Pennsylvania · House Bill · 2021–2022 Regular Session
HB2903
Pennsylvania HB 2903 — An Act amending The Administrative Code of 1929, providing for artificial intelligence registry

Status ● Failed Effective N/A Passage Likelihood N/A

WHAT THIS BILL REGULATES · 2 REQUIREMENT TYPES

How Is This Bill Enforced

Enforcement Authority
The Department of State is the designated administrative authority for the registry. The bill does not create any private right of action, civil penalty, or enforcement mechanism for non-compliance with the registration requirement.
Private Right of Action
No private right of action. Enforcement is exclusive to the designated authority.
Penalties
The bill does not specify any penalties, damages, or remedies for non-compliance.

What This Bill Requires

Verbatim statutory text on the left; plain-language analysis and a per-section checklist on the right. Numbered markers cross-link to the matching checklist row.

Statutory Text
Analysis & Obligations
Section 817(a)–(g)
Artificial Intelligence Registry
DeployerDeveloperGovernment

(a) 1 The Department of State shall establish a registry of businesses operating artificial intelligenceartificial intelligenceAs used in this section, the term "artificial intelligence" shall mean the theory and development of computer systems able to perform tasks that normally require human intelligence.Section 817(g) systems in this Commonwealth.

(b) 1 The Department of State shall coordinate with other State agencies that have contact with businesses operating artificial intelligenceartificial intelligenceAs used in this section, the term "artificial intelligence" shall mean the theory and development of computer systems able to perform tasks that normally require human intelligence.Section 817(g) systems to establish a paper and an online registry form to enable State agencies to assist the Department of State in registering businesses in the registry.

(c) 1 The Department of State shall provide access to a paper and an online registry form which contain a statement indicating the purpose for the registry. The forms shall be developed to obtain the following information relating to the business operating artificial intelligenceartificial intelligenceAs used in this section, the term "artificial intelligence" shall mean the theory and development of computer systems able to perform tasks that normally require human intelligence.Section 817(g) systems: (1) The name of the business operating artificial intelligenceartificial intelligenceAs used in this section, the term "artificial intelligence" shall mean the theory and development of computer systems able to perform tasks that normally require human intelligence.Section 817(g) systems. (2) The IP address of the business. (3) The type of code the business is utilizing for artificial intelligenceartificial intelligenceAs used in this section, the term "artificial intelligence" shall mean the theory and development of computer systems able to perform tasks that normally require human intelligence.Section 817(g). (4) The intent of the software being utilized. (5) The personal information and first and last name of a contact person at the business. (6) The address, electronic email address and ten-digit telephone number of the contact person under paragraph (5). (7) A signed statement, or, for online applicants, a box that is checked, indicating that the business operating an artificial intelligenceartificial intelligenceAs used in this section, the term "artificial intelligence" shall mean the theory and development of computer systems able to perform tasks that normally require human intelligence.Section 817(g) system has agreed for the Department of State to store the business' information on the registry.

(d) Information collected under this section may not be sold or used for commercial purposes or used for purposes not specified under this section. Information collected under this section for the registry shall be exempt from disclosure under the act of February 14, 2008 (P.L.6, No.3), known as the Right-to-Know Law.

(e) 1 The department shall maintain a searchable online database for businesses operating artificial intelligenceartificial intelligenceAs used in this section, the term "artificial intelligence" shall mean the theory and development of computer systems able to perform tasks that normally require human intelligence.Section 817(g) systems.

(f) 2 By January 1, 2024, and each January 1 thereafter, the Department of State shall submit to the chairperson and minority chairperson of the Commerce Committee of the Senate and the chairperson and minority chairperson of the Commerce Committee of the House of Representatives a report on the registry which shall include: (1) The total number of businesses operating artificial intelligenceartificial intelligenceAs used in this section, the term "artificial intelligence" shall mean the theory and development of computer systems able to perform tasks that normally require human intelligence.Section 817(g) systems registered with the Department of State. (2) The number of registrants received by each State agency. (3) Expenses incurred by the Department of State.

(g) As used in this section, the term "artificial intelligenceartificial intelligenceAs used in this section, the term "artificial intelligence" shall mean the theory and development of computer systems able to perform tasks that normally require human intelligence.Section 817(g)" shall mean the theory and development of computer systems able to perform tasks that normally require human intelligence.

Section 817 creates the operative framework for a state-administered registry of businesses operating AI systems in Pennsylvania. The Department of State is directed to stand up both paper and online registration forms, coordinate with other state agencies to capture registrants, and maintain the registry as a searchable online database. The registration form collects seven categories of information — business name, IP address, AI code type, software intent, a contact person's identity and contact details, and an affirmative consent statement authorizing storage.

Registry data receives two protections: it may not be sold or used for commercial purposes, and it is exempt from disclosure under Pennsylvania's Right-to-Know Law. The Department must submit annual reports to the Commerce Committees of both chambers beginning January 1, 2024. The bill contains no penalty or enforcement mechanism for businesses that fail to register.

Compliance actions 2 items
1
Businesses operating artificial intelligenceartificial intelligenceAs used in this section, the term "artificial intelligence" shall mean the theory and development of computer systems able to perform tasks that normally require human intelligence.Section 817(g) systems in Pennsylvania must register with the Department of State by providing their business name, IP address, AI code type, software intent, a contact person's name and contact details, and a signed consent statement.
R-02.3
2
The Department of State must submit an annual report to the Commerce Committees of both chambers by January 1 of each year, including the total number of registered AI businesses, the number of registrants received by each state agency, and expenses incurred by the Department.
R-03.1
Section 2
Effective date

This act shall take effect in 60 days.

Section 2 provides that the act takes effect 60 days after enactment. Because the bill was never enacted, no effective date was established.

Passage Likelihood

Failed
Status Failed
Final action Referred to STATE GOVERNMENT

Legislative History

2022-10-26 Referred to STATE GOVERNMENT

Entry Last Reviewed

2026-05-17
AI generated