OMB M-25-21 — Accelerating Federal Use of AI through Innovation, Governance, and Public Trust
United States · OMB Memo M-25-21 (Apr. 3, 2025)
OMB Memorandum M-25-21 (Apr. 3, 2025) is the Trump-era replacement for M-24-10. It sets the binding rule for how federal agencies use AI — requiring CAIO designations, AI use inventories, and risk-management practices for rights/safety-impacting AI, with a pro-innovation framing.
Technical detail
M-25-21 implements EO 14179. Requires: (1) agency CAIO; (2) public AI use case inventory updated annually; (3) minimum-risk-management practices for high-impact AI (covering pre-deployment testing, ongoing monitoring, opt-out where feasible, public notice); (4) CIO/CAIO governance councils. Successor to M-24-10 (rescinded).
Who is protected: Public interacting with federal-agency AI
Who must comply: All federal executive-branch agencies
Key facts
| Jurisdiction | United States |
|---|---|
| Level | Federal |
| Status | In effect |
| Protection strength | Moderate protection |
| Effective date | 2025-04-03 |
| Enacted | 2025-04-03 |
| Citation | OMB Memo M-25-21 (Apr. 3, 2025) |
| Enforced by | OMB / agency CAIOs / IGs |
| Private right of action | No — agency enforcement only |
| Topics | government use of AI · automated decision-making |
| Last verified | 2026-06-16 |
| Official source | OMB M-25-21 (PDF) ↗ |
More AI rules in United States
- Trump AI Innovation & Security EO (June 2026) · In effect
- FERC order directing PJM and other grid operators to reform · Enacted (not yet in effect)
- Chatrie v. United States (Fourth Amendment protection for lo · Blocked / in litigation
- Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757) · Proposed / pending
- NAIC AI Evaluation Tool Pilot (12 states, 2026) · Proposed / pending
- FTC Proposed Policy Statement — AI Accuracy (July 2026) · Proposed / pending
Related government use of AI rules elsewhere
- CA EO N-6-26 (AI Workforce) · In effect
- WA SB 5982 (Data Center / Clean Energy) · In effect
- Arkansas public entity AI/ADS policy mandate (Act 848, 2025) · In effect
- One-year moratorium on data center development (Inver Grove Heights MN) · In effect
- San Marcos citywide data center ban (Land Use Matrix amendme · In effect
- Washington County (MD) 12-month data center moratorium · Enacted (not yet in effect)
See something wrong or out of date? Submit a correction — every entry must carry a verifiable official source.