": "cn-algorithm-recommendation",
      "authority": "cn-cac",
      "source_file": "data/instruments/cn-algorithm-recommendation.md",
      "source_heading": "Algorithmic Risk Assessment",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Providers using algorithmic recommendation technology to offer internet information services within China (Articles 2-3)",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/cn-deep-synthesis-transparency",
      "@type": "Provision",
      "id": "cn-deep-synthesis-transparency",
      "regulation": "cn-deep-synthesis",
      "authority": "cn-cac",
      "source_file": "data/instruments/cn-deep-synthesis.md",
      "source_heading": "Deep Synthesis Content Labeling",
      "obligations": [
        "transparency"
      ],
      "scope": "Deep synthesis service providers and technical supporters providing internet information services within China (Articles 2-3)",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/cn-deep-synthesis-record-keeping",
      "@type": "Provision",
      "id": "cn-deep-synthesis-record-keeping",
      "regulation": "cn-deep-synthesis",
      "authority": "cn-cac",
      "source_file": "data/instruments/cn-deep-synthesis.md",
      "source_heading": "Deep Synthesis Record-Keeping",
      "obligations": [
        "record-keeping"
      ],
      "scope": "Deep synthesis service providers and technical supporters providing internet information services within China (Articles 2-3)",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/cn-generative-ai-transparency",
      "@type": "Provision",
      "id": "cn-generative-ai-transparency",
      "regulation": "cn-generative-ai",
      "authority": "cn-cac",
      "source_file": "data/instruments/cn-generative-ai.md",
      "source_heading": "Generative AI Content Compliance",
      "obligations": [
        "transparency"
      ],
      "scope": "Providers offering generative AI services to the public within China; research, development, and internal non-public uses are outside Article 2",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/cn-generative-ai-risk",
      "@type": "Provision",
      "id": "cn-generative-ai-risk",
      "regulation": "cn-generative-ai",
      "authority": "cn-cac",
      "source_file": "data/instruments/cn-generative-ai.md",
      "source_heading": "Generative AI Risk Assessment",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Providers offering generative AI services to the public within China; research, development, and internal non-public uses are outside Article 2",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/cn-generative-ai-incident",
      "@type": "Provision",
      "id": "cn-generative-ai-incident",
      "regulation": "cn-generative-ai",
      "authority": "cn-cac",
      "source_file": "data/instruments/cn-generative-ai.md",
      "source_heading": "Generative AI Incident Response",
      "obligations": [
        "incident-reporting"
      ],
      "scope": "Providers offering generative AI services to the public within China that discover illegal content or unlawful user activity (Articles 2, 14)",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/kr-ai-basic-act-risk",
      "@type": "Provision",
      "id": "kr-ai-basic-act-risk",
      "regulation": "kr-ai-basic-act",
      "authority": "kr-msit",
      "source_file": "data/instruments/kr-ai-basic-act.md",
      "source_heading": "High-Impact AI Risk Management",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/kr-ai-basic-act-transparency",
      "@type": "Provision",
      "id": "kr-ai-basic-act-transparency",
      "regulation": "kr-ai-basic-act",
      "authority": "kr-msit",
      "source_file": "data/instruments/kr-ai-basic-act.md",
      "source_heading": "AI Transparency and Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/kr-ai-basic-act-oversight",
      "@type": "Provision",
      "id": "kr-ai-basic-act-oversight",
      "regulation": "kr-ai-basic-act",
      "authority": "kr-msit",
      "source_file": "data/instruments/kr-ai-basic-act.md",
      "source_heading": "AI Governance and Human Oversight",
      "obligations": [
        "human-oversight"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/vn-ai-law-risk",
      "@type": "Provision",
      "id": "vn-ai-law-risk",
      "regulation": "vn-ai-law",
      "authority": "vn-most",
      "source_file": "data/instruments/vn-ai-law.md",
      "source_heading": "Risk-Based AI Classification",
      "obligations": [
        "risk-assessment",
        "conformity-assessment"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/vn-ai-law-oversight",
      "@type": "Provision",
      "id": "vn-ai-law-oversight",
      "regulation": "vn-ai-law",
      "authority": "vn-most",
      "source_file": "data/instruments/vn-ai-law.md",
      "source_heading": "Human Oversight and Ethical Principles",
      "obligations": [
        "human-oversight"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/vn-ai-law-transparency",
      "@type": "Provision",
      "id": "vn-ai-law-transparency",
      "regulation": "vn-ai-law",
      "authority": "vn-most",
      "source_file": "data/instruments/vn-ai-law.md",
      "source_heading": "AI Content Labeling and Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "Providers of AI systems in Vietnam and foreign providers whose AI systems are used in Vietnam; content-marking duties apply to generated audio, image, and video, while high-risk conformity disclosures apply to providers of high-risk systems (Arts. 2, 11, 13-14)",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/sg-ai-governance-oversight",
      "@type": "Provision",
      "id": "sg-ai-governance-oversight",
      "regulation": "sg-ai-governance-framework",
      "authority": "sg-imda",
      "source_file": "data/instruments/sg-ai-governance-framework.md",
      "source_heading": "AI Governance and Human Oversight",
      "obligations": [
        "human-oversight"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/sg-ai-governance-explainability",
      "@type": "Provision",
      "id": "sg-ai-governance-explainability",
      "regulation": "sg-ai-governance-framework",
      "authority": "sg-imda",
      "source_file": "data/instruments/sg-ai-governance-framework.md",
      "source_heading": "Explainability and Transparency",
      "obligations": [
        "explainability"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/sg-ai-governance-risk",
      "@type": "Provision",
      "id": "sg-ai-governance-risk",
      "regulation": "sg-ai-governance-framework",
      "authority": "sg-imda",
      "source_file": "data/instruments/sg-ai-governance-framework.md",
      "source_heading": "AI Risk Management and Third-Party Oversight",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/jp-ai-promotion-act-transparency",
      "@type": "Provision",
      "id": "jp-ai-promotion-act-transparency",
      "regulation": "jp-ai-promotion-act",
      "authority": "jp-cas",
      "source_file": "data/instruments/jp-ai-promotion-act.md",
      "source_heading": "AI Transparency and Cooperation",
      "obligations": [
        "transparency"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/jp-ai-promotion-act-risk",
      "@type": "Provision",
      "id": "jp-ai-promotion-act-risk",
      "regulation": "jp-ai-promotion-act",
      "authority": "jp-cas",
      "source_file": "data/instruments/jp-ai-promotion-act.md",
      "source_heading": "AI Risk Governance",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/au-privacy-act-adm-transparency",
      "@type": "Provision",
      "id": "au-privacy-act-adm-transparency",
      "regulation": "au-privacy-act-adm",
      "authority": "au-oaic",
      "source_file": "data/instruments/au-privacy-act-adm.md",
      "source_heading": "Automated Decision-Making Transparency (APP 1.7/1.8)",
      "obligations": [
        "transparency"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/au-privacy-act-adm-data-governance",
      "@type": "Provision",
      "id": "au-privacy-act-adm-data-governance",
      "regulation": "au-privacy-act-adm",
      "authority": "au-oaic",
      "source_file": "data/instruments/au-privacy-act-adm.md",
      "source_heading": "Data Minimisation for AI Systems",
      "obligations": [
        "data-governance"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/au-privacy-act-adm-risk",
      "@type": "Provision",
