Department of Homeland Security Vehicular Terrorism Prevention and Mitigation Act of 2025

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: U.S. federal laws
• Most recent activity: Proposed
• Most recent activity date: 2025-04-09

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• AI system security vulnerabilities
• Cyberattacks, weapon development or use
• AI possessing dangerous capabilities

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Compromise of privacy
• Disinformation, surveillance, and influence at scale
• Competitive dynamics
• Lack of capability or robustness

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 6-8 subdomains, with strong focus on malicious actors (4.1, 4.2), AI system security (2.2), competitive dynamics (6.4), and AI safety failures (7.2, 7.3). Coverage is concentrated in security, misuse prevention, and emerging technology risks related to autonomous vehicles and AI-enabled systems.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Trade, Transportation & Utilities
• Public Administration (excl. National Security)
• National Security

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Agriculture, Mining, Construction & Manufacturing
• Information
• Real Estate, Rental & Leasing
• Scientific Research & Development Services
• Educational Services
• Health Care & Social Assistance
• Arts, Entertainment & Recreation

All other sectors had no coverage in this document.

Sectors Summary

The document primarily governs the Public Administration sector (Department of Homeland Security operations) and addresses AI risks in the Trade, Transportation and Utilities sector (autonomous vehicles, ride-sharing) and National Security sector (terrorism prevention). It also touches on Information sector entities (AI technology vendors) and multiple sectors as potential targets of vehicular terrorism.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding federal statute enacted by the United States Congress with mandatory reporting requirements and specific deadlines for the Department of Homeland Security.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: United States Congress; Senate; House of Representatives
• Summary: The document is a federal statute enacted by the United States Congress, as indicated by the opening enactment clause and the legislative structure.

Target

• Entity Types: AI_Governance_Actor, AI_Developer, AI_Deployer
• Entities: Department of Homeland Security; Transportation Security Administration; Cybersecurity and Infrastructure Security Agency; vehicle rental companies; ride-sharing platforms; vendors of connected, autonomous, and ADAS technologies; freight operators; automotive manufacturers
• Summary: The Act primarily targets the Department of Homeland Security and its component agencies for reporting and coordination obligations. It also addresses private sector entities involved in automotive technologies, including AI-enabled autonomous vehicles and ADAS systems.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: United States Congress; Committee on Homeland Security of the House of Representatives; Committee on Commerce, Science, and Transportation; Committee on Homeland Security and Governmental Affairs of the Senate
• Summary: Congressional committees serve as the enforcement mechanism through oversight, receiving mandatory reports and briefings from the Department of Homeland Security.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Department of Homeland Security; Transportation Security Administration; Cybersecurity and Infrastructure Security Agency; appropriate congressional committees
• Summary: The Department of Homeland Security and its agencies are responsible for monitoring vehicular terrorism threats and reporting findings. Congressional committees monitor compliance with the Act's reporting requirements.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily addresses the Deploy and Operate and Monitor stages of the AI lifecycle, focusing on the deployment of AI-enabled autonomous vehicles and ADAS technologies, and their ongoing monitoring for security threats. It also covers aspects of Plan and Design through requirements for developing countermeasures and technologies.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• AI Systems
• Predictive AI
• Task-specific AI

Technical Scope Summary

The document explicitly mentions AI systems and AI-enabled technologies in the context of autonomous vehicles and threat detection. It references artificial intelligence and machine learning algorithms multiple times but does not specifically mention frontier AI, general purpose AI, foundation models, or compute thresholds. The focus is on task-specific AI applications in automotive and security contexts.