,,ii #aai? ,,congress #b;d ,session ,s4 #ejfa ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,july #ba1 #bjbf,mr4 ,w>n] introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,comm]ce1 ,sci5ce1 & ,transportation ,a ,,bill ,to improve ! track+ & process+ ( security & safety incid5ts & risks associat$ ) artificial intellig5ce1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,secure ,artificial ,intellig5ce ,developm5t ,act ( #bjbf or ! ,secure ,a4,i4 ,developm5t ,act ( #bjbf4 #b4 ,def9itions ,9 ?is ,act3 7#a7 ,adv]s>ial-artificial intellig5ce ,! t]m adv]s>ial-artificial intellig5ce means te*niques or proc$ures to extract in=mation ab\t ! behavior or *>act]i/ics ( an artificial intellig5ce sy/em1 or to le>n h[ to manipulate an artificial intellig5ce sy/em1 9 ord] to subv]t ! confid5tiality1 integrity1 or availability ( an artificial intellig5ce sy/em or adjac5t sy/em4 7#b7 ,artificial intellig5ce ,! t]m artificial intellig5ce has ! mean+ giv5 ! t]m 9 section #ejjb ( ! ,national ,artificial ,intellig5ce ,initiative ,act ( #bjbj 7#ae ,u4,s4,c4 #idja74 7#c7 ,artificial intellig5ce safety incid5t ,! t]m artificial intellig5ce safety incid5t means an ev5t t mat]ially increases ! risk t op]ation ( an artificial intellig5ce sy/em leads to a /ate 9 :i* human life1 heal?1 prop]ty1 or ! environm5t is endang]$4 7#d7 ,artificial intellig5ce security incid5t ,! t]m artificial intellig5ce security incid5t means an ev5t t mat]ially increases-- 7,a7 ! risk t op]ation ( an artificial intellig5ce sy/em occurs 9 a way t enables ! unau?oriz$ extraction ( in=mation ab\t ! behavior or *>act]i/ics ( an artificial intellig5ce sy/em by an unau?oriz$ p>ty2 or 7,b7 ! ability to manipulate an artificial intellig5ce sy/em 9 ord] to subv]t ! confid5tiality1 integrity1 or availability ( an artificial intellig5ce sy/em or adjac5t sy/em4 7#e7 ,artificial intellig5ce security vuln]ability ,! t]m artificial intellig5ce security vuln]ability means a weakness 9 an artificial intellig5ce sy/em t c\ld be exploit$ by a ?ird p>ty to subv]t1 )\t au?orization1 ! confid5tiality1 integrity1 or availability ( an artificial intellig5ce sy/em1 includ+ ?r\gh te*niques su* z-- 7,a7 data poison+2 7,b7 evasion attacks2 7,c7 privacy-bas$ attacks2 7,d7 model !ft or extraction attacks2 7,e7 attacks design$ to circumv5t or degrade ! safety1 alignm5t1 or access control me*anisms ( an artificial intellig5ce sy/em2 & 7,f7 adv]s>ial ma*9e le>n+ attacks z describ$ 9 ,national ,in/itute ( ,/&>ds & ,te*nology ,tru/wor?y & ,responsible ,artificial ,intellig5ce #ajj-b;e#bjbe 7relat+ to ,adv]s>ial ,ma*9e ,le>n+71 or successor publication4 #c4 ,enabl+ te/+ ( fronti] artificial intellig5ce models prior to public release 7a7 ,def9itions ,9 ?is section3 7#a7 ,bo>d ,! t]m ,bo>d means ! ,artificial ,intellig5ce ,risk ,bo>d e/abli%$ "u subsection 7b77#a74 7#b7 ,critical infra/ructure ,! t]m critical infra/ructure has ! mean+ provid$ 9 section #ajaf7;e7 ( ! ,,usa ,patriot ,act ( #bjja 7#db ,u4,s4,c4 #eaie;c7e774 7#c7 ,fronti] artificial intellig5ce model ,! t]m fronti] artificial intellig5ce model means an artificial intellig5ce model1 or sy/em comb9+ multiple artificial intellig5ce models1 t exhibits or c\ld be modifi$ to exhibit high levels ( p]=mance at tasks t pose a s]i\s risk to national security1 national economic security1 or public heal? or safety4 7#d7 ,in/itute ,! t]m ,in/itute means ! ,national ,in/itute ( ,/&>ds & ,te*nology4 7#e7 ,secret>y ,! t]m ,secret>y means ! ,secret>y ( ,comm]ce4 7b7 ,! ,artificial ,intellig5ce ,risk ,bo>d 7#a7 ,e/abli%m5t 7,a7 ,9 g5]al ,n lat] ?an #ij days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y %all e/abli% )9 ! ,in/itute a bo>d to address artificial intellig5ce risks4 7,b7 ,designation ,! bo>d e/abli%$ "u subp>agraph 7,a7 %all be kn[n z ! ,artificial ,intellig5ce ,risk ,bo>d4 7#b7 ,memb]%ip 7,a7 ,composition ,! ,bo>d %all be compos$ ( memb]s :o are appo9t$ z foll[s3 7i7 ,"o or m memb]s select$ by ! ,director ( ! ,national ,in/itute ( ,/&>ds4 7ii7 ,"o or m memb]s select$ by ! ,secret>y4 7iii7 ,"o or m memb]s select$ by ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy4 7iv7 ,"o or m memb]s select$ by ! ,director ( ! ,national ,security ,ag5cy4 7v7 ,"o or m memb]s select$ by ! ,secret>y ( ! ,treasury4 7,b7 ,nongov]nm5tal exp]ts ,9 addition to ! memb]s ( ! ,bo>d appo9t$ "u subp>agraph 7,a71 ! ,secret>y %all appo9t memb]s :o are n (fic]s or employees ( ! ,f$]al ,gov]nm5t & :o ! ,secret>y selects f among individuals :o-- 7i7 are lead+ te*nical exp]ts n affiliat$ ) a develop] or provid] ( artificial intellig5ce sy/ems2 7ii7 are lead+ te*nical exp]ts affiliat$ ) develop]s or provid]s ( artificial intellig5ce sy/ems2 7iii7 are individuals ) exp]tise 9 develop+ evaluations to te/ artificial intellig5ce models2 & 7iv7 h k or exp]tise t ! ,secret>y det]m9es w\ld fur!r ! purpose ( ! duties ( ! ,bo>d4 7#c7 ,t]ms & vacancies 7,a7 ,t]ms ,ea* memb] ( ! ,bo>d %all s]ve #a t]m ( n long] ?an #c ye>s & may be reappo9t$ = #a successive t]m ( n long] ?an #c ye>s4 7,b7 ,vacancy replacem5t ,! memebrs ( ! ,bo>d %all develop a vacancy replacem5t proc$ure t includes-- 7i7 = vacancies occurr+ due to ! end ( a memb]'s t]m1 a vote n lat] ?an #ij days be=e ! la/ day ( ! memb]'s t]m2 & 7ii7 = vacancies