Amends intelligence assessments to include China's AI investments and establishes policies for AI capabilities within the intelligence community. Requires a strategy for notifying federal agencies about AI-related risks, including information security and biosecurity threats, by vendors and researchers.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.
All other risk subdomains had no coverage in this document.
Risk Coverage Summary
The document has good coverage of approximately 6-8 subdomains, with strong focus on malicious actors (4.1, 4.2, 4.3), AI system security (2.2), competitive dynamics (6.4), and AI safety failures (7.2, 7.3). Coverage is concentrated in security, misuse prevention, and AI safety domains, with particular emphasis on information security and biosecurity risks.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.
All other sectors had no coverage in this document.
Sectors Summary
This document primarily governs AI use within the National Security sector (intelligence community operations). It also addresses risks across multiple sectors including Health Care, Information (through cybersecurity and AI systems), and critical infrastructure, though governance is focused on intelligence community oversight of these risks rather than direct regulation of these sectors.
Hard Law
Legislative Status Summary
This is a binding federal statute enacted by the United States Congress with mandatory obligations on the Director of National Intelligence and other federal agencies, including specific timelines for compliance and establishment of policies.
Proposer
Target
Enforcer
Monitor
Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems
AI Lifecycle Summary
The document covers multiple AI lifecycle stages with primary focus on Build and Use Model, Verify and Validate, Deploy, and Operate and Monitor stages. It establishes comprehensive policies for model development, performance evaluation, testing, deployment documentation, and continuous monitoring within the intelligence community.
Terms relating to technical scope that are mentioned or implicitly referenced in the document
Technical Scope Summary
The document explicitly mentions AI systems and artificial intelligence capabilities throughout, with focus on models developed or acquired by intelligence community elements. It does not specifically mention frontier AI, general purpose AI, foundation models, or compute thresholds, but addresses AI capabilities broadly including synthetic media generation, natural language processing, and biological design.
Document data from AGORA, CSET Emerging Technology Observatory.