HR7064 AI in Health Care Efficiency and Study Act 2025

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: U.S. federal laws
• Most recent activity: Proposed
• Most recent activity date: 2026-01-14

Risk subdomain coverage

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Compromise of privacy
• AI system security vulnerabilities
• Governance failure
• Lack of capability or robustness

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has minimal coverage of approximately 3-4 subdomains, with focus on privacy compromise (2.1), AI system security vulnerabilities (2.2), and governance failure (6.5). Coverage is concentrated in privacy/security domains and governance mechanisms, reflecting the study's mandate to evaluate AI strategies for healthcare administration while ensuring data protection and cybersecurity.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Health Care & Social Assistance

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Information
• Scientific Research & Development Services
• Public Administration (excl. National Security)

All other sectors had no coverage in this document.

Sectors Summary

The document primarily governs the Health Care and Social Assistance sector, with comprehensive coverage of AI applications in healthcare administration, patient data management, and cybersecurity. It also has minimal coverage of the Information sector through references to AI developers and IT vendors serving healthcare.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding legislative bill from the United States Congress that uses mandatory language ('shall') to require the Secretary of Health and Human Services to conduct a study and report to Congress. It creates legally enforceable obligations with clear timelines and reporting requirements.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: United States Congress; Senate and House of Representatives of the United States of America
• Summary: The document is a bill enacted by the United States Congress, as stated in the opening legislative language. Congress is the proposing authority for this federal legislation.

Target

• Entity Types: AI_Governance_Actor, AI_Developer, AI_Deployer
• Entities: Secretary of Health and Human Services; Department of Health and Human Services; health care providers; health plans; covered entities; business associates; artificial intelligence developers
• Summary: The primary target is the Secretary of Health and Human Services who must conduct the study. The study itself evaluates AI applications across healthcare providers, health plans, covered entities, business associates, and AI developers serving the healthcare industry.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: United States Congress; Committee on Energy and Commerce of the House of Representatives; Committee on Health, Education, Labor, and Pensions of the Senate
• Summary: Congress enforces compliance through its oversight function, with specific committees designated to receive the mandated report. The Secretary of Health and Human Services is legally obligated to comply with the study and reporting requirements.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Committee on Energy and Commerce of the House of Representatives; Committee on Health, Education, Labor, and Pensions of the Senate; Secretary of Health and Human Services
• Summary: Congressional committees will monitor implementation through the required report submission. The Secretary of Health and Human Services will monitor the study process and consult with various agencies and stakeholders during the evaluation.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily covers the Deploy and Operate and Monitor stages, as it focuses on evaluating existing AI tools in use for healthcare administration and establishing oversight mechanisms. It also addresses Plan and Design through its mandate to develop recommendations for future research and pilot programs.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• Task-specific AI

Technical Scope Summary

The document explicitly mentions artificial intelligence technologies and tools throughout, focusing on their application in healthcare administration. It does not specifically define or distinguish between AI models, AI systems, or specialized categories like frontier AI, GPAI, or foundation models. No compute thresholds are mentioned.