occurr+ "u subp>agraph 7,c7 or = any o!r reason1 ! *air ( ! ,bo>d %all nom9ate a replacem5t f ! same /akehold] category "u p>agraph 7#b71 to ! ext5t practicable1 z ! memb] creat+ ! vacancy1 subject to approval by a majority vote ( ! memb]s ( ! ,bo>d4 7,c7 ,removal ,any memb] :o fails to comply ) ! conflict ( int]e/ policy adopt$ pursuant to p>agraph 7#e77;,d7 %all be remov$ f ! ,bo>d4 7,d7 ,*air ,! *air ( ! ,bo>d %all be select$ by a majority vote among a quorum ( ! memb]s appo9t$ "u p>agraph 7#b7 & %all s]ve n m ?an #a two-ye> t]m4 7#d7 ,memb] access to classifi$ in=mation 7,a7 ,access 7i7 ,9 g5]al ,n lat] ?an #fj days aft] ! date on :i* a memb] is fir/ appo9t$ to ! ,bo>d & be=e ! memb] is grant$ access to any classifi$ in=mation necess>y to p>ticipate 9 a clos$ session pursuant to p>agraph 7#e77;,f71 ! ,secret>y %all det]m9e1 = ! purposes ( ! ,bo>d1 if ! memb] %\ld be re/rict$ f review+1 discuss+1 or possess+ classifi$ in=mation4 7ii7 ,managem5t ,access to classifi$ in=mation %all be manag$ 9 accordance ) ,executive ,ord] #acebf 7#ej ,u4,s4,c4 #cafa note2 relat+ to classifi$ national security in=mation71 or any subsequ5t correspond+ ,executive ord]4 7iii7 ,cle>ance requirem5t ,! ,secret>y %all sponsor ea* memb] ( ! ,bo>d = a security cle>ance at ! ,top ,secret level ) access to s5sitive comp>tm5t$ in=mation1 z appropriate1 = ! purposes ( p>ticipat+ 9 c>ry+ out ! duties ( ! ,bo>d4 7iv7 ,cle>ance requirem5t ,ea* memb] ( ! ,bo>d %all obta9 a security cle>ance unless d5i$ by ! appropriate au?orities or if ! ,secret>y det]m9es a memb] %\ld be re/rict$ f review+1 discuss+1 or possess+ classifi$ in=mation4 ,9 ei!r in/ance1 su* memb] %all be remov$ f ! ,bo>d & a new memb] %all be appo9t$ pursuant to ! vacancy proc$ures "u p>agraph 7#c77;,b7 to replace su* remov$ memb]4 7,b7 ,protection ( in=mation ,a memb] ( ! ,bo>d grant$ access to classifi$ in=mation %all protect ! classifi$ in=mation 9 accordance ) ! applicable requirem5ts = ! p>ticul> level ( classification ( ! in=mation4 7,c7 ,rule ( con/ruction ,no?+ 9 ?is p>agraph %all be con/ru$ to affect ! exi/+ security cle>ance ( a memb] ( ! ,bo>d or ! au?ority ( a ,f$]al ag5cy to provide or d5y a memb] ( ! ,bo>d access to any specific pieces ( classifi$ in=mation4 7#e7 ,proc$ures 7,a7 ,designat$ f$]al (fic] ,! ,secret>y %all designate a ,f$]al (fic] or employee to s]ve z ! designat$ ,f$]al (fic] ( ! ,bo>d1 consi/5t ) ! requirem5ts ( *apt] #aj ( title #e1 ,unit$ ,/ates ,code 7common kn[n z ! ,f$]al ,advisory ,committee ,act74 7,b7 ,initial meet+ & bylaws ,n lat] ?an #abj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,bo>d %all conv5e & e/abli% bylaws t-- 7i7 gov]n quorum & vot+ rules1 includ+ implem5tation ( ! decisionmak+ majority vot+ requirem5t specifi$ 9 p>agraph 7#e77;,c77ii72 & 7ii7 set deliv]able timel9es & meet+ s*$ules4 7,c7 ,op]at+ proc$ures ,unless o!rwise specifi$1 ! ,bo>d %all adopt writt5 proc$ures gov]n+ its meet+s1 consi/5t ) *apt] #aj ( title #e1 ,unit$ ,/ates ,code1 t include-- 7i7 requirem5ts = public notice ( meet+s & ! ma9t5ance ( records & m9utes2 7ii7 decision mak+ by majority vote ( ^? pres5t & vot+2 7iii7 au?orization = ! e/abli%m5t ( subgr\ps z necess>y1 subject to ! approval ( ! *air ( ! ,bo>d2 & 7iv7 approval ( ! meet+ ag5das by ! *air 9 consultation ) ! designat$ ,f$]al (fic] "u subp>agraph 7,a7 to ensure compliance ) applicable laws4 7,d7 ,conflict-(-int]e/ policy 7i7 ,9 g5]al ,! ,bo>d %all adopt & en=ce a writt5 conflict ( int]e/ policy to ensure t memb]s ( ! ,bo>d h a fiduci>y responsibility to ! ,bo>d1 a duty to report conflicts ( int]e/1 includ+ ! appe>ance ( a conflict ( int]e/1 & d n p>ticipate 9 delib]ations or votes f :i* !y p]sonally or _! employ] w\ld directly & mat]ially b5efit4 7ii7 ,requir$ disclosures ,! policy "u clause 7i7 %all require ea* memb] to publicly disclose all relevant f9ancial & employm5t relation%ips & include recusal proc$ures 9 ! ev5t ( a conflict4 7iii7 ,records ,! designat$ ,f$]al (fic] "u subp>agraph 7,a7 %all ma9ta9 records ( disclosures "u clause 7ii7 ( ?is subp>agraph & make summ>ies ( ! disclosures available to ! ,secret>y4 7,e7 ,?reat in=mation access ,! ,director ( ,national ,intellig5ce1 9 coord9ation ) ! heads ( o!r appropriate ,f$]al entities1 %all ensure t ! ,bo>d has access to relevant cyb]security ?reat in=mation1 includ+ ?r\gh clos$ or classifi$ brief+s or ! provision ( classifi$ in=mation1 :5 appropriate4 7,f7 ,clos$ sessions ,not)/&+ section #ajji ( title #e1 ,unit$ ,/ates ,code1 ! ,bo>d may hold clos$ or re/rict$-access sessions :5 ! ,secret>y det]m9es t ! matt]s to be discuss$ involve any ( ! foll[+3 7i7 ,classifi$ in=mation4 7ii7 ,s5sitive cyb]security vuln]abilities4 7iii7 ,?reat in=mation4 7iv7 ,propriet>y bus9ess in=mation4 7v7 ,o!r in=mation exempt f public disclosure "u section #eeb ( title #e1 ,unit$ ,/ates ,code4 7#f7 ,duties 7,a7 ,9 g5]al ,! ,bo>d %all-- 7i7 develop a process to p]=m te*nical evaluations to det]m9e :at capabilities or comb9ation ( capabilities con/itute high levels ( p]=mance at tasks t pose a s]i\s risk to national security1 national economic security1 or public heal? or safety2 & 7ii7 develop be/ practices1 includ+-- 7,i7 /&>dize =mats & processes = publi%+ model c>ds ) te*nical details ( artificial intellig5ce sy/ems2 