The following words and phrases when used in this act shall have the meanings given to them in this section unless the context clearly indicates otherwise: \"AffiliateAffiliate"Affiliate." A person controlling, controlled by or under common control with a specified person, directly or indirectly, through one or more intermediaries.Section 102.\" A personPerson"Person." An individual, proprietorship, firm, partnership, joint venture, syndicate, business trust, company, corporation, limited liability company, association, committee or any other nongovernmental organization or group of persons acting in concert.Section 102 controlling, controlled by or under common control with a specified personPerson"Person." An individual, proprietorship, firm, partnership, joint venture, syndicate, business trust, company, corporation, limited liability company, association, committee or any other nongovernmental organization or group of persons acting in concert.Section 102, directly or indirectly, through one or more intermediaries. \"AgencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102.\" The Pennsylvania Emergency Management AgencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102. \"Artificial intelligenceArtificial intelligence"Artificial intelligence" or "AI." The term shall have the same meaning as under 18 Pa.C.S. § 3131(g) (relating to unlawful dissemination of intimate image).Section 102\" or \"AI.\" The term shall have the same meaning as under 18 Pa.C.S. § 3131(g) (relating to unlawful dissemination of intimate image). \"Catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct with no meaningful human oversight, intervention or supervision that is either a cyberattack or, if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm.Section 102.\" As follows: (1) A foreseeable and material risk that a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102's development, storage, use or deployment of a frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, propertyProperty"Property." Includes both tangible and intangible property.Section 102 arising from a single incident involving a frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct with no meaningful human oversight, intervention or supervision that is either a cyberattack or, if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 or user.

This act shall apply only to frontier modelsFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 that are developed, deployed or operating in whole or in part in this Commonwealth. Nothing in this act: (1) shall be construed to prohibit lawful research, development, testing or evaluation of artificial intelligenceArtificial intelligence"Artificial intelligence" or "AI." The term shall have the same meaning as under 18 Pa.C.S. § 3131(g) (relating to unlawful dissemination of intimate image).Section 102 models; or (2) imposes a requirement on a personPerson"Person." An individual, proprietorship, firm, partnership, joint venture, syndicate, business trust, company, corporation, limited liability company, association, committee or any other nongovernmental organization or group of persons acting in concert.Section 102 solely because the personPerson"Person." An individual, proprietorship, firm, partnership, joint venture, syndicate, business trust, company, corporation, limited liability company, association, committee or any other nongovernmental organization or group of persons acting in concert.Section 102 develops, deploysDeploy"Deploy." To make a frontier model available to a third party for use, modification, copying or combination with other software. The term does not include making a frontier model available to a third party for the primary purpose of researching, developing or evaluating the frontier model.Section 102 or operates an artificial intelligenceArtificial intelligence"Artificial intelligence" or "AI." The term shall have the same meaning as under 18 Pa.C.S. § 3131(g) (relating to unlawful dissemination of intimate image).Section 102 model that is not a frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102.

(a) Duty of agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102.--The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102, in consultation with the Attorney General, the Office of Administration and the Office of Information Technology, shall administer this act.

(b) 1 Disclosure statement.-- (1) Beginning January 1, 2028, a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 may not develop, deployDeploy"Deploy." To make a frontier model available to a third party for use, modification, copying or combination with other software. The term does not include making a frontier model available to a third party for the primary purpose of researching, developing or evaluating the frontier model.Section 102 or operate a frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102, in whole or in part in this Commonwealth, without having a current disclosure statement filed with the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 and paying the required fee. (2) The disclosure statement shall be filed in the form and manner prescribed by the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 on the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102's publicly accessible Internet website and shall contain all information required by the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102. The disclosure statement shall be renewed annually, whenever ownership of the frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 is transferred or whenever there is a material change to the information reported in the previously filed disclosure statement, whichever occurs earlier. (3) The disclosure statement shall identify: (i) The identity of the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 and all names under which the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 conducts business. (ii) The address of the principal place of business and the address of each office the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 maintains in this Commonwealth. (iii) If the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 or the ultimate parent of the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 is a privately or closely held company, a list of all personsPerson"Person." An individual, proprietorship, firm, partnership, joint venture, syndicate, business trust, company, corporation, limited liability company, association, committee or any other nongovernmental organization or group of persons acting in concert.Section 102 or entities that beneficially own a 5% or greater interest in the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 at the time the disclosure statement is filed and a list of personsPerson"Person." An individual, proprietorship, firm, partnership, joint venture, syndicate, business trust, company, corporation, limited liability company, association, committee or any other nongovernmental organization or group of persons acting in concert.Section 102 who formerly beneficially owned a 5% or greater interest in the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 or its predecessors in the preceding five years. (iv) If the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 or the ultimate parent of the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 is a publicly traded company, a list of all personsPerson"Person." An individual, proprietorship, firm, partnership, joint venture, syndicate, business trust, company, corporation, limited liability company, association, committee or any other nongovernmental organization or group of persons acting in concert.Section 102 or entities that beneficially own a 50% or greater interest in the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 at the time the disclosure statement is filed. (v) The name and contact information of a primary contact, secondary contact and tertiary contact for the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102. The primary contact shall be responsible for receiving inquiries relating to this act from the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 or other governmental entities.

