,,ii ,cal5d> ,no4 #fig #aah? ,,congress 
#b;d ,session  ,s4 #ddie ,report ,no4   
#aah-bia ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$
 ,,/ates  ,june #aa1 #bjbd,mr4 ,pet]s 7=
 himself & ,mr4 ,tillis7 introduc$ !    
foll[+ bill2 :i* 0 read twice & ref]r$  
to ! ,committee on ,homel& ,security &  
,gov]nm5tal ,affairs  ,decemb] #af1     
#bjbd,report$ by ,mr4 ,pet]s1 ) an      
amendment,strike out all aft] ! enact+  
clause & ins]t ! "p pr9t$ 9 italic  ,a  
,,bill  ,to enable safe1 responsible1 & 
agile procurem5t1 developm5t1 & use (   
artificial intellig5ce by ! ,f$]al      
,gov]nm5t1 & = o!r purposes4  #a4 ,%ort 
title ,?is ,act may be cit$ z ! ,promot+
 ,responsible ,evaluation & ,procurem5t 
to ,advance ,read9ess = ,ent]prise-wide 
,deploym5t = ,artificial ,intellig5ce   
,act or ! ,,prep>$ = ,,ai ,act4  #b4    
,def9itions ,9 ?is ,act3 7#a7 ,adv]se   
incid5t ,! t]m adv]se incid5t means any 
incid5t or malfunction ( artificial     
intellig5ce t directly or indirectly    
leads to-- 7,a7 h>m impact+ rights or   

safety1 z describ$ 9 section            
#g7;a77#b77;,d72  7,b7 ! dea? ( an      
individual or damage to ! heal? ( an    
individual2  7,c7 mat]ial or irrev]sible
 disruption ( ! managem5t & op]ation (  
critical infra/ructure1 z describ$ 9    
section #g7;a77#b77;,d77i77,,ii77cc72   
7,d7 mat]ial damage to prop]ty or !     
environm5t2  7,e7 loss ( a              
mission-critical sy/em or equipm5t2     
7,f7 failure ( ! mission ( an ag5cy2    
7,g7 ! d5ial ( a b5efit1 paym5t1 or o!r 
s]vice to an individual or gr\p (       
individuals :o w\ld h o!rwise be5       
eligible2  7,h7 ! d5ial ( an employm5t1 
contract1 grant1 or simil> opportunity t
 w\ld h o!rwise be5 (f]$2 or  7,i7 ano!r
 consequ5ce1 z det]m9$ by ! ,director ) 
public notice4  7#b7 ,ag5cy ,! t]m      
ag5cy-- 7,a7 has ! mean+ giv5 t t]m 9   
section #cejb7a7 ( title #dd1 ,unit$    
,/ates ,code2 &  7,b7 includes ea* ( !  
indep5d5t regulatory ag5cies describ$ 9 
section #cejb7e7 ( title #dd1 ,unit$    
,/ates ,code4  7#c7 ,artificial         

intellig5ce ,! t]m artificial           
intellig5ce-- 7,a7 has ! mean+ giv5 t   
t]m 9 section #ejjb ( ! ,national       
,artificial ,intellig5ce ,initiative    
,act ( #bjbj 7#ae ,u4,s4,c4 #idja72 &   
7,b7 includes ! artificial sy/ems &     
te*niques describ$ 9 p>agraphs 7#a7     
?r\gh 7#e7 ( section #bch7;g7 ( ! ,john 
,s4 ,mc,cain ,national ,def5se          
,au?orization ,act = ,fiscal ,ye> #bjai 
7,public ,law #aae-bcb2 #aj ,u4,s4,c4   
#djfa note prec474  7#d7 ,biometric data
 ,! t]m biometric data means data       
result+ f specific te*nical process+    
relat+ to ! unique physical1            
physiological1 or behavioral *>act]i/ics
 ( an individual1 includ+ facial images1
 dactyloscopic data1 physical movem5t & 
gait1 brea?1 voice1 ,,dna1 blood type1 &
 expression ( emotion1 ?\ght1 or feel+4 
7#e7 ,comm]cial te*nology ,! t]m        
comm]cial te*nology-- 7,a7 means a      
te*nology1 process1 or me?od1 includ+   
rese>* or developm5t2 &  7,b7 includes  
comm]cial products1 comm]cial s]vices1 &

 o!r comm]cial items1 z def9$ 9 ! ,f$]al
 ,acquisition ,regulation1 includ+ any  
addition or update !reto by ! ,f$]al    
,acquisition ,regulatory ,c\ncil4  7#f7 
,c\ncil ,! t]m ,c\ncil means ! ,*ief    
,artificial ,intellig5ce ,(fic]s ,c\ncil
 e/abli%$ "u section #e7;a74  7#g7      
,deploy] ,! t]m deploy] means an entity 
t op]ates or provides artificial        
intellig5ce1 :e!r develop$ int]nally or 
by a ?ird-p>ty develop]4  7#h7 ,develop]
 ,! t]m develop] means an entity t      
designs1 codes1 produces1 or owns       
artificial intellig5ce4  7#i7 ,director 
,! t]m ,director means ! ,director ( !  
,(fice ( ,managem5t & ,budget4  7#aj7   
,impact assessm5t ,! t]m impact         
assessm5t means a /ructur$ process =    
consid]+ ! implications ( a propos$     
artificial intellig5ce use case4  7#aa7 
,op]ational design doma9 ,! t]m         
op]ational design doma9 means a set (   
op]at+ conditions = an automat$ sy/em4  
7#ab7 ,procure or obta9 ,! t]m procure  
or obta9 means-- 7,a7 to acquire ?r\gh  

contract actions aw>d$ pursuant to !    
,f$]al ,acquisition ,regulation1 includ+
 ?r\gh int]ag5cy agreem5ts1 multi-ag5cy 
use1 & pur*ase c>d transactions2  7,b7  
to acquire ?r\gh contracts & agreem5ts  
aw>d$ ?r\gh o!r special procurem5t      
au?orities1 includ+ ?r\gh o!r           
transactions & comm]cial solutions op5+ 
au?orities2 or  7,c7 to obta9 ?r\gh o!r 
means1 includ+ ?r\gh op5 s\rce plat=ms  
or freew>e4  7#ac7 ,relevant            
congressional committees ,! t]m relevant
 congressional committees means !       
,committee on ,homel& ,security &       
,gov]nm5tal ,affairs ( ! ,s5ate & !     
,committee on ,ov]sight & ,acc\ntability
 ( ! ,h\se ( ,repres5tatives4  7#ad7    
,risk ,! t]m risk means ! comb9ation ( !
 probability ( an occurr5ce ( h>m & !   
pot5tial sev]ity ( t h>m4  7#ae7 ,use   
case ,! t]m use case means ! ways &     
context 9 :i* artificial intellig5ce is 
op]at$ to p]=m a specific function4  #c4
 ,implem5tation ( requirem5ts  7a7      
,ag5cy implem5tation ,n lat] ?an #a ye> 

aft] ! date ( enactm5t ( ?is ,act1 !    
,director %all ensure t ag5cies h       
implem5t$ ! requirem5ts ( ?is ,act4  7b7
 ,annual brief+ ,n lat] ?an #ahj days   
aft] ! date ( enactm5t ( ?is ,act1 &    
annually !reaft]1 ! ,director %all brief
 ! appropriate ,congressional committees
 on implem5tation ( ?is ,act & relat$   
consid]ations4  #d4 ,procurem5t (       
artificial intellig5ce  7a7             
,gov]nm5t-,wide requirem5ts  7#a7 ,9    
g5]al ,n lat] ?an #a ye> aft] ! date (  
enactm5t ( ?is ,act1 ! ,f$]al           
,acquisition ,regulatory ,c\ncil %all   
review ,f$]al ,acquisition ,regulation  
acquisition plann+1 s\rce selection1 &  
o!r requirem5ts & update ! ,f$]al       
,acquisition ,regulation z ne$$ to      
ensure t ag5cy procurem5t ( artificial  
intellig5ce includes-- 7,a7 a requirem5t
 to address ! outcomes ( ! risk         
evaluation & impact assessm5ts requir$  
"u section #h7;a72  7,b7 a requirem5t = 
consultation ) an int]discipl9>y team ( 
ag5cy exp]ts prior to1 & ?r\gh\t1 z     

necess>y1 procur+ or obta9+ artificial  
intellig5ce2 &  7,c7 any o!r            
consid]ations det]m9$ relevant by !     
,f$]al ,acquisition ,regulatory ,c\ncil4
  7#b7 ,int]discipl9>y team ( exp]ts ,! 
int]discipl9>y team ( exp]ts describ$ 9 
p>agraph 7#a77;,b7 may-- 7,a7 v>y dep5d+
 on ! use case & ! risks det]m9$ to be  
associat$ ) ! use case2 &  7,b7 include 
te*nologi/s1 in=mation security         
p]sonnel1 doma9 exp]ts1 privacy (fic]s1 
data (fic]s1 civil rights & civil       
lib]ties (fic]s1 contract+ (ficials1    
legal c\nsel1 cu/om] exp]i5ce           
pr(essionals1 & o!rs4  7#c7 ,acquisition
 plann+ ,! acquisition plann+ updates   
describ$ 9 p>agraph 7#a7 %all include   
consid]ations =1 at m9imum1 z           
appropriate dep5d+ on ! use case-- 7,a7 
data own]%ip & privacy2  7,b7 data      
in=mation security2  7,c7 int]op]ability
 requirem5ts2  7,d7 data & model        
assessm5t processes2  7,e7 scope ( use2 
7,f7 ongo+ monitor+ te*niques2  7,g7    
type & scope ( artificial intellig5ce   

audits2  7,h7 environm5tal impact2 &    
7,i7 safety & security risk mitigation  
te*niques1 includ+ a plan = h[ adv]se   
ev5t report+ c be incorporat$1 pursuant 
to section #e7;g74  7b7 ,requirem5ts =  
high risk use cases  7#a7 ,9 g5]al  7,a7
 ,e/abli%m5t ,beg9n+ on ! date t is #a  
ye> aft] ! date ( enactm5t ( ?is ,act1 !
 head ( an ag5cy may n procure or obta9 
artificial intellig5ce = a high risk use
 case1 z def9$ 9 section                
#g7;a77#b77;,d71 prior to e/abli%+ &    
incorporat+ c]ta9 t]ms into relevant    
contracts1 agreem5ts1 & employee        
guidel9es = artificial intellig5ce1     
includ+-- 7i7 a requirem5t t ! use ( !  
artificial intellig5ce be limit$ to its 
op]ational design doma92  7ii7          
requirem5ts = safety1 security1 &       
tru/wor?9ess1 includ+-- 7,i7 a report+  
me*anism ?r\gh :i* ag5cy p]sonnel are   
notifi$ by ! deploy] ( any adv]se       
incid5t2  7,,ii7 a requirem5t1 9        
accordance ) section #e7;g71 t ag5cy    
p]sonnel receive f ! deploy] a          

notification ( any adv]se incid5t1 an   
explanation ( ! cause ( ! adv]se        
incid5t1 & any data directly connect$ to
 ! adv]se incid5t 9 ord] to address &   
mitigate ! h>m2 &  7,,iii7 t ! ag5cy has
 ! "r to tempor>ily or p]man5tly susp5d 
use ( ! artificial intellig5ce if-- 7aa7
 ! risks ( ! artificial intellig5ce to  
rights or safety become unacceptable1 z 
det]m9$ "u ! ag5cy risk classification  
sy/em pursuant to section #g2 or  7bb7  
on or aft] ! date t is #ahj days aft] ! 
publication ( ! mo/ rec5tly updat$      
v]sion ( ! framework develop$ & updat$  
pursuant to section #bb7;,a77c7 ( !     
,national ,in/itute ( ,/&>ds &          
,te*nology ,act 7#ae ,u4,s4,c4          
#bgh;h-#a7;c771 ! deploy] is f\nd n to  
comply ) su* mo/ rec5t update2  7iii7   
requirem5ts = quality1 relevance1 s\rc+ 
& own]%ip ( data1 z appropriate by use  
case1 & applicable unless ! head ( !    
ag5cy waives su* requirem5ts 9 writ+1   
includ+-- 7,i7 ret5tion ( rights to     
,gov]nm5t data & any modification to !  

data includ+ to protect ! data f        
unau?oriz$ disclosure & use to          
subsequ5tly tra9 or improve !           
functionality ( comm]cial products (f]$ 
by ! deploy]1 any relevant develop]s1 or
 o!rs2 &  7,,ii7 a requirem5t t !       
deploy] & any relevant develop]s or o!r 
p>ties isolate ,gov]nm5t data f all o!r 
data1 ?r\gh physical sep>ation1         
electronic sep>ation via secure copies )
 /rict access controls1 or o!r          
computational isolation me*anisms2  7iv7
 requirem5ts = evaluation & te/+ (      
artificial intellig5ce bas$ on use case1
 to be p]=m$ on an ongo+ basis2 &  7v7  
requirem5ts t ! deploy] & any relevant  
develop]s provide docum5tation1 z       
det]m9$ necess>y & reque/$ by ! ag5cy1 9
 accordance ) section #h7;b74  7,b7     
,review ,! ,s5ior ,procurem5t           
,executive1 9 coord9ation ) ! ,*ief     
,artificial ,intellig5ce ,(fic]1 %all   
consult ) te*nologi/s1 in=mation        
security p]sonnel1 doma9 exp]ts1 privacy
 (fic]s1 data (fic]s1 civil rights &    

civil lib]ties (fic]s1 contract+        
(ficials1 legal c\nsel1 cu/om] exp]i5ce 
pr(essionals1 & o!r relevant ag5cy      
(ficials to review ! requirem5ts        
describ$ 9 clauses 7i7 ?r\gh 7v7 (      
subp>agraph 7,a7 & det]m9e :e!r x may be
 necess>y to incorporate additional     
requirem5ts into relevant contracts or  
agreem5ts4  7,c7 ,regulation ,! ,f$]al  
,acquisition ,regulatory ,c\ncil %all   
revise ! ,f$]al ,acquisition ,regulation
 z necess>y to implem5t ! requirem5ts ( 
?is subsection4  7#b7 ,rules (          
con/ruction ,?is ,act %all sup]s$e any  
requirem5ts t conflict ) ?is ,act "u !  
guidance requir$ to be produc$ by !     
,director pursuant to section #gbbd7;d7 
( ! ,advanc+ ,am]ican ,,ai ,act 7#dj    
,u4,s4,c4 #aacja note74  #e4 ,int]ag5cy 
gov]nance ( artificial intellig5ce  7a7 
,*ief artificial intellig5ce (fic]s     
c\ncil ,n lat] ?an #fj days aft] ! date 
( enactm5t ( ?is ,act1 ! ,director %all 
e/abli% a ,*ief ,artificial ,intellig5ce
 ,(fic]s ,c\ncil4  7b7 ,duties ,! duties

 ( ! ,c\ncil %all include-- 7#a7        
coord9at+ ag5cy developm5t & use (      
artificial intellig5ce 9 ag5cy programs 
& op]ations1 includ+ practices relat+ to
 ! design1 op]ation1 risk managem5t1 &  
p]=mance ( artificial intellig5ce2  7#b7
 %>+ exp]i5ces1 ideas1 be/ practices1 & 
innovative approa*es relat+ to          
artificial intellig5ce2 &  7#c7 assi/+ !
 ,director1 z necess>y1 ) respect to--  
7,a7 ! id5tification1 developm5t1 &     
coord9ation ( multi-ag5cy projects & o!r
 initiatives1 includ+ initiatives to    
improve ,gov]nm5t p]=mance2  7,b7 !     
managem5t ( risks relat+ to develop+1   
obta9+1 or us+ artificial intellig5ce1  
includ+ by develop+ a common template to
 guide ag5cy ,*ief ,artificial          
,intellig5ce ,(fic]s 9 implem5t+ a risk 
classification sy/em t may incorporate  
be/ practices1 su* z ^? f-- 7i7 ! mo/   
rec5tly updat$ v]sion ( ! framework     
develop$ & updat$ pursuant to section   
#bb;,a7c7 ( ! ,national ,in/itute (     
,/&>ds & ,te*nology ,act 7#ae ,u4,s4,c4 

#bgh;h-#a7;c772 &  7ii7 ! report publi%$
 by ! ,gov]nm5t ,acc\ntability ,(fice   
entitl$ ,artificial ,intellig5ce3 ,an   
,acc\ntability ,framework = ,f$]al      
,ag5cies & ,o!r ,entities               
7,,gao-#ba-eai,,sp71 publi%$ on ,june   
#cj1 #bjba2  7,c7 promot+ ! developm5t &
 use ( effici5t1 effective1 common1 %>$1
 or o!r approa*es to key processes t    
improve ! deliv]y ( s]vices = ! public2 
&  7,d7 solicit+ & provid+ p]spectives  
on matt]s ( conc]n1 includ+ f & to-- 7i7
 int]ag5cy c\ncils2  7ii7 ,f$]al        
,gov]nm5t entities2  7iii7 private      
sector1 public sector1 nonpr(it1 &      
academic exp]ts2  7iv7 ,/ate1 local1    
,tribal1 t]ritorial1 & int]national     
gov]nm5ts2 &  7v7 o!r individuals &     
entities1 z det]m9$ relevant by !       
,c\ncil4  7c7 ,memb]%ip ( ! ,c\ncil     
7#a7 ,co-*airs ,! ,c\ncil %all h #b     
co-*airs1 :i* %all be-- 7,a7 !          
,director2 &  7,b7 an individual select$
 by a majority ( ! memb]s ( ! ,c\ncil4  
7#b7 ,memb]s ,o!r memb]s ( ! ,c\ncil    

