Protecting AI and Cloud Competition in Defense Act of 2024

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: U.S. federal laws
• Most recent activity: Defunct
• Most recent activity date: 2025-01-03

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Competitive dynamics

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Compromise of privacy
• AI system security vulnerabilities
• Cyberattacks, weapon development or use
• Power centralization and unfair distribution
• Governance failure
• AI possessing dangerous capabilities
• Lack of transparency or interpretability

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has minimal coverage of risk domains, with primary focus on competitive dynamics (6.4) and governance failure (6.5). It addresses security vulnerabilities (2.2) through data protection requirements and touches on malicious actors (4.2) through weapon development context. Coverage is concentrated in socioeconomic and security domains rather than AI safety or discrimination risks.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Information
• Scientific Research & Development Services
• National Security

All other sectors had no coverage in this document.

Sectors Summary

This document primarily governs the National Security sector through Department of Defense AI procurement. It also governs the Information sector (cloud providers, data infrastructure providers) and Scientific Research and Development Services sector (foundation model providers) as these entities are the targets of the procurement regulations.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding federal statute enacted by Congress with mandatory obligations, enforcement mechanisms including fines and contract termination, and specific regulatory requirements for the Department of Defense.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Summary: The document is a Congressional Act enacted by both chambers of the U.S. Congress, as indicated by the opening enactment clause.

Target

• Entity Types: AI_Infrastructure_Provider, AI_Developer
• Summary: The Act applies to companies providing cloud computing, data infrastructure, and foundation models to the Department of Defense, with specific focus on 'covered providers' meeting the $50M threshold.

Enforcer

• Entity Types: AI_Governance_Actor
• Summary: The Secretary of Defense is given authority to enforce contracting provisions, the Chief Digital and Artificial Intelligence Office must update DFARS regulations, and component acquisition executives can issue exemptions with notification requirements.

Monitor

• Entity Types: AI_Governance_Actor
• Summary: The Chairman of the Joint Chiefs of Staff, coordinating with the Under Secretary, must submit annual reports to congressional defense committees assessing competition and market dynamics, with public disclosure requirements.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily covers the Deploy and Operate and Monitor stages of the AI lifecycle, with emphasis on procurement processes, data protection during deployment, and ongoing monitoring of market competition. It also addresses aspects of Plan and Design through competitive procurement requirements and Build and Use Model through data rights provisions.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• Foundation Models
• AI Systems
• Compute Threshold
• General Purpose AI

Technical Scope Summary

The document explicitly defines and covers AI, foundation models, cloud computing, and data infrastructure. It provides specific technical thresholds for foundation models (1 billion parameters) and addresses both general-purpose AI capabilities and security-relevant AI systems. There is no explicit mention of generative AI, predictive AI, open-weight models, or specific compute thresholds in FLOPs.