Establishes an Artificial Intelligence Safety Review Office to evaluate AI models for national security risks. Requires AI developers to follow red-teaming and cybersecurity standards. Prohibits deploying risky AI models. Imposes fines and criminal penalties for non-compliance. Allocates $50 million.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.
All other risk subdomains had no coverage in this document.
Risk Coverage Summary
The document has good coverage of approximately 8-10 subdomains, with strong focus on malicious actors (4.1, 4.2, 4.3), AI system security (2.2), competitive dynamics (6.4), governance structures (6.5), and AI safety failures (7.1, 7.2, 7.3). Coverage is concentrated in security, misuse prevention, and AI safety domains, particularly addressing CBRN and cyber risks.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.
All other sectors had no coverage in this document.
Sectors Summary
This is external federal regulation that governs AI development and deployment across all sectors where covered frontier AI models are developed or deployed. The primary sectors directly regulated are Information (AI developers, cloud providers) and Scientific Research and Development Services (AI research organizations). The regulation has cross-sectoral applicability as it governs AI models that could be used in any sector, with particular attention to national security implications.
Hard Law
Legislative Status Summary
This is a binding federal statute enacted by Congress with mandatory obligations, enforcement mechanisms including criminal penalties (up to 10 years imprisonment) and civil fines (up to $1,000,000 per day), and judicial enforcement through district courts.
Proposer
Target
Enforcer
Monitor
Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems
AI Lifecycle Summary
The document covers multiple AI lifecycle stages with primary focus on Build and Use Model, Verify and Validate, Deploy, and Operate and Monitor stages. It addresses model development through red-teaming and cybersecurity standards, pre-deployment evaluation and review processes, deployment notification and prohibition mechanisms, and ongoing monitoring through reporting requirements.
Terms relating to technical scope that are mentioned or implicitly referenced in the document
Technical Scope Summary
The document explicitly defines and focuses on 'covered frontier artificial intelligence models' with specific compute thresholds (10^26 operations for training). It addresses both AI models and broader systems, with emphasis on general-purpose, broadly capable models. The document does not explicitly mention foundation models, generative AI, predictive AI, or distinguish between open-weight and closed models, though it does address deployment broadly including open source release.
Document data from AGORA, CSET Emerging Technology Observatory.