The Kansas state government, under the direction of Gov. Laura Kelly, will adopt a new generative AI policy. The policy, created by the Kansas Office of Information Technology Services (OITS), outlines how Kansas can responsibly embrace and use the technology while also protecting the state.
“It is essential that we be proactive in finding the best way to use any technology that can pose risks to Kansans’ data and privacy,” Gov. Kelly said. “With the adoption of this policy, Kansas serves as a model for what an enterprising, effective government can do to stay at the forefront of technological advancements.”
Gov. Kelly’s office noted that the policy applies to all business uses involving the state of Kansas, including but not limited to the development of software code, written documentation (policy, legislation, or regulations), and correspondence (memorandums, letters, text messages, and emails), research, the summarization and proofreading of documents, and the making of business decisions.
“The full potential of generative AI has yet to be seen,” said Interim Chief Information Technology Officer and Chief Information Security Officer Jeff Maxon. “We have only scratched the surface in our understanding of what this technology can do. With the adoption of this policy, it allows agencies to safely explore how we can use generative AI to enhance our work and, ultimately, better serve Kansans.”
The policy also requires that responses created from generative AI outputs be reviewed for accuracy, appropriateness, privacy, and security before being acted upon or disseminated. It also lays out that state information and/or Restricted Use Information (RUI) cannot be provided when interacting with generative AI.
The governor’s office further noted that the policy requires agencies to ensure contractors disclose in their contracts the use of generative AI or integrations with generative AI platforms. Contractors are also prohibited from using the state’s RUI or other confidential data in generative AI queries or for building or training proprietary generative AI programs unless explicitly approved. Contractors utilizing generative AI to build software must demonstrate positive control over all data input into the system.