All bills
H.R. 9333·119th Congress·House Bill

AI Flaw Reporting and Security Enhancement Act

Stage not supplied

The source supplies the latest action, but no lifecycle stage.

Latest action (25 Jun 2026): Ordered to be Reported in the Nature of a Substitute by the Yeas and Nays: 35 - 0.

What this bill does

H.R. 9333, the AI Flaw Reporting and Security Enhancement Act, would direct the Director of the National Institute of Standards and Technology (NIST), working with the Cybersecurity and Infrastructure Security Agency, to create a program supporting voluntary reporting, collection, and tracking of artificial intelligence "flaws"—a broad term covering vulnerabilities, failures, incidents, and misuse regardless of intent. NIST would convene industry, academic, nonprofit, standards, and government representatives to develop common definitions, taxonomies, technical standards, severity-ranking methods, detection tools, and disclosure norms. NIST would also build or fund (through eligible universities or research institutions) technical infrastructure, including a national database, for voluntarily reporting and tracking such flaws, considering machine-readability and interoperability with existing systems.

The bill primarily affects NIST, federal agencies coordinating on AI oversight, and the wider community of AI developers, researchers, and standards bodies who might voluntarily report or use this system. It does not impose mandatory reporting requirements but aims to create shared infrastructure and terminology for identifying AI safety and security problems. Within three years of enactment, NIST must report to Congress on the program's implementation, including database details and recommendations for future reporting mechanisms.

The bill was introduced June 18, 2026, and ordered reported by the House Science, Space, and Technology Committee on June 25, 2026, by a 35–0 vote, in the nature of a substitute. It would next need consideration by the full House, then the Senate, before it could become law.

Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.

Official summary

AI Flaw Reporting and Security Enhancement Act

This bill establishes a program to facilitate the voluntary reporting and tracking of artificial intelligence (AI) flaws, to be administered by the National Institute of Standards and Technology (NIST).

In carrying out this program, NIST must seek to convene various stakeholders to establish common definitions for terms related to AI flaws and criteria for the classification of AI flaws (e.g., security-related flaws and safety-related flaws). The group must also support the development of technical standards and guidance related to detecting, managing, and disclosing AI flaws and prioritizing the remediation of such flaws.

Further, NIST must develop, or enter into cooperative agreements with institutions of higher education or research institutions to develop, infrastructure for the voluntary reporting, collection, and tracking of AI flaws. This must include a national database of AI flaws or the modification of an existing national database to account for AI flaws. (NIST currently administers a national database of cybersecurity vulnerabilities.) NIST must consider certain topics when developing this infrastructure, including the interoperability of the infrastructure with relevant existing systems, standards, and best practices.

Within three years of the bill’s enactment, NIST must report to Congress on the implementation of these provisions.

Under the bill, an AI flaw is a set of conditions or behaviors that allow for the violation of certain policies (e.g., safety or security policies) and is not necessarily associated with malicious intent.

Timeline

  1. 25 Jun 2026

    Ordered to be Reported in the Nature of a Substitute by the Yeas and Nays: 35 - 0.

Common questions

What does H.R. 9333 do?
H.R. 9333, the AI Flaw Reporting and Security Enhancement Act, would direct the Director of the National Institute of Standards and Technology (NIST), working with the Cybersecurity and Infrastructure Security Agency, to create a program supporting voluntary reporting, collection, and tracking of artificial intelligence "flaws"—a broad term covering vulnerabilities, failures, incidents, and misuse regardless of intent. NIST would convene industry, academic, nonprofit, standards, and government representatives to develop common definitions, taxonomies, technical standards, severity-ranking methods, detection tools, and disclosure norms. NIST would also build or fund (through eligible universities or research institutions) technical infrastructure, including a national database, for voluntarily reporting and tracking such flaws, considering machine-readability and interoperability with existing systems. The bill primarily affects NIST, federal agencies coordinating on AI oversight, and the wider community of AI developers, researchers, and standards bodies who might voluntarily report or use this system. It does not impose mandatory reporting requirements but aims to create shared infrastructure and terminology for identifying AI safety and security problems. Within three years of enactment, NIST must report to Congress on the program's implementation, including database details and recommendations for future reporting mechanisms. The bill was introduced June 18, 2026, and ordered reported by the House Science, Space, and Technology Committee on June 25, 2026, by a 35–0 vote, in the nature of a substitute. It would next need consideration by the full House, then the Senate, before it could become law.
Has H.R. 9333 become law?
The source does not supply a confirmed lifecycle stage for H.R. 9333. Check the latest action and official source below.
Who sponsored H.R. 9333?
H.R. 9333 was sponsored by Rep. Ross, Deborah K. [D-NC-2] (D-NC), with 2 cosponsors.
What's the latest action on H.R. 9333?
Ordered to be Reported in the Nature of a Substitute by the Yeas and Nays: 35 - 0. (25 Jun 2026).

Related bills in Science, Technology, Communications

More bills from Rep. Ross, Deborah K. [D-NC-2]

Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.