{"resourceId":"new-york-raise-act-digit-registration-20260921","versions":[{"version":"external-68aea0f67d67b93b352ab291e8c4aa9a79e8ddefe2471902372fe3ba5d4123ef","resource":{"id":"new-york-raise-act-digit-registration-20260921","title":"New York begins RAISE Act registration build-out via DIGIT in DFS with 72-hour incident reporting","organization":"State of New York (Governor Hochul / Department of Financial Services DIGIT)","sector":"State government — frontier AI safety oversight / financial-services regulatory host","geography":"New York, United States","publishedAt":"2026-09-21","publicationDate":"2026-09-21","eventDate":"2026-09-21","sourceName":"WRGB/CBS6 Albany — Governor Hochul tightens leash on AI, demanding transparency","sourceLabel":"Independent local reporting of governor/AG RAISE Act implementation announcement","sourceUrl":"https://cbs6albany.com/news/local/new-york-tightens-guardrails-on-ai-demanding-transparency-and-incident-reports-raise-act-frontier-responsible-ai-safety-education-act-governor-hochul-office-of-digital-innovation-safety-digit-critical-guardrails-disclosure-safety-letitia-james-cbs6-wrgb","evidenceClass":"independent-reporting","outcomeClass":"emerging","topics":["governance-procurement","data-security","operating-model"],"finding":"On 2026-09-21 Gov. Hochul announced next implementation steps for the Responsible AI Safety and Education (RAISE) Act: large frontier AI developers begin registering in November; compliance and regular reporting to the new Office of Digital Innovation, Governance, Integrity and Trust (DIGIT) inside DFS begin January 2027; critical safety incidents must be reported to DIGIT within 72 hours; quarterly catastrophic-risk assessments and biennial disclosure statements are required; Marc Gilman was appointed deputy director for RAISE as DIGIT’s first full-time hire; DIGIT will issue an annual public report. Emerging regulatory operating capacity—not yet an enforcement record. Cross-check: amNY quotes Hochul that AI kill-switch exploration carries “No commitments at this time.”","sledRelevance":"Shows a peer state moving from enacted frontier-AI statute to staffing, registration, and incident-reporting operations housed in a financial regulator—directly transferable planning signal for other state CIOs/AGs watching CA/IL/NY safety regimes.","evidence":"CBS6 09/21/2026: November registration start; DIGIT within DFS; Marc Gilman deputy director; Jan 2027 compliance; 72-hour critical incident reports to DIGIT; quarterly catastrophic-risk filings; biennial disclosure; public tip pathway; annual DIGIT report; AG James enforcement statements. amNY corroboration of exploratory kill-switch language without commitment.","architectureImplications":"Requires developer-facing registration/disclosure portals, secure incident intake, and cross-agency transmission paths from DIGIT—architecture is regulatory workflow more than model hosting.","governanceImplications":"Operationalizes statutory transparency via a named office, hire, timelines, and AG enforcement partnership; keeps further safeguards (kill switch; independent reviews) in prospective legislative agenda rather than immediate mandate.","securityPrivacyImplications":"Incident reports and catastrophic-risk assessments will contain sensitive safety data—DIGIT needs hardened intake, need-to-know sharing, and whistleblower pathways (AG portal referenced in companion coverage).","caveats":"Independent reporting of announcement—not a .gov primary release URL located this run; registration portal UX unpublished; kill-switch not a current requirement; effectiveness awaits 2027 filings.","streamIds":["state-government"],"roles":{"sales":"Sales framing: New York just put dates on RAISE Act operations—November registration, DIGIT inside DFS, 72-hour incident reporting, Jan 2027 compliance, and a named deputy director. Engage DFS/DIGIT implementers, AG cyber units, and frontier-developer compliance leads. Offer registration-and-incident-intake readiness workshops—not legal advice that a kill switch is required. Unsupported: that DIGIT is fully staffed or that penalties have been tested.","engineering":"Engineering framing: Fit is regulatory case/registration systems—developer identity, disclosure document intake, incident ticketing, and annual-report pipelines—not GenAI product features. Integrate secure file intake, audit logs, and role-based sharing to AG/emergency partners. Prerequisites: statutory taxonomy for “large frontier developer” and incident classes. Constraints: NY-specific RAISE; portal not public yet; companion kill-switch talk is non-binding.","delivery":"Delivery framing: Work is standing up DIGIT staffing, registration workflow, incident SLA monitoring (72 hours), and public annual reporting. Ownership sits with DFS/DIGIT with AG enforcement. Acceptance should include tested intake paths, published registrant instructions, and tabletop incident drills—not press quotes alone. Risks: portal delays; under-classified incidents; political expansion (kill switch) before operational basics work."