Pennsylvania · Senate Bill · 2025–2026 Regular Session
SB1349
Pennsylvania Senate Bill 1349 — Digital Provenance Act

Status ● Introduced Effective N/A Passage Likelihood L

WHAT THIS BILL REGULATES · 2 REQUIREMENT TYPES

How Is This Bill Enforced

Enforcement Authority
The Bureau of Consumer Protection in the Office of Attorney General administers and enforces the act. Enforcement is agency-initiated: the bureau may bring a civil action to enforce the act and collect civil penalties or seek injunctive relief, and may subject a violating third-party licensee to a civil action for injunctive relief. The Attorney General may bring a civil action on behalf of the bureau to collect a fine or civil penalty. No private right of action is created.
Private Right of Action
No private right of action. Enforcement is exclusive to the designated authority.
Penalties
Civil penalty not to exceed $5,000 per violation against a covered AI tool provider. Injunctive relief is available against covered AI tool providers and third-party licensees. If the court awards judgment or injunctive relief to the bureau, it must award reasonable attorney fees, court costs, and investigative fees.

What This Bill Requires

Verbatim statutory text on the left; plain-language analysis and a per-section checklist on the right. Numbered markers cross-link to the matching checklist row.

Statutory Text
Analysis & Obligations
Section 1
Short title

This act shall be known and may be cited as the Digital Provenance Act.

Establishes the short title of the act as the Digital Provenance Act. No compliance obligation.

Section 2
Definitions

"Artificial intelligenceArtificial intelligence"Artificial intelligence" or "AI." A machine-based system capable of making, for a given set of human-defined objectives, predictions, recommendations or decisions influencing real or virtual environments that use machine-based and human-based inputs to perceive real and virtual environments, abstract the perceptions into models through analysis in an automated manner and use model inference to formulate options for information or action. The term includes the class of models that emulate the structure and characteristics of input data in order to generate derived synthetic content which includes information such as images, videos, audio clips and text that has been significantly modified or generated by algorithms.Section 2" or "AI." A machine-based system capable of making, for a given set of human-defined objectives, predictions, recommendations or decisions influencing real or virtual environments that use machine-based and human-based inputs to perceive real and virtual environments, abstract the perceptions into models through analysis in an automated manner and use model inference to formulate options for information or action. The term includes the class of models that emulate the structure and characteristics of input data in order to generate derived synthetic contentSynthetic content"Synthetic content." Audio or visual content that has been generated or materially altered by synthetic content creations.Section 2 which includes information such as images, videos, audio clips and text that has been significantly modified or generated by algorithms.

"BureauBureau"Bureau." The Bureau of Consumer Protection in the Office of Attorney General.Section 2." The Bureau of Consumer Protection in the Office of Attorney General.

"Capture deviceCapture device"Capture device." A device capable of recording at least 10 photographic, audio or video content instances, including, but not limited to, video and still photography cameras, mobile phones with built-in cameras or microphones and voice recorders.Section 2." A device capable of recording at least 10 photographic, audio or video content instances, including, but not limited to, video and still photography cameras, mobile phones with built-in cameras or microphones and voice recorders.

"Covered AI tool providerCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2." A personPerson"Person." The term includes a governmental entity.Section 2 that creates, codes or otherwise produces a generative artificial intelligence systemGenerative artificial intelligence system"Generative artificial intelligence system." An artificial intelligence system capable of generating synthetic images, videos, audio content or any combination thereof that emulates the structure and characteristics of the system's training data. This definition does not include a system that generates only text-based content.Section 2 that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence systemGenerative artificial intelligence system"Generative artificial intelligence system." An artificial intelligence system capable of generating synthetic images, videos, audio content or any combination thereof that emulates the structure and characteristics of the system's training data. This definition does not include a system that generates only text-based content.Section 2 to generate, manipulate or otherwise edit audio, video and image content.