%all include-- 7,a7 ! ,*ief ,artificial 
,intellig5ce ,(fic] ( ea* ag5cy2 &  7,b7
 ! s5ior (ficial = artificial           
intellig5ce ( ! ,(fice ( ,managem5t &   
,budget4  7d7 ,/&+ committees2 work+    
gr\ps ,! ,c\ncil %all h ! au?ority to   
e/abli% /&+ committees1 includ+ an      
executive committee1 & work+ gr\ps4  7e7
 ,c\ncil /aff ,! ,c\ncil may ent] into  
an int]ag5cy agreem5t ) ! ,adm9i/rator (
 ,g5]al ,s]vices = %>$ s]vices = !      
purpose ( /aff+ ! ,c\ncil4  7f7         
,developm5t1 adaptation1 & docum5tation 
7#a7 ,guidance ,n lat] ?an #ij days aft]
 ! date ( enactm5t ( ?is ,act1 !        
,director1 9 consultation ) ! ,c\ncil1  
%all issue guidance relat+ to-- 7,a7    
developm5ts 9 artificial intellig5ce &  
implications = managem5t ( ag5cy        
programs2  7,b7 ! ag5cy impact          
assessm5ts describ$ 9 section #h7;a7 &  
o!r relevant impact assessm5ts z det]m9$
 appropriate by ! ,director1 includ+ !  
appropriat5ess ( sub/itut+ pre-exi/+    
assessm5ts1 includ+ privacy impact      

assessm5ts1 = purposes ( an artificial  
intellig5ce impact assessm5t2  7,c7     
docum5tation = ag5cies to require f     
deploy]s ( artificial intellig5ce2  7,d7
 a model template = ! explanations = use
 case risk classifications t ea* ag5cy  
mu/ provide "u section #h7;a77#d72 &    
7,e7 o!r matt]s1 z det]m9$ relevant by !
 ,director4  7#b7 ,annual review ,!     
,director1 9 consultation ) ! ,c\ncil1  
%all p]iodically1 b n less frequ5tly ?an
 annually1 review & update1 z ne$$1 !   
guidel9es issu$ "u p>agraph 7#a74  7g7  
,incid5t report+  7#a7 ,9 g5]al ,n lat] 
?an #ahj days aft] ! date ( enactm5t (  
?is ,act1 ! ,director1 9 consultation ) 
! ,c\ncil1 %all develop proc$ures =     
ensur+ t-- 7,a7 adv]se incid5ts involv+ 
artificial intellig5ce procur$1 obta9$1 
or us$ by ag5cies are report$ promptly  
to ! ag5cy by ! develop] or deploy]1 or 
to ! develop] or deploy] by ! ag5cy1    
:i*ev] fir/ becomes aw>e ( ! adv]se     
incid5t2 &  7,b7 in=mation relat+ to an 
adv]se incid5t describ$ 9 subp>agraph   

7,a7 is appropriately %>$ among ag5cies4
  7#b7 ,s+le report ,adv]se incid5ts    
also qualify+ = incid5t report+ "u      
section #ceed ( title #dd1 ,unit$ ,/ates
 ,code1 or o!r relevant laws or         
policies1 may be report$ "u su* o!r     
report+ requirem5t & are n requir$ to be
 additionally report$ "u ?is subsection4
  7#c7 ,notice to deploy]  7,a7 ,9 g5]al
 ,if an adv]se incid5t is discov]$ by an
 ag5cy1 ! ag5cy %all report ! adv]se    
incid5t to ! deploy] & ! deploy]1 9     
consultation ) any relevant develop]s1  
%all take imm$iate action to resolve !  
adv]se incid5t & mitigate ! pot5tial =  
future adv]se incid5ts4  7,b7 ,waiv]    
7i7 ,9 g5]al ,unless o!rwise requir$ by 
law1 ! head ( an ag5cy may issue a      
writt5 waiv] t waives ! applicability ( 
"s or all ( ! requirem5ts "u subp>agraph
 7,a71 ) respect to a specific adv]se   
incid5t4  7ii7 ,writt5 waiv] cont5ts ,a 
writt5 waiv] "u clause 7i7 %all include 
ju/ification = ! waiv]4  7iii7 ,notice  
,! head ( an ag5cy %all =w>d advance    

notice ( any waiv] "u ?is subp>agraph to
 ! ,director1 or ! designee ( !         
,director4  #f4 ,ag5cy gov]nance (      
artificial intellig5ce  7a7 ,9 g5]al ,! 
head ( an ag5cy %all-- 7#a7 ensure !    
responsible adoption ( artificial       
intellig5ce1 includ+ by-- 7,a7          
articulat+ a cle> vision ( :at ! head ( 
! ag5cy wants to a*ieve by develop+1    
procur+ or obta9+1 or us+ artificial    
intellig5ce2  7,b7 ensur+ ! ag5cy       
develops1 procures1 obta9s1 or uses     
artificial intellig5ce t foll[s !       
pr9ciples ( tru/wor?y artificial        
intellig5ce 9 gov]nm5t set =? "u        
,executive ,ord] #acifj 7#he ,f$4 ,reg4 
#ghici2 relat+ to promot+ ! use (       
tru/wor?y artificial intellig5ce 9      
,f$]al ,gov]nm5t7 & ! pr9ciples = safe1 
secure1 & tru/wor?y artificial          
intellig5ce 9 gov]nm5t set =? "u section
 #b ( ,executive ,ord] #adaaj 7#hh ,f$4 
,reg4 #geaia2 relat+ to ! safe1 secure1 
& tru/wor?y developm5t & use (          
artificial intellig5ce72  7,c7 te/+1    

validat+1 & monitor+ artificial         
intellig5ce & ! use case-specific       
p]=mance ( artificial intellig5ce1 among
 o!rs1 to-- 7i7 ensure all use (        
artificial intellig5ce is appropriate to
 & improves ! effectiv5ess ( ! mission (
 ! ag5cy2  7ii7 gu>d aga9/ bias 9 data  
collection1 use1 & dissem9ation2  7iii7 
ensure reliability1 fairness1 &         
transp>5cy2 &  7iv7 protect aga9/       
imp]missible discrim9ation2  7,d7       
develop+1 adopt+1 & apply+ a suitable   
ent]prise risk managem5t framework      
approa* to artificial intellig5ce1      
incorporat+ ! requirem5ts "u ?is ,act2  
7,e7 cont9u+ to develop a work=ce t--   
7i7 und]/&s ! /r5g?s & weaknesses (     
artificial intellig5ce1 includ+         
artificial intellig5ce emb$d$ 9 ag5cy   
data sy/ems & op]ations2  7ii7 is aw>e (
 ! b5efits & risk ( artificial          
intellig5ce2  7iii7 is able to provide  
human ov]sight = ! design1              
implem5tation1 & end uses ( artificial  
intellig5ce2 &  7iv7 is able to review &

 provide r$ress = errone\s decisions    
made 9 ! c\rse ( artificial             
intellig5ce-assi/$ processes2 &  7,f7   
ensur+ implem5tation ( ! requirem5ts "u 
section #h7;a7 = ! id5tification &      
evaluation ( risks pos$ by ! deploym5t (
 artificial intellig5ce 9 ag5cy use     
cases2  7#b7 designate a ,*ief          
,artificial ,intellig5ce ,(fic]1 ^:     
duties %all include-- 7,a7 ensur+       
appropriate use ( artificial            
intellig5ce2  7,b7 coord9at+ ag5cy use (
 artificial intellig5ce2  7,c7 promot+  
artificial intellig5ce innovation2  7,d7
 manag+ ! risks ( use ( artificial      
intellig5ce2  7,e7 support+ ! head ( !  
ag5cy ) develop+ ! risk classification  
sy/em requir$ "u section #g7;a7 &       
comply+ ) o!r requirem5ts ( ?is ,act2 & 
7,f7 support+ ag5cy p]sonnel lead+ !    
procurem5t & deploym5t ( artificial     
intellig5ce to comply ) ! requirem5ts "u
 ?is ,act2 &  7#c7 =m & conv5e an       
,artificial ,intellig5ce ,gov]nance     
,bo>d1 z describ$ 9 subsection 7b71 :i* 

%all coord9ate & gov]n artificial       
intellig5ce issues across ! ag5cy4  7b7 
,artificial ,intellig5ce ,gov]nance     
,bo>d  7#a7 ,lead]%ip ,ea* ,artificial  
,intellig5ce ,gov]nance ,bo>d 7ref]r$ to
 9 ?is subsection z ,bo>d7 ( an ag5cy   
%all be *air$ by ! ,deputy ,secret>y ( !
 ag5cy or equival5t (ficial & vice-*air$
 by ! ,*ief ,artificial ,intellig5ce    
,(fic] ( ! ag5cy4 ,nei!r ! *air nor !   
vice-*air may assign or delegate ^!     
roles to o!r (ficials4  7#b7            
,repres5tation ,! ,bo>d %all1 at a      
m9imum1 include repres5tatives compris$ 
( s5ior ag5cy (ficials f op]ational     
compon5ts1 if relevant1 program (ficials
 responsible = implem5t+ artificial     
intellig5ce1 & (ficials responsible =   
in=mation te*nology1 data1 privacy1     
civil rights & civil lib]ties1 human    
capital1 procurem5t1 f9ance1 legal      
c\nsel1 & cu/om] exp]i5ce4  7#c7 ,exi/+ 
bodies ,an ag5cy may rely on an exi/+   
gov]nance body to fulfill ! requirem5ts 
( ?is subsection if ! body satisfies or 

is adju/$ to satisfy ! lead]%ip &       
repres5tation requirem5ts ( p>agraphs   
7#a7 & 7#b74  7c7 ,designation ( ,*ief  
,artificial ,intellig5ce ,(fic] ,! head 
( an ag5cy may designate z ,*ief        
,artificial ,intellig5ce ,(fic] an exi/+
 (ficial )9 ! ag5cy1 includ+ ! ,*ief    
,te*nology ,(fic]1 ,*ief ,data ,(fic]1  
,*ief ,in=mation ,(fic]1 or o!r (ficial 
) relevant or complem5t>y au?orities &  
responsibilities1 if su* exi/+ (ficial  
has exp]tise 9 artificial intellig5ce & 
meets ! requirem5ts ( ?is section4  7d7 
,effective date ,beg9n+ on ! date t is  
#abj days aft] ! date ( enactm5t ( ?is  
,act1 an ag5cy %all n develop or procure
 or obta9 artificial intellig5ce prior  
to complet+ ! requirem5ts "u p>agraphs  
7#b7 & 7#c7 ( subsection 7a74  #g4      
,ag5cy risk classification ( artificial 
intellig5ce use cases = procurem5t & use
  7a7 ,risk classification sy/em  7#a7  
,developm5t ,! head ( ea* ag5cy %all be 
responsible = develop+1 n lat] ?an #a   
ye> aft] ! date ( enactm5t ( ?is ,act1 a

 risk classification sy/em = ag5cy use  
cases ( artificial intellig5ce1 )\t     
respect to :e!r artificial intellig5ce  
is emb$d$ 9 a comm]cial product4  7#b7  
,requirem5ts  7,a7 ,risk classifications
 ,! risk classification sy/em "u        
p>agraph 7#a7 %all1 at a m9imum1 include
 unacceptable1 high1 m$ium1 & l[ risk   
classifications4  7,b7 ,factors = risk  
classifications ,9 develop+ ! risk      
classifications "u subp>agraph 7,a71 !  
head ( ! ag5cy %all consid] ! foll[+3   
7i7 ,mission & op]ation ,! mission &    
op]ations ( ! ag5cy4  7ii7 ,scale ,!    
s]i\sness & probability ( adv]se        
impacts4  7iii7 ,scope ,! bread? (      
application1 su* z ! numb] ( individuals
 affect$4  7iv7 ,optionality ,! degree (
 *oice t an individual1 gr\p1 or entity 
has z to :e!r to be subject to ! effects
 ( artificial intellig5ce4  7v7 ,/&>ds &
 frameworks ,/&>ds & frameworks = risk  
classification ( use cases t support    
democratic values1 su* z ! /&>ds &      
frameworks develop$ by ! ,national      

,in/itute ( ,/&>ds & ,te*nology1 !      
,int]national ,/&>ds ,organization1 & ! 
,in/itute ( ,electrical & ,electronics  
,eng9e]s4  7,c7 ,classification v>iance 
7i7 ,c]ta9 l[] risk use cases ,! risk   
classification sy/em may all[ = an      
op]ational use case to be categoriz$ "u 
a l[] risk classification1 ev5 if ! use 
case is a "p ( a l>g] area ( ! mission (
 ! ag5cy t is categoriz$ "u a high] risk
 classification4  7ii7 ,*anges bas$ on  
te/+ or new in=mation ,! risk           
classification sy/em may all[ = *anges  
to ! risk classification ( an artificial
 intellig5ce use case bas$ on ! results 
f procurem5t process te/+ or o!r        
in=mation t becomes available4  7,d7    
,high risk use cases  7i7 ,9 g5]al ,high
 risk classification %all1 at a m9imum1 
apply to use cases = :i* ! outputs ( !  
sy/em-- 7,i7 are presum$ to s]ve z a    
pr9cipal basis = a decision or action t 
has a legal1 mat]ial1 b9d+1 or simil>ly 
significant effect1 ) respect to an     
individual or community1 on-- 7aa7 civil

 rights1 civil lib]ties1 or privacy2    
7bb7 equal opportunities1 includ+ 9     
access to education1 h\s+1 insurance1   
cr$it1 employm5t1 & o!r programs :]e    
civil rights & equal opportunity        
protections apply2 or  7cc7 access to or
 ! ability to apply = critical gov]nm5t 
res\rces or s]vices1 includ+ heal?c>e1  
f9ancial s]vices1 public h\s+1 social   
s]vices1 transportation1 & ess5tial     
goods & s]vices2 or  7,,ii7 are presum$ 
to s]ve z a pr9cipal basis = a decision 
t sub/antially impacts ! safety (1 or   
has ! pot5tial to sub/antially impact ! 
safety (-- 7aa7 ! well-be+ ( an         
individual or community1 includ+ loss ( 
life1 s]i\s injury1 bodily h>m1         
biological or *emical h>ms1 occupational
 haz>ds1 h>assm5t or abuse1 or m5tal    
heal?2  7bb7 ! environm5t1 includ+      
irrev]sible or significant environm5tal 
damage2  7cc7 critical infra/ructure1   
includ+ ! critical infra/ructure sectors
 def9$ 9 ,presid5tial ,policy ,directive
 #ba1 entitl$ ,critical ,infra/ructure  

,security & ,resili5ce 7dat$ ,febru>y   
#ab1 #bjac7 7or any successor directive7
 & ! infra/ructure = vot+ & protect+ !  
integrity ( elections2 or  7dd7 /rategic
 assets or res\rces1 includ+ high-value 
prop]ty & in=mation m>k$ z s5sitive or  
classifi$ by ! ,f$]al ,gov]nm5t &       
controll$ unclassifi$ in=mation4  7ii7  
,additions ,! head ( ea* ag5cy %all add 
o!r use cases to ! high risk category1 z
 appropriate4  7,e7 ,m$ium & l[ risk use
 cases ,if a use case is n high risk1 z 
describ$ 9 subp>agraph 7,d71 ! head ( an
 ag5cy %all h ! discretion to def9e !   
risk classification4  7,f7 ,unacceptable
 risk ,if an ag5cy id5tifies1 ?r\gh     
te/+1 adv]se incid5t1 or o!r means or   
in=mation available to ! ag5cy1 t a use 
or outcome ( an artificial intellig5ce  
use case is a cle> ?reat to human safety
 or rights t _c be adequately or        
practicably mitigat$1 ! ag5cy %all      
id5tify ! risk classification ( t use   
case z unacceptable risk4  7#c7         
,transp>5cy ,! risk classification sy/em

 "u p>agraph 7#a7 %all be publi%$ on a  
public-fac+ website1 ) ! me?odology us$ 
to det]m9e diff]5t risk levels &        
examples ( p>ticul> use cases = ea*     
category 9 language t is easy to und]/& 
to ! p affect$ by ! decisions & outcomes
 ( artificial intellig5ce4  7b7         
,effective date ,?is section %all take  
effect on ! date t is #ahj days aft] !  
date ( enactm5t ( ?is ,act1 on & aft]   
:i* an ag5cy t has n compli$ ) !        
requirem5ts ( ?is section may n develop1
 procure or obta91 or use artificial    
intellig5ce until ! ag5cy complies ) su*
 requirem5ts4  #h4 ,ag5cy requirem5ts = 
use ( artificial intellig5ce  7a7 ,risk 
evaluation process  7#a7 ,9 g5]al ,n    
lat] ?an #ahj days aft] ! effective date
 9 section #g7;b71 ! ,*ief ,artificial  
,intellig5ce ,(fic] ( ea* ag5cy1 9      
coord9ation ) ! ,artificial ,intellig5ce
 ,gov]nance ,bo>d ( ! ag5cy1 %all       
develop & implem5t a process = !        
id5tification & evaluation ( risks pos$ 
by ! deploym5t ( artificial intellig5ce 

