From the State Government edition of September 18, 2026
New York PSC orders utility AI inventories and semiannual reporting (Case 26-M-0552)
New York State Public Service Commission / Department of Public Service · State utility regulation — critical infrastructure AI oversight · New York (investor-owned utilities; other jurisdictions transfer with regulatory differences)
- Publisher
- WXXI News / New York Public News Network (with Daily Energy Insider hearing detail)
- Original publication
- 2026-09-17
- Source retrieved
- 2026-09-19
- Event date
- 2026-09-17
What happened
On Sept. 17, 2026, the NY PSC voted to require regulated utilities to inventory AI use—including generative and machine-learning systems used for inspections, outage modeling, customer service, and analytics—and to file governing policies, with an initial inventory due in 60 days and semiannual reports thereafter (Case 26-M-0552 per hearing coverage). Chair Christian acknowledges possible net benefits while staff highlight misconfiguration, hallucination, privacy, and cybersecurity risks in critical infrastructure. No measured reliability outcomes yet.
Why it matters
State utility commissions and energy CIOs are a transferable oversight pattern for other regulated critical infrastructure: start with inventories and policy disclosures before prescribing technical standards. Liability for AI-driven ratepayer harm was raised but deferred.
Evidence and measured results
WXXI: PSC vote for semiannual AI reports; 60-day first filing; Christian and DiBari quotes; National Grid will provide inventory. Daily Energy Insider: unanimous vote; Case 26-M-0552; inventory covers internally built and externally procured AI; risks list; commissioners asked about standardization, liability, and agentic AI currency.
Limitations and uncertainty
Primary signed order PDF not opened this run; facts triangulated from WXXI and Daily Energy Insider. Benefits remain acknowledged as possible, not measured. Separate affordability-index proceeding is not an AI finding.
Put this evidence to work
Lighthouse Advisory interpretation, grounded in this source. Enriched 2026-09-18; this does not change the original publication date. Each role follows the same checklist so takeaways compare across sources.
Sales
Role takeaway
- Customer problem
- Regulated utilities lack a complete, commission-ready inventory of AI systems touching inspections, outages, and customers—and now face timed disclosure duties.
- Stakeholders
- Utility CIO/CISO
- Regulatory affairs / PSC counsel
- OT operations leaders
- Vendor AI providers
- Discovery questions
- Which AI systems are internally built versus procured, and who attests each entry?
- What policies govern generative versus classical ML uses today?
- How will agentic or novel uses trigger inventory updates between semiannual filings?
- Where could AI errors create ratepayer harm under existing prudence standards?
- Value hypothesis
- A complete, continuously maintained AI inventory with linked policies may reduce regulatory surprise and prepare utilities for later standards—without proving reliability gains yet.
- Potential engagement
- 6–8 week Case 26-M-0552 readiness: AI discovery across OT/IT, policy mapping, draft initial filing, and update workflow design.
- Unsupported claims
- Guaranteed outage reduction or customer-service improvement from reporting
- That inventories equal approved AI safety cases
- Statewide applicability outside NY PSC jurisdiction
Pre-sales engineering
Role takeaway
- Fit
- Regulatory AI asset inventory and control-evidence architecture for investor-owned utilities.
- Architecture and integration
- Connect CMDB/OT asset systems, vendor SaaS inventories, model registries, and policy repositories; support continuous updates for new agentic uses.
- Prerequisites
- Scoped AI definition matching staff guidance
- Cross-OT/IT discovery authority
- Vendor contract clauses revealing subprocessors and model roles
- Constraints
- 60-day initial filing clock
- Liability questions deferred by commission counsel
- Primary order PDF not independently opened this run
- Security
- Inventory itself is sensitive; protect details that would aid attackers while meeting disclosure duties.
- Proof of value
- Initial filing covering internal and procured systems
- Traceable policy links per use case
- Documented update path for novel AI between semiannual reports
Delivery
Role takeaway
- Work
- Build inventory, collect governing policies/procedures, file within 60 days, and operationalize semiannual refresh plus continuous novel-use updates.
- Dependencies
- DPS filing portal/process
- Business-unit SMEs for inspections/outage/customer AI
- Legal review of disclosures
- Ownership
- Utility regulatory compliance lead with CIO/CISO co-ownership of inventory accuracy.
- Skills and adoption
- Need OT analytics literacy and GenAI governance skills among compliance staff—not only traditional cybersecurity checklists.
- Governance checkpoints
- 60-day initial inventory filing
- First semiannual refresh
- Internal review when agentic use cases appear
- Acceptance criteria
- Inventory includes internal and externally procured AI
- Each entry cites governing policy/procedure
- Named attestation owner and refresh cadence
- Risks
- Incomplete discovery / shadow AI
- Over-disclosure of sensitive architecture
- Future prudence exposure if weak controls are inventoried without remediation plans
Implementation considerations
Lighthouse Advisory interpretation across the operating dimensions a public-sector buyer must settle before this evidence becomes a design. Each note answers the question under its heading for this specific source.
Architecture and integration
What must connect, and where does the AI sit in the workflow?
Utilities will need durable AI asset inventories spanning vendor SaaS, internal models, and embedded inspection analytics, plus change-control so novel agentic uses update filings continuously as staff suggested.
Governance
Who approves, reviews and stays accountable for outcomes?
Creates a regulatory discovery proceeding rather than immediate technical standards. Expect later standardization and prudence/liability questions once inventories arrive.
Security and privacy
What data, permissions and controls need testing?
Explicitly frames AI misconfiguration and fabricated outputs as a new critical-infrastructure risk category for commission evaluation; privacy and cybersecurity attacks listed among staff concerns.
Accessibility and workforce
Who is affected, and what skills or accommodations follow?
Customer-service AI uses may affect accessibility of utility interactions; the order requires disclosure of use types but does not set accessibility performance metrics.
Procurement
What should contracts, pricing and exit terms secure?
Externally procured AI is explicitly in scope—vendor contracts should anticipate inventory cooperation, subprocessor transparency, and future commission standards.
Operating model
Which teams own the service once it runs?
Moves utility AI from informal adoption to regulated discovery with recurring reporting, likely forcing cross-functional ownership among OT, IT, customer operations, and regulatory affairs.
Publication history
- 2026-09-18State Government · Issue 133 resources
Stable resource ID: new-york-psc-utilities-ai-inventory-reporting-20260917