,,ii #aah? ,,congress #b;d ,session ,s4 #dgfi ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,july #bd1 #bjbd,mr4 ,hick5loop] 7= himself & ,mrs4 ,capito7 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,comm]ce1 ,sci5ce1 & ,transportation ,a ,,bill ,to require ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology to develop volunt>y guidel9es & specifications = int]nal & ext]nal assurances ( artificial intellig5ce sy/ems1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,validation & ,evaluation = ,tru/wor?y 7,,vet7 ,artificial ,intellig5ce ,act or ! ,,vet ,artificial ,intellig5ce ,act4 #b4 ,purposes ,! purposes ( ?is ,act are-- 7#a7 to develop cons5sus-driv51 evid5ce-bas$ volunt>y guidel9es & specifications = int]nal & ext]nal assurances ?r\gh ! te/+1 evaluation1 validation1 & v]ification ( artificial intellig5ce sy/ems1 z appropriate bas$ on ! int5d$ application1 use-case1 & risk pr(ile ( ! artificial intellig5ce sy/em2 7#b7 to use mean+ful assurance to supplem5t me?odologies us$ to build tru/ 9 artificial intellig5ce sy/ems1 increase adoption ( artificial intellig5ce sy/ems1 & provide = acc\ntability & gov]nance ( artificial intellig5ce sy/ems2 & 7#c7 to fur!r ! goals ( ! ,artificial ,intellig5ce ,risk ,managem5t ,framework1 includ+ any successor framework1 publi%$ by ! ,national ,in/itute ( ,/&>ds & ,te*nology & ! ,artificial ,intellig5ce ,safety ,in/itute pursuant to section #bb;,a7c7 ( ! ,national ,in/itute ( ,/&>ds & ,te*nology ,act 7#ae ,u4,s4,c4 #bgh;h-#a7;c774 #c4 ,def9itions ,9 ?is ,act3 7#a7 ,artificial intellig5ce ,! t]m artificial intellig5ce has ! mean+ giv5 ! t]m 9 section #ejjb ( ! ,national ,artificial ,intellig5ce ,initiative ,act ( #bjbj 7#ae ,u4,s4,c4 #idja74 7#b7 ,artificial intellig5ce sy/em ,! t]m artificial intellig5ce sy/em has ! mean+ giv5 su* t]m 9 section #gbbc ( ! ,advanc+ ,am]ican ,,ai ,act 7#dj ,u4,s4,c4 #aacja note74 7#c7 ,deploy] ,! t]m deploy] means an entity t op]ates an artificial intellig5ce sy/em = int]nal use or = use by a ?ird p>ty4 7#d7 ,develop] ,! t]m develop]-- 7,a7 means an entity t builds1 designs1 codes1 produces1 tra9s1 or owns an artificial intellig5ce sy/em = int]nal use or = use by a ?ird p>ty2 & 7,b7 does n include an entity t is solely a deploy] ( ! artificial intellig5ce sy/em4 7#e7 ,director ,! t]m ,director means ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology4 7#f7 ,ext]nal artificial intellig5ce assurance ,! t]m ext]nal artificial intellig5ce assurance means an indep5d5t & imp>tial evaluation ( an artificial intellig5ce sy/em conduct$ by a nonaffiliat$ ?ird p>ty 9 accordance ) ! volunt>y assurance guidel9es & specifications describ$ 9 section #d or cons5sus-driv5 volunt>y /&>ds1 = ! purpose (-- 7,a7 v]ify+ claims ) respect to ! functionality & te/+ ( ! artificial intellig5ce sy/em1 includ+ v]ify+ :e!r x is fit = its int5d$ purpose2 or 7,b7 id5tify+ any significant error or inconsi/5cy 9 ! te/+1 risk managem5t processes1 or int]nal gov]nance1 any sub/antial vuln]ability1 or any negative societal impact ( ! artificial intellig5ce sy/em4 7#g7 ,int]nal artificial intellig5ce assurance ,! t]m int]nal artificial intellig5ce assurance means an indep5d5t evaluation ( an artificial intellig5ce sy/em conduct$ by ! p>ty be+ evaluat$ ) an int]nal report+ /ructure t enc\rages imp>tial evaluations & prev5ts conflicts ( int]e/1 = ! purpose (-- 7,a7 v]ify+ claims ) respect to ! functionality & te/+ ( ! artificial intellig5ce sy/em1 includ+ v]ify+ :e!r x is fit = its int5d$ purpose2 or 7,b7 id5tify+ any significant error or inconsi/5cy 9 ! te/+1 risk managem5t processes1 or int]nal gov]nance1 