National Defense Authorization Act for Fiscal Year 2024, Section 7513 ("Policies established by Director of National Intelligence for artificial intelligence capabilities")

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: NDAA provisions;U.S. federal laws
• Most recent activity: Enacted
• Most recent activity date: 2023-12-22

Risk subdomain coverage

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Compromise of privacy
• AI system security vulnerabilities
• Governance failure
• Lack of capability or robustness
• Lack of transparency or interpretability

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has minimal coverage of risk domains, with limited focus on AI system security (2.2) through vulnerability testing requirements, and governance failure (6.5) through establishment of oversight policies. Most coverage is implicit through procedural requirements rather than explicit risk mitigation.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• National Security

All other sectors had no coverage in this document.

Sectors Summary

This document exclusively governs AI use within the National Security sector, specifically the U.S. intelligence community. It establishes comprehensive policies for AI acquisition, development, and deployment by intelligence agencies.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding federal statute enacted by the United States Congress as part of the National Defense Authorization Act for Fiscal Year 2024, with mandatory obligations imposed on the Director of National Intelligence.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: United States Congress
• Summary: The document is Section 7513 of the National Defense Authorization Act for Fiscal Year 2024, which is enacted by the United States Congress as the legislative authority.

Target

• Entity Types: AI_Governance_Actor, AI_Developer, AI_Deployer
• Entities: Director of National Intelligence; elements of the intelligence community; third parties providing AI capabilities to intelligence community
• Summary: The document establishes policies that apply to the Director of National Intelligence and all elements of the intelligence community regarding their acquisition, development, and use of AI capabilities, as well as third-party vendors providing AI systems to these entities.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Director of National Intelligence
• Summary: The Director of National Intelligence is explicitly designated as the authority responsible for establishing, implementing, and annually reviewing the AI policies for the intelligence community.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Director of National Intelligence
• Summary: The Director of National Intelligence is required to conduct annual reviews of the established policies, serving as the monitoring authority for policy implementation and effectiveness.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document comprehensively covers multiple AI lifecycle stages with particular emphasis on Build and Use Model, Verify and Validate, Deploy, and Operate and Monitor stages. It addresses the entire lifecycle from acquisition through ongoing maintenance and performance monitoring.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• AI Systems

Technical Scope Summary

The document explicitly mentions AI capabilities and models throughout, with specific focus on machine learning. It does not distinguish between frontier AI, general purpose AI, or task-specific AI, nor does it mention compute thresholds, foundation models, generative AI, or open-weight models.