9 ag5cy use cases to ensure an          
int]discipl9>y & compreh5sive evaluation
 ( pot5tial risks & det]m9ation ( risk  
classifications "u su* section4  7#b7   
,process requirem5ts ,! risk evaluation 
process describ$ 9 p>agraph 7#a71 %all  
include1 = ea* artificial intellig5ce   
use case-- 7,a7 id5tification ( ! risks 
& b5efits ( ! artificial intellig5ce use
 case2  7,b7 a plan to p]iodically      
review ! artificial intellig5ce use case
 to exam9e :e!r risks h *ang$ or evolv$ 
& to update ! correspond+ risk          
classification z necess>y2  7,c7 a      
det]m9ation ( ! ne$ = t>get$ impact     
assessm5ts to fur!r evaluate specific   
risks ( ! artificial intellig5ce use    
case )9 c]ta9 impact areas1 :i* %all    
include privacy1 security1 civil rights 
& civil lib]ties1 accessibility1        
environm5tal impact1 heal? & safety1 &  
any o!r impact area relat+ to high risk 
classification "u section               
#g7;a77#b77;,d7 z det]m9$ appropriate by
 ! ,*ief ,artificial ,intellig5ce       

,(fic]2 &  7,d7 if appropriate1         
consultation ) & fe$back f affect$      
communities & ! public on ! design1     
developm5t1 & use ( ! artificial        
intellig5ce use case4  7#c7 ,review     
7,a7 ,exi/+ use cases ,) respect to ea* 
use case t an ag5cy is plann+1 develop+1
 or us+ on ! date ( enactm5t ( ?is ,act1
 n lat] ?an #a ye> aft] su* date1 !     
,*ief ,artificial ,intellig5ce ,(fic] ( 
! ag5cy %all id5tify & review ! use case
 to det]m9e ! risk classification ( !   
use case1 pursuant to ! risk evaluation 
process "u p>agraphs 7#a7 & 7#b74  7,b7 
,new use cases  7i7 ,9 g5]al ,beg9n+ on 
! date ( enactm5t ( ?is ,act1 ! ,*ief   
,artificial ,intellig5ce ,(fic] ( an    
ag5cy %all id5tify & review any         
artificial intellig5ce use case t !     
ag5cy w plan1 develop1 or use & det]m9e 
! risk classification ( ! use case1     
pursuant to ! risk evaluation process "u
 p>agraphs 7#a7 & 7#b71 be=e procur+ or 
obta9+1 develop+1 or us+ ! use case4    
7ii7 ,developm5t ,= any use case        

describ$ 9 clause 7i7 t is develop$ by !
 ag5cy1 ! ag5cy %all p]=m an additional 
risk evaluation prior to deploym5t 9 a  
production or op]ational environm5t4    
7#d7 ,rationale = risk classification   
,risk classification ( an artificial    
intellig5ce use case %all be accompani$ 
by an explanation f ! ag5cy ( h[ ! risk 
classification 0 det]m9$1 :i* %all be   
includ$ 9 ! artificial intellig5ce use  
case inv5tory ( ! ag5cy1 & writt5       
ref]5c+ ! model template develop$ by !  
,director "u section #e7;f77#a77;,d74   
7b7 ,model c>d docum5tation requirem5ts 
7#a7 ,9 g5]al ,beg9n+ on ! date t is    
#ahj days aft] ! date ( enactm5t ( ?is  
,act1 any "t dur+ develop+1 procur+ or  
obta9+1 or us+ artificial intellig5ce1  
an ag5cy %all require1 z det]m9$        
necess>y by ! ,*ief ,artificial         
,intellig5ce ,(fic]1 t ! deploy] & any  
relevant develop] submit docum5tation   
ab\t ! artificial intellig5ce1 includ+--
 7,a7 a description ( ! ar*itecture ( ! 
artificial intellig5ce1 highlight+ key  

p>amet]s1 design *oices1 & ! ma*9e le>n+
 te*niques employ$2  7,b7 in=mation on !
 tra9+ ( ! artificial intellig5ce1      
includ+ computational res\rces utiliz$2 
7,c7 an acc\nt ( ! s\rce ( ! data1 size 
( ! data1 any lic5ses "u :i* ! data is  
us$1 collection me?ods & dates ( ! data1
 & any preprocess+ ( ! data und]tak51   
includ+ human or automat$ ref9em5t1     
review1 or fe$back2  7,d7 in=mation on !
 managem5t & collection ( p]sonal data1 
outl9+ data protection & privacy        
measures adh]$ to 9 compliance )        
applicable laws2  7,e7 a description ( !
 me?odologies us$ to evaluate ! p]=mance
 ( ! artificial intellig5ce1 includ+ key
 metrics & outcomes2 &  7,f7 an e/imate 
( ! en]gy consum$ by ! artificial       
intellig5ce dur+ tra9+ & inf]5ce4  7#b7 
,additional docum5tation = m$ium & high 
risk use cases ,beg9n+ on ! date t is   
#bgj days aft] ! date ( enactm5t ( ?is  
,act1 ) respect to use cases categoriz$ 
z m$ium risk or high]1 an ag5cy %all    
require t ! deploy] ( artificial        

intellig5ce1 9 consultation ) any       
relevant develop]s1 submit 7includ+     
proactively1 z mat]ial updates ( !      
artificial intellig5ce occur7 ! foll[+  
docum5tation3 7,a7 ,model ar*itecture   
,detail$ in=mation on ! model or models 
us$ 9 ! artificial intellig5ce1 includ+ 
model date1 model v]sion1 model type1   
key p>amet]s 7includ+ numb] ( p>amet]s71
 int]pretability measures1 & ma9t5ance &
 updat+ policies4  7,b7 ,advanc$ tra9+  
details ,a detail$ description ( tra9+  
algori?ms1 me?odologies1 optimization   
te*niques1 computational res\rces1 & !  
environm5tal impact ( ! tra9+ process4  
7,c7 ,data prov5ance & integrity ,a     
detail$ description ( ! tra9+ & te/+    
data1 includ+ ! orig9s1 collection      
me?ods1 preprocess+ /eps1 & demographic 
di/ribution ( ! data1 & kn[n            
discrim9atory impacts & mitigation      
measures ) respect to ! data4  7,d7     
,privacy & data protection ,detail$     
in=mation on data h&l+ practices1       
includ+ compliance ) legal /&>ds1       

anonymization te*niques1 data security  
measures1 & :e!r & h[ p]mission = use ( 
data is obta9$4  7,e7 ,rigor\s te/+ &   
ov]sight ,a compreh5sive disclosure (   
p]=mance evaluation metrics1 includ+    
accuracy1 precision1 recall1 & fairness 
metrics1 & te/ dataset results4  7,f7   
,,ni/ artificial intellig5ce risk       
managem5t framework ,docum5tation       
demon/rat+ compliance ) ! mo/ rec5tly   
updat$ v]sion ( ! framework develop$ &  
updat$ pursuant to section #bb;,a7c7 ( !
 ,national ,in/itute ( ,/&>ds &         
,te*nology ,act 7#ae ,u4,s4,c4          
#bgh;h-#a7;c774  7#c7 ,review (         
requirem5ts ,n lat] ?an #a ye> aft] !   
date ( enactm5t ( ?is ,act1 !           
,comptroll] ,g5]al %all conduct a review
 ( ! docum5tation requirem5ts "u        
p>agraphs 7#a7 & 7#b7 to-- 7,a7 exam9e  
:e!r ag5cies & deploy]s are comply+ ) ! 
requirem5ts "u ^? p>agraphs2 &  7,b7    
make f9d+s & recomm5dations to fur!r    
assi/ 9 ensur+ safe1 responsible1 &     
effici5t artificial intellig5ce4  7#d7  

,security ( provid$ docum5tation ,! head
 ( ea* ag5cy %all ensure t appropriate  
security measures & access controls are 
9 place to protect docum5tation provid$ 
pursuant to ?is section4  7c7 ,in=mation
 & use protections ,in=mation provid$ to
 an ag5cy "u subsection 7b77#c7 is      
exempt f disclosure "u section #eeb (   
title #e1 ,unit$ ,/ates ,code 7commonly 
kn[n z ! ,fre$om ( ,in=mation ,act7 &   
may be us$ by ! ag5cy1 consi/5t )       
o!rwise applicable provisions ( ,f$]al  
law1 solely =-- 7#a7 assess+ ! ability (
 artificial intellig5ce to a*ieve !     
requirem5ts & objectives ( ! ag5cy & !  
requirem5ts ( ?is ,act2 &  7#b7         
id5tify+-- 7,a7 adv]se effects (        
artificial intellig5ce on ! rights or   
safety factors id5tifi$ 9 section       
#g7;a77#b77;,d72  7,b7 cyb] ?reats1     
includ+ ! s\rces ( ! cyb] ?reats2 &     
7,c7 security vuln]abilities4  7d7      
,pre-,deploym5t requirem5ts = high risk 
use cases ,beg9n+ on ! date t is #a ye> 
aft] ! date ( enactm5t ( ?is ,act1 !    

head ( an ag5cy %all n deploy or use    
artificial intellig5ce = a high risk use
 case prior to-- 7#a7 collect+          
docum5tation ( ! artificial intellig5ce1
 s\rce1 & use case 9 ag5cy s(tw>e & use 
case inv5tories2  7#b7 te/+ ( !         
artificial intellig5ce 9 an op]ational1 
real-_w sett+ ) privacy1 civil rights1 &
 civil lib]ty safegu>ds to ensure !     
artificial intellig5ce is capable (     
meet+ its objectives2  7#c7 e/abli%+    
appropriate ag5cy rules ( behavior = !  
use case1 includ+ requir$ human         
involvem5t 91 & us]-fac+ expla9ability  
(1 decisions made 9 :ole or "p by !     
artificial intellig5ce1 z det]m9$ by !  
,*ief ,artificial ,intellig5ce ,(fic] 9 
coord9ation ) ! program manag] or       
equival5t ag5cy p]sonnel2 &  7#d7       
e/abli%+ appropriate ag5cy tra9+        
programs1 includ+ docum5tation (        
completion ( tra9+ prior to use (       
artificial intellig5ce1 t educate ag5cy 
p]sonnel involv$ ) ! application (      
artificial intellig5ce 9 high risk use  

cases on ! capacities & limitations (   
artificial intellig5ce1 includ+ tra9+   
on-- 7,a7 monitor+ ! op]ation (         
artificial intellig5ce 9 high risk use  
cases to detect & address anomalies1    
dysfunctions1 & unexpect$ p]=mance 9 a  
timely mann] to mitigate h>m2  7,b7     
less5+ reliance or ov]-reliance on !    
output produc$ by artificial intellig5ce
 9 a high risk use case1 p>ticul>ly if  
artificial intellig5ce is us$ to make   
decisions impact+ individuals2  7,c7    
accurately int]pret+ ! output (         
artificial intellig5ce1 p>ticul>ly      
consid]+ ! *>act]i/ics ( ! sy/em & !    
int]pretation tools & me?ods available2 
7,d7 :5 to n use1 disreg>d1 ov]ride1 or 
rev]se ! output ( artificial            
intellig5ce2  7,e7 h[ to int]v5e or     
int]rupt ! op]ation ( artificial        
intellig5ce2  7,f7 limit+ ! use (       
artificial intellig5ce to its op]ational
 design doma92 &  7,g7 proc$ures =      
report+ incid5ts involv+ misuse1 faulty 
results1 safety & security issues1 & o!r

 problems ) use ( artificial intellig5ce
 t does n function z int5d$4  7e7 ,ongo+
 monitor+ ( artificial intellig5ce 9    
high risk use cases ,! ,*ief ,artificial
 ,intellig5ce ,(fic] ( ea* ag5cy %all-- 
7#a7 e/abli% a report+ sy/em1 consi/5t )
 section #e7;g71 & susp5sion & %ut-d[n  
protocols = defects or adv]se impacts ( 
artificial intellig5ce1 & conduct ongo+ 
monitor+1 z det]m9$ necess>y by use     
case2  7#b7 ov]see ! developm5t &       
implem5tation ( ongo+ te/+ & evaluation 
processes = artificial intellig5ce 9    
high risk use cases to ensure cont9u$   
mitigation ( ! pot5tial risks id5tifi$ 9
 ! risk evaluation process2  7#c7       
implem5t a process to ensure t risk     
mitigation ef=ts = artificial           
intellig5ce are review$ n less ?an      
annually & updat$ z necess>y to acc\nt =
 ! developm5t ( new v]sions ( artificial
 intellig5ce & *anges to ! risk pr(ile2 
&  7#d7 adh]e to pre-deploym5t          
requirem5ts "u subsection 7d7 9 ea* case
 9 :i* a l[ or m$ium risk artificial    

intellig5ce use case becomes a high risk
 artificial intellig5ce use case4  7f7  
,exemption f requirem5ts = select use   
cases ,! ,*ief ,artificial ,intellig5ce 
,(fic] ( ea* ag5cy-- 7#a7 may designate 
select1 l[ risk use cases1 includ+      
curr5t & future use cases1 t d n h to   
comply ) all or "s ( ! requirem5ts 9 ?is
 ,act2 &  7#b7 %all publicly disclose   
all use cases exempt$ "u p>agraph 7#a7 )
 a ju/ification = ea* exempt$ use case4 
7g7 ,exception ,! requirem5ts "u        
subsections 7a7 & 7b7 %all n apply to an
 algori?m s(tw>e update1 enhancem5t1    
d]ivative1 correction1 defect1 or fix = 
artificial intellig5ce t does n         
mat]ially *ange ! compliance ( ! deploy]
 ) ! requirem5ts ( ^? subsections1      
unless det]m9$ o!rwise by ! ag5cy ,*ief 
,artificial ,intellig5ce ,(fic]4  7h7   
,waiv]s  7#a7 ,9 g5]al ,! head ( an     
ag5cy1 on a case by case basis1 may     
waive #a or m requirem5ts "u subsection 
7d7 = a specific use case aft] mak+ a   
writt5 det]m9ation1 bas$ ^u a risk      

assessm5t conduct$ by a human ) respect 
to ! specific use case1 t fulfill+ !    
requirem5t or requirem5ts prior to      
procur+ or obta9+1 develop+1 or us+     
artificial intellig5ce w\ld increase    
risks to safety or rights ov]all or w\ld
 create an unacceptable imp$im5t to     
critical ag5cy op]ations4  7#b7         
,requirem5ts2 limitations ,a waiv] "u   
?is subsection %all be-- 7,a7 9 !       
national security int]e/s ( ! ,unit$    
,/ates1 z det]m9$ by ! head ( ! ag5cy2  
7,b7 submitt$ to ! relevant             
congressional committees n lat] ?an #ae 
days aft] ! head ( ! ag5cy grants !     
waiv]2 &  7,c7 limit$ to a duration ( #a
 ye>1 at :i* "t ! head ( ! ag5cy may    
r5ew ! waiv] & submit ! r5ew$ waiv] to !
 relevant congressional committees4  7i7
 ,infra/ructure security ,! head ( an   
ag5cy1 9 consultation ) ! ag5cy ,*ief   
,artificial ,intellig5ce ,(fic]1 ,*ief  
,in=mation ,(fic]1 ,*ief ,data ,(fic]1 &
 o!r relevant ag5cy (ficials1 %all      
reevaluate infra/ructure security       

protocols bas$ on ! artificial          
intellig5ce use cases & associat$ risks 
to infra/ructure security ( ! ag5cy4    
7j7 ,compliance deadl9e ,n lat] ?an #bgj
 days aft] ! date ( enactm5t ( ?is ,act1
 ! requirem5ts ( subsections 7a7 ?r\gh  
7i7 ( ?is section %all apply ) respect  
to artificial intellig5ce t is already 9
 use on ! date ( enactm5t ( ?is ,act4   
#i4 ,prohibition on select artificial   
intellig5ce use cases ,no ag5cy may     
develop1 procure or obta91 or use       
artificial intellig5ce =-- 7#a7 mapp+   
facial biometric features ( an          
individual to assign correspond+ emotion
 & pot5tially take action aga9/ !       
individual2  7#b7 categoriz+ & tak+     
action aga9/ an individual bas$ on      
biometric data ( ! individual to d$uce  
or inf] race1 political op9ion1 religi\s
 or philosophical beliefs1 trade union  
/atus1 sexual ori5tation1 or o!r p]sonal
 trait2  7#c7 evaluat+1 classify+1 rat+1
 or scor+ ! tru/wor?9ess or social /&+ (
 an individual bas$ on multiple data    

po9ts & "t occurr5ces relat$ to ! social
 behavior ( ! individual 9 multiple     
contexts or kn[n or pr$ict$ p]sonal or  
p]sonality *>act]i/ics 9 a mann] t may  
lead to discrim9atory outcomes2 or  7#d7
 any o!r use f\nd by ! ag5cy to pose an 
unacceptable risk "u ! risk             
classification sy/em ( ! ag5cy1 pursuant
 to section #g4  #aj4 ,ag5cy procurem5t 
innovation labs  7a7 ,9 g5]al ,an ag5cy 
subject to ! ,*ief ,f9ancial ,(fic]s    
,act ( #aiij 7#ca ,u4,s4,c4 #ija note2  
,public ,law #aja-egf7 t does n h a     
,procurem5t ,innovation ,lab on ! date (
 enactm5t ( ?is ,act %\ld consid]       
e/abli%+ a lab or simil> me*anism to te/
 new approa*es1 %>e lessons le>n$1 &    
promote be/ practices 9 procurem5t1     
includ+ = comm]cial te*nology1 su* z    
artificial intellig5ce1 t is tru/wor?y &
 be/-suit$ = ! ne$s ( ! ag5cy4  7b7     
,functions ,! functions ( ! ,procurem5t 
,innovation ,lab or simil> me*anism %\ld
 include-- 7#a7 provid+ lead]%ip support
 z well z capability & capacity to te/1 

