01
Scope of application & addressees
- Federal executive agencies
- Contractors supplying AI products or services to federal agencies
- Teams responsible for high-impact AI, procurement, data and risk management
02
Core regulatory mandates & key requirements
01Agencies appoint a Chief AI Officer and maintain AI governance and inventories.
02High-impact AI requires testing, monitoring, human oversight and risk treatment.
03Procurement addresses data rights, portability, interoperability, vendor lock-in and performance evaluation.
03
Enforcement & compliance timeline
M-25-21 and M-25-22 were issued on the same date.