Prohibits non-governmental entities from designing or employing AI, or handling data, in ways that will harm people or discriminate either (a) on the basis of protected class or (b) in granting access to important opportunities and services.
Analysis summaries, actor details, and coverage mappings were LLM-classified and may contain errors.
This is a binding legal statute with mandatory prohibitions on covered entities, using mandatory language ('may not') and establishing legal obligations with enforcement mechanisms implied through the statutory framework.
The document has good coverage of approximately 5-6 subdomains, with strong focus on discrimination and toxicity (1.1, 1.3), privacy compromise (2.1), and socioeconomic harms (6.1, 6.2). Coverage is concentrated in fairness, non-discrimination, and protection of access to essential services.
This statute governs AI use across multiple critical sectors including Finance and Insurance, Real Estate, Professional Services, Educational Services, Health Care, Public Administration, and National Security. The regulation is cross-sectoral, focusing on preventing discrimination and harm in consequential decisions across all major service sectors.
The document covers multiple AI lifecycle stages with primary focus on the Design, Build, Deploy, and Operate stages. It addresses how AI systems and algorithms should be designed, employed, and operated to prevent harm and discrimination.
The document explicitly mentions AI and algorithms, and addresses data processing activities. It does not specifically reference frontier AI, general purpose AI, foundation models, or compute thresholds. The scope is broad, covering AI services and algorithms generally without distinguishing between model types.
United States Congress
The document is identified as being from the United States Congress, which is the legislative body that proposed and drafted this statutory provision.
Digital Consumer Protection Commission
The Act title references the Digital Consumer Protection Commission, which is the implied enforcement body for this statutory duty of care provision.
Digital Consumer Protection Commission
The Digital Consumer Protection Commission, as the regulatory body established by this Act, would be responsible for monitoring compliance with the duty of care requirements.
covered entity
The statute applies to 'covered entities' that design or employ AI services, algorithms, or process personal data. These entities are those developing and deploying AI systems and handling data.
6 subdomains (2 Good, 4 Minimal)