In effect Limited protection

New Mexico Executive Order 2024-011 — Strengthening State Agency Cybersecurity (NIST AI/cyber baselines)

NM · N.M. Exec. Order No. 2024-011 (Apr. 5, 2024)

Governor Lujan Grisham's EO 2024-011 requires New Mexico state agencies to adopt NIST baselines covering AI, cloud, supply chain, and ransomware risks by November 1, 2024.

Technical detail

Lujan Grisham EO 2024-011 (Apr. 5, 2024): mandates NIST 800-series cybersecurity baselines across NM state agencies; explicitly includes AI risk-management baselines (NIST AI RMF) alongside cloud, supply-chain, and ransomware controls; compliance deadline Nov. 1, 2024.

Who is protected: New Mexicans whose interactions with state government involve AI tools and sensitive data

Who must comply: New Mexico state agencies

Key facts

Jurisdiction	NM
Level	State
Status	In effect
Protection strength	Limited protection
Effective date	2024-04-05
Enacted	2024-04-05
Citation	N.M. Exec. Order No. 2024-011 (Apr. 5, 2024)
Enforced by	New Mexico Department of Information Technology
Private right of action	No — agency enforcement only
Topics	government use of AI
Last verified	2026-06-16
Official source	Executive Order 2024-011 — Office of the Governor ↗

More AI rules in NM

NM Project Jupiter air permit hearing (Oct 19, 2026) · Proposed / pending
NM Land Commissioner blocks Project Jupiter pipeline (July 14, 2026) · In effect

Related government use of AI rules elsewhere

CA EO N-6-26 (AI Workforce) · In effect
WA SB 5982 (Data Center / Clean Energy) · In effect
Arkansas public entity AI/ADS policy mandate (Act 848, 2025) · In effect
One-year moratorium on data center development (Inver Grove Heights MN) · In effect
FERC order directing PJM and other grid operators to reform · Enacted (not yet in effect)
San Marcos citywide data center ban (Land Use Matrix amendme · In effect

See something wrong or out of date? Submit a correction — every entry must carry a verifiable official source.