,,ii  #aai? ,,congress  #b;d ,session   
,s4 #eegf  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,septemb] #bi1         
#bjbf,mr4 ,w>n] 7= himself1 ,mr4 ,s*atz1
 & ,mr4 ,kim7 introduc$ ! foll[+ bill2  
:i* 0 read twice & ref]r$ to !          
,committee on ,comm]ce1 ,sci5ce1 &      
,transportation  ,a ,,bill  ,to e/abli% 
! ,artificial ,intellig5ce ,safety      
,bo>d1 & = o!r purposes4  #a4 ,%ort     
title ,?is ,act may be cit$ z !         
,artificial ,intellig5ce ,risk          
,managem5t & ,security ,act ( #bjbf4    
#b4 ,def9itions ,9 ?is ,act3 7#a7       
,artificial intellig5ce2 artificial     
intellig5ce sy/em ,! t]ms artificial    
intellig5ce & artificial intellig5ce    
sy/em has ! mean+ giv5 ! t]m artificial 
intellig5ce 9 section #ejjb ( !         
,national ,artificial ,intellig5ce      
,initiative ,act ( #bjbj 7#ae ,u4,s4,c4 
#idja74  7#b7 ,artificial intellig5ce   
ag5t ,! t]m artificial intellig5ce      
ag5t-- 7,a7 means an artificial         
intellig5ce sy/em or process t1 giv5 an 

objective or in/ruction-- 7i7 det]m9es !
 action or sequ5ce ( actions to be tak5 
to accompli% t objective2 &  7ii7 is    
capable ( execut+ su* actions directly  
on in=mation sy/ems1 data1 or ext]nal   
s]vices2 &  7,b7 does n include a sy/em 
or process t solely g5]ates in=mational 
or advisory output = a human op]ator to 
act ^u4  7#c7 ,artificial intellig5ce   
capabilities or risk assessm5t ,! t]m   
artificial intellig5ce capabilities or  
risk assessm5t means in=mation reg>d+ an
 assessm5t p]=m$ by a develop] ( an     
artificial intellig5ce sy/em evaluat+ ! 
capabilities (1 or risks pos$ by1 su*   
sy/em1 includ+ an assessm5t ( ! pot5tial
 ( ! artificial intellig5ce sy/em-- 7,a7
 to mat]ially assi/ 9 ! design1         
developm5t1 acquisition1 or use ( a     
*emical1 biological1 radiological1 or   
nucle> weapon2  7,b7 to mat]ially assi/ 
9 ! design1 developm5t1 or production ( 
munitions or o!r weapons2  7,c7 to      
mat]ially assi/ 9 ! unlawful            
manufacture1 syn!sis1 or di/ribution ( a

 controll$ sub/ance2  7,d7 to evade !   
control (1 or act outside ! int5d$      
in/ructions (1 its develop] or op]ator2 
7,e7 to facilitate a cyb]security ?reat1
 includ+ ?r\gh ! discov]y or            
exploitation ( a security vuln]ability2 
7,f7 to be subject to ! unau?oriz$      
exfiltration ( ! weights ( ! artificial 
intellig5ce sy/em1 or unau?oriz$1       
delib]ate1 malici\s modification ( su*  
weights2 or  7,g7 to be trans=m$1 /ol51 
rev]se-eng9e]$1 or o!rwise manipulat$ by
 an unau?oriz$ us] or us]s act+ outside 
( ! t]ms ( s]vice gov]n+ access to !    
artificial intellig5ce sy/em4  7#d7     
,artificial intellig5ce flaw ,! t]m     
artificial intellig5ce flaw means a     
recurr+ or reproducible *>act]i/ic1     
behavior1 or failure mode ( an          
artificial intellig5ce sy/em t causes1  
or mat]ially increases ! risk (1 an     
artificial intellig5ce safety incid5t   
abs5t any int5tional act ( a us]1       
includ+ a *>act]i/ic1 behavior1 or      
failure mode t may manife/ across       

multiple sy/ems or provid]s4  7#e7      
,artificial intellig5ce safety incid5t  
,! t]m artificial intellig5ce safety    
incid5t means an ev5t t mat]ially       
increases ! risk t op]ation ( an        
artificial intellig5ce sy/em leads to a 
/ate 9 :i* human life1 heal?1 prop]ty1  
or ! environm5t is endang]$4  7#f7      
,artificial intellig5ce security incid5t
 ,! t]m artificial intellig5ce security 
incid5t means an ev5t t mat]ially       
increases-- 7,a7 ! risk t op]ation ( an 
artificial intellig5ce sy/em occurs 9 a 
way t enables ! unau?oriz$ extraction ( 
in=mation ab\t ! behavior or *>act]i/ics
 ( ! sy/em by an unau?oriz$ p>ty2 or    
7,b7 ! ability to manipulate an         
artificial intellig5ce sy/em 9 ord] to  
subv]t ! confid5tiality1 integrity1 or  
availability ( ! sy/em or adjac5t sy/em4
  7#g7 ,artificial intellig5ce security 
vuln]ability ,! t]m artificial          
intellig5ce security vuln]ability means 
a weakness 9 an artificial intellig5ce  
sy/em t c\ld be exploit$ by a ?ird p>ty 

