AIPolicyTracker
Process Owner: Agency AI officer Annual

Public-sector AI use-case register and algorithmic transparency

Lets a public body account for the AI it uses by keeping an inventory of use cases, flagging those that affect rights or services, and publishing what the public and oversight bodies are entitled to see.

Duties satisfied
2
done properly, does the work
Duties supported
4
contributes; the duty needs more
Jurisdictions
4
Evidence items
3

How is it implemented?

Each agency or department nominates a responsible official who collects use cases from programme teams through a standard form covering purpose, stage, data, vendors, affected people and whether the use is high-impact. Entries are reviewed for completeness and consistency with the procurement record, exclusions are documented, and the resulting inventory is published on the required cadence with sensitive items summarised. Vendors are asked at contract time for the descriptions and evidence the agency will need, and the register is used to track that high-impact uses have the extra assessments and safeguards required.

Which legal duties does it serve?

Satisfies means the control, operated properly, does the work the duty asks for. Supports means it contributes but the duty needs more. The official text decides; open it before relying on either.

European Union 1 duty

United States 2 duties

Nepal 1 duty

Texas (United States) 2 duties

What evidence shows it is operating?

Evidence this control produces
EvidenceTypeWhat it shows
Public AI use-case inventoryRegister entryPublished list of use cases with purpose, stage and high-impact flag.
Algorithmic transparency statement for one use caseDisclosure or notice
Inventory review and publication sign-offApproval or sign-off record

Owner: Agency AI officer. Frequency: annual.

Which risks does it address?

Subdomains of the MIT AI Risk Repository, with the incidents the AI Incident Database has recorded under each. Counts are live; they say how often a risk has materialised, not how well this control prevents it.

Which standards clauses does it correspond to?

Clause numbers only. A reference means the standard asks for overlapping work, so evidence may be reusable; it never means the standard discharges a legal duty.

Framework references
FrameworkReferenceNoteConfidence
NIST AI RMFMAP 1.1, 1.5; GOVERN 1.6, 5.1medium
ISO/IEC 42001Clause 4.1; Annex A.8.5low
OECD AI PrinciplesPrinciple 1.3 Transparency and explainabilitymedium

Cite this record

AIPolicyTracker (2026). “Public-sector AI use-case register and algorithmic transparency”. https://aipolicytracker.org/controls/public-sector-ai-use-case-register (accessed 24 September 2026). Data licensed CC BY 4.0.

Informational only, not legal advice. Verify every claim against the linked official sources and consult qualified counsel before acting.

Frequently asked questions

Which legal duties does "Public-sector AI use-case register and algorithmic transparency" satisfy?
It is recorded as satisfying 2 and supporting 4 duties across European Union, United States, Nepal and Texas (United States). A mapping means the control, operated properly, does the work the duty asks for; the official text decides whether it is enough.
What evidence shows this control is operating?
Public AI use-case inventory, Algorithmic transparency statement for one use case and Inventory review and publication sign-off. Owner: Agency AI officer. Frequency: annual.