Alaska 2025-2026 Regular Session

Alaska Senate Bill SB2 Latest Draft

Bill / Introduced Version Filed 01/10/2025

                             
SB0002A -1- SB 2 
 New Text Underlined [DELETED TEXT BRACKETED]  
 
34-LS0037\A 
 
 
 
 
 
 SENATE BILL NO. 2 
 
IN THE LEGISLATURE OF THE STATE OF ALASKA 
 
THIRTY-FOURTH LEGISLATURE - FIRST SESSION 
 
BY SENATOR HUGHES 
 
Introduced:  1/10/25 
Referred:  Prefiled  
 
 
A BILL 
 
FOR AN ACT ENTITLED 
 
"An Act relating to disclosure of election-related deepfakes; relating to use of artificial 1 
intelligence by state agencies; and relating to transfer of data about individuals between 2 
state agencies." 3 
BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF ALASKA: 4 
   * Section 1. AS 15.80 is amended by adding a new section to read: 5 
Sec. 15.80.009. Deepfake disclosure requirement. (a) A person may not 6 
make or retain the services of another to make an election-related communication that 7 
the person knows or reasonably should know includes a deepfake relating to a 8 
candidate or proposition without including the following disclosure statement with the 9 
election-related communication: "This communication has been manipulated or 10 
generated by artificial intelligence or by another means." If the election-related 11 
communication includes a print or video component, the statement must be placed in 12 
the election-related communication so the statement is easily discernible, and, for a 13 
broadcast, cable, satellite, Internet, or other digital communication, the statement must 14    34-LS0037\A 
SB 2 -2- SB0002A 
 New Text Underlined [DELETED TEXT BRACKETED]  
 
remain onscreen throughout the entirety of the election-related communication. In an 1 
election-related communication that consists only of audio, the statement must be read  2 
(1)  at the beginning of the audio, at the end of the audio, and, if the 3 
audio is longer than two minutes in duration, at least once every two minutes during 4 
the audio; and  5 
(2)  in a manner that is easily heard. 6 
(b)  A person may not remove the disclosure statement described in (a) of this 7 
section from an election-related communication that the person knows or reasonably 8 
should know includes a deepfake. 9 
(c)  A person who violates (a) or (b) of this section is liable to a candidate or 10 
proposition group for damages suffered as a result of the violation, full reasonable 11 
attorney fees, and costs.  12 
(d) A candidate or proposition group suffering damages as a result of an 13 
election-related communication made in violation of (a) of this section, or the removal 14 
of the disclosure statement from an election-related communication in violation of (b) 15 
of this section, may bring an action for damages under (c) of this section, or for 16 
injunctive relief to prohibit dissemination of the election-related communication. 17 
(e)  This section does not apply to a deepfake that is 18 
(1)  satire or parody; 19 
(2)  broadcast by a radio, television, cable, or satellite provider as part 20 
of a newscast, news interview, news documentary, or on-the-spot coverage of a news 21 
event, if the broadcast clearly acknowledges, through content or disclosure, in a 22 
manner easily heard or read by the average listener or viewer, that there are questions 23 
about the authenticity of the deepfake; or 24 
(3)  broadcast by a person who is paid to broadcast an election-related 25 
communication made by another person. 26 
(f)  In this section,  27 
(1)  "deepfake" means an image, audio recording, or video recording of 28 
an individual's appearance, conduct, or spoken words that has been created or 29 
manipulated with machine learning, natural language processing, or another 30 
computational processing technique in a manner to create a realistic but false image, 31    34-LS0037\A 
SB0002A -3- SB 2 
 New Text Underlined [DELETED TEXT BRACKETED]  
 
audio, or video that 1 
(A) would appear to a reasonable person to depict a real 2 
individual saying or doing something that did not actually occur; or 3 
(B) provides a fundamentally different understanding or 4 
impression of an individual's appearance, conduct, or spoken words than the 5 
understanding a reasonable person would have from an unaltered, original 6 
version of the media; 7 
(2)  "election-related communication" means a communication that  8 
(A)  directly or indirectly identifies a candidate or proposition; 9 
and  10 
(B)  is disseminated to an audience that includes voters who will 11 
have the opportunity to vote on the candidate or proposition identified in the 12 
communication; 13 
(3)  "proposition" has the meaning given in AS 15.13.065(c); 14 
(4) "proposition group" means a person registered with the Alaska 15 
Public Offices Commission to make expenditures in support of or in opposition to a 16 
proposition under AS 15.13.050.  17 
   * Sec. 2. AS 44.99 is amended by adding new sections to read: 18 
Article 7. Use by State Agencies of Artificial Intelligence and Data About Individuals. 19 
Sec. 44.99.700. Inventory. (a) Every two years, the department shall conduct 20 
an inventory of all state agency systems that employ generative artificial intelligence 21 
for consequential decisions. Each state agency shall assist the department as necessary. 22 
An inventory must include, at a minimum, the following information for each system: 23 
(1)  the name of the system; 24 
(2)  the vendor that provides the system, if any; 25 
(3)  a description of the general capabilities and uses of the system;  26 
(4)  whether the state agency completed an impact assessment of the 27 
system under AS 44.99.710 before the system's implementation; and 28 
(5) the date of completion of the most recent state agency impact 29 
assessment of the system under AS 44.99.710. 30 
(b)  The department shall remove from the inventory a system that is no longer 31    34-LS0037\A 
SB 2 -4- SB0002A 
 New Text Underlined [DELETED TEXT BRACKETED]  
 