"Generative artificial intelligence systemGenerative artificial intelligence system"Generative artificial intelligence system." An artificial intelligence system capable of generating synthetic images, videos, audio content or any combination thereof that emulates the structure and characteristics of the system's training data. This definition does not include a system that generates only text-based content.Section 2." An artificial intelligenceArtificial intelligence"Artificial intelligence" or "AI." A machine-based system capable of making, for a given set of human-defined objectives, predictions, recommendations or decisions influencing real or virtual environments that use machine-based and human-based inputs to perceive real and virtual environments, abstract the perceptions into models through analysis in an automated manner and use model inference to formulate options for information or action. The term includes the class of models that emulate the structure and characteristics of input data in order to generate derived synthetic content which includes information such as images, videos, audio clips and text that has been significantly modified or generated by algorithms.Section 2 system capable of generating synthetic images, videos, audio content or any combination thereof that emulates the structure and characteristics of the system's training data. This definition does not include a system that generates only text-based content.

"Large online platformLarge online platform"Large online platform." A public-facing social media platform, content-sharing platform, messaging platform, advertising network, stand-alone search engine or web browser that distributes content to users who did not create or collaborate in creating the content that exceeded 2,000,000 unique monthly users during the preceding 12 months.Section 2." A public-facing social media platform, content-sharing platform, messaging platform, advertising network, stand-alone search engine or web browser that distributes content to users who did not create or collaborate in creating the content that exceeded 2,000,000 unique monthly users during the preceding 12 months.

"PersonPerson"Person." The term includes a governmental entity.Section 2." The term includes a governmental entity.

"Provenance labelProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2." A disclosure embedded in image, video or audio content in a manner that is machine-readable.

"Provenance label reading toolProvenance label reading tool"Provenance label reading tool." A software program, application or other mechanism that reads a provenance label and allows a person to determine whether an image, video or audio content was created or altered by a specific covered AI tool provider's generative artificial intelligence system.Section 2." A software program, application or other mechanism that reads a provenance labelProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2 and allows a personPerson"Person." The term includes a governmental entity.Section 2 to determine whether an image, video or audio content was created or altered by a specific covered AI tool providerCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2's generative artificial intelligence systemGenerative artificial intelligence system"Generative artificial intelligence system." An artificial intelligence system capable of generating synthetic images, videos, audio content or any combination thereof that emulates the structure and characteristics of the system's training data. This definition does not include a system that generates only text-based content.Section 2.

"Synthetic contentSynthetic content"Synthetic content." Audio or visual content that has been generated or materially altered by synthetic content creations.Section 2." Audio or visual content that has been generated or materially altered by synthetic contentSynthetic content"Synthetic content." Audio or visual content that has been generated or materially altered by synthetic content creations.Section 2 creations.

Section 2 supplies the defined terms that set the scope of the act. The covered AI tool provider threshold (over 1,000,000 monthly users) and the large online platform threshold (over 2,000,000 unique monthly users) determine who is regulated. Critically, the definition of generative artificial intelligence system excludes systems that generate only text-based content, so the act reaches synthetic image, video, and audio generators but not text-only LLMs.

The provenance label and provenance label reading tool definitions establish the machine-readable disclosure architecture the operative sections build on. No obligations arise from this section.

Section 3
Requirements for covered AI tool providers
Developer

(a) 1 Provenance label reading toolProvenance label reading tool"Provenance label reading tool." A software program, application or other mechanism that reads a provenance label and allows a person to determine whether an image, video or audio content was created or altered by a specific covered AI tool provider's generative artificial intelligence system.Section 2.--A covered AI tool providerCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2 shall make available, at no cost to a personPerson"Person." The term includes a governmental entity.Section 2, a provenance label reading toolProvenance label reading tool"Provenance label reading tool." A software program, application or other mechanism that reads a provenance label and allows a person to determine whether an image, video or audio content was created or altered by a specific covered AI tool provider's generative artificial intelligence system.Section 2 that: (1) is publicly accessible through a conspicuous link on the covered AI tool providerCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2's publicly accessible Internet website and any corresponding mobile application; (2) allows a personPerson"Person." The term includes a governmental entity.Section 2 to do either of the following: (i) upload an image, video or audio content; or (ii) provide an apparent Uniform Resource Locator that links an image, video or audio content; (3) supports access via an Application Program Interface that allows a personPerson"Person." The term includes a governmental entity.Section 2 to programmatically submit content for assessment without accessing the covered AI tool providerCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2's publicly accessible Internet website; (4) provides a mechanism for a personPerson"Person." The term includes a governmental entity.Section 2 to submit feedback regarding the tool's efficacy which the covered AI tool providerCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2 considers and uses to improve the tool; and (5) does not disclose personal information that may be contained in the provenance labelProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2, unless the disclosure is required by court order or law enforcement activity.