to subv]t1 )\t au?orization1 !          
confid5tiality1 integrity1 or           
availability ( ! sy/em1 includ+ ?r\gh   
te*niques su* z-- 7,a7 data poison+2    
7,b7 evasion attacks2  7,c7 privacy-bas$
 attacks2  7,d7 model !ft or extraction 
attacks2  7,e7 attacks design$ to       
circumv5t or degrade ! safety1 alignm5t1
 or access control me*anisms ( an       
artificial intellig5ce sy/em2 &  7,f7   
adv]s>ial ma*9e le>n+ attacks z describ$
 9 ,national ,in/itute ( ,/&>ds &       
,te*nology ,tru/wor?y & ,responsible    
,artificial ,intellig5ce #ajj-b;e#bjbe  
7relat+ to ,adv]s>ial ,ma*9e ,le>n+71 or
 successor publication4  7#h7 ,bo>d ,!  
t]m ,bo>d means ! ,artificial           
,intellig5ce ,safety ,bo>d e/abli%$ "u  
section #c4  7#i7 ,critical             
infra/ructure ,! t]m critical           
infra/ructure has ! mean+ provid$ 9     
section #ajaf7;e7 ( ! ,,usa ,patriot    
,act ( #bjja 7#db ,u4,s4,c4 #eaie;c7e774
  7#aj7 ,develop] ,! t]m develop] means 
a develop] ( a fronti] artificial       

intellig5ce model4  7#aa7 ,fronti]      
artificial intellig5ce model ,! t]m     
fronti] artificial intellig5ce model    
means an artificial intellig5ce model1  
or sy/em comb9+ multiple artificial     
intellig5ce models1 t exhibits or c\ld  
be modifi$ to exhibit high levels (     
p]=mance at tasks t pose a s]i\s risk to
 national security1 national economic   
security1 or public heal? or safety4    
7#ab7 ,in/itute ,! t]m ,in/itute means !
 ,national ,in/itute ( ,/&>ds &         
,te*nology4  7#ac7 ,secret>y ,! t]m     
,secret>y means ! ,secret>y ( ,comm]ce4 
#c4 ,artificial ,intellig5ce ,safety    
,bo>d  7a7 ,artificial ,intellig5ce     
,safety ,bo>d  7#a7 ,e/abli%m5t  7,a7 ,9
 g5]al ,n lat] ?an #cj days aft] ! date 
( ! enactm5t ( ?is ,act1 ! ,secret>y    
%all e/abli% )9 ! ,dep>tm5t ( ,comm]ce a
 bo>d to address artificial intellig5ce 
risks4  7,b7 ,designation ,! bo>d       
e/abli%$ "u subp>agraph 7,a7 %all be    
kn[n z ! ,artificial ,intellig5ce       
,safety ,bo>d 7ref]r$ to 9 ?is ,act z ! 

,bo>d74  7,c7 ,p]man5t /atus ,! ,bo>d   
%all be a p]man5t advisory committee1 & 
section #ajac ( title #e1 ,unit$ ,/ates 
,code1 %all n apply to ! ,bo>d4  7#b7   
,memb]%ip  7,a7 ,composition ,! ,bo>d   
%all be compos$ ( memb]s :o are appo9t$ 
z foll[s3 7i7 ,"o memb] select$ by !    
,director ( ! ,in/itute4  7ii7 ,"o memb]
 select$ by ! ,secret>y4  7iii7 ,"o     
memb] select$ by ! ,director ( !        
,cyb]security & ,infra/ructure ,security
 ,ag5cy4  7iv7 ,"o memb] select$ by !   
,director ( ! ,national ,security       
,ag5cy4  7v7 ,"o memb] select$ by !     
,secret>y ( ! ,treasury4  7,b7          
,nongov]nm5tal exp]ts ,9 addition to !  
memb]s ( ! ,bo>d appo9t$ "u subp>agraph 
7,a71 ! ,secret>y %all appo9t memb]s :o 
are n (fic]s or employees ( ! ,f$]al    
,gov]nm5t & :o ! ,secret>y selects f    
among individuals :o-- 7i7 are lead+    
te*nical exp]ts n affiliat$ ) a develop]
 or provid] ( artificial intellig5ce    
sy/ems2  7ii7 are lead+ te*nical exp]ts 
affiliat$ ) develop]s or provid]s (     

artificial intellig5ce sy/ems2  7iii7   
are individuals ) exp]tise 9 develop+   
evaluations to te/ artificial           
intellig5ce sy/ems2  7iv7 are           
individuals ) exp]tise 9 consum]        
protection & antitru/ jurisprud5ce2 &   
7v7 h k or exp]tise t ! ,secret>y       
det]m9es w\ld fur!r ! purpose ( ! duties
 ( ! ,bo>d4  7,c7 ,int]national         
p>ticipation ,! ,secret>y1 9 coord9ation
 ) & subject to ! agreem5t ( ! ,secret>y
 ( ,/ate1 %all und]take negotiations )  
=eign p>tn]s1 & ent] into agreem5ts z   
appropriate & subject to ! disclosure   
requirem5ts ( section #aab;b ( title #a1
 ,unit$ ,/ates ,code1 to facilitate     
coop]ative activities1 regulatory       
reciprocity1 & appropriate protection ( 
intellectual prop]ty rights associat$ ) 
address+ artificial intellig5ce safety &
 security risks1 includ+-- 7i7 !        
e/abli%m5t ( jo9t te/+ environm5ts2     
7ii7 jo9tly conduct+ competitive        
processes or competitive rese>* programs
 to aw>d ca% prizes or o!r types (      

