Resources & Checklists

To ensure your business remains compliant with New York State laws, review the following requirements:

• AEDT Audits: If you use Automated Employment Decision Tools, you must conduct an independent bias audit annually.
• Employee Disclosure: Employees and candidates must be notified if AI is evaluating their performance or application.
• Consumer Right to Know: Any chatbot or AI interacting with consumers must clearly identify itself as artificial intelligence.
• Data Privacy: Ensure no personally identifiable information (PII) is processed by public LLMs without explicit consent.
• Vendor Management: Execute strict agreements with AI vendors regarding data ownership and security.

Every Hudson Valley organization should implement an Acceptable Use Policy (AUP) for AI tools like ChatGPT or Copilot:

• Data Classification: Define what data is safe for public AI (e.g., marketing copy) vs. prohibited (e.g., patient data, financial records).
• Approved Tools: Maintain a registry of IT-approved AI tools that have been vetted for security.
• IP Protection: Prohibit the input of proprietary code, trade secrets, or unreleased product designs into public models.
• Human Oversight: Mandate that all AI-generated content must be reviewed by a human before publication or distribution.