      "id": "au-privacy-act-adm-risk",
      "regulation": "au-privacy-act-adm",
      "authority": "au-oaic",
      "source_file": "data/instruments/au-privacy-act-adm.md",
      "source_heading": "Privacy Impact Assessments for AI",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/tw-ai-basic-act-risk",
      "@type": "Provision",
      "id": "tw-ai-basic-act-risk",
      "regulation": "tw-ai-basic-act",
      "authority": "tw-nstc",
      "source_file": "data/instruments/tw-ai-basic-act.md",
      "source_heading": "Government AI Governance Framework",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Government bodies. The Ministry of Digital Affairs must promote an internationally interoperable AI risk taxonomy and assessment framework (Art. 16(1)); sectoral competent authorities must then establish risk-based management regulations and assist their industries in producing guidelines and codes of conduct (Art. 16(2)); the government must conduct risk assessments before using AI to perform duties or provide services (Art. 19). The Act imposes no direct compliance duty on private-sector developers or deployers — obligations reach industry only once a sectoral regulator issues rules under Article 16(2)",
      "roles": [
        "government"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/br-ai-bill-risk",
      "@type": "Provision",
      "id": "br-ai-bill-risk",
      "regulation": "br-ai-bill",
      "authority": "br-anpd",
      "source_file": "data/instruments/br-ai-bill.md",
      "source_heading": "Risk-Based AI Classification",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/br-ai-bill-transparency",
      "@type": "Provision",
      "id": "br-ai-bill-transparency",
      "regulation": "br-ai-bill",
      "authority": "br-anpd",
      "source_file": "data/instruments/br-ai-bill.md",
      "source_heading": "Transparency and Explainability",
      "obligations": [
        "transparency"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/br-ai-bill-oversight",
      "@type": "Provision",
      "id": "br-ai-bill-oversight",
      "regulation": "br-ai-bill",
      "authority": "br-anpd",
      "source_file": "data/instruments/br-ai-bill.md",
      "source_heading": "Human Oversight and Contestation",
      "obligations": [
        "human-oversight"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/oecd-ai-principles-transparency",
      "@type": "Provision",
      "id": "oecd-ai-principles-transparency",
      "regulation": "oecd-ai-principles",
      "authority": "oecd-council",
      "source_file": "data/instruments/oecd-ai-principles.md",
      "source_heading": "Transparency and Explainability (Principle 1.3)",
      "obligations": [
        "transparency"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/oecd-ai-principles-fairness",
      "@type": "Provision",
      "id": "oecd-ai-principles-fairness",
      "regulation": "oecd-ai-principles",
      "authority": "oecd-council",
      "source_file": "data/instruments/oecd-ai-principles.md",
      "source_heading": "Human-Centred Values and Fairness (Principle 1.2)",
      "obligations": [
        "bias-prevention"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/oecd-ai-principles-risk",
      "@type": "Provision",
      "id": "oecd-ai-principles-risk",
      "regulation": "oecd-ai-principles",
      "authority": "oecd-council",
      "source_file": "data/instruments/oecd-ai-principles.md",
      "source_heading": "Robustness, Security and Safety (Principle 1.4)",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/oecd-ai-principles-accountability",
      "@type": "Provision",
      "id": "oecd-ai-principles-accountability",
      "regulation": "oecd-ai-principles",
      "authority": "oecd-council",
      "source_file": "data/instruments/oecd-ai-principles.md",
      "source_heading": "Accountability (Principle 1.5)",
      "obligations": [
        "human-oversight"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/iso-42001-risk",
      "@type": "Provision",
      "id": "iso-42001-risk",
      "regulation": "iso-42001",
      "authority": "iso",
      "source_file": "data/instruments/iso-42001.md",
      "source_heading": "AI Risk Management System",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/iso-42001-data-governance",
      "@type": "Provision",
      "id": "iso-42001-data-governance",
      "regulation": "iso-42001",
      "authority": "iso",
      "source_file": "data/instruments/iso-42001.md",
      "source_heading": "AI Data Governance",
      "obligations": [
        "data-governance"
      ],
      "scope": "providers",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/iso-42001-record-keeping",
      "@type": "Provision",
      "id": "iso-42001-record-keeping",
      "regulation": "iso-42001",
      "authority": "iso",
      "source_file": "data/instruments/iso-42001.md",
      "source_heading": "AI Documentation and Record-Keeping",
      "obligations": [
        "record-keeping"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/g7-hiroshima-risk-management",
      "@type": "Provision",
      "id": "g7-hiroshima-risk-management",
      "regulation": "g7-hiroshima-ai-process",
      "authority": "g7-leaders",
      "source_file": "data/instruments/g7-hiroshima-ai-process.md",
      "source_heading": "Risk Management Lifecycle (Action 1)",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Organizations developing the most advanced AI systems, including the most advanced foundation models and generative AI systems, under the voluntary International Code of Conduct",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/g7-hiroshima-incident-management",
      "@type": "Provision",
      "id": "g7-hiroshima-incident-management",
      "regulation": "g7-hiroshima-ai-process",
      "authority": "g7-leaders",
      "source_file": "data/instruments/g7-hiroshima-ai-process.md",
      "source_heading": "Incident and Vulnerability Management (Action 2)",
      "obligations": [
        "incident-reporting"
      ],
      "scope": "Organizations developing the most advanced AI systems, including the most advanced foundation models and generative AI systems, under the voluntary International Code of Conduct",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/g7-hiroshima-transparency",
      "@type": "Provision",
      "id": "g7-hiroshima-transparency",
      "regulation": "g7-hiroshima-ai-process",
      "authority": "g7-leaders",
      "source_file": "data/instruments/g7-hiroshima-ai-process.md",
      "source_heading": "Transparency Reporting (Actions 3–4)",
      "obligations": [
        "transparency"
      ],
      "scope": "Organizations developing the most advanced AI systems, including the most advanced foundation models and generative AI systems, under the voluntary International Code of Conduct",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/g7-hiroshima-governance",
      "@type": "Provision",
      "id": "g7-hiroshima-governance",
      "regulation": "g7-hiroshima-ai-process",
      "authority": "g7-leaders",
      "source_file": "data/instruments/g7-hiroshima-ai-process.md",
      "source_heading": "AI Governance and Accountability (Action 5)",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Organizations developing the most advanced AI systems, including the most advanced foundation models and generative AI systems, under the voluntary International Code of Conduct",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/g7-hiroshima-content-auth",
      "@type": "Provision",
      "id": "g7-hiroshima-content-auth",
      "regulation": "g7-hiroshima-ai-process",
      "authority": "g7-leaders",
      "source_file": "data/instruments/g7-hiroshima-ai-process.md",
      "source_heading": "Content Authentication and Provenance (Action 7)",
      "obligations": [
        "record-keeping"
      ],
      "scope": "Organizations developing the most advanced AI systems, including the most advanced foundation models and generative AI systems, under the voluntary International Code of Conduct",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/g7-hiroshima-security",
      "@type": "Provision",
      "id": "g7-hiroshima-security",
      "regulation": "g7-hiroshima-ai-process",
      "authority": "g7-leaders",
      "source_file": "data/instruments/g7-hiroshima-ai-process.md",
