,,ii #aai? ,,congress #b;d ,session ,s4 #ebeb ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,augu/ #e1 #bjbf,mr4 ,hag]ty 7= himself1 ,mr4 ,kim1 ,mr4 ,scott ( ,s\? ,c>ol9a1 & ,ms4 ,cortez ,ma/o7 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,bank+1 ,h\s+1 & ,urban ,affairs ,a ,,bill ,to prev5t =eign adv]s>ies f ?reat5+ ! national security ( ! ,unit$ ,/ates by extract+ key te*nical features ( clos$-s\rce1 ,unit$ ,/ates-own$ artificial intellig5ce models1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ,block+ ,l>ge-scale ,adv]s>ial ,di/illation ,ef=ts ,act ( #bjbf or ,,blade ,act4 #b4 ,s5se ( ,congress ,x is ! s5se ( ,congress t-- 7#a7 artificial intellig5ce models own$ by ,unit$ ,/ates private sector entities are ess5tial = advanc+ economic & national security int]e/s ( ! ,unit$ ,/ates2 7#b7 _m ( ! mo/ advanc$ artificial intellig5ce models own$ by ,unit$ ,/ates entities are clos$-s\rce models ^: unique te*nical *>act]i/ics are n op5ly %>$ or publi%$2 7#c7 ! unau?oriz$ acquisition ( model capabilities1 su* z model weights1 model ar*itectures1 & o!r te*nical *>act]i/ics ( clos$-s\rce artificial intellig5ce models1 by p]sons ( conc]n ?r\gh model extraction attacks repres5ts a ?reat to ! national security & =eign policy int]e/s ( ! ,unit$ ,/ates1 z well z ! intellectual prop]ty rights & economic competitiv5ess ( ,unit$ ,/ates entities2 7#d7 ! ,unit$ ,/ates ,gov]nm5t1 9 coop]ation ) private own]s ( clos$-s\rce artificial intellig5ce models1 %\ld take /eps to id5tify1 puni%1 & det] model extraction attacks on ! protect$ capabilities ( clos$-s\rce artificial intellig5ce models by p]sons ( conc]n2 7#e7 model extraction attacks aga9/ ,unit$ ,/ates clos$-s\rce artificial intellig5ce models all[ =eign adv]s>ies a %ort cut to acquir+ advanc$ artificial intellig5ce capabilities2 & 7#f7 au?oriz$ model tra9+ practices t adh]e to ! t]ms ( s]vice or are o!rwise consi/5t ) contractual t]ms set by ! own]s ( clos$-s\rce artificial intellig5ce models are a legitimate rese>* me?od t play an important role 9 artificial intellig5ce rese>* & are fundam5tally di/9ct f model extraction attacks address$ by ?is ,act4 #c4 ,def9itions ,9 ?is ,act3 7#a7 ,appropriate congressional committees ,! t]m appropriate congressional committees means-- 7,a7 ! ,committee on ,=eign ,affairs ( ! ,h\se ( ,repres5tatives2 & 7,b7 ! ,committee on ,bank+1 ,h\s+1 & ,urban ,affairs ( ! ,s5ate4 7#b7 ,clos$-s\rce artificial intellig5ce model ,! t]m clos$-s\rce artificial intellig5ce model means any artificial intellig5ce model ) ! foll[+ *>act]i/ics3 7,a7 ,propriet>y key te*nical in=mation1 su* z und]ly+ model weights1 t are necess>y to reproduce & indep5d5tly recreate ! model & t are n will+ly %>$ ) ?ird p>ties or o!rwise made publicly available by ! own] ( ! model4 7,b7 ,access & use gov]n$ by t]ms ( s]vice or contractual agreem5ts t are e/abli%$ by ! own] ( ! model4 7,c7 ,access t is provid$ via an application program int]face or ano!r consum]-fac+1 