New York AI Safety Law Takes Effect, Prompting Registration for OpenAI and Anthropic
New York has opened a registration portal for frontier AI developers under its RAISE Act, demanding safety frameworks, incident reporting, and transparency reports.
New York announced on Tuesday that its AI safety law, the RAISE Act, is now active. The state opened a registration portal that large frontier AI developers, defined as companies with more than $500 million in annual revenue, must use by Jan 1 2027. OpenAI and Anthropic are among the first labs expected to file.
What the RAISE Act Requires
According to TechCrunch, the law mandates three core actions for qualifying AI labs. First, each lab must publish a safety framework on its public website, outlining how it designs, tests, and monitors advanced models. Second, any critical safety incident, such as a model generating harmful content or being misused, must be reported to the state within 72 hours. Third, labs must produce regular public model transparency reports that detail capabilities, limitations, and mitigation steps. The law also sets financial penalties of up to $1 million for a first violation and $3 million for subsequent breaches.
New York’s Oversight Structure
The Office of Digital Innovation, Governance, Integrity, and Trust (DIGIT) will enforce the RAISE Act. DIGIT will review the safety frameworks submitted, track incident reports, and evaluate the transparency documents. The state also launched the New York Center for AI Responsibility and Research at SUNY Binghamton, funded with $55 million, to independently assess AI safety and work with DIGIT. Governor Kathy Hochul emphasized that the approach aims to put communities before corporations, creating a model for national AI regulation.
How This Affects Small Business Users
While the registration requirement applies only to large developers, the downstream impact reaches smaller companies that rely on AI services. When OpenAI or Anthropic publish safety frameworks, the details can inform how their APIs should be used in customer‑facing applications. Transparent incident reporting gives downstream users early warning of potential model failures, allowing them to adjust usage or implement additional safeguards. Moreover, the public transparency reports can help procurement teams assess risk before integrating a particular model into their workflows.
Practical Steps for Your Organization
Even if you are not a frontier lab, you can prepare for the new environment. Below are concrete actions you can take now:
- Monitor provider announcements: Follow OpenAI, Anthropic, and other major labs for updates to their published safety frameworks and transparency reports.
- Update your vendor risk assessments: Include the new NY safety reporting requirements as a factor when evaluating AI services, especially if you have customers or employees in New York.
- Implement internal incident response: Establish a process to log any AI‑related issues and be ready to act within 72 hours if a provider notifies you of a critical incident.
- Educate staff on model limitations: Conduct short training sessions that explain how model outputs can be biased or unsafe, reinforcing the importance of human oversight.
- Plan for compliance documentation: Keep records of how you use AI models, the safeguards you have in place, and any communications with providers about safety incidents.
- Explore an AI roadmap: If you are unsure how to align with the new regulations, consider a plain‑English AI roadmap to guide your strategy. (See our plain‑English AI roadmap.)
Broader Context and Future Developments
New York is not alone in tightening AI oversight. California’s SB 53, effective Jan 2024, requires similar safety frameworks, whistleblower protections, and a 15‑day incident reporting window for frontier labs. Illinois will impose comparable rules plus independent safety audits starting in 2027. These state laws together signal a shift toward more granular regulation of advanced AI, moving beyond the federal approach that has so far focused on broad principles.
For small businesses, the key takeaway is that greater transparency from AI providers should make it easier to assess risk. At the same time, the regulatory environment will likely evolve, with more states adopting similar frameworks. Staying informed, documenting your AI usage, and building a responsive incident‑handling process will help you navigate the changing landscape without costly surprises.
By treating the new requirements as an opportunity to strengthen your own AI governance, you can turn compliance into a competitive advantage. Your customers will appreciate the added diligence, and you will be better positioned if additional regulations emerge at the national level.
This briefing is based on reporting by TechCrunch. All information reflects the content available as of Nov 10 2026.
Sources
This post was drafted with AI from the reporting linked above and published by The Jones Foundry. For full details, read the original sources.