(b) 2 Prohibitions on covered AI tool providersCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2.--A covered AI tool providerCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2 may not: (1) Collect or retain any personal information from a personPerson"Person." The term includes a governmental entity.Section 2 who utilizes the provenance label reading toolProvenance label reading tool"Provenance label reading tool." A software program, application or other mechanism that reads a provenance label and allows a person to determine whether an image, video or audio content was created or altered by a specific covered AI tool provider's generative artificial intelligence system.Section 2, except that the covered AI tool providerCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2 may retain contact information voluntarily provided by a personPerson"Person." The term includes a governmental entity.Section 2 who submits feedback under subsection (a)(4). (2) Retain any content submitted to the provenance label reading toolProvenance label reading tool"Provenance label reading tool." A software program, application or other mechanism that reads a provenance label and allows a person to determine whether an image, video or audio content was created or altered by a specific covered AI tool provider's generative artificial intelligence system.Section 2 for longer than necessary to comply with this act.

(c) 3 Content disclosures.--A covered AI tool providerCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2 shall include a provenance labelProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2 in any image, video or audio content instance created by its generative artificial intelligence systemGenerative artificial intelligence system"Generative artificial intelligence system." An artificial intelligence system capable of generating synthetic images, videos, audio content or any combination thereof that emulates the structure and characteristics of the system's training data. This definition does not include a system that generates only text-based content.Section 2 and the provenance labelProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2 shall: (1) Be readable by the provenance label reading toolProvenance label reading tool"Provenance label reading tool." A software program, application or other mechanism that reads a provenance label and allows a person to determine whether an image, video or audio content was created or altered by a specific covered AI tool provider's generative artificial intelligence system.Section 2 required by subsection (a). (2) Be permanent or extraordinarily difficult to remove. (3) Convey, either directly or indirectly through a link to a permanent publicly accessible Internet website: (i) The name of the covered AI tool providerCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2. (ii) The name and version number of the generative artificial intelligence systemGenerative artificial intelligence system"Generative artificial intelligence system." An artificial intelligence system capable of generating synthetic images, videos, audio content or any combination thereof that emulates the structure and characteristics of the system's training data. This definition does not include a system that generates only text-based content.Section 2 that created or altered the content. (iii) The time and date that the content was created or altered. (4) Convey, either directly or through a link to a permanent publicly accessible Internet website, information to determine if digital content has been subjected to or created by one or more of the following: (i) Significant augmentation or correction by a human or correction algorithm such as the removal or insertion of people or objects. (ii) Minor augmentation or correction by human or algorithm such as a digital photo that has been modified to change attributes such as brightness, contrast or noise. (iii) Algorithmic instantiation, using as its basis, an underlying model derived from sample content or training data such as an image created from a prompt to a generative AI chatbot.

Section 3 is the core obligation for covered AI tool providers. It imposes a detection-tool duty, data-handling restrictions, and a content-labeling duty. The provider must build and freely offer a provenance label reading tool — publicly accessible, supporting both manual upload/URL submission and programmatic API access — that lets anyone determine whether content was generated by that provider's system.

The provider must also embed a durable, machine-readable provenance label in every image, video, or audio instance its generative system creates, conveying the provider name, system name and version, creation timestamp, and the degree and nature of any AI augmentation. The label must be permanent or extraordinarily difficult to remove. Separately, the provider may not collect or retain personal information from users of the reading tool or retain submitted content longer than necessary.