      "source_heading": "Security Controls (Action 6)",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Organizations developing the most advanced AI systems, including the most advanced foundation models and generative AI systems, under the voluntary International Code of Conduct",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/coe-cets-225-transparency",
      "@type": "Provision",
      "id": "coe-cets-225-transparency",
      "regulation": "coe-cets-225",
      "authority": "coe-secretary-general",
      "source_file": "data/instruments/coe-cets-225.md",
      "source_heading": "Transparency and Notification (Articles 8 and 15)",
      "obligations": [
        "transparency"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/coe-cets-225-risk-assessment",
      "@type": "Provision",
      "id": "coe-cets-225-risk-assessment",
      "regulation": "coe-cets-225",
      "authority": "coe-secretary-general",
      "source_file": "data/instruments/coe-cets-225.md",
      "source_heading": "Risk and Impact Management (Article 16)",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/coe-cets-225-record-keeping",
      "@type": "Provision",
      "id": "coe-cets-225-record-keeping",
      "regulation": "coe-cets-225",
      "authority": "coe-secretary-general",
      "source_file": "data/instruments/coe-cets-225.md",
      "source_heading": "Documentation and Record-Keeping (Articles 14–16)",
      "obligations": [
        "record-keeping"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/coe-cets-225-human-oversight",
      "@type": "Provision",
      "id": "coe-cets-225-human-oversight",
      "regulation": "coe-cets-225",
      "authority": "coe-secretary-general",
      "source_file": "data/instruments/coe-cets-225.md",
      "source_heading": "Remedies and Procedural Safeguards (Articles 14–15)",
      "obligations": [
        "human-oversight"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/coe-cets-225-bias-prevention",
      "@type": "Provision",
      "id": "coe-cets-225-bias-prevention",
      "regulation": "coe-cets-225",
      "authority": "coe-secretary-general",
      "source_file": "data/instruments/coe-cets-225.md",
      "source_heading": "Non-Discrimination and Equality (Human Rights Framework)",
      "obligations": [
        "bias-prevention"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/eu-gpai-cop-transparency",
      "@type": "Provision",
      "id": "eu-gpai-cop-transparency",
      "regulation": "eu-gpai-code-of-practice",
      "authority": "european-commission",
      "source_file": "data/instruments/eu-gpai-code-of-practice.md",
      "source_heading": "GPAI Transparency and Documentation (Article 53)",
      "obligations": [
        "transparency"
      ],
      "scope": "Providers placing general-purpose AI models on the EU market or putting them into service, regardless of where the provider is established (Article 53)",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/eu-gpai-cop-data-governance",
      "@type": "Provision",
      "id": "eu-gpai-cop-data-governance",
      "regulation": "eu-gpai-code-of-practice",
      "authority": "european-commission",
      "source_file": "data/instruments/eu-gpai-code-of-practice.md",
      "source_heading": "Training Data and Copyright Governance (Article 53)",
      "obligations": [
        "data-governance"
      ],
      "scope": "Providers placing general-purpose AI models on the EU market or putting them into service, regardless of where the provider is established (Article 53)",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/eu-gpai-cop-record-keeping",
      "@type": "Provision",
      "id": "eu-gpai-cop-record-keeping",
      "regulation": "eu-gpai-code-of-practice",
      "authority": "european-commission",
      "source_file": "data/instruments/eu-gpai-code-of-practice.md",
      "source_heading": "Technical Documentation and Record-Keeping (Article 53)",
      "obligations": [
        "record-keeping"
      ],
      "scope": "Providers placing general-purpose AI models on the EU market or putting them into service, regardless of where the provider is established (Article 53)",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/eu-gpai-cop-risk-assessment",
      "@type": "Provision",
      "id": "eu-gpai-cop-risk-assessment",
      "regulation": "eu-gpai-code-of-practice",
      "authority": "european-commission",
      "source_file": "data/instruments/eu-gpai-code-of-practice.md",
      "source_heading": "Systemic Risk Assessment (Article 55)",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Providers of general-purpose AI models with systemic risk under Article 51, including models meeting the 10²⁵-FLOP presumption or designated by the Commission",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/iso-23894-risk-assessment",
      "@type": "Provision",
      "id": "iso-23894-risk-assessment",
      "regulation": "iso-23894",
      "authority": "iso",
      "source_file": "data/instruments/iso-23894.md",
      "source_heading": "AI-Specific Risk Management Guidance",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/iso-38507-human-oversight",
      "@type": "Provision",
      "id": "iso-38507-human-oversight",
      "regulation": "iso-38507",
      "authority": "iso",
      "source_file": "data/instruments/iso-38507.md",
      "source_heading": "Board-Level AI Governance",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Governing bodies of organizations that use AI, applying the voluntary ISO/IEC 38507 governance guidance",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/iso-42005-risk-assessment",
      "@type": "Provision",
      "id": "iso-42005-risk-assessment",
      "regulation": "iso-42005",
      "authority": "iso",
      "source_file": "data/instruments/iso-42005.md",
      "source_heading": "AI System Impact Assessment",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "providers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/california-ai-transparency-act-provenance",
      "@type": "Provision",
      "id": "california-ai-transparency-act-provenance",
      "regulation": "california-ai-transparency-act",
      "authority": "california-ag",
      "source_file": "data/instruments/california-ai-transparency-act.md",
      "source_heading": "GenAI Content Provenance Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "Covered providers — persons who create, code, or otherwise produce a GenAI system with over 1,000,000 monthly visitors or users that is publicly accessible within California (§ 22757.1(d)); the chapter does not apply to products or services providing exclusively non-user-generated video game, television, streaming, movie, or interactive experiences (§ 22757.5)",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/california-ai-transparency-act-platform",
      "@type": "Provision",
      "id": "california-ai-transparency-act-platform",
      "regulation": "california-ai-transparency-act",
      "authority": "california-ag",
      "source_file": "data/instruments/california-ai-transparency-act.md",
      "source_heading": "Platform Content Provenance Detection",
      "obligations": [
        "transparency"
      ],
      "scope": "Large online platforms — public-facing social media, file-sharing, mass messaging platforms, or stand-alone search engines distributing content users did not create, exceeding 2,000,000 unique monthly users over the preceding 12 months, excluding broadband internet access services and telecommunications services (§ 22757.1(h)); and GenAI hosting platforms — websites or applications making GenAI source code or model weights available for download to state residents (§ 22757.1(g))",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/california-ai-transparency-act-capture-device",
      "@type": "Provision",
      "id": "california-ai-transparency-act-capture-device",
      "regulation": "california-ai-transparency-act",
      "authority": "california-ag",
      "source_file": "data/instruments/california-ai-transparency-act.md",
      "source_heading": "Capture Device Latent Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "Capture device manufacturers, for any capture device first produced for sale in California on or after 2028-01-01; a capture device is any device that records photographs, audio, or video, including cameras, mobile phones with built-in cameras or microphones, and voice recorders (§ 22757.1(b)-(c))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/nyc-ll144-bias-audit",
