{"resourceId":"jasper-county-ia-draft-ai-policy-govcloud-oversight-20261103","versions":[{"version":"external-253c1e6b3d17517df65fbc4d6b3f0e0bd769db396584475435c8fd7847a943b2","resource":{"id":"jasper-county-ia-draft-ai-policy-govcloud-oversight-20261103","title":"Jasper County, Iowa places a draft AI policy on the Nov. 3 board agenda: Microsoft Government Cloud only for private data, AI Oversight Committee and pre-deployment impact assessments","organization":"Jasper County Board of Supervisors / Information Technology","sector":"County government","geography":"Jasper County, Iowa, United States","publishedAt":"3 November 2026 agenda (packet prepared 30 October 2026)","publicationDate":"2026-11-03","eventDate":"2026-11-03","sourceName":"Jasper County Board of Supervisors agenda packet","sourceLabel":"Government publication (agenda packet)","sourceUrl":"https://www.jasperia.org/files/meetings/2026-11-03_agenda_9805.pdf","evidenceClass":"standards-guidance","outcomeClass":"emerging","topics":["governance-procurement","data-security","operating-model"],"finding":"Jasper County, Iowa Board of Supervisors: the 3 November 2026 agenda packet (Item 2a, IT – Ryan Eaton) includes a DRAFT Jasper County Artificial Technology (AI) Policy and AI Impact Assessment template samples. Extractable text states the policy covers elected officials, employees, contractors and vendors using, procuring or managing AI on county systems, including systems that automate decisions, augment tasks or interact with the public. Because of protected data and federal rules, the county currently limits private data to Microsoft's Government Cloud, to be reviewed as other platforms meet regulations. Scanned draft pages set guiding principles (transparency, human oversight and final authority, ethics/fairness, privacy/security, public benefit); acceptable uses (internal efficiency, non-sensitive resident chatbots, decision support with human review, cybersecurity, emergency/public-safety planning); prohibited uses (final determinations in criminal justice, hiring or benefits without human oversight; unauthorized resident surveillance; misleading residents; processing sensitive data such as PHI without legal compliance). Vendors must document data sources, algorithms and biases and provide audit logs and explainable outputs. An AI Oversight Committee of the Board, County Attorney and IT would review, approve and monitor AI projects; departments must complete an AI Impact Assessment before deployment. Training, public-records treatment and enforcement (discipline, contract termination, legal referral) are included. Packet date precedes the meeting; minutes confirming adoption were not opened.","sledRelevance":"Why now: draft AI policy was Item 2a on the 3 November 2026 supervisors agenda. A U.S. county tying generative AI to Microsoft Government Cloud, an oversight committee and mandatory impact assessments is directly transferable operating guidance; adoption status after the meeting is not confirmed here.","evidence":"Primary county agenda PDF; machine-readable text for purpose/background/scope; guiding principles through enforcement recovered from scanned DRAFT pages in the same packet; AI Impact Assessment template samples also attached; board minutes not opened.","architectureImplications":"Private data constrained to Microsoft Government Cloud for now; vendor AI must supply audit logs and explainable outputs.","governanceImplications":"Proposed AI Oversight Committee (Board, County Attorney, IT) to review, approve and monitor projects; AIIA required before deployment; human final authority as a principle.","securityPrivacyImplications":"Government Cloud limit driven by protected data and federal regulations; PHI and sensitive processing restricted without legal compliance; privacy/security named as a guiding principle.","caveats":"DRAFT watermark; minutes confirming adoption not reviewed; some pages image-only; template is a third-party AONA library sample.","streamIds":["local-government"],"roles":{"sales":"Framing: Jasper's draft confines private data to Microsoft Government Cloud and would make an Oversight Committee plus impact assessments gates for every AI project. Interpretation: Iowa counties in this posture buy governed M365/Copilot patterns and assessment help, not open consumer AI. Sellers should ask which workloads already sit in Gov Cloud and should not claim the draft is adopted until minutes confirm it.","engineering":"Framing: vendors must document data sources, algorithms and biases and provide audit logs and explainable outputs, while private data stays in Microsoft's Government Cloud for now. Interpretation: engineers should map tenant boundaries, logging, explainability hooks and AIIA evidence packs for committee review. Limited applicability: some draft pages are scans and board adoption was not confirmed.","delivery":"Framing: departments would complete an AI Impact Assessment before go-live under Oversight Committee review, with employee ethical-AI training required in the draft. Interpretation: delivery work is intake, AIIA facilitation, committee packet prep and training rollout if the board adopts the draft. Acceptance criteria below are proposals; board minutes confirming adoption were not opened."},"roleDetails":{"sales":{"customerProblem":"Counties need generative AI productivity within federal data rules and clear human accountability.","stakeholders":["Board of Supervisors","County Attorney","IT (Ryan Eaton)","Department heads","Vendors"],"discoveryQuestions":["Was the draft adopted on 3 November?","Which workloads already use Copilot in Gov Cloud?","Who chairs the Oversight Committee?","What triggers a mandatory AIIA?"],"valueHypothesis":"Bounded: Gov Cloud plus committee gates may reduce shadow AI risk; no outcome measured.","potentialEngagement":"Policy operationalization: committee charter, AIIA workflow and approved-tool list.","unsupportedClaims":["That the board adopted the draft","Any productivity gains","That Gov Cloud alone ensures compliance"]},"engineering":{"fit":"U.S. counties formalizing generative AI under CJIS/HIPAA-like constraints.","architectureIntegration":"Microsoft Government Cloud tenant for private data; consumer AI excluded until reviewed.","prerequisites":["Board action","Committee appointments","AIIA process","Vendor documentation standards"],"constraints":["Federal and Iowa data rules","DRAFT status","Minutes not reviewed"],"security":"Private data limited to Microsoft Government Cloud; PHI processing restricted without legal compliance.","proofOfValue":["Inventory current Copilot/AI use","Dry-run one AIIA on a chatbot proposal","Verify tenant data residency"]},"delivery":{"work":"If adopted: stand up committee, AIIA intake and staff training.","dependencies":["Board approval","Attorney and IT capacity","Vendor willingness to disclose algorithms/biases"],"ownership":"IT under Board/Attorney oversight committee as drafted.","skillsAdoption":"All employees need ethical AI and data-protection training per draft.","governanceCheckpoints":["Committee constituted before new AI go-lives","AIIA on file for each new system"],"acceptanceCriteria":["Proposed: 100% of new AI projects have committee approval on record","Proposed: no private data leaves Gov Cloud without documented exception","Proposed: prohibited-use cases have written human-final-authority controls"],"risks":["Draft may be revised or deferred","Vendors may refuse algorithm disclosure","Committee bottleneck delays projects"]}},"retrievedAt":"2026-11-06T04:14:29.500Z","enrichedAt":"2026-11-06T04:17:40Z","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Employee ethical-AI and data-protection training; specialized training for staff who manage AI systems.","procurementImplications":"Vendors must show ethical-principle compliance, document data sources/algorithms/biases and meet IT security requirements; companion hardware/software procurement policy requires IT involvement and vendor SOWs.","operatingModelImplications":"Acceptable uses include non-sensitive resident chatbots and decision support with human review; prohibited final determinations in justice, hiring or benefits without human oversight.","sourceVerification":{"openedUrl":"https://www.jasperia.org/files/meetings/2026-11-03_agenda_9805.pdf","referenceExcerpt":"Due to the nature of the data we protect and federal regulations, Jasper County is currently limited to keeping data private within Microsoft's Government Cloud.","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}