Compliance actions 3 items
1
Covered AI tool providersCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2 must offer a free, publicly accessible provenance-label reading tool — linked conspicuously on their website and mobile app, accepting content by upload or URL, and supporting programmatic API submission — that lets anyone determine whether content was created or altered by the provider's generative AI system.
T-02.7
2
Covered AI tool providersCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2 must not collect or retain personal information from users of the provenance-label reading tool (except voluntarily-submitted feedback contact info) and must not retain submitted content longer than necessary to comply with the act.
D-01.4
3
Covered AI tool providersCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2 must embed a permanent or extraordinarily-difficult-to-remove, machine-readable provenance labelProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2 in every AI-generated image, video, and audio instance, conveying the provider name, system name and version, creation timestamp, and the type and degree of AI augmentation.
T-02.2
Section 4
Requirements for large online providers
Deployer

(a) 4 Duties.--A large online provider shall: (1) Provide a mechanism to disclose any machine-readable provenance labelProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2 detected in content distributed on the large online platformLarge online platform"Large online platform." A public-facing social media platform, content-sharing platform, messaging platform, advertising network, stand-alone search engine or web browser that distributes content to users who did not create or collaborate in creating the content that exceeded 2,000,000 unique monthly users during the preceding 12 months.Section 2 that meets the following criteria: (i) The mechanism indicates whether a provenance labelProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2 is available. (ii) The mechanism is presented in a conspicuous manner to users. (2) Allow a user to inspect any provenance labelProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2 in an easily accessible manner.

(b) 5 Restrictions on large online providers.--A large online provider may not: (1) Strip a provenance labelProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2 from content uploaded or distributed on the large online platformLarge online platform"Large online platform." A public-facing social media platform, content-sharing platform, messaging platform, advertising network, stand-alone search engine or web browser that distributes content to users who did not create or collaborate in creating the content that exceeded 2,000,000 unique monthly users during the preceding 12 months.Section 2. (2) Retain any personal provenance data from content shared on the large online platformLarge online platform"Large online platform." A public-facing social media platform, content-sharing platform, messaging platform, advertising network, stand-alone search engine or web browser that distributes content to users who did not create or collaborate in creating the content that exceeded 2,000,000 unique monthly users during the preceding 12 months.Section 2.

Section 4 imposes platform-side duties on large online platforms (over 2,000,000 unique monthly users). The platform must provide a conspicuous mechanism that indicates whether a machine-readable provenance label is present in distributed content and let users inspect it. It is separately prohibited from stripping provenance labels from uploaded or distributed content and from retaining personal provenance data.

Compliance actions 2 items
4
Large online platformsLarge online platform"Large online platform." A public-facing social media platform, content-sharing platform, messaging platform, advertising network, stand-alone search engine or web browser that distributes content to users who did not create or collaborate in creating the content that exceeded 2,000,000 unique monthly users during the preceding 12 months.Section 2 must detect machine-readable provenance labelsProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2 in content they distribute and provide a conspicuous user-facing mechanism that discloses whether a provenance labelProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2 is available and lets users inspect it.
T-02.4
5
Large online platformsLarge online platform"Large online platform." A public-facing social media platform, content-sharing platform, messaging platform, advertising network, stand-alone search engine or web browser that distributes content to users who did not create or collaborate in creating the content that exceeded 2,000,000 unique monthly users during the preceding 12 months.Section 2 must not strip provenance labelsProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2 from content uploaded or distributed on the platform and must not retain personal provenance data from shared content.
T-02.6
Section 5
Requirements for capture devices
Manufacturer