recognition = basic1 advanc$1 & appli$  
rese>*1 te*nology developm5t1 &         
prototype developm5t t advance !        
security & safety ( fronti] artificial  
intellig5ce models2  7iii7 promulgat+   
jo9t advisories or te*nical guidance    
conc]n+ security or safety risks        
associat$ ) fronti] artificial          
intellig5ce sy/ems2  7iv7 facilitat+ (  
secure in=mation %>+ reg>d+ artificial  
intellig5ce security or safety incid5ts2
 &  7v7 /&>diz+ evaluation protocols4   
7#c7 ,t]ms & vacancies  7,a7 ,t]ms ,ea* 
memb] ( ! ,bo>d %all s]ve = a t]m ( n   
long] ?an #c ye>s & may be reappo9t$ =  
#a successive t]m4  7,b7 ,vacancy       
replacem5t ,! memb]s ( ! ,bo>d %all     
develop a vacancy replacem5t proc$ure t 
includes-- 7i7 = vacancies occurr+ due  
to ! end ( a memb]'s t]m1 a vote n lat] 
?an #ij days be=e ! la/ day ( ! memb]'s 
t]m2 &  7ii7 = vacancies occurr+ "u     
subp>agraph 7,c7 or = any o!r reason1 ! 
*air ( ! ,bo>d %all nom9ate a replacem5t
 f ! same /akehold] category "u p>agraph

 7#b71 to ! ext5t practicable1 z ! memb]
 creat+ ! vacancy1 subject to approval  
by a majority vote ( ! memb]s ( ! ,bo>d4
  7,c7 ,removal ,a memb] %all be remov$ 
f ! ,bo>d if-- 7i7 ! memb] fails to     
comply ) ! conflict ( int]e/ policy     
adopt$ pursuant to p>agraph 7#e77;,d72  
or  7ii7 ! memb] is d5i$ ! requisite    
security cle>ance "u p>agraph           
7#d77;,a77iii74  7,d7 ,*air ,! *air ( ! 
,bo>d %all be select$ by a majority vote
 among a quorum ( ! memb]s appo9t$ "u   
p>agraph 7#b7 & %all s]ve n m ?an "o    
#b-ye> t]m4  7#d7 ,memb] access to      
classifi$ in=mation  7,a7 ,access  7i7  
,9 g5]al ,n lat] ?an #fj days aft] !    
date on :i* a memb] is fir/ appo9t$ to !
 ,bo>d & be=e ! memb] is grant$ access  
to any classifi$ in=mation necess>y to  
p>ticipate 9 a clos$ session pursuant to
 p>agraph 7#e77;,f71 ! ,secret>y %all   
det]m9e1 = ! purposes ( ! ,bo>d1 if !   
memb] %\ld be re/rict$ f review+1       
discuss+1 or possess+ classifi$         
in=mation4  7ii7 ,managem5t ,access to  

classifi$ in=mation %all be manag$ 9    
accordance ) ,executive ,ord] #acebf    
7#ej ,u4,s4,c4 #cafa note2 relat+ to    
classifi$ national security in=mation71 
or any subsequ5t correspond+ ,executive 
ord]4  7iii7 ,cle>ance requirem5t  7,i7 
,9 g5]al ,! ,secret>y %all sponsor ea*  
memb] ( ! ,bo>d = a security cle>ance at
 ! ,top ,secret level ) access to       
s5sitive comp>tm5t$ in=mation1 z        
appropriate1 = ! purposes ( p>ticipat+ 9
 c>ry+ out ! duties ( ! ,bo>d4  7,,ii7  
,d5ial ,any memb] :o fails to obta9 a   
security cle>ance1 includ+ by be+ d5i$  
by ! appropriate au?orities or if !     
,secret>y det]m9es ! memb] %\ld be      
re/rict$ f review+1 discuss+1 or        
possess+ classifi$ in=mation1 %all be   
remov$ f ! ,bo>d & a new memb] %all be  
appo9t$ pursuant to ! vacancy proc$ures 
"u p>agraph 7#c77;,b74  7,b7 ,protection
 ( in=mation ,a memb] ( ! ,bo>d grant$  
access to classifi$ in=mation %all sign 
& comply ) ! agreem5ts to protect su*   
in=mation f unau?oriz$ disclosure & to  

o!rwise protect ! classifi$ in=mation 9 
accordance ) ! applicable requirem5ts = 
! p>ticul> level ( classification ( !   
in=mation4  7,c7 ,rule ( con/ruction    
,no?+ 9 ?is p>agraph %all be con/ru$ to 
affect ! exi/+ security cle>ance ( a    
memb] ( ! ,bo>d or ! au?ority ( a ,f$]al
 ag5cy to provide or d5y a memb] ( !    
,bo>d access to any specific pieces (   
classifi$ in=mation4  7#e7 ,proc$ures   
7,a7 ,designat$ ,f$]al (fic] ,!         
,secret>y %all designate a ,f$]al (fic] 
or employee to s]ve z ! designat$ ,f$]al
 (fic] ( ! ,bo>d1 consi/5t ) !          
requirem5ts ( *apt] #aj ( title #e1     
,unit$ ,/ates ,code 7commonly kn[n z !  
,f$]al ,advisory ,committee ,act74  7,b7
 ,initial meet+ & bylaws ,n lat] ?an #fj
 days aft] ! date ( ! enactm5t ( ?is    
,act1 ! ,bo>d %all conv5e & e/abli%     
bylaws t-- 7i7 gov]n quorum & vot+      
rules1 includ+ implem5tation ( !        
decisionmak+ majority vot+ requirem5t   
specifi$ 9 p>agraph 7#e77;,c77ii72 &    
7ii7 set deliv]able timel9es & meet+    

