District of Columbia — OCTO AI/ML Governance Policy

The Office of the Chief Technology Officer's governance policy establishes rules for the responsible and secure use of AI/ML in DC government, requiring written agency-director approval before using agency data with AI, cybersecurity and business risk assessments, use of only OCTO-approved platforms, data-classification restrictions, and continuous monitoring.

Technical detail

The Office of the Chief Technology Officer's governance policy establishes rules for the responsible and secure use of AI/ML in DC government, requiring written agency-director approval before using agency data with AI, cybersecurity and business risk assessments, use of only OCTO-approved platforms, data-classification restrictions, and continuous monitoring.

Who is protected: Residents interacting with state government AI systems; public-sector data subjects.

Who must comply: All District workforce members responsible for application identity and role definition, any District agency receiving OCTO enterprise services, and any provider or third-party entity with access to District information, systems, networks, and applications.

Key facts

More AI rules in District of Columbia

• Mayor's Order 2024-028: Articulating DC's Artificial Intelli · In effect

Related government use of AI rules elsewhere

• Office of Artificial Intelligence Oversight · Proposed / pending
• AI Gendered Impact Assessment + Interagency Taskforce · Proposed / pending
• NYC resolution urging NY State to pass Advanced AI Licensing Act (A.3356) · Status unknown
• Emergency 365-day moratorium on new data centers (>20 MVA) · In effect
• Resolution setting Seattle data-center impact-study framework · In effect
• Six-month moratorium on data centers >350,000 sq ft (Minneapolis) · In effect