NIST AI RMF Generative AI Profile

Scope and obligations

Companion to NIST AI 100-1 covering GenAI-specific risks: CBRN information uplift, confabulation, data privacy, environmental impacts, harmful bias, dangerous information, IP misuse, obscene/abusive/violent content, information security, information integrity, human-AI configuration, value chain and component integration. Voluntary.

NIST AI RMF Generative AI Profile addresses 8 contested AI-governance topics explicitly, 2 via general principles,.

Topics governed

• governs
  Foundation Models / GPAI— Entire NIST AI 600-1 scope is GPAI / GenAI
• governs
  Deepfakes / Synthetic Content— NIST AI 600-1 §3.11 Confabulation + §3.10 Information Integrity (synthetic content)
• governs
  Transparency Obligations— Govern + Map cross-cutting documentation requirements applied to GenAI
• implicit
  Individual Redress— Accountability characteristic from base RMF; not GenAI-specific text
• governs
  Training-Data Rights— NIST AI 600-1 §3.4 Data Privacy + §3.7 Intellectual Property
• governs
  Catastrophic & Existential Risk— NIST AI 600-1 §3.1 CBRN Information Uplift; §3.3 Dangerous, Violent, or Hateful Content
• governs
  Agentic AI Governance— NIST AI 600-1 names Value Chain + Component Integration as risk category covering agentic / tool-use deployments
• governs
  Synthetic Content Provenance— NIST AI 600-1 — Information Integrity is one of 12 named GenAI risk categories; covers synthetic-content labelling + provenance
• implicit
  AI in Elections— Information Integrity is a named risk category; election-AI is the canonical example
• governs
  Environmental Impact of AI Training— NIST AI 600-1 — Environmental Impacts is one of 12 named GenAI risk categories

Cross-jurisdiction comparison

How peer instruments treat the topics NIST AI RMF Generative AI Profile governs.

°= industry self-imposed voluntary framework. Comparing a voluntary code's "governs" tint with a binding regulation's "governs" tint flattens the legal-force distinction; use the instrument-page banner for the operative status of each.

How to cite this article

Policy Window. (2024). NIST AI RMF Generative AI Profile [Wiki article — Instrument]. https://policywindow.org/wiki/nist-ai-rmf-genai-profile

Policy Window. 2024. "NIST AI RMF Generative AI Profile." Wiki article (Instrument). https://policywindow.org/wiki/nist-ai-rmf-genai-profile.

@misc{policywindow-nist-ai-rmf-genai-profile,
  title  = {NIST AI RMF Generative AI Profile},
  author = {Policy Window},
  year   = {2024},
  howpublished = {NIST AI 600-1 (Jul 2024)},
  url    = {https://policywindow.org/wiki/nist-ai-rmf-genai-profile},
  note   = {Primary source: https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-generative-artificial-intelligence}
}

Related debates — rival interpretations & counterevidence

Structured controversies where this instrument's provisions are the locus of disagreement. Each debate page lays out the competing positions with primary-source citations.

• Compute vs Behavioural Capability Thresholds — Should the regulatory trigger for 'frontier' / 'foundation' / 'systemic-risk' status be training-compute thresholds (objective + ex-ante observable), or behavioural-capability evaluation (more semantically meaningful but operationally costly)?

Related instruments

• EU AI Act · EU
• Executive Order 14110 on Safe, Secure, Trustworthy AI · US
• Interim Measures for Generative AI Service Management · CN
• G7 Hiroshima AI Process Code of Conduct · G7
• NIST AI Risk Management Framework · US
• Bletchley Declaration on AI Safety · global
• Seoul Declaration on Safe, Innovative and Inclusive AI · global
• California SB-1047: Safe and Secure Innovation for Frontier AI Models Act · US
• India Digital Personal Data Protection Act + AI Advisory (MEITY) · IN
• Brazil AI Bill (PL 2338/2023) · BR
• Anthropic Responsible Scaling Policy (RSP) v2 · US
• OpenAI Preparedness Framework · US
• Google DeepMind Frontier Safety Framework · US
• Meta Frontier AI Framework · US
• White House Voluntary AI Commitments · US
• Singapore Model AI Governance Framework for Generative AI · SG
• Japan METI AI Guidelines for Business · JP