own]-controll$ int]face )\t enabl+ ?ird p>ties to obta91 modify1 or ho/ ! clos$-s\rce artificial intellig5ce model on _! own data s]v]s or o!r te*nology unless specifically au?oriz$ by ! own] ( ! model4 7#c7 ,c\ntry ( conc]n ,! t]m c\ntry ( conc]n means-- 7,a7 ! ,p's ,republic ( ,*9a1 includ+ ! ,hong ,kong & ,macau ,special ,adm9i/rative ,regions2 7,b7 ! ,russian ,f$]ation2 & 7,c7 any o!r =eign c\ntry-- 7i7 li/$ 9 ,c\ntry ,gr\p ,d3#e 9 ,supplem5t ,no4 #a to "p #gdj ( title #ae1 ,code ( ,f$]al ,regulations1 z publi%$ on ,janu>y #a1 #bjbf1 t is designat$ by ! ,secret>y ( ,comm]ce z a c\ntry ( conc]n = purposes ( ?is section & = :i* notice ( su* designation has be5 publi%$ 9 ! ,f$]al ,regi/]2 & 7ii7 id5tifi$ by ! ,secret>y ( ,comm]ce1 act+ ?r\gh ! ,"u ,secret>y ( ,comm]ce = ,indu/ry & ,security1 pursuant to an assessm5t requir$ by subsection 7a7 or 7e7 ( section #d4 7#d7 ,p]son ( conc]n ,! t]m p]son ( conc]n means any =eign p]son t-- 7,a7 is locat$ or headqu>t]$ 91 or ! ultimate p>5t company ( :i* is headqu>t]$ 91 a c\ntry ( conc]n2 7,b7 is op]at+ "u ! direction or control ( any entity locat$ or headqu>t]$ 91 or ! ultimate p>5t company ( :i* is headqu>t]$ 91 a c\ntry ( conc]n2 or 7,c7 is conduct+ or attempt+ to conduct a model extraction attack aga9/ clos$-s\rce artificial intellig5ce models own$ by ,unit$ ,/ates p]sons & outside ( au?oriz$ model tra9+ practices4 7#e7 ,=eign p]son ,! t]m =eign p]son means a p]son t is n a ,unit$ ,/ates p]son4 7#f7 ,fraudul5t acc\nt network provid] 7,a7 ,9 g5]al ,! t]m fraudul5t acc\nt network provid] means any =eign p]son t kn[+ly & int5tionally creates1 obta9s1 ma9ta9s1 sells1 brok]s1 or o!rwise provides access to an acc\nt t all[s a p]son ( conc]n to access a clos$-s\rce artificial intellig5ce model t ! entity w\ld o!rwise be prohibit$ f access+ z a result ( location re/rictions 9 ! t]ms ( s]vice or a contractual agreem5t creat$ by ! own] ( ! model4 7,b7 ,exception ,= purposes ( subp>agraph 7,a71 an entity t creates or transmits location in=mation to enable p]sons )9 c\ntries ( conc]n to access ! int]net = purposes ( fre$om ( expression is n1 on ! basis ( t activity alone1 a fraudul5t acc\nt network provid]4 7#g7 ,model extraction attack 7,a7 ,9 g5]al ,! t]m model extraction attack means ! unau?oriz$ extract+ ( ! capabilities ( a clos$-s\rce artificial intellig5ce model to replicate1 develop1 tra91 or improve ano!r artificial intellig5ce model1 if su* extraction-- 7i7 circumv5ts te*nical1 contractual1 or o!r access controls1 id5tity v]ification requirem5ts1 or geographic access re/rictions implem5t$ by ! own] ( ! model2 7ii7 is conduct$ ?r\gh fraudul5t1 misrepres5t$1 or unau?oriz$ cr$5tials2 or 7iii7 violates ! t]ms1 conditions1 or re/rictions gov]n+ access to or use ( ! model1 z e/abli%$ by ! own]1 t specifically prohibit ! use ( model outputs or int]actions to replicate1 develop1 tra91 or improve ano!r artificial intellig5ce model4 7,b7 ,inf]5ce ( purpose ,= purposes ( subp>agraph 7,a71 ! purpose ( extraction may be inf]r$ f ! totality ( circum/ances1 includ+-- 7i7 ! volume1 /ructure1 patt]n1 coord9ation1 or tim+ ( ! extraction activity2 7ii7 ! conc5tration ( extractions on specific model capabilities2 7iii7 ! use ( multiple acc\nts 9 a coord9at$ mann]2 or 7iv7 ! correlation ( extraction activity )9 ! developm5t timel9e ( ano!r artificial intellig5ce model4 7,c7 ,exclusion ,= purposes ( subp>agraph 7,a71 model tra9+ activities conduct$ 9 compliance ) ! t]ms1 conditions1 & re/rictions gov]n+ access to & use ( a clos$-s\rce artificial intellig5ce model1 or o!rwise conduct$ )9 a p]mitt$ exception or ! express au?orization ( ! own] ( ! model1 are n model extraction attacks4 7#h7 ,op]at+ ,committee = ,export ,policy ,! t]m ,op]at+ ,committee = ,export ,policy means ! ,op]at+ ,committee = ,export ,policy ref]r$ to 9 section #agfc7;c7 ( ! ,export ,control ,re=m ,act ( #bjah 7#ej ,u4,s4,c4 #dhbb7;c774 7#i7 ,own] ,! t]m own] means1 ) respect to a clos$-s\rce artificial intellig5ce model1 ! p]son t-- 7,a7 holds intellectual prop]ty rights 7includ+ trade secret1 copyright1 pat5t1 or o!r propriet>y rights71 contractual rights1 or a comb9ation !re(1 suffici5t to au?orize or re/rict ?ird-p>ty access to1 use (1 extraction f1 or reproduction ( ! model1 or any v]sion1 in/ance1 or deploym5t ! model1 :e!r su* rights 7 obta9$ ?r\gh developm5t1 acquisition1 assignm5t1 lic5se1 or o!rwise2 & 7,b7 is a ,unit$ ,/ates p]son4 7#aj7 ,p]son ,! t]m p]son means individual or entity4 7#aa7 ,unit$ /ates p]son ,! t]m ,unit$ ,/ates p]son means-- 7,a7 a ,unit$ ,/ates citiz5 or an ali5 lawfully admitt$ = p]man5t resid5ce to ! ,unit$ ,/ates2 7,b7 an entity organiz$ "u ! laws ( ! ,unit$ ,/ates or any jurisdiction )9 ! ,unit$ ,/ates1 includ+ a =eign bran* ( su* an entity2 or 7,c7 any p]son locat$ 9 ! ,unit$ ,/ates4 #d4 ,assessm5t ( model extraction attacks & fraudul5t acc\nt network provid]s 7a7 ,9 g5]al ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y ( ,comm]ce1 act+ ?r\gh ! ,"u ,secret>y ( ,comm]ce = ,indu/ry & ,security & 9 coord9ation ) ! head ( ea* ag5cy t is a memb] ( ! ,op]at+ ,committee = ,export ,policy1 %all complete an assessm5t to det]m9e-- 7#a7 :i*1 if any1 p]sons ( conc]n h conduct$ or are curr5tly conduct+ model extraction attacks aga9/ clos$-s\rce artificial intellig5ce models own$ by ,unit$ ,/ates p]sons2 & 7#b7 :i*1 if any1 p]sons ( conc]n are fraudul5t acc\nt network provid]s4 7b7 ,matt]s ,to be includ$ ,! assessm5t requir$ by subsection 7a7 %all include ! foll[+3 7#a7 ,a det]m9ation ( :i* p]sons ( conc]n-- 7,a7 h ei!r previ\sly or are curr5tly engag+ 9 model extraction attacks2 or 7,b7 are fraudul5t acc\nt network provid]s4 7#b7 ,a det]m9ation ( ! c\ntries1 if any-- 7,a7 f :i* model extraction attacks h orig9at$2 & 7,b7 9 :i* fraudul5t acc\nt network provid]s exi/4 7#c7 ,an id5tification ( :i*1 if any1 ag5cies or in/rum5talities ( gov]nm5ts ( c\ntries ( conc]n h provid$ or are provid+ mat]ial