used by a state agency.  1 
(c)  The department shall publish each inventory on the department's Internet 2 
website. 3 
Sec. 44.99.710. Impact assessments. (a) At least once every two years, the 4 
head of a state agency that uses a system that employs generative artificial intelligence 5 
for consequential decisions shall conduct an impact assessment of the system. An 6 
impact assessment must include, at a minimum, an analysis of 7 
(1)  the efficacy of the system; 8 
(2)  the human oversight involved in the system; 9 
(3)  the accountability mechanisms in place for the system; 10 
(4)  the process by which an individual may appeal a decision made or 11 
facilitated by the system; 12 
(5)  the current and potential benefits, liability, and risks to the state 13 
from the system, including risks related to cybersecurity and intellectual property and 14 
any measures used to mitigate liability and risks; 15 
(6) the current and potential effects of the system on the liberty, 16 
finances, livelihood, and privacy interests of individuals in the state, including effects 17 
from any use of geolocation data by the system; 18 
(7)  any unlawful discrimination against or unlawful disparate impact 19 
on an individual or a group of individuals that has resulted or may result from the 20 
system; and 21 
(8) the policies and procedures that govern the process of using the 22 
system for consequential decisions. 23 
(b) A state agency that completes an impact assessment shall provide the 24 
assessment to the department, and the head of the agency shall consult with the 25 
commissioner of administration to determine future use of the system by the agency.  26 
Sec. 44.99.720. Requirements for use of artificial intelligence by state 27 
agencies. (a) A state agency that uses a system that employs generative artificial 28 
intelligence for consequential decisions shall 29 
(1)  notify each individual who may be legally or significantly affected 30 
by the use of the system; 31    34-LS0037\A 
SB0002A -5- SB 2 
 New Text Underlined [DELETED TEXT BRACKETED]  
 
(2) obtain an individual's consent before soliciting or acquiring 1 
sensitive personal data from or about the individual that will be used by the system; 2 
(3)  provide an appeals process that includes manual human review for 3 
an individual who is legally or significantly affected by the use of the system; and 4 
(4)  inform a prospective employee of the state agency about any video 5 
interview that involves the use of generative artificial intelligence and obtain the 6 
prospective employee's consent before employing generative artificial intelligence. 7 
(b)  A state agency may not use a system that employs artificial intelligence for 8 
consequential decisions if the system involves 9 
(1)  biometric identification, including facial recognition; 10 
(2)  emotion recognition; 11 
(3)  cognitive behavioral manipulation of individuals or groups; or 12 
(4)  social scoring. 13 
(c)  A state agency may not use a system that employs artificial intelligence for 14 
consequential decisions if the system uses data hosted in a country designated by 15 
regulation as a foreign adversary. 16 
(d)  A state agency may contract with a person for a system that employs 17 
artificial intelligence for consequential decisions only if the person has implemented 18 
security and privacy controls as specified by the National Institute of Standards and 19 
Technology in Special Publication 800-53, Revision 5, published in September 2020 20 
or in regulations adopted by the department designating a publication revising or 21 
superseding Special Publication 800-53. 22 
Sec. 44.99.730. Transfer of data between state agencies. Unless required by 23 
law, a state agency may not transfer data about an individual to another state agency 24 
without giving notice to the individual. 25 
Sec. 44.99.740. Regulations. (a) The department shall adopt regulations under 26 
AS 44.62 (Administrative Procedure Act) concerning the development, procurement, 27 
implementation, use, and ongoing assessment of systems that employ generative 28 
artificial intelligence by state agencies for consequential decisions. The regulations 29 
must include, at a minimum, provisions that 30 
(1)  govern the procurement, implementation, and ongoing assessment 31    34-LS0037\A 
SB 2 -6- SB0002A 
 New Text Underlined [DELETED TEXT BRACKETED]  
 