s*$ules4  7,c7 ,op]at+ proc$ures ,unless
 o!rwise specifi$1 ! ,bo>d %all adopt   
writt5 proc$ures gov]n+ its meet+s1     
consi/5t ) *apt] #aj ( title #e1 ,unit$ 
,/ates ,code1 t include-- 7i7           
requirem5ts = public notice ( meet+s & !
 ma9t5ance ( records & m9utes2  7ii7    
decisionmak+ by majority vote ( ^?      
pres5t & vot+2  7iii7 au?orization = !  
e/abli%m5t ( subgr\ps z necess>y1       
subject to ! approval ( ! *air ( !      
,bo>d2 &  7iv7 approval ( ! meet+ ag5das
 by ! *air 9 consultation ) ! designat$ 
,f$]al (fic] "u subp>agraph 7,a7 to     
ensure compliance ) applicable laws4    
7,d7 ,conflict-(-int]e/ policy  7i7 ,9  
g5]al ,! ,bo>d %all adopt & en=ce a     
writt5 conflict ( int]e/ policy to      
ensure t memb]s ( ! ,bo>d h a fiduci>y  
responsibility to ! ,bo>d1 a duty to    
report conflicts ( int]e/1 includ+ !    
appe>ance ( a conflict ( int]e/1 & d n  
p>ticipate 9 delib]ations or votes f :i*
 !y p]sonally or _! employ] w\ld        
directly & mat]ially b5efit4  7ii7      

,requir$ disclosures ,! policy "u clause
 7i7 %all require ea* memb] to publicly 
disclose all relevant f9ancial &        
employm5t relation%ips1 includ+         
relation%ips held by a sp\se or imm$iate
 family memb]1 & include recusal        
proc$ures 9 ! ev5t ( a conflict4  7iii7 
,records ,! designat$ ,f$]al (fic] "u   
subp>agraph 7,a7 %all ma9ta9 records (  
disclosures "u clause 7ii7 ( ?is        
subp>agraph & make summ>ies ( !         
disclosures available to ! ,secret>y4   
7,e7 ,?reat in=mation access ,!         
,director ( ,national ,intellig5ce1 9   
coord9ation ) ! heads ( o!r appropriate 
,f$]al entities1 %all ensure t ! ,bo>d  
has access to relevant intellig5ce1     
includ+ ?r\gh clos$ or classifi$ brief+s
 or ! provision ( classifi$ in=mation1  
:5 appropriate4  7,f7 ,clos$ sessions   
,not)/&+ section #ajji ( title #e1      
,unit$ ,/ates ,code1 ! ,bo>d may hold   
clos$ or re/rict$-access sessions :5 !  
,secret>y det]m9es t ! matt]s to be     
discuss$ involve any ( ! foll[+3 7i7    

,classifi$ in=mation4  7ii7 ,an         
artificial intellig5ce security incid5t4
  7iii7 ,an artificial intellig5ce      
security vuln]ability4  7iv7 ,an        
artificial intellig5ce flaw4  7v7 ,?reat
 in=mation4  7vi7 ,propriet>y bus9ess   
in=mation4  7vii7 ,o!r in=mation exempt 
f public disclosure "u section #eeb (   
title #e1 ,unit$ ,/ates ,code4  7#f7    
,duties  7,a7 ,9 g5]al ,! ,bo>d %all--  
7i7 develop a process to p]=m te*nical  
evaluations to det]m9e :at capabilities 
or comb9ation ( capabilities con/itute  
high levels ( p]=mance at tasks t pose a
 s]i\s risk to national security1       
national economic security1 or public   
heal? or safety2  7ii7 develop processes
 & metrics = evaluat+ risks pos$ by     
fronti] artificial intellig5ce models1  
model v>iants1 *eckpo9ts1 or o!r        
artificial intellig5ce models or v]sions
 us$ dur+ developm5t1 tra9+1 te/+1      
evaluation1 or r$-team+1 includ+ v]sions
 t are n publicly available1 :e!r or n  
!y are int5d$ = ev5tual public release1 

:]e su* models1 v>iants1 *eckpo9ts1 or  
o!r v]sions meet or c\ld be modifi$ to  
meet ! risks describ$ 9 section #b7c72  
7iii7 develop te*nical /&>ds & con=mity 
assessm5t me?odologies1 includ+-- 7,i7  
/&>dize =mats & processes = publi%+     
model or sy/em c>ds ) te*nical details (
 artificial intellig5ce sy/ems2  7,,ii7 
recomm5dations = ma9ta9+ cyb]security   
measures = develop]s or provid]s (      
artificial intellig5ce sy/ems across !  
lifecycle2  7,,iii7 processes & security
 controls = develop]s or provid]s (     
artificial intellig5ce sy/ems to use to 
evaluate risks f employees or o!r       
p]sonnel :o h access to artificial      
intellig5ce sy/ems develop$ or 9        
developm5t2 &  7,,iv7 recomm5dations on 
appropriate f9ancial & o!r res\rc+ =    
develop]s or provid]s ( artificial      
intellig5ce sy/ems1 includ+ small- &    
m$ium-siz$ develop]s or provid]s1 to    
robu/ly engage 9 safety & security      
rese>* focus$ on ! deploym5t ( fronti]  
artificial intellig5ce models2 &  7iv7  

