National Defense Authorization Act for Fiscal Year 2026, Section 5301 ("Post data pilot program")

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: NDAA provisions;U.S. federal laws;FY2026 NDAA
• Most recent activity: Enacted
• Most recent activity date: 2025-12-18

Risk subdomain coverage

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

This document has minimal risk domain coverage, focusing primarily on organizational and operational aspects of establishing a data and AI program at diplomatic posts. It does not substantively address specific AI risks or harms from the MIT taxonomy.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Public Administration (excl. National Security)

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• National Security

All other sectors had no coverage in this document.

Sectors Summary

This document primarily governs Public Administration (excluding National Security) through its regulation of Department of State operations and diplomatic posts. It also has implications for National Security given its inclusion in the National Defense Authorization Act and its application to diplomatic operations globally.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding legislative provision within the National Defense Authorization Act, enacted by the United States Congress with mandatory obligations on the Secretary of State.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: United States Congress
• Summary: This is a section of the National Defense Authorization Act for Fiscal Year 2026, which is proposed and enacted by the United States Congress as the legislative authority.

Target

• Entity Types: AI_Governance_Actor
• Entities: Secretary of State; Department of State; Chief Data and Artificial Intelligence Officer; United States diplomatic posts
• Summary: The document targets the Secretary of State and the Department of State, requiring them to establish the Post Data Program and fulfill reporting obligations. The program will be implemented at diplomatic posts globally.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Committee on Foreign Affairs; Committee on Appropriations of the House of Representatives; Committee on Foreign Relations; Committee on Appropriations of the Senate
• Summary: Congressional oversight is the enforcement mechanism, with specified committees receiving mandatory implementation plans and annual reports to monitor compliance.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Committee on Foreign Affairs; Committee on Appropriations of the House of Representatives; Committee on Foreign Relations; Committee on Appropriations of the Senate
• Summary: The same congressional committees that enforce also monitor implementation through annual reporting requirements over a three-year period.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document focuses primarily on organizational planning and operational deployment of data and AI capabilities at diplomatic posts. It addresses the Plan and Design stage through implementation planning requirements, and the Deploy and Operate and Monitor stages through establishing AI officer positions and ongoing reporting requirements.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

No technical scope terms identified.

Technical Scope Summary

The document explicitly mentions both 'data' and 'artificial intelligence' throughout, referring to cultivating a 'data and artificial intelligence culture' and hiring 'data and artificial intelligence officers.' However, it does not provide technical definitions or distinguish between different types of AI systems, models, or capabilities.