Generates images with AI, in Pennsylvania

73 Pa. Stat. Ann. §§ 201-1 to 201-9.3 (Act of Dec. 17, 1968, P.L.1224, No.387)

• Do not engage in unfair methods of competition or unfair or deceptive acts or practices in commerce.
• Do not deceive consumers through undisclosed use of AI, including undisclosed chatbots in commercial contexts, deceptive AI-generated marketing, or false claims about AI capabilities.

196 A.3d 1036 (Pa. 2018)

• Applies to an employer that stores its employees' sensitive personal information on an internet-accessible computer system.
• Exercise reasonable care to safeguard that information: the Supreme Court of Pennsylvania held, on review of an order sustaining preliminary objections in the nature of a demurrer, that such an employer has a legal duty to do so.

18 Pa.C.S. § 3131 · Read the law's page

• Do not disseminate an artificially generated sexual depiction of an individual, or a genuine intimate image of a current or former sexual or intimate partner, with intent to harass, annoy, or alarm them.
• It is a defense that the person depicted consented to the dissemination.

18 Pa.C.S. § 6312(c), (d) · Read the law's page

• Do not sell, distribute, disseminate, display, or possess for such a purpose, any artificially generated child sexual abuse material.
• Do not intentionally view or knowingly possess or control artificially generated child sexual abuse material.
• An artificial intelligence developer, or its authorized employee or contractor, who reports such material to the National Center for Missing and Exploited Children as soon as reasonably possible after obtaining actual knowledge of it is excepted from this offense.

18 Pa.C.S. § 4101.1 · Read the law's page

• Do not generate or create and distribute, with intent to defraud or injure anyone, a forged digital likeness (an AI-generated or otherwise computer-generated visual representation or audio recording of a real, identifiable person that closely resembles a genuine one, materially misrepresents that person, and is likely to deceive a reasonable person) as genuine.
• Taking reasonable action to notify viewers or listeners that the forged digital likeness is not genuine is an affirmative defense.
• This section does not reach a provider or developer of the underlying technology, an information service or access software provider, a law enforcement officer's official duties, or a constitutionally protected activity.

Pa. H.B. 1857, 2025-2026 Regular Session

• This measure is in committee and binds nobody yet; what follows is what it would require if it is enacted in this form.
• Disclose the use of artificial intelligence clearly and conspicuously at the start of a consumer interaction.
• Inform consumers of their right to request human review of high-impact AI-assisted decisions covering credit, employment, insurance, housing, and healthcare.

Pa. H.B. 2100, 2025-2026 Regular Session

• This measure is in committee and binds nobody yet; what follows is what it would require if it is enacted in this form.
• Do not use patient inputs for advertising targeting.
• Do not sell or share individually identifiable mental health information.
• Restrict the use of artificial intelligence by licensed mental health therapists to administrative functions such as scheduling and billing.
• Label advertisements within a chatbot clearly as advertisements.

Pa. H.B. 2800, 2025-2026 Regular Session · Read the law's page

• If you are a large frontier developer, do not develop, deploy or operate a frontier model, in whole or in part, in Pennsylvania unless you have filed a registration form and a current disclosure statement with the Pennsylvania Emergency Management Agency and paid the annual fee; renew the disclosure statement every year and whenever ownership of the model transfers or the reported information materially changes.
• If you are a large frontier developer, develop a frontier AI framework covering how you set capability thresholds for catastrophic risk, apply and review mitigations before deploying or extensively using a frontier model internally, use third-party assessors, secure unreleased model weights, respond to critical safety incidents, govern these processes internally and manage catastrophic risk from internal use; then implement it, comply with it and publish it on your website.
• If you are a large frontier developer, review your frontier AI framework at least once a year, and within 30 days of a material modification publish the modified framework with a justification.
• Before or when you deploy a new or substantially modified frontier model, publish on your website a transparency report giving your website, a way to contact you, the model's release date, supported languages and output modalities, intended uses and any general restrictions on use; as a large frontier developer, add machine-readable summaries of your catastrophic-risk assessments, their results, the role of third-party evaluators and the other steps you took under your framework.
• If you are a large frontier developer, retain an independent third party every year to audit your compliance with the act; do not retain a party with which you share a financial interest or condition its payment on the result; give the auditor access to the materials it needs; keep an unredacted copy of each audit report for as long as a frontier model is deployed plus five years; and within 30 days publish a high-level summary and a redacted copy of the report and send the redacted copy to the Pennsylvania Emergency Management Agency and the Attorney General.
• Report a critical safety incident involving one of your frontier models to the Pennsylvania Emergency Management Agency and the Attorney General within 72 hours of learning facts sufficient to establish a reasonable belief that it occurred, and disclose an incident that poses an imminent risk of death or serious physical injury within 24 hours to an appropriate authority, including a law enforcement or public safety agency with jurisdiction.
• If you are a large frontier developer, send the Pennsylvania Emergency Management Agency a summary of each assessment of catastrophic risk from internal use of your frontier models every three months, or on another reasonable schedule you have communicated in writing.
• Do not make a materially false or misleading statement about catastrophic risk from your frontier models or your management of it; as a large frontier developer, do not make one about your implementation of or compliance with your frontier AI framework, unless the statement was made in good faith and was reasonable under the circumstances.
• As a large frontier developer, give covered employees a reasonable internal process to disclose, anonymously or otherwise, a specific and substantial danger to public health or safety from catastrophic risk or a violation of the act, with a monthly status update to the person who disclosed; share each disclosure and response with officers and directors at least quarterly; do not prevent or retaliate against a covered employee for a protected disclosure; and give covered employees notice of these rights.
• If you redact a document you publish under the act, describe the character and justification of each redaction in the published version to the extent the reasons for redaction permit, and keep the unredacted information for at least five years.

