AI Development Practices Act of 2024

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: U.S. federal laws
• Most recent activity: Defunct
• Most recent activity date: 2025-01-03

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• AI system security vulnerabilities
• Governance failure
• Lack of capability or robustness
• Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Unfair discrimination and misrepresentation
• Exposure to toxic content
• Compromise of privacy
• False or misleading information
• Cyberattacks, weapon development or use
• Overreliance and unsafe use
• Competitive dynamics
• AI pursuing its own goals
• AI possessing dangerous capabilities

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has minimal to good coverage of approximately 6-8 subdomains, with primary focus on AI system security (2.2), lack of robustness (7.3), lack of transparency (7.4), governance failure (6.5), and competitive dynamics (6.4). Coverage is concentrated in system safety, security, and governance domains, with emphasis on voluntary risk management frameworks and development practices.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Public Administration (excl. National Security)

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Scientific Research & Development Services
• Educational Services
• National Security

All other sectors had no coverage in this document.

Sectors Summary

This document does not govern specific economic sectors. Rather, it establishes a cross-sectoral framework by mandating NIST to develop voluntary guidance for AI development practices applicable to all sectors. The guidance is intended for use by public and private sector organizations across industries, governments, civil society, and academia.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding legislative act passed by the United States Congress that amends existing federal law (National Institute of Standards and Technology Act). It uses mandatory language ('shall') to impose legal obligations on the Director of NIST, includes reporting requirements to Congressional committees, and creates enforceable duties under federal law.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Summary: The document is titled 'AI Development Practices Act of 2024' and is presented as legislation enacted by Congress, amending the National Institute of Standards and Technology Act.

Target

• Entity Types: AI_Developer, AI_Governance_Actor
• Summary: The Act targets NIST with mandatory obligations to develop voluntary guidance for AI development practices. The voluntary guidance itself targets AI developers and organizations developing, releasing, and assessing AI systems across public and private sectors.

Enforcer

• Entity Types: AI_Governance_Actor
• Summary: NIST and its Director are given the authority to develop and update voluntary guidance, with Congressional committees providing oversight through mandatory briefing requirements.

Monitor

• Entity Types: AI_Governance_Actor
• Summary: Congressional committees are designated to receive briefings on implementation and policy recommendations. NIST is responsible for periodic updates and ongoing collaboration with stakeholders to monitor best practices.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document comprehensively covers multiple AI lifecycle stages with particular emphasis on Plan and Design, Build and Use Model, Verify and Validate, and Deploy stages. It addresses development practices, risk assessment, documentation, evaluation, and public release of AI systems.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• AI Systems

Technical Scope Summary

The document explicitly mentions AI systems throughout and defines the term by reference to another federal act. It does not explicitly mention AI models as a separate concept, nor does it reference frontier AI, general purpose AI, task-specific AI, foundation models, generative AI, predictive AI, open-weight models, or specific compute thresholds.