Is Minimum risk management practices for high impact AI legally binding?

Q: Is Minimum risk management practices for high impact AI legally binding?

Minimum risk management practices for high impact AI is binding, sectoral in the United States. Binding, but only for a defined population: one regulated sector, or the federal government and the vendors it buys from. Agencies must implement minimum risk management practices for AI that could have significant impacts when deployed, and must have a plan to discontinue use where those practices are not met. Where mitigation is not possible, agencies must cease using the AI.

ObligationBinding, sectoral

Minimum risk management practices for high impact AI

Is this legally binding?

Binding, sectoral. Binding, but only for a defined population: one regulated sector, or the federal government and the vendors it buys from.

Agencies must implement minimum risk management practices for AI that could have significant impacts when deployed, and must have a plan to discontinue use where those practices are not met. Where mitigation is not possible, agencies must cease using the AI.

From the source
“If proper risk mitigation is not possible, agencies must cease using the AI.”
M-25-21, Guidance on federal use of AI

whitehouse.gov Show it on the map

What this connects to

1 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.

Part of1

InstrumentOMB M-25-21: Accelerating Federal Use of AI through Innovation, Governance, and Public TrustBinding, sectoral

Verified against the official source on 2026-08-18. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.