Provenance data
Data used to trace and verify content origin.
How the laws define this
Regulators consistently view provenance data as embedded information or metadata used to establish the authenticity, origin, and modification history of digital material, enabling users to identify AI-generated or altered content. However, the scope and specificity required by different legal instruments diverge significantly. The California SB 942 — California AI Transparency Act and Artificial Intelligence Modifications frame provenance data functionally, focusing on its general role in tracing origin, verifying integrity, and supporting disclosures without enumerating exact data fields. In contrast, An act to amend the general business law, in relation to requiring synthetic content creations system providers to include provenance data on synthetic content produced or modified by a synthetic content creations system that the synthetic content creations system provider makes available establishes a highly prescriptive requirement. It mandates specific elements that must be included, such as the system provider's name, the creation date and time, an indication of which portions are AI-generated, and the type of device or system used.
Synthesised from the 3 statutory definitions below. Each one is quoted in full, with its source.
How jurisdictions differ
What is distinctive in each definition, binding law in force first.
| Jurisdiction | Instrument | Status | What is distinctive |
|---|---|---|---|
| California, United States | California SB 942 — California AI Transparency Act | In Force (Amended) | Adds that provenance data forms the basis for disclosure and verification requirements specifically for AI-generated material. |
| Utah, United States | Artificial Intelligence Modifications | Awaiting Entry | Specifies verifiable metadata or embedded information detailing origin, AI creation process, and subsequent modifications. |
| New York, United States | An act to amend the general business law, in relation to requiring synthetic content creations system providers to include provenance data on synthetic content produced or modified by a synthetic content creations system that the synthetic content creations system provider makes available | Adopted | Lists specific required elements like provider name, creation date-time, AI-generated portions, and device type. |
| California, United States | California SB 1000 — California AI Transparency Act (2026 Amendments) | In Force | Requires provenance data to comply with or interoperate with widely adopted technical specifications from standards bodies. |
What it triggers
- In California under SB 942, large generative AI providers must offer free AI detection tools and embed content provenance disclosures.
- In California under SB 1000, provenance data must comply with or interoperate with widely adopted technical specifications.source
- In New York under Senate Bill S6954, synthetic content creation system providers must include provenance data on synthetic content they make available.source
Definitions (4)
Data used to trace and verify the authenticity of content, track the origin of content, or track whether content has been modified; it forms the basis for disclosure and verification requirements for AI-generated material.
Refers to verifiable metadata or other embedded information within digital content that provides details about its origin, how it was created, and any subsequent modifications made, especially by artificial intelligence. This data is crucial for establishing the authenticity and integrity of digital media, helping users identify AI-generated or altered content.
Meticulously defined to include specific pieces of information that must be embedded or associated with the synthetic content. This data is mandated to include, but is not limited to, the name of the synthetic content creations system provider, the date and time of the content's creation, an indication of which portions of the content were AI-generated, and the type of device or system used to create the content.
Provenance data must comply with or interoperate with widely adopted technical specifications adopted by an established standards-setting body. The statute uses this concept to ensure that disclosure remains useful across systems while minimizing unnecessary personal information.
Not to be confused with
Content provenance focuses on traceability of origin and processing history, while provenance data refers to the data enabling that traceability.
Content provenance information is specifically machine-readable data, whereas provenance data may include broader verifiable metadata or embedded information.
Questions and answers
What must provenance data include under New York law?
It must include the name of the synthetic content creations system provider, the date and time of creation, an indication of AI-generated portions, and the type of device or system used. This data must be embedded or associated with the synthetic content.
Does California require provenance data to follow technical standards?
Yes, under SB 1000, provenance data must comply with or interoperate with widely adopted technical specifications from established standards-setting bodies. This ensures usefulness across systems while minimizing unnecessary personal information.
What is required for AI-generated content in California SB 942?
Providers must embed content provenance disclosures and offer free AI detection tools. Provenance data traces authenticity, origin, or modifications for AI-generated material.
Related Terms
Content Provenance
Traceability of content origin and processing history....
Provenance
Record of a content item's origin and transformation history....
Content authenticity
Metadata and verification mechanisms to assess content genuineness....
content provenance information
Machine-readable data documenting a content item's origin and history....
Digital content provenance
Factual information detailing a digital resource's creator, origin, context, history, and editing, conforming to an open industry technical standard....