AI Incident Reporting and Security Enhancement Act
Latest action (25 Sep 2024): Ordered to be Reported by Voice Vote.
What this bill does
H.R. 9720, the AI Incident Reporting and Security Enhancement Act, directs the National Institute of Standards and Technology (NIST) to update its National Vulnerability Database so it appropriately accounts for artificial intelligence security vulnerabilities, working with industry, standards organizations, and relevant federal agencies. It also requires NIST, in consultation with the Cybersecurity and Infrastructure Security Agency, to convene a multi-stakeholder process—including industry, academia, nonprofits, civil society, and government representatives—to develop common definitions, taxonomies, and best practices for voluntarily collecting, reporting, and tracking "substantial" AI security and safety incidents. NIST must report findings and recommendations to Congress within three years. The bill explicitly grants NIST no new enforcement authority.
The bill primarily affects NIST and CISA, which would take on new coordination and reporting responsibilities, and it involves AI developers, security researchers, standards bodies, and other stakeholders who may participate in the voluntary process. Because participation and disclosure remain voluntary, no companies or individuals face new legal mandates or penalties; the bill focuses on building shared definitions, guidance, and infrastructure for tracking AI-related risks.
The bill was introduced September 20, 2024, referred to the House Committee on Science, Space, and Technology, and ordered to be reported by voice vote on September 25, 2024. It did not receive a further vote before the end of the 118th Congress, meaning it did not become law and would need to be reintroduced in a future Congress to advance.
Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.
Official summary
This bill was introduced on September 25, 2024, in a previous session of Congress, but it did not receive a vote.
Timeline
25 Sep 2024
Ordered to be Reported by Voice Vote.
Common questions
- What does H.R. 9720 do?
- H.R. 9720, the AI Incident Reporting and Security Enhancement Act, directs the National Institute of Standards and Technology (NIST) to update its National Vulnerability Database so it appropriately accounts for artificial intelligence security vulnerabilities, working with industry, standards organizations, and relevant federal agencies. It also requires NIST, in consultation with the Cybersecurity and Infrastructure Security Agency, to convene a multi-stakeholder process—including industry, academia, nonprofits, civil society, and government representatives—to develop common definitions, taxonomies, and best practices for voluntarily collecting, reporting, and tracking "substantial" AI security and safety incidents. NIST must report findings and recommendations to Congress within three years. The bill explicitly grants NIST no new enforcement authority. The bill primarily affects NIST and CISA, which would take on new coordination and reporting responsibilities, and it involves AI developers, security researchers, standards bodies, and other stakeholders who may participate in the voluntary process. Because participation and disclosure remain voluntary, no companies or individuals face new legal mandates or penalties; the bill focuses on building shared definitions, guidance, and infrastructure for tracking AI-related risks. The bill was introduced September 20, 2024, referred to the House Committee on Science, Space, and Technology, and ordered to be reported by voice vote on September 25, 2024. It did not receive a further vote before the end of the 118th Congress, meaning it did not become law and would need to be reintroduced in a future Congress to advance.
- Has H.R. 9720 become law?
- Not yet. As of 25 Sep 2024, H.R. 9720 is ordered reported.
- Who sponsored H.R. 9720?
- H.R. 9720 was sponsored by Rep. Deborah Ross [D-NC2] (Democrat-NC), with 0 cosponsors.
- What's the latest action on H.R. 9720?
- Ordered to be Reported by Voice Vote. (25 Sep 2024).
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.