e/abli% te*nical /&>ds1 security        
controls1 & ref]5ce ar*itectures =      
secur+ te/+ environm5ts dur+ evaluations
 ( fronti] artificial intellig5ce       
models1 or models ) kn[n or reasonably  
=eseeable capabilities to discov] &     
exploit s(tw>e vuln]abilities )\t direct
 prompt+ by a human us]1 includ+-- 7,i7 
proc$ures = effective risk-model+ prior 
to comm5c+ any evaluation2  7,,ii7      
te*nical controls to ensure effective   
isolation & h>d5+ ( evaluation          
environm5ts1 includ+ cont9u\s           
re-evaluation ( security configurations 
?r\gh\t evaluations2  7,,iii7 policies &
 proc$ures = cont9u\s monitor+ ( model  
behavior1 includ+ monitor+ 9 real-"t1   
us+ pre-e/abli%$ or conditional         
*eckpo9ts1 & ?r\gh po/-evaluation       
audits2  7,,iv7 policies1 proc$ures1 &  
te*nical controls = cont9u\s monitor+ ( 
evaluation environm5ts1 includ+ automat$
 id5tification ( *anges to security     
controls or configurations2  7,v7       
policies1 proc$ures1 & te*nical controls

 = safegu>d+ id5tity & access managem5t 
res\rces associat$ ) ! evaluation       
environm5t1 or encompass+ sy/ems1 f     
access by any model "u evaluation2 &    
7,,vi7 conditions1 policies1 proc$ures1 
& te*nical controls = prompt t]m9ation (
 any evaluation 9 :i* a model has op]at$
 beyond ! policies1 proc$ures1 or       
te*nical controls describ$ 9 clauses    
7,i7 ?r\gh 7,v7 or t o!rwise poses an   
imm95t risk to any individual or prop]ty
 outside ! scope ( ! evaluation4  7,b7  
,p]iodic reassessm5t ( te*nical         
evaluations & be/ practices ,n less     
frequ5tly ?an once e ye>1 ! ,bo>d %all--
 7i7 review ea* /&>d develop$ "u        
subp>agraph 7,a72  7ii7 det]m9e :e!r !  
/&>d %\ld be modifi$ or revok$2 &  7iii7
 submit to ! ,secret>y any propos$      
modification or revocation4  7#g7       
,support /aff ,! ,director ( !          
,in/itute1 act+ ?r\gh ! ,c5t] =         
,artificial ,intellig5ce ,/&>ds &       
,innovation 7or any successor (fice or  
entity71 %all provide /aff & o!r support

 necess>y to assi/ ! ,bo>d 9 c>ry+ out  
its duties "u ?is ,act4 ,su* /aff %all  
"w "u ! direction ( ! ,bo>d1 %all       
ex]cise on behalf ( ! ,bo>d ! access    
provid$ to ! ,bo>d "u subsection 7f71 & 
%all rema9 employees ( ! ,in/itute4  7b7
 ,adoption ( /&>ds  7#a7 ,deadl9e =     
submission ( /&>ds ,n lat] ?an #ij days 
aft] ! date ( ! e/abli%m5t ( ! ,bo>d "u 
subsection 7a77#a71 ! ,bo>d %all develop
 & submit to ! ,secret>y ! propos$ /&>ds
 requir$ "u subsection 7a77#f74  7#b7   
,adoption ( /&>ds  7,a7 ,9 g5]al ,n lat]
 ?an #cj days aft] ! date on :i* !      
,secret>y receives a propos$ /&>d "u    
p>agraph 7#a71 ! ,secret>y %all adopt ! 
propos$ /&>d or ! modifi$ /&>ds by rule4
  7,b7 ,modification ( /&>d ,! ,secret>y
 may modify a propos$ /&>d receiv$ "u   
p>agraph 7#a7 if ! ,secret>y det]m9es t 
! modification is necess>y = ! purpose (
 national security4  7,c7 ,publication  
,! ,secret>y %all publi% 9 ! ,f$]al     
,regi/] ! reasons = any modification    
made "u ?is p>agraph consi/5t ) laws &  

regulations gov]n+ ! disclosure (       
classifi$ in=mation or mat]ial4  7c7    
,m&atory compliance ,ea* develop] %all  
comply ) ea* /&>d adopt$ "u subsection  
7b77#b7 t is applicable to ! develop]4  
7d7 ,en=cem5t  7#a7 ,9 g5]al ,!         
,secret>y %all en=ce compliance ) ?is   
section4  7#b7 ,civil p5alty ,a develop]
 t violates subsection 7c7 %all be      
liable to ! ,unit$ ,/ates = a civil     
p5alty ( n m ?an #bej1jjj = ea*         
violation4  7#c7 ,cont9u+ violations    
,ea* day dur+ :i* a violation "u        
subsection 7c7 cont9ues %all con/itute a
 sep>ate violation4  7#d7 ,civil action 
,! ,attorney ,g5]al may1 at ! reque/ ( !
 ,secret>y1 br+ a civil action 9 an     
appropriate di/rict c\rt ( ! ,unit$     
,/ates-- 7,a7 to enjo9 a violation (    
subsection 7c72 or  7,b7 to recov] a    
civil p5alty impos$ "u p>agraph 7#b74   
7e7 ,secure rese>*-,te/-,b$s ,9 develop+
 a process to p]=m te*nical evaluations 
pursuant to section #f7;,a77i71 !       
,secret>y may--  7#a7 seek to utilize   

