119th Congress (2025-2026)

HR 3919

Advanced AI Security Readiness Act

Introduced

Jurisdiction

US Congress

Session

119th Congress (2025-2026)

Official source

Chamber

House

Session

119th Congress (2025-2026)

Jurisdiction

US Congress

Bill overview

This bill directs the National Security Agency (NSA) to develop an ‘AI Security Playbook’ to protect advanced artificial intelligence (AI) technologies from theft by foreign adversaries. The playbook will identify vulnerabilities in AI systems and data centers, outline strategies for detecting and preventing cyber threats, and analyze potential government involvement in securing highly advanced AI. It also requires the NSA to engage with AI developers and researchers to understand the evolving security landscape of AI.

Key provisions

The NSA must create an ‘AI Security Playbook’ to defend against technology theft of covered AI technologies.
The Playbook will identify vulnerabilities in AI systems and data centers, focusing on cybersecurity risks.
It will outline strategies for detecting, preventing, and responding to cyber threats targeting AI.
The Playbook will analyze the level of government involvement needed for securing highly advanced AI systems.
The NSA will engage with AI developers and researchers to assess AI security capabilities.
The Playbook will include both classified and unclassified sections, with general guidelines for the private sector.
The NSA will collaborate with federally funded research centers specializing in AI security.
The bill defines ‘covered AI technologies’ as advanced AI systems with critical national security capabilities.

Who is affected

National Security Agency
Artificial Intelligence Developers
Government

Positions across the country

No public positions recorded for this legislation.

Arguments in favor

Reasons to support this legislation.

No arguments in favor have been submitted.

Submit yours

Arguments opposed

Reasons to oppose this legislation.

No arguments opposed have been submitted.

Submit yours

Legislative history

2025-06-11House

Referred to the House Committee on Intelligence (Permanent Select).

2025-06-11

Introduced in House

2025-06-11

Introduced in House

Read the latest version inline or switch to a previous version.

Jun 11, 2025XMLView source

119th CONGRESS — 1st Session

H. R. 3919

IN THE HOUSE OF REPRESENTATIVES

A BILL

To direct the Director of the National Security Agency to develop strategies to secure artificial intelligence related technologies.

1.Short title

This Act may be cited as the

Advanced AI Security Readiness Act

2.AI security playbook

(a)RequirementThe Director of the National Security Agency, acting through the Artificial Intelligence Security Center (or successor office), shall develop strategies (in this section referred to as the AI Security Playbook) to defend covered AI technologies from technology theft by threat actors.

(b)ElementsThe AI Security Playbook under subsection (a) shall include the following:

(1)Identification of potential vulnerabilities in advanced AI data centers and among advanced AI developers capable of producing covered AI technologies, with a focus on cybersecurity risks and other security challenges that are unique to protecting covered AI technologies and critical components of such technologies (such as threat vectors that do not typically arise, or are less severe, in the context of conventional information technology systems).

(2)Identification of components or information that, if accessed by threat actors, would meaningfully contribute to progress made by the actor with respect to developing covered AI technologies, including with respect to—

(A)

AI models and key components of such models;

(B)

core insights relating to the development of advanced AI systems, including with respect to training such systems, the inferences made by such systems, and the engineering of such systems; and

(C)

other related information.

(3)Strategies to detect, prevent, and respond to cyber threats by threat actors targeting covered AI technologies.

(4)Identification of the levels of security, if any, that would require substantial involvement by the United States Government in the development or oversight of highly advanced AI systems.

(5)Analysis of how the United States Government would be involved to achieve the levels of security identified in paragraph (4), including a description of a hypothetical initiative to build covered AI technology systems in a highly secure governmental environment, considering, at a minimum, cybersecurity protocols, provisions to protect model weights, efforts to mitigate insider threats (including personnel vetting and security clearance adjudication processes), access control procedures, counterintelligence and anti-espionage measures, contingency and emergency response plans, and other strategies that would be used to reduce threats of technology theft by threat actors.

(c)FormThe AI Security Playbook under subsection (a) shall include—

(1)

detailed methodologies and intelligence assessments, which may be contained in a classified annex; and

(2)

an unclassified portion with general guidelines and best practices suitable for dissemination to relevant individuals, including in the private sector.

(d)Engagement

(1)In general

In developing the AI Security Playbook under subsection (a), the Director shall—

(A)engage with prominent AI developers and researchers, as determined by the Director, to assess and anticipate the capabilities of highly advanced AI systems relevant to national security, including by—

(i)

conducting a comprehensive review of industry documents pertaining to the security of AI systems with respect to preparedness frameworks, scaling policies, risk management frameworks, and other matters;

(ii)

conducting interviews with subject matter experts;

(iii)

hosting roundtable discussions and expert panels; and

(iv)

visiting facilities used to develop AI; and

(B)to leverage existing expertise and research, collaborate with a federally funded research and development center that has conducted research on strategies to secure AI models from nation-state actors and other highly resourced actors.

(2)Nonapplicability of FACANone of the activities described in this subsection shall be construed to establish or use an advisory committee subject to chapter 10 of title 5, United States Code.

(e)Reports

(1)Initial reportNot later than 90 days after the date of the enactment of this Act, the Director shall submit to the appropriate congressional committees a report on the AI Security Playbook under subsection (a), including a summary of progress on the development of Playbook, an outline of remaining sections, and any relevant insights about AI security.

(2)Final reportNot later than 270 days after the date of enactment of this Act, the Director shall submit to the appropriate congressional committees a report on the Playbook.

(3)Form

The report submitted under paragraph (2)—

(A)shall include—

(i)

an unclassified version suitable for dissemination to relevant individuals, including in the private sector; and

(ii)

a publicly available version; and

(B)

may include a classified annex.

(f)Rule of constructionNothing in subsection (b)(4) shall be construed to authorize or require any regulatory or enforcement action by the United States Government.

(g)Definitions

In this section:

(1)The term appropriate congressional committees means the Permanent Select Committee on Intelligence of the House of Representatives and the Select Committee on Intelligence of the Senate.

(2)

The terms artificial intelligence and AI have the meaning given the term artificial intelligence in section 238(g) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Public Law 115–232; 10 U.S.C. note prec. 4061).

(3)The term covered AI technologies means advanced AI (whether developed by the private sector, the United States Government, or a public-private partnership) with critical capabilities that the Director determines would pose a grave national security threat if acquired or stolen by threat actors, such as AI systems that match or exceed human expert performance in relating to chemical, biological, radiological, and nuclear matters, cyber offense, model autonomy, persuasion, research and development, and self-improvement.

(4)The term technology theft means any unauthorized acquisition, replication, or appropriation of covered AI technologies or components of such technologies, including models, model weights, architectures, or core algorithmic insights, through any means, such as cyber attacks, insider threats, and side-channel attacks, or exploitation of public interfaces.

(5)The term threat actors means nation-state actors and other highly resourced actors capable of technology theft.

HR 3919

Bill overview

Key provisions

Who is affected

Sponsors

Primary sponsor

Cosponsors

Positions across the country

Arguments in favor

Arguments opposed

Bill text

Notable changes

Fiscal impact

Positions across the country