Generative AI Terrorism Risk Assessment Act

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: U.S. federal laws
• Most recent activity: Proposed
• Most recent activity date: 2025-03-25

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Disinformation, surveillance, and influence at scale
• Cyberattacks, weapon development or use
• Governance failure
• AI possessing dangerous capabilities

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Exposure to toxic content
• AI system security vulnerabilities
• Lack of capability or robustness

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 5-6 subdomains, with strong focus on malicious actors (4.1, 4.2), AI system security (2.2), governance (6.5), and AI safety failures (7.2, 7.3). Coverage is concentrated in security, misuse prevention, and governance oversight domains.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Public Administration (excl. National Security)
• National Security

All other sectors had no coverage in this document.

Sectors Summary

This document primarily governs the Public Administration and National Security sectors, requiring government agencies (DHS, ODNI) to assess terrorism threats involving generative AI. It does not directly regulate private sector AI development or deployment.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding legislative act from the United States Congress with mandatory requirements, specified enforcement mechanisms, and legal obligations on the Secretary of Homeland Security to conduct annual assessments and submit reports to congressional committees.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: United States Congress; Senate; House of Representatives
• Summary: The document is a bill proposed by the United States Congress, as indicated by the opening text 'Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled'.

Target

• Entity Types: AI_Governance_Actor
• Entities: Secretary of Homeland Security; Department of Homeland Security; Director of National Intelligence; Office of the Director of National Intelligence
• Summary: The primary target is the Secretary of Homeland Security and the Department of Homeland Security, who are required to conduct assessments and coordinate with the Director of National Intelligence. The document also targets State and local fusion centers for information sharing.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Committee on Homeland Security; Permanent Select Committee on Intelligence; Committee on Energy and Commerce; Committee on Homeland Security and Governmental Affairs; Select Committee on Intelligence; Committee on Commerce, Science, and Transportation
• Summary: Congressional committees are designated as the enforcement bodies through their oversight role, receiving mandatory assessments, briefings, and having the authority to determine appropriate participation in briefings.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Committee on Homeland Security; Permanent Select Committee on Intelligence; Committee on Energy and Commerce; Committee on Homeland Security and Governmental Affairs; Select Committee on Intelligence; Committee on Commerce, Science, and Transportation; Office of the General Counsel; Privacy Office; Office of for Civil Rights and Civil Liberties
• Summary: The same congressional committees that enforce also monitor through receiving annual assessments and briefings. Additionally, internal DHS offices (General Counsel, Privacy Office, Civil Rights and Civil Liberties) coordinate to ensure compliance with applicable law and protection of rights.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Operate and Monitor

AI Lifecycle Summary

The document does not focus on specific AI lifecycle stages but rather on monitoring and assessing the use of already-deployed generative AI applications by terrorist organizations. It primarily addresses the operational monitoring of AI systems in malicious use contexts.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• Generative AI

Technical Scope Summary

The document explicitly defines and focuses on generative artificial intelligence applications, specifically those that generate synthetic content including images, videos, audio, text, and other digital content. It does not mention AI models, AI systems, frontier AI, general purpose AI, task-specific AI, foundation models, predictive AI, open-weight models, or compute thresholds.