docum5t1 & help ag5cy programs adopt new
 & bett] practices ?r\gh all /ages ( !  
acquisition lifecycle1 beg9n+ ) project 
def9ition & requirem5ts developm5t2     
7#b7 provid+ ! work=ce ( ! ag5cy ) a    
cle> pa?way to te/ & docum5t new        
acquisition practices & facilitate fre% 
p]spectives on exi/+ practices2  7#c7   
help+ programs & integrat$ project teams
 successfully execute em]g+ &           
well-e/abli%$ acquisition practices to  
a*ieve bett] results2 &  7#d7 promot+   
mean+ful collaboration among (fices t   
are responsible = requirem5ts           
developm5t1 contract+ (fic]s1 & o!rs1   
includ+ f9ancial & legal exp]ts1 t %>e 9
 ! responsibility = mak+ a successful   
procurem5t4  7c7 ,/ructure ,an ag5cy    
%\ld consid] plac+ ! ,procurem5t        
,innovation ,lab or simil> me*anism z a 
support+ arm ( ! ,*ief ,acquisition     
,(fic] or ,s5ior ,procurem5t ,executive 
( ! ag5cy & %all h wide latitude 9      
/ructur+ ! ,procurem5t ,innovation ,lab 
or simil> me*anism & 9 address+         

associat$ p]sonnel /aff+ issues4  #aa4  
,multi-phase comm]cial te*nology te/    
program  7a7 ,te/ program ,! head ( an  
ag5cy may procure comm]cial te*nology   
?r\gh a multi-phase te/ program (       
contracts 9 accordance ) ?is section4   
7b7 ,purpose ,a te/ program e/abli%$ "u 
?is section %all-- 7#a7 provide a means 
by :i* an ag5cy may po/ a solicitation1 
includ+ = a g5]al ne$ or area ( int]e/1 
= :i* ! ag5cy int5ds to explore         
comm]cial te*nology solutions & = :i* an
 (f]or may submit a bid bas$ on exi/+   
comm]cial capabilities ( ! (f]or )      
m9imal modifications or a te*nology t ! 
(f]or is develop+ = comm]cial purposes2 
&  7#b7 use phases1 z describ$ 9        
subsection 7c71 to m9imize gov]nm5t risk
 & inc5tivize competition4  7c7         
,contract+ proc$ures ,"u a te/ program  
e/abli%$ "u ?is section1 ! head ( an    
ag5cy may acquire comm]cial te*nology   
?r\gh a competitive evaluation (        
proposals result+ f g5]al solicitation 9
 ! foll[+ phases3 7#a7 ,phase #a        

7viability ( pot5tial solution7         
,selectees may be aw>d$ a portion ( !   
total contract aw>d & h a p]iod (       
p]=mance ( n long] ?an #a ye> to prove !
 m]its1 feasibility1 & te*nological     
b5efit ! proposal w\ld a*ieve = ! ag5cy4
  7#b7 ,phase #b 7major details & scal$ 
te/7 ,selectees may be aw>d$ a portion (
 ! total contract aw>d & h a p]iod (    
p]=mance ( n long] ?an #a ye> to create 
a detail$ timel9e1 e/abli% an agreeable 
intellectual prop]ty own]%ip agreem5t1 &
 implem5t ! proposal on a small scale4  
7#c7 ,phase #c 7implem5tation or        
recycle7  7,a7 ,9 g5]al ,foll[+         
successful p]=mance on phase #a & #b1   
selectees may be aw>d$ up to ! full     
rema9d] ( ! total contract aw>d to      
implem5t ! proposal1 dep5d+ on ! agre$  
^u co/s & ! numb] ( contractors select$4
  7,b7 ,failure to f9d suitable         
selectees ,if no selectees are f\nd     
suitable = phase #c1 ! ag5cy head may   
det]m9e n to make any selections = phase
 #c1 t]m9ate ! solicitation & utilize   

any rema9+ funds to issue a modifi$     
g5]al solicitation = ! same area (      
int]e/4  7d7 ,treatm5t z competitive    
proc$ures ,! use ( g5]al solicitation   
competitive proc$ures = a te/ program "u
 ?is section %all be consid]$ to be use 
( competitive proc$ures z def9$ 9       
section #aeb ( title #da1 ,unit$ ,/ates 
,code4  7e7 ,limitation ,! head ( an    
ag5cy %all n ent] into a contract "u !  
te/ program = an am\nt 9 excess (       
#be1jjj1jjj4  7f7 ,guidance  7#a7 ,f$]al
 ,acquisition ,regulatory ,c\ncil ,!    
,f$]al ,acquisition ,regulatory ,c\ncil 
%all revise ! ,f$]al ,acquisition       
,regulation z necess>y to implem5t ?is  
section1 includ+ requirem5ts = ea* g5]al
 solicitation "u a te/ program to be    
made publicly available ?r\gh a means t 
provides access to ! notice ( ! g5]al   
solicitation ?r\gh ! ,sy/em = ,aw>d     
,managem5t or subsequ5t gov]nm5t-wide   
po9t ( entry1 ) classifi$ solicitations 
po/$ to ! appropriate gov]nm5t portal4  
7#b7 ,ag5cy proc$ures ,! head ( an ag5cy

 may n aw>d contracts "u a te/ program  
until ! ag5cy issues guidance )         
proc$ures = use ( ! au?ority4 ,!        
guidance %all be issu$ 9 consultation ) 
! relevant ,acquisition ,regulatory     
,c\ncil & %all be publicly available4   
7g7 ,sunset ,! au?ority = a te/ program 
"u ?is section %all t]m9ate on ! date t 
is #e ye>s aft] ! date ! ,f$]al         
,acquisition ,regulation is revis$      
pursuant to subsection 7f77#a7 to       
implem5t ! program4  #ab4 ,rese>* &     
developm5t project pilot program  7a7   
,pilot program ,! head ( an ag5cy may   
c>ry out rese>* & prototype projects 9  
accordance ) ?is section4  7b7 ,purpose 
,a pilot program e/abli%$ "u ?is section
 %all provide a means by :i* an ag5cy   
may-- 7#a7 c>ry out basic1 appli$1 &    
advanc$ rese>* & developm5t projects2 & 
7#b7 c>ry out prototype projects t      
address-- 7,a7 a pro( ( concept1 model1 
or process1 includ+ a bus9ess process2  
7,b7 rev]se eng9e]+ to address          
obsolesc5ce2  7,c7 a pilot or novel     

application ( comm]cial te*nologies =   
ag5cy mission purposes2  7,d7 agile     
developm5t activity2  7,e7 ! creation1  
design1 developm5t1 or demon/ration (   
op]ational utility2 or  7,f7 any        
comb9ation ( items describ$ 9           
subp>agraphs 7,a7 ?r\gh 7,e74  7c7      
,contract+ proc$ures ,"u a pilot program
 e/abli%$ "u ?is section1 ! head ( an   
ag5cy may c>ry out rese>* & prototype   
projects-- 7#a7 us+ small bus9esses to !
 maximum ext5t practicable2  7#b7 us+   
co/ %>+ arrangem5ts :]e practicable2    
7#c7 tailor+ intellectual prop]ty t]ms &
 conditions relevant to ! project &     
comm]cialization opportunities2 &  7#d7 
ensur+ t su* projects d n duplicate     
rese>* be+ conduct$ "u exi/+ ag5cy      
programs4  7d7 ,treatm5t z competitive  
proc$ures ,! use ( rese>* & developm5t  
contract+ proc$ures "u ?is section %all 
be consid]$ to be use ( competitive     
proc$ures1 z def9$ 9 section #aeb (     
title #da1 ,unit$ ,/ates ,code4  7e7    
,treatm5t z comm]cial te*nology ,! use (

 rese>* & developm5t contract+ proc$ures
 "u ?is section %all be consid]$ to be  
use ( comm]cial te*nology1 z def9$ 9    
section #b4  7f7 ,foll[-,on ,projects or
 ,phases ,a foll[-on contract provid$ = 
9 a contract opportunity ann\nc$ "u ?is 
section may1 at ! discretion ( ! head ( 
! ag5cy1 be aw>d$ to a p>ticipant 9 !   
orig9al project or phase if ! orig9al   
project or phase 0 successfully         
complet$4  7g7 ,limitation ,! head ( an 
ag5cy %all n ent] into a contract "u !  
pilot program = an am\nt 9 excess (     
#aj1jjj1jjj4  7h7 ,guidance  7#a7 ,f$]al
 acquisition regulatory c\ncil ,! ,f$]al
 ,acquisition ,regulatory ,c\ncil %all  
revise ! ,f$]al ,acquisition ,regulation
 rese>* & developm5t contract+ proc$ures
 z necess>y to implem5t ?is section1    
includ+ requirem5ts = ea* rese>* &      
developm5t project "u a pilot program to
 be made publicly available ?r\gh a     
means t provides access to ! notice ( ! 
opportunity ?r\gh ! ,sy/em = ,aw>d      
,managem5t or subsequ5t gov]nm5t-wide   

po9t ( entry1 ) classifi$ solicitations 
po/$ to ! appropriate gov]nm5t portal4  
7#b7 ,ag5cy proc$ures ,! head ( an ag5cy
 may n aw>d contracts "u a pilot program
 until ! ag5cy1 9 consultation ) !      
relevant ,acquisition ,regulatory       
,c\ncil issues & makes publicly         
available guidance on proc$ures = use ( 
! au?ority4  7i7 ,report+ ,contract     
actions ent]$ into "u ?is section %all  
be report$ to ! ,f$]al ,procurem5t ,data
 ,sy/em1 or any successor sy/em4  7j7   
,sunset ,! au?ority = a pilot program "u
 ?is section %all t]m9ate on ! date t is
 #e ye>s f ! date ! ,f$]al ,acquisition 
,regulation is revis$ pursuant to       
subsection 7h77#a7 to implem5t !        
program4  #ac4 ,developm5t ( tools &    
guidance = te/+ & evaluat+ artificial   
intellig5ce  7a7 ,ag5cy report          
requirem5ts ,9 a mann] specifi$ by !    
,director1 ! ,*ief ,artificial          
,intellig5ce ,(fic] %all id5tify &      
annually submit to ! ,c\ncil a report on
 ob/acles enc\nt]$ 9 ! te/+ & evaluation

 ( artificial intellig5ce1 specify+--   
7#a7 ! nature ( ! ob/acles2  7#b7 !     
impact ( ! ob/acles on ag5cy op]ations1 
mission a*ievem5t1 & artificial         
intellig5ce adoption2  7#c7             
recomm5dations = address+ ! id5tifi$    
ob/acles1 includ+ ! ne$ = p>ticul>      
res\rces or guidance to address c]ta9   
ob/acles2 &  7#d7 a timel9e t w\ld be   
ne$$ to implem5t propos$ solutions4  7b7
 ,c\ncil review & collaboration  7#a7   
,annual review ,n less frequ5tly ?an    
annually1 ! ,c\ncil %all conduct a      
review ( ag5cy reports "u subsection 7a7
 to id5tify common *all5ges &           
opportunities = cross-ag5cy             
collaboration4  7#b7 ,developm5t ( tools
 & guidance  7,a7 ,9 g5]al ,n lat] ?an  
#b ye>s aft] ! date ( enactm5t ( ?is    
,act1 ! ,director1 9 consultation ) !   
,c\ncil1 %all conv5e a work+ gr\p to--  
7i7 develop tools & guidance to assi/   
ag5cies 9 address+ ! ob/acles t ag5cies 
id5tify 9 ! reports "u subsection 7a72  
7ii7 support int]ag5cy coord9ation to   

facilitate ! id5tification & use (      
relevant volunt>y /&>ds1 guidel9es1 &   
o!r cons5sus-bas$ approa*es = te/+ &    
evaluation & o!r relevant areas2 &      
7iii7 address any additional matt]s     
det]m9$ appropriate by ! ,director4     
7,b7 ,work+ gr\p memb]%ip ,! work+ gr\p 
describ$ 9 subp>agraph 7,a7 %all include
 ,f$]al int]discipl9>y p]sonnel1 su* z  
te*nologi/s1 in=mation security         
p]sonnel1 doma9 exp]ts1 privacy (fic]s1 
data (fic]s1 civil rights & civil       
lib]ties (fic]s1 contract+ (ficials1    
legal c\nsel1 cu/om] exp]i5ce           
pr(essionals1 & o!rs1 z det]m9$ by !    
,director4  7#c7 ,in=mation %>+ ,!      
,director1 9 consultation ) ! ,c\ncil1  
%all e/abli% a me*anism = %>+ tools &   
guidance develop$ "u p>agraph 7#b7      
across ag5cies4  7c7 ,congressional     
report+  7#a7 ,9 g5]al ,ea* ag5cy %all  
submit ! annual report "u subsection 7a7
 to relevant congressional committees4  
7#b7 ,consolidat$ report ,! ,director1 9
 consultation ) ! ,c\ncil1 may susp5d ! 

requirem5t "u p>agraph 7#a7 & submit to 
! relevant congressional committees a   
consolidat$ report t conveys            
gov]nm5t-wide te/+ & evaluation         
*all5ges1 recomm5d$ solutions1 &        
progress t[>d implem5t+ recomm5dations f
 prior reports develop$ 9 fulfillm5t (  
?is subsection4  7d7 ,sunset ,!         
requirem5ts "u ?is section %all t]m9ate 
on ! date t is #aj ye>s aft] ! date (   
enactm5t ( ?is ,act4  #ad4 ,updates to  
artificial intellig5ce use case         
inv5tories  7a7 ,am5dm5ts  7#a7 ,advanc+
 ,am]ican ,,ai ,act ,! ,advanc+ ,am]ican
 ,,ai ,act 7,public ,law #aag-bfc2 #dj  
,u4,s4,c4 #aacja note7 is am5d$-- 7,a7 9
 section #gbbc7c71 by /rik+ ! p]iod &   
ins]t+ & 9 section #ejjb ( ! ,national  
,artificial ,intellig5ce ,initiative    
,act ( #bjbj 7#ae ,u4,s4,c4 #idja742 &  
7,b7 9 section #gbbe1 by /rik+          
subsection 7d74  7#b7 ,executive ord]   
#acifj ,! provisions ( section #e (     
,executive ,ord] #acifj 7#he ,f$4 ,reg4 
#ghici2 relat+ to promot+ ! use (       

tru/wor?y artificial intellig5ce 9      
,f$]al ,gov]nm5t7 t exempt classifi$ &  
s5sitive use cases f ag5cy inv5tories ( 
artificial intellig5ce use cases %all   
cease to h legal effect4  7b7           
,compliance  7#a7 ,9 g5]al ,! ,director 
%all ensure t ag5cies submit artificial 
intellig5ce use case inv5tories & t !   
inv5tories comply ) applicable          
artificial intellig5ce inv5tory         
guidance4  7#b7 ,annual report ,!       
,director %all submit to ! relevant     
congressional committees an annual      
report on ag5cy compliance ) artificial 
intellig5ce inv5tory guidance4  7c7     
,disclosure  7#a7 ,9 g5]al ,! artificial
 intellig5ce inv5tory ( ea* ag5cy %all  
publicly disclose-- 7,a7 :e!r artificial
 intellig5ce 0 develop$ int]nally by !  
ag5cy or procur$ ext]nally1 )\t exclud+ 
any use case on basis t ! use case is   
s5sitive solely because x 0 ext]nally   
procur$2  7,b7 data prov5ance in=mation1
 includ+ id5tify+ ! s\rce ( ! tra9+ data
 ( ! artificial intellig5ce1 includ+    

int]nal gov]nm5t data1 public data1     
comm]cially held data1 or simil> data2  
7,c7 ! level ( risk at :i* ! ag5cy has  
classifi$ ! artificial intellig5ce use  
case & a brief explanation = h[ !       
det]m9ation 0 made2  7,d7 a li/ ( t>get$
 impact assessm5ts conduct$ pursuant to 
section #g7;a77#b77;,c72 &  7,e7 ! numb]
 ( artificial intellig5ce use cases     
exclud$ f public report+ z be+ s5sitive4
  7#b7 ,updates  7,a7 ,9 g5]al ,:5 an   
ag5cy updates ! public artificial       
intellig5ce use case inv5tory ( ! ag5cy1
 ! ag5cy %all disclose ! date ( !       
modification & make *ange logs publicly 
available & accessible4  7,b7 ,guidance 
,! ,director %all issue guidance to     
ag5cies t describes h[ to appropriately 
update artificial intellig5ce use case  
inv5tories & cl>ifies h[ sub-ag5cies &  
regulatory ag5cies %\ld p>ticipate 9 !  
artificial intellig5ce use case         
inv5tory+ process4  7d7 ,congressional  
report+ ,! head ( ea* ag5cy %all submit 
to ! relevant congressional committees a

 copy ( ! annual artificial intellig5ce 
use case inv5tory ( ! ag5cy1 includ+--  
7#a7 ! use cases t h be5 id5tifi$ z     
s5sitive & n = public disclosure2 &     
7#b7 a classifi$ annex ( classifi$ use  
cases4  7e7 ,gov]nm5t tr5ds report      
,beg9n+ #a ye> aft] ! date ( enactm5t ( 
?is ,act1 & annually !reaft]1 !         
,director1 9 coord9ation ) ! ,c\ncil1   
%all issue a report1 bas$ on !          
artificial intellig5ce use cases report$
 9 use case inv5tories1 t describes     
tr5ds 9 ! use ( artificial intellig5ce 9
 ! ,f$]al ,gov]nm5t4  7f7 ,comptroll]   
,g5]al  7#a7 ,report requir$ ,n lat] ?an
 #a ye> aft] ! date ( enactm5t ( ?is    
,act1 & annually !reaft]1 ! ,comptroll] 
,g5]al ( ! ,unit$ ,/ates %all submit to 
relevant congressional committees a     
report on :e!r ag5cies are appropriately
 classify+ use cases4  7#b7 ,appropriate
 classification ,! ,comptroll] ,g5]al ( 
! ,unit$ ,/ates %all exam9e :e!r !      
appropriate level ( disclosure (        
artificial intellig5ce use cases by     

ag5cies %\ld be includ$ on ! ,high ,risk
 ,li/ ( ! ,gov]nm5t ,acc\ntability      
,(fice4  #a4 ,%ort title ,?is ,act may  
be cit$ z ! ,promot+ ,responsible       
,evaluation & ,procurem5t to ,advance   
,read9ess = ,ent]prise-wide ,deploym5t =
 ,artificial ,intellig5ce ,act or !     
,,prep>$ = ,,ai ,act4  #b4 ,def9itions  
,9 ?is ,act3 7#a7 ,adv]se outcome ,! t]m
 adv]se outcome means any behavior or   
malfunction1 su* z a halluc9ation1      
algori?mic bias1 or inconsi/5t output1 (
 artificial intellig5ce t leads to--    
7,a7 h>m impact+ rights or safety1 z    
describ$ 9 section #g7;a77#c72  7,b7 !  
dea? ( an individual or damage to !     
heal? ( an individual2  7,c7 mat]ial or 
irrev]sible disruption ( ! managem5t &  
op]ation ( critical infra/ructure1 z    
describ$ 9 section                      
#g7;a77#c77;,a77ii77,,iii72  7,d7       
mat]ial damage to prop]ty or !          
environm5t2  7,e7 loss ( a              
mission-critical sy/em or equipm5t2     
7,f7 failure ( ! mission ( an ag5cy2    

