Compliance

Critical Infrastructure

Assets necessary for vital societal functions.

How the laws define this

Both frameworks recognize critical infrastructure as encompassing physical and technical or virtual assets essential to artificial intelligence operations. However, they diverge fundamentally on whether the computing resources supporting artificial intelligence constitute the critical infrastructure itself or merely interact with it. Under the National Artificial Intelligence Strategy 2024-2025 Action Plan, critical infrastructure refers directly to the compute resources required for artificial intelligence training and inference, explicitly highlighting data centres, processors, and cloud resources as targets for investments, interoperability, and secure access frameworks. In contrast, the Ohio Right to Compute Act defines critical infrastructure as vital physical and virtual United States systems whose incapacitation or destruction would have a debilitating effect on security, national economic security, national public health, or safety. Rather than classifying computing resources as the infrastructure, the Ohio bill specifically addresses artificial intelligence systems controlling such vital assets.

Synthesised from the 2 statutory definitions below. Each one is quoted in full, with its source.

How jurisdictions differ

What is distinctive in each definition, binding law in force first.

Jurisdiction	Instrument	Status	What is distinctive
Ohio, United States	To enact section 9.89 of the Revised Code to limit further regulation of certain computational systems, require risk management policies for AI-controlled critical infrastructure, and to name this act the Ohio Right to Compute Act.	Under Review	Adds focus on AI systems controlling critical infrastructure and ties to limiting regulation on computational systems.
Turkey	National Artificial Intelligence Strategy 2024-2025 Action Plan	Adopted	Limits to physical and technical resources like data centres, processors and cloud resources needed for AI training and inference.

What it triggers

In Ohio, under the Ohio Right to Compute Act, it would require risk management policies for AI-controlled critical infrastructure.source
Turkey's National Artificial Intelligence Strategy 2024-2025 Action Plan sets out investments, interoperability and secure access frameworks for critical infrastructure.source

Definitions (2)

Critical infrastructure covers the physical and technical resources necessary for AI training and inference—such as data centres, processors and cloud resources—and is a focus for investments, interoperability and secure access frameworks in the Plan.

National Artificial Intelligence Strategy 2024-2025 Action Plan (Ulusal Yapay Zeka Stratejisi)Definition 1 of 2

Refers to systems and assets, both physical and virtual, that are so vital to the United States that their incapacitation or destruction would have a debilitating effect on security, national economic security, national public health or safety, or any combination thereof. The bill specifically addresses AI systems controlling such infrastructure.

To enact section 9.89 of the Revised Code to limit further regulation of certain computational systems, require risk management policies for AI-controlled critical infrastructure, and to name this act the Ohio Right to Compute Act.Definition 2 of 2

Not to be confused with

Critical Infrastructure Facility

Critical infrastructure facility refers to vital assets whose incapacitation impacts security while critical infrastructure is broader systems and assets.

High-impact AI

High-impact AI describes systems in critical sectors with harm potential whereas critical infrastructure covers vital assets and resources themselves.

Questions and answers

What risk management is required for AI in critical infrastructure in Ohio?

Ohio's HB 392, the Right to Compute Act, would require risk management policies for AI-controlled critical infrastructure. It aims to limit further regulation of certain computational systems.

What does Turkey's AI strategy say about critical infrastructure?

The National Artificial Intelligence Strategy 2024-2025 Action Plan describes critical infrastructure as physical and technical resources for AI training and inference. It calls for investments, interoperability and secure access frameworks.

How do these definitions of critical infrastructure differ?

Definition 1 emphasizes systems vital to US security with AI control focus while definition 2 narrows to AI-specific resources like data centres in Turkey's plan.