(c) Fees.--The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 shall charge and collect fees from large frontier developersLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 for the expenses of administering this act, which shall be nonrefundable unless otherwise indicated. Each large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall pay to the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102's pro rata share of the cost of administration of this act, as estimated by the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102, for the current year and any deficit actually incurred in the administration of this act in prior years.

(d) Penalties.--If a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 develops, deploysDeploy"Deploy." To make a frontier model available to a third party for use, modification, copying or combination with other software. The term does not include making a frontier model available to a third party for the primary purpose of researching, developing or evaluating the frontier model.Section 102 or operates a frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 in this Commonwealth without a current disclosure filed with the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 as required by this section, submits false information in its disclosure or fails to timely pay any assessment required, the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 may, after notice and hearing, levy civil penalties, fees and costs as follows: (1) A civil penalty of $1,000 for each day the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 fails to file a disclosure as required by this section or fails to correct false information. (2) An amount equal to the assessments owed.

(e) List of large frontier developersLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102.--The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 shall maintain and publish a list of large frontier developersLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 that have filed disclosure statements. The list shall not include the contact information required under subsection (b)(3)(v).

(a) 2 Duty of large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102.--Beginning January 1, 2028, a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall write, implement, comply with and clearly and conspicuously publish on its publicly accessible Internet website a frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate catastrophic risks.Section 102 that applies to the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102's frontier modelsFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 and describes how the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 approaches all of the following: (1) Incorporating national standards, international standards and industry-consensus best practices into its frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate catastrophic risks.Section 102. (2) Defining and assessing thresholds used by the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 to identify and assess whether a frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 has capabilities that could pose a catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct with no meaningful human oversight, intervention or supervision that is either a cyberattack or, if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm.Section 102, which may include multiple-tiered thresholds. (3) Applying mitigations to address the potential for catastrophic risksCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct with no meaningful human oversight, intervention or supervision that is either a cyberattack or, if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm.Section 102 based on the results of assessments under paragraph (2). (4) Reviewing assessments and adequacy of mitigations as part of the decision to deployDeploy"Deploy." To make a frontier model available to a third party for use, modification, copying or combination with other software. The term does not include making a frontier model available to a third party for the primary purpose of researching, developing or evaluating the frontier model.Section 102 a frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 or use it extensively internally. (5) Using third parties to assess the potential for catastrophic risksCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct with no meaningful human oversight, intervention or supervision that is either a cyberattack or, if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm.Section 102 and the effectiveness of mitigations of catastrophic risksCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct with no meaningful human oversight, intervention or supervision that is either a cyberattack or, if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm.Section 102.

(b) 2 Review.--A large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall review and, as appropriate, update the frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate catastrophic risks.Section 102 at least once per year.

(a) 3 Retention.--A large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall retain an unredacted copy of the frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate catastrophic risks.Section 102, including records and dates of any updates or revisions, for as long as a frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 is deployed plus five years.

(b)-(c) 4 Transmission of AI framework.--A large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall transmit to the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 and the Attorney General a copy of the frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate catastrophic risks.Section 102 published under section 501 with redactions permitted under section 1102, no later than 30 days after the framework is first published and no later than 30 days after publishing a material modification to the framework. (c) Access by agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102.--Upon request, a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall grant the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 and the Attorney General access to the frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate catastrophic risks.Section 102, subject to the redactions permitted under section 1102.

5 If a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 makes a material modification to its frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate catastrophic risks.Section 102, the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall clearly and conspicuously publish on its publicly accessible Internet website the modified frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate catastrophic risks.Section 102 and a justification for that modification within 30 days.

6 Beginning January 1, 2028, or 90 days after a developer first qualifies as a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102, whichever is later, a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall annually retain a third party to perform an independent audit of compliance with the requirements of this section in accordance with the following: (1) The third party shall conduct audits consistent with generally accepted auditing standards and best practices and shall possess demonstrated competence to perform the audit, including experience employing or contracting with individuals who possess technical expertise in the safety of frontier modelsFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102. (2) A large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall not retain a third party if either the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 or the third party has a financial interest in the other party. (3) A large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 may compensate a third party for its services but may not condition any payment or the amount of any payment on the results of the third party's audit.