7,g7 ! wrongful d5ial ( a b5efit1       
paym5t1 or o!r s]vice to an individual  
or gr\p ( individuals :o w\ld h o!rwise 
be5 eligible2  7,h7 ! d5ial ( an        
employm5t1 contract1 grant1 or simil>   
opportunity t w\ld h o!rwise be5 (f]$2  
or  7,i7 ano!r consequ5ce1 z det]m9$ by 
! ,director ) public notice4  7#b7      
,ag5cy ,! t]m ag5cy-- 7,a7 means ea*    
ag5cy describ$ 9 section #cejb7a7 (     
title #dd1 ,unit$ ,/ates ,code2 &  7,b7 
does n include ea* ( ! indep5d5t        
regulatory ag5cies describ$ 9 section   
#cejb7e7 ( title #dd1 ,unit$ ,/ates     
,code4  7#c7 ,artificial intellig5ce ,! 
t]m artificial intellig5ce-- 7,a7 has ! 
mean+ giv5 t t]m 9 section #ejjb ( !    
,national ,artificial ,intellig5ce      
,initiative ,act ( #bjbj 7#ae ,u4,s4,c4 
#idja72 &  7,b7 includes ! artificial   
sy/ems & te*niques describ$ 9 p>agraphs 
7#a7 ?r\gh 7#e7 ( section #bch7;g7 ( !  
,john ,s4 ,mc,cain ,national ,def5se    
,au?orization ,act = ,fiscal ,ye> #bjai 
7,public ,law #aae-bcb2 #aj ,u4,s4,c4   

#djfa note prec474  7#d7 ,biometric data
 ,! t]m biometric data means data       
result+ f specific te*nical process+    
relat+ to ! unique physical1            
physiological1 or behavioral *>act]i/ics
 ( an individual1 includ+ facial images1
 dactyloscopic data1 physical movem5t & 
gait1 brea?1 voice1 ,,dna1 blood type1 &
 expression ( emotion1 ?\ght1 or feel+4 
7#e7 ,comm]cial te*nology ,! t]m        
comm]cial te*nology-- 7,a7 means a      
te*nology1 process1 or me?od1 includ+   
rese>* or developm5t2 &  7,b7 includes  
comm]cial products1 comm]cial s]vices1 &
 o!r comm]cial items1 z def9$ 9 ! ,f$]al
 ,acquisition ,regulation1 includ+ any  
addition or update !reto by ! ,f$]al    
,acquisition ,regulatory ,c\ncil4  7#f7 
,c\ncil ,! t]m ,c\ncil means ! ,*ief    
,artificial ,intellig5ce ,(fic]s ,c\ncil
 e/abli%$ "u section #e7;a74  7#g7      
,deploy] ,! t]m deploy] means an entity 
t op]ates1 :e!r = ! entity itself or on 
behalf ( a ?ird p>ty1 artificial        
intellig5ce1 :e!r develop$ int]nally or 

by a ?ird-p>ty develop]4  7#h7 ,develop]
 ,! t]m develop] means an entity t      
designs1 codes1 or produces artificial  
intellig5ce1 includ+ mat]ially modify+  
artificial intellig5ce design$1 cod$1 or
 produc$ by ano!r entity4  7#i7         
,director ,! t]m ,director means !      
,director ( ! ,(fice ( ,managem5t &     
,budget4  7#aj7 ,gov]nm5t data ,! t]m   
,gov]nm5t data means data collect$1     
process$1 ma9ta9$1 dissem9at$1 or manag$
 by an ag5cy1 includ+ data report$ to an
 ag5cy4  7#aa7 ,impact assessm5t ,! t]m 
impact assessm5t means a /ructur$       
process = consid]+ & evaluat+ !         
implications ( a propos$ artificial     
intellig5ce use case4  7#ab7 ,relevant  
congressional committees ,! t]m relevant
 congressional committees means !       
,committee on ,homel& ,security &       
,gov]nm5tal ,affairs ( ! ,s5ate & !     
,committee on ,ov]sight & ,acc\ntability
 ( ! ,h\se ( ,repres5tatives4  7#ac7    
,risk ,! t]m risk means ! comb9ation ( !
 probability ( an occurr5ce ( h>m & !   

pot5tial sev]ity ( t h>m4  7#ad7 ,use   
case ,! t]m use case means ! ways &     
context 9 :i* artificial intellig5ce is 
deploy$ to a*ieve a specific objective4 
#c4 ,implem5tation ( requirem5ts  7a7   
,ag5cy implem5tation ,! ,director %all  
facilitate ! implem5tation ( !          
requirem5ts ( ?is ,act1 includ+ ?r\gh ! 
issuance ( b9d+ or nonb9d+ guidance1 z !
 ,director det]m9es appropriate4  7b7   
,annual brief+ ,n lat] ?an #ahj days    
aft] ! date ( enactm5t ( ?is ,act1 &    
annually !reaft]1 ! ,director %all brief
 ! appropriate ,congressional committees
 on implem5tation ( ?is ,act & relat$   
consid]ations4  #d4 ,procurem5t (       
artificial intellig5ce  7a7             
,gov]nm5t-wide requirem5ts  7#a7 ,9     
g5]al ,n lat] ?an #ae mon?s aft] ! date 
( enactm5t ( ?is ,act1 ! ,f$]al         
,acquisition ,regulatory ,c\ncil %all   
review ,f$]al ,acquisition ,regulation  
acquisition plann+1 s\rce selection1 &  
o!r requirem5ts & update ! ,f$]al       
,acquisition ,regulation z ne$$ = ag5cy 

procurem5t ( artificial intellig5ce1    
includ+-- 7,a7 a requirem5t to address !
 outcomes ( ! risk evaluation & impact  
assessm5ts requir$ "u section #g7;a72   
7,b7 a requirem5t = an int]discipl9>y   
approa* t includes consultation ) ag5cy 
exp]ts prior to1 & ?r\gh\t1 z necess>y1 
procur+ or obta9+ artificial            
intellig5ce2 &  7,c7 any o!r            
consid]ations det]m9$ relevant by !     
,f$]al ,acquisition ,regulatory ,c\ncil4
  7#b7 ,h>monization ,! ,f$]al          
,acquisition ,regulation review describ$
 9 p>agraph 7#a7 %all det]m9e ! ext5t to
 :i* exi/+ requirem5ts & proc$ures ne$  
to be revis$ or supplem5t$ to address   
risks & opportunities specific to       
procurem5t ( artificial intellig5ce4    
7#c7 ,int]discipl9>y approa* ,!         
int]discipl9>y approa* describ$ 9       
p>agraph 7#a77;,b7 may-- 7,a7 v>y dep5d+
 on ! use case & ! risks det]m9$ to be  
associat$ ) ! use case2 &  7,b7 include1
 z practicable1 te*nologi/s1 in=mation  
security p]sonnel1 doma9 exp]ts1 privacy

 (fic]s1 data (fic]s1 civil rights &    
civil lib]ties (fic]s1 contract+        
(ficials1 legal c\nsel1 cu/om] exp]i5ce 
pr(essionals1 & o!rs4  7#d7 ,acquisition
 plann+ ,! updates describ$ 9 p>agraph  
7#a7 %all1 at a m9imum1 include-- 7,a7  
data own]%ip & privacy2  7,b7 data      
in=mation security2  7,c7 int]op]ability
 requirem5ts2  7,d7 data & model        
assessm5t processes2  7,e7 scope ( use2 
7,f7 ongo+ monitor+ & evaluation        
te*niques2  7,g7 environm5tal impact2   
7,h7 cyb]security m9imum /&>ds1 includ+ 
regul> vuln]ability te/+ & pat*+ &      
cyb]security monitor+2  7,i7 risk       
mitigation te*niques1 includ+ a plan =  
m9imiz+ ! likelihood ( adv]se outcomes &
 report+ adv]se outcomes1 pursuant to   
section #e7;h72 &  7,j7 develop] &      
deploy] disclosure requirem5ts necess>y 
to comply ) ! requirem5ts ( ?is ,act4   
7b7 ,requirem5ts = high risk artificial 
intellig5ce use cases  7#a7 ,e/abli%m5t 
,beg9n+ on ! date t is #a ye> aft] !    
date ( enactm5t ( ?is ,act1 ! head ( an 

ag5cy may n procure or obta9 artificial 
intellig5ce = a high risk use case1 z   
describ$ 9 section #g7;a77#c71 prior to 
e/abli%+ & incorporat+ c]ta9 t]ms into  
relevant contracts & agreem5ts = an     
artificial intellig5ce use case1        
includ+-- 7,a7 a requirem5t to disclose 
to ! ag5cy ! purpose = :i* ! artificial 
intellig5ce 0 int5d$ to be us$ & any    
pot5tial risks f ! use ( ! artificial   
intellig5ce2  7,b7 requirem5ts = safety1
 security1 privacy1 & tru/wor?9ess1     
includ+-- 7i7 a report+ me*anism ?r\gh  
:i* ag5cy p]sonnel are notifi$ ( an     
adv]se outcome involv+ artificial       
intellig5ce procur$ or obta9$ by !      
ag5cy2  7ii7 a requirem5t1 9 accordance 
) section #e7;h71 t ag5cy p]sonnel      
receive a notification ( an adv]se      
outcome involv+ artificial intellig5ce  
procur$ or obta9$ by ! ag5cy1 &1 at a   
m9imum1 an explanation ( ! cause ( !    
adv]se outcome & any data directly      
connect$ to ! adv]se outcome2  7iii7 t !
 ag5cy may consid] tempor>ily or        

p]man5tly susp5d+ use ( ! artificial    
intellig5ce1 ) m9imal impact on unrelat$
 s]vices1 if ! risks ( ! artificial     
intellig5ce to rights or safety outweigh
 ! b5efits ( ! use case2 &  7iv7 a      
requirem5t t ! deploy] & any relevant   
develop] utilize ! mo/ rec5tly updat$   
v]sion ( ! framework develop$ & updat$  
pursuant to section #bb7;,a77c7 ( !     
,national ,in/itute ( ,/&>ds &          
,te*nology ,act 7#ae ,u4,s4,c4          
#bgh;h-#a7;c772  7,c7 requirem5ts to    
disclose to ! ag5cy suffici5t           
descriptive in=mation relat+ to !       
own]%ip ( data1 z appropriate by use    
case1 includ+-- 7i7 requirem5ts =       
ret5tion ( rights to ,gov]nm5t data &   
any modification to ,gov]nm5t data1     
includ+ to protect ,gov]nm5t data f     
unau?oriz$ disclosure & use to          
subsequ5tly tra9 or improve !           
functionality ( comm]cial products (f]$ 
by ! deploy]1 any relevant develop]s1 or
 o!rs2 &  7ii7 a requirem5t t ! deploy]1
 if ! deploy] is n ! ag5cy1 & any       

relevant develop]s or o!r p>ties isolate
 non-public ,gov]nm5t data f all o!r    
data ?r\gh me?ods1 su* z physical       
sep>ation1 electronic sep>ation via     
secure copies ) /rict access controls1  
or o!r computational isolation          
me*anisms2  7,d7 requirem5ts =          
evaluation & te/+ ( artificial          
intellig5ce bas$ on use case1 to be     
p]=m$ on an ongo+ basis2 &  7,e7        
requirem5ts to provide docum5tation1 z  
det]m9$ necess>y & reque/$ by ! ag5cy1 9
 accordance ) section #g7;b74  7#b7     
,review ,! ,s5ior ,procurem5t           
,executive1 9 coord9ation ) ! ,*ief     
,artificial ,intellig5ce ,(fic]1 %all1 z
 practicable1 consult ) te*nologi/s1    
in=mation security & cyb]security       
p]sonnel1 doma9 exp]ts1 privacy (fic]s1 
data (fic]s1 civil rights & civil       
lib]ties (fic]s1 contract+ (ficials1    
legal c\nsel1 cu/om] exp]i5ce           
pr(essionals1 program evaluation (fic]s1
 & o!r relevant ag5cy (ficials to review
 ! requirem5ts describ$ 9 subp>agraphs  

7,a7 ?r\gh 7,e7 ( p>agraph 7#a7 &       
det]m9e :e!r x may be necess>y to       
incorporate additional requirem5ts into 
relevant contracts or agreem5ts4  7#c7  
,regulation ,! ,f$]al ,acquisition      
,regulatory ,c\ncil %all revise ! ,f$]al
 ,acquisition ,regulation z necess>y to 
implem5t ! requirem5ts ( ?is subsection4
  #e4 ,int]ag5cy gov]nance ( artificial 
intellig5ce  7a7 ,*ief artificial       
intellig5ce (fic]s c\ncil ,n lat] ?an   
#fj days aft] ! date ( enactm5t ( ?is   
,act1 ! ,director %all e/abli% a ,*ief  
,artificial ,intellig5ce ,(fic]s        
,c\ncil4  7b7 ,duties ,! duties ( !     
,c\ncil %all include-- 7#a7 coord9at+   
ag5cy developm5t & use ( artificial     
intellig5ce 9 ag5cy programs &          
op]ations1 includ+ practices relat+ to !
 design1 op]ation1 risk managem5t1 &    
p]=mance ( artificial intellig5ce2  7#b7
 %>+ exp]i5ces1 ideas1 be/ practices1 & 
innovative approa*es relat+ to          
artificial intellig5ce2  7#c7 id5tify+1 
develop+1 & coord9at+ multi-ag5cy       

projects & o!r initiatives2  7#d7       
h>moniz+ ag5cy managem5t ( risks relat+ 
to develop+1 obta9+1 or us+ artificial  
intellig5ce1 includ+ by develop+ a      
common template to guide ag5cy ,*ief    
,artificial ,intellig5ce ,(fic]s 9      
implem5t+ a risk evaluation process t   
may incorporate be/ practices1 su* z ^? 
f-- 7,a7 ! mo/ rec5tly updat$ v]sion ( !
 framework develop$ & updat$ pursuant to
 section #bb;,a7c7 ( ! ,national        
,in/itute ( ,/&>ds & ,te*nology ,act    
7#ae ,u4,s4,c4 #bgh;h-#a7;c772 &  7,b7 !
 report publi%$ by ! ,gov]nm5t          
,acc\ntability ,(fice entitl$           
,artificial ,intellig5ce3 ,an           
,acc\ntability ,framework = ,f$]al      
,ag5cies & ,o!r ,entities               
7,,gao-#ba-eai,,sp71 publi%$ on ,june   
#cj1 #bjba2  7#e7 promot+ ! developm5t &
 use ( secure1 common1 %>$1 or o!r      
approa*es to key processes t improve !  
deliv]y ( s]vices = ! public2  7#f7     
solicit+ & provid+ p]spectives on matt]s
 ( conc]n1 includ+ f & to-- 7,a7        

int]ag5cy c\ncils2  7,b7 ,f$]al         
,gov]nm5t entities2  7,c7 private       
sector1 public sector1 nonpr(it1 &      
academic exp]ts2  7,d7 ,/ate1 local1    
,tribal1 t]ritorial1 & int]national     
gov]nm5ts2 &  7,e7 o!r individuals &    
entities1 z det]m9$ relevant by !       
,c\ncil2  7#g7 work+ ) ! ,*ief          
,acquisition ,(fic]s ,c\ncil-- 7,a7 to  
ensure contractors1 includ+ small       
bus9esses1 h ! b5efit ( integrity1      
fairness1 competition1 op5ness1 &       
effici5cy 9 accordance ) ! /atutory     
functions ( ! ,*ief ,acquisition ,(fic]s
 ,c\ncil1 z describ$ 9 section #acab (  
title #da1 ,unit$ ,/ates ,code2 &  7,b7 
:i* %all e/abli% a work+ gr\p = !       
purpose describ$ 9 subp>agraph 7,a7 &   
relat$ purposes2 &  7#h7 any o!r matt]s 
det]m9$ by ! ,c\ncil to be relevant4    
7c7 ,memb]%ip ( ! ,c\ncil  7#a7 ,lead]s 
7,a7 ,*air ,! ,director %all s]ve z     
,*air ( ! ,c\ncil4  7,b7 ,vice ,*air ,! 
,c\ncil %all h a ,vice ,*air1 :o %all be
 an individual select$ by a majority ( !