},"roleDetails":{"sales":{"customerProblem":"States with frontier-AI safety statutes need operational registration, incident intake, and staffing models—not only bill text.","stakeholders":["DFS/DIGIT leadership","Attorney General cyber/consumer units","Frontier developer compliance officers","State CIO liaison teams"],"discoveryQuestions":["When does registration open and what evidence is required?","Who triages 72-hour incident reports after hours?","How will quarterly risk assessments be stored and shared?","What is the staffing plan beyond the first deputy director?"],"valueHypothesis":"A readiness assessment against NY’s published timelines can de-risk registration/incident-intake go-live before Jan 2027 duties bind.","potentialEngagement":"Implementation sprint: map intake workflows, RACI, secure document handling, and tabletop drills for critical-incident reporting.","unsupportedClaims":["That a kill switch is currently required","That DIGIT is fully built","Guaranteed penalty outcomes under AG actions"]},"engineering":{"fit":"Regulatory registration and incident-case platform for frontier developers, hosted in a financial-services supervisory environment.","architectureIntegration":"Developer org identity → disclosure vault → incident ticket SLA clocks → controlled sharing to AG/other authorities → annual report extracts.","prerequisites":["Legal taxonomy of covered developers/incidents","Secure document intake","On-call triage staffing model"],"constraints":["NY RAISE-specific","Public portal details not yet published on inspected pages","Kill-switch exploration out of scope for v1 systems"],"security":"Protect sensitive incident and model-risk filings; enforce least-privilege, encryption, and immutable audit logs.","proofOfValue":["Successful test registrations","72-hour SLA drill results","Published registrant guidance"]},"delivery":{"work":"Hire/onboard DIGIT staff, build registration and incident workflows, publish guidance, and coordinate AG enforcement playbooks.","dependencies":["DFS technology and legal","AG office","Budget for additional FTE","Developer outreach"],"ownership":"DIGIT/DFS for operations; AG for enforcement; Governor’s office for policy expansions.","skillsAdoption":"Need AI-safety literacy plus financial-regulatory exam/case skills unusual in typical state IT shops.","governanceCheckpoints":["November registration readiness gate","Jan 2027 compliance gate","Annual public report"],"acceptanceCriteria":["Documented intake SOPs","On-call incident roster","Public FAQ for covered developers"],"risks":["Timeline slip","Incident under-reporting","Scope expansion before core ops stabilize"]}},"retrievedAt":"2026-09-21T22:11:42-05:00","enrichedAt":"2026-09-21T22:11:42-05:00","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Creates specialized DIGIT regulatory workforce roles; public annual reporting may improve transparency for residents, but page does not address accessibility of developer portals.","procurementImplications":"Implies future needs for secure case-management, document vault, and possibly independent-auditor marketplace tools as companion bills advance—not procured in this announcement.","operatingModelImplications":"Places frontier-AI safety operations inside DFS rather than a general CIO shop—an operating-model choice other states may copy or avoid depending on financial-regulator capacity.","sourceVerification":{"openedUrl":"https://cbs6albany.com/news/local/new-york-tightens-guardrails-on-ai-demanding-transparency-and-incident-reports-raise-act-frontier-responsible-ai-safety-education-act-governor-hochul-office-of-digital-innovation-safety-digit-critical-guardrails-disclosure-safety-letitia-james-cbs6-wrgb","referenceExcerpt":"report critical safety incidents within 72 hours","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}