Law / United States / Pennsylvania

H.B. 2829, Frontier Artificial Intelligence Safety, Transparency and Accountability Act

Pa. H.B. 2829, 2025-2026 Regular Session

In committee, dated 5 October 2026, as of 26 October 2026.

An AI governance rule binding private bodies.

Obligation class

Disclosure, Governance, Reporting

Audit expectation

periodic

Who audits it

Independent third party

Where the report goes

Filed with regulator

As of 26 October 2026.

Where it has got to

What it requires

• If you are a large frontier developer, do not develop, deploy or operate a frontier model, in whole or in part, in Pennsylvania without a current disclosure statement filed with the Pennsylvania Emergency Management Agency and the required fee paid; renew the statement every year and whenever ownership of the model transfers or the reported information materially changes.
• If you are a large frontier developer, write, implement, comply with and publish on your website a frontier AI framework describing how you set capability thresholds for catastrophic risk, apply and review mitigations before deploying or extensively using a frontier model internally, use third-party assessors, secure unreleased model weights, respond to critical safety incidents, govern these processes internally, manage catastrophic risk from internal use and put safeguards in place against an unreasonable risk of death or serious injury to more than 50 people or more than $1,000,000,000 in property damage.
• If you are a large frontier developer, review your frontier AI framework at least once a year; within 30 days of a material modification publish the modified framework with a justification; keep an unredacted copy and its revision records for as long as a frontier model is deployed plus five years; and send the Pennsylvania Emergency Management Agency and the Attorney General a copy within 30 days of first publication and of each material modification.
• If you are a large frontier developer, do not deploy a frontier model if, on the assessments and mitigation your framework requires, deployment would create an unreasonable risk that it will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in property damage.
• If you are a large frontier developer, retain an independent third party every year to audit your compliance with the act; do not retain a party with which you share a financial interest or condition its payment on the result; and give the auditor access to the materials it needs.
• Before or when you deploy a new or substantially modified frontier model, publish on your website a transparency report giving your website, a way to contact you, the model's release date, supported languages and output modalities, intended uses and any general restrictions on use; as a large frontier developer, add machine-readable summaries of your catastrophic-risk assessments, their results, the role of third-party evaluators and the other steps you took under your framework.
• Report a critical safety incident involving one of your frontier models to the Pennsylvania Emergency Management Agency and the Attorney General within 72 hours of learning facts sufficient to establish a reasonable belief that it occurred, and disclose an incident that poses an imminent risk of death or serious physical injury within 24 hours to an appropriate authority, including a law enforcement or public safety agency with jurisdiction.
• If you are a large frontier developer, send the Pennsylvania Emergency Management Agency a summary of each assessment of catastrophic risk from internal use of your frontier models every three months, or on another reasonable schedule you have communicated in writing.
• Do not knowingly make a false or materially misleading statement or omission in or about a document you publish, submit or transmit under the act concerning catastrophic risk from your frontier models or your management of it; as a large frontier developer, the same applies to your implementation of or compliance with your frontier AI framework, unless the statement was made in good faith and was reasonable under the circumstances.
• Do not make or enforce a rule, policy or contract that prevents a covered employee from disclosing a specific and substantial danger to public health or safety from catastrophic risk, or a violation of the act, to the agency, the Attorney General, a federal authority or a person with authority to correct it, and do not retaliate for such a disclosure; give covered employees notice of these rights; as a large frontier developer, provide an internal process for anonymous disclosure with a monthly status update and share disclosures and responses with officers and directors at least quarterly.
• If you redact a document you publish under the act, describe the character and justification of each redaction in the published version to the extent the reasons for redaction permit, and keep the unredacted information for five years.

These lines are LexLint's reading of the law's text, as of 26 October 2026.

If you get it wrong

Who enforces it

When LexLint raises it

When your app profile says your app trains models or generates content with AI.

Back to the example  ·  Lint your app