 memb]s ( ! ,c\ncil4  7,c7 ,additional  
roles ,! ,c\ncil may e/abli% additional 
lead]%ip roles1 at ! discretion ( !     
,c\ncil4  7#b7 ,memb]s ,o!r memb]s ( !  
,c\ncil %all include-- 7,a7 ! ,*ief     
,artificial ,intellig5ce ,(fic] ( ea*   
ag5cy2 &  7,b7 ! s5ior (ficial =        
artificial intellig5ce ( ! ,(fice (     
,managem5t & ,budget4  7d7 ,/&+         
committees2 work+ gr\ps ,! ,c\ncil %all 
h ! au?ority to e/abli% /&+ committees1 
includ+ an executive committee1 & work+ 
gr\ps4  7e7 ,c\ncil /aff ,! ,c\ncil may 
ent] into an int]ag5cy agreem5t ) !     
,adm9i/rator ( ,g5]al ,s]vices = %>$    
s]vices = ! purpose ( /aff+ ! ,c\ncil4  
7f7 ,reports  7#a7 ,9 g5]al ,n lat] ?an 
#c ye>s aft] ! date ( enactm5t ( ?is    
,act1 ! ,comptroll] ,g5]al ( ! ,unit$   
,/ates %all submit to ! relevant        
congressional committees a report t--   
7,a7 id5tifies1 to ! ext5t practicable1 
ways to improve coord9ation ) o!r       
c\ncils ?r\gh\t ! ,f$]al ,gov]nm5t2 &   
7,b7 recomm5ds ways to improve ! utility

 ( ! ,c\ncil = ! public & o!r ag5cies4  
7#b7 ,consolidation ,9 fulfill+ !       
requirem5t "u p>agraph 7#a71 !          
,comptroll] ,g5]al ( ! ,unit$ ,/ates    
may1 if desir$1 consolidate ! report "u 
t p>agraph ) ano!r report conc]n+       
int]ag5cy coord9ation4  7g7 ,developm5t1
 adaptation1 & docum5tation  7#a7       
,guidance ,n lat] ?an #a ye> aft] ! date
 ( enactm5t ( ?is ,act1 ! ,director %all
 issue guidance on-- 7,a7 h[ to conduct 
! ag5cy impact assessm5ts describ$ 9    
section #g7;a7 & o!r relevant impact    
assessm5ts z det]m9$ appropriate by !   
,director1 includ+ ! appropriat5ess (   
adapt+ pre-exi/+ assessm5ts1 includ+    
privacy & security impact assessm5ts1 = 
purposes ( an artificial intellig5ce    
impact assessm5t2  7,b7 developm5t ( a  
model template = ! risk classification  
explanations t ea* ag5cy mu/ provide "u 
section #g7;a77#f72  7,c7 developm5t ( a
 model template = procurem5t (          
artificial intellig5ce int5d$ to help   
ag5cies use consi/5t t]ms1 def9itions1 &

 docum5tation requirem5ts2 &  7,d7      
additional matt]s relat+ to !           
implem5tation ( ?is ,act1 z det]m9$     
relevant by ! ,director4  7#b7 ,bi5nial 
review ,! ,director %all p]iodically1 b 
n less frequ5tly ?an bi5nially1 review &
 update1 z ne$$1 ! guidance issu$ "u    
p>agraph 7#a74  7h7 ,adv]se outcome     
report+  7#a7 ,9 g5]al ,n lat] ?an #a   
ye> aft] ! date ( enactm5t ( ?is ,act1 !
 ,director %all develop proc$ures =     
ensur+ t1 at a m9imum-- 7,a7 adv]se     
outcomes involv+ artificial intellig5ce 
procur$ or obta9$ or us$ by ag5cies are 
report$ promptly to ! relevant ag5cy or 
ag5cies by ! develop] or deploy]1 if !  
deploy] is n ! ag5cy1 or to ! develop]  
or deploy] by ! relevant ag5cy1 :i*ev]  
fir/ becomes aw>e ( ! adv]se outcome2 & 
7,b7 in=mation relat+ to an adv]se      
outcome describ$ 9 subp>agraph 7,a7 is  
appropriately %>$ among ag5cies4  7#b7  
,s+le report ,adv]se outcomes also      
qualify+ = incid5t report+ "u section   
#ceed ( title #dd1 ,unit$ ,/ates ,code1 

or o!r relevant laws or policies1 may be
 report$ "u su* o!r report+ requirem5t &
 are n requir$ to be additionally       
report$ "u ?is subsection4  7#c7 ,notice
 to develop]s & deploy]s  7,a7 ,9 g5]al 
,if & ^u discov]y ( an adv]se outcome by
 an ag5cy1 ! ag5cy %all-- 7i7 report !  
adv]se outcome to ! deploy]1 if !       
deploy] is n ! ag5cy1 & any relevant    
develop]s2 &  7ii7 9 consultation ) any 
relevant deploy]s & develop]s1 take     
action to resolve ! adv]se outcome &    
mitigate ! pot5tial = future adv]se     
outcomes4  7,b7 ,waiv]  7i7 ,9 g5]al    
,unless o!rwise requir$ by law1 ! head (
 an ag5cy may issue a writt5 waiv] t    
waives ! applicability ( "s or all ( !  
requirem5ts "u subp>agraph 7,a71 )      
respect to a specific adv]se outcome4   
7ii7 ,writt5 waiv] cont5ts ,a writt5    
waiv] "u clause 7i7 %all include        
ju/ification = ! waiv]4  7iii7 ,notice  
,! head ( an ag5cy %all =w>d advance    
notice ( any waiv] "u ?is subp>agraph to
 ! ,director4  #f4 ,ag5cy gov]nance (   

artificial intellig5ce  7a7 ,9 g5]al ,! 
head ( an ag5cy %all-- 7#a7 ensure !    
responsible adoption ( artificial       
intellig5ce1 includ+ by-- 7,a7 requir+ !
 developm5t or revision ( relevant ag5cy
 policies & directives2  7,b7 te/+1     
v]ify+1 validat+1 & monitor+ artificial 
intellig5ce & ! use case-specific       
p]=mance ( artificial intellig5ce1      
proportionate to risk level1 to m9imize 
! likelihood ( adv]se outcomes by-- 7i7 
ensur+ ! use ( artificial intellig5ce is
 appropriate to & improves !            
effectiv5ess ( ! mission ( ! ag5cy2     
7ii7 gu>d+ aga9/ bias 9 data collection1
 use1 & dissem9ation2  7iii7 ensur+     
reliability1 fairness1 & transp>5cy2 &  
7iv7 protect+ aga9/ imp]missible        
discrim9ation2  7,c7 cont9u+ to hire1   
tra91 & develop a work=ce t-- 7i7       
und]/&s ! risks & b5efits ( artificial  
intellig5ce1 includ+ artificial         
intellig5ce emb$d$ 9 ag5cy sy/ems &     
op]ations2  7ii7 is able to provide     
human ov]sight = ! design1              

implem5tation1 & end uses ( artificial  
intellig5ce2 &  7iii7 is able to review 
& provide r$ress = errone\s decisions   
made 9 ! c\rse ( artificial             
intellig5ce-assi/$ processes2 &  7,d7   
ensur+ implem5tation ( ! ag5cy          
requirem5ts "u ?is ,act2  7#b7 designate
 a ,*ief ,artificial ,intellig5ce       
,(fic]1 ^: duties %all include-- 7,a7   
ensur+ appropriate use ( artificial     
intellig5ce2  7,b7 coord9at+ ag5cy use (
 artificial intellig5ce2  7,c7 promot+  
artificial intellig5ce innovation2  7,d7
 manag+ ! risks ( use ( artificial      
intellig5ce2  7,e7 m9imiz+ ! likelihood 
( adv]se outcomes2  7,f7 support+ ! head
 ( ! ag5cy ) develop+ ! risk evaluation 
process requir$ "u section #g7;a7 &     
comply+ ) o!r requirem5ts ( ?is ,act2   
7,g7 support+ ag5cy p]sonnel lead+ !    
procurem5t & deploym5t ( artificial     
intellig5ce to comply ) ! requirem5ts "u
 ?is ,act2 &  7,h7 coord9at+ ) o!r      
responsible (ficials & appropriate      
/akehold]s ) respect to ! duties        

describ$ 9 subp>agraphs 7,a7 ?r\gh 7,g71
 z appropriate2 &  7#c7 =m & conv5e an  
,artificial ,intellig5ce ,gov]nance     
,bo>d1 if requir$ by subsection 7c71 :i*
 %all coord9ate & gov]n artificial      
intellig5ce issues across ! ag5cy4  7b7 
,designation ( ,*ief ,artificial        
,intellig5ce ,(fic] ,! head ( an ag5cy  
may designate z ,*ief ,artificial       
,intellig5ce ,(fic] an exi/+ (ficial )9 
! ag5cy1 includ+ ! ,*ief ,te*nology     
,(fic]1 ,*ief ,data ,(fic]1 ,*ief       
,in=mation ,(fic]1 or o!r (ficial )     
relevant or complem5t>y au?orities &    
responsibilities1 if su* exi/+ (ficial  
has exp]tise 9 artificial intellig5ce & 
meets ! requirem5ts ( ?is section4  7c7 
,artificial ,intellig5ce ,gov]nance     
,bo>d  7#a7 ,lead]%ip ,ea* ag5cy        
id5tifi$ 9 section #ija7;b7 ( title #ca1
 ,unit$ ,/ates ,code1 %all e/abli% an   
,artificial ,intellig5ce ,gov]nance     
,bo>d 7ref]r$ to 9 ?is subsection z     
,bo>d7 t %all be *air$ by ! deputy head 
( ! ag5cy or equival5t (ficial &        

vice-*air$ by ! ,*ief ,artificial       
,intellig5ce ,(fic] ( ! ag5cy4 ,nei!r ! 
*air nor ! vice-*air may assign or      
delegate ^! roles to o!r (ficials4  7#b7
 ,repres5tation ,! ,bo>d %all1 at a     
m9imum1 include repres5tatives consi/+  
(-- 7,a7 s5ior ag5cy (ficials f         
op]ational compon5ts1 if relevant2  7,b7
 program (ficials responsible =         
implem5t+ artificial intellig5ce2 &     
7,c7 (ficials responsible = in=mation   
te*nology1 data1 cyb]security1 privacy1 
/ati/ics1 civil rights & civil lib]ties1
 human capital1 procurem5t1 f9ance1     
legal c\nsel1 ag5cy managem5t1 program  
evaluation1 & cu/om] exp]i5ce4  7#c7    
,exi/+ bodies ,an ag5cy may rely on an  
exi/+ gov]nance body to fulfill !       
requirem5ts ( ?is subsection if ! body  
satisfies or is adju/$ to satisfy !     
lead]%ip & repres5tation requirem5ts (  
p>agraphs 7#a7 & 7#b74  7d7 ,effective  
date ,beg9n+ on ! date t is #abj days   
aft] ! date ( enactm5t ( ?is ,act1 an   
ag5cy %all n develop1 procure1 or obta9 

artificial intellig5ce prior to complet+
 ! requirem5ts "u p>agraphs 7#b7 & 7#c7 
( subsection 7a74  #g4 ,ag5cy           
requirem5ts = use ( artificial          
intellig5ce  7a7 ,risk evaluation       
process  7#a7 ,9 g5]al ,n lat] ?an #ahj 
days aft] ! date ( enactm5t ( ?is ,act1 
! ,*ief ,artificial ,intellig5ce ,(fic] 
( ea* ag5cy1 9 coord9ation ) !          
,artificial ,intellig5ce ,gov]nance     
,bo>d ( ! ag5cy1 %all develop & implem5t
 a process = id5tify+ :5 ! use (        
artificial intellig5ce by ! ag5cy meets 
! classification ( high risk1 z describ$
 9 p>agraph 7#c74  7#b7 ,process        
requirem5ts ,! risk evaluation process  
describ$ 9 p>agraph 7#a71 %all include1 
= ea* artificial intellig5ce use case-- 
7,a7 id5tification ( ! purpose1 expect$ 
b5efits1 & pot5tial risks ( ! artificial
 intellig5ce use case2  7,b7 a plan to  
p]iodically review ! artificial         
intellig5ce use case to exam9e :e!r !   
expect$ b5efits & pot5tial risks        
id5tifi$ "u subp>agraph 7,a7 h *ang$ or 

evolv$2 &  7,c7 if a high risk          
det]m9ation has be5 made1 ! ne$ = t>get$
 impact assessm5ts1 beyond ^? requir$ "u
 any o!r provision ( law1 to fur!r      
evaluate specific risks ( ! artificial  
intellig5ce use case 9 coord9ation ) o!r
 responsible (ficials )9 c]ta9 impact   
areas1 :i* %all include privacy1        
security1 civil rights & civil lib]ties1
 accessibility1 environm5tal impact1    
heal? & safety1 & any o!r impact area   
relat+ to high risk classification "u   
p>agraph 7#c7 z det]m9$ appropriate by !
 ,*ief ,artificial ,intellig5ce ,(fic]4 
7#c7 ,high risk use cases  7,a7 ,9 g5]al
 ,high risk classification %all1 at a   
m9imum1 apply to use cases = :i* !      
outputs s]ve z a pr9cipal basis =-- 7i7 
a decision or action t has a legal1     
mat]ial1 b9d+1 or simil>ly significant  
effect1 ) respect to an individual or   
community1 on-- 7,i7 civil rights1 civil
 lib]ties1 or privacy2  7,,ii7 access to
 education1 h\s+1 insurance1 cr$it1     
employm5t1 & o!r programs :]e civil     

rights & equal opportunity protections  
apply2 or  7,,iii7 access to or !       
ability to apply = critical gov]nm5t    
res\rces or s]vices1 includ+ heal?c>e1  
f9ancial s]vices1 public h\s+1 social   
s]vices1 transportation1 & ess5tial     
goods & s]vices2 or  7ii7 a decision t  
sub/antially impacts ! safety (1 or has 
! pot5tial to sub/antially impact !     
safety (-- 7,i7 an individual or        
community1 includ+ loss ( life1 s]i\s   
injury1 bodily h>m1 biological or       
*emical h>ms1 occupational haz>ds1      
h>assm5t or abuse1 or m5tal heal?2      
7,,ii7 ! environm5t1 includ+ irrev]sible
 or significant environm5tal damage2    
7,,iii7 critical infra/ructure1 includ+ 
! critical infra/ructure sectors def9$ 9
 ,national ,security ,memor&um #bb      
7,,nsm-#bb7 7dat$ ,april #cj1 #bjbd7 7or
 any successor directive7 & !           
infra/ructure = vot+ & protect+ !       
integrity ( elections2 or  7,,iv7       
/rategic assets or res\rces1 includ+    
high-value prop]ty & in=mation m>k$ z   

s5sitive or classifi$ by ! ,f$]al       
,gov]nm5t4  7,b7 ,classification v>iance
  7i7 ,v>iance )9 a mission area ,! risk
 evaluation process "u ?is p>agraph may 
all[ = a p>ticul> op]ational use case to
 n be classifi$ z high risk1 ev5 if !   
use case is a "p ( a l>g] area ( !      
mission ( ! ag5cy t is ?\ght to be high 
risk1 if ! op]ational use case is       
det]m9$ n to be high risk bas$ on !     
requir$ risk evaluation "u p>agraph     
7#a74  7ii7 ,*anges bas$ on te/+ or new 
in=mation ,! risk evaluation process "u 
?is p>agraph may all[ = *anges to ! risk
 classification ( an artificial         
intellig5ce use case bas$ on ! results f
 te/+ dur+ ! procurem5t process or o!r  
in=mation t becomes available4  7#d7    
,review ,n lat] ?an #a ye> aft] ! date (
 enactm5t ( ?is ,act1 ! ,*ief           
,artificial ,intellig5ce ,(fic] ( !     
ag5cy %all-- 7,a7 c]tify :e!r ea* exi/+ 
use case pres5ts a high risk2 &  7,b7   
id5tify & review any use cases ! ag5cy  
is plann+1 develop+1 procur+1 or obta9+ 

to det]m9e :e!r ea* su* use cases       
pres5ts a high risk4  7#e7 ,developm5t  
,= any artificial intellig5ce t is      
develop$ by ! ag5cy1 ! ag5cy %all ensure
 a risk evaluation is conduct$ prior to 
deploym5t 9 a production or op]ational  
environm5t t is fit = ! int5d$ use4     
7#f7 ,rationale = risk classification   
7,a7 ,9 g5]al ,a high risk              
classification ( an artificial          
intellig5ce use case %all be accompani$ 
by an explanation f ! ag5cy1 t a        
reasonable p]son w\ld consid] suffici5t 
to und]/&1 ( h[ ! classification 0      
det]m9$1 :i* %all be includ$ 9 !        
artificial intellig5ce use case inv5tory
 ( ! ag5cy4  7,b7 ,template ,a risk     
classification explanation "u           
subp>agraph 7,a7 %all utilize ! model   
template develop$ by ! ,director "u     
section #e7;g77#a77;,b7 if ! explanation
 is writt5 aft] ! date t su* model      
template has become available4  7b7     
,docum5tation requirem5ts  7#a7         
,docum5tation = high risk use cases     