of each system; 1 
(2) require a state agency to conduct an impact assessment of each 2 
system under AS 44.99.710 before its implementation; 3 
(3)  ensure that a system does not result in unlawful discrimination or 4 
an unlawful disparate impact on an individual or a group of individuals;  5 
(4)  provide for the ongoing assessment of each system; and 6 
(5)  designate countries that constitute foreign adversaries, considering 7 
determinations made by the United States.  8 
(b) The department may adopt additional regulations under AS 44.62 9 
(Administrative Procedure Act) necessary to implement AS 44.99.700 - 44.99.730. 10 
Sec. 44.99.750. Civil liability for harm. (a) An individual who suffers harm 11 
as a result of a violation of AS 44.99.700 - 44.99.730, a violation of a regulation 12 
adopted under AS 44.99.740, or gross negligence or reckless or intentional misconduct 13 
relating to the use of artificial intelligence by a state agency may bring a civil action in 14 
the superior court against the state agency. 15 
(b) An individual who suffers harm under (a) of this section may recover 16 
damages for the harm to the individual, punitive damages under AS 09.17.020, and 17 
full reasonable attorney fees and costs in a civil action brought under this section. 18 
(c)  Nothing in this section authorizes an individual to bring a cause of action 19 
against a person other than a state agency. 20 
Sec. 44.99.760. Exemptions. (a) AS 44.99.710, 44.99.720(a), 44.99.720(b)(1), 21 
44.99.730, and regulations adopted under AS 44.99.740(a) do not apply to systems 22 
that the Department of Public Safety uses for investigation of criminal offenses, 23 
missing persons, or other exigent circumstances. 24 
(b) Information collected under AS 44.99.700(a)(3) related to a system that 25 
the Department of Public Safety uses for investigation of criminal offenses, missing 26 
persons, or other exigent circumstances may not be included in the inventory 27 
published on the department's Internet website under AS 44.99.700(c) and is 28 
confidential and not subject to disclosure under AS 40.25.100 - 40.25.295 (Alaska 29 
Public Records Act). 30 
Sec. 44.99.770. Definitions. In AS 44.99.700 - 44.99.770, 31    34-LS0037\A 
SB0002A -7- SB 2 
 New Text Underlined [DELETED TEXT BRACKETED]  
 
(1)  "artificial intelligence" means generative artificial intelligence or 1 
rules-based artificial intelligence; 2 
(2) "biometric identification" means the analysis of an individual's 3 
physical or behavioral characteristics to uniquely identify the individual; 4 
(3)  "cognitive behavioral manipulation" means the use of a subliminal 5 
technique for the purpose of influencing an individual's behavior to achieve a desired 6 
outcome; 7 
(4) "consequential decision" means a conclusion, decision, or 8 
judgment by a state agency that can affect an individual's legal rights, employment, 9 
finances, health, or licensure; 10 
(5)  "department" means the Department of Administration; 11 
(6)  "emotion recognition" means the analysis of an individual's bodily 12 
expressions, including facial and verbal expressions, to identify or predict the 13 
individual's emotions; 14 
(7)  "generative artificial intelligence" means a machine-based system 15 
designed to operate with varying levels of autonomy that may exhibit adaptiveness 16 
after deployment and that, for explicit or implicit objectives, infers how to generate 17 
outputs from input the system receives; 18 
(8)  "individual" means a natural person; 19 
(9)  "rules-based artificial intelligence" means a computational program 20 
or algorithm designed to process information in a logical way that does not produce 21 
inferential output beyond its original programming and query parameters; 22 
(10)  "sensitive personal data" means  23 
(A) data that reveals an individual's racial or ethnic origin, 24 
political opinions, or religious or philosophical beliefs; 25 
(B)  an individual's genetic data; 26 
(C) an individual's biometric data when used for biometric 27 
identification;  28 
(D)  an individual's geolocation data; 29 
(E) an individual's bank account information or financial 30 
records; or 31    34-LS0037\A 
SB 2 -8- SB0002A 
 New Text Underlined [DELETED TEXT BRACKETED]  
 
(F)  an individual's social security number or another personal 1 
identifier issued to an individual by a government or institution; 2 
(11)  "social scoring" means evaluating, classifying, rating, or scoring 3 
the trustworthiness or social standing of an individual based on behavior or 4 
socioeconomic, political, or religious status; 5 
(12) "state agency" means the University of Alaska, a public 6 
corporation of the state, or a department, institution, board, commission, division, 7 
authority, committee, or other administrative unit of the executive branch of state 8 
government. 9 
   * Sec. 3. The uncodified law of the State of Alaska is amended by adding a new section to 10 
read: 11 
APPLICABILITY. AS 44.99.750, enacted by sec. 2 of this Act, applies to acts or 12 
omissions occurring on or after the effective date of this Act. 13