National Defense Authorization Act for Fiscal Year 2022, Section 232 ("Pilot program on data repositories to facilitate the development of artificial intelligence capabilities for the Department of Defense")

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: NDAA provisions;U.S. federal laws
• Most recent activity: Enacted
• Most recent activity date: 2021-12-27

Risk subdomain coverage

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• AI system security vulnerabilities
• Competitive dynamics
• Lack of capability or robustness

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

This document has minimal risk domain coverage, primarily addressing AI system security vulnerabilities (2.2) through data repository access controls and competitive dynamics (6.4) through public-private AI development partnerships. The focus is on establishing infrastructure for AI development rather than addressing specific AI risks or harms.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• National Security

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Professional & Technical Services
• Scientific Research & Development Services

All other sectors had no coverage in this document.

Sectors Summary

This document primarily governs AI development within the National Security sector by establishing Department of Defense data repositories. It also has secondary coverage of Scientific Research and Development Services and Professional and Technical Services sectors through provisions allowing public and private sector organizations to access DoD data for AI development purposes.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding federal statute enacted by the United States Congress as part of the National Defense Authorization Act for Fiscal Year 2022, establishing legal authority for the Secretary of Defense to implement a pilot program with specific requirements and congressional oversight mechanisms.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: United States Congress
• Summary: The document is Section 232 of the National Defense Authorization Act for Fiscal Year 2022, which is federal legislation enacted by the United States Congress.

Target

• Entity Types: AI_Governance_Actor, AI_Developer
• Entities: Department of Defense; Chief Data Officer of the Department of Defense; Director of the Joint Artificial Intelligence Center; appropriate public and private sector organizations
• Summary: The statute applies to the Department of Defense (which must establish and manage the data repositories) and to public and private sector organizations that may access the repositories to develop AI capabilities for potential DoD procurement.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Secretary of Defense; congressional defense committees
• Summary: The Secretary of Defense has authority to implement and oversee the pilot program, while congressional defense committees exercise oversight through mandatory briefing requirements.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: congressional defense committees; Secretary of Defense
• Summary: Congressional defense committees monitor implementation through mandatory briefings, while the Secretary of Defense monitors the program's execution and evaluates model performance throughout the data repository lifecycle.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Collect and Process Data
• Build and Use Model
• Verify and Validate

AI Lifecycle Summary

The document primarily covers the 'Collect and Process Data' stage by establishing data repositories with annotated datasets, and the 'Build and Use Model' stage by providing data access for AI development. It also addresses 'Verify and Validate' through requirements for error detection and model performance evaluation capabilities.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• AI Systems

Technical Scope Summary

The document explicitly mentions artificial intelligence software, technology, and machine learning software capabilities. It focuses on AI models and training data but does not specify particular types of AI (frontier, general purpose, task-specific, generative, or predictive) or mention compute thresholds or open-weight models.