secure comput+ environm5ts1 on a        
reimbursable basis1 provid$ by ,f$]al   
p>tn]s1 includ+--  7,a7 ! ,national     
,security ,ag5cy2 &  7,b7 ! ,national   
,laboratories ( ! ,dep>tm5t ( ,en]gy2 & 
7#b7 make su* secure comput+ environm5ts
 available to private sector1 ,f$]al    
ag5cies1 & qualifi$ indep5d5t exp]t     
p>ticipants1 on a co/-recov]y basis1 to 
engage 9 artificial intellig5ce security
 rese>*1 includ+ ?r\gh ! secure         
provision ( access 9 a secure environm5t
 = pre-deploym5t te/+ ( any fronti]     
artificial intellig5ce model prior to   
public release if security requirem5ts  
necessitate ho/+ outside a comm]cial    
comput+ environm5t4  7f7 ,requirem5t t  
develop]s ( fronti] artificial          
intellig5ce models give access to ,bo>d 
be=e public release ,n lat] ?an #de     
cal5d> days be=e a develop] introduces  
into int]/ate or =eign comm]ce a fronti]
 artificial intellig5ce model1 !        
develop] %all make available to ! ,bo>d 
access to ! fronti] artificial          

intellig5ce model1 includ+ model's      
weights1 configuration files1 runtimes1 
or s(tw>e libr>ies necess>y to op]ate ! 
fronti] artificial intellig5ce model4   
#d4 ,safety plan requirem5t  7a7 ,9     
g5]al ,ea* develop] %all develop1       
publi%1 & foll[ a safety plan 7ref]r$ to
 9 ?is section z ! ,model ,safety ,plan7
 = ea* artificial intellig5ce sy/em or  
model t ! develop]-- 7#a7 creates2  7#b7
 sub/antially modifies2 or  7#c7 uses 9 
! tra9+ or evaluation ( o!r artificial  
intellig5ce models4  7b7 ,requir$       
crit]ia ,ea* ,model ,safety ,plan %all  
include-- 7#a7 ! artificial intellig5ce 
model or sy/em to :i* x applies2  7#b7  
an artificial intellig5ce capabilities  
or risk assessm5t prep>$ by ! develop]  
specifically = ! artificial intellig5ce 
model or sy/em associat$ ) ! ,model     
,safety ,plan2  7#c7 a li/ ( ! specific 
mitigation measures t ! develop] w      
und]take = ea* item describ$ 9 !        
artificial intellig5ce capabilities or  
risk assessm5t prep>$ pursuant to       

p>agraph 7#b71 across product lifecycle2
 &  7#d7 ! id5tity ( ! corporate (fic]  
responsible = ! implem5tation ( ! ,model
 ,safety ,plan4  7c7 ,requirem5t ,to    
file ,ea* ,model ,safety ,plan %all be  
submitt$ to ! ,secret>y 9 ! =m & mann]  
det]m9$ by ! ,secret>y4  #e4 ,database =
 artificial intellig5ce security &      
safety incid5ts1 flaws1 & risks  7a7    
,track+ ( artificial intellig5ce        
security & artificial intellig5ce safety
 incid5ts & artificial intellig5ce flaws
  7#a7 ,volunt>y submissions ,n lat] ?an
 #ahj days aft] ! date ( ! enactm5t (   
?is ,act1 ! ,director ( ! ,in/itute     
%all1 9 coord9ation ) ! ,director ( !   
,cyb]security & ,infra/ructure ,security
 ,ag5cy1 e/abli% me*anisms by :i*       
private sector entities1 public sector  
organizations1 civil society gr\ps1 &   
academic rese>*]s may volunt>ily %>e    
in=mation ) ! ,in/itute on confirm$ or  
suspect$ artificial intellig5ce security
 or artificial intellig5ce safety       
incid5ts1 or on confirm$ or suspect$    

artificial intellig5ce flaws1 includ+   
flaws id5tifi$ ?r\gh te/+1 evaluation1  
r$-team+1 or po/-incid5t analysis 9 a   
mann] t pres]ves confid5tiality ( any   
affect$ p>ty4 ,su* me*anisms %all-- 7,a7
 lev]age1 to ! greate/ ext5t possible1  
/&>diz$ disclosure & incid5t description
 =mats2  7,b7 develop processes to      
associate reports p]ta9+ to ! same      
incid5t ) a s+le incid5t id5tifi]1 & to 
associate incid5ts or ne> misses t appe>
 to arise f ! same artificial           
intellig5ce flaw ) a common flaw        
id5tifi]2  7,c7 e/abli% classification1 
in=mation retrieval1 & report+ me*anisms
 t suffici5tly diff]5tiate betwe5       
artificial intellig5ce security incid5ts
 & artificial intellig5ce safety        
incid5ts1 & betwe5 su* incid5ts &       
artificial intellig5ce flaws2 &  7,d7   
create appropriate taxonomies to        
classify incid5ts bas$ on relevant      
*>act]i/ics1 impact1 or o!r relevant    
crit]ia1 & to classify artificial       
intellig5ce flaws bas$ on _!            