7,,ii7 recomm5dations = ma9ta9+ cyb]security measures = develop]s or provid]s ( artificial intellig5ce sy/ems2 7,,iii7 processes & metrics = develop]s or provid]s ( artificial intellig5ce sy/ems to use to evaluate risks f employees or o!r p]sonnel :o h access to artificial intellig5ce sy/ems develop$ or 9 developm5t by develop]s or provid]s ( artificial intellig5ce sy/ems2 & 7,,iv7 recomm5dations on appropriate f9ancial & o!r res\rc+ = develop]s or provid]s ( artificial intellig5ce sy/ems to robu/ly engage 9 safety & security rese>* focus$ on ! deploym5t ( fronti] artificial intellig5ce models4 7,b7 ,p]iodic reassessm5t ( te*nical evaluations & be/ practices ,! ,bo>d %all p]iodically reassess ! te*nical evaluations & be/ practices ! ,bo>d develops "u ?is subsection4 7c7 ,requirem5t t provid]s ( fronti] artificial intellig5ce models give access to ,national ,security ag5cy be=e public release ,n lat] ?an #ba cal5d> days be=e a provid] introduces into int]/ate or =eign comm]ce a fronti] artificial intellig5ce model1 ! provid] %all make available to ! ,artificial ,intellig5ce ,security ,c5t]1 e/abli%$ by ! ,director ( ! ,national ,security ,ag5cy "u section #fejd ( ! ,intellig5ce ,au?orization ,act = ,fiscal ,ye> #bjbe 7division ,f ( ,public ,law #aah-aei2 #ej ,u4,s4,c4 #cfjb note71 access to ! fronti] artificial intellig5ce model1 includ+ model's weights1 configuration files1 runtimes1 or s(tw>e libr>ies necess>y to op]ate ! fronti] artificial intellig5ce model4 7d7 ,fronti] artificial intellig5ce model regi/ry 7#a7 ,e/abli%m5t ( regi/ry ,n lat] ?an #ij days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology %all e/abli% a regi/ry ( fronti] models t are available to ! public4 7#b7 ,rules & proc$ures ,9 e/abli%+ ! regi/ry "u p>agraph 7#a71 ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology %all e/abli% rules & proc$ures =-- 7,a7 a provid] ( a fronti] artificial intellig5ce model to regi/] ! fronti] artificial intellig5ce model2 7,b7 a provid] ( a fronti] artificial intellig5ce model to conte/ ! ne$ = regi/]+ ! fronti] artificial intellig5ce model2 7,c7 remov+ a fronti] artificial intellig5ce model f ! regi/ry2 7,d7 a provid] ( a fronti] artificial intellig5ce model to atte/ t ! provid] submitt$ ! fronti] artificial intellig5ce model to ! te/-b$ e/abli%$ "u section #fejd7;e7 ( ! ,intellig5ce ,au?orization ,act = ,fiscal ,ye> #bjbe 7division ,f ( ,public ,law #aah-aei2 #ej ,u4,s4,c4 #cfjb note71 z am5d$ by subsection 7e72 & 7,e7 su* o!r purposes ! ,director deems necess>y4 7#c7 ,obligation to regi/] ,ea* provid] ( a fronti] artificial intellig5ce model %all regi/] t fronti] artificial intellig5ce model ) ! regi/ry e/abli%$ "u p>agraph 7#a7 be=e introduc+ ! fronti] artificial intellig5ce model into int]/ate or =eign comm]ce4 7e7 ,en=cem5t2 ability ,to cure 7#a7 ,ref]rals = en=cem5t ,9 any case 9 :i* ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology det]m9es t a fronti] artificial intellig5ce model has be5 introduc$ into int]/ate or =eign comm]ce by a provid] ( ! fronti] artificial intellig5ce 9 violation ( subsection 7c71 ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology %all notify ! ,attorney ,g5]al4 7#b7 ,en=cem5t ,! ,attorney ,g5]al %all en=ce ?is section4 7#c7 ,p5alty ,:oev] violates subsection 7c7 %all be f9$ an am\nt equal to n less ?an #ajj1jjj p] day = ea* day dur+ :i* a fronti] artificial intellig5ce model controll$ by t p]son is available ?r\gh int]/ate & =eign comm]ce )\t hav+ obta9$ ! volunt>y security guidance issu$ "u section #fejd7;e77#c7 ( ! ,intellig5ce ,au?orization ,act = ,fiscal ,ye> #bjbe 7division ,f ( ,public ,law #aah-aei2 #ej ,u4,s4,c4 #cfjb note71 z am5d$ by subsection 7f74 7#d7 ,"r to cure 7,a7 ,notification ,prior to comm5d+ an en=cem5t action aga9/ a provid] ( a fronti] artificial intellig5ce model = violat+ subsection 7c71 ! ,attorney ,g5]al %all notify ! provid] & all[ ! provid] #g cal5d> days foll[+ ! notice ( violation = ! violator to come into compliance pursuant to subp>agraph 7,b74 7,b7 ,process to cure ,9 ord] = a provid] ( a fronti] artificial intellig5ce model to come into compliance pursuant to ?is subp>agraph1 ! provid] %all demon/rate to ! ,attorney ,g5]al t ! provid] has-- 7i7 )drawn f int]/ate & =eign comm]ce ! fronti] artificial intellig5ce model t gave rise to ! violation ( subsection 7c72 & 7ii7 giv5 to ! ,national ,security ,ag5cy access to ! fronti] artificial intellig5ce model pursuant to subsection 7c74 7f7 ,national ,security ,ag5cy rese>*-,te/-,b$ ,section #fejd ( ! ,intellig5ce ,au?orization ,act = ,fiscal ,ye> #bjbe 7division ,f ( ,public ,law #aah-aei2 #ej ,u4,s4,c4 #cfjb note7 is am5d$-- 7#a7 9 subsection 7c7-- 7,a7 by r$esignat+ p>agraph 7#d7 z p>agraph 7#e72 & 7,b7 by ins]t+ aft] p>agraph 7#c7 ! foll[+ new p>agraph 7#d73 7#c7 ,mak+ available a rese>* te/-b$ to private sector1 ,f$]al & qualifi$ indep5d5t exp]t p>ticipants1 on a subsidiz$ basis1 to engage 9 artificial intellig5ce security rese>*1 includ+ ?r\gh ! secure provision ( access 9 a secure environm5t = pre-deploym5t te/+ ( any fronti] artificial intellig5ce model prior to public release4 2 7#b7 by r$esignat+ subsection 7e7 z subsection 7f72 & 7#c7 by ins]t+ aft] subsection 7d7 ! foll[+3 7e7 ,te/-,b$ requirem5ts 7#a7 ,access & t]ms ( usage 7,a7 ,outside p>ticipation ,! ,director %all e/abli% a process by :i* critical infra/ructure op]ators1 z well private sector entities t develop or ma9ta9 in=mation sy/ems utiliz$ by critical infra/ructure op]ators1 %all access a secure te/-b$ = ! purpose ( te/+ & evaluat+ ! impact ( fronti] artificial intellig5ce models on in=mation sy/ems ma9ta9$ by critical infra/ructure op]ators prior to public release or di/ribution ( su* models4 7,b7 ,rese>*] access ,! ,director %all e/abli% t]ms ( usage gov]n+ access to ! te/-b$ made available "u subsection 7c77#d71 ) limitations on rese>*] publication to ! ext5t necess>y to protect classifi$ in=mation or propriet>y in=mation provid$ by private sector p>ticipants4 7,c7 ,availability to f$]al ag5cies ,! ,director %all ensure t ! te/-b$ made available "u subsection 7c77#d7 is also made available to o!r ,f$]al ag5cies on a co/-recov]y basis4 7#b7 ,use ( c]ta9 infra/ructure & o!r res\rces ,9 c>ry+ out subsection 7c77#d71 ! ,director %all lev]age1 to ! greate/ ext5t practicable1 infra/ructure & o!r res\rces provid$ "u section #e4b ( ,executive ,ord] #adaaj 7#hh ,f$4 ,reg4 #geaia2 relat+ to safe1 secure1 & tru/wor?y developm5t & use ( artificial intellig5ce74 7#c7 ,volunt>y security guidance ,! ,director %all %>e relevant guidance1 in=m$ by pre-deploym5t te/+ 9 ! secure te/-b$ environm5t id5tifi$ 9 subsection 7c71 to in=m volunt>y v5dor actions to mitigate aga9/ pot5tial security ?reats to su* models1 or ! ability ( =eign actors to utilize su* models = comput] network exploitation campaigns aga9/ in=mation sy/ems utiliz$ by critical infra/ructure op]ators1 ! design or developm5t ( weapons sy/ems1 or to fur!r =eign surveillance capabilities4 4 #d4 ,database = artificial intellig5ce security & safety incid5ts & risks 7a7 ,volunt>y track+ ( artificial intellig5ce security & artificial intellig5ce safety incid5ts 7#a7 ,volunt>y submissions ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology %all1 9 coord9ation ) ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy1 e/abli% me*anisms by :i* private sector entities1 public sector organizations1 civil society gr\ps1 & academic rese>*]s may volunt>ily %>e in=mation ) ! ,national ,in/itute ( ,/&>ds & ,te*nology on confirm$ or suspect$ artificial intellig5ce security or artificial intellig5ce safety incid5ts1 9 a mann] t pres]ves confid5tiality ( any affect$ p>ty1 :i* %all-- 7,a7 lev]age1 to ! greate/ ext5t possible1 /&>diz$ disclosure & incid5t description =mats2 7,b7 develop processes to associate reports p]ta9+ to ! same incid5t ) a s+le incid5t id5tifi]2 7,c7 e/abli% classification1 in=mation retrieval1 & report+ me*anisms t suffici5tly diff]5tiate betwe5 artificial intellig5ce security incid5ts & artificial intellig5ce safety incid5ts2 & 7,d7 create appropriate taxonomies to classify incid5ts bas$ on relevant *>act]i/ics1 impact1 or o!r relevant crit]ia4 7#b7 ,publicly accessible database 7,a7 ,e/abli%m5t ( database requir$ ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,director ( ! ,in/itute %all1 9 coord9ation ) ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy1 e/abli% a publicly accessible database ( artificial intellig5ce security incid5ts & artificial intellig5ce safety incid5ts4 7,b7 ,review & population ( database ,^u receipt ( relevant in=mation on an artificial intellig5ce security or artificial intellig5ce safety incid5t "u p>agraph 7#a71 ! ,director ( ! ,in/itute %all review ! in=mation & det]m9e :e!r ! describ$ incid5t con/itutes an artificial intellig5ce security or artificial intellig5ce safety risk appropriate = inclusion 9 ! database develop$ & e/abli%$ "u subp>agraph 7,a74 7,c7 ,id5tification ( causal factors ,:5 mak+ a det]m9ation "u subp>agraph 7,b71 ! ,director ( ! ,in/itute %all id5tify causal factors = ! artificial intellig5ce security incid5t or ! artificial intellig5ce safety incid5t1 includ+-- 7i7 ! artificial intellig5ce sy/em2 7ii7 ! deploym5t ( ! artificial intellig5ce sy/ems2 & 7iii7 practices relat$ to ! op]ation ( ! artificial intellig5ce sy/em1 includ+ misuse ( ! artificial intellig5ce sy/em4 7,d7 ,priorities ,9 evaluat+ in=mation "u subp>agraph 7,b7 & det]m9+ "u su* subp>agraph :e!r to include a report ( an incid5t 9 ! database requir$ by subp>agraph 7,a71 ! ,director %all prioritize inclusion 9 ! database ( cases 9 :i* a describ$ incid5t-- 7i7 describes an artificial intellig5ce sy/em us$ 9 critical infra/ructure or safety-critical sy/ems2 7ii7 w\ld result 9 a high-sev]ity or cata/rophic impact to ! p or economy ( ! ,unit$ ,/ates2 or 7iii7 includes an artificial intellig5ce sy/em widely us$ 9 comm]cial or public sector contexts 9 ! ,unit$ ,/ates4 7#c7 ,exemption f disclosure2 reports & anonymity 7,a7 ,anonymity ,! ,director %all populate ! volunt>y database develop$ & e/abli%$ "u p>agraph 7#b77;,a7 ) incid5ts bas$ on public reports & in=mation %>$ us+ ! me*anism e/abli%$ pursuant to p>agraph 7#a71 ensur+ t any incid5t description suffici5tly anonymizes ^? affect$1 unless ^? :o are affect$ h cons5t$ to _! names be+ includ$ 9 ! database4 7,b7 ,exemption f disclosure ,any in=mation %>$ us+ ! me*anism e/abli%$ pursuant to p>agraph 7#a7-- 7i7 %all be exempt f disclosure & )held1 unless an affect$ p>ty cons5ts to ! inclusion ( _! names 9 ! database z provid$ = "u subp>agraph 7,a71 f ! public1 pursuant to section #eeb7;b77#c77;,b7 ( title #e1 ,unit$ ,/ates ,code1 & any o!r provision ( ,unit$ ,/ates law or law ( any ,/ate1 political subdivision or ag5cy !re(1 or ,tribe requir+ disclosure ( in=mation or records2 & 7ii7 %all n be deem$ a waiv] ( any applicable privilege or protection1 includ+ trade secret protection4 7,c7 ,consultation requir$ ,be=e publi%+ in=mation reg>d+ artificial intellig5ce safety incid5t "u p>agraph 7#b77;,b71 ! ,director %all consult ) ! develop] or provid] ( ! artificial intellig5ce sy/em involv$ 9 an incid5t4 7b7 ,mat]ial risk guidance ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology %all1 9 coord9ation ) ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy1 publi% nonb9d+ guidance t provides illu/rative crit]ia & examples = det]m9+ :5 an ev5t mat]ially increases a risk = purposes ( p>agraphs 7#c7 & 7#d7 ( section #b4 #e4 ,updat+ processes & proc$ures relat+ to cyb]security vuln]abilities 7a7 ,def9itions ,9 ?is section3 7#a7 ,common ,vuln]abilities & ,exposures ,program ,! t]m ,common ,vuln]abilities & ,exposures ,program means ! ref]5ce guide & classification sy/em = publicly kn[n in=mation security vuln]abilities sponsor$ by ! ,cyb]security & ,infra/ructure ,security ,ag5cy4 7#b7 ,relevant congressional committees ,! t]m relevant congressional committees means-- 7,a7 ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs1 ! ,committee on ,comm]ce1 ,sci5ce1 & ,transportation1 ! ,select ,committee on ,intellig5ce1 & ! ,committee on ! ,judici>y ( ! ,s5ate2 & 7,b7 ! ,committee on ,ov]sight & ,gov]nm5t ,re=m1 ! ,committee on ,en]gy & ,comm]ce1 ! ,p]man5t ,select ,committee on ,intellig5ce1 & ! ,committee on ! ,judici>y ( ! ,h\se ( ,repres5tatives4 7b7 ,processes & proc$ures = vuln]ability managem5t ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology %all-- 7#a7 compreh5sively evaluate1 & develop a /rategic plan to re=m1 ! /ructure & processes ( ! ,national ,vuln]ability ,database 9 light ( significant increase 9 ! volume ( vuln]abilities 9 in=mation sy/ems id5tifi$ by artificial intellig5ce sy/ems1 includ+ recomm5dations & guidance relat$ to assi/+ 9 det]m9+ prioritization ( id5tifi$ vuln]ability pat*+ & mitigation2 7#b7 initiate a process to utilize advanc$ artificial intellig5ce sy/ems to *>act]ize vuln]abilities z "p ( ! ,national ,vuln]ability ,database2 7#c7 initiate a process to update processes & proc$ures associat$ ) ! ,national ,vuln]ability ,database ( ! ,in/itute to ensure t ! database & associat$ vuln]ability managem5t processes incorporate artificial intellig5ce security vuln]abilities to ! greate/ ext5t practicable2 7#d7 id5tify any *>act]i/ics ( artificial intellig5ce security vuln]abilities t make utilization ( ! ,national ,vuln]ability ,database inappropriate & develop processes & proc$ures = vuln]ability managem5t = ^? vuln]abilities2 & 7#e7 initiate a process to update ! ,secure ,s(tw>e ,developm5t ,framework set =? 9 ,national ,in/itute ( ,/&>ds & ,te*nology ,special ,publication #hjj-bah & include guidance & be/ practices = us+ artificial intellig5ce 9 code g5]ation & security review4 7c7 ,updates to ,common ,vuln]abilities & ,exposures ,program ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ?is ,act1 ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy %all-- 7#a7 initiate a process to update processes & proc$ures associat$ ) ! ,common ,vuln]abilities & ,exposures ,program to ensure t ! program & associat$ processes id5tify & enum]ate artificial intellig5ce security vuln]abilities to ! greate/ ext5t practicable2 & 7#b7 id5tify any *>act]i/ic ( artificial intellig5ce security vuln]abilities t make utilization ( ! ,common ,vuln]abilities & ,exposures ,program inappropriate & develop processes & proc$ures = vuln]ability id5tification & enum]ation = ^? artificial intellig5ce security vuln]abilities4 7d7 ,submission to ,congress ,^u completion ( ! processes requir$ 9 subsections 7a7 & 7b71 ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology & ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy1 respectively1 %all submit a /rategic plan to ,congress id5tify+ c\rses ( action "u exi/+ au?orities1 or id5tify+ specific legislative am5dm5ts1 necess>y to address accel]at+ security risks associat$ ) artificial intellig5ce sy/ems4 7e7 ,evaluation ( cons5sus /&>ds = vuln]ability disclosure 7#a7 ,9 g5]al ,n lat] ?an #cj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology %all1 9 coord9ation ) ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy1 initiate a multi-/akehold] process to evaluate :e!r exi/+ volunt>y cons5sus /&>ds & processes = vuln]ability report+ processes associat$ ) ! security ( in=mation sy/ems effectively accommodate ! significant increas$ volume ( vuln]abilities 9 in=mation sy/ems id5tifi$ by artificial intellig5ce sy/ems1 z well z ! unique nature ( artificial intellig5ce security vuln]abilities4 7#b7 ,report 7,a7 ,submission ,n lat] ?an #ahj days aft] ! date on :i* ! evaluation "u p>agraph 7#a7 is c>ri$ out1 ! ,director %all submit a report to ! relevant congressional committees on ! suffici5cy ( exi/+ vuln]ability report+ processes & /&>ds to accommodate ! significant increas$ volume ( vuln]abilities 