OMB M-25-21
OMB M-25-21 — Accelerating Federal Use of AI through Innovation, Governance, and Public Trust
United States · OMB Memo M-25-21 (Apr. 3, 2025)
- Status
- In effect
- Took effect
- April 3, 2025
- Applies to
- All federal executive-branch agencies
- Enforced by
- OMB / agency CAIOs / IGs
OMB Memorandum M-25-21 (Apr. 3, 2025) is the Trump-era replacement for M-24-10. It sets the binding rule for how federal agencies use AI — requiring CAIO designations, AI use inventories, and risk-management practices for rights/safety-impacting AI, with a pro-innovation framing.
Who is protected: Public interacting with federal-agency AI
Legal detail
M-25-21 implements EO 14179. Requires: (1) agency CAIO; (2) public AI use case inventory updated annually; (3) minimum-risk-management practices for high-impact AI (covering pre-deployment testing, ongoing monitoring, opt-out where feasible, public notice); (4) CIO/CAIO governance councils. Successor to M-24-10 (rescinded).
Key facts
| Jurisdiction | United States |
|---|---|
| Level | Federal |
| Strength | Moderate |
| Enacted | April 3, 2025 |
| Citation | OMB Memo M-25-21 (Apr. 3, 2025) |
| Private right of action | No, agency enforcement only |
| Topics | government use of AI · automated decision-making |
| Agency page | OMB M-25-21 (PDF) |
More AI rules in United States
- Trump AI Innovation & Security EO (June 2026) · In effect
- FERC order directing PJM and other grid operators to reform tariffs on… · Enacted (not yet in effect)
- Chatrie v. United States (Fourth Amendment protection for location… · Blocked / in litigation
- Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757) · Proposed / pending
- NAIC AI Evaluation Tool Pilot (12 states, 2026) · Proposed / pending
- FTC Proposed Policy Statement — AI Accuracy (July 2026) · Proposed / pending
Related government use of AI rules elsewhere
- CA EO N-6-26 (AI Workforce) · In effect
- WA SB 5982 (Data Center / Clean Energy) · In effect
- Arkansas public entity AI/ADS policy mandate (Act 848, 2025) · In effect
- Inver Grove Heights MN data center moratorium amended under lawsuit (2026) · In effect
- San Marcos citywide data center ban (Land Use Matrix amendment) · In effect
- Washington County (MD) 12-month data center moratorium · In effect
See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.