WHAT THIS BILL REGULATES · 5 REQUIREMENT TYPES
How Is This Bill Enforced
Verbatim statutory text on the left; plain-language analysis and a per-section checklist on the right. Numbered markers cross-link to the matching checklist row.
The purpose of this chapter is to regulate generative artificial intelligence models, such as ChatGPT, in order to protect the public's safety, privacy, and intellectual property rights.
This section states the legislative purpose: to regulate generative artificial intelligence models in order to protect the public's safety, privacy, and intellectual property rights. It creates no compliance obligation.
(1) "Large-scale generative artificial intelligence modelLarge-scale generative artificial intelligence model"Large-scale generative artificial intelligence model" means a machine learning model with a capacity of at least one billion (1,000,000,000) parameters that generates text or other forms of output, such as ChatGPT.R.I. Gen. Laws § 6-59-2(1)" means a machine learning model with a capacity of at least one billion (1,000,000,000) parametersParameter"Parameter" means any variable or value used to control the operation or output of a generative artificial intelligence model.R.I. Gen. Laws § 6-59-2(2) that generates text or other forms of output, such as ChatGPT.
(2) "ParameterParameter"Parameter" means any variable or value used to control the operation or output of a generative artificial intelligence model.R.I. Gen. Laws § 6-59-2(2)" means any variable or value used to control the operation or output of a generative artificial intelligence model.
This section defines the two key terms used throughout the chapter. The covered platform — a large-scale generative artificial intelligence model — is defined by a parameter-count threshold of at least one billion parameters, a metric that by 2023 standards captured nearly every commercially significant generative model. The definition is technology-neutral as to output type, covering text and "other forms of output."
(1) 1 The model shall not be used to engage in discrimination or bias against any individual or group based on protected characteristics, as defined by state or federal law;
(2) 2 In order to prevent plagiarism, the model shall be programmed to generate all text with a distinctive watermark or offer an authentication process that allows a user to determine whether a particular output was generated by the model;
(3) 3 The company shall implement reasonable security measures to protect the data of individuals used to train the model;
(4) 4 The company shall obtain informed consent from individuals before collecting, using or disclosing their data;
(5) 5 The company shall delete or de-identify any data collected from individuals if it is no longer needed for the intended purpose of the model; and
(6) 6 The company shall conduct regular risk assessments to identify, assess and mitigate reasonably foreseeable risks and cognizable harms related to their products and services, including in the design, development and implementation of such products and services.
This section imposes six operating standards on any company operating a large-scale generative AI model. The obligations span non-discrimination, content provenance (watermarking or authentication), training data security, informed consent for data collection and disclosure, data minimization and deletion, and ongoing risk assessments. The obligations are broad and largely principles-based, deferring implementation specifics to the attorney general's rulemaking authority in § 6-59-5.
The watermarking requirement is notable for framing its purpose as plagiarism prevention rather than deepfake or misinformation detection, and for offering an alternative authentication process in lieu of a watermark.
(a) 7 Any company operating a large-scale generative artificial intelligence modelLarge-scale generative artificial intelligence model"Large-scale generative artificial intelligence model" means a machine learning model with a capacity of at least one billion (1,000,000,000) parameters that generates text or other forms of output, such as ChatGPT.R.I. Gen. Laws § 6-59-2(1) shall register with the attorney general within ninety (90) days of the effective date of this chapter.
(b)(1)–(3) 7 The registration shall include the following information: (1) The name and contact information of the company; (2) A description of the large-scale generative artificial intelligence modelLarge-scale generative artificial intelligence model"Large-scale generative artificial intelligence model" means a machine learning model with a capacity of at least one billion (1,000,000,000) parameters that generates text or other forms of output, such as ChatGPT.R.I. Gen. Laws § 6-59-2(1), including its capacity, training data, intended use, design process and methodologies; and (3) Information on the company's data collection, storage and security practices.
(c) The attorney general shall maintain a public registry of all companies registered under this chapter.
This section requires every company operating a large-scale generative AI model to register with the attorney general within 90 days of the chapter's effective date. The registration must include identifying information, a description of the model (covering capacity, training data, intended use, design process, and methodologies), and information on data practices. The attorney general must maintain a public registry of registered companies.
The registration requirement functions as a pre-market or early-market regulatory submission, distinct from ongoing periodic reporting. The 90-day window from the effective date suggests a one-time compliance obligation rather than a recurring filing.
(a) The attorney general shall promulgate and adopt rules and regulations for the purposes of implementing this chapter.
(b) To remedy violations of this chapter and for other relief that may be appropriate, the attorney general may bring an action against a person.
This section grants the attorney general two authorities: rulemaking power to implement the chapter and enforcement power to bring actions against persons who violate it. The enforcement mechanism is exclusively agency-initiated — no private right of action is created. The statute does not specify penalty amounts, leaving remedies to the AG's discretion and future rulemaking.