Does the bill require covered entities (as defined in the bill) to conduct Impact/Risk Assessment (IA/RA) or similar evaluations?

If the bill includes auditing requirements or you select "Yes" for A28, does the bill define how frequently auditing should occur (i.e., single point or regular intervals)?

Does the bill impose explicit bans on AI systems, such as preventing deployment due to safety risks or requiring compliance before use?

Does the bill require tools of resilience, e.g., kill switches, recalls, emergency training and protocols, or establishing thresholds at which a deployed system should be shut down?

Does the bill have specific requirements for handling sensitive data?

Does the bill require organizations to document the purposes for which personal data is collected, used, processed or retained?

Does the bill restrict the use of AI systems that exhibit potentially discriminatory outcomes?

Does the bill mandate ongoing monitoring and evaluation of AI systems for bias?

Does the bill require consent from individuals or entities that may be the subject of the synthetic content?

Does the bill, in its criminalization provisions, distinguish between sexual synthetic content made for private use/possession/creation and content that is publicly distributed?