District of Columbia — OCTO AI/ML Governance Policy

The Office of the Chief Technology Officer's governance policy establishes rules for the responsible and secure use of AI/ML in DC government, requiring written agency-director approval before using agency data with AI, cybersecurity and business risk assessments, use of only OCTO-approved platforms, data-classification restrictions, and continuous monitoring.

Technical detail

The Office of the Chief Technology Officer's governance policy establishes rules for the responsible and secure use of AI/ML in DC government, requiring written agency-director approval before using agency data with AI, cybersecurity and business risk assessments, use of only OCTO-approved platforms, data-classification restrictions, and continuous monitoring.

Who is protected: Residents interacting with state government AI systems; public-sector data subjects.

Who must comply: All District workforce members responsible for application identity and role definition, any District agency receiving OCTO enterprise services, and any provider or third-party entity with access to District information, systems, networks, and applications.

Key facts

More AI rules in District of Columbia

• Mayor's Order 2024-028: Articulating DC's Artificial Intelli · In effect

Related government use of AI rules elsewhere

• CA EO N-6-26 (AI Workforce) · In effect
• WA SB 5982 (Data Center / Clean Energy) · In effect
• Arkansas public entity AI/ADS policy mandate (Act 848, 2025) · In effect
• One-year moratorium on data center development (Inver Grove Heights MN) · In effect
• FERC order directing PJM and other grid operators to reform · Enacted (not yet in effect)
• San Marcos citywide data center ban (Land Use Matrix amendme · In effect