Pennsylvania bill would label AI media and show its origins

Covered providers would offer a free tool to check certain media for content their system made or changed. This applies to entities that produce publicly available generative AI systems with more than 1 million monthly active users. The tool would show detected system origin information, not personal origin information. Providers could limit access to address demonstrable security or system integrity risks. Providers could keep submitted content longer than 24 hours only with the user's express consent. They could collect contact information from users who submit feedback only if those users opt in, and could use it only to improve the tool. If enacted, this requirement would take effect in 180 days.

Covered providers would offer users an option to add a visible AI notice and include hidden origin details in certain media their systems create or alter. These rules cover images, video, and audio made or changed by a covered provider's generative AI system. The visible notice must be clear and hard to remove where technically feasible. The hidden details would identify the provider, system and version, creation or change time, and a unique identifier where technically feasible and reasonable. Providers licensing their systems would have to require licensees to preserve the hidden details. If a provider discovers that a licensee disabled them, it would have four calendar days to revoke the license; the licensee would then have to stop using the system. If enacted, these requirements would take effect in 180 days.

Large online platforms would show users whether certain content has origin information, let them inspect it, and not knowingly remove compliant origin information or digital signatures. This applies to qualifying platforms that distribute digital content to users who did not create or help create it. The rule covers public-facing social, file-sharing, mass-messaging, and stand-alone search platforms with more than 2 million unique monthly users in the preceding 12 months. Broadband and telecommunications providers are excluded. Platforms would show whether origin information and digital signatures are available, identify the AI system when applicable, and let users inspect available information through the platform, a download, or a link. If enacted, these requirements would take effect in 180 days.

AI system hosting platforms would not knowingly offer systems that lack required disclosures; consumers could report violations to the Attorney General's consumer protection bureau. The hosting rule covers publicly accessible websites or apps that make AI system code or model weights available to people in Pennsylvania, for payment or free. The Attorney General would investigate complaints and, after finding a violation, could seek a civil penalty of up to $5,000 per violation and other relief under the consumer protection law. The civil penalty would be the only penalty for conduct violating this act. The bill says it creates no private right to sue over a violation. If enacted, these requirements would take effect in 180 days.