6 A manufacturer of capture devicesCapture device"Capture device." A device capable of recording at least 10 photographic, audio or video content instances, including, but not limited to, video and still photography cameras, mobile phones with built-in cameras or microphones and voice recorders.Section 2 shall, with respect to any capture deviceCapture device"Capture device." A device capable of recording at least 10 photographic, audio or video content instances, including, but not limited to, video and still photography cameras, mobile phones with built-in cameras or microphones and voice recorders.Section 2 the capture deviceCapture device"Capture device." A device capable of recording at least 10 photographic, audio or video content instances, including, but not limited to, video and still photography cameras, mobile phones with built-in cameras or microphones and voice recorders.Section 2 manufacturer produces for the sale in this Commonwealth: (1) Provide a user with the option to include a provenance labelProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2 in content captured by the capture deviceCapture device"Capture device." A device capable of recording at least 10 photographic, audio or video content instances, including, but not limited to, video and still photography cameras, mobile phones with built-in cameras or microphones and voice recorders.Section 2 that conveys: (i) The name of the capture deviceCapture device"Capture device." A device capable of recording at least 10 photographic, audio or video content instances, including, but not limited to, video and still photography cameras, mobile phones with built-in cameras or microphones and voice recorders.Section 2 manufacturer. (ii) The name and version number of the capture deviceCapture device"Capture device." A device capable of recording at least 10 photographic, audio or video content instances, including, but not limited to, video and still photography cameras, mobile phones with built-in cameras or microphones and voice recorders.Section 2 that created or altered the content. (iii) The time and date of the content's creation or alteration. The options required by this paragraph shall be available for the capture deviceCapture device"Capture device." A device capable of recording at least 10 photographic, audio or video content instances, including, but not limited to, video and still photography cameras, mobile phones with built-in cameras or microphones and voice recorders.Section 2's default capture application and third-party applications that bypass default capture applications in order to offer capture functionalities. (2) Embed provenance labelsProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2 in content captured by the device by default. (3) Clearly inform users of the existence of settings related to provenance labelsProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2 upon a user's first use of the recording function line on the capture deviceCapture device"Capture device." A device capable of recording at least 10 photographic, audio or video content instances, including, but not limited to, video and still photography cameras, mobile phones with built-in cameras or microphones and voice recorders.Section 2. (4) If a capture deviceCapture device"Capture device." A device capable of recording at least 10 photographic, audio or video content instances, including, but not limited to, video and still photography cameras, mobile phones with built-in cameras or microphones and voice recorders.Section 2 application is in use, contain a clear indicator when a provenance labelProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2 is applied. (5) Include in the capture deviceCapture device"Capture device." A device capable of recording at least 10 photographic, audio or video content instances, including, but not limited to, video and still photography cameras, mobile phones with built-in cameras or microphones and voice recorders.Section 2's default capture application the ability for a user to opt out of the inclusion of a provenance labelProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2 based on guidelines or specifications promulgated by an established standard-setting body in the user's captured content.

Section 5 imposes provenance obligations on capture-device manufacturers for devices produced for sale in the Commonwealth. Manufacturers must give users the option to include a provenance label conveying the manufacturer name, device name and version, and creation timestamp, and must embed provenance labels by default. They must inform users of provenance settings on first use of the recording function, provide a clear in-app indicator when a label is applied, and include a user opt-out in the default capture application consistent with established standard-setting body guidelines. The opt-in option must extend to third-party capture applications that bypass the default.

Compliance actions 1 item
6
Capture-device manufacturers must, for devices produced for sale in Pennsylvania, embed provenance labelsProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2 by default (conveying manufacturer name, device name and version, and creation timestamp), offer a user opt-out, inform users of provenance settings on first use, and display a clear indicator when a label is applied.
T-02.2
Section 6
Third-party licenses
Developer

(a) 7 Duties of licensees.--If a covered AI tool providerCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2 licenses its generative system to a third party, the covered AI tool providerCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2 shall require by contract that the licensee maintain the system's capability to include a provenance labelProvenance label"Provenance label." A disclosure embedded in image, video or audio content in a manner that is machine-readable.Section 2 consistent with section 3(c).

