H.R. 9333 · In committee · Science, Technology, Communications

AI Flaw Reporting and Security Enhancement Act

What it does

Establish a voluntary reporting and tracking program for AI flaws, administered by the National Institute of Standards and Technology (NIST).
Direct NIST to convene stakeholders to define terms and classify AI flaws, including security-related and safety-related categories.
Require NIST to develop or partner with institutions to create infrastructure for voluntary reporting, collection, and tracking of AI flaws, including a national database.
Mandate that NIST report to Congress within three years on implementation of the program.

Official summary

AI Flaw Reporting and Security Enhancement Act This bill establishes a program to facilitate the voluntary reporting and tracking of artificial intelligence (AI) flaws, to be administered by the National Institute of Standards and Technology (NIST). In carrying out this program, NIST must seek to convene various stakeholders to establish common definitions for terms related to AI flaws and criteria for the classification of AI flaws (e.g., security-related flaws and safety-related flaws). The group must also support the development of technical standards and guidance related to detecting, managing, and disclosing AI flaws and prioritizing the remediation of such flaws. Further, NIST must develop, or enter into cooperative agreements with institutions of higher education or research institutions to develop, infrastructure for the voluntary reporting, collection, and tracking of AI flaws. This must include a national database of AI flaws or the modification of an existing national database to account for AI flaws. (NIST currently administers a national database of cybersecurity vulnerabilities.) NIST must consider certain topics when developing this infrastructure, including the…

Latest action

Jun 25, 2026: Ordered to be Reported in the Nature of a Substitute by the Yeas and Nays: 35 - 0.

Committee: House Science, Space, and Technology