7 A large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall transmit to the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 a summary of any assessment of catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct with no meaningful human oversight, intervention or supervision that is either a cyberattack or, if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm.Section 102 resulting from internal use of its frontier modelsFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 every three months or pursuant to another reasonable schedule specified by the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 and communicated in writing to the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 and the Attorney General, with written updates as appropriate and agreed upon by the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102.

8 A large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 may not deployDeploy"Deploy." To make a frontier model available to a third party for use, modification, copying or combination with other software. The term does not include making a frontier model available to a third party for the primary purpose of researching, developing or evaluating the frontier model.Section 102 a frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 if, based on the assessments and mitigation required under this chapter and the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102's frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate catastrophic risks.Section 102, deployment would create an unreasonable risk that the frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, propertyProperty"Property." Includes both tangible and intangible property.Section 102.

(a) 9 Report.--Before, or concurrently with, deploying a new frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 or a substantially modified version of an existing frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102, a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 shall clearly and conspicuously publish on the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102's publicly accessible Internet website a transparency report containing all of the following: (1) The publicly accessible Internet website of the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102. (2) A mechanism that enables an individual to communicate with the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102. (3) The release date of the frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102. (4) The languages supported by the frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102. (5) The modalities of output supported by the frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102. (6) The intended uses of the frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102. (7) Any generally applicable restrictions or conditions on uses of the frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102.

(b) 10 Content of transparency report.-- (1) Before, or concurrently with, deploying a new frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 or a substantially modified version of an existing frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102, a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall include in the transparency report required by subsection (a) summaries of all of the following: (i) Assessments of catastrophic risksCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct with no meaningful human oversight, intervention or supervision that is either a cyberattack or, if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm.Section 102 from the frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 conducted under the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102's frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate catastrophic risks.Section 102. (ii) The results of the assessments under subparagraph (i). (iii) The extent to which third-party evaluators were involved. (iv) Other steps taken to fulfill the requirements of the frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate catastrophic risks.Section 102 with respect to the frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102. (2) All summaries required under this subsection shall be provided in a machine-readable format to facilitate verification of model claims.

(c)-(d) Content as part of a larger document.--A frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 that publishes the information described in subsection (a) or (b) as part of a larger document, including a system card or model card, shall be deemed in compliance with the applicable subsection. (d) Best industry practices.--A frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 is encouraged, but not required, to make disclosures described in this section that are consistent with, or superior to, industry best practices.

(a)-(b) Duties of agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102.-- (1) The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102, in consultation with the Attorney General, shall establish a mechanism to be used by a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 or a member of the public to report a critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Harm resulting from the materialization of a catastrophic risk. (2) A frontier model that uses deceptive techniques against the frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. (3) A known incidence of death or bodily injury resulting from loss of control of a frontier model. (4) An incident of the following kinds that occurs in a manner that provides demonstrable evidence of an increased risk that a frontier model will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property: (i) A frontier model autonomously engaging in behavior other than at the request of a user. (ii) Theft, misappropriation, malicious use, inadvertent release, unauthorized access to, modification of, exfiltration of or escape of the model weights of a frontier model. (iii) The critical failure of a technical or administrative control, including a control limiting the ability to modify a frontier model. (iv) Unauthorized use of a frontier model.Section 102 that includes all of the following: (i) The date of the critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Harm resulting from the materialization of a catastrophic risk. (2) A frontier model that uses deceptive techniques against the frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. (3) A known incidence of death or bodily injury resulting from loss of control of a frontier model. (4) An incident of the following kinds that occurs in a manner that provides demonstrable evidence of an increased risk that a frontier model will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property: (i) A frontier model autonomously engaging in behavior other than at the request of a user. (ii) Theft, misappropriation, malicious use, inadvertent release, unauthorized access to, modification of, exfiltration of or escape of the model weights of a frontier model. (iii) The critical failure of a technical or administrative control, including a control limiting the ability to modify a frontier model. (iv) Unauthorized use of a frontier model.Section 102. (ii) The reasons the incident qualifies as a critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Harm resulting from the materialization of a catastrophic risk. (2) A frontier model that uses deceptive techniques against the frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. (3) A known incidence of death or bodily injury resulting from loss of control of a frontier model. (4) An incident of the following kinds that occurs in a manner that provides demonstrable evidence of an increased risk that a frontier model will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property: (i) A frontier model autonomously engaging in behavior other than at the request of a user. (ii) Theft, misappropriation, malicious use, inadvertent release, unauthorized access to, modification of, exfiltration of or escape of the model weights of a frontier model. (iii) The critical failure of a technical or administrative control, including a control limiting the ability to modify a frontier model. (iv) Unauthorized use of a frontier model.Section 102. (iii) A short and plain statement describing the critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Harm resulting from the materialization of a catastrophic risk. (2) A frontier model that uses deceptive techniques against the frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. (3) A known incidence of death or bodily injury resulting from loss of control of a frontier model. (4) An incident of the following kinds that occurs in a manner that provides demonstrable evidence of an increased risk that a frontier model will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property: (i) A frontier model autonomously engaging in behavior other than at the request of a user. (ii) Theft, misappropriation, malicious use, inadvertent release, unauthorized access to, modification of, exfiltration of or escape of the model weights of a frontier model. (iii) The critical failure of a technical or administrative control, including a control limiting the ability to modify a frontier model. (iv) Unauthorized use of a frontier model.Section 102. (iv) Whether the incident was associated with internal use of a frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102. (2) The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102, in consultation with the Attorney General, shall establish a mechanism to be used by a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 to confidentially submit summaries of any assessments of the potential for catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct with no meaningful human oversight, intervention or supervision that is either a cyberattack or, if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm.Section 102 resulting from internal use of its frontier modelsFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102. (b) Limitation of access to reports.--The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 and the Attorney General shall take all necessary precautions to limit access to reports under this section related to internal use of frontier modelsFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 to only personnel with a specific need to know the information and to protect the reports from unauthorized access. Reports under this section shall not be subject to the act of February 14, 2008 (P.L.6, No.3), known as the Right-to-Know Law.

