Servicemember Quality of Life Improvement and National Defense Authorization Act for Fiscal Year 2025, Section 225 ("Duties of Chief Digital and Artificial Intelligence Officer Governing Council relating to artificial intelligence models and advanced…

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: FY2025 NDAA;NDAA provisions
• Most recent activity: Enacted
• Most recent activity date: 2024-12-23

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• AI system security vulnerabilities
• AI possessing dangerous capabilities

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Disinformation, surveillance, and influence at scale
• Cyberattacks, weapon development or use
• Competitive dynamics

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 5-6 subdomains, with strong focus on malicious actors (4.1, 4.2), AI system security (2.2), competitive dynamics (6.4), and dangerous capabilities (7.2). Coverage is concentrated in security, national security risks, and adversarial misuse domains.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• National Security

All other sectors had no coverage in this document.

Sectors Summary

This document primarily governs the National Security sector, as it amends duties of a federal defense-related governing council to assess AI models for national security risks and develop strategies against adversarial access. It does not directly regulate private sector activities but establishes government oversight mechanisms.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding legislative amendment to existing federal law (John S. McCain National Defense Authorization Act) enacted by the United States Congress, creating mandatory duties for a federal governing council with enforcement through federal administrative mechanisms.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: United States Congress
• Summary: The document is a section of the Servicemember Quality of Life Improvement and National Defense Authorization Act for Fiscal Year 2025, which is proposed and enacted by the United States Congress as the legislative authority.

Target

• Entity Types: AI_Governance_Actor
• Entities: Chief Digital and Artificial Intelligence Officer Governing Council
• Summary: The document amends the duties of the Chief Digital and Artificial Intelligence Officer Governing Council, making this council the primary target of the governance instrument with new mandatory responsibilities.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Chief Digital and Artificial Intelligence Officer Governing Council; Congress; relevant Federal agencies
• Summary: The Chief Digital and Artificial Intelligence Officer Governing Council is tasked with enforcement responsibilities including assessment, strategy development, and making recommendations to Congress and federal agencies for legislative or administrative action.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Chief Digital and Artificial Intelligence Officer Governing Council
• Summary: The Governing Council is explicitly tasked with ongoing identification and assessment of AI models that could pose national security risks, which constitutes a monitoring function.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily focuses on the Deploy and Operate and Monitor stages of the AI lifecycle, with emphasis on assessing deployed AI models for national security risks and developing ongoing strategies to prevent unauthorized access. There is implicit coverage of the Verify and Validate stage through the assessment function.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• Frontier AI
• AI Systems

Technical Scope Summary

The document explicitly mentions 'artificial intelligence models' and 'advanced artificial intelligence technologies' as the primary technical scope. It focuses on 'potent artificial intelligence models' that could pose national security risks, suggesting coverage of advanced or frontier AI capabilities. No specific compute thresholds, model types (generative/predictive), or open-weight distinctions are mentioned.