Pa. H.B. 2829, 2025-2026 Regular Session · Read the law's page

• If you are a large frontier developer, do not develop, deploy or operate a frontier model, in whole or in part, in Pennsylvania without a current disclosure statement filed with the Pennsylvania Emergency Management Agency and the required fee paid; renew the statement every year and whenever ownership of the model transfers or the reported information materially changes.
• If you are a large frontier developer, write, implement, comply with and publish on your website a frontier AI framework describing how you set capability thresholds for catastrophic risk, apply and review mitigations before deploying or extensively using a frontier model internally, use third-party assessors, secure unreleased model weights, respond to critical safety incidents, govern these processes internally, manage catastrophic risk from internal use and put safeguards in place against an unreasonable risk of death or serious injury to more than 50 people or more than $1,000,000,000 in property damage.
• If you are a large frontier developer, review your frontier AI framework at least once a year; within 30 days of a material modification publish the modified framework with a justification; keep an unredacted copy and its revision records for as long as a frontier model is deployed plus five years; and send the Pennsylvania Emergency Management Agency and the Attorney General a copy within 30 days of first publication and of each material modification.
• If you are a large frontier developer, do not deploy a frontier model if, on the assessments and mitigation your framework requires, deployment would create an unreasonable risk that it will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in property damage.
• If you are a large frontier developer, retain an independent third party every year to audit your compliance with the act; do not retain a party with which you share a financial interest or condition its payment on the result; and give the auditor access to the materials it needs.
• Before or when you deploy a new or substantially modified frontier model, publish on your website a transparency report giving your website, a way to contact you, the model's release date, supported languages and output modalities, intended uses and any general restrictions on use; as a large frontier developer, add machine-readable summaries of your catastrophic-risk assessments, their results, the role of third-party evaluators and the other steps you took under your framework.
• Report a critical safety incident involving one of your frontier models to the Pennsylvania Emergency Management Agency and the Attorney General within 72 hours of learning facts sufficient to establish a reasonable belief that it occurred, and disclose an incident that poses an imminent risk of death or serious physical injury within 24 hours to an appropriate authority, including a law enforcement or public safety agency with jurisdiction.
• If you are a large frontier developer, send the Pennsylvania Emergency Management Agency a summary of each assessment of catastrophic risk from internal use of your frontier models every three months, or on another reasonable schedule you have communicated in writing.
• Do not knowingly make a false or materially misleading statement or omission in or about a document you publish, submit or transmit under the act concerning catastrophic risk from your frontier models or your management of it; as a large frontier developer, the same applies to your implementation of or compliance with your frontier AI framework, unless the statement was made in good faith and was reasonable under the circumstances.
• Do not make or enforce a rule, policy or contract that prevents a covered employee from disclosing a specific and substantial danger to public health or safety from catastrophic risk, or a violation of the act, to the agency, the Attorney General, a federal authority or a person with authority to correct it, and do not retaliate for such a disclosure; give covered employees notice of these rights; as a large frontier developer, provide an internal process for anonymous disclosure with a monthly status update and share disclosures and responses with officers and directors at least quarterly.
• If you redact a document you publish under the act, describe the character and justification of each redaction in the published version to the extent the reasons for redaction permit, and keep the unredacted information for five years.

Pa. H.B. 811, 2025-2026 Regular Session · Read the law's page

• Do not knowingly and intentionally disseminate, within 90 days before an election and with willful or reckless disregard for influencing its outcome, a campaign advertisement containing a deepfake of a candidate intended to misrepresent the candidate's words, actions, or beliefs.
• A clear and conspicuous disclosure in the prescribed form, readable or audible to the viewer or listener, plus embedded tamper-evident content provenance identifying the content's creator and any subsequent editor, is a defense to liability.
• Comply with a court order for the immediate removal of the campaign advertisement and cessation of the activity complained of, which a court may issue while an aggrieved candidate's civil action is pending.

Pa. S.B. 1090, 2025-2026 Regular Session · Read the law's page

• Issue a clear and conspicuous notification that an AI companion is artificially generated and not human, whenever a reasonable person interacting with it could otherwise be misled into believing it is human.
• Maintain, implement, and publicly publish a protocol to prevent the AI companion from producing suicidal ideation, suicide, or self-harm content, including referring a user who expresses such content to a crisis line.
• For a user you know or should have known is a minor, give the additional disclosures and safeguards this measure specifies.

Pa. S.B. 806, 2025-2026 Regular Session · Read the law's page

• Do not knowingly, recklessly or willfully create and disseminate, or cause to be created and disseminated, an advertisement that uses AI-generated or significantly AI-modified content in a manner that creates a false consumer perception about the nature, origin or authenticity of the goods or services advertised, without a clear and conspicuous disclosure.
• Make the disclosure state that the advertisement contains content that was modified or generated using artificial intelligence, display it in the first instance whenever the content is presented, present it in the same medium as the content, and, to the extent technically feasible, make it permanent or extraordinarily difficult to remove.