assi/ance to entities id5tifi$ pursuant to p>agraph 7#a74 7#d7 ,an analysis ( ! me?ods employ$ by p]sons ( conc]n id5tifi$ pursuant to p>agraph 7#a71 includ+-- 7,a7 ! role ( fraudul5t acc\nt network provid]s 9 model extraction attacks1 includ+1 to ! ext5t possible1 ! physical location ( (fices & data c5t]s ( su* provid]s2 & 7,b7 a det]m9ation1 to ! ext5t possible1 ( ! numb] ( attempt$ model extraction attacks t occurr$ dur+ ! #b cal5d> ye>s prec$+ ! date on :i* ! ,secret>y ( ,comm]ce1 act+ ?r\gh ! ,"u ,secret>y ( ,comm]ce = ,indu/ry & ,security1 beg9s ! assessm5t requir$ by subsection 7a74 7#e7 ,an exam9ation ( ! /r5g?s & weaknesses ( v>i\s detection approa*es t c be us$ to det]m9e :e!r a model extraction attack has occurr$ or is occurr+4 7#f7 ,an assessm5t ( ! economic & national security consequ5ces ( successful model extraction attacks by p]sons ( conc]n t occurr$ dur+ ! #b cal5d> ye>s prec$+ ! date on :i* ! ,secret>y ( ,comm]ce1 act+ ?r\gh ! ,"u ,secret>y ( ,comm]ce = ,indu/ry & ,security1 beg9s ! assessm5t requir$ by subsection 7a74 7#g7 ,/eps detail+ h[ ! ,unit$ ,/ates ,gov]nm5t is assi/+ own]s ( clos$-s\rce artificial intellig5ce models t h be5 ! t>get or victim ( model extraction attacks 9 detect+ model extraction attacks1 det]r+ future model extraction attacks1 & puni%+ p]sons ( conc]n t engage 9 model extraction attacks or are fraudul5t acc\nt network provid]s4 7#h7 ,a diplomatic /rategy to lev]age allies & p>tn]s ( ! ,unit$ ,/ates 9 detect+ & prev5t+ model extraction attacks by p]sons ( conc]n4 7c7 ,public consultation 7#a7 ,9 g5]al ,9 conduct+ ! assessm5t requir$ by subsection 7a71 ! ,secret>y ( ,comm]ce1 act+ ?r\gh ! ,"u ,secret>y ( ,comm]ce = ,indu/ry & ,security & 9 coord9ation ) ! head ( ea* ag5cy t is a memb] ( ! ,op]at+ ,committee = ,export ,policy1 %all consult ) own]s ( clos$-s\rce artificial intellig5ce models t h be5 ! t>gets or victims ( model extraction attacks1 academic exp]ts1 indu/ry =a1 & o!r appropriate entities-- 7,a7 to id5tify patt]ns ( behavior & me?ods ( attack]s to bett] in=m ef=ts ( ! ,unit$ ,/ates ,gov]nm5t & ! private sector to detect model extraction attacks2 7,b7 to develop be/ practices = def5d+ aga9/ model extraction attacks2 & 7,c7 to develop be/ practices = id5tify+ activities ( fraudul5t acc\nt network provid]s t facilitate model extraction attacks4 7#b7 ,volunt>y p>ticipation ,! p>ticipation ( own]s ( clos$-s\rce artificial intellig5ce models describ$ 9 p>agraph 7#a7 9 consultations "u t p>agraph %all be volunt>y4 7d7 ,report 7#a7 ,9 g5]al ,n lat] ?an #baj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y ( ,comm]ce1 act+ ?r\gh ! ,"u ,secret>y ( ,comm]ce = ,indu/ry & ,security & 9 coord9ation ) ! head ( ea* ag5cy t is a memb] ( ! ,op]at+ ,committee = ,export ,policy1 %all submit to ! appropriate congressional committees a report t conta9s ! f9d+s ( ! assessm5t requir$ by subsection 7a74 7#b7 ,updates ,n lat] ?an "o ye> aft] submitt+ ! report requir$ by p>agraph 