Protecting AI and Cloud Competition in Defense Act of 2025

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: U.S. federal laws
• Most recent activity: Proposed
• Most recent activity date: 2025-05-15

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Compromise of privacy
• Power centralization and unfair distribution
• Competitive dynamics

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• AI system security vulnerabilities
• AI possessing dangerous capabilities
• Lack of transparency or interpretability

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document primarily addresses competitive dynamics (6.4), power centralization (6.1), and data security/privacy (2.1, 2.2) risks. It has good coverage of approximately 5 subdomains, focusing on market competition in AI procurement, preventing vendor lock-in, and protecting government data. The document takes a procurement-focused approach to risk mitigation rather than addressing AI system safety or societal harms directly.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• National Security

All other sectors had no coverage in this document.

Sectors Summary

This document exclusively governs the National Security sector, specifically focusing on Department of Defense procurement of AI, cloud computing, data infrastructure, and foundation models. It does not regulate AI use in other economic sectors.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding legislative bill from the United States Congress with mandatory requirements, enforcement mechanisms including fines and contract termination, and legally enforceable obligations on the Department of Defense and contractors.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Summary: The document is presented as a Congressional bill with the standard enactment clause indicating it is proposed legislation from the United States Congress.

Target

• Entity Types: AI_Infrastructure_Provider, AI_Developer
• Summary: The document establishes requirements for companies providing cloud computing, data infrastructure, and foundation models to the Department of Defense, with specific obligations for 'covered providers' meeting the $50M threshold.

Enforcer

• Entity Types: AI_Governance_Actor
• Summary: The Secretary of Defense is assigned primary enforcement authority, with the Chief Digital and Artificial Intelligence Office responsible for updating DFARS regulations, and component acquisition executives authorized to grant exemptions.

Monitor

• Entity Types: AI_Governance_Actor
• Summary: The Chairman of the Joint Chiefs of Staff is responsible for submitting annual reports assessing competition and market conditions, coordinating with the Under Secretary of Defense for Acquisition and Sustainment, with public disclosure managed by the Assistant to the Secretary of Defense for Public Affairs.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document covers multiple AI lifecycle stages with primary focus on procurement planning (Plan and Design), data management (Collect and Process Data), model development and use (Build and Use Model), deployment, and ongoing monitoring. It addresses the full lifecycle from planning competitive procurement through operational data protection and market monitoring.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• Foundation Models
• AI Systems
• Compute Threshold

Technical Scope Summary

The document explicitly mentions AI models, AI systems, and foundation models with a technical definition including a parameter threshold (1 billion parameters). It addresses cloud computing and data infrastructure extensively. The document focuses on foundation models and AI products/services but does not specifically mention frontier AI, general purpose AI, task-specific AI, generative AI, predictive AI, or open-weight models.