Trustworthy By Design Artificial Intelligence Act of 2024

Requires the Director of NIST to develop AI system trustworthiness guidelines covering models, data, safety, security, and fairness within one year. Mandates federal agencies evaluate AI systems for compliance and appoint Chief AI Officers for governance and oversight.

  • Authority: United States Congress
  • Parent authority: Federal government
  • Jurisdiction: United States
  • Collections: U.S. federal laws
  • Most recent activity: Defunct
  • Most recent activity date: 2025-01-03

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

  • AI system security vulnerabilities
  • Governance failure
  • Lack of capability or robustness
  • Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

  • Unfair discrimination and misrepresentation
  • Unequal performance across groups
  • Compromise of privacy
  • False or misleading information
  • Overreliance and unsafe use

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 6-8 subdomains, with strong focus on AI system security (2.2), lack of robustness (7.3), lack of transparency (7.4), governance failure (6.5), unfair discrimination (1.1), and privacy compromise (2.1). Coverage is concentrated in system safety, security, fairness, and governance domains.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

  • Public Administration (excl. National Security)

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

  • Scientific Research & Development Services
  • National Security

All other sectors had no coverage in this document.

Sectors Summary

This legislation governs AI use across all federal government operations, which spans multiple sectors including public administration, national security, and all sectors where federal agencies operate or provide services. The regulation applies comprehensively to federal agency AI deployments regardless of sector.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding legislative act from the United States Congress with mandatory requirements, enforcement mechanisms, and clear compliance obligations for federal agencies.

Actors

Proposer

  • Entity Types: AI_Governance_Actor
  • Entities: United States Congress
  • Summary: The document is a bill proposed by the United States Congress, as indicated by the header 'Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled'.

Target

  • Entity Types: AI_Governance_Actor, AI_Developer, AI_Deployer
  • Entities: Federal agencies; Director of the National Institute of Standards and Technology (NIST); developers of artificial intelligence systems
  • Summary: The document primarily targets federal agencies that deploy AI systems and requires them to comply with NIST guidelines. It also indirectly targets AI developers through requirements for transparency and cooperation in evaluation processes.

Enforcer

  • Entity Types: AI_Governance_Actor
  • Entities: Director of the National Institute of Standards and Technology (NIST); Chief Artificial Intelligence Officers; heads of Federal agencies
  • Summary: The Director of NIST is responsible for developing and updating guidelines, while federal agency heads and designated Chief AI Officers are responsible for ensuring compliance within their respective agencies.

Monitor

  • Entity Types: AI_Governance_Actor
  • Entities: United States Congress; Chief Artificial Intelligence Officers; Director of NIST
  • Summary: Congress receives reports on implementation barriers and non-compliant deployments. Chief AI Officers are responsible for ongoing oversight within agencies. The Director of NIST monitors and updates guidelines annually.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

  • Plan and Design
  • Collect and Process Data
  • Build and Use Model
  • Verify and Validate
  • Deploy
  • Operate and Monitor

AI Lifecycle Summary

The document comprehensively covers all AI lifecycle stages from planning through operational monitoring. It explicitly addresses design considerations, data collection and processing, model building and training (including post-training optimization), verification and validation, deployment requirements, and ongoing monitoring and governance throughout the AI system lifecycle.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

  • AI Models
  • AI Systems

Technical Scope Summary

The document explicitly defines and covers AI systems and AI models. It does not specifically mention frontier AI, general purpose AI, task-specific AI, foundation models, generative AI, predictive AI, open-weight models, or compute thresholds. The focus is on comprehensive evaluation of all AI systems deployed by federal agencies regardless of specific AI type.

https://www.congress.gov/bill/118th-congress/senate-bill/5539/text
https://agora.eto.tech/instrument/1900
Explore in the Document View

Document data from AGORA, CSET Emerging Technology Observatory.