RESTRICT Act

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: U.S. federal laws
• Most recent activity: Defunct
• Most recent activity date: 2025-01-03

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Compromise of privacy
• AI system security vulnerabilities
• Disinformation, surveillance, and influence at scale
• Cyberattacks, weapon development or use
• Governance failure
• AI possessing dangerous capabilities

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Fraud, scams, and targeted manipulation
• Competitive dynamics

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 8-10 subdomains, with strong focus on malicious actors (4.1, 4.2, 4.3), AI system security (2.2), competitive dynamics (6.4), governance (6.5), and privacy compromise (2.1). Coverage is concentrated in security, misuse prevention, and governance domains.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Trade, Transportation & Utilities
• Information
• Scientific Research & Development Services
• Public Administration (excl. National Security)
• National Security

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Agriculture, Mining, Construction & Manufacturing
• Finance & Insurance
• Professional & Technical Services
• Management, Administrative & Support Services
• Health Care & Social Assistance
• Arts, Entertainment & Recreation

All other sectors had no coverage in this document.

Sectors Summary

The document governs multiple sectors with primary focus on Information (telecommunications, data processing, AI services), Finance and Insurance (payment applications), Critical Infrastructure sectors, and National Security. The Act applies broadly to any sector using ICT products and services from foreign adversaries, with explicit prioritization of critical infrastructure sectors.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding legislative act introduced in the U.S. Senate with mandatory enforcement mechanisms, criminal and civil penalties, and judicial review provisions. The document uses mandatory language throughout and establishes clear legal obligations with enforcement authority.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: United States Congress; Senator Warner; Senator Thune; Senator Baldwin; Senator Fischer; Senator Manchin; Senator Moran; Senator Bennet; Senator Sullivan; Senator Gillibrand; Senator Collins; Senator Heinrich; Senator Romney; Senator Capito
• Summary: The bill was introduced in the U.S. Senate by Mr. Warner and 12 co-sponsors, making the U.S. Congress the proposer of this governance instrument.

Target

• Entity Types: AI_Developer, AI_Deployer, AI_Infrastructure_Provider
• Entities: ICTS covered holding entities; foreign adversaries; entities subject to jurisdiction of foreign adversaries; entities owned, directed, or controlled by foreign adversaries; persons in the United States engaged in covered transactions
• Summary: The Act targets entities that own, control, or manage ICT products or services with significant U.S. user bases, particularly those with connections to foreign adversaries. This includes AI developers, deployers, and infrastructure providers.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Secretary of Commerce; President of the United States; Attorney General; Secretary of Treasury; Secretary of State; Secretary of Defense; Secretary of Homeland Security; Director of National Intelligence; Federal Communications Commission; Federal Election Commission; relevant executive department and agency heads
• Summary: The Secretary of Commerce has primary enforcement authority, with the President having authority over divestment actions. The Attorney General can bring enforcement actions in district courts, and multiple federal agencies have supporting enforcement roles.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Secretary of Commerce; relevant executive department and agency heads; Director of National Intelligence; Cybersecurity and Infrastructure Security Agency; Federal Acquisition Security Council; relevant committees of Congress
• Summary: The Secretary of Commerce conducts ongoing reviews and monitoring of covered transactions and holdings. Multiple federal agencies provide monitoring support, and Congressional committees have oversight responsibilities.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Collect and Process Data
• Build and Use Model
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily covers the Deploy and Operate and Monitor stages, with some coverage of Build and Use Model. It focuses on post-development governance of AI systems already in use or being deployed, particularly regarding foreign adversary involvement in AI and ICT products and services.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• AI Systems
• Open Weight / Open Source
• Predictive AI

Technical Scope Summary

The document explicitly mentions AI systems, AI models, machine learning, and various AI-related technologies. It does not use terms like 'frontier AI', 'general purpose AI', or 'foundation models' but covers AI broadly through references to artificial intelligence, machine learning, predictive analytics, and autonomous systems. No compute thresholds are mentioned. Open-source software is mentioned in the context of services to manage such software.