Kitsap County Commissioners Review Restrictions on Artificial Intelligence Use

Kitsap County officials have initiated a formal review of a preliminary policy designed to regulate the use of artificial intelligence within government operations. During a meeting in late May, the Kitsap County Board of Commissioners examined a framework presented by the Performance Excellence Across Kitsap (PEAK) and Project Management Office (PMO) departments. The proposal introduces a phased approach to technology adoption, prioritizing cybersecurity and the prevention of confidential data leaks. Under the current direction, county staff are explicitly prohibited from using their official credentials for AI tools until a formal training program is established and the policy is officially adopted. This legislative movement follows a trend across Washington State where local municipalities are attempting to balance the efficiencies offered by machine learning against the risks of misinformation and privacy breaches. The board has not yet taken formal action on the proposal, but officials expect a vote on the initial phase within the next two months. The development reflects a broader regional push to define the boundaries of algorithmic assistance in public service, as neighboring jurisdictions like Bainbridge Island have already implemented similar frameworks to manage the technology's influence on official records and communication.

Phased Deployment and Initial Cybersecurity Constraints

Kitsap County is structuring its introduction to artificial intelligence through a deliberate two-phase deployment strategy. According to Bainbridge Island Review, the first phase focuses on the immediate necessity of establishing a formal policy, attribution requirements, and a rigorous cybersecurity review process. Andy Hento, the manager of PEAK and PMO, informed commissioners that the county is currently evaluating both subscription-based services like Microsoft Copilot and various free, non-subscription tools. This broad categorization, referred to as "AI assistants," ensures that no specific software bypasses oversight simply because it lacks a price tag. The restriction on using county credentials serves as a temporary firewall, preventing the creation of official accounts until the county can guarantee that data handled by these tools is secure. Hento noted that the primary goal is to ensure every employee understands the technical nature of AI and the specific hazards associated with it, such as data scraping and the inadvertent exposure of sensitive public information. By categorizing these tools under a unified "AI assistant" umbrella, the county avoids the need for separate policies for every new startup or software update that enters the market, allowing the IT department to apply a singular standard of scrutiny to all generative technologies.

Attribution Requirements for Government Deliverables

A central pillar of the proposed policy is the mandatory inclusion of an AI attribution statement. This requirement dictates that any work product created, drafted, or "meaningfully influenced" by AI tools must be clearly labeled as such. As reported by the Bainbridge Island Review, this transparency rule applies to a wide variety of formats, including text generation for emails and reports, visual content like charts and graphics, and complex data analysis or synthesis. In a public sector context, this level of disclosure is vital for maintaining the integrity of the public record. If a constituent receives an email or reads a report, they have a legal and ethical right to know if the content was authored by a human representative or generated by a large language model. This move addresses a growing concern among regional administrators regarding the "black box" nature of algorithmic output. By enforcing attribution, Kitsap County ensures that even if a tool assists in the heavy lifting of data processing, the final responsibility remains visible. This also provides a trail for future audits, allowing the county to track which departments are most reliant on automated tools and whether that reliance affects the quality or accuracy of the services provided to the community. The policy seeks to prevent "ghostwriting" by machines, which could otherwise obfuscate the origin of official government stances.

Public Data Privacy and the Risks of Open Systems

The conversation surrounding the Kitsap policy has focused heavily on the mechanics of how data is stored and trained upon by external corporations. Andy Hento explained during the commission review that many popular tools, such as ChatGPT, are "open tools" that ingest user prompts to train future iterations of the model. He warned that any information entered into these prompts effectively becomes part of the "collective" or the public internet, as noted by the Bainbridge Island Review. This poses a significant risk for a government entity that handles sensitive personal information, proprietary infrastructure data, and confidential legal documents. Commissioner Katie Walters emphasized the importance of this education piece, noting that many industries may not fully grasp the cybersecurity elements involved in how data travels once it is submitted to a third-party server. For Kitsap County, the policy serves as a warning against treating AI tools as private workspaces. The commissioners are particularly concerned that staff members might use AI to summarize confidential meeting minutes or analyze protected health data without realizing they are essentially publishing that information to the service provider's database. This segment of the policy acts as a defensive measure, reinforcing the boundary between internal government deliberations and the external, profit-driven ecosystems of tech companies.

Comparative Implementation and the Bainbridge Island Model

While Kitsap County is currently in the review stage, the City of Bainbridge Island serves as a local predecessor for this type of governance. Communications manager Shannon Hays confirmed that the city adopted its own AI policy in 2025, positioning it as an early adopter within the region. According to the Bainbridge Island Review, the city’s approach mirrors the county's upcoming plan by emphasizing accountability. Every city staff member on Bainbridge Island assumes full responsibility for the accuracy of their work, regardless of whether AI was used during the process. This "human-in-the-loop" requirement ensures that the technology remains a tool rather than a replacement for professional judgment. Bainbridge Island has also moved into the training phase, utilizing both small-group sessions and professional external trainers to build foundational skills among its workforce. This proactive stance provides a roadmap for Kitsap County, suggesting that policy adoption is only the first step in a long-term commitment to technological literacy. The city's focus on "forward-thinking solutions" that improve efficiency while maintaining service standards suggests that the goal of these policies is not to stifle innovation, but to create a safe environment where it can be tested. Kitsap's move to establish an AI committee in Phase Two indicates they are following this trend of long-term evaluation rather than treating the policy as a one-time checkbox.

Analysis of Municipal Liability and Long-Term Governance

The shift toward formal AI policies in Kitsap County reveals a deeper concern regarding municipal liability and the changing nature of public service. Unlike private corporations, local governments are bound by strict public disclosure laws and fiduciary duties that make the use of probabilistic software inherently risky. When a tool like a chatbot provides an incorrect answer to a citizen regarding building permits or tax deadlines, the legal responsibility falls on the county, not the software provider. This policy represents an attempt to mitigate that liability by establishing a paper trail of training and attribution. Furthermore, the decision to bifurcate the rollout into two phases suggests that the county recognizes the technology is moving faster than the law. Phase one establishes the "rules of the road" for safety, while phase two aims for a strategic plan. This indicates that Kitsap officials are not just worried about what AI does today, but how it will change the structure of government work over the next decade. There is a clear recognition that at some point, "AI readiness" will be as fundamental to government operations as internet connectivity or cybersecurity insurance. By codifying these rules now, Kitsap is attempting to prevent a "shadow IT" situation where employees use personal devices and accounts to perform work tasks via AI without oversight, which could lead to disastrous data breaches or inconsistent public messaging.

Upcoming Deadlines for Final Policy Adoption

As of early June, the Kitsap Board of Commissioners has yet to take formal action on the proposed framework. However, the timeline suggested by PEAK manager Andy Hento indicates that a final draft for Phase One could be adopted within the next two months. This period will likely involve further internal deliberation regarding the specific language of the attribution requirements and the criteria for software approval. According to Bainbridge Island Review, the county will eventually transition to Phase Two, which includes the formation of an AI committee to oversee long-term governance and strategic planning. This committee will be tasked with conducting AI readiness assessments, which will determine which departments—such as public works, planning, or human resources—have the most to gain from automation and which are too sensitive for such tools. Residents can expect to see the first visible signs of this policy in the form of disclaimer labels on county documents and potentially more automated responses in non-sensitive communications once training is complete. The commissioners' focus on the National Association of Counties' sessions suggests that Kitsap is also looking for alignment with national best practices. The next few weeks will be critical for determining whether the policy remains a strict set of restrictions or if it evolves into a more permissive framework as the county increases its technical expertise.