Federal AI Risk Management Act

Summary#

This bill adds a new section (5304) that requires the Director of the National Institute of Standards and Technology (NIST), working with OMB and other agencies as appropriate, to develop federal standards and guidelines for artificial intelligence (AI) systems used or operated by a federal agency or by a contractor or other organization on behalf of an agency. The requirements do not apply to national security systems. NIST must develop minimum requirements and guidance for risk management tied to AI trustworthiness, for authenticating, tracking provenance of, and labeling synthetic content produced by or for agencies, and for testing, evaluation, verification, and validation related to AI acquisitions. The bill directs NIST to provide tools, training recommendations, performance measures, and profile templates for agency use. For standards deemed ready for wide adoption, NIST will submit them for promulgation under 40 U.S.C. 11331 and may offer technical review and assistance to agencies. NIST must also conduct a gap analysis (subject to availability of appropriations) on testing and evaluation standards for AI acquisitions, convene stakeholders, develop related standards, and report the gap analysis and a plan to specified Congressional committees within 90 days after completing the analysis. The section defines key terms such as agency, artificial intelligence system, Director, framework, profile, and synthetic content.

What it means for you#

  • Federal agencies and the contractors that serve them will be expected to use NIST-developed AI standards and guidelines (except for national security systems).
  • Agencies that buy AI systems will get guidance on testing, evaluation, verification, and validation for acquisitions, and NIST may recommend training for procurement staff.
  • Agencies must follow standards for authenticating, tracking provenance of, and labeling synthetic content they produce or obtain through contractors.
  • Vendors and service providers that sell AI to agencies may need to meet the NIST standards used in procurement.

Expenses#

The bill assigns new work to NIST and directs a study that is "subject to the availability of appropriations." The text does not provide cost estimates or specify funding levels. No publicly available information on estimated costs or required appropriations is provided in the bill text or metadata.

Proponents' View#

No publicly available information.

Opponents' View#

No publicly available information.