Summary#
This bill creates a federal system to oversee very large or risky “frontier” artificial intelligence models used or sold across state lines or internationally. It requires big AI developers to publish risk-management plans, report safety incidents, register with the Department of Commerce, and hire licensed independent verification organizations (IVOs) to assess safety. The bill also gives the Secretary of Commerce power to issue emergency orders to suspend or limit AI systems that pose an imminent catastrophic risk.
Key changes:
- Creates a new Under Secretary of Commerce for AI Security to run rulemaking, licensing, and oversight.
- Defines “frontier model” and sets size thresholds for “large” and “very large” developers who face different obligations.
- Requires large frontier developers to publish a “frontier AI framework,” perform third‑party audits, and report model deployments and safety incidents.
- Requires very large frontier developers to hire licensed IVOs for ongoing assessments and to submit IVO reports to the government and, in redacted form, to the public.
- Gives the Secretary authority to issue provisional and final emergency orders to suspend or restrict development, deployment, or internal use of a frontier model that presents an imminent catastrophic risk.
- Preempts most state laws that would impose new substantive obligations on AI developers in the covered subject areas.
What it means for you#
-
Large and very large AI developers (businesses):
- Must publish a public “frontier AI framework” explaining how they manage catastrophic risks.
- Must retain independent auditors yearly. Very large developers must retain licensed IVOs for frequent assessments and ongoing monitoring.
- Must file disclosure statements with the Department of Commerce and pay fees set to offset administration costs.
- Must report critical safety incidents quickly and submit periodic confidential reports about catastrophic risk assessments.
- Could face civil penalties, and in some cases criminal penalties, for violations.
-
Independent verification organizations (IVOs) and audit firms:
- Must be licensed by the Department of Commerce and meet conflict‑of‑interest and technical qualification rules.
- Will perform mandatory assessments for very large developers and may subcontract with specialists (while remaining responsible).
- Receive broad legal immunity from suit for losses tied to a model they assessed, with a narrow exception for willful misconduct causing death or serious injury.
-
Department of Commerce and officials:
- The Under Secretary sets rules, licenses IVOs, reviews reports, and enforces requirements.
- The Secretary of Commerce can issue emergency orders to suspend or restrict models posing imminent catastrophic risk.
-
State Attorneys General:
- May opt in to receive confidential reports and can sue to collect some civil penalties in certain cases.
- States are largely preempted from imposing new developer obligations in the bill’s covered subject areas.
-
General public and users:
- May see more public information about big AI models (public summaries, transparency reports).
- In an emergency, a model could be suspended or restricted rapidly by federal order.
-
Researchers and smaller AI firms:
- The bill targets developers meeting high revenue and computing thresholds. Many smaller developers may not be covered. It does allow the Under Secretary to raise or lower thresholds by rule.
Expenses#
No publicly available information on total federal cost or a fiscal note is included in the bill text.
Known cost elements in the bill:
- The Under Secretary must create and run rulemaking, licensing, and oversight programs. The bill requires the Under Secretary to charge fees on large frontier developers to offset administrative expenses.
- Developers will face compliance costs: preparing and publishing frameworks, retaining auditors and IVOs, recordkeeping, and reporting.
- Civil and criminal penalties in the bill include specific dollar amounts: up to $1,000,000 per violation for some reporting and assessment failures; $10,000 per day for some disclosure failures; up to $10,000,000 per violation for violating an emergency order; and criminal fines and prison time for willful violations of emergency orders.
- The bill directs annual Government Accountability Office reports on the IVO market, which would require GAO work and staff time.
Proponents' View#
The bill appears intended to reduce the chance that very powerful AI systems cause large‑scale harm by creating federal oversight, transparency, and independent checks. Possible arguments in favor based on the bill text:
- Establishing minimum safety frameworks and public reporting could improve public information about the risks of the largest AI models.
- Requiring licensed independent verification provides a specialized, expert check on whether very large developers actually mitigate catastrophic risks.
- Emergency order authority lets the federal government act quickly if a model poses an imminent risk of mass harm.
- Central oversight and national standards reduce regulatory fragmentation and provide a uniform approach to managing risks from cross‑border AI deployments.
Opponents' View#
The bill’s text raises several practical concerns and trade‑offs someone might point to:
- One concern is that key definitions and thresholds may be unclear or outdated. For example, the technical numeric threshold for a “frontier model” as written appears ambiguous in the text, and the Under Secretary can change thresholds by regulation.
- The emergency powers are broad. The Secretary can issue provisional orders that take effect immediately and may be hard to challenge in court until a final order is issued. This raises questions about due process and rapid federal intervention.
- The bill gives IVOs broad immunity from lawsuits for losses tied to models they assess, leaving only a narrow federal cause of action for willful misconduct. This could reduce legal accountability for IVOs.
- The bill exempts many assessment reports and materials from public disclosure laws and allows redactions. This could limit outside scrutiny of safety findings.
- Compliance and monitoring add costs for large developers. The bill could increase barriers for new firms if IVO capacity is limited or costly. The bill itself requires the GAO to study the IVO market, which suggests concern about market capacity and conflicts of interest.
- The bill mostly preempts state rules that would impose new obligations on developers in covered areas. That preemption may limit states’ ability to protect residents in areas not explicitly preserved by the bill.
- It is unclear how the government will set and update technical methods for assessing “acceptable levels of catastrophic risk,” and how subjective judgments will be reviewed.