7#a71 & annually !reaft] = #c ye>s1 ! ,secret>y ( ,comm]ce1 act+ ?r\gh ! ,"u ,secret>y ( ,comm]ce = ,indu/ry & ,security1 %all submit to ! appropriate congressional committees an update to ! report li/+ any additional p]sons ( conc]n id5tifi$ pursuant to subsection 7a74 7#c7 ,=m ,! report requir$ by p>agraph 7#a71 & ea* update requir$ by p>agraph 7#b71 %all be submitt$ 9 unclassifi$ =m1 b may conta9 a classifi$ annex4 7e7 ,r\t9e assessm5t ,! ,secret>y ( ,comm]ce1 act+ ?r\gh ! ,"u ,secret>y ( ,comm]ce = ,indu/ry & ,security & 9 coord9ation ) ! head ( ea* ag5cy t is a memb] ( ! ,op]at+ ,committee = ,export ,policy1 %all r\t9ely assess =-- 7#a7 model extraction attacks direct$ aga9/ own]s ( clos$-s\rce artificial intellig5ce models t occur aft] ! date ( completion ( ! assessm5t requir$ by subsection 7a72 7#b7 fraudul5t acc\nt network provid]s t facilitate model extraction attacks aft] t date2 & 7#c7 any mat]ial *anges relat$ to o!r matt]s specifi$ 9 subsection 7b74 7f7 ,indu/ry coord9ation ,! ,secret>y ( ,comm]ce1 act+ ?r\gh ! ,"u ,secret>y ( ,comm]ce = ,indu/ry & ,security & 9 coord9ation ) ! head ( ea* ag5cy t is a memb] ( ! ,op]at+ ,committee = ,export ,policy1 %all e/abli% an in=mation-%>+ me*anism t all[s own]s ( clos$-s\rce artificial intellig5ce models to volunt>ily1 quickly1 & confid5tially %>e in=mation ab\t model extraction attacks & fraudul5t acc\nt network provid]s ) ! ,dep>tm5t ( ,comm]ce4 7g7 ,,ai model extraction attack]s li/ 7#a7 ,9 g5]al ,! ,secret>y ( ,comm]ce1 act+ ?r\gh ! ,"u ,secret>y ( ,comm]ce = ,indu/ry & ,security & 9 coord9ation ) ! head ( ea* ag5cy t is a memb] ( ! ,op]at+ ,committee = ,export ,policy1 %all-- 7,a7 ma9ta9 a li/1 to be kn[n z ! ,,ai ,model ,extraction ,attack]s ,li/1 t displays in=mation ab\t specific p]sons ( conc]n id5tifi$ pursuant to an assessm5t requir$ by subsection 7a7 or 7e7 z hav+ conduct$ or direct$ model extraction attacks 9 ! pa/ ye>2 & 7,b7 publi% ! li/ on a publicly available website ( ! ,dep>tm5t ( ,comm]ce4 7#b7 ,protection ( confid5tial in=mation ,! ,secret>y ( ,comm]ce1 act+ ?r\gh ! ,"u ,secret>y ( ,comm]ce = ,indu/ry & ,security1 may n1 9 publi%+ ! li/ requir$ by p>agraph 7#a7 on a publicly available website ( ! ,dep>tm5t ( ,comm]ce1 disclose confid5tial in=mation provid$ by ! own] ( a clos$-s\rce artificial intellig5ce model )\t ! express p]mission ( ! own]4 7h7 ,public guidance 7#a7 ,9 g5]al ,n lat] ?an #baj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y ( ,comm]ce1 act+ ?r\gh ! ,"u ,secret>y ( ,comm]ce = ,indu/ry & ,security & 9 coord9ation ) ! head ( ea* ag5cy t is a memb] ( ! ,op]at+ ,committee = ,export ,policy1 %all publi% a report compris+ ( be/ practices to detect1 prev5t1 & respond to model extraction attacks4 7#b7 ,public access ,! report requir$ by p>agraph 7#a7 %all be publicly available4 7#c7 ,protection ( confid5tial in=mation ,9 mak+ ! report requir$ by p>agraph 7#a7 publicly available1 ! ,secret>y may n disclose confid5tial in=mation