      "@type": "Provision",
      "id": "nyc-ll144-bias-audit",
      "regulation": "nyc-ll144",
      "authority": "nyc-dcwp",
      "source_file": "data/instruments/nyc-ll144.md",
      "source_heading": "AEDT Bias Audit Requirement",
      "obligations": [
        "bias-prevention"
      ],
      "scope": "employers and employment agencies using AEDTs",
      "roles": [
        "employer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/nyc-ll144-candidate-notice",
      "@type": "Provision",
      "id": "nyc-ll144-candidate-notice",
      "regulation": "nyc-ll144",
      "authority": "nyc-dcwp",
      "source_file": "data/instruments/nyc-ll144.md",
      "source_heading": "AEDT Candidate Notice",
      "obligations": [
        "transparency"
      ],
      "scope": "employers and employment agencies using AEDTs",
      "roles": [
        "employer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/california-ads-employment-bias",
      "@type": "Provision",
      "id": "california-ads-employment-bias",
      "regulation": "california-ads-employment-regs",
      "authority": "california-crc",
      "source_file": "data/instruments/california-ads-employment-regs.md",
      "source_heading": "Prohibition on Discriminatory Automated Employment Decisions",
      "obligations": [
        "bias-prevention"
      ],
      "scope": "employers and other covered entities",
      "roles": [
        "employer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/california-ads-employment-records",
      "@type": "Provision",
      "id": "california-ads-employment-records",
      "regulation": "california-ads-employment-regs",
      "authority": "california-crc",
      "source_file": "data/instruments/california-ads-employment-regs.md",
      "source_heading": "Employment Records Retention for ADS",
      "obligations": [
        "record-keeping"
      ],
      "scope": "employers and other covered entities",
      "roles": [
        "employer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/nj-ai-employment-bias",
      "@type": "Provision",
      "id": "nj-ai-employment-bias",
      "regulation": "nj-ai-employment-rules",
      "authority": "nj-dcr",
      "source_file": "data/instruments/nj-ai-employment-rules.md",
      "source_heading": "Prohibition on AI Disparate Impact in Employment",
      "obligations": [
        "bias-prevention"
      ],
      "scope": "Employers and other entities subject to the New Jersey Law Against Discrimination that use automated or AI tools in hiring, promotion, termination, compensation, or other employment decisions",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/colorado-insurance-ai-bias",
      "@type": "Provision",
      "id": "colorado-insurance-ai-bias",
      "regulation": "colorado-insurance-ai",
      "authority": "colorado-doi",
      "source_file": "data/instruments/colorado-insurance-ai.md",
      "source_heading": "Prohibition on Algorithmic Discrimination in Insurance",
      "obligations": [
        "bias-prevention"
      ],
      "scope": "insurers using algorithms or predictive models",
      "roles": [
        "insurer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/colorado-insurance-ai-governance",
      "@type": "Provision",
      "id": "colorado-insurance-ai-governance",
      "regulation": "colorado-insurance-ai",
      "authority": "colorado-doi",
      "source_file": "data/instruments/colorado-insurance-ai.md",
      "source_heading": "Insurance Algorithm Governance Testing",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "insurers using algorithms or predictive models",
      "roles": [
        "insurer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/california-ab3030-disclosure",
      "@type": "Provision",
      "id": "california-ab3030-disclosure",
      "regulation": "california-ab3030",
      "authority": "california-dmhc",
      "source_file": "data/instruments/california-ab3030.md",
      "source_heading": "GenAI Patient Communication Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "health facilities, clinics, physician's offices, and group practices using GenAI for written or verbal patient clinical communications (excluding purely administrative communications)",
      "roles": [
        "healthcare-provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/california-ab3030-oversight",
      "@type": "Provision",
      "id": "california-ab3030-oversight",
      "regulation": "california-ab3030",
      "authority": "california-dmhc",
      "source_file": "data/instruments/california-ab3030.md",
      "source_heading": "Human Oversight of AI Healthcare Communications",
      "obligations": [
        "human-oversight"
      ],
      "scope": "health facilities, clinics, physician's offices, and group practices using GenAI for written or verbal patient clinical communications (excluding purely administrative communications)",
      "roles": [
        "healthcare-provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/us-eo-ai-preemption-task-force",
      "@type": "Provision",
      "id": "us-eo-ai-preemption-task-force",
      "regulation": "us-eo-ai-preemption",
      "authority": "us-eop",
      "source_file": "data/instruments/us-eo-ai-preemption.md",
      "source_heading": "DOJ AI Litigation Task Force",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "government (DOJ); states",
      "roles": [
        "government"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/us-eo-ai-preemption-evaluation",
      "@type": "Provision",
      "id": "us-eo-ai-preemption-evaluation",
      "regulation": "us-eo-ai-preemption",
      "authority": "us-eop",
      "source_file": "data/instruments/us-eo-ai-preemption.md",
      "source_heading": "Commerce Evaluation of State AI Laws",
      "obligations": [
        "transparency"
      ],
      "scope": "government (Commerce, FTC); states",
      "roles": [
        "government"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/us-eo-14319-procurement-transparency",
      "@type": "Provision",
      "id": "us-eo-14319-procurement-transparency",
      "regulation": "us-eo-14319",
      "authority": "us-eop",
      "source_file": "data/instruments/us-eo-14319.md",
      "source_heading": "LLM Procurement Documentation Requirements",
      "obligations": [
        "transparency"
      ],
      "scope": "Vendors supplying large language models to United States executive departments and agencies under covered federal procurements",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/us-eo-14319-data-governance",
      "@type": "Provision",
      "id": "us-eo-14319-data-governance",
      "regulation": "us-eo-14319",
      "authority": "us-eop",
      "source_file": "data/instruments/us-eo-14319.md",
      "source_heading": "Training Data and Risk Governance for Federal AI",
      "obligations": [
        "data-governance"
      ],
      "scope": "Vendors supplying large language models to United States executive departments and agencies under covered federal procurements",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/us-eo-14319-risk-assessment",
      "@type": "Provision",
      "id": "us-eo-14319-risk-assessment",
      "regulation": "us-eo-14319",
      "authority": "us-eop",
      "source_file": "data/instruments/us-eo-14319.md",
      "source_heading": "Unbiased AI Principles Compliance",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Vendors supplying large language models to United States executive departments and agencies under covered federal procurements",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/in-it-amendment-rules-2026-transparency",
      "@type": "Provision",
      "id": "in-it-amendment-rules-2026-transparency",
      "regulation": "in-it-amendment-rules-2026",
      "authority": "in-meity",
      "source_file": "data/instruments/in-it-amendment-rules-2026.md",
      "source_heading": "Synthetic Media Labeling and Provenance",
      "obligations": [
        "transparency"
      ],
      "scope": "intermediaries offering SGI-capable resources, SSMIs",
      "roles": [
        "intermediary"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/in-it-amendment-rules-2026-record-keeping",
      "@type": "Provision",
      "id": "in-it-amendment-rules-2026-record-keeping",
      "regulation": "in-it-amendment-rules-2026",
      "authority": "in-meity",
