DHS AI Critical Infra Framework
DHS Framework for AI in Critical Infrastructure (Roles and Responsibilities)
United States · DHS Framework (Nov. 14, 2024)
- Status
- In effect
- Took effect
- November 14, 2024
- Applies to
- Voluntary; targeted to the 16 critical-infrastructure sectors and their AI vendors
- Enforced by
- Department of Homeland Security; CISA (sector risk management agency coordination)
DHS released a voluntary framework that lays out the responsibilities of cloud providers, AI developers, AI deployers, critical-infrastructure owners, and civil society for the safe and secure use of AI in U.S. critical infrastructure sectors — including grid, water, financial services, and healthcare.
Who is protected: Consumers, workers, and patients dependent on AI-augmented critical-infrastructure operations
Legal detail
DHS, 'Roles and Responsibilities Framework for Artificial Intelligence in Critical Infrastructure' (Nov. 14, 2024). Targets the 16 critical-infrastructure sectors, organized around five role categories: cloud and compute infrastructure providers, AI developers, critical infrastructure owners and operators, civil society, and the public sector. Implements EO 14110 § 4.3(a)(iv) directives that survived the EO's revocation.
Key facts
| Jurisdiction | United States |
|---|---|
| Level | Federal |
| Strength | Limited |
| Enacted | November 14, 2024 |
| Citation | DHS Framework (Nov. 14, 2024) |
| Private right of action | No, agency enforcement only |
| Penalties | No direct penalties; informs sector-specific regulation |
| Topics | government use of AI · data-center siting and energy · automated decision-making · consumer protection |
| Agency page | DHS Framework for AI in Critical Infrastructure (Nov. 2024) |
More AI rules in United States
- Trump AI Innovation & Security EO (June 2026) · In effect
- FERC order directing PJM and other grid operators to reform tariffs on… · Enacted (not yet in effect)
- Chatrie v. United States (Fourth Amendment protection for location… · Blocked / in litigation
- Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757) · Proposed / pending
- NAIC AI Evaluation Tool Pilot (12 states, 2026) · Proposed / pending
- FTC Proposed Policy Statement — AI Accuracy (July 2026) · Proposed / pending
Related government use of AI rules elsewhere
- CA EO N-6-26 (AI Workforce) · In effect
- WA SB 5982 (Data Center / Clean Energy) · In effect
- Arkansas public entity AI/ADS policy mandate (Act 848, 2025) · In effect
- Inver Grove Heights MN data center moratorium amended under lawsuit (2026) · In effect
- San Marcos citywide data center ban (Land Use Matrix amendment) · In effect
- Washington County (MD) 12-month data center moratorium · In effect
See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.