provid$ by ! own] ( a clos$-s\rce artificial intellig5ce model )\t ! express p]mission ( ! own]4 #e4 ,det]r+ model extraction attacks & fraudul5t acc\nt network provid]s 7a7 ,consid]ation ( addition to ,entity ,li/ 7#a7 ,9 g5]al ,n lat] ?an #baj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,"u ,secret>y ( ,comm]ce = ,indu/ry & ,security1 9 coord9ation ) ! head ( ea* ag5cy t is a memb] ( ! ,end-,us] ,review ,committee1 %all add ea* entity describ$ 9 p>agraph 7#b7 to ! ,entity ,li/ ma9ta9$ by ! ,bureau ( ,indu/ry & ,security & set =? 9 ,supplem5t ,no4 #d to "p #gdd ( title #ae1 ,code ( ,f$]al ,regulations1 or any successor regulations4 7#b7 ,entities describ$ ,an entity describ$ 9 ?is p>agraph is-- 7,a7 an entity t is a p]son ( conc]n id5tifi$1 "u subsection 7a7 or 7e7 ( section #d1 z hav+ conduct$ model extraction attacks or hav+ facilitat$ su* attacks via fraudul5t acc\nt networks2 or 7,b7 a subsidi>y ( su* an entity 7to be det]m9$ by own]%ip ( #ej p]c5t or m 9 ! aggregate1 directly or indirectly74 7b7 ,imposition ( sanctions 7#a7 ,9 g5]al ,! ,presid5t %all1 pursuant to ! ,int]national ,em]g5cy ,economic ,p[]s ,act 7#ej ,u4,s4,c4 #agja et seq471 block & prohibit all transactions 9 all prop]ty & int]e/s 9 prop]ty ( ea* p]son ( conc]n id5tifi$ "u subsections 7a7 & 7e7 ( section #d if su* prop]ty & int]e/s 9 prop]ty are 9 ! ,unit$ ,/ates1 come )9 ! ,unit$ ,/ates1 or are or come )9 ! possession or control ( a ,unit$ ,/ates p]son4 7#b7 ,exceptions 7,a7 ,exception relat+ to ! provision ( humanit>ian assi/ance ,sanctions "u p>agraph 7#a7 may n be impos$ ) respect to transactions or ! facilitation ( transactions =-- 7i7 ! sale ( agricultural commodities1 food1 m$ic9e1 or m$ical devices2 7ii7 ! provision ( humanit>ian assi/ance2 or 7iii7 transport+ goods or s]vices t are necess>y to c>ry out op]ations relat+ to humanit>ian assi/ance4 7,b7 ,exception = intellig5ce1 law en=cem5t1 & national security activities ,sanctions "u ?is subsection %all n apply to any au?oriz$ intellig5ce1 law en=cem5t1 or national security activities ( ! ,unit$ ,/ates4 7#c7 ,waiv] 7,a7 ,9 g5]al ,! ,presid5t may1 subject to subp>agraph 7,b71 waive ! application ( subsection 7a7 or 7b7 ) respect to a p]son if1 be=e issu+ ! waiv]1 ! ,presid5t submits to ,congress-- 7i7 a c]tification 9 writ+ t ! issuance ( ! waiv] is 9 ! national int]e/s ( ! ,unit$ ,/ates2 & 7ii7 a report expla9+ ! basis = ! c]tification4 7,b7 ,=m ( report ,ea* report requir$ by subp>agraph 7,a7 %all be submitt$ 9 unclassifi$ =m b may include a classifi$ annex4 7#d7 ,p5alties ,a p]son t violates1 attempts to violate1 conspires to violate1 or causes a violation ( ?is subsection or any regulation1 lic5se1 or ord] issu$ to c>ry out t subsection %all be subject to ! p5alties set =? 9 subsections 7b7 & 7c7 ( section #bjf ( ! ,int]national ,em]g5cy ,economic ,p[]s ,act 7#ej ,u4,s4,c4 #agje7 to ! same ext5t z a p]son t commits an unlawful act describ$ 9 subsection 7a7 ( t section4