Artificial Intelligence Policy Tracker

Large frontier developers must send periodic summaries of catastrophic-risk assessments to the state

Download: JSON · MarkdownUnder California SB 53, Business and Professions Code Section 22757.12 (as added by SB 53)

Verified against the official source 26 Sep 2026 (a factual check against the official source, not a legal review or legal advice)
What this label means
Verified
— a named reviewer opened the official source and confirmed the record; the date and the reviewer are shown.
Pending review
— linked to the official source and in the queue for a reviewer to confirm.
Source-linked
— linked to the official source, not yet confirmed by a reviewer.
Verification policy and current standing · a factual check, not legal advice.
No change recorded as of 26 Sep 2026 · official source last checked
On this page 9 sections

In brief

Large frontier developers must send periodic summaries of catastrophic-risk assessments to the state is a legal requirement under the California SB 53 in California (United States) (Business and Professions Code Section 22757.12 (as added by SB 53)). It applies from 1 January 2026. The record carries 1 evidence example and mappings to 2 frameworks.

Instrument
California SB 53
Nature
Legal requirement
Source reference
Business and Professions Code Section 22757.12 (as added by SB 53)
Applies from
1 January 2026
Who it binds
General-purpose AI model provider
Evidence examples
1
Framework mappings
NIST AI Risk Management Framework 1.0, ISO/IEC 42001:2023
Controls that meet it
2
Official source
Open official text
Verification
Verified against the official source 26 Sep 2026

What does it require?

A large frontier developer must transmit to the California Office of Emergency Services, on the periodic schedule the statute sets, a summary of any assessment of catastrophic risk that results from the internal use of its frontier models. This covers risks arising before public deployment, such as during internal evaluation or use of the model to accelerate research, and complements the public transparency report.

Practical action

Schedule a recurring internal-use risk assessment and a state submission with a fixed owner in the safety team.

Who does it apply to?

Large frontier developers above the statutory compute and revenue thresholds.

Applies from:

Which controls meet this duty?

Satisfies: the control, operated properly, does the work the duty asks for. Supports: it contributes but the duty needs more. Each control page lists every other duty it serves, so work done once can be counted once.

  • satisfiesPolicyHead of AI safety · annual
    Frontier model safety and security framework

    Serves 9 recorded duties · evidence: Published frontier safety framework, Dangerous-capability evaluation report, Threshold notification to an authority

    Framework defines the catastrophic-risk assessment whose summaries are submitted.

  • supportsTechnical measureAI security or safety lead · at launch and on material change
    Adversarial and red-team testing for generative AI

    Serves 8 recorded duties · evidence: Red-team exercise report, Red-team rules of engagement and scenario library, Adversarial findings tracker

    Dangerous-capability evaluations feed the assessment.

Templates that cover this duty

Generated from the records. Free · no account · links emailed to your work address. This duty is cited in each file with its source reference and a link back here.

All 8 templates that cover it →

What evidence would a reviewer expect?

Evidence examples
EvidenceTypeNotes
Internal-use catastrophic risk assessment summary sent to the Office of Emergency Servicesreport

Framework mappings

Original editorial crosswalks. They cite clause numbers only and reproduce no standard text; confidence reflects how direct the mapping is.

See every California (United States) duty mapped this way →

Framework mappings table
FrameworkReferenceNoteConfidence
NIST AI RMF 1.0MEASURE 2.6, MANAGE 1.2, GOVERN 4.3Safety evaluation, prioritisation and information sharing with authorities.medium
ISO/IEC 42001:2023Clause 9.1; Annex A.8.3Monitoring and external reporting.low

Frequently asked questions

Is this a legal requirement?

Yes. It is a legal requirement under California SB 53 (Business and Professions Code Section 22757.12 (as added by SB 53)).

Who must comply with this obligation?

Large frontier developers above the statutory compute and revenue thresholds.

When does this obligation apply?

It applies from 1 January 2026.

What evidence shows compliance?

A reviewer would expect: Internal-use catastrophic risk assessment summary sent to the Office of Emergency Services.

Which frameworks map to this obligation?

It is mapped to NIST AI Risk Management Framework 1.0 MEASURE 2.6, MANAGE 1.2, GOVERN 4.3, ISO/IEC 42001:2023 Clause 9.1; Annex A.8.3. These are editorial crosswalks with a stated confidence, not official mappings.

Which controls satisfy this obligation?

Frontier model safety and security framework; Adversarial and red-team testing for generative AI.

What should an organisation do in practice?

Schedule a recurring internal-use risk assessment and a state submission with a fixed owner in the safety team.

Cite this record

AIPolicyTracker (2026). “Large frontier developers must send periodic summaries of catastrophic-risk assessments to the state (California SB 53)” [AIPT-OBL-0082, verified 26 September 2026 by Bhaskar Bhatt]. https://aipolicytracker.org/id/AIPT-OBL-0082 (accessed 8 November 2026). Data licensed CC BY 4.0.

Permanent id AIPT-OBL-0082: it never changes or gets reused, and its address keeps working if this page moves.

Cite the official text alongside it: SB 53 Transparency in Frontier Artificial Intelligence Act, California Legislative Information, https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260SB53.

BibTeX
@misc{aipolicytracker2026_largefrontierdevelopersm,
  author       = {{AIPolicyTracker}},
  title        = {{Large frontier developers must send periodic summaries of catastrophic-risk assessments to the state (California SB 53)}},
  year         = {2026},
  howpublished = {\url{https://aipolicytracker.org/obligations/us-california-sb-53-catastrophic-risk-assessment-summaries}},
  url          = {https://aipolicytracker.org/obligations/us-california-sb-53-catastrophic-risk-assessment-summaries},
  urldate      = {2026-11-08},
  note         = {Data licensed CC BY 4.0. Accessed 8 November 2026}
}

Change history

No change to this record's tracked fields has been recorded since 15 October 2026, when field-level history began.

Similar obligations in other instruments

Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.