      "source_file": "data/instruments/in-it-amendment-rules-2026.md",
      "source_heading": "Synthetic Media Metadata Retention",
      "obligations": [
        "record-keeping"
      ],
      "scope": "intermediaries offering SGI-capable resources",
      "roles": [
        "intermediary"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/in-dpdp-data-governance",
      "@type": "Provision",
      "id": "in-dpdp-data-governance",
      "regulation": "in-dpdp",
      "authority": "in-dpb",
      "source_file": "data/instruments/in-dpdp.md",
      "source_heading": "Data Governance and Processing Obligations",
      "obligations": [
        "data-governance"
      ],
      "scope": "deployers, providers",
      "roles": [
        "deployer",
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/mx-lfpdppp-transparency",
      "@type": "Provision",
      "id": "mx-lfpdppp-transparency",
      "regulation": "mx-lfpdppp",
      "authority": "mx-sabg",
      "source_file": "data/instruments/mx-lfpdppp.md",
      "source_heading": "Algorithmic Transparency and Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "deployers, providers",
      "roles": [
        "deployer",
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/mx-lfpdppp-human-oversight",
      "@type": "Provision",
      "id": "mx-lfpdppp-human-oversight",
      "regulation": "mx-lfpdppp",
      "authority": "mx-sabg",
      "source_file": "data/instruments/mx-lfpdppp.md",
      "source_heading": "Human Oversight in Automated Decisions",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Controllers processing personal data through solely automated evaluation that produces unwanted legal effects or significantly affects a data subject's interests, rights, or freedoms (Art. 26(II))",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/qa-qcb-ai-guideline-risk-assessment",
      "@type": "Provision",
      "id": "qa-qcb-ai-guideline-risk-assessment",
      "regulation": "qa-qcb-ai-guideline",
      "authority": "qa-qcb",
      "source_file": "data/instruments/qa-qcb-ai-guideline.md",
      "source_heading": "AI Governance and Risk Management",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "deployers, providers",
      "roles": [
        "deployer",
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/qa-qcb-ai-guideline-transparency",
      "@type": "Provision",
      "id": "qa-qcb-ai-guideline-transparency",
      "regulation": "qa-qcb-ai-guideline",
      "authority": "qa-qcb",
      "source_file": "data/instruments/qa-qcb-ai-guideline.md",
      "source_heading": "AI Transparency and Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "All Qatar Central Bank-licensed financial institutions deploying AI systems, with heightened disclosure for high-risk systems",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/qa-qcb-ai-guideline-human-oversight",
      "@type": "Provision",
      "id": "qa-qcb-ai-guideline-human-oversight",
      "regulation": "qa-qcb-ai-guideline",
      "authority": "qa-qcb",
      "source_file": "data/instruments/qa-qcb-ai-guideline.md",
      "source_heading": "Human Oversight of AI Systems",
      "obligations": [
        "human-oversight"
      ],
      "scope": "All Qatar Central Bank-licensed financial institutions deploying AI systems, with mandatory intervention capability for high-risk systems",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/sv-ai-promotion-act-conformity-assessment",
      "@type": "Provision",
      "id": "sv-ai-promotion-act-conformity-assessment",
      "regulation": "sv-ai-promotion-act",
      "authority": "sv-ania",
      "source_file": "data/instruments/sv-ai-promotion-act.md",
      "source_heading": "ANIA Registration",
      "obligations": [
        "conformity-assessment"
      ],
      "scope": "Operators deploying AI for consequential decisions in health, finance or insurance, public-space biometrics, public powers or government services, employment, or education and professional licensing in El Salvador. Other entities may register voluntarily for Article 19 safeguards",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/sv-ai-promotion-act-risk-assessment",
      "@type": "Provision",
      "id": "sv-ai-promotion-act-risk-assessment",
      "regulation": "sv-ai-promotion-act",
      "authority": "sv-ania",
      "source_file": "data/instruments/sv-ai-promotion-act.md",
      "source_heading": "High-Risk AI Impact Assessment",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Operators of systems subject to mandatory registration under Resolution Article 11; the Law separately makes its risk-framework requirements mandatory for systems handling confidential, reserved, or personal data",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/sv-ai-promotion-act-transparency",
      "@type": "Provision",
      "id": "sv-ai-promotion-act-transparency",
      "regulation": "sv-ai-promotion-act",
      "authority": "sv-ania",
      "source_file": "data/instruments/sv-ai-promotion-act.md",
      "source_heading": "Algorithmic Transparency",
      "obligations": [
        "transparency"
      ],
      "scope": "Entities using AI without meaningful human review to make a decision that adversely affects a person's rights or economic situation in health, financial services, employment, education, government benefits and services, housing, or transport and mobility in El Salvador",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/kz-ai-law-risk-assessment",
      "@type": "Provision",
      "id": "kz-ai-law-risk-assessment",
      "regulation": "kz-ai-law",
      "authority": "kz-madd",
      "source_file": "data/instruments/kz-ai-law.md",
      "source_heading": "Risk-Based Classification and Management",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "developers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/kz-ai-law-transparency",
      "@type": "Provision",
      "id": "kz-ai-law-transparency",
      "regulation": "kz-ai-law",
      "authority": "kz-madd",
      "source_file": "data/instruments/kz-ai-law.md",
      "source_heading": "Synthetic Content Labeling and User Notification",
      "obligations": [
        "transparency"
      ],
      "scope": "developers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/kz-ai-law-bias-prevention",
      "@type": "Provision",
      "id": "kz-ai-law-bias-prevention",
      "regulation": "kz-ai-law",
      "authority": "kz-madd",
      "source_file": "data/instruments/kz-ai-law.md",
      "source_heading": "Prohibited AI Practices",
      "obligations": [
        "bias-prevention"
      ],
      "scope": "developers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/kz-ai-law-record-keeping",
      "@type": "Provision",
      "id": "kz-ai-law-record-keeping",
      "regulation": "kz-ai-law",
      "authority": "kz-madd",
      "source_file": "data/instruments/kz-ai-law.md",
      "source_heading": "Documentation and Record-Keeping",
      "obligations": [
        "record-keeping"
      ],
      "scope": "developers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/it-ai-law-human-oversight",
      "@type": "Provision",
      "id": "it-ai-law-human-oversight",
      "regulation": "it-ai-law",
      "authority": "it-agid",
      "source_file": "data/instruments/it-ai-law.md",
      "source_heading": "Healthcare AI — Human Oversight",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Healthcare professionals and health-sector organizations using AI for prevention, diagnosis, treatment, or therapeutic choice in Italy (Art. 7)",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/it-ai-law-transparency",
      "@type": "Provision",
      "id": "it-ai-law-transparency",
      "regulation": "it-ai-law",
      "authority": "it-agid",
      "source_file": "data/instruments/it-ai-law.md",
      "source_heading": "Employment AI — Transparency and Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "Employers and principals using AI in the workplace, plus providers of AI products or services accessed by children under 14 for the separate parental-consent requirement (Arts. 11, 6(4))",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/it-ai-law-bias-prevention",
      "@type": "Provision",
      "id": "it-ai-law-bias-prevention",
      "regulation": "it-ai-law",
      "authority": "it-agid",
      "source_file": "data/instruments/it-ai-law.md",
      "source_heading": "Employment AI — Non-Discrimination",