(c) 11 Timing of report.-- (1) A frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 shall report, using the mechanism established under subsection (a), any critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Harm resulting from the materialization of a catastrophic risk. (2) A frontier model that uses deceptive techniques against the frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. (3) A known incidence of death or bodily injury resulting from loss of control of a frontier model. (4) An incident of the following kinds that occurs in a manner that provides demonstrable evidence of an increased risk that a frontier model will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property: (i) A frontier model autonomously engaging in behavior other than at the request of a user. (ii) Theft, misappropriation, malicious use, inadvertent release, unauthorized access to, modification of, exfiltration of or escape of the model weights of a frontier model. (iii) The critical failure of a technical or administrative control, including a control limiting the ability to modify a frontier model. (iv) Unauthorized use of a frontier model.Section 102 pertaining to one or more of its frontier modelsFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 to the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 and the Attorney General within 72 hours of the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 learning facts sufficient to establish a reasonable belief that a critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Harm resulting from the materialization of a catastrophic risk. (2) A frontier model that uses deceptive techniques against the frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. (3) A known incidence of death or bodily injury resulting from loss of control of a frontier model. (4) An incident of the following kinds that occurs in a manner that provides demonstrable evidence of an increased risk that a frontier model will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property: (i) A frontier model autonomously engaging in behavior other than at the request of a user. (ii) Theft, misappropriation, malicious use, inadvertent release, unauthorized access to, modification of, exfiltration of or escape of the model weights of a frontier model. (iii) The critical failure of a technical or administrative control, including a control limiting the ability to modify a frontier model. (iv) Unauthorized use of a frontier model.Section 102 has occurred. The disclosure shall include all of the following: (i) The date of the critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Harm resulting from the materialization of a catastrophic risk. (2) A frontier model that uses deceptive techniques against the frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. (3) A known incidence of death or bodily injury resulting from loss of control of a frontier model. (4) An incident of the following kinds that occurs in a manner that provides demonstrable evidence of an increased risk that a frontier model will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property: (i) A frontier model autonomously engaging in behavior other than at the request of a user. (ii) Theft, misappropriation, malicious use, inadvertent release, unauthorized access to, modification of, exfiltration of or escape of the model weights of a frontier model. (iii) The critical failure of a technical or administrative control, including a control limiting the ability to modify a frontier model. (iv) Unauthorized use of a frontier model.Section 102. (ii) The reasons the incident qualifies as a critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Harm resulting from the materialization of a catastrophic risk. (2) A frontier model that uses deceptive techniques against the frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. (3) A known incidence of death or bodily injury resulting from loss of control of a frontier model. (4) An incident of the following kinds that occurs in a manner that provides demonstrable evidence of an increased risk that a frontier model will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property: (i) A frontier model autonomously engaging in behavior other than at the request of a user. (ii) Theft, misappropriation, malicious use, inadvertent release, unauthorized access to, modification of, exfiltration of or escape of the model weights of a frontier model. (iii) The critical failure of a technical or administrative control, including a control limiting the ability to modify a frontier model. (iv) Unauthorized use of a frontier model.Section 102. (iii) A short and plain statement describing the critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Harm resulting from the materialization of a catastrophic risk. (2) A frontier model that uses deceptive techniques against the frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. (3) A known incidence of death or bodily injury resulting from loss of control of a frontier model. (4) An incident of the following kinds that occurs in a manner that provides demonstrable evidence of an increased risk that a frontier model will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property: (i) A frontier model autonomously engaging in behavior other than at the request of a user. (ii) Theft, misappropriation, malicious use, inadvertent release, unauthorized access to, modification of, exfiltration of or escape of the model weights of a frontier model. (iii) The critical failure of a technical or administrative control, including a control limiting the ability to modify a frontier model. (iv) Unauthorized use of a frontier model.Section 102. (2) If a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 discovers that a critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Harm resulting from the materialization of a catastrophic risk. (2) A frontier model that uses deceptive techniques against the frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. (3) A known incidence of death or bodily injury resulting from loss of control of a frontier model. (4) An incident of the following kinds that occurs in a manner that provides demonstrable evidence of an increased risk that a frontier model will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property: (i) A frontier model autonomously engaging in behavior other than at the request of a user. (ii) Theft, misappropriation, malicious use, inadvertent release, unauthorized access to, modification of, exfiltration of or escape of the model weights of a frontier model. (iii) The critical failure of a technical or administrative control, including a control limiting the ability to modify a frontier model. (iv) Unauthorized use of a frontier model.Section 102 poses an imminent risk of death or serious physical injury, the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 shall disclose that incident within 24 hours to an authority, including any law enforcement agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 or public safety agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 with jurisdiction, that is appropriate based on the nature of that incident and as required by law.

