Sensible Classification Act of 2023

• Authority: United States Congress
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: U.S. federal laws
• Most recent activity: Defunct
• Most recent activity date: 2025-01-03

Risk subdomain coverage

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• AI system security vulnerabilities

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has minimal coverage of AI risk domains, with only subdomain 2.2 (AI system security vulnerabilities) receiving a coverage score of 2. The document primarily focuses on government classification/declassification processes and only tangentially mentions AI/ML as a potential technological solution for these processes. It does not substantively address AI risks, harms, or safety concerns.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Public Administration (excl. National Security)
• National Security

All other sectors had no coverage in this document.

Sectors Summary

This document primarily governs Public Administration (federal agencies) and National Security sectors. It does not regulate private sector AI development or deployment, but rather focuses on government classification processes with a brief mention of researching AI/ML solutions for these internal government functions.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding legislative act passed by the United States Congress with mandatory requirements, enforcement mechanisms, and specific obligations imposed on federal agencies and officials.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Summary: The document is an Act of Congress, as indicated by the legislative structure and Senate findings. The Senate explicitly states findings and sense of the Senate in Section 3.

Target

• Entity Types: AI_Governance_Actor, AI_Developer
• Summary: The Act applies to federal agencies and their personnel with classification authority, as well as government contractors. Section 8 specifically targets the Administrator of the Office of Electronic Government to research AI/ML solutions, in consultation with defense and intelligence officials.

Enforcer

• Entity Types: AI_Governance_Actor
• Summary: The Act designates agency heads as responsible for ensuring compliance with classification requirements. The Information Security Oversight Office and other oversight bodies have monitoring and enforcement roles.

Monitor

• Entity Types: AI_Governance_Actor
• Summary: The Act establishes multiple oversight bodies to monitor implementation, including the Information Security Oversight Office and the Public Interest Declassification Board. Congress receives reports on implementation and compliance.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design

AI Lifecycle Summary

The document does not substantively govern AI development or deployment. It mentions AI/ML only as a potential technological tool to be researched for supporting classification/declassification systems. The primary focus is on government information classification processes, not AI lifecycle stages.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Systems

Technical Scope Summary

The document mentions AI and machine learning only once, in the context of researching potential technological solutions for classification/declassification systems. It does not define or distinguish between AI models, AI systems, or any specific types of AI. No compute thresholds, model types, or technical AI specifications are mentioned.