      "obligations": [
        "bias-prevention"
      ],
      "scope": "Employers and principals using AI to organize or manage employment relationships in Italy (Art. 11)",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/it-ai-law-data-governance",
      "@type": "Provision",
      "id": "it-ai-law-data-governance",
      "regulation": "it-ai-law",
      "authority": "it-agid",
      "source_file": "data/instruments/it-ai-law.md",
      "source_heading": "Health Data for AI Research",
      "obligations": [
        "data-governance"
      ],
      "scope": "developers, deployers",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/mt-ai-regulations-risk-assessment",
      "@type": "Provision",
      "id": "mt-ai-regulations-risk-assessment",
      "regulation": "mt-ai-regulations",
      "authority": "mt-mdia",
      "source_file": "data/instruments/mt-ai-regulations.md",
      "source_heading": "AI System Classification and Market Surveillance",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "deployers, providers",
      "roles": [
        "deployer",
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/mt-ai-regulations-human-oversight",
      "@type": "Provision",
      "id": "mt-ai-regulations-human-oversight",
      "regulation": "mt-ai-regulations",
      "authority": "mt-mdia",
      "source_file": "data/instruments/mt-ai-regulations.md",
      "source_heading": "High-Risk AI Oversight and Biometric Controls",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Deployers of Annex III high-risk AI systems in Malta and law-enforcement authorities using real-time or post-remote biometric identification in publicly accessible spaces",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/au-nsw-digital-work-systems-risk-assessment",
      "@type": "Provision",
      "id": "au-nsw-digital-work-systems-risk-assessment",
      "regulation": "au-nsw-digital-work-systems",
      "authority": "au-nsw-safework",
      "source_file": "data/instruments/au-nsw-digital-work-systems.md",
      "source_heading": "Digital Work System Risk Assessment",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Persons conducting a business or undertaking in New South Wales that use a digital work system for work allocation, monitoring, performance management, or similar workplace functions",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/au-nsw-digital-work-systems-transparency",
      "@type": "Provision",
      "id": "au-nsw-digital-work-systems-transparency",
      "regulation": "au-nsw-digital-work-systems",
      "authority": "au-nsw-safework",
      "source_file": "data/instruments/au-nsw-digital-work-systems.md",
      "source_heading": "Digital Work System Transparency and Inspection Access",
      "obligations": [
        "transparency"
      ],
      "scope": "Persons conducting a business or undertaking whose digital work system is relevant to a suspected WHS contravention and is accessed by a WHS entry permit holder under the guideline-gated inspection provisions",
      "roles": [
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/us-eo-ai-innovation-security-conformity-assessment",
      "@type": "Provision",
      "id": "us-eo-ai-innovation-security-conformity-assessment",
      "regulation": "us-eo-ai-innovation-security",
      "authority": "us-eop",
      "source_file": "data/instruments/us-eo-ai-innovation-security.md",
      "source_heading": "Voluntary Frontier Model Pre-Release Government Access",
      "obligations": [
        "conformity-assessment"
      ],
      "scope": "AI industry participants, open-source software partners, and critical-infrastructure operators participating in GOLD EAGLE vulnerability coordination",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/us-eo-ai-innovation-security-risk-assessment",
      "@type": "Provision",
      "id": "us-eo-ai-innovation-security-risk-assessment",
      "regulation": "us-eo-ai-innovation-security",
      "authority": "us-eop",
      "source_file": "data/instruments/us-eo-ai-innovation-security.md",
      "source_heading": "Covered Frontier Model Designation and Benchmarking",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "providers",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/us-eo-ai-innovation-security-incident-reporting",
      "@type": "Provision",
      "id": "us-eo-ai-innovation-security-incident-reporting",
      "regulation": "us-eo-ai-innovation-security",
      "authority": "us-eop",
      "source_file": "data/instruments/us-eo-ai-innovation-security.md",
      "source_heading": "AI Cybersecurity Clearinghouse for Vulnerability Coordination",
      "obligations": [
        "incident-reporting"
      ],
      "scope": "providers",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/nebraska-lb525-minor-disclosure",
      "@type": "Provision",
      "id": "nebraska-lb525-minor-disclosure",
      "regulation": "nebraska-lb525",
      "authority": "nebraska-ag",
      "source_file": "data/instruments/nebraska-lb525.md",
      "source_heading": "Minor Account Holder Artificiality Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "Operators — any natural person or legal entity that makes available a conversational artificial intelligence service to the public (sec. 13(6)(a)). A conversational AI service is a publicly accessible software application, web interface, or program that primarily simulates human conversation through textual, visual, or aural communication (sec. 13(2)(a)); excluded are developer- and researcher-facing tools, features inside a non-conversational product, narrow-and-discrete-topic outputs, business-facing commercial products, speaker and voice-assistant interfaces, internal business use, and pure customer-service bots (sec. 13(2)(b)(i)-(vii)). Mobile app stores and search engines are not operators merely for providing access (sec. 13(6)(b)). The duty runs to minor account holders — account holders the operator has actual knowledge or reasonable certainty are under 18 (sec. 13(4)-(5))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/nebraska-lb525-minor-safeguards",
      "@type": "Provision",
      "id": "nebraska-lb525-minor-safeguards",
      "regulation": "nebraska-lb525",
      "authority": "nebraska-ag",
      "source_file": "data/instruments/nebraska-lb525.md",
      "source_heading": "Minor Engagement, Sexual Content, and Anthropomorphism Safeguards",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Operators of conversational AI services (sec. 13(6)(a)) with respect to minor account holders (sec. 13(5)). \"Sexually explicit conduct\" and \"visual depiction\" carry their 18 U.S.C. 2256 meanings (sec. 13(8))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/nebraska-lb525-parental-controls",
      "@type": "Provision",
      "id": "nebraska-lb525-parental-controls",
      "regulation": "nebraska-lb525",
      "authority": "nebraska-ag",
      "source_file": "data/instruments/nebraska-lb525.md",
      "source_heading": "Minor Privacy and Parental Control Tools",
      "obligations": [
        "data-governance"
      ],
      "scope": "Operators of conversational AI services (sec. 13(6)(a)) with respect to minor account holders — account holders who have or open an account or profile to use the service and whom the operator has actual knowledge or reasonable certainty are under 18 (sec. 13(1), sec. 13(4)-(5)) — and their parents or guardians",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/nebraska-lb525-general-disclosure",
      "@type": "Provision",
      "id": "nebraska-lb525-general-disclosure",
      "regulation": "nebraska-lb525",
      "authority": "nebraska-ag",
      "source_file": "data/instruments/nebraska-lb525.md",
      "source_heading": "General Artificiality Disclosure and Mental Health Representation Bar",
      "obligations": [
        "transparency"
      ],
      "scope": "Operators of conversational AI services (sec. 13(6)(a)) as to all users, not only account holders. The disclosure duty is conditional: it applies where a reasonable person interacting with the service would be misled to believe the interaction is with a human (sec. 15)",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/nebraska-lb525-crisis-protocol",
      "@type": "Provision",
      "id": "nebraska-lb525-crisis-protocol",
      "regulation": "nebraska-lb525",
      "authority": "nebraska-ag",