(d)-(f) Amendment of report.--A frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 that discovers information about a critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Harm resulting from the materialization of a catastrophic risk. (2) A frontier model that uses deceptive techniques against the frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. (3) A known incidence of death or bodily injury resulting from loss of control of a frontier model. (4) An incident of the following kinds that occurs in a manner that provides demonstrable evidence of an increased risk that a frontier model will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property: (i) A frontier model autonomously engaging in behavior other than at the request of a user. (ii) Theft, misappropriation, malicious use, inadvertent release, unauthorized access to, modification of, exfiltration of or escape of the model weights of a frontier model. (iii) The critical failure of a technical or administrative control, including a control limiting the ability to modify a frontier model. (iv) Unauthorized use of a frontier model.Section 102 after filing the initial report required by this section may file an amended report. (e) Foundation modelsFoundation model"Foundation model." An artificial intelligence model that is all of the following: (1) Trained on a broad data set. (2) Designed for generality of output. (3) Adaptable to a wide range of distinctive tasks.Section 102 report.--A frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 is encouraged, but not required, to report critical safety incidentsCritical safety incident"Critical safety incident." Any of the following: (1) Harm resulting from the materialization of a catastrophic risk. (2) A frontier model that uses deceptive techniques against the frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. (3) A known incidence of death or bodily injury resulting from loss of control of a frontier model. (4) An incident of the following kinds that occurs in a manner that provides demonstrable evidence of an increased risk that a frontier model will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property: (i) A frontier model autonomously engaging in behavior other than at the request of a user. (ii) Theft, misappropriation, malicious use, inadvertent release, unauthorized access to, modification of, exfiltration of or escape of the model weights of a frontier model. (iii) The critical failure of a technical or administrative control, including a control limiting the ability to modify a frontier model. (iv) Unauthorized use of a frontier model.Section 102 pertaining to foundation modelsFoundation model"Foundation model." An artificial intelligence model that is all of the following: (1) Trained on a broad data set. (2) Designed for generality of output. (3) Adaptable to a wide range of distinctive tasks.Section 102 that are not frontier modelsFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102. (f) Review.-- (1) The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 and the Attorney General shall review critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Harm resulting from the materialization of a catastrophic risk. (2) A frontier model that uses deceptive techniques against the frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. (3) A known incidence of death or bodily injury resulting from loss of control of a frontier model. (4) An incident of the following kinds that occurs in a manner that provides demonstrable evidence of an increased risk that a frontier model will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property: (i) A frontier model autonomously engaging in behavior other than at the request of a user. (ii) Theft, misappropriation, malicious use, inadvertent release, unauthorized access to, modification of, exfiltration of or escape of the model weights of a frontier model. (iii) The critical failure of a technical or administrative control, including a control limiting the ability to modify a frontier model. (iv) Unauthorized use of a frontier model.Section 102 reports submitted by frontier developersFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 and may review reports submitted by members of the public. (2) The Attorney General or the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 may transmit reports of critical safety incidentsCritical safety incident"Critical safety incident." Any of the following: (1) Harm resulting from the materialization of a catastrophic risk. (2) A frontier model that uses deceptive techniques against the frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. (3) A known incidence of death or bodily injury resulting from loss of control of a frontier model. (4) An incident of the following kinds that occurs in a manner that provides demonstrable evidence of an increased risk that a frontier model will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property: (i) A frontier model autonomously engaging in behavior other than at the request of a user. (ii) Theft, misappropriation, malicious use, inadvertent release, unauthorized access to, modification of, exfiltration of or escape of the model weights of a frontier model. (iii) The critical failure of a technical or administrative control, including a control limiting the ability to modify a frontier model. (iv) Unauthorized use of a frontier model.Section 102 to the General Assembly, the Governor, the Federal Government or appropriate Commonwealth agencies. The Attorney General and the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 shall strongly consider any risks related to trade secrets, public safety, cybersecurity of a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 or national security when transmitting reports.