(b) 8 Revocation of license.-- (1) If a covered AI tool providerCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2 has actual knowledge that a third-party licensee has modified a generative artificial intelligence systemGenerative artificial intelligence system"Generative artificial intelligence system." An artificial intelligence system capable of generating synthetic images, videos, audio content or any combination thereof that emulates the structure and characteristics of the system's training data. This definition does not include a system that generates only text-based content.Section 2 to remove its capability to include a latent disclosure, the covered AI tool providerCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2 shall revoke the third party's license to use the system within 96 hours of obtaining the knowledge. (2) A third-party licensee whose license to use a generative artificial intelligence systemGenerative artificial intelligence system"Generative artificial intelligence system." An artificial intelligence system capable of generating synthetic images, videos, audio content or any combination thereof that emulates the structure and characteristics of the system's training data. This definition does not include a system that generates only text-based content.Section 2 is revoked under paragraph (1) may not use the system after the revocation.

Section 6 governs licensing of a covered AI tool provider's generative system to third parties. The provider must contractually require licensees to maintain the system's capability to include a provenance label consistent with Section 3(c). If the provider obtains actual knowledge that a licensee has modified the system to remove its latent-disclosure capability, it must revoke the license within 96 hours, and the licensee may not use the system after revocation.

Compliance actions 2 items
7
Covered AI tool providersCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2 licensing their generative system to a third party must contractually require the licensee to maintain the system's provenance-labeling capability.
T-02.2
8
Covered AI tool providersCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2 must, within 96 hours of obtaining actual knowledge that a licensee has modified the system to remove its provenance-label capability, revoke that licensee's license; the licensee may not use the system after revocation.
T-02.2
Section 7
Enforcement and penalties

(a) Administration and enforcement generally.--The bureauBureau"Bureau." The Bureau of Consumer Protection in the Office of Attorney General.Section 2 shall administer and enforce this act.

(b) Actions by bureauBureau"Bureau." The Bureau of Consumer Protection in the Office of Attorney General.Section 2.--In enforcing this act, the bureauBureau"Bureau." The Bureau of Consumer Protection in the Office of Attorney General.Section 2 may: (1) Impose a fine on a covered AI tool providerCovered AI tool provider"Covered AI tool provider." A person that creates, codes or otherwise produces a generative artificial intelligence system that: (1) has more than 1,000,000 monthly visitors worldwide or users on average over the preceding 12-month period and is publicly accessible within the geographic boundaries of this Commonwealth; and (2) uses a generative artificial intelligence system to generate, manipulate or otherwise edit audio, video and image content.Section 2 that violates this act and that is found liable for a civil penalty in the amount not to exceed $5,000 per violation. (2) Subject a third-party licensee that violates section 6(b) to a civil action for injunctive relief for violation of this act. (3) Bring a civil action to enforce this act and collect civil penalties under this subsection or seek injunctive relief.

(c) Judicial relief.--If a court awards judgment or injunctive relief to the bureauBureau"Bureau." The Bureau of Consumer Protection in the Office of Attorney General.Section 2, the court shall award the bureauBureau"Bureau." The Bureau of Consumer Protection in the Office of Attorney General.Section 2: (1) Reasonable attorney fees. (2) Court costs. (3) Investigative fees.

(d) Attorney General.--The Attorney General may bring a civil action on behalf of the bureauBureau"Bureau." The Bureau of Consumer Protection in the Office of Attorney General.Section 2 to collect a fine or civil penalty imposed under this section.

Section 7 vests administration and enforcement in the Bureau of Consumer Protection in the Office of Attorney General. The bureau may impose civil penalties up to $5,000 per violation on covered AI tool providers, subject violating third-party licensees to injunctive relief, and bring civil actions to enforce the act. Successful actions entitle the bureau to attorney fees, court costs, and investigative fees. The Attorney General may sue on the bureau's behalf to collect penalties. No private right of action is created.

Section 8
Effective date

This act shall take effect in 180 days.

The act takes effect 180 days after enactment. No compliance obligation.

Passage Likelihood

Low
Status Introduced
Chamber No passage
Committee No action
Majority party No
Bipartisan No
Prior session None

Legislative History

2026-06-04 Referred to Communications & Technology

Entry Last Reviewed

2026-06-07
AI generated