*>act]i/ics1 affect$ capabilities1      
likely consequ5ces1 & recurr5ce across  
models or sy/ems4  7#b7 ,publicly       
accessible database  7,a7 ,e/abli%m5t ( 
database requir$ ,n lat] ?an #a ye> aft]
 ! date ( ! enactm5t ( ?is ,act1 !      
,director ( ! ,in/itute %all1 9         
coord9ation ) ! ,director ( !           
,cyb]security & ,infra/ructure ,security
 ,ag5cy1 e/abli% a publicly accessible  
database ( artificial intellig5ce       
security incid5ts & artificial          
intellig5ce safety incid5ts1 toge!r ) a 
catalog ( artificial intellig5ce flaws  
id5tifi$ ?r\gh reports1 te/+1           
evaluations1 or inve/igations "u ?is    
section4  7,b7 ,review & population (   
database ,^u receipt ( relevant         
in=mation on an artificial intellig5ce  
security incid5t or artificial          
intellig5ce safety incid5t "u p>agraph  
7#a71 or on an artificial intellig5ce   
flaw "u p>agraph 7#a71 ! ,director ( !  
,in/itute %all review ! in=mation &     
det]m9e :e!r ! describ$ incid5t or flaw 

con/itutes an artificial intellig5ce    
security or artificial intellig5ce      
safety risk appropriate = inclusion 9 ! 
database develop$ & e/abli%$ "u         
subp>agraph 7,a74  7,c7 ,id5tification (
 causal factors & artificial intellig5ce
 flaws ,:5 mak+ a det]m9ation "u        
subp>agraph 7,b71 ! ,director ( !       
,in/itute %all id5tify causal factors = 
! artificial intellig5ce security       
incid5t or ! artificial intellig5ce     
safety incid5t & det]m9e :e!r ! incid5t 
reveals1 is associat$ )1 or provides    
evid5ce ( an artificial intellig5ce     
flaw4 ,if ! ,director ( ! ,national     
,in/itute ( ,/&>ds & ,te*nology         
id5tifies su* a flaw1 ! ,director %all  
assign or associate ! incid5t ) a common
 flaw id5tifi] &1 to ! ext5t            
practicable1 id5tify o!r kn[n incid5ts1 
ne> misses1 models1 or sy/ems associat$ 
) ! same flaw1 includ+-- 7i7 !          
artificial intellig5ce sy/em2  7ii7 !   
deploym5t ( ! artificial intellig5ce    
sy/ems2 &  7iii7 practices relat$ to !  

op]ation ( ! artificial intellig5ce     
sy/em1 includ+ misuse ( ! artificial    
intellig5ce sy/em4  7#c7 ,m&atory       
submissions  7,a7 ,9 g5]al ,! foll[+    
entities %all report any confirm$       
artificial intellig5ce safety incid5t or
 artificial intellig5ce security incid5t
 )9 #cj days ( confirmation ( su*       
incid5t & )9 #gb h\rs if su* incid5t    
poses an imm95t ?reat to national       
security1 critical infra/ructure1 or    
public safety3 7i7 ,any develop] or     
provid] ( a fronti] artificial          
intellig5ce model4  7ii7 ,any op]ator ( 
critical infra/ructure t utilizes an    
artificial intellig5ce model 9 ! context
 ( manag+ indu/rial control sy/ems or   
o!r op]ational te*nologies4  7,b7       
,applicability ,= ! purposes (          
subp>agraph 7,a71 ! report+ requirem5t  
"u ?is p>agraph %all apply reg>dless (  
:e!r ! fronti] artificial intellig5ce   
model1 or any model v>iant1 *eckpo9t1 or
 o!r v]sion ( su* model involv$ 9 !     
incid5t1 is or is int5d$ to be made     

publicly available1 & reg>dless ( :e!r !
 incid5t occurs dur+ developm5t1 tra9+1 
te/+1 evaluation1 r$-team+1 deploym5t1  
or op]ation4  7#d7 ,priorities ,9       
evaluat+ in=mation "u p>agraph 7#b7 &   
det]m9+ "u su* subp>agraph :e!r to      
include a report ( an incid5t 9 !       
database requir$ by p>agraph 7#b77;,a71 
! ,director ( ! ,in/itute %all          
prioritize inclusion 9 ! database (     
cases 9 :i* a describ$ incid5t-- 7,a7   
describes an artificial intellig5ce     
sy/em us$ 9 critical infra/ructure or   
safety-critical sy/ems2  7,b7 w\ld      
result 9 a high-sev]ity or cata/rophic  
impact to ! p or economy ( ! ,unit$     
,/ates2  7,c7 includes an artificial    
intellig5ce sy/em widely us$ 9 comm]cial
 or public sector contexts 9 ! ,unit$   
,/ates2 or  7,d7 con/itutes a m&atory   
submission pursuant to subsection       
7a77#c74  7#e7 ,exemption f disclosure2 
reports & anonymity  7,a7 ,anonymity ,! 
,director ( ! ,in/itute %all populate ! 
database develop$ & e/abli%$ "u p>agraph