Duty of agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102.--Beginning January 1, 2029, and annually thereafter, the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102, in consultation with the Attorney General, shall produce a report that includes all of the following: (1) Anonymized and aggregated information about critical safety incidentsCritical safety incident"Critical safety incident." Any of the following: (1) Harm resulting from the materialization of a catastrophic risk. (2) A frontier model that uses deceptive techniques against the frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. (3) A known incidence of death or bodily injury resulting from loss of control of a frontier model. (4) An incident of the following kinds that occurs in a manner that provides demonstrable evidence of an increased risk that a frontier model will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property: (i) A frontier model autonomously engaging in behavior other than at the request of a user. (ii) Theft, misappropriation, malicious use, inadvertent release, unauthorized access to, modification of, exfiltration of or escape of the model weights of a frontier model. (iii) The critical failure of a technical or administrative control, including a control limiting the ability to modify a frontier model. (iv) Unauthorized use of a frontier model.Section 102 that have been reviewed by the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 or the Attorney General since the preceding report. (2) Information that the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 deems relevant to frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 safety. (3) Recommended updates to this act, if any. (4) Developments relevant to the purposes of this act. (b) Prohibition.--The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 and the Attorney General may not include information in a report that would compromise the trade secrets or cybersecurity of a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102, public safety or the national security of the United States or that would be prohibited by Federal or State law. (c) Transmission.--The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 shall transmit the report under this section to the General Assembly and the Governor.

(a)-(b) Declaration.--A frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 that intends to comply with this act by complying with the requirements of, or meeting the standards stated by Federal law, regulation or guidance document designated under subsection (b) shall declare the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102's intent to do so to the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 by following the process outlined on the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102's publicly accessible Internet website. (b) Process for declaration.--The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102, in consultation with the Attorney General, shall designate on the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102's publicly accessible Internet website a declaration process and one or more Federal laws, regulations or guidance documents that meet all of the following conditions for purposes of subsection (a): (1) The Federal law, regulation or guidance document imposes or states standards or requirements for critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Harm resulting from the materialization of a catastrophic risk. (2) A frontier model that uses deceptive techniques against the frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. (3) A known incidence of death or bodily injury resulting from loss of control of a frontier model. (4) An incident of the following kinds that occurs in a manner that provides demonstrable evidence of an increased risk that a frontier model will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property: (i) A frontier model autonomously engaging in behavior other than at the request of a user. (ii) Theft, misappropriation, malicious use, inadvertent release, unauthorized access to, modification of, exfiltration of or escape of the model weights of a frontier model. (iii) The critical failure of a technical or administrative control, including a control limiting the ability to modify a frontier model. (iv) Unauthorized use of a frontier model.Section 102 reporting that are substantially equivalent to, or stricter than, those required by this act. (2) The Federal law, regulation or guidance document does not need to require critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Harm resulting from the materialization of a catastrophic risk. (2) A frontier model that uses deceptive techniques against the frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. (3) A known incidence of death or bodily injury resulting from loss of control of a frontier model. (4) An incident of the following kinds that occurs in a manner that provides demonstrable evidence of an increased risk that a frontier model will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property: (i) A frontier model autonomously engaging in behavior other than at the request of a user. (ii) Theft, misappropriation, malicious use, inadvertent release, unauthorized access to, modification of, exfiltration of or escape of the model weights of a frontier model. (iii) The critical failure of a technical or administrative control, including a control limiting the ability to modify a frontier model. (iv) Unauthorized use of a frontier model.Section 102 reporting to this Commonwealth. (3) The Federal law, regulation or guidance document is intended to assess, detect or mitigate catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct with no meaningful human oversight, intervention or supervision that is either a cyberattack or, if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm.Section 102 in ways that are substantially equivalent to this act. (4) For a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102, the Federal law, regulation or guidance document requires independent third-party audits of its assessment of catastrophic risksCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct with no meaningful human oversight, intervention or supervision that is either a cyberattack or, if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm.Section 102 and critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Harm resulting from the materialization of a catastrophic risk. (2) A frontier model that uses deceptive techniques against the frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. (3) A known incidence of death or bodily injury resulting from loss of control of a frontier model. (4) An incident of the following kinds that occurs in a manner that provides demonstrable evidence of an increased risk that a frontier model will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property: (i) A frontier model autonomously engaging in behavior other than at the request of a user. (ii) Theft, misappropriation, malicious use, inadvertent release, unauthorized access to, modification of, exfiltration of or escape of the model weights of a frontier model. (iii) The critical failure of a technical or administrative control, including a control limiting the ability to modify a frontier model. (iv) Unauthorized use of a frontier model.Section 102 reporting with requirements that are substantially equivalent to, or stricter than, those required by this act.