      "source_file": "data/instruments/nebraska-lb525.md",
      "source_heading": "Suicide and Self-Harm Response Protocol",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Operators of conversational AI services (sec. 13(6)(a)), as to all users regardless of age or account status (sec. 16)",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/colorado-hb26-1263-age-estimation",
      "@type": "Provision",
      "id": "colorado-hb26-1263-age-estimation",
      "regulation": "colorado-hb26-1263",
      "authority": "colorado-ag",
      "source_file": "data/instruments/colorado-hb26-1263.md",
      "source_heading": "Age Estimation and Minor Identification",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Operators — a person, partnership, corporation, or entity that develops and makes publicly available a conversational AI service, or offers one to a consumer (§ 6-1-1701(15.5)(a)); mobile application stores and search engines are excluded when they merely provide access (§ 6-1-1701(15.5)(b)). A minor is a consumer under eighteen years old (§ 6-1-1701(15.3))",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/colorado-hb26-1263-minor-disclosure",
      "@type": "Provision",
      "id": "colorado-hb26-1263-minor-disclosure",
      "regulation": "colorado-hb26-1263",
      "authority": "colorado-ag",
      "source_file": "data/instruments/colorado-hb26-1263.md",
      "source_heading": "Minor Artificiality Disclosure and Cadence",
      "obligations": [
        "transparency"
      ],
      "scope": "Operators that know an account holder or user of a conversational AI service is a minor, i.e. a consumer under eighteen (§ 6-1-1701(15.3), § 6-1-1708(2))",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/colorado-hb26-1263-minor-engagement-limits",
      "@type": "Provision",
      "id": "colorado-hb26-1263-minor-engagement-limits",
      "regulation": "colorado-hb26-1263",
      "authority": "colorado-ag",
      "source_file": "data/instruments/colorado-hb26-1263.md",
      "source_heading": "Minor Engagement, Sexual Content, and Emotional-Dependence Limits",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Operators that know an account holder or user is a minor (§ 6-1-1708(2)). \"Explicit sexual conduct\" takes its meaning from C.R.S. § 13-21-1502(7) but excludes evidence-based medical information and factual descriptions of reproductive health care (§ 6-1-1701(10.5)); \"intimate digital depiction\" takes its meaning from § 13-21-1502(10) (§ 6-1-1701(12.5))",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/colorado-hb26-1263-minor-privacy-tools",
      "@type": "Provision",
      "id": "colorado-hb26-1263-minor-privacy-tools",
      "regulation": "colorado-hb26-1263",
      "authority": "colorado-ag",
      "source_file": "data/instruments/colorado-hb26-1263.md",
      "source_heading": "Minor Privacy, Memory, and Parental Control Tools",
      "obligations": [
        "data-governance"
      ],
      "scope": "Operators that know an account holder or user is a minor (§ 6-1-1708(2)), plus their parents or guardians as tool recipients (§ 6-1-1708(2)(h)(II))",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/colorado-hb26-1263-consumer-disclosure",
      "@type": "Provision",
      "id": "colorado-hb26-1263-consumer-disclosure",
      "regulation": "colorado-hb26-1263",
      "authority": "colorado-ag",
      "source_file": "data/instruments/colorado-hb26-1263.md",
      "source_heading": "General Consumer Disclosure and Licensed-Professional Representation Bar",
      "obligations": [
        "transparency"
      ],
      "scope": "Operators of any conversational AI service, as to every user regardless of age (§ 6-1-1708(3), § 6-1-1708(5))",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/colorado-hb26-1263-crisis-protocol",
      "@type": "Provision",
      "id": "colorado-hb26-1263-crisis-protocol",
      "regulation": "colorado-hb26-1263",
      "authority": "colorado-ag",
      "source_file": "data/instruments/colorado-hb26-1263.md",
      "source_heading": "Suicide and Self-Harm Response Protocol",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Operators of any conversational AI service, as to every user regardless of age (§ 6-1-1708(4))",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/colorado-hb26-1263-annual-reporting",
      "@type": "Provision",
      "id": "colorado-hb26-1263-annual-reporting",
      "regulation": "colorado-hb26-1263",
      "authority": "colorado-ag",
      "source_file": "data/instruments/colorado-hb26-1263.md",
      "source_heading": "Annual Attorney General Reporting",
      "obligations": [
        "incident-reporting"
      ],
      "scope": "Operators of any conversational AI service (§ 6-1-1708(6)(a)); the recipient is the Attorney General's office, which posts the reported data publicly (§ 6-1-1708(6)(c))",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/hawaii-sb3001-disclosure",
      "@type": "Provision",
      "id": "hawaii-sb3001-disclosure",
      "regulation": "hawaii-sb3001",
      "authority": "hawaii-ocp",
      "source_file": "data/instruments/hawaii-sb3001.md",
      "source_heading": "AI Companion Artificiality Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "Operators — persons who develop and make an AI companion available to the public; a mobile application store or search engine that merely provides access is not by itself an operator (§ (i)). An AI companion is a system using artificial intelligence, generative AI, or emotional recognition algorithms designed to simulate a sustained human or human-like relationship by retaining information on prior interactions and user preferences, asking unprompted emotion-based questions beyond a direct response, and sustaining ongoing dialogue on matters personal to the user (§ (i)). The minor cadence in § (b) applies where the operator has actual knowledge or reasonable certainty that the user is under eighteen",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/hawaii-sb3001-crisis-protocol",
      "@type": "Provision",
      "id": "hawaii-sb3001-crisis-protocol",
      "regulation": "hawaii-sb3001",
      "authority": "hawaii-ocp",
      "source_file": "data/instruments/hawaii-sb3001.md",
      "source_heading": "Suicide, Self-Harm and Crisis Intervention Protocol",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "All operators of AI companions, with no minor-status or knowledge trigger — § (c) applies to every covered operator regardless of the user's age. Crisis intervention means communication intended to provide immediate support or assistance in response to a user seeking help for, referencing, or expressing self-harm, suicidal ideation, or suicide (§ (i)); serious bodily injury takes its meaning from Haw. Rev. Stat. § 707-700",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/hawaii-sb3001-minor-protections",
      "@type": "Provision",
      "id": "hawaii-sb3001-minor-protections",
      "regulation": "hawaii-sb3001",
      "authority": "hawaii-ocp",
      "source_file": "data/instruments/hawaii-sb3001.md",
      "source_heading": "Minor Engagement, Sexual Content and Parental Controls",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Operators that know or have reasonable certainty that a user is a minor — any person under eighteen years of age (§ (d), § (i)). Sexually explicit conduct takes its meaning from 18 U.S.C. § 2256; sexually objectify means to make sexual comments directed at the user's body or appearance (§ (i))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/hawaii-sb3001-annual-report",
      "@type": "Provision",
      "id": "hawaii-sb3001-annual-report",
      "regulation": "hawaii-sb3001",
      "authority": "hawaii-ocp",
      "source_file": "data/instruments/hawaii-sb3001.md",
      "source_heading": "Annual Behavioral Health Reporting",
      "obligations": [
        "incident-reporting"
      ],
      "scope": "All operators of AI companions, with no minor-status or knowledge trigger. The report goes to the behavioral health administration of the Department of Health and must contain only the three listed items, with no identifiers or personal information about users (§ (e))",
      "roles": [
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/maine-ai-mental-health-licensed-delivery",
      "@type": "Provision",
      "id": "maine-ai-mental-health-licensed-delivery",
      "regulation": "maine-ai-mental-health",
