DHS Framework for AI in Critical Infrastructure (Roles and Responsibilities)
United States · DHS Framework (Nov. 14, 2024)
DHS released a voluntary framework that lays out the responsibilities of cloud providers, AI developers, AI deployers, critical-infrastructure owners, and civil society for the safe and secure use of AI in U.S. critical infrastructure sectors — including grid, water, financial services, and healthcare.
Technical detail
DHS, 'Roles and Responsibilities Framework for Artificial Intelligence in Critical Infrastructure' (Nov. 14, 2024). Targets the 16 critical-infrastructure sectors, organized around five role categories: cloud and compute infrastructure providers, AI developers, critical infrastructure owners and operators, civil society, and the public sector. Implements EO 14110 § 4.3(a)(iv) directives that survived the EO's revocation.
Who is protected: Consumers, workers, and patients dependent on AI-augmented critical-infrastructure operations
Who must comply: Voluntary; targeted to the 16 critical-infrastructure sectors and their AI vendors
Key facts
| Jurisdiction | United States |
|---|---|
| Level | Federal |
| Status | In effect |
| Protection strength | Limited protection |
| Effective date | 2024-11-14 |
| Enacted | 2024-11-14 |
| Citation | DHS Framework (Nov. 14, 2024) |
| Enforced by | Department of Homeland Security; CISA (sector risk management agency coordination) |
| Private right of action | No — agency enforcement only |
| Penalties | No direct penalties; informs sector-specific regulation |
| Topics | government use of AI · data-center siting and energy · automated decision-making · consumer protection |
| Last verified | 2026-06-17 |
| Official source | DHS Framework for AI in Critical Infrastructure (Nov. 2024) ↗ |
More AI rules in United States
- Trump AI Innovation & Security EO (June 2026) · In effect
- FERC order directing PJM and other grid operators to reform · Enacted (not yet in effect)
- Chatrie v. United States (Fourth Amendment protection for lo · Blocked / in litigation
- Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757) · Proposed / pending
- NAIC AI Evaluation Tool Pilot (12 states, 2026) · Proposed / pending
- FTC Proposed Policy Statement — AI Accuracy (July 2026) · Proposed / pending
Related government use of AI rules elsewhere
- CA EO N-6-26 (AI Workforce) · In effect
- WA SB 5982 (Data Center / Clean Energy) · In effect
- Arkansas public entity AI/ADS policy mandate (Act 848, 2025) · In effect
- One-year moratorium on data center development (Inver Grove Heights MN) · In effect
- San Marcos citywide data center ban (Land Use Matrix amendme · In effect
- Washington County (MD) 12-month data center moratorium · Enacted (not yet in effect)
See something wrong or out of date? Submit a correction — every entry must carry a verifiable official source.