RMA — 24-Hour Incident Notification
An RMA participant must notify OAIP within 24 hours of any incident that results in harm to the health, safety, or financial well-being of a user of the mitigated technology.
What Counts
- Harm to user health (physical or mental)
- Harm to user safety
- Harm to user financial well-being
- Notification delivered within 24 hours of the incident occurring
- Notification delivered regardless of whether the harm was caused by the AI or surrounding product behavior
What Does Not Count
- Internal triage that delays notification beyond the 24-hour window
- Aggregating multiple incidents into a weekly or monthly notification
- Restricting notification to incidents the participant classifies as material
Implementing Legal Instruments
| Legal Instrument | Scope | Status | Provisions |
|---|---|---|---|
| Utah OAIP × ElizaChat — Teen Mental-Health App RMA (2024) | us-ut | expired | 1 |