9 in=mation sy/ems id5tifi$ by artificial intellig5ce sy/ems1 z well z artificial intellig5ce security vuln]abilities4 7,b7 ,po/-report action ,if ! ,director concludes 9 ! report submitt$ "u subp>agraph 7,a7 t exi/+ vuln]ability report+ processes & /&>ds d n effectively accommodate ! significant increas$ volume ( vuln]abilities 9 in=mation sy/ems id5tifi$ by artificial intellig5ce sy/ems1 z well z ! report+ ( artificial intellig5ce security vuln]abilities1 ! ,director %all initiate a process1 9 consultation ) ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology & ! ,director ( ! ,(fice ( ,managem5t & ,budget1 to update relevant vuln]ability report+ processes1 includ+ ! ,dep>tm5t ( ,homel& ,security ,b9d+ ,op]ational ,directive #bj-ja1 or any subsequ5t directive4 #f4 ,review ( artificial intellig5ce security vuln]abilities "u vuln]abilities equities process 7a7 ,def9itions ,9 ?is section3 7#a7 ,appropriate congressional committees ,! t]m appropriate congressional committees means-- 7,a7 ! ,select ,committee on ,intellig5ce ( ! ,s5ate2 7,b7 ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ( ! ,s5ate2 7,c7 ! ,committee on ! ,judici>y ( ! ,s5ate2 7,d7 ! ,committee on ,arm$ ,s]vices ( ! ,s5ate2 7,e7 ! ,p]man5t ,select ,committee on ,intellig5ce ( ! ,h\se ( ,repres5tatives2 7,f7 ! ,committee on ,homel& ,security ( ! ,h\se ( ,repres5tatives2 7,g7 ! ,committee on ! ,judici>y ( ! ,h\se ( ,repres5tatives2 & 7,h7 ! ,committee on ,arm$ ,s]vices ( ! ,h\se ( ,repres5tatives4 7#b7 ,vuln]abilities equities ,policy & ,process docum5t ,! t]m ,vuln]abilities ,equities ,policy & ,process docum5t means ! executive bran* docum5t entitl$ ,vuln]abilities ,equities ,policy & ,process = ! ,unit$ ,/ates ,gov]nm5t dat$ ,novemb] #ae1 #bjag4 7#c7 ,vuln]abilities equities process ,! t]m ,vuln]abilities ,equities ,process means ! int]ag5cy review ( vuln]abilities c>ri$ out pursuant to ! ,vuln]abilities ,equities ,policy & ,process docum5t or any successor docum5t4 7b7 ,evaluation2 report ,n lat] ?an #ij days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,f$]al dep>tm5ts & ag5cies p>ticipat+ 9 ! ,vuln]abilities ,equities ,process %all-- 7#a7 evaluate :e!r ! exi/+ ,vuln]abilities ,equities ,process suffici5tly accommodates ! submission & review ( artificial intellig5ce security vuln]abilities2 & 7#b7 submit to ! appropriate congressional committees a report describ+ ! applicability ( ! ,vuln]abilities ,equities ,process to su* vuln]abilities1 includ+ :e!r ! submission & review ( su* vuln]abilities "u ! ,vuln]abilities ,equities ,process w\ld result 9 an unduly l>ge volume ( notifications to affect$ v5dors &1 if s1 an assessm5t ( me*anisms to manage ! volume ( su* notifications4 7c7 ,process ,9 c>ry+ out subsection 7b71 if ! ,f$]al dep>tm5ts & ag5cies p>ticipat+ 9 ! ,vuln]abilities ,equities ,process det]m9e t ! exi/+ ,vuln]abilities ,equities ,process does n suffici5tly accommodate ! submission & review ( artificial intellig5ce security vuln]abilities id5tifi$ by ! evaluation requir$ 9 subsection 7b77#a71 & t su* vuln]abilities pres5t public int]e/ consid]ations m]it+ review "u ! ,vuln]abilities ,equities ,process1 ! ,f$]al dep>tm5ts & ag5cies p>ticipat+ 9 ! ,vuln]abilities ,equities ,process %all e/abli% a process = ! submission & review ( su* vuln]abilities "u ! ,vuln]abilities ,equities ,process n lat] ?an #cj days aft] ! date ( su* det]m9ation4 7d7 ,report on vuln]abilities id5tifi$ by artificial intellig5ce sy/ems ,n lat] ?an #ij days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,director ( ,national ,intellig5ce %all submit to ! congressional intellig5ce committees 7z def9$ 9 section #c ( ! ,national ,security ,act ( #aidg 7#ej ,u4,s4,c4 #cjjc77 a report on-- 7#a7 ! volume ( vuln]abilities ( in=mation sy/ems id5tifi$ by artificial intellig5ce sy/ems2 7#b7 ! impact ( any *ange 9 su* volume on ! function+ ( ! ,vuln]abilities ,equities ,process2 & 7#c7 :e!r ! increas+ly rapid discov]y & exploitation ( su* vuln]abilities by ext]nal cyb] actors us+ artificial intellig5ce sy/ems mat]ially alt]s ! equity ( disclosure4 #g4 ,security ( artificial intellig5ce sy/ems & laboratories 7a7 ,def9itions ,9 ?is section3 7#a7 ,c5t] ,! t]m ,c5t] means ! ,artificial ,intellig5ce ,security ,c5t] ( ! ,national ,security ,ag5cy4 7#b7 ,classifi$ in=mation ,! t]m classifi$ in=mation has ! mean+ giv5 su* t]m 9 section #hje ( ! ,national ,security ,act ( #aidg 7#ej ,u4,s4,c4 #cafd74 7#c7 ,cle>$ indu/ry p]sonnel ,! t]m cle>$ indu/ry p]sonnel means employees or repres5tatives ( a cov]$ p]son :o hold an appropriate security cle>ance & h a demon/rat$ ne$ to "k4 7#d7 ,congressional intellig5ce committees ,! t]m congressional intellig5ce committees has ! mean+ giv5 su* t]m 9 section #c ( ! ,national ,security ,act ( #aidg 7#ej ,u4,s4,c4 #cjjc74 7#e7 ,cov]$ p]son ,! t]m cov]$ p]son means a non-,f$]al p]son :o-- 7,a7 is a ,unit$ ,/ates p]son2 7,b7 develops1 deploys1 or op]ates artificial intellig5ce models or critical enabl+ infra/ructure2 & 7,c7 provides ! s]vices describ$ 9 subp>agraph 7,b7 to a ,f$]al dep>tm5t or ag5cy4 7#f7 ,director ,! t]m ,director means ! ,director ( ! ,national ,security ,ag5cy4 7#g7 ,=eign adv]s>y c\ntry ,! t]m =eign adv]s>y c\ntry has ! mean+ giv5 su* t]m 9 section #b7;c7 ( ! ,protect+ ,am]icans' ,data f ,=eign ,adv]s>ies ,act ( #bjbd 7#ae ,u4,s4,c4 #iija7;c774 7#h7 ,=eign entity ( conc]n ,! t]m =eign entity ( conc]n means-- 7,a7 a =eign adv]s>y c\ntry2 or 7,b7 any entity t is controll$ or act+ "u ! direction ( a =eign adv]s>y c\ntry4 7#i7 ,intellig5ce ,! t]m intellig5ce has ! mean+ giv5 su* t]m 9 section #c ( ! ,national ,security ,act ( #aidg 7#ej ,u4,s4,c4 #cjjc74 7#aj7 ,intellig5ce community ,! t]m intellig5ce community has ! mean+ giv5 su* t]m 9 section #c ( ! ,national ,security ,act ( #aidg 7#ej ,u4,s4,c4 #cjjc74 7#aa7 ,security cle>ance ,! t]m security cle>ance means an au?orization to access classifi$ in=mation4 7#ab7 ,?reat in=mation ,! t]m ?reat in=mation means in=mation on-- 7,a7 ef=ts by =eign adv]s>y c\ntries to use products or rese>* ( cov]$ p]sons or o!r entities or individuals to g5]ate syn!tic m$ia = =eign-direct$ influ5ce campaigns1 develop & manage comput] network exploitation campaigns1 design or develop weapons sy/ems1 or enhance surveillance capabilities 9 ways t und]m9e ! privacy or ?reat5 ! security ( citiz5s ( ! ,unit$ ,/ates2 7,b7 ?reats pos$ by =eign entities ( conc]n1 includ+ indications ( compromise to networks associat$ ) cov]$ p]sons or o!r te*nical indicators1 indicat+ a compromise to ! confid5tiality1 integrity1 or availability ( an artificial intellig5ce sy/em1 or to ! supply *a9 ( an artificial intellig5ce sy/em1 includ+ tra9+ or te/ data1 frameworks or s(tw>e libr>ies1 tra9+ or inf]5ce comput+ environm5ts1 or o!r compon5ts necess>y = ! tra9+1 managem5t1 deploym5t1 or ma9t5ance ( an artificial intellig5ce sy/em2 7,c7 activity ( =eign entities ( conc]n to cl&e/9ely1 fraudul5tly1 or o!rwise malici\sly access ! sy/ems ( cov]$ p]sons = purposes ( illicit te*nology transf] or o!rwise ga9+ unfair economic advantage1 includ+ ?r\gh te*niques to extract a model's te*nical capabilities to replicate1 develop1 or improve a =eign artificial intellig5ce model )\t au?orization by ! cov]$ p]son2 7,d7 activity ( =eign entities ( conc]n to sabotage or o!rwise cl&e/9ely degrade artificial intellig5ce sy/ems or ! supply *a9 ( an artificial intellig5ce sy/em1 includ+ tra9+ or te/ data1 frameworks or s(tw>e libr>ies1 tra9+ or inf]5ce comput+ environm5ts1 or o!r compon5ts necess>y = ! tra9+1 managem5t1 or ma9t5ance ( an artificial intellig5ce sy/em2 7,e7 obs]vations1 em]g+ conc]ns1 or o!r inputs f v5dors or rese>*]s reg>d+ relevant malici\s or cl&e/9e activity ( =eign entities ( conc]n t[>d an artificial intellig5ce sy/em1 its supply *a91 or o!r necess>y compon5ts2 7,f7 ef=ts by =eign adv]s>ies or =eign entities to evade detection ( malici\s activity describ$ 9 subp>agraphs 7,a71 7,b71 7,c7 & 7,d72 & 7,g7 any o!r relevant in=mation ! ,director ( ! ,national ,c\nt]9tellig5ce & ,security ,c5t] & ! ,assi/ant ,director ( ! ,f$]al ,bureau ( ,inve/igation = ! ,c\nt]9tellig5ce ,division deem appropriate4 7b7 ,be/ practices ,n lat] ?an #ij days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy %all1 9 collaboration ) ! ,director & ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology & by lev]ag+ ef=ts ( ! ,in=mation ,communications ,te*nology ,supply ,*a9 ,risk ,managem5t ,task ,=ce to ! greate/ ext5t practicable1 conv5e a multi-/akehold] process to enc\rage ! developm5t & adoption ( be/ practices relat+ to address+ supply *a9 risks associat$ ) tra9+ & ma9ta9+ artificial intellig5ce models1 :i* %all ensure consid]ation ( supply *a9 risks associat$ )-- 7#a7 activity ( =eign entities ( conc]n to cl&e/9ely1 fraudul5tly1 or o!rwise malici\sly access ! sy/ems ( cov]$ p]sons = purposes ( illicit te*nology transf] or o!rwise ga9+ unfair economic advantage1 includ+ ?r\gh te*niques to extract a model's te*nical capabilities to replicate1 develop1 or improve a =eign artificial intellig5ce model )\t au?orization by ! cov]$ p]son2 7#b7 activity ( =eign entities ( conc]n to sabotage or o!rwise cl&e/9ely degrade artificial intellig5ce sy/ems or ! supply *a9 ( an artificial intellig5ce sy/em1 includ+ tra9+ or te/ data1 frameworks or s(tw>e libr>ies1 tra9+ or inf]5ce comput+ environm5ts1 or o!r compon5ts necess>y = ! tra9+1 managem5t1 or ma9t5ance ( an artificial intellig5ce sy/em2 & 7#c7 ?reat in=mation1 usage tr5ds1 or o!r input f v5dors or rese>*]s reg>d+ obs]v$ malici\s or cl&e/9e activity ( =eign entities ( conc]n t[>d an artificial intellig5ce sy/em1 its supply *a91 or o!r necess>y compon5ts4 7c7 ,e/abli%m5t ( pilot program on %>+ ( intellig5ce & ?reat in=mation ) cov]$ p]sons 7#a7 ,9 g5]al ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,director %all1 9 consultation ) ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy1 e/abli% a pilot program to assess ! feasibility & advisability ( facilitat+ ! secure %>+ ) cov]$ p]sons ( intellig5ce & ?reat in=mation g]mane to ! secur+ ( ! supply *a9 risks associat$ ) tra9+ & ma9ta9+ artificial intellig5ce models procur$ by ! ,f$]al ,gov]nm5t4 7#b7 ,p>ticipation ,! ,director may n select or exclude cov]$ p]sons to p>ticipate 9 ! pilot program 9 a mann] t provides a competitive advantage or procurem5t pref]5ce to any cov]$ p]son1 to ! detrim5t ( ano!r cov]$ p]son4 7#c7 ,duration ,! ,director %all c>ry out ! pilot program e/abli%$ pursuant to p>agraph 7#a7 = n less ?an a #c-ye> p]iod beg9n+ on ! date ( ! e/abli%m5t ( ! pilot program4 7d7 ,p>ticipation requirem5ts 7#a7 ,crit]ia ,! ,director %all e/abli% crit]ia gov]n+ engagem5t ) cov]$ p]sons "u ! pilot program requir$ by subsection 7c71 :i* may include crit]ia relat+ to ! foll[+3 7,a7 ,relevance to national security4 7,b7 ,! ability to protect classifi$ or s5sitive intellig5ce in=mation4 7,c7 ,cyb]security & in=mation security maturity4 7,d7 ,agreem5t to comply ) intellig5ce h&l+1 use1 & nondisclosure requirem5ts4 7,e7 ,! availability ( cle>$ p]sonnel ( cov]$ p]sons or will+ness ( cov]$ p]sons to increase ! numb] ( cle>$ p]sonnel4 7#b7 ,nature ( p>ticipation ,p>ticipation 9 ! pilot program requir$ by subsection 7c7 %all n be con/ru$ z a c]tification1 endorsem5t1 or regulatory approval by ! ,unit$ ,/ates ,gov]nm5t ( any artificial intellig5ce sy/em or comm]cial activity & ! ,director may n exclude a cov]$ p]son f p>ticipat+ on ! basis ( political or ideological viewpo9ts ( ! cov]$ p]son or its employees4 7e7 ,intellig5ce %>+ /ructure 7#a7 ,au?oriz$ modes ,"u ! pilot program requir$ by subsection 7c71 ! ,director may au?orize ! %>+ ( intellig5ce & ?reat in=mation z describ$ 9 p>agraph 7#a7 ( su* subsection ?r\gh-- 7,a7 bilat]al ex*anges betwe5 elem5ts ( ! intellig5ce community & a cov]$ p]son2 7,b7 multilat]al ex*anges among cov]$ p]sons1 z det]m9$ appropriate by ! ,director2 or 7,c7 ano!r designat$ intellig5ce-%>+ me*anism op]at$ or ov]se5 by ! ,director4 7#b7 ,limitation ,any me*anism e/abli%$ "u ?is section %all be limit$ to ! dissem9ation ( intellig5ce & ?reat in=mation & %all n e/abli% /&>ds1 requirem5ts1 or be/ practices gov]n+ artificial intellig5ce developm5t or deploym5t4 7f7 ,tailor+1 h&l+1 & protection ( intellig5ce 7#a7 ,proc$ures requir$ ,! ,director %all codify proc$ures to tailor1 sanitize1 or d[ngrade ! classification level ( intellig5ce %>$ "u ! pilot program requir$ by subsection 7c7 to ensure usability :ile protect+ intellig5ce s\rces & me?ods4 7#b7 ,examples ( proc$ures ,! proc$ures develop$ "u p>agraph 7#a7 may include ! foll[+3 7,a7 ,! use ( te> l9es & segregable summ>ies4 7,b7 ,! prep>ation ( classifi$ annexes :]e necess>y4 7,c7 ,crit]ia gov]n+ ! classification level ( %>$ intellig5ce4 7,d7 ,! appropriate use ( cle>$ indu/ry p]sonnel4 7#c7 ,h&l+ requirem5ts ,! ,director %all1 act+ ?r\gh ! ,c5t]1 codify policies gov]n+ ! h&l+1 /orage1 & dissem9ation ( intellig5ce %>$ "u ! pilot program requir$ by subsection 7c71 includ+ audit & compliance me*anisms4 7g7 ,p]missible use & nondisclosure 7#a7 ,p]missible use ,intellig5ce %>$ "u ! pilot program requir$ by subsection 7c7 may be us$ solely = detect+1 prev5t+1 or mitigat+ malici\s =eign activity t>get+ ! supply *a9s associat$ ) tra9+ & ma9ta9+ artificial intellig5ce models procur$ by ! ,f$]al ,gov]nm5t = intellig5ce collection1 intellectual prop]ty !ft1 & o!r malici\s activities4 7#b7 ,nondisclosure ,a cov]$ p]son p>ticipat+ 9 ! pilot program may n disclose any intellig5ce %>$ "u ! pilot program requir$ by subsection 7c71 except z expressly au?oriz$ by ! ,director act+ ?r\gh ! ,c5t]4 7h7 ,privacy & civil lib]ties ,9 plann+ & coord9at+ ! pilot program requir$ by subsection 7c71 ! ,director %all1 act+ ?r\gh ! ,c5t]1 consult ) ! ,civil ,lib]ties ,protection ,(fic] ( ! ,(fice ( ! ,director ( ,national ,intellig5ce4 7i7 ,evaluation & report+ 7#a7 ,evaluation ,! ,director %all cont9u\sly evaluate ! effectiv5ess & risks ( ! pilot program e/abli%$ "u subsection 7c74 7#b7 ,report 7,a7 ,9 g5]al ,n lat] ?an #ij days be=e ! date on :i* ! pilot program requir$ by p>agraph 7#a7 ( subsection 7c7 t]m9ates pursuant to p>agraph 7#c7 ( su* subsection1 ! ,directors %all submit to ! congressional intellig5ce committees 7z def9$ 9 section #c ( ! ,national ,security ,act ( #aidg 7#ej ,u4,s4,c4 #cjjjc77 a report assess+-- 7i7 ! effectiv5ess ( intellig5ce %>+ "u ! pilot program2 7ii7 ! adequacy ( safegu>ds = s\rces1 me?ods1 & privacy2 7iii7 ! scope ( p>ticipation & li/ ( cov]$ p]sons p>ticipat+ 9 ! pilot program2 & 7iv7 :e!r ! program %\ld be modifi$1 ext5d$1 or t]m9at$4 7,b7 ,=m ,! report submitt$ pursuant to subp>agraph 7,a7 %all be submitt$ 9 unclassifi$ =m1 b may include a classifi$ annex4 7j7 ,rule ( con/ruction ,no?+ 9 ?is section %all be con/ru$-- 7#a7 to au?orize ! collection ( intellig5ce on ,unit$ ,/ates p]sons n au?oriz$ by ano!r provision ( law2 7#b7 to require ! disclosure ( classifi$ in=mation to unau?oriz$ p]sons2 or 7#c7 to e/abli% comm]cial1 competition1 or te*nology policy outside ! purview ( ! intellig5ce community4 7k7 ,exemption f disclosure2 protection ,any in=mation %>$ by a cov]$ p]son or o!r entity or individual ) ! ,unit$ ,/ates ,gov]nm5t pursuant to ?is section-- 7#a7 %all be exempt f disclosure & )held1 )\t discretion1 f ! public1 pursuant to section #eeb7;b77#c77;,b7 ( title #e1 ,unit$ ,/ates ,code1 & any o!r provision ( ,unit$ ,/ates law or law ( any ,/ate1 political subdivision or ag5cy !re(1 or ,tribe requir+ disclosure ( in=mation or records2 & 7#b7 %all n be deem$ a waiv] ( any applicable privilege or protection1 includ+ trade secret protection4 7l7 ,protection f liability ,no cause ( action %all lie or be ma9ta9$ 9 any c\rt aga9/ any cov]$ p]son = %>+ in=mation ) ! ,unit$ ,/ates ,gov]nm5t or ano!r cov]$ p]son pursuant to ?is section4