Large frontier developers must send periodic summaries of catastrophic-risk assessments to the state
Download: JSON · MarkdownUnder California SB 53, Business and Professions Code Section 22757.12 (as added by SB 53)
What this label means
- Verified
- — a named reviewer opened the official source and confirmed the record; the date and the reviewer are shown.
- Pending review
- — linked to the official source and in the queue for a reviewer to confirm.
- Source-linked
- — linked to the official source, not yet confirmed by a reviewer.
On this page 9 sections
In brief
Large frontier developers must send periodic summaries of catastrophic-risk assessments to the state is a legal requirement under the California SB 53 in California (United States) (Business and Professions Code Section 22757.12 (as added by SB 53)). It applies from 1 January 2026. The record carries 1 evidence example and mappings to 2 frameworks.
- Instrument
- California SB 53
- Jurisdiction
- California (United States)
- Nature
- Legal requirement
- Source reference
- Business and Professions Code Section 22757.12 (as added by SB 53)
- Applies from
- 1 January 2026
- Who it binds
- General-purpose AI model provider
- Evidence examples
- 1
- Framework mappings
- NIST AI Risk Management Framework 1.0, ISO/IEC 42001:2023
- Controls that meet it
- 2
- Official source
- Open official text
- Verification
- Verified against the official source 26 Sep 2026
What does it require?
A large frontier developer must transmit to the California Office of Emergency Services, on the periodic schedule the statute sets, a summary of any assessment of catastrophic risk that results from the internal use of its frontier models. This covers risks arising before public deployment, such as during internal evaluation or use of the model to accelerate research, and complements the public transparency report.
Practical action
Schedule a recurring internal-use risk assessment and a state submission with a fixed owner in the safety team.
Who does it apply to?
Large frontier developers above the statutory compute and revenue thresholds.
- Sectors
- Cross-sector / all sectors
- Use cases
- Generative AI and foundation models
Applies from:
Which controls meet this duty?
Satisfies: the control, operated properly, does the work the duty asks for. Supports: it contributes but the duty needs more. Each control page lists every other duty it serves, so work done once can be counted once.
-
satisfiesPolicyHead of AI safety · annualFrontier model safety and security framework
Serves 9 recorded duties · evidence: Published frontier safety framework, Dangerous-capability evaluation report, Threshold notification to an authority
Framework defines the catastrophic-risk assessment whose summaries are submitted.
-
supportsTechnical measureAI security or safety lead · at launch and on material changeAdversarial and red-team testing for generative AI
Serves 8 recorded duties · evidence: Red-team exercise report, Red-team rules of engagement and scenario library, Adversarial findings tracker
Dangerous-capability evaluations feed the assessment.
Templates that cover this duty
Generated from the records. Free · no account · links emailed to your work address. This duty is cited in each file with its source reference and a link back here.
- AI Risk Register (MIT AI Risk Repository taxonomy)
Register · XLSX · v4
- ISO/IEC 42001 Gap Assessment and Statement of Applicability
Assessment · XLSX · v3
- NIST AI RMF ↔ EU AI Act ↔ ISO/IEC 42001 Crosswalk
Crosswalk · XLSX · v5
- AI Audit Evidence Tracker
Register · XLSX · v1
What evidence would a reviewer expect?
| Evidence | Type | Notes |
|---|---|---|
| Internal-use catastrophic risk assessment summary sent to the Office of Emergency Services | report |
Framework mappings
Original editorial crosswalks. They cite clause numbers only and reproduce no standard text; confidence reflects how direct the mapping is.
See every California (United States) duty mapped this way →
| Framework | Reference | Note | Confidence |
|---|---|---|---|
| NIST AI RMF 1.0 | MEASURE 2.6, MANAGE 1.2, GOVERN 4.3 | Safety evaluation, prioritisation and information sharing with authorities. | medium |
| ISO/IEC 42001:2023 | Clause 9.1; Annex A.8.3 | Monitoring and external reporting. | low |
Frequently asked questions
Is this a legal requirement?
Yes. It is a legal requirement under California SB 53 (Business and Professions Code Section 22757.12 (as added by SB 53)).
Who must comply with this obligation?
Large frontier developers above the statutory compute and revenue thresholds.
When does this obligation apply?
It applies from 1 January 2026.
What evidence shows compliance?
A reviewer would expect: Internal-use catastrophic risk assessment summary sent to the Office of Emergency Services.
Which frameworks map to this obligation?
It is mapped to NIST AI Risk Management Framework 1.0 MEASURE 2.6, MANAGE 1.2, GOVERN 4.3, ISO/IEC 42001:2023 Clause 9.1; Annex A.8.3. These are editorial crosswalks with a stated confidence, not official mappings.
Which controls satisfy this obligation?
Frontier model safety and security framework; Adversarial and red-team testing for generative AI.
What should an organisation do in practice?
Schedule a recurring internal-use risk assessment and a state submission with a fixed owner in the safety team.
Cite this record
AIPolicyTracker (2026). “Large frontier developers must send periodic summaries of catastrophic-risk assessments to the state (California SB 53)” [AIPT-OBL-0082, verified 26 September 2026 by Bhaskar Bhatt]. https://aipolicytracker.org/id/AIPT-OBL-0082 (accessed 8 November 2026). Data licensed CC BY 4.0.
Permanent id AIPT-OBL-0082: it never changes or gets reused, and its address keeps working if this page moves.
Cite the official text alongside it: SB 53 Transparency in Frontier Artificial Intelligence Act, California Legislative Information, https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260SB53.
BibTeX
@misc{aipolicytracker2026_largefrontierdevelopersm,
author = {{AIPolicyTracker}},
title = {{Large frontier developers must send periodic summaries of catastrophic-risk assessments to the state (California SB 53)}},
year = {2026},
howpublished = {\url{https://aipolicytracker.org/obligations/us-california-sb-53-catastrophic-risk-assessment-summaries}},
url = {https://aipolicytracker.org/obligations/us-california-sb-53-catastrophic-risk-assessment-summaries},
urldate = {2026-11-08},
note = {Data licensed CC BY 4.0. Accessed 8 November 2026}
}
Change history
No change to this record's tracked fields has been recorded since 15 October 2026, when field-level history began.
Similar obligations in other instruments
- Manage systemic risk for high-impact general-purpose models — EU AI Act, European Union
- Large frontier developers must publish a frontier AI framework — California SB 53, California (United States)
- Operators of AI above the compute threshold must run lifecycle risk management and report safety results — AI Basic Act, South Korea
- Measure and test trustworthiness characteristics (Measure) — NIST AI RMF, United States (voluntary)
Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.