,beg9n+ on ! date t is #a ye> aft] !    
date ( enactm5t ( ?is ,act1 prior to    
develop+1 procur+ or obta9+1 or us+     
artificial intellig5ce to be us$ 9 a    
high risk use case1 an ag5cy %all       
require ! deploy]1 if ! deploy] is n !  
ag5cy1 9 consultation ) any relevant    
develop]s1 to submit ! foll[+           
docum5tation3 7,a7 ,a description ( !   
types ( data s\rces us$ to tra9 !       
artificial intellig5ce1 :e!r ! data is f
 lic5s$ mat]ial1 & an id5tification ( ! 
specific issues relat$ to safety1 bias1 
& fairness1 t may be expect$ to arise f 
! use ( ! data1 & any mitigation        
te*niques us$1 if applicable4  7,b7 ,a  
description ( ! me?odologies us$ to     
evaluate ! p]=mance ( ! artificial      
intellig5ce = its int5d$ use4  7,c7     
,docum5tation demon/rat+ implem5tation (
 risk evaluation & managem5t measures1  
includ+ ! evaluation & managem5t (      
safety1 bias1 & fairness risks1 z       
appropriate4  7,d7 ,in=mation on !      
collection1 managem5t1 & protection (   

data1 9 compliance ) applicable laws4   
7,e7 ,docum5tation ( ! kn[n limitations 
( ! artificial intellig5ce1 & if        
applicable1 supplem5t>y guidel9es on h[ 
! artificial intellig5ce is int5d$ to be
 us$4  7#b7 ,suffici5cy ( docum5tation  
,! ,*ief ,artificial ,intellig5ce ,(fic]
 ( an ag5cy %all det]m9e ! suffici5cy ( 
! docum5tation provid$ 9 meet+ !        
requirem5ts "u p>agraph 7#a74  7#c7     
,updates ,an ag5cy %all require t a     
deploy]1 if ! deploy] is n ! ag5cy1 9   
consultation ) any relevant develop]s1  
submit updates to ! docum5tation requir$
 "u p>agraph 7#a71 if & :5 !re are any  
mat]ial *anges to ! in=mation 9 su*     
docum5tation4  7#d7 ,review (           
requirem5ts ,n lat] ?an #b ye>s aft] !  
date ( enactm5t ( ?is ,act1 !           
,comptroll] ,g5]al ( ! ,unit$ ,/ates    
%all conduct a review ( ! docum5tation  
requirem5ts "u p>agraphs 7#a7 & 7#c7    
to-- 7,a7 exam9e :e!r ag5cies1 ?ird-p>ty
 deploy]s1 & develop]s are comply+ ) !  
requirem5ts "u ^? p>agraphs1 & make     

associat$ f9d+s & recomm5dations2 &     
7,b7 make g5]al f9d+s & recomm5dations  
to fur!r assi/ 9 ensur+ safe1           
responsible1 & effici5t ag5cy procurem5t
 & use ( artificial intellig5ce4  7#e7  
,security ( provid$ docum5tation ,! head
 ( ea* ag5cy %all ensure t appropriate  
security measures & access controls are 
9 place to protect docum5tation provid$ 
pursuant to ?is section4  7c7 ,in=mation
 & use protections ,in=mation provid$ to
 an ag5cy "u subsection 7b7 may be us$  
by ! ag5cy1 consi/5t ) o!rwise          
applicable provisions ( ,f$]al law1     
solely =-- 7#a7 assess+ ! ability (     
artificial intellig5ce to a*ieve !      
requirem5ts & objectives ( ! ag5cy & !  
requirem5ts ( ?is ,act2 &  7#b7         
id5tify+-- 7,a7 adv]se effects (        
artificial intellig5ce on ! rights or   
safety factors id5tifi$ 9 subsection    
7a77#c72  7,b7 cyb] ?reats1 includ+ !   
s\rces ( ! cyb] ?reats2 &  7,c7 security
 vuln]abilities4  7d7 ,pre-deploym5t    
requirem5ts = high risk artificial      

intellig5ce use cases ,beg9n+ on ! date 
t is #ah mon?s aft] ! date ( enactm5t ( 
?is ,act1 ! head ( an ag5cy %all n      
deploy or use artificial intellig5ce = a
 high risk use case prior to-- 7#a7     
comply+ ) ! requirem5ts ( subsection    
7a72  7#b7 obta9+ docum5tation ( !      
artificial intellig5ce describ$ 9       
subsection 7b77#b71 s\rce1 & use case 9 
ag5cy s(tw>e & use case inv5tories2     
7#c7 te/+ ! artificial intellig5ce 9 an 
op]ational1 real-_w sett+ ) privacy1    
security1 civil rights1 & civil lib]ty  
safegu>ds to ensure ! artificial        
intellig5ce is capable ( meet+ its      
objectives1 & to det]m9e1 to ! maximum  
ext5t practicable1 ! likelihood & impact
 ( adv]se outcomes occurr+ dur+ use2    
7#d7 e/abli%+ appropriate ag5cy rules ( 
behavior = ! use case1 includ+ requir$  
human involvem5t 91 & reasonable        
pla9-language notice ab\t1 decisions    
made 9 :ole or "p by ! artificial       
intellig5ce1 z det]m9$ by ! ,*ief       
,artificial ,intellig5ce ,(fic] 9       

coord9ation ) ! program manag] or       
equival5t ag5cy p]sonnel2  7#e7 if      
appropriate1 consultation ) & collection
 ( fe$back f affect$ communities & !    
public on ! design1 developm5t1 & use ( 
! high risk use case2  7#f7 e/abli%+    
appropriate ag5cy tra9+ programs1       
includ+ docum5tation ( completion (     
tra9+ prior to use ( artificial         
intellig5ce1 t educate ag5cy p]sonnel   
involv$ ) ! application ( artificial    
intellig5ce 9 high risk use cases on !  
capacities & limitations ( artificial   
intellig5ce1 includ+ tra9+ on-- 7,a7    
monitor+1 detect+1 & report+ anomalies1 
dysfunctions1 & unexpect$ p]=mance 9 a  
timely mann]2  7,b7 r$uc+ ov]-reliance  
on ! output produc$ by artificial       
intellig5ce 9 a high risk use case1     
p>ticul>ly if artificial intellig5ce is 
us$ to make decisions impact+           
individuals2  7,c7 accurately int]pret+ 
! output ( artificial intellig5ce1      
p>ticul>ly consid]+ ! *>act]i/ics ( !   
sy/em & ! int]pretation tools & me?ods  

available2  7,d7 :5 to n use1 disreg>d1 
ov]ride1 or rev]se ! output ( artificial
 intellig5ce2  7,e7 h[ to int]v5e or    
int]rupt ! op]ation ( artificial        
intellig5ce2  7,f7 limit+ ! use (       
artificial intellig5ce to its int5d$    
purpose2 &  7,g7 proc$ures = report+    
adv]se outcomes1 z det]m9$ "u section   
#e7;h71 & o!r problems t may arise )    
artificial intellig5ce t does n function
 z int5d$2 &  7#g7 det]m9+ :e!r !       
b5efits ( ! use case outweigh ! risks   
by-- 7,a7 evaluat+ ! in=mation le>n$ f  
complet+ ! requirem5ts "u p>agraphs 7#b7
 & 7#c72 &  7,b7 assess+ :e!r !         
requirem5ts "u p>agraphs 7#b7 ?r\gh 7#f7
 h be5 accompli%$ & kn[n risks h be5    
effectively mitigat$4  7e7 ,det]m9ations
  7#a7 ,reque/s = det]m9ation in=mation 
,! head ( an ag5cy %all make available  
to ! relevant congressional committees  
or ! ,director1 ^u reque/1 a det]m9ation
 "u subsection 7d77#g7 & ! respective   
support+ docum5tation4  7#b7            
,reevaluation ,if x is det]m9$ "u       

subsection 7d77#g7 t ! b5efits ( a use  
case d n outweigh ! risks & ! risks _c  
be effectively mitigat$1 ! ag5cy may    
decide to reevaluate ! use case         
indef9itely or until appropriate        
measures "u ! requirem5ts 9 p>agraphs   
7#b7 ?r\gh 7#f7 ( t subsection are      
e/abli%$4  7f7 ,ongo+ monitor+ (        
artificial intellig5ce 9 high risk use  
cases ,beg9n+ on ! date t is #a ye> aft]
 ! date ( enactm5t ( ?is ,act1 ! ,*ief  
,artificial ,intellig5ce ,(fic] ( ea*   
ag5cy %all-- 7#a7 e/abli% a report+     
sy/em1 consi/5t ) section #e7;h71 &     
susp5sion & %ut-d[n protocols = defects 
or adv]se outcomes ( artificial         
intellig5ce1 & conduct ongo+ monitor+1 z
 det]m9$ necess>y by use case2  7#b7    
ov]see ! developm5t & implem5tation (   
ongo+ te/+ & evaluation processes =     
artificial intellig5ce 9 high risk use  
cases to ensure cont9u$ mitigation ( !  
pot5tial risks id5tifi$ 9 ! risk        
evaluation process2 &  7#c7 implem5t a  
process to ensure t risk mitigation     

ef=ts = artificial intellig5ce are      
review$ n less ?an annually & updat$ z  
necess>y to acc\nt = ! developm5t ( new 
v]sions ( artificial intellig5ce &      
*anges to ! risk pr(ile4  7g7 ,*ang$    
risks ,9 ! process ( comply+ )          
subsections 7d7 & 7f71 an ag5cy %all    
det]m9e :e!r an int5d$ use case %\ld be 
paus$1 /opp$ p]man5tly1 or cont9u$ if   
new in=mation *anges ! risks associat$ )
 ! use case or requires new te/+ &      
monitor+ proc$ures "u ^? subsections4   
7h7 ,exception ,! requirem5ts "u        
subsections 7a7 & 7b7 %all n apply to an
 algori?m s(tw>e update1 enhancem5t1    
d]ivative1 correction1 defect1 or fix = 
artificial intellig5ce t does n         
mat]ially *ange ! compliance ( ! deploy]
 ) ! requirem5ts ( ^? subsections1      
unless det]m9$ o!rwise by ! ag5cy ,*ief 
,artificial ,intellig5ce ,(fic]4  7i7   
,waiv]s  7#a7 ,9 g5]al ,! head ( an     
ag5cy1 or #a or m deputy heads ( an     
ag5cy designat$ by ! head ( ! ag5cy1 may
 waive #a or m requirem5ts "u subsection

 7d7 = a specific use case aft] mak+ a  
writt5 det]m9ation1 bas$ ^u a risk      
assessm5t conduct$ by a human1 t        
fulfill+ ! requirem5t or requirem5ts    
w\ld increase risks to safety or rights 
ov]all1 w\ld create an unacceptable     
imp$im5t to critical ag5cy op]ations1 or
 w\ld n be 9 ! national security int]e/s
 ( ! ,unit$ ,/ates4  7#b7 ,requirem5ts  
,a waiv] "u p>agraph 7#a7 %all-- 7,a7   
include1 at a m9imum1 ! reasons = !     
waiv] & a plan to br+ ! specific use    
case into compliance ) subsection 7d7   
be=e ! end ( ! waiv]1 pursuant to       
p>agraph 7#d72 &  7,b7 be submitt$ to ! 
relevant congressional committees & !   
,director n lat] ?an #ae days aft] !    
head ( ! ag5cy grants ! waiv]4  7#c7    
,review ,! ,director %all review ! waiv]
 & relevant docum5tation to det]m9e :e!r
 ! waiv] 0 improp]ly grant$4  7#d7      
,duration ,a waiv] "u p>agraph 7#a7 %all
 be limit$ to a duration ( #a ye>1 at   
:i* "t1 if ! ag5cy is unable to br+ !   
specific use case into compliance )     

subsection 7d71 ! ag5cy %all cease use  
or deploym5t ( ! use case until ! use   
case c be br\ght into compliance ) t    
subsection4  7j7 ,infra/ructure security
 ,! head ( an ag5cy1 9 consultation ) ! 
ag5cy ,*ief ,artificial ,intellig5ce    
,(fic]1 ,*ief ,in=mation ,(fic]1 ,*ief  
,data ,(fic]1 & o!r relevant ag5cy      
(ficials1 %all reevaluate infra/ructure 
security protocols bas$ on ! artificial 
intellig5ce use cases & associat$ risks 
to infra/ructure security ( ! ag5cy4    
7k7 ,compliance deadl9e ,n lat] ?an #bgj
 days aft] ! date ( enactm5t ( ?is ,act1
 ! requirem5ts ( subsections 7a7 ?r\gh  
7j7 ( ?is section %all apply ) respect  
to artificial intellig5ce t is already 9
 use on ! date ( enactm5t ( ?is ,act4   
#h4 ,prohibition on select artificial   
intellig5ce use cases ,no ag5cy may     
develop1 procure1 obta91 or use         
artificial intellig5ce =-- 7#a7 mapp+   
facial biometric features ( an          
individual to assign correspond+ emotion
 & pot5tially take action aga9/ !       

individual2  7#b7 categoriz+ & tak+     
action aga9/ an individual bas$ on      
biometric data ( ! individual to d$uce  
or inf] race1 political op9ion1 religi\s
 or philosophical beliefs1 trade union  
/atus1 sexual ori5tation1 or o!r p]sonal
 trait1 ) ! exception ( d$uc+ or inf]r+ 
age 9 ! context ( inve/igat+ *ild sexual
 abuse2 or  7#c7 evaluat+1 classify+1   
rat+1 or scor+ ! tru/wor?9ess or social 
/&+ ( an individual bas$ on multiple    
data po9ts & "t occurr5ces relat$ to !  
social behavior ( ! individual 9        
multiple contexts or kn[n or pr$ict$    
p]sonal or p]sonality *>act]i/ics 9 a   
mann] t may lead to discrim9atory       
outcomes4  #i4 ,ag5cy procurem5t        
innovation labs  7a7 ,9 g5]al ,ea* ag5cy
 id5tifi$ 9 #ija7;b7 ( title #ca1 ,unit$
 ,/ates ,code1 t does n h a ,procurem5t 
,innovation ,lab on ! date ( enactm5t ( 
?is ,act %\ld consid] e/abli%+ a lab or 
simil> me*anism to te/ new approa*es1   
%>e lessons le>n$1 & promote be/        
practices 9 procurem5t1 includ+ =       

comm]cial te*nology1 su* z artificial   
intellig5ce1 t is tru/wor?y & be/-suit$ 
= ! ne$s ( ! ag5cy4  7b7 ,functions ,!  
functions ( ! ,procurem5t ,innovation   
,lab or simil> me*anism %\ld include--  
7#a7 provid+ lead]%ip support z well z  
capability & capacity to te/1 docum5t1 &
 help ag5cy programs adopt new & bett]  
practices ?r\gh all /ages ( !           
acquisition lifecycle1 beg9n+ ) project 
def9ition & requirem5ts developm5t2     
7#b7 provid+ ! work=ce ( ! ag5cy ) a    
cle> pa?way to te/ & docum5t new        
acquisition practices & facilitate fre% 
p]spectives on exi/+ practices2  7#c7   
help+ programs & integrat$ project teams
 successfully execute em]g+ &           
well-e/abli%$ acquisition practices to  
a*ieve bett] results2 &  7#d7 promot+   
mean+ful collaboration among (fices t   
are responsible = requirem5ts           
developm5t1 contract+ (fic]s1 & o!rs1   
includ+ f9ancial & legal exp]ts1 t %>e 9
 ! responsibility = mak+ a successful   
procurem5t4  7c7 ,/ructure ,an ag5cy    

%\ld consid] plac+ ! ,procurem5t        
,innovation ,lab or simil> me*anism z a 
support+ arm ( ! ,*ief ,acquisition     
,(fic] or ,s5ior ,procurem5t ,executive 
( ! ag5cy & %all h wide latitude 9      
/ructur+ ! ,procurem5t ,innovation ,lab 
or simil> me*anism & 9 address+         
associat$ p]sonnel /aff+ issues4  #aj4  
,multi-phase comm]cial te*nology te/    
program  7a7 ,te/ program ,! head ( an  
ag5cy may1 if desir$1 procure comm]cial 
te*nology ?r\gh a multi-phase te/       
program ( contracts 9 accordance ) ?is  
section4  7b7 ,purpose ,a te/ program   
e/abli%$ "u ?is section %all-- 7#a7     
provide a means by :i* an ag5cy may po/ 
a solicitation1 includ+ = a g5]al ne$ or
 area ( int]e/1 = :i* ! ag5cy int5ds to 
explore comm]cial te*nology solutions & 
= :i* an (f]or may submit a bid bas$ on 
exi/+ comm]cial capabilities ( ! (f]or )
 m9imal modifications or a te*nology t !
 (f]or is develop+ = comm]cial purposes2
 &  7#b7 use phases1 z describ$ 9       
subsection 7c71 to m9imize gov]nm5t risk

