HR 8819
Federal Artificial Intelligence Risk Management Act of 2026
Take action
Record your position on this measure.
Sign in to record your position, submit testimony, or contact your legislator.
Sign in to take action- Introduced
- Passed House
- Passed Senate
- To President
- Became Law
Bill overview
This bill, the Federal Artificial Intelligence Risk Management Act of 2026, requires federal agencies to use the National Institute of Standards and Technology’s (NIST) Artificial Intelligence Risk Management Framework when using or procuring artificial intelligence systems. The bill directs the NIST Director to develop standards and guidelines for managing risks associated with AI, including authentication, provenance tracking, and labeling of synthetic content. It also mandates research, training, and ongoing evaluation of these standards to ensure their effectiveness and promotes the development of testing and evaluation standards for AI acquisitions.
Sponsors
Official sponsors from legislative records.
Primary sponsor
Cosponsors
Donald S. Beyer
Arguments in favor
Reasons to support this legislation.
No arguments in favor have been submitted.
Submit yoursArguments opposed
Reasons to oppose this legislation.
No arguments opposed have been submitted.
Submit yoursRead the latest version inline or switch to a previous version.
119th CONGRESS — 2d Session
H. R. 8819
IN THE HOUSE OF REPRESENTATIVES
A BILL
To require Federal agencies to use the Artificial Intelligence Risk Management Framework developed by the National Institute of Standards and Technology with respect to the use of artificial intelligence.
This Act may be cited as the Federal Artificial Intelligence Risk Management Act of 2026
.
The Director of the National Institute of Standards and Technology, in consultation with the Director of the Office of Management and Budget and the heads of other Federal agencies, as appropriate, shall—
develop Federal standards and guidelines, including minimum requirements, for artificial intelligence systems used or operated by an agency or by a contractor of an agency or other organization on behalf of an agency, other than national security systems (as defined in section 3552(b)(6) of title 44, United States Code);
develop standards and guidelines, including minimum requirements, for managing risks associated with the trustworthiness of artificial intelligence systems for all agency operations and assets, but such standards and guidelines shall not apply to national security systems;
develop standards and guidelines, including minimum requirements, for authenticating, tracking provenance of, and labeling synthetic content generated by an agency or by a contractor of an agency or other organization on behalf of an agency, other than national security systems; and
conduct research and analysis pursuant to section 5301 of this Act to inform the development of standards and guidelines for activities described in this section.
In developing the standards and guidelines required by subsections (a), the Director shall—
provide standards, guidelines, and best practices consistent with the framework established under section 22A(c) of the National Institute of Standards and Technology Act (15 U.S.C. 278h–1(c)), as appropriate, and tools that Federal agencies can use to leverage the framework to reduce risks caused by agency implementation in the development, procurement, and use of artificial intelligence systems;
to the extent practicable, provide standards and guidelines that—
are consistent with the framework, successor document, or Federal standard that is functionally equivalent to the framework;
are consistent with Circular A–119 of the Office of Management and Budget; and
enable conformity assessment;
recommend training on standards and guidelines for each agency responsible for procuring artificial intelligence systems;
identify or develop, and as appropriate periodically revise, performance indicators and measures that support the implementation of standards and guidelines for agency artificial intelligence systems;
provide guidelines for developing profiles for agency use of artificial intelligence systems consistent with the framework;
evaluate policies and practices developed for artificial intelligence systems that are national security systems to assess potential application by agencies to strengthen risk management of artificial intelligence systems; and
periodically assess the effectiveness of standards and guidelines developed under this section and undertake revisions as appropriate.
For standards and guidelines developed pursuant to subsection (a) that are deemed by the Director to be at a readiness level sufficient for widespread adoption by Federal agencies, the Director—
shall submit said Federal standards and guidelines to the Secretary of Commerce for promulgation under section 11331 of title 40, United States Code;
where practicable and appropriate, shall provide technical review and assistance to Federal agencies, including assisting Federal agencies in assessing the effectiveness and sufficiency of implementation of standards and guidelines developed under this section; and
shall evaluate the effectiveness and sufficiency of, and challenges to, Federal agencies implementation of Federal standards and guidelines developed under this section and Federal standards and guidelines promulgated under section 11331 of title 40, United States Code.
Subject to the availability of appropriations, the Director shall conduct a gap analysis to review the existing and forthcoming voluntary technical standards for the testing, evaluation, verification, and validation related to acquisitions of an artificial intelligence system or service.
After the date of the completion of the study required by paragraph (1), the Director shall—
convene relevant stakeholders to facilitate the development of standards for the testing, evaluation, verification, and validation related to acquisitions of an artificial intelligence system or service;
develop and periodically update standards and guidelines for testing, evaluation, verification, and validation related to acquisitions of an artificial intelligence system or service pursuant to subsection (a); and
when determined by the Director to be at a readiness level sufficient for widespread adoption by Federal agencies, submit standards and guidelines to the Secretary of Commerce for promulgation under section 11331 of title 40, United States Code.
Not later than 90 days after the date on which the Director conducts the analysis described in paragraph (1), the Director shall submit a report to the Committee on Science, Space, and Technology of the House of Representatives and the Committee on Commerce, Science, and Transportation of the Senate that includes—
the gap analysis described in paragraph (1); and
a plan for activities described in paragraph (2).
In this section:
The term agency means any department, independent establishment, Government corporation, or other agency of the executive branch of the Federal Government.
The term artificial intelligence system means—
any system that meets the definition given the term artificial intelligence in section 5002 of the William M. (Mac) Thornberry National Defense Authorization Act for Fiscal Year 2021 (15 U.S.C. 9401); or
any data system, software, hardware, application, tool, or utility that operates, in whole or in part, using a system described by subparagraph (A).
The term Director means the Director of the National Institute of Standards and Technology.
The term framework means document number NIST AI 100–1 of the National Institute of Standards and Technology entitled Artificial Intelligence Risk Management Framework
, or any successor document.
The term profile means an implementation of the artificial intelligence risk management functions, categories, and subcategories for a specific setting or application based on the requirements, risk tolerance, and resources of the framework user.
The term synthetic content means information, such as images, videos, audio clips, and text, that has been significantly modified or generated by algorithms, including by artificial intelligence systems.