Notice and disclosure

(a) In general Each developer or deployer shall make publicly available, in plain language and in a clear, conspicuous, not misleading, easy-to-read, and readily accessible manner, a disclosure that provides a detailed and accurate representation of the developer or deployer's practices regarding the requirements under this Act. (b) Content of disclosure The disclosure required under subsection (a) shall include, at a minimum, the following: (1) The identity and the contact information of— (A) the developer or deployer to which the disclosure applies (including the developer or deployer’s point of contact and electronic and physical mail address, as applicable for any inquiry concerning a covered algorithm or individual rights under this Act); and (B) any other entity within the same corporate structure as the developer or deployer to which personal data is transferred by the developer or deployer. (2) A link to the website containing the developer or deployer’s summaries of pre-deployment evaluations, impact assessments, and annual review of assessments, as applicable. (3) The categories of personal data the developer or deployer collects or processes in the development or deployment of a covered algorithm and the processing purpose for each such category. (4) Whether the developer or deployer transfers personal data, and, if so, each third party to which the developer or deployer transfers such data and the purpose for which such data is transferred, except with respect to a transfer to a governmental entity pursuant to a court order or law that prohibits the developer or deployer from disclosing such transfer. (5) A prominent description of how an individual can exercise the rights described in this Act. (6) A general description of the developer or deployer’s practices for compliance with the requirements described in sections 102 and 201. (7) The following disclosure: The audit of this algorithm was conducted to comply with the Artificial Intelligence Civil Rights Act of 2025, which seeks to avoid the use of any algorithm that has a disparate impact on certain protected classes of individuals. The audit does not guarantee that this algorithm is safe or in compliance with all applicable laws.. (8) The effective date of the disclosure. (c) Languages The disclosure required under subsection (a) shall be made available in each covered language in which the developer or deployer operates or provides a good or service. (d) Accessibility Any disclosure provided under this section shall be made available in a manner that is reasonably accessible to and usable by individuals with disabilities. (e) Material changes (1) Notification If a developer or deployer makes a material change to the disclosure required under subsection (a), the developer or deployer shall notify each individual affected by such material change prior to implementing the material change. (2) Requirements Each developer or deployer shall take all reasonable measures to provide to each affected individual a direct electronic notification regarding any material change to the disclosure, in each covered language in which the disclosure is made available, and taking into account available technology and the nature of the relationship with such individual. (3) Log of material changes (A) Retention period Beginning after the date of enactment of this Act, each developer or deployer shall retain a copy of each previous version of the disclosure required under subsection (a) for a period of at least 10 years after the last day on which such version was effective and publish each such version on its website. (B) Log of material changes Each developer or deployer shall make publicly available, in a clear, conspicuous, and readily accessible manner, a log describing the date and nature of each material change to its disclosure during the retention period described in subparagraph (A), and such descriptions shall be sufficient for a reasonable individual to understand the material effect of each material change. (C) Clarification The obligations described in this paragraph shall not apply to any previous version of a developer or deployer’s disclosure of practices regarding the collection, processing, and transfer of personal data, or any material change to such disclosure, that precedes the date of enactment of this Act. (f) Short-Form notice (1) In general A deployer shall provide a short-form notice regarding a covered algorithm it develops, offers, licenses, or uses in a manner that— (A) is concise, clear, conspicuous, in plain language, and not misleading; (B) is readily accessible to individuals with disabilities; (C) is based on what is reasonably anticipated within the context of the relationship between the individual and the deployer; (D) includes an overview of each applicable individual right and disclosure in a manner that draws attention to any practice that may be unexpected to a reasonable individual or that involves a consequential action; (E) is not more than 500 words in length; and (F) is available to the public at no cost. (2) Timing of notice (A) Existing relationship If a deployer has a relationship with an individual, the deployer shall provide an electronic version of the short-form notice directly to the individual upon the individual’s first interaction with the covered algorithm. (B) No relationship If a deployer does not have a relationship with an individual, the deployer shall provide the short-form notice in a clear, conspicuous, accessible, and not misleading manner on their website. (3) Rulemaking The Commission shall promulgate regulations in accordance with section 553 of title 5, United States Code, specifying the minimum content required to be included in the short-form notice described in paragraph (1), which— (A) shall not exceed the content requirements described in subsection (b); and (B) shall include a template or model for such short-form notice. (g) Reporting mechanism Each developer or deployer shall make publicly available, in a clear, conspicuous, and readily accessible manner, a mechanism for an individual impacted by a covered algorithm to report to the developer or deployer potential violations of this Act.