(c)-(d) Compliance.--After a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 has declared intent under this section, the following apply: (1) The frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 shall be deemed in compliance only with a requirement of this act that the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 has specifically determined is substantially equivalent to, or less stringent than, the corresponding requirement of the designated Federal law, regulation or guidance document, and only to the extent that the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 meets the standards of, or complies with, the requirements imposed or stated by the designated Federal law, regulation or guidance document. (2) The failure by a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 to meet the standards of, or comply with, the requirements stated by the Federal law, regulation or guidance document designated under subsection (b) shall constitute a violation of this act. (d) Updates.--The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 shall issue updated guidance documents on the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102's publicly accessible Internet website if the requirements of subsection (b) are no longer met.

Redactions.--If a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 publishes a document to comply with this act, the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 may make appropriate redactions to the document that are necessary to protect the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102's trade secrets, the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102's cybersecurity, public safety or the national security of the United States or to comply with Federal or State law. (b) Justification.--If a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 redacts information in a document, the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 shall describe the character and justification of the redaction in any published version of the document to the extent permitted by the concerns that justify the redaction and shall retain the unredacted information for five years.

(a)-(b) 12 Prohibition.--A frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 shall not make, adopt, enforce or enter into a rule, regulation, policy or contract that prevents a covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of critical safety incidents.Section 102 from disclosing, or retaliates against a covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of critical safety incidents.Section 102 for disclosing, information to the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102, Attorney General, a Federal authority, a personPerson"Person." An individual, proprietorship, firm, partnership, joint venture, syndicate, business trust, company, corporation, limited liability company, association, committee or any other nongovernmental organization or group of persons acting in concert.Section 102 with authority over the covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of critical safety incidents.Section 102 or another covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of critical safety incidents.Section 102 who has authority to investigate, discover or correct the reported issue, if the covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of critical safety incidents.Section 102 has reasonable cause to believe that the information discloses that: (1) The frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102's activities pose a specific and substantial danger to the public health or safety resulting from a catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct with no meaningful human oversight, intervention or supervision that is either a cyberattack or, if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm.Section 102. (2) The frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 has violated this act. (b) Contract prohibition.--A frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 shall not enter into a contract that prevents a covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of critical safety incidents.Section 102 from making a disclosure protected under applicable law, including the act of December 12, 1986 (P.L.1559, No.169), known as the Whistleblower Law.

(c) 13 Notice to employees.--A frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 shall provide a clear notice to all covered employees of employee's rights and responsibilities under this section, including by doing one of the following: (1) At all times posting and displaying within any workplace maintained by the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 a notice to all covered employees of the employee's rights under this section, ensuring that any new covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of critical safety incidents.Section 102 receives equivalent notice and ensuring that any covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of critical safety incidents.Section 102 who works remotely periodically receives an equivalent notice. (2) At least once each year, providing written notice to each covered employee of the covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of critical safety incidents.Section 102's rights under this section and ensuring that the notice is received and acknowledged by all covered employeesCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of critical safety incidents.Section 102.

(d)-(e) 14 Duty of large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102.-- (1) A large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall provide a reasonable internal process through which a covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of critical safety incidents.Section 102 may anonymously disclose information to the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 if the covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of critical safety incidents.Section 102 believes in good faith that the information indicates that the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102's activities present a specific and substantial danger to the public health or safety resulting from a catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct with no meaningful human oversight, intervention or supervision that is either a cyberattack or, if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm.Section 102 or that the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 violated this act, including a monthly update to the personPerson"Person." An individual, proprietorship, firm, partnership, joint venture, syndicate, business trust, company, corporation, limited liability company, association, committee or any other nongovernmental organization or group of persons acting in concert.Section 102 who made the disclosure regarding the status of the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102's investigation of the disclosure and the actions taken by the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 in response to the disclosure. (2) Except as provided under paragraph (3), the disclosures and responses of the process required by this subsection shall be shared with officers and directors of the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 at least once each quarter. (3) If a covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of critical safety incidents.Section 102 has alleged wrongdoing by an officer or director of the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 in a disclosure or response, paragraph (2) shall not apply with respect to that officer or director. (e) Applicability.--This section does not impair or limit the applicability of the Whistleblower Law, including with respect to the rights of employees who are not covered employeesCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of critical safety incidents.Section 102 to report violations of this act.