 7#b77;,a7 ) incid5ts & artificial      
intellig5ce flaws bas$ on public reports
 & in=mation %>$ us+ ! me*anism e/abli%$
 pursuant to p>agraphs 7#a7 & 7#c71     
ensur+ t any incid5t description        
suffici5tly anonymizes ^? affect$1      
unless ^? :o are affect$ h cons5t$ to _!
 names be+ includ$ 9 ! database4  7,b7  
,exemption f disclosure ,any in=mation  
%>$ us+ ! me*anism e/abli%$ pursuant to 
p>agraphs 7#a7 & 7#c7-- 7i7 %all be     
exempt f disclosure & )held1 unless an  
affect$ p>ty cons5ts to ! inclusion ( _!
 names 9 ! database z provid$ = "u      
subp>agraph 7,a71 f ! public1 pursuant  
to section #eeb7;b77#c77;,b7 ( title #e1
 ,unit$ ,/ates ,code1 & any o!r         
provision ( ,unit$ ,/ates law or law (  
any ,/ate1 political subdivision or     
ag5cy !re(1 or ,tribe requir+ disclosure
 ( in=mation or records2 &  7ii7 %all n 
be deem$ a waiv] ( any applicable       
privilege or protection1 includ+ trade  
secret protection4  7,c7 ,consultation  
requir$ ,be=e publi%+ in=mation reg>d+  

an artificial intellig5ce safety incid5t
 or an artificial intellig5ce security  
incid5t1 ! ,director ( ! ,in/itute %all 
consult ) ! develop] or provid] ( !     
artificial intellig5ce sy/em involv$ 9  
an incid5t4  7b7 ,mat]ial risk guidance 
,n lat] ?an #ahj days aft] ! date ( !   
enactm5t ( ?is ,act1 ! ,director ( !    
,in/itute %all1 9 coord9ation ) !       
,director ( ! ,cyb]security &           
,infra/ructure ,security ,ag5cy1 publi% 
nonb9d+ guidance t provides illu/rative 
crit]ia & examples = det]m9+ :5 an ev5t 
mat]ially increases a risk = purposes ( 
an artificial intellig5ce safety incid5t
 or an artificial intellig5ce security  
incid5t4  #f4 ,ag5tic artificial        
intellig5ce tru/ & v]ification  7a7     
,ag5tic artificial intellig5ce pr(ile   
7#a7 ,9 g5]al ,n lat] ?an #ah mon?s aft]
 ! date ( ! enactm5t ( ?is ,act1 !      
,director ( ! ,in/itute %all develop1 9 
collaboration ) o!r public & private    
sector organizations z appropriate1 a   
cross-sectoral pr(ile 7ref]r$ to 9 ?is  

section z ! ,ag5tic ,,ai ,pr(ile7 ( !   
,artificial ,intellig5ce ,risk          
,managem5t ,framework 7,,ni/ ,,ai       
#ajj-a7 or any successor framework      
7ref]r$ to 9 ?is section z ! ,framework7
 = artificial intellig5ce ag5ts4  7#b7  
,purpose & cont5ts ,! ,ag5tic ,,ai      
,pr(ile %all assi/ organizations 9 us+ !
 ,framework to map1 measure1 manage1 &  
gov]n risks associat$ ) artificial      
intellig5ce ag5ts4 ,! ,ag5tic ,,ai      
,pr(ile %all1 at a m9imum-- 7,a7 def9e  
risks t are novel to or exac]bat$ by    
artificial intellig5ce ag5ts2  7,b7     
include a framework = classification (  
ag5t autonomy levels2 &  7,c7 address   
cyb]security risks specific to          
artificial intellig5ce ag5ts1 includ+   
risks relat$ to ag5t id5tity1           
au!ntication1 & au?orization1 & !       
relation%ip ( su* risks to !            
,cyb]security ,framework 7,,ni/         
,,cswp-#bi7 or any successor framework4 
7#c7 ,relation%ip to ! ,framework ,!    
,ag5tic ,,ai ,pr(ile %all be a companion

 res\rce to ! ,framework & %all n modify
 or sup]s$e ! ,framework4  7b7 ,common  
template = artificial intellig5ce ag5t  
assurance  7#a7 ,9 g5]al ,n lat] ?an #ah
 mon?s aft] ! date ( ! enactm5t ( ?is   
,act1 ! ,director ( ! ,in/itute %all    
initiate1 9 collaboration ) o!r public &
 private sector organizations & ,f$]al  
ag5cies z appropriate1 ! developm5t ( a 
common template to docum5t artificial   
intellig5ce ag5ts & _! evaluation aga9/ 
widely recogniz$ /&>ds & frameworks4    
7#b7 ,elem5ts ,! template %all enable ! 
consi/5t docum5tation ( artificial      
intellig5ce ag5ts by provid+ /&>diz$    
t]m9ology & fields t relate to1 at a    
m9imum1 ! foll[+ elem5ts3 7,a7 ,id5tity 
& v]sion4  7,b7 ,int5d$ use & evaluat$  
scope4  7,c7 ,own]%ip & au?ority        
b\nd>ies4  7,d7 ,access to data1 sy/ems1
 & tools4  7,e7 ,evaluations aga9/      
widely recogniz$ /&>ds & frameworks4    
7,f7 ,! id5tity ( any indep5d5t         
evaluator1 :]e applicable4  7,g7 ,kn[n  
limitations & conditions ( use4  7#c7   

,applicability ,! ,director %all design 
! template to be us$ across sectors1    
indu/ries1 & organizational contexts by 
entities ( diff]+ sizes & res\rces4  7c7
 ,coord9ation ,! ,director %all ensure t
 ! template develop$ "u ?is subsection  
is consi/5t ) & n duplicative ( o!r     
ef=ts by ! ,in/itute relat$ to          
artificial intellig5ce ag5ts4