This comes as state and federal elected officials across the country grapple with the challenges of generative AI, which are computer-based tools used to automate certain tasks. With this policy, Kansas is staying ahead of the curve as many states continue to consider ways to regulate the use of generative AI.  

The policy serves as the primary governing document for the usage of generative AI for users or related activities by the entities. It applies to all business uses involving the State of Kansas, including but not limited to the development of software code, written documentation (i.e., policy, legislation, or regulations), and correspondence (such as memorandums, letters, text messages, and emails), research, the summarization and proofreading of documents, and the making of business decisions. 

The policy outlines that responses created from generative AI outputs must be reviewed for accuracy, appropriateness, privacy, and security before being acted upon or disseminated. It also lays out that state information and/or Restricted Use Information (RUI) shall not be provided when interacting with generative AI. 

Agencies are to ensure contractors disclose in their contracts the use of generative AI or integrations with generative AI platforms. Contractors are also prohibited from using State of Kansas RUI or other confidential data in generative AI queries or for building or training proprietary generative AI programs unless explicitly approved. Contractors utilizing generative AI to build software must demonstrate positive control over all data input into the system. 

Software code generative by generative AI shall only be implemented after the entity has identified and mitigated all business and security risks related to its use. All usage of software code generated by generative AI shall be annotated. 

View the full policy here.