any sub/antial vuln]ability1 or any negative societal impact ( ! artificial intellig5ce sy/em4 7#h7 ,nonaffiliat$ ?ird p>ty ,! t]m nonaffiliat$ ?ird p>ty ) respect to ! evaluation ( an artificial intellig5ce sy/em1 means a p]son :o-- 7,a7 is n relat$ by common own]%ip or affiliat$ by common corporate control ) ! develop] or deploy] ( ! artificial intellig5ce sy/em2 7,b7 c demon/rate f9ancial indep5d5ce f ! develop] or deploy] ( ! artificial intellig5ce sy/em2 7,c7 does n employ any individual1 :o is also employ$ by ! develop] or deploy] ( ! artificial intellig5ce sy/em2 & 7,d7 is a qualifi$ evaluator ( artificial intellig5ce sy/ems z det]m9$ by ! volunt>y guidel9es & specifications recomm5d$ "u section #d7;b77#f71 )-- 7i7 demon/rat$ exp]tise 9 relevant te*nical doma9s1 includ+-- 7,i7 data privacy & security pr9ciples2 & 7,,ii7 risk managem5t practices 9 artificial intellig5ce2 & 7ii7 famili>ity ) ! relevant details reg>d+ ! type ( artificial intellig5ce sy/em be+ evaluat$4 7#i7 ,secret>y ,! t]m ,secret>y means ! ,secret>y ( ,comm]ce4 #d4 ,volunt>y assurance guidel9es & specifications = artificial intellig5ce sy/ems 7a7 ,volunt>y guidel9es & specifications = assurance ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,director1 9 collaboration ) public & private sector organizations1 includ+ ! ,national ,sci5ce ,f\ndation & ! ,dep>tm5t ( ,en]gy1 %all develop & p]iodically update z ! ,director consid]s appropriate1 a set ( volunt>y guidel9es & specifications = int]nal artificial intellig5ce assurance & ext]nal artificial intellig5ce assurance4 7b7 ,cont5ts ,! guidel9es & specifications requir$ by subsection 7a7 %all-- 7#a7 id5tify cons5sus-driv51 volunt>y /&>ds = int]nal artificial intellig5ce assurance & ext]nal artificial intellig5ce assurance t address-- 7,a7 safegu>ds = consum] privacy2 7,b7 me?ods to assess & mitigate h>ms to individuals by artificial intellig5ce sy/ems2 7,c7 dataset quality2 7,d7 docum5tation1 disclosure1 & prov5ance communications to ext]nal p>ties2 & 7,e7 gov]nance & process controls2 7#b7 provide guidel9es1 be/ practices1 me?odologies1 proc$ures1 & processes1 z appropriate1 = int]nal artificial intellig5ce assurance & ext]nal artificial intellig5ce assurance t effectively address ! elem5ts li/$ 9 p>agraph 7#a72 7#c7 e/abli% common def9itions & *>act]izations = te/+1 evaluat+1 v]ify+1 & validat+ me?ods = int]nal artificial intellig5ce assurance & ext]nal artificial intellig5ce assurance2 7#d7 recomm5d crit]ia or approa*es = a develop] or deploy] to det]m9e ! frequ5cy & circum/ances "u :i* int]nal artificial intellig5ce assurance & ext]nal artificial intellig5ce assurance activities %\ld be conduct$1 acc\nt+ = ! relevant risk & use-case pr(ile ( ! artificial intellig5ce sy/em1 & any additional circum/ance "u :i* an assurance %\ld be conduct$2 7#e7 recomm5d crit]ia or approa*es = a develop] or deploy] to det]m9e ! scope ( int]nal artificial intellig5ce assurance & ext]nal artificial intellig5ce assurance conduct$ ?r\gh te/+ & evaluat+1 acc\nt+ = ! relevant risk & use-case pr(ile ( ! artificial intellig5ce sy/em1 includ+ ! m9imum in=mation or te*nical res\rces t %\ld be provid$ to ! p>ty conduct+ ! assurance to enable assurance activities2 7#f7 recomm5d ! appropriate qualifications1 exp]tise1 pr(essional lic5s+1 & acc\ntability t a p>ty conduct+ int]nal artificial intellig5ce assurance or ext]nal artificial intellig5ce assurance %\ld h ) respect to-- 7,a7 ! type ( artificial intellig5ce sy/em "u evaluation2 & 7,b7 ! int]nal & ext]nal assurance processes2 7#g7 provide guidance = ! mann] 9 :i* a develop] or deploy] may disclose1 z appropriate1 ! results ( an int]nal or ext]nal assurance or c>ry out corrective actions ) respect to an artificial intellig5ce sy/em foll[+ ! completion ( an int]nal or ext]nal assurance ( su* sy/em1 & guidance on ! mann] 9 :i* a develop] or deploy] may prop]ly docum5t any corrective action tak52 7#h7 align ) ! volunt>y cons5sus /&>ds1 includ+ int]national /&>ds1 id5tifi$ pursuant to p>agraph 7#a7 to ! fulle/ ext5t possible2 7#i7 incorporate ! relevant volunt>y cons5sus /&>ds id5tifi$ pursuant to p>agraph 7#a7 & indu/ry be/ practices to ! fulle/ ext5t possible2 7#aj7 n prescribe or o!rwise require-- 7,a7 ! use ( any specific solution2 or 7,b7 ! use ( any specific in=mation or any communications te*nology product or s]vice2 & 7#aa7 recomm5d me?ods to protect ! confid5tiality ( s5sitive in=mation1 includ+ p]sonal data & propriet>y k ( an artificial intellig5ce sy/em1 t may be obta9$ dur+ ! assurance process4 7c7 ,/akehold] outrea* ,9 develop+ ! volunt>y guidel9es & specifications requir$ by subsection 7a71 ! ,director %all-- 7#a7 solicit public comm5t on at lea/ #a draft ( ! guidel9es & specifications1 & provide a reasonable p]iod ( n less ?an #cj days = ! submission ( comm5ts by int]e/$ /akehold]s2 7#b7 make ea* draft ( ! volunt>y guidel9es & specifications develop$ "u subsection 7a7 available to ! public on ! website ( ! ,national ,in/itute ( ,/&>ds & ,te*nology2 & 7#c7 conv5e work%ops1 r\ndtables1 & o!r public =ums1 z ! ,director consid]s appropriate1 to consult ) relevant /akehold]s 9 indu/ry1 academia1 civil society1 consum] advocacy1 work=ce developm5t organizations1 labor organizations1 con=mance assessm5t bodies1 & any o!r sector ! ,director consid]s appropriate1 on ! developm5t ( ! volunt>y guidel9es & specifications4 7d7 ,publication ,! ,director %all publi% ! volunt>y guidel9es & specifications requir$ by subsection 7a7-- 7#a7 z a /&alone framework or docum5t available to ! public on ! website ( ! ,national ,in/itute ( ,/&>ds & ,te*nology2 or 7#b7 z a compon5t (-- 7,a7 any successor ( ! ,artificial ,intellig5ce ,risk ,managem5t ,framework develop$ & updat$ pursuant to section #bb;,a7c7 ( ! ,national ,in/itute ( ,/&>ds & ,te*nology ,act 7#ae ,u4,s4,c4 #bgh;h-#a7;c772 or 7,b7 any guidance issu$ by ! ,artificial ,intellig5ce ,safety ,in/itute4 #e4 ,qualifications advisory committee 7a7 ,advisory committee ,n lat] ?an #ij days aft] ! date on :i* ! ,director publi%es ! volunt>y guidel9es & specifications requir$ "u section #d7;a71 ! ,secret>y %all e/abli% ! ,artificial ,intellig5ce ,assurance ,qualifications ,advisory ,committee 7ref]r$ to 9 ?is section z ! ,advisory ,committee74 7b7 ,memb]%ip ,! ,secret>y %all appo9t to ! ,advisory ,committee n m ?an #ae individuals ) exp]tise relat+ to artificial intellig5ce sy/ems1 includ+ at lea/ #a repres5tative f ea* ( ! foll[+3 7#a7 ,in/itutions ( high] education4 7#b7 ,organizations develop+ artificial intellig5ce sy/ems4 7#c7 ,organizations deploy+ artificial intellig5ce sy/ems4 7#d7 ,organizations assess+ artificial intellig5ce sy/ems4 7#e7 ,consum]s or consum] advocacy gr\ps4 7#f7 ,public heal? organizations4 7#g7 ,public safety organizations4 7#h7 ,civil rights organizations4 7#i7 ,pr(essional accr$itation organizations4 7#aj7 ,work=ce developm5t organizations4 7#aa7 ,labor organizations4 7c7 ,duties ,! ,advisory ,committee %all-- 7#a7 review & assess case /udies f entities t provide lic5sure1 c]tification1 or accr$itation to indep5d5t organizations ) a prim>y mission ( v]ify+ compliance ) applicable /atutes1 regulations1 /&>ds1 or guidel9es2 & 7#b7 det]m9e ! applicability ( ! case /udies review$ & assess$ "u p>agraph 7#a7 to ! developm5t1 ma9t5ance1 & use ( artificial intellig5ce sy/ems = ! purpose ( develop+ recomm5dations "u subsection 7d74 7d7 ,recomm5dations ,n lat] ?an #a ye> aft] ! date on :i* ! ,secret>y e/abli%es ! ,advisory ,committee "u ?is section1 ! ,advisory ,committee %all submit to ! ,secret>y & ,congress & make publicly available a report t includes recomm5dations = ! ,secret>y to consid] reg>d+-- 7#a7 ! qualifications1 exp]tise1 pr(essional lic5s+1 indep5d5ce1 & acc\ntability t a p>ty conduct+ an assurance ( an artificial intellig5ce sy/em %\ld h1 includ+ ) respect to ! type ( artificial intellig5ce sy/em "u evaluation & ! int]nal & ext]nal assurance processes2 & 7#b7 :e!r accr$itation = int]nal artificial intellig5ce assurance & ext]nal artificial intellig5ce assurance c be met ?r\gh a comb9ation ( exi/+ lic5sure1 c]tification1 or accr$itation programs4 7e7 ,t]m9ation ,! ,advisory ,committee %all t]m9ate n lat] ?an #a ye> aft] ! date on :i* ! ,advisory ,committee submits ! recomm5dations requir$ "u subsection 7d74 #f4 ,/udy & report on entities t conduct assurances ( artificial intellig5ce sy/ems 7a7 ,/udy ,n lat] ?an #ij days aft] ! date on :i* ! ,director publi%es ! volunt>y guidel9es & specifications requir$ "u section #d7;a71 ! ,secret>y %all comm5ce a /udy to evaluate ! capabilities ( ! sector ( entities t conduct int]nal artificial intellig5ce assurances & ext]nal artificial intellig5ce assurances4 7b7 ,consid]ations ,9 c>ry+ out ! /udy requir$ by subsection 7a71 ! ,secret>y %all-- 7#a7 assess ! capabilities ( ! sector ( entities describ$ 9 subsection 7a7 ) respect to p]sonnel1 te*nical tools1 evaluation me?ods1 comput+ infra/ructure1 & physical infra/ructure & :e!r su* capabilities are adequate = provid+ int]nal artificial intellig5ce assurances or ext]nal artificial intellig5ce assurances t comport ) ! volunt>y guidel9es & specifications requir$ "u section #d7;a72 7#b7 review ! features1 be/ practices1 & safegu>ds employ$ by su* entities to ma9ta9 ! integrity ( confid5tial or propriet>y in=mation ( a develop] or deploy] dur+ an int]nal artificial intellig5ce assurance or an ext]nal artificial intellig5ce assurance2 7#c7 assess ! m>ket dem& = int]nal artificial intellig5ce assurances & ext]nal artificial intellig5ce assurances & ! availability ( su* assur]s2 & 7#d7 assess ! feasibility ( lev]ag+ an exi/+ facility accr$it$ by ! ,director "u ! ,national ,volunt>y ,laboratory ,accr$itation ,program e/abli%$ "u section #bhe ( title #ae1 ,code ( ,f$]al ,regulations1 to conduct ext]nal assurances ( artificial intellig5ce sy/ems4 7c7 ,report ,n lat] ?an #a ye> aft] ! date on :i* ! ,secret>y comm5ces ! /udy requir$ by subsection 7a71 ! ,secret>y %all submit to ! appropriate committees ( ,congress & ! head ( any ,f$]al ag5cy t ! ,secret>y consid]s relevant1 a report t conta9s ! results ( ! /udy requir$ by subsection 7a71 includ+-- 7#a7 recomm5dations = improv+ ! capabilities & ! availability ( ! entities assess$ 9 ! /udy2 7#b7 descriptions ( ! features1 be/ practices1 & safegu>ds ( ! entities /udi$ & ! effectiv5ess ( su* features1 practices1 or safegu>ds at implem5t+ ! volunt>y guidel9es & specifications requir$ "u section #d7;a7 & at ma9ta9+ ! integrity ( confid5tial & propriet>y in=mation1 z describ$ "u subsection 7b77#b72 & 7#c7 any conclusions drawn f ! assessm5t ( ! facilities describ$ 9 subsection 7b77#d74 7d7 ,appropriate committees ( ,congress def9$ ,9 ?is section1 ! t]m ! appropriate committees ( ,congress means-- 7#a7 ! ,committee ( ,comm]ce1 ,sci5ce1 & ,transportation ( ! ,s5ate2 & 7#b7 ! ,committee on ,sci5ce1 ,space1 & ,te*nology ( ! ,h\se ( ,repres5tatives4