NIST AI RMF, GovernGOVERN 4.2

Implement and publicly disclose a protocol for detecting and responding to expressions of severe harm, including self-harm and suicidal ideation, with referral to crisis resources, and publish an annual count of crisis referrals.

Beginning January 1, 2028, submit an annual report to the Department of Health's Behavioral Health Administration on crisis-intervention referrals and protocols, containing no user-identifying information.

If you rely solely on AI analysis of a video interview to select applicants for an in-person interview, collect and report race and ethnicity data on applicants and hires to the Department of Commerce and Economic Opportunity every year by December 31.

Maintain a protocol using evidence-based methods to detect suicidal or self-harm ideation, refer the user to the 988 crisis lifeline or to a youth-specific lifeline for a user you identify as under 25, and publish the details of that protocol.

Post an annual public report disclosing how many times you referred a user to crisis resources and the details of your detection protocol, without including information that identifies an individual.

Maintain, implement, and publicly publish a protocol to prevent the AI companion from producing suicidal ideation, suicide, or self-harm content, including referring a user who expresses such content to a crisis line.

Maintain protocols to detect and respond to expressions of self-harm or suicidal ideation, including referral to crisis resources, and publicly report on those protocols annually.

If you are a large frontier developer, add to that transparency report summaries of your catastrophic-risk assessments, their results, and the extent of any third-party evaluator involvement

If you are a large frontier developer, transmit summaries of catastrophic-risk assessments from your frontier models' internal use to the California Office of Emergency Services on a quarterly or agreed schedule

Transmit the audit report and the audit implementation report to your Digital Services Coordinator of establishment and the Commission without undue delay, and make them public, with confidential information removed where necessary, within three months of receiving the audit report.

If you are a large frontier developer, add to that transparency report summaries of your catastrophic-risk assessments for the model, their results, the extent of any third-party evaluator involvement, and the other steps you took to meet your frontier AI framework for it.

Submit the results of implementing those two measures to the Ministry of Science and ICT, in the form and manner the Ministry sets by public notice.

An app whose AI system a hazard assessment finds poses increased danger to life, health, rights, the environment, defense, national security or public order must have its owner reassess that hazard at each design, development, deployment and material-change stage, and publish the assessment and its methodology on the owner's own website as open data.

Post the main content of your risk-management plan, your explanation plan, and your user-protection plan, and the name and contact details of the person managing and supervising your high-impact AI, at your place of business or on your website.

If you serve a mass-layoff notice on the Connecticut Labor Department under the federal WARN Act, also disclose to the department whether the layoffs are related to your use of artificial intelligence or another technological change.