,i  #aah? ,,congress  #b;d ,session  ,h4
 ,r4 #igbj  ,,9 ,,! ,,h\se ,,(          
,,repres5tatives  ,septemb] #bj1        
#bjbd,ms4 ,ross 7= h]self1 ,mr4         
,ob]nolte1 & ,mr4 ,bey]7 introduc$ !    
foll[+ bill2 :i* 0 ref]r$ to !          
,committee on ,sci5ce1 ,space1 &        
,te*nology  ,a ,,bill  ,to direct !     
,director ( ! ,national ,in/itute (     
,/&>ds & ,te*nology to update ! national
 vuln]ability database to reflect       
vuln]abilities to artificial intellig5ce
 sy/ems1 /udy ! ne$ = volunt>y report+  
relat$ to artificial intellig5ce        
security & safety incid5ts1 & = o!r     
purposes4  #a4 ,%ort title ,?is ,act may
 be cit$ z ! ,,ai ,incid5t ,report+ &   
,security ,enhancem5t ,act4  #b4        
,activities to support volunt>y         
vuln]ability & incid5t track+ associat$ 
) artificial intellig5ce  7a7 ,update to
 national vuln]ability database ,subject
 to ! availability ( appropriations1 !  
,director ( ! ,national ,in/itute (     
,/&>ds & ,te*nology1 9 coord9ation )    

indu/ry /akehold]s1 /&>ds developm5t    
organizations1 & appropriate ,f$]al     
ag5cies1 z appropriate1 %all c>ry out ! 
foll[+3 7#a7 ,e/abli% or id5tify common 
def9itions & any *>act]i/ics (          
artificial intellig5ce security         
vuln]abilities t make utilization ( !   
,national ,vuln]ability ,database       
inappropriate = ! managem5t ( su*       
vuln]abilities1 & develop processes &   
proc$ures = vuln]ability managem5t ( su*
 vuln]abilities4  7#b7 ,support !       
developm5t ( /&>ds & guidance = te*nical
 vuln]ability managem5t processes relat$
 to artificial intellig5ce4  7#c7       
,consi/5t ) p>agraphs 7#a7 & 7#b71 z    
appropriate1 initiate a process to      
update ! ,in/itute's processes &        
proc$ures associat$ ) ! ,national       
,vuln]ability ,database to ensure su*   
,database & associat$ vuln]ability      
managem5t processes incorporate         
artificial intellig5ce security         
vuln]abilities to ! greate/ ext5t       
practicable4  7b7 ,assess+ volunt>y     

track+ ( sub/antial artificial          
intellig5ce security & safety incid5ts  
7#a7 ,9 g5]al ,subject to ! availability
 ( appropriations1 ! ,director ( !      
,national ,in/itute ( ,/&>ds &          
,te*nology1 9 consultation ) ! ,director
 ( ! ,cyb]security & ,infra/ructure     
,security ,ag5cy ( ! ,dep>tm5t ( ,homel&
 ,security1 %all conv5e a               
multi-/akehold] process to consid] !    
developm5t ( a process relat+ to !      
volunt>y collection1 report+1 & track+ (
 sub/antial artificial intellig5ce      
security incid5ts & sub/antial          
artificial intellig5ce safety incid5ts4 
7#b7 ,activities ,9 c>ry+ out p>agraph  
7#a71 ! ,director ( ! ,national         
,in/itute ( ,/&>ds & ,te*nology %all    
conv5e appropriate repres5tatives (     
indu/ry1 academia1 nonpr(it             
organizations1 /&>ds developm5t         
organizations1 civil society gr\ps1     
,sector ,risk ,managem5t ,ag5cies1 &    
appropriate ,f$]al dep>tm5ts & ag5cies  
to c>ry out ! foll[+3 7,a7 ,e/abli%     

common def9itions & *>act]izations =    
relevant aspects ( sub/antial artificial
 intellig5ce security incid5ts &        
sub/antial artificial intellig5ce safety
 incid5ts1 :i* may include ! foll[+3 7i7
 ,classifications t suffici5tly         
diff]5tiate betwe5 ! foll[+3 7,i7       
,artificial intellig5ce security        
incid5ts4  7,,ii7 ,artificial           
intellig5ce safety incid5ts4  7ii7      
,taxonomies to classify incid5ts ref]r$ 
to 9 clause 7i7 bas$ on relevant        
*>act]i/ics1 impacts1 or o!r appropriate
 crit]ia4  7,b7 ,assess ! usefulness &  
co/-effectiv5ess ( an ef=t to volunt>ily
 track sub/antial artificial intellig5ce
 security incid5ts & sub/antial         
artificial intellig5ce safety incid5ts4 
7,c7 ,id5tify & provide guidel9es1 be/  
practices1 me?odologies1 proc$ures1 &   
processes = track+ & report+ sub/antial 
artificial intellig5ce security incid5ts
 & sub/antial artificial intellig5ce    
safety incid5ts across diff]5t sectors &
 use cases4  7,d7 ,support ! developm5t 

