Artificial Intelligence Advancement Act of 2023

Requires a report on AI regulation in finance, establishes AI bug bounty programs, mandates vulnerability analysis for military AI, requires a report on data sharing, and for other purposes.

  • Authority: United States Congress
  • Parent authority: Federal government
  • Jurisdiction: United States
  • Collections: U.S. federal laws
  • Most recent activity: Defunct
  • Most recent activity date: 2025-01-03

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

  • AI system security vulnerabilities
  • Cyberattacks, weapon development or use
  • Governance failure
  • AI possessing dangerous capabilities
  • Lack of capability or robustness
  • Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

  • Compromise of privacy
  • Overreliance and unsafe use
  • Competitive dynamics
  • AI pursuing its own goals
  • Multi-agent risks

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 6-8 subdomains, with strong focus on AI system security (2.2), malicious actors and cyberattacks (4.2), competitive dynamics (6.4), governance failure (6.5), and AI safety failures including dangerous capabilities (7.2) and lack of robustness (7.3). Coverage is concentrated in security, vulnerability assessment, and governance domains.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

  • Finance & Insurance
  • National Security

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

  • Scientific Research & Development Services

All other sectors had no coverage in this document.

Sectors Summary

The document primarily governs two sectors: Finance and Insurance (through comprehensive reporting requirements for financial regulatory agencies) and National Security (through extensive requirements for DoD AI vulnerability analysis, bug bounty programs, and data sharing). Both sectors receive detailed governance measures with specific compliance timelines.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding legislative act introduced in the U.S. Senate with mandatory requirements for federal agencies and the Department of Defense, using mandatory language throughout and establishing specific reporting deadlines and compliance obligations.

Actors

Proposer

  • Entity Types: AI_Governance_Actor
  • Summary: The document explicitly identifies the senators who introduced the bill and the legislative body (Senate) where it was introduced.

Target

  • Entity Types: AI_Governance_Actor, AI_Developer, AI_Deployer
  • Summary: The document targets multiple federal regulatory agencies in the financial sector and the Department of Defense, requiring them to submit reports, develop programs, and conduct studies. It also applies to financial institutions they regulate and DoD contractors.

Enforcer

  • Entity Types: AI_Governance_Actor
  • Summary: The document establishes congressional committees as the recipients of mandatory reports and briefings, giving them oversight and enforcement authority through their legislative and budgetary powers.

Monitor

  • Entity Types: AI_Governance_Actor
  • Summary: The same congressional committees that receive reports and briefings are responsible for monitoring compliance and implementation through their oversight functions.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

  • Plan and Design
  • Collect and Process Data
  • Build and Use Model
  • Verify and Validate
  • Deploy
  • Operate and Monitor

AI Lifecycle Summary

The document primarily addresses the Deploy and Operate and Monitor stages through bug bounty programs and ongoing vulnerability analysis. It also covers Verify and Validate through required studies on testing, training, and auditing of AI models. There is some coverage of Build and Use Model through references to foundational AI model development and integration.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

  • AI Models
  • Foundation Models
  • AI Systems
  • Generative AI

Technical Scope Summary

The document explicitly mentions foundational AI models (defined as adaptive generative models) and AI-enabled military applications. It does not explicitly mention frontier AI, general purpose AI, task-specific AI, or compute thresholds. There is no explicit mention of open-weight or open-source models.

https://www.congress.gov/bill/118th-congress/senate-bill/3050
https://agora.eto.tech/instrument/399
Explore in the Document View

Document data from AGORA, CSET Emerging Technology Observatory.