      "authority": "maine-ag",
      "source_file": "data/instruments/maine-ai-mental-health.md",
      "source_heading": "Licensed Professional Delivery of Therapy or Psychotherapy Services",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Any person who provides, advertises, or otherwise offers therapy or psychotherapy services to the public, expressly \"including through the use of Internet-based artificial intelligence\" (§ 1500-EE(2)). \"Therapy or psychotherapy services\" means services to diagnose, treat, or address mental or behavioral health through therapeutic communication (§ 1500-EE(1)(D)); \"therapeutic communication\" is defined broadly to include direct interactions to understand thoughts, emotions, or experiences, guidance and therapeutic interventions, \"offering emotional support, reassurance or empathy in response to psychological or emotional distress\", collaborative treatment planning, and behavioral feedback (§ 1500-EE(1)(C)). Exempt: an AI-based intervention used solely within a research project approved by an institutional review board as defined in 22 M.R.S. § 1711-C(6)(G) and conducted in compliance with federal human-subjects protections (§ 1500-EE(4))",
      "roles": [
        "deployer",
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/maine-ai-mental-health-permitted-use",
      "@type": "Provision",
      "id": "maine-ai-mental-health-permitted-use",
      "regulation": "maine-ai-mental-health",
      "authority": "maine-ag",
      "source_file": "data/instruments/maine-ai-mental-health.md",
      "source_heading": "Permitted Administrative and Supplementary AI Use by Licensees",
      "obligations": [
        "human-oversight"
      ],
      "scope": "Licensees under 32 M.R.S. ch. 17 (the section refers to them as \"the licensee\") who use AI to assist in delivering therapy or psychotherapy services. Permitted categories are closed: \"administrative support\" (scheduling and reminders, billing and insurance claims, logistics communications that contain no therapeutic communication — § 2113(1)(A)) and \"supplementary support\" (preparing and maintaining client records including therapy notes, analyzing anonymized data to track progress or identify trends subject to licensed review, and identifying and organizing external resources or referrals — § 2113(1)(D)). Neither category may involve therapeutic communication. Exempt: AI-based interventions used solely within an IRB-approved research project under 22 M.R.S. § 1711-C(6)(G) (§ 2113(9))",
      "roles": [
        "healthcare-provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/maine-ai-mental-health-consent-recording",
      "@type": "Provision",
      "id": "maine-ai-mental-health-consent-recording",
      "regulation": "maine-ai-mental-health",
      "authority": "maine-ag",
      "source_file": "data/instruments/maine-ai-mental-health.md",
      "source_heading": "Written Consent and the Session-Recording Condition for Supplementary AI Support",
      "obligations": [
        "transparency"
      ],
      "scope": "Licensees using AI to assist in providing supplementary support in therapy or psychotherapy services — records and therapy notes, anonymized progress analysis, and referral organization (§ 2113(1)(D)). The client or the client's legally authorized representative is the consenting party. Exempt: IRB-approved research use under 22 M.R.S. § 1711-C(6)(G) (§ 2113(9))",
      "roles": [
        "healthcare-provider",
        "deployer",
        "provider"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/connecticut-sb1295-profiling-impact-assessment",
      "@type": "Provision",
      "id": "connecticut-sb1295-profiling-impact-assessment",
      "regulation": "connecticut-sb1295",
      "authority": "connecticut-ag",
      "source_file": "data/instruments/connecticut-sb1295.md",
      "source_heading": "Profiling Impact Assessment",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Every controller subject to the CTDPA that engages in any profiling for the purposes of making a decision that produces any legal or similarly significant effect concerning a consumer (§ 42-522(c)). The applicability threshold in § 42-516 was lowered to 35,000 consumers by the same act",
      "roles": [
        "controller"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/connecticut-sb1295-llm-training-disclosure",
      "@type": "Provision",
      "id": "connecticut-sb1295-llm-training-disclosure",
      "regulation": "connecticut-sb1295",
      "authority": "connecticut-ag",
      "source_file": "data/instruments/connecticut-sb1295.md",
      "source_heading": "Large Language Model Training Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "Every controller subject to the CTDPA that is required to publish a privacy notice under § 42-520(b)(1)",
      "roles": [
        "controller"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/connecticut-sb1295-ag-assessment-access",
      "@type": "Provision",
      "id": "connecticut-sb1295-ag-assessment-access",
      "regulation": "connecticut-sb1295",
      "authority": "connecticut-ag",
      "source_file": "data/instruments/connecticut-sb1295.md",
      "source_heading": "Attorney General Access to Assessments",
      "obligations": [
        "record-keeping"
      ],
      "scope": "Controllers that conduct data protection assessments under § 42-522(b) or profiling impact assessments under § 42-522(c)",
      "roles": [
        "controller"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/connecticut-sb1295-minors-profiling",
      "@type": "Provision",
      "id": "connecticut-sb1295-minors-profiling",
      "regulation": "connecticut-sb1295",
      "authority": "connecticut-ag",
      "source_file": "data/instruments/connecticut-sb1295.md",
      "source_heading": "Minors' Profiling Consent and Assessment",
      "obligations": [
        "risk-assessment"
      ],
      "scope": "Controllers offering any online service, product or feature to consumers they have actual knowledge, or wilfully disregard, are minors — any consumer under eighteen. The consent gate covers profiling in furtherance of any automated decision producing a legal or similarly significant effect concerning the provision or denial of financial or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunity, health care services, or access to essential goods or services",
      "roles": [
        "controller"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/cn-ai-content-labeling-transparency",
      "@type": "Provision",
      "id": "cn-ai-content-labeling-transparency",
      "regulation": "cn-ai-content-labeling",
      "authority": "cn-cac",
      "source_file": "data/instruments/cn-ai-content-labeling.md",
      "source_heading": "AI Content Labeling Disclosure",
      "obligations": [
        "transparency"
      ],
      "scope": "Providers of generative and deep synthesis services falling within Article 17(1) of the Deep Synthesis Provisions, and users publishing generated content through dissemination services",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/cn-ai-content-labeling-record-keeping",
      "@type": "Provision",
      "id": "cn-ai-content-labeling-record-keeping",
      "regulation": "cn-ai-content-labeling",
      "authority": "cn-cac",
      "source_file": "data/instruments/cn-ai-content-labeling.md",
      "source_heading": "Implicit Metadata Labels and Provenance Records",
      "obligations": [
        "record-keeping"
      ],
      "scope": "Providers of generative and deep synthesis services, and providers of network information content dissemination services",
      "roles": [
        "provider",
        "deployer"
      ]
    },
    {
      "@id": "https://everyailaw.com/ont/provision/cn-ai-content-labeling-conformity-assessment",
      "@type": "Provision",
      "id": "cn-ai-content-labeling-conformity-assessment",
      "regulation": "cn-ai-content-labeling",
      "authority": "cn-cac",
      "source_file": "data/instruments/cn-ai-content-labeling.md",
      "source_heading": "Platform Label Verification",
      "obligations": [
        "conformity-assessment"
      ],
      "scope": "Providers of network information content dissemination services, and internet application distribution platforms (app stores)",
      "roles": [
        "deployer",
        "distributor"
      ]
    }
  ]
}