( /&>diz$ report+ & docum5tation        
me*anisms1 includ+ automat$ me*anisms1 t
 w\ld help provide in=mation1 includ+   
public in=mation1 reg>d+ sub/antial     
artificial intellig5ce security incid5ts
 & sub/antial artificial intellig5ce    
safety incid5ts4  7,e7 ,support !       
developm5t ( norms = report+ (          
sub/antial artificial intellig5ce       
security incid5ts & sub/antial          
artificial intellig5ce safety incid5ts1 
tak+ into acc\nt :5 x is appropriate to 
publicly disclose su* incid5ts4  7#c7   
,report ,n lat] ?an ?ree ye>s aft] !    
date ( ! enactm5t ( ?is ,act1 !         
,director ( ! ,national ,in/itute (     
,/&>ds & ,te*nology %all submit to      
,congress a report on a process relat+  
to ! volunt>y collection1 report+1 &    
track+ ( sub/antial artificial          
intellig5ce security incid5ts &         
sub/antial artificial intellig5ce safety
 incid5ts "u p>agraph 7#a74 ,su* report 
%all include ! foll[+3 7,a7 ,f9d+s f !  
multi-/akehold] process ref]r$ to 9 su* 

p>agraph4  7,b7 ,an assessm5t ( &       
recomm5dations = e/abli%+ report+ &     
collection me*anisms by :i* indu/ry1    
academia1 nonpr(it organizations1 /&>ds 
developm5t organizations1 civil society 
gr\ps1 & appropriate public sector      
entities may volunt>ily %>e /&>diz$     
in=mation reg>d+ sub/antial artificial  
intellig5ce security incid5ts &         
sub/antial artificial intellig5ce safety
 incid5ts2  7c7 ,limitation ,no?+ 9 ?is 
section provides ! ,director ( !        
,national ,in/itute ( ,/&>ds &          
,te*nology ) any en=cem5t au?ority t 0 n
 9 effect on ! day be=e ! date ( !      
enactm5t ( ?is section4  7d7 ,def9itions
 ,9 ?is section3 7#a7 ,artificial       
intellig5ce ,! t]m artificial           
intellig5ce has ! mean+ giv5 su* t]m 9  
section #ejjb ( ! ,national ,artificial 
,intellig5ce ,initiative ,act ( #bjbj   
7#ae ,u4,s4,c4 #idja74  7#b7 ,artificial
 intellig5ce security vuln]ability ,!   
t]m artificial intellig5ce security     
vuln]ability means a weakness 9 an      

artificial intellig5ce sy/em1 sy/em     
security proc$ures1 int]nal controls1 or
 implem5tation t c\ld be exploit$ or    
trigg]$ by a ?reat s\rce4  7#c7         
,artificial intellig5ce sy/em ,! t]m    
artificial intellig5ce sy/em has ! mean+
 giv5 su* t]m 9 section #gbbc ( !       
,advanc+ ,am]ican ,,ai ,act 7#dj        
,u4,s4,c4 #aacja note2 z enact$ z "p (  
title ,,lxxii ( division ,g ( ! ,james  
,m4 ,inh(e ,national ,def5se            
,au?orization ,act = ,fiscal ,ye> #bjbc2
 ,public ,law #aag-bfc74  7#d7 ,sector  
,risk ,managem5t ,ag5cy ,! t]m ,sector  
,risk ,managem5t ,ag5cy has ! mean+ giv5
 su* t]m 9 section #bbjj ( ! ,homel&    
,security ,act ( #bjjb 7#f ,u4,s4,c4    
#fej74  7#e7 ,?reat s\rce ,! t]m ?reat  
s\rce means any ( ! foll[+3 7,a7 ,an    
int5t & me?od t>get$ at ! int5tional    
exploitation ( a vuln]ability4  7,b7 ,a 
situation & me?od t may accid5tally     
trigg] a vuln]ability4