AI Frontier Institute

Providing for artificial intelligence risk prevention; establishing standards for frontier developers in addressing critical safety incidents and catastrophic risks; imposing duties on the Pennsylvania Emergency Management Agency and the Attorney General; and imposing penalties.

View primary source →

Pennsylvania House Bill 2800 (Printer's No. 3904), the "Artificial Intelligence Risk Prevention Act" (Section 101), has not been enacted. It was referred to the House Communications and Technology Committee on 2026-09-23. If enacted, it would regulate "frontier developers", meaning those who train foundation models using more than 10^26 operations of computing power (Section 102). It would put extra duties on "large frontier developers", which are those with more than $500 million in annual gross revenue together with their affiliates. The Pennsylvania Emergency Management Agency (PEMA) would administer it in consultation with the Attorney General (Section 1301). Registration and disclosure: PEMA would develop a registration form (Section 301). Beginning January 1, 2027, a large frontier developer could not develop, deploy or operate a frontier model in Pennsylvania unless it had registered, filed an annual disclosure statement and paid a fee (Sections 302, 303). PEMA would post a list of filers (Section 304). Safety frameworks and transparency: - Large frontier developers would have to develop a "frontier AI framework" to assess and mitigate catastrophic risk. They would implement it beginning January 1, 2028, publish it, follow it and review it annually (Section 501). - All frontier developers would have to publish a transparency report before or when deploying a new or substantially modified frontier model (Section 502(a)). - Large developers' reports would add machine-readable summaries of catastrophic-risk assessments (Section 502(b), (c)). Audits: Beginning January 1, 2028, or 90 days after first qualifying as a large frontier developer, whichever is later, a large frontier developer would have to retain an independent third-party auditor each year (Sections 701–709). The auditor could have no financial interest in the developer and could not be paid based on audit results. Within 30 days of receiving the audit report, the developer would publish a summary and a redacted copy of the report. It would also send the redacted report to PEMA and the Attorney General. Incident and risk reporting: - Frontier developers would have to report critical safety incidents to PEMA and the Attorney General within 72 hours of reasonably believing one occurred (Section 902(a)). - If an incident poses an imminent risk of death or serious physical injury, the developer would have to disclose it within 24 hours to an appropriate authority (Section 902(c)). - PEMA would set up a reporting mechanism that developers and members of the public can use (Section 901). - Large developers would confidentially submit summaries of catastrophic-risk assessments of internal model use every three months, or on another agreed schedule (Sections 1101, 1102). - Materially false or misleading statements about catastrophic risk would be prohibited, with a good-faith, reasonable-statement exception (Section 1103). Whistleblowers: Covered employees could disclose safety dangers or violations to PEMA, the Attorney General, federal authorities or others. Developers could not retaliate or block such disclosures. Large developers would have to provide an internal reporting process (Section 1302). Penalties: Civil penalties could reach $1,000 per day for violations by any person under Section 1303(a). Large frontier developers could face up to $1,000,000 per first violation and $3,000,000 per later violation under Section 1303(b) (Section 1304(a)). The Attorney General would bring the civil actions, and PEMA could seek injunctive relief. Penalties would go to the General Fund, and there would be no private right of action (Section 1304). Other provisions: Certain incident, audit and risk reports would be exempt from the Right-to-Know Law (Section 1501). PEMA would issue annual reports starting January 1, 2029 (Section 1502) and temporary regulations within six months (Section 1504). Sections 1504 and 1505 take effect immediately. The rest takes effect one year after the temporary-regulations notice is published (Section 1505).

← Back to the tracker