HR 4518 Cooper Davis and Devin Norring Act 2025 (Requires communication service and remote computing providers to report certain controlled substances violations)

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Most recent activity: Proposed
• Most recent activity date: 2025-07-17

Risk subdomain coverage

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Fraud, scams, and targeted manipulation

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

This document has minimal coverage of AI risk domains. While it mentions algorithms and machine learning as detection methods for controlled substances violations (subsection (b)(1)(C) and (j)(5)), the document primarily addresses drug enforcement rather than AI-specific risks. There is no substantial coverage of AI safety, security vulnerabilities, governance failures, or other core AI risks defined in the MIT taxonomy.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Information

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Public Administration (excl. National Security)

All other sectors had no coverage in this document.

Sectors Summary

The document primarily governs the Information sector, specifically electronic communication service providers and remote computing services (with explicit exemptions for broadband internet access and text messaging services). These providers must report controlled substances violations discovered on their platforms to the Attorney General.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding federal statute enacted by the U.S. Congress with mandatory obligations ('shall'), criminal and civil penalties for non-compliance, and designated enforcement by the Attorney General.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: United States Congress; Representative Miller-Meeks; Representative Craig; Representative Crenshaw; Representative Schrier; Representative McDowell; Representative Davis of North Carolina; Representative Schmidt; Representative Suozzi; Representative Van Drew; Committee on Energy and Commerce; Committee on the Judiciary
• Summary: The bill was introduced in the House of Representatives by Mrs. Miller-Meeks and co-sponsored by eight other representatives, then referred to the Committee on Energy and Commerce and the Committee on the Judiciary for consideration.

Target

• Entity Types: AI_Infrastructure_Provider
• Entities: Electronic communication service providers; Remote computing services
• Summary: The Act explicitly targets providers of electronic communication services and remote computing services, requiring them to report controlled substances violations discovered on their platforms. The definitions section clarifies these terms reference definitions from title 18, United States Code.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Attorney General of the United States; Federal law enforcement agencies; State law enforcement agencies; Local law enforcement agencies
• Summary: The Attorney General is designated as the primary enforcement authority with power to investigate reports, impose penalties, and forward reports to other law enforcement agencies. The Act specifies both criminal and civil penalties that the Attorney General can enforce.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Attorney General of the United States
• Summary: The Attorney General is required to publish annual reports monitoring implementation, including statistics on reports received, convictions resulting, reports shared with other agencies, and the methods used to discover violations (human vs. algorithmic moderation).

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

No lifecycle stages identified.

AI Lifecycle Summary

This document does not substantially address AI system lifecycle stages. It briefly acknowledges that controlled substances violations may be discovered through algorithms, machine learning, or other non-human methods, but does not govern AI development, training, validation, or deployment processes. The primary focus is on operational monitoring and reporting by service providers.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

No technical scope terms identified.

Technical Scope Summary

The document makes minimal reference to AI technical scope. It mentions algorithms and machine learning only in the context of methods for discovering controlled substances violations (alongside human content moderation), requiring providers to report whether violations were discovered through human or non-human methods including algorithms and machine learning. No AI models, systems, or specific AI categories are defined or substantively addressed.