 & inc5tivize competition4  7c7         
,contract+ proc$ures ,"u a te/ program  
e/abli%$ "u ?is section1 ! head ( an    
ag5cy may acquire comm]cial te*nology   
?r\gh a competitive evaluation (        
proposals result+ f g5]al solicitation 9
 ! foll[+ phases3 7#a7 ,phase #a        
7viability ( pot5tial solution7         
,selectees may be aw>d$ a portion ( !   
total contract aw>d & h a p]iod (       
p]=mance ( n long] ?an #a ye> to prove !
 m]its1 feasibility1 & te*nological     
b5efit ! proposal w\ld a*ieve = ! ag5cy4
  7#b7 ,phase #b 7major details & scal$ 
te/7 ,selectees may be aw>d$ a portion (
 ! total contract aw>d & h a p]iod (    
p]=mance ( n long] ?an #a ye> to create 
a detail$ timel9e1 e/abli% an agreeable 
intellectual prop]ty own]%ip agreem5t1 &
 implem5t ! proposal on a small scale4  
7#c7 ,phase #c 7implem5tation or        
recycle7  7,a7 ,9 g5]al ,foll[+         
successful p]=mance on phase #a & #b1   
selectees may be aw>d$ up to ! full     
rema9d] ( ! total contract aw>d to      

implem5t ! proposal1 dep5d+ on ! agre$  
^u co/s & ! numb] ( contractors select$4
  7,b7 ,failure to f9d suitable         
selectees ,if no selectees are f\nd     
suitable = phase #c1 ! ag5cy head may   
det]m9e n to make any selections = phase
 #c1 t]m9ate ! solicitation & utilize   
any rema9+ funds to issue a modifi$     
g5]al solicitation = ! same area (      
int]e/4  7d7 ,treatm5t z competitive    
proc$ures ,! use ( g5]al solicitation   
competitive proc$ures = a te/ program "u
 ?is section %all be consid]$ to be use 
( competitive proc$ures z def9$ 9       
section #aeb ( title #da1 ,unit$ ,/ates 
,code4  7e7 ,limitation ,! head ( an    
ag5cy %all n ent] into a contract "u !  
te/ program = an am\nt 9 excess (       
#be1jjj1jjj4  7f7 ,guidance  7#a7 ,f$]al
 ,acquisition ,regulatory ,c\ncil ,!    
,f$]al ,acquisition ,regulatory ,c\ncil 
%all revise ! ,f$]al ,acquisition       
,regulation z necess>y to implem5t ?is  
section1 includ+ requirem5ts = ea* g5]al
 solicitation "u a te/ program to be    

made publicly available ?r\gh a means t 
provides access to ! notice ( ! g5]al   
solicitation ?r\gh ! ,sy/em = ,aw>d     
,managem5t or subsequ5t gov]nm5t-wide   
po9t ( entry1 ) classifi$ solicitations 
po/$ to ! appropriate gov]nm5t portal4  
7#b7 ,ag5cy proc$ures ,! head ( an ag5cy
 may n aw>d contracts "u a te/ program  
until ! ag5cy issues guidance )         
proc$ures = use ( ! au?ority4 ,!        
guidance %all be issu$ 9 consultation ) 
! relevant ,acquisition ,regulatory     
,c\ncil & %all be publicly available4   
7g7 ,sunset ,! au?ority = a te/ program 
"u ?is section %all t]m9ate on ! date t 
is #e ye>s aft] ! date ! ,f$]al         
,acquisition ,regulation is revis$      
pursuant to subsection 7f77#a7 to       
implem5t ! program4  #aa4 ,rese>* &     
developm5t project pilot program  7a7   
,pilot program ,! head ( an ag5cy may1  
if desir$1 c>ry out rese>* & prototype  
projects 9 accordance ) ?is section4    
7b7 ,purpose ,a pilot program e/abli%$  
"u ?is section %all provide a means by  

:i* an ag5cy may-- 7#a7 c>ry out basic1 
appli$1 & advanc$ rese>* & developm5t   
projects2 &  7#b7 c>ry out prototype    
projects t address-- 7,a7 a pro( (      
concept1 model1 or process1 includ+ a   
bus9ess process2  7,b7 rev]se eng9e]+ to
 address obsolesc5ce2  7,c7 a pilot or  
novel application ( comm]cial           
te*nologies = ag5cy mission purposes2   
7,d7 agile developm5t activity2  7,e7 ! 
creation1 design1 developm5t1 or        
demon/ration ( op]ational utility2 or   
7,f7 any comb9ation ( items describ$ 9  
subp>agraphs 7,a7 ?r\gh 7,e74  7c7      
,contract+ proc$ures ,"u a pilot program
 e/abli%$ "u ?is section1 ! head ( an   
ag5cy may c>ry out rese>* & prototype   
projects-- 7#a7 us+ small bus9esses to !
 maximum ext5t practicable2  7#b7 us+   
co/ %>+ arrangem5ts :]e practicable2    
7#c7 tailor+ intellectual prop]ty t]ms &
 conditions relevant to ! project &     
comm]cialization opportunities2 &  7#d7 
ensur+ t su* projects d n duplicate     
rese>* be+ conduct$ "u exi/+ ag5cy      

programs4  7d7 ,treatm5t z competitive  
proc$ures ,! use ( rese>* & developm5t  
contract+ proc$ures "u ?is section %all 
be consid]$ to be use ( competitive     
proc$ures1 z def9$ 9 section #aeb (     
title #da1 ,unit$ ,/ates ,code4  7e7    
,treatm5t z comm]cial te*nology ,! use (
 rese>* & developm5t contract+ proc$ures
 "u ?is section %all be consid]$ to be  
use ( comm]cial te*nology4  7f7         
,foll[-on ,projects or ,phases ,a       
foll[-on contract provid$ = 9 a contract
 opportunity ann\nc$ "u ?is section may1
 at ! discretion ( ! head ( ! ag5cy1 be 
aw>d$ to a p>ticipant 9 ! orig9al       
project or phase if ! orig9al project or
 phase 0 successfully complet$4  7g7    
,limitation ,! head ( an ag5cy %all n   
ent] into a contract "u ! pilot program 
"u ?is section = an am\nt 9 excess (    
#aj1jjj1jjj4  7h7 ,guidance  7#a7 ,f$]al
 acquisition regulatory c\ncil ,! ,f$]al
 ,acquisition ,regulatory ,c\ncil %all  
revise ! ,f$]al ,acquisition ,regulation
 rese>* & developm5t contract+ proc$ures

 z necess>y to implem5t ?is section1    
includ+ requirem5ts = ea* rese>* &      
developm5t project "u a pilot program to
 be made publicly available ?r\gh a     
means t provides access to ! notice ( ! 
opportunity ?r\gh ! ,sy/em = ,aw>d      
,managem5t or subsequ5t gov]nm5t-wide   
po9t ( entry1 ) classifi$ solicitations 
po/$ to ! appropriate gov]nm5t portal4  
7#b7 ,ag5cy proc$ures ,! head ( an ag5cy
 may n aw>d contracts "u a pilot program
 until ! ag5cy1 9 consultation ) !      
relevant ,acquisition ,regulatory       
,c\ncil issues & makes publicly         
available guidance on proc$ures = use ( 
! au?ority4  7i7 ,report+ ,contract     
actions ent]$ into "u ?is section %all  
be report$ to ! ,f$]al ,procurem5t ,data
 ,sy/em1 or any successor sy/em4  7j7   
,sunset ,! au?ority = a pilot program "u
 ?is section %all t]m9ate on ! date t is
 #e ye>s f ! date ! ,f$]al ,acquisition 
,regulation is revis$ pursuant to       
subsection 7h77#a7 to implem5t !        
program4  #ab4 ,developm5t ( tools &    

guidance = te/+ & evaluat+ artificial   
intellig5ce  7a7 ,ag5cy report          
requirem5ts ,9 a mann] specifi$ by !    
,director1 ! ,*ief ,artificial          
,intellig5ce ,(fic] ( ea* ag5cy %all    
id5tify & annually submit to ! ,c\ncil a
 report on ob/acles enc\nt]$ 9 ! te/+ & 
evaluation ( artificial intellig5ce1    
specify+-- 7#a7 ! nature ( ! ob/acles2  
7#b7 ! impact ( ! ob/acles on ag5cy     
op]ations1 mission a*ievem5t1 &         
artificial intellig5ce adoption2  7#c7  
recomm5dations = address+ ! id5tifi$    
ob/acles1 includ+ ! ne$ = p>ticul>      
res\rces or guidance to address c]ta9   
ob/acles2 &  7#d7 a timel9e t w\ld be   
ne$$ to implem5t propos$ solutions4  7b7
 ,c\ncil review & collaboration  7#a7   
,annual review ,n less frequ5tly ?an    
annually1 ! ,c\ncil %all conduct a      
review ( ag5cy reports "u subsection 7a7
 to id5tify common *all5ges &           
opportunities = cross-ag5cy             
collaboration4  7#b7 ,developm5t ( tools
 & guidance  7,a7 ,9 g5]al ,n lat] ?an  

#b ye>s aft] ! date ( enactm5t ( ?is    
,act1 ! ,director1 9 consultation ) !   
,c\ncil1 %all conv5e a work+ gr\p to--  
7i7 develop tools & guidance to assi/   
ag5cies 9 address+ ! ob/acles t ag5cies 
id5tify 9 ! reports "u subsection 7a72  
7ii7 support int]ag5cy coord9ation to   
facilitate ! id5tification & use (      
relevant volunt>y /&>ds1 guidel9es1 &   
o!r cons5sus-bas$ approa*es = te/+ &    
evaluation & o!r relevant areas2 &      
7iii7 address any additional matt]s     
det]m9$ appropriate by ! ,director4     
7,b7 ,work+ gr\p memb]%ip ,! work+ gr\p 
describ$ 9 subp>agraph 7,a7 %all include
 ,f$]al int]discipl9>y p]sonnel1 su* z  
te*nologi/s1 in=mation security &       
cyb]security p]sonnel1 doma9 exp]ts1    
privacy (fic]s1 data (fic]s1 civil      
rights & civil lib]ties (fic]s1         
contract+ (ficials1 legal c\nsel1 cu/om]
 exp]i5ce pr(essionals1 program         
evaluation (fic]s1 & o!rs1 z det]m9$ by 
! ,director4  7#c7 ,in=mation %>+ ,!    
,director1 9 consultation ) ! ,c\ncil1  

%all e/abli% a me*anism = %>+ tools &   
guidance develop$ "u p>agraph 7#b7      
across ag5cies4  7c7 ,congressional     
report+  7#a7 ,9 g5]al ,ea* ag5cy %all  
submit ! annual report "u subsection 7a7
 to ! relevant congressional committees4
  7#b7 ,consolidat$ report ,! ,director1
 9 consultation ) ! ,c\ncil1 may susp5d 
! requirem5t "u p>agraph 7#a7 & submit  
to ! relevant congressional committees a
 consolidat$ report t conveys           
gov]nm5t-wide te/+ & evaluation         
*all5ges1 recomm5d$ solutions1 &        
progress t[>d implem5t+ recomm5dations f
 prior reports develop$ 9 fulfillm5t (  
?is subsection4  7d7 ,extremely l[ risk 
artificial intellig5ce use cases ,n lat]
 ?an #b ye>s aft] ! date ( enactm5t (   
?is ,act1 ! ,*ief ,artificial           
,intellig5ce ,(fic]s ,c\ncil %all submit
 to ! ,director & ! relevant            
congressional committees a report       
outl9+-- 7#a7 a propos$ framework =     
id5tify+ extremely l[ risk artificial   
intellig5ce use cases2 &  7#b7          

opportunities to facilitate ! deploym5t 
& use ( extremely l[ risk artificial    
intellig5ce4  7e7 ,sunset ,! requirem5ts
 "u ?is section %all t]m9ate on ! date t
 is #aj ye>s aft] ! date ( enactm5t (   
?is ,act4  #ac4 ,updates to artificial  
intellig5ce use case inv5tories  7a7    
,am5dm5ts  7#a7 ,advanc+ ,am]ican ,,ai  
,act ,! ,advanc+ ,am]ican ,,ai ,act     
7,public ,law #aag-bfc2 #dj ,u4,s4,c4   
#aacja note7 is am5d$-- 7,a7 9 section  
#gbbc7c71 by /rik+ ! p]iod & ins]t+ & 9 
section #ejjb ( ! ,national ,artificial 
,intellig5ce ,initiative ,act ( #bjbj   
7#ae ,u4,s4,c4 #idja742 &  7,b7 9       
section #gbbe1 by /rik+ subsection 7d74 
7#b7 ,executive ord] #acifj ,!          
provisions ( section #e ( ,executive    
,ord] #acifj 7#he ,f$4 ,reg4 #ghici2    
relat+ to promot+ ! use ( tru/wor?y     
artificial intellig5ce 9 ,f$]al         
,gov]nm5t7 t exempt classifi$ & s5sitive
 use cases f ag5cy inv5tories (         
artificial intellig5ce use cases %all   
cease to h legal effect4  7b7           

,disclosure  7#a7 ,9 g5]al ,! artificial
 intellig5ce inv5tory ( ea* ag5cy %all  
publicly disclose1 subject to applicable
 laws & policies relat+ to ! protection 
( privacy & classifi$ & s5sitive        
in=mation-- 7,a7 :e!r artificial        
intellig5ce 0 develop$ int]nally by !   
ag5cy or procur$ ext]nally1 )\t exclud+ 
any use case on basis t ! use case is   
s5sitive solely because x 0 ext]nally   
procur$2  7,b7 data prov5ance in=mation 
= high risk artificial intellig5ce use  
cases to id5tify ! types ( s\rces ( !   
tra9+ data ( ! artificial intellig5ce1  
includ+ int]nal gov]nm5t data1 public   
data1 comm]cially held data1 or simil>  
data2  7,c7 ! level ( risk at :i* !     
ag5cy has classifi$ ! artificial        
intellig5ce use case & a brief          
explanation = h[ ! det]m9ation 0 made2 &
  7,d7 ! numb] ( artificial intellig5ce 
use cases exclud$ f public report+ z be+
 classifi$ or s5sitive1 & an unclassifi$
 summ>y ( ea* ( ^! use cases4  7#b7     
,updates  7,a7 ,9 g5]al ,:5 an ag5cy    

updates ! public artificial intellig5ce 
use case inv5tory ( ! ag5cy1 ! ag5cy    
%all disclose ! date ( ! modification & 
make *ange logs publicly available &    
accessible4  7,b7 ,guidance ,! ,director
 %all issue guidance to ag5cies t       
describes h[ to appropriately update    
artificial intellig5ce use case         
inv5tories & cl>ifies h[ sub-ag5cies &  
regulatory ag5cies %\ld p>ticipate 9 !  
artificial intellig5ce use case         
inv5tory+ process4  7c7 ,congressional  
report+ ,! head ( ea* ag5cy %all1 ^u    
reque/1 submit to ! relevant            
congressional committees a copy ( !     
annual artificial intellig5ce use case  
inv5tory ( ! ag5cy1 includ+-- 7#a7 ! use
 cases t h be5 id5tifi$ z s5sitive & n =
 public disclosure2 &  7#b7 a classifi$ 
annex ( classifi$ use cases4  7d7       
,comptroll] ,g5]al  7#a7 ,reports       
requir$  7,a7 ,appropriate              
classification ,n lat] ?an #a ye> aft] !
 date ( enactm5t ( ?is ,act1 & annually 
!reaft] = a p]iod ( #e ye>s1 !          

,comptroll] ,g5]al ( ! ,unit$ ,/ates    
%all submit to relevant congressional   
committees a report on :e!r ag5cies are 
appropriately classify+ use cases4  7,b7
 ,gov]nm5t tr5ds ,beg9n+ #b ye>s aft] ! 
date ( enactm5t ( ?is ,act1 & annually  
!reaft]1 ! ,comptroll] ,g5]al ( ! ,unit$
 ,/ates1 %all issue a report1 bas$ on ! 
artificial intellig5ce use cases report$
 9 use case inv5tories & o!r relevant   
in=mation1 t describes tr5ds 9 ! use (  
artificial intellig5ce by ag5cies & !   
impact (-- 7i7 su* use on ! ,f$]al      
work=ce & any co/ sav+s2 &  7ii7 ?is    
,act on ,f$]al contractors t are small  
bus9ess conc]ns1 includ+-- 7,i7 small   
bus9ess conc]ns own$ & controll$ by     
s]vice-disabl$ vet]ans 7z def9$ 9       
section #c ( ! ,small ,bus9ess ,act 7#ae
 ,u4,s4,c4 #fcb772  7,,ii7 qualifi$     
,h,u,b,zone small bus9ess conc]ns 7z    
def9$ 9 section #ca7;b7 ( ! ,small      
,bus9ess ,act 7#ae ,u4,s4,c4            
#feg7;b77#a7772  7,,iii7 socially &     
economically disadvantag$ small bus9ess 

conc]ns 7z def9$ 9 section #h7;a77#d7 ( 
! ,small ,bus9ess ,act 7#ae ,u4,s4,c4   
#fcg7;a77#d7771 &  7,,iv7 small bus9ess 
conc]ns own$ & controll$ by wom5 7z     
def9$ 9 section #c ( ! ,small ,bus9ess  
,act 7#ae ,u4,s4,c4 #fcb774  7#b7       
,appropriate classification ,!          
,comptroll] ,g5]al ( ! ,unit$ ,/ates    
%all det]m9e :e!r ! appropriate level ( 
disclosure ( artificial intellig5ce use 
cases by ag5cies %\ld be includ$ on !   
,high ,risk ,li/ ( ! ,gov]nm5t          
,acc\ntability ,(fice4  ,decemb] #af1   
#bjbd,report$ ) an am5dm5t