NIST AI RMF, GovernGOVERN 4.2

Implement and publicly disclose a protocol for detecting and responding to expressions of severe harm, including self-harm and suicidal ideation, with referral to crisis resources, and publish an annual count of crisis referrals.

Beginning January 1, 2028, submit an annual report to the Department of Health's Behavioral Health Administration on crisis-intervention referrals and protocols, containing no user-identifying information.

If you rely solely on AI analysis of a video interview to select applicants for an in-person interview, collect and report race and ethnicity data on applicants and hires to the Department of Commerce and Economic Opportunity every year by December 31.

It would require a chatbot provider to assess its chatbot for risks of harm to users every month, mitigate those risks, and publish information about identified safety risks and their mitigation on its website.

It would bar any such message from including a materially false or misleading statement about a substantial risk the model poses, about any measure taken or to be taken to manage that risk, or about whether the model was validated by a third-party validator.

Maintain a protocol using evidence-based methods to detect suicidal or self-harm ideation, refer the user to the 988 crisis lifeline or to a youth-specific lifeline for a user you identify as under 25, and publish the details of that protocol.

Post an annual public report disclosing how many times you referred a user to crisis resources and the details of your detection protocol, without including information that identifies an individual.

Maintain, implement, and publicly publish a protocol to prevent the AI companion from producing suicidal ideation, suicide, or self-harm content, including referring a user who expresses such content to a crisis line.

Maintain protocols to detect and respond to expressions of self-harm or suicidal ideation, including referral to crisis resources, and publicly report on those protocols annually.

Transmit the audit report and the audit implementation report to your Digital Services Coordinator of establishment and the Commission without undue delay, and make them public, with confidential information removed where necessary, within three months of receiving the audit report.

If you are a large frontier developer, add to that transparency report summaries of your catastrophic-risk assessments for the model, their results, the extent of any third-party evaluator involvement, and the other steps you took to meet your frontier AI framework for it.

If you are a frontier developer, publish a transparency report before or concurrently with deploying a new or substantially modified frontier model; a large frontier developer adds summaries of its catastrophic risk assessments.

If you are a large frontier developer, include in that transparency report summaries of your catastrophic-risk assessments of the model, their results, the extent to which third-party evaluators were involved, and the other steps you took under your frontier AI framework.

If you are a large frontier developer, send the office a summary of any assessment of catastrophic risk from internal use of your frontier models every three months, or on another reasonable schedule the office agrees to.

Submit the results of implementing those two measures to the Ministry of Science and ICT, in the form and manner the Ministry sets by public notice.

When a mass layoff, relocation, or termination at a covered establishment is caused in whole or in substantial part by an AI system or other automated technology replacing or automating employment positions, add to the written notice the number, classification or occupation, and work location of the layoffs substantially due to the replacement or automation

Include in that notice the job functions performed by the replaced workers that will be automated and the specific category or type of AI system or other automating technology that substantially resulted in the technological displacement

If you serve a mass-layoff notice on the Connecticut Labor Department under the federal WARN Act, also disclose to the department whether the layoffs are related to your use of artificial intelligence or another technological change.

The CBJ expects you to log and keep auditable all data, models, decisions, user prompts and authorized overrides, to store logs in a secure, tamper-evident manner, and to provide regulatory authorities with comprehensive audit reports on AI decision-making processes (sections 2.2 and 4.2).

An app whose AI system a hazard assessment finds poses increased danger to life, health, rights, the environment, defense, national security or public order must have its owner reassess that hazard at each design, development, deployment and material-change stage, and publish the assessment and its methodology on the owner's own website as open data.

Post the main content of your risk-management plan, your explanation plan, and your user-protection plan, and the name and contact details of the person managing and supervising your high-impact AI, at your place of business or on your website.