15 Frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102.--A frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 shall not knowingly make a false or materially misleading statement or omission in or regarding a document published, submitted or transmitted under this act concerning catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct with no meaningful human oversight, intervention or supervision that is either a cyberattack or, if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm.Section 102 from its frontier modelsFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 or its management of catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct with no meaningful human oversight, intervention or supervision that is either a cyberattack or, if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm.Section 102. (b) Large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102.--A large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall not knowingly make a false or materially misleading statement or omission in or regarding a document published, submitted or transmitted under this act concerning its implementation of, or compliance with, its frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate catastrophic risks.Section 102. (c) Applicability.--This section shall not apply to a statement or omission that was made in good faith and was reasonable under the circumstances.

(a) Civil penalties.--A large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 that fails to publish, submit or transmit a compliant document required under this act, makes a statement or omission in violation of section 1104, fails to implement appropriate safeguards as required under Chapter 5, deploysDeploy"Deploy." To make a frontier model available to a third party for use, modification, copying or combination with other software. The term does not include making a frontier model available to a third party for the primary purpose of researching, developing or evaluating the frontier model.Section 102 a frontier modelFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 in violation of section 506, fails to retain testing information as required under section 504(9), fails to have a third party perform an independent audit of compliance as required by section 504, fails to report a critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Harm resulting from the materialization of a catastrophic risk. (2) A frontier model that uses deceptive techniques against the frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. (3) A known incidence of death or bodily injury resulting from loss of control of a frontier model. (4) An incident of the following kinds that occurs in a manner that provides demonstrable evidence of an increased risk that a frontier model will cause or materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property: (i) A frontier model autonomously engaging in behavior other than at the request of a user. (ii) Theft, misappropriation, malicious use, inadvertent release, unauthorized access to, modification of, exfiltration of or escape of the model weights of a frontier model. (iii) The critical failure of a technical or administrative control, including a control limiting the ability to modify a frontier model. (iv) Unauthorized use of a frontier model.Section 102 as required by section 702 or fails to comply with its own frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate catastrophic risks.Section 102 shall be subject to a civil penalty in an amount dependent upon the severity of the violation that does not exceed $1,000,000 for the first violation. For a subsequent violation, the civil penalty may not exceed $3,000,000 per violation.

(b) Applicability.-- (1) The Attorney General may bring a civil action to recover a civil penalty under this section and may seek injunctive or declaratory relief for a violation of this act. Any civil penalties collected from enforcement of this act shall be deposited into the General Fund. (2) The loss of value of equity does not count as damage to or loss of propertyProperty"Property." Includes both tangible and intangible property.Section 102 for the purposes of this act. (3) Nothing in this act shall be construed to establish a private right of action associated with violations of this act.

The duties and obligations imposed by this act are cumulative with any other duties or obligations imposed under other law and shall not be construed to relieve any party from any duties or obligations imposed under other law and do not limit any rights or remedies under existing law.

The regulation of artificial intelligenceArtificial intelligence"Artificial intelligence" or "AI." The term shall have the same meaning as under 18 Pa.C.S. § 3131(g) (relating to unlawful dissemination of intimate image).Section 102 frontier modelsFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102 is an exclusive power and function of the Commonwealth. A political subdivisionPolitical subdivision"Political subdivision." A county, city, borough, incorporated town, township, home rule municipality, municipal authority or other unit of local government in this Commonwealth.Section 102 may not enact or enforce a law, ordinance, resolution, rule, regulation or other requirement that specifically regulates artificial intelligenceArtificial intelligence"Artificial intelligence" or "AI." The term shall have the same meaning as under 18 Pa.C.S. § 3131(g) (relating to unlawful dissemination of intimate image).Section 102 frontier modelsFrontier model"Frontier model." A foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications the developer applies to a preceding foundation model.Section 102.

The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102, in consultation with the Attorney General, may promulgate regulations necessary to implement and administer this act.

A frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications of a frontier model.Section 102 that first qualifies as a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 after the effective date of this section shall have 90 days from the date it first qualifies as a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 to comply with Chapter 5.

This act shall take effect January 1, 2028.