Artificial Intelligence Acquisitions Act of 2024

Prohibits federal agencies from acquiring AI products/services linked to foreign adversaries, requiring divestment within specified timelines. Mandates public disclosure of risky AI products/services. Exempts intelligence and specific Department of Defense activities from these restrictions.

  • Authority: United States Congress
  • Parent authority: Federal government
  • Jurisdiction: United States
  • Collections: U.S. federal laws
  • Most recent activity: Defunct
  • Most recent activity date: 2025-01-03

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

  • AI system security vulnerabilities
  • Competitive dynamics
  • Governance failure

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

  • Disinformation, surveillance, and influence at scale
  • Cyberattacks, weapon development or use
  • AI possessing dangerous capabilities

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document primarily addresses national security risks related to AI procurement from foreign adversaries. It has good coverage of AI system security vulnerabilities (2.2), competitive dynamics (6.4), and governance failure (6.5). There is minimal coverage of malicious actors (4.1, 4.2) through implicit references to foreign adversary threats. The document does not substantially address discrimination, privacy, misinformation, human-computer interaction, or AI system safety domains.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

  • Public Administration (excl. National Security)
  • National Security

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

  • Agriculture, Mining, Construction & Manufacturing
  • Trade, Transportation & Utilities
  • Information
  • Finance & Insurance
  • Real Estate, Rental & Leasing
  • Professional & Technical Services
  • Scientific Research & Development Services
  • Management, Administrative & Support Services
  • Educational Services
  • Health Care & Social Assistance

All other sectors had no coverage in this document.

Sectors Summary

This document governs AI procurement across all federal agencies and their contractors, effectively covering Public Administration excluding National Security (with partial coverage) and National Security sectors. The regulation applies to government operations and any private sector entities contracting with federal agencies across all industries.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding federal statute enacted by the United States Congress with mandatory obligations, enforcement mechanisms, and legal penalties for non-compliance.

Actors

Proposer

  • Entity Types: AI_Governance_Actor
  • Summary: The document is titled 'Artificial Intelligence Acquisitions Act of 2024' and is structured as federal legislation, indicating it was proposed and enacted by the United States Congress.

Target

  • Entity Types: AI_Governance_Actor, AI_Developer, AI_Deployer
  • Summary: The Act prohibits federal agencies from acquiring AI products/services from foreign adversaries and requires federal contractors to divest from such products. It explicitly targets both government procurement decisions and private sector entities doing business with the federal government.

Enforcer

  • Entity Types: AI_Governance_Actor
  • Summary: The Act designates specific federal entities responsible for developing and maintaining the list of prohibited AI products, reviewing certifications, and ensuring compliance through procurement restrictions.

Monitor

  • Entity Types: AI_Governance_Actor
  • Summary: The Act establishes ongoing monitoring through annual list updates, public notification requirements, and certification review processes to track compliance and emerging risks.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

  • Verify and Validate
  • Deploy
  • Operate and Monitor

AI Lifecycle Summary

The document primarily focuses on the procurement, deployment, and operational monitoring stages of AI systems. It does not address planning, design, data collection, or model development stages, as it regulates the acquisition and use of already-developed AI products and services by federal agencies.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

  • AI Models
  • AI Systems

Technical Scope Summary

The document explicitly mentions both AI products/services and large language models. It does not define or distinguish between frontier AI, general purpose AI, task-specific AI, foundation models, generative AI, or predictive AI. There is no mention of compute thresholds or open-weight/open-source models. The focus is on the origin and control of AI products rather than their technical characteristics.

https://www.congress.gov/bill/118th-congress/senate-bill/4976
https://agora.eto.tech/instrument/1234
Explore in the Document View

Document data from AGORA, CSET Emerging Technology Observatory.