On October 21, 2024, the Kentucky Legislative Research Commission published a report on the use of artificial intelligence (AI) within Kentucky's executive branch. Among other things, the report provides policy and legislative recommendations to ensure that AI technology is used responsibly, securely, and effectively across state agencies.

Key findings and recommendations

The report highlights that Kentucky currently lacks uniform policies for AI, apart from initiatives within the Cabinet for Health and Family Services (CHFS), which has established an AI governance framework based on standards from the Government Accountability Office (GAO) and the National Institute of Standards and Technology (NIST). The report notes that similar frameworks should be adopted across all executive branch agencies. The report recommends, among other things, that:

• The Commonwealth Office of Technology (COT) should work with state agencies to create a report assessing current AI procurement processes in relation to national standards.
• COT should develop administrative policies for AI technology procurement, implementation, and assessment in Kentucky's executive branch. The report explains that this standardized approach, informed by federal guidelines, would ensure that AI is deployed responsibly and transparently across agencies.
• COT should issue guidance on responsible AI use, focussing on risk awareness, security, and privacy. These guidelines should be posted by October 1, 2025.
• COT should develop a risk assessment methodology based on the NIST AI Risk Management Framework. This process would allow agencies to evaluate potential risks and implement mitigation measures.
• To improve AI oversight, COT should conduct an annual inventory of AI systems used by the executive branch. This inventory would include system names, vendors, usage descriptions, AI techniques applied, and risk assessments. 

Legislative reforms

The report recommends that Kentucky's General Assembly revise relevant statutes, to formalize these AI governance measures within COT's mandate. According to the report, this statutory support would empower COT to require agency cooperation in maintaining an up-to-date inventory of AI technology, enhancing transparency and governance across state operations.

You can read the report here.