Prohibits federal agencies from acquiring AI products/services linked to foreign adversaries, requiring divestment within specified timelines. Mandates public disclosure of risky AI products/services. Exempts intelligence and specific Department of Defense activities from these restrictions.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.
All other risk subdomains had no coverage in this document.
Risk Coverage Summary
The document primarily addresses national security risks related to AI procurement from foreign adversaries. It has good coverage of AI system security vulnerabilities (2.2), competitive dynamics (6.4), and governance failure (6.5). There is minimal coverage of malicious actors (4.1, 4.2) through implicit references to foreign adversary threats. The document does not substantially address discrimination, privacy, misinformation, human-computer interaction, or AI system safety domains.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.
All other sectors had no coverage in this document.
Sectors Summary
This document governs AI procurement across all federal agencies and their contractors, effectively covering Public Administration excluding National Security (with partial coverage) and National Security sectors. The regulation applies to government operations and any private sector entities contracting with federal agencies across all industries.
Hard Law
Legislative Status Summary
This is a binding federal statute enacted by the United States Congress with mandatory obligations, enforcement mechanisms, and legal penalties for non-compliance.
Proposer
Target
Enforcer
Monitor
Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems
AI Lifecycle Summary
The document primarily focuses on the procurement, deployment, and operational monitoring stages of AI systems. It does not address planning, design, data collection, or model development stages, as it regulates the acquisition and use of already-developed AI products and services by federal agencies.
Terms relating to technical scope that are mentioned or implicitly referenced in the document
Technical Scope Summary
The document explicitly mentions both AI products/services and large language models. It does not define or distinguish between frontier AI, general purpose AI, task-specific AI, foundation models, generative AI, or predictive AI. There is no mention of compute thresholds or open-weight/open-source models. The focus is on the origin and control of AI products rather than their technical characteristics.
Document data from AGORA, CSET Emerging Technology Observatory.