Required actions
- Do not develop or deploy AI intended to incite self-harm or crime, to discriminate unlawfully, or to produce child sexual abuse material or non-consensual intimate deepfakes - Government agencies may not use AI for social scoring or to identify people by biometrics without consent, and must disclose AI interaction to consumers - Healthcare providers must disclose AI use in treatment to patients - Respond to Attorney General civil investigative demands; 60-day cure period before penalties