Requires the Director of the National Institute of Standards and Technology to establish a program to create and maintain testing standards for computational forensic software, including AI-enabled software for evidence analysis.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.
All other risk subdomains had no coverage in this document.
Risk Coverage Summary
The document has good coverage of approximately 5-6 subdomains, with strong focus on unfair discrimination (1.1, 1.3), AI system security and robustness (2.2, 7.3), lack of transparency (7.4), and governance failure (6.5). Coverage is concentrated in discrimination/bias, system reliability, and transparency domains as they relate to forensic AI software.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.
All other sectors had no coverage in this document.
Sectors Summary
The document primarily governs the Public Administration sector (specifically law enforcement and criminal justice) and the Scientific Research and Development Services sector (through NIST's testing and standards development role). It also has implications for the Professional and Technical Services sector through requirements for forensic laboratories and software developers.
Hard Law
Legislative Status Summary
This is a binding federal statute (Act of Congress) with mandatory requirements, enforcement mechanisms, and legal consequences for non-compliance including inadmissibility of evidence.
Proposer
Target
Enforcer
Monitor
Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems
AI Lifecycle Summary
The document primarily focuses on the Verify and Validate, Deploy, and Operate and Monitor stages of the AI lifecycle. It establishes comprehensive testing standards and validation requirements before deployment, mandates specific conditions for deployment in federal law enforcement contexts, and requires ongoing monitoring through retesting when material changes occur.
Terms relating to technical scope that are mentioned or implicitly referenced in the document
Technical Scope Summary
The document explicitly defines and covers 'computational forensic software' which includes AI-enabled systems. It specifically mentions machine learning and artificial intelligence techniques, but does not distinguish between frontier AI, general purpose AI, task-specific AI, foundation models, or generative vs predictive AI. There is no mention of compute thresholds or open-weight models.
Document data from AGORA, CSET Emerging Technology Observatory.