Servicemember Quality of Life Improvement and National Defense Authorization Act for Fiscal Year 2025, Section Title XV, Subtitle D ("Artificial Intelligence")

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: FY2025 NDAA;NDAA provisions
• Most recent activity: Enacted
• Most recent activity date: 2024-12-23

Risk subdomain coverage

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• AI system security vulnerabilities
• Cyberattacks, weapon development or use
• Overreliance and unsafe use
• Lack of capability or robustness

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has minimal coverage of risk domains, with limited focus on AI system security (2.2), governance failure (6.5), and lack of robustness (7.3). The document primarily establishes infrastructure, research initiatives, and planning requirements rather than directly addressing AI risks and harms. Coverage is concentrated on governance mechanisms and system development rather than risk mitigation.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• National Security

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Scientific Research & Development Services
• Educational Services

All other sectors had no coverage in this document.

Sectors Summary

This document exclusively governs AI use within the National Security sector, specifically the Department of Defense and its military applications. It does not regulate commercial sectors or civilian applications of AI.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding federal statute enacted by the United States Congress as part of the National Defense Authorization Act for Fiscal Year 2025, containing mandatory obligations with enforcement through federal appropriations and administrative oversight.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: United States Congress
• Summary: The document is a subtitle of the National Defense Authorization Act for Fiscal Year 2025, which is federal legislation enacted by the United States Congress.

Target

• Entity Types: AI_Governance_Actor, AI_Developer, AI_Deployer
• Entities: Department of Defense; Under Secretary of Defense for Research and Engineering; Under Secretary of Defense for Acquisition and Sustainment; Chief Digital and Artificial Intelligence Officer of the Department of Defense; Secretary of Defense; military departments
• Summary: The legislation applies to and regulates the Department of Defense and its components in their development, acquisition, and deployment of AI systems. The Department acts as both a governance actor (implementing the requirements) and as an AI developer/deployer (developing and using AI systems).

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Secretary of Defense; Under Secretary of Defense for Research and Engineering; Under Secretary of Defense for Acquisition and Sustainment; Chief Digital and Artificial Intelligence Officer of the Department of Defense; Committee on Armed Services of the Senate; Committee on Armed Services of the House of Representatives; congressional defense committees
• Summary: Enforcement is carried out by Department of Defense leadership who must implement the requirements, with oversight by Congressional committees through mandatory briefings and reports.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Committee on Armed Services of the Senate; Committee on Armed Services of the House of Representatives; congressional defense committees
• Summary: Congressional committees monitor implementation through mandatory briefings and annual reports on the various initiatives and plans required by the legislation.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document covers multiple AI lifecycle stages with primary focus on Plan and Design (human factors integration, infrastructure planning), Build and Use Model (development of AI systems, training datasets), and Operate and Monitor (implementation plans, annual briefings). It also addresses Verify and Validate through testing infrastructure and evaluation metrics.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• AI Systems
• General Purpose AI
• Open Weight / Open Source

Technical Scope Summary

The document explicitly mentions AI systems, AI models, large language models, and autonomous weapon systems. It addresses infrastructure for large AI systems and references general-purpose military applications. No specific compute thresholds are mentioned, nor are there explicit references to foundation models, generative AI, predictive AI, or open-weight models.