I 
118TH CONGRESS 
2D SESSION 
H. R. 9737 
To improve the tracking and processing of security and safety incidents 
and risks associated with artificial intelligence, and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
SEPTEMBER 20, 2024 
Ms. ROSS (for herself and Mr. BEYER) introduced the following bill; which 
was referred to the Committee on Science, Space, and Technology, and 
in addition to the Committees on Homeland Security, Intelligence (Per-
manent Select), and Education and the Workforce, for a period to be sub-
sequently determined by the Speaker, in each case for consideration of 
such provisions as fall within the jurisdiction of the committee concerned 
A BILL 
To improve the tracking and processing of security and safe-
ty incidents and risks associated with artificial intel-
ligence, and for other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Secure Artificial Intel-
ligence Act of 2024’’ or the ‘‘Secure A.I. Act of 2024’’. 
SEC. 2. DEFINITIONS. 
In this Act: 
VerDate Sep 11 2014 
01:00 Oct 04, 2024
Jkt 059200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H9737.IH
H9737
kjohnson on DSK7ZCZBW3PROD with $$_JOB
party to subvert, without authorization, the con-
fidentiality, integrity, or availability of an artificial 
intelligence system, including through techniques 
such as— 
(A) data poisoning; 
(B) evasion attacks; 
(C) privacy-based attacks; and 
(D) abuse attacks. 
(4) COUNTER-ARTIFICIAL INTELLIGENCE.—The 
term ‘‘counter-artificial intelligence’’ means tech-
niques or procedures to extract information about 
the behavior or characteristics of an artificial intel-
ligence system, or to learn how to manipulate an ar-
tificial intelligence system, in order to subvert the 
confidentiality, integrity, or availability of an artifi-
cial intelligence system or adjacent system. 
SEC. 3. VOLUNTARY TRACKING AND PROCESSING OF SECU-
RITY AND SAFETY INCIDENTS AND RISKS AS-
SOCIATED WITH ARTIFICIAL INTELLIGENCE. 
(a) PROCESSES
AND PROCEDURES
FOR VULNER-
ABILITY MANAGEMENT.—Not later than 180 days after 
the date of the enactment of this Act, the Director of the 
National Institute of Standards and Technology shall— 
(1) initiate a process to update processes and 
procedures associated with the National Vulner-
VerDate Sep 11 2014 
01:00 Oct 04, 2024
Jkt 059200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H9737.IH
H9737
kjohnson on DSK7ZCZBW3PROD with $$_JOB
ability Database of the Institute to ensure that the 
database and associated vulnerability management 
processes incorporate artificial intelligence security 
vulnerabilities to the greatest extent practicable; and 
(2) identify any characteristics of artificial in-
telligence security vulnerabilities that make utiliza-
tion of the National Vulnerability Database inappro-
priate for their management and develop processes 
and procedures for vulnerability management for 
those vulnerabilities. 
(b) VOLUNTARY TRACKING OF ARTIFICIAL INTEL-
LIGENCE
SECURITY
AND
ARTIFICIAL
INTELLIGENCE 
SAFETY INCIDENTS.— 
(1) VOLUNTARY
DATABASE
REQUIRED.—Not 
later than 1 year after the date of the enactment of 
this Act, the Director of the Institute, in coordina-
tion with the Director of the Cybersecurity and In-
frastructure Security Agency, shall— 
(A) develop and establish a comprehensive, 
voluntary database to publicly track artificial 
intelligence security and artificial intelligence 
safety incidents; and 
(B) in establishing the database under sub-
paragraph (A)— 
VerDate Sep 11 2014 
01:00 Oct 04, 2024
Jkt 059200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H9737.IH
H9737
kjohnson on DSK7ZCZBW3PROD with $$_JOB
(i) establish mechanisms by which pri-
vate sector entities, public sector organiza-
tions, civil society groups, and academic re-
searchers, (including current and former 
employees and contractors of such entities, 
organizations, and groups), may volun-
tarily share information with the Institute 
on confirmed or suspected artificial intel-
ligence security or artificial intelligence 
safety incidents, in a manner that pre-
serves confidentiality of any affected party 
and of the reporting party; 
(ii) leverage, to the greatest extent 
possible, standardized disclosure and inci-
dent description formats; 
(iii) develop processes to associate re-
ports pertaining to the same incident with 
a single incident identifier; 
(iv) establish classification, informa-
tion retrieval, and reporting mechanisms 
that sufficiently differentiate between arti-
ficial intelligence security incidents and ar-
tificial intelligence safety incidents; and 
VerDate Sep 11 2014 
01:00 Oct 04, 2024
Jkt 059200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H9737.IH
H9737
kjohnson on DSK7ZCZBW3PROD with $$_JOB
(v) create appropriate taxonomies to 
classify incidents based on relevant charac-
teristics, impact, or other relevant criteria. 
(2) IDENTIFICATION AND TREATMENT OF MA-
TERIAL ARTIFICIAL INTELLIGENCE SECURITY OR AR-
TIFICIAL INTELLIGENCE SAFETY RISKS.— 
(A) IN
GENERAL.—Upon receipt of rel-
evant information on an artificial intelligence 
security or artificial intelligence safety incident, 
the Director of the Institute shall determine 
whether the described incident presents a mate-
rial artificial intelligence security or artificial 
intelligence safety risk sufficient for inclusion in 
the database developed and established under 
paragraph (1). 
(B) PRIORITIES.—In evaluating a reported 
incident pursuant to paragraph (1), the Direc-
tor shall prioritize inclusion in the database 
cases in which a described incident— 
(i) describes an artificial intelligence 
system used in critical infrastructure or 
safety-critical systems; 
(ii) would result in a high-severity or 
catastrophic impact to the people or econ-
omy of the United States; or 
VerDate Sep 11 2014 
01:00 Oct 04, 2024
Jkt 059200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H9737.IH
H9737
kjohnson on DSK7ZCZBW3PROD with $$_JOB
(iii) includes an artificial intelligence 
system widely used in commercial or public 
sector contexts. 
(3) REPORTS AND ANONYMITY.—The Director 
shall populate the voluntary database developed and 
established under paragraph (1) with incidents 
based on public reports and information shared 
using the mechanism established pursuant to sub-
paragraph (B)(i) of such paragraph, ensuring that 
any incident description sufficiently anonymizes 
those affected, unless those who are affected have 
consented to their names being included in the data-
base. 
(4) PROTECTION OF REPORTING PARTIES.— 
(A) 
PROHIBITION
AGAINST
RETALIA-
TION.—No employer may, directly or indirectly, 
discharge, demote, suspend, threaten, blacklist, 
harass, or in any other manner discriminate 
against any current or former employee or con-
tractor in the terms and conditions of employ-
ment or postemployment because of any act 
done by such employee or contractor— 
(i) in reporting incidents in accord-
ance with the mechanisms established in 
this section; 
VerDate Sep 11 2014 
01:00 Oct 04, 2024
Jkt 059200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H9737.IH
H